include/functions.php

   1 <?php
   2         define('EXPECTED_CONFIG_VERSION', 26);
   3         define('SCHEMA_VERSION', 106);
   4
   5         $fetch_last_error = false;
   6         $pluginhost = false;
   7
   8         function __autoload($class) {
   9                 $class_file = str_replace("_", "/", strtolower(basename($class)));
  10
  11                 $file = dirname(__FILE__)."/../classes/$class_file.php";
  12
  13                 if (file_exists($file)) {
  14                         require $file;
  15                 }
  16
  17         }
  18
  19         mb_internal_encoding("UTF-8");
  20         date_default_timezone_set('UTC');
  21         if (defined('E_DEPRECATED')) {
  22                 error_reporting(E_ALL & ~E_NOTICE & ~E_DEPRECATED);
  23         } else {
  24                 error_reporting(E_ALL & ~E_NOTICE);
  25         }
  26
  27         require_once 'config.php';
  28
  29         if (DB_TYPE == "pgsql") {
  30                 define('SUBSTRING_FOR_DATE', 'SUBSTRING_FOR_DATE');
  31         } else {
  32                 define('SUBSTRING_FOR_DATE', 'SUBSTRING');
  33         }
  34
  35         define('THEME_VERSION_REQUIRED', 1.1);
  36
  37         /**
  38          * Return available translations names.
  39          *
  40          * @access public
  41          * @return array A array of available translations.
  42          */
  43         function get_translations() {
  44                 $tr = array(
  45                                         "auto"  => "Detect automatically",
  46                                         "ca_CA" => "Català",
  47                                         "cs_CZ" => "Česky",
  48                                         "en_US" => "English",
  49                                         "es_ES" => "Español",
  50                                         "de_DE" => "Deutsch",
  51                                         "fr_FR" => "Français",
  52                                         "hu_HU" => "Magyar (Hungarian)",
  53                                         "it_IT" => "Italiano",
  54                                         "ja_JP" => "日本語 (Japanese)",
  55                                         "lv_LV" => "Latviešu",
  56                                         "nb_NO" => "Norwegian bokmål",
  57                                         "pl_PL" => "Polski",
  58                                         "ru_RU" => "Русский",
  59                                         "pt_BR" => "Portuguese/Brazil",
  60                                         "zh_CN" => "Simplified Chinese");
  61
  62                 return $tr;
  63         }
  64
  65         require_once "lib/accept-to-gettext.php";
  66         require_once "lib/gettext/gettext.inc";
  67
  68
  69         function startup_gettext() {
  70
  71                 # Get locale from Accept-Language header
  72                 $lang = al2gt(array_keys(get_translations()), "text/html");
  73
  74                 if (defined('_TRANSLATION_OVERRIDE_DEFAULT')) {
  75                         $lang = _TRANSLATION_OVERRIDE_DEFAULT;
  76                 }
  77
  78                 /* In login action of mobile version */
  79                 if ($_POST["language"] && defined('MOBILE_VERSION')) {
  80                         $lang = $_POST["language"];
  81                 } else if ($_SESSION["language"] && $_SESSION["language"] != "auto") {
  82                         $lang = $_SESSION["language"];
  83                 }
  84
  85                 if ($lang) {
  86                         if (defined('LC_MESSAGES')) {
  87                                 _setlocale(LC_MESSAGES, $lang);
  88                         } else if (defined('LC_ALL')) {
  89                                 _setlocale(LC_ALL, $lang);
  90                         }
  91
  92                         if (defined('MOBILE_VERSION')) {
  93                                 _bindtextdomain("messages", "../locale");
  94                         } else {
  95                                 _bindtextdomain("messages", "locale");
  96                         }
  97
  98                         _textdomain("messages");
  99                         _bind_textdomain_codeset("messages", "UTF-8");
 100                 }
 101         }
 102
 103         startup_gettext();
 104
 105         require_once 'db-prefs.php';
 106         require_once 'version.php';
 107         require_once 'ccache.php';
 108         require_once 'labels.php';
 109
 110         define('SELF_USER_AGENT', 'Tiny Tiny RSS/' . VERSION . ' (http://tt-rss.org/)');
 111         ini_set('user_agent', SELF_USER_AGENT);
 112
 113         require_once 'lib/pubsubhubbub/publisher.php';
 114
 115         $tz_offset = -1;
 116         $utc_tz = new DateTimeZone('UTC');
 117         $schema_version = false;
 118
 119         /**
 120          * Print a timestamped debug message.
 121          *
 122          * @param string $msg The debug message.
 123          * @return void
 124          */
 125         function _debug($msg) {
 126                 $ts = strftime("%H:%M:%S", time());
 127                 if (function_exists('posix_getpid')) {
 128                         $ts = "$ts/" . posix_getpid();
 129                 }
 130
 131                 if (!(defined('QUIET') && QUIET)) {
 132                         print "[$ts] $msg\n";
 133                 }
 134
 135                 if (defined('LOGFILE'))  {
 136                         $fp = fopen(LOGFILE, 'a+');
 137
 138                         if ($fp) {
 139                                 fputs($fp, "[$ts] $msg\n");
 140                                 fclose($fp);
 141                         }
 142                 }
 143
 144         } // function _debug
 145
 146         /**
 147          * Purge a feed old posts.
 148          *
 149          * @param mixed $link A database connection.
 150          * @param mixed $feed_id The id of the purged feed.
 151          * @param mixed $purge_interval Olderness of purged posts.
 152          * @param boolean $debug Set to True to enable the debug. False by default.
 153          * @access public
 154          * @return void
 155          */
 156         function purge_feed($link, $feed_id, $purge_interval, $debug = false) {
 157
 158                 if (!$purge_interval) $purge_interval = feed_purge_interval($link, $feed_id);
 159
 160                 $rows = -1;
 161
 162                 $result = db_query($link,
 163                         "SELECT owner_uid FROM ttrss_feeds WHERE id = '$feed_id'");
 164
 165                 $owner_uid = false;
 166
 167                 if (db_num_rows($result) == 1) {
 168                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 169                 }
 170
 171                 if ($purge_interval == -1 || !$purge_interval) {
 172                         if ($owner_uid) {
 173                                 ccache_update($link, $feed_id, $owner_uid);
 174                         }
 175                         return;
 176                 }
 177
 178                 if (!$owner_uid) return;
 179
 180                 if (FORCE_ARTICLE_PURGE == 0) {
 181                         $purge_unread = get_pref($link, "PURGE_UNREAD_ARTICLES",
 182                                 $owner_uid, false);
 183                 } else {
 184                         $purge_unread = true;
 185                         $purge_interval = FORCE_ARTICLE_PURGE;
 186                 }
 187
 188                 if (!$purge_unread) $query_limit = " unread = false AND ";
 189
 190                 if (DB_TYPE == "pgsql") {
 191                         $pg_version = get_pgsql_version($link);
 192
 193                         if (preg_match("/^7\./", $pg_version) || preg_match("/^8\.0/", $pg_version)) {
 194
 195                                 $result = db_query($link, "DELETE FROM ttrss_user_entries WHERE
 196                                         ttrss_entries.id = ref_id AND
 197                                         marked = false AND
 198                                         feed_id = '$feed_id' AND
 199                                         $query_limit
 200                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 201
 202                         } else {
 203
 204                                 $result = db_query($link, "DELETE FROM ttrss_user_entries
 205                                         USING ttrss_entries
 206                                         WHERE ttrss_entries.id = ref_id AND
 207                                         marked = false AND
 208                                         feed_id = '$feed_id' AND
 209                                         $query_limit
 210                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 211                         }
 212
 213                         $rows = pg_affected_rows($result);
 214
 215                 } else {
 216
 217 /*                      $result = db_query($link, "DELETE FROM ttrss_user_entries WHERE
 218                                 marked = false AND feed_id = '$feed_id' AND
 219                                 (SELECT date_updated FROM ttrss_entries WHERE
 220                                         id = ref_id) < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)"); */
 221
 222                         $result = db_query($link, "DELETE FROM ttrss_user_entries
 223                                 USING ttrss_user_entries, ttrss_entries
 224                                 WHERE ttrss_entries.id = ref_id AND
 225                                 marked = false AND
 226                                 feed_id = '$feed_id' AND
 227                                 $query_limit
 228                                 ttrss_entries.date_updated < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)");
 229
 230                         $rows = mysql_affected_rows($link);
 231
 232                 }
 233
 234                 ccache_update($link, $feed_id, $owner_uid);
 235
 236                 if ($debug) {
 237                         _debug("Purged feed $feed_id ($purge_interval): deleted $rows articles");
 238                 }
 239
 240                 return $rows;
 241         } // function purge_feed
 242
 243         function feed_purge_interval($link, $feed_id) {
 244
 245                 $result = db_query($link, "SELECT purge_interval, owner_uid FROM ttrss_feeds
 246                         WHERE id = '$feed_id'");
 247
 248                 if (db_num_rows($result) == 1) {
 249                         $purge_interval = db_fetch_result($result, 0, "purge_interval");
 250                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 251
 252                         if ($purge_interval == 0) $purge_interval = get_pref($link,
 253                                 'PURGE_OLD_DAYS', $owner_uid);
 254
 255                         return $purge_interval;
 256
 257                 } else {
 258                         return -1;
 259                 }
 260         }
 261
 262         function purge_orphans($link, $do_output = false) {
 263
 264                 // purge orphaned posts in main content table
 265                 $result = db_query($link, "DELETE FROM ttrss_entries WHERE
 266                         (SELECT COUNT(int_id) FROM ttrss_user_entries WHERE ref_id = id) = 0");
 267
 268                 if ($do_output) {
 269                         $rows = db_affected_rows($link, $result);
 270                         _debug("Purged $rows orphaned posts.");
 271                 }
 272         }
 273
 274         function get_feed_update_interval($link, $feed_id) {
 275                 $result = db_query($link, "SELECT owner_uid, update_interval FROM
 276                         ttrss_feeds WHERE id = '$feed_id'");
 277
 278                 if (db_num_rows($result) == 1) {
 279                         $update_interval = db_fetch_result($result, 0, "update_interval");
 280                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 281
 282                         if ($update_interval != 0) {
 283                                 return $update_interval;
 284                         } else {
 285                                 return get_pref($link, 'DEFAULT_UPDATE_INTERVAL', $owner_uid, false);
 286                         }
 287
 288                 } else {
 289                         return -1;
 290                 }
 291         }
 292
 293         function fetch_file_contents($url, $type = false, $login = false, $pass = false, $post_query = false, $timeout = false) {
 294                 $login = urlencode($login);
 295                 $pass = urlencode($pass);
 296
 297                 global $fetch_last_error;
 298
 299                 if (function_exists('curl_init') && !ini_get("open_basedir")) {
 300
 301                         if (ini_get("safe_mode")) {
 302                                 $ch = curl_init(geturl($url));
 303                         } else {
 304                                 $ch = curl_init($url);
 305                         }
 306
 307                         curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, $timeout ? $timeout : 15);
 308                         curl_setopt($ch, CURLOPT_TIMEOUT, $timeout ? $timeout : 45);
 309                         curl_setopt($ch, CURLOPT_FOLLOWLOCATION, !ini_get("safe_mode"));
 310                         curl_setopt($ch, CURLOPT_MAXREDIRS, 20);
 311                         curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
 312                         curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
 313                         curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
 314                         curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_ANY);
 315                         curl_setopt($ch, CURLOPT_USERAGENT, SELF_USER_AGENT);
 316                         curl_setopt($ch, CURLOPT_ENCODING , "gzip");
 317                         curl_setopt($ch, CURLOPT_REFERER, $url);
 318
 319                         if ($post_query) {
 320                                 curl_setopt($ch, CURLOPT_POST, true);
 321                                 curl_setopt($ch, CURLOPT_POSTFIELDS, $post_query);
 322                         }
 323
 324                         if ($login && $pass)
 325                                 curl_setopt($ch, CURLOPT_USERPWD, "$login:$pass");
 326
 327                         $contents = @curl_exec($ch);
 328
 329                         if (curl_errno($ch) === 23 || curl_errno($ch) === 61) {
 330                                 curl_setopt($ch, CURLOPT_ENCODING, 'none');
 331                                 $contents = @curl_exec($ch);
 332                         }
 333
 334                         if ($contents === false) {
 335                                 $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
 336                                 curl_close($ch);
 337                                 return false;
 338                         }
 339
 340                         $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
 341                         $content_type = curl_getinfo($ch, CURLINFO_CONTENT_TYPE);
 342
 343                         if ($http_code != 200 || $type && strpos($content_type, "$type") === false) {
 344                                 if (curl_errno($ch) != 0) {
 345                                         $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
 346                                 } else {
 347                                         $fetch_last_error = "HTTP Code: $http_code";
 348                                 }
 349                                 curl_close($ch);
 350                                 return false;
 351                         }
 352
 353                         curl_close($ch);
 354
 355                         return $contents;
 356                 } else {
 357                         if ($login && $pass ){
 358                                 $url_parts = array();
 359
 360                                 preg_match("/(^[^:]*):\/\/(.*)/", $url, $url_parts);
 361
 362                                 if ($url_parts[1] && $url_parts[2]) {
 363                                         $url = $url_parts[1] . "://$login:$pass@" . $url_parts[2];
 364                                 }
 365                         }
 366
 367                         $data = @file_get_contents($url);
 368
 369                         $gzdecoded = gzdecode($data);
 370                         if ($gzdecoded) $data = $gzdecoded;
 371
 372                         if (!$data && function_exists('error_get_last')) {
 373                                 $error = error_get_last();
 374                                 $fetch_last_error = $error["message"];
 375                         }
 376                         return $data;
 377                 }
 378
 379         }
 380
 381         /**
 382          * Try to determine the favicon URL for a feed.
 383          * adapted from wordpress favicon plugin by Jeff Minard (http://thecodepro.com/)
 384          * http://dev.wp-plugins.org/file/favatars/trunk/favatars.php
 385          *
 386          * @param string $url A feed or page URL
 387          * @access public
 388          * @return mixed The favicon URL, or false if none was found.
 389          */
 390         function get_favicon_url($url) {
 391
 392                 $favicon_url = false;
 393
 394                 if ($html = @fetch_file_contents($url)) {
 395
 396                         libxml_use_internal_errors(true);
 397
 398                         $doc = new DOMDocument();
 399                         $doc->loadHTML($html);
 400                         $xpath = new DOMXPath($doc);
 401
 402                         $base = $xpath->query('/html/head/base');
 403                         foreach ($base as $b) {
 404                                 $url = $b->getAttribute("href");
 405                                 break;
 406                         }
 407
 408                         $entries = $xpath->query('/html/head/link[@rel="shortcut icon" or @rel="icon"]');
 409                         if (count($entries) > 0) {
 410                                 foreach ($entries as $entry) {
 411                                         $favicon_url = rewrite_relative_url($url, $entry->getAttribute("href"));
 412                                         break;
 413                                 }
 414                         }
 415                 }
 416
 417                 if (!$favicon_url)
 418                         $favicon_url = rewrite_relative_url($url, "/favicon.ico");
 419
 420                 return $favicon_url;
 421         } // function get_favicon_url
 422
 423         function check_feed_favicon($site_url, $feed, $link) {
 424 #               print "FAVICON [$site_url]: $favicon_url\n";
 425
 426                 $icon_file = ICONS_DIR . "/$feed.ico";
 427
 428                 if (!file_exists($icon_file)) {
 429                         $favicon_url = get_favicon_url($site_url);
 430
 431                         if ($favicon_url) {
 432                                 // Limiting to "image" type misses those served with text/plain
 433                                 $contents = fetch_file_contents($favicon_url); // , "image");
 434
 435                                 if ($contents) {
 436                                         // Crude image type matching.
 437                                         // Patterns gleaned from the file(1) source code.
 438                                         if (preg_match('/^\x00\x00\x01\x00/', $contents)) {
 439                                                 // 0       string  \000\000\001\000        MS Windows icon resource
 440                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa MS Windows icon resource");
 441                                         }
 442                                         elseif (preg_match('/^GIF8/', $contents)) {
 443                                                 // 0       string          GIF8            GIF image data
 444                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa GIF image");
 445                                         }
 446                                         elseif (preg_match('/^\x89PNG\x0d\x0a\x1a\x0a/', $contents)) {
 447                                                 // 0       string          \x89PNG\x0d\x0a\x1a\x0a         PNG image data
 448                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa PNG image");
 449                                         }
 450                                         elseif (preg_match('/^\xff\xd8/', $contents)) {
 451                                                 // 0       beshort         0xffd8          JPEG image data
 452                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa JPG image");
 453                                         }
 454                                         else {
 455                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa UNKNOWN type");
 456                                                 $contents = "";
 457                                         }
 458                                 }
 459
 460                                 if ($contents) {
 461                                         $fp = @fopen($icon_file, "w");
 462
 463                                         if ($fp) {
 464                                                 fwrite($fp, $contents);
 465                                                 fclose($fp);
 466                                                 chmod($icon_file, 0644);
 467                                         }
 468                                 }
 469                         }
 470                 }
 471         }
 472
 473         function print_select($id, $default, $values, $attributes = "") {
 474                 print "<select name=\"$id\" id=\"$id\" $attributes>";
 475                 foreach ($values as $v) {
 476                         if ($v == $default)
 477                                 $sel = "selected=\"1\"";
 478                          else
 479                                 $sel = "";
 480
 481                         $v = trim($v);
 482
 483                         print "<option value=\"$v\" $sel>$v</option>";
 484                 }
 485                 print "</select>";
 486         }
 487
 488         function print_select_hash($id, $default, $values, $attributes = "") {
 489                 print "<select name=\"$id\" id='$id' $attributes>";
 490                 foreach (array_keys($values) as $v) {
 491                         if ($v == $default)
 492                                 $sel = 'selected="selected"';
 493                          else
 494                                 $sel = "";
 495
 496                         $v = trim($v);
 497
 498                         print "<option $sel value=\"$v\">".$values[$v]."</option>";
 499                 }
 500
 501                 print "</select>";
 502         }
 503
 504         function print_radio($id, $default, $true_is, $values, $attributes = "") {
 505                 foreach ($values as $v) {
 506
 507                         if ($v == $default)
 508                                 $sel = "checked";
 509                          else
 510                                 $sel = "";
 511
 512                         if ($v == $true_is) {
 513                                 $sel .= " value=\"1\"";
 514                         } else {
 515                                 $sel .= " value=\"0\"";
 516                         }
 517
 518                         print "<input class=\"noborder\" dojoType=\"dijit.form.RadioButton\"
 519                                 type=\"radio\" $sel $attributes name=\"$id\">&nbsp;$v&nbsp;";
 520
 521                 }
 522         }
 523
 524         function initialize_user_prefs($link, $uid, $profile = false) {
 525
 526                 $uid = db_escape_string($uid);
 527
 528                 if (!$profile) {
 529                         $profile = "NULL";
 530                         $profile_qpart = "AND profile IS NULL";
 531                 } else {
 532                         $profile_qpart = "AND profile = '$profile'";
 533                 }
 534
 535                 if (get_schema_version($link) < 63) $profile_qpart = "";
 536
 537                 db_query($link, "BEGIN");
 538
 539                 $result = db_query($link, "SELECT pref_name,def_value FROM ttrss_prefs");
 540
 541                 $u_result = db_query($link, "SELECT pref_name
 542                         FROM ttrss_user_prefs WHERE owner_uid = '$uid' $profile_qpart");
 543
 544                 $active_prefs = array();
 545
 546                 while ($line = db_fetch_assoc($u_result)) {
 547                         array_push($active_prefs, $line["pref_name"]);
 548                 }
 549
 550                 while ($line = db_fetch_assoc($result)) {
 551                         if (array_search($line["pref_name"], $active_prefs) === FALSE) {
 552 //                              print "adding " . $line["pref_name"] . "<br>";
 553
 554                                 if (get_schema_version($link) < 63) {
 555                                         db_query($link, "INSERT INTO ttrss_user_prefs
 556                                                 (owner_uid,pref_name,value) VALUES
 557                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."')");
 558
 559                                 } else {
 560                                         db_query($link, "INSERT INTO ttrss_user_prefs
 561                                                 (owner_uid,pref_name,value, profile) VALUES
 562                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."', $profile)");
 563                                 }
 564
 565                         }
 566                 }
 567
 568                 db_query($link, "COMMIT");
 569
 570         }
 571
 572         function get_ssl_certificate_id() {
 573                 if ($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"]) {
 574                         return sha1($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"] .
 575                                 $_SERVER["REDIRECT_SSL_CLIENT_V_START"] .
 576                                 $_SERVER["REDIRECT_SSL_CLIENT_V_END"] .
 577                                 $_SERVER["REDIRECT_SSL_CLIENT_S_DN"]);
 578                 }
 579                 return "";
 580         }
 581
 582         function authenticate_user($link, $login, $password, $check_only = false) {
 583
 584                 if (!SINGLE_USER_MODE) {
 585
 586                         $user_id = false;
 587
 588                         global $pluginhost;
 589                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_AUTH_USER) as $plugin) {
 590
 591                                 $user_id = (int) $plugin->authenticate($login, $password);
 592
 593                                 if ($user_id) {
 594                                         $_SESSION["auth_module"] = strtolower(get_class($plugin));
 595                                         break;
 596                                 }
 597                         }
 598
 599                         if ($user_id && !$check_only) {
 600                                 $_SESSION["uid"] = $user_id;
 601
 602                                 $result = db_query($link, "SELECT login,access_level,pwd_hash FROM ttrss_users
 603                                         WHERE id = '$user_id'");
 604
 605                                 $_SESSION["name"] = db_fetch_result($result, 0, "login");
 606                                 $_SESSION["access_level"] = db_fetch_result($result, 0, "access_level");
 607                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 608
 609                                 db_query($link, "UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 610                                         $_SESSION["uid"]);
 611
 612                                 $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 613                                 $_SESSION["pwd_hash"] = db_fetch_result($result, 0, "pwd_hash");
 614
 615                                 $_SESSION["last_version_check"] = time();
 616
 617                                 initialize_user_prefs($link, $_SESSION["uid"]);
 618
 619                                 return true;
 620                         }
 621
 622                         return false;
 623
 624                 } else {
 625
 626                         $_SESSION["uid"] = 1;
 627                         $_SESSION["name"] = "admin";
 628                         $_SESSION["access_level"] = 10;
 629
 630                         $_SESSION["hide_hello"] = true;
 631                         $_SESSION["hide_logout"] = true;
 632
 633                         $_SESSION["auth_module"] = false;
 634
 635                         if (!$_SESSION["csrf_token"]) {
 636                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 637                         }
 638
 639                         $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 640
 641                         initialize_user_prefs($link, $_SESSION["uid"]);
 642
 643                         return true;
 644                 }
 645         }
 646
 647         function make_password($length = 8) {
 648
 649                 $password = "";
 650                 $possible = "0123456789abcdfghjkmnpqrstvwxyzABCDFGHJKMNPQRSTVWXYZ";
 651
 652         $i = 0;
 653
 654                 while ($i < $length) {
 655                         $char = substr($possible, mt_rand(0, strlen($possible)-1), 1);
 656
 657                         if (!strstr($password, $char)) {
 658                                 $password .= $char;
 659                                 $i++;
 660                         }
 661                 }
 662                 return $password;
 663         }
 664
 665         // this is called after user is created to initialize default feeds, labels
 666         // or whatever else
 667
 668         // user preferences are checked on every login, not here
 669
 670         function initialize_user($link, $uid) {
 671
 672                 db_query($link, "insert into ttrss_feeds (owner_uid,title,feed_url)
 673                         values ('$uid', 'Tiny Tiny RSS: New Releases',
 674                         'http://tt-rss.org/releases.rss')");
 675
 676                 db_query($link, "insert into ttrss_feeds (owner_uid,title,feed_url)
 677                         values ('$uid', 'Tiny Tiny RSS: Forum',
 678                                 'http://tt-rss.org/forum/rss.php')");
 679         }
 680
 681         function logout_user() {
 682                 session_destroy();
 683                 if (isset($_COOKIE[session_name()])) {
 684                    setcookie(session_name(), '', time()-42000, '/');
 685                 }
 686         }
 687
 688         function validate_csrf($csrf_token) {
 689                 return $csrf_token == $_SESSION['csrf_token'];
 690         }
 691
 692         function validate_session($link) {
 693                 if (SINGLE_USER_MODE) return true;
 694
 695                 $check_ip = $_SESSION['ip_address'];
 696
 697                 switch (SESSION_CHECK_ADDRESS) {
 698                 case 0:
 699                         $check_ip = '';
 700                         break;
 701                 case 1:
 702                         $check_ip = substr($check_ip, 0, strrpos($check_ip, '.')+1);
 703                         break;
 704                 case 2:
 705                         $check_ip = substr($check_ip, 0, strrpos($check_ip, '.'));
 706                         $check_ip = substr($check_ip, 0, strrpos($check_ip, '.')+1);
 707                         break;
 708                 };
 709
 710                 if ($check_ip && strpos($_SERVER['REMOTE_ADDR'], $check_ip) !== 0) {
 711                         $_SESSION["login_error_msg"] =
 712                                 __("Session failed to validate (incorrect IP)");
 713                         return false;
 714                 }
 715
 716                 if ($_SESSION["ref_schema_version"] != get_schema_version($link, true))
 717                         return false;
 718
 719                 if ($_SESSION["uid"]) {
 720
 721                         $result = db_query($link,
 722                                 "SELECT pwd_hash FROM ttrss_users WHERE id = '".$_SESSION["uid"]."'");
 723
 724                         $pwd_hash = db_fetch_result($result, 0, "pwd_hash");
 725
 726                         if ($pwd_hash != $_SESSION["pwd_hash"]) {
 727                                 return false;
 728                         }
 729                 }
 730
 731 /*              if ($_SESSION["cookie_lifetime"] && $_SESSION["uid"]) {
 732
 733                         //print_r($_SESSION);
 734
 735                         if (time() > $_SESSION["cookie_lifetime"]) {
 736                                 return false;
 737                         }
 738                 } */
 739
 740                 return true;
 741         }
 742
 743         function load_user_plugins($link, $owner_uid) {
 744                 if ($owner_uid) {
 745                         $plugins = get_pref($link, "_ENABLED_PLUGINS", $owner_uid);
 746
 747                         global $pluginhost;
 748                         $pluginhost->load($plugins, $pluginhost::KIND_USER, $owner_uid);
 749
 750                         if (get_schema_version($link) > 100) {
 751                                 $pluginhost->load_data();
 752                         }
 753                 }
 754         }
 755
 756         function login_sequence($link, $login_form = 0) {
 757                 $_SESSION["prefs_cache"] = false;
 758
 759                 if (SINGLE_USER_MODE) {
 760                         authenticate_user($link, "admin", null);
 761                         cache_prefs($link);
 762                         load_user_plugins($link, $_SESSION["uid"]);
 763                 } else {
 764                         if (!$_SESSION["uid"] || !validate_session($link)) {
 765
 766                                 if (AUTH_AUTO_LOGIN && authenticate_user($link, null, null)) {
 767                                     $_SESSION["ref_schema_version"] = get_schema_version($link, true);
 768                                 } else {
 769                                          authenticate_user($link, null, null, true);
 770                                 }
 771
 772                                 if (!$_SESSION["uid"]) render_login_form($link, $login_form);
 773
 774                         } else {
 775                                 /* bump login timestamp */
 776                                 db_query($link, "UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 777                                         $_SESSION["uid"]);
 778                         }
 779
 780                         if ($_SESSION["uid"] && $_SESSION["language"] && SESSION_COOKIE_LIFETIME > 0) {
 781                                 setcookie("ttrss_lang", $_SESSION["language"],
 782                                         time() + SESSION_COOKIE_LIFETIME);
 783                         }
 784
 785                         if ($_SESSION["uid"]) {
 786                                 cache_prefs($link);
 787                                 load_user_plugins($link, $_SESSION["uid"]);
 788                         }
 789                 }
 790         }
 791
 792         function truncate_string($str, $max_len, $suffix = '&hellip;') {
 793                 if (mb_strlen($str, "utf-8") > $max_len - 3) {
 794                         return mb_substr($str, 0, $max_len, "utf-8") . $suffix;
 795                 } else {
 796                         return $str;
 797                 }
 798         }
 799
 800         function convert_timestamp($timestamp, $source_tz, $dest_tz) {
 801
 802                 try {
 803                         $source_tz = new DateTimeZone($source_tz);
 804                 } catch (Exception $e) {
 805                         $source_tz = new DateTimeZone('UTC');
 806                 }
 807
 808                 try {
 809                         $dest_tz = new DateTimeZone($dest_tz);
 810                 } catch (Exception $e) {
 811                         $dest_tz = new DateTimeZone('UTC');
 812                 }
 813
 814                 $dt = new DateTime(date('Y-m-d H:i:s', $timestamp), $source_tz);
 815                 return $dt->format('U') + $dest_tz->getOffset($dt);
 816         }
 817
 818         function make_local_datetime($link, $timestamp, $long, $owner_uid = false,
 819                                         $no_smart_dt = false) {
 820
 821                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 822                 if (!$timestamp) $timestamp = '1970-01-01 0:00';
 823
 824                 global $utc_tz;
 825                 global $tz_offset;
 826
 827                 # We store date in UTC internally
 828                 $dt = new DateTime($timestamp, $utc_tz);
 829
 830                 if ($tz_offset == -1) {
 831
 832                         $user_tz_string = get_pref($link, 'USER_TIMEZONE', $owner_uid);
 833
 834                         try {
 835                                 $user_tz = new DateTimeZone($user_tz_string);
 836                         } catch (Exception $e) {
 837                                 $user_tz = $utc_tz;
 838                         }
 839
 840                         $tz_offset = $user_tz->getOffset($dt);
 841                 }
 842
 843                 $user_timestamp = $dt->format('U') + $tz_offset;
 844
 845                 if (!$no_smart_dt) {
 846                         return smart_date_time($link, $user_timestamp,
 847                                 $tz_offset, $owner_uid);
 848                 } else {
 849                         if ($long)
 850                                 $format = get_pref($link, 'LONG_DATE_FORMAT', $owner_uid);
 851                         else
 852                                 $format = get_pref($link, 'SHORT_DATE_FORMAT', $owner_uid);
 853
 854                         return date($format, $user_timestamp);
 855                 }
 856         }
 857
 858         function smart_date_time($link, $timestamp, $tz_offset = 0, $owner_uid = false) {
 859                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 860
 861                 if (date("Y.m.d", $timestamp) == date("Y.m.d", time() + $tz_offset)) {
 862                         return date("G:i", $timestamp);
 863                 } else if (date("Y", $timestamp) == date("Y", time() + $tz_offset)) {
 864                         $format = get_pref($link, 'SHORT_DATE_FORMAT', $owner_uid);
 865                         return date($format, $timestamp);
 866                 } else {
 867                         $format = get_pref($link, 'LONG_DATE_FORMAT', $owner_uid);
 868                         return date($format, $timestamp);
 869                 }
 870         }
 871
 872         function sql_bool_to_bool($s) {
 873                 if ($s == "t" || $s == "1" || strtolower($s) == "true") {
 874                         return true;
 875                 } else {
 876                         return false;
 877                 }
 878         }
 879
 880         function bool_to_sql_bool($s) {
 881                 if ($s) {
 882                         return "true";
 883                 } else {
 884                         return "false";
 885                 }
 886         }
 887
 888         // Session caching removed due to causing wrong redirects to upgrade
 889         // script when get_schema_version() is called on an obsolete session
 890         // created on a previous schema version.
 891         function get_schema_version($link, $nocache = false) {
 892                 global $schema_version;
 893
 894                 if (!$schema_version) {
 895                         $result = db_query($link, "SELECT schema_version FROM ttrss_version");
 896                         $version = db_fetch_result($result, 0, "schema_version");
 897                         $schema_version = $version;
 898                         return $version;
 899                 } else {
 900                         return $schema_version;
 901                 }
 902         }
 903
 904         function sanity_check($link) {
 905                 require_once 'errors.php';
 906
 907                 $error_code = 0;
 908                 $schema_version = get_schema_version($link, true);
 909
 910                 if ($schema_version != SCHEMA_VERSION) {
 911                         $error_code = 5;
 912                 }
 913
 914                 if (DB_TYPE == "mysql") {
 915                         $result = db_query($link, "SELECT true", false);
 916                         if (db_num_rows($result) != 1) {
 917                                 $error_code = 10;
 918                         }
 919                 }
 920
 921                 if (db_escape_string("testTEST") != "testTEST") {
 922                         $error_code = 12;
 923                 }
 924
 925                 return array("code" => $error_code, "message" => $ERRORS[$error_code]);
 926         }
 927
 928         function file_is_locked($filename) {
 929                 if (function_exists('flock')) {
 930                         $fp = @fopen(LOCK_DIRECTORY . "/$filename", "r");
 931                         if ($fp) {
 932                                 if (flock($fp, LOCK_EX | LOCK_NB)) {
 933                                         flock($fp, LOCK_UN);
 934                                         fclose($fp);
 935                                         return false;
 936                                 }
 937                                 fclose($fp);
 938                                 return true;
 939                         } else {
 940                                 return false;
 941                         }
 942                 }
 943                 return true; // consider the file always locked and skip the test
 944         }
 945
 946         function make_lockfile($filename) {
 947                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
 948
 949                 if ($fp && flock($fp, LOCK_EX | LOCK_NB)) {
 950                         if (function_exists('posix_getpid')) {
 951                                 fwrite($fp, posix_getpid() . "\n");
 952                         }
 953                         return $fp;
 954                 } else {
 955                         return false;
 956                 }
 957         }
 958
 959         function make_stampfile($filename) {
 960                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
 961
 962                 if (flock($fp, LOCK_EX | LOCK_NB)) {
 963                         fwrite($fp, time() . "\n");
 964                         flock($fp, LOCK_UN);
 965                         fclose($fp);
 966                         return true;
 967                 } else {
 968                         return false;
 969                 }
 970         }
 971
 972         function sql_random_function() {
 973                 if (DB_TYPE == "mysql") {
 974                         return "RAND()";
 975                 } else {
 976                         return "RANDOM()";
 977                 }
 978         }
 979
 980         function catchup_feed($link, $feed, $cat_view, $owner_uid = false, $max_id = false) {
 981
 982                         if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 983
 984                         //if (preg_match("/^-?[0-9][0-9]*$/", $feed) != false) {
 985
 986                         $ref_check_qpart = ($max_id &&
 987                                 !get_pref($link, 'REVERSE_HEADLINES')) ? "ref_id <= '$max_id'" : "true";
 988
 989                         if (is_numeric($feed)) {
 990                                 if ($cat_view) {
 991
 992                                         if ($feed >= 0) {
 993
 994                                                 if ($feed > 0) {
 995                                                         $children = getChildCategories($link, $feed, $owner_uid);
 996                                                         array_push($children, $feed);
 997
 998                                                         $children = join(",", $children);
 999
1000                                                         $cat_qpart = "cat_id IN ($children)";
1001                                                 } else {
1002                                                         $cat_qpart = "cat_id IS NULL";
1003                                                 }
1004
1005                                                 db_query($link, "UPDATE ttrss_user_entries
1006                                                         SET unread = false,last_read = NOW()
1007                                                         WHERE feed_id IN (SELECT id FROM ttrss_feeds WHERE $cat_qpart)
1008                                                         AND $ref_check_qpart AND unread = true
1009                                                         AND owner_uid = $owner_uid");
1010
1011                                         } else if ($feed == -2) {
1012
1013                                                 db_query($link, "UPDATE ttrss_user_entries
1014                                                         SET unread = false,last_read = NOW() WHERE (SELECT COUNT(*)
1015                                                                 FROM ttrss_user_labels2 WHERE article_id = ref_id) > 0
1016                                                                 AND $ref_check_qpart
1017                                                                 AND unread = true AND owner_uid = $owner_uid");
1018                                         }
1019
1020                                 } else if ($feed > 0) {
1021
1022                                         db_query($link, "UPDATE ttrss_user_entries
1023                                                         SET unread = false,last_read = NOW()
1024                                                         WHERE feed_id = '$feed'
1025                                                         AND $ref_check_qpart AND unread = true
1026                                                         AND owner_uid = $owner_uid");
1027
1028                                 } else if ($feed < 0 && $feed > -10) { // special, like starred
1029
1030                                         if ($feed == -1) {
1031                                                 db_query($link, "UPDATE ttrss_user_entries
1032                                                         SET unread = false,last_read = NOW()
1033                                                         WHERE marked = true
1034                                                         AND $ref_check_qpart AND unread = true
1035                                                         AND owner_uid = $owner_uid");
1036                                         }
1037
1038                                         if ($feed == -2) {
1039                                                 db_query($link, "UPDATE ttrss_user_entries
1040                                                         SET unread = false,last_read = NOW()
1041                                                         WHERE published = true
1042                                                         AND $ref_check_qpart AND unread = true
1043                                                         AND owner_uid = $owner_uid");
1044                                         }
1045
1046                                         if ($feed == -3) {
1047
1048                                                 $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE");
1049
1050                                                 if (DB_TYPE == "pgsql") {
1051                                                         $match_part = "updated > NOW() - INTERVAL '$intl hour' ";
1052                                                 } else {
1053                                                         $match_part = "updated > DATE_SUB(NOW(),
1054                                                                 INTERVAL $intl HOUR) ";
1055                                                 }
1056
1057                                                 $result = db_query($link, "SELECT id FROM ttrss_entries,
1058                                                         ttrss_user_entries WHERE $match_part AND
1059                                                         unread = true AND
1060                                                         ttrss_user_entries.ref_id = ttrss_entries.id AND
1061                                                         owner_uid = $owner_uid");
1062
1063                                                 $affected_ids = array();
1064
1065                                                 while ($line = db_fetch_assoc($result)) {
1066                                                         array_push($affected_ids, $line["id"]);
1067                                                 }
1068
1069                                                 catchupArticlesById($link, $affected_ids, 0);
1070                                         }
1071
1072                                         if ($feed == -4) {
1073                                                 db_query($link, "UPDATE ttrss_user_entries
1074                                                         SET unread = false,last_read = NOW()
1075                                                         WHERE $ref_check_qpart AND unread = true AND
1076                                                         owner_uid = $owner_uid");
1077                                         }
1078
1079                                 } else if ($feed < -10) { // label
1080
1081                                         $label_id = -$feed - 11;
1082
1083                                         db_query($link, "UPDATE ttrss_user_entries, ttrss_user_labels2
1084                                                 SET unread = false, last_read = NOW()
1085                                                         WHERE label_id = '$label_id' AND unread = true
1086                                                         AND $ref_check_qpart
1087                                                         AND owner_uid = '$owner_uid' AND ref_id = article_id");
1088
1089                                 }
1090
1091                                 ccache_update($link, $feed, $owner_uid, $cat_view);
1092
1093                         } else { // tag
1094                                 db_query($link, "BEGIN");
1095
1096                                 $tag_name = db_escape_string($feed);
1097
1098                                 $result = db_query($link, "SELECT post_int_id FROM ttrss_tags
1099                                         WHERE tag_name = '$tag_name' AND owner_uid = $owner_uid");
1100
1101                                 while ($line = db_fetch_assoc($result)) {
1102                                         db_query($link, "UPDATE ttrss_user_entries SET
1103                                                 unread = false, last_read = NOW()
1104                                                 WHERE $ref_check_qpart AND unread = true
1105                                                 AND int_id = " . $line["post_int_id"]);
1106                                 }
1107                                 db_query($link, "COMMIT");
1108                         }
1109         }
1110
1111         function getAllCounters($link) {
1112                 $data = getGlobalCounters($link);
1113
1114                 $data = array_merge($data, getVirtCounters($link));
1115                 $data = array_merge($data, getLabelCounters($link));
1116                 $data = array_merge($data, getFeedCounters($link, $active_feed));
1117                 $data = array_merge($data, getCategoryCounters($link));
1118
1119                 return $data;
1120         }
1121
1122         function getCategoryTitle($link, $cat_id) {
1123
1124                 if ($cat_id == -1) {
1125                         return __("Special");
1126                 } else if ($cat_id == -2) {
1127                         return __("Labels");
1128                 } else {
1129
1130                         $result = db_query($link, "SELECT title FROM ttrss_feed_categories WHERE
1131                                 id = '$cat_id'");
1132
1133                         if (db_num_rows($result) == 1) {
1134                                 return db_fetch_result($result, 0, "title");
1135                         } else {
1136                                 return __("Uncategorized");
1137                         }
1138                 }
1139         }
1140
1141
1142         function getCategoryCounters($link) {
1143                 $ret_arr = array();
1144
1145                 /* Labels category */
1146
1147                 $cv = array("id" => -2, "kind" => "cat",
1148                         "counter" => getCategoryUnread($link, -2));
1149
1150                 array_push($ret_arr, $cv);
1151
1152                 $result = db_query($link, "SELECT id AS cat_id, value AS unread,
1153                         (SELECT COUNT(id) FROM ttrss_feed_categories AS c2
1154                                 WHERE c2.parent_cat = ttrss_feed_categories.id) AS num_children
1155                         FROM ttrss_feed_categories, ttrss_cat_counters_cache
1156                         WHERE ttrss_cat_counters_cache.feed_id = id AND
1157                         ttrss_cat_counters_cache.owner_uid = ttrss_feed_categories.owner_uid AND
1158                         ttrss_feed_categories.owner_uid = " . $_SESSION["uid"]);
1159
1160                 while ($line = db_fetch_assoc($result)) {
1161                         $line["cat_id"] = (int) $line["cat_id"];
1162
1163                         if ($line["num_children"] > 0) {
1164                                 $child_counter = getCategoryChildrenUnread($link, $line["cat_id"], $_SESSION["uid"]);
1165                         } else {
1166                                 $child_counter = 0;
1167                         }
1168
1169                         $cv = array("id" => $line["cat_id"], "kind" => "cat",
1170                                 "counter" => $line["unread"] + $child_counter);
1171
1172                         array_push($ret_arr, $cv);
1173                 }
1174
1175                 /* Special case: NULL category doesn't actually exist in the DB */
1176
1177                 $cv = array("id" => 0, "kind" => "cat",
1178                         "counter" => (int) ccache_find($link, 0, $_SESSION["uid"], true));
1179
1180                 array_push($ret_arr, $cv);
1181
1182                 return $ret_arr;
1183         }
1184
1185         // only accepts real cats (>= 0)
1186         function getCategoryChildrenUnread($link, $cat, $owner_uid = false) {
1187                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1188
1189                 $result = db_query($link, "SELECT id FROM ttrss_feed_categories WHERE parent_cat = '$cat'
1190                                 AND owner_uid = $owner_uid");
1191
1192                 $unread = 0;
1193
1194                 while ($line = db_fetch_assoc($result)) {
1195                         $unread += getCategoryUnread($link, $line["id"], $owner_uid);
1196                         $unread += getCategoryChildrenUnread($link, $line["id"], $owner_uid);
1197                 }
1198
1199                 return $unread;
1200         }
1201
1202         function getCategoryUnread($link, $cat, $owner_uid = false) {
1203
1204                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1205
1206                 if ($cat >= 0) {
1207
1208                         if ($cat != 0) {
1209                                 $cat_query = "cat_id = '$cat'";
1210                         } else {
1211                                 $cat_query = "cat_id IS NULL";
1212                         }
1213
1214                         $result = db_query($link, "SELECT id FROM ttrss_feeds WHERE $cat_query
1215                                         AND owner_uid = " . $owner_uid);
1216
1217                         $cat_feeds = array();
1218                         while ($line = db_fetch_assoc($result)) {
1219                                 array_push($cat_feeds, "feed_id = " . $line["id"]);
1220                         }
1221
1222                         if (count($cat_feeds) == 0) return 0;
1223
1224                         $match_part = implode(" OR ", $cat_feeds);
1225
1226                         $result = db_query($link, "SELECT COUNT(int_id) AS unread
1227                                 FROM ttrss_user_entries
1228                                 WHERE   unread = true AND ($match_part)
1229                                 AND owner_uid = " . $owner_uid);
1230
1231                         $unread = 0;
1232
1233                         # this needs to be rewritten
1234                         while ($line = db_fetch_assoc($result)) {
1235                                 $unread += $line["unread"];
1236                         }
1237
1238                         return $unread;
1239                 } else if ($cat == -1) {
1240                         return getFeedUnread($link, -1) + getFeedUnread($link, -2) + getFeedUnread($link, -3) + getFeedUnread($link, 0);
1241                 } else if ($cat == -2) {
1242
1243                         $result = db_query($link, "
1244                                 SELECT COUNT(unread) AS unread FROM
1245                                         ttrss_user_entries, ttrss_user_labels2
1246                                 WHERE article_id = ref_id AND unread = true
1247                                         AND ttrss_user_entries.owner_uid = '$owner_uid'");
1248
1249                         $unread = db_fetch_result($result, 0, "unread");
1250
1251                         return $unread;
1252
1253                 }
1254         }
1255
1256         function getFeedUnread($link, $feed, $is_cat = false) {
1257                 return getFeedArticles($link, $feed, $is_cat, true, $_SESSION["uid"]);
1258         }
1259
1260         function getLabelUnread($link, $label_id, $owner_uid = false) {
1261                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1262
1263                 $result = db_query($link, "SELECT COUNT(ref_id) AS unread FROM ttrss_user_entries, ttrss_user_labels2
1264                         WHERE owner_uid = '$owner_uid' AND unread = true AND label_id = '$label_id' AND article_id = ref_id");
1265
1266                 if (db_num_rows($result) != 0) {
1267                         return db_fetch_result($result, 0, "unread");
1268                 } else {
1269                         return 0;
1270                 }
1271         }
1272
1273         function getFeedArticles($link, $feed, $is_cat = false, $unread_only = false,
1274                 $owner_uid = false) {
1275
1276                 $n_feed = (int) $feed;
1277                 $need_entries = false;
1278
1279                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1280
1281                 if ($unread_only) {
1282                         $unread_qpart = "unread = true";
1283                 } else {
1284                         $unread_qpart = "true";
1285                 }
1286
1287                 if ($is_cat) {
1288                         return getCategoryUnread($link, $n_feed, $owner_uid);
1289                 } else if ($n_feed == -6) {
1290                         return 0;
1291                 } else if ($feed != "0" && $n_feed == 0) {
1292
1293                         $feed = db_escape_string($feed);
1294
1295                         $result = db_query($link, "SELECT SUM((SELECT COUNT(int_id)
1296                                 FROM ttrss_user_entries,ttrss_entries WHERE int_id = post_int_id
1297                                         AND ref_id = id AND $unread_qpart)) AS count FROM ttrss_tags
1298                                 WHERE owner_uid = $owner_uid AND tag_name = '$feed'");
1299                         return db_fetch_result($result, 0, "count");
1300
1301                 } else if ($n_feed == -1) {
1302                         $match_part = "marked = true";
1303                 } else if ($n_feed == -2) {
1304                         $match_part = "published = true";
1305                 } else if ($n_feed == -3) {
1306                         $match_part = "unread = true AND score >= 0";
1307
1308                         $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE", $owner_uid);
1309
1310                         if (DB_TYPE == "pgsql") {
1311                                 $match_part .= " AND updated > NOW() - INTERVAL '$intl hour' ";
1312                         } else {
1313                                 $match_part .= " AND updated > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
1314                         }
1315
1316                         $need_entries = true;
1317
1318                 } else if ($n_feed == -4) {
1319                         $match_part = "true";
1320                 } else if ($n_feed >= 0) {
1321
1322                         if ($n_feed != 0) {
1323                                 $match_part = "feed_id = '$n_feed'";
1324                         } else {
1325                                 $match_part = "feed_id IS NULL";
1326                         }
1327
1328                 } else if ($feed < -10) {
1329
1330                         $label_id = -$feed - 11;
1331
1332                         return getLabelUnread($link, $label_id, $owner_uid);
1333
1334                 }
1335
1336                 if ($match_part) {
1337
1338                         if ($need_entries) {
1339                                 $from_qpart = "ttrss_user_entries,ttrss_entries";
1340                                 $from_where = "ttrss_entries.id = ttrss_user_entries.ref_id AND";
1341                         } else {
1342                                 $from_qpart = "ttrss_user_entries";
1343                         }
1344
1345                         $query = "SELECT count(int_id) AS unread
1346                                 FROM $from_qpart WHERE
1347                                 $unread_qpart AND $from_where ($match_part) AND ttrss_user_entries.owner_uid = $owner_uid";
1348
1349                         //echo "[$feed/$query]\n";
1350
1351                         $result = db_query($link, $query);
1352
1353                 } else {
1354
1355                         $result = db_query($link, "SELECT COUNT(post_int_id) AS unread
1356                                 FROM ttrss_tags,ttrss_user_entries,ttrss_entries
1357                                 WHERE tag_name = '$feed' AND post_int_id = int_id AND ref_id = ttrss_entries.id
1358                                 AND $unread_qpart AND ttrss_tags.owner_uid = " . $owner_uid);
1359                 }
1360
1361                 $unread = db_fetch_result($result, 0, "unread");
1362
1363                 return $unread;
1364         }
1365
1366         function getGlobalUnread($link, $user_id = false) {
1367
1368                 if (!$user_id) {
1369                         $user_id = $_SESSION["uid"];
1370                 }
1371
1372                 $result = db_query($link, "SELECT SUM(value) AS c_id FROM ttrss_counters_cache
1373                         WHERE owner_uid = '$user_id' AND feed_id > 0");
1374
1375                 $c_id = db_fetch_result($result, 0, "c_id");
1376
1377                 return $c_id;
1378         }
1379
1380         function getGlobalCounters($link, $global_unread = -1) {
1381                 $ret_arr = array();
1382
1383                 if ($global_unread == -1) {
1384                         $global_unread = getGlobalUnread($link);
1385                 }
1386
1387                 $cv = array("id" => "global-unread",
1388                         "counter" => (int) $global_unread);
1389
1390                 array_push($ret_arr, $cv);
1391
1392                 $result = db_query($link, "SELECT COUNT(id) AS fn FROM
1393                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1394
1395                 $subscribed_feeds = db_fetch_result($result, 0, "fn");
1396
1397                 $cv = array("id" => "subscribed-feeds",
1398                         "counter" => (int) $subscribed_feeds);
1399
1400                 array_push($ret_arr, $cv);
1401
1402                 return $ret_arr;
1403         }
1404
1405         function getVirtCounters($link) {
1406
1407                 $ret_arr = array();
1408
1409                 for ($i = 0; $i >= -4; $i--) {
1410
1411                         $count = getFeedUnread($link, $i);
1412
1413                         $cv = array("id" => $i,
1414                                 "counter" => (int) $count);
1415
1416 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1417 //                              $cv["xmsg"] = getFeedArticles($link, $i)." ".__("total");
1418
1419                         array_push($ret_arr, $cv);
1420                 }
1421
1422                 return $ret_arr;
1423         }
1424
1425         function getLabelCounters($link, $descriptions = false) {
1426
1427                 $ret_arr = array();
1428
1429                 $owner_uid = $_SESSION["uid"];
1430
1431                 $result = db_query($link, "SELECT id,caption,COUNT(unread) AS unread
1432                         FROM ttrss_labels2 LEFT JOIN ttrss_user_labels2 ON
1433                                 (ttrss_labels2.id = label_id)
1434                                         LEFT JOIN ttrss_user_entries ON (ref_id = article_id AND unread = true)
1435                                 WHERE ttrss_labels2.owner_uid = $owner_uid GROUP BY ttrss_labels2.id,
1436                                         ttrss_labels2.caption");
1437
1438                 while ($line = db_fetch_assoc($result)) {
1439
1440                         $id = -$line["id"] - 11;
1441
1442                         $label_name = $line["caption"];
1443                         $count = $line["unread"];
1444
1445                         $cv = array("id" => $id,
1446                                 "counter" => (int) $count);
1447
1448                         if ($descriptions)
1449                                 $cv["description"] = $label_name;
1450
1451 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1452 //                              $cv["xmsg"] = getFeedArticles($link, $id)." ".__("total");
1453
1454                         array_push($ret_arr, $cv);
1455                 }
1456
1457                 return $ret_arr;
1458         }
1459
1460         function getFeedCounters($link, $active_feed = false) {
1461
1462                 $ret_arr = array();
1463
1464                 $query = "SELECT ttrss_feeds.id,
1465                                 ttrss_feeds.title,
1466                                 ".SUBSTRING_FOR_DATE."(ttrss_feeds.last_updated,1,19) AS last_updated,
1467                                 last_error, value AS count
1468                         FROM ttrss_feeds, ttrss_counters_cache
1469                         WHERE ttrss_feeds.owner_uid = ".$_SESSION["uid"]."
1470                                 AND ttrss_counters_cache.owner_uid = ttrss_feeds.owner_uid
1471                                 AND ttrss_counters_cache.feed_id = id";
1472
1473                 $result = db_query($link, $query);
1474                 $fctrs_modified = false;
1475
1476                 while ($line = db_fetch_assoc($result)) {
1477
1478                         $id = $line["id"];
1479                         $count = $line["count"];
1480                         $last_error = htmlspecialchars($line["last_error"]);
1481
1482                         $last_updated = make_local_datetime($link, $line['last_updated'], false);
1483
1484                         $has_img = feed_has_icon($id);
1485
1486                         if (date('Y') - date('Y', strtotime($line['last_updated'])) > 2)
1487                                 $last_updated = '';
1488
1489                         $cv = array("id" => $id,
1490                                 "updated" => $last_updated,
1491                                 "counter" => (int) $count,
1492                                 "has_img" => (int) $has_img);
1493
1494                         if ($last_error)
1495                                 $cv["error"] = $last_error;
1496
1497 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1498 //                              $cv["xmsg"] = getFeedArticles($link, $id)." ".__("total");
1499
1500                         if ($active_feed && $id == $active_feed)
1501                                 $cv["title"] = truncate_string($line["title"], 30);
1502
1503                         array_push($ret_arr, $cv);
1504
1505                 }
1506
1507                 return $ret_arr;
1508         }
1509
1510         function get_pgsql_version($link) {
1511                 $result = db_query($link, "SELECT version() AS version");
1512                 $version = explode(" ", db_fetch_result($result, 0, "version"));
1513                 return $version[1];
1514         }
1515
1516         /**
1517          * @return array (code => Status code, message => error message if available)
1518          *
1519          *                 0 - OK, Feed already exists
1520          *                 1 - OK, Feed added
1521          *                 2 - Invalid URL
1522          *                 3 - URL content is HTML, no feeds available
1523          *                 4 - URL content is HTML which contains multiple feeds.
1524          *                     Here you should call extractfeedurls in rpc-backend
1525          *                     to get all possible feeds.
1526          *                 5 - Couldn't download the URL content.
1527          */
1528         function subscribe_to_feed($link, $url, $cat_id = 0,
1529                         $auth_login = '', $auth_pass = '', $need_auth = false) {
1530
1531                 global $fetch_last_error;
1532
1533                 require_once "include/rssfuncs.php";
1534
1535                 $url = fix_url($url);
1536
1537                 if (!$url || !validate_feed_url($url)) return array("code" => 2);
1538
1539                 $contents = @fetch_file_contents($url, false, $auth_login, $auth_pass);
1540
1541                 if (!$contents) {
1542                         return array("code" => 5, "message" => $fetch_last_error);
1543                 }
1544
1545                 if (is_html($contents)) {
1546                         $feedUrls = get_feeds_from_html($url, $contents);
1547
1548                         if (count($feedUrls) == 0) {
1549                                 return array("code" => 3);
1550                         } else if (count($feedUrls) > 1) {
1551                                 return array("code" => 4, "feeds" => $feedUrls);
1552                         }
1553                         //use feed url as new URL
1554                         $url = key($feedUrls);
1555                 }
1556
1557                 if ($cat_id == "0" || !$cat_id) {
1558                         $cat_qpart = "NULL";
1559                 } else {
1560                         $cat_qpart = "'$cat_id'";
1561                 }
1562
1563                 $result = db_query($link,
1564                         "SELECT id FROM ttrss_feeds
1565                         WHERE feed_url = '$url' AND owner_uid = ".$_SESSION["uid"]);
1566
1567                 if (db_num_rows($result) == 0) {
1568                         $result = db_query($link,
1569                                 "INSERT INTO ttrss_feeds
1570                                         (owner_uid,feed_url,title,cat_id, auth_login,auth_pass,update_method)
1571                                 VALUES ('".$_SESSION["uid"]."', '$url',
1572                                 '[Unknown]', $cat_qpart, '$auth_login', '$auth_pass', 0)");
1573
1574                         $result = db_query($link,
1575                                 "SELECT id FROM ttrss_feeds WHERE feed_url = '$url'
1576                                         AND owner_uid = " . $_SESSION["uid"]);
1577
1578                         $feed_id = db_fetch_result($result, 0, "id");
1579
1580                         if ($feed_id) {
1581                                 update_rss_feed($link, $feed_id, true);
1582                         }
1583
1584                         return array("code" => 1);
1585                 } else {
1586                         return array("code" => 0);
1587                 }
1588         }
1589
1590         function print_feed_select($link, $id, $default_id = "",
1591                 $attributes = "", $include_all_feeds = true,
1592                 $root_id = false, $nest_level = 0) {
1593
1594                 if (!$root_id) {
1595                         print "<select id=\"$id\" name=\"$id\" $attributes>";
1596                         if ($include_all_feeds) {
1597                                 $is_selected = ("0" == $default_id) ? "selected=\"1\"" : "";
1598                                 print "<option $is_selected value=\"0\">".__('All feeds')."</option>";
1599                         }
1600                 }
1601
1602                 if (get_pref($link, 'ENABLE_FEED_CATS')) {
1603
1604                         if ($root_id)
1605                                 $parent_qpart = "parent_cat = '$root_id'";
1606                         else
1607                                 $parent_qpart = "parent_cat IS NULL";
1608
1609                         $result = db_query($link, "SELECT id,title,
1610                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1611                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1612                                 FROM ttrss_feed_categories
1613                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1614
1615                         while ($line = db_fetch_assoc($result)) {
1616
1617                                 for ($i = 0; $i < $nest_level; $i++)
1618                                         $line["title"] = " - " . $line["title"];
1619
1620                                 $is_selected = ("CAT:".$line["id"] == $default_id) ? "selected=\"1\"" : "";
1621
1622                                 printf("<option $is_selected value='CAT:%d'>%s</option>",
1623                                         $line["id"], htmlspecialchars($line["title"]));
1624
1625                                 if ($line["num_children"] > 0)
1626                                         print_feed_select($link, $id, $default_id, $attributes,
1627                                                 $include_all_feeds, $line["id"], $nest_level+1);
1628
1629                                 $feed_result = db_query($link, "SELECT id,title FROM ttrss_feeds
1630                                         WHERE cat_id = '".$line["id"]."' AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1631
1632                                 while ($fline = db_fetch_assoc($feed_result)) {
1633                                         $is_selected = ($fline["id"] == $default_id) ? "selected=\"1\"" : "";
1634
1635                                         $fline["title"] = " + " . $fline["title"];
1636
1637                                         for ($i = 0; $i < $nest_level; $i++)
1638                                                 $fline["title"] = " - " . $fline["title"];
1639
1640                                         printf("<option $is_selected value='%d'>%s</option>",
1641                                                 $fline["id"], htmlspecialchars($fline["title"]));
1642                                 }
1643                         }
1644
1645                         if (!$root_id) {
1646                                 $is_selected = ($default_id == "CAT:0") ? "selected=\"1\"" : "";
1647
1648                                 printf("<option $is_selected value='CAT:0'>%s</option>",
1649                                         __("Uncategorized"));
1650
1651                                 $feed_result = db_query($link, "SELECT id,title FROM ttrss_feeds
1652                                         WHERE cat_id IS NULL AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1653
1654                                 while ($fline = db_fetch_assoc($feed_result)) {
1655                                         $is_selected = ($fline["id"] == $default_id && !$default_is_cat) ? "selected=\"1\"" : "";
1656
1657                                         $fline["title"] = " + " . $fline["title"];
1658
1659                                         for ($i = 0; $i < $nest_level; $i++)
1660                                                 $fline["title"] = " - " . $fline["title"];
1661
1662                                         printf("<option $is_selected value='%d'>%s</option>",
1663                                                 $fline["id"], htmlspecialchars($fline["title"]));
1664                                 }
1665                         }
1666
1667                 } else {
1668                         $result = db_query($link, "SELECT id,title FROM ttrss_feeds
1669                                 WHERE owner_uid = ".$_SESSION["uid"]." ORDER BY title");
1670
1671                         while ($line = db_fetch_assoc($result)) {
1672
1673                                 $is_selected = ($line["id"] == $default_id) ? "selected=\"1\"" : "";
1674
1675                                 printf("<option $is_selected value='%d'>%s</option>",
1676                                         $line["id"], htmlspecialchars($line["title"]));
1677                         }
1678                 }
1679
1680                 if (!$root_id) {
1681                         print "</select>";
1682                 }
1683         }
1684
1685         function print_feed_cat_select($link, $id, $default_id,
1686                 $attributes, $include_all_cats = true, $root_id = false, $nest_level = 0) {
1687
1688                         if (!$root_id) {
1689                                         print "<select id=\"$id\" name=\"$id\" default=\"$default_id\" onchange=\"catSelectOnChange(this)\" $attributes>";
1690                         }
1691
1692                         if ($root_id)
1693                                 $parent_qpart = "parent_cat = '$root_id'";
1694                         else
1695                                 $parent_qpart = "parent_cat IS NULL";
1696
1697                         $result = db_query($link, "SELECT id,title,
1698                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1699                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1700                                 FROM ttrss_feed_categories
1701                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1702
1703                         while ($line = db_fetch_assoc($result)) {
1704                                 if ($line["id"] == $default_id) {
1705                                         $is_selected = "selected=\"1\"";
1706                                 } else {
1707                                         $is_selected = "";
1708                                 }
1709
1710                                 for ($i = 0; $i < $nest_level; $i++)
1711                                         $line["title"] = " - " . $line["title"];
1712
1713                                 if ($line["title"])
1714                                         printf("<option $is_selected value='%d'>%s</option>",
1715                                                 $line["id"], htmlspecialchars($line["title"]));
1716
1717                                 if ($line["num_children"] > 0)
1718                                         print_feed_cat_select($link, $id, $default_id, $attributes,
1719                                                 $include_all_cats, $line["id"], $nest_level+1);
1720                         }
1721
1722                         if (!$root_id) {
1723                                 if ($include_all_cats) {
1724                                         if (db_num_rows($result) > 0) {
1725                                                 print "<option disabled=\"1\">--------</option>";
1726                                         }
1727
1728                                         if ($default_id == 0) {
1729                                                 $is_selected = "selected=\"1\"";
1730                                         } else {
1731                                                 $is_selected = "";
1732                                         }
1733
1734                                         print "<option $is_selected value=\"0\">".__('Uncategorized')."</option>";
1735                                 }
1736                                 print "</select>";
1737                         }
1738                 }
1739
1740         function checkbox_to_sql_bool($val) {
1741                 return ($val == "on") ? "true" : "false";
1742         }
1743
1744         function getFeedCatTitle($link, $id) {
1745                 if ($id == -1) {
1746                         return __("Special");
1747                 } else if ($id < -10) {
1748                         return __("Labels");
1749                 } else if ($id > 0) {
1750                         $result = db_query($link, "SELECT ttrss_feed_categories.title
1751                                 FROM ttrss_feeds, ttrss_feed_categories WHERE ttrss_feeds.id = '$id' AND
1752                                         cat_id = ttrss_feed_categories.id");
1753                         if (db_num_rows($result) == 1) {
1754                                 return db_fetch_result($result, 0, "title");
1755                         } else {
1756                                 return __("Uncategorized");
1757                         }
1758                 } else {
1759                         return "getFeedCatTitle($id) failed";
1760                 }
1761
1762         }
1763
1764         function getFeedIcon($id) {
1765                 switch ($id) {
1766                 case 0:
1767                         return "images/archive.png";
1768                         break;
1769                 case -1:
1770                         return "images/mark_set.svg";
1771                         break;
1772                 case -2:
1773                         return "images/pub_set.svg";
1774                         break;
1775                 case -3:
1776                         return "images/fresh.png";
1777                         break;
1778                 case -4:
1779                         return "images/tag.png";
1780                         break;
1781                 case -6:
1782                         return "images/recently_read.png";
1783                         break;
1784                 default:
1785                         if ($id < -10) {
1786                                 return "images/label.png";
1787                         } else {
1788                                 if (file_exists(ICONS_DIR . "/$id.ico"))
1789                                         return ICONS_URL . "/$id.ico";
1790                         }
1791                         break;
1792                 }
1793         }
1794
1795         function getFeedTitle($link, $id, $cat = false) {
1796                 if ($cat) {
1797                         return getCategoryTitle($link, $id);
1798                 } else if ($id == -1) {
1799                         return __("Starred articles");
1800                 } else if ($id == -2) {
1801                         return __("Published articles");
1802                 } else if ($id == -3) {
1803                         return __("Fresh articles");
1804                 } else if ($id == -4) {
1805                         return __("All articles");
1806                 } else if ($id === 0 || $id === "0") {
1807                         return __("Archived articles");
1808                 } else if ($id == -6) {
1809                         return __("Recently read");
1810                 } else if ($id < -10) {
1811                         $label_id = -$id - 11;
1812                         $result = db_query($link, "SELECT caption FROM ttrss_labels2 WHERE id = '$label_id'");
1813                         if (db_num_rows($result) == 1) {
1814                                 return db_fetch_result($result, 0, "caption");
1815                         } else {
1816                                 return "Unknown label ($label_id)";
1817                         }
1818
1819                 } else if (is_numeric($id) && $id > 0) {
1820                         $result = db_query($link, "SELECT title FROM ttrss_feeds WHERE id = '$id'");
1821                         if (db_num_rows($result) == 1) {
1822                                 return db_fetch_result($result, 0, "title");
1823                         } else {
1824                                 return "Unknown feed ($id)";
1825                         }
1826                 } else {
1827                         return $id;
1828                 }
1829         }
1830
1831         function make_init_params($link) {
1832                 $params = array();
1833
1834                 $params["sign_progress"] = "images/indicator_white.gif";
1835                 $params["sign_progress_tiny"] = "images/indicator_tiny.gif";
1836                 $params["sign_excl"] = "images/sign_excl.svg";
1837                 $params["sign_info"] = "images/sign_info.svg";
1838
1839                 foreach (array("ON_CATCHUP_SHOW_NEXT_FEED", "HIDE_READ_FEEDS",
1840                         "ENABLE_FEED_CATS", "FEEDS_SORT_BY_UNREAD", "CONFIRM_FEED_CATCHUP",
1841                         "CDM_AUTO_CATCHUP", "FRESH_ARTICLE_MAX_AGE", "DEFAULT_ARTICLE_LIMIT",
1842                         "HIDE_READ_SHOWS_SPECIAL", "COMBINED_DISPLAY_MODE") as $param) {
1843
1844                                  $params[strtolower($param)] = (int) get_pref($link, $param);
1845                  }
1846
1847                 $params["icons_url"] = ICONS_URL;
1848                 $params["cookie_lifetime"] = SESSION_COOKIE_LIFETIME;
1849                 $params["default_view_mode"] = get_pref($link, "_DEFAULT_VIEW_MODE");
1850                 $params["default_view_limit"] = (int) get_pref($link, "_DEFAULT_VIEW_LIMIT");
1851                 $params["default_view_order_by"] = get_pref($link, "_DEFAULT_VIEW_ORDER_BY");
1852                 $params["bw_limit"] = (int) $_SESSION["bw_limit"];
1853
1854                 $result = db_query($link, "SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
1855                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1856
1857                 $max_feed_id = db_fetch_result($result, 0, "mid");
1858                 $num_feeds = db_fetch_result($result, 0, "nf");
1859
1860                 $params["max_feed_id"] = (int) $max_feed_id;
1861                 $params["num_feeds"] = (int) $num_feeds;
1862
1863                 $params["collapsed_feedlist"] = (int) get_pref($link, "_COLLAPSED_FEEDLIST");
1864                 $params["hotkeys"] = get_hotkeys_map($link);
1865
1866                 $params["csrf_token"] = $_SESSION["csrf_token"];
1867                 $params["widescreen"] = (int) $_COOKIE["ttrss_widescreen"];
1868
1869                 $params['simple_update'] = defined('SIMPLE_UPDATE_MODE') && SIMPLE_UPDATE_MODE;
1870
1871                 return $params;
1872         }
1873
1874         function get_hotkeys_info($link) {
1875                 $hotkeys = array(
1876                         __("Navigation") => array(
1877                                 "next_feed" => __("Open next feed"),
1878                                 "prev_feed" => __("Open previous feed"),
1879                                 "next_article" => __("Open next article"),
1880                                 "prev_article" => __("Open previous article"),
1881                                 "next_article_noscroll" => __("Open next article (don't scroll long articles)"),
1882                                 "prev_article_noscroll" => __("Open previous article (don't scroll long articles)"),
1883                                 "search_dialog" => __("Show search dialog")),
1884                         __("Article") => array(
1885                                 "toggle_mark" => __("Toggle starred"),
1886                                 "toggle_publ" => __("Toggle published"),
1887                                 "toggle_unread" => __("Toggle unread"),
1888                                 "edit_tags" => __("Edit tags"),
1889                                 "dismiss_selected" => __("Dismiss selected"),
1890                                 "dismiss_read" => __("Dismiss read"),
1891                                 "open_in_new_window" => __("Open in new window"),
1892                                 "catchup_below" => __("Mark below as read"),
1893                                 "catchup_above" => __("Mark above as read"),
1894                                 "article_scroll_down" => __("Scroll down"),
1895                                 "article_scroll_up" => __("Scroll up"),
1896                                 "select_article_cursor" => __("Select article under cursor"),
1897                                 "email_article" => __("Email article"),
1898                                 "close_article" => __("Close/collapse article"),
1899                                 "toggle_widescreen" => __("Toggle widescreen mode"),
1900                                 "toggle_embed_original" => __("Toggle embed original")),
1901                         __("Article selection") => array(
1902                                 "select_all" => __("Select all articles"),
1903                                 "select_unread" => __("Select unread"),
1904                                 "select_marked" => __("Select starred"),
1905                                 "select_published" => __("Select published"),
1906                                 "select_invert" => __("Invert selection"),
1907                                 "select_none" => __("Deselect everything")),
1908                         __("Feed") => array(
1909                                 "feed_refresh" => __("Refresh current feed"),
1910                                 "feed_unhide_read" => __("Un/hide read feeds"),
1911                                 "feed_subscribe" => __("Subscribe to feed"),
1912                                 "feed_edit" => __("Edit feed"),
1913                                 "feed_catchup" => __("Mark as read"),
1914                                 "feed_reverse" => __("Reverse headlines"),
1915                                 "feed_debug_update" => __("Debug feed update"),
1916                                 "catchup_all" => __("Mark all feeds as read"),
1917                                 "cat_toggle_collapse" => __("Un/collapse current category"),
1918                                 "toggle_combined_mode" => __("Toggle combined mode")),
1919                         __("Go to") => array(
1920                                 "goto_all" => __("All articles"),
1921                                 "goto_fresh" => __("Fresh"),
1922                                 "goto_marked" => __("Starred"),
1923                                 "goto_published" => __("Published"),
1924                                 "goto_tagcloud" => __("Tag cloud"),
1925                                 "goto_prefs" => __("Preferences")),
1926                         __("Other") => array(
1927                                 "create_label" => __("Create label"),
1928                                 "create_filter" => __("Create filter"),
1929                                 "collapse_sidebar" => __("Un/collapse sidebar"),
1930                                 "help_dialog" => __("Show help dialog"))
1931                         );
1932
1933                 return $hotkeys;
1934         }
1935
1936         function get_hotkeys_map($link) {
1937                 $hotkeys = array(
1938 //                      "navigation" => array(
1939                                 "k" => "next_feed",
1940                                 "j" => "prev_feed",
1941                                 "n" => "next_article",
1942                                 "p" => "prev_article",
1943                                 "(38)|up" => "prev_article",
1944                                 "(40)|down" => "next_article",
1945 //                              "^(38)|Ctrl-up" => "prev_article_noscroll",
1946 //                              "^(40)|Ctrl-down" => "next_article_noscroll",
1947                                 "(191)|/" => "search_dialog",
1948 //                      "article" => array(
1949                                 "s" => "toggle_mark",
1950                                 "*s" => "toggle_publ",
1951                                 "u" => "toggle_unread",
1952                                 "*t" => "edit_tags",
1953                                 "*d" => "dismiss_selected",
1954                                 "*x" => "dismiss_read",
1955                                 "o" => "open_in_new_window",
1956                                 "c p" => "catchup_below",
1957                                 "c n" => "catchup_above",
1958                                 "*n" => "article_scroll_down",
1959                                 "*p" => "article_scroll_up",
1960                                 "*(38)|Shift+up" => "article_scroll_up",
1961                                 "*(40)|Shift+down" => "article_scroll_down",
1962                                 "a *w" => "toggle_widescreen",
1963                                 "a e" => "toggle_embed_original",
1964                                 "e" => "email_article",
1965                                 "a q" => "close_article",
1966 //                      "article_selection" => array(
1967                                 "a a" => "select_all",
1968                                 "a u" => "select_unread",
1969                                 "a *u" => "select_marked",
1970                                 "a p" => "select_published",
1971                                 "a i" => "select_invert",
1972                                 "a n" => "select_none",
1973 //                      "feed" => array(
1974                                 "f r" => "feed_refresh",
1975                                 "f a" => "feed_unhide_read",
1976                                 "f s" => "feed_subscribe",
1977                                 "f e" => "feed_edit",
1978                                 "f q" => "feed_catchup",
1979                                 "f x" => "feed_reverse",
1980                                 "f *d" => "feed_debug_update",
1981                                 "f *c" => "toggle_combined_mode",
1982                                 "*q" => "catchup_all",
1983                                 "x" => "cat_toggle_collapse",
1984 //                      "goto" => array(
1985                                 "g a" => "goto_all",
1986                                 "g f" => "goto_fresh",
1987                                 "g s" => "goto_marked",
1988                                 "g p" => "goto_published",
1989                                 "g t" => "goto_tagcloud",
1990                                 "g *p" => "goto_prefs",
1991 //                      "other" => array(
1992                                 "(9)|Tab" => "select_article_cursor", // tab
1993                                 "c l" => "create_label",
1994                                 "c f" => "create_filter",
1995                                 "c s" => "collapse_sidebar",
1996                                 "^(191)|Ctrl+/" => "help_dialog",
1997                         );
1998
1999                 if (get_pref($link, 'COMBINED_DISPLAY_MODE')) {
2000                         $hotkeys["^(38)|Ctrl-up"] = "prev_article_noscroll";
2001                         $hotkeys["^(40)|Ctrl-down"] = "next_article_noscroll";
2002                 }
2003
2004                 global $pluginhost;
2005                 foreach ($pluginhost->get_hooks($pluginhost::HOOK_HOTKEY_MAP) as $plugin) {
2006                         $hotkeys = $plugin->hook_hotkey_map($hotkeys);
2007                 }
2008
2009                 $prefixes = array();
2010
2011                 foreach (array_keys($hotkeys) as $hotkey) {
2012                         $pair = explode(" ", $hotkey, 2);
2013
2014                         if (count($pair) > 1 && !in_array($pair[0], $prefixes)) {
2015                                 array_push($prefixes, $pair[0]);
2016                         }
2017                 }
2018
2019                 return array($prefixes, $hotkeys);
2020         }
2021
2022         function make_runtime_info($link) {
2023                 $data = array();
2024
2025                 $result = db_query($link, "SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
2026                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
2027
2028                 $max_feed_id = db_fetch_result($result, 0, "mid");
2029                 $num_feeds = db_fetch_result($result, 0, "nf");
2030
2031                 $data["max_feed_id"] = (int) $max_feed_id;
2032                 $data["num_feeds"] = (int) $num_feeds;
2033
2034                 $data['last_article_id'] = getLastArticleId($link);
2035                 $data['cdm_expanded'] = get_pref($link, 'CDM_EXPANDED');
2036
2037                 $data['dep_ts'] = calculate_dep_timestamp();
2038
2039                 if (file_exists(LOCK_DIRECTORY . "/update_daemon.lock")) {
2040
2041                         $data['daemon_is_running'] = (int) file_is_locked("update_daemon.lock");
2042
2043                         if (time() - $_SESSION["daemon_stamp_check"] > 30) {
2044
2045                                 $stamp = (int) @file_get_contents(LOCK_DIRECTORY . "/update_daemon.stamp");
2046
2047                                 if ($stamp) {
2048                                         $stamp_delta = time() - $stamp;
2049
2050                                         if ($stamp_delta > 1800) {
2051                                                 $stamp_check = 0;
2052                                         } else {
2053                                                 $stamp_check = 1;
2054                                                 $_SESSION["daemon_stamp_check"] = time();
2055                                         }
2056
2057                                         $data['daemon_stamp_ok'] = $stamp_check;
2058
2059                                         $stamp_fmt = date("Y.m.d, G:i", $stamp);
2060
2061                                         $data['daemon_stamp'] = $stamp_fmt;
2062                                 }
2063                         }
2064                 }
2065
2066                 if ($_SESSION["last_version_check"] + 86400 + rand(-1000, 1000) < time()) {
2067                                 $new_version_details = @check_for_update($link);
2068
2069                                 $data['new_version_available'] = (int) ($new_version_details != false);
2070
2071                                 $_SESSION["last_version_check"] = time();
2072                                 $_SESSION["version_data"] = $new_version_details;
2073                 }
2074
2075                 return $data;
2076         }
2077
2078         function search_to_sql($link, $search) {
2079
2080                 $search_query_part = "";
2081
2082                 $keywords = explode(" ", $search);
2083                 $query_keywords = array();
2084
2085                 foreach ($keywords as $k) {
2086                         if (strpos($k, "-") === 0) {
2087                                 $k = substr($k, 1);
2088                                 $not = "NOT";
2089                         } else {
2090                                 $not = "";
2091                         }
2092
2093                         $commandpair = explode(":", mb_strtolower($k), 2);
2094
2095                         if ($commandpair[0] == "note" && $commandpair[1]) {
2096
2097                                 if ($commandpair[1] == "true")
2098                                         array_push($query_keywords, "($not (note IS NOT NULL AND note != ''))");
2099                                 else
2100                                         array_push($query_keywords, "($not (note IS NULL OR note = ''))");
2101
2102                         } else if ($commandpair[0] == "star" && $commandpair[1]) {
2103
2104                                 if ($commandpair[1] == "true")
2105                                         array_push($query_keywords, "($not (marked = true))");
2106                                 else
2107                                         array_push($query_keywords, "($not (marked = false))");
2108
2109                         } else if ($commandpair[0] == "pub" && $commandpair[1]) {
2110
2111                                 if ($commandpair[1] == "true")
2112                                         array_push($query_keywords, "($not (published = true))");
2113                                 else
2114                                         array_push($query_keywords, "($not (published = false))");
2115
2116                         } else if (strpos($k, "@") === 0) {
2117
2118                                 $user_tz_string = get_pref($link, 'USER_TIMEZONE', $_SESSION['uid']);
2119                                 $orig_ts = strtotime(substr($k, 1));
2120                                 $k = date("Y-m-d", convert_timestamp($orig_ts, $user_tz_string, 'UTC'));
2121
2122                                 //$k = date("Y-m-d", strtotime(substr($k, 1)));
2123
2124                                 array_push($query_keywords, "(".SUBSTRING_FOR_DATE."(updated,1,LENGTH('$k')) $not = '$k')");
2125                         } else {
2126                                 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2127                                                 OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2128                         }
2129                 }
2130
2131                 $search_query_part = implode("AND", $query_keywords);
2132
2133                 return $search_query_part;
2134         }
2135
2136         function getParentCategories($link, $cat, $owner_uid) {
2137                 $rv = array();
2138
2139                 $result = db_query($link, "SELECT parent_cat FROM ttrss_feed_categories
2140                         WHERE id = '$cat' AND parent_cat IS NOT NULL AND owner_uid = $owner_uid");
2141
2142                 while ($line = db_fetch_assoc($result)) {
2143                         array_push($rv, $line["parent_cat"]);
2144                         $rv = array_merge($rv, getParentCategories($link, $line["parent_cat"], $owner_uid));
2145                 }
2146
2147                 return $rv;
2148         }
2149
2150         function getChildCategories($link, $cat, $owner_uid) {
2151                 $rv = array();
2152
2153                 $result = db_query($link, "SELECT id FROM ttrss_feed_categories
2154                         WHERE parent_cat = '$cat' AND owner_uid = $owner_uid");
2155
2156                 while ($line = db_fetch_assoc($result)) {
2157                         array_push($rv, $line["id"]);
2158                         $rv = array_merge($rv, getChildCategories($link, $line["id"], $owner_uid));
2159                 }
2160
2161                 return $rv;
2162         }
2163
2164         function queryFeedHeadlines($link, $feed, $limit, $view_mode, $cat_view, $search, $search_mode, $override_order = false, $offset = 0, $owner_uid = 0, $filter = false, $since_id = 0, $include_children = false, $ignore_vfeed_group = false) {
2165
2166                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2167
2168                 $ext_tables_part = "";
2169
2170                         if ($search) {
2171
2172                                 if (SPHINX_ENABLED) {
2173                                         $ids = join(",", @sphinx_search($search, 0, 500));
2174
2175                                         if ($ids)
2176                                                 $search_query_part = "ref_id IN ($ids) AND ";
2177                                         else
2178                                                 $search_query_part = "ref_id = -1 AND ";
2179
2180                                 } else {
2181                                         $search_query_part = search_to_sql($link, $search);
2182                                         $search_query_part .= " AND ";
2183                                 }
2184
2185                         } else {
2186                                 $search_query_part = "";
2187                         }
2188
2189                         if ($filter) {
2190
2191                                 if (DB_TYPE == "pgsql") {
2192                                         $query_strategy_part .= " AND updated > NOW() - INTERVAL '14 days' ";
2193                                 } else {
2194                                         $query_strategy_part .= " AND updated > DATE_SUB(NOW(), INTERVAL 14 DAY) ";
2195                                 }
2196
2197                                 $override_order = "updated DESC";
2198
2199                                 $filter_query_part = filter_to_sql($link, $filter, $owner_uid);
2200
2201                                 // Try to check if SQL regexp implementation chokes on a valid regexp
2202                                 $result = db_query($link, "SELECT true AS true_val FROM ttrss_entries,
2203                                         ttrss_user_entries, ttrss_feeds, ttrss_feed_categories
2204                                         WHERE $filter_query_part LIMIT 1", false);
2205
2206                                 if ($result) {
2207                                         $test = db_fetch_result($result, 0, "true_val");
2208
2209                                         if (!$test) {
2210                                                 $filter_query_part = "false AND";
2211                                         } else {
2212                                                 $filter_query_part .= " AND";
2213                                         }
2214                                 } else {
2215                                         $filter_query_part = "false AND";
2216                                 }
2217
2218                         } else {
2219                                 $filter_query_part = "";
2220                         }
2221
2222                         if ($since_id) {
2223                                 $since_id_part = "ttrss_entries.id > $since_id AND ";
2224                         } else {
2225                                 $since_id_part = "";
2226                         }
2227
2228                         $view_query_part = "";
2229
2230                         if ($view_mode == "adaptive" || $view_query_part == "noscores") {
2231                                 if ($search) {
2232                                         $view_query_part = " ";
2233                                 } else if ($feed != -1) {
2234                                         $unread = getFeedUnread($link, $feed, $cat_view);
2235
2236                                         if ($cat_view && $feed > 0 && $include_children)
2237                                                 $unread += getCategoryChildrenUnread($link, $feed);
2238
2239                                         if ($unread > 0) {
2240                                                 $view_query_part = " unread = true AND ";
2241                                         }
2242                                 }
2243                         }
2244
2245                         if ($view_mode == "marked") {
2246                                 $view_query_part = " marked = true AND ";
2247                         }
2248
2249                         if ($view_mode == "published") {
2250                                 $view_query_part = " published = true AND ";
2251                         }
2252
2253                         if ($view_mode == "unread") {
2254                                 $view_query_part = " unread = true AND ";
2255                         }
2256
2257                         if ($view_mode == "updated") {
2258                                 $view_query_part = " (last_read is null and unread = false) AND ";
2259                         }
2260
2261                         if ($limit > 0) {
2262                                 $limit_query_part = "LIMIT " . $limit;
2263                         }
2264
2265                         $allow_archived = false;
2266
2267                         $vfeed_query_part = "";
2268
2269                         // override query strategy and enable feed display when searching globally
2270                         if ($search && $search_mode == "all_feeds") {
2271                                 $query_strategy_part = "true";
2272                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2273                         /* tags */
2274                         } else if (!is_numeric($feed)) {
2275                                 $query_strategy_part = "true";
2276                                 $vfeed_query_part = "(SELECT title FROM ttrss_feeds WHERE
2277                                         id = feed_id) as feed_title,";
2278                         } else if ($search && $search_mode == "this_cat") {
2279                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2280
2281                                 if ($feed > 0) {
2282                                         if ($include_children) {
2283                                                 $subcats = getChildCategories($link, $feed, $owner_uid);
2284                                                 array_push($subcats, $feed);
2285                                                 $cats_qpart = join(",", $subcats);
2286                                         } else {
2287                                                 $cats_qpart = $feed;
2288                                         }
2289
2290                                         $query_strategy_part = "ttrss_feeds.cat_id IN ($cats_qpart)";
2291
2292                                 } else {
2293                                         $query_strategy_part = "ttrss_feeds.cat_id IS NULL";
2294                                 }
2295
2296                         } else if ($feed > 0) {
2297
2298                                 if ($cat_view) {
2299
2300                                         if ($feed > 0) {
2301                                                 if ($include_children) {
2302                                                         # sub-cats
2303                                                         $subcats = getChildCategories($link, $feed, $owner_uid);
2304
2305                                                         array_push($subcats, $feed);
2306                                                         $query_strategy_part = "cat_id IN (".
2307                                                                         implode(",", $subcats).")";
2308
2309                                                 } else {
2310                                                         $query_strategy_part = "cat_id = '$feed'";
2311                                                 }
2312
2313                                         } else {
2314                                                 $query_strategy_part = "cat_id IS NULL";
2315                                         }
2316
2317                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2318
2319                                 } else {
2320                                         $query_strategy_part = "feed_id = '$feed'";
2321                                 }
2322                         } else if ($feed == 0 && !$cat_view) { // archive virtual feed
2323                                 $query_strategy_part = "feed_id IS NULL";
2324                                 $allow_archived = true;
2325                         } else if ($feed == 0 && $cat_view) { // uncategorized
2326                                 $query_strategy_part = "cat_id IS NULL AND feed_id IS NOT NULL";
2327                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2328                         } else if ($feed == -1) { // starred virtual feed
2329                                 $query_strategy_part = "marked = true";
2330                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2331                                 $allow_archived = true;
2332
2333                                 if (!$override_order) $override_order = "last_marked DESC, updated DESC";
2334
2335                         } else if ($feed == -2) { // published virtual feed OR labels category
2336
2337                                 if (!$cat_view) {
2338                                         $query_strategy_part = "published = true";
2339                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2340                                         $allow_archived = true;
2341
2342                                         if (!$override_order) $override_order = "last_published DESC, updated DESC";
2343                                 } else {
2344                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2345
2346                                         $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2347
2348                                         $query_strategy_part = "ttrss_labels2.id = ttrss_user_labels2.label_id AND
2349                                                 ttrss_user_labels2.article_id = ref_id";
2350
2351                                 }
2352                         } else if ($feed == -6) { // recently read
2353                                 $query_strategy_part = "unread = false AND last_read IS NOT NULL";
2354                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2355                                 $allow_archived = true;
2356
2357                                 if (!$override_order) $override_order = "last_read DESC";
2358                         } else if ($feed == -3) { // fresh virtual feed
2359                                 $query_strategy_part = "unread = true AND score >= 0";
2360
2361                                 $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE", $owner_uid);
2362
2363                                 if (DB_TYPE == "pgsql") {
2364                                         $query_strategy_part .= " AND updated > NOW() - INTERVAL '$intl hour' ";
2365                                 } else {
2366                                         $query_strategy_part .= " AND updated > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
2367                                 }
2368
2369                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2370                         } else if ($feed == -4) { // all articles virtual feed
2371                                 $query_strategy_part = "true";
2372                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2373                         } else if ($feed <= -10) { // labels
2374                                 $label_id = -$feed - 11;
2375
2376                                 $query_strategy_part = "label_id = '$label_id' AND
2377                                         ttrss_labels2.id = ttrss_user_labels2.label_id AND
2378                                         ttrss_user_labels2.article_id = ref_id";
2379
2380                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2381                                 $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2382                                 $allow_archived = true;
2383
2384                         } else {
2385                                 $query_strategy_part = "true";
2386                         }
2387
2388                         if (get_pref($link, "SORT_HEADLINES_BY_FEED_DATE", $owner_uid)) {
2389                                 $date_sort_field = "updated";
2390                         } else {
2391                                 $date_sort_field = "date_entered";
2392                         }
2393
2394                         if (get_pref($link, 'REVERSE_HEADLINES', $owner_uid)) {
2395                                 $order_by = "$date_sort_field";
2396                         } else {
2397                                 $order_by = "$date_sort_field DESC";
2398                         }
2399
2400                         if ($view_mode != "noscores") {
2401                                 $order_by = "score DESC, $order_by";
2402                         }
2403
2404                         if ($override_order) {
2405                                 $order_by = $override_order;
2406                         }
2407
2408                         $feed_title = "";
2409
2410                         if ($search) {
2411                                 $feed_title = T_sprintf("Search results: %s", $search);
2412                         } else {
2413                                 if ($cat_view) {
2414                                         $feed_title = getCategoryTitle($link, $feed);
2415                                 } else {
2416                                         if (is_numeric($feed) && $feed > 0) {
2417                                                 $result = db_query($link, "SELECT title,site_url,last_error
2418                                                         FROM ttrss_feeds WHERE id = '$feed' AND owner_uid = $owner_uid");
2419
2420                                                 $feed_title = db_fetch_result($result, 0, "title");
2421                                                 $feed_site_url = db_fetch_result($result, 0, "site_url");
2422                                                 $last_error = db_fetch_result($result, 0, "last_error");
2423                                         } else {
2424                                                 $feed_title = getFeedTitle($link, $feed);
2425                                         }
2426                                 }
2427                         }
2428
2429                         $content_query_part = "content as content_preview, cached_content, ";
2430
2431                         if (is_numeric($feed)) {
2432
2433                                 if ($feed >= 0) {
2434                                         $feed_kind = "Feeds";
2435                                 } else {
2436                                         $feed_kind = "Labels";
2437                                 }
2438
2439                                 if ($limit_query_part) {
2440                                         $offset_query_part = "OFFSET $offset";
2441                                 }
2442
2443                                 // proper override_order applied above
2444                                 if ($vfeed_query_part && !$ignore_vfeed_group && get_pref($link, 'VFEED_GROUP_BY_FEED', $owner_uid)) {
2445                                         if (!$override_order) {
2446                                                 $order_by = "ttrss_feeds.title, $order_by";
2447                                         } else {
2448                                                 $order_by = "ttrss_feeds.title, $override_order";
2449                                         }
2450                                 }
2451
2452                                 if (!$allow_archived) {
2453                                         $from_qpart = "ttrss_entries,ttrss_user_entries,ttrss_feeds$ext_tables_part";
2454                                         $feed_check_qpart = "ttrss_user_entries.feed_id = ttrss_feeds.id AND";
2455
2456                                 } else {
2457                                         $from_qpart = "ttrss_entries$ext_tables_part,ttrss_user_entries
2458                                                 LEFT JOIN ttrss_feeds ON (feed_id = ttrss_feeds.id)";
2459                                 }
2460
2461                                 $query = "SELECT DISTINCT
2462                                                 date_entered,
2463                                                 guid,
2464                                                 ttrss_entries.id,ttrss_entries.title,
2465                                                 updated,
2466                                                 label_cache,
2467                                                 tag_cache,
2468                                                 always_display_enclosures,
2469                                                 site_url,
2470                                                 note,
2471                                                 num_comments,
2472                                                 comments,
2473                                                 int_id,
2474                                                 hide_images,
2475                                                 unread,feed_id,marked,published,link,last_read,orig_feed_id,
2476                                                 last_marked, last_published,
2477                                                 ".SUBSTRING_FOR_DATE."(last_read,1,19) as last_read_noms,
2478                                                 $vfeed_query_part
2479                                                 $content_query_part
2480                                                 ".SUBSTRING_FOR_DATE."(updated,1,19) as updated_noms,
2481                                                 author,score
2482                                         FROM
2483                                                 $from_qpart
2484                                         WHERE
2485                                         $feed_check_qpart
2486                                         ttrss_user_entries.ref_id = ttrss_entries.id AND
2487                                         ttrss_user_entries.owner_uid = '$owner_uid' AND
2488                                         $search_query_part
2489                                         $filter_query_part
2490                                         $view_query_part
2491                                         $since_id_part
2492                                         $query_strategy_part ORDER BY $order_by
2493                                         $limit_query_part $offset_query_part";
2494
2495                                 if ($_REQUEST["debug"]) print $query;
2496
2497                                 $result = db_query($link, $query);
2498
2499                         } else {
2500                                 // browsing by tag
2501
2502                                 $select_qpart = "SELECT DISTINCT " .
2503                                                                 "date_entered," .
2504                                                                 "guid," .
2505                                                                 "note," .
2506                                                                 "ttrss_entries.id as id," .
2507                                                                 "title," .
2508                                                                 "updated," .
2509                                                                 "unread," .
2510                                                                 "feed_id," .
2511                                                                 "orig_feed_id," .
2512                                                                 "marked," .
2513                                                                 "num_comments, " .
2514                                                                 "comments, " .
2515                                                                 "tag_cache," .
2516                                                                 "label_cache," .
2517                                                                 "link," .
2518                                                                 "last_read," .
2519                                                                 "(SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) AS hide_images," .
2520                                                                 "last_marked, last_published, " .
2521                                                                 SUBSTRING_FOR_DATE . "(last_read,1,19) as last_read_noms," .
2522                                                                 $since_id_part .
2523                                                                 $vfeed_query_part .
2524                                                                 $content_query_part .
2525                                                                 SUBSTRING_FOR_DATE . "(updated,1,19) as updated_noms," .
2526                                                                 "score ";
2527
2528                                 $feed_kind = "Tags";
2529                                 $all_tags = explode(",", $feed);
2530                                 if ($search_mode == 'any') {
2531                                         $tag_sql = "tag_name in (" . implode(", ", array_map("db_quote", $all_tags)) . ")";
2532                                         $from_qpart = " FROM ttrss_entries,ttrss_user_entries,ttrss_tags ";
2533                                         $where_qpart = " WHERE " .
2534                                                                    "ref_id = ttrss_entries.id AND " .
2535                                                                    "ttrss_user_entries.owner_uid = $owner_uid AND " .
2536                                                                    "post_int_id = int_id AND $tag_sql AND " .
2537                                                                    $view_query_part .
2538                                                                    $search_query_part .
2539                                                                    $query_strategy_part . " ORDER BY $order_by " .
2540                                                                    $limit_query_part;
2541
2542                                 } else {
2543                                         $i = 1;
2544                                         $sub_selects = array();
2545                                         $sub_ands = array();
2546                                         foreach ($all_tags as $term) {
2547                                                 array_push($sub_selects, "(SELECT post_int_id from ttrss_tags WHERE tag_name = " . db_quote($term) . " AND owner_uid = $owner_uid) as A$i");
2548                                                 $i++;
2549                                         }
2550                                         if ($i > 2) {
2551                                                 $x = 1;
2552                                                 $y = 2;
2553                                                 do {
2554                                                         array_push($sub_ands, "A$x.post_int_id = A$y.post_int_id");
2555                                                         $x++;
2556                                                         $y++;
2557                                                 } while ($y < $i);
2558                                         }
2559                                         array_push($sub_ands, "A1.post_int_id = ttrss_user_entries.int_id and ttrss_user_entries.owner_uid = $owner_uid");
2560                                         array_push($sub_ands, "ttrss_user_entries.ref_id = ttrss_entries.id");
2561                                         $from_qpart = " FROM " . implode(", ", $sub_selects) . ", ttrss_user_entries, ttrss_entries";
2562                                         $where_qpart = " WHERE " . implode(" AND ", $sub_ands);
2563                                 }
2564                                 //                              error_log("TAG SQL: " . $tag_sql);
2565                                 // $tag_sql = "tag_name = '$feed'";   DEFAULT way
2566
2567                                 //                              error_log("[". $select_qpart . "][" . $from_qpart . "][" .$where_qpart . "]");
2568                                 $result = db_query($link, $select_qpart . $from_qpart . $where_qpart);
2569                         }
2570
2571                         return array($result, $feed_title, $feed_site_url, $last_error);
2572
2573         }
2574
2575         function sanitize($link, $str, $force_remove_images = false, $owner = false, $site_url = false) {
2576                 if (!$owner) $owner = $_SESSION["uid"];
2577
2578                 $res = trim($str); if (!$res) return '';
2579
2580                 if (strpos($res, "href=") === false)
2581                         $res = rewrite_urls($res);
2582
2583                 $charset_hack = '<head>
2584                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
2585                 </head>';
2586
2587                 $res = trim($res); if (!$res) return '';
2588
2589                 libxml_use_internal_errors(true);
2590
2591                 $doc = new DOMDocument();
2592                 $doc->loadHTML($charset_hack . $res);
2593                 $xpath = new DOMXPath($doc);
2594
2595                 $entries = $xpath->query('(//a[@href]|//img[@src])');
2596
2597                 foreach ($entries as $entry) {
2598
2599                         if ($site_url) {
2600
2601                                 if ($entry->hasAttribute('href'))
2602                                         $entry->setAttribute('href',
2603                                                 rewrite_relative_url($site_url, $entry->getAttribute('href')));
2604
2605                                 if ($entry->hasAttribute('src')) {
2606                                         $src = rewrite_relative_url($site_url, $entry->getAttribute('src'));
2607
2608                                         $cached_filename = CACHE_DIR . '/images/' . sha1($src) . '.png';
2609
2610                                         if (file_exists($cached_filename)) {
2611                                                 $src = SELF_URL_PATH . '/image.php?hash=' . sha1($src);
2612                                         }
2613
2614                                         $entry->setAttribute('src', $src);
2615                                 }
2616
2617                                 if ($entry->nodeName == 'img') {
2618                                         if (($owner && get_pref($link, "STRIP_IMAGES", $owner)) ||
2619                                                         $force_remove_images) {
2620
2621                                                 $p = $doc->createElement('p');
2622
2623                                                 $a = $doc->createElement('a');
2624                                                 $a->setAttribute('href', $entry->getAttribute('src'));
2625
2626                                                 $a->appendChild(new DOMText($entry->getAttribute('src')));
2627                                                 $a->setAttribute('target', '_blank');
2628
2629                                                 $p->appendChild($a);
2630
2631                                                 $entry->parentNode->replaceChild($p, $entry);
2632                                         }
2633                                 }
2634                         }
2635
2636                         if (strtolower($entry->nodeName) == "a") {
2637                                 $entry->setAttribute("target", "_blank");
2638                         }
2639                 }
2640
2641                 $entries = $xpath->query('//iframe');
2642                 foreach ($entries as $entry) {
2643                         $entry->setAttribute('sandbox', 'allow-scripts');
2644
2645                 }
2646
2647                 global $pluginhost;
2648
2649                 if (isset($pluginhost)) {
2650                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_SANITIZE) as $plugin) {
2651                                 $doc = $plugin->hook_sanitize($doc, $site_url);
2652                         }
2653                 }
2654
2655                 $doc->removeChild($doc->firstChild); //remove doctype
2656                 $doc = strip_harmful_tags($doc);
2657                 $res = $doc->saveHTML();
2658                 return $res;
2659         }
2660
2661         function strip_harmful_tags($doc) {
2662                 $entries = $doc->getElementsByTagName("*");
2663
2664                 $allowed_elements = array('a', 'address', 'audio', 'article',
2665                         'b', 'big', 'blockquote', 'body', 'br', 'cite',
2666                         'code', 'dd', 'del', 'details', 'div', 'dl', 'font',
2667                         'dt', 'em', 'footer', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6',
2668                         'header', 'html', 'i', 'img', 'ins', 'kbd',
2669                         'li', 'nav', 'ol', 'p', 'pre', 'q', 's','small',
2670                         'source', 'span', 'strike', 'strong', 'sub', 'summary',
2671                         'sup', 'table', 'tbody', 'td', 'tfoot', 'th', 'thead',
2672                         'tr', 'track', 'tt', 'u', 'ul', 'var', 'wbr', 'video' );
2673
2674                 if ($_SESSION['hasSandbox']) array_push($allowed_elements, 'iframe');
2675
2676                 $disallowed_attributes = array('id', 'style', 'class');
2677
2678                 foreach ($entries as $entry) {
2679                         if (!in_array($entry->nodeName, $allowed_elements)) {
2680                                 $entry->parentNode->removeChild($entry);
2681                         }
2682
2683                         if ($entry->hasAttributes()) {
2684                                 foreach (iterator_to_array($entry->attributes) as $attr) {
2685
2686                                         if (strpos($attr->nodeName, 'on') === 0) {
2687                                                 $entry->removeAttributeNode($attr);
2688                                         }
2689
2690                                         if (in_array($attr->nodeName, $disallowed_attributes)) {
2691                                                 $entry->removeAttributeNode($attr);
2692                                         }
2693                                 }
2694                         }
2695                 }
2696
2697                 return $doc;
2698         }
2699
2700         function check_for_update($link) {
2701                 if (CHECK_FOR_NEW_VERSION && $_SESSION['access_level'] >= 10) {
2702                         $version_url = "http://tt-rss.org/version.php?ver=" . VERSION .
2703                                 "&iid=" . sha1(SELF_URL_PATH);
2704
2705                         $version_data = @fetch_file_contents($version_url);
2706
2707                         if ($version_data) {
2708                                 $version_data = json_decode($version_data, true);
2709                                 if ($version_data && $version_data['version']) {
2710
2711                                         if (version_compare(VERSION, $version_data['version']) == -1) {
2712                                                 return $version_data;
2713                                         }
2714                                 }
2715                         }
2716                 }
2717                 return false;
2718         }
2719
2720         function catchupArticlesById($link, $ids, $cmode, $owner_uid = false) {
2721
2722                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2723                 if (count($ids) == 0) return;
2724
2725                 $tmp_ids = array();
2726
2727                 foreach ($ids as $id) {
2728                         array_push($tmp_ids, "ref_id = '$id'");
2729                 }
2730
2731                 $ids_qpart = join(" OR ", $tmp_ids);
2732
2733                 if ($cmode == 0) {
2734                         db_query($link, "UPDATE ttrss_user_entries SET
2735                         unread = false,last_read = NOW()
2736                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2737                 } else if ($cmode == 1) {
2738                         db_query($link, "UPDATE ttrss_user_entries SET
2739                         unread = true
2740                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2741                 } else {
2742                         db_query($link, "UPDATE ttrss_user_entries SET
2743                         unread = NOT unread,last_read = NOW()
2744                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2745                 }
2746
2747                 /* update ccache */
2748
2749                 $result = db_query($link, "SELECT DISTINCT feed_id FROM ttrss_user_entries
2750                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2751
2752                 while ($line = db_fetch_assoc($result)) {
2753                         ccache_update($link, $line["feed_id"], $owner_uid);
2754                 }
2755         }
2756
2757         function get_article_tags($link, $id, $owner_uid = 0, $tag_cache = false) {
2758
2759                 $a_id = db_escape_string($id);
2760
2761                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2762
2763                 $query = "SELECT DISTINCT tag_name,
2764                         owner_uid as owner FROM
2765                         ttrss_tags WHERE post_int_id = (SELECT int_id FROM ttrss_user_entries WHERE
2766                         ref_id = '$a_id' AND owner_uid = '$owner_uid' LIMIT 1) ORDER BY tag_name";
2767
2768                 $obj_id = md5("TAGS:$owner_uid:$id");
2769                 $tags = array();
2770
2771                 /* check cache first */
2772
2773                 if ($tag_cache === false) {
2774                         $result = db_query($link, "SELECT tag_cache FROM ttrss_user_entries
2775                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
2776
2777                         $tag_cache = db_fetch_result($result, 0, "tag_cache");
2778                 }
2779
2780                 if ($tag_cache) {
2781                         $tags = explode(",", $tag_cache);
2782                 } else {
2783
2784                         /* do it the hard way */
2785
2786                         $tmp_result = db_query($link, $query);
2787
2788                         while ($tmp_line = db_fetch_assoc($tmp_result)) {
2789                                 array_push($tags, $tmp_line["tag_name"]);
2790                         }
2791
2792                         /* update the cache */
2793
2794                         $tags_str = db_escape_string(join(",", $tags));
2795
2796                         db_query($link, "UPDATE ttrss_user_entries
2797                                 SET tag_cache = '$tags_str' WHERE ref_id = '$id'
2798                                 AND owner_uid = $owner_uid");
2799                 }
2800
2801                 return $tags;
2802         }
2803
2804         function trim_array($array) {
2805                 $tmp = $array;
2806                 array_walk($tmp, 'trim');
2807                 return $tmp;
2808         }
2809
2810         function tag_is_valid($tag) {
2811                 if ($tag == '') return false;
2812                 if (preg_match("/^[0-9]*$/", $tag)) return false;
2813                 if (mb_strlen($tag) > 250) return false;
2814
2815                 if (function_exists('iconv')) {
2816                         $tag = iconv("utf-8", "utf-8", $tag);
2817                 }
2818
2819                 if (!$tag) return false;
2820
2821                 return true;
2822         }
2823
2824         function render_login_form($link, $form_id = 0) {
2825                 switch ($form_id) {
2826                 case 0:
2827                         require_once "login_form.php";
2828                         break;
2829                 case 1:
2830                         require_once "mobile/login_form.php";
2831                         break;
2832                 }
2833                 exit;
2834         }
2835
2836         // from http://developer.apple.com/internet/safari/faq.html
2837         function no_cache_incantation() {
2838                 header("Expires: Mon, 22 Dec 1980 00:00:00 GMT"); // Happy birthday to me :)
2839                 header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT"); // always modified
2840                 header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0"); // HTTP/1.1
2841                 header("Cache-Control: post-check=0, pre-check=0", false);
2842                 header("Pragma: no-cache"); // HTTP/1.0
2843         }
2844
2845         function format_warning($msg, $id = "") {
2846                 global $link;
2847                 return "<div class=\"warning\" id=\"$id\">
2848                         <img src=\"images/sign_excl.svg\">$msg</div>";
2849         }
2850
2851         function format_notice($msg, $id = "") {
2852                 global $link;
2853                 return "<div class=\"notice\" id=\"$id\">
2854                         <img src=\"images/sign_info.svg\">$msg</div>";
2855         }
2856
2857         function format_error($msg, $id = "") {
2858                 global $link;
2859                 return "<div class=\"error\" id=\"$id\">
2860                         <img src=\"images/sign_excl.svg\">$msg</div>";
2861         }
2862
2863         function print_notice($msg) {
2864                 return print format_notice($msg);
2865         }
2866
2867         function print_warning($msg) {
2868                 return print format_warning($msg);
2869         }
2870
2871         function print_error($msg) {
2872                 return print format_error($msg);
2873         }
2874
2875
2876         function T_sprintf() {
2877                 $args = func_get_args();
2878                 return vsprintf(__(array_shift($args)), $args);
2879         }
2880
2881         function format_inline_player($link, $url, $ctype) {
2882
2883                 $entry = "";
2884
2885                 $url = htmlspecialchars($url);
2886
2887                 if (strpos($ctype, "audio/") === 0) {
2888
2889                         if ($_SESSION["hasAudio"] && (strpos($ctype, "ogg") !== false ||
2890                                 strpos($_SERVER['HTTP_USER_AGENT'], "Chrome") !== false ||
2891                                 strpos($_SERVER['HTTP_USER_AGENT'], "Safari") !== false )) {
2892
2893                                 $id = 'AUDIO-' . uniqid();
2894
2895                                 $entry .= "<audio id=\"$id\"\" controls style='display : none'>
2896                                         <source type=\"$ctype\" src=\"$url\"></source>
2897                                         </audio>";
2898
2899                                 $entry .= "<span onclick=\"player(this)\"
2900                                         title=\"".__("Click to play")."\" status=\"0\"
2901                                         class=\"player\" audio-id=\"$id\">".__("Play")."</span>";
2902
2903                         } else {
2904
2905                                 $entry .= "<object type=\"application/x-shockwave-flash\"
2906                                         data=\"lib/button/musicplayer.swf?song_url=$url\"
2907                                         width=\"17\" height=\"17\" style='float : left; margin-right : 5px;'>
2908                                         <param name=\"movie\"
2909                                                 value=\"lib/button/musicplayer.swf?song_url=$url\" />
2910                                         </object>";
2911                         }
2912
2913                         if ($entry) $entry .= "&nbsp; <a target=\"_blank\"
2914                                 href=\"$url\">" . basename($url) . "</a>";
2915
2916                         return $entry;
2917
2918                 }
2919
2920                 return "";
2921
2922 /*              $filename = substr($url, strrpos($url, "/")+1);
2923
2924                 $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
2925                         $filename . " (" . $ctype . ")" . "</a>"; */
2926
2927         }
2928
2929         function format_article($link, $id, $mark_as_read = true, $zoom_mode = false, $owner_uid = false) {
2930                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2931
2932                 $rv = array();
2933
2934                 $rv['id'] = $id;
2935
2936                 /* we can figure out feed_id from article id anyway, why do we
2937                  * pass feed_id here? let's ignore the argument :( */
2938
2939                 $result = db_query($link, "SELECT feed_id FROM ttrss_user_entries
2940                         WHERE ref_id = '$id'");
2941
2942                 $feed_id = (int) db_fetch_result($result, 0, "feed_id");
2943
2944                 $rv['feed_id'] = $feed_id;
2945
2946                 //if (!$zoom_mode) { print "<article id='$id'><![CDATA["; };
2947
2948                 if ($mark_as_read) {
2949                         $result = db_query($link, "UPDATE ttrss_user_entries
2950                                 SET unread = false,last_read = NOW()
2951                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
2952
2953                         ccache_update($link, $feed_id, $owner_uid);
2954                 }
2955
2956                 $result = db_query($link, "SELECT id,title,link,content,feed_id,comments,int_id,
2957                         ".SUBSTRING_FOR_DATE."(updated,1,16) as updated,
2958                         (SELECT site_url FROM ttrss_feeds WHERE id = feed_id) as site_url,
2959                         (SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) as hide_images,
2960                         num_comments,
2961                         tag_cache,
2962                         author,
2963                         orig_feed_id,
2964                         note,
2965                         cached_content
2966                         FROM ttrss_entries,ttrss_user_entries
2967                         WHERE   id = '$id' AND ref_id = id AND owner_uid = $owner_uid");
2968
2969                 if ($result) {
2970
2971                         $line = db_fetch_assoc($result);
2972
2973                         $tag_cache = $line["tag_cache"];
2974
2975                         $line["tags"] = get_article_tags($link, $id, $owner_uid, $line["tag_cache"]);
2976                         unset($line["tag_cache"]);
2977
2978                         $line["content"] = sanitize($link, $line["content"], false, $owner_uid, $line["site_url"]);
2979
2980                         global $pluginhost;
2981
2982                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_RENDER_ARTICLE) as $p) {
2983                                 $line = $p->hook_render_article($line);
2984                         }
2985
2986                         $num_comments = $line["num_comments"];
2987                         $entry_comments = "";
2988
2989                         if ($num_comments > 0) {
2990                                 if ($line["comments"]) {
2991                                         $comments_url = htmlspecialchars($line["comments"]);
2992                                 } else {
2993                                         $comments_url = htmlspecialchars($line["link"]);
2994                                 }
2995                                 $entry_comments = "<a target='_blank' href=\"$comments_url\">$num_comments comments</a>";
2996                         } else {
2997                                 if ($line["comments"] && $line["link"] != $line["comments"]) {
2998                                         $entry_comments = "<a target='_blank' href=\"".htmlspecialchars($line["comments"])."\">comments</a>";
2999                                 }
3000                         }
3001
3002                         if ($zoom_mode) {
3003                                 header("Content-Type: text/html");
3004                                 $rv['content'] .= "<html><head>
3005                                                 <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"/>
3006                                                 <title>Tiny Tiny RSS - ".$line["title"]."</title>
3007                                                 <link rel=\"stylesheet\" type=\"text/css\" href=\"tt-rss.css\">
3008                                         </head><body>";
3009                         }
3010
3011                         $title_escaped = htmlspecialchars($line['title']);
3012
3013                         $rv['content'] .= "<div id=\"PTITLE-FULL-$id\" style=\"display : none\">" .
3014                                 strip_tags($line['title']) . "</div>";
3015
3016                         $rv['content'] .= "<div class=\"postReply\" id=\"POST-$id\">";
3017
3018                         $rv['content'] .= "<div class=\"postHeader\" id=\"POSTHDR-$id\">";
3019
3020                         $entry_author = $line["author"];
3021
3022                         if ($entry_author) {
3023                                 $entry_author = __(" - ") . $entry_author;
3024                         }
3025
3026                         $parsed_updated = make_local_datetime($link, $line["updated"], true,
3027                                 $owner_uid, true);
3028
3029                         $rv['content'] .= "<div class=\"postDate\">$parsed_updated</div>";
3030
3031                         if ($line["link"]) {
3032                                 $rv['content'] .= "<div class='postTitle'><a target='_blank'
3033                                         title=\"".htmlspecialchars($line['title'])."\"
3034                                         href=\"" .
3035                                         htmlspecialchars($line["link"]) . "\">" .
3036                                         $line["title"] .
3037                                         "<span class='author'>$entry_author</span></a></div>";
3038                         } else {
3039                                 $rv['content'] .= "<div class='postTitle'>" . $line["title"] . "$entry_author</div>";
3040                         }
3041
3042                         $tags_str = format_tags_string($line["tags"], $id);
3043                         $tags_str_full = join(", ", $line["tags"]);
3044
3045                         if (!$tags_str_full) $tags_str_full = __("no tags");
3046
3047                         if (!$entry_comments) $entry_comments = "&nbsp;"; # placeholder
3048
3049                         $rv['content'] .= "<div class='postTags' style='float : right'>
3050                                 <img src='images/tag.png'
3051                                 class='tagsPic' alt='Tags' title='Tags'>&nbsp;";
3052
3053                         if (!$zoom_mode) {
3054                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>
3055                                         <a title=\"".__('Edit tags for this article')."\"
3056                                         href=\"#\" onclick=\"editArticleTags($id, $feed_id)\">(+)</a>";
3057
3058                                 $rv['content'] .= "<div dojoType=\"dijit.Tooltip\"
3059                                         id=\"ATSTRTIP-$id\" connectId=\"ATSTR-$id\"
3060                                         position=\"below\">$tags_str_full</div>";
3061
3062                                 global $pluginhost;
3063
3064                                 foreach ($pluginhost->get_hooks($pluginhost::HOOK_ARTICLE_BUTTON) as $p) {
3065                                         $rv['content'] .= $p->hook_article_button($line);
3066                                 }
3067
3068
3069                         } else {
3070                                 $tags_str = strip_tags($tags_str);
3071                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>";
3072                         }
3073                         $rv['content'] .= "</div>";
3074                         $rv['content'] .= "<div clear='both'>$entry_comments</div>";
3075
3076                         if ($line["orig_feed_id"]) {
3077
3078                                 $tmp_result = db_query($link, "SELECT * FROM ttrss_archived_feeds
3079                                         WHERE id = ".$line["orig_feed_id"]);
3080
3081                                 if (db_num_rows($tmp_result) != 0) {
3082
3083                                         $rv['content'] .= "<div clear='both'>";
3084                                         $rv['content'] .= __("Originally from:");
3085
3086                                         $rv['content'] .= "&nbsp;";
3087
3088                                         $tmp_line = db_fetch_assoc($tmp_result);
3089
3090                                         $rv['content'] .= "<a target='_blank'
3091                                                 href=' " . htmlspecialchars($tmp_line['site_url']) . "'>" .
3092                                                 $tmp_line['title'] . "</a>";
3093
3094                                         $rv['content'] .= "&nbsp;";
3095
3096                                         $rv['content'] .= "<a target='_blank' href='" . htmlspecialchars($tmp_line['feed_url']) . "'>";
3097                                         $rv['content'] .= "<img title='".__('Feed URL')."'class='tinyFeedIcon' src='images/pub_set.svg'></a>";
3098
3099                                         $rv['content'] .= "</div>";
3100                                 }
3101                         }
3102
3103                         $rv['content'] .= "</div>";
3104
3105                         $rv['content'] .= "<div id=\"POSTNOTE-$id\">";
3106                                 if ($line['note']) {
3107                                         $rv['content'] .= format_article_note($id, $line['note'], !$zoom_mode);
3108                                 }
3109                         $rv['content'] .= "</div>";
3110
3111                         $rv['content'] .= "<div class=\"postContent\">";
3112
3113                         // N-grams
3114
3115                         if (DB_TYPE == "pgsql" and defined('_NGRAM_TITLE_RELATED_THRESHOLD')) {
3116
3117                                 $ngram_result = db_query($link, "SELECT id,title FROM
3118                                                 ttrss_entries,ttrss_user_entries
3119                                         WHERE ref_id = id AND updated >= NOW() - INTERVAL '7 day'
3120                                                 AND similarity(title, '$title_escaped') >= "._NGRAM_TITLE_RELATED_THRESHOLD."
3121                                                 AND title != '$title_escaped'
3122                                                 AND owner_uid = $owner_uid");
3123
3124                                 if (db_num_rows($ngram_result) > 0) {
3125                                         $rv['content'] .= "<div dojoType=\"dijit.form.DropDownButton\">".
3126                                                 "<span>" . __('Related')."</span>";
3127                                         $rv['content'] .= "<div dojoType=\"dijit.Menu\" style=\"display: none;\">";
3128
3129                                         while ($nline = db_fetch_assoc($ngram_result)) {
3130                                                 $rv['content'] .= "<div onclick=\"hlOpenInNewTab(null,".$nline['id'].")\"
3131                                                         dojoType=\"dijit.MenuItem\">".$nline['title']."</div>";
3132
3133                                         }
3134                                         $rv['content'] .= "</div></div><br/";
3135                                 }
3136                         }
3137
3138                         $rv['content'] .= $line["content"];
3139
3140                         $rv['content'] .= format_article_enclosures($link, $id,
3141                                 $always_display_enclosures, $line["content"], $line["hide_images"]);
3142
3143                         $rv['content'] .= "</div>";
3144
3145                         $rv['content'] .= "</div>";
3146
3147                 }
3148
3149                 if ($zoom_mode) {
3150                         $rv['content'] .= "
3151                                 <div style=\"text-align : center\">
3152                                 <button onclick=\"return window.close()\">".
3153                                         __("Close this window")."</button></div>";
3154                         $rv['content'] .= "</body></html>";
3155                 }
3156
3157                 return $rv;
3158
3159         }
3160
3161         function print_checkpoint($n, $s) {
3162                 $ts = microtime(true);
3163                 echo sprintf("<!-- CP[$n] %.4f seconds -->", $ts - $s);
3164                 return $ts;
3165         }
3166
3167         function sanitize_tag($tag) {
3168                 $tag = trim($tag);
3169
3170                 $tag = mb_strtolower($tag, 'utf-8');
3171
3172                 $tag = preg_replace('/[\'\"\+\>\<]/', "", $tag);
3173
3174 //              $tag = str_replace('"', "", $tag);
3175 //              $tag = str_replace("+", " ", $tag);
3176                 $tag = str_replace("technorati tag: ", "", $tag);
3177
3178                 return $tag;
3179         }
3180
3181         function get_self_url_prefix() {
3182                 if (strrpos(SELF_URL_PATH, "/") === strlen(SELF_URL_PATH)-1) {
3183                         return substr(SELF_URL_PATH, 0, strlen(SELF_URL_PATH)-1);
3184                 } else {
3185                         return SELF_URL_PATH;
3186                 }
3187         }
3188
3189         /**
3190          * Compute the Mozilla Firefox feed adding URL from server HOST and REQUEST_URI.
3191          *
3192          * @return string The Mozilla Firefox feed adding URL.
3193          */
3194         function add_feed_url() {
3195                 //$url_path = ($_SERVER['HTTPS'] != "on" ? 'http://' :  'https://') . $_SERVER["HTTP_HOST"] . parse_url($_SERVER["REQUEST_URI"], PHP_URL_PATH);
3196
3197                 $url_path = get_self_url_prefix() .
3198                         "/public.php?op=subscribe&feed_url=%s";
3199                 return $url_path;
3200         } // function add_feed_url
3201
3202         function encrypt_password($pass, $salt = '', $mode2 = false) {
3203                 if ($salt && $mode2) {
3204                         return "MODE2:" . hash('sha256', $salt . $pass);
3205                 } else if ($salt) {
3206                         return "SHA1X:" . sha1("$salt:$pass");
3207                 } else {
3208                         return "SHA1:" . sha1($pass);
3209                 }
3210         } // function encrypt_password
3211
3212         function load_filters($link, $feed_id, $owner_uid, $action_id = false) {
3213                 $filters = array();
3214
3215                 $cat_id = (int)getFeedCategory($link, $feed_id);
3216
3217                 $result = db_query($link, "SELECT * FROM ttrss_filters2 WHERE
3218                         owner_uid = $owner_uid AND enabled = true");
3219
3220                 $check_cats = join(",", array_merge(
3221                         getParentCategories($link, $cat_id, $owner_uid),
3222                         array($cat_id)));
3223
3224                 while ($line = db_fetch_assoc($result)) {
3225                         $filter_id = $line["id"];
3226
3227                         $result2 = db_query($link, "SELECT
3228                                 r.reg_exp, r.feed_id, r.cat_id, r.cat_filter, t.name AS type_name
3229                                 FROM ttrss_filters2_rules AS r,
3230                                 ttrss_filter_types AS t
3231                                 WHERE
3232                                         (cat_id IS NULL OR cat_id IN ($check_cats)) AND
3233                                         (feed_id IS NULL OR feed_id = '$feed_id') AND
3234                                         filter_type = t.id AND filter_id = '$filter_id'");
3235
3236                         $rules = array();
3237                         $actions = array();
3238
3239                         while ($rule_line = db_fetch_assoc($result2)) {
3240 #                               print_r($rule_line);
3241
3242                                 $rule = array();
3243                                 $rule["reg_exp"] = $rule_line["reg_exp"];
3244                                 $rule["type"] = $rule_line["type_name"];
3245
3246                                 array_push($rules, $rule);
3247                         }
3248
3249                         $result2 = db_query($link, "SELECT a.action_param,t.name AS type_name
3250                                 FROM ttrss_filters2_actions AS a,
3251                                 ttrss_filter_actions AS t
3252                                 WHERE
3253                                         action_id = t.id AND filter_id = '$filter_id'");
3254
3255                         while ($action_line = db_fetch_assoc($result2)) {
3256 #                               print_r($action_line);
3257
3258                                 $action = array();
3259                                 $action["type"] = $action_line["type_name"];
3260                                 $action["param"] = $action_line["action_param"];
3261
3262                                 array_push($actions, $action);
3263                         }
3264
3265
3266                         $filter = array();
3267                         $filter["match_any_rule"] = sql_bool_to_bool($line["match_any_rule"]);
3268                         $filter["rules"] = $rules;
3269                         $filter["actions"] = $actions;
3270
3271                         if (count($rules) > 0 && count($actions) > 0) {
3272                                 array_push($filters, $filter);
3273                         }
3274                 }
3275
3276                 return $filters;
3277         }
3278
3279         function get_score_pic($score) {
3280                 if ($score > 100) {
3281                         return "score_high.png";
3282                 } else if ($score > 0) {
3283                         return "score_half_high.png";
3284                 } else if ($score < -100) {
3285                         return "score_low.png";
3286                 } else if ($score < 0) {
3287                         return "score_half_low.png";
3288                 } else {
3289                         return "score_neutral.png";
3290                 }
3291         }
3292
3293         function feed_has_icon($id) {
3294                 return is_file(ICONS_DIR . "/$id.ico") && filesize(ICONS_DIR . "/$id.ico") > 0;
3295         }
3296
3297         function init_connection($link) {
3298                 if ($link) {
3299
3300                         if (DB_TYPE == "pgsql") {
3301                                 pg_query($link, "set client_encoding = 'UTF-8'");
3302                                 pg_set_client_encoding("UNICODE");
3303                                 pg_query($link, "set datestyle = 'ISO, european'");
3304                                 pg_query($link, "set TIME ZONE 0");
3305                         } else {
3306                                 db_query($link, "SET time_zone = '+0:0'");
3307
3308                                 if (defined('MYSQL_CHARSET') && MYSQL_CHARSET) {
3309                                         db_query($link, "SET NAMES " . MYSQL_CHARSET);
3310                                 }
3311                         }
3312
3313                         global $pluginhost;
3314
3315                         $pluginhost = new PluginHost($link);
3316                         $pluginhost->load(PLUGINS, $pluginhost::KIND_ALL);
3317
3318                         return true;
3319                 } else {
3320                         print "Unable to connect to database:" . db_last_error();
3321                         return false;
3322                 }
3323         }
3324
3325         function format_tags_string($tags, $id) {
3326
3327                 $tags_str = "";
3328                 $tags_nolinks_str = "";
3329
3330                 $num_tags = 0;
3331
3332                 $tag_limit = 6;
3333
3334                 $formatted_tags = array();
3335
3336                 foreach ($tags as $tag) {
3337                         $num_tags++;
3338                         $tag_escaped = str_replace("'", "\\'", $tag);
3339
3340                         if (mb_strlen($tag) > 30) {
3341                                 $tag = truncate_string($tag, 30);
3342                         }
3343
3344                         $tag_str = "<a href=\"javascript:viewfeed('$tag_escaped')\">$tag</a>";
3345
3346                         array_push($formatted_tags, $tag_str);
3347
3348                         $tmp_tags_str = implode(", ", $formatted_tags);
3349
3350                         if ($num_tags == $tag_limit || mb_strlen($tmp_tags_str) > 150) {
3351                                 break;
3352                         }
3353                 }
3354
3355                 $tags_str = implode(", ", $formatted_tags);
3356
3357                 if ($num_tags < count($tags)) {
3358                         $tags_str .= ", &hellip;";
3359                 }
3360
3361                 if ($num_tags == 0) {
3362                         $tags_str = __("no tags");
3363                 }
3364
3365                 return $tags_str;
3366
3367         }
3368
3369         function format_article_labels($labels, $id) {
3370
3371                 $labels_str = "";
3372
3373                 foreach ($labels as $l) {
3374                         $labels_str .= sprintf("<span class='hlLabelRef'
3375                                 style='color : %s; background-color : %s'>%s</span>",
3376                                         $l[2], $l[3], $l[1]);
3377                         }
3378
3379                 return $labels_str;
3380
3381         }
3382
3383         function format_article_note($id, $note, $allow_edit = true) {
3384
3385                 $str = "<div class='articleNote'        onclick=\"editArticleNote($id)\">
3386                         <div class='noteEdit' onclick=\"editArticleNote($id)\">".
3387                         ($allow_edit ? __('(edit note)') : "")."</div>$note</div>";
3388
3389                 return $str;
3390         }
3391
3392
3393         function get_feed_category($link, $feed_cat, $parent_cat_id = false) {
3394                 if ($parent_cat_id) {
3395                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3396                         $parent_insert = "'$parent_cat_id'";
3397                 } else {
3398                         $parent_qpart = "parent_cat IS NULL";
3399                         $parent_insert = "NULL";
3400                 }
3401
3402                 $result = db_query($link,
3403                         "SELECT id FROM ttrss_feed_categories
3404                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3405
3406                 if (db_num_rows($result) == 0) {
3407                         return false;
3408                 } else {
3409                         return db_fetch_result($result, 0, "id");
3410                 }
3411         }
3412
3413         function add_feed_category($link, $feed_cat, $parent_cat_id = false) {
3414
3415                 if (!$feed_cat) return false;
3416
3417                 db_query($link, "BEGIN");
3418
3419                 if ($parent_cat_id) {
3420                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3421                         $parent_insert = "'$parent_cat_id'";
3422                 } else {
3423                         $parent_qpart = "parent_cat IS NULL";
3424                         $parent_insert = "NULL";
3425                 }
3426
3427                 $result = db_query($link,
3428                         "SELECT id FROM ttrss_feed_categories
3429                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3430
3431                 if (db_num_rows($result) == 0) {
3432
3433                         $result = db_query($link,
3434                                 "INSERT INTO ttrss_feed_categories (owner_uid,title,parent_cat)
3435                                 VALUES ('".$_SESSION["uid"]."', '$feed_cat', $parent_insert)");
3436
3437                         db_query($link, "COMMIT");
3438
3439                         return true;
3440                 }
3441
3442                 return false;
3443         }
3444
3445         function getArticleFeed($link, $id) {
3446                 $result = db_query($link, "SELECT feed_id FROM ttrss_user_entries
3447                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
3448
3449                 if (db_num_rows($result) != 0) {
3450                         return db_fetch_result($result, 0, "feed_id");
3451                 } else {
3452                         return 0;
3453                 }
3454         }
3455
3456         /**
3457          * Fixes incomplete URLs by prepending "http://".
3458          * Also replaces feed:// with http://, and
3459          * prepends a trailing slash if the url is a domain name only.
3460          *
3461          * @param string $url Possibly incomplete URL
3462          *
3463          * @return string Fixed URL.
3464          */
3465         function fix_url($url) {
3466                 if (strpos($url, '://') === false) {
3467                         $url = 'http://' . $url;
3468                 } else if (substr($url, 0, 5) == 'feed:') {
3469                         $url = 'http:' . substr($url, 5);
3470                 }
3471
3472                 //prepend slash if the URL has no slash in it
3473                 // "http://www.example" -> "http://www.example/"
3474                 if (strpos($url, '/', strpos($url, ':') + 3) === false) {
3475                         $url .= '/';
3476                 }
3477
3478                 if ($url != "http:///")
3479                         return $url;
3480                 else
3481                         return '';
3482         }
3483
3484         function validate_feed_url($url) {
3485                 $parts = parse_url($url);
3486
3487                 return ($parts['scheme'] == 'http' || $parts['scheme'] == 'feed' || $parts['scheme'] == 'https');
3488
3489         }
3490
3491         function get_article_enclosures($link, $id) {
3492
3493                 $query = "SELECT * FROM ttrss_enclosures
3494                         WHERE post_id = '$id' AND content_url != ''";
3495
3496                 $rv = array();
3497
3498                 $result = db_query($link, $query);
3499
3500                 if (db_num_rows($result) > 0) {
3501                         while ($line = db_fetch_assoc($result)) {
3502                                 array_push($rv, $line);
3503                         }
3504                 }
3505
3506                 return $rv;
3507         }
3508
3509         function save_email_address($link, $email) {
3510                 // FIXME: implement persistent storage of emails
3511
3512                 if (!$_SESSION['stored_emails'])
3513                         $_SESSION['stored_emails'] = array();
3514
3515                 if (!in_array($email, $_SESSION['stored_emails']))
3516                         array_push($_SESSION['stored_emails'], $email);
3517         }
3518
3519
3520         function get_feed_access_key($link, $feed_id, $is_cat, $owner_uid = false) {
3521
3522                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3523
3524                 $sql_is_cat = bool_to_sql_bool($is_cat);
3525
3526                 $result = db_query($link, "SELECT access_key FROM ttrss_access_keys
3527                         WHERE feed_id = '$feed_id'      AND is_cat = $sql_is_cat
3528                         AND owner_uid = " . $owner_uid);
3529
3530                 if (db_num_rows($result) == 1) {
3531                         return db_fetch_result($result, 0, "access_key");
3532                 } else {
3533                         $key = db_escape_string(sha1(uniqid(rand(), true)));
3534
3535                         $result = db_query($link, "INSERT INTO ttrss_access_keys
3536                                 (access_key, feed_id, is_cat, owner_uid)
3537                                 VALUES ('$key', '$feed_id', $sql_is_cat, '$owner_uid')");
3538
3539                         return $key;
3540                 }
3541                 return false;
3542         }
3543
3544         function get_feeds_from_html($url, $content)
3545         {
3546                 $url     = fix_url($url);
3547                 $baseUrl = substr($url, 0, strrpos($url, '/') + 1);
3548
3549                 libxml_use_internal_errors(true);
3550
3551                 $doc = new DOMDocument();
3552                 $doc->loadHTML($content);
3553                 $xpath = new DOMXPath($doc);
3554                 $entries = $xpath->query('/html/head/link[@rel="alternate"]');
3555                 $feedUrls = array();
3556                 foreach ($entries as $entry) {
3557                         if ($entry->hasAttribute('href')) {
3558                                 $title = $entry->getAttribute('title');
3559                                 if ($title == '') {
3560                                         $title = $entry->getAttribute('type');
3561                                 }
3562                                 $feedUrl = rewrite_relative_url(
3563                                         $baseUrl, $entry->getAttribute('href')
3564                                 );
3565                                 $feedUrls[$feedUrl] = $title;
3566                         }
3567                 }
3568                 return $feedUrls;
3569         }
3570
3571         function is_html($content) {
3572                 return preg_match("/<html|DOCTYPE html/i", substr($content, 0, 20)) !== 0;
3573         }
3574
3575         function url_is_html($url, $login = false, $pass = false) {
3576                 return is_html(fetch_file_contents($url, false, $login, $pass));
3577         }
3578
3579         function print_label_select($link, $name, $value, $attributes = "") {
3580
3581                 $result = db_query($link, "SELECT caption FROM ttrss_labels2
3582                         WHERE owner_uid = '".$_SESSION["uid"]."' ORDER BY caption");
3583
3584                 print "<select default=\"$value\" name=\"" . htmlspecialchars($name) .
3585                         "\" $attributes onchange=\"labelSelectOnChange(this)\" >";
3586
3587                 while ($line = db_fetch_assoc($result)) {
3588
3589                         $issel = ($line["caption"] == $value) ? "selected=\"1\"" : "";
3590
3591                         print "<option value=\"".htmlspecialchars($line["caption"])."\"
3592                                 $issel>" . htmlspecialchars($line["caption"]) . "</option>";
3593
3594                 }
3595
3596 #               print "<option value=\"ADD_LABEL\">" .__("Add label...") . "</option>";
3597
3598                 print "</select>";
3599
3600
3601         }
3602
3603         function format_article_enclosures($link, $id, $always_display_enclosures,
3604                                         $article_content, $hide_images = false) {
3605
3606                 $result = get_article_enclosures($link, $id);
3607                 $rv = '';
3608
3609                 if (count($result) > 0) {
3610
3611                         $entries_html = array();
3612                         $entries = array();
3613                         $entries_inline = array();
3614
3615                         foreach ($result as $line) {
3616
3617                                 $url = $line["content_url"];
3618                                 $ctype = $line["content_type"];
3619
3620                                 if (!$ctype) $ctype = __("unknown type");
3621
3622                                 $filename = substr($url, strrpos($url, "/")+1);
3623
3624                                 $player = format_inline_player($link, $url, $ctype);
3625
3626                                 if ($player) array_push($entries_inline, $player);
3627
3628 #                               $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
3629 #                                       $filename . " (" . $ctype . ")" . "</a>";
3630
3631                                 $entry = "<div onclick=\"window.open('".htmlspecialchars($url)."')\"
3632                                         dojoType=\"dijit.MenuItem\">$filename ($ctype)</div>";
3633
3634                                 array_push($entries_html, $entry);
3635
3636                                 $entry = array();
3637
3638                                 $entry["type"] = $ctype;
3639                                 $entry["filename"] = $filename;
3640                                 $entry["url"] = $url;
3641
3642                                 array_push($entries, $entry);
3643                         }
3644
3645                         if ($_SESSION['uid'] && !get_pref($link, "STRIP_IMAGES")) {
3646                                 if ($always_display_enclosures ||
3647                                                         !preg_match("/<img/i", $article_content)) {
3648
3649                                         foreach ($entries as $entry) {
3650
3651                                                 if (preg_match("/image/", $entry["type"]) ||
3652                                                                 preg_match("/\.(jpg|png|gif|bmp)/i", $entry["filename"])) {
3653
3654                                                                 if (!$hide_images) {
3655                                                                         $rv .= "<p><img
3656                                                                         alt=\"".htmlspecialchars($entry["filename"])."\"
3657                                                                         src=\"" .htmlspecialchars($entry["url"]) . "\"/></p>";
3658                                                                 } else {
3659                                                                         $rv .= "<p><a target=\"_blank\"
3660                                                                         href=\"".htmlspecialchars($entry["url"])."\"
3661                                                                         >" .htmlspecialchars($entry["url"]) . "</a></p>";
3662
3663                                                                 }
3664                                                 }
3665                                         }
3666                                 }
3667                         }
3668
3669                         if (count($entries_inline) > 0) {
3670                                 $rv .= "<hr clear='both'/>";
3671                                 foreach ($entries_inline as $entry) { $rv .= $entry; };
3672                                 $rv .= "<hr clear='both'/>";
3673                         }
3674
3675                         $rv .= "<br/><div dojoType=\"dijit.form.DropDownButton\">".
3676                                 "<span>" . __('Attachments')."</span>";
3677                         $rv .= "<div dojoType=\"dijit.Menu\" style=\"display: none;\">";
3678
3679                         foreach ($entries_html as $entry) { $rv .= $entry; };
3680
3681                         $rv .= "</div></div>";
3682                 }
3683
3684                 return $rv;
3685         }
3686
3687         function getLastArticleId($link) {
3688                 $result = db_query($link, "SELECT MAX(ref_id) AS id FROM ttrss_user_entries
3689                         WHERE owner_uid = " . $_SESSION["uid"]);
3690
3691                 if (db_num_rows($result) == 1) {
3692                         return db_fetch_result($result, 0, "id");
3693                 } else {
3694                         return -1;
3695                 }
3696         }
3697
3698         function build_url($parts) {
3699                 return $parts['scheme'] . "://" . $parts['host'] . $parts['path'];
3700         }
3701
3702         /**
3703          * Converts a (possibly) relative URL to a absolute one.
3704          *
3705          * @param string $url     Base URL (i.e. from where the document is)
3706          * @param string $rel_url Possibly relative URL in the document
3707          *
3708          * @return string Absolute URL
3709          */
3710         function rewrite_relative_url($url, $rel_url) {
3711                 if (strpos($rel_url, "magnet:") === 0) {
3712                         return $rel_url;
3713                 } else if (strpos($rel_url, "://") !== false) {
3714                         return $rel_url;
3715                 } else if (strpos($rel_url, "//") === 0) {
3716                         # protocol-relative URL (rare but they exist)
3717                         return $rel_url;
3718                 } else if (strpos($rel_url, "/") === 0)
3719                 {
3720                         $parts = parse_url($url);
3721                         $parts['path'] = $rel_url;
3722
3723                         return build_url($parts);
3724
3725                 } else {
3726                         $parts = parse_url($url);
3727                         if (!isset($parts['path'])) {
3728                                 $parts['path'] = '/';
3729                         }
3730                         $dir = $parts['path'];
3731                         if (substr($dir, -1) !== '/') {
3732                                 $dir = dirname($parts['path']);
3733                                 $dir !== '/' && $dir .= '/';
3734                         }
3735                         $parts['path'] = $dir . $rel_url;
3736
3737                         return build_url($parts);
3738                 }
3739         }
3740
3741         function sphinx_search($query, $offset = 0, $limit = 30) {
3742                 require_once 'lib/sphinxapi.php';
3743
3744                 $sphinxClient = new SphinxClient();
3745
3746                 $sphinxClient->SetServer('localhost', 9312);
3747                 $sphinxClient->SetConnectTimeout(1);
3748
3749                 $sphinxClient->SetFieldWeights(array('title' => 70, 'content' => 30,
3750                         'feed_title' => 20));
3751
3752                 $sphinxClient->SetMatchMode(SPH_MATCH_EXTENDED2);
3753                 $sphinxClient->SetRankingMode(SPH_RANK_PROXIMITY_BM25);
3754                 $sphinxClient->SetLimits($offset, $limit, 1000);
3755                 $sphinxClient->SetArrayResult(false);
3756                 $sphinxClient->SetFilter('owner_uid', array($_SESSION['uid']));
3757
3758                 $result = $sphinxClient->Query($query, SPHINX_INDEX);
3759
3760                 $ids = array();
3761
3762                 if (is_array($result['matches'])) {
3763                         foreach (array_keys($result['matches']) as $int_id) {
3764                                 $ref_id = $result['matches'][$int_id]['attrs']['ref_id'];
3765                                 array_push($ids, $ref_id);
3766                         }
3767                 }
3768
3769                 return $ids;
3770         }
3771
3772         function cleanup_tags($link, $days = 14, $limit = 1000) {
3773
3774                 if (DB_TYPE == "pgsql") {
3775                         $interval_query = "date_updated < NOW() - INTERVAL '$days days'";
3776                 } else if (DB_TYPE == "mysql") {
3777                         $interval_query = "date_updated < DATE_SUB(NOW(), INTERVAL $days DAY)";
3778                 }
3779
3780                 $tags_deleted = 0;
3781
3782                 while ($limit > 0) {
3783                         $limit_part = 500;
3784
3785                         $query = "SELECT ttrss_tags.id AS id
3786                                 FROM ttrss_tags, ttrss_user_entries, ttrss_entries
3787                                 WHERE post_int_id = int_id AND $interval_query AND
3788                                 ref_id = ttrss_entries.id AND tag_cache != '' LIMIT $limit_part";
3789
3790                         $result = db_query($link, $query);
3791
3792                         $ids = array();
3793
3794                         while ($line = db_fetch_assoc($result)) {
3795                                 array_push($ids, $line['id']);
3796                         }
3797
3798                         if (count($ids) > 0) {
3799                                 $ids = join(",", $ids);
3800                                 print ".";
3801
3802                                 $tmp_result = db_query($link, "DELETE FROM ttrss_tags WHERE id IN ($ids)");
3803                                 $tags_deleted += db_affected_rows($link, $tmp_result);
3804                         } else {
3805                                 break;
3806                         }
3807
3808                         $limit -= $limit_part;
3809                 }
3810
3811                 print "\n";
3812
3813                 return $tags_deleted;
3814         }
3815
3816         function print_user_stylesheet($link) {
3817                 $value = get_pref($link, 'USER_STYLESHEET');
3818
3819                 if ($value) {
3820                         print "<style type=\"text/css\">";
3821                         print str_replace("<br/>", "\n", $value);
3822                         print "</style>";
3823                 }
3824
3825         }
3826
3827         function rewrite_urls($html) {
3828                 libxml_use_internal_errors(true);
3829
3830                 $charset_hack = '<head>
3831                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
3832                 </head>';
3833
3834                 $doc = new DOMDocument();
3835                 $doc->loadHTML($charset_hack . $html);
3836                 $xpath = new DOMXPath($doc);
3837
3838                 $entries = $xpath->query('//*/text()');
3839
3840                 foreach ($entries as $entry) {
3841                         if (strstr($entry->wholeText, "://") !== false) {
3842                                 $text = preg_replace("/((?<!=.)((http|https|ftp)+):\/\/[^ ,!]+)/i",
3843                                         "<a target=\"_blank\" href=\"\\1\">\\1</a>", $entry->wholeText);
3844
3845                                 if ($text != $entry->wholeText) {
3846                                         $cdoc = new DOMDocument();
3847                                         $cdoc->loadHTML($charset_hack . $text);
3848
3849
3850                                         foreach ($cdoc->childNodes as $cnode) {
3851                                                 $cnode = $doc->importNode($cnode, true);
3852
3853                                                 if ($cnode) {
3854                                                         $entry->parentNode->insertBefore($cnode);
3855                                                 }
3856                                         }
3857
3858                                         $entry->parentNode->removeChild($entry);
3859
3860                                 }
3861                         }
3862                 }
3863
3864                 $node = $doc->getElementsByTagName('body')->item(0);
3865
3866                 // http://tt-rss.org/forum/viewtopic.php?f=1&t=970
3867                 if ($node)
3868                         return $doc->saveXML($node);
3869                 else
3870                         return $html;
3871         }
3872
3873         function filter_to_sql($link, $filter, $owner_uid) {
3874                 $query = array();
3875
3876                 if (DB_TYPE == "pgsql")
3877                         $reg_qpart = "~";
3878                 else
3879                         $reg_qpart = "REGEXP";
3880
3881                 foreach ($filter["rules"] AS $rule) {
3882                         $regexp_valid = preg_match('/' . $rule['reg_exp'] . '/',
3883                                 $rule['reg_exp']) !== FALSE;
3884
3885                         if ($regexp_valid) {
3886
3887                                 $rule['reg_exp'] = db_escape_string($rule['reg_exp']);
3888
3889                                 switch ($rule["type"]) {
3890                                         case "title":
3891                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
3892                                                         $rule['reg_exp'] . "')";
3893                                                 break;
3894                                         case "content":
3895                                                 $qpart = "LOWER(ttrss_entries.content) $reg_qpart LOWER('".
3896                                                         $rule['reg_exp'] . "')";
3897                                                 break;
3898                                         case "both":
3899                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
3900                                                         $rule['reg_exp'] . "') OR LOWER(" .
3901                                                         "ttrss_entries.content) $reg_qpart LOWER('" . $rule['reg_exp'] . "')";
3902                                                 break;
3903                                         case "tag":
3904                                                 $qpart = "LOWER(ttrss_user_entries.tag_cache) $reg_qpart LOWER('".
3905                                                         $rule['reg_exp'] . "')";
3906                                                 break;
3907                                         case "link":
3908                                                 $qpart = "LOWER(ttrss_entries.link) $reg_qpart LOWER('".
3909                                                         $rule['reg_exp'] . "')";
3910                                                 break;
3911                                         case "author":
3912                                                 $qpart = "LOWER(ttrss_entries.author) $reg_qpart LOWER('".
3913                                                         $rule['reg_exp'] . "')";
3914                                                 break;
3915                                 }
3916
3917                                 if (isset($rule["feed_id"]) && $rule["feed_id"] > 0) {
3918                                         $qpart .= " AND feed_id = " . db_escape_string($rule["feed_id"]);
3919                                 }
3920
3921                                 if (isset($rule["cat_id"])) {
3922
3923                                         if ($rule["cat_id"] > 0) {
3924                                                 $children = getChildCategories($link, $rule["cat_id"], $owner_uid);
3925                                                 array_push($children, $rule["cat_id"]);
3926
3927                                                 $children = join(",", $children);
3928
3929                                                 $cat_qpart = "cat_id IN ($children)";
3930                                         } else {
3931                                                 $cat_qpart = "cat_id IS NULL";
3932                                         }
3933
3934                                         $qpart .= " AND $cat_qpart";
3935                                 }
3936
3937                                 array_push($query, "($qpart)");
3938
3939                         }
3940                 }
3941
3942                 if (count($query) > 0) {
3943                         return "(" . join($filter["match_any_rule"] ? "OR" : "AND", $query) . ")";
3944                 } else {
3945                         return "(false)";
3946                 }
3947         }
3948
3949         if (!function_exists('gzdecode')) {
3950                 function gzdecode($string) { // no support for 2nd argument
3951                         return file_get_contents('compress.zlib://data:who/cares;base64,'.
3952                                 base64_encode($string));
3953                 }
3954         }
3955
3956         function get_random_bytes($length) {
3957                 if (function_exists('openssl_random_pseudo_bytes')) {
3958                         return openssl_random_pseudo_bytes($length);
3959                 } else {
3960                         $output = "";
3961
3962                         for ($i = 0; $i < $length; $i++)
3963                                 $output .= chr(mt_rand(0, 255));
3964
3965                         return $output;
3966                 }
3967         }
3968
3969         function read_stdin() {
3970                 $fp = fopen("php://stdin", "r");
3971
3972                 if ($fp) {
3973                         $line = trim(fgets($fp));
3974                         fclose($fp);
3975                         return $line;
3976                 }
3977
3978                 return null;
3979         }
3980
3981         function tmpdirname($path, $prefix) {
3982                 // Use PHP's tmpfile function to create a temporary
3983                 // directory name. Delete the file and keep the name.
3984                 $tempname = tempnam($path,$prefix);
3985                 if (!$tempname)
3986                         return false;
3987
3988                 if (!unlink($tempname))
3989                         return false;
3990
3991        return $tempname;
3992         }
3993
3994         function getFeedCategory($link, $feed) {
3995                 $result = db_query($link, "SELECT cat_id FROM ttrss_feeds
3996                         WHERE id = '$feed'");
3997
3998                 if (db_num_rows($result) > 0) {
3999                         return db_fetch_result($result, 0, "cat_id");
4000                 } else {
4001                         return false;
4002                 }
4003
4004         }
4005
4006         function implements_interface($class, $interface) {
4007                 return in_array($interface, class_implements($class));
4008         }
4009
4010         function geturl($url){
4011
4012                 (function_exists('curl_init')) ? '' : die('cURL Must be installed for geturl function to work. Ask your host to enable it or uncomment extension=php_curl.dll in php.ini');
4013
4014                 $curl = curl_init();
4015                 $header[0] = "Accept: text/xml,application/xml,application/xhtml+xml,";
4016                 $header[0] .= "text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5";
4017                 $header[] = "Cache-Control: max-age=0";
4018                 $header[] = "Connection: keep-alive";
4019                 $header[] = "Keep-Alive: 300";
4020                 $header[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
4021                 $header[] = "Accept-Language: en-us,en;q=0.5";
4022                 $header[] = "Pragma: ";
4023
4024                 curl_setopt($curl, CURLOPT_URL, $url);
4025                 curl_setopt($curl, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 5.1; rv:5.0) Gecko/20100101 Firefox/5.0 Firefox/5.0');
4026                 curl_setopt($curl, CURLOPT_HTTPHEADER, $header);
4027                 curl_setopt($curl, CURLOPT_HEADER, true);
4028                 curl_setopt($curl, CURLOPT_REFERER, $url);
4029                 curl_setopt($curl, CURLOPT_ENCODING, 'gzip,deflate');
4030                 curl_setopt($curl, CURLOPT_AUTOREFERER, true);
4031                 curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
4032                 //curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true); //CURLOPT_FOLLOWLOCATION Disabled...
4033                 curl_setopt($curl, CURLOPT_TIMEOUT, 60);
4034
4035                 $html = curl_exec($curl);
4036
4037                 $status = curl_getinfo($curl);
4038                 curl_close($curl);
4039
4040                 if($status['http_code']!=200){
4041                         if($status['http_code'] == 301 || $status['http_code'] == 302) {
4042                                 list($header) = explode("\r\n\r\n", $html, 2);
4043                                 $matches = array();
4044                                 preg_match("/(Location:|URI:)[^(\n)]*/", $header, $matches);
4045                                 $url = trim(str_replace($matches[1],"",$matches[0]));
4046                                 $url_parsed = parse_url($url);
4047                                 return (isset($url_parsed))? geturl($url, $referer):'';
4048                         }
4049                         $oline='';
4050                         foreach($status as $key=>$eline){$oline.='['.$key.']'.$eline.' ';}
4051                         $line =$oline." \r\n ".$url."\r\n-----------------\r\n";
4052 #                       $handle = @fopen('./curl.error.log', 'a');
4053 #                       fwrite($handle, $line);
4054                         return FALSE;
4055                 }
4056                 return $url;
4057         }
4058
4059         function get_minified_js($files) {
4060                 require_once 'lib/jshrink/Minifier.php';
4061
4062                 $rv = '';
4063
4064                 foreach ($files as $js) {
4065                         if (!isset($_GET['debug'])) {
4066                                 $cached_file = CACHE_DIR . "/js/$js.js";
4067
4068                                 if (file_exists($cached_file) &&
4069                                                 is_readable($cached_file) &&
4070                                                 filemtime($cached_file) >= filemtime("js/$js.js")) {
4071
4072                                         $rv .= file_get_contents($cached_file);
4073
4074                                 } else {
4075                                         $minified = JShrink\Minifier::minify(file_get_contents("js/$js.js"));
4076                                         file_put_contents($cached_file, $minified);
4077                                         $rv .= $minified;
4078                                 }
4079                         } else {
4080                                 $rv .= file_get_contents("js/$js.js");
4081                         }
4082                 }
4083
4084                 return $rv;
4085         }
4086
4087         function stylesheet_tag($filename) {
4088                 $timestamp = filemtime($filename);
4089
4090                 echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"$filename?$timestamp\"/>\n";
4091         }
4092
4093         function javascript_tag($filename) {
4094                 $query = "";
4095
4096                 if (!(strpos($filename, "?") === FALSE)) {
4097                         $query = substr($filename, strpos($filename, "?")+1);
4098                         $filename = substr($filename, 0, strpos($filename, "?"));
4099                 }
4100
4101                 $timestamp = filemtime($filename);
4102
4103                 if ($query) $timestamp .= "&$query";
4104
4105                 echo "<script type=\"text/javascript\" charset=\"utf-8\" src=\"$filename?$timestamp\"></script>\n";
4106         }
4107
4108         function calculate_dep_timestamp() {
4109                 $files = array_merge(glob("js/*.js"), glob("*.css"));
4110
4111                 $max_ts = -1;
4112
4113                 foreach ($files as $file) {
4114                         if (filemtime($file) > $max_ts) $max_ts = filemtime($file);
4115                 }
4116
4117                 return $max_ts;
4118         }
4119
4120 ?>