include/functions.php

   1 <?php
   2         define('EXPECTED_CONFIG_VERSION', 26);
   3         define('SCHEMA_VERSION', 106);
   4
   5         $fetch_last_error = false;
   6         $pluginhost = false;
   7
   8         function __autoload($class) {
   9                 $class_file = str_replace("_", "/", strtolower(basename($class)));
  10
  11                 $file = dirname(__FILE__)."/../classes/$class_file.php";
  12
  13                 if (file_exists($file)) {
  14                         require $file;
  15                 }
  16
  17         }
  18
  19         mb_internal_encoding("UTF-8");
  20         date_default_timezone_set('UTC');
  21         if (defined('E_DEPRECATED')) {
  22                 error_reporting(E_ALL & ~E_NOTICE & ~E_DEPRECATED);
  23         } else {
  24                 error_reporting(E_ALL & ~E_NOTICE);
  25         }
  26
  27         require_once 'config.php';
  28
  29         if (DB_TYPE == "pgsql") {
  30                 define('SUBSTRING_FOR_DATE', 'SUBSTRING_FOR_DATE');
  31         } else {
  32                 define('SUBSTRING_FOR_DATE', 'SUBSTRING');
  33         }
  34
  35         define('THEME_VERSION_REQUIRED', 1.1);
  36
  37         /**
  38          * Return available translations names.
  39          *
  40          * @access public
  41          * @return array A array of available translations.
  42          */
  43         function get_translations() {
  44                 $tr = array(
  45                                         "auto"  => "Detect automatically",
  46                                         "ca_CA" => "Català",
  47                                         "en_US" => "English",
  48                                         "es_ES" => "Español",
  49                                         "de_DE" => "Deutsch",
  50                                         "fr_FR" => "Français",
  51                                         "hu_HU" => "Magyar (Hungarian)",
  52                                         "it_IT" => "Italiano",
  53                                         "ja_JP" => "日本語 (Japanese)",
  54                                         "lv_LV" => "Latviešu",
  55                                         "nb_NO" => "Norwegian bokmål",
  56                                         "pl_PL" => "Polski",
  57                                         "ru_RU" => "Русский",
  58                                         "pt_BR" => "Portuguese/Brazil",
  59                                         "zh_CN" => "Simplified Chinese");
  60
  61                 return $tr;
  62         }
  63
  64         require_once "lib/accept-to-gettext.php";
  65         require_once "lib/gettext/gettext.inc";
  66
  67
  68         function startup_gettext() {
  69
  70                 # Get locale from Accept-Language header
  71                 $lang = al2gt(array_keys(get_translations()), "text/html");
  72
  73                 if (defined('_TRANSLATION_OVERRIDE_DEFAULT')) {
  74                         $lang = _TRANSLATION_OVERRIDE_DEFAULT;
  75                 }
  76
  77                 /* In login action of mobile version */
  78                 if ($_POST["language"] && defined('MOBILE_VERSION')) {
  79                         $lang = $_POST["language"];
  80                 } else if ($_SESSION["language"] && $_SESSION["language"] != "auto") {
  81                         $lang = $_SESSION["language"];
  82                 }
  83
  84                 if ($lang) {
  85                         if (defined('LC_MESSAGES')) {
  86                                 _setlocale(LC_MESSAGES, $lang);
  87                         } else if (defined('LC_ALL')) {
  88                                 _setlocale(LC_ALL, $lang);
  89                         }
  90
  91                         if (defined('MOBILE_VERSION')) {
  92                                 _bindtextdomain("messages", "../locale");
  93                         } else {
  94                                 _bindtextdomain("messages", "locale");
  95                         }
  96
  97                         _textdomain("messages");
  98                         _bind_textdomain_codeset("messages", "UTF-8");
  99                 }
 100         }
 101
 102         startup_gettext();
 103
 104         require_once 'db-prefs.php';
 105         require_once 'version.php';
 106         require_once 'ccache.php';
 107         require_once 'labels.php';
 108
 109         define('SELF_USER_AGENT', 'Tiny Tiny RSS/' . VERSION . ' (http://tt-rss.org/)');
 110         ini_set('user_agent', SELF_USER_AGENT);
 111
 112         require_once 'lib/pubsubhubbub/publisher.php';
 113
 114         $tz_offset = -1;
 115         $utc_tz = new DateTimeZone('UTC');
 116         $schema_version = false;
 117
 118         /**
 119          * Print a timestamped debug message.
 120          *
 121          * @param string $msg The debug message.
 122          * @return void
 123          */
 124         function _debug($msg) {
 125                 if (defined('QUIET') && QUIET) {
 126                         return;
 127                 }
 128                 $ts = strftime("%H:%M:%S", time());
 129                 if (function_exists('posix_getpid')) {
 130                         $ts = "$ts/" . posix_getpid();
 131                 }
 132                 print "[$ts] $msg\n";
 133         } // function _debug
 134
 135         /**
 136          * Purge a feed old posts.
 137          *
 138          * @param mixed $link A database connection.
 139          * @param mixed $feed_id The id of the purged feed.
 140          * @param mixed $purge_interval Olderness of purged posts.
 141          * @param boolean $debug Set to True to enable the debug. False by default.
 142          * @access public
 143          * @return void
 144          */
 145         function purge_feed($link, $feed_id, $purge_interval, $debug = false) {
 146
 147                 if (!$purge_interval) $purge_interval = feed_purge_interval($link, $feed_id);
 148
 149                 $rows = -1;
 150
 151                 $result = db_query($link,
 152                         "SELECT owner_uid FROM ttrss_feeds WHERE id = '$feed_id'");
 153
 154                 $owner_uid = false;
 155
 156                 if (db_num_rows($result) == 1) {
 157                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 158                 }
 159
 160                 if ($purge_interval == -1 || !$purge_interval) {
 161                         if ($owner_uid) {
 162                                 ccache_update($link, $feed_id, $owner_uid);
 163                         }
 164                         return;
 165                 }
 166
 167                 if (!$owner_uid) return;
 168
 169                 if (FORCE_ARTICLE_PURGE == 0) {
 170                         $purge_unread = get_pref($link, "PURGE_UNREAD_ARTICLES",
 171                                 $owner_uid, false);
 172                 } else {
 173                         $purge_unread = true;
 174                         $purge_interval = FORCE_ARTICLE_PURGE;
 175                 }
 176
 177                 if (!$purge_unread) $query_limit = " unread = false AND ";
 178
 179                 if (DB_TYPE == "pgsql") {
 180                         $pg_version = get_pgsql_version($link);
 181
 182                         if (preg_match("/^7\./", $pg_version) || preg_match("/^8\.0/", $pg_version)) {
 183
 184                                 $result = db_query($link, "DELETE FROM ttrss_user_entries WHERE
 185                                         ttrss_entries.id = ref_id AND
 186                                         marked = false AND
 187                                         feed_id = '$feed_id' AND
 188                                         $query_limit
 189                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 190
 191                         } else {
 192
 193                                 $result = db_query($link, "DELETE FROM ttrss_user_entries
 194                                         USING ttrss_entries
 195                                         WHERE ttrss_entries.id = ref_id AND
 196                                         marked = false AND
 197                                         feed_id = '$feed_id' AND
 198                                         $query_limit
 199                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 200                         }
 201
 202                         $rows = pg_affected_rows($result);
 203
 204                 } else {
 205
 206 /*                      $result = db_query($link, "DELETE FROM ttrss_user_entries WHERE
 207                                 marked = false AND feed_id = '$feed_id' AND
 208                                 (SELECT date_updated FROM ttrss_entries WHERE
 209                                         id = ref_id) < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)"); */
 210
 211                         $result = db_query($link, "DELETE FROM ttrss_user_entries
 212                                 USING ttrss_user_entries, ttrss_entries
 213                                 WHERE ttrss_entries.id = ref_id AND
 214                                 marked = false AND
 215                                 feed_id = '$feed_id' AND
 216                                 $query_limit
 217                                 ttrss_entries.date_updated < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)");
 218
 219                         $rows = mysql_affected_rows($link);
 220
 221                 }
 222
 223                 ccache_update($link, $feed_id, $owner_uid);
 224
 225                 if ($debug) {
 226                         _debug("Purged feed $feed_id ($purge_interval): deleted $rows articles");
 227                 }
 228
 229                 return $rows;
 230         } // function purge_feed
 231
 232         function feed_purge_interval($link, $feed_id) {
 233
 234                 $result = db_query($link, "SELECT purge_interval, owner_uid FROM ttrss_feeds
 235                         WHERE id = '$feed_id'");
 236
 237                 if (db_num_rows($result) == 1) {
 238                         $purge_interval = db_fetch_result($result, 0, "purge_interval");
 239                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 240
 241                         if ($purge_interval == 0) $purge_interval = get_pref($link,
 242                                 'PURGE_OLD_DAYS', $owner_uid);
 243
 244                         return $purge_interval;
 245
 246                 } else {
 247                         return -1;
 248                 }
 249         }
 250
 251         function purge_orphans($link, $do_output = false) {
 252
 253                 // purge orphaned posts in main content table
 254                 $result = db_query($link, "DELETE FROM ttrss_entries WHERE
 255                         (SELECT COUNT(int_id) FROM ttrss_user_entries WHERE ref_id = id) = 0");
 256
 257                 if ($do_output) {
 258                         $rows = db_affected_rows($link, $result);
 259                         _debug("Purged $rows orphaned posts.");
 260                 }
 261         }
 262
 263         function get_feed_update_interval($link, $feed_id) {
 264                 $result = db_query($link, "SELECT owner_uid, update_interval FROM
 265                         ttrss_feeds WHERE id = '$feed_id'");
 266
 267                 if (db_num_rows($result) == 1) {
 268                         $update_interval = db_fetch_result($result, 0, "update_interval");
 269                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 270
 271                         if ($update_interval != 0) {
 272                                 return $update_interval;
 273                         } else {
 274                                 return get_pref($link, 'DEFAULT_UPDATE_INTERVAL', $owner_uid, false);
 275                         }
 276
 277                 } else {
 278                         return -1;
 279                 }
 280         }
 281
 282         function fetch_file_contents($url, $type = false, $login = false, $pass = false, $post_query = false, $timeout = false) {
 283                 $login = urlencode($login);
 284                 $pass = urlencode($pass);
 285
 286                 global $fetch_last_error;
 287
 288                 if (function_exists('curl_init') && !ini_get("open_basedir")) {
 289                         //$ch = curl_init($url);
 290                         $ch = curl_init(geturl($url));
 291
 292                         curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, $timeout ? $timeout : 15);
 293                         curl_setopt($ch, CURLOPT_TIMEOUT, $timeout ? $timeout : 45);
 294                         //curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
 295                         curl_setopt($ch, CURLOPT_MAXREDIRS, 20);
 296                         curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
 297                         curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
 298                         curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
 299                         curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_ANY);
 300                         curl_setopt($ch, CURLOPT_USERAGENT, SELF_USER_AGENT);
 301                         curl_setopt($ch, CURLOPT_ENCODING , "gzip");
 302                         curl_setopt($ch, CURLOPT_REFERER, $url);
 303
 304                         if ($post_query) {
 305                                 curl_setopt($ch, CURLOPT_POST, true);
 306                                 curl_setopt($ch, CURLOPT_POSTFIELDS, $post_query);
 307                         }
 308
 309                         if ($login && $pass)
 310                                 curl_setopt($ch, CURLOPT_USERPWD, "$login:$pass");
 311
 312                         $contents = @curl_exec($ch);
 313
 314                         if (curl_errno($ch) === 23 || curl_errno($ch) === 61) {
 315                                 curl_setopt($ch, CURLOPT_ENCODING, 'none');
 316                                 $contents = @curl_exec($ch);
 317                         }
 318
 319                         if ($contents === false) {
 320                                 $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
 321                                 curl_close($ch);
 322                                 return false;
 323                         }
 324
 325                         $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
 326                         $content_type = curl_getinfo($ch, CURLINFO_CONTENT_TYPE);
 327
 328                         if ($http_code != 200 || $type && strpos($content_type, "$type") === false) {
 329                                 if (curl_errno($ch) != 0) {
 330                                         $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
 331                                 } else {
 332                                         $fetch_last_error = "HTTP Code: $http_code";
 333                                 }
 334                                 curl_close($ch);
 335                                 return false;
 336                         }
 337
 338                         curl_close($ch);
 339
 340                         return $contents;
 341                 } else {
 342                         if ($login && $pass ){
 343                                 $url_parts = array();
 344
 345                                 preg_match("/(^[^:]*):\/\/(.*)/", $url, $url_parts);
 346
 347                                 if ($url_parts[1] && $url_parts[2]) {
 348                                         $url = $url_parts[1] . "://$login:$pass@" . $url_parts[2];
 349                                 }
 350                         }
 351
 352                         $data = @file_get_contents($url);
 353
 354                         $gzdecoded = gzdecode($data);
 355                         if ($gzdecoded) $data = $gzdecoded;
 356
 357                         if (!$data && function_exists('error_get_last')) {
 358                                 $error = error_get_last();
 359                                 $fetch_last_error = $error["message"];
 360                         }
 361                         return $data;
 362                 }
 363
 364         }
 365
 366         /**
 367          * Try to determine the favicon URL for a feed.
 368          * adapted from wordpress favicon plugin by Jeff Minard (http://thecodepro.com/)
 369          * http://dev.wp-plugins.org/file/favatars/trunk/favatars.php
 370          *
 371          * @param string $url A feed or page URL
 372          * @access public
 373          * @return mixed The favicon URL, or false if none was found.
 374          */
 375         function get_favicon_url($url) {
 376
 377                 $favicon_url = false;
 378
 379                 if ($html = @fetch_file_contents($url)) {
 380
 381                         libxml_use_internal_errors(true);
 382
 383                         $doc = new DOMDocument();
 384                         $doc->loadHTML($html);
 385                         $xpath = new DOMXPath($doc);
 386
 387                         $base = $xpath->query('/html/head/base');
 388                         foreach ($base as $b) {
 389                                 $url = $b->getAttribute("href");
 390                                 break;
 391                         }
 392
 393                         $entries = $xpath->query('/html/head/link[@rel="shortcut icon" or @rel="icon"]');
 394                         if (count($entries) > 0) {
 395                                 foreach ($entries as $entry) {
 396                                         $favicon_url = rewrite_relative_url($url, $entry->getAttribute("href"));
 397                                         break;
 398                                 }
 399                         }
 400                 }
 401
 402                 if (!$favicon_url)
 403                         $favicon_url = rewrite_relative_url($url, "/favicon.ico");
 404
 405                 return $favicon_url;
 406         } // function get_favicon_url
 407
 408         function check_feed_favicon($site_url, $feed, $link) {
 409 #               print "FAVICON [$site_url]: $favicon_url\n";
 410
 411                 $icon_file = ICONS_DIR . "/$feed.ico";
 412
 413                 if (!file_exists($icon_file)) {
 414                         $favicon_url = get_favicon_url($site_url);
 415
 416                         if ($favicon_url) {
 417                                 // Limiting to "image" type misses those served with text/plain
 418                                 $contents = fetch_file_contents($favicon_url); // , "image");
 419
 420                                 if ($contents) {
 421                                         // Crude image type matching.
 422                                         // Patterns gleaned from the file(1) source code.
 423                                         if (preg_match('/^\x00\x00\x01\x00/', $contents)) {
 424                                                 // 0       string  \000\000\001\000        MS Windows icon resource
 425                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa MS Windows icon resource");
 426                                         }
 427                                         elseif (preg_match('/^GIF8/', $contents)) {
 428                                                 // 0       string          GIF8            GIF image data
 429                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa GIF image");
 430                                         }
 431                                         elseif (preg_match('/^\x89PNG\x0d\x0a\x1a\x0a/', $contents)) {
 432                                                 // 0       string          \x89PNG\x0d\x0a\x1a\x0a         PNG image data
 433                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa PNG image");
 434                                         }
 435                                         elseif (preg_match('/^\xff\xd8/', $contents)) {
 436                                                 // 0       beshort         0xffd8          JPEG image data
 437                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa JPG image");
 438                                         }
 439                                         else {
 440                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa UNKNOWN type");
 441                                                 $contents = "";
 442                                         }
 443                                 }
 444
 445                                 if ($contents) {
 446                                         $fp = @fopen($icon_file, "w");
 447
 448                                         if ($fp) {
 449                                                 fwrite($fp, $contents);
 450                                                 fclose($fp);
 451                                                 chmod($icon_file, 0644);
 452                                         }
 453                                 }
 454                         }
 455                 }
 456         }
 457
 458         function print_select($id, $default, $values, $attributes = "") {
 459                 print "<select name=\"$id\" id=\"$id\" $attributes>";
 460                 foreach ($values as $v) {
 461                         if ($v == $default)
 462                                 $sel = "selected=\"1\"";
 463                          else
 464                                 $sel = "";
 465
 466                         $v = trim($v);
 467
 468                         print "<option value=\"$v\" $sel>$v</option>";
 469                 }
 470                 print "</select>";
 471         }
 472
 473         function print_select_hash($id, $default, $values, $attributes = "") {
 474                 print "<select name=\"$id\" id='$id' $attributes>";
 475                 foreach (array_keys($values) as $v) {
 476                         if ($v == $default)
 477                                 $sel = 'selected="selected"';
 478                          else
 479                                 $sel = "";
 480
 481                         $v = trim($v);
 482
 483                         print "<option $sel value=\"$v\">".$values[$v]."</option>";
 484                 }
 485
 486                 print "</select>";
 487         }
 488
 489         function print_radio($id, $default, $true_is, $values, $attributes = "") {
 490                 foreach ($values as $v) {
 491
 492                         if ($v == $default)
 493                                 $sel = "checked";
 494                          else
 495                                 $sel = "";
 496
 497                         if ($v == $true_is) {
 498                                 $sel .= " value=\"1\"";
 499                         } else {
 500                                 $sel .= " value=\"0\"";
 501                         }
 502
 503                         print "<input class=\"noborder\" dojoType=\"dijit.form.RadioButton\"
 504                                 type=\"radio\" $sel $attributes name=\"$id\">&nbsp;$v&nbsp;";
 505
 506                 }
 507         }
 508
 509         function initialize_user_prefs($link, $uid, $profile = false) {
 510
 511                 $uid = db_escape_string($uid);
 512
 513                 if (!$profile) {
 514                         $profile = "NULL";
 515                         $profile_qpart = "AND profile IS NULL";
 516                 } else {
 517                         $profile_qpart = "AND profile = '$profile'";
 518                 }
 519
 520                 if (get_schema_version($link) < 63) $profile_qpart = "";
 521
 522                 db_query($link, "BEGIN");
 523
 524                 $result = db_query($link, "SELECT pref_name,def_value FROM ttrss_prefs");
 525
 526                 $u_result = db_query($link, "SELECT pref_name
 527                         FROM ttrss_user_prefs WHERE owner_uid = '$uid' $profile_qpart");
 528
 529                 $active_prefs = array();
 530
 531                 while ($line = db_fetch_assoc($u_result)) {
 532                         array_push($active_prefs, $line["pref_name"]);
 533                 }
 534
 535                 while ($line = db_fetch_assoc($result)) {
 536                         if (array_search($line["pref_name"], $active_prefs) === FALSE) {
 537 //                              print "adding " . $line["pref_name"] . "<br>";
 538
 539                                 if (get_schema_version($link) < 63) {
 540                                         db_query($link, "INSERT INTO ttrss_user_prefs
 541                                                 (owner_uid,pref_name,value) VALUES
 542                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."')");
 543
 544                                 } else {
 545                                         db_query($link, "INSERT INTO ttrss_user_prefs
 546                                                 (owner_uid,pref_name,value, profile) VALUES
 547                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."', $profile)");
 548                                 }
 549
 550                         }
 551                 }
 552
 553                 db_query($link, "COMMIT");
 554
 555         }
 556
 557         function get_ssl_certificate_id() {
 558                 if ($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"]) {
 559                         return sha1($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"] .
 560                                 $_SERVER["REDIRECT_SSL_CLIENT_V_START"] .
 561                                 $_SERVER["REDIRECT_SSL_CLIENT_V_END"] .
 562                                 $_SERVER["REDIRECT_SSL_CLIENT_S_DN"]);
 563                 }
 564                 return "";
 565         }
 566
 567         function authenticate_user($link, $login, $password, $check_only = false) {
 568
 569                 if (!SINGLE_USER_MODE) {
 570
 571                         $user_id = false;
 572
 573                         global $pluginhost;
 574                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_AUTH_USER) as $plugin) {
 575
 576                                 $user_id = (int) $plugin->authenticate($login, $password);
 577
 578                                 if ($user_id) {
 579                                         $_SESSION["auth_module"] = strtolower(get_class($plugin));
 580                                         break;
 581                                 }
 582                         }
 583
 584                         if ($user_id && !$check_only) {
 585                                 $_SESSION["uid"] = $user_id;
 586
 587                                 $result = db_query($link, "SELECT login,access_level,pwd_hash FROM ttrss_users
 588                                         WHERE id = '$user_id'");
 589
 590                                 $_SESSION["name"] = db_fetch_result($result, 0, "login");
 591                                 $_SESSION["access_level"] = db_fetch_result($result, 0, "access_level");
 592                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 593
 594                                 db_query($link, "UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 595                                         $_SESSION["uid"]);
 596
 597                                 $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 598                                 $_SESSION["pwd_hash"] = db_fetch_result($result, 0, "pwd_hash");
 599
 600                                 $_SESSION["last_version_check"] = time();
 601
 602                                 initialize_user_prefs($link, $_SESSION["uid"]);
 603
 604                                 return true;
 605                         }
 606
 607                         return false;
 608
 609                 } else {
 610
 611                         $_SESSION["uid"] = 1;
 612                         $_SESSION["name"] = "admin";
 613                         $_SESSION["access_level"] = 10;
 614
 615                         $_SESSION["hide_hello"] = true;
 616                         $_SESSION["hide_logout"] = true;
 617
 618                         $_SESSION["auth_module"] = false;
 619
 620                         if (!$_SESSION["csrf_token"]) {
 621                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 622                         }
 623
 624                         $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 625
 626                         initialize_user_prefs($link, $_SESSION["uid"]);
 627
 628                         return true;
 629                 }
 630         }
 631
 632         function make_password($length = 8) {
 633
 634                 $password = "";
 635                 $possible = "0123456789abcdfghjkmnpqrstvwxyzABCDFGHJKMNPQRSTVWXYZ";
 636
 637         $i = 0;
 638
 639                 while ($i < $length) {
 640                         $char = substr($possible, mt_rand(0, strlen($possible)-1), 1);
 641
 642                         if (!strstr($password, $char)) {
 643                                 $password .= $char;
 644                                 $i++;
 645                         }
 646                 }
 647                 return $password;
 648         }
 649
 650         // this is called after user is created to initialize default feeds, labels
 651         // or whatever else
 652
 653         // user preferences are checked on every login, not here
 654
 655         function initialize_user($link, $uid) {
 656
 657                 db_query($link, "insert into ttrss_feeds (owner_uid,title,feed_url)
 658                         values ('$uid', 'Tiny Tiny RSS: New Releases',
 659                         'http://tt-rss.org/releases.rss')");
 660
 661                 db_query($link, "insert into ttrss_feeds (owner_uid,title,feed_url)
 662                         values ('$uid', 'Tiny Tiny RSS: Forum',
 663                                 'http://tt-rss.org/forum/rss.php')");
 664         }
 665
 666         function logout_user() {
 667                 session_destroy();
 668                 if (isset($_COOKIE[session_name()])) {
 669                    setcookie(session_name(), '', time()-42000, '/');
 670                 }
 671         }
 672
 673         function validate_csrf($csrf_token) {
 674                 return $csrf_token == $_SESSION['csrf_token'];
 675         }
 676
 677         function validate_session($link) {
 678                 if (SINGLE_USER_MODE) return true;
 679
 680                 $check_ip = $_SESSION['ip_address'];
 681
 682                 switch (SESSION_CHECK_ADDRESS) {
 683                 case 0:
 684                         $check_ip = '';
 685                         break;
 686                 case 1:
 687                         $check_ip = substr($check_ip, 0, strrpos($check_ip, '.')+1);
 688                         break;
 689                 case 2:
 690                         $check_ip = substr($check_ip, 0, strrpos($check_ip, '.'));
 691                         $check_ip = substr($check_ip, 0, strrpos($check_ip, '.')+1);
 692                         break;
 693                 };
 694
 695                 if ($check_ip && strpos($_SERVER['REMOTE_ADDR'], $check_ip) !== 0) {
 696                         $_SESSION["login_error_msg"] =
 697                                 __("Session failed to validate (incorrect IP)");
 698                         return false;
 699                 }
 700
 701                 if ($_SESSION["ref_schema_version"] != get_schema_version($link, true))
 702                         return false;
 703
 704                 if ($_SESSION["uid"]) {
 705
 706                         $result = db_query($link,
 707                                 "SELECT pwd_hash FROM ttrss_users WHERE id = '".$_SESSION["uid"]."'");
 708
 709                         $pwd_hash = db_fetch_result($result, 0, "pwd_hash");
 710
 711                         if ($pwd_hash != $_SESSION["pwd_hash"]) {
 712                                 return false;
 713                         }
 714                 }
 715
 716 /*              if ($_SESSION["cookie_lifetime"] && $_SESSION["uid"]) {
 717
 718                         //print_r($_SESSION);
 719
 720                         if (time() > $_SESSION["cookie_lifetime"]) {
 721                                 return false;
 722                         }
 723                 } */
 724
 725                 return true;
 726         }
 727
 728         function load_user_plugins($link, $owner_uid) {
 729                 if ($owner_uid) {
 730                         $plugins = get_pref($link, "_ENABLED_PLUGINS", $owner_uid);
 731
 732                         global $pluginhost;
 733                         $pluginhost->load($plugins, $pluginhost::KIND_USER, $owner_uid);
 734
 735                         if (get_schema_version($link) > 100) {
 736                                 $pluginhost->load_data();
 737                         }
 738                 }
 739         }
 740
 741         function login_sequence($link, $login_form = 0) {
 742                 $_SESSION["prefs_cache"] = false;
 743
 744                 if (SINGLE_USER_MODE) {
 745                         authenticate_user($link, "admin", null);
 746                         cache_prefs($link);
 747                         load_user_plugins($link, $_SESSION["uid"]);
 748                 } else {
 749                         if (!$_SESSION["uid"] || !validate_session($link)) {
 750
 751                                 if (AUTH_AUTO_LOGIN && authenticate_user($link, null, null)) {
 752                                     $_SESSION["ref_schema_version"] = get_schema_version($link, true);
 753                                 } else {
 754                                          authenticate_user($link, null, null, true);
 755                                 }
 756
 757                                 if (!$_SESSION["uid"]) render_login_form($link, $login_form);
 758
 759                         } else {
 760                                 /* bump login timestamp */
 761                                 db_query($link, "UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 762                                         $_SESSION["uid"]);
 763                         }
 764
 765                         if ($_SESSION["uid"] && $_SESSION["language"] && SESSION_COOKIE_LIFETIME > 0) {
 766                                 setcookie("ttrss_lang", $_SESSION["language"],
 767                                         time() + SESSION_COOKIE_LIFETIME);
 768                         }
 769
 770                         if ($_SESSION["uid"]) {
 771                                 cache_prefs($link);
 772                                 load_user_plugins($link, $_SESSION["uid"]);
 773                         }
 774                 }
 775         }
 776
 777         function truncate_string($str, $max_len, $suffix = '&hellip;') {
 778                 if (mb_strlen($str, "utf-8") > $max_len - 3) {
 779                         return mb_substr($str, 0, $max_len, "utf-8") . $suffix;
 780                 } else {
 781                         return $str;
 782                 }
 783         }
 784
 785         // Deprecated, TODO: remove
 786         function theme_image($link, $filename) {
 787                 return $filename;
 788         }
 789
 790         function convert_timestamp($timestamp, $source_tz, $dest_tz) {
 791
 792                 try {
 793                         $source_tz = new DateTimeZone($source_tz);
 794                 } catch (Exception $e) {
 795                         $source_tz = new DateTimeZone('UTC');
 796                 }
 797
 798                 try {
 799                         $dest_tz = new DateTimeZone($dest_tz);
 800                 } catch (Exception $e) {
 801                         $dest_tz = new DateTimeZone('UTC');
 802                 }
 803
 804                 $dt = new DateTime(date('Y-m-d H:i:s', $timestamp), $source_tz);
 805                 return $dt->format('U') + $dest_tz->getOffset($dt);
 806         }
 807
 808         function make_local_datetime($link, $timestamp, $long, $owner_uid = false,
 809                                         $no_smart_dt = false) {
 810
 811                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 812                 if (!$timestamp) $timestamp = '1970-01-01 0:00';
 813
 814                 global $utc_tz;
 815                 global $tz_offset;
 816
 817                 # We store date in UTC internally
 818                 $dt = new DateTime($timestamp, $utc_tz);
 819
 820                 if ($tz_offset == -1) {
 821
 822                         $user_tz_string = get_pref($link, 'USER_TIMEZONE', $owner_uid);
 823
 824                         try {
 825                                 $user_tz = new DateTimeZone($user_tz_string);
 826                         } catch (Exception $e) {
 827                                 $user_tz = $utc_tz;
 828                         }
 829
 830                         $tz_offset = $user_tz->getOffset($dt);
 831                 }
 832
 833                 $user_timestamp = $dt->format('U') + $tz_offset;
 834
 835                 if (!$no_smart_dt) {
 836                         return smart_date_time($link, $user_timestamp,
 837                                 $tz_offset, $owner_uid);
 838                 } else {
 839                         if ($long)
 840                                 $format = get_pref($link, 'LONG_DATE_FORMAT', $owner_uid);
 841                         else
 842                                 $format = get_pref($link, 'SHORT_DATE_FORMAT', $owner_uid);
 843
 844                         return date($format, $user_timestamp);
 845                 }
 846         }
 847
 848         function smart_date_time($link, $timestamp, $tz_offset = 0, $owner_uid = false) {
 849                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 850
 851                 if (date("Y.m.d", $timestamp) == date("Y.m.d", time() + $tz_offset)) {
 852                         return date("G:i", $timestamp);
 853                 } else if (date("Y", $timestamp) == date("Y", time() + $tz_offset)) {
 854                         $format = get_pref($link, 'SHORT_DATE_FORMAT', $owner_uid);
 855                         return date($format, $timestamp);
 856                 } else {
 857                         $format = get_pref($link, 'LONG_DATE_FORMAT', $owner_uid);
 858                         return date($format, $timestamp);
 859                 }
 860         }
 861
 862         function sql_bool_to_bool($s) {
 863                 if ($s == "t" || $s == "1" || strtolower($s) == "true") {
 864                         return true;
 865                 } else {
 866                         return false;
 867                 }
 868         }
 869
 870         function bool_to_sql_bool($s) {
 871                 if ($s) {
 872                         return "true";
 873                 } else {
 874                         return "false";
 875                 }
 876         }
 877
 878         // Session caching removed due to causing wrong redirects to upgrade
 879         // script when get_schema_version() is called on an obsolete session
 880         // created on a previous schema version.
 881         function get_schema_version($link, $nocache = false) {
 882                 global $schema_version;
 883
 884                 if (!$schema_version) {
 885                         $result = db_query($link, "SELECT schema_version FROM ttrss_version");
 886                         $version = db_fetch_result($result, 0, "schema_version");
 887                         $schema_version = $version;
 888                         return $version;
 889                 } else {
 890                         return $schema_version;
 891                 }
 892         }
 893
 894         function sanity_check($link) {
 895                 require_once 'errors.php';
 896
 897                 $error_code = 0;
 898                 $schema_version = get_schema_version($link, true);
 899
 900                 if ($schema_version != SCHEMA_VERSION) {
 901                         $error_code = 5;
 902                 }
 903
 904                 if (DB_TYPE == "mysql") {
 905                         $result = db_query($link, "SELECT true", false);
 906                         if (db_num_rows($result) != 1) {
 907                                 $error_code = 10;
 908                         }
 909                 }
 910
 911                 if (db_escape_string("testTEST") != "testTEST") {
 912                         $error_code = 12;
 913                 }
 914
 915                 return array("code" => $error_code, "message" => $ERRORS[$error_code]);
 916         }
 917
 918         function file_is_locked($filename) {
 919                 if (function_exists('flock')) {
 920                         $fp = @fopen(LOCK_DIRECTORY . "/$filename", "r");
 921                         if ($fp) {
 922                                 if (flock($fp, LOCK_EX | LOCK_NB)) {
 923                                         flock($fp, LOCK_UN);
 924                                         fclose($fp);
 925                                         return false;
 926                                 }
 927                                 fclose($fp);
 928                                 return true;
 929                         } else {
 930                                 return false;
 931                         }
 932                 }
 933                 return true; // consider the file always locked and skip the test
 934         }
 935
 936         function make_lockfile($filename) {
 937                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
 938
 939                 if ($fp && flock($fp, LOCK_EX | LOCK_NB)) {
 940                         if (function_exists('posix_getpid')) {
 941                                 fwrite($fp, posix_getpid() . "\n");
 942                         }
 943                         return $fp;
 944                 } else {
 945                         return false;
 946                 }
 947         }
 948
 949         function make_stampfile($filename) {
 950                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
 951
 952                 if (flock($fp, LOCK_EX | LOCK_NB)) {
 953                         fwrite($fp, time() . "\n");
 954                         flock($fp, LOCK_UN);
 955                         fclose($fp);
 956                         return true;
 957                 } else {
 958                         return false;
 959                 }
 960         }
 961
 962         function sql_random_function() {
 963                 if (DB_TYPE == "mysql") {
 964                         return "RAND()";
 965                 } else {
 966                         return "RANDOM()";
 967                 }
 968         }
 969
 970         function catchup_feed($link, $feed, $cat_view, $owner_uid = false, $max_id = false) {
 971
 972                         if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 973
 974                         //if (preg_match("/^-?[0-9][0-9]*$/", $feed) != false) {
 975
 976                         $ref_check_qpart = ($max_id &&
 977                                 !get_pref($link, 'REVERSE_HEADLINES')) ? "ref_id <= '$max_id'" : "true";
 978
 979                         if (is_numeric($feed)) {
 980                                 if ($cat_view) {
 981
 982                                         if ($feed >= 0) {
 983
 984                                                 if ($feed > 0) {
 985                                                         $children = getChildCategories($link, $feed, $owner_uid);
 986                                                         array_push($children, $feed);
 987
 988                                                         $children = join(",", $children);
 989
 990                                                         $cat_qpart = "cat_id IN ($children)";
 991                                                 } else {
 992                                                         $cat_qpart = "cat_id IS NULL";
 993                                                 }
 994
 995                                                 db_query($link, "UPDATE ttrss_user_entries
 996                                                         SET unread = false,last_read = NOW()
 997                                                         WHERE feed_id IN (SELECT id FROM ttrss_feeds WHERE $cat_qpart)
 998                                                         AND $ref_check_qpart AND unread = true
 999                                                         AND owner_uid = $owner_uid");
1000
1001                                         } else if ($feed == -2) {
1002
1003                                                 db_query($link, "UPDATE ttrss_user_entries
1004                                                         SET unread = false,last_read = NOW() WHERE (SELECT COUNT(*)
1005                                                                 FROM ttrss_user_labels2 WHERE article_id = ref_id) > 0
1006                                                                 AND $ref_check_qpart
1007                                                                 AND unread = true AND owner_uid = $owner_uid");
1008                                         }
1009
1010                                 } else if ($feed > 0) {
1011
1012                                         db_query($link, "UPDATE ttrss_user_entries
1013                                                         SET unread = false,last_read = NOW()
1014                                                         WHERE feed_id = '$feed'
1015                                                         AND $ref_check_qpart AND unread = true
1016                                                         AND owner_uid = $owner_uid");
1017
1018                                 } else if ($feed < 0 && $feed > -10) { // special, like starred
1019
1020                                         if ($feed == -1) {
1021                                                 db_query($link, "UPDATE ttrss_user_entries
1022                                                         SET unread = false,last_read = NOW()
1023                                                         WHERE marked = true
1024                                                         AND $ref_check_qpart AND unread = true
1025                                                         AND owner_uid = $owner_uid");
1026                                         }
1027
1028                                         if ($feed == -2) {
1029                                                 db_query($link, "UPDATE ttrss_user_entries
1030                                                         SET unread = false,last_read = NOW()
1031                                                         WHERE published = true
1032                                                         AND $ref_check_qpart AND unread = true
1033                                                         AND owner_uid = $owner_uid");
1034                                         }
1035
1036                                         if ($feed == -3) {
1037
1038                                                 $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE");
1039
1040                                                 if (DB_TYPE == "pgsql") {
1041                                                         $match_part = "updated > NOW() - INTERVAL '$intl hour' ";
1042                                                 } else {
1043                                                         $match_part = "updated > DATE_SUB(NOW(),
1044                                                                 INTERVAL $intl HOUR) ";
1045                                                 }
1046
1047                                                 $result = db_query($link, "SELECT id FROM ttrss_entries,
1048                                                         ttrss_user_entries WHERE $match_part AND
1049                                                         unread = true AND
1050                                                         ttrss_user_entries.ref_id = ttrss_entries.id AND
1051                                                         owner_uid = $owner_uid");
1052
1053                                                 $affected_ids = array();
1054
1055                                                 while ($line = db_fetch_assoc($result)) {
1056                                                         array_push($affected_ids, $line["id"]);
1057                                                 }
1058
1059                                                 catchupArticlesById($link, $affected_ids, 0);
1060                                         }
1061
1062                                         if ($feed == -4) {
1063                                                 db_query($link, "UPDATE ttrss_user_entries
1064                                                         SET unread = false,last_read = NOW()
1065                                                         WHERE $ref_check_qpart AND unread = true AND
1066                                                         owner_uid = $owner_uid");
1067                                         }
1068
1069                                 } else if ($feed < -10) { // label
1070
1071                                         $label_id = -$feed - 11;
1072
1073                                         db_query($link, "UPDATE ttrss_user_entries, ttrss_user_labels2
1074                                                 SET unread = false, last_read = NOW()
1075                                                         WHERE label_id = '$label_id' AND unread = true
1076                                                         AND $ref_check_qpart
1077                                                         AND owner_uid = '$owner_uid' AND ref_id = article_id");
1078
1079                                 }
1080
1081                                 ccache_update($link, $feed, $owner_uid, $cat_view);
1082
1083                         } else { // tag
1084                                 db_query($link, "BEGIN");
1085
1086                                 $tag_name = db_escape_string($feed);
1087
1088                                 $result = db_query($link, "SELECT post_int_id FROM ttrss_tags
1089                                         WHERE tag_name = '$tag_name' AND owner_uid = $owner_uid");
1090
1091                                 while ($line = db_fetch_assoc($result)) {
1092                                         db_query($link, "UPDATE ttrss_user_entries SET
1093                                                 unread = false, last_read = NOW()
1094                                                 WHERE $ref_check_qpart AND unread = true
1095                                                 AND int_id = " . $line["post_int_id"]);
1096                                 }
1097                                 db_query($link, "COMMIT");
1098                         }
1099         }
1100
1101         function getAllCounters($link) {
1102                 $data = getGlobalCounters($link);
1103
1104                 $data = array_merge($data, getVirtCounters($link));
1105                 $data = array_merge($data, getLabelCounters($link));
1106                 $data = array_merge($data, getFeedCounters($link, $active_feed));
1107                 $data = array_merge($data, getCategoryCounters($link));
1108
1109                 return $data;
1110         }
1111
1112         function getCategoryTitle($link, $cat_id) {
1113
1114                 if ($cat_id == -1) {
1115                         return __("Special");
1116                 } else if ($cat_id == -2) {
1117                         return __("Labels");
1118                 } else {
1119
1120                         $result = db_query($link, "SELECT title FROM ttrss_feed_categories WHERE
1121                                 id = '$cat_id'");
1122
1123                         if (db_num_rows($result) == 1) {
1124                                 return db_fetch_result($result, 0, "title");
1125                         } else {
1126                                 return __("Uncategorized");
1127                         }
1128                 }
1129         }
1130
1131
1132         function getCategoryCounters($link) {
1133                 $ret_arr = array();
1134
1135                 /* Labels category */
1136
1137                 $cv = array("id" => -2, "kind" => "cat",
1138                         "counter" => getCategoryUnread($link, -2));
1139
1140                 array_push($ret_arr, $cv);
1141
1142                 $result = db_query($link, "SELECT id AS cat_id, value AS unread,
1143                         (SELECT COUNT(id) FROM ttrss_feed_categories AS c2
1144                                 WHERE c2.parent_cat = ttrss_feed_categories.id) AS num_children
1145                         FROM ttrss_feed_categories, ttrss_cat_counters_cache
1146                         WHERE ttrss_cat_counters_cache.feed_id = id AND
1147                         ttrss_cat_counters_cache.owner_uid = ttrss_feed_categories.owner_uid AND
1148                         ttrss_feed_categories.owner_uid = " . $_SESSION["uid"]);
1149
1150                 while ($line = db_fetch_assoc($result)) {
1151                         $line["cat_id"] = (int) $line["cat_id"];
1152
1153                         if ($line["num_children"] > 0) {
1154                                 $child_counter = getCategoryChildrenUnread($link, $line["cat_id"], $_SESSION["uid"]);
1155                         } else {
1156                                 $child_counter = 0;
1157                         }
1158
1159                         $cv = array("id" => $line["cat_id"], "kind" => "cat",
1160                                 "counter" => $line["unread"] + $child_counter);
1161
1162                         array_push($ret_arr, $cv);
1163                 }
1164
1165                 /* Special case: NULL category doesn't actually exist in the DB */
1166
1167                 $cv = array("id" => 0, "kind" => "cat",
1168                         "counter" => (int) ccache_find($link, 0, $_SESSION["uid"], true));
1169
1170                 array_push($ret_arr, $cv);
1171
1172                 return $ret_arr;
1173         }
1174
1175         // only accepts real cats (>= 0)
1176         function getCategoryChildrenUnread($link, $cat, $owner_uid = false) {
1177                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1178
1179                 $result = db_query($link, "SELECT id FROM ttrss_feed_categories WHERE parent_cat = '$cat'
1180                                 AND owner_uid = $owner_uid");
1181
1182                 $unread = 0;
1183
1184                 while ($line = db_fetch_assoc($result)) {
1185                         $unread += getCategoryUnread($link, $line["id"], $owner_uid);
1186                         $unread += getCategoryChildrenUnread($link, $line["id"], $owner_uid);
1187                 }
1188
1189                 return $unread;
1190         }
1191
1192         function getCategoryUnread($link, $cat, $owner_uid = false) {
1193
1194                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1195
1196                 if ($cat >= 0) {
1197
1198                         if ($cat != 0) {
1199                                 $cat_query = "cat_id = '$cat'";
1200                         } else {
1201                                 $cat_query = "cat_id IS NULL";
1202                         }
1203
1204                         $result = db_query($link, "SELECT id FROM ttrss_feeds WHERE $cat_query
1205                                         AND owner_uid = " . $owner_uid);
1206
1207                         $cat_feeds = array();
1208                         while ($line = db_fetch_assoc($result)) {
1209                                 array_push($cat_feeds, "feed_id = " . $line["id"]);
1210                         }
1211
1212                         if (count($cat_feeds) == 0) return 0;
1213
1214                         $match_part = implode(" OR ", $cat_feeds);
1215
1216                         $result = db_query($link, "SELECT COUNT(int_id) AS unread
1217                                 FROM ttrss_user_entries
1218                                 WHERE   unread = true AND ($match_part)
1219                                 AND owner_uid = " . $owner_uid);
1220
1221                         $unread = 0;
1222
1223                         # this needs to be rewritten
1224                         while ($line = db_fetch_assoc($result)) {
1225                                 $unread += $line["unread"];
1226                         }
1227
1228                         return $unread;
1229                 } else if ($cat == -1) {
1230                         return getFeedUnread($link, -1) + getFeedUnread($link, -2) + getFeedUnread($link, -3) + getFeedUnread($link, 0);
1231                 } else if ($cat == -2) {
1232
1233                         $result = db_query($link, "
1234                                 SELECT COUNT(unread) AS unread FROM
1235                                         ttrss_user_entries, ttrss_user_labels2
1236                                 WHERE article_id = ref_id AND unread = true
1237                                         AND ttrss_user_entries.owner_uid = '$owner_uid'");
1238
1239                         $unread = db_fetch_result($result, 0, "unread");
1240
1241                         return $unread;
1242
1243                 }
1244         }
1245
1246         function getFeedUnread($link, $feed, $is_cat = false) {
1247                 return getFeedArticles($link, $feed, $is_cat, true, $_SESSION["uid"]);
1248         }
1249
1250         function getLabelUnread($link, $label_id, $owner_uid = false) {
1251                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1252
1253                 $result = db_query($link, "SELECT COUNT(ref_id) AS unread FROM ttrss_user_entries, ttrss_user_labels2
1254                         WHERE owner_uid = '$owner_uid' AND unread = true AND label_id = '$label_id' AND article_id = ref_id");
1255
1256                 if (db_num_rows($result) != 0) {
1257                         return db_fetch_result($result, 0, "unread");
1258                 } else {
1259                         return 0;
1260                 }
1261         }
1262
1263         function getFeedArticles($link, $feed, $is_cat = false, $unread_only = false,
1264                 $owner_uid = false) {
1265
1266                 $n_feed = (int) $feed;
1267                 $need_entries = false;
1268
1269                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1270
1271                 if ($unread_only) {
1272                         $unread_qpart = "unread = true";
1273                 } else {
1274                         $unread_qpart = "true";
1275                 }
1276
1277                 if ($is_cat) {
1278                         return getCategoryUnread($link, $n_feed, $owner_uid);
1279                 } else if ($n_feed == -6) {
1280                         return 0;
1281                 } else if ($feed != "0" && $n_feed == 0) {
1282
1283                         $feed = db_escape_string($feed);
1284
1285                         $result = db_query($link, "SELECT SUM((SELECT COUNT(int_id)
1286                                 FROM ttrss_user_entries,ttrss_entries WHERE int_id = post_int_id
1287                                         AND ref_id = id AND $unread_qpart)) AS count FROM ttrss_tags
1288                                 WHERE owner_uid = $owner_uid AND tag_name = '$feed'");
1289                         return db_fetch_result($result, 0, "count");
1290
1291                 } else if ($n_feed == -1) {
1292                         $match_part = "marked = true";
1293                 } else if ($n_feed == -2) {
1294                         $match_part = "published = true";
1295                 } else if ($n_feed == -3) {
1296                         $match_part = "unread = true AND score >= 0";
1297
1298                         $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE", $owner_uid);
1299
1300                         if (DB_TYPE == "pgsql") {
1301                                 $match_part .= " AND updated > NOW() - INTERVAL '$intl hour' ";
1302                         } else {
1303                                 $match_part .= " AND updated > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
1304                         }
1305
1306                         $need_entries = true;
1307
1308                 } else if ($n_feed == -4) {
1309                         $match_part = "true";
1310                 } else if ($n_feed >= 0) {
1311
1312                         if ($n_feed != 0) {
1313                                 $match_part = "feed_id = '$n_feed'";
1314                         } else {
1315                                 $match_part = "feed_id IS NULL";
1316                         }
1317
1318                 } else if ($feed < -10) {
1319
1320                         $label_id = -$feed - 11;
1321
1322                         return getLabelUnread($link, $label_id, $owner_uid);
1323
1324                 }
1325
1326                 if ($match_part) {
1327
1328                         if ($need_entries) {
1329                                 $from_qpart = "ttrss_user_entries,ttrss_entries";
1330                                 $from_where = "ttrss_entries.id = ttrss_user_entries.ref_id AND";
1331                         } else {
1332                                 $from_qpart = "ttrss_user_entries";
1333                         }
1334
1335                         $query = "SELECT count(int_id) AS unread
1336                                 FROM $from_qpart WHERE
1337                                 $unread_qpart AND $from_where ($match_part) AND ttrss_user_entries.owner_uid = $owner_uid";
1338
1339                         //echo "[$feed/$query]\n";
1340
1341                         $result = db_query($link, $query);
1342
1343                 } else {
1344
1345                         $result = db_query($link, "SELECT COUNT(post_int_id) AS unread
1346                                 FROM ttrss_tags,ttrss_user_entries,ttrss_entries
1347                                 WHERE tag_name = '$feed' AND post_int_id = int_id AND ref_id = ttrss_entries.id
1348                                 AND $unread_qpart AND ttrss_tags.owner_uid = " . $owner_uid);
1349                 }
1350
1351                 $unread = db_fetch_result($result, 0, "unread");
1352
1353                 return $unread;
1354         }
1355
1356         function getGlobalUnread($link, $user_id = false) {
1357
1358                 if (!$user_id) {
1359                         $user_id = $_SESSION["uid"];
1360                 }
1361
1362                 $result = db_query($link, "SELECT SUM(value) AS c_id FROM ttrss_counters_cache
1363                         WHERE owner_uid = '$user_id' AND feed_id > 0");
1364
1365                 $c_id = db_fetch_result($result, 0, "c_id");
1366
1367                 return $c_id;
1368         }
1369
1370         function getGlobalCounters($link, $global_unread = -1) {
1371                 $ret_arr = array();
1372
1373                 if ($global_unread == -1) {
1374                         $global_unread = getGlobalUnread($link);
1375                 }
1376
1377                 $cv = array("id" => "global-unread",
1378                         "counter" => (int) $global_unread);
1379
1380                 array_push($ret_arr, $cv);
1381
1382                 $result = db_query($link, "SELECT COUNT(id) AS fn FROM
1383                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1384
1385                 $subscribed_feeds = db_fetch_result($result, 0, "fn");
1386
1387                 $cv = array("id" => "subscribed-feeds",
1388                         "counter" => (int) $subscribed_feeds);
1389
1390                 array_push($ret_arr, $cv);
1391
1392                 return $ret_arr;
1393         }
1394
1395         function getVirtCounters($link) {
1396
1397                 $ret_arr = array();
1398
1399                 for ($i = 0; $i >= -4; $i--) {
1400
1401                         $count = getFeedUnread($link, $i);
1402
1403                         $cv = array("id" => $i,
1404                                 "counter" => (int) $count);
1405
1406 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1407 //                              $cv["xmsg"] = getFeedArticles($link, $i)." ".__("total");
1408
1409                         array_push($ret_arr, $cv);
1410                 }
1411
1412                 return $ret_arr;
1413         }
1414
1415         function getLabelCounters($link, $descriptions = false) {
1416
1417                 $ret_arr = array();
1418
1419                 $owner_uid = $_SESSION["uid"];
1420
1421                 $result = db_query($link, "SELECT id,caption,COUNT(unread) AS unread
1422                         FROM ttrss_labels2 LEFT JOIN ttrss_user_labels2 ON
1423                                 (ttrss_labels2.id = label_id)
1424                                         LEFT JOIN ttrss_user_entries ON (ref_id = article_id AND unread = true)
1425                                 WHERE ttrss_labels2.owner_uid = $owner_uid GROUP BY ttrss_labels2.id,
1426                                         ttrss_labels2.caption");
1427
1428                 while ($line = db_fetch_assoc($result)) {
1429
1430                         $id = -$line["id"] - 11;
1431
1432                         $label_name = $line["caption"];
1433                         $count = $line["unread"];
1434
1435                         $cv = array("id" => $id,
1436                                 "counter" => (int) $count);
1437
1438                         if ($descriptions)
1439                                 $cv["description"] = $label_name;
1440
1441 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1442 //                              $cv["xmsg"] = getFeedArticles($link, $id)." ".__("total");
1443
1444                         array_push($ret_arr, $cv);
1445                 }
1446
1447                 return $ret_arr;
1448         }
1449
1450         function getFeedCounters($link, $active_feed = false) {
1451
1452                 $ret_arr = array();
1453
1454                 $query = "SELECT ttrss_feeds.id,
1455                                 ttrss_feeds.title,
1456                                 ".SUBSTRING_FOR_DATE."(ttrss_feeds.last_updated,1,19) AS last_updated,
1457                                 last_error, value AS count
1458                         FROM ttrss_feeds, ttrss_counters_cache
1459                         WHERE ttrss_feeds.owner_uid = ".$_SESSION["uid"]."
1460                                 AND ttrss_counters_cache.owner_uid = ttrss_feeds.owner_uid
1461                                 AND ttrss_counters_cache.feed_id = id";
1462
1463                 $result = db_query($link, $query);
1464                 $fctrs_modified = false;
1465
1466                 while ($line = db_fetch_assoc($result)) {
1467
1468                         $id = $line["id"];
1469                         $count = $line["count"];
1470                         $last_error = htmlspecialchars($line["last_error"]);
1471
1472                         $last_updated = make_local_datetime($link, $line['last_updated'], false);
1473
1474                         $has_img = feed_has_icon($id);
1475
1476                         if (date('Y') - date('Y', strtotime($line['last_updated'])) > 2)
1477                                 $last_updated = '';
1478
1479                         $cv = array("id" => $id,
1480                                 "updated" => $last_updated,
1481                                 "counter" => (int) $count,
1482                                 "has_img" => (int) $has_img);
1483
1484                         if ($last_error)
1485                                 $cv["error"] = $last_error;
1486
1487 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1488 //                              $cv["xmsg"] = getFeedArticles($link, $id)." ".__("total");
1489
1490                         if ($active_feed && $id == $active_feed)
1491                                 $cv["title"] = truncate_string($line["title"], 30);
1492
1493                         array_push($ret_arr, $cv);
1494
1495                 }
1496
1497                 return $ret_arr;
1498         }
1499
1500         function get_pgsql_version($link) {
1501                 $result = db_query($link, "SELECT version() AS version");
1502                 $version = explode(" ", db_fetch_result($result, 0, "version"));
1503                 return $version[1];
1504         }
1505
1506         /**
1507          * @return array (code => Status code, message => error message if available)
1508          *
1509          *                 0 - OK, Feed already exists
1510          *                 1 - OK, Feed added
1511          *                 2 - Invalid URL
1512          *                 3 - URL content is HTML, no feeds available
1513          *                 4 - URL content is HTML which contains multiple feeds.
1514          *                     Here you should call extractfeedurls in rpc-backend
1515          *                     to get all possible feeds.
1516          *                 5 - Couldn't download the URL content.
1517          */
1518         function subscribe_to_feed($link, $url, $cat_id = 0,
1519                         $auth_login = '', $auth_pass = '', $need_auth = false) {
1520
1521                 global $fetch_last_error;
1522
1523                 require_once "include/rssfuncs.php";
1524
1525                 $url = fix_url($url);
1526
1527                 if (!$url || !validate_feed_url($url)) return array("code" => 2);
1528
1529                 $contents = @fetch_file_contents($url, false, $auth_login, $auth_pass);
1530
1531                 if (!$contents) {
1532                         return array("code" => 5, "message" => $fetch_last_error);
1533                 }
1534
1535                 if (is_html($contents)) {
1536                         $feedUrls = get_feeds_from_html($url, $contents);
1537
1538                         if (count($feedUrls) == 0) {
1539                                 return array("code" => 3);
1540                         } else if (count($feedUrls) > 1) {
1541                                 return array("code" => 4, "feeds" => $feedUrls);
1542                         }
1543                         //use feed url as new URL
1544                         $url = key($feedUrls);
1545                 }
1546
1547                 if ($cat_id == "0" || !$cat_id) {
1548                         $cat_qpart = "NULL";
1549                 } else {
1550                         $cat_qpart = "'$cat_id'";
1551                 }
1552
1553                 $result = db_query($link,
1554                         "SELECT id FROM ttrss_feeds
1555                         WHERE feed_url = '$url' AND owner_uid = ".$_SESSION["uid"]);
1556
1557                 if (db_num_rows($result) == 0) {
1558                         $result = db_query($link,
1559                                 "INSERT INTO ttrss_feeds
1560                                         (owner_uid,feed_url,title,cat_id, auth_login,auth_pass,update_method)
1561                                 VALUES ('".$_SESSION["uid"]."', '$url',
1562                                 '[Unknown]', $cat_qpart, '$auth_login', '$auth_pass', 0)");
1563
1564                         $result = db_query($link,
1565                                 "SELECT id FROM ttrss_feeds WHERE feed_url = '$url'
1566                                         AND owner_uid = " . $_SESSION["uid"]);
1567
1568                         $feed_id = db_fetch_result($result, 0, "id");
1569
1570                         if ($feed_id) {
1571                                 update_rss_feed($link, $feed_id, true);
1572                         }
1573
1574                         return array("code" => 1);
1575                 } else {
1576                         return array("code" => 0);
1577                 }
1578         }
1579
1580         function print_feed_select($link, $id, $default_id = "",
1581                 $attributes = "", $include_all_feeds = true,
1582                 $root_id = false, $nest_level = 0) {
1583
1584                 if (!$root_id) {
1585                         print "<select id=\"$id\" name=\"$id\" $attributes>";
1586                         if ($include_all_feeds) {
1587                                 $is_selected = ("0" == $default_id) ? "selected=\"1\"" : "";
1588                                 print "<option $is_selected value=\"0\">".__('All feeds')."</option>";
1589                         }
1590                 }
1591
1592                 if (get_pref($link, 'ENABLE_FEED_CATS')) {
1593
1594                         if ($root_id)
1595                                 $parent_qpart = "parent_cat = '$root_id'";
1596                         else
1597                                 $parent_qpart = "parent_cat IS NULL";
1598
1599                         $result = db_query($link, "SELECT id,title,
1600                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1601                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1602                                 FROM ttrss_feed_categories
1603                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1604
1605                         while ($line = db_fetch_assoc($result)) {
1606
1607                                 for ($i = 0; $i < $nest_level; $i++)
1608                                         $line["title"] = " - " . $line["title"];
1609
1610                                 $is_selected = ("CAT:".$line["id"] == $default_id) ? "selected=\"1\"" : "";
1611
1612                                 printf("<option $is_selected value='CAT:%d'>%s</option>",
1613                                         $line["id"], htmlspecialchars($line["title"]));
1614
1615                                 if ($line["num_children"] > 0)
1616                                         print_feed_select($link, $id, $default_id, $attributes,
1617                                                 $include_all_feeds, $line["id"], $nest_level+1);
1618
1619                                 $feed_result = db_query($link, "SELECT id,title FROM ttrss_feeds
1620                                         WHERE cat_id = '".$line["id"]."' AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1621
1622                                 while ($fline = db_fetch_assoc($feed_result)) {
1623                                         $is_selected = ($fline["id"] == $default_id) ? "selected=\"1\"" : "";
1624
1625                                         $fline["title"] = " + " . $fline["title"];
1626
1627                                         for ($i = 0; $i < $nest_level; $i++)
1628                                                 $fline["title"] = " - " . $fline["title"];
1629
1630                                         printf("<option $is_selected value='%d'>%s</option>",
1631                                                 $fline["id"], htmlspecialchars($fline["title"]));
1632                                 }
1633                         }
1634
1635                         if (!$root_id) {
1636                                 $is_selected = ($default_id == "CAT:0") ? "selected=\"1\"" : "";
1637
1638                                 printf("<option $is_selected value='CAT:0'>%s</option>",
1639                                         __("Uncategorized"));
1640
1641                                 $feed_result = db_query($link, "SELECT id,title FROM ttrss_feeds
1642                                         WHERE cat_id IS NULL AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1643
1644                                 while ($fline = db_fetch_assoc($feed_result)) {
1645                                         $is_selected = ($fline["id"] == $default_id && !$default_is_cat) ? "selected=\"1\"" : "";
1646
1647                                         $fline["title"] = " + " . $fline["title"];
1648
1649                                         for ($i = 0; $i < $nest_level; $i++)
1650                                                 $fline["title"] = " - " . $fline["title"];
1651
1652                                         printf("<option $is_selected value='%d'>%s</option>",
1653                                                 $fline["id"], htmlspecialchars($fline["title"]));
1654                                 }
1655                         }
1656
1657                 } else {
1658                         $result = db_query($link, "SELECT id,title FROM ttrss_feeds
1659                                 WHERE owner_uid = ".$_SESSION["uid"]." ORDER BY title");
1660
1661                         while ($line = db_fetch_assoc($result)) {
1662
1663                                 $is_selected = ($line["id"] == $default_id) ? "selected=\"1\"" : "";
1664
1665                                 printf("<option $is_selected value='%d'>%s</option>",
1666                                         $line["id"], htmlspecialchars($line["title"]));
1667                         }
1668                 }
1669
1670                 if (!$root_id) {
1671                         print "</select>";
1672                 }
1673         }
1674
1675         function print_feed_cat_select($link, $id, $default_id,
1676                 $attributes, $include_all_cats = true, $root_id = false, $nest_level = 0) {
1677
1678                         if (!$root_id) {
1679                                         print "<select id=\"$id\" name=\"$id\" default=\"$default_id\" onchange=\"catSelectOnChange(this)\" $attributes>";
1680                         }
1681
1682                         if ($root_id)
1683                                 $parent_qpart = "parent_cat = '$root_id'";
1684                         else
1685                                 $parent_qpart = "parent_cat IS NULL";
1686
1687                         $result = db_query($link, "SELECT id,title,
1688                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1689                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1690                                 FROM ttrss_feed_categories
1691                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1692
1693                         while ($line = db_fetch_assoc($result)) {
1694                                 if ($line["id"] == $default_id) {
1695                                         $is_selected = "selected=\"1\"";
1696                                 } else {
1697                                         $is_selected = "";
1698                                 }
1699
1700                                 for ($i = 0; $i < $nest_level; $i++)
1701                                         $line["title"] = " - " . $line["title"];
1702
1703                                 if ($line["title"])
1704                                         printf("<option $is_selected value='%d'>%s</option>",
1705                                                 $line["id"], htmlspecialchars($line["title"]));
1706
1707                                 if ($line["num_children"] > 0)
1708                                         print_feed_cat_select($link, $id, $default_id, $attributes,
1709                                                 $include_all_cats, $line["id"], $nest_level+1);
1710                         }
1711
1712                         if (!$root_id) {
1713                                 if ($include_all_cats) {
1714                                         if (db_num_rows($result) > 0) {
1715                                                 print "<option disabled=\"1\">--------</option>";
1716                                         }
1717
1718                                         if ($default_id == 0) {
1719                                                 $is_selected = "selected=\"1\"";
1720                                         } else {
1721                                                 $is_selected = "";
1722                                         }
1723
1724                                         print "<option $is_selected value=\"0\">".__('Uncategorized')."</option>";
1725                                 }
1726                                 print "</select>";
1727                         }
1728                 }
1729
1730         function checkbox_to_sql_bool($val) {
1731                 return ($val == "on") ? "true" : "false";
1732         }
1733
1734         function getFeedCatTitle($link, $id) {
1735                 if ($id == -1) {
1736                         return __("Special");
1737                 } else if ($id < -10) {
1738                         return __("Labels");
1739                 } else if ($id > 0) {
1740                         $result = db_query($link, "SELECT ttrss_feed_categories.title
1741                                 FROM ttrss_feeds, ttrss_feed_categories WHERE ttrss_feeds.id = '$id' AND
1742                                         cat_id = ttrss_feed_categories.id");
1743                         if (db_num_rows($result) == 1) {
1744                                 return db_fetch_result($result, 0, "title");
1745                         } else {
1746                                 return __("Uncategorized");
1747                         }
1748                 } else {
1749                         return "getFeedCatTitle($id) failed";
1750                 }
1751
1752         }
1753
1754         function getFeedIcon($id) {
1755                 switch ($id) {
1756                 case 0:
1757                         return "images/archive.png";
1758                         break;
1759                 case -1:
1760                         return "images/mark_set.svg";
1761                         break;
1762                 case -2:
1763                         return "images/pub_set.svg";
1764                         break;
1765                 case -3:
1766                         return "images/fresh.png";
1767                         break;
1768                 case -4:
1769                         return "images/tag.png";
1770                         break;
1771                 case -6:
1772                         return "images/recently_read.png";
1773                         break;
1774                 default:
1775                         if ($id < -10) {
1776                                 return "images/label.png";
1777                         } else {
1778                                 if (file_exists(ICONS_DIR . "/$id.ico"))
1779                                         return ICONS_URL . "/$id.ico";
1780                         }
1781                         break;
1782                 }
1783         }
1784
1785         function getFeedTitle($link, $id, $cat = false) {
1786                 if ($cat) {
1787                         return getCategoryTitle($link, $id);
1788                 } else if ($id == -1) {
1789                         return __("Starred articles");
1790                 } else if ($id == -2) {
1791                         return __("Published articles");
1792                 } else if ($id == -3) {
1793                         return __("Fresh articles");
1794                 } else if ($id == -4) {
1795                         return __("All articles");
1796                 } else if ($id === 0 || $id === "0") {
1797                         return __("Archived articles");
1798                 } else if ($id == -6) {
1799                         return __("Recently read");
1800                 } else if ($id < -10) {
1801                         $label_id = -$id - 11;
1802                         $result = db_query($link, "SELECT caption FROM ttrss_labels2 WHERE id = '$label_id'");
1803                         if (db_num_rows($result) == 1) {
1804                                 return db_fetch_result($result, 0, "caption");
1805                         } else {
1806                                 return "Unknown label ($label_id)";
1807                         }
1808
1809                 } else if (is_numeric($id) && $id > 0) {
1810                         $result = db_query($link, "SELECT title FROM ttrss_feeds WHERE id = '$id'");
1811                         if (db_num_rows($result) == 1) {
1812                                 return db_fetch_result($result, 0, "title");
1813                         } else {
1814                                 return "Unknown feed ($id)";
1815                         }
1816                 } else {
1817                         return $id;
1818                 }
1819         }
1820
1821         function make_init_params($link) {
1822                 $params = array();
1823
1824                 $params["sign_progress"] = theme_image($link, "images/indicator_white.gif");
1825                 $params["sign_progress_tiny"] = theme_image($link, "images/indicator_tiny.gif");
1826                 $params["sign_excl"] = theme_image($link, "images/sign_excl.svg");
1827                 $params["sign_info"] = theme_image($link, "images/sign_info.svg");
1828
1829                 foreach (array("ON_CATCHUP_SHOW_NEXT_FEED", "HIDE_READ_FEEDS",
1830                         "ENABLE_FEED_CATS", "FEEDS_SORT_BY_UNREAD", "CONFIRM_FEED_CATCHUP",
1831                         "CDM_AUTO_CATCHUP", "FRESH_ARTICLE_MAX_AGE", "DEFAULT_ARTICLE_LIMIT",
1832                         "HIDE_READ_SHOWS_SPECIAL", "COMBINED_DISPLAY_MODE") as $param) {
1833
1834                                  $params[strtolower($param)] = (int) get_pref($link, $param);
1835                  }
1836
1837                 $params["icons_url"] = ICONS_URL;
1838                 $params["cookie_lifetime"] = SESSION_COOKIE_LIFETIME;
1839                 $params["default_view_mode"] = get_pref($link, "_DEFAULT_VIEW_MODE");
1840                 $params["default_view_limit"] = (int) get_pref($link, "_DEFAULT_VIEW_LIMIT");
1841                 $params["default_view_order_by"] = get_pref($link, "_DEFAULT_VIEW_ORDER_BY");
1842                 $params["bw_limit"] = (int) $_SESSION["bw_limit"];
1843
1844                 $result = db_query($link, "SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
1845                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1846
1847                 $max_feed_id = db_fetch_result($result, 0, "mid");
1848                 $num_feeds = db_fetch_result($result, 0, "nf");
1849
1850                 $params["max_feed_id"] = (int) $max_feed_id;
1851                 $params["num_feeds"] = (int) $num_feeds;
1852
1853                 $params["collapsed_feedlist"] = (int) get_pref($link, "_COLLAPSED_FEEDLIST");
1854                 $params["hotkeys"] = get_hotkeys_map($link);
1855
1856                 $params["csrf_token"] = $_SESSION["csrf_token"];
1857                 $params["widescreen"] = (int) $_COOKIE["ttrss_widescreen"];
1858
1859                 $params['simple_update'] = defined('SIMPLE_UPDATE_MODE') && SIMPLE_UPDATE_MODE;
1860
1861                 return $params;
1862         }
1863
1864         function get_hotkeys_info($link) {
1865                 $hotkeys = array(
1866                         __("Navigation") => array(
1867                                 "next_feed" => __("Open next feed"),
1868                                 "prev_feed" => __("Open previous feed"),
1869                                 "next_article" => __("Open next article"),
1870                                 "prev_article" => __("Open previous article"),
1871                                 "next_article_noscroll" => __("Open next article (don't scroll long articles)"),
1872                                 "prev_article_noscroll" => __("Open previous article (don't scroll long articles)"),
1873                                 "search_dialog" => __("Show search dialog")),
1874                         __("Article") => array(
1875                                 "toggle_mark" => __("Toggle starred"),
1876                                 "toggle_publ" => __("Toggle published"),
1877                                 "toggle_unread" => __("Toggle unread"),
1878                                 "edit_tags" => __("Edit tags"),
1879                                 "dismiss_selected" => __("Dismiss selected"),
1880                                 "dismiss_read" => __("Dismiss read"),
1881                                 "open_in_new_window" => __("Open in new window"),
1882                                 "catchup_below" => __("Mark below as read"),
1883                                 "catchup_above" => __("Mark above as read"),
1884                                 "article_scroll_down" => __("Scroll down"),
1885                                 "article_scroll_up" => __("Scroll up"),
1886                                 "select_article_cursor" => __("Select article under cursor"),
1887                                 "email_article" => __("Email article"),
1888                                 "close_article" => __("Close article"),
1889                                 "toggle_widescreen" => __("Toggle widescreen mode")),
1890                         __("Article selection") => array(
1891                                 "select_all" => __("Select all articles"),
1892                                 "select_unread" => __("Select unread"),
1893                                 "select_marked" => __("Select starred"),
1894                                 "select_published" => __("Select published"),
1895                                 "select_invert" => __("Invert selection"),
1896                                 "select_none" => __("Deselect everything")),
1897                         __("Feed") => array(
1898                                 "feed_refresh" => __("Refresh current feed"),
1899                                 "feed_unhide_read" => __("Un/hide read feeds"),
1900                                 "feed_subscribe" => __("Subscribe to feed"),
1901                                 "feed_edit" => __("Edit feed"),
1902                                 "feed_catchup" => __("Mark as read"),
1903                                 "feed_reverse" => __("Reverse headlines"),
1904                                 "feed_debug_update" => __("Debug feed update"),
1905                                 "catchup_all" => __("Mark all feeds as read"),
1906                                 "cat_toggle_collapse" => __("Un/collapse current category"),
1907                                 "toggle_combined_mode" => __("Toggle combined mode")),
1908                         __("Go to") => array(
1909                                 "goto_all" => __("All articles"),
1910                                 "goto_fresh" => __("Fresh"),
1911                                 "goto_marked" => __("Starred"),
1912                                 "goto_published" => __("Published"),
1913                                 "goto_tagcloud" => __("Tag cloud"),
1914                                 "goto_prefs" => __("Preferences")),
1915                         __("Other") => array(
1916                                 "create_label" => __("Create label"),
1917                                 "create_filter" => __("Create filter"),
1918                                 "collapse_sidebar" => __("Un/collapse sidebar"),
1919                                 "help_dialog" => __("Show help dialog"))
1920                         );
1921
1922                 return $hotkeys;
1923         }
1924
1925         function get_hotkeys_map($link) {
1926                 $hotkeys = array(
1927 //                      "navigation" => array(
1928                                 "k" => "next_feed",
1929                                 "j" => "prev_feed",
1930                                 "n" => "next_article",
1931                                 "p" => "prev_article",
1932                                 "(38)|up" => "prev_article",
1933                                 "(40)|down" => "next_article",
1934 //                              "^(38)|Ctrl-up" => "prev_article_noscroll",
1935 //                              "^(40)|Ctrl-down" => "next_article_noscroll",
1936                                 "(191)|/" => "search_dialog",
1937 //                      "article" => array(
1938                                 "s" => "toggle_mark",
1939                                 "*s" => "toggle_publ",
1940                                 "u" => "toggle_unread",
1941                                 "*t" => "edit_tags",
1942                                 "*d" => "dismiss_selected",
1943                                 "*x" => "dismiss_read",
1944                                 "o" => "open_in_new_window",
1945                                 "c p" => "catchup_below",
1946                                 "c n" => "catchup_above",
1947                                 "*n" => "article_scroll_down",
1948                                 "*p" => "article_scroll_up",
1949                                 "*(38)|Shift+up" => "article_scroll_up",
1950                                 "*(40)|Shift+down" => "article_scroll_down",
1951                                 "a *w" => "toggle_widescreen",
1952                                 "e" => "email_article",
1953                                 "a q" => "close_article",
1954 //                      "article_selection" => array(
1955                                 "a a" => "select_all",
1956                                 "a u" => "select_unread",
1957                                 "a *u" => "select_marked",
1958                                 "a p" => "select_published",
1959                                 "a i" => "select_invert",
1960                                 "a n" => "select_none",
1961 //                      "feed" => array(
1962                                 "f r" => "feed_refresh",
1963                                 "f a" => "feed_unhide_read",
1964                                 "f s" => "feed_subscribe",
1965                                 "f e" => "feed_edit",
1966                                 "f q" => "feed_catchup",
1967                                 "f x" => "feed_reverse",
1968                                 "f *d" => "feed_debug_update",
1969                                 "f *c" => "toggle_combined_mode",
1970                                 "*q" => "catchup_all",
1971                                 "x" => "cat_toggle_collapse",
1972 //                      "goto" => array(
1973                                 "g a" => "goto_all",
1974                                 "g f" => "goto_fresh",
1975                                 "g s" => "goto_marked",
1976                                 "g p" => "goto_published",
1977                                 "g t" => "goto_tagcloud",
1978                                 "g *p" => "goto_prefs",
1979 //                      "other" => array(
1980                                 "(9)|Tab" => "select_article_cursor", // tab
1981                                 "c l" => "create_label",
1982                                 "c f" => "create_filter",
1983                                 "c s" => "collapse_sidebar",
1984                                 "^(191)|Ctrl+/" => "help_dialog",
1985                         );
1986
1987                 if (get_pref($link, 'COMBINED_DISPLAY_MODE')) {
1988                         $hotkeys["^(38)|Ctrl-up"] = "prev_article_noscroll";
1989                         $hotkeys["^(40)|Ctrl-down"] = "next_article_noscroll";
1990                 }
1991
1992                 global $pluginhost;
1993                 foreach ($pluginhost->get_hooks($pluginhost::HOOK_HOTKEY_MAP) as $plugin) {
1994                         $hotkeys = $plugin->hook_hotkey_map($hotkeys);
1995                 }
1996
1997                 $prefixes = array();
1998
1999                 foreach (array_keys($hotkeys) as $hotkey) {
2000                         $pair = explode(" ", $hotkey, 2);
2001
2002                         if (count($pair) > 1 && !in_array($pair[0], $prefixes)) {
2003                                 array_push($prefixes, $pair[0]);
2004                         }
2005                 }
2006
2007                 return array($prefixes, $hotkeys);
2008         }
2009
2010         function make_runtime_info($link) {
2011                 $data = array();
2012
2013                 $result = db_query($link, "SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
2014                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
2015
2016                 $max_feed_id = db_fetch_result($result, 0, "mid");
2017                 $num_feeds = db_fetch_result($result, 0, "nf");
2018
2019                 $data["max_feed_id"] = (int) $max_feed_id;
2020                 $data["num_feeds"] = (int) $num_feeds;
2021
2022                 $data['last_article_id'] = getLastArticleId($link);
2023                 $data['cdm_expanded'] = get_pref($link, 'CDM_EXPANDED');
2024
2025                 if (file_exists(LOCK_DIRECTORY . "/update_daemon.lock")) {
2026
2027                         $data['daemon_is_running'] = (int) file_is_locked("update_daemon.lock");
2028
2029                         if (time() - $_SESSION["daemon_stamp_check"] > 30) {
2030
2031                                 $stamp = (int) @file_get_contents(LOCK_DIRECTORY . "/update_daemon.stamp");
2032
2033                                 if ($stamp) {
2034                                         $stamp_delta = time() - $stamp;
2035
2036                                         if ($stamp_delta > 1800) {
2037                                                 $stamp_check = 0;
2038                                         } else {
2039                                                 $stamp_check = 1;
2040                                                 $_SESSION["daemon_stamp_check"] = time();
2041                                         }
2042
2043                                         $data['daemon_stamp_ok'] = $stamp_check;
2044
2045                                         $stamp_fmt = date("Y.m.d, G:i", $stamp);
2046
2047                                         $data['daemon_stamp'] = $stamp_fmt;
2048                                 }
2049                         }
2050                 }
2051
2052                 if ($_SESSION["last_version_check"] + 86400 + rand(-1000, 1000) < time()) {
2053                                 $new_version_details = @check_for_update($link);
2054
2055                                 $data['new_version_available'] = (int) ($new_version_details != false);
2056
2057                                 $_SESSION["last_version_check"] = time();
2058                                 $_SESSION["version_data"] = $new_version_details;
2059                 }
2060
2061                 return $data;
2062         }
2063
2064         function search_to_sql($link, $search, $match_on) {
2065
2066                 $search_query_part = "";
2067
2068                 $keywords = explode(" ", $search);
2069                 $query_keywords = array();
2070
2071                 foreach ($keywords as $k) {
2072                         if (strpos($k, "-") === 0) {
2073                                 $k = substr($k, 1);
2074                                 $not = "NOT";
2075                         } else {
2076                                 $not = "";
2077                         }
2078
2079                         $commandpair = explode(":", mb_strtolower($k), 2);
2080
2081                         if ($commandpair[0] == "note" && $commandpair[1]) {
2082
2083                                 if ($commandpair[1] == "true")
2084                                         array_push($query_keywords, "($not (note IS NOT NULL AND note != ''))");
2085                                 else
2086                                         array_push($query_keywords, "($not (note IS NULL OR note = ''))");
2087
2088                         } else if ($commandpair[0] == "star" && $commandpair[1]) {
2089
2090                                 if ($commandpair[1] == "true")
2091                                         array_push($query_keywords, "($not (marked = true))");
2092                                 else
2093                                         array_push($query_keywords, "($not (marked = false))");
2094
2095                         } else if ($commandpair[0] == "pub" && $commandpair[1]) {
2096
2097                                 if ($commandpair[1] == "true")
2098                                         array_push($query_keywords, "($not (published = true))");
2099                                 else
2100                                         array_push($query_keywords, "($not (published = false))");
2101
2102                         } else if (strpos($k, "@") === 0) {
2103
2104                                 $user_tz_string = get_pref($link, 'USER_TIMEZONE', $_SESSION['uid']);
2105                                 $orig_ts = strtotime(substr($k, 1));
2106                                 $k = date("Y-m-d", convert_timestamp($orig_ts, $user_tz_string, 'UTC'));
2107
2108                                 //$k = date("Y-m-d", strtotime(substr($k, 1)));
2109
2110                                 array_push($query_keywords, "(".SUBSTRING_FOR_DATE."(updated,1,LENGTH('$k')) $not = '$k')");
2111                         } else if ($match_on == "both") {
2112                                 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2113                                                 OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2114                         } else if ($match_on == "title") {
2115                                 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%'))");
2116                         } else if ($match_on == "content") {
2117                                 array_push($query_keywords, "(UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2118                         }
2119                 }
2120
2121                 $search_query_part = implode("AND", $query_keywords);
2122
2123                 return $search_query_part;
2124         }
2125
2126         function getParentCategories($link, $cat, $owner_uid) {
2127                 $rv = array();
2128
2129                 $result = db_query($link, "SELECT parent_cat FROM ttrss_feed_categories
2130                         WHERE id = '$cat' AND parent_cat IS NOT NULL AND owner_uid = $owner_uid");
2131
2132                 while ($line = db_fetch_assoc($result)) {
2133                         array_push($rv, $line["parent_cat"]);
2134                         $rv = array_merge($rv, getParentCategories($link, $line["parent_cat"], $owner_uid));
2135                 }
2136
2137                 return $rv;
2138         }
2139
2140         function getChildCategories($link, $cat, $owner_uid) {
2141                 $rv = array();
2142
2143                 $result = db_query($link, "SELECT id FROM ttrss_feed_categories
2144                         WHERE parent_cat = '$cat' AND owner_uid = $owner_uid");
2145
2146                 while ($line = db_fetch_assoc($result)) {
2147                         array_push($rv, $line["id"]);
2148                         $rv = array_merge($rv, getChildCategories($link, $line["id"], $owner_uid));
2149                 }
2150
2151                 return $rv;
2152         }
2153
2154         function queryFeedHeadlines($link, $feed, $limit, $view_mode, $cat_view, $search, $search_mode, $match_on, $override_order = false, $offset = 0, $owner_uid = 0, $filter = false, $since_id = 0, $include_children = false, $ignore_vfeed_group = false) {
2155
2156                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2157
2158                 $ext_tables_part = "";
2159
2160                         if ($search) {
2161
2162                                 if (SPHINX_ENABLED) {
2163                                         $ids = join(",", @sphinx_search($search, 0, 500));
2164
2165                                         if ($ids)
2166                                                 $search_query_part = "ref_id IN ($ids) AND ";
2167                                         else
2168                                                 $search_query_part = "ref_id = -1 AND ";
2169
2170                                 } else {
2171                                         $search_query_part = search_to_sql($link, $search, $match_on);
2172                                         $search_query_part .= " AND ";
2173                                 }
2174
2175                         } else {
2176                                 $search_query_part = "";
2177                         }
2178
2179                         if ($filter) {
2180
2181                                 if (DB_TYPE == "pgsql") {
2182                                         $query_strategy_part .= " AND updated > NOW() - INTERVAL '14 days' ";
2183                                 } else {
2184                                         $query_strategy_part .= " AND updated > DATE_SUB(NOW(), INTERVAL 14 DAY) ";
2185                                 }
2186
2187                                 $override_order = "updated DESC";
2188
2189                                 $filter_query_part = filter_to_sql($link, $filter, $owner_uid);
2190
2191                                 // Try to check if SQL regexp implementation chokes on a valid regexp
2192                                 $result = db_query($link, "SELECT true AS true_val FROM ttrss_entries,
2193                                         ttrss_user_entries, ttrss_feeds, ttrss_feed_categories
2194                                         WHERE $filter_query_part LIMIT 1", false);
2195
2196                                 if ($result) {
2197                                         $test = db_fetch_result($result, 0, "true_val");
2198
2199                                         if (!$test) {
2200                                                 $filter_query_part = "false AND";
2201                                         } else {
2202                                                 $filter_query_part .= " AND";
2203                                         }
2204                                 } else {
2205                                         $filter_query_part = "false AND";
2206                                 }
2207
2208                         } else {
2209                                 $filter_query_part = "";
2210                         }
2211
2212                         if ($since_id) {
2213                                 $since_id_part = "ttrss_entries.id > $since_id AND ";
2214                         } else {
2215                                 $since_id_part = "";
2216                         }
2217
2218                         $view_query_part = "";
2219
2220                         if ($view_mode == "adaptive" || $view_query_part == "noscores") {
2221                                 if ($search) {
2222                                         $view_query_part = " ";
2223                                 } else if ($feed != -1) {
2224                                         $unread = getFeedUnread($link, $feed, $cat_view);
2225
2226                                         if ($cat_view && $feed > 0 && $include_children)
2227                                                 $unread += getCategoryChildrenUnread($link, $feed);
2228
2229                                         if ($unread > 0) {
2230                                                 $view_query_part = " unread = true AND ";
2231                                         }
2232                                 }
2233                         }
2234
2235                         if ($view_mode == "marked") {
2236                                 $view_query_part = " marked = true AND ";
2237                         }
2238
2239                         if ($view_mode == "published") {
2240                                 $view_query_part = " published = true AND ";
2241                         }
2242
2243                         if ($view_mode == "unread") {
2244                                 $view_query_part = " unread = true AND ";
2245                         }
2246
2247                         if ($view_mode == "updated") {
2248                                 $view_query_part = " (last_read is null and unread = false) AND ";
2249                         }
2250
2251                         if ($limit > 0) {
2252                                 $limit_query_part = "LIMIT " . $limit;
2253                         }
2254
2255                         $allow_archived = false;
2256
2257                         $vfeed_query_part = "";
2258
2259                         // override query strategy and enable feed display when searching globally
2260                         if ($search && $search_mode == "all_feeds") {
2261                                 $query_strategy_part = "true";
2262                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2263                         /* tags */
2264                         } else if (!is_numeric($feed)) {
2265                                 $query_strategy_part = "true";
2266                                 $vfeed_query_part = "(SELECT title FROM ttrss_feeds WHERE
2267                                         id = feed_id) as feed_title,";
2268                         } else if ($search && $search_mode == "this_cat") {
2269                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2270
2271                                 if ($feed > 0) {
2272                                         if ($include_children) {
2273                                                 $subcats = getChildCategories($link, $feed, $owner_uid);
2274                                                 array_push($subcats, $feed);
2275                                                 $cats_qpart = join(",", $subcats);
2276                                         } else {
2277                                                 $cats_qpart = $feed;
2278                                         }
2279
2280                                         $query_strategy_part = "ttrss_feeds.cat_id IN ($cats_qpart)";
2281
2282                                 } else {
2283                                         $query_strategy_part = "ttrss_feeds.cat_id IS NULL";
2284                                 }
2285
2286                         } else if ($feed > 0) {
2287
2288                                 if ($cat_view) {
2289
2290                                         if ($feed > 0) {
2291                                                 if ($include_children) {
2292                                                         # sub-cats
2293                                                         $subcats = getChildCategories($link, $feed, $owner_uid);
2294
2295                                                         array_push($subcats, $feed);
2296                                                         $query_strategy_part = "cat_id IN (".
2297                                                                         implode(",", $subcats).")";
2298
2299                                                 } else {
2300                                                         $query_strategy_part = "cat_id = '$feed'";
2301                                                 }
2302
2303                                         } else {
2304                                                 $query_strategy_part = "cat_id IS NULL";
2305                                         }
2306
2307                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2308
2309                                 } else {
2310                                         $query_strategy_part = "feed_id = '$feed'";
2311                                 }
2312                         } else if ($feed == 0 && !$cat_view) { // archive virtual feed
2313                                 $query_strategy_part = "feed_id IS NULL";
2314                                 $allow_archived = true;
2315                         } else if ($feed == 0 && $cat_view) { // uncategorized
2316                                 $query_strategy_part = "cat_id IS NULL AND feed_id IS NOT NULL";
2317                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2318                         } else if ($feed == -1) { // starred virtual feed
2319                                 $query_strategy_part = "marked = true";
2320                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2321                                 $allow_archived = true;
2322
2323                                 if (!$override_order) $override_order = "last_marked DESC, updated DESC";
2324
2325                         } else if ($feed == -2) { // published virtual feed OR labels category
2326
2327                                 if (!$cat_view) {
2328                                         $query_strategy_part = "published = true";
2329                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2330                                         $allow_archived = true;
2331
2332                                         if (!$override_order) $override_order = "last_published DESC, updated DESC";
2333                                 } else {
2334                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2335
2336                                         $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2337
2338                                         $query_strategy_part = "ttrss_labels2.id = ttrss_user_labels2.label_id AND
2339                                                 ttrss_user_labels2.article_id = ref_id";
2340
2341                                 }
2342                         } else if ($feed == -6) { // recently read
2343                                 $query_strategy_part = "unread = false AND last_read IS NOT NULL";
2344                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2345                                 $allow_archived = true;
2346
2347                                 if (!$override_order) $override_order = "last_read DESC";
2348                         } else if ($feed == -3) { // fresh virtual feed
2349                                 $query_strategy_part = "unread = true AND score >= 0";
2350
2351                                 $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE", $owner_uid);
2352
2353                                 if (DB_TYPE == "pgsql") {
2354                                         $query_strategy_part .= " AND updated > NOW() - INTERVAL '$intl hour' ";
2355                                 } else {
2356                                         $query_strategy_part .= " AND updated > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
2357                                 }
2358
2359                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2360                         } else if ($feed == -4) { // all articles virtual feed
2361                                 $query_strategy_part = "true";
2362                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2363                         } else if ($feed <= -10) { // labels
2364                                 $label_id = -$feed - 11;
2365
2366                                 $query_strategy_part = "label_id = '$label_id' AND
2367                                         ttrss_labels2.id = ttrss_user_labels2.label_id AND
2368                                         ttrss_user_labels2.article_id = ref_id";
2369
2370                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2371                                 $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2372                                 $allow_archived = true;
2373
2374                         } else {
2375                                 $query_strategy_part = "true";
2376                         }
2377
2378                         if (get_pref($link, "SORT_HEADLINES_BY_FEED_DATE", $owner_uid)) {
2379                                 $date_sort_field = "updated";
2380                         } else {
2381                                 $date_sort_field = "date_entered";
2382                         }
2383
2384                         if (get_pref($link, 'REVERSE_HEADLINES', $owner_uid)) {
2385                                 $order_by = "$date_sort_field";
2386                         } else {
2387                                 $order_by = "$date_sort_field DESC";
2388                         }
2389
2390                         if ($view_mode != "noscores") {
2391                                 $order_by = "score DESC, $order_by";
2392                         }
2393
2394                         if ($override_order) {
2395                                 $order_by = $override_order;
2396                         }
2397
2398                         $feed_title = "";
2399
2400                         if ($search) {
2401                                 $feed_title = T_sprintf("Search results: %s", $search);
2402                         } else {
2403                                 if ($cat_view) {
2404                                         $feed_title = getCategoryTitle($link, $feed);
2405                                 } else {
2406                                         if (is_numeric($feed) && $feed > 0) {
2407                                                 $result = db_query($link, "SELECT title,site_url,last_error
2408                                                         FROM ttrss_feeds WHERE id = '$feed' AND owner_uid = $owner_uid");
2409
2410                                                 $feed_title = db_fetch_result($result, 0, "title");
2411                                                 $feed_site_url = db_fetch_result($result, 0, "site_url");
2412                                                 $last_error = db_fetch_result($result, 0, "last_error");
2413                                         } else {
2414                                                 $feed_title = getFeedTitle($link, $feed);
2415                                         }
2416                                 }
2417                         }
2418
2419                         $content_query_part = "content as content_preview, cached_content, ";
2420
2421                         if (is_numeric($feed)) {
2422
2423                                 if ($feed >= 0) {
2424                                         $feed_kind = "Feeds";
2425                                 } else {
2426                                         $feed_kind = "Labels";
2427                                 }
2428
2429                                 if ($limit_query_part) {
2430                                         $offset_query_part = "OFFSET $offset";
2431                                 }
2432
2433                                 // proper override_order applied above
2434                                 if ($vfeed_query_part && !$ignore_vfeed_group && get_pref($link, 'VFEED_GROUP_BY_FEED', $owner_uid)) {
2435                                         if (!$override_order) {
2436                                                 $order_by = "ttrss_feeds.title, $order_by";
2437                                         } else {
2438                                                 $order_by = "ttrss_feeds.title, $override_order";
2439                                         }
2440                                 }
2441
2442                                 if (!$allow_archived) {
2443                                         $from_qpart = "ttrss_entries,ttrss_user_entries,ttrss_feeds$ext_tables_part";
2444                                         $feed_check_qpart = "ttrss_user_entries.feed_id = ttrss_feeds.id AND";
2445
2446                                 } else {
2447                                         $from_qpart = "ttrss_entries$ext_tables_part,ttrss_user_entries
2448                                                 LEFT JOIN ttrss_feeds ON (feed_id = ttrss_feeds.id)";
2449                                 }
2450
2451                                 $query = "SELECT DISTINCT
2452                                                 date_entered,
2453                                                 guid,
2454                                                 ttrss_entries.id,ttrss_entries.title,
2455                                                 updated,
2456                                                 label_cache,
2457                                                 tag_cache,
2458                                                 always_display_enclosures,
2459                                                 site_url,
2460                                                 note,
2461                                                 num_comments,
2462                                                 comments,
2463                                                 int_id,
2464                                                 hide_images,
2465                                                 unread,feed_id,marked,published,link,last_read,orig_feed_id,
2466                                                 last_marked, last_published,
2467                                                 ".SUBSTRING_FOR_DATE."(last_read,1,19) as last_read_noms,
2468                                                 $vfeed_query_part
2469                                                 $content_query_part
2470                                                 ".SUBSTRING_FOR_DATE."(updated,1,19) as updated_noms,
2471                                                 author,score
2472                                         FROM
2473                                                 $from_qpart
2474                                         WHERE
2475                                         $feed_check_qpart
2476                                         ttrss_user_entries.ref_id = ttrss_entries.id AND
2477                                         ttrss_user_entries.owner_uid = '$owner_uid' AND
2478                                         $search_query_part
2479                                         $filter_query_part
2480                                         $view_query_part
2481                                         $since_id_part
2482                                         $query_strategy_part ORDER BY $order_by
2483                                         $limit_query_part $offset_query_part";
2484
2485                                 if ($_REQUEST["debug"]) print $query;
2486
2487                                 $result = db_query($link, $query);
2488
2489                         } else {
2490                                 // browsing by tag
2491
2492                                 $select_qpart = "SELECT DISTINCT " .
2493                                                                 "date_entered," .
2494                                                                 "guid," .
2495                                                                 "note," .
2496                                                                 "ttrss_entries.id as id," .
2497                                                                 "title," .
2498                                                                 "updated," .
2499                                                                 "unread," .
2500                                                                 "feed_id," .
2501                                                                 "orig_feed_id," .
2502                                                                 "marked," .
2503                                                                 "num_comments, " .
2504                                                                 "comments, " .
2505                                                                 "tag_cache," .
2506                                                                 "label_cache," .
2507                                                                 "link," .
2508                                                                 "last_read," .
2509                                                                 "hide_images," .
2510                                                                 "last_marked, last_published, " .
2511                                                                 SUBSTRING_FOR_DATE . "(last_read,1,19) as last_read_noms," .
2512                                                                 $since_id_part .
2513                                                                 $vfeed_query_part .
2514                                                                 $content_query_part .
2515                                                                 SUBSTRING_FOR_DATE . "(updated,1,19) as updated_noms," .
2516                                                                 "score ";
2517
2518                                 $feed_kind = "Tags";
2519                                 $all_tags = explode(",", $feed);
2520                                 if ($search_mode == 'any') {
2521                                         $tag_sql = "tag_name in (" . implode(", ", array_map("db_quote", $all_tags)) . ")";
2522                                         $from_qpart = " FROM ttrss_entries,ttrss_user_entries,ttrss_tags ";
2523                                         $where_qpart = " WHERE " .
2524                                                                    "ref_id = ttrss_entries.id AND " .
2525                                                                    "ttrss_user_entries.owner_uid = $owner_uid AND " .
2526                                                                    "post_int_id = int_id AND $tag_sql AND " .
2527                                                                    $view_query_part .
2528                                                                    $search_query_part .
2529                                                                    $query_strategy_part . " ORDER BY $order_by " .
2530                                                                    $limit_query_part;
2531
2532                                 } else {
2533                                         $i = 1;
2534                                         $sub_selects = array();
2535                                         $sub_ands = array();
2536                                         foreach ($all_tags as $term) {
2537                                                 array_push($sub_selects, "(SELECT post_int_id from ttrss_tags WHERE tag_name = " . db_quote($term) . " AND owner_uid = $owner_uid) as A$i");
2538                                                 $i++;
2539                                         }
2540                                         if ($i > 2) {
2541                                                 $x = 1;
2542                                                 $y = 2;
2543                                                 do {
2544                                                         array_push($sub_ands, "A$x.post_int_id = A$y.post_int_id");
2545                                                         $x++;
2546                                                         $y++;
2547                                                 } while ($y < $i);
2548                                         }
2549                                         array_push($sub_ands, "A1.post_int_id = ttrss_user_entries.int_id and ttrss_user_entries.owner_uid = $owner_uid");
2550                                         array_push($sub_ands, "ttrss_user_entries.ref_id = ttrss_entries.id");
2551                                         $from_qpart = " FROM " . implode(", ", $sub_selects) . ", ttrss_user_entries, ttrss_entries";
2552                                         $where_qpart = " WHERE " . implode(" AND ", $sub_ands);
2553                                 }
2554                                 //                              error_log("TAG SQL: " . $tag_sql);
2555                                 // $tag_sql = "tag_name = '$feed'";   DEFAULT way
2556
2557                                 //                              error_log("[". $select_qpart . "][" . $from_qpart . "][" .$where_qpart . "]");
2558                                 $result = db_query($link, $select_qpart . $from_qpart . $where_qpart);
2559                         }
2560
2561                         return array($result, $feed_title, $feed_site_url, $last_error);
2562
2563         }
2564
2565         function sanitize($link, $str, $force_remove_images = false, $owner = false, $site_url = false) {
2566                 if (!$owner) $owner = $_SESSION["uid"];
2567
2568                 $res = trim($str); if (!$res) return '';
2569
2570                 if (strpos($res, "href=") === false)
2571                         $res = rewrite_urls($res);
2572
2573                 $charset_hack = '<head>
2574                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
2575                 </head>';
2576
2577                 $res = trim($res); if (!$res) return '';
2578
2579                 libxml_use_internal_errors(true);
2580
2581                 $doc = new DOMDocument();
2582                 $doc->loadHTML($charset_hack . $res);
2583                 $xpath = new DOMXPath($doc);
2584
2585                 $entries = $xpath->query('(//a[@href]|//img[@src])');
2586
2587                 foreach ($entries as $entry) {
2588
2589                         if ($site_url) {
2590
2591                                 if ($entry->hasAttribute('href'))
2592                                         $entry->setAttribute('href',
2593                                                 rewrite_relative_url($site_url, $entry->getAttribute('href')));
2594
2595                                 if ($entry->hasAttribute('src')) {
2596                                         $src = rewrite_relative_url($site_url, $entry->getAttribute('src'));
2597
2598                                         $cached_filename = CACHE_DIR . '/images/' . sha1($src) . '.png';
2599
2600                                         if (file_exists($cached_filename)) {
2601                                                 $src = SELF_URL_PATH . '/image.php?hash=' . sha1($src);
2602                                         }
2603
2604                                         $entry->setAttribute('src', $src);
2605                                 }
2606
2607                                 if ($entry->nodeName == 'img') {
2608                                         if (get_pref($link, "STRIP_IMAGES", $owner) || $force_remove_images) {
2609
2610                                                 $p = $doc->createElement('p');
2611
2612                                                 $a = $doc->createElement('a');
2613                                                 $a->setAttribute('href', $entry->getAttribute('src'));
2614
2615                                                 $a->appendChild(new DOMText($entry->getAttribute('src')));
2616                                                 $a->setAttribute('target', '_blank');
2617
2618                                                 $p->appendChild($a);
2619
2620                                                 $entry->parentNode->replaceChild($p, $entry);
2621                                         }
2622                                 }
2623                         }
2624
2625                         if (strtolower($entry->nodeName) == "a") {
2626                                 $entry->setAttribute("target", "_blank");
2627                         }
2628                 }
2629
2630                 $entries = $xpath->query('//iframe');
2631                 foreach ($entries as $entry) {
2632                         $entry->setAttribute('sandbox', true);
2633                 }
2634
2635                 global $pluginhost;
2636
2637                 if (isset($pluginhost)) {
2638                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_SANITIZE) as $plugin) {
2639                                 $doc = $plugin->hook_sanitize($doc, $site_url);
2640                         }
2641                 }
2642
2643                 $doc->removeChild($doc->firstChild); //remove doctype
2644                 $doc = strip_harmful_tags($doc);
2645                 $res = $doc->saveHTML();
2646                 return $res;
2647         }
2648
2649         function strip_harmful_tags($doc) {
2650                 $entries = $doc->getElementsByTagName("*");
2651
2652                 $allowed_elements = array('a', 'address', 'audio', 'article',
2653                         'b', 'big', 'blockquote', 'body', 'br', 'cite',
2654                         'code', 'dd', 'del', 'details', 'div', 'dl',
2655                         'dt', 'em', 'footer', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6',
2656                         'header', 'html', 'i', 'img', 'ins', 'kbd',
2657                         'li', 'nav', 'ol', 'p', 'pre', 'q', 's','small',
2658                         'source', 'span', 'strike', 'strong', 'sub', 'summary',
2659                         'sup', 'table', 'tbody', 'td', 'tfoot', 'th', 'thead',
2660                         'tr', 'track', 'tt', 'u', 'ul', 'var', 'wbr', 'video' );
2661
2662                 if ($_SESSION['hasSandbox']) array_push($allowed_elements, 'iframe');
2663
2664                 $disallowed_attributes = array('id', 'style', 'class');
2665
2666                 foreach ($entries as $entry) {
2667                         if (!in_array($entry->nodeName, $allowed_elements)) {
2668                                 $entry->parentNode->removeChild($entry);
2669                         }
2670
2671                         if ($entry->hasAttributes()) {
2672                                 foreach (iterator_to_array($entry->attributes) as $attr) {
2673
2674                                         if (strpos($attr->nodeName, 'on') === 0) {
2675                                                 $entry->removeAttributeNode($attr);
2676                                         }
2677
2678                                         if (in_array($attr->nodeName, $disallowed_attributes)) {
2679                                                 $entry->removeAttributeNode($attr);
2680                                         }
2681                                 }
2682                         }
2683                 }
2684
2685                 return $doc;
2686         }
2687
2688         function check_for_update($link) {
2689                 if (CHECK_FOR_NEW_VERSION && $_SESSION['access_level'] >= 10) {
2690                         $version_url = "http://tt-rss.org/version.php?ver=" . VERSION .
2691                                 "&iid=" . sha1(SELF_URL_PATH);
2692
2693                         $version_data = @fetch_file_contents($version_url);
2694
2695                         if ($version_data) {
2696                                 $version_data = json_decode($version_data, true);
2697                                 if ($version_data && $version_data['version']) {
2698
2699                                         if (version_compare(VERSION, $version_data['version']) == -1) {
2700                                                 return $version_data;
2701                                         }
2702                                 }
2703                         }
2704                 }
2705                 return false;
2706         }
2707
2708         function catchupArticlesById($link, $ids, $cmode, $owner_uid = false) {
2709
2710                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2711                 if (count($ids) == 0) return;
2712
2713                 $tmp_ids = array();
2714
2715                 foreach ($ids as $id) {
2716                         array_push($tmp_ids, "ref_id = '$id'");
2717                 }
2718
2719                 $ids_qpart = join(" OR ", $tmp_ids);
2720
2721                 if ($cmode == 0) {
2722                         db_query($link, "UPDATE ttrss_user_entries SET
2723                         unread = false,last_read = NOW()
2724                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2725                 } else if ($cmode == 1) {
2726                         db_query($link, "UPDATE ttrss_user_entries SET
2727                         unread = true
2728                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2729                 } else {
2730                         db_query($link, "UPDATE ttrss_user_entries SET
2731                         unread = NOT unread,last_read = NOW()
2732                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2733                 }
2734
2735                 /* update ccache */
2736
2737                 $result = db_query($link, "SELECT DISTINCT feed_id FROM ttrss_user_entries
2738                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2739
2740                 while ($line = db_fetch_assoc($result)) {
2741                         ccache_update($link, $line["feed_id"], $owner_uid);
2742                 }
2743         }
2744
2745         function get_article_tags($link, $id, $owner_uid = 0, $tag_cache = false) {
2746
2747                 $a_id = db_escape_string($id);
2748
2749                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2750
2751                 $query = "SELECT DISTINCT tag_name,
2752                         owner_uid as owner FROM
2753                         ttrss_tags WHERE post_int_id = (SELECT int_id FROM ttrss_user_entries WHERE
2754                         ref_id = '$a_id' AND owner_uid = '$owner_uid' LIMIT 1) ORDER BY tag_name";
2755
2756                 $obj_id = md5("TAGS:$owner_uid:$id");
2757                 $tags = array();
2758
2759                 /* check cache first */
2760
2761                 if ($tag_cache === false) {
2762                         $result = db_query($link, "SELECT tag_cache FROM ttrss_user_entries
2763                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
2764
2765                         $tag_cache = db_fetch_result($result, 0, "tag_cache");
2766                 }
2767
2768                 if ($tag_cache) {
2769                         $tags = explode(",", $tag_cache);
2770                 } else {
2771
2772                         /* do it the hard way */
2773
2774                         $tmp_result = db_query($link, $query);
2775
2776                         while ($tmp_line = db_fetch_assoc($tmp_result)) {
2777                                 array_push($tags, $tmp_line["tag_name"]);
2778                         }
2779
2780                         /* update the cache */
2781
2782                         $tags_str = db_escape_string(join(",", $tags));
2783
2784                         db_query($link, "UPDATE ttrss_user_entries
2785                                 SET tag_cache = '$tags_str' WHERE ref_id = '$id'
2786                                 AND owner_uid = $owner_uid");
2787                 }
2788
2789                 return $tags;
2790         }
2791
2792         function trim_array($array) {
2793                 $tmp = $array;
2794                 array_walk($tmp, 'trim');
2795                 return $tmp;
2796         }
2797
2798         function tag_is_valid($tag) {
2799                 if ($tag == '') return false;
2800                 if (preg_match("/^[0-9]*$/", $tag)) return false;
2801                 if (mb_strlen($tag) > 250) return false;
2802
2803                 if (function_exists('iconv')) {
2804                         $tag = iconv("utf-8", "utf-8", $tag);
2805                 }
2806
2807                 if (!$tag) return false;
2808
2809                 return true;
2810         }
2811
2812         function render_login_form($link, $form_id = 0) {
2813                 switch ($form_id) {
2814                 case 0:
2815                         require_once "login_form.php";
2816                         break;
2817                 case 1:
2818                         require_once "mobile/login_form.php";
2819                         break;
2820                 }
2821                 exit;
2822         }
2823
2824         // from http://developer.apple.com/internet/safari/faq.html
2825         function no_cache_incantation() {
2826                 header("Expires: Mon, 22 Dec 1980 00:00:00 GMT"); // Happy birthday to me :)
2827                 header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT"); // always modified
2828                 header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0"); // HTTP/1.1
2829                 header("Cache-Control: post-check=0, pre-check=0", false);
2830                 header("Pragma: no-cache"); // HTTP/1.0
2831         }
2832
2833         function format_warning($msg, $id = "") {
2834                 global $link;
2835                 return "<div class=\"warning\" id=\"$id\">
2836                         <img src=\"".theme_image($link, "images/sign_excl.svg")."\">$msg</div>";
2837         }
2838
2839         function format_notice($msg, $id = "") {
2840                 global $link;
2841                 return "<div class=\"notice\" id=\"$id\">
2842                         <img src=\"".theme_image($link, "images/sign_info.svg")."\">$msg</div>";
2843         }
2844
2845         function format_error($msg, $id = "") {
2846                 global $link;
2847                 return "<div class=\"error\" id=\"$id\">
2848                         <img src=\"".theme_image($link, "images/sign_excl.svg")."\">$msg</div>";
2849         }
2850
2851         function print_notice($msg) {
2852                 return print format_notice($msg);
2853         }
2854
2855         function print_warning($msg) {
2856                 return print format_warning($msg);
2857         }
2858
2859         function print_error($msg) {
2860                 return print format_error($msg);
2861         }
2862
2863
2864         function T_sprintf() {
2865                 $args = func_get_args();
2866                 return vsprintf(__(array_shift($args)), $args);
2867         }
2868
2869         function format_inline_player($link, $url, $ctype) {
2870
2871                 $entry = "";
2872
2873                 if (strpos($ctype, "audio/") === 0) {
2874
2875                         if ($_SESSION["hasAudio"] && (strpos($ctype, "ogg") !== false ||
2876                                 strpos($_SERVER['HTTP_USER_AGENT'], "Chrome") !== false ||
2877                                 strpos($_SERVER['HTTP_USER_AGENT'], "Safari") !== false )) {
2878
2879                                 $id = 'AUDIO-' . uniqid();
2880
2881                                 $entry .= "<audio id=\"$id\"\" controls style='display : none'>
2882                                         <source type=\"$ctype\" src=\"$url\"></source>
2883                                         </audio>";
2884
2885                                 $entry .= "<span onclick=\"player(this)\"
2886                                         title=\"".__("Click to play")."\" status=\"0\"
2887                                         class=\"player\" audio-id=\"$id\">".__("Play")."</span>";
2888
2889                         } else {
2890
2891                                 $entry .= "<object type=\"application/x-shockwave-flash\"
2892                                         data=\"lib/button/musicplayer.swf?song_url=$url\"
2893                                         width=\"17\" height=\"17\" style='float : left; margin-right : 5px;'>
2894                                         <param name=\"movie\"
2895                                                 value=\"lib/button/musicplayer.swf?song_url=$url\" />
2896                                         </object>";
2897                         }
2898
2899                         if ($entry) $entry .= "&nbsp;" . basename($url);
2900
2901                         return $entry;
2902
2903                 }
2904
2905                 return "";
2906
2907 /*              $filename = substr($url, strrpos($url, "/")+1);
2908
2909                 $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
2910                         $filename . " (" . $ctype . ")" . "</a>"; */
2911
2912         }
2913
2914         function format_article($link, $id, $mark_as_read = true, $zoom_mode = false, $owner_uid = false) {
2915                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2916
2917                 $rv = array();
2918
2919                 $rv['id'] = $id;
2920
2921                 /* we can figure out feed_id from article id anyway, why do we
2922                  * pass feed_id here? let's ignore the argument :( */
2923
2924                 $result = db_query($link, "SELECT feed_id FROM ttrss_user_entries
2925                         WHERE ref_id = '$id'");
2926
2927                 $feed_id = (int) db_fetch_result($result, 0, "feed_id");
2928
2929                 $rv['feed_id'] = $feed_id;
2930
2931                 //if (!$zoom_mode) { print "<article id='$id'><![CDATA["; };
2932
2933                 if ($mark_as_read) {
2934                         $result = db_query($link, "UPDATE ttrss_user_entries
2935                                 SET unread = false,last_read = NOW()
2936                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
2937
2938                         ccache_update($link, $feed_id, $owner_uid);
2939                 }
2940
2941                 $result = db_query($link, "SELECT id,title,link,content,feed_id,comments,int_id,
2942                         ".SUBSTRING_FOR_DATE."(updated,1,16) as updated,
2943                         (SELECT site_url FROM ttrss_feeds WHERE id = feed_id) as site_url,
2944                         num_comments,
2945                         tag_cache,
2946                         author,
2947                         orig_feed_id,
2948                         note,
2949                         cached_content
2950                         FROM ttrss_entries,ttrss_user_entries
2951                         WHERE   id = '$id' AND ref_id = id AND owner_uid = $owner_uid");
2952
2953                 if ($result) {
2954
2955                         $line = db_fetch_assoc($result);
2956
2957                         $tag_cache = $line["tag_cache"];
2958
2959                         $line["tags"] = get_article_tags($link, $id, $owner_uid, $line["tag_cache"]);
2960                         unset($line["tag_cache"]);
2961
2962                         $line["content"] = sanitize($link, $line["content"], false, $owner_uid, $line["site_url"]);
2963
2964                         global $pluginhost;
2965
2966                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_RENDER_ARTICLE) as $p) {
2967                                 $line = $p->hook_render_article($line);
2968                         }
2969
2970                         $num_comments = $line["num_comments"];
2971                         $entry_comments = "";
2972
2973                         if ($num_comments > 0) {
2974                                 if ($line["comments"]) {
2975                                         $comments_url = htmlspecialchars($line["comments"]);
2976                                 } else {
2977                                         $comments_url = htmlspecialchars($line["link"]);
2978                                 }
2979                                 $entry_comments = "<a target='_blank' href=\"$comments_url\">$num_comments comments</a>";
2980                         } else {
2981                                 if ($line["comments"] && $line["link"] != $line["comments"]) {
2982                                         $entry_comments = "<a target='_blank' href=\"".htmlspecialchars($line["comments"])."\">comments</a>";
2983                                 }
2984                         }
2985
2986                         if ($zoom_mode) {
2987                                 header("Content-Type: text/html");
2988                                 $rv['content'] .= "<html><head>
2989                                                 <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"/>
2990                                                 <title>Tiny Tiny RSS - ".$line["title"]."</title>
2991                                                 <link rel=\"stylesheet\" type=\"text/css\" href=\"tt-rss.css\">
2992                                         </head><body>";
2993                         }
2994
2995                         $title_escaped = htmlspecialchars($line['title']);
2996
2997                         $rv['content'] .= "<div id=\"PTITLE-FULL-$id\" style=\"display : none\">" .
2998                                 strip_tags($line['title']) . "</div>";
2999
3000                         $rv['content'] .= "<div class=\"postReply\" id=\"POST-$id\">";
3001
3002                         $rv['content'] .= "<div class=\"postHeader\" id=\"POSTHDR-$id\">";
3003
3004                         $entry_author = $line["author"];
3005
3006                         if ($entry_author) {
3007                                 $entry_author = __(" - ") . $entry_author;
3008                         }
3009
3010                         $parsed_updated = make_local_datetime($link, $line["updated"], true,
3011                                 $owner_uid, true);
3012
3013                         $rv['content'] .= "<div class=\"postDate\">$parsed_updated</div>";
3014
3015                         if ($line["link"]) {
3016                                 $rv['content'] .= "<div class='postTitle'><a target='_blank'
3017                                         title=\"".htmlspecialchars($line['title'])."\"
3018                                         href=\"" .
3019                                         htmlspecialchars($line["link"]) . "\">" .
3020                                         $line["title"] .
3021                                         "<span class='author'>$entry_author</span></a></div>";
3022                         } else {
3023                                 $rv['content'] .= "<div class='postTitle'>" . $line["title"] . "$entry_author</div>";
3024                         }
3025
3026                         $tags_str = format_tags_string($line["tags"], $id);
3027                         $tags_str_full = join(", ", $line["tags"]);
3028
3029                         if (!$tags_str_full) $tags_str_full = __("no tags");
3030
3031                         if (!$entry_comments) $entry_comments = "&nbsp;"; # placeholder
3032
3033                         $rv['content'] .= "<div class='postTags' style='float : right'>
3034                                 <img src='".theme_image($link, 'images/tag.png')."'
3035                                 class='tagsPic' alt='Tags' title='Tags'>&nbsp;";
3036
3037                         if (!$zoom_mode) {
3038                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>
3039                                         <a title=\"".__('Edit tags for this article')."\"
3040                                         href=\"#\" onclick=\"editArticleTags($id, $feed_id)\">(+)</a>";
3041
3042                                 $rv['content'] .= "<div dojoType=\"dijit.Tooltip\"
3043                                         id=\"ATSTRTIP-$id\" connectId=\"ATSTR-$id\"
3044                                         position=\"below\">$tags_str_full</div>";
3045
3046                                 global $pluginhost;
3047
3048                                 foreach ($pluginhost->get_hooks($pluginhost::HOOK_ARTICLE_BUTTON) as $p) {
3049                                         $rv['content'] .= $p->hook_article_button($line);
3050                                 }
3051
3052
3053                         } else {
3054                                 $tags_str = strip_tags($tags_str);
3055                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>";
3056                         }
3057                         $rv['content'] .= "</div>";
3058                         $rv['content'] .= "<div clear='both'>$entry_comments</div>";
3059
3060                         if ($line["orig_feed_id"]) {
3061
3062                                 $tmp_result = db_query($link, "SELECT * FROM ttrss_archived_feeds
3063                                         WHERE id = ".$line["orig_feed_id"]);
3064
3065                                 if (db_num_rows($tmp_result) != 0) {
3066
3067                                         $rv['content'] .= "<div clear='both'>";
3068                                         $rv['content'] .= __("Originally from:");
3069
3070                                         $rv['content'] .= "&nbsp;";
3071
3072                                         $tmp_line = db_fetch_assoc($tmp_result);
3073
3074                                         $rv['content'] .= "<a target='_blank'
3075                                                 href=' " . htmlspecialchars($tmp_line['site_url']) . "'>" .
3076                                                 $tmp_line['title'] . "</a>";
3077
3078                                         $rv['content'] .= "&nbsp;";
3079
3080                                         $rv['content'] .= "<a target='_blank' href='" . htmlspecialchars($tmp_line['feed_url']) . "'>";
3081                                         $rv['content'] .= "<img title='".__('Feed URL')."'class='tinyFeedIcon' src='images/pub_set.svg'></a>";
3082
3083                                         $rv['content'] .= "</div>";
3084                                 }
3085                         }
3086
3087                         $rv['content'] .= "</div>";
3088
3089                         $rv['content'] .= "<div id=\"POSTNOTE-$id\">";
3090                                 if ($line['note']) {
3091                                         $rv['content'] .= format_article_note($id, $line['note'], !$zoom_mode);
3092                                 }
3093                         $rv['content'] .= "</div>";
3094
3095                         $rv['content'] .= "<div class=\"postContent\">";
3096
3097                         // N-grams
3098
3099                         if (DB_TYPE == "pgsql" and defined('_NGRAM_TITLE_RELATED_THRESHOLD')) {
3100
3101                                 $ngram_result = db_query($link, "SELECT id,title FROM
3102                                                 ttrss_entries,ttrss_user_entries
3103                                         WHERE ref_id = id AND updated >= NOW() - INTERVAL '7 day'
3104                                                 AND similarity(title, '$title_escaped') >= "._NGRAM_TITLE_RELATED_THRESHOLD."
3105                                                 AND title != '$title_escaped'
3106                                                 AND owner_uid = $owner_uid");
3107
3108                                 if (db_num_rows($ngram_result) > 0) {
3109                                         $rv['content'] .= "<div dojoType=\"dijit.form.DropDownButton\">".
3110                                                 "<span>" . __('Related')."</span>";
3111                                         $rv['content'] .= "<div dojoType=\"dijit.Menu\" style=\"display: none;\">";
3112
3113                                         while ($nline = db_fetch_assoc($ngram_result)) {
3114                                                 $rv['content'] .= "<div onclick=\"hlOpenInNewTab(null,".$nline['id'].")\"
3115                                                         dojoType=\"dijit.MenuItem\">".$nline['title']."</div>";
3116
3117                                         }
3118                                         $rv['content'] .= "</div></div><br/";
3119                                 }
3120                         }
3121
3122                         $rv['content'] .= $line["content"];
3123
3124                         $rv['content'] .= format_article_enclosures($link, $id,
3125                                 $always_display_enclosures, $line["content"]);
3126
3127                         $rv['content'] .= "</div>";
3128
3129                         $rv['content'] .= "</div>";
3130
3131                 }
3132
3133                 if ($zoom_mode) {
3134                         $rv['content'] .= "
3135                                 <div style=\"text-align : center\">
3136                                 <button onclick=\"return window.close()\">".
3137                                         __("Close this window")."</button></div>";
3138                         $rv['content'] .= "</body></html>";
3139                 }
3140
3141                 return $rv;
3142
3143         }
3144
3145         function print_checkpoint($n, $s) {
3146                 $ts = microtime(true);
3147                 echo sprintf("<!-- CP[$n] %.4f seconds -->", $ts - $s);
3148                 return $ts;
3149         }
3150
3151         function sanitize_tag($tag) {
3152                 $tag = trim($tag);
3153
3154                 $tag = mb_strtolower($tag, 'utf-8');
3155
3156                 $tag = preg_replace('/[\'\"\+\>\<]/', "", $tag);
3157
3158 //              $tag = str_replace('"', "", $tag);
3159 //              $tag = str_replace("+", " ", $tag);
3160                 $tag = str_replace("technorati tag: ", "", $tag);
3161
3162                 return $tag;
3163         }
3164
3165         function get_self_url_prefix() {
3166                 if (strrpos(SELF_URL_PATH, "/") === strlen(SELF_URL_PATH)-1) {
3167                         return substr(SELF_URL_PATH, 0, strlen(SELF_URL_PATH)-1);
3168                 } else {
3169                         return SELF_URL_PATH;
3170                 }
3171         }
3172
3173         /**
3174          * Compute the Mozilla Firefox feed adding URL from server HOST and REQUEST_URI.
3175          *
3176          * @return string The Mozilla Firefox feed adding URL.
3177          */
3178         function add_feed_url() {
3179                 //$url_path = ($_SERVER['HTTPS'] != "on" ? 'http://' :  'https://') . $_SERVER["HTTP_HOST"] . parse_url($_SERVER["REQUEST_URI"], PHP_URL_PATH);
3180
3181                 $url_path = get_self_url_prefix() .
3182                         "/public.php?op=subscribe&feed_url=%s";
3183                 return $url_path;
3184         } // function add_feed_url
3185
3186         function encrypt_password($pass, $salt = '', $mode2 = false) {
3187                 if ($salt && $mode2) {
3188                         return "MODE2:" . hash('sha256', $salt . $pass);
3189                 } else if ($salt) {
3190                         return "SHA1X:" . sha1("$salt:$pass");
3191                 } else {
3192                         return "SHA1:" . sha1($pass);
3193                 }
3194         } // function encrypt_password
3195
3196         function load_filters($link, $feed_id, $owner_uid, $action_id = false) {
3197                 $filters = array();
3198
3199                 $cat_id = (int)getFeedCategory($link, $feed_id);
3200
3201                 $result = db_query($link, "SELECT * FROM ttrss_filters2 WHERE
3202                         owner_uid = $owner_uid AND enabled = true");
3203
3204                 $check_cats = join(",", array_merge(
3205                         getParentCategories($link, $cat_id, $owner_uid),
3206                         array($cat_id)));
3207
3208                 while ($line = db_fetch_assoc($result)) {
3209                         $filter_id = $line["id"];
3210
3211                         $result2 = db_query($link, "SELECT
3212                                 r.reg_exp, r.feed_id, r.cat_id, r.cat_filter, t.name AS type_name
3213                                 FROM ttrss_filters2_rules AS r,
3214                                 ttrss_filter_types AS t
3215                                 WHERE
3216                                         (cat_id IS NULL OR cat_id IN ($check_cats)) AND
3217                                         (feed_id IS NULL OR feed_id = '$feed_id') AND
3218                                         filter_type = t.id AND filter_id = '$filter_id'");
3219
3220                         $rules = array();
3221                         $actions = array();
3222
3223                         while ($rule_line = db_fetch_assoc($result2)) {
3224 #                               print_r($rule_line);
3225
3226                                 $rule = array();
3227                                 $rule["reg_exp"] = $rule_line["reg_exp"];
3228                                 $rule["type"] = $rule_line["type_name"];
3229
3230                                 array_push($rules, $rule);
3231                         }
3232
3233                         $result2 = db_query($link, "SELECT a.action_param,t.name AS type_name
3234                                 FROM ttrss_filters2_actions AS a,
3235                                 ttrss_filter_actions AS t
3236                                 WHERE
3237                                         action_id = t.id AND filter_id = '$filter_id'");
3238
3239                         while ($action_line = db_fetch_assoc($result2)) {
3240 #                               print_r($action_line);
3241
3242                                 $action = array();
3243                                 $action["type"] = $action_line["type_name"];
3244                                 $action["param"] = $action_line["action_param"];
3245
3246                                 array_push($actions, $action);
3247                         }
3248
3249
3250                         $filter = array();
3251                         $filter["match_any_rule"] = sql_bool_to_bool($line["match_any_rule"]);
3252                         $filter["rules"] = $rules;
3253                         $filter["actions"] = $actions;
3254
3255                         if (count($rules) > 0 && count($actions) > 0) {
3256                                 array_push($filters, $filter);
3257                         }
3258                 }
3259
3260                 return $filters;
3261         }
3262
3263         function get_score_pic($score) {
3264                 if ($score > 100) {
3265                         return "score_high.png";
3266                 } else if ($score > 0) {
3267                         return "score_half_high.png";
3268                 } else if ($score < -100) {
3269                         return "score_low.png";
3270                 } else if ($score < 0) {
3271                         return "score_half_low.png";
3272                 } else {
3273                         return "score_neutral.png";
3274                 }
3275         }
3276
3277         function feed_has_icon($id) {
3278                 return is_file(ICONS_DIR . "/$id.ico") && filesize(ICONS_DIR . "/$id.ico") > 0;
3279         }
3280
3281         function init_connection($link) {
3282                 if ($link) {
3283
3284                         if (DB_TYPE == "pgsql") {
3285                                 pg_query($link, "set client_encoding = 'UTF-8'");
3286                                 pg_set_client_encoding("UNICODE");
3287                                 pg_query($link, "set datestyle = 'ISO, european'");
3288                                 pg_query($link, "set TIME ZONE 0");
3289                         } else {
3290                                 db_query($link, "SET time_zone = '+0:0'");
3291
3292                                 if (defined('MYSQL_CHARSET') && MYSQL_CHARSET) {
3293                                         db_query($link, "SET NAMES " . MYSQL_CHARSET);
3294                                 }
3295                         }
3296
3297                         global $pluginhost;
3298
3299                         $pluginhost = new PluginHost($link);
3300                         $pluginhost->load(PLUGINS, $pluginhost::KIND_ALL);
3301
3302                         return true;
3303                 } else {
3304                         print "Unable to connect to database:" . db_last_error();
3305                         return false;
3306                 }
3307         }
3308
3309         function format_tags_string($tags, $id) {
3310
3311                 $tags_str = "";
3312                 $tags_nolinks_str = "";
3313
3314                 $num_tags = 0;
3315
3316                 $tag_limit = 6;
3317
3318                 $formatted_tags = array();
3319
3320                 foreach ($tags as $tag) {
3321                         $num_tags++;
3322                         $tag_escaped = str_replace("'", "\\'", $tag);
3323
3324                         if (mb_strlen($tag) > 30) {
3325                                 $tag = truncate_string($tag, 30);
3326                         }
3327
3328                         $tag_str = "<a href=\"javascript:viewfeed('$tag_escaped')\">$tag</a>";
3329
3330                         array_push($formatted_tags, $tag_str);
3331
3332                         $tmp_tags_str = implode(", ", $formatted_tags);
3333
3334                         if ($num_tags == $tag_limit || mb_strlen($tmp_tags_str) > 150) {
3335                                 break;
3336                         }
3337                 }
3338
3339                 $tags_str = implode(", ", $formatted_tags);
3340
3341                 if ($num_tags < count($tags)) {
3342                         $tags_str .= ", &hellip;";
3343                 }
3344
3345                 if ($num_tags == 0) {
3346                         $tags_str = __("no tags");
3347                 }
3348
3349                 return $tags_str;
3350
3351         }
3352
3353         function format_article_labels($labels, $id) {
3354
3355                 $labels_str = "";
3356
3357                 foreach ($labels as $l) {
3358                         $labels_str .= sprintf("<span class='hlLabelRef'
3359                                 style='color : %s; background-color : %s'>%s</span>",
3360                                         $l[2], $l[3], $l[1]);
3361                         }
3362
3363                 return $labels_str;
3364
3365         }
3366
3367         function format_article_note($id, $note, $allow_edit = true) {
3368
3369                 $str = "<div class='articleNote'        onclick=\"editArticleNote($id)\">
3370                         <div class='noteEdit' onclick=\"editArticleNote($id)\">".
3371                         ($allow_edit ? __('(edit note)') : "")."</div>$note</div>";
3372
3373                 return $str;
3374         }
3375
3376
3377         function get_feed_category($link, $feed_cat, $parent_cat_id = false) {
3378                 if ($parent_cat_id) {
3379                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3380                         $parent_insert = "'$parent_cat_id'";
3381                 } else {
3382                         $parent_qpart = "parent_cat IS NULL";
3383                         $parent_insert = "NULL";
3384                 }
3385
3386                 $result = db_query($link,
3387                         "SELECT id FROM ttrss_feed_categories
3388                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3389
3390                 if (db_num_rows($result) == 0) {
3391                         return false;
3392                 } else {
3393                         return db_fetch_result($result, 0, "id");
3394                 }
3395         }
3396
3397         function add_feed_category($link, $feed_cat, $parent_cat_id = false) {
3398
3399                 if (!$feed_cat) return false;
3400
3401                 db_query($link, "BEGIN");
3402
3403                 if ($parent_cat_id) {
3404                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3405                         $parent_insert = "'$parent_cat_id'";
3406                 } else {
3407                         $parent_qpart = "parent_cat IS NULL";
3408                         $parent_insert = "NULL";
3409                 }
3410
3411                 $result = db_query($link,
3412                         "SELECT id FROM ttrss_feed_categories
3413                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3414
3415                 if (db_num_rows($result) == 0) {
3416
3417                         $result = db_query($link,
3418                                 "INSERT INTO ttrss_feed_categories (owner_uid,title,parent_cat)
3419                                 VALUES ('".$_SESSION["uid"]."', '$feed_cat', $parent_insert)");
3420
3421                         db_query($link, "COMMIT");
3422
3423                         return true;
3424                 }
3425
3426                 return false;
3427         }
3428
3429         function getArticleFeed($link, $id) {
3430                 $result = db_query($link, "SELECT feed_id FROM ttrss_user_entries
3431                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
3432
3433                 if (db_num_rows($result) != 0) {
3434                         return db_fetch_result($result, 0, "feed_id");
3435                 } else {
3436                         return 0;
3437                 }
3438         }
3439
3440         /**
3441          * Fixes incomplete URLs by prepending "http://".
3442          * Also replaces feed:// with http://, and
3443          * prepends a trailing slash if the url is a domain name only.
3444          *
3445          * @param string $url Possibly incomplete URL
3446          *
3447          * @return string Fixed URL.
3448          */
3449         function fix_url($url) {
3450                 if (strpos($url, '://') === false) {
3451                         $url = 'http://' . $url;
3452                 } else if (substr($url, 0, 5) == 'feed:') {
3453                         $url = 'http:' . substr($url, 5);
3454                 }
3455
3456                 //prepend slash if the URL has no slash in it
3457                 // "http://www.example" -> "http://www.example/"
3458                 if (strpos($url, '/', strpos($url, ':') + 3) === false) {
3459                         $url .= '/';
3460                 }
3461
3462                 if ($url != "http:///")
3463                         return $url;
3464                 else
3465                         return '';
3466         }
3467
3468         function validate_feed_url($url) {
3469                 $parts = parse_url($url);
3470
3471                 return ($parts['scheme'] == 'http' || $parts['scheme'] == 'feed' || $parts['scheme'] == 'https');
3472
3473         }
3474
3475         function get_article_enclosures($link, $id) {
3476
3477                 $query = "SELECT * FROM ttrss_enclosures
3478                         WHERE post_id = '$id' AND content_url != ''";
3479
3480                 $rv = array();
3481
3482                 $result = db_query($link, $query);
3483
3484                 if (db_num_rows($result) > 0) {
3485                         while ($line = db_fetch_assoc($result)) {
3486                                 array_push($rv, $line);
3487                         }
3488                 }
3489
3490                 return $rv;
3491         }
3492
3493         function save_email_address($link, $email) {
3494                 // FIXME: implement persistent storage of emails
3495
3496                 if (!$_SESSION['stored_emails'])
3497                         $_SESSION['stored_emails'] = array();
3498
3499                 if (!in_array($email, $_SESSION['stored_emails']))
3500                         array_push($_SESSION['stored_emails'], $email);
3501         }
3502
3503
3504         function get_feed_access_key($link, $feed_id, $is_cat, $owner_uid = false) {
3505
3506                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3507
3508                 $sql_is_cat = bool_to_sql_bool($is_cat);
3509
3510                 $result = db_query($link, "SELECT access_key FROM ttrss_access_keys
3511                         WHERE feed_id = '$feed_id'      AND is_cat = $sql_is_cat
3512                         AND owner_uid = " . $owner_uid);
3513
3514                 if (db_num_rows($result) == 1) {
3515                         return db_fetch_result($result, 0, "access_key");
3516                 } else {
3517                         $key = db_escape_string(sha1(uniqid(rand(), true)));
3518
3519                         $result = db_query($link, "INSERT INTO ttrss_access_keys
3520                                 (access_key, feed_id, is_cat, owner_uid)
3521                                 VALUES ('$key', '$feed_id', $sql_is_cat, '$owner_uid')");
3522
3523                         return $key;
3524                 }
3525                 return false;
3526         }
3527
3528         function get_feeds_from_html($url, $content)
3529         {
3530                 $url     = fix_url($url);
3531                 $baseUrl = substr($url, 0, strrpos($url, '/') + 1);
3532
3533                 libxml_use_internal_errors(true);
3534
3535                 $doc = new DOMDocument();
3536                 $doc->loadHTML($content);
3537                 $xpath = new DOMXPath($doc);
3538                 $entries = $xpath->query('/html/head/link[@rel="alternate"]');
3539                 $feedUrls = array();
3540                 foreach ($entries as $entry) {
3541                         if ($entry->hasAttribute('href')) {
3542                                 $title = $entry->getAttribute('title');
3543                                 if ($title == '') {
3544                                         $title = $entry->getAttribute('type');
3545                                 }
3546                                 $feedUrl = rewrite_relative_url(
3547                                         $baseUrl, $entry->getAttribute('href')
3548                                 );
3549                                 $feedUrls[$feedUrl] = $title;
3550                         }
3551                 }
3552                 return $feedUrls;
3553         }
3554
3555         function is_html($content) {
3556                 return preg_match("/<html|DOCTYPE html/i", substr($content, 0, 20)) !== 0;
3557         }
3558
3559         function url_is_html($url, $login = false, $pass = false) {
3560                 return is_html(fetch_file_contents($url, false, $login, $pass));
3561         }
3562
3563         function print_label_select($link, $name, $value, $attributes = "") {
3564
3565                 $result = db_query($link, "SELECT caption FROM ttrss_labels2
3566                         WHERE owner_uid = '".$_SESSION["uid"]."' ORDER BY caption");
3567
3568                 print "<select default=\"$value\" name=\"" . htmlspecialchars($name) .
3569                         "\" $attributes onchange=\"labelSelectOnChange(this)\" >";
3570
3571                 while ($line = db_fetch_assoc($result)) {
3572
3573                         $issel = ($line["caption"] == $value) ? "selected=\"1\"" : "";
3574
3575                         print "<option value=\"".htmlspecialchars($line["caption"])."\"
3576                                 $issel>" . htmlspecialchars($line["caption"]) . "</option>";
3577
3578                 }
3579
3580 #               print "<option value=\"ADD_LABEL\">" .__("Add label...") . "</option>";
3581
3582                 print "</select>";
3583
3584
3585         }
3586
3587         function format_article_enclosures($link, $id, $always_display_enclosures,
3588                                         $article_content) {
3589
3590                 $result = get_article_enclosures($link, $id);
3591                 $rv = '';
3592
3593                 if (count($result) > 0) {
3594
3595                         $entries_html = array();
3596                         $entries = array();
3597                         $entries_inline = array();
3598
3599                         foreach ($result as $line) {
3600
3601                                 $url = $line["content_url"];
3602                                 $ctype = $line["content_type"];
3603
3604                                 if (!$ctype) $ctype = __("unknown type");
3605
3606                                 $filename = substr($url, strrpos($url, "/")+1);
3607
3608                                 $player = format_inline_player($link, $url, $ctype);
3609
3610                                 if ($player) array_push($entries_inline, $player);
3611
3612 #                               $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
3613 #                                       $filename . " (" . $ctype . ")" . "</a>";
3614
3615                                 $entry = "<div onclick=\"window.open('".htmlspecialchars($url)."')\"
3616                                         dojoType=\"dijit.MenuItem\">$filename ($ctype)</div>";
3617
3618                                 array_push($entries_html, $entry);
3619
3620                                 $entry = array();
3621
3622                                 $entry["type"] = $ctype;
3623                                 $entry["filename"] = $filename;
3624                                 $entry["url"] = $url;
3625
3626                                 array_push($entries, $entry);
3627                         }
3628
3629                         if (!get_pref($link, "STRIP_IMAGES")) {
3630                                 if ($always_display_enclosures ||
3631                                                         !preg_match("/<img/i", $article_content)) {
3632
3633                                         foreach ($entries as $entry) {
3634
3635                                                 if (preg_match("/image/", $entry["type"]) ||
3636                                                                 preg_match("/\.(jpg|png|gif|bmp)/i", $entry["filename"])) {
3637
3638                                                                 $rv .= "<p><img
3639                                                                 alt=\"".htmlspecialchars($entry["filename"])."\"
3640                                                                 src=\"" .htmlspecialchars($entry["url"]) . "\"/></p>";
3641
3642                                                 }
3643                                         }
3644                                 }
3645                         }
3646
3647                         if (count($entries_inline) > 0) {
3648                                 $rv .= "<hr clear='both'/>";
3649                                 foreach ($entries_inline as $entry) { $rv .= $entry; };
3650                                 $rv .= "<hr clear='both'/>";
3651                         }
3652
3653                         $rv .= "<br/><div dojoType=\"dijit.form.DropDownButton\">".
3654                                 "<span>" . __('Attachments')."</span>";
3655                         $rv .= "<div dojoType=\"dijit.Menu\" style=\"display: none;\">";
3656
3657                         foreach ($entries_html as $entry) { $rv .= $entry; };
3658
3659                         $rv .= "</div></div>";
3660                 }
3661
3662                 return $rv;
3663         }
3664
3665         function getLastArticleId($link) {
3666                 $result = db_query($link, "SELECT MAX(ref_id) AS id FROM ttrss_user_entries
3667                         WHERE owner_uid = " . $_SESSION["uid"]);
3668
3669                 if (db_num_rows($result) == 1) {
3670                         return db_fetch_result($result, 0, "id");
3671                 } else {
3672                         return -1;
3673                 }
3674         }
3675
3676         function build_url($parts) {
3677                 return $parts['scheme'] . "://" . $parts['host'] . $parts['path'];
3678         }
3679
3680         /**
3681          * Converts a (possibly) relative URL to a absolute one.
3682          *
3683          * @param string $url     Base URL (i.e. from where the document is)
3684          * @param string $rel_url Possibly relative URL in the document
3685          *
3686          * @return string Absolute URL
3687          */
3688         function rewrite_relative_url($url, $rel_url) {
3689                 if (strpos($rel_url, "magnet:") === 0) {
3690                         return $rel_url;
3691                 } else if (strpos($rel_url, "://") !== false) {
3692                         return $rel_url;
3693                 } else if (strpos($rel_url, "//") === 0) {
3694                         # protocol-relative URL (rare but they exist)
3695                         return $rel_url;
3696                 } else if (strpos($rel_url, "/") === 0)
3697                 {
3698                         $parts = parse_url($url);
3699                         $parts['path'] = $rel_url;
3700
3701                         return build_url($parts);
3702
3703                 } else {
3704                         $parts = parse_url($url);
3705                         if (!isset($parts['path'])) {
3706                                 $parts['path'] = '/';
3707                         }
3708                         $dir = $parts['path'];
3709                         if (substr($dir, -1) !== '/') {
3710                                 $dir = dirname($parts['path']);
3711                                 $dir !== '/' && $dir .= '/';
3712                         }
3713                         $parts['path'] = $dir . $rel_url;
3714
3715                         return build_url($parts);
3716                 }
3717         }
3718
3719         function sphinx_search($query, $offset = 0, $limit = 30) {
3720                 require_once 'lib/sphinxapi.php';
3721
3722                 $sphinxClient = new SphinxClient();
3723
3724                 $sphinxClient->SetServer('localhost', 9312);
3725                 $sphinxClient->SetConnectTimeout(1);
3726
3727                 $sphinxClient->SetFieldWeights(array('title' => 70, 'content' => 30,
3728                         'feed_title' => 20));
3729
3730                 $sphinxClient->SetMatchMode(SPH_MATCH_EXTENDED2);
3731                 $sphinxClient->SetRankingMode(SPH_RANK_PROXIMITY_BM25);
3732                 $sphinxClient->SetLimits($offset, $limit, 1000);
3733                 $sphinxClient->SetArrayResult(false);
3734                 $sphinxClient->SetFilter('owner_uid', array($_SESSION['uid']));
3735
3736                 $result = $sphinxClient->Query($query, SPHINX_INDEX);
3737
3738                 $ids = array();
3739
3740                 if (is_array($result['matches'])) {
3741                         foreach (array_keys($result['matches']) as $int_id) {
3742                                 $ref_id = $result['matches'][$int_id]['attrs']['ref_id'];
3743                                 array_push($ids, $ref_id);
3744                         }
3745                 }
3746
3747                 return $ids;
3748         }
3749
3750         function cleanup_tags($link, $days = 14, $limit = 1000) {
3751
3752                 if (DB_TYPE == "pgsql") {
3753                         $interval_query = "date_updated < NOW() - INTERVAL '$days days'";
3754                 } else if (DB_TYPE == "mysql") {
3755                         $interval_query = "date_updated < DATE_SUB(NOW(), INTERVAL $days DAY)";
3756                 }
3757
3758                 $tags_deleted = 0;
3759
3760                 while ($limit > 0) {
3761                         $limit_part = 500;
3762
3763                         $query = "SELECT ttrss_tags.id AS id
3764                                 FROM ttrss_tags, ttrss_user_entries, ttrss_entries
3765                                 WHERE post_int_id = int_id AND $interval_query AND
3766                                 ref_id = ttrss_entries.id AND tag_cache != '' LIMIT $limit_part";
3767
3768                         $result = db_query($link, $query);
3769
3770                         $ids = array();
3771
3772                         while ($line = db_fetch_assoc($result)) {
3773                                 array_push($ids, $line['id']);
3774                         }
3775
3776                         if (count($ids) > 0) {
3777                                 $ids = join(",", $ids);
3778                                 print ".";
3779
3780                                 $tmp_result = db_query($link, "DELETE FROM ttrss_tags WHERE id IN ($ids)");
3781                                 $tags_deleted += db_affected_rows($link, $tmp_result);
3782                         } else {
3783                                 break;
3784                         }
3785
3786                         $limit -= $limit_part;
3787                 }
3788
3789                 print "\n";
3790
3791                 return $tags_deleted;
3792         }
3793
3794         function print_user_stylesheet($link) {
3795                 $value = get_pref($link, 'USER_STYLESHEET');
3796
3797                 if ($value) {
3798                         print "<style type=\"text/css\">";
3799                         print str_replace("<br/>", "\n", $value);
3800                         print "</style>";
3801                 }
3802
3803         }
3804
3805         function rewrite_urls($html) {
3806                 libxml_use_internal_errors(true);
3807
3808                 $charset_hack = '<head>
3809                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
3810                 </head>';
3811
3812                 $doc = new DOMDocument();
3813                 $doc->loadHTML($charset_hack . $html);
3814                 $xpath = new DOMXPath($doc);
3815
3816                 $entries = $xpath->query('//*/text()');
3817
3818                 foreach ($entries as $entry) {
3819                         if (strstr($entry->wholeText, "://") !== false) {
3820                                 $text = preg_replace("/((?<!=.)((http|https|ftp)+):\/\/[^ ,!]+)/i",
3821                                         "<a target=\"_blank\" href=\"\\1\">\\1</a>", $entry->wholeText);
3822
3823                                 if ($text != $entry->wholeText) {
3824                                         $cdoc = new DOMDocument();
3825                                         $cdoc->loadHTML($charset_hack . $text);
3826
3827
3828                                         foreach ($cdoc->childNodes as $cnode) {
3829                                                 $cnode = $doc->importNode($cnode, true);
3830
3831                                                 if ($cnode) {
3832                                                         $entry->parentNode->insertBefore($cnode);
3833                                                 }
3834                                         }
3835
3836                                         $entry->parentNode->removeChild($entry);
3837
3838                                 }
3839                         }
3840                 }
3841
3842                 $node = $doc->getElementsByTagName('body')->item(0);
3843
3844                 // http://tt-rss.org/forum/viewtopic.php?f=1&t=970
3845                 if ($node)
3846                         return $doc->saveXML($node);
3847                 else
3848                         return $html;
3849         }
3850
3851         function filter_to_sql($link, $filter, $owner_uid) {
3852                 $query = array();
3853
3854                 if (DB_TYPE == "pgsql")
3855                         $reg_qpart = "~";
3856                 else
3857                         $reg_qpart = "REGEXP";
3858
3859                 foreach ($filter["rules"] AS $rule) {
3860                         $regexp_valid = preg_match('/' . $rule['reg_exp'] . '/',
3861                                 $rule['reg_exp']) !== FALSE;
3862
3863                         if ($regexp_valid) {
3864
3865                                 $rule['reg_exp'] = db_escape_string($rule['reg_exp']);
3866
3867                                 switch ($rule["type"]) {
3868                                         case "title":
3869                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
3870                                                         $rule['reg_exp'] . "')";
3871                                                 break;
3872                                         case "content":
3873                                                 $qpart = "LOWER(ttrss_entries.content) $reg_qpart LOWER('".
3874                                                         $rule['reg_exp'] . "')";
3875                                                 break;
3876                                         case "both":
3877                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
3878                                                         $rule['reg_exp'] . "') OR LOWER(" .
3879                                                         "ttrss_entries.content) $reg_qpart LOWER('" . $rule['reg_exp'] . "')";
3880                                                 break;
3881                                         case "tag":
3882                                                 $qpart = "LOWER(ttrss_user_entries.tag_cache) $reg_qpart LOWER('".
3883                                                         $rule['reg_exp'] . "')";
3884                                                 break;
3885                                         case "link":
3886                                                 $qpart = "LOWER(ttrss_entries.link) $reg_qpart LOWER('".
3887                                                         $rule['reg_exp'] . "')";
3888                                                 break;
3889                                         case "author":
3890                                                 $qpart = "LOWER(ttrss_entries.author) $reg_qpart LOWER('".
3891                                                         $rule['reg_exp'] . "')";
3892                                                 break;
3893                                 }
3894
3895                                 if (isset($rule["feed_id"]) && $rule["feed_id"] > 0) {
3896                                         $qpart .= " AND feed_id = " . db_escape_string($rule["feed_id"]);
3897                                 }
3898
3899                                 if (isset($rule["cat_id"])) {
3900
3901                                         if ($rule["cat_id"] > 0) {
3902                                                 $children = getChildCategories($link, $rule["cat_id"], $owner_uid);
3903                                                 array_push($children, $rule["cat_id"]);
3904
3905                                                 $children = join(",", $children);
3906
3907                                                 $cat_qpart = "cat_id IN ($children)";
3908                                         } else {
3909                                                 $cat_qpart = "cat_id IS NULL";
3910                                         }
3911
3912                                         $qpart .= " AND $cat_qpart";
3913                                 }
3914
3915                                 array_push($query, "($qpart)");
3916
3917                         }
3918                 }
3919
3920                 if (count($query) > 0) {
3921                         return "(" . join($filter["match_any_rule"] ? "OR" : "AND", $query) . ")";
3922                 } else {
3923                         return "(false)";
3924                 }
3925         }
3926
3927         if (!function_exists('gzdecode')) {
3928                 function gzdecode($string) { // no support for 2nd argument
3929                         return file_get_contents('compress.zlib://data:who/cares;base64,'.
3930                                 base64_encode($string));
3931                 }
3932         }
3933
3934         function get_random_bytes($length) {
3935                 if (function_exists('openssl_random_pseudo_bytes')) {
3936                         return openssl_random_pseudo_bytes($length);
3937                 } else {
3938                         $output = "";
3939
3940                         for ($i = 0; $i < $length; $i++)
3941                                 $output .= chr(mt_rand(0, 255));
3942
3943                         return $output;
3944                 }
3945         }
3946
3947         function read_stdin() {
3948                 $fp = fopen("php://stdin", "r");
3949
3950                 if ($fp) {
3951                         $line = trim(fgets($fp));
3952                         fclose($fp);
3953                         return $line;
3954                 }
3955
3956                 return null;
3957         }
3958
3959         function tmpdirname($path, $prefix) {
3960                 // Use PHP's tmpfile function to create a temporary
3961                 // directory name. Delete the file and keep the name.
3962                 $tempname = tempnam($path,$prefix);
3963                 if (!$tempname)
3964                         return false;
3965
3966                 if (!unlink($tempname))
3967                         return false;
3968
3969        return $tempname;
3970         }
3971
3972         function getFeedCategory($link, $feed) {
3973                 $result = db_query($link, "SELECT cat_id FROM ttrss_feeds
3974                         WHERE id = '$feed'");
3975
3976                 if (db_num_rows($result) > 0) {
3977                         return db_fetch_result($result, 0, "cat_id");
3978                 } else {
3979                         return false;
3980                 }
3981
3982         }
3983
3984         function implements_interface($class, $interface) {
3985                 return in_array($interface, class_implements($class));
3986         }
3987
3988         function geturl($url){
3989
3990                 (function_exists('curl_init')) ? '' : die('cURL Must be installed for geturl function to work. Ask your host to enable it or uncomment extension=php_curl.dll in php.ini');
3991
3992                 $curl = curl_init();
3993                 $header[0] = "Accept: text/xml,application/xml,application/xhtml+xml,";
3994                 $header[0] .= "text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5";
3995                 $header[] = "Cache-Control: max-age=0";
3996                 $header[] = "Connection: keep-alive";
3997                 $header[] = "Keep-Alive: 300";
3998                 $header[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
3999                 $header[] = "Accept-Language: en-us,en;q=0.5";
4000                 $header[] = "Pragma: ";
4001
4002                 curl_setopt($curl, CURLOPT_URL, $url);
4003                 curl_setopt($curl, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 5.1; rv:5.0) Gecko/20100101 Firefox/5.0 Firefox/5.0');
4004                 curl_setopt($curl, CURLOPT_HTTPHEADER, $header);
4005                 curl_setopt($curl, CURLOPT_HEADER, true);
4006                 curl_setopt($curl, CURLOPT_REFERER, $url);
4007                 curl_setopt($curl, CURLOPT_ENCODING, 'gzip,deflate');
4008                 curl_setopt($curl, CURLOPT_AUTOREFERER, true);
4009                 curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
4010                 //curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true); //CURLOPT_FOLLOWLOCATION Disabled...
4011                 curl_setopt($curl, CURLOPT_TIMEOUT, 60);
4012
4013                 $html = curl_exec($curl);
4014
4015                 $status = curl_getinfo($curl);
4016                 curl_close($curl);
4017
4018                 if($status['http_code']!=200){
4019                         if($status['http_code'] == 301 || $status['http_code'] == 302) {
4020                                 list($header) = explode("\r\n\r\n", $html, 2);
4021                                 $matches = array();
4022                                 preg_match("/(Location:|URI:)[^(\n)]*/", $header, $matches);
4023                                 $url = trim(str_replace($matches[1],"",$matches[0]));
4024                                 $url_parsed = parse_url($url);
4025                                 return (isset($url_parsed))? geturl($url, $referer):'';
4026                         }
4027                         $oline='';
4028                         foreach($status as $key=>$eline){$oline.='['.$key.']'.$eline.' ';}
4029                         $line =$oline." \r\n ".$url."\r\n-----------------\r\n";
4030                         $handle = @fopen('./curl.error.log', 'a');
4031                         fwrite($handle, $line);
4032                         return FALSE;
4033                 }
4034                 return $url;
4035         }
4036
4037         function get_minified_js($files) {
4038                 require_once 'lib/jshrink/Minifier.php';
4039
4040                 $rv = '';
4041
4042                 foreach ($files as $js) {
4043                         if (!isset($_GET['debug'])) {
4044                                 $cached_file = CACHE_DIR . "/js/$js.js";
4045
4046                                 if (file_exists($cached_file) &&
4047                                                 is_readable($cached_file) &&
4048                                                 filemtime($cached_file) >= filemtime("js/$js.js")) {
4049
4050                                         $rv .= file_get_contents($cached_file);
4051
4052                                 } else {
4053                                         $minified = JShrink\Minifier::minify(file_get_contents("js/$js.js"));
4054                                         file_put_contents($cached_file, $minified);
4055                                         $rv .= $minified;
4056                                 }
4057                         } else {
4058                                 $rv .= file_get_contents("js/$js.js");
4059                         }
4060                 }
4061
4062                 return $rv;
4063         }
4064
4065 ?>