include/functions.php

   1 <?php
   2         define('EXPECTED_CONFIG_VERSION', 26);
   3         define('SCHEMA_VERSION', 105);
   4
   5         $fetch_last_error = false;
   6         $pluginhost = false;
   7
   8         function __autoload($class) {
   9                 $class_file = str_replace("_", "/", strtolower(basename($class)));
  10
  11                 $file = dirname(__FILE__)."/../classes/$class_file.php";
  12
  13                 if (file_exists($file)) {
  14                         require $file;
  15                 }
  16
  17         }
  18
  19         mb_internal_encoding("UTF-8");
  20         date_default_timezone_set('UTC');
  21         if (defined('E_DEPRECATED')) {
  22                 error_reporting(E_ALL & ~E_NOTICE & ~E_DEPRECATED);
  23         } else {
  24                 error_reporting(E_ALL & ~E_NOTICE);
  25         }
  26
  27         require_once 'config.php';
  28
  29         if (DB_TYPE == "pgsql") {
  30                 define('SUBSTRING_FOR_DATE', 'SUBSTRING_FOR_DATE');
  31         } else {
  32                 define('SUBSTRING_FOR_DATE', 'SUBSTRING');
  33         }
  34
  35         define('THEME_VERSION_REQUIRED', 1.1);
  36
  37         /**
  38          * Return available translations names.
  39          *
  40          * @access public
  41          * @return array A array of available translations.
  42          */
  43         function get_translations() {
  44                 $tr = array(
  45                                         "auto"  => "Detect automatically",
  46                                         "ca_CA" => "Català",
  47                                         "en_US" => "English",
  48                                         "es_ES" => "Español",
  49                                         "de_DE" => "Deutsch",
  50                                         "fr_FR" => "Français",
  51                                         "hu_HU" => "Magyar (Hungarian)",
  52                                         "it_IT" => "Italiano",
  53                                         "ja_JP" => "日本語 (Japanese)",
  54                                         "lv_LV" => "Latviešu",
  55                                         "nb_NO" => "Norwegian bokmål",
  56                                         "pl_PL" => "Polski",
  57                                         "ru_RU" => "Русский",
  58                                         "pt_BR" => "Portuguese/Brazil",
  59                                         "zh_CN" => "Simplified Chinese");
  60
  61                 return $tr;
  62         }
  63
  64         require_once "lib/accept-to-gettext.php";
  65         require_once "lib/gettext/gettext.inc";
  66
  67
  68         function startup_gettext() {
  69
  70                 # Get locale from Accept-Language header
  71                 $lang = al2gt(array_keys(get_translations()), "text/html");
  72
  73                 if (defined('_TRANSLATION_OVERRIDE_DEFAULT')) {
  74                         $lang = _TRANSLATION_OVERRIDE_DEFAULT;
  75                 }
  76
  77                 /* In login action of mobile version */
  78                 if ($_POST["language"] && defined('MOBILE_VERSION')) {
  79                         $lang = $_POST["language"];
  80                 } else if ($_SESSION["language"] && $_SESSION["language"] != "auto") {
  81                         $lang = $_SESSION["language"];
  82                 }
  83
  84                 if ($lang) {
  85                         if (defined('LC_MESSAGES')) {
  86                                 _setlocale(LC_MESSAGES, $lang);
  87                         } else if (defined('LC_ALL')) {
  88                                 _setlocale(LC_ALL, $lang);
  89                         }
  90
  91                         if (defined('MOBILE_VERSION')) {
  92                                 _bindtextdomain("messages", "../locale");
  93                         } else {
  94                                 _bindtextdomain("messages", "locale");
  95                         }
  96
  97                         _textdomain("messages");
  98                         _bind_textdomain_codeset("messages", "UTF-8");
  99                 }
 100         }
 101
 102         startup_gettext();
 103
 104         require_once 'db-prefs.php';
 105         require_once 'version.php';
 106         require_once 'ccache.php';
 107         require_once 'labels.php';
 108
 109         define('SELF_USER_AGENT', 'Tiny Tiny RSS/' . VERSION . ' (http://tt-rss.org/)');
 110         ini_set('user_agent', SELF_USER_AGENT);
 111
 112         require_once 'lib/pubsubhubbub/publisher.php';
 113
 114         $tz_offset = -1;
 115         $utc_tz = new DateTimeZone('UTC');
 116         $schema_version = false;
 117
 118         /**
 119          * Print a timestamped debug message.
 120          *
 121          * @param string $msg The debug message.
 122          * @return void
 123          */
 124         function _debug($msg) {
 125                 if (defined('QUIET') && QUIET) {
 126                         return;
 127                 }
 128                 $ts = strftime("%H:%M:%S", time());
 129                 if (function_exists('posix_getpid')) {
 130                         $ts = "$ts/" . posix_getpid();
 131                 }
 132                 print "[$ts] $msg\n";
 133         } // function _debug
 134
 135         /**
 136          * Purge a feed old posts.
 137          *
 138          * @param mixed $link A database connection.
 139          * @param mixed $feed_id The id of the purged feed.
 140          * @param mixed $purge_interval Olderness of purged posts.
 141          * @param boolean $debug Set to True to enable the debug. False by default.
 142          * @access public
 143          * @return void
 144          */
 145         function purge_feed($link, $feed_id, $purge_interval, $debug = false) {
 146
 147                 if (!$purge_interval) $purge_interval = feed_purge_interval($link, $feed_id);
 148
 149                 $rows = -1;
 150
 151                 $result = db_query($link,
 152                         "SELECT owner_uid FROM ttrss_feeds WHERE id = '$feed_id'");
 153
 154                 $owner_uid = false;
 155
 156                 if (db_num_rows($result) == 1) {
 157                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 158                 }
 159
 160                 if ($purge_interval == -1 || !$purge_interval) {
 161                         if ($owner_uid) {
 162                                 ccache_update($link, $feed_id, $owner_uid);
 163                         }
 164                         return;
 165                 }
 166
 167                 if (!$owner_uid) return;
 168
 169                 if (FORCE_ARTICLE_PURGE == 0) {
 170                         $purge_unread = get_pref($link, "PURGE_UNREAD_ARTICLES",
 171                                 $owner_uid, false);
 172                 } else {
 173                         $purge_unread = true;
 174                         $purge_interval = FORCE_ARTICLE_PURGE;
 175                 }
 176
 177                 if (!$purge_unread) $query_limit = " unread = false AND ";
 178
 179                 if (DB_TYPE == "pgsql") {
 180                         $pg_version = get_pgsql_version($link);
 181
 182                         if (preg_match("/^7\./", $pg_version) || preg_match("/^8\.0/", $pg_version)) {
 183
 184                                 $result = db_query($link, "DELETE FROM ttrss_user_entries WHERE
 185                                         ttrss_entries.id = ref_id AND
 186                                         marked = false AND
 187                                         feed_id = '$feed_id' AND
 188                                         $query_limit
 189                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 190
 191                         } else {
 192
 193                                 $result = db_query($link, "DELETE FROM ttrss_user_entries
 194                                         USING ttrss_entries
 195                                         WHERE ttrss_entries.id = ref_id AND
 196                                         marked = false AND
 197                                         feed_id = '$feed_id' AND
 198                                         $query_limit
 199                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 200                         }
 201
 202                         $rows = pg_affected_rows($result);
 203
 204                 } else {
 205
 206 /*                      $result = db_query($link, "DELETE FROM ttrss_user_entries WHERE
 207                                 marked = false AND feed_id = '$feed_id' AND
 208                                 (SELECT date_updated FROM ttrss_entries WHERE
 209                                         id = ref_id) < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)"); */
 210
 211                         $result = db_query($link, "DELETE FROM ttrss_user_entries
 212                                 USING ttrss_user_entries, ttrss_entries
 213                                 WHERE ttrss_entries.id = ref_id AND
 214                                 marked = false AND
 215                                 feed_id = '$feed_id' AND
 216                                 $query_limit
 217                                 ttrss_entries.date_updated < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)");
 218
 219                         $rows = mysql_affected_rows($link);
 220
 221                 }
 222
 223                 ccache_update($link, $feed_id, $owner_uid);
 224
 225                 if ($debug) {
 226                         _debug("Purged feed $feed_id ($purge_interval): deleted $rows articles");
 227                 }
 228
 229                 return $rows;
 230         } // function purge_feed
 231
 232         function feed_purge_interval($link, $feed_id) {
 233
 234                 $result = db_query($link, "SELECT purge_interval, owner_uid FROM ttrss_feeds
 235                         WHERE id = '$feed_id'");
 236
 237                 if (db_num_rows($result) == 1) {
 238                         $purge_interval = db_fetch_result($result, 0, "purge_interval");
 239                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 240
 241                         if ($purge_interval == 0) $purge_interval = get_pref($link,
 242                                 'PURGE_OLD_DAYS', $owner_uid);
 243
 244                         return $purge_interval;
 245
 246                 } else {
 247                         return -1;
 248                 }
 249         }
 250
 251         function purge_orphans($link, $do_output = false) {
 252
 253                 // purge orphaned posts in main content table
 254                 $result = db_query($link, "DELETE FROM ttrss_entries WHERE
 255                         (SELECT COUNT(int_id) FROM ttrss_user_entries WHERE ref_id = id) = 0");
 256
 257                 if ($do_output) {
 258                         $rows = db_affected_rows($link, $result);
 259                         _debug("Purged $rows orphaned posts.");
 260                 }
 261         }
 262
 263         function get_feed_update_interval($link, $feed_id) {
 264                 $result = db_query($link, "SELECT owner_uid, update_interval FROM
 265                         ttrss_feeds WHERE id = '$feed_id'");
 266
 267                 if (db_num_rows($result) == 1) {
 268                         $update_interval = db_fetch_result($result, 0, "update_interval");
 269                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 270
 271                         if ($update_interval != 0) {
 272                                 return $update_interval;
 273                         } else {
 274                                 return get_pref($link, 'DEFAULT_UPDATE_INTERVAL', $owner_uid, false);
 275                         }
 276
 277                 } else {
 278                         return -1;
 279                 }
 280         }
 281
 282         function fetch_file_contents($url, $type = false, $login = false, $pass = false, $post_query = false, $timeout = false) {
 283                 $login = urlencode($login);
 284                 $pass = urlencode($pass);
 285
 286                 global $fetch_last_error;
 287
 288                 if (function_exists('curl_init') && !ini_get("open_basedir")) {
 289                         //$ch = curl_init($url);
 290                         $ch = curl_init(geturl($url));
 291
 292                         curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, $timeout ? $timeout : 15);
 293                         curl_setopt($ch, CURLOPT_TIMEOUT, $timeout ? $timeout : 45);
 294                         //curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
 295                         curl_setopt($ch, CURLOPT_MAXREDIRS, 20);
 296                         curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
 297                         curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
 298                         curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
 299                         curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_ANY);
 300                         curl_setopt($ch, CURLOPT_USERAGENT, SELF_USER_AGENT);
 301                         curl_setopt($ch, CURLOPT_ENCODING , "gzip");
 302                         curl_setopt($ch, CURLOPT_REFERER, $url);
 303
 304                         if ($post_query) {
 305                                 curl_setopt($ch, CURLOPT_POST, true);
 306                                 curl_setopt($ch, CURLOPT_POSTFIELDS, $post_query);
 307                         }
 308
 309                         if ($login && $pass)
 310                                 curl_setopt($ch, CURLOPT_USERPWD, "$login:$pass");
 311
 312                         $contents = @curl_exec($ch);
 313
 314                         if (curl_errno($ch) === 23 || curl_errno($ch) === 61) {
 315                                 curl_setopt($ch, CURLOPT_ENCODING, 'none');
 316                                 $contents = @curl_exec($ch);
 317                         }
 318
 319                         if ($contents === false) {
 320                                 $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
 321                                 curl_close($ch);
 322                                 return false;
 323                         }
 324
 325                         $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
 326                         $content_type = curl_getinfo($ch, CURLINFO_CONTENT_TYPE);
 327
 328                         if ($http_code != 200 || $type && strpos($content_type, "$type") === false) {
 329                                 if (curl_errno($ch) != 0) {
 330                                         $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
 331                                 } else {
 332                                         $fetch_last_error = "HTTP Code: $http_code";
 333                                 }
 334                                 curl_close($ch);
 335                                 return false;
 336                         }
 337
 338                         curl_close($ch);
 339
 340                         return $contents;
 341                 } else {
 342                         if ($login && $pass ){
 343                                 $url_parts = array();
 344
 345                                 preg_match("/(^[^:]*):\/\/(.*)/", $url, $url_parts);
 346
 347                                 if ($url_parts[1] && $url_parts[2]) {
 348                                         $url = $url_parts[1] . "://$login:$pass@" . $url_parts[2];
 349                                 }
 350                         }
 351
 352                         $data = @file_get_contents($url);
 353
 354                         $gzdecoded = gzdecode($data);
 355                         if ($gzdecoded) $data = $gzdecoded;
 356
 357                         if (!$data && function_exists('error_get_last')) {
 358                                 $error = error_get_last();
 359                                 $fetch_last_error = $error["message"];
 360                         }
 361                         return $data;
 362                 }
 363
 364         }
 365
 366         /**
 367          * Try to determine the favicon URL for a feed.
 368          * adapted from wordpress favicon plugin by Jeff Minard (http://thecodepro.com/)
 369          * http://dev.wp-plugins.org/file/favatars/trunk/favatars.php
 370          *
 371          * @param string $url A feed or page URL
 372          * @access public
 373          * @return mixed The favicon URL, or false if none was found.
 374          */
 375         function get_favicon_url($url) {
 376
 377                 $favicon_url = false;
 378
 379                 if ($html = @fetch_file_contents($url)) {
 380
 381                         libxml_use_internal_errors(true);
 382
 383                         $doc = new DOMDocument();
 384                         $doc->loadHTML($html);
 385                         $xpath = new DOMXPath($doc);
 386
 387                         $base = $xpath->query('/html/head/base');
 388                         foreach ($base as $b) {
 389                                 $url = $b->getAttribute("href");
 390                                 break;
 391                         }
 392
 393                         $entries = $xpath->query('/html/head/link[@rel="shortcut icon" or @rel="icon"]');
 394                         if (count($entries) > 0) {
 395                                 foreach ($entries as $entry) {
 396                                         $favicon_url = rewrite_relative_url($url, $entry->getAttribute("href"));
 397                                         break;
 398                                 }
 399                         }
 400                 }
 401
 402                 if (!$favicon_url)
 403                         $favicon_url = rewrite_relative_url($url, "/favicon.ico");
 404
 405                 return $favicon_url;
 406         } // function get_favicon_url
 407
 408         function check_feed_favicon($site_url, $feed, $link) {
 409 #               print "FAVICON [$site_url]: $favicon_url\n";
 410
 411                 $icon_file = ICONS_DIR . "/$feed.ico";
 412
 413                 if (!file_exists($icon_file)) {
 414                         $favicon_url = get_favicon_url($site_url);
 415
 416                         if ($favicon_url) {
 417                                 // Limiting to "image" type misses those served with text/plain
 418                                 $contents = fetch_file_contents($favicon_url); // , "image");
 419
 420                                 if ($contents) {
 421                                         // Crude image type matching.
 422                                         // Patterns gleaned from the file(1) source code.
 423                                         if (preg_match('/^\x00\x00\x01\x00/', $contents)) {
 424                                                 // 0       string  \000\000\001\000        MS Windows icon resource
 425                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa MS Windows icon resource");
 426                                         }
 427                                         elseif (preg_match('/^GIF8/', $contents)) {
 428                                                 // 0       string          GIF8            GIF image data
 429                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa GIF image");
 430                                         }
 431                                         elseif (preg_match('/^\x89PNG\x0d\x0a\x1a\x0a/', $contents)) {
 432                                                 // 0       string          \x89PNG\x0d\x0a\x1a\x0a         PNG image data
 433                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa PNG image");
 434                                         }
 435                                         elseif (preg_match('/^\xff\xd8/', $contents)) {
 436                                                 // 0       beshort         0xffd8          JPEG image data
 437                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa JPG image");
 438                                         }
 439                                         else {
 440                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa UNKNOWN type");
 441                                                 $contents = "";
 442                                         }
 443                                 }
 444
 445                                 if ($contents) {
 446                                         $fp = @fopen($icon_file, "w");
 447
 448                                         if ($fp) {
 449                                                 fwrite($fp, $contents);
 450                                                 fclose($fp);
 451                                                 chmod($icon_file, 0644);
 452                                         }
 453                                 }
 454                         }
 455                 }
 456         }
 457
 458         function print_select($id, $default, $values, $attributes = "") {
 459                 print "<select name=\"$id\" id=\"$id\" $attributes>";
 460                 foreach ($values as $v) {
 461                         if ($v == $default)
 462                                 $sel = "selected=\"1\"";
 463                          else
 464                                 $sel = "";
 465
 466                         $v = trim($v);
 467
 468                         print "<option value=\"$v\" $sel>$v</option>";
 469                 }
 470                 print "</select>";
 471         }
 472
 473         function print_select_hash($id, $default, $values, $attributes = "") {
 474                 print "<select name=\"$id\" id='$id' $attributes>";
 475                 foreach (array_keys($values) as $v) {
 476                         if ($v == $default)
 477                                 $sel = 'selected="selected"';
 478                          else
 479                                 $sel = "";
 480
 481                         $v = trim($v);
 482
 483                         print "<option $sel value=\"$v\">".$values[$v]."</option>";
 484                 }
 485
 486                 print "</select>";
 487         }
 488
 489         function print_radio($id, $default, $true_is, $values, $attributes = "") {
 490                 foreach ($values as $v) {
 491
 492                         if ($v == $default)
 493                                 $sel = "checked";
 494                          else
 495                                 $sel = "";
 496
 497                         if ($v == $true_is) {
 498                                 $sel .= " value=\"1\"";
 499                         } else {
 500                                 $sel .= " value=\"0\"";
 501                         }
 502
 503                         print "<input class=\"noborder\" dojoType=\"dijit.form.RadioButton\"
 504                                 type=\"radio\" $sel $attributes name=\"$id\">&nbsp;$v&nbsp;";
 505
 506                 }
 507         }
 508
 509         function initialize_user_prefs($link, $uid, $profile = false) {
 510
 511                 $uid = db_escape_string($uid);
 512
 513                 if (!$profile) {
 514                         $profile = "NULL";
 515                         $profile_qpart = "AND profile IS NULL";
 516                 } else {
 517                         $profile_qpart = "AND profile = '$profile'";
 518                 }
 519
 520                 if (get_schema_version($link) < 63) $profile_qpart = "";
 521
 522                 db_query($link, "BEGIN");
 523
 524                 $result = db_query($link, "SELECT pref_name,def_value FROM ttrss_prefs");
 525
 526                 $u_result = db_query($link, "SELECT pref_name
 527                         FROM ttrss_user_prefs WHERE owner_uid = '$uid' $profile_qpart");
 528
 529                 $active_prefs = array();
 530
 531                 while ($line = db_fetch_assoc($u_result)) {
 532                         array_push($active_prefs, $line["pref_name"]);
 533                 }
 534
 535                 while ($line = db_fetch_assoc($result)) {
 536                         if (array_search($line["pref_name"], $active_prefs) === FALSE) {
 537 //                              print "adding " . $line["pref_name"] . "<br>";
 538
 539                                 if (get_schema_version($link) < 63) {
 540                                         db_query($link, "INSERT INTO ttrss_user_prefs
 541                                                 (owner_uid,pref_name,value) VALUES
 542                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."')");
 543
 544                                 } else {
 545                                         db_query($link, "INSERT INTO ttrss_user_prefs
 546                                                 (owner_uid,pref_name,value, profile) VALUES
 547                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."', $profile)");
 548                                 }
 549
 550                         }
 551                 }
 552
 553                 db_query($link, "COMMIT");
 554
 555         }
 556
 557         function get_ssl_certificate_id() {
 558                 if ($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"]) {
 559                         return sha1($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"] .
 560                                 $_SERVER["REDIRECT_SSL_CLIENT_V_START"] .
 561                                 $_SERVER["REDIRECT_SSL_CLIENT_V_END"] .
 562                                 $_SERVER["REDIRECT_SSL_CLIENT_S_DN"]);
 563                 }
 564                 return "";
 565         }
 566
 567         function authenticate_user($link, $login, $password, $check_only = false) {
 568
 569                 if (!SINGLE_USER_MODE) {
 570
 571                         $user_id = false;
 572
 573                         global $pluginhost;
 574                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_AUTH_USER) as $plugin) {
 575
 576                                 $user_id = (int) $plugin->authenticate($login, $password);
 577
 578                                 if ($user_id) {
 579                                         $_SESSION["auth_module"] = strtolower(get_class($plugin));
 580                                         break;
 581                                 }
 582                         }
 583
 584                         if ($user_id && !$check_only) {
 585                                 $_SESSION["uid"] = $user_id;
 586
 587                                 $result = db_query($link, "SELECT login,access_level,pwd_hash FROM ttrss_users
 588                                         WHERE id = '$user_id'");
 589
 590                                 $_SESSION["name"] = db_fetch_result($result, 0, "login");
 591                                 $_SESSION["access_level"] = db_fetch_result($result, 0, "access_level");
 592                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 593
 594                                 db_query($link, "UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 595                                         $_SESSION["uid"]);
 596
 597                                 $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 598                                 $_SESSION["pwd_hash"] = db_fetch_result($result, 0, "pwd_hash");
 599
 600                                 $_SESSION["last_version_check"] = time();
 601
 602                                 initialize_user_prefs($link, $_SESSION["uid"]);
 603
 604                                 return true;
 605                         }
 606
 607                         return false;
 608
 609                 } else {
 610
 611                         $_SESSION["uid"] = 1;
 612                         $_SESSION["name"] = "admin";
 613                         $_SESSION["access_level"] = 10;
 614
 615                         $_SESSION["hide_hello"] = true;
 616                         $_SESSION["hide_logout"] = true;
 617
 618                         $_SESSION["auth_module"] = false;
 619
 620                         if (!$_SESSION["csrf_token"]) {
 621                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 622                         }
 623
 624                         $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 625
 626                         initialize_user_prefs($link, $_SESSION["uid"]);
 627
 628                         return true;
 629                 }
 630         }
 631
 632         function make_password($length = 8) {
 633
 634                 $password = "";
 635                 $possible = "0123456789abcdfghjkmnpqrstvwxyzABCDFGHJKMNPQRSTVWXYZ";
 636
 637         $i = 0;
 638
 639                 while ($i < $length) {
 640                         $char = substr($possible, mt_rand(0, strlen($possible)-1), 1);
 641
 642                         if (!strstr($password, $char)) {
 643                                 $password .= $char;
 644                                 $i++;
 645                         }
 646                 }
 647                 return $password;
 648         }
 649
 650         // this is called after user is created to initialize default feeds, labels
 651         // or whatever else
 652
 653         // user preferences are checked on every login, not here
 654
 655         function initialize_user($link, $uid) {
 656
 657                 db_query($link, "insert into ttrss_feeds (owner_uid,title,feed_url)
 658                         values ('$uid', 'Tiny Tiny RSS: New Releases',
 659                         'http://tt-rss.org/releases.rss')");
 660
 661                 db_query($link, "insert into ttrss_feeds (owner_uid,title,feed_url)
 662                         values ('$uid', 'Tiny Tiny RSS: Forum',
 663                                 'http://tt-rss.org/forum/rss.php')");
 664         }
 665
 666         function logout_user() {
 667                 session_destroy();
 668                 if (isset($_COOKIE[session_name()])) {
 669                    setcookie(session_name(), '', time()-42000, '/');
 670                 }
 671         }
 672
 673         function validate_csrf($csrf_token) {
 674                 return $csrf_token == $_SESSION['csrf_token'];
 675         }
 676
 677         function validate_session($link) {
 678                 if (SINGLE_USER_MODE) return true;
 679
 680                 $check_ip = $_SESSION['ip_address'];
 681
 682                 switch (SESSION_CHECK_ADDRESS) {
 683                 case 0:
 684                         $check_ip = '';
 685                         break;
 686                 case 1:
 687                         $check_ip = substr($check_ip, 0, strrpos($check_ip, '.')+1);
 688                         break;
 689                 case 2:
 690                         $check_ip = substr($check_ip, 0, strrpos($check_ip, '.'));
 691                         $check_ip = substr($check_ip, 0, strrpos($check_ip, '.')+1);
 692                         break;
 693                 };
 694
 695                 if ($check_ip && strpos($_SERVER['REMOTE_ADDR'], $check_ip) !== 0) {
 696                         $_SESSION["login_error_msg"] =
 697                                 __("Session failed to validate (incorrect IP)");
 698                         return false;
 699                 }
 700
 701                 if ($_SESSION["ref_schema_version"] != get_schema_version($link, true))
 702                         return false;
 703
 704                 if ($_SESSION["uid"]) {
 705
 706                         $result = db_query($link,
 707                                 "SELECT pwd_hash FROM ttrss_users WHERE id = '".$_SESSION["uid"]."'");
 708
 709                         $pwd_hash = db_fetch_result($result, 0, "pwd_hash");
 710
 711                         if ($pwd_hash != $_SESSION["pwd_hash"]) {
 712                                 return false;
 713                         }
 714                 }
 715
 716 /*              if ($_SESSION["cookie_lifetime"] && $_SESSION["uid"]) {
 717
 718                         //print_r($_SESSION);
 719
 720                         if (time() > $_SESSION["cookie_lifetime"]) {
 721                                 return false;
 722                         }
 723                 } */
 724
 725                 return true;
 726         }
 727
 728         function load_user_plugins($link, $owner_uid) {
 729                 if ($owner_uid) {
 730                         $plugins = get_pref($link, "_ENABLED_PLUGINS", $owner_uid);
 731
 732                         global $pluginhost;
 733                         $pluginhost->load($plugins, $pluginhost::KIND_USER, $owner_uid);
 734
 735                         if (get_schema_version($link) > 100) {
 736                                 $pluginhost->load_data();
 737                         }
 738                 }
 739         }
 740
 741         function login_sequence($link, $login_form = 0) {
 742                 $_SESSION["prefs_cache"] = false;
 743
 744                 if (SINGLE_USER_MODE) {
 745                         authenticate_user($link, "admin", null);
 746                         cache_prefs($link);
 747                         load_user_plugins($link, $_SESSION["uid"]);
 748                 } else {
 749                         if (!$_SESSION["uid"] || !validate_session($link)) {
 750
 751                                 if (AUTH_AUTO_LOGIN && authenticate_user($link, null, null)) {
 752                                     $_SESSION["ref_schema_version"] = get_schema_version($link, true);
 753                                 } else {
 754                                          authenticate_user($link, null, null, true);
 755                                 }
 756
 757                                 if (!$_SESSION["uid"]) render_login_form($link, $login_form);
 758
 759                         } else {
 760                                 /* bump login timestamp */
 761                                 db_query($link, "UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 762                                         $_SESSION["uid"]);
 763                         }
 764
 765                         if ($_SESSION["uid"] && $_SESSION["language"] && SESSION_COOKIE_LIFETIME > 0) {
 766                                 setcookie("ttrss_lang", $_SESSION["language"],
 767                                         time() + SESSION_COOKIE_LIFETIME);
 768                         }
 769
 770                         if ($_SESSION["uid"]) {
 771                                 cache_prefs($link);
 772                                 load_user_plugins($link, $_SESSION["uid"]);
 773                         }
 774                 }
 775         }
 776
 777         function truncate_string($str, $max_len, $suffix = '&hellip;') {
 778                 if (mb_strlen($str, "utf-8") > $max_len - 3) {
 779                         return mb_substr($str, 0, $max_len, "utf-8") . $suffix;
 780                 } else {
 781                         return $str;
 782                 }
 783         }
 784
 785         // Deprecated, TODO: remove
 786         function theme_image($link, $filename) {
 787                 return $filename;
 788         }
 789
 790         function convert_timestamp($timestamp, $source_tz, $dest_tz) {
 791
 792                 try {
 793                         $source_tz = new DateTimeZone($source_tz);
 794                 } catch (Exception $e) {
 795                         $source_tz = new DateTimeZone('UTC');
 796                 }
 797
 798                 try {
 799                         $dest_tz = new DateTimeZone($dest_tz);
 800                 } catch (Exception $e) {
 801                         $dest_tz = new DateTimeZone('UTC');
 802                 }
 803
 804                 $dt = new DateTime(date('Y-m-d H:i:s', $timestamp), $source_tz);
 805                 return $dt->format('U') + $dest_tz->getOffset($dt);
 806         }
 807
 808         function make_local_datetime($link, $timestamp, $long, $owner_uid = false,
 809                                         $no_smart_dt = false) {
 810
 811                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 812                 if (!$timestamp) $timestamp = '1970-01-01 0:00';
 813
 814                 global $utc_tz;
 815                 global $tz_offset;
 816
 817                 # We store date in UTC internally
 818                 $dt = new DateTime($timestamp, $utc_tz);
 819
 820                 if ($tz_offset == -1) {
 821
 822                         $user_tz_string = get_pref($link, 'USER_TIMEZONE', $owner_uid);
 823
 824                         try {
 825                                 $user_tz = new DateTimeZone($user_tz_string);
 826                         } catch (Exception $e) {
 827                                 $user_tz = $utc_tz;
 828                         }
 829
 830                         $tz_offset = $user_tz->getOffset($dt);
 831                 }
 832
 833                 $user_timestamp = $dt->format('U') + $tz_offset;
 834
 835                 if (!$no_smart_dt) {
 836                         return smart_date_time($link, $user_timestamp,
 837                                 $tz_offset, $owner_uid);
 838                 } else {
 839                         if ($long)
 840                                 $format = get_pref($link, 'LONG_DATE_FORMAT', $owner_uid);
 841                         else
 842                                 $format = get_pref($link, 'SHORT_DATE_FORMAT', $owner_uid);
 843
 844                         return date($format, $user_timestamp);
 845                 }
 846         }
 847
 848         function smart_date_time($link, $timestamp, $tz_offset = 0, $owner_uid = false) {
 849                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 850
 851                 if (date("Y.m.d", $timestamp) == date("Y.m.d", time() + $tz_offset)) {
 852                         return date("G:i", $timestamp);
 853                 } else if (date("Y", $timestamp) == date("Y", time() + $tz_offset)) {
 854                         $format = get_pref($link, 'SHORT_DATE_FORMAT', $owner_uid);
 855                         return date($format, $timestamp);
 856                 } else {
 857                         $format = get_pref($link, 'LONG_DATE_FORMAT', $owner_uid);
 858                         return date($format, $timestamp);
 859                 }
 860         }
 861
 862         function sql_bool_to_bool($s) {
 863                 if ($s == "t" || $s == "1" || strtolower($s) == "true") {
 864                         return true;
 865                 } else {
 866                         return false;
 867                 }
 868         }
 869
 870         function bool_to_sql_bool($s) {
 871                 if ($s) {
 872                         return "true";
 873                 } else {
 874                         return "false";
 875                 }
 876         }
 877
 878         // Session caching removed due to causing wrong redirects to upgrade
 879         // script when get_schema_version() is called on an obsolete session
 880         // created on a previous schema version.
 881         function get_schema_version($link, $nocache = false) {
 882                 global $schema_version;
 883
 884                 if (!$schema_version) {
 885                         $result = db_query($link, "SELECT schema_version FROM ttrss_version");
 886                         $version = db_fetch_result($result, 0, "schema_version");
 887                         $schema_version = $version;
 888                         return $version;
 889                 } else {
 890                         return $schema_version;
 891                 }
 892         }
 893
 894         function sanity_check($link) {
 895                 require_once 'errors.php';
 896
 897                 $error_code = 0;
 898                 $schema_version = get_schema_version($link, true);
 899
 900                 if ($schema_version != SCHEMA_VERSION) {
 901                         $error_code = 5;
 902                 }
 903
 904                 if (DB_TYPE == "mysql") {
 905                         $result = db_query($link, "SELECT true", false);
 906                         if (db_num_rows($result) != 1) {
 907                                 $error_code = 10;
 908                         }
 909                 }
 910
 911                 if (db_escape_string("testTEST") != "testTEST") {
 912                         $error_code = 12;
 913                 }
 914
 915                 return array("code" => $error_code, "message" => $ERRORS[$error_code]);
 916         }
 917
 918         function file_is_locked($filename) {
 919                 if (function_exists('flock')) {
 920                         $fp = @fopen(LOCK_DIRECTORY . "/$filename", "r");
 921                         if ($fp) {
 922                                 if (flock($fp, LOCK_EX | LOCK_NB)) {
 923                                         flock($fp, LOCK_UN);
 924                                         fclose($fp);
 925                                         return false;
 926                                 }
 927                                 fclose($fp);
 928                                 return true;
 929                         } else {
 930                                 return false;
 931                         }
 932                 }
 933                 return true; // consider the file always locked and skip the test
 934         }
 935
 936         function make_lockfile($filename) {
 937                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
 938
 939                 if ($fp && flock($fp, LOCK_EX | LOCK_NB)) {
 940                         if (function_exists('posix_getpid')) {
 941                                 fwrite($fp, posix_getpid() . "\n");
 942                         }
 943                         return $fp;
 944                 } else {
 945                         return false;
 946                 }
 947         }
 948
 949         function make_stampfile($filename) {
 950                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
 951
 952                 if (flock($fp, LOCK_EX | LOCK_NB)) {
 953                         fwrite($fp, time() . "\n");
 954                         flock($fp, LOCK_UN);
 955                         fclose($fp);
 956                         return true;
 957                 } else {
 958                         return false;
 959                 }
 960         }
 961
 962         function sql_random_function() {
 963                 if (DB_TYPE == "mysql") {
 964                         return "RAND()";
 965                 } else {
 966                         return "RANDOM()";
 967                 }
 968         }
 969
 970         function catchup_feed($link, $feed, $cat_view, $owner_uid = false, $max_id = false) {
 971
 972                         if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 973
 974                         //if (preg_match("/^-?[0-9][0-9]*$/", $feed) != false) {
 975
 976                         $ref_check_qpart = ($max_id &&
 977                                 !get_pref($link, 'REVERSE_HEADLINES')) ? "ref_id <= '$max_id'" : "true";
 978
 979                         if (is_numeric($feed)) {
 980                                 if ($cat_view) {
 981
 982                                         if ($feed >= 0) {
 983
 984                                                 if ($feed > 0) {
 985                                                         $children = getChildCategories($link, $feed, $owner_uid);
 986                                                         array_push($children, $feed);
 987
 988                                                         $children = join(",", $children);
 989
 990                                                         $cat_qpart = "cat_id IN ($children)";
 991                                                 } else {
 992                                                         $cat_qpart = "cat_id IS NULL";
 993                                                 }
 994
 995                                                 db_query($link, "UPDATE ttrss_user_entries
 996                                                         SET unread = false,last_read = NOW()
 997                                                         WHERE feed_id IN (SELECT id FROM ttrss_feeds WHERE $cat_qpart)
 998                                                         AND $ref_check_qpart AND unread = true
 999                                                         AND owner_uid = $owner_uid");
1000
1001                                         } else if ($feed == -2) {
1002
1003                                                 db_query($link, "UPDATE ttrss_user_entries
1004                                                         SET unread = false,last_read = NOW() WHERE (SELECT COUNT(*)
1005                                                                 FROM ttrss_user_labels2 WHERE article_id = ref_id) > 0
1006                                                                 AND $ref_check_qpart
1007                                                                 AND unread = true AND owner_uid = $owner_uid");
1008                                         }
1009
1010                                 } else if ($feed > 0) {
1011
1012                                         db_query($link, "UPDATE ttrss_user_entries
1013                                                         SET unread = false,last_read = NOW()
1014                                                         WHERE feed_id = '$feed'
1015                                                         AND $ref_check_qpart AND unread = true
1016                                                         AND owner_uid = $owner_uid");
1017
1018                                 } else if ($feed < 0 && $feed > -10) { // special, like starred
1019
1020                                         if ($feed == -1) {
1021                                                 db_query($link, "UPDATE ttrss_user_entries
1022                                                         SET unread = false,last_read = NOW()
1023                                                         WHERE marked = true
1024                                                         AND $ref_check_qpart AND unread = true
1025                                                         AND owner_uid = $owner_uid");
1026                                         }
1027
1028                                         if ($feed == -2) {
1029                                                 db_query($link, "UPDATE ttrss_user_entries
1030                                                         SET unread = false,last_read = NOW()
1031                                                         WHERE published = true
1032                                                         AND $ref_check_qpart AND unread = true
1033                                                         AND owner_uid = $owner_uid");
1034                                         }
1035
1036                                         if ($feed == -3) {
1037
1038                                                 $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE");
1039
1040                                                 if (DB_TYPE == "pgsql") {
1041                                                         $match_part = "updated > NOW() - INTERVAL '$intl hour' ";
1042                                                 } else {
1043                                                         $match_part = "updated > DATE_SUB(NOW(),
1044                                                                 INTERVAL $intl HOUR) ";
1045                                                 }
1046
1047                                                 $result = db_query($link, "SELECT id FROM ttrss_entries,
1048                                                         ttrss_user_entries WHERE $match_part AND
1049                                                         unread = true AND
1050                                                         ttrss_user_entries.ref_id = ttrss_entries.id AND
1051                                                         owner_uid = $owner_uid");
1052
1053                                                 $affected_ids = array();
1054
1055                                                 while ($line = db_fetch_assoc($result)) {
1056                                                         array_push($affected_ids, $line["id"]);
1057                                                 }
1058
1059                                                 catchupArticlesById($link, $affected_ids, 0);
1060                                         }
1061
1062                                         if ($feed == -4) {
1063                                                 db_query($link, "UPDATE ttrss_user_entries
1064                                                         SET unread = false,last_read = NOW()
1065                                                         WHERE $ref_check_qpart AND unread = true AND
1066                                                         owner_uid = $owner_uid");
1067                                         }
1068
1069                                 } else if ($feed < -10) { // label
1070
1071                                         $label_id = -$feed - 11;
1072
1073                                         db_query($link, "UPDATE ttrss_user_entries, ttrss_user_labels2
1074                                                 SET unread = false, last_read = NOW()
1075                                                         WHERE label_id = '$label_id' AND unread = true
1076                                                         AND $ref_check_qpart
1077                                                         AND owner_uid = '$owner_uid' AND ref_id = article_id");
1078
1079                                 }
1080
1081                                 ccache_update($link, $feed, $owner_uid, $cat_view);
1082
1083                         } else { // tag
1084                                 db_query($link, "BEGIN");
1085
1086                                 $tag_name = db_escape_string($feed);
1087
1088                                 $result = db_query($link, "SELECT post_int_id FROM ttrss_tags
1089                                         WHERE tag_name = '$tag_name' AND owner_uid = $owner_uid");
1090
1091                                 while ($line = db_fetch_assoc($result)) {
1092                                         db_query($link, "UPDATE ttrss_user_entries SET
1093                                                 unread = false, last_read = NOW()
1094                                                 WHERE $ref_check_qpart AND unread = true
1095                                                 AND int_id = " . $line["post_int_id"]);
1096                                 }
1097                                 db_query($link, "COMMIT");
1098                         }
1099         }
1100
1101         function getAllCounters($link) {
1102                 $data = getGlobalCounters($link);
1103
1104                 $data = array_merge($data, getVirtCounters($link));
1105                 $data = array_merge($data, getLabelCounters($link));
1106                 $data = array_merge($data, getFeedCounters($link, $active_feed));
1107                 $data = array_merge($data, getCategoryCounters($link));
1108
1109                 return $data;
1110         }
1111
1112         function getCategoryTitle($link, $cat_id) {
1113
1114                 if ($cat_id == -1) {
1115                         return __("Special");
1116                 } else if ($cat_id == -2) {
1117                         return __("Labels");
1118                 } else {
1119
1120                         $result = db_query($link, "SELECT title FROM ttrss_feed_categories WHERE
1121                                 id = '$cat_id'");
1122
1123                         if (db_num_rows($result) == 1) {
1124                                 return db_fetch_result($result, 0, "title");
1125                         } else {
1126                                 return __("Uncategorized");
1127                         }
1128                 }
1129         }
1130
1131
1132         function getCategoryCounters($link) {
1133                 $ret_arr = array();
1134
1135                 /* Labels category */
1136
1137                 $cv = array("id" => -2, "kind" => "cat",
1138                         "counter" => getCategoryUnread($link, -2));
1139
1140                 array_push($ret_arr, $cv);
1141
1142                 $result = db_query($link, "SELECT id AS cat_id, value AS unread,
1143                         (SELECT COUNT(id) FROM ttrss_feed_categories AS c2
1144                                 WHERE c2.parent_cat = ttrss_feed_categories.id) AS num_children
1145                         FROM ttrss_feed_categories, ttrss_cat_counters_cache
1146                         WHERE ttrss_cat_counters_cache.feed_id = id AND
1147                         ttrss_cat_counters_cache.owner_uid = ttrss_feed_categories.owner_uid AND
1148                         ttrss_feed_categories.owner_uid = " . $_SESSION["uid"]);
1149
1150                 while ($line = db_fetch_assoc($result)) {
1151                         $line["cat_id"] = (int) $line["cat_id"];
1152
1153                         if ($line["num_children"] > 0) {
1154                                 $child_counter = getCategoryChildrenUnread($link, $line["cat_id"], $_SESSION["uid"]);
1155                         } else {
1156                                 $child_counter = 0;
1157                         }
1158
1159                         $cv = array("id" => $line["cat_id"], "kind" => "cat",
1160                                 "counter" => $line["unread"] + $child_counter);
1161
1162                         array_push($ret_arr, $cv);
1163                 }
1164
1165                 /* Special case: NULL category doesn't actually exist in the DB */
1166
1167                 $cv = array("id" => 0, "kind" => "cat",
1168                         "counter" => (int) ccache_find($link, 0, $_SESSION["uid"], true));
1169
1170                 array_push($ret_arr, $cv);
1171
1172                 return $ret_arr;
1173         }
1174
1175         // only accepts real cats (>= 0)
1176         function getCategoryChildrenUnread($link, $cat, $owner_uid = false) {
1177                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1178
1179                 $result = db_query($link, "SELECT id FROM ttrss_feed_categories WHERE parent_cat = '$cat'
1180                                 AND owner_uid = $owner_uid");
1181
1182                 $unread = 0;
1183
1184                 while ($line = db_fetch_assoc($result)) {
1185                         $unread += getCategoryUnread($link, $line["id"], $owner_uid);
1186                         $unread += getCategoryChildrenUnread($link, $line["id"], $owner_uid);
1187                 }
1188
1189                 return $unread;
1190         }
1191
1192         function getCategoryUnread($link, $cat, $owner_uid = false) {
1193
1194                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1195
1196                 if ($cat >= 0) {
1197
1198                         if ($cat != 0) {
1199                                 $cat_query = "cat_id = '$cat'";
1200                         } else {
1201                                 $cat_query = "cat_id IS NULL";
1202                         }
1203
1204                         $result = db_query($link, "SELECT id FROM ttrss_feeds WHERE $cat_query
1205                                         AND owner_uid = " . $owner_uid);
1206
1207                         $cat_feeds = array();
1208                         while ($line = db_fetch_assoc($result)) {
1209                                 array_push($cat_feeds, "feed_id = " . $line["id"]);
1210                         }
1211
1212                         if (count($cat_feeds) == 0) return 0;
1213
1214                         $match_part = implode(" OR ", $cat_feeds);
1215
1216                         $result = db_query($link, "SELECT COUNT(int_id) AS unread
1217                                 FROM ttrss_user_entries
1218                                 WHERE   unread = true AND ($match_part)
1219                                 AND owner_uid = " . $owner_uid);
1220
1221                         $unread = 0;
1222
1223                         # this needs to be rewritten
1224                         while ($line = db_fetch_assoc($result)) {
1225                                 $unread += $line["unread"];
1226                         }
1227
1228                         return $unread;
1229                 } else if ($cat == -1) {
1230                         return getFeedUnread($link, -1) + getFeedUnread($link, -2) + getFeedUnread($link, -3) + getFeedUnread($link, 0);
1231                 } else if ($cat == -2) {
1232
1233                         $result = db_query($link, "
1234                                 SELECT COUNT(unread) AS unread FROM
1235                                         ttrss_user_entries, ttrss_user_labels2
1236                                 WHERE article_id = ref_id AND unread = true
1237                                         AND ttrss_user_entries.owner_uid = '$owner_uid'");
1238
1239                         $unread = db_fetch_result($result, 0, "unread");
1240
1241                         return $unread;
1242
1243                 }
1244         }
1245
1246         function getFeedUnread($link, $feed, $is_cat = false) {
1247                 return getFeedArticles($link, $feed, $is_cat, true, $_SESSION["uid"]);
1248         }
1249
1250         function getLabelUnread($link, $label_id, $owner_uid = false) {
1251                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1252
1253                 $result = db_query($link, "SELECT COUNT(ref_id) AS unread FROM ttrss_user_entries, ttrss_user_labels2
1254                         WHERE owner_uid = '$owner_uid' AND unread = true AND label_id = '$label_id' AND article_id = ref_id");
1255
1256                 if (db_num_rows($result) != 0) {
1257                         return db_fetch_result($result, 0, "unread");
1258                 } else {
1259                         return 0;
1260                 }
1261         }
1262
1263         function getFeedArticles($link, $feed, $is_cat = false, $unread_only = false,
1264                 $owner_uid = false) {
1265
1266                 $n_feed = (int) $feed;
1267                 $need_entries = false;
1268
1269                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1270
1271                 if ($unread_only) {
1272                         $unread_qpart = "unread = true";
1273                 } else {
1274                         $unread_qpart = "true";
1275                 }
1276
1277                 if ($is_cat) {
1278                         return getCategoryUnread($link, $n_feed, $owner_uid);
1279                 } else if ($n_feed == -6) {
1280                         return 0;
1281                 } else if ($feed != "0" && $n_feed == 0) {
1282
1283                         $feed = db_escape_string($feed);
1284
1285                         $result = db_query($link, "SELECT SUM((SELECT COUNT(int_id)
1286                                 FROM ttrss_user_entries,ttrss_entries WHERE int_id = post_int_id
1287                                         AND ref_id = id AND $unread_qpart)) AS count FROM ttrss_tags
1288                                 WHERE owner_uid = $owner_uid AND tag_name = '$feed'");
1289                         return db_fetch_result($result, 0, "count");
1290
1291                 } else if ($n_feed == -1) {
1292                         $match_part = "marked = true";
1293                 } else if ($n_feed == -2) {
1294                         $match_part = "published = true";
1295                 } else if ($n_feed == -3) {
1296                         $match_part = "unread = true AND score >= 0";
1297
1298                         $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE", $owner_uid);
1299
1300                         if (DB_TYPE == "pgsql") {
1301                                 $match_part .= " AND updated > NOW() - INTERVAL '$intl hour' ";
1302                         } else {
1303                                 $match_part .= " AND updated > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
1304                         }
1305
1306                         $need_entries = true;
1307
1308                 } else if ($n_feed == -4) {
1309                         $match_part = "true";
1310                 } else if ($n_feed >= 0) {
1311
1312                         if ($n_feed != 0) {
1313                                 $match_part = "feed_id = '$n_feed'";
1314                         } else {
1315                                 $match_part = "feed_id IS NULL";
1316                         }
1317
1318                 } else if ($feed < -10) {
1319
1320                         $label_id = -$feed - 11;
1321
1322                         return getLabelUnread($link, $label_id, $owner_uid);
1323
1324                 }
1325
1326                 if ($match_part) {
1327
1328                         if ($need_entries) {
1329                                 $from_qpart = "ttrss_user_entries,ttrss_entries";
1330                                 $from_where = "ttrss_entries.id = ttrss_user_entries.ref_id AND";
1331                         } else {
1332                                 $from_qpart = "ttrss_user_entries";
1333                         }
1334
1335                         $query = "SELECT count(int_id) AS unread
1336                                 FROM $from_qpart WHERE
1337                                 $unread_qpart AND $from_where ($match_part) AND ttrss_user_entries.owner_uid = $owner_uid";
1338
1339                         //echo "[$feed/$query]\n";
1340
1341                         $result = db_query($link, $query);
1342
1343                 } else {
1344
1345                         $result = db_query($link, "SELECT COUNT(post_int_id) AS unread
1346                                 FROM ttrss_tags,ttrss_user_entries,ttrss_entries
1347                                 WHERE tag_name = '$feed' AND post_int_id = int_id AND ref_id = ttrss_entries.id
1348                                 AND $unread_qpart AND ttrss_tags.owner_uid = " . $owner_uid);
1349                 }
1350
1351                 $unread = db_fetch_result($result, 0, "unread");
1352
1353                 return $unread;
1354         }
1355
1356         function getGlobalUnread($link, $user_id = false) {
1357
1358                 if (!$user_id) {
1359                         $user_id = $_SESSION["uid"];
1360                 }
1361
1362                 $result = db_query($link, "SELECT SUM(value) AS c_id FROM ttrss_counters_cache
1363                         WHERE owner_uid = '$user_id' AND feed_id > 0");
1364
1365                 $c_id = db_fetch_result($result, 0, "c_id");
1366
1367                 return $c_id;
1368         }
1369
1370         function getGlobalCounters($link, $global_unread = -1) {
1371                 $ret_arr = array();
1372
1373                 if ($global_unread == -1) {
1374                         $global_unread = getGlobalUnread($link);
1375                 }
1376
1377                 $cv = array("id" => "global-unread",
1378                         "counter" => (int) $global_unread);
1379
1380                 array_push($ret_arr, $cv);
1381
1382                 $result = db_query($link, "SELECT COUNT(id) AS fn FROM
1383                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1384
1385                 $subscribed_feeds = db_fetch_result($result, 0, "fn");
1386
1387                 $cv = array("id" => "subscribed-feeds",
1388                         "counter" => (int) $subscribed_feeds);
1389
1390                 array_push($ret_arr, $cv);
1391
1392                 return $ret_arr;
1393         }
1394
1395         function getVirtCounters($link) {
1396
1397                 $ret_arr = array();
1398
1399                 for ($i = 0; $i >= -4; $i--) {
1400
1401                         $count = getFeedUnread($link, $i);
1402
1403                         $cv = array("id" => $i,
1404                                 "counter" => (int) $count);
1405
1406 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1407 //                              $cv["xmsg"] = getFeedArticles($link, $i)." ".__("total");
1408
1409                         array_push($ret_arr, $cv);
1410                 }
1411
1412                 return $ret_arr;
1413         }
1414
1415         function getLabelCounters($link, $descriptions = false) {
1416
1417                 $ret_arr = array();
1418
1419                 $owner_uid = $_SESSION["uid"];
1420
1421                 $result = db_query($link, "SELECT id,caption,COUNT(unread) AS unread
1422                         FROM ttrss_labels2 LEFT JOIN ttrss_user_labels2 ON
1423                                 (ttrss_labels2.id = label_id)
1424                                         LEFT JOIN ttrss_user_entries ON (ref_id = article_id AND unread = true)
1425                                 WHERE ttrss_labels2.owner_uid = $owner_uid GROUP BY ttrss_labels2.id,
1426                                         ttrss_labels2.caption");
1427
1428                 while ($line = db_fetch_assoc($result)) {
1429
1430                         $id = -$line["id"] - 11;
1431
1432                         $label_name = $line["caption"];
1433                         $count = $line["unread"];
1434
1435                         $cv = array("id" => $id,
1436                                 "counter" => (int) $count);
1437
1438                         if ($descriptions)
1439                                 $cv["description"] = $label_name;
1440
1441 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1442 //                              $cv["xmsg"] = getFeedArticles($link, $id)." ".__("total");
1443
1444                         array_push($ret_arr, $cv);
1445                 }
1446
1447                 return $ret_arr;
1448         }
1449
1450         function getFeedCounters($link, $active_feed = false) {
1451
1452                 $ret_arr = array();
1453
1454                 $query = "SELECT ttrss_feeds.id,
1455                                 ttrss_feeds.title,
1456                                 ".SUBSTRING_FOR_DATE."(ttrss_feeds.last_updated,1,19) AS last_updated,
1457                                 last_error, value AS count
1458                         FROM ttrss_feeds, ttrss_counters_cache
1459                         WHERE ttrss_feeds.owner_uid = ".$_SESSION["uid"]."
1460                                 AND ttrss_counters_cache.owner_uid = ttrss_feeds.owner_uid
1461                                 AND ttrss_counters_cache.feed_id = id";
1462
1463                 $result = db_query($link, $query);
1464                 $fctrs_modified = false;
1465
1466                 while ($line = db_fetch_assoc($result)) {
1467
1468                         $id = $line["id"];
1469                         $count = $line["count"];
1470                         $last_error = htmlspecialchars($line["last_error"]);
1471
1472                         $last_updated = make_local_datetime($link, $line['last_updated'], false);
1473
1474                         $has_img = feed_has_icon($id);
1475
1476                         if (date('Y') - date('Y', strtotime($line['last_updated'])) > 2)
1477                                 $last_updated = '';
1478
1479                         $cv = array("id" => $id,
1480                                 "updated" => $last_updated,
1481                                 "counter" => (int) $count,
1482                                 "has_img" => (int) $has_img);
1483
1484                         if ($last_error)
1485                                 $cv["error"] = $last_error;
1486
1487 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1488 //                              $cv["xmsg"] = getFeedArticles($link, $id)." ".__("total");
1489
1490                         if ($active_feed && $id == $active_feed)
1491                                 $cv["title"] = truncate_string($line["title"], 30);
1492
1493                         array_push($ret_arr, $cv);
1494
1495                 }
1496
1497                 return $ret_arr;
1498         }
1499
1500         function get_pgsql_version($link) {
1501                 $result = db_query($link, "SELECT version() AS version");
1502                 $version = explode(" ", db_fetch_result($result, 0, "version"));
1503                 return $version[1];
1504         }
1505
1506         /**
1507          * @return array (code => Status code, message => error message if available)
1508          *
1509          *                 0 - OK, Feed already exists
1510          *                 1 - OK, Feed added
1511          *                 2 - Invalid URL
1512          *                 3 - URL content is HTML, no feeds available
1513          *                 4 - URL content is HTML which contains multiple feeds.
1514          *                     Here you should call extractfeedurls in rpc-backend
1515          *                     to get all possible feeds.
1516          *                 5 - Couldn't download the URL content.
1517          */
1518         function subscribe_to_feed($link, $url, $cat_id = 0,
1519                         $auth_login = '', $auth_pass = '', $need_auth = false) {
1520
1521                 global $fetch_last_error;
1522
1523                 require_once "include/rssfuncs.php";
1524
1525                 $url = fix_url($url);
1526
1527                 if (!$url || !validate_feed_url($url)) return array("code" => 2);
1528
1529                 $contents = @fetch_file_contents($url, false, $auth_login, $auth_pass);
1530
1531                 if (!$contents) {
1532                         return array("code" => 5, "message" => $fetch_last_error);
1533                 }
1534
1535                 if (is_html($contents)) {
1536                         $feedUrls = get_feeds_from_html($url, $contents);
1537
1538                         if (count($feedUrls) == 0) {
1539                                 return array("code" => 3);
1540                         } else if (count($feedUrls) > 1) {
1541                                 return array("code" => 4, "feeds" => $feedUrls);
1542                         }
1543                         //use feed url as new URL
1544                         $url = key($feedUrls);
1545                 }
1546
1547                 if ($cat_id == "0" || !$cat_id) {
1548                         $cat_qpart = "NULL";
1549                 } else {
1550                         $cat_qpart = "'$cat_id'";
1551                 }
1552
1553                 $result = db_query($link,
1554                         "SELECT id FROM ttrss_feeds
1555                         WHERE feed_url = '$url' AND owner_uid = ".$_SESSION["uid"]);
1556
1557                 if (db_num_rows($result) == 0) {
1558                         $result = db_query($link,
1559                                 "INSERT INTO ttrss_feeds
1560                                         (owner_uid,feed_url,title,cat_id, auth_login,auth_pass,update_method)
1561                                 VALUES ('".$_SESSION["uid"]."', '$url',
1562                                 '[Unknown]', $cat_qpart, '$auth_login', '$auth_pass', 0)");
1563
1564                         $result = db_query($link,
1565                                 "SELECT id FROM ttrss_feeds WHERE feed_url = '$url'
1566                                         AND owner_uid = " . $_SESSION["uid"]);
1567
1568                         $feed_id = db_fetch_result($result, 0, "id");
1569
1570                         if ($feed_id) {
1571                                 update_rss_feed($link, $feed_id, true);
1572                         }
1573
1574                         return array("code" => 1);
1575                 } else {
1576                         return array("code" => 0);
1577                 }
1578         }
1579
1580         function print_feed_select($link, $id, $default_id = "",
1581                 $attributes = "", $include_all_feeds = true,
1582                 $root_id = false, $nest_level = 0) {
1583
1584                 if (!$root_id) {
1585                         print "<select id=\"$id\" name=\"$id\" $attributes>";
1586                         if ($include_all_feeds) {
1587                                 $is_selected = ("0" == $default_id) ? "selected=\"1\"" : "";
1588                                 print "<option $is_selected value=\"0\">".__('All feeds')."</option>";
1589                         }
1590                 }
1591
1592                 if (get_pref($link, 'ENABLE_FEED_CATS')) {
1593
1594                         if ($root_id)
1595                                 $parent_qpart = "parent_cat = '$root_id'";
1596                         else
1597                                 $parent_qpart = "parent_cat IS NULL";
1598
1599                         $result = db_query($link, "SELECT id,title,
1600                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1601                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1602                                 FROM ttrss_feed_categories
1603                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1604
1605                         while ($line = db_fetch_assoc($result)) {
1606
1607                                 for ($i = 0; $i < $nest_level; $i++)
1608                                         $line["title"] = " - " . $line["title"];
1609
1610                                 $is_selected = ("CAT:".$line["id"] == $default_id) ? "selected=\"1\"" : "";
1611
1612                                 printf("<option $is_selected value='CAT:%d'>%s</option>",
1613                                         $line["id"], htmlspecialchars($line["title"]));
1614
1615                                 if ($line["num_children"] > 0)
1616                                         print_feed_select($link, $id, $default_id, $attributes,
1617                                                 $include_all_feeds, $line["id"], $nest_level+1);
1618
1619                                 $feed_result = db_query($link, "SELECT id,title FROM ttrss_feeds
1620                                         WHERE cat_id = '".$line["id"]."' AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1621
1622                                 while ($fline = db_fetch_assoc($feed_result)) {
1623                                         $is_selected = ($fline["id"] == $default_id) ? "selected=\"1\"" : "";
1624
1625                                         $fline["title"] = " + " . $fline["title"];
1626
1627                                         for ($i = 0; $i < $nest_level; $i++)
1628                                                 $fline["title"] = " - " . $fline["title"];
1629
1630                                         printf("<option $is_selected value='%d'>%s</option>",
1631                                                 $fline["id"], htmlspecialchars($fline["title"]));
1632                                 }
1633                         }
1634
1635                         if (!$root_id) {
1636                                 $is_selected = ($default_id == "CAT:0") ? "selected=\"1\"" : "";
1637
1638                                 printf("<option $is_selected value='CAT:0'>%s</option>",
1639                                         __("Uncategorized"));
1640
1641                                 $feed_result = db_query($link, "SELECT id,title FROM ttrss_feeds
1642                                         WHERE cat_id IS NULL AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1643
1644                                 while ($fline = db_fetch_assoc($feed_result)) {
1645                                         $is_selected = ($fline["id"] == $default_id && !$default_is_cat) ? "selected=\"1\"" : "";
1646
1647                                         $fline["title"] = " + " . $fline["title"];
1648
1649                                         for ($i = 0; $i < $nest_level; $i++)
1650                                                 $fline["title"] = " - " . $fline["title"];
1651
1652                                         printf("<option $is_selected value='%d'>%s</option>",
1653                                                 $fline["id"], htmlspecialchars($fline["title"]));
1654                                 }
1655                         }
1656
1657                 } else {
1658                         $result = db_query($link, "SELECT id,title FROM ttrss_feeds
1659                                 WHERE owner_uid = ".$_SESSION["uid"]." ORDER BY title");
1660
1661                         while ($line = db_fetch_assoc($result)) {
1662
1663                                 $is_selected = ($line["id"] == $default_id) ? "selected=\"1\"" : "";
1664
1665                                 printf("<option $is_selected value='%d'>%s</option>",
1666                                         $line["id"], htmlspecialchars($line["title"]));
1667                         }
1668                 }
1669
1670                 if (!$root_id) {
1671                         print "</select>";
1672                 }
1673         }
1674
1675         function print_feed_cat_select($link, $id, $default_id,
1676                 $attributes, $include_all_cats = true, $root_id = false, $nest_level = 0) {
1677
1678                         if (!$root_id) {
1679                                         print "<select id=\"$id\" name=\"$id\" default=\"$default_id\" onchange=\"catSelectOnChange(this)\" $attributes>";
1680                         }
1681
1682                         if ($root_id)
1683                                 $parent_qpart = "parent_cat = '$root_id'";
1684                         else
1685                                 $parent_qpart = "parent_cat IS NULL";
1686
1687                         $result = db_query($link, "SELECT id,title,
1688                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1689                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1690                                 FROM ttrss_feed_categories
1691                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1692
1693                         while ($line = db_fetch_assoc($result)) {
1694                                 if ($line["id"] == $default_id) {
1695                                         $is_selected = "selected=\"1\"";
1696                                 } else {
1697                                         $is_selected = "";
1698                                 }
1699
1700                                 for ($i = 0; $i < $nest_level; $i++)
1701                                         $line["title"] = " - " . $line["title"];
1702
1703                                 if ($line["title"])
1704                                         printf("<option $is_selected value='%d'>%s</option>",
1705                                                 $line["id"], htmlspecialchars($line["title"]));
1706
1707                                 if ($line["num_children"] > 0)
1708                                         print_feed_cat_select($link, $id, $default_id, $attributes,
1709                                                 $include_all_cats, $line["id"], $nest_level+1);
1710                         }
1711
1712                         if (!$root_id) {
1713                                 if ($include_all_cats) {
1714                                         if (db_num_rows($result) > 0) {
1715                                                 print "<option disabled=\"1\">--------</option>";
1716                                         }
1717
1718                                         if ($default_id == 0) {
1719                                                 $is_selected = "selected=\"1\"";
1720                                         } else {
1721                                                 $is_selected = "";
1722                                         }
1723
1724                                         print "<option $is_selected value=\"0\">".__('Uncategorized')."</option>";
1725                                 }
1726                                 print "</select>";
1727                         }
1728                 }
1729
1730         function checkbox_to_sql_bool($val) {
1731                 return ($val == "on") ? "true" : "false";
1732         }
1733
1734         function getFeedCatTitle($link, $id) {
1735                 if ($id == -1) {
1736                         return __("Special");
1737                 } else if ($id < -10) {
1738                         return __("Labels");
1739                 } else if ($id > 0) {
1740                         $result = db_query($link, "SELECT ttrss_feed_categories.title
1741                                 FROM ttrss_feeds, ttrss_feed_categories WHERE ttrss_feeds.id = '$id' AND
1742                                         cat_id = ttrss_feed_categories.id");
1743                         if (db_num_rows($result) == 1) {
1744                                 return db_fetch_result($result, 0, "title");
1745                         } else {
1746                                 return __("Uncategorized");
1747                         }
1748                 } else {
1749                         return "getFeedCatTitle($id) failed";
1750                 }
1751
1752         }
1753
1754         function getFeedIcon($id) {
1755                 switch ($id) {
1756                 case 0:
1757                         return "images/archive.png";
1758                         break;
1759                 case -1:
1760                         return "images/mark_set.svg";
1761                         break;
1762                 case -2:
1763                         return "images/pub_set.svg";
1764                         break;
1765                 case -3:
1766                         return "images/fresh.png";
1767                         break;
1768                 case -4:
1769                         return "images/tag.png";
1770                         break;
1771                 case -6:
1772                         return "images/recently_read.png";
1773                         break;
1774                 default:
1775                         if ($id < -10) {
1776                                 return "images/label.png";
1777                         } else {
1778                                 if (file_exists(ICONS_DIR . "/$id.ico"))
1779                                         return ICONS_URL . "/$id.ico";
1780                         }
1781                         break;
1782                 }
1783         }
1784
1785         function getFeedTitle($link, $id, $cat = false) {
1786                 if ($cat) {
1787                         return getCategoryTitle($link, $id);
1788                 } else if ($id == -1) {
1789                         return __("Starred articles");
1790                 } else if ($id == -2) {
1791                         return __("Published articles");
1792                 } else if ($id == -3) {
1793                         return __("Fresh articles");
1794                 } else if ($id == -4) {
1795                         return __("All articles");
1796                 } else if ($id === 0 || $id === "0") {
1797                         return __("Archived articles");
1798                 } else if ($id == -6) {
1799                         return __("Recently read");
1800                 } else if ($id < -10) {
1801                         $label_id = -$id - 11;
1802                         $result = db_query($link, "SELECT caption FROM ttrss_labels2 WHERE id = '$label_id'");
1803                         if (db_num_rows($result) == 1) {
1804                                 return db_fetch_result($result, 0, "caption");
1805                         } else {
1806                                 return "Unknown label ($label_id)";
1807                         }
1808
1809                 } else if (is_numeric($id) && $id > 0) {
1810                         $result = db_query($link, "SELECT title FROM ttrss_feeds WHERE id = '$id'");
1811                         if (db_num_rows($result) == 1) {
1812                                 return db_fetch_result($result, 0, "title");
1813                         } else {
1814                                 return "Unknown feed ($id)";
1815                         }
1816                 } else {
1817                         return $id;
1818                 }
1819         }
1820
1821         function make_init_params($link) {
1822                 $params = array();
1823
1824                 $params["sign_progress"] = theme_image($link, "images/indicator_white.gif");
1825                 $params["sign_progress_tiny"] = theme_image($link, "images/indicator_tiny.gif");
1826                 $params["sign_excl"] = theme_image($link, "images/sign_excl.svg");
1827                 $params["sign_info"] = theme_image($link, "images/sign_info.svg");
1828
1829                 foreach (array("ON_CATCHUP_SHOW_NEXT_FEED", "HIDE_READ_FEEDS",
1830                         "ENABLE_FEED_CATS", "FEEDS_SORT_BY_UNREAD", "CONFIRM_FEED_CATCHUP",
1831                         "CDM_AUTO_CATCHUP", "FRESH_ARTICLE_MAX_AGE", "DEFAULT_ARTICLE_LIMIT",
1832                         "HIDE_READ_SHOWS_SPECIAL", "COMBINED_DISPLAY_MODE") as $param) {
1833
1834                                  $params[strtolower($param)] = (int) get_pref($link, $param);
1835                  }
1836
1837                 $params["icons_url"] = ICONS_URL;
1838                 $params["cookie_lifetime"] = SESSION_COOKIE_LIFETIME;
1839                 $params["default_view_mode"] = get_pref($link, "_DEFAULT_VIEW_MODE");
1840                 $params["default_view_limit"] = (int) get_pref($link, "_DEFAULT_VIEW_LIMIT");
1841                 $params["default_view_order_by"] = get_pref($link, "_DEFAULT_VIEW_ORDER_BY");
1842                 $params["bw_limit"] = (int) $_SESSION["bw_limit"];
1843
1844                 $result = db_query($link, "SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
1845                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1846
1847                 $max_feed_id = db_fetch_result($result, 0, "mid");
1848                 $num_feeds = db_fetch_result($result, 0, "nf");
1849
1850                 $params["max_feed_id"] = (int) $max_feed_id;
1851                 $params["num_feeds"] = (int) $num_feeds;
1852
1853                 $params["collapsed_feedlist"] = (int) get_pref($link, "_COLLAPSED_FEEDLIST");
1854                 $params["hotkeys"] = get_hotkeys_map($link);
1855
1856                 $params["csrf_token"] = $_SESSION["csrf_token"];
1857                 $params["widescreen"] = (int) $_COOKIE["ttrss_widescreen"];
1858
1859                 $params['simple_update'] = defined('SIMPLE_UPDATE_MODE') && SIMPLE_UPDATE_MODE;
1860
1861                 return $params;
1862         }
1863
1864         function get_hotkeys_info($link) {
1865                 $hotkeys = array(
1866                         __("Navigation") => array(
1867                                 "next_feed" => __("Open next feed"),
1868                                 "prev_feed" => __("Open previous feed"),
1869                                 "next_article" => __("Open next article"),
1870                                 "prev_article" => __("Open previous article"),
1871                                 "next_article_noscroll" => __("Open next article (don't scroll long articles)"),
1872                                 "prev_article_noscroll" => __("Open previous article (don't scroll long articles)"),
1873                                 "search_dialog" => __("Show search dialog")),
1874                         __("Article") => array(
1875                                 "toggle_mark" => __("Toggle starred"),
1876                                 "toggle_publ" => __("Toggle published"),
1877                                 "toggle_unread" => __("Toggle unread"),
1878                                 "edit_tags" => __("Edit tags"),
1879                                 "dismiss_selected" => __("Dismiss selected"),
1880                                 "dismiss_read" => __("Dismiss read"),
1881                                 "open_in_new_window" => __("Open in new window"),
1882                                 "catchup_below" => __("Mark below as read"),
1883                                 "catchup_above" => __("Mark above as read"),
1884                                 "article_scroll_down" => __("Scroll down"),
1885                                 "article_scroll_up" => __("Scroll up"),
1886                                 "select_article_cursor" => __("Select article under cursor"),
1887                                 "email_article" => __("Email article"),
1888                                 "close_article" => __("Close article"),
1889                                 "toggle_widescreen" => __("Toggle widescreen mode")),
1890                         __("Article selection") => array(
1891                                 "select_all" => __("Select all articles"),
1892                                 "select_unread" => __("Select unread"),
1893                                 "select_marked" => __("Select starred"),
1894                                 "select_published" => __("Select published"),
1895                                 "select_invert" => __("Invert selection"),
1896                                 "select_none" => __("Deselect everything")),
1897                         __("Feed") => array(
1898                                 "feed_refresh" => __("Refresh current feed"),
1899                                 "feed_unhide_read" => __("Un/hide read feeds"),
1900                                 "feed_subscribe" => __("Subscribe to feed"),
1901                                 "feed_edit" => __("Edit feed"),
1902                                 "feed_catchup" => __("Mark as read"),
1903                                 "feed_reverse" => __("Reverse headlines"),
1904                                 "feed_debug_update" => __("Debug feed update"),
1905                                 "catchup_all" => __("Mark all feeds as read"),
1906                                 "cat_toggle_collapse" => __("Un/collapse current category"),
1907                                 "toggle_combined_mode" => __("Toggle combined mode")),
1908                         __("Go to") => array(
1909                                 "goto_all" => __("All articles"),
1910                                 "goto_fresh" => __("Fresh"),
1911                                 "goto_marked" => __("Starred"),
1912                                 "goto_published" => __("Published"),
1913                                 "goto_tagcloud" => __("Tag cloud"),
1914                                 "goto_prefs" => __("Preferences")),
1915                         __("Other") => array(
1916                                 "create_label" => __("Create label"),
1917                                 "create_filter" => __("Create filter"),
1918                                 "collapse_sidebar" => __("Un/collapse sidebar"),
1919                                 "help_dialog" => __("Show help dialog"))
1920                         );
1921
1922                 return $hotkeys;
1923         }
1924
1925         function get_hotkeys_map($link) {
1926                 $hotkeys = array(
1927 //                      "navigation" => array(
1928                                 "k" => "next_feed",
1929                                 "j" => "prev_feed",
1930                                 "n" => "next_article",
1931                                 "p" => "prev_article",
1932                                 "(38)|up" => "prev_article",
1933                                 "(40)|down" => "next_article",
1934 //                              "^(38)|Ctrl-up" => "prev_article_noscroll",
1935 //                              "^(40)|Ctrl-down" => "next_article_noscroll",
1936                                 "(191)|/" => "search_dialog",
1937 //                      "article" => array(
1938                                 "s" => "toggle_mark",
1939                                 "*s" => "toggle_publ",
1940                                 "u" => "toggle_unread",
1941                                 "*t" => "edit_tags",
1942                                 "*d" => "dismiss_selected",
1943                                 "*x" => "dismiss_read",
1944                                 "o" => "open_in_new_window",
1945                                 "c p" => "catchup_below",
1946                                 "c n" => "catchup_above",
1947                                 "*n" => "article_scroll_down",
1948                                 "*p" => "article_scroll_up",
1949                                 "*(38)|Shift+up" => "article_scroll_up",
1950                                 "*(40)|Shift+down" => "article_scroll_down",
1951                                 "a *w" => "toggle_widescreen",
1952                                 "e" => "email_article",
1953                                 "a q" => "close_article",
1954 //                      "article_selection" => array(
1955                                 "a a" => "select_all",
1956                                 "a u" => "select_unread",
1957                                 "a *u" => "select_marked",
1958                                 "a p" => "select_published",
1959                                 "a i" => "select_invert",
1960                                 "a n" => "select_none",
1961 //                      "feed" => array(
1962                                 "f r" => "feed_refresh",
1963                                 "f a" => "feed_unhide_read",
1964                                 "f s" => "feed_subscribe",
1965                                 "f e" => "feed_edit",
1966                                 "f q" => "feed_catchup",
1967                                 "f x" => "feed_reverse",
1968                                 "f *d" => "feed_debug_update",
1969                                 "f *c" => "toggle_combined_mode",
1970                                 "*q" => "catchup_all",
1971                                 "x" => "cat_toggle_collapse",
1972 //                      "goto" => array(
1973                                 "g a" => "goto_all",
1974                                 "g f" => "goto_fresh",
1975                                 "g s" => "goto_marked",
1976                                 "g p" => "goto_published",
1977                                 "g t" => "goto_tagcloud",
1978                                 "g *p" => "goto_prefs",
1979 //                      "other" => array(
1980                                 "(9)|Tab" => "select_article_cursor", // tab
1981                                 "c l" => "create_label",
1982                                 "c f" => "create_filter",
1983                                 "c s" => "collapse_sidebar",
1984                                 "^(191)|Ctrl+/" => "help_dialog",
1985                         );
1986
1987                 if (get_pref($link, 'COMBINED_DISPLAY_MODE')) {
1988                         $hotkeys["^(38)|Ctrl-up"] = "prev_article_noscroll";
1989                         $hotkeys["^(40)|Ctrl-down"] = "next_article_noscroll";
1990                 }
1991
1992                 global $pluginhost;
1993                 foreach ($pluginhost->get_hooks($pluginhost::HOOK_HOTKEY_MAP) as $plugin) {
1994                         $hotkeys = $plugin->hook_hotkey_map($hotkeys);
1995                 }
1996
1997                 $prefixes = array();
1998
1999                 foreach (array_keys($hotkeys) as $hotkey) {
2000                         $pair = explode(" ", $hotkey, 2);
2001
2002                         if (count($pair) > 1 && !in_array($pair[0], $prefixes)) {
2003                                 array_push($prefixes, $pair[0]);
2004                         }
2005                 }
2006
2007                 return array($prefixes, $hotkeys);
2008         }
2009
2010         function make_runtime_info($link) {
2011                 $data = array();
2012
2013                 $result = db_query($link, "SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
2014                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
2015
2016                 $max_feed_id = db_fetch_result($result, 0, "mid");
2017                 $num_feeds = db_fetch_result($result, 0, "nf");
2018
2019                 $data["max_feed_id"] = (int) $max_feed_id;
2020                 $data["num_feeds"] = (int) $num_feeds;
2021
2022                 $data['last_article_id'] = getLastArticleId($link);
2023                 $data['cdm_expanded'] = get_pref($link, 'CDM_EXPANDED');
2024
2025                 if (file_exists(LOCK_DIRECTORY . "/update_daemon.lock")) {
2026
2027                         $data['daemon_is_running'] = (int) file_is_locked("update_daemon.lock");
2028
2029                         if (time() - $_SESSION["daemon_stamp_check"] > 30) {
2030
2031                                 $stamp = (int) @file_get_contents(LOCK_DIRECTORY . "/update_daemon.stamp");
2032
2033                                 if ($stamp) {
2034                                         $stamp_delta = time() - $stamp;
2035
2036                                         if ($stamp_delta > 1800) {
2037                                                 $stamp_check = 0;
2038                                         } else {
2039                                                 $stamp_check = 1;
2040                                                 $_SESSION["daemon_stamp_check"] = time();
2041                                         }
2042
2043                                         $data['daemon_stamp_ok'] = $stamp_check;
2044
2045                                         $stamp_fmt = date("Y.m.d, G:i", $stamp);
2046
2047                                         $data['daemon_stamp'] = $stamp_fmt;
2048                                 }
2049                         }
2050                 }
2051
2052                 if ($_SESSION["last_version_check"] + 86400 + rand(-1000, 1000) < time()) {
2053                                 $new_version_details = @check_for_update($link);
2054
2055                                 $data['new_version_available'] = (int) ($new_version_details != false);
2056
2057                                 $_SESSION["last_version_check"] = time();
2058                                 $_SESSION["version_data"] = $new_version_details;
2059                 }
2060
2061                 return $data;
2062         }
2063
2064         function search_to_sql($link, $search, $match_on) {
2065
2066                 $search_query_part = "";
2067
2068                 $keywords = explode(" ", $search);
2069                 $query_keywords = array();
2070
2071                 foreach ($keywords as $k) {
2072                         if (strpos($k, "-") === 0) {
2073                                 $k = substr($k, 1);
2074                                 $not = "NOT";
2075                         } else {
2076                                 $not = "";
2077                         }
2078
2079                         $commandpair = explode(":", mb_strtolower($k), 2);
2080
2081                         if ($commandpair[0] == "note" && $commandpair[1]) {
2082
2083                                 if ($commandpair[1] == "true")
2084                                         array_push($query_keywords, "($not (note IS NOT NULL AND note != ''))");
2085                                 else
2086                                         array_push($query_keywords, "($not (note IS NULL OR note = ''))");
2087
2088                         } else if ($commandpair[0] == "star" && $commandpair[1]) {
2089
2090                                 if ($commandpair[1] == "true")
2091                                         array_push($query_keywords, "($not (marked = true))");
2092                                 else
2093                                         array_push($query_keywords, "($not (marked = false))");
2094
2095                         } else if ($commandpair[0] == "pub" && $commandpair[1]) {
2096
2097                                 if ($commandpair[1] == "true")
2098                                         array_push($query_keywords, "($not (published = true))");
2099                                 else
2100                                         array_push($query_keywords, "($not (published = false))");
2101
2102                         } else if (strpos($k, "@") === 0) {
2103
2104                                 $user_tz_string = get_pref($link, 'USER_TIMEZONE', $_SESSION['uid']);
2105                                 $orig_ts = strtotime(substr($k, 1));
2106                                 $k = date("Y-m-d", convert_timestamp($orig_ts, $user_tz_string, 'UTC'));
2107
2108                                 //$k = date("Y-m-d", strtotime(substr($k, 1)));
2109
2110                                 array_push($query_keywords, "(".SUBSTRING_FOR_DATE."(updated,1,LENGTH('$k')) $not = '$k')");
2111                         } else if ($match_on == "both") {
2112                                 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2113                                                 OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2114                         } else if ($match_on == "title") {
2115                                 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%'))");
2116                         } else if ($match_on == "content") {
2117                                 array_push($query_keywords, "(UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2118                         }
2119                 }
2120
2121                 $search_query_part = implode("AND", $query_keywords);
2122
2123                 return $search_query_part;
2124         }
2125
2126         function getParentCategories($link, $cat, $owner_uid) {
2127                 $rv = array();
2128
2129                 $result = db_query($link, "SELECT parent_cat FROM ttrss_feed_categories
2130                         WHERE id = '$cat' AND parent_cat IS NOT NULL AND owner_uid = $owner_uid");
2131
2132                 while ($line = db_fetch_assoc($result)) {
2133                         array_push($rv, $line["parent_cat"]);
2134                         $rv = array_merge($rv, getParentCategories($link, $line["parent_cat"], $owner_uid));
2135                 }
2136
2137                 return $rv;
2138         }
2139
2140         function getChildCategories($link, $cat, $owner_uid) {
2141                 $rv = array();
2142
2143                 $result = db_query($link, "SELECT id FROM ttrss_feed_categories
2144                         WHERE parent_cat = '$cat' AND owner_uid = $owner_uid");
2145
2146                 while ($line = db_fetch_assoc($result)) {
2147                         array_push($rv, $line["id"]);
2148                         $rv = array_merge($rv, getChildCategories($link, $line["id"], $owner_uid));
2149                 }
2150
2151                 return $rv;
2152         }
2153
2154         function queryFeedHeadlines($link, $feed, $limit, $view_mode, $cat_view, $search, $search_mode, $match_on, $override_order = false, $offset = 0, $owner_uid = 0, $filter = false, $since_id = 0, $include_children = false, $ignore_vfeed_group = false) {
2155
2156                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2157
2158                 $ext_tables_part = "";
2159
2160                         if ($search) {
2161
2162                                 if (SPHINX_ENABLED) {
2163                                         $ids = join(",", @sphinx_search($search, 0, 500));
2164
2165                                         if ($ids)
2166                                                 $search_query_part = "ref_id IN ($ids) AND ";
2167                                         else
2168                                                 $search_query_part = "ref_id = -1 AND ";
2169
2170                                 } else {
2171                                         $search_query_part = search_to_sql($link, $search, $match_on);
2172                                         $search_query_part .= " AND ";
2173                                 }
2174
2175                         } else {
2176                                 $search_query_part = "";
2177                         }
2178
2179                         if ($filter) {
2180
2181                                 if (DB_TYPE == "pgsql") {
2182                                         $query_strategy_part .= " AND updated > NOW() - INTERVAL '14 days' ";
2183                                 } else {
2184                                         $query_strategy_part .= " AND updated > DATE_SUB(NOW(), INTERVAL 14 DAY) ";
2185                                 }
2186
2187                                 $override_order = "updated DESC";
2188
2189                                 $filter_query_part = filter_to_sql($link, $filter, $owner_uid);
2190
2191                                 // Try to check if SQL regexp implementation chokes on a valid regexp
2192                                 $result = db_query($link, "SELECT true AS true_val FROM ttrss_entries,
2193                                         ttrss_user_entries, ttrss_feeds, ttrss_feed_categories
2194                                         WHERE $filter_query_part LIMIT 1", false);
2195
2196                                 if ($result) {
2197                                         $test = db_fetch_result($result, 0, "true_val");
2198
2199                                         if (!$test) {
2200                                                 $filter_query_part = "false AND";
2201                                         } else {
2202                                                 $filter_query_part .= " AND";
2203                                         }
2204                                 } else {
2205                                         $filter_query_part = "false AND";
2206                                 }
2207
2208                         } else {
2209                                 $filter_query_part = "";
2210                         }
2211
2212                         if ($since_id) {
2213                                 $since_id_part = "ttrss_entries.id > $since_id AND ";
2214                         } else {
2215                                 $since_id_part = "";
2216                         }
2217
2218                         $view_query_part = "";
2219
2220                         if ($view_mode == "adaptive" || $view_query_part == "noscores") {
2221                                 if ($search) {
2222                                         $view_query_part = " ";
2223                                 } else if ($feed != -1) {
2224                                         $unread = getFeedUnread($link, $feed, $cat_view);
2225
2226                                         if ($cat_view && $feed > 0 && $include_children)
2227                                                 $unread += getCategoryChildrenUnread($link, $feed);
2228
2229                                         if ($unread > 0) {
2230                                                 $view_query_part = " unread = true AND ";
2231                                         }
2232                                 }
2233                         }
2234
2235                         if ($view_mode == "marked") {
2236                                 $view_query_part = " marked = true AND ";
2237                         }
2238
2239                         if ($view_mode == "published") {
2240                                 $view_query_part = " published = true AND ";
2241                         }
2242
2243                         if ($view_mode == "unread") {
2244                                 $view_query_part = " unread = true AND ";
2245                         }
2246
2247                         if ($view_mode == "updated") {
2248                                 $view_query_part = " (last_read is null and unread = false) AND ";
2249                         }
2250
2251                         if ($limit > 0) {
2252                                 $limit_query_part = "LIMIT " . $limit;
2253                         }
2254
2255                         $allow_archived = false;
2256
2257                         $vfeed_query_part = "";
2258
2259                         // override query strategy and enable feed display when searching globally
2260                         if ($search && $search_mode == "all_feeds") {
2261                                 $query_strategy_part = "true";
2262                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2263                         /* tags */
2264                         } else if (!is_numeric($feed)) {
2265                                 $query_strategy_part = "true";
2266                                 $vfeed_query_part = "(SELECT title FROM ttrss_feeds WHERE
2267                                         id = feed_id) as feed_title,";
2268                         } else if ($search && $search_mode == "this_cat") {
2269                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2270
2271                                 if ($feed > 0) {
2272                                         if ($include_children) {
2273                                                 $subcats = getChildCategories($link, $feed, $owner_uid);
2274                                                 array_push($subcats, $feed);
2275                                                 $cats_qpart = join(",", $subcats);
2276                                         } else {
2277                                                 $cats_qpart = $feed;
2278                                         }
2279
2280                                         $query_strategy_part = "ttrss_feeds.cat_id IN ($cats_qpart)";
2281
2282                                 } else {
2283                                         $query_strategy_part = "ttrss_feeds.cat_id IS NULL";
2284                                 }
2285
2286                         } else if ($feed > 0) {
2287
2288                                 if ($cat_view) {
2289
2290                                         if ($feed > 0) {
2291                                                 if ($include_children) {
2292                                                         # sub-cats
2293                                                         $subcats = getChildCategories($link, $feed, $owner_uid);
2294
2295                                                         array_push($subcats, $feed);
2296                                                         $query_strategy_part = "cat_id IN (".
2297                                                                         implode(",", $subcats).")";
2298
2299                                                 } else {
2300                                                         $query_strategy_part = "cat_id = '$feed'";
2301                                                 }
2302
2303                                         } else {
2304                                                 $query_strategy_part = "cat_id IS NULL";
2305                                         }
2306
2307                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2308
2309                                 } else {
2310                                         $query_strategy_part = "feed_id = '$feed'";
2311                                 }
2312                         } else if ($feed == 0 && !$cat_view) { // archive virtual feed
2313                                 $query_strategy_part = "feed_id IS NULL";
2314                                 $allow_archived = true;
2315                         } else if ($feed == 0 && $cat_view) { // uncategorized
2316                                 $query_strategy_part = "cat_id IS NULL AND feed_id IS NOT NULL";
2317                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2318                         } else if ($feed == -1) { // starred virtual feed
2319                                 $query_strategy_part = "marked = true";
2320                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2321                                 $allow_archived = true;
2322
2323                                 if (!$override_order) $override_order = "last_marked DESC, updated DESC";
2324
2325                         } else if ($feed == -2) { // published virtual feed OR labels category
2326
2327                                 if (!$cat_view) {
2328                                         $query_strategy_part = "published = true";
2329                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2330                                         $allow_archived = true;
2331
2332                                         if (!$override_order) $override_order = "last_published DESC, updated DESC";
2333                                 } else {
2334                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2335
2336                                         $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2337
2338                                         $query_strategy_part = "ttrss_labels2.id = ttrss_user_labels2.label_id AND
2339                                                 ttrss_user_labels2.article_id = ref_id";
2340
2341                                 }
2342                         } else if ($feed == -6) { // recently read
2343                                 $query_strategy_part = "unread = false AND last_read IS NOT NULL";
2344                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2345                                 $allow_archived = true;
2346
2347                                 if (!$override_order) $override_order = "last_read DESC";
2348                         } else if ($feed == -3) { // fresh virtual feed
2349                                 $query_strategy_part = "unread = true AND score >= 0";
2350
2351                                 $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE", $owner_uid);
2352
2353                                 if (DB_TYPE == "pgsql") {
2354                                         $query_strategy_part .= " AND updated > NOW() - INTERVAL '$intl hour' ";
2355                                 } else {
2356                                         $query_strategy_part .= " AND updated > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
2357                                 }
2358
2359                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2360                         } else if ($feed == -4) { // all articles virtual feed
2361                                 $query_strategy_part = "true";
2362                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2363                         } else if ($feed <= -10) { // labels
2364                                 $label_id = -$feed - 11;
2365
2366                                 $query_strategy_part = "label_id = '$label_id' AND
2367                                         ttrss_labels2.id = ttrss_user_labels2.label_id AND
2368                                         ttrss_user_labels2.article_id = ref_id";
2369
2370                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2371                                 $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2372                                 $allow_archived = true;
2373
2374                         } else {
2375                                 $query_strategy_part = "true";
2376                         }
2377
2378                         if (get_pref($link, "SORT_HEADLINES_BY_FEED_DATE", $owner_uid)) {
2379                                 $date_sort_field = "updated";
2380                         } else {
2381                                 $date_sort_field = "date_entered";
2382                         }
2383
2384                         if (get_pref($link, 'REVERSE_HEADLINES', $owner_uid)) {
2385                                 $order_by = "$date_sort_field";
2386                         } else {
2387                                 $order_by = "$date_sort_field DESC";
2388                         }
2389
2390                         if ($view_mode != "noscores") {
2391                                 $order_by = "score DESC, $order_by";
2392                         }
2393
2394                         if ($override_order) {
2395                                 $order_by = $override_order;
2396                         }
2397
2398                         $feed_title = "";
2399
2400                         if ($search) {
2401                                 $feed_title = T_sprintf("Search results: %s", $search);
2402                         } else {
2403                                 if ($cat_view) {
2404                                         $feed_title = getCategoryTitle($link, $feed);
2405                                 } else {
2406                                         if (is_numeric($feed) && $feed > 0) {
2407                                                 $result = db_query($link, "SELECT title,site_url,last_error
2408                                                         FROM ttrss_feeds WHERE id = '$feed' AND owner_uid = $owner_uid");
2409
2410                                                 $feed_title = db_fetch_result($result, 0, "title");
2411                                                 $feed_site_url = db_fetch_result($result, 0, "site_url");
2412                                                 $last_error = db_fetch_result($result, 0, "last_error");
2413                                         } else {
2414                                                 $feed_title = getFeedTitle($link, $feed);
2415                                         }
2416                                 }
2417                         }
2418
2419                         $content_query_part = "content as content_preview, cached_content, ";
2420
2421                         if (is_numeric($feed)) {
2422
2423                                 if ($feed >= 0) {
2424                                         $feed_kind = "Feeds";
2425                                 } else {
2426                                         $feed_kind = "Labels";
2427                                 }
2428
2429                                 if ($limit_query_part) {
2430                                         $offset_query_part = "OFFSET $offset";
2431                                 }
2432
2433                                 // proper override_order applied above
2434                                 if ($vfeed_query_part && !$ignore_vfeed_group && get_pref($link, 'VFEED_GROUP_BY_FEED', $owner_uid)) {
2435                                         if (!$override_order) {
2436                                                 $order_by = "ttrss_feeds.title, $order_by";
2437                                         } else {
2438                                                 $order_by = "ttrss_feeds.title, $override_order";
2439                                         }
2440                                 }
2441
2442                                 if (!$allow_archived) {
2443                                         $from_qpart = "ttrss_entries,ttrss_user_entries,ttrss_feeds$ext_tables_part";
2444                                         $feed_check_qpart = "ttrss_user_entries.feed_id = ttrss_feeds.id AND";
2445
2446                                 } else {
2447                                         $from_qpart = "ttrss_entries$ext_tables_part,ttrss_user_entries
2448                                                 LEFT JOIN ttrss_feeds ON (feed_id = ttrss_feeds.id)";
2449                                 }
2450
2451                                 $query = "SELECT DISTINCT
2452                                                 date_entered,
2453                                                 guid,
2454                                                 ttrss_entries.id,ttrss_entries.title,
2455                                                 updated,
2456                                                 label_cache,
2457                                                 tag_cache,
2458                                                 always_display_enclosures,
2459                                                 site_url,
2460                                                 note,
2461                                                 num_comments,
2462                                                 comments,
2463                                                 int_id,
2464                                                 unread,feed_id,marked,published,link,last_read,orig_feed_id,
2465                                                 last_marked, last_published,
2466                                                 ".SUBSTRING_FOR_DATE."(last_read,1,19) as last_read_noms,
2467                                                 $vfeed_query_part
2468                                                 $content_query_part
2469                                                 ".SUBSTRING_FOR_DATE."(updated,1,19) as updated_noms,
2470                                                 author,score
2471                                         FROM
2472                                                 $from_qpart
2473                                         WHERE
2474                                         $feed_check_qpart
2475                                         ttrss_user_entries.ref_id = ttrss_entries.id AND
2476                                         ttrss_user_entries.owner_uid = '$owner_uid' AND
2477                                         $search_query_part
2478                                         $filter_query_part
2479                                         $view_query_part
2480                                         $since_id_part
2481                                         $query_strategy_part ORDER BY $order_by
2482                                         $limit_query_part $offset_query_part";
2483
2484                                 if ($_REQUEST["debug"]) print $query;
2485
2486                                 $result = db_query($link, $query);
2487
2488                         } else {
2489                                 // browsing by tag
2490
2491                                 $select_qpart = "SELECT DISTINCT " .
2492                                                                 "date_entered," .
2493                                                                 "guid," .
2494                                                                 "note," .
2495                                                                 "ttrss_entries.id as id," .
2496                                                                 "title," .
2497                                                                 "updated," .
2498                                                                 "unread," .
2499                                                                 "feed_id," .
2500                                                                 "orig_feed_id," .
2501                                                                 "marked," .
2502                                                                 "num_comments, " .
2503                                                                 "comments, " .
2504                                                                 "tag_cache," .
2505                                                                 "label_cache," .
2506                                                                 "link," .
2507                                                                 "last_read," .
2508                                                                 "last_marked, last_published, " .
2509                                                                 SUBSTRING_FOR_DATE . "(last_read,1,19) as last_read_noms," .
2510                                                                 $since_id_part .
2511                                                                 $vfeed_query_part .
2512                                                                 $content_query_part .
2513                                                                 SUBSTRING_FOR_DATE . "(updated,1,19) as updated_noms," .
2514                                                                 "score ";
2515
2516                                 $feed_kind = "Tags";
2517                                 $all_tags = explode(",", $feed);
2518                                 if ($search_mode == 'any') {
2519                                         $tag_sql = "tag_name in (" . implode(", ", array_map("db_quote", $all_tags)) . ")";
2520                                         $from_qpart = " FROM ttrss_entries,ttrss_user_entries,ttrss_tags ";
2521                                         $where_qpart = " WHERE " .
2522                                                                    "ref_id = ttrss_entries.id AND " .
2523                                                                    "ttrss_user_entries.owner_uid = $owner_uid AND " .
2524                                                                    "post_int_id = int_id AND $tag_sql AND " .
2525                                                                    $view_query_part .
2526                                                                    $search_query_part .
2527                                                                    $query_strategy_part . " ORDER BY $order_by " .
2528                                                                    $limit_query_part;
2529
2530                                 } else {
2531                                         $i = 1;
2532                                         $sub_selects = array();
2533                                         $sub_ands = array();
2534                                         foreach ($all_tags as $term) {
2535                                                 array_push($sub_selects, "(SELECT post_int_id from ttrss_tags WHERE tag_name = " . db_quote($term) . " AND owner_uid = $owner_uid) as A$i");
2536                                                 $i++;
2537                                         }
2538                                         if ($i > 2) {
2539                                                 $x = 1;
2540                                                 $y = 2;
2541                                                 do {
2542                                                         array_push($sub_ands, "A$x.post_int_id = A$y.post_int_id");
2543                                                         $x++;
2544                                                         $y++;
2545                                                 } while ($y < $i);
2546                                         }
2547                                         array_push($sub_ands, "A1.post_int_id = ttrss_user_entries.int_id and ttrss_user_entries.owner_uid = $owner_uid");
2548                                         array_push($sub_ands, "ttrss_user_entries.ref_id = ttrss_entries.id");
2549                                         $from_qpart = " FROM " . implode(", ", $sub_selects) . ", ttrss_user_entries, ttrss_entries";
2550                                         $where_qpart = " WHERE " . implode(" AND ", $sub_ands);
2551                                 }
2552                                 //                              error_log("TAG SQL: " . $tag_sql);
2553                                 // $tag_sql = "tag_name = '$feed'";   DEFAULT way
2554
2555                                 //                              error_log("[". $select_qpart . "][" . $from_qpart . "][" .$where_qpart . "]");
2556                                 $result = db_query($link, $select_qpart . $from_qpart . $where_qpart);
2557                         }
2558
2559                         return array($result, $feed_title, $feed_site_url, $last_error);
2560
2561         }
2562
2563         function sanitize($link, $str, $force_strip_tags = false, $owner = false, $site_url = false) {
2564                 if (!$owner) $owner = $_SESSION["uid"];
2565
2566                 $res = trim($str); if (!$res) return '';
2567
2568                 if (get_pref($link, "STRIP_IMAGES", $owner)) {
2569                         $res = preg_replace('/<img[^>]+>/is', '', $res);
2570                 }
2571
2572                 if (strpos($res, "href=") === false)
2573                         $res = rewrite_urls($res);
2574
2575                 $charset_hack = '<head>
2576                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
2577                 </head>';
2578
2579                 $res = trim($res); if (!$res) return '';
2580
2581                 libxml_use_internal_errors(true);
2582
2583                 $doc = new DOMDocument();
2584                 $doc->loadHTML($charset_hack . $res);
2585                 $xpath = new DOMXPath($doc);
2586
2587                 $entries = $xpath->query('(//a[@href]|//img[@src])');
2588
2589                 foreach ($entries as $entry) {
2590
2591                         if ($site_url) {
2592
2593                                 if ($entry->hasAttribute('href'))
2594                                         $entry->setAttribute('href',
2595                                                 rewrite_relative_url($site_url, $entry->getAttribute('href')));
2596
2597                                 if ($entry->hasAttribute('src')) {
2598                                         $src = rewrite_relative_url($site_url, $entry->getAttribute('src'));
2599
2600                                         $cached_filename = CACHE_DIR . '/images/' . sha1($src) . '.png';
2601
2602                                         if (file_exists($cached_filename)) {
2603                                                 $src = SELF_URL_PATH . '/image.php?hash=' . sha1($src);
2604                                         }
2605
2606                                         $entry->setAttribute('src', $src);
2607                                 }
2608                         }
2609
2610                         if (strtolower($entry->nodeName) == "a") {
2611                                 $entry->setAttribute("target", "_blank");
2612                         }
2613                 }
2614
2615                 $entries = $xpath->query('//iframe');
2616                 foreach ($entries as $entry) {
2617                         $entry->setAttribute('sandbox', true);
2618                 }
2619
2620                 global $pluginhost;
2621
2622                 if (isset($pluginhost)) {
2623                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_SANITIZE) as $plugin) {
2624                                 $doc = $plugin->hook_sanitize($doc, $site_url);
2625                         }
2626                 }
2627
2628                 $doc->removeChild($doc->firstChild); //remove doctype
2629                 $doc = strip_harmful_tags($doc);
2630                 $res = $doc->saveHTML();
2631                 return $res;
2632         }
2633
2634         function strip_harmful_tags($doc) {
2635                 $entries = $doc->getElementsByTagName("*");
2636
2637                 $allowed_elements = array('a', 'address', 'audio', 'article',
2638                         'b', 'big', 'blockquote', 'body', 'br', 'cite',
2639                         'code', 'dd', 'del', 'details', 'div', 'dl',
2640                         'dt', 'em', 'footer', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6',
2641                         'header', 'html', 'i', 'img', 'ins', 'kbd',
2642                         'li', 'nav', 'ol', 'p', 'pre', 'q', 's','small',
2643                         'source', 'span', 'strike', 'strong', 'sub', 'summary',
2644                         'sup', 'table', 'tbody', 'td', 'tfoot', 'th', 'thead',
2645                         'tr', 'track', 'tt', 'u', 'ul', 'var', 'wbr', 'video' );
2646
2647                 if ($_SESSION['hasSandbox']) array_push($allowed_elements, 'iframe');
2648
2649                 $disallowed_attributes = array('id', 'style', 'class');
2650
2651                 foreach ($entries as $entry) {
2652                         if (!in_array($entry->nodeName, $allowed_elements)) {
2653                                 $entry->parentNode->removeChild($entry);
2654                         }
2655
2656                         if ($entry->hasAttributes()) {
2657                                 foreach (iterator_to_array($entry->attributes) as $attr) {
2658
2659                                         if (strpos($attr->nodeName, 'on') === 0) {
2660                                                 $entry->removeAttributeNode($attr);
2661                                         }
2662
2663                                         if (in_array($attr->nodeName, $disallowed_attributes)) {
2664                                                 $entry->removeAttributeNode($attr);
2665                                         }
2666                                 }
2667                         }
2668                 }
2669
2670                 return $doc;
2671         }
2672
2673         function check_for_update($link) {
2674                 if (CHECK_FOR_NEW_VERSION && $_SESSION['access_level'] >= 10) {
2675                         $version_url = "http://tt-rss.org/version.php?ver=" . VERSION .
2676                                 "&iid=" . sha1(SELF_URL_PATH);
2677
2678                         $version_data = @fetch_file_contents($version_url);
2679
2680                         if ($version_data) {
2681                                 $version_data = json_decode($version_data, true);
2682                                 if ($version_data && $version_data['version']) {
2683
2684                                         if (version_compare(VERSION, $version_data['version']) == -1) {
2685                                                 return $version_data;
2686                                         }
2687                                 }
2688                         }
2689                 }
2690                 return false;
2691         }
2692
2693         function catchupArticlesById($link, $ids, $cmode, $owner_uid = false) {
2694
2695                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2696                 if (count($ids) == 0) return;
2697
2698                 $tmp_ids = array();
2699
2700                 foreach ($ids as $id) {
2701                         array_push($tmp_ids, "ref_id = '$id'");
2702                 }
2703
2704                 $ids_qpart = join(" OR ", $tmp_ids);
2705
2706                 if ($cmode == 0) {
2707                         db_query($link, "UPDATE ttrss_user_entries SET
2708                         unread = false,last_read = NOW()
2709                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2710                 } else if ($cmode == 1) {
2711                         db_query($link, "UPDATE ttrss_user_entries SET
2712                         unread = true
2713                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2714                 } else {
2715                         db_query($link, "UPDATE ttrss_user_entries SET
2716                         unread = NOT unread,last_read = NOW()
2717                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2718                 }
2719
2720                 /* update ccache */
2721
2722                 $result = db_query($link, "SELECT DISTINCT feed_id FROM ttrss_user_entries
2723                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2724
2725                 while ($line = db_fetch_assoc($result)) {
2726                         ccache_update($link, $line["feed_id"], $owner_uid);
2727                 }
2728         }
2729
2730         function get_article_tags($link, $id, $owner_uid = 0, $tag_cache = false) {
2731
2732                 $a_id = db_escape_string($id);
2733
2734                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2735
2736                 $query = "SELECT DISTINCT tag_name,
2737                         owner_uid as owner FROM
2738                         ttrss_tags WHERE post_int_id = (SELECT int_id FROM ttrss_user_entries WHERE
2739                         ref_id = '$a_id' AND owner_uid = '$owner_uid' LIMIT 1) ORDER BY tag_name";
2740
2741                 $obj_id = md5("TAGS:$owner_uid:$id");
2742                 $tags = array();
2743
2744                 /* check cache first */
2745
2746                 if ($tag_cache === false) {
2747                         $result = db_query($link, "SELECT tag_cache FROM ttrss_user_entries
2748                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
2749
2750                         $tag_cache = db_fetch_result($result, 0, "tag_cache");
2751                 }
2752
2753                 if ($tag_cache) {
2754                         $tags = explode(",", $tag_cache);
2755                 } else {
2756
2757                         /* do it the hard way */
2758
2759                         $tmp_result = db_query($link, $query);
2760
2761                         while ($tmp_line = db_fetch_assoc($tmp_result)) {
2762                                 array_push($tags, $tmp_line["tag_name"]);
2763                         }
2764
2765                         /* update the cache */
2766
2767                         $tags_str = db_escape_string(join(",", $tags));
2768
2769                         db_query($link, "UPDATE ttrss_user_entries
2770                                 SET tag_cache = '$tags_str' WHERE ref_id = '$id'
2771                                 AND owner_uid = $owner_uid");
2772                 }
2773
2774                 return $tags;
2775         }
2776
2777         function trim_array($array) {
2778                 $tmp = $array;
2779                 array_walk($tmp, 'trim');
2780                 return $tmp;
2781         }
2782
2783         function tag_is_valid($tag) {
2784                 if ($tag == '') return false;
2785                 if (preg_match("/^[0-9]*$/", $tag)) return false;
2786                 if (mb_strlen($tag) > 250) return false;
2787
2788                 if (function_exists('iconv')) {
2789                         $tag = iconv("utf-8", "utf-8", $tag);
2790                 }
2791
2792                 if (!$tag) return false;
2793
2794                 return true;
2795         }
2796
2797         function render_login_form($link, $form_id = 0) {
2798                 switch ($form_id) {
2799                 case 0:
2800                         require_once "login_form.php";
2801                         break;
2802                 case 1:
2803                         require_once "mobile/login_form.php";
2804                         break;
2805                 }
2806                 exit;
2807         }
2808
2809         // from http://developer.apple.com/internet/safari/faq.html
2810         function no_cache_incantation() {
2811                 header("Expires: Mon, 22 Dec 1980 00:00:00 GMT"); // Happy birthday to me :)
2812                 header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT"); // always modified
2813                 header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0"); // HTTP/1.1
2814                 header("Cache-Control: post-check=0, pre-check=0", false);
2815                 header("Pragma: no-cache"); // HTTP/1.0
2816         }
2817
2818         function format_warning($msg, $id = "") {
2819                 global $link;
2820                 return "<div class=\"warning\" id=\"$id\">
2821                         <img src=\"".theme_image($link, "images/sign_excl.svg")."\">$msg</div>";
2822         }
2823
2824         function format_notice($msg, $id = "") {
2825                 global $link;
2826                 return "<div class=\"notice\" id=\"$id\">
2827                         <img src=\"".theme_image($link, "images/sign_info.svg")."\">$msg</div>";
2828         }
2829
2830         function format_error($msg, $id = "") {
2831                 global $link;
2832                 return "<div class=\"error\" id=\"$id\">
2833                         <img src=\"".theme_image($link, "images/sign_excl.svg")."\">$msg</div>";
2834         }
2835
2836         function print_notice($msg) {
2837                 return print format_notice($msg);
2838         }
2839
2840         function print_warning($msg) {
2841                 return print format_warning($msg);
2842         }
2843
2844         function print_error($msg) {
2845                 return print format_error($msg);
2846         }
2847
2848
2849         function T_sprintf() {
2850                 $args = func_get_args();
2851                 return vsprintf(__(array_shift($args)), $args);
2852         }
2853
2854         function format_inline_player($link, $url, $ctype) {
2855
2856                 $entry = "";
2857
2858                 if (strpos($ctype, "audio/") === 0) {
2859
2860                         if ($_SESSION["hasAudio"] && (strpos($ctype, "ogg") !== false ||
2861                                 strpos($_SERVER['HTTP_USER_AGENT'], "Chrome") !== false ||
2862                                 strpos($_SERVER['HTTP_USER_AGENT'], "Safari") !== false )) {
2863
2864                                 $id = 'AUDIO-' . uniqid();
2865
2866                                 $entry .= "<audio id=\"$id\"\" controls style='display : none'>
2867                                         <source type=\"$ctype\" src=\"$url\"></source>
2868                                         </audio>";
2869
2870                                 $entry .= "<span onclick=\"player(this)\"
2871                                         title=\"".__("Click to play")."\" status=\"0\"
2872                                         class=\"player\" audio-id=\"$id\">".__("Play")."</span>";
2873
2874                         } else {
2875
2876                                 $entry .= "<object type=\"application/x-shockwave-flash\"
2877                                         data=\"lib/button/musicplayer.swf?song_url=$url\"
2878                                         width=\"17\" height=\"17\" style='float : left; margin-right : 5px;'>
2879                                         <param name=\"movie\"
2880                                                 value=\"lib/button/musicplayer.swf?song_url=$url\" />
2881                                         </object>";
2882                         }
2883
2884                         if ($entry) $entry .= "&nbsp;" . basename($url);
2885
2886                         return $entry;
2887
2888                 }
2889
2890                 return "";
2891
2892 /*              $filename = substr($url, strrpos($url, "/")+1);
2893
2894                 $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
2895                         $filename . " (" . $ctype . ")" . "</a>"; */
2896
2897         }
2898
2899         function format_article($link, $id, $mark_as_read = true, $zoom_mode = false, $owner_uid = false) {
2900                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2901
2902                 $rv = array();
2903
2904                 $rv['id'] = $id;
2905
2906                 /* we can figure out feed_id from article id anyway, why do we
2907                  * pass feed_id here? let's ignore the argument :( */
2908
2909                 $result = db_query($link, "SELECT feed_id FROM ttrss_user_entries
2910                         WHERE ref_id = '$id'");
2911
2912                 $feed_id = (int) db_fetch_result($result, 0, "feed_id");
2913
2914                 $rv['feed_id'] = $feed_id;
2915
2916                 //if (!$zoom_mode) { print "<article id='$id'><![CDATA["; };
2917
2918                 if ($mark_as_read) {
2919                         $result = db_query($link, "UPDATE ttrss_user_entries
2920                                 SET unread = false,last_read = NOW()
2921                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
2922
2923                         ccache_update($link, $feed_id, $owner_uid);
2924                 }
2925
2926                 $result = db_query($link, "SELECT id,title,link,content,feed_id,comments,int_id,
2927                         ".SUBSTRING_FOR_DATE."(updated,1,16) as updated,
2928                         (SELECT site_url FROM ttrss_feeds WHERE id = feed_id) as site_url,
2929                         num_comments,
2930                         tag_cache,
2931                         author,
2932                         orig_feed_id,
2933                         note,
2934                         cached_content
2935                         FROM ttrss_entries,ttrss_user_entries
2936                         WHERE   id = '$id' AND ref_id = id AND owner_uid = $owner_uid");
2937
2938                 if ($result) {
2939
2940                         $line = db_fetch_assoc($result);
2941
2942                         $tag_cache = $line["tag_cache"];
2943
2944                         $line["tags"] = get_article_tags($link, $id, $owner_uid, $line["tag_cache"]);
2945                         unset($line["tag_cache"]);
2946
2947                         $line["content"] = sanitize($link, $line["content"], false, $owner_uid, $line["site_url"]);
2948
2949                         global $pluginhost;
2950
2951                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_RENDER_ARTICLE) as $p) {
2952                                 $line = $p->hook_render_article($line);
2953                         }
2954
2955                         $num_comments = $line["num_comments"];
2956                         $entry_comments = "";
2957
2958                         if ($num_comments > 0) {
2959                                 if ($line["comments"]) {
2960                                         $comments_url = htmlspecialchars($line["comments"]);
2961                                 } else {
2962                                         $comments_url = htmlspecialchars($line["link"]);
2963                                 }
2964                                 $entry_comments = "<a target='_blank' href=\"$comments_url\">$num_comments comments</a>";
2965                         } else {
2966                                 if ($line["comments"] && $line["link"] != $line["comments"]) {
2967                                         $entry_comments = "<a target='_blank' href=\"".htmlspecialchars($line["comments"])."\">comments</a>";
2968                                 }
2969                         }
2970
2971                         if ($zoom_mode) {
2972                                 header("Content-Type: text/html");
2973                                 $rv['content'] .= "<html><head>
2974                                                 <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"/>
2975                                                 <title>Tiny Tiny RSS - ".$line["title"]."</title>
2976                                                 <link rel=\"stylesheet\" type=\"text/css\" href=\"tt-rss.css\">
2977                                         </head><body>";
2978                         }
2979
2980                         $title_escaped = htmlspecialchars($line['title']);
2981
2982                         $rv['content'] .= "<div id=\"PTITLE-FULL-$id\" style=\"display : none\">" .
2983                                 strip_tags($line['title']) . "</div>";
2984
2985                         $rv['content'] .= "<div class=\"postReply\" id=\"POST-$id\">";
2986
2987                         $rv['content'] .= "<div class=\"postHeader\" id=\"POSTHDR-$id\">";
2988
2989                         $entry_author = $line["author"];
2990
2991                         if ($entry_author) {
2992                                 $entry_author = __(" - ") . $entry_author;
2993                         }
2994
2995                         $parsed_updated = make_local_datetime($link, $line["updated"], true,
2996                                 $owner_uid, true);
2997
2998                         $rv['content'] .= "<div class=\"postDate\">$parsed_updated</div>";
2999
3000                         if ($line["link"]) {
3001                                 $rv['content'] .= "<div class='postTitle'><a target='_blank'
3002                                         title=\"".htmlspecialchars($line['title'])."\"
3003                                         href=\"" .
3004                                         htmlspecialchars($line["link"]) . "\">" .
3005                                         $line["title"] .
3006                                         "<span class='author'>$entry_author</span></a></div>";
3007                         } else {
3008                                 $rv['content'] .= "<div class='postTitle'>" . $line["title"] . "$entry_author</div>";
3009                         }
3010
3011                         $tags_str = format_tags_string($line["tags"], $id);
3012                         $tags_str_full = join(", ", $line["tags"]);
3013
3014                         if (!$tags_str_full) $tags_str_full = __("no tags");
3015
3016                         if (!$entry_comments) $entry_comments = "&nbsp;"; # placeholder
3017
3018                         $rv['content'] .= "<div class='postTags' style='float : right'>
3019                                 <img src='".theme_image($link, 'images/tag.png')."'
3020                                 class='tagsPic' alt='Tags' title='Tags'>&nbsp;";
3021
3022                         if (!$zoom_mode) {
3023                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>
3024                                         <a title=\"".__('Edit tags for this article')."\"
3025                                         href=\"#\" onclick=\"editArticleTags($id, $feed_id)\">(+)</a>";
3026
3027                                 $rv['content'] .= "<div dojoType=\"dijit.Tooltip\"
3028                                         id=\"ATSTRTIP-$id\" connectId=\"ATSTR-$id\"
3029                                         position=\"below\">$tags_str_full</div>";
3030
3031                                 global $pluginhost;
3032
3033                                 foreach ($pluginhost->get_hooks($pluginhost::HOOK_ARTICLE_BUTTON) as $p) {
3034                                         $rv['content'] .= $p->hook_article_button($line);
3035                                 }
3036
3037
3038                         } else {
3039                                 $tags_str = strip_tags($tags_str);
3040                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>";
3041                         }
3042                         $rv['content'] .= "</div>";
3043                         $rv['content'] .= "<div clear='both'>$entry_comments</div>";
3044
3045                         if ($line["orig_feed_id"]) {
3046
3047                                 $tmp_result = db_query($link, "SELECT * FROM ttrss_archived_feeds
3048                                         WHERE id = ".$line["orig_feed_id"]);
3049
3050                                 if (db_num_rows($tmp_result) != 0) {
3051
3052                                         $rv['content'] .= "<div clear='both'>";
3053                                         $rv['content'] .= __("Originally from:");
3054
3055                                         $rv['content'] .= "&nbsp;";
3056
3057                                         $tmp_line = db_fetch_assoc($tmp_result);
3058
3059                                         $rv['content'] .= "<a target='_blank'
3060                                                 href=' " . htmlspecialchars($tmp_line['site_url']) . "'>" .
3061                                                 $tmp_line['title'] . "</a>";
3062
3063                                         $rv['content'] .= "&nbsp;";
3064
3065                                         $rv['content'] .= "<a target='_blank' href='" . htmlspecialchars($tmp_line['feed_url']) . "'>";
3066                                         $rv['content'] .= "<img title='".__('Feed URL')."'class='tinyFeedIcon' src='images/pub_set.svg'></a>";
3067
3068                                         $rv['content'] .= "</div>";
3069                                 }
3070                         }
3071
3072                         $rv['content'] .= "</div>";
3073
3074                         $rv['content'] .= "<div id=\"POSTNOTE-$id\">";
3075                                 if ($line['note']) {
3076                                         $rv['content'] .= format_article_note($id, $line['note'], !$zoom_mode);
3077                                 }
3078                         $rv['content'] .= "</div>";
3079
3080                         $rv['content'] .= "<div class=\"postContent\">";
3081
3082                         // N-grams
3083
3084                         if (DB_TYPE == "pgsql" and defined('_NGRAM_TITLE_RELATED_THRESHOLD')) {
3085
3086                                 $ngram_result = db_query($link, "SELECT id,title FROM
3087                                                 ttrss_entries,ttrss_user_entries
3088                                         WHERE ref_id = id AND updated >= NOW() - INTERVAL '7 day'
3089                                                 AND similarity(title, '$title_escaped') >= "._NGRAM_TITLE_RELATED_THRESHOLD."
3090                                                 AND title != '$title_escaped'
3091                                                 AND owner_uid = $owner_uid");
3092
3093                                 if (db_num_rows($ngram_result) > 0) {
3094                                         $rv['content'] .= "<div dojoType=\"dijit.form.DropDownButton\">".
3095                                                 "<span>" . __('Related')."</span>";
3096                                         $rv['content'] .= "<div dojoType=\"dijit.Menu\" style=\"display: none;\">";
3097
3098                                         while ($nline = db_fetch_assoc($ngram_result)) {
3099                                                 $rv['content'] .= "<div onclick=\"hlOpenInNewTab(null,".$nline['id'].")\"
3100                                                         dojoType=\"dijit.MenuItem\">".$nline['title']."</div>";
3101
3102                                         }
3103                                         $rv['content'] .= "</div></div><br/";
3104                                 }
3105                         }
3106
3107                         $rv['content'] .= $line["content"];
3108
3109                         $rv['content'] .= format_article_enclosures($link, $id,
3110                                 $always_display_enclosures, $line["content"]);
3111
3112                         $rv['content'] .= "</div>";
3113
3114                         $rv['content'] .= "</div>";
3115
3116                 }
3117
3118                 if ($zoom_mode) {
3119                         $rv['content'] .= "
3120                                 <div style=\"text-align : center\">
3121                                 <button onclick=\"return window.close()\">".
3122                                         __("Close this window")."</button></div>";
3123                         $rv['content'] .= "</body></html>";
3124                 }
3125
3126                 return $rv;
3127
3128         }
3129
3130         function print_checkpoint($n, $s) {
3131                 $ts = microtime(true);
3132                 echo sprintf("<!-- CP[$n] %.4f seconds -->", $ts - $s);
3133                 return $ts;
3134         }
3135
3136         function sanitize_tag($tag) {
3137                 $tag = trim($tag);
3138
3139                 $tag = mb_strtolower($tag, 'utf-8');
3140
3141                 $tag = preg_replace('/[\'\"\+\>\<]/', "", $tag);
3142
3143 //              $tag = str_replace('"', "", $tag);
3144 //              $tag = str_replace("+", " ", $tag);
3145                 $tag = str_replace("technorati tag: ", "", $tag);
3146
3147                 return $tag;
3148         }
3149
3150         function get_self_url_prefix() {
3151                 if (strrpos(SELF_URL_PATH, "/") === strlen(SELF_URL_PATH)-1) {
3152                         return substr(SELF_URL_PATH, 0, strlen(SELF_URL_PATH)-1);
3153                 } else {
3154                         return SELF_URL_PATH;
3155                 }
3156         }
3157
3158         /**
3159          * Compute the Mozilla Firefox feed adding URL from server HOST and REQUEST_URI.
3160          *
3161          * @return string The Mozilla Firefox feed adding URL.
3162          */
3163         function add_feed_url() {
3164                 //$url_path = ($_SERVER['HTTPS'] != "on" ? 'http://' :  'https://') . $_SERVER["HTTP_HOST"] . parse_url($_SERVER["REQUEST_URI"], PHP_URL_PATH);
3165
3166                 $url_path = get_self_url_prefix() .
3167                         "/public.php?op=subscribe&feed_url=%s";
3168                 return $url_path;
3169         } // function add_feed_url
3170
3171         function encrypt_password($pass, $salt = '', $mode2 = false) {
3172                 if ($salt && $mode2) {
3173                         return "MODE2:" . hash('sha256', $salt . $pass);
3174                 } else if ($salt) {
3175                         return "SHA1X:" . sha1("$salt:$pass");
3176                 } else {
3177                         return "SHA1:" . sha1($pass);
3178                 }
3179         } // function encrypt_password
3180
3181         function load_filters($link, $feed_id, $owner_uid, $action_id = false) {
3182                 $filters = array();
3183
3184                 $cat_id = (int)getFeedCategory($link, $feed_id);
3185
3186                 $result = db_query($link, "SELECT * FROM ttrss_filters2 WHERE
3187                         owner_uid = $owner_uid AND enabled = true");
3188
3189                 $check_cats = join(",", array_merge(
3190                         getParentCategories($link, $cat_id, $owner_uid),
3191                         array($cat_id)));
3192
3193                 while ($line = db_fetch_assoc($result)) {
3194                         $filter_id = $line["id"];
3195
3196                         $result2 = db_query($link, "SELECT
3197                                 r.reg_exp, r.feed_id, r.cat_id, r.cat_filter, t.name AS type_name
3198                                 FROM ttrss_filters2_rules AS r,
3199                                 ttrss_filter_types AS t
3200                                 WHERE
3201                                         (cat_id IS NULL OR cat_id IN ($check_cats)) AND
3202                                         (feed_id IS NULL OR feed_id = '$feed_id') AND
3203                                         filter_type = t.id AND filter_id = '$filter_id'");
3204
3205                         $rules = array();
3206                         $actions = array();
3207
3208                         while ($rule_line = db_fetch_assoc($result2)) {
3209 #                               print_r($rule_line);
3210
3211                                 $rule = array();
3212                                 $rule["reg_exp"] = $rule_line["reg_exp"];
3213                                 $rule["type"] = $rule_line["type_name"];
3214
3215                                 array_push($rules, $rule);
3216                         }
3217
3218                         $result2 = db_query($link, "SELECT a.action_param,t.name AS type_name
3219                                 FROM ttrss_filters2_actions AS a,
3220                                 ttrss_filter_actions AS t
3221                                 WHERE
3222                                         action_id = t.id AND filter_id = '$filter_id'");
3223
3224                         while ($action_line = db_fetch_assoc($result2)) {
3225 #                               print_r($action_line);
3226
3227                                 $action = array();
3228                                 $action["type"] = $action_line["type_name"];
3229                                 $action["param"] = $action_line["action_param"];
3230
3231                                 array_push($actions, $action);
3232                         }
3233
3234
3235                         $filter = array();
3236                         $filter["match_any_rule"] = sql_bool_to_bool($line["match_any_rule"]);
3237                         $filter["rules"] = $rules;
3238                         $filter["actions"] = $actions;
3239
3240                         if (count($rules) > 0 && count($actions) > 0) {
3241                                 array_push($filters, $filter);
3242                         }
3243                 }
3244
3245                 return $filters;
3246         }
3247
3248         function get_score_pic($score) {
3249                 if ($score > 100) {
3250                         return "score_high.png";
3251                 } else if ($score > 0) {
3252                         return "score_half_high.png";
3253                 } else if ($score < -100) {
3254                         return "score_low.png";
3255                 } else if ($score < 0) {
3256                         return "score_half_low.png";
3257                 } else {
3258                         return "score_neutral.png";
3259                 }
3260         }
3261
3262         function feed_has_icon($id) {
3263                 return is_file(ICONS_DIR . "/$id.ico") && filesize(ICONS_DIR . "/$id.ico") > 0;
3264         }
3265
3266         function init_connection($link) {
3267                 if ($link) {
3268
3269                         if (DB_TYPE == "pgsql") {
3270                                 pg_query($link, "set client_encoding = 'UTF-8'");
3271                                 pg_set_client_encoding("UNICODE");
3272                                 pg_query($link, "set datestyle = 'ISO, european'");
3273                                 pg_query($link, "set TIME ZONE 0");
3274                         } else {
3275                                 db_query($link, "SET time_zone = '+0:0'");
3276
3277                                 if (defined('MYSQL_CHARSET') && MYSQL_CHARSET) {
3278                                         db_query($link, "SET NAMES " . MYSQL_CHARSET);
3279                                 }
3280                         }
3281
3282                         global $pluginhost;
3283
3284                         $pluginhost = new PluginHost($link);
3285                         $pluginhost->load(PLUGINS, $pluginhost::KIND_ALL);
3286
3287                         return true;
3288                 } else {
3289                         print "Unable to connect to database:" . db_last_error();
3290                         return false;
3291                 }
3292         }
3293
3294         function format_tags_string($tags, $id) {
3295
3296                 $tags_str = "";
3297                 $tags_nolinks_str = "";
3298
3299                 $num_tags = 0;
3300
3301                 $tag_limit = 6;
3302
3303                 $formatted_tags = array();
3304
3305                 foreach ($tags as $tag) {
3306                         $num_tags++;
3307                         $tag_escaped = str_replace("'", "\\'", $tag);
3308
3309                         if (mb_strlen($tag) > 30) {
3310                                 $tag = truncate_string($tag, 30);
3311                         }
3312
3313                         $tag_str = "<a href=\"javascript:viewfeed('$tag_escaped')\">$tag</a>";
3314
3315                         array_push($formatted_tags, $tag_str);
3316
3317                         $tmp_tags_str = implode(", ", $formatted_tags);
3318
3319                         if ($num_tags == $tag_limit || mb_strlen($tmp_tags_str) > 150) {
3320                                 break;
3321                         }
3322                 }
3323
3324                 $tags_str = implode(", ", $formatted_tags);
3325
3326                 if ($num_tags < count($tags)) {
3327                         $tags_str .= ", &hellip;";
3328                 }
3329
3330                 if ($num_tags == 0) {
3331                         $tags_str = __("no tags");
3332                 }
3333
3334                 return $tags_str;
3335
3336         }
3337
3338         function format_article_labels($labels, $id) {
3339
3340                 $labels_str = "";
3341
3342                 foreach ($labels as $l) {
3343                         $labels_str .= sprintf("<span class='hlLabelRef'
3344                                 style='color : %s; background-color : %s'>%s</span>",
3345                                         $l[2], $l[3], $l[1]);
3346                         }
3347
3348                 return $labels_str;
3349
3350         }
3351
3352         function format_article_note($id, $note, $allow_edit = true) {
3353
3354                 $str = "<div class='articleNote'        onclick=\"editArticleNote($id)\">
3355                         <div class='noteEdit' onclick=\"editArticleNote($id)\">".
3356                         ($allow_edit ? __('(edit note)') : "")."</div>$note</div>";
3357
3358                 return $str;
3359         }
3360
3361
3362         function get_feed_category($link, $feed_cat, $parent_cat_id = false) {
3363                 if ($parent_cat_id) {
3364                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3365                         $parent_insert = "'$parent_cat_id'";
3366                 } else {
3367                         $parent_qpart = "parent_cat IS NULL";
3368                         $parent_insert = "NULL";
3369                 }
3370
3371                 $result = db_query($link,
3372                         "SELECT id FROM ttrss_feed_categories
3373                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3374
3375                 if (db_num_rows($result) == 0) {
3376                         return false;
3377                 } else {
3378                         return db_fetch_result($result, 0, "id");
3379                 }
3380         }
3381
3382         function add_feed_category($link, $feed_cat, $parent_cat_id = false) {
3383
3384                 if (!$feed_cat) return false;
3385
3386                 db_query($link, "BEGIN");
3387
3388                 if ($parent_cat_id) {
3389                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3390                         $parent_insert = "'$parent_cat_id'";
3391                 } else {
3392                         $parent_qpart = "parent_cat IS NULL";
3393                         $parent_insert = "NULL";
3394                 }
3395
3396                 $result = db_query($link,
3397                         "SELECT id FROM ttrss_feed_categories
3398                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3399
3400                 if (db_num_rows($result) == 0) {
3401
3402                         $result = db_query($link,
3403                                 "INSERT INTO ttrss_feed_categories (owner_uid,title,parent_cat)
3404                                 VALUES ('".$_SESSION["uid"]."', '$feed_cat', $parent_insert)");
3405
3406                         db_query($link, "COMMIT");
3407
3408                         return true;
3409                 }
3410
3411                 return false;
3412         }
3413
3414         function getArticleFeed($link, $id) {
3415                 $result = db_query($link, "SELECT feed_id FROM ttrss_user_entries
3416                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
3417
3418                 if (db_num_rows($result) != 0) {
3419                         return db_fetch_result($result, 0, "feed_id");
3420                 } else {
3421                         return 0;
3422                 }
3423         }
3424
3425         /**
3426          * Fixes incomplete URLs by prepending "http://".
3427          * Also replaces feed:// with http://, and
3428          * prepends a trailing slash if the url is a domain name only.
3429          *
3430          * @param string $url Possibly incomplete URL
3431          *
3432          * @return string Fixed URL.
3433          */
3434         function fix_url($url) {
3435                 if (strpos($url, '://') === false) {
3436                         $url = 'http://' . $url;
3437                 } else if (substr($url, 0, 5) == 'feed:') {
3438                         $url = 'http:' . substr($url, 5);
3439                 }
3440
3441                 //prepend slash if the URL has no slash in it
3442                 // "http://www.example" -> "http://www.example/"
3443                 if (strpos($url, '/', strpos($url, ':') + 3) === false) {
3444                         $url .= '/';
3445                 }
3446
3447                 if ($url != "http:///")
3448                         return $url;
3449                 else
3450                         return '';
3451         }
3452
3453         function validate_feed_url($url) {
3454                 $parts = parse_url($url);
3455
3456                 return ($parts['scheme'] == 'http' || $parts['scheme'] == 'feed' || $parts['scheme'] == 'https');
3457
3458         }
3459
3460         function get_article_enclosures($link, $id) {
3461
3462                 $query = "SELECT * FROM ttrss_enclosures
3463                         WHERE post_id = '$id' AND content_url != ''";
3464
3465                 $rv = array();
3466
3467                 $result = db_query($link, $query);
3468
3469                 if (db_num_rows($result) > 0) {
3470                         while ($line = db_fetch_assoc($result)) {
3471                                 array_push($rv, $line);
3472                         }
3473                 }
3474
3475                 return $rv;
3476         }
3477
3478         function save_email_address($link, $email) {
3479                 // FIXME: implement persistent storage of emails
3480
3481                 if (!$_SESSION['stored_emails'])
3482                         $_SESSION['stored_emails'] = array();
3483
3484                 if (!in_array($email, $_SESSION['stored_emails']))
3485                         array_push($_SESSION['stored_emails'], $email);
3486         }
3487
3488
3489         function get_feed_access_key($link, $feed_id, $is_cat, $owner_uid = false) {
3490
3491                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3492
3493                 $sql_is_cat = bool_to_sql_bool($is_cat);
3494
3495                 $result = db_query($link, "SELECT access_key FROM ttrss_access_keys
3496                         WHERE feed_id = '$feed_id'      AND is_cat = $sql_is_cat
3497                         AND owner_uid = " . $owner_uid);
3498
3499                 if (db_num_rows($result) == 1) {
3500                         return db_fetch_result($result, 0, "access_key");
3501                 } else {
3502                         $key = db_escape_string(sha1(uniqid(rand(), true)));
3503
3504                         $result = db_query($link, "INSERT INTO ttrss_access_keys
3505                                 (access_key, feed_id, is_cat, owner_uid)
3506                                 VALUES ('$key', '$feed_id', $sql_is_cat, '$owner_uid')");
3507
3508                         return $key;
3509                 }
3510                 return false;
3511         }
3512
3513         function get_feeds_from_html($url, $content)
3514         {
3515                 $url     = fix_url($url);
3516                 $baseUrl = substr($url, 0, strrpos($url, '/') + 1);
3517
3518                 libxml_use_internal_errors(true);
3519
3520                 $doc = new DOMDocument();
3521                 $doc->loadHTML($content);
3522                 $xpath = new DOMXPath($doc);
3523                 $entries = $xpath->query('/html/head/link[@rel="alternate"]');
3524                 $feedUrls = array();
3525                 foreach ($entries as $entry) {
3526                         if ($entry->hasAttribute('href')) {
3527                                 $title = $entry->getAttribute('title');
3528                                 if ($title == '') {
3529                                         $title = $entry->getAttribute('type');
3530                                 }
3531                                 $feedUrl = rewrite_relative_url(
3532                                         $baseUrl, $entry->getAttribute('href')
3533                                 );
3534                                 $feedUrls[$feedUrl] = $title;
3535                         }
3536                 }
3537                 return $feedUrls;
3538         }
3539
3540         function is_html($content) {
3541                 return preg_match("/<html|DOCTYPE html/i", substr($content, 0, 20)) !== 0;
3542         }
3543
3544         function url_is_html($url, $login = false, $pass = false) {
3545                 return is_html(fetch_file_contents($url, false, $login, $pass));
3546         }
3547
3548         function print_label_select($link, $name, $value, $attributes = "") {
3549
3550                 $result = db_query($link, "SELECT caption FROM ttrss_labels2
3551                         WHERE owner_uid = '".$_SESSION["uid"]."' ORDER BY caption");
3552
3553                 print "<select default=\"$value\" name=\"" . htmlspecialchars($name) .
3554                         "\" $attributes onchange=\"labelSelectOnChange(this)\" >";
3555
3556                 while ($line = db_fetch_assoc($result)) {
3557
3558                         $issel = ($line["caption"] == $value) ? "selected=\"1\"" : "";
3559
3560                         print "<option value=\"".htmlspecialchars($line["caption"])."\"
3561                                 $issel>" . htmlspecialchars($line["caption"]) . "</option>";
3562
3563                 }
3564
3565 #               print "<option value=\"ADD_LABEL\">" .__("Add label...") . "</option>";
3566
3567                 print "</select>";
3568
3569
3570         }
3571
3572         function format_article_enclosures($link, $id, $always_display_enclosures,
3573                                         $article_content) {
3574
3575                 $result = get_article_enclosures($link, $id);
3576                 $rv = '';
3577
3578                 if (count($result) > 0) {
3579
3580                         $entries_html = array();
3581                         $entries = array();
3582                         $entries_inline = array();
3583
3584                         foreach ($result as $line) {
3585
3586                                 $url = $line["content_url"];
3587                                 $ctype = $line["content_type"];
3588
3589                                 if (!$ctype) $ctype = __("unknown type");
3590
3591                                 $filename = substr($url, strrpos($url, "/")+1);
3592
3593                                 $player = format_inline_player($link, $url, $ctype);
3594
3595                                 if ($player) array_push($entries_inline, $player);
3596
3597 #                               $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
3598 #                                       $filename . " (" . $ctype . ")" . "</a>";
3599
3600                                 $entry = "<div onclick=\"window.open('".htmlspecialchars($url)."')\"
3601                                         dojoType=\"dijit.MenuItem\">$filename ($ctype)</div>";
3602
3603                                 array_push($entries_html, $entry);
3604
3605                                 $entry = array();
3606
3607                                 $entry["type"] = $ctype;
3608                                 $entry["filename"] = $filename;
3609                                 $entry["url"] = $url;
3610
3611                                 array_push($entries, $entry);
3612                         }
3613
3614                         if (!get_pref($link, "STRIP_IMAGES")) {
3615                                 if ($always_display_enclosures ||
3616                                                         !preg_match("/<img/i", $article_content)) {
3617
3618                                         foreach ($entries as $entry) {
3619
3620                                                 if (preg_match("/image/", $entry["type"]) ||
3621                                                                 preg_match("/\.(jpg|png|gif|bmp)/i", $entry["filename"])) {
3622
3623                                                                 $rv .= "<p><img
3624                                                                 alt=\"".htmlspecialchars($entry["filename"])."\"
3625                                                                 src=\"" .htmlspecialchars($entry["url"]) . "\"/></p>";
3626
3627                                                 }
3628                                         }
3629                                 }
3630                         }
3631
3632                         if (count($entries_inline) > 0) {
3633                                 $rv .= "<hr clear='both'/>";
3634                                 foreach ($entries_inline as $entry) { $rv .= $entry; };
3635                                 $rv .= "<hr clear='both'/>";
3636                         }
3637
3638                         $rv .= "<br/><div dojoType=\"dijit.form.DropDownButton\">".
3639                                 "<span>" . __('Attachments')."</span>";
3640                         $rv .= "<div dojoType=\"dijit.Menu\" style=\"display: none;\">";
3641
3642                         foreach ($entries_html as $entry) { $rv .= $entry; };
3643
3644                         $rv .= "</div></div>";
3645                 }
3646
3647                 return $rv;
3648         }
3649
3650         function getLastArticleId($link) {
3651                 $result = db_query($link, "SELECT MAX(ref_id) AS id FROM ttrss_user_entries
3652                         WHERE owner_uid = " . $_SESSION["uid"]);
3653
3654                 if (db_num_rows($result) == 1) {
3655                         return db_fetch_result($result, 0, "id");
3656                 } else {
3657                         return -1;
3658                 }
3659         }
3660
3661         function build_url($parts) {
3662                 return $parts['scheme'] . "://" . $parts['host'] . $parts['path'];
3663         }
3664
3665         /**
3666          * Converts a (possibly) relative URL to a absolute one.
3667          *
3668          * @param string $url     Base URL (i.e. from where the document is)
3669          * @param string $rel_url Possibly relative URL in the document
3670          *
3671          * @return string Absolute URL
3672          */
3673         function rewrite_relative_url($url, $rel_url) {
3674                 if (strpos($rel_url, "magnet:") === 0) {
3675                         return $rel_url;
3676                 } else if (strpos($rel_url, "://") !== false) {
3677                         return $rel_url;
3678                 } else if (strpos($rel_url, "//") === 0) {
3679                         # protocol-relative URL (rare but they exist)
3680                         return $rel_url;
3681                 } else if (strpos($rel_url, "/") === 0)
3682                 {
3683                         $parts = parse_url($url);
3684                         $parts['path'] = $rel_url;
3685
3686                         return build_url($parts);
3687
3688                 } else {
3689                         $parts = parse_url($url);
3690                         if (!isset($parts['path'])) {
3691                                 $parts['path'] = '/';
3692                         }
3693                         $dir = $parts['path'];
3694                         if (substr($dir, -1) !== '/') {
3695                                 $dir = dirname($parts['path']);
3696                                 $dir !== '/' && $dir .= '/';
3697                         }
3698                         $parts['path'] = $dir . $rel_url;
3699
3700                         return build_url($parts);
3701                 }
3702         }
3703
3704         function sphinx_search($query, $offset = 0, $limit = 30) {
3705                 require_once 'lib/sphinxapi.php';
3706
3707                 $sphinxClient = new SphinxClient();
3708
3709                 $sphinxClient->SetServer('localhost', 9312);
3710                 $sphinxClient->SetConnectTimeout(1);
3711
3712                 $sphinxClient->SetFieldWeights(array('title' => 70, 'content' => 30,
3713                         'feed_title' => 20));
3714
3715                 $sphinxClient->SetMatchMode(SPH_MATCH_EXTENDED2);
3716                 $sphinxClient->SetRankingMode(SPH_RANK_PROXIMITY_BM25);
3717                 $sphinxClient->SetLimits($offset, $limit, 1000);
3718                 $sphinxClient->SetArrayResult(false);
3719                 $sphinxClient->SetFilter('owner_uid', array($_SESSION['uid']));
3720
3721                 $result = $sphinxClient->Query($query, SPHINX_INDEX);
3722
3723                 $ids = array();
3724
3725                 if (is_array($result['matches'])) {
3726                         foreach (array_keys($result['matches']) as $int_id) {
3727                                 $ref_id = $result['matches'][$int_id]['attrs']['ref_id'];
3728                                 array_push($ids, $ref_id);
3729                         }
3730                 }
3731
3732                 return $ids;
3733         }
3734
3735         function cleanup_tags($link, $days = 14, $limit = 1000) {
3736
3737                 if (DB_TYPE == "pgsql") {
3738                         $interval_query = "date_updated < NOW() - INTERVAL '$days days'";
3739                 } else if (DB_TYPE == "mysql") {
3740                         $interval_query = "date_updated < DATE_SUB(NOW(), INTERVAL $days DAY)";
3741                 }
3742
3743                 $tags_deleted = 0;
3744
3745                 while ($limit > 0) {
3746                         $limit_part = 500;
3747
3748                         $query = "SELECT ttrss_tags.id AS id
3749                                 FROM ttrss_tags, ttrss_user_entries, ttrss_entries
3750                                 WHERE post_int_id = int_id AND $interval_query AND
3751                                 ref_id = ttrss_entries.id AND tag_cache != '' LIMIT $limit_part";
3752
3753                         $result = db_query($link, $query);
3754
3755                         $ids = array();
3756
3757                         while ($line = db_fetch_assoc($result)) {
3758                                 array_push($ids, $line['id']);
3759                         }
3760
3761                         if (count($ids) > 0) {
3762                                 $ids = join(",", $ids);
3763                                 print ".";
3764
3765                                 $tmp_result = db_query($link, "DELETE FROM ttrss_tags WHERE id IN ($ids)");
3766                                 $tags_deleted += db_affected_rows($link, $tmp_result);
3767                         } else {
3768                                 break;
3769                         }
3770
3771                         $limit -= $limit_part;
3772                 }
3773
3774                 print "\n";
3775
3776                 return $tags_deleted;
3777         }
3778
3779         function print_user_stylesheet($link) {
3780                 $value = get_pref($link, 'USER_STYLESHEET');
3781
3782                 if ($value) {
3783                         print "<style type=\"text/css\">";
3784                         print str_replace("<br/>", "\n", $value);
3785                         print "</style>";
3786                 }
3787
3788         }
3789
3790         function rewrite_urls($html) {
3791                 libxml_use_internal_errors(true);
3792
3793                 $charset_hack = '<head>
3794                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
3795                 </head>';
3796
3797                 $doc = new DOMDocument();
3798                 $doc->loadHTML($charset_hack . $html);
3799                 $xpath = new DOMXPath($doc);
3800
3801                 $entries = $xpath->query('//*/text()');
3802
3803                 foreach ($entries as $entry) {
3804                         if (strstr($entry->wholeText, "://") !== false) {
3805                                 $text = preg_replace("/((?<!=.)((http|https|ftp)+):\/\/[^ ,!]+)/i",
3806                                         "<a target=\"_blank\" href=\"\\1\">\\1</a>", $entry->wholeText);
3807
3808                                 if ($text != $entry->wholeText) {
3809                                         $cdoc = new DOMDocument();
3810                                         $cdoc->loadHTML($charset_hack . $text);
3811
3812
3813                                         foreach ($cdoc->childNodes as $cnode) {
3814                                                 $cnode = $doc->importNode($cnode, true);
3815
3816                                                 if ($cnode) {
3817                                                         $entry->parentNode->insertBefore($cnode);
3818                                                 }
3819                                         }
3820
3821                                         $entry->parentNode->removeChild($entry);
3822
3823                                 }
3824                         }
3825                 }
3826
3827                 $node = $doc->getElementsByTagName('body')->item(0);
3828
3829                 // http://tt-rss.org/forum/viewtopic.php?f=1&t=970
3830                 if ($node)
3831                         return $doc->saveXML($node);
3832                 else
3833                         return $html;
3834         }
3835
3836         function filter_to_sql($link, $filter, $owner_uid) {
3837                 $query = array();
3838
3839                 if (DB_TYPE == "pgsql")
3840                         $reg_qpart = "~";
3841                 else
3842                         $reg_qpart = "REGEXP";
3843
3844                 foreach ($filter["rules"] AS $rule) {
3845                         $regexp_valid = preg_match('/' . $rule['reg_exp'] . '/',
3846                                 $rule['reg_exp']) !== FALSE;
3847
3848                         if ($regexp_valid) {
3849
3850                                 $rule['reg_exp'] = db_escape_string($rule['reg_exp']);
3851
3852                                 switch ($rule["type"]) {
3853                                         case "title":
3854                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
3855                                                         $rule['reg_exp'] . "')";
3856                                                 break;
3857                                         case "content":
3858                                                 $qpart = "LOWER(ttrss_entries.content) $reg_qpart LOWER('".
3859                                                         $rule['reg_exp'] . "')";
3860                                                 break;
3861                                         case "both":
3862                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
3863                                                         $rule['reg_exp'] . "') OR LOWER(" .
3864                                                         "ttrss_entries.content) $reg_qpart LOWER('" . $rule['reg_exp'] . "')";
3865                                                 break;
3866                                         case "tag":
3867                                                 $qpart = "LOWER(ttrss_user_entries.tag_cache) $reg_qpart LOWER('".
3868                                                         $rule['reg_exp'] . "')";
3869                                                 break;
3870                                         case "link":
3871                                                 $qpart = "LOWER(ttrss_entries.link) $reg_qpart LOWER('".
3872                                                         $rule['reg_exp'] . "')";
3873                                                 break;
3874                                         case "author":
3875                                                 $qpart = "LOWER(ttrss_entries.author) $reg_qpart LOWER('".
3876                                                         $rule['reg_exp'] . "')";
3877                                                 break;
3878                                 }
3879
3880                                 if (isset($rule["feed_id"]) && $rule["feed_id"] > 0) {
3881                                         $qpart .= " AND feed_id = " . db_escape_string($rule["feed_id"]);
3882                                 }
3883
3884                                 if (isset($rule["cat_id"])) {
3885
3886                                         if ($rule["cat_id"] > 0) {
3887                                                 $children = getChildCategories($link, $rule["cat_id"], $owner_uid);
3888                                                 array_push($children, $rule["cat_id"]);
3889
3890                                                 $children = join(",", $children);
3891
3892                                                 $cat_qpart = "cat_id IN ($children)";
3893                                         } else {
3894                                                 $cat_qpart = "cat_id IS NULL";
3895                                         }
3896
3897                                         $qpart .= " AND $cat_qpart";
3898                                 }
3899
3900                                 array_push($query, "($qpart)");
3901
3902                         }
3903                 }
3904
3905                 if (count($query) > 0) {
3906                         return "(" . join($filter["match_any_rule"] ? "OR" : "AND", $query) . ")";
3907                 } else {
3908                         return "(false)";
3909                 }
3910         }
3911
3912         if (!function_exists('gzdecode')) {
3913                 function gzdecode($string) { // no support for 2nd argument
3914                         return file_get_contents('compress.zlib://data:who/cares;base64,'.
3915                                 base64_encode($string));
3916                 }
3917         }
3918
3919         function get_random_bytes($length) {
3920                 if (function_exists('openssl_random_pseudo_bytes')) {
3921                         return openssl_random_pseudo_bytes($length);
3922                 } else {
3923                         $output = "";
3924
3925                         for ($i = 0; $i < $length; $i++)
3926                                 $output .= chr(mt_rand(0, 255));
3927
3928                         return $output;
3929                 }
3930         }
3931
3932         function read_stdin() {
3933                 $fp = fopen("php://stdin", "r");
3934
3935                 if ($fp) {
3936                         $line = trim(fgets($fp));
3937                         fclose($fp);
3938                         return $line;
3939                 }
3940
3941                 return null;
3942         }
3943
3944         function tmpdirname($path, $prefix) {
3945                 // Use PHP's tmpfile function to create a temporary
3946                 // directory name. Delete the file and keep the name.
3947                 $tempname = tempnam($path,$prefix);
3948                 if (!$tempname)
3949                         return false;
3950
3951                 if (!unlink($tempname))
3952                         return false;
3953
3954        return $tempname;
3955         }
3956
3957         function getFeedCategory($link, $feed) {
3958                 $result = db_query($link, "SELECT cat_id FROM ttrss_feeds
3959                         WHERE id = '$feed'");
3960
3961                 if (db_num_rows($result) > 0) {
3962                         return db_fetch_result($result, 0, "cat_id");
3963                 } else {
3964                         return false;
3965                 }
3966
3967         }
3968
3969         function implements_interface($class, $interface) {
3970                 return in_array($interface, class_implements($class));
3971         }
3972
3973         function geturl($url){
3974
3975                 (function_exists('curl_init')) ? '' : die('cURL Must be installed for geturl function to work. Ask your host to enable it or uncomment extension=php_curl.dll in php.ini');
3976
3977                 $curl = curl_init();
3978                 $header[0] = "Accept: text/xml,application/xml,application/xhtml+xml,";
3979                 $header[0] .= "text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5";
3980                 $header[] = "Cache-Control: max-age=0";
3981                 $header[] = "Connection: keep-alive";
3982                 $header[] = "Keep-Alive: 300";
3983                 $header[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
3984                 $header[] = "Accept-Language: en-us,en;q=0.5";
3985                 $header[] = "Pragma: ";
3986
3987                 curl_setopt($curl, CURLOPT_URL, $url);
3988                 curl_setopt($curl, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 5.1; rv:5.0) Gecko/20100101 Firefox/5.0 Firefox/5.0');
3989                 curl_setopt($curl, CURLOPT_HTTPHEADER, $header);
3990                 curl_setopt($curl, CURLOPT_HEADER, true);
3991                 curl_setopt($curl, CURLOPT_REFERER, $url);
3992                 curl_setopt($curl, CURLOPT_ENCODING, 'gzip,deflate');
3993                 curl_setopt($curl, CURLOPT_AUTOREFERER, true);
3994                 curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
3995                 //curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true); //CURLOPT_FOLLOWLOCATION Disabled...
3996                 curl_setopt($curl, CURLOPT_TIMEOUT, 60);
3997
3998                 $html = curl_exec($curl);
3999
4000                 $status = curl_getinfo($curl);
4001                 curl_close($curl);
4002
4003                 if($status['http_code']!=200){
4004                         if($status['http_code'] == 301 || $status['http_code'] == 302) {
4005                                 list($header) = explode("\r\n\r\n", $html, 2);
4006                                 $matches = array();
4007                                 preg_match("/(Location:|URI:)[^(\n)]*/", $header, $matches);
4008                                 $url = trim(str_replace($matches[1],"",$matches[0]));
4009                                 $url_parsed = parse_url($url);
4010                                 return (isset($url_parsed))? geturl($url, $referer):'';
4011                         }
4012                         $oline='';
4013                         foreach($status as $key=>$eline){$oline.='['.$key.']'.$eline.' ';}
4014                         $line =$oline." \r\n ".$url."\r\n-----------------\r\n";
4015                         $handle = @fopen('./curl.error.log', 'a');
4016                         fwrite($handle, $line);
4017                         return FALSE;
4018                 }
4019                 return $url;
4020         }
4021
4022         function get_minified_js($files) {
4023                 require_once 'lib/jshrink/Minifier.php';
4024
4025                 $rv = '';
4026
4027                 foreach ($files as $js) {
4028                         if (!isset($_GET['debug'])) {
4029                                 $cached_file = CACHE_DIR . "/js/$js.js";
4030
4031                                 if (file_exists($cached_file) &&
4032                                                 is_readable($cached_file) &&
4033                                                 filemtime($cached_file) >= filemtime("js/$js.js")) {
4034
4035                                         $rv .= file_get_contents($cached_file);
4036
4037                                 } else {
4038                                         $minified = JShrink\Minifier::minify(file_get_contents("js/$js.js"));
4039                                         file_put_contents($cached_file, $minified);
4040                                         $rv .= $minified;
4041                                 }
4042                         } else {
4043                                 $rv .= file_get_contents("js/$js.js");
4044                         }
4045                 }
4046
4047                 return $rv;
4048         }
4049
4050 ?>