include/functions.php

   1 <?php
   2         define('EXPECTED_CONFIG_VERSION', 26);
   3         define('SCHEMA_VERSION', 115);
   4
   5         define('LABEL_BASE_INDEX', -1024);
   6         define('PLUGIN_FEED_BASE_INDEX', -128);
   7
   8         $fetch_last_error = false;
   9         $fetch_last_error_code = false;
  10         $pluginhost = false;
  11
  12         function __autoload($class) {
  13                 $class_file = str_replace("_", "/", strtolower(basename($class)));
  14
  15                 $file = dirname(__FILE__)."/../classes/$class_file.php";
  16
  17                 if (file_exists($file)) {
  18                         require $file;
  19                 }
  20
  21         }
  22
  23         mb_internal_encoding("UTF-8");
  24         date_default_timezone_set('UTC');
  25         if (defined('E_DEPRECATED')) {
  26                 error_reporting(E_ALL & ~E_NOTICE & ~E_DEPRECATED);
  27         } else {
  28                 error_reporting(E_ALL & ~E_NOTICE);
  29         }
  30
  31         require_once 'config.php';
  32
  33         /**
  34          * Define a constant if not already defined
  35          *
  36          * @param string $name The constant name.
  37          * @param mixed $value The constant value.
  38          * @access public
  39          * @return boolean True if defined successfully or not.
  40          */
  41         function define_default($name, $value) {
  42                 defined($name) or define($name, $value);
  43         }
  44
  45         ///// Some defaults that you can override in config.php //////
  46
  47         define_default('FEED_FETCH_TIMEOUT', 45);
  48         // How may seconds to wait for response when requesting feed from a site
  49         define_default('FEED_FETCH_NO_CACHE_TIMEOUT', 15);
  50         // How may seconds to wait for response when requesting feed from a
  51         // site when that feed wasn't cached before
  52         define_default('FILE_FETCH_TIMEOUT', 45);
  53         // Default timeout when fetching files from remote sites
  54         define_default('FILE_FETCH_CONNECT_TIMEOUT', 15);
  55         // How many seconds to wait for initial response from website when
  56         // fetching files from remote sites
  57
  58         if (DB_TYPE == "pgsql") {
  59                 define('SUBSTRING_FOR_DATE', 'SUBSTRING_FOR_DATE');
  60         } else {
  61                 define('SUBSTRING_FOR_DATE', 'SUBSTRING');
  62         }
  63
  64         /**
  65          * Return available translations names.
  66          *
  67          * @access public
  68          * @return array A array of available translations.
  69          */
  70         function get_translations() {
  71                 $tr = array(
  72                                         "auto"  => "Detect automatically",
  73                                         "ca_CA" => "Català",
  74                                         "cs_CZ" => "Česky",
  75                                         "en_US" => "English",
  76                                         "es_ES" => "Español",
  77                                         "de_DE" => "Deutsch",
  78                                         "fr_FR" => "Français",
  79                                         "hu_HU" => "Magyar (Hungarian)",
  80                                         "it_IT" => "Italiano",
  81                                         "ja_JP" => "日本語 (Japanese)",
  82                                         "lv_LV" => "Latviešu",
  83                                         "nb_NO" => "Norwegian bokmål",
  84                                         "nl_NL" => "Dutch",
  85                                         "pl_PL" => "Polski",
  86                                         "ru_RU" => "Русский",
  87                                         "pt_BR" => "Portuguese/Brazil",
  88                                         "zh_CN" => "Simplified Chinese",
  89                                         "sv_SE" => "Svenska",
  90                                         "fi_FI" => "Suomi");
  91
  92                 return $tr;
  93         }
  94
  95         require_once "lib/accept-to-gettext.php";
  96         require_once "lib/gettext/gettext.inc";
  97
  98
  99         function startup_gettext() {
 100
 101                 # Get locale from Accept-Language header
 102                 $lang = al2gt(array_keys(get_translations()), "text/html");
 103
 104                 if (defined('_TRANSLATION_OVERRIDE_DEFAULT')) {
 105                         $lang = _TRANSLATION_OVERRIDE_DEFAULT;
 106                 }
 107
 108                 if ($_SESSION["language"] && $_SESSION["language"] != "auto") {
 109                         $lang = $_SESSION["language"];
 110                 }
 111
 112                 if ($lang) {
 113                         if (defined('LC_MESSAGES')) {
 114                                 _setlocale(LC_MESSAGES, $lang);
 115                         } else if (defined('LC_ALL')) {
 116                                 _setlocale(LC_ALL, $lang);
 117                         }
 118
 119                         _bindtextdomain("messages", "locale");
 120
 121                         _textdomain("messages");
 122                         _bind_textdomain_codeset("messages", "UTF-8");
 123                 }
 124         }
 125
 126         startup_gettext();
 127
 128         require_once 'db-prefs.php';
 129         require_once 'version.php';
 130         require_once 'ccache.php';
 131         require_once 'labels.php';
 132
 133         define('SELF_USER_AGENT', 'Tiny Tiny RSS/' . VERSION . ' (http://tt-rss.org/)');
 134         ini_set('user_agent', SELF_USER_AGENT);
 135
 136         require_once 'lib/pubsubhubbub/publisher.php';
 137
 138         $tz_offset = -1;
 139         $utc_tz = new DateTimeZone('UTC');
 140         $schema_version = false;
 141
 142         /**
 143          * Print a timestamped debug message.
 144          *
 145          * @param string $msg The debug message.
 146          * @return void
 147          */
 148         function _debug($msg) {
 149                 $ts = strftime("%H:%M:%S", time());
 150                 if (function_exists('posix_getpid')) {
 151                         $ts = "$ts/" . posix_getpid();
 152                 }
 153
 154                 if (!(defined('QUIET') && QUIET)) {
 155                         print "[$ts] $msg\n";
 156                 }
 157
 158                 if (defined('LOGFILE'))  {
 159                         $fp = fopen(LOGFILE, 'a+');
 160
 161                         if ($fp) {
 162                                 fputs($fp, "[$ts] $msg\n");
 163                                 fclose($fp);
 164                         }
 165                 }
 166
 167         } // function _debug
 168
 169         /**
 170          * Purge a feed old posts.
 171          *
 172          * @param mixed $link A database connection.
 173          * @param mixed $feed_id The id of the purged feed.
 174          * @param mixed $purge_interval Olderness of purged posts.
 175          * @param boolean $debug Set to True to enable the debug. False by default.
 176          * @access public
 177          * @return void
 178          */
 179         function purge_feed($link, $feed_id, $purge_interval, $debug = false) {
 180
 181                 if (!$purge_interval) $purge_interval = feed_purge_interval($link, $feed_id);
 182
 183                 $rows = -1;
 184
 185                 $result = db_query($link,
 186                         "SELECT owner_uid FROM ttrss_feeds WHERE id = '$feed_id'");
 187
 188                 $owner_uid = false;
 189
 190                 if (db_num_rows($result) == 1) {
 191                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 192                 }
 193
 194                 if ($purge_interval == -1 || !$purge_interval) {
 195                         if ($owner_uid) {
 196                                 ccache_update($link, $feed_id, $owner_uid);
 197                         }
 198                         return;
 199                 }
 200
 201                 if (!$owner_uid) return;
 202
 203                 if (FORCE_ARTICLE_PURGE == 0) {
 204                         $purge_unread = get_pref($link, "PURGE_UNREAD_ARTICLES",
 205                                 $owner_uid, false);
 206                 } else {
 207                         $purge_unread = true;
 208                         $purge_interval = FORCE_ARTICLE_PURGE;
 209                 }
 210
 211                 if (!$purge_unread) $query_limit = " unread = false AND ";
 212
 213                 if (DB_TYPE == "pgsql") {
 214                         $pg_version = get_pgsql_version($link);
 215
 216                         if (preg_match("/^7\./", $pg_version) || preg_match("/^8\.0/", $pg_version)) {
 217
 218                                 $result = db_query($link, "DELETE FROM ttrss_user_entries WHERE
 219                                         ttrss_entries.id = ref_id AND
 220                                         marked = false AND
 221                                         feed_id = '$feed_id' AND
 222                                         $query_limit
 223                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 224
 225                         } else {
 226
 227                                 $result = db_query($link, "DELETE FROM ttrss_user_entries
 228                                         USING ttrss_entries
 229                                         WHERE ttrss_entries.id = ref_id AND
 230                                         marked = false AND
 231                                         feed_id = '$feed_id' AND
 232                                         $query_limit
 233                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 234                         }
 235
 236                         $rows = pg_affected_rows($result);
 237
 238                 } else {
 239
 240 /*                      $result = db_query($link, "DELETE FROM ttrss_user_entries WHERE
 241                                 marked = false AND feed_id = '$feed_id' AND
 242                                 (SELECT date_updated FROM ttrss_entries WHERE
 243                                         id = ref_id) < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)"); */
 244
 245                         $result = db_query($link, "DELETE FROM ttrss_user_entries
 246                                 USING ttrss_user_entries, ttrss_entries
 247                                 WHERE ttrss_entries.id = ref_id AND
 248                                 marked = false AND
 249                                 feed_id = '$feed_id' AND
 250                                 $query_limit
 251                                 ttrss_entries.date_updated < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)");
 252
 253                         $rows = mysql_affected_rows($link);
 254
 255                 }
 256
 257                 ccache_update($link, $feed_id, $owner_uid);
 258
 259                 if ($debug) {
 260                         _debug("Purged feed $feed_id ($purge_interval): deleted $rows articles");
 261                 }
 262
 263                 return $rows;
 264         } // function purge_feed
 265
 266         function feed_purge_interval($link, $feed_id) {
 267
 268                 $result = db_query($link, "SELECT purge_interval, owner_uid FROM ttrss_feeds
 269                         WHERE id = '$feed_id'");
 270
 271                 if (db_num_rows($result) == 1) {
 272                         $purge_interval = db_fetch_result($result, 0, "purge_interval");
 273                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 274
 275                         if ($purge_interval == 0) $purge_interval = get_pref($link,
 276                                 'PURGE_OLD_DAYS', $owner_uid);
 277
 278                         return $purge_interval;
 279
 280                 } else {
 281                         return -1;
 282                 }
 283         }
 284
 285         function purge_orphans($link, $do_output = false) {
 286
 287                 // purge orphaned posts in main content table
 288                 $result = db_query($link, "DELETE FROM ttrss_entries WHERE
 289                         (SELECT COUNT(int_id) FROM ttrss_user_entries WHERE ref_id = id) = 0");
 290
 291                 if ($do_output) {
 292                         $rows = db_affected_rows($link, $result);
 293                         _debug("Purged $rows orphaned posts.");
 294                 }
 295         }
 296
 297         function get_feed_update_interval($link, $feed_id) {
 298                 $result = db_query($link, "SELECT owner_uid, update_interval FROM
 299                         ttrss_feeds WHERE id = '$feed_id'");
 300
 301                 if (db_num_rows($result) == 1) {
 302                         $update_interval = db_fetch_result($result, 0, "update_interval");
 303                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 304
 305                         if ($update_interval != 0) {
 306                                 return $update_interval;
 307                         } else {
 308                                 return get_pref($link, 'DEFAULT_UPDATE_INTERVAL', $owner_uid, false);
 309                         }
 310
 311                 } else {
 312                         return -1;
 313                 }
 314         }
 315
 316         function fetch_file_contents($url, $type = false, $login = false, $pass = false, $post_query = false, $timeout = false, $timestamp = 0) {
 317
 318                 global $fetch_last_error;
 319                 global $fetch_last_error_code;
 320
 321                 if (!defined('NO_CURL') && function_exists('curl_init') && !ini_get("open_basedir")) {
 322
 323                         if (ini_get("safe_mode")) {
 324                                 $ch = curl_init(geturl($url));
 325                         } else {
 326                                 $ch = curl_init($url);
 327                         }
 328
 329                         if ($timestamp) {
 330                                 curl_setopt($ch, CURLOPT_HTTPHEADER,
 331                                         array("If-Modified-Since: ".gmdate('D, d M Y H:i:s \G\M\T', $timestamp)));
 332                         }
 333
 334                         curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, $timeout ? $timeout : FILE_FETCH_CONNECT_TIMEOUT);
 335                         curl_setopt($ch, CURLOPT_TIMEOUT, $timeout ? $timeout : FILE_FETCH_TIMEOUT);
 336                         curl_setopt($ch, CURLOPT_FOLLOWLOCATION, !ini_get("safe_mode"));
 337                         curl_setopt($ch, CURLOPT_MAXREDIRS, 20);
 338                         curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
 339                         curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
 340                         curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
 341                         curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_ANY);
 342                         curl_setopt($ch, CURLOPT_USERAGENT, SELF_USER_AGENT);
 343                         curl_setopt($ch, CURLOPT_ENCODING , "gzip");
 344                         curl_setopt($ch, CURLOPT_REFERER, $url);
 345
 346                         if ($post_query) {
 347                                 curl_setopt($ch, CURLOPT_POST, true);
 348                                 curl_setopt($ch, CURLOPT_POSTFIELDS, $post_query);
 349                         }
 350
 351                         if ($login && $pass)
 352                                 curl_setopt($ch, CURLOPT_USERPWD, "$login:$pass");
 353
 354                         $contents = @curl_exec($ch);
 355
 356                         if (curl_errno($ch) === 23 || curl_errno($ch) === 61) {
 357                                 curl_setopt($ch, CURLOPT_ENCODING, 'none');
 358                                 $contents = @curl_exec($ch);
 359                         }
 360
 361                         if ($contents === false) {
 362                                 $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
 363                                 curl_close($ch);
 364                                 return false;
 365                         }
 366
 367                         $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
 368                         $content_type = curl_getinfo($ch, CURLINFO_CONTENT_TYPE);
 369
 370                         $fetch_last_error_code = $http_code;
 371
 372                         if ($http_code != 200 || $type && strpos($content_type, "$type") === false) {
 373                                 if (curl_errno($ch) != 0) {
 374                                         $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
 375                                 } else {
 376                                         $fetch_last_error = "HTTP Code: $http_code";
 377                                 }
 378                                 curl_close($ch);
 379                                 return false;
 380                         }
 381
 382                         curl_close($ch);
 383
 384                         return $contents;
 385                 } else {
 386                         if ($login && $pass){
 387                                 $url_parts = array();
 388
 389                                 preg_match("/(^[^:]*):\/\/(.*)/", $url, $url_parts);
 390
 391                                 $pass = urlencode($pass);
 392
 393                                 if ($url_parts[1] && $url_parts[2]) {
 394                                         $url = $url_parts[1] . "://$login:$pass@" . $url_parts[2];
 395                                 }
 396                         }
 397
 398                         $data = @file_get_contents($url);
 399
 400                         if (!$data && function_exists('error_get_last')) {
 401                                 $error = error_get_last();
 402                                 $fetch_last_error = $error["message"];
 403                         }
 404                         return $data;
 405                 }
 406
 407         }
 408
 409         /**
 410          * Try to determine the favicon URL for a feed.
 411          * adapted from wordpress favicon plugin by Jeff Minard (http://thecodepro.com/)
 412          * http://dev.wp-plugins.org/file/favatars/trunk/favatars.php
 413          *
 414          * @param string $url A feed or page URL
 415          * @access public
 416          * @return mixed The favicon URL, or false if none was found.
 417          */
 418         function get_favicon_url($url) {
 419
 420                 $favicon_url = false;
 421
 422                 if ($html = @fetch_file_contents($url)) {
 423
 424                         libxml_use_internal_errors(true);
 425
 426                         $doc = new DOMDocument();
 427                         $doc->loadHTML($html);
 428                         $xpath = new DOMXPath($doc);
 429
 430                         $base = $xpath->query('/html/head/base');
 431                         foreach ($base as $b) {
 432                                 $url = $b->getAttribute("href");
 433                                 break;
 434                         }
 435
 436                         $entries = $xpath->query('/html/head/link[@rel="shortcut icon" or @rel="icon"]');
 437                         if (count($entries) > 0) {
 438                                 foreach ($entries as $entry) {
 439                                         $favicon_url = rewrite_relative_url($url, $entry->getAttribute("href"));
 440                                         break;
 441                                 }
 442                         }
 443                 }
 444
 445                 if (!$favicon_url)
 446                         $favicon_url = rewrite_relative_url($url, "/favicon.ico");
 447
 448                 return $favicon_url;
 449         } // function get_favicon_url
 450
 451         function check_feed_favicon($site_url, $feed, $link) {
 452 #               print "FAVICON [$site_url]: $favicon_url\n";
 453
 454                 $icon_file = ICONS_DIR . "/$feed.ico";
 455
 456                 if (!file_exists($icon_file)) {
 457                         $favicon_url = get_favicon_url($site_url);
 458
 459                         if ($favicon_url) {
 460                                 // Limiting to "image" type misses those served with text/plain
 461                                 $contents = fetch_file_contents($favicon_url); // , "image");
 462
 463                                 if ($contents) {
 464                                         // Crude image type matching.
 465                                         // Patterns gleaned from the file(1) source code.
 466                                         if (preg_match('/^\x00\x00\x01\x00/', $contents)) {
 467                                                 // 0       string  \000\000\001\000        MS Windows icon resource
 468                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa MS Windows icon resource");
 469                                         }
 470                                         elseif (preg_match('/^GIF8/', $contents)) {
 471                                                 // 0       string          GIF8            GIF image data
 472                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa GIF image");
 473                                         }
 474                                         elseif (preg_match('/^\x89PNG\x0d\x0a\x1a\x0a/', $contents)) {
 475                                                 // 0       string          \x89PNG\x0d\x0a\x1a\x0a         PNG image data
 476                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa PNG image");
 477                                         }
 478                                         elseif (preg_match('/^\xff\xd8/', $contents)) {
 479                                                 // 0       beshort         0xffd8          JPEG image data
 480                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa JPG image");
 481                                         }
 482                                         else {
 483                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa UNKNOWN type");
 484                                                 $contents = "";
 485                                         }
 486                                 }
 487
 488                                 if ($contents) {
 489                                         $fp = @fopen($icon_file, "w");
 490
 491                                         if ($fp) {
 492                                                 fwrite($fp, $contents);
 493                                                 fclose($fp);
 494                                                 chmod($icon_file, 0644);
 495                                         }
 496                                 }
 497                         }
 498                 }
 499         }
 500
 501         function print_select($id, $default, $values, $attributes = "") {
 502                 print "<select name=\"$id\" id=\"$id\" $attributes>";
 503                 foreach ($values as $v) {
 504                         if ($v == $default)
 505                                 $sel = "selected=\"1\"";
 506                          else
 507                                 $sel = "";
 508
 509                         $v = trim($v);
 510
 511                         print "<option value=\"$v\" $sel>$v</option>";
 512                 }
 513                 print "</select>";
 514         }
 515
 516         function print_select_hash($id, $default, $values, $attributes = "") {
 517                 print "<select name=\"$id\" id='$id' $attributes>";
 518                 foreach (array_keys($values) as $v) {
 519                         if ($v == $default)
 520                                 $sel = 'selected="selected"';
 521                          else
 522                                 $sel = "";
 523
 524                         $v = trim($v);
 525
 526                         print "<option $sel value=\"$v\">".$values[$v]."</option>";
 527                 }
 528
 529                 print "</select>";
 530         }
 531
 532         function print_radio($id, $default, $true_is, $values, $attributes = "") {
 533                 foreach ($values as $v) {
 534
 535                         if ($v == $default)
 536                                 $sel = "checked";
 537                          else
 538                                 $sel = "";
 539
 540                         if ($v == $true_is) {
 541                                 $sel .= " value=\"1\"";
 542                         } else {
 543                                 $sel .= " value=\"0\"";
 544                         }
 545
 546                         print "<input class=\"noborder\" dojoType=\"dijit.form.RadioButton\"
 547                                 type=\"radio\" $sel $attributes name=\"$id\">&nbsp;$v&nbsp;";
 548
 549                 }
 550         }
 551
 552         function initialize_user_prefs($link, $uid, $profile = false) {
 553
 554                 $uid = db_escape_string($link, $uid);
 555
 556                 if (!$profile) {
 557                         $profile = "NULL";
 558                         $profile_qpart = "AND profile IS NULL";
 559                 } else {
 560                         $profile_qpart = "AND profile = '$profile'";
 561                 }
 562
 563                 if (get_schema_version($link) < 63) $profile_qpart = "";
 564
 565                 db_query($link, "BEGIN");
 566
 567                 $result = db_query($link, "SELECT pref_name,def_value FROM ttrss_prefs");
 568
 569                 $u_result = db_query($link, "SELECT pref_name
 570                         FROM ttrss_user_prefs WHERE owner_uid = '$uid' $profile_qpart");
 571
 572                 $active_prefs = array();
 573
 574                 while ($line = db_fetch_assoc($u_result)) {
 575                         array_push($active_prefs, $line["pref_name"]);
 576                 }
 577
 578                 while ($line = db_fetch_assoc($result)) {
 579                         if (array_search($line["pref_name"], $active_prefs) === FALSE) {
 580 //                              print "adding " . $line["pref_name"] . "<br>";
 581
 582                                 $line["def_value"] = db_escape_string($link, $line["def_value"]);
 583                                 $line["pref_name"] = db_escape_string($link, $line["pref_name"]);
 584
 585                                 if (get_schema_version($link) < 63) {
 586                                         db_query($link, "INSERT INTO ttrss_user_prefs
 587                                                 (owner_uid,pref_name,value) VALUES
 588                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."')");
 589
 590                                 } else {
 591                                         db_query($link, "INSERT INTO ttrss_user_prefs
 592                                                 (owner_uid,pref_name,value, profile) VALUES
 593                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."', $profile)");
 594                                 }
 595
 596                         }
 597                 }
 598
 599                 db_query($link, "COMMIT");
 600
 601         }
 602
 603         function get_ssl_certificate_id() {
 604                 if ($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"]) {
 605                         return sha1($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"] .
 606                                 $_SERVER["REDIRECT_SSL_CLIENT_V_START"] .
 607                                 $_SERVER["REDIRECT_SSL_CLIENT_V_END"] .
 608                                 $_SERVER["REDIRECT_SSL_CLIENT_S_DN"]);
 609                 }
 610                 return "";
 611         }
 612
 613         function authenticate_user($link, $login, $password, $check_only = false) {
 614
 615                 if (!SINGLE_USER_MODE) {
 616                         $user_id = false;
 617
 618                         global $pluginhost;
 619                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_AUTH_USER) as $plugin) {
 620
 621                                 $user_id = (int) $plugin->authenticate($login, $password);
 622
 623                                 if ($user_id) {
 624                                         $_SESSION["auth_module"] = strtolower(get_class($plugin));
 625                                         break;
 626                                 }
 627                         }
 628
 629                         if ($user_id && !$check_only) {
 630                                 @session_start();
 631
 632                                 $_SESSION["uid"] = $user_id;
 633                                 $_SESSION["version"] = VERSION;
 634
 635                                 $result = db_query($link, "SELECT login,access_level,pwd_hash FROM ttrss_users
 636                                         WHERE id = '$user_id'");
 637
 638                                 $_SESSION["name"] = db_fetch_result($result, 0, "login");
 639                                 $_SESSION["access_level"] = db_fetch_result($result, 0, "access_level");
 640                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 641
 642                                 db_query($link, "UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 643                                         $_SESSION["uid"]);
 644
 645                                 $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 646                                 $_SESSION["user_agent"] = sha1($_SERVER['HTTP_USER_AGENT']);
 647                                 $_SESSION["pwd_hash"] = db_fetch_result($result, 0, "pwd_hash");
 648
 649                                 $_SESSION["last_version_check"] = time();
 650
 651                                 initialize_user_prefs($link, $_SESSION["uid"]);
 652
 653                                 return true;
 654                         }
 655
 656                         return false;
 657
 658                 } else {
 659
 660                         $_SESSION["uid"] = 1;
 661                         $_SESSION["name"] = "admin";
 662                         $_SESSION["access_level"] = 10;
 663
 664                         $_SESSION["hide_hello"] = true;
 665                         $_SESSION["hide_logout"] = true;
 666
 667                         $_SESSION["auth_module"] = false;
 668
 669                         if (!$_SESSION["csrf_token"]) {
 670                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 671                         }
 672
 673                         $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 674
 675                         initialize_user_prefs($link, $_SESSION["uid"]);
 676
 677                         return true;
 678                 }
 679         }
 680
 681         function make_password($length = 8) {
 682
 683                 $password = "";
 684                 $possible = "0123456789abcdfghjkmnpqrstvwxyzABCDFGHJKMNPQRSTVWXYZ";
 685
 686         $i = 0;
 687
 688                 while ($i < $length) {
 689                         $char = substr($possible, mt_rand(0, strlen($possible)-1), 1);
 690
 691                         if (!strstr($password, $char)) {
 692                                 $password .= $char;
 693                                 $i++;
 694                         }
 695                 }
 696                 return $password;
 697         }
 698
 699         // this is called after user is created to initialize default feeds, labels
 700         // or whatever else
 701
 702         // user preferences are checked on every login, not here
 703
 704         function initialize_user($link, $uid) {
 705
 706                 db_query($link, "insert into ttrss_feeds (owner_uid,title,feed_url)
 707                         values ('$uid', 'Tiny Tiny RSS: New Releases',
 708                         'http://tt-rss.org/releases.rss')");
 709
 710                 db_query($link, "insert into ttrss_feeds (owner_uid,title,feed_url)
 711                         values ('$uid', 'Tiny Tiny RSS: Forum',
 712                                 'http://tt-rss.org/forum/rss.php')");
 713         }
 714
 715         function logout_user() {
 716                 session_destroy();
 717                 if (isset($_COOKIE[session_name()])) {
 718                    setcookie(session_name(), '', time()-42000, '/');
 719                 }
 720         }
 721
 722         function validate_csrf($csrf_token) {
 723                 return $csrf_token == $_SESSION['csrf_token'];
 724         }
 725
 726         function load_user_plugins($link, $owner_uid) {
 727                 if ($owner_uid) {
 728                         $plugins = get_pref($link, "_ENABLED_PLUGINS", $owner_uid);
 729
 730                         global $pluginhost;
 731                         $pluginhost->load($plugins, $pluginhost::KIND_USER, $owner_uid);
 732
 733                         if (get_schema_version($link) > 100) {
 734                                 $pluginhost->load_data();
 735                         }
 736                 }
 737         }
 738
 739         function login_sequence($link) {
 740                 $_SESSION["prefs_cache"] = false;
 741
 742                 if (SINGLE_USER_MODE) {
 743                         @session_start();
 744                         authenticate_user($link, "admin", null);
 745                         cache_prefs($link);
 746                         load_user_plugins($link, $_SESSION["uid"]);
 747                 } else {
 748                         if (!validate_session($link)) $_SESSION["uid"] = false;
 749
 750                         if (!$_SESSION["uid"]) {
 751
 752                                 if (AUTH_AUTO_LOGIN && authenticate_user($link, null, null)) {
 753                                     $_SESSION["ref_schema_version"] = get_schema_version($link, true);
 754                                 } else {
 755                                          authenticate_user($link, null, null, true);
 756                                 }
 757
 758                                 if (!$_SESSION["uid"]) {
 759                                         @session_destroy();
 760                                         setcookie(session_name(), '', time()-42000, '/');
 761
 762                                         render_login_form($link);
 763                                         exit;
 764                                 }
 765
 766                         } else {
 767                                 /* bump login timestamp */
 768                                 db_query($link, "UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 769                                         $_SESSION["uid"]);
 770                                 $_SESSION["last_login_update"] = time();
 771                         }
 772
 773                         if ($_SESSION["uid"] && $_SESSION["language"] && SESSION_COOKIE_LIFETIME > 0) {
 774                                 setcookie("ttrss_lang", $_SESSION["language"],
 775                                         time() + SESSION_COOKIE_LIFETIME);
 776                         }
 777
 778                         if ($_SESSION["uid"]) {
 779                                 cache_prefs($link);
 780                                 load_user_plugins($link, $_SESSION["uid"]);
 781
 782                                 /* cleanup ccache */
 783
 784                                 db_query($link, "DELETE FROM ttrss_counters_cache WHERE owner_uid = ".
 785                                         $_SESSION["uid"] . " AND
 786                                                 (SELECT COUNT(id) FROM ttrss_feeds WHERE
 787                                                         ttrss_feeds.id = feed_id) = 0");
 788
 789                                 db_query($link, "DELETE FROM ttrss_cat_counters_cache WHERE owner_uid = ".
 790                                         $_SESSION["uid"] . " AND
 791                                                 (SELECT COUNT(id) FROM ttrss_feed_categories WHERE
 792                                                         ttrss_feed_categories.id = feed_id) = 0");
 793
 794                         }
 795
 796                 }
 797         }
 798
 799         function truncate_string($str, $max_len, $suffix = '&hellip;') {
 800                 if (mb_strlen($str, "utf-8") > $max_len - 3) {
 801                         return mb_substr($str, 0, $max_len, "utf-8") . $suffix;
 802                 } else {
 803                         return $str;
 804                 }
 805         }
 806
 807         function convert_timestamp($timestamp, $source_tz, $dest_tz) {
 808
 809                 try {
 810                         $source_tz = new DateTimeZone($source_tz);
 811                 } catch (Exception $e) {
 812                         $source_tz = new DateTimeZone('UTC');
 813                 }
 814
 815                 try {
 816                         $dest_tz = new DateTimeZone($dest_tz);
 817                 } catch (Exception $e) {
 818                         $dest_tz = new DateTimeZone('UTC');
 819                 }
 820
 821                 $dt = new DateTime(date('Y-m-d H:i:s', $timestamp), $source_tz);
 822                 return $dt->format('U') + $dest_tz->getOffset($dt);
 823         }
 824
 825         function make_local_datetime($link, $timestamp, $long, $owner_uid = false,
 826                                         $no_smart_dt = false) {
 827
 828                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 829                 if (!$timestamp) $timestamp = '1970-01-01 0:00';
 830
 831                 global $utc_tz;
 832                 global $tz_offset;
 833
 834                 # We store date in UTC internally
 835                 $dt = new DateTime($timestamp, $utc_tz);
 836
 837                 if ($tz_offset == -1) {
 838
 839                         $user_tz_string = get_pref($link, 'USER_TIMEZONE', $owner_uid);
 840
 841                         try {
 842                                 $user_tz = new DateTimeZone($user_tz_string);
 843                         } catch (Exception $e) {
 844                                 $user_tz = $utc_tz;
 845                         }
 846
 847                         $tz_offset = $user_tz->getOffset($dt);
 848                 }
 849
 850                 $user_timestamp = $dt->format('U') + $tz_offset;
 851
 852                 if (!$no_smart_dt) {
 853                         return smart_date_time($link, $user_timestamp,
 854                                 $tz_offset, $owner_uid);
 855                 } else {
 856                         if ($long)
 857                                 $format = get_pref($link, 'LONG_DATE_FORMAT', $owner_uid);
 858                         else
 859                                 $format = get_pref($link, 'SHORT_DATE_FORMAT', $owner_uid);
 860
 861                         return date($format, $user_timestamp);
 862                 }
 863         }
 864
 865         function smart_date_time($link, $timestamp, $tz_offset = 0, $owner_uid = false) {
 866                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 867
 868                 if (date("Y.m.d", $timestamp) == date("Y.m.d", time() + $tz_offset)) {
 869                         return date("G:i", $timestamp);
 870                 } else if (date("Y", $timestamp) == date("Y", time() + $tz_offset)) {
 871                         $format = get_pref($link, 'SHORT_DATE_FORMAT', $owner_uid);
 872                         return date($format, $timestamp);
 873                 } else {
 874                         $format = get_pref($link, 'LONG_DATE_FORMAT', $owner_uid);
 875                         return date($format, $timestamp);
 876                 }
 877         }
 878
 879         function sql_bool_to_bool($s) {
 880                 if ($s == "t" || $s == "1" || strtolower($s) == "true") {
 881                         return true;
 882                 } else {
 883                         return false;
 884                 }
 885         }
 886
 887         function bool_to_sql_bool($s) {
 888                 if ($s) {
 889                         return "true";
 890                 } else {
 891                         return "false";
 892                 }
 893         }
 894
 895         // Session caching removed due to causing wrong redirects to upgrade
 896         // script when get_schema_version() is called on an obsolete session
 897         // created on a previous schema version.
 898         function get_schema_version($link, $nocache = false) {
 899                 global $schema_version;
 900
 901                 if (!$schema_version) {
 902                         $result = db_query($link, "SELECT schema_version FROM ttrss_version");
 903                         $version = db_fetch_result($result, 0, "schema_version");
 904                         $schema_version = $version;
 905                         return $version;
 906                 } else {
 907                         return $schema_version;
 908                 }
 909         }
 910
 911         function sanity_check($link) {
 912                 require_once 'errors.php';
 913
 914                 $error_code = 0;
 915                 $schema_version = get_schema_version($link, true);
 916
 917                 if ($schema_version != SCHEMA_VERSION) {
 918                         $error_code = 5;
 919                 }
 920
 921                 if (DB_TYPE == "mysql") {
 922                         $result = db_query($link, "SELECT true", false);
 923                         if (db_num_rows($result) != 1) {
 924                                 $error_code = 10;
 925                         }
 926                 }
 927
 928                 if (db_escape_string($link, "testTEST") != "testTEST") {
 929                         $error_code = 12;
 930                 }
 931
 932                 return array("code" => $error_code, "message" => $ERRORS[$error_code]);
 933         }
 934
 935         function file_is_locked($filename) {
 936                 if (function_exists('flock')) {
 937                         $fp = @fopen(LOCK_DIRECTORY . "/$filename", "r");
 938                         if ($fp) {
 939                                 if (flock($fp, LOCK_EX | LOCK_NB)) {
 940                                         flock($fp, LOCK_UN);
 941                                         fclose($fp);
 942                                         return false;
 943                                 }
 944                                 fclose($fp);
 945                                 return true;
 946                         } else {
 947                                 return false;
 948                         }
 949                 }
 950                 return true; // consider the file always locked and skip the test
 951         }
 952
 953         function make_lockfile($filename) {
 954                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
 955
 956                 if ($fp && flock($fp, LOCK_EX | LOCK_NB)) {
 957                         if (function_exists('posix_getpid')) {
 958                                 fwrite($fp, posix_getpid() . "\n");
 959                         }
 960                         return $fp;
 961                 } else {
 962                         return false;
 963                 }
 964         }
 965
 966         function make_stampfile($filename) {
 967                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
 968
 969                 if (flock($fp, LOCK_EX | LOCK_NB)) {
 970                         fwrite($fp, time() . "\n");
 971                         flock($fp, LOCK_UN);
 972                         fclose($fp);
 973                         return true;
 974                 } else {
 975                         return false;
 976                 }
 977         }
 978
 979         function sql_random_function() {
 980                 if (DB_TYPE == "mysql") {
 981                         return "RAND()";
 982                 } else {
 983                         return "RANDOM()";
 984                 }
 985         }
 986
 987         function catchup_feed($link, $feed, $cat_view, $owner_uid = false, $max_id = false, $mode = 'all') {
 988
 989                         if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 990
 991                         //if (preg_match("/^-?[0-9][0-9]*$/", $feed) != false) {
 992
 993                         // Todo: all this interval stuff needs some generic generator function
 994
 995                         $date_qpart = "false";
 996
 997                         switch ($mode) {
 998                         case "1day":
 999                                 if (DB_TYPE == "pgsql") {
1000                                         $date_qpart = "date_entered < NOW() - INTERVAL '1 day' ";
1001                                 } else {
1002                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 1 DAY) ";
1003                                 }
1004                                 break;
1005                         case "1week":
1006                                 if (DB_TYPE == "pgsql") {
1007                                         $date_qpart = "date_entered < NOW() - INTERVAL '1 week' ";
1008                                 } else {
1009                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 1 WEEK) ";
1010                                 }
1011                                 break;
1012                         case "2weeks":
1013                                 if (DB_TYPE == "pgsql") {
1014                                         $date_qpart = "date_entered < NOW() - INTERVAL '2 week' ";
1015                                 } else {
1016                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 2 WEEK) ";
1017                                 }
1018                                 break;
1019                         default:
1020                                 $date_qpart = "true";
1021                         }
1022
1023                         if (is_numeric($feed)) {
1024                                 if ($cat_view) {
1025
1026                                         if ($feed >= 0) {
1027
1028                                                 if ($feed > 0) {
1029                                                         $children = getChildCategories($link, $feed, $owner_uid);
1030                                                         array_push($children, $feed);
1031
1032                                                         $children = join(",", $children);
1033
1034                                                         $cat_qpart = "cat_id IN ($children)";
1035                                                 } else {
1036                                                         $cat_qpart = "cat_id IS NULL";
1037                                                 }
1038
1039                                                 db_query($link, "UPDATE ttrss_user_entries
1040                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1041                                                                 (SELECT id FROM
1042                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1043                                                                                 AND owner_uid = $owner_uid AND unread = true AND feed_id IN
1044                                                                                         (SELECT id FROM ttrss_feeds WHERE $cat_qpart) AND $date_qpart) as tmp)");
1045
1046                                         } else if ($feed == -2) {
1047
1048                                                 db_query($link, "UPDATE ttrss_user_entries
1049                                                         SET unread = false,last_read = NOW() WHERE (SELECT COUNT(*)
1050                                                                 FROM ttrss_user_labels2 WHERE article_id = ref_id) > 0
1051                                                                 AND unread = true AND $date_qpart AND owner_uid = $owner_uid");
1052                                         }
1053
1054                                 } else if ($feed > 0) {
1055
1056                                         db_query($link, "UPDATE ttrss_user_entries
1057                                                 SET unread = false, last_read = NOW() WHERE ref_id IN
1058                                                         (SELECT id FROM
1059                                                                 (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1060                                                                         AND owner_uid = $owner_uid AND unread = true AND feed_id = $feed AND $date_qpart) as tmp)");
1061
1062                                 } else if ($feed < 0 && $feed > LABEL_BASE_INDEX) { // special, like starred
1063
1064                                         if ($feed == -1) {
1065                                                 db_query($link, "UPDATE ttrss_user_entries
1066                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1067                                                                 (SELECT id FROM
1068                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1069                                                                                 AND owner_uid = $owner_uid AND unread = true AND marked = true AND $date_qpart) as tmp)");
1070                                         }
1071
1072                                         if ($feed == -2) {
1073                                                 db_query($link, "UPDATE ttrss_user_entries
1074                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1075                                                                 (SELECT id FROM
1076                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1077                                                                                 AND owner_uid = $owner_uid AND unread = true AND published = true AND $date_qpart) as tmp)");
1078                                         }
1079
1080                                         if ($feed == -3) {
1081
1082                                                 $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE");
1083
1084                                                 if (DB_TYPE == "pgsql") {
1085                                                         $match_part = "date_entered > NOW() - INTERVAL '$intl hour' ";
1086                                                 } else {
1087                                                         $match_part = "date_entered > DATE_SUB(NOW(),
1088                                                                 INTERVAL $intl HOUR) ";
1089                                                 }
1090
1091                                                 db_query($link, "UPDATE ttrss_user_entries
1092                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1093                                                                 (SELECT id FROM
1094                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1095                                                                                 AND owner_uid = $owner_uid AND unread = true AND $date_qpart AND $match_part) as tmp)");
1096                                         }
1097
1098                                         if ($feed == -4) {
1099                                                 db_query($link, "UPDATE ttrss_user_entries
1100                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1101                                                                 (SELECT id FROM
1102                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1103                                                                                 AND owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1104                                         }
1105
1106                                 } else if ($feed < LABEL_BASE_INDEX) { // label
1107
1108                                         $label_id = feed_to_label_id($feed);
1109
1110                                         db_query($link, "UPDATE ttrss_user_entries
1111                                                 SET unread = false, last_read = NOW() WHERE ref_id IN
1112                                                         (SELECT id FROM
1113                                                                 (SELECT ttrss_entries.id FROM ttrss_entries, ttrss_user_entries, ttrss_user_labels2 WHERE ref_id = id
1114                                                                         AND label_id = '$label_id' AND ref_id = article_id
1115                                                                         AND owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1116
1117                                 }
1118
1119                                 ccache_update($link, $feed, $owner_uid, $cat_view);
1120
1121                         } else { // tag
1122                                 db_query($link, "UPDATE ttrss_user_entries
1123                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1124                                                 (SELECT id FROM
1125                                                         (SELECT ttrss_entries.id FROM ttrss_entries, ttrss_user_entries, ttrss_tags WHERE ref_id = ttrss_entries.id
1126                                                                 AND post_int_id = int_id AND tag_name = '$feed'
1127                                                                 AND ttrss_user_entries.owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1128
1129                         }
1130         }
1131
1132         function getAllCounters($link) {
1133                 $data = getGlobalCounters($link);
1134
1135                 $data = array_merge($data, getVirtCounters($link));
1136                 $data = array_merge($data, getLabelCounters($link));
1137                 $data = array_merge($data, getFeedCounters($link, $active_feed));
1138                 $data = array_merge($data, getCategoryCounters($link));
1139
1140                 return $data;
1141         }
1142
1143         function getCategoryTitle($link, $cat_id) {
1144
1145                 if ($cat_id == -1) {
1146                         return __("Special");
1147                 } else if ($cat_id == -2) {
1148                         return __("Labels");
1149                 } else {
1150
1151                         $result = db_query($link, "SELECT title FROM ttrss_feed_categories WHERE
1152                                 id = '$cat_id'");
1153
1154                         if (db_num_rows($result) == 1) {
1155                                 return db_fetch_result($result, 0, "title");
1156                         } else {
1157                                 return __("Uncategorized");
1158                         }
1159                 }
1160         }
1161
1162
1163         function getCategoryCounters($link) {
1164                 $ret_arr = array();
1165
1166                 /* Labels category */
1167
1168                 $cv = array("id" => -2, "kind" => "cat",
1169                         "counter" => getCategoryUnread($link, -2));
1170
1171                 array_push($ret_arr, $cv);
1172
1173                 $result = db_query($link, "SELECT id AS cat_id, value AS unread,
1174                         (SELECT COUNT(id) FROM ttrss_feed_categories AS c2
1175                                 WHERE c2.parent_cat = ttrss_feed_categories.id) AS num_children
1176                         FROM ttrss_feed_categories, ttrss_cat_counters_cache
1177                         WHERE ttrss_cat_counters_cache.feed_id = id AND
1178                         ttrss_cat_counters_cache.owner_uid = ttrss_feed_categories.owner_uid AND
1179                         ttrss_feed_categories.owner_uid = " . $_SESSION["uid"]);
1180
1181                 while ($line = db_fetch_assoc($result)) {
1182                         $line["cat_id"] = (int) $line["cat_id"];
1183
1184                         if ($line["num_children"] > 0) {
1185                                 $child_counter = getCategoryChildrenUnread($link, $line["cat_id"], $_SESSION["uid"]);
1186                         } else {
1187                                 $child_counter = 0;
1188                         }
1189
1190                         $cv = array("id" => $line["cat_id"], "kind" => "cat",
1191                                 "counter" => $line["unread"] + $child_counter);
1192
1193                         array_push($ret_arr, $cv);
1194                 }
1195
1196                 /* Special case: NULL category doesn't actually exist in the DB */
1197
1198                 $cv = array("id" => 0, "kind" => "cat",
1199                         "counter" => (int) ccache_find($link, 0, $_SESSION["uid"], true));
1200
1201                 array_push($ret_arr, $cv);
1202
1203                 return $ret_arr;
1204         }
1205
1206         // only accepts real cats (>= 0)
1207         function getCategoryChildrenUnread($link, $cat, $owner_uid = false) {
1208                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1209
1210                 $result = db_query($link, "SELECT id FROM ttrss_feed_categories WHERE parent_cat = '$cat'
1211                                 AND owner_uid = $owner_uid");
1212
1213                 $unread = 0;
1214
1215                 while ($line = db_fetch_assoc($result)) {
1216                         $unread += getCategoryUnread($link, $line["id"], $owner_uid);
1217                         $unread += getCategoryChildrenUnread($link, $line["id"], $owner_uid);
1218                 }
1219
1220                 return $unread;
1221         }
1222
1223         function getCategoryUnread($link, $cat, $owner_uid = false) {
1224
1225                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1226
1227                 if ($cat >= 0) {
1228
1229                         if ($cat != 0) {
1230                                 $cat_query = "cat_id = '$cat'";
1231                         } else {
1232                                 $cat_query = "cat_id IS NULL";
1233                         }
1234
1235                         $result = db_query($link, "SELECT id FROM ttrss_feeds WHERE $cat_query
1236                                         AND owner_uid = " . $owner_uid);
1237
1238                         $cat_feeds = array();
1239                         while ($line = db_fetch_assoc($result)) {
1240                                 array_push($cat_feeds, "feed_id = " . $line["id"]);
1241                         }
1242
1243                         if (count($cat_feeds) == 0) return 0;
1244
1245                         $match_part = implode(" OR ", $cat_feeds);
1246
1247                         $result = db_query($link, "SELECT COUNT(int_id) AS unread
1248                                 FROM ttrss_user_entries
1249                                 WHERE   unread = true AND ($match_part)
1250                                 AND owner_uid = " . $owner_uid);
1251
1252                         $unread = 0;
1253
1254                         # this needs to be rewritten
1255                         while ($line = db_fetch_assoc($result)) {
1256                                 $unread += $line["unread"];
1257                         }
1258
1259                         return $unread;
1260                 } else if ($cat == -1) {
1261                         return getFeedUnread($link, -1) + getFeedUnread($link, -2) + getFeedUnread($link, -3) + getFeedUnread($link, 0);
1262                 } else if ($cat == -2) {
1263
1264                         $result = db_query($link, "
1265                                 SELECT COUNT(unread) AS unread FROM
1266                                         ttrss_user_entries, ttrss_user_labels2
1267                                 WHERE article_id = ref_id AND unread = true
1268                                         AND ttrss_user_entries.owner_uid = '$owner_uid'");
1269
1270                         $unread = db_fetch_result($result, 0, "unread");
1271
1272                         return $unread;
1273
1274                 }
1275         }
1276
1277         function getFeedUnread($link, $feed, $is_cat = false) {
1278                 return getFeedArticles($link, $feed, $is_cat, true, $_SESSION["uid"]);
1279         }
1280
1281         function getLabelUnread($link, $label_id, $owner_uid = false) {
1282                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1283
1284                 $result = db_query($link, "SELECT COUNT(ref_id) AS unread FROM ttrss_user_entries, ttrss_user_labels2
1285                         WHERE owner_uid = '$owner_uid' AND unread = true AND label_id = '$label_id' AND article_id = ref_id");
1286
1287                 if (db_num_rows($result) != 0) {
1288                         return db_fetch_result($result, 0, "unread");
1289                 } else {
1290                         return 0;
1291                 }
1292         }
1293
1294         function getFeedArticles($link, $feed, $is_cat = false, $unread_only = false,
1295                 $owner_uid = false) {
1296
1297                 $n_feed = (int) $feed;
1298                 $need_entries = false;
1299
1300                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1301
1302                 if ($unread_only) {
1303                         $unread_qpart = "unread = true";
1304                 } else {
1305                         $unread_qpart = "true";
1306                 }
1307
1308                 if ($is_cat) {
1309                         return getCategoryUnread($link, $n_feed, $owner_uid);
1310                 } else if ($n_feed == -6) {
1311                         return 0;
1312                 } else if ($feed != "0" && $n_feed == 0) {
1313
1314                         $feed = db_escape_string($link, $feed);
1315
1316                         $result = db_query($link, "SELECT SUM((SELECT COUNT(int_id)
1317                                 FROM ttrss_user_entries,ttrss_entries WHERE int_id = post_int_id
1318                                         AND ref_id = id AND $unread_qpart)) AS count FROM ttrss_tags
1319                                 WHERE owner_uid = $owner_uid AND tag_name = '$feed'");
1320                         return db_fetch_result($result, 0, "count");
1321
1322                 } else if ($n_feed == -1) {
1323                         $match_part = "marked = true";
1324                 } else if ($n_feed == -2) {
1325                         $match_part = "published = true";
1326                 } else if ($n_feed == -3) {
1327                         $match_part = "unread = true AND score >= 0";
1328
1329                         $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE", $owner_uid);
1330
1331                         if (DB_TYPE == "pgsql") {
1332                                 $match_part .= " AND updated > NOW() - INTERVAL '$intl hour' ";
1333                         } else {
1334                                 $match_part .= " AND updated > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
1335                         }
1336
1337                         $need_entries = true;
1338
1339                 } else if ($n_feed == -4) {
1340                         $match_part = "true";
1341                 } else if ($n_feed >= 0) {
1342
1343                         if ($n_feed != 0) {
1344                                 $match_part = "feed_id = '$n_feed'";
1345                         } else {
1346                                 $match_part = "feed_id IS NULL";
1347                         }
1348
1349                 } else if ($feed < LABEL_BASE_INDEX) {
1350
1351                         $label_id = feed_to_label_id($feed);
1352
1353                         return getLabelUnread($link, $label_id, $owner_uid);
1354
1355                 }
1356
1357                 if ($match_part) {
1358
1359                         if ($need_entries) {
1360                                 $from_qpart = "ttrss_user_entries,ttrss_entries";
1361                                 $from_where = "ttrss_entries.id = ttrss_user_entries.ref_id AND";
1362                         } else {
1363                                 $from_qpart = "ttrss_user_entries";
1364                         }
1365
1366                         $query = "SELECT count(int_id) AS unread
1367                                 FROM $from_qpart WHERE
1368                                 $unread_qpart AND $from_where ($match_part) AND ttrss_user_entries.owner_uid = $owner_uid";
1369
1370                         //echo "[$feed/$query]\n";
1371
1372                         $result = db_query($link, $query);
1373
1374                 } else {
1375
1376                         $result = db_query($link, "SELECT COUNT(post_int_id) AS unread
1377                                 FROM ttrss_tags,ttrss_user_entries,ttrss_entries
1378                                 WHERE tag_name = '$feed' AND post_int_id = int_id AND ref_id = ttrss_entries.id
1379                                 AND $unread_qpart AND ttrss_tags.owner_uid = " . $owner_uid);
1380                 }
1381
1382                 $unread = db_fetch_result($result, 0, "unread");
1383
1384                 return $unread;
1385         }
1386
1387         function getGlobalUnread($link, $user_id = false) {
1388
1389                 if (!$user_id) {
1390                         $user_id = $_SESSION["uid"];
1391                 }
1392
1393                 $result = db_query($link, "SELECT SUM(value) AS c_id FROM ttrss_counters_cache
1394                         WHERE owner_uid = '$user_id' AND feed_id > 0");
1395
1396                 $c_id = db_fetch_result($result, 0, "c_id");
1397
1398                 return $c_id;
1399         }
1400
1401         function getGlobalCounters($link, $global_unread = -1) {
1402                 $ret_arr = array();
1403
1404                 if ($global_unread == -1) {
1405                         $global_unread = getGlobalUnread($link);
1406                 }
1407
1408                 $cv = array("id" => "global-unread",
1409                         "counter" => (int) $global_unread);
1410
1411                 array_push($ret_arr, $cv);
1412
1413                 $result = db_query($link, "SELECT COUNT(id) AS fn FROM
1414                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1415
1416                 $subscribed_feeds = db_fetch_result($result, 0, "fn");
1417
1418                 $cv = array("id" => "subscribed-feeds",
1419                         "counter" => (int) $subscribed_feeds);
1420
1421                 array_push($ret_arr, $cv);
1422
1423                 return $ret_arr;
1424         }
1425
1426         function getVirtCounters($link) {
1427
1428                 $ret_arr = array();
1429
1430                 for ($i = 0; $i >= -4; $i--) {
1431
1432                         $count = getFeedUnread($link, $i);
1433
1434                         $cv = array("id" => $i,
1435                                 "counter" => (int) $count);
1436
1437 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1438 //                              $cv["xmsg"] = getFeedArticles($link, $i)." ".__("total");
1439
1440                         array_push($ret_arr, $cv);
1441                 }
1442
1443                 global $pluginhost;
1444
1445                 if ($pluginhost) {
1446                         $feeds = $pluginhost->get_feeds(-1);
1447
1448                         if (is_array($feeds)) {
1449                                 foreach ($feeds as $feed) {
1450                                         $cv = array("id" => PluginHost::pfeed_to_feed_id($feed['id']),
1451                                                 "counter" => $feed['sender']->get_unread($feed['id']));
1452
1453                                         array_push($ret_arr, $cv);
1454                                 }
1455                         }
1456                 }
1457
1458                 return $ret_arr;
1459         }
1460
1461         function getLabelCounters($link, $descriptions = false) {
1462
1463                 $ret_arr = array();
1464
1465                 $owner_uid = $_SESSION["uid"];
1466
1467                 $result = db_query($link, "SELECT id,caption,COUNT(unread) AS unread
1468                         FROM ttrss_labels2 LEFT JOIN ttrss_user_labels2 ON
1469                                 (ttrss_labels2.id = label_id)
1470                                         LEFT JOIN ttrss_user_entries ON (ref_id = article_id AND unread = true)
1471                                 WHERE ttrss_labels2.owner_uid = $owner_uid GROUP BY ttrss_labels2.id,
1472                                         ttrss_labels2.caption");
1473
1474                 while ($line = db_fetch_assoc($result)) {
1475
1476                         $id = label_to_feed_id($line["id"]);
1477
1478                         $label_name = $line["caption"];
1479                         $count = $line["unread"];
1480
1481                         $cv = array("id" => $id,
1482                                 "counter" => (int) $count);
1483
1484                         if ($descriptions)
1485                                 $cv["description"] = $label_name;
1486
1487 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1488 //                              $cv["xmsg"] = getFeedArticles($link, $id)." ".__("total");
1489
1490                         array_push($ret_arr, $cv);
1491                 }
1492
1493                 return $ret_arr;
1494         }
1495
1496         function getFeedCounters($link, $active_feed = false) {
1497
1498                 $ret_arr = array();
1499
1500                 $query = "SELECT ttrss_feeds.id,
1501                                 ttrss_feeds.title,
1502                                 ".SUBSTRING_FOR_DATE."(ttrss_feeds.last_updated,1,19) AS last_updated,
1503                                 last_error, value AS count
1504                         FROM ttrss_feeds, ttrss_counters_cache
1505                         WHERE ttrss_feeds.owner_uid = ".$_SESSION["uid"]."
1506                                 AND ttrss_counters_cache.owner_uid = ttrss_feeds.owner_uid
1507                                 AND ttrss_counters_cache.feed_id = id";
1508
1509                 $result = db_query($link, $query);
1510                 $fctrs_modified = false;
1511
1512                 while ($line = db_fetch_assoc($result)) {
1513
1514                         $id = $line["id"];
1515                         $count = $line["count"];
1516                         $last_error = htmlspecialchars($line["last_error"]);
1517
1518                         $last_updated = make_local_datetime($link, $line['last_updated'], false);
1519
1520                         $has_img = feed_has_icon($id);
1521
1522                         if (date('Y') - date('Y', strtotime($line['last_updated'])) > 2)
1523                                 $last_updated = '';
1524
1525                         $cv = array("id" => $id,
1526                                 "updated" => $last_updated,
1527                                 "counter" => (int) $count,
1528                                 "has_img" => (int) $has_img);
1529
1530                         if ($last_error)
1531                                 $cv["error"] = $last_error;
1532
1533 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1534 //                              $cv["xmsg"] = getFeedArticles($link, $id)." ".__("total");
1535
1536                         if ($active_feed && $id == $active_feed)
1537                                 $cv["title"] = truncate_string($line["title"], 30);
1538
1539                         array_push($ret_arr, $cv);
1540
1541                 }
1542
1543                 return $ret_arr;
1544         }
1545
1546         function get_pgsql_version($link) {
1547                 $result = db_query($link, "SELECT version() AS version");
1548                 $version = explode(" ", db_fetch_result($result, 0, "version"));
1549                 return $version[1];
1550         }
1551
1552         /**
1553          * @return array (code => Status code, message => error message if available)
1554          *
1555          *                 0 - OK, Feed already exists
1556          *                 1 - OK, Feed added
1557          *                 2 - Invalid URL
1558          *                 3 - URL content is HTML, no feeds available
1559          *                 4 - URL content is HTML which contains multiple feeds.
1560          *                     Here you should call extractfeedurls in rpc-backend
1561          *                     to get all possible feeds.
1562          *                 5 - Couldn't download the URL content.
1563          */
1564         function subscribe_to_feed($link, $url, $cat_id = 0,
1565                         $auth_login = '', $auth_pass = '') {
1566
1567                 global $fetch_last_error;
1568
1569                 require_once "include/rssfuncs.php";
1570
1571                 $url = fix_url($url);
1572
1573                 if (!$url || !validate_feed_url($url)) return array("code" => 2);
1574
1575                 $contents = @fetch_file_contents($url, false, $auth_login, $auth_pass);
1576
1577                 if (!$contents) {
1578                         return array("code" => 5, "message" => $fetch_last_error);
1579                 }
1580
1581                 if (is_html($contents)) {
1582                         $feedUrls = get_feeds_from_html($url, $contents);
1583
1584                         if (count($feedUrls) == 0) {
1585                                 return array("code" => 3);
1586                         } else if (count($feedUrls) > 1) {
1587                                 return array("code" => 4, "feeds" => $feedUrls);
1588                         }
1589                         //use feed url as new URL
1590                         $url = key($feedUrls);
1591                 }
1592
1593                 if ($cat_id == "0" || !$cat_id) {
1594                         $cat_qpart = "NULL";
1595                 } else {
1596                         $cat_qpart = "'$cat_id'";
1597                 }
1598
1599                 $result = db_query($link,
1600                         "SELECT id FROM ttrss_feeds
1601                         WHERE feed_url = '$url' AND owner_uid = ".$_SESSION["uid"]);
1602
1603                 if (db_num_rows($result) == 0) {
1604                         $result = db_query($link,
1605                                 "INSERT INTO ttrss_feeds
1606                                         (owner_uid,feed_url,title,cat_id, auth_login,auth_pass,update_method)
1607                                 VALUES ('".$_SESSION["uid"]."', '$url',
1608                                 '[Unknown]', $cat_qpart, '$auth_login', '$auth_pass', 0)");
1609
1610                         $result = db_query($link,
1611                                 "SELECT id FROM ttrss_feeds WHERE feed_url = '$url'
1612                                         AND owner_uid = " . $_SESSION["uid"]);
1613
1614                         $feed_id = db_fetch_result($result, 0, "id");
1615
1616                         if ($feed_id) {
1617                                 update_rss_feed($link, $feed_id, true);
1618                         }
1619
1620                         return array("code" => 1);
1621                 } else {
1622                         return array("code" => 0);
1623                 }
1624         }
1625
1626         function print_feed_select($link, $id, $default_id = "",
1627                 $attributes = "", $include_all_feeds = true,
1628                 $root_id = false, $nest_level = 0) {
1629
1630                 if (!$root_id) {
1631                         print "<select id=\"$id\" name=\"$id\" $attributes>";
1632                         if ($include_all_feeds) {
1633                                 $is_selected = ("0" == $default_id) ? "selected=\"1\"" : "";
1634                                 print "<option $is_selected value=\"0\">".__('All feeds')."</option>";
1635                         }
1636                 }
1637
1638                 if (get_pref($link, 'ENABLE_FEED_CATS')) {
1639
1640                         if ($root_id)
1641                                 $parent_qpart = "parent_cat = '$root_id'";
1642                         else
1643                                 $parent_qpart = "parent_cat IS NULL";
1644
1645                         $result = db_query($link, "SELECT id,title,
1646                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1647                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1648                                 FROM ttrss_feed_categories
1649                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1650
1651                         while ($line = db_fetch_assoc($result)) {
1652
1653                                 for ($i = 0; $i < $nest_level; $i++)
1654                                         $line["title"] = " - " . $line["title"];
1655
1656                                 $is_selected = ("CAT:".$line["id"] == $default_id) ? "selected=\"1\"" : "";
1657
1658                                 printf("<option $is_selected value='CAT:%d'>%s</option>",
1659                                         $line["id"], htmlspecialchars($line["title"]));
1660
1661                                 if ($line["num_children"] > 0)
1662                                         print_feed_select($link, $id, $default_id, $attributes,
1663                                                 $include_all_feeds, $line["id"], $nest_level+1);
1664
1665                                 $feed_result = db_query($link, "SELECT id,title FROM ttrss_feeds
1666                                         WHERE cat_id = '".$line["id"]."' AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1667
1668                                 while ($fline = db_fetch_assoc($feed_result)) {
1669                                         $is_selected = ($fline["id"] == $default_id) ? "selected=\"1\"" : "";
1670
1671                                         $fline["title"] = " + " . $fline["title"];
1672
1673                                         for ($i = 0; $i < $nest_level; $i++)
1674                                                 $fline["title"] = " - " . $fline["title"];
1675
1676                                         printf("<option $is_selected value='%d'>%s</option>",
1677                                                 $fline["id"], htmlspecialchars($fline["title"]));
1678                                 }
1679                         }
1680
1681                         if (!$root_id) {
1682                                 $is_selected = ($default_id == "CAT:0") ? "selected=\"1\"" : "";
1683
1684                                 printf("<option $is_selected value='CAT:0'>%s</option>",
1685                                         __("Uncategorized"));
1686
1687                                 $feed_result = db_query($link, "SELECT id,title FROM ttrss_feeds
1688                                         WHERE cat_id IS NULL AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1689
1690                                 while ($fline = db_fetch_assoc($feed_result)) {
1691                                         $is_selected = ($fline["id"] == $default_id && !$default_is_cat) ? "selected=\"1\"" : "";
1692
1693                                         $fline["title"] = " + " . $fline["title"];
1694
1695                                         for ($i = 0; $i < $nest_level; $i++)
1696                                                 $fline["title"] = " - " . $fline["title"];
1697
1698                                         printf("<option $is_selected value='%d'>%s</option>",
1699                                                 $fline["id"], htmlspecialchars($fline["title"]));
1700                                 }
1701                         }
1702
1703                 } else {
1704                         $result = db_query($link, "SELECT id,title FROM ttrss_feeds
1705                                 WHERE owner_uid = ".$_SESSION["uid"]." ORDER BY title");
1706
1707                         while ($line = db_fetch_assoc($result)) {
1708
1709                                 $is_selected = ($line["id"] == $default_id) ? "selected=\"1\"" : "";
1710
1711                                 printf("<option $is_selected value='%d'>%s</option>",
1712                                         $line["id"], htmlspecialchars($line["title"]));
1713                         }
1714                 }
1715
1716                 if (!$root_id) {
1717                         print "</select>";
1718                 }
1719         }
1720
1721         function print_feed_cat_select($link, $id, $default_id,
1722                 $attributes, $include_all_cats = true, $root_id = false, $nest_level = 0) {
1723
1724                         if (!$root_id) {
1725                                         print "<select id=\"$id\" name=\"$id\" default=\"$default_id\" onchange=\"catSelectOnChange(this)\" $attributes>";
1726                         }
1727
1728                         if ($root_id)
1729                                 $parent_qpart = "parent_cat = '$root_id'";
1730                         else
1731                                 $parent_qpart = "parent_cat IS NULL";
1732
1733                         $result = db_query($link, "SELECT id,title,
1734                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1735                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1736                                 FROM ttrss_feed_categories
1737                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1738
1739                         while ($line = db_fetch_assoc($result)) {
1740                                 if ($line["id"] == $default_id) {
1741                                         $is_selected = "selected=\"1\"";
1742                                 } else {
1743                                         $is_selected = "";
1744                                 }
1745
1746                                 for ($i = 0; $i < $nest_level; $i++)
1747                                         $line["title"] = " - " . $line["title"];
1748
1749                                 if ($line["title"])
1750                                         printf("<option $is_selected value='%d'>%s</option>",
1751                                                 $line["id"], htmlspecialchars($line["title"]));
1752
1753                                 if ($line["num_children"] > 0)
1754                                         print_feed_cat_select($link, $id, $default_id, $attributes,
1755                                                 $include_all_cats, $line["id"], $nest_level+1);
1756                         }
1757
1758                         if (!$root_id) {
1759                                 if ($include_all_cats) {
1760                                         if (db_num_rows($result) > 0) {
1761                                                 print "<option disabled=\"1\">--------</option>";
1762                                         }
1763
1764                                         if ($default_id == 0) {
1765                                                 $is_selected = "selected=\"1\"";
1766                                         } else {
1767                                                 $is_selected = "";
1768                                         }
1769
1770                                         print "<option $is_selected value=\"0\">".__('Uncategorized')."</option>";
1771                                 }
1772                                 print "</select>";
1773                         }
1774                 }
1775
1776         function checkbox_to_sql_bool($val) {
1777                 return ($val == "on") ? "true" : "false";
1778         }
1779
1780         function getFeedCatTitle($link, $id) {
1781                 if ($id == -1) {
1782                         return __("Special");
1783                 } else if ($id < LABEL_BASE_INDEX) {
1784                         return __("Labels");
1785                 } else if ($id > 0) {
1786                         $result = db_query($link, "SELECT ttrss_feed_categories.title
1787                                 FROM ttrss_feeds, ttrss_feed_categories WHERE ttrss_feeds.id = '$id' AND
1788                                         cat_id = ttrss_feed_categories.id");
1789                         if (db_num_rows($result) == 1) {
1790                                 return db_fetch_result($result, 0, "title");
1791                         } else {
1792                                 return __("Uncategorized");
1793                         }
1794                 } else {
1795                         return "getFeedCatTitle($id) failed";
1796                 }
1797
1798         }
1799
1800         function getFeedIcon($id) {
1801                 switch ($id) {
1802                 case 0:
1803                         return "images/archive.png";
1804                         break;
1805                 case -1:
1806                         return "images/mark_set.svg";
1807                         break;
1808                 case -2:
1809                         return "images/pub_set.svg";
1810                         break;
1811                 case -3:
1812                         return "images/fresh.png";
1813                         break;
1814                 case -4:
1815                         return "images/tag.png";
1816                         break;
1817                 case -6:
1818                         return "images/recently_read.png";
1819                         break;
1820                 default:
1821                         if ($id < LABEL_BASE_INDEX) {
1822                                 return "images/label.png";
1823                         } else {
1824                                 if (file_exists(ICONS_DIR . "/$id.ico"))
1825                                         return ICONS_URL . "/$id.ico";
1826                         }
1827                         break;
1828                 }
1829         }
1830
1831         function getFeedTitle($link, $id, $cat = false) {
1832                 if ($cat) {
1833                         return getCategoryTitle($link, $id);
1834                 } else if ($id == -1) {
1835                         return __("Starred articles");
1836                 } else if ($id == -2) {
1837                         return __("Published articles");
1838                 } else if ($id == -3) {
1839                         return __("Fresh articles");
1840                 } else if ($id == -4) {
1841                         return __("All articles");
1842                 } else if ($id === 0 || $id === "0") {
1843                         return __("Archived articles");
1844                 } else if ($id == -6) {
1845                         return __("Recently read");
1846                 } else if ($id < LABEL_BASE_INDEX) {
1847                         $label_id = feed_to_label_id($id);
1848                         $result = db_query($link, "SELECT caption FROM ttrss_labels2 WHERE id = '$label_id'");
1849                         if (db_num_rows($result) == 1) {
1850                                 return db_fetch_result($result, 0, "caption");
1851                         } else {
1852                                 return "Unknown label ($label_id)";
1853                         }
1854
1855                 } else if (is_numeric($id) && $id > 0) {
1856                         $result = db_query($link, "SELECT title FROM ttrss_feeds WHERE id = '$id'");
1857                         if (db_num_rows($result) == 1) {
1858                                 return db_fetch_result($result, 0, "title");
1859                         } else {
1860                                 return "Unknown feed ($id)";
1861                         }
1862                 } else {
1863                         return $id;
1864                 }
1865         }
1866
1867         function make_init_params($link) {
1868                 $params = array();
1869
1870                 foreach (array("ON_CATCHUP_SHOW_NEXT_FEED", "HIDE_READ_FEEDS",
1871                         "ENABLE_FEED_CATS", "FEEDS_SORT_BY_UNREAD", "CONFIRM_FEED_CATCHUP",
1872                         "CDM_AUTO_CATCHUP", "FRESH_ARTICLE_MAX_AGE",
1873                         "HIDE_READ_SHOWS_SPECIAL", "COMBINED_DISPLAY_MODE") as $param) {
1874
1875                                  $params[strtolower($param)] = (int) get_pref($link, $param);
1876                  }
1877
1878                 $params["icons_url"] = ICONS_URL;
1879                 $params["cookie_lifetime"] = SESSION_COOKIE_LIFETIME;
1880                 $params["default_view_mode"] = get_pref($link, "_DEFAULT_VIEW_MODE");
1881                 $params["default_view_limit"] = (int) get_pref($link, "_DEFAULT_VIEW_LIMIT");
1882                 $params["default_view_order_by"] = get_pref($link, "_DEFAULT_VIEW_ORDER_BY");
1883                 $params["bw_limit"] = (int) $_SESSION["bw_limit"];
1884                 $params["label_base_index"] = (int) LABEL_BASE_INDEX;
1885
1886                 $result = db_query($link, "SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
1887                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1888
1889                 $max_feed_id = db_fetch_result($result, 0, "mid");
1890                 $num_feeds = db_fetch_result($result, 0, "nf");
1891
1892                 $params["max_feed_id"] = (int) $max_feed_id;
1893                 $params["num_feeds"] = (int) $num_feeds;
1894
1895                 $params["collapsed_feedlist"] = (int) get_pref($link, "_COLLAPSED_FEEDLIST");
1896                 $params["hotkeys"] = get_hotkeys_map($link);
1897
1898                 $params["csrf_token"] = $_SESSION["csrf_token"];
1899                 $params["widescreen"] = (int) $_COOKIE["ttrss_widescreen"];
1900
1901                 $params['simple_update'] = defined('SIMPLE_UPDATE_MODE') && SIMPLE_UPDATE_MODE;
1902
1903                 return $params;
1904         }
1905
1906         function get_hotkeys_info($link) {
1907                 $hotkeys = array(
1908                         __("Navigation") => array(
1909                                 "next_feed" => __("Open next feed"),
1910                                 "prev_feed" => __("Open previous feed"),
1911                                 "next_article" => __("Open next article"),
1912                                 "prev_article" => __("Open previous article"),
1913                                 "next_article_noscroll" => __("Open next article (don't scroll long articles)"),
1914                                 "prev_article_noscroll" => __("Open previous article (don't scroll long articles)"),
1915                                 "search_dialog" => __("Show search dialog")),
1916                         __("Article") => array(
1917                                 "toggle_mark" => __("Toggle starred"),
1918                                 "toggle_publ" => __("Toggle published"),
1919                                 "toggle_unread" => __("Toggle unread"),
1920                                 "edit_tags" => __("Edit tags"),
1921                                 "dismiss_selected" => __("Dismiss selected"),
1922                                 "dismiss_read" => __("Dismiss read"),
1923                                 "open_in_new_window" => __("Open in new window"),
1924                                 "catchup_below" => __("Mark below as read"),
1925                                 "catchup_above" => __("Mark above as read"),
1926                                 "article_scroll_down" => __("Scroll down"),
1927                                 "article_scroll_up" => __("Scroll up"),
1928                                 "select_article_cursor" => __("Select article under cursor"),
1929                                 "email_article" => __("Email article"),
1930                                 "close_article" => __("Close/collapse article"),
1931                                 "toggle_widescreen" => __("Toggle widescreen mode"),
1932                                 "toggle_embed_original" => __("Toggle embed original")),
1933                         __("Article selection") => array(
1934                                 "select_all" => __("Select all articles"),
1935                                 "select_unread" => __("Select unread"),
1936                                 "select_marked" => __("Select starred"),
1937                                 "select_published" => __("Select published"),
1938                                 "select_invert" => __("Invert selection"),
1939                                 "select_none" => __("Deselect everything")),
1940                         __("Feed") => array(
1941                                 "feed_refresh" => __("Refresh current feed"),
1942                                 "feed_unhide_read" => __("Un/hide read feeds"),
1943                                 "feed_subscribe" => __("Subscribe to feed"),
1944                                 "feed_edit" => __("Edit feed"),
1945                                 "feed_catchup" => __("Mark as read"),
1946                                 "feed_reverse" => __("Reverse headlines"),
1947                                 "feed_debug_update" => __("Debug feed update"),
1948                                 "catchup_all" => __("Mark all feeds as read"),
1949                                 "cat_toggle_collapse" => __("Un/collapse current category"),
1950                                 "toggle_combined_mode" => __("Toggle combined mode"),
1951                                 "toggle_cdm_expanded" => __("Toggle auto expand in combined mode")),
1952                         __("Go to") => array(
1953                                 "goto_all" => __("All articles"),
1954                                 "goto_fresh" => __("Fresh"),
1955                                 "goto_marked" => __("Starred"),
1956                                 "goto_published" => __("Published"),
1957                                 "goto_tagcloud" => __("Tag cloud"),
1958                                 "goto_prefs" => __("Preferences")),
1959                         __("Other") => array(
1960                                 "create_label" => __("Create label"),
1961                                 "create_filter" => __("Create filter"),
1962                                 "collapse_sidebar" => __("Un/collapse sidebar"),
1963                                 "help_dialog" => __("Show help dialog"))
1964                         );
1965
1966                 global $pluginhost;
1967                 foreach ($pluginhost->get_hooks($pluginhost::HOOK_HOTKEY_INFO) as $plugin) {
1968                         $hotkeys = $plugin->hook_hotkey_info($hotkeys);
1969                 }
1970
1971                 return $hotkeys;
1972         }
1973
1974         function get_hotkeys_map($link) {
1975                 $hotkeys = array(
1976 //                      "navigation" => array(
1977                                 "k" => "next_feed",
1978                                 "j" => "prev_feed",
1979                                 "n" => "next_article",
1980                                 "p" => "prev_article",
1981                                 "(38)|up" => "prev_article",
1982                                 "(40)|down" => "next_article",
1983 //                              "^(38)|Ctrl-up" => "prev_article_noscroll",
1984 //                              "^(40)|Ctrl-down" => "next_article_noscroll",
1985                                 "(191)|/" => "search_dialog",
1986 //                      "article" => array(
1987                                 "s" => "toggle_mark",
1988                                 "*s" => "toggle_publ",
1989                                 "u" => "toggle_unread",
1990                                 "*t" => "edit_tags",
1991                                 "*d" => "dismiss_selected",
1992                                 "*x" => "dismiss_read",
1993                                 "o" => "open_in_new_window",
1994                                 "c p" => "catchup_below",
1995                                 "c n" => "catchup_above",
1996                                 "*n" => "article_scroll_down",
1997                                 "*p" => "article_scroll_up",
1998                                 "*(38)|Shift+up" => "article_scroll_up",
1999                                 "*(40)|Shift+down" => "article_scroll_down",
2000                                 "a *w" => "toggle_widescreen",
2001                                 "a e" => "toggle_embed_original",
2002                                 "e" => "email_article",
2003                                 "a q" => "close_article",
2004 //                      "article_selection" => array(
2005                                 "a a" => "select_all",
2006                                 "a u" => "select_unread",
2007                                 "a *u" => "select_marked",
2008                                 "a p" => "select_published",
2009                                 "a i" => "select_invert",
2010                                 "a n" => "select_none",
2011 //                      "feed" => array(
2012                                 "f r" => "feed_refresh",
2013                                 "f a" => "feed_unhide_read",
2014                                 "f s" => "feed_subscribe",
2015                                 "f e" => "feed_edit",
2016                                 "f q" => "feed_catchup",
2017                                 "f x" => "feed_reverse",
2018                                 "f *d" => "feed_debug_update",
2019                                 "f *c" => "toggle_combined_mode",
2020                                 "f c" => "toggle_cdm_expanded",
2021                                 "*q" => "catchup_all",
2022                                 "x" => "cat_toggle_collapse",
2023 //                      "goto" => array(
2024                                 "g a" => "goto_all",
2025                                 "g f" => "goto_fresh",
2026                                 "g s" => "goto_marked",
2027                                 "g p" => "goto_published",
2028                                 "g t" => "goto_tagcloud",
2029                                 "g *p" => "goto_prefs",
2030 //                      "other" => array(
2031                                 "(9)|Tab" => "select_article_cursor", // tab
2032                                 "c l" => "create_label",
2033                                 "c f" => "create_filter",
2034                                 "c s" => "collapse_sidebar",
2035                                 "^(191)|Ctrl+/" => "help_dialog",
2036                         );
2037
2038                 if (get_pref($link, 'COMBINED_DISPLAY_MODE')) {
2039                         $hotkeys["^(38)|Ctrl-up"] = "prev_article_noscroll";
2040                         $hotkeys["^(40)|Ctrl-down"] = "next_article_noscroll";
2041                 }
2042
2043                 global $pluginhost;
2044                 foreach ($pluginhost->get_hooks($pluginhost::HOOK_HOTKEY_MAP) as $plugin) {
2045                         $hotkeys = $plugin->hook_hotkey_map($hotkeys);
2046                 }
2047
2048                 $prefixes = array();
2049
2050                 foreach (array_keys($hotkeys) as $hotkey) {
2051                         $pair = explode(" ", $hotkey, 2);
2052
2053                         if (count($pair) > 1 && !in_array($pair[0], $prefixes)) {
2054                                 array_push($prefixes, $pair[0]);
2055                         }
2056                 }
2057
2058                 return array($prefixes, $hotkeys);
2059         }
2060
2061         function make_runtime_info($link) {
2062                 $data = array();
2063
2064                 $result = db_query($link, "SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
2065                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
2066
2067                 $max_feed_id = db_fetch_result($result, 0, "mid");
2068                 $num_feeds = db_fetch_result($result, 0, "nf");
2069
2070                 $data["max_feed_id"] = (int) $max_feed_id;
2071                 $data["num_feeds"] = (int) $num_feeds;
2072
2073                 $data['last_article_id'] = getLastArticleId($link);
2074                 $data['cdm_expanded'] = get_pref($link, 'CDM_EXPANDED');
2075
2076                 $data['dep_ts'] = calculate_dep_timestamp();
2077                 $data['reload_on_ts_change'] = !defined('_NO_RELOAD_ON_TS_CHANGE');
2078
2079                 if (file_exists(LOCK_DIRECTORY . "/update_daemon.lock")) {
2080
2081                         $data['daemon_is_running'] = (int) file_is_locked("update_daemon.lock");
2082
2083                         if (time() - $_SESSION["daemon_stamp_check"] > 30) {
2084
2085                                 $stamp = (int) @file_get_contents(LOCK_DIRECTORY . "/update_daemon.stamp");
2086
2087                                 if ($stamp) {
2088                                         $stamp_delta = time() - $stamp;
2089
2090                                         if ($stamp_delta > 1800) {
2091                                                 $stamp_check = 0;
2092                                         } else {
2093                                                 $stamp_check = 1;
2094                                                 $_SESSION["daemon_stamp_check"] = time();
2095                                         }
2096
2097                                         $data['daemon_stamp_ok'] = $stamp_check;
2098
2099                                         $stamp_fmt = date("Y.m.d, G:i", $stamp);
2100
2101                                         $data['daemon_stamp'] = $stamp_fmt;
2102                                 }
2103                         }
2104                 }
2105
2106                 if ($_SESSION["last_version_check"] + 86400 + rand(-1000, 1000) < time()) {
2107                                 $new_version_details = @check_for_update($link);
2108
2109                                 $data['new_version_available'] = (int) ($new_version_details != false);
2110
2111                                 $_SESSION["last_version_check"] = time();
2112                                 $_SESSION["version_data"] = $new_version_details;
2113                 }
2114
2115                 return $data;
2116         }
2117
2118         function search_to_sql($link, $search) {
2119
2120                 $search_query_part = "";
2121
2122                 $keywords = explode(" ", $search);
2123                 $query_keywords = array();
2124
2125                 foreach ($keywords as $k) {
2126                         if (strpos($k, "-") === 0) {
2127                                 $k = substr($k, 1);
2128                                 $not = "NOT";
2129                         } else {
2130                                 $not = "";
2131                         }
2132
2133                         $commandpair = explode(":", mb_strtolower($k), 2);
2134
2135                         if ($commandpair[0] == "note" && $commandpair[1]) {
2136
2137                                 if ($commandpair[1] == "true")
2138                                         array_push($query_keywords, "($not (note IS NOT NULL AND note != ''))");
2139                                 else
2140                                         array_push($query_keywords, "($not (note IS NULL OR note = ''))");
2141
2142                         } else if ($commandpair[0] == "star" && $commandpair[1]) {
2143
2144                                 if ($commandpair[1] == "true")
2145                                         array_push($query_keywords, "($not (marked = true))");
2146                                 else
2147                                         array_push($query_keywords, "($not (marked = false))");
2148
2149                         } else if ($commandpair[0] == "pub" && $commandpair[1]) {
2150
2151                                 if ($commandpair[1] == "true")
2152                                         array_push($query_keywords, "($not (published = true))");
2153                                 else
2154                                         array_push($query_keywords, "($not (published = false))");
2155
2156                         } else if (strpos($k, "@") === 0) {
2157
2158                                 $user_tz_string = get_pref($link, 'USER_TIMEZONE', $_SESSION['uid']);
2159                                 $orig_ts = strtotime(substr($k, 1));
2160                                 $k = date("Y-m-d", convert_timestamp($orig_ts, $user_tz_string, 'UTC'));
2161
2162                                 //$k = date("Y-m-d", strtotime(substr($k, 1)));
2163
2164                                 array_push($query_keywords, "(".SUBSTRING_FOR_DATE."(updated,1,LENGTH('$k')) $not = '$k')");
2165                         } else {
2166                                 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2167                                                 OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2168                         }
2169                 }
2170
2171                 $search_query_part = implode("AND", $query_keywords);
2172
2173                 return $search_query_part;
2174         }
2175
2176         function getParentCategories($link, $cat, $owner_uid) {
2177                 $rv = array();
2178
2179                 $result = db_query($link, "SELECT parent_cat FROM ttrss_feed_categories
2180                         WHERE id = '$cat' AND parent_cat IS NOT NULL AND owner_uid = $owner_uid");
2181
2182                 while ($line = db_fetch_assoc($result)) {
2183                         array_push($rv, $line["parent_cat"]);
2184                         $rv = array_merge($rv, getParentCategories($link, $line["parent_cat"], $owner_uid));
2185                 }
2186
2187                 return $rv;
2188         }
2189
2190         function getChildCategories($link, $cat, $owner_uid) {
2191                 $rv = array();
2192
2193                 $result = db_query($link, "SELECT id FROM ttrss_feed_categories
2194                         WHERE parent_cat = '$cat' AND owner_uid = $owner_uid");
2195
2196                 while ($line = db_fetch_assoc($result)) {
2197                         array_push($rv, $line["id"]);
2198                         $rv = array_merge($rv, getChildCategories($link, $line["id"], $owner_uid));
2199                 }
2200
2201                 return $rv;
2202         }
2203
2204         function queryFeedHeadlines($link, $feed, $limit, $view_mode, $cat_view, $search, $search_mode, $override_order = false, $offset = 0, $owner_uid = 0, $filter = false, $since_id = 0, $include_children = false, $ignore_vfeed_group = false) {
2205
2206                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2207
2208                 $ext_tables_part = "";
2209
2210                         if ($search) {
2211
2212                                 if (SPHINX_ENABLED) {
2213                                         $ids = join(",", @sphinx_search($search, 0, 500));
2214
2215                                         if ($ids)
2216                                                 $search_query_part = "ref_id IN ($ids) AND ";
2217                                         else
2218                                                 $search_query_part = "ref_id = -1 AND ";
2219
2220                                 } else {
2221                                         $search_query_part = search_to_sql($link, $search);
2222                                         $search_query_part .= " AND ";
2223                                 }
2224
2225                         } else {
2226                                 $search_query_part = "";
2227                         }
2228
2229                         if ($filter) {
2230
2231                                 if (DB_TYPE == "pgsql") {
2232                                         $query_strategy_part .= " AND updated > NOW() - INTERVAL '14 days' ";
2233                                 } else {
2234                                         $query_strategy_part .= " AND updated > DATE_SUB(NOW(), INTERVAL 14 DAY) ";
2235                                 }
2236
2237                                 $override_order = "updated DESC";
2238
2239                                 $filter_query_part = filter_to_sql($link, $filter, $owner_uid);
2240
2241                                 // Try to check if SQL regexp implementation chokes on a valid regexp
2242                                 $result = db_query($link, "SELECT true AS true_val FROM ttrss_entries,
2243                                         ttrss_user_entries, ttrss_feeds, ttrss_feed_categories
2244                                         WHERE $filter_query_part LIMIT 1", false);
2245
2246                                 if ($result) {
2247                                         $test = db_fetch_result($result, 0, "true_val");
2248
2249                                         if (!$test) {
2250                                                 $filter_query_part = "false AND";
2251                                         } else {
2252                                                 $filter_query_part .= " AND";
2253                                         }
2254                                 } else {
2255                                         $filter_query_part = "false AND";
2256                                 }
2257
2258                         } else {
2259                                 $filter_query_part = "";
2260                         }
2261
2262                         if ($since_id) {
2263                                 $since_id_part = "ttrss_entries.id > $since_id AND ";
2264                         } else {
2265                                 $since_id_part = "";
2266                         }
2267
2268                         $view_query_part = "";
2269
2270                         if ($view_mode == "adaptive") {
2271                                 if ($search) {
2272                                         $view_query_part = " ";
2273                                 } else if ($feed != -1) {
2274
2275                                         $unread = getFeedUnread($link, $feed, $cat_view);
2276
2277                                         if ($cat_view && $feed > 0 && $include_children)
2278                                                 $unread += getCategoryChildrenUnread($link, $feed);
2279
2280                                         if ($unread > 0)
2281                                 $view_query_part = " unread = true AND ";
2282
2283                                 }
2284                         }
2285
2286                         if ($view_mode == "marked") {
2287                                 $view_query_part = " marked = true AND ";
2288                         }
2289
2290                         if ($view_mode == "has_note") {
2291                                 $view_query_part = " (note IS NOT NULL AND note != '') AND ";
2292                         }
2293
2294                         if ($view_mode == "published") {
2295                                 $view_query_part = " published = true AND ";
2296                         }
2297
2298                         if ($view_mode == "unread" && $feed != -6) {
2299                                 $view_query_part = " unread = true AND ";
2300                         }
2301
2302                         if ($limit > 0) {
2303                                 $limit_query_part = "LIMIT " . $limit;
2304                         }
2305
2306                         $allow_archived = false;
2307
2308                         $vfeed_query_part = "";
2309
2310                         // override query strategy and enable feed display when searching globally
2311                         if ($search && $search_mode == "all_feeds") {
2312                                 $query_strategy_part = "true";
2313                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2314                         /* tags */
2315                         } else if (!is_numeric($feed)) {
2316                                 $query_strategy_part = "true";
2317                                 $vfeed_query_part = "(SELECT title FROM ttrss_feeds WHERE
2318                                         id = feed_id) as feed_title,";
2319                         } else if ($search && $search_mode == "this_cat") {
2320                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2321
2322                                 if ($feed > 0) {
2323                                         if ($include_children) {
2324                                                 $subcats = getChildCategories($link, $feed, $owner_uid);
2325                                                 array_push($subcats, $feed);
2326                                                 $cats_qpart = join(",", $subcats);
2327                                         } else {
2328                                                 $cats_qpart = $feed;
2329                                         }
2330
2331                                         $query_strategy_part = "ttrss_feeds.cat_id IN ($cats_qpart)";
2332
2333                                 } else {
2334                                         $query_strategy_part = "ttrss_feeds.cat_id IS NULL";
2335                                 }
2336
2337                         } else if ($feed > 0) {
2338
2339                                 if ($cat_view) {
2340
2341                                         if ($feed > 0) {
2342                                                 if ($include_children) {
2343                                                         # sub-cats
2344                                                         $subcats = getChildCategories($link, $feed, $owner_uid);
2345
2346                                                         array_push($subcats, $feed);
2347                                                         $query_strategy_part = "cat_id IN (".
2348                                                                         implode(",", $subcats).")";
2349
2350                                                 } else {
2351                                                         $query_strategy_part = "cat_id = '$feed'";
2352                                                 }
2353
2354                                         } else {
2355                                                 $query_strategy_part = "cat_id IS NULL";
2356                                         }
2357
2358                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2359
2360                                 } else {
2361                                         $query_strategy_part = "feed_id = '$feed'";
2362                                 }
2363                         } else if ($feed == 0 && !$cat_view) { // archive virtual feed
2364                                 $query_strategy_part = "feed_id IS NULL";
2365                                 $allow_archived = true;
2366                         } else if ($feed == 0 && $cat_view) { // uncategorized
2367                                 $query_strategy_part = "cat_id IS NULL AND feed_id IS NOT NULL";
2368                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2369                         } else if ($feed == -1) { // starred virtual feed
2370                                 $query_strategy_part = "marked = true";
2371                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2372                                 $allow_archived = true;
2373
2374                                 if (!$override_order) {
2375                                         $override_order = "last_marked DESC, date_entered DESC, updated DESC";
2376                                 }
2377
2378                         } else if ($feed == -2) { // published virtual feed OR labels category
2379
2380                                 if (!$cat_view) {
2381                                         $query_strategy_part = "published = true";
2382                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2383                                         $allow_archived = true;
2384
2385                                         if (!$override_order) {
2386                                                 $override_order = "last_published DESC, date_entered DESC, updated DESC";
2387                                         }
2388
2389                                 } else {
2390                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2391
2392                                         $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2393
2394                                         $query_strategy_part = "ttrss_labels2.id = ttrss_user_labels2.label_id AND
2395                                                 ttrss_user_labels2.article_id = ref_id";
2396
2397                                 }
2398                         } else if ($feed == -6) { // recently read
2399                                 $query_strategy_part = "unread = false AND last_read IS NOT NULL";
2400                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2401                                 $allow_archived = true;
2402
2403                                 if (!$override_order) $override_order = "last_read DESC";
2404                         } else if ($feed == -3) { // fresh virtual feed
2405                                 $query_strategy_part = "unread = true AND score >= 0";
2406
2407                                 $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE", $owner_uid);
2408
2409                                 if (DB_TYPE == "pgsql") {
2410                                         $query_strategy_part .= " AND date_entered > NOW() - INTERVAL '$intl hour' ";
2411                                 } else {
2412                                         $query_strategy_part .= " AND date_entered > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
2413                                 }
2414
2415                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2416                         } else if ($feed == -4) { // all articles virtual feed
2417                                 $allow_archived = true;
2418                                 $query_strategy_part = "true";
2419                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2420                         } else if ($feed <= LABEL_BASE_INDEX) { // labels
2421                                 $label_id = feed_to_label_id($feed);
2422
2423                                 $query_strategy_part = "label_id = '$label_id' AND
2424                                         ttrss_labels2.id = ttrss_user_labels2.label_id AND
2425                                         ttrss_user_labels2.article_id = ref_id";
2426
2427                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2428                                 $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2429                                 $allow_archived = true;
2430
2431                         } else {
2432                                 $query_strategy_part = "true";
2433                         }
2434
2435                         $order_by = "score DESC, date_entered DESC, updated DESC";
2436
2437                         if ($view_mode == "unread_first") {
2438                                 $order_by = "unread DESC, $order_by";
2439                         }
2440
2441                         if ($override_order) {
2442                                 $order_by = $override_order;
2443                         }
2444
2445                         $feed_title = "";
2446
2447                         if ($search) {
2448                                 $feed_title = T_sprintf("Search results: %s", $search);
2449                         } else {
2450                                 if ($cat_view) {
2451                                         $feed_title = getCategoryTitle($link, $feed);
2452                                 } else {
2453                                         if (is_numeric($feed) && $feed > 0) {
2454                                                 $result = db_query($link, "SELECT title,site_url,last_error
2455                                                         FROM ttrss_feeds WHERE id = '$feed' AND owner_uid = $owner_uid");
2456
2457                                                 $feed_title = db_fetch_result($result, 0, "title");
2458                                                 $feed_site_url = db_fetch_result($result, 0, "site_url");
2459                                                 $last_error = db_fetch_result($result, 0, "last_error");
2460                                         } else {
2461                                                 $feed_title = getFeedTitle($link, $feed);
2462                                         }
2463                                 }
2464                         }
2465
2466                         $content_query_part = "content as content_preview, cached_content, ";
2467
2468                         if (is_numeric($feed)) {
2469
2470                                 if ($feed >= 0) {
2471                                         $feed_kind = "Feeds";
2472                                 } else {
2473                                         $feed_kind = "Labels";
2474                                 }
2475
2476                                 if ($limit_query_part) {
2477                                         $offset_query_part = "OFFSET $offset";
2478                                 }
2479
2480                                 // proper override_order applied above
2481                                 if ($vfeed_query_part && !$ignore_vfeed_group && get_pref($link, 'VFEED_GROUP_BY_FEED', $owner_uid)) {
2482                                         if (!$override_order) {
2483                                                 $order_by = "ttrss_feeds.title, $order_by";
2484                                         } else {
2485                                                 $order_by = "ttrss_feeds.title, $override_order";
2486                                         }
2487                                 }
2488
2489                                 if (!$allow_archived) {
2490                                         $from_qpart = "ttrss_entries,ttrss_user_entries,ttrss_feeds$ext_tables_part";
2491                                         $feed_check_qpart = "ttrss_user_entries.feed_id = ttrss_feeds.id AND";
2492
2493                                 } else {
2494                                         $from_qpart = "ttrss_entries$ext_tables_part,ttrss_user_entries
2495                                                 LEFT JOIN ttrss_feeds ON (feed_id = ttrss_feeds.id)";
2496                                 }
2497
2498                                 $query = "SELECT DISTINCT
2499                                                 date_entered,
2500                                                 guid,
2501                                                 ttrss_entries.id,ttrss_entries.title,
2502                                                 updated,
2503                                                 label_cache,
2504                                                 tag_cache,
2505                                                 always_display_enclosures,
2506                                                 site_url,
2507                                                 note,
2508                                                 num_comments,
2509                                                 comments,
2510                                                 int_id,
2511                                                 hide_images,
2512                                                 unread,feed_id,marked,published,link,last_read,orig_feed_id,
2513                                                 last_marked, last_published,
2514                                                 $vfeed_query_part
2515                                                 $content_query_part
2516                                                 author,score
2517                                         FROM
2518                                                 $from_qpart
2519                                         WHERE
2520                                         $feed_check_qpart
2521                                         ttrss_user_entries.ref_id = ttrss_entries.id AND
2522                                         ttrss_user_entries.owner_uid = '$owner_uid' AND
2523                                         $search_query_part
2524                                         $filter_query_part
2525                                         $view_query_part
2526                                         $since_id_part
2527                                         $query_strategy_part ORDER BY $order_by
2528                                         $limit_query_part $offset_query_part";
2529
2530                                 if ($_REQUEST["debug"]) print $query;
2531
2532                                 $result = db_query($link, $query);
2533
2534                         } else {
2535                                 // browsing by tag
2536
2537                                 $select_qpart = "SELECT DISTINCT " .
2538                                                                 "date_entered," .
2539                                                                 "guid," .
2540                                                                 "note," .
2541                                                                 "ttrss_entries.id as id," .
2542                                                                 "title," .
2543                                                                 "updated," .
2544                                                                 "unread," .
2545                                                                 "feed_id," .
2546                                                                 "orig_feed_id," .
2547                                                                 "marked," .
2548                                                                 "num_comments, " .
2549                                                                 "comments, " .
2550                                                                 "tag_cache," .
2551                                                                 "label_cache," .
2552                                                                 "link," .
2553                                                                 "last_read," .
2554                                                                 "(SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) AS hide_images," .
2555                                                                 "last_marked, last_published, " .
2556                                                                 $since_id_part .
2557                                                                 $vfeed_query_part .
2558                                                                 $content_query_part .
2559                                                                 "score ";
2560
2561                                 $feed_kind = "Tags";
2562                                 $all_tags = explode(",", $feed);
2563                                 if ($search_mode == 'any') {
2564                                         $tag_sql = "tag_name in (" . implode(", ", array_map("db_quote", $all_tags)) . ")";
2565                                         $from_qpart = " FROM ttrss_entries,ttrss_user_entries,ttrss_tags ";
2566                                         $where_qpart = " WHERE " .
2567                                                                    "ref_id = ttrss_entries.id AND " .
2568                                                                    "ttrss_user_entries.owner_uid = $owner_uid AND " .
2569                                                                    "post_int_id = int_id AND $tag_sql AND " .
2570                                                                    $view_query_part .
2571                                                                    $search_query_part .
2572                                                                    $query_strategy_part . " ORDER BY $order_by " .
2573                                                                    $limit_query_part;
2574
2575                                 } else {
2576                                         $i = 1;
2577                                         $sub_selects = array();
2578                                         $sub_ands = array();
2579                                         foreach ($all_tags as $term) {
2580                                                 array_push($sub_selects, "(SELECT post_int_id from ttrss_tags WHERE tag_name = " . db_quote($term) . " AND owner_uid = $owner_uid) as A$i");
2581                                                 $i++;
2582                                         }
2583                                         if ($i > 2) {
2584                                                 $x = 1;
2585                                                 $y = 2;
2586                                                 do {
2587                                                         array_push($sub_ands, "A$x.post_int_id = A$y.post_int_id");
2588                                                         $x++;
2589                                                         $y++;
2590                                                 } while ($y < $i);
2591                                         }
2592                                         array_push($sub_ands, "A1.post_int_id = ttrss_user_entries.int_id and ttrss_user_entries.owner_uid = $owner_uid");
2593                                         array_push($sub_ands, "ttrss_user_entries.ref_id = ttrss_entries.id");
2594                                         $from_qpart = " FROM " . implode(", ", $sub_selects) . ", ttrss_user_entries, ttrss_entries";
2595                                         $where_qpart = " WHERE " . implode(" AND ", $sub_ands);
2596                                 }
2597                                 //                              error_log("TAG SQL: " . $tag_sql);
2598                                 // $tag_sql = "tag_name = '$feed'";   DEFAULT way
2599
2600                                 //                              error_log("[". $select_qpart . "][" . $from_qpart . "][" .$where_qpart . "]");
2601                                 $result = db_query($link, $select_qpart . $from_qpart . $where_qpart);
2602                         }
2603
2604                         return array($result, $feed_title, $feed_site_url, $last_error);
2605
2606         }
2607
2608         function sanitize($link, $str, $force_remove_images = false, $owner = false, $site_url = false) {
2609                 if (!$owner) $owner = $_SESSION["uid"];
2610
2611                 $res = trim($str); if (!$res) return '';
2612
2613                 if (strpos($res, "href=") === false)
2614                         $res = rewrite_urls($res);
2615
2616                 $charset_hack = '<head>
2617                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
2618                 </head>';
2619
2620                 $res = trim($res); if (!$res) return '';
2621
2622                 libxml_use_internal_errors(true);
2623
2624                 $doc = new DOMDocument();
2625                 $doc->loadHTML($charset_hack . $res);
2626                 $xpath = new DOMXPath($doc);
2627
2628                 $entries = $xpath->query('(//a[@href]|//img[@src])');
2629
2630                 foreach ($entries as $entry) {
2631
2632                         if ($site_url) {
2633
2634                                 if ($entry->hasAttribute('href'))
2635                                         $entry->setAttribute('href',
2636                                                 rewrite_relative_url($site_url, $entry->getAttribute('href')));
2637
2638                                 if ($entry->hasAttribute('src')) {
2639                                         $src = rewrite_relative_url($site_url, $entry->getAttribute('src'));
2640
2641                                         $cached_filename = CACHE_DIR . '/images/' . sha1($src) . '.png';
2642
2643                                         if (file_exists($cached_filename)) {
2644                                                 $src = SELF_URL_PATH . '/image.php?hash=' . sha1($src);
2645                                         }
2646
2647                                         $entry->setAttribute('src', $src);
2648                                 }
2649
2650                                 if ($entry->nodeName == 'img') {
2651                                         if (($owner && get_pref($link, "STRIP_IMAGES", $owner)) ||
2652                                                         $force_remove_images || $_SESSION["bw_limit"]) {
2653
2654                                                 $p = $doc->createElement('p');
2655
2656                                                 $a = $doc->createElement('a');
2657                                                 $a->setAttribute('href', $entry->getAttribute('src'));
2658
2659                                                 $a->appendChild(new DOMText($entry->getAttribute('src')));
2660                                                 $a->setAttribute('target', '_blank');
2661
2662                                                 $p->appendChild($a);
2663
2664                                                 $entry->parentNode->replaceChild($p, $entry);
2665                                         }
2666                                 }
2667                         }
2668
2669                         if (strtolower($entry->nodeName) == "a") {
2670                                 $entry->setAttribute("target", "_blank");
2671                         }
2672                 }
2673
2674                 $entries = $xpath->query('//iframe');
2675                 foreach ($entries as $entry) {
2676                         $entry->setAttribute('sandbox', 'allow-scripts');
2677
2678                 }
2679
2680                 $allowed_elements = array('a', 'address', 'audio', 'article',
2681                         'b', 'big', 'blockquote', 'body', 'br', 'cite', 'center',
2682                         'code', 'dd', 'del', 'details', 'div', 'dl', 'font',
2683                         'dt', 'em', 'footer', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6',
2684                         'header', 'html', 'i', 'img', 'ins', 'kbd',
2685                         'li', 'nav', 'noscript', 'ol', 'p', 'pre', 'q', 's','small',
2686                         'source', 'span', 'strike', 'strong', 'sub', 'summary',
2687                         'sup', 'table', 'tbody', 'td', 'tfoot', 'th', 'thead',
2688                         'tr', 'track', 'tt', 'u', 'ul', 'var', 'wbr', 'video' );
2689
2690                 if ($_SESSION['hasSandbox']) $allowed_elements[] = 'iframe';
2691
2692                 $disallowed_attributes = array('id', 'style', 'class');
2693
2694                 global $pluginhost;
2695
2696                 if (isset($pluginhost)) {
2697                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_SANITIZE) as $plugin) {
2698                                 $retval = $plugin->hook_sanitize($doc, $site_url, $allowed_elements, $disallowed_attributes);
2699                                 if (is_array($retval)) {
2700                                         $doc = $retval[0];
2701                                         $allowed_elements = $retval[1];
2702                                         $disallowed_attributes = $retval[2];
2703                                 } else {
2704                                         $doc = $retval;
2705                                 }
2706                         }
2707                 }
2708
2709                 $doc->removeChild($doc->firstChild); //remove doctype
2710                 $doc = strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes);
2711                 $res = $doc->saveHTML();
2712                 return $res;
2713         }
2714
2715         function strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes) {
2716                 $entries = $doc->getElementsByTagName("*");
2717
2718                 foreach ($entries as $entry) {
2719                         if (!in_array($entry->nodeName, $allowed_elements)) {
2720                                 $entry->parentNode->removeChild($entry);
2721                         }
2722
2723                         if ($entry->hasAttributes()) {
2724                                 $attrs_to_remove = array();
2725
2726                                 foreach ($entry->attributes as $attr) {
2727
2728                                         if (strpos($attr->nodeName, 'on') === 0) {
2729                                                 array_push($attrs_to_remove, $attr);
2730                                         }
2731
2732                                         if (in_array($attr->nodeName, $disallowed_attributes)) {
2733                                                 array_push($attrs_to_remove, $attr);
2734                                         }
2735                                 }
2736
2737                                 foreach ($attrs_to_remove as $attr) {
2738                                         $entry->removeAttributeNode($attr);
2739                                 }
2740                         }
2741                 }
2742
2743                 return $doc;
2744         }
2745
2746         function check_for_update($link) {
2747                 if (CHECK_FOR_NEW_VERSION && $_SESSION['access_level'] >= 10) {
2748                         $version_url = "http://tt-rss.org/version.php?ver=" . VERSION .
2749                                 "&iid=" . sha1(SELF_URL_PATH);
2750
2751                         $version_data = @fetch_file_contents($version_url);
2752
2753                         if ($version_data) {
2754                                 $version_data = json_decode($version_data, true);
2755                                 if ($version_data && $version_data['version']) {
2756
2757                                         if (version_compare(VERSION, $version_data['version']) == -1) {
2758                                                 return $version_data;
2759                                         }
2760                                 }
2761                         }
2762                 }
2763                 return false;
2764         }
2765
2766         function catchupArticlesById($link, $ids, $cmode, $owner_uid = false) {
2767
2768                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2769                 if (count($ids) == 0) return;
2770
2771                 $tmp_ids = array();
2772
2773                 foreach ($ids as $id) {
2774                         array_push($tmp_ids, "ref_id = '$id'");
2775                 }
2776
2777                 $ids_qpart = join(" OR ", $tmp_ids);
2778
2779                 if ($cmode == 0) {
2780                         db_query($link, "UPDATE ttrss_user_entries SET
2781                         unread = false,last_read = NOW()
2782                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2783                 } else if ($cmode == 1) {
2784                         db_query($link, "UPDATE ttrss_user_entries SET
2785                         unread = true
2786                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2787                 } else {
2788                         db_query($link, "UPDATE ttrss_user_entries SET
2789                         unread = NOT unread,last_read = NOW()
2790                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2791                 }
2792
2793                 /* update ccache */
2794
2795                 $result = db_query($link, "SELECT DISTINCT feed_id FROM ttrss_user_entries
2796                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2797
2798                 while ($line = db_fetch_assoc($result)) {
2799                         ccache_update($link, $line["feed_id"], $owner_uid);
2800                 }
2801         }
2802
2803         function get_article_tags($link, $id, $owner_uid = 0, $tag_cache = false) {
2804
2805                 $a_id = db_escape_string($link, $id);
2806
2807                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2808
2809                 $query = "SELECT DISTINCT tag_name,
2810                         owner_uid as owner FROM
2811                         ttrss_tags WHERE post_int_id = (SELECT int_id FROM ttrss_user_entries WHERE
2812                         ref_id = '$a_id' AND owner_uid = '$owner_uid' LIMIT 1) ORDER BY tag_name";
2813
2814                 $obj_id = md5("TAGS:$owner_uid:$id");
2815                 $tags = array();
2816
2817                 /* check cache first */
2818
2819                 if ($tag_cache === false) {
2820                         $result = db_query($link, "SELECT tag_cache FROM ttrss_user_entries
2821                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
2822
2823                         $tag_cache = db_fetch_result($result, 0, "tag_cache");
2824                 }
2825
2826                 if ($tag_cache) {
2827                         $tags = explode(",", $tag_cache);
2828                 } else {
2829
2830                         /* do it the hard way */
2831
2832                         $tmp_result = db_query($link, $query);
2833
2834                         while ($tmp_line = db_fetch_assoc($tmp_result)) {
2835                                 array_push($tags, $tmp_line["tag_name"]);
2836                         }
2837
2838                         /* update the cache */
2839
2840                         $tags_str = db_escape_string($link, join(",", $tags));
2841
2842                         db_query($link, "UPDATE ttrss_user_entries
2843                                 SET tag_cache = '$tags_str' WHERE ref_id = '$id'
2844                                 AND owner_uid = $owner_uid");
2845                 }
2846
2847                 return $tags;
2848         }
2849
2850         function trim_array($array) {
2851                 $tmp = $array;
2852                 array_walk($tmp, 'trim');
2853                 return $tmp;
2854         }
2855
2856         function tag_is_valid($tag) {
2857                 if ($tag == '') return false;
2858                 if (preg_match("/^[0-9]*$/", $tag)) return false;
2859                 if (mb_strlen($tag) > 250) return false;
2860
2861                 if (function_exists('iconv')) {
2862                         $tag = iconv("utf-8", "utf-8", $tag);
2863                 }
2864
2865                 if (!$tag) return false;
2866
2867                 return true;
2868         }
2869
2870         function render_login_form($link) {
2871                 require_once "login_form.php";
2872                 exit;
2873         }
2874
2875         // from http://developer.apple.com/internet/safari/faq.html
2876         function no_cache_incantation() {
2877                 header("Expires: Mon, 22 Dec 1980 00:00:00 GMT"); // Happy birthday to me :)
2878                 header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT"); // always modified
2879                 header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0"); // HTTP/1.1
2880                 header("Cache-Control: post-check=0, pre-check=0", false);
2881                 header("Pragma: no-cache"); // HTTP/1.0
2882         }
2883
2884         function format_warning($msg, $id = "") {
2885                 global $link;
2886                 return "<div class=\"warning\" id=\"$id\">
2887                         <img src=\"images/sign_excl.svg\"><div class='inner'>$msg</div></div>";
2888         }
2889
2890         function format_notice($msg, $id = "") {
2891                 global $link;
2892                 return "<div class=\"notice\" id=\"$id\">
2893                         <img src=\"images/sign_info.svg\"><div class='inner'>$msg</div></div>";
2894         }
2895
2896         function format_error($msg, $id = "") {
2897                 global $link;
2898                 return "<div class=\"error\" id=\"$id\">
2899                         <img src=\"images/sign_excl.svg\"><div class='inner'>$msg</div></div>";
2900         }
2901
2902         function print_notice($msg) {
2903                 return print format_notice($msg);
2904         }
2905
2906         function print_warning($msg) {
2907                 return print format_warning($msg);
2908         }
2909
2910         function print_error($msg) {
2911                 return print format_error($msg);
2912         }
2913
2914
2915         function T_sprintf() {
2916                 $args = func_get_args();
2917                 return vsprintf(__(array_shift($args)), $args);
2918         }
2919
2920         function format_inline_player($link, $url, $ctype) {
2921
2922                 $entry = "";
2923
2924                 $url = htmlspecialchars($url);
2925
2926                 if (strpos($ctype, "audio/") === 0) {
2927
2928                         if ($_SESSION["hasAudio"] && (strpos($ctype, "ogg") !== false ||
2929                                 strpos($_SERVER['HTTP_USER_AGENT'], "Chrome") !== false ||
2930                                 strpos($_SERVER['HTTP_USER_AGENT'], "Safari") !== false )) {
2931
2932                                 $id = 'AUDIO-' . uniqid();
2933
2934                                 $entry .= "<audio id=\"$id\"\" controls style='display : none'>
2935                                         <source type=\"$ctype\" src=\"$url\"></source>
2936                                         </audio>";
2937
2938                                 $entry .= "<span onclick=\"player(this)\"
2939                                         title=\"".__("Click to play")."\" status=\"0\"
2940                                         class=\"player\" audio-id=\"$id\">".__("Play")."</span>";
2941
2942                         } else {
2943
2944                                 $entry .= "<object type=\"application/x-shockwave-flash\"
2945                                         data=\"lib/button/musicplayer.swf?song_url=$url\"
2946                                         width=\"17\" height=\"17\" style='float : left; margin-right : 5px;'>
2947                                         <param name=\"movie\"
2948                                                 value=\"lib/button/musicplayer.swf?song_url=$url\" />
2949                                         </object>";
2950                         }
2951
2952                         if ($entry) $entry .= "&nbsp; <a target=\"_blank\"
2953                                 href=\"$url\">" . basename($url) . "</a>";
2954
2955                         return $entry;
2956
2957                 }
2958
2959                 return "";
2960
2961 /*              $filename = substr($url, strrpos($url, "/")+1);
2962
2963                 $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
2964                         $filename . " (" . $ctype . ")" . "</a>"; */
2965
2966         }
2967
2968         function format_article($link, $id, $mark_as_read = true, $zoom_mode = false, $owner_uid = false) {
2969                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2970
2971                 $rv = array();
2972
2973                 $rv['id'] = $id;
2974
2975                 /* we can figure out feed_id from article id anyway, why do we
2976                  * pass feed_id here? let's ignore the argument :( */
2977
2978                 $result = db_query($link, "SELECT feed_id FROM ttrss_user_entries
2979                         WHERE ref_id = '$id'");
2980
2981                 $feed_id = (int) db_fetch_result($result, 0, "feed_id");
2982
2983                 $rv['feed_id'] = $feed_id;
2984
2985                 //if (!$zoom_mode) { print "<article id='$id'><![CDATA["; };
2986
2987                 if ($mark_as_read) {
2988                         $result = db_query($link, "UPDATE ttrss_user_entries
2989                                 SET unread = false,last_read = NOW()
2990                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
2991
2992                         ccache_update($link, $feed_id, $owner_uid);
2993                 }
2994
2995                 $result = db_query($link, "SELECT id,title,link,content,feed_id,comments,int_id,
2996                         ".SUBSTRING_FOR_DATE."(updated,1,16) as updated,
2997                         (SELECT site_url FROM ttrss_feeds WHERE id = feed_id) as site_url,
2998                         (SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) as hide_images,
2999                         num_comments,
3000                         tag_cache,
3001                         author,
3002                         orig_feed_id,
3003                         note,
3004                         cached_content
3005                         FROM ttrss_entries,ttrss_user_entries
3006                         WHERE   id = '$id' AND ref_id = id AND owner_uid = $owner_uid");
3007
3008                 if ($result) {
3009
3010                         $line = db_fetch_assoc($result);
3011
3012                         $tag_cache = $line["tag_cache"];
3013
3014                         $line["tags"] = get_article_tags($link, $id, $owner_uid, $line["tag_cache"]);
3015                         unset($line["tag_cache"]);
3016
3017                         $line["content"] = sanitize($link, $line["content"], false, $owner_uid, $line["site_url"]);
3018
3019                         global $pluginhost;
3020
3021                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_RENDER_ARTICLE) as $p) {
3022                                 $line = $p->hook_render_article($line);
3023                         }
3024
3025                         $num_comments = $line["num_comments"];
3026                         $entry_comments = "";
3027
3028                         if ($num_comments > 0) {
3029                                 if ($line["comments"]) {
3030                                         $comments_url = htmlspecialchars($line["comments"]);
3031                                 } else {
3032                                         $comments_url = htmlspecialchars($line["link"]);
3033                                 }
3034                                 $entry_comments = "<a target='_blank' href=\"$comments_url\">$num_comments comments</a>";
3035                         } else {
3036                                 if ($line["comments"] && $line["link"] != $line["comments"]) {
3037                                         $entry_comments = "<a target='_blank' href=\"".htmlspecialchars($line["comments"])."\">comments</a>";
3038                                 }
3039                         }
3040
3041                         if ($zoom_mode) {
3042                                 header("Content-Type: text/html");
3043                                 $rv['content'] .= "<html><head>
3044                                                 <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"/>
3045                                                 <title>Tiny Tiny RSS - ".$line["title"]."</title>
3046                                                 <link rel=\"stylesheet\" type=\"text/css\" href=\"tt-rss.css\">
3047                                         </head><body id=\"ttrssZoom\">";
3048                         }
3049
3050                         $rv['content'] .= "<div class=\"postReply\" id=\"POST-$id\">";
3051
3052                         $rv['content'] .= "<div class=\"postHeader\" id=\"POSTHDR-$id\">";
3053
3054                         $entry_author = $line["author"];
3055
3056                         if ($entry_author) {
3057                                 $entry_author = __(" - ") . $entry_author;
3058                         }
3059
3060                         $parsed_updated = make_local_datetime($link, $line["updated"], true,
3061                                 $owner_uid, true);
3062
3063                         $rv['content'] .= "<div class=\"postDate\">$parsed_updated</div>";
3064
3065                         if ($line["link"]) {
3066                                 $rv['content'] .= "<div class='postTitle'><a target='_blank'
3067                                         title=\"".htmlspecialchars($line['title'])."\"
3068                                         href=\"" .
3069                                         htmlspecialchars($line["link"]) . "\">" .
3070                                         $line["title"] . "</a>" .
3071                                         "<span class='author'>$entry_author</span></div>";
3072                         } else {
3073                                 $rv['content'] .= "<div class='postTitle'>" . $line["title"] . "$entry_author</div>";
3074                         }
3075
3076                         $tags_str = format_tags_string($line["tags"], $id);
3077                         $tags_str_full = join(", ", $line["tags"]);
3078
3079                         if (!$tags_str_full) $tags_str_full = __("no tags");
3080
3081                         if (!$entry_comments) $entry_comments = "&nbsp;"; # placeholder
3082
3083                         $rv['content'] .= "<div class='postTags' style='float : right'>
3084                                 <img src='images/tag.png'
3085                                 class='tagsPic' alt='Tags' title='Tags'>&nbsp;";
3086
3087                         if (!$zoom_mode) {
3088                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>
3089                                         <a title=\"".__('Edit tags for this article')."\"
3090                                         href=\"#\" onclick=\"editArticleTags($id, $feed_id)\">(+)</a>";
3091
3092                                 $rv['content'] .= "<div dojoType=\"dijit.Tooltip\"
3093                                         id=\"ATSTRTIP-$id\" connectId=\"ATSTR-$id\"
3094                                         position=\"below\">$tags_str_full</div>";
3095
3096                                 global $pluginhost;
3097
3098                                 foreach ($pluginhost->get_hooks($pluginhost::HOOK_ARTICLE_BUTTON) as $p) {
3099                                         $rv['content'] .= $p->hook_article_button($line);
3100                                 }
3101
3102
3103                         } else {
3104                                 $tags_str = strip_tags($tags_str);
3105                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>";
3106                         }
3107                         $rv['content'] .= "</div>";
3108                         $rv['content'] .= "<div clear='both'>$entry_comments</div>";
3109
3110                         if ($line["orig_feed_id"]) {
3111
3112                                 $tmp_result = db_query($link, "SELECT * FROM ttrss_archived_feeds
3113                                         WHERE id = ".$line["orig_feed_id"]);
3114
3115                                 if (db_num_rows($tmp_result) != 0) {
3116
3117                                         $rv['content'] .= "<div clear='both'>";
3118                                         $rv['content'] .= __("Originally from:");
3119
3120                                         $rv['content'] .= "&nbsp;";
3121
3122                                         $tmp_line = db_fetch_assoc($tmp_result);
3123
3124                                         $rv['content'] .= "<a target='_blank'
3125                                                 href=' " . htmlspecialchars($tmp_line['site_url']) . "'>" .
3126                                                 $tmp_line['title'] . "</a>";
3127
3128                                         $rv['content'] .= "&nbsp;";
3129
3130                                         $rv['content'] .= "<a target='_blank' href='" . htmlspecialchars($tmp_line['feed_url']) . "'>";
3131                                         $rv['content'] .= "<img title='".__('Feed URL')."'class='tinyFeedIcon' src='images/pub_set.svg'></a>";
3132
3133                                         $rv['content'] .= "</div>";
3134                                 }
3135                         }
3136
3137                         $rv['content'] .= "</div>";
3138
3139                         $rv['content'] .= "<div id=\"POSTNOTE-$id\">";
3140                                 if ($line['note']) {
3141                                         $rv['content'] .= format_article_note($id, $line['note'], !$zoom_mode);
3142                                 }
3143                         $rv['content'] .= "</div>";
3144
3145                         $rv['content'] .= "<div class=\"postContent\">";
3146
3147                         $rv['content'] .= $line["content"];
3148
3149                         $rv['content'] .= format_article_enclosures($link, $id,
3150                                 $always_display_enclosures, $line["content"], $line["hide_images"]);
3151
3152                         $rv['content'] .= "</div>";
3153
3154                         $rv['content'] .= "</div>";
3155
3156                 }
3157
3158                 if ($zoom_mode) {
3159                         $rv['content'] .= "
3160                                 <div class='footer'>
3161                                 <button onclick=\"return window.close()\">".
3162                                         __("Close this window")."</button></div>";
3163                         $rv['content'] .= "</body></html>";
3164                 }
3165
3166                 return $rv;
3167
3168         }
3169
3170         function print_checkpoint($n, $s) {
3171                 $ts = microtime(true);
3172                 echo sprintf("<!-- CP[$n] %.4f seconds -->", $ts - $s);
3173                 return $ts;
3174         }
3175
3176         function sanitize_tag($tag) {
3177                 $tag = trim($tag);
3178
3179                 $tag = mb_strtolower($tag, 'utf-8');
3180
3181                 $tag = preg_replace('/[\'\"\+\>\<]/', "", $tag);
3182
3183 //              $tag = str_replace('"', "", $tag);
3184 //              $tag = str_replace("+", " ", $tag);
3185                 $tag = str_replace("technorati tag: ", "", $tag);
3186
3187                 return $tag;
3188         }
3189
3190         function get_self_url_prefix() {
3191                 if (strrpos(SELF_URL_PATH, "/") === strlen(SELF_URL_PATH)-1) {
3192                         return substr(SELF_URL_PATH, 0, strlen(SELF_URL_PATH)-1);
3193                 } else {
3194                         return SELF_URL_PATH;
3195                 }
3196         }
3197
3198         /**
3199          * Compute the Mozilla Firefox feed adding URL from server HOST and REQUEST_URI.
3200          *
3201          * @return string The Mozilla Firefox feed adding URL.
3202          */
3203         function add_feed_url() {
3204                 //$url_path = ($_SERVER['HTTPS'] != "on" ? 'http://' :  'https://') . $_SERVER["HTTP_HOST"] . parse_url($_SERVER["REQUEST_URI"], PHP_URL_PATH);
3205
3206                 $url_path = get_self_url_prefix() .
3207                         "/public.php?op=subscribe&feed_url=%s";
3208                 return $url_path;
3209         } // function add_feed_url
3210
3211         function encrypt_password($pass, $salt = '', $mode2 = false) {
3212                 if ($salt && $mode2) {
3213                         return "MODE2:" . hash('sha256', $salt . $pass);
3214                 } else if ($salt) {
3215                         return "SHA1X:" . sha1("$salt:$pass");
3216                 } else {
3217                         return "SHA1:" . sha1($pass);
3218                 }
3219         } // function encrypt_password
3220
3221         function load_filters($link, $feed_id, $owner_uid, $action_id = false) {
3222                 $filters = array();
3223
3224                 $cat_id = (int)getFeedCategory($link, $feed_id);
3225
3226                 $result = db_query($link, "SELECT * FROM ttrss_filters2 WHERE
3227                         owner_uid = $owner_uid AND enabled = true ORDER BY order_id, title");
3228
3229                 $check_cats = join(",", array_merge(
3230                         getParentCategories($link, $cat_id, $owner_uid),
3231                         array($cat_id)));
3232
3233                 while ($line = db_fetch_assoc($result)) {
3234                         $filter_id = $line["id"];
3235
3236                         $result2 = db_query($link, "SELECT
3237                                 r.reg_exp, r.inverse, r.feed_id, r.cat_id, r.cat_filter, t.name AS type_name
3238                                 FROM ttrss_filters2_rules AS r,
3239                                 ttrss_filter_types AS t
3240                                 WHERE
3241                                         (cat_id IS NULL OR cat_id IN ($check_cats)) AND
3242                                         (feed_id IS NULL OR feed_id = '$feed_id') AND
3243                                         filter_type = t.id AND filter_id = '$filter_id'");
3244
3245                         $rules = array();
3246                         $actions = array();
3247
3248                         while ($rule_line = db_fetch_assoc($result2)) {
3249 #                               print_r($rule_line);
3250
3251                                 $rule = array();
3252                                 $rule["reg_exp"] = $rule_line["reg_exp"];
3253                                 $rule["type"] = $rule_line["type_name"];
3254                                 $rule["inverse"] = sql_bool_to_bool($rule_line["inverse"]);
3255
3256                                 array_push($rules, $rule);
3257                         }
3258
3259                         $result2 = db_query($link, "SELECT a.action_param,t.name AS type_name
3260                                 FROM ttrss_filters2_actions AS a,
3261                                 ttrss_filter_actions AS t
3262                                 WHERE
3263                                         action_id = t.id AND filter_id = '$filter_id'");
3264
3265                         while ($action_line = db_fetch_assoc($result2)) {
3266 #                               print_r($action_line);
3267
3268                                 $action = array();
3269                                 $action["type"] = $action_line["type_name"];
3270                                 $action["param"] = $action_line["action_param"];
3271
3272                                 array_push($actions, $action);
3273                         }
3274
3275
3276                         $filter = array();
3277                         $filter["match_any_rule"] = sql_bool_to_bool($line["match_any_rule"]);
3278                         $filter["inverse"] = sql_bool_to_bool($line["inverse"]);
3279                         $filter["rules"] = $rules;
3280                         $filter["actions"] = $actions;
3281
3282                         if (count($rules) > 0 && count($actions) > 0) {
3283                                 array_push($filters, $filter);
3284                         }
3285                 }
3286
3287                 return $filters;
3288         }
3289
3290         function get_score_pic($score) {
3291                 if ($score > 100) {
3292                         return "score_high.png";
3293                 } else if ($score > 0) {
3294                         return "score_half_high.png";
3295                 } else if ($score < -100) {
3296                         return "score_low.png";
3297                 } else if ($score < 0) {
3298                         return "score_half_low.png";
3299                 } else {
3300                         return "score_neutral.png";
3301                 }
3302         }
3303
3304         function feed_has_icon($id) {
3305                 return is_file(ICONS_DIR . "/$id.ico") && filesize(ICONS_DIR . "/$id.ico") > 0;
3306         }
3307
3308         function init_connection($link) {
3309                 if ($link) {
3310
3311                         if (DB_TYPE == "pgsql") {
3312                                 pg_query($link, "set client_encoding = 'UTF-8'");
3313                                 pg_set_client_encoding("UNICODE");
3314                                 pg_query($link, "set datestyle = 'ISO, european'");
3315                                 pg_query($link, "set TIME ZONE 0");
3316                         } else {
3317                                 db_query($link, "SET time_zone = '+0:0'");
3318
3319                                 if (defined('MYSQL_CHARSET') && MYSQL_CHARSET) {
3320                                         db_query($link, "SET NAMES " . MYSQL_CHARSET);
3321                                 }
3322                         }
3323
3324                         global $pluginhost;
3325
3326                         $pluginhost = new PluginHost($link);
3327                         $pluginhost->load(PLUGINS, $pluginhost::KIND_ALL);
3328
3329                         return true;
3330                 } else {
3331                         print "Unable to connect to database:" . db_last_error();
3332                         return false;
3333                 }
3334         }
3335
3336         function format_tags_string($tags, $id) {
3337
3338                 $tags_str = "";
3339                 $tags_nolinks_str = "";
3340
3341                 $num_tags = 0;
3342
3343                 $tag_limit = 6;
3344
3345                 $formatted_tags = array();
3346
3347                 foreach ($tags as $tag) {
3348                         $num_tags++;
3349                         $tag_escaped = str_replace("'", "\\'", $tag);
3350
3351                         if (mb_strlen($tag) > 30) {
3352                                 $tag = truncate_string($tag, 30);
3353                         }
3354
3355                         $tag_str = "<a href=\"javascript:viewfeed('$tag_escaped')\">$tag</a>";
3356
3357                         array_push($formatted_tags, $tag_str);
3358
3359                         $tmp_tags_str = implode(", ", $formatted_tags);
3360
3361                         if ($num_tags == $tag_limit || mb_strlen($tmp_tags_str) > 150) {
3362                                 break;
3363                         }
3364                 }
3365
3366                 $tags_str = implode(", ", $formatted_tags);
3367
3368                 if ($num_tags < count($tags)) {
3369                         $tags_str .= ", &hellip;";
3370                 }
3371
3372                 if ($num_tags == 0) {
3373                         $tags_str = __("no tags");
3374                 }
3375
3376                 return $tags_str;
3377
3378         }
3379
3380         function format_article_labels($labels, $id) {
3381
3382                 $labels_str = "";
3383
3384                 foreach ($labels as $l) {
3385                         $labels_str .= sprintf("<span class='hlLabelRef'
3386                                 style='color : %s; background-color : %s'>%s</span>",
3387                                         $l[2], $l[3], $l[1]);
3388                         }
3389
3390                 return $labels_str;
3391
3392         }
3393
3394         function format_article_note($id, $note, $allow_edit = true) {
3395
3396                 $str = "<div class='articleNote'        onclick=\"editArticleNote($id)\">
3397                         <div class='noteEdit' onclick=\"editArticleNote($id)\">".
3398                         ($allow_edit ? __('(edit note)') : "")."</div>$note</div>";
3399
3400                 return $str;
3401         }
3402
3403
3404         function get_feed_category($link, $feed_cat, $parent_cat_id = false) {
3405                 if ($parent_cat_id) {
3406                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3407                         $parent_insert = "'$parent_cat_id'";
3408                 } else {
3409                         $parent_qpart = "parent_cat IS NULL";
3410                         $parent_insert = "NULL";
3411                 }
3412
3413                 $result = db_query($link,
3414                         "SELECT id FROM ttrss_feed_categories
3415                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3416
3417                 if (db_num_rows($result) == 0) {
3418                         return false;
3419                 } else {
3420                         return db_fetch_result($result, 0, "id");
3421                 }
3422         }
3423
3424         function add_feed_category($link, $feed_cat, $parent_cat_id = false) {
3425
3426                 if (!$feed_cat) return false;
3427
3428                 db_query($link, "BEGIN");
3429
3430                 if ($parent_cat_id) {
3431                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3432                         $parent_insert = "'$parent_cat_id'";
3433                 } else {
3434                         $parent_qpart = "parent_cat IS NULL";
3435                         $parent_insert = "NULL";
3436                 }
3437
3438                 $feed_cat = mb_substr($feed_cat, 0, 250);
3439
3440                 $result = db_query($link,
3441                         "SELECT id FROM ttrss_feed_categories
3442                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3443
3444                 if (db_num_rows($result) == 0) {
3445
3446                         $result = db_query($link,
3447                                 "INSERT INTO ttrss_feed_categories (owner_uid,title,parent_cat)
3448                                 VALUES ('".$_SESSION["uid"]."', '$feed_cat', $parent_insert)");
3449
3450                         db_query($link, "COMMIT");
3451
3452                         return true;
3453                 }
3454
3455                 return false;
3456         }
3457
3458         function getArticleFeed($link, $id) {
3459                 $result = db_query($link, "SELECT feed_id FROM ttrss_user_entries
3460                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
3461
3462                 if (db_num_rows($result) != 0) {
3463                         return db_fetch_result($result, 0, "feed_id");
3464                 } else {
3465                         return 0;
3466                 }
3467         }
3468
3469         /**
3470          * Fixes incomplete URLs by prepending "http://".
3471          * Also replaces feed:// with http://, and
3472          * prepends a trailing slash if the url is a domain name only.
3473          *
3474          * @param string $url Possibly incomplete URL
3475          *
3476          * @return string Fixed URL.
3477          */
3478         function fix_url($url) {
3479                 if (strpos($url, '://') === false) {
3480                         $url = 'http://' . $url;
3481                 } else if (substr($url, 0, 5) == 'feed:') {
3482                         $url = 'http:' . substr($url, 5);
3483                 }
3484
3485                 //prepend slash if the URL has no slash in it
3486                 // "http://www.example" -> "http://www.example/"
3487                 if (strpos($url, '/', strpos($url, ':') + 3) === false) {
3488                         $url .= '/';
3489                 }
3490
3491                 if ($url != "http:///")
3492                         return $url;
3493                 else
3494                         return '';
3495         }
3496
3497         function validate_feed_url($url) {
3498                 $parts = parse_url($url);
3499
3500                 return ($parts['scheme'] == 'http' || $parts['scheme'] == 'feed' || $parts['scheme'] == 'https');
3501
3502         }
3503
3504         function get_article_enclosures($link, $id) {
3505
3506                 $query = "SELECT * FROM ttrss_enclosures
3507                         WHERE post_id = '$id' AND content_url != ''";
3508
3509                 $rv = array();
3510
3511                 $result = db_query($link, $query);
3512
3513                 if (db_num_rows($result) > 0) {
3514                         while ($line = db_fetch_assoc($result)) {
3515                                 array_push($rv, $line);
3516                         }
3517                 }
3518
3519                 return $rv;
3520         }
3521
3522         function save_email_address($link, $email) {
3523                 // FIXME: implement persistent storage of emails
3524
3525                 if (!$_SESSION['stored_emails'])
3526                         $_SESSION['stored_emails'] = array();
3527
3528                 if (!in_array($email, $_SESSION['stored_emails']))
3529                         array_push($_SESSION['stored_emails'], $email);
3530         }
3531
3532
3533         function get_feed_access_key($link, $feed_id, $is_cat, $owner_uid = false) {
3534
3535                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3536
3537                 $sql_is_cat = bool_to_sql_bool($is_cat);
3538
3539                 $result = db_query($link, "SELECT access_key FROM ttrss_access_keys
3540                         WHERE feed_id = '$feed_id'      AND is_cat = $sql_is_cat
3541                         AND owner_uid = " . $owner_uid);
3542
3543                 if (db_num_rows($result) == 1) {
3544                         return db_fetch_result($result, 0, "access_key");
3545                 } else {
3546                         $key = db_escape_string($link, sha1(uniqid(rand(), true)));
3547
3548                         $result = db_query($link, "INSERT INTO ttrss_access_keys
3549                                 (access_key, feed_id, is_cat, owner_uid)
3550                                 VALUES ('$key', '$feed_id', $sql_is_cat, '$owner_uid')");
3551
3552                         return $key;
3553                 }
3554                 return false;
3555         }
3556
3557         function get_feeds_from_html($url, $content)
3558         {
3559                 $url     = fix_url($url);
3560                 $baseUrl = substr($url, 0, strrpos($url, '/') + 1);
3561
3562                 libxml_use_internal_errors(true);
3563
3564                 $doc = new DOMDocument();
3565                 $doc->loadHTML($content);
3566                 $xpath = new DOMXPath($doc);
3567                 $entries = $xpath->query('/html/head/link[@rel="alternate"]');
3568                 $feedUrls = array();
3569                 foreach ($entries as $entry) {
3570                         if ($entry->hasAttribute('href')) {
3571                                 $title = $entry->getAttribute('title');
3572                                 if ($title == '') {
3573                                         $title = $entry->getAttribute('type');
3574                                 }
3575                                 $feedUrl = rewrite_relative_url(
3576                                         $baseUrl, $entry->getAttribute('href')
3577                                 );
3578                                 $feedUrls[$feedUrl] = $title;
3579                         }
3580                 }
3581                 return $feedUrls;
3582         }
3583
3584         function is_html($content) {
3585                 return preg_match("/<html|DOCTYPE html/i", substr($content, 0, 20)) !== 0;
3586         }
3587
3588         function url_is_html($url, $login = false, $pass = false) {
3589                 return is_html(fetch_file_contents($url, false, $login, $pass));
3590         }
3591
3592         function print_label_select($link, $name, $value, $attributes = "") {
3593
3594                 $result = db_query($link, "SELECT caption FROM ttrss_labels2
3595                         WHERE owner_uid = '".$_SESSION["uid"]."' ORDER BY caption");
3596
3597                 print "<select default=\"$value\" name=\"" . htmlspecialchars($name) .
3598                         "\" $attributes onchange=\"labelSelectOnChange(this)\" >";
3599
3600                 while ($line = db_fetch_assoc($result)) {
3601
3602                         $issel = ($line["caption"] == $value) ? "selected=\"1\"" : "";
3603
3604                         print "<option value=\"".htmlspecialchars($line["caption"])."\"
3605                                 $issel>" . htmlspecialchars($line["caption"]) . "</option>";
3606
3607                 }
3608
3609 #               print "<option value=\"ADD_LABEL\">" .__("Add label...") . "</option>";
3610
3611                 print "</select>";
3612
3613
3614         }
3615
3616         function format_article_enclosures($link, $id, $always_display_enclosures,
3617                                         $article_content, $hide_images = false) {
3618
3619                 $result = get_article_enclosures($link, $id);
3620                 $rv = '';
3621
3622                 if (count($result) > 0) {
3623
3624                         $entries_html = array();
3625                         $entries = array();
3626                         $entries_inline = array();
3627
3628                         foreach ($result as $line) {
3629
3630                                 $url = $line["content_url"];
3631                                 $ctype = $line["content_type"];
3632
3633                                 if (!$ctype) $ctype = __("unknown type");
3634
3635                                 $filename = substr($url, strrpos($url, "/")+1);
3636
3637                                 $player = format_inline_player($link, $url, $ctype);
3638
3639                                 if ($player) array_push($entries_inline, $player);
3640
3641 #                               $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
3642 #                                       $filename . " (" . $ctype . ")" . "</a>";
3643
3644                                 $entry = "<div onclick=\"window.open('".htmlspecialchars($url)."')\"
3645                                         dojoType=\"dijit.MenuItem\">$filename ($ctype)</div>";
3646
3647                                 array_push($entries_html, $entry);
3648
3649                                 $entry = array();
3650
3651                                 $entry["type"] = $ctype;
3652                                 $entry["filename"] = $filename;
3653                                 $entry["url"] = $url;
3654
3655                                 array_push($entries, $entry);
3656                         }
3657
3658                         if ($_SESSION['uid'] && !get_pref($link, "STRIP_IMAGES") && !$_SESSION["bw_limit"]) {
3659                                 if ($always_display_enclosures ||
3660                                                         !preg_match("/<img/i", $article_content)) {
3661
3662                                         foreach ($entries as $entry) {
3663
3664                                                 if (preg_match("/image/", $entry["type"]) ||
3665                                                                 preg_match("/\.(jpg|png|gif|bmp)/i", $entry["filename"])) {
3666
3667                                                                 if (!$hide_images) {
3668                                                                         $rv .= "<p><img
3669                                                                         alt=\"".htmlspecialchars($entry["filename"])."\"
3670                                                                         src=\"" .htmlspecialchars($entry["url"]) . "\"/></p>";
3671                                                                 } else {
3672                                                                         $rv .= "<p><a target=\"_blank\"
3673                                                                         href=\"".htmlspecialchars($entry["url"])."\"
3674                                                                         >" .htmlspecialchars($entry["url"]) . "</a></p>";
3675
3676                                                                 }
3677                                                 }
3678                                         }
3679                                 }
3680                         }
3681
3682                         if (count($entries_inline) > 0) {
3683                                 $rv .= "<hr clear='both'/>";
3684                                 foreach ($entries_inline as $entry) { $rv .= $entry; };
3685                                 $rv .= "<hr clear='both'/>";
3686                         }
3687
3688                         $rv .= "<select class=\"attachments\" onchange=\"openSelectedAttachment(this)\">".
3689                                 "<option value=''>" . __('Attachments')."</option>";
3690
3691                         foreach ($entries as $entry) {
3692                                 $rv .= "<option value=\"".htmlspecialchars($entry["url"])."\">" . htmlspecialchars($entry["filename"]) . "</option>";
3693
3694                         };
3695
3696                         $rv .= "</select>";
3697                 }
3698
3699                 return $rv;
3700         }
3701
3702         function getLastArticleId($link) {
3703                 $result = db_query($link, "SELECT MAX(ref_id) AS id FROM ttrss_user_entries
3704                         WHERE owner_uid = " . $_SESSION["uid"]);
3705
3706                 if (db_num_rows($result) == 1) {
3707                         return db_fetch_result($result, 0, "id");
3708                 } else {
3709                         return -1;
3710                 }
3711         }
3712
3713         function build_url($parts) {
3714                 return $parts['scheme'] . "://" . $parts['host'] . $parts['path'];
3715         }
3716
3717         /**
3718          * Converts a (possibly) relative URL to a absolute one.
3719          *
3720          * @param string $url     Base URL (i.e. from where the document is)
3721          * @param string $rel_url Possibly relative URL in the document
3722          *
3723          * @return string Absolute URL
3724          */
3725         function rewrite_relative_url($url, $rel_url) {
3726                 if (strpos($rel_url, "magnet:") === 0) {
3727                         return $rel_url;
3728                 } else if (strpos($rel_url, "://") !== false) {
3729                         return $rel_url;
3730                 } else if (strpos($rel_url, "//") === 0) {
3731                         # protocol-relative URL (rare but they exist)
3732                         return $rel_url;
3733                 } else if (strpos($rel_url, "/") === 0)
3734                 {
3735                         $parts = parse_url($url);
3736                         $parts['path'] = $rel_url;
3737
3738                         return build_url($parts);
3739
3740                 } else {
3741                         $parts = parse_url($url);
3742                         if (!isset($parts['path'])) {
3743                                 $parts['path'] = '/';
3744                         }
3745                         $dir = $parts['path'];
3746                         if (substr($dir, -1) !== '/') {
3747                                 $dir = dirname($parts['path']);
3748                                 $dir !== '/' && $dir .= '/';
3749                         }
3750                         $parts['path'] = $dir . $rel_url;
3751
3752                         return build_url($parts);
3753                 }
3754         }
3755
3756         function sphinx_search($query, $offset = 0, $limit = 30) {
3757                 require_once 'lib/sphinxapi.php';
3758
3759                 $sphinxClient = new SphinxClient();
3760
3761                 $sphinxClient->SetServer('localhost', 9312);
3762                 $sphinxClient->SetConnectTimeout(1);
3763
3764                 $sphinxClient->SetFieldWeights(array('title' => 70, 'content' => 30,
3765                         'feed_title' => 20));
3766
3767                 $sphinxClient->SetMatchMode(SPH_MATCH_EXTENDED2);
3768                 $sphinxClient->SetRankingMode(SPH_RANK_PROXIMITY_BM25);
3769                 $sphinxClient->SetLimits($offset, $limit, 1000);
3770                 $sphinxClient->SetArrayResult(false);
3771                 $sphinxClient->SetFilter('owner_uid', array($_SESSION['uid']));
3772
3773                 $result = $sphinxClient->Query($query, SPHINX_INDEX);
3774
3775                 $ids = array();
3776
3777                 if (is_array($result['matches'])) {
3778                         foreach (array_keys($result['matches']) as $int_id) {
3779                                 $ref_id = $result['matches'][$int_id]['attrs']['ref_id'];
3780                                 array_push($ids, $ref_id);
3781                         }
3782                 }
3783
3784                 return $ids;
3785         }
3786
3787         function cleanup_tags($link, $days = 14, $limit = 1000) {
3788
3789                 if (DB_TYPE == "pgsql") {
3790                         $interval_query = "date_updated < NOW() - INTERVAL '$days days'";
3791                 } else if (DB_TYPE == "mysql") {
3792                         $interval_query = "date_updated < DATE_SUB(NOW(), INTERVAL $days DAY)";
3793                 }
3794
3795                 $tags_deleted = 0;
3796
3797                 while ($limit > 0) {
3798                         $limit_part = 500;
3799
3800                         $query = "SELECT ttrss_tags.id AS id
3801                                 FROM ttrss_tags, ttrss_user_entries, ttrss_entries
3802                                 WHERE post_int_id = int_id AND $interval_query AND
3803                                 ref_id = ttrss_entries.id AND tag_cache != '' LIMIT $limit_part";
3804
3805                         $result = db_query($link, $query);
3806
3807                         $ids = array();
3808
3809                         while ($line = db_fetch_assoc($result)) {
3810                                 array_push($ids, $line['id']);
3811                         }
3812
3813                         if (count($ids) > 0) {
3814                                 $ids = join(",", $ids);
3815
3816                                 $tmp_result = db_query($link, "DELETE FROM ttrss_tags WHERE id IN ($ids)");
3817                                 $tags_deleted += db_affected_rows($link, $tmp_result);
3818                         } else {
3819                                 break;
3820                         }
3821
3822                         $limit -= $limit_part;
3823                 }
3824
3825                 return $tags_deleted;
3826         }
3827
3828         function print_user_stylesheet($link) {
3829                 $value = get_pref($link, 'USER_STYLESHEET');
3830
3831                 if ($value) {
3832                         print "<style type=\"text/css\">";
3833                         print str_replace("<br/>", "\n", $value);
3834                         print "</style>";
3835                 }
3836
3837         }
3838
3839         function rewrite_urls($html) {
3840                 libxml_use_internal_errors(true);
3841
3842                 $charset_hack = '<head>
3843                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
3844                 </head>';
3845
3846                 $doc = new DOMDocument();
3847                 $doc->loadHTML($charset_hack . $html);
3848                 $xpath = new DOMXPath($doc);
3849
3850                 $entries = $xpath->query('//*/text()');
3851
3852                 foreach ($entries as $entry) {
3853                         if (strstr($entry->wholeText, "://") !== false) {
3854                                 $text = preg_replace("/((?<!=.)((http|https|ftp)+):\/\/[^ ,!]+)/i",
3855                                         "<a target=\"_blank\" href=\"\\1\">\\1</a>", $entry->wholeText);
3856
3857                                 if ($text != $entry->wholeText) {
3858                                         $cdoc = new DOMDocument();
3859                                         $cdoc->loadHTML($charset_hack . $text);
3860
3861
3862                                         foreach ($cdoc->childNodes as $cnode) {
3863                                                 $cnode = $doc->importNode($cnode, true);
3864
3865                                                 if ($cnode) {
3866                                                         $entry->parentNode->insertBefore($cnode);
3867                                                 }
3868                                         }
3869
3870                                         $entry->parentNode->removeChild($entry);
3871
3872                                 }
3873                         }
3874                 }
3875
3876                 $node = $doc->getElementsByTagName('body')->item(0);
3877
3878                 // http://tt-rss.org/forum/viewtopic.php?f=1&t=970
3879                 if ($node)
3880                         return $doc->saveXML($node);
3881                 else
3882                         return $html;
3883         }
3884
3885         function filter_to_sql($link, $filter, $owner_uid) {
3886                 $query = array();
3887
3888                 if (DB_TYPE == "pgsql")
3889                         $reg_qpart = "~";
3890                 else
3891                         $reg_qpart = "REGEXP";
3892
3893                 foreach ($filter["rules"] AS $rule) {
3894                         $regexp_valid = preg_match('/' . $rule['reg_exp'] . '/',
3895                                 $rule['reg_exp']) !== FALSE;
3896
3897                         if ($regexp_valid) {
3898
3899                                 $rule['reg_exp'] = db_escape_string($link, $rule['reg_exp']);
3900
3901                                         switch ($rule["type"]) {
3902                                         case "title":
3903                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
3904                                                         $rule['reg_exp'] . "')";
3905                                                 break;
3906                                         case "content":
3907                                                 $qpart = "LOWER(ttrss_entries.content) $reg_qpart LOWER('".
3908                                                         $rule['reg_exp'] . "')";
3909                                                 break;
3910                                         case "both":
3911                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
3912                                                         $rule['reg_exp'] . "') OR LOWER(" .
3913                                                         "ttrss_entries.content) $reg_qpart LOWER('" . $rule['reg_exp'] . "')";
3914                                                 break;
3915                                         case "tag":
3916                                                 $qpart = "LOWER(ttrss_user_entries.tag_cache) $reg_qpart LOWER('".
3917                                                         $rule['reg_exp'] . "')";
3918                                                 break;
3919                                         case "link":
3920                                                 $qpart = "LOWER(ttrss_entries.link) $reg_qpart LOWER('".
3921                                                         $rule['reg_exp'] . "')";
3922                                                 break;
3923                                         case "author":
3924                                                 $qpart = "LOWER(ttrss_entries.author) $reg_qpart LOWER('".
3925                                                         $rule['reg_exp'] . "')";
3926                                                 break;
3927                                 }
3928
3929                                 if (isset($rule['inverse'])) $qpart = "NOT ($qpart)";
3930
3931                                 if (isset($rule["feed_id"]) && $rule["feed_id"] > 0) {
3932                                         $qpart .= " AND feed_id = " . db_escape_string($link, $rule["feed_id"]);
3933                                 }
3934
3935                                 if (isset($rule["cat_id"])) {
3936
3937                                         if ($rule["cat_id"] > 0) {
3938                                                 $children = getChildCategories($link, $rule["cat_id"], $owner_uid);
3939                                                 array_push($children, $rule["cat_id"]);
3940
3941                                                 $children = join(",", $children);
3942
3943                                                 $cat_qpart = "cat_id IN ($children)";
3944                                         } else {
3945                                                 $cat_qpart = "cat_id IS NULL";
3946                                         }
3947
3948                                         $qpart .= " AND $cat_qpart";
3949                                 }
3950
3951                                 array_push($query, "($qpart)");
3952
3953                         }
3954                 }
3955
3956                 if (count($query) > 0) {
3957                         $fullquery = "(" . join($filter["match_any_rule"] ? "OR" : "AND", $query) . ")";
3958                 } else {
3959                         $fullquery = "(false)";
3960                 }
3961
3962                 if ($filter['inverse']) $fullquery = "(NOT $fullquery)";
3963
3964                 return $fullquery;
3965         }
3966
3967         if (!function_exists('gzdecode')) {
3968                 function gzdecode($string) { // no support for 2nd argument
3969                         return file_get_contents('compress.zlib://data:who/cares;base64,'.
3970                                 base64_encode($string));
3971                 }
3972         }
3973
3974         function get_random_bytes($length) {
3975                 if (function_exists('openssl_random_pseudo_bytes')) {
3976                         return openssl_random_pseudo_bytes($length);
3977                 } else {
3978                         $output = "";
3979
3980                         for ($i = 0; $i < $length; $i++)
3981                                 $output .= chr(mt_rand(0, 255));
3982
3983                         return $output;
3984                 }
3985         }
3986
3987         function read_stdin() {
3988                 $fp = fopen("php://stdin", "r");
3989
3990                 if ($fp) {
3991                         $line = trim(fgets($fp));
3992                         fclose($fp);
3993                         return $line;
3994                 }
3995
3996                 return null;
3997         }
3998
3999         function tmpdirname($path, $prefix) {
4000                 // Use PHP's tmpfile function to create a temporary
4001                 // directory name. Delete the file and keep the name.
4002                 $tempname = tempnam($path,$prefix);
4003                 if (!$tempname)
4004                         return false;
4005
4006                 if (!unlink($tempname))
4007                         return false;
4008
4009        return $tempname;
4010         }
4011
4012         function getFeedCategory($link, $feed) {
4013                 $result = db_query($link, "SELECT cat_id FROM ttrss_feeds
4014                         WHERE id = '$feed'");
4015
4016                 if (db_num_rows($result) > 0) {
4017                         return db_fetch_result($result, 0, "cat_id");
4018                 } else {
4019                         return false;
4020                 }
4021
4022         }
4023
4024         function implements_interface($class, $interface) {
4025                 return in_array($interface, class_implements($class));
4026         }
4027
4028         function geturl($url){
4029
4030                 (function_exists('curl_init')) ? '' : die('cURL Must be installed for geturl function to work. Ask your host to enable it or uncomment extension=php_curl.dll in php.ini');
4031
4032                 $curl = curl_init();
4033                 $header[0] = "Accept: text/xml,application/xml,application/xhtml+xml,";
4034                 $header[0] .= "text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5";
4035                 $header[] = "Cache-Control: max-age=0";
4036                 $header[] = "Connection: keep-alive";
4037                 $header[] = "Keep-Alive: 300";
4038                 $header[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
4039                 $header[] = "Accept-Language: en-us,en;q=0.5";
4040                 $header[] = "Pragma: ";
4041
4042                 curl_setopt($curl, CURLOPT_URL, $url);
4043                 curl_setopt($curl, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 5.1; rv:5.0) Gecko/20100101 Firefox/5.0 Firefox/5.0');
4044                 curl_setopt($curl, CURLOPT_HTTPHEADER, $header);
4045                 curl_setopt($curl, CURLOPT_HEADER, true);
4046                 curl_setopt($curl, CURLOPT_REFERER, $url);
4047                 curl_setopt($curl, CURLOPT_ENCODING, 'gzip,deflate');
4048                 curl_setopt($curl, CURLOPT_AUTOREFERER, true);
4049                 curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
4050                 //curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true); //CURLOPT_FOLLOWLOCATION Disabled...
4051                 curl_setopt($curl, CURLOPT_TIMEOUT, 60);
4052
4053                 $html = curl_exec($curl);
4054
4055                 $status = curl_getinfo($curl);
4056                 curl_close($curl);
4057
4058                 if($status['http_code']!=200){
4059                         if($status['http_code'] == 301 || $status['http_code'] == 302) {
4060                                 list($header) = explode("\r\n\r\n", $html, 2);
4061                                 $matches = array();
4062                                 preg_match("/(Location:|URI:)[^(\n)]*/", $header, $matches);
4063                                 $url = trim(str_replace($matches[1],"",$matches[0]));
4064                                 $url_parsed = parse_url($url);
4065                                 return (isset($url_parsed))? geturl($url, $referer):'';
4066                         }
4067                         $oline='';
4068                         foreach($status as $key=>$eline){$oline.='['.$key.']'.$eline.' ';}
4069                         $line =$oline." \r\n ".$url."\r\n-----------------\r\n";
4070 #                       $handle = @fopen('./curl.error.log', 'a');
4071 #                       fwrite($handle, $line);
4072                         return FALSE;
4073                 }
4074                 return $url;
4075         }
4076
4077         function get_minified_js($files) {
4078                 require_once 'lib/jshrink/Minifier.php';
4079
4080                 $rv = '';
4081
4082                 foreach ($files as $js) {
4083                         if (!isset($_GET['debug'])) {
4084                                 $cached_file = CACHE_DIR . "/js/$js.js";
4085
4086                                 if (file_exists($cached_file) &&
4087                                                 is_readable($cached_file) &&
4088                                                 filemtime($cached_file) >= filemtime("js/$js.js")) {
4089
4090                                         $rv .= file_get_contents($cached_file);
4091
4092                                 } else {
4093                                         $minified = JShrink\Minifier::minify(file_get_contents("js/$js.js"));
4094                                         file_put_contents($cached_file, $minified);
4095                                         $rv .= $minified;
4096                                 }
4097                         } else {
4098                                 $rv .= file_get_contents("js/$js.js");
4099                         }
4100                 }
4101
4102                 return $rv;
4103         }
4104
4105         function stylesheet_tag($filename) {
4106                 $timestamp = filemtime($filename);
4107
4108                 echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"$filename?$timestamp\"/>\n";
4109         }
4110
4111         function javascript_tag($filename) {
4112                 $query = "";
4113
4114                 if (!(strpos($filename, "?") === FALSE)) {
4115                         $query = substr($filename, strpos($filename, "?")+1);
4116                         $filename = substr($filename, 0, strpos($filename, "?"));
4117                 }
4118
4119                 $timestamp = filemtime($filename);
4120
4121                 if ($query) $timestamp .= "&$query";
4122
4123                 echo "<script type=\"text/javascript\" charset=\"utf-8\" src=\"$filename?$timestamp\"></script>\n";
4124         }
4125
4126         function calculate_dep_timestamp() {
4127                 $files = array_merge(glob("js/*.js"), glob("*.css"));
4128
4129                 $max_ts = -1;
4130
4131                 foreach ($files as $file) {
4132                         if (filemtime($file) > $max_ts) $max_ts = filemtime($file);
4133                 }
4134
4135                 return $max_ts;
4136         }
4137
4138         function T_js_decl($s1, $s2) {
4139                 if ($s1 && $s2) {
4140                         $s1 = preg_replace("/\n/", "", $s1);
4141                         $s2 = preg_replace("/\n/", "", $s2);
4142
4143                         $s1 = preg_replace("/\"/", "\\\"", $s1);
4144                         $s2 = preg_replace("/\"/", "\\\"", $s2);
4145
4146                         return "T_messages[\"$s1\"] = \"$s2\";\n";
4147                 }
4148         }
4149
4150         function init_js_translations() {
4151
4152         print 'var T_messages = new Object();
4153
4154                 function __(msg) {
4155                         if (T_messages[msg]) {
4156                                 return T_messages[msg];
4157                         } else {
4158                                 return msg;
4159                         }
4160                 }
4161
4162                 function ngettext(msg1, msg2, n) {
4163                         return (parseInt(n) > 1) ? msg2 : msg1;
4164                 }';
4165
4166                 $l10n = _get_reader();
4167
4168                 for ($i = 0; $i < $l10n->total; $i++) {
4169                         $orig = $l10n->get_original_string($i);
4170                         $translation = __($orig);
4171
4172                         print T_js_decl($orig, $translation);
4173                 }
4174         }
4175
4176         function label_to_feed_id($label) {
4177                 return LABEL_BASE_INDEX - 1 - abs($label);
4178         }
4179
4180         function feed_to_label_id($feed) {
4181                 return LABEL_BASE_INDEX - 1 + abs($feed);
4182         }
4183
4184 ?>