]> git.wh0rd.org Git - tt-rss.git/blob - include/functions.php
getFeedArticles(): Use valid query to get count of matching articles.
[tt-rss.git] / include / functions.php
1 <?php
2         define('EXPECTED_CONFIG_VERSION', 26);
3         define('SCHEMA_VERSION', 123);
4
5         define('LABEL_BASE_INDEX', -1024);
6         define('PLUGIN_FEED_BASE_INDEX', -128);
7
8         define('COOKIE_LIFETIME_LONG', 86400*365);
9
10         $fetch_last_error = false;
11         $fetch_last_error_code = false;
12         $fetch_last_content_type = false;
13         $fetch_curl_used = false;
14         $suppress_debugging = false;
15
16         mb_internal_encoding("UTF-8");
17         date_default_timezone_set('UTC');
18         if (defined('E_DEPRECATED')) {
19                 error_reporting(E_ALL & ~E_NOTICE & ~E_DEPRECATED);
20         } else {
21                 error_reporting(E_ALL & ~E_NOTICE);
22         }
23
24         require_once 'config.php';
25
26         /**
27          * Define a constant if not already defined
28          *
29          * @param string $name The constant name.
30          * @param mixed $value The constant value.
31          * @access public
32          * @return boolean True if defined successfully or not.
33          */
34         function define_default($name, $value) {
35                 defined($name) or define($name, $value);
36         }
37
38         ///// Some defaults that you can override in config.php //////
39
40         define_default('FEED_FETCH_TIMEOUT', 45);
41         // How may seconds to wait for response when requesting feed from a site
42         define_default('FEED_FETCH_NO_CACHE_TIMEOUT', 15);
43         // How may seconds to wait for response when requesting feed from a
44         // site when that feed wasn't cached before
45         define_default('FILE_FETCH_TIMEOUT', 45);
46         // Default timeout when fetching files from remote sites
47         define_default('FILE_FETCH_CONNECT_TIMEOUT', 15);
48         // How many seconds to wait for initial response from website when
49         // fetching files from remote sites
50
51         if (DB_TYPE == "pgsql") {
52                 define('SUBSTRING_FOR_DATE', 'SUBSTRING_FOR_DATE');
53         } else {
54                 define('SUBSTRING_FOR_DATE', 'SUBSTRING');
55         }
56
57         /**
58          * Return available translations names.
59          *
60          * @access public
61          * @return array A array of available translations.
62          */
63         function get_translations() {
64                 $tr = array(
65                                         "auto"  => "Detect automatically",
66                                         "ca_CA" => "Català",
67                                         "cs_CZ" => "Česky",
68                                         "en_US" => "English",
69                                         "es_ES" => "Español",
70                                         "de_DE" => "Deutsch",
71                                         "fr_FR" => "Français",
72                                         "hu_HU" => "Magyar (Hungarian)",
73                                         "it_IT" => "Italiano",
74                                         "ja_JP" => "日本語 (Japanese)",
75                                         "lv_LV" => "Latviešu",
76                                         "nb_NO" => "Norwegian bokmål",
77                                         "nl_NL" => "Dutch",
78                                         "pl_PL" => "Polski",
79                                         "ru_RU" => "Русский",
80                                         "pt_BR" => "Portuguese/Brazil",
81                                         "zh_CN" => "Simplified Chinese",
82                                         "sv_SE" => "Svenska",
83                                         "fi_FI" => "Suomi");
84
85                 return $tr;
86         }
87
88         require_once "lib/accept-to-gettext.php";
89         require_once "lib/gettext/gettext.inc";
90
91         require_once "lib/languagedetect/LanguageDetect.php";
92
93         function startup_gettext() {
94
95                 # Get locale from Accept-Language header
96                 $lang = al2gt(array_keys(get_translations()), "text/html");
97
98                 if (defined('_TRANSLATION_OVERRIDE_DEFAULT')) {
99                         $lang = _TRANSLATION_OVERRIDE_DEFAULT;
100                 }
101
102                 if ($_SESSION["uid"] && get_schema_version() >= 120) {
103                         $pref_lang = get_pref("USER_LANGUAGE", $_SESSION["uid"]);
104
105                         if ($pref_lang && $pref_lang != 'auto') {
106                                 $lang = $pref_lang;
107                         }
108                 }
109
110                 if ($lang) {
111                         if (defined('LC_MESSAGES')) {
112                                 _setlocale(LC_MESSAGES, $lang);
113                         } else if (defined('LC_ALL')) {
114                                 _setlocale(LC_ALL, $lang);
115                         }
116
117                         _bindtextdomain("messages", "locale");
118
119                         _textdomain("messages");
120                         _bind_textdomain_codeset("messages", "UTF-8");
121                 }
122         }
123
124         require_once 'db-prefs.php';
125         require_once 'version.php';
126         require_once 'ccache.php';
127         require_once 'labels.php';
128
129         define('SELF_USER_AGENT', 'Tiny Tiny RSS/' . VERSION . ' (http://tt-rss.org/)');
130         ini_set('user_agent', SELF_USER_AGENT);
131
132         require_once 'lib/pubsubhubbub/publisher.php';
133
134         $schema_version = false;
135
136         function _debug_suppress($suppress) {
137                 global $suppress_debugging;
138
139                 $suppress_debugging = $suppress;
140         }
141
142         /**
143          * Print a timestamped debug message.
144          *
145          * @param string $msg The debug message.
146          * @return void
147          */
148         function _debug($msg, $show = true) {
149                 global $suppress_debugging;
150
151                 //echo "[$suppress_debugging] $msg $show\n";
152
153                 if ($suppress_debugging) return false;
154
155                 $ts = strftime("%H:%M:%S", time());
156                 if (function_exists('posix_getpid')) {
157                         $ts = "$ts/" . posix_getpid();
158                 }
159
160                 if ($show && !(defined('QUIET') && QUIET)) {
161                         print "[$ts] $msg\n";
162                 }
163
164                 if (defined('LOGFILE'))  {
165                         $fp = fopen(LOGFILE, 'a+');
166
167                         if ($fp) {
168                                 $locked = false;
169
170                                 if (function_exists("flock")) {
171                                         $tries = 0;
172
173                                         // try to lock logfile for writing
174                                         while ($tries < 5 && !$locked = flock($fp, LOCK_EX | LOCK_NB)) {
175                                                 sleep(1);
176                                                 ++$tries;
177                                         }
178
179                                         if (!$locked) {
180                                                 fclose($fp);
181                                                 return;
182                                         }
183                                 }
184
185                                 fputs($fp, "[$ts] $msg\n");
186
187                                 if (function_exists("flock")) {
188                                         flock($fp, LOCK_UN);
189                                 }
190
191                                 fclose($fp);
192                         }
193                 }
194
195         } // function _debug
196
197         /**
198          * Purge a feed old posts.
199          *
200          * @param mixed $link A database connection.
201          * @param mixed $feed_id The id of the purged feed.
202          * @param mixed $purge_interval Olderness of purged posts.
203          * @param boolean $debug Set to True to enable the debug. False by default.
204          * @access public
205          * @return void
206          */
207         function purge_feed($feed_id, $purge_interval, $debug = false) {
208
209                 if (!$purge_interval) $purge_interval = feed_purge_interval($feed_id);
210
211                 $rows = -1;
212
213                 $result = db_query(
214                         "SELECT owner_uid FROM ttrss_feeds WHERE id = '$feed_id'");
215
216                 $owner_uid = false;
217
218                 if (db_num_rows($result) == 1) {
219                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
220                 }
221
222                 if ($purge_interval == -1 || !$purge_interval) {
223                         if ($owner_uid) {
224                                 ccache_update($feed_id, $owner_uid);
225                         }
226                         return;
227                 }
228
229                 if (!$owner_uid) return;
230
231                 if (FORCE_ARTICLE_PURGE == 0) {
232                         $purge_unread = get_pref("PURGE_UNREAD_ARTICLES",
233                                 $owner_uid, false);
234                 } else {
235                         $purge_unread = true;
236                         $purge_interval = FORCE_ARTICLE_PURGE;
237                 }
238
239                 if (!$purge_unread) $query_limit = " unread = false AND ";
240
241                 if (DB_TYPE == "pgsql") {
242                         $pg_version = get_pgsql_version();
243
244                         if (preg_match("/^7\./", $pg_version) || preg_match("/^8\.0/", $pg_version)) {
245
246                                 $result = db_query("DELETE FROM ttrss_user_entries WHERE
247                                         ttrss_entries.id = ref_id AND
248                                         marked = false AND
249                                         feed_id = '$feed_id' AND
250                                         $query_limit
251                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
252
253                         } else {
254
255                                 $result = db_query("DELETE FROM ttrss_user_entries
256                                         USING ttrss_entries
257                                         WHERE ttrss_entries.id = ref_id AND
258                                         marked = false AND
259                                         feed_id = '$feed_id' AND
260                                         $query_limit
261                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
262                         }
263
264                 } else {
265
266 /*                      $result = db_query("DELETE FROM ttrss_user_entries WHERE
267                                 marked = false AND feed_id = '$feed_id' AND
268                                 (SELECT date_updated FROM ttrss_entries WHERE
269                                         id = ref_id) < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)"); */
270
271                         $result = db_query("DELETE FROM ttrss_user_entries
272                                 USING ttrss_user_entries, ttrss_entries
273                                 WHERE ttrss_entries.id = ref_id AND
274                                 marked = false AND
275                                 feed_id = '$feed_id' AND
276                                 $query_limit
277                                 ttrss_entries.date_updated < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)");
278                 }
279
280                 $rows = db_affected_rows($result);
281
282                 ccache_update($feed_id, $owner_uid);
283
284                 if ($debug) {
285                         _debug("Purged feed $feed_id ($purge_interval): deleted $rows articles");
286                 }
287
288                 return $rows;
289         } // function purge_feed
290
291         function feed_purge_interval($feed_id) {
292
293                 $result = db_query("SELECT purge_interval, owner_uid FROM ttrss_feeds
294                         WHERE id = '$feed_id'");
295
296                 if (db_num_rows($result) == 1) {
297                         $purge_interval = db_fetch_result($result, 0, "purge_interval");
298                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
299
300                         if ($purge_interval == 0) $purge_interval = get_pref(
301                                 'PURGE_OLD_DAYS', $owner_uid);
302
303                         return $purge_interval;
304
305                 } else {
306                         return -1;
307                 }
308         }
309
310         function purge_orphans($do_output = false) {
311
312                 // purge orphaned posts in main content table
313                 $result = db_query("DELETE FROM ttrss_entries WHERE
314                         (SELECT COUNT(int_id) FROM ttrss_user_entries WHERE ref_id = id) = 0");
315
316                 if ($do_output) {
317                         $rows = db_affected_rows($result);
318                         _debug("Purged $rows orphaned posts.");
319                 }
320         }
321
322         function get_feed_update_interval($feed_id) {
323                 $result = db_query("SELECT owner_uid, update_interval FROM
324                         ttrss_feeds WHERE id = '$feed_id'");
325
326                 if (db_num_rows($result) == 1) {
327                         $update_interval = db_fetch_result($result, 0, "update_interval");
328                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
329
330                         if ($update_interval != 0) {
331                                 return $update_interval;
332                         } else {
333                                 return get_pref('DEFAULT_UPDATE_INTERVAL', $owner_uid, false);
334                         }
335
336                 } else {
337                         return -1;
338                 }
339         }
340
341         function fetch_file_contents($url, $type = false, $login = false, $pass = false, $post_query = false, $timeout = false, $timestamp = 0) {
342
343                 global $fetch_last_error;
344                 global $fetch_last_error_code;
345                 global $fetch_last_content_type;
346                 global $fetch_curl_used;
347
348                 $url = str_replace(' ', '%20', $url);
349
350                 if (!defined('NO_CURL') && function_exists('curl_init')) {
351
352                         $fetch_curl_used = true;
353
354                         if (ini_get("safe_mode") || ini_get("open_basedir")) {
355                                 $new_url = geturl($url);
356                                 if (!$new_url) {
357                                     // geturl has already populated $fetch_last_error
358                                     return false;
359                                 }
360                                 $ch = curl_init($new_url);
361                         } else {
362                                 $ch = curl_init($url);
363                         }
364
365                         if ($timestamp && !$post_query) {
366                                 curl_setopt($ch, CURLOPT_HTTPHEADER,
367                                         array("If-Modified-Since: ".gmdate('D, d M Y H:i:s \G\M\T', $timestamp)));
368                         }
369
370                         curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, $timeout ? $timeout : FILE_FETCH_CONNECT_TIMEOUT);
371                         curl_setopt($ch, CURLOPT_TIMEOUT, $timeout ? $timeout : FILE_FETCH_TIMEOUT);
372                         curl_setopt($ch, CURLOPT_FOLLOWLOCATION, !ini_get("safe_mode") && !ini_get("open_basedir"));
373                         curl_setopt($ch, CURLOPT_MAXREDIRS, 20);
374                         curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
375                         curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
376                         curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
377                         curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_ANY);
378                         curl_setopt($ch, CURLOPT_USERAGENT, SELF_USER_AGENT);
379                         curl_setopt($ch, CURLOPT_ENCODING, "");
380                         curl_setopt($ch, CURLOPT_REFERER, $url);
381
382                         if (!ini_get("safe_mode") && !ini_get("open_basedir")) {
383                                 curl_setopt($ch, CURLOPT_COOKIEJAR, "/dev/null");
384                         }
385
386                         if (defined('_CURL_HTTP_PROXY')) {
387                                 curl_setopt($ch, CURLOPT_PROXY, _CURL_HTTP_PROXY);
388                         }
389
390                         if ($post_query) {
391                                 curl_setopt($ch, CURLOPT_POST, true);
392                                 curl_setopt($ch, CURLOPT_POSTFIELDS, $post_query);
393                         }
394
395                         if ((OPENSSL_VERSION_NUMBER >= 0x0090808f) && (OPENSSL_VERSION_NUMBER < 0x10000000)) {
396                                 curl_setopt($ch, CURLOPT_SSLVERSION, 3);
397                         }
398
399                         if ($login && $pass)
400                                 curl_setopt($ch, CURLOPT_USERPWD, "$login:$pass");
401
402                         $contents = @curl_exec($ch);
403
404                         if (curl_errno($ch) === 23 || curl_errno($ch) === 61) {
405                                 curl_setopt($ch, CURLOPT_ENCODING, 'none');
406                                 $contents = @curl_exec($ch);
407                         }
408
409                         if ($contents === false) {
410                                 $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
411                                 curl_close($ch);
412                                 return false;
413                         }
414
415                         $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
416                         $fetch_last_content_type = curl_getinfo($ch, CURLINFO_CONTENT_TYPE);
417
418                         $fetch_last_error_code = $http_code;
419
420                         if ($http_code != 200 || $type && strpos($fetch_last_content_type, "$type") === false) {
421                                 if (curl_errno($ch) != 0) {
422                                         $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
423                                 } else {
424                                         $fetch_last_error = "HTTP Code: $http_code";
425                                 }
426                                 curl_close($ch);
427                                 return false;
428                         }
429
430                         curl_close($ch);
431
432                         return $contents;
433                 } else {
434
435                         $fetch_curl_used = false;
436
437                         if ($login && $pass){
438                                 $url_parts = array();
439
440                                 preg_match("/(^[^:]*):\/\/(.*)/", $url, $url_parts);
441
442                                 $pass = urlencode($pass);
443
444                                 if ($url_parts[1] && $url_parts[2]) {
445                                         $url = $url_parts[1] . "://$login:$pass@" . $url_parts[2];
446                                 }
447                         }
448
449                         if (!$post_query && $timestamp) {
450                                 $context = stream_context_create(array(
451                                         'http' => array(
452                                                 'method' => 'GET',
453                                                 'header' => "If-Modified-Since: ".gmdate("D, d M Y H:i:s \\G\\M\\T\r\n", $timestamp)
454                                         )));
455                         } else {
456                                 $context = NULL;
457                         }
458
459                         $old_error = error_get_last();
460
461                         $data = @file_get_contents($url, false, $context);
462
463                         $fetch_last_content_type = false;  // reset if no type was sent from server
464                         if (isset($http_response_header) && is_array($http_response_header)) {
465                                 foreach ($http_response_header as $h) {
466                                         if (substr(strtolower($h), 0, 13) == 'content-type:') {
467                                                 $fetch_last_content_type = substr($h, 14);
468                                                 // don't abort here b/c there might be more than one
469                                                 // e.g. if we were being redirected -- last one is the right one
470                                         }
471
472                                         if (substr(strtolower($h), 0, 7) == 'http/1.') {
473                                                 $fetch_last_error_code = (int) substr($h, 9, 3);
474                                         }
475                                 }
476                         }
477
478                         if (!$data) {
479                                 $error = error_get_last();
480
481                                 if ($error['message'] != $old_error['message']) {
482                                         $fetch_last_error = $error["message"];
483                                 } else {
484                                         $fetch_last_error = "HTTP Code: $fetch_last_error_code";
485                                 }
486                         }
487                         return $data;
488                 }
489
490         }
491
492         /**
493          * Try to determine the favicon URL for a feed.
494          * adapted from wordpress favicon plugin by Jeff Minard (http://thecodepro.com/)
495          * http://dev.wp-plugins.org/file/favatars/trunk/favatars.php
496          *
497          * @param string $url A feed or page URL
498          * @access public
499          * @return mixed The favicon URL, or false if none was found.
500          */
501         function get_favicon_url($url) {
502
503                 $favicon_url = false;
504
505                 if ($html = @fetch_file_contents($url)) {
506
507                         libxml_use_internal_errors(true);
508
509                         $doc = new DOMDocument();
510                         $doc->loadHTML($html);
511                         $xpath = new DOMXPath($doc);
512
513                         $base = $xpath->query('/html/head/base');
514                         foreach ($base as $b) {
515                                 $url = $b->getAttribute("href");
516                                 break;
517                         }
518
519                         $entries = $xpath->query('/html/head/link[@rel="shortcut icon" or @rel="icon"]');
520                         if (count($entries) > 0) {
521                                 foreach ($entries as $entry) {
522                                         $favicon_url = rewrite_relative_url($url, $entry->getAttribute("href"));
523                                         break;
524                                 }
525                         }
526                 }
527
528                 if (!$favicon_url)
529                         $favicon_url = rewrite_relative_url($url, "/favicon.ico");
530
531                 return $favicon_url;
532         } // function get_favicon_url
533
534         function check_feed_favicon($site_url, $feed) {
535 #               print "FAVICON [$site_url]: $favicon_url\n";
536
537                 $icon_file = ICONS_DIR . "/$feed.ico";
538
539                 if (!file_exists($icon_file)) {
540                         $favicon_url = get_favicon_url($site_url);
541
542                         if ($favicon_url) {
543                                 // Limiting to "image" type misses those served with text/plain
544                                 $contents = fetch_file_contents($favicon_url); // , "image");
545
546                                 if ($contents) {
547                                         // Crude image type matching.
548                                         // Patterns gleaned from the file(1) source code.
549                                         if (preg_match('/^\x00\x00\x01\x00/', $contents)) {
550                                                 // 0       string  \000\000\001\000        MS Windows icon resource
551                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa MS Windows icon resource");
552                                         }
553                                         elseif (preg_match('/^GIF8/', $contents)) {
554                                                 // 0       string          GIF8            GIF image data
555                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa GIF image");
556                                         }
557                                         elseif (preg_match('/^\x89PNG\x0d\x0a\x1a\x0a/', $contents)) {
558                                                 // 0       string          \x89PNG\x0d\x0a\x1a\x0a         PNG image data
559                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa PNG image");
560                                         }
561                                         elseif (preg_match('/^\xff\xd8/', $contents)) {
562                                                 // 0       beshort         0xffd8          JPEG image data
563                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa JPG image");
564                                         }
565                                         else {
566                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa UNKNOWN type");
567                                                 $contents = "";
568                                         }
569                                 }
570
571                                 if ($contents) {
572                                         $fp = @fopen($icon_file, "w");
573
574                                         if ($fp) {
575                                                 fwrite($fp, $contents);
576                                                 fclose($fp);
577                                                 chmod($icon_file, 0644);
578                                         }
579                                 }
580                         }
581             return $icon_file;
582                 }
583         }
584
585         function print_select($id, $default, $values, $attributes = "") {
586                 print "<select name=\"$id\" id=\"$id\" $attributes>";
587                 foreach ($values as $v) {
588                         if ($v == $default)
589                                 $sel = "selected=\"1\"";
590                          else
591                                 $sel = "";
592
593                         $v = trim($v);
594
595                         print "<option value=\"$v\" $sel>$v</option>";
596                 }
597                 print "</select>";
598         }
599
600         function print_select_hash($id, $default, $values, $attributes = "") {
601                 print "<select name=\"$id\" id='$id' $attributes>";
602                 foreach (array_keys($values) as $v) {
603                         if ($v == $default)
604                                 $sel = 'selected="selected"';
605                          else
606                                 $sel = "";
607
608                         $v = trim($v);
609
610                         print "<option $sel value=\"$v\">".$values[$v]."</option>";
611                 }
612
613                 print "</select>";
614         }
615
616         function print_radio($id, $default, $true_is, $values, $attributes = "") {
617                 foreach ($values as $v) {
618
619                         if ($v == $default)
620                                 $sel = "checked";
621                          else
622                                 $sel = "";
623
624                         if ($v == $true_is) {
625                                 $sel .= " value=\"1\"";
626                         } else {
627                                 $sel .= " value=\"0\"";
628                         }
629
630                         print "<input class=\"noborder\" dojoType=\"dijit.form.RadioButton\"
631                                 type=\"radio\" $sel $attributes name=\"$id\">&nbsp;$v&nbsp;";
632
633                 }
634         }
635
636         function initialize_user_prefs($uid, $profile = false) {
637
638                 $uid = db_escape_string($uid);
639
640                 if (!$profile) {
641                         $profile = "NULL";
642                         $profile_qpart = "AND profile IS NULL";
643                 } else {
644                         $profile_qpart = "AND profile = '$profile'";
645                 }
646
647                 if (get_schema_version() < 63) $profile_qpart = "";
648
649                 db_query("BEGIN");
650
651                 $result = db_query("SELECT pref_name,def_value FROM ttrss_prefs");
652
653                 $u_result = db_query("SELECT pref_name
654                         FROM ttrss_user_prefs WHERE owner_uid = '$uid' $profile_qpart");
655
656                 $active_prefs = array();
657
658                 while ($line = db_fetch_assoc($u_result)) {
659                         array_push($active_prefs, $line["pref_name"]);
660                 }
661
662                 while ($line = db_fetch_assoc($result)) {
663                         if (array_search($line["pref_name"], $active_prefs) === FALSE) {
664 //                              print "adding " . $line["pref_name"] . "<br>";
665
666                                 $line["def_value"] = db_escape_string($line["def_value"]);
667                                 $line["pref_name"] = db_escape_string($line["pref_name"]);
668
669                                 if (get_schema_version() < 63) {
670                                         db_query("INSERT INTO ttrss_user_prefs
671                                                 (owner_uid,pref_name,value) VALUES
672                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."')");
673
674                                 } else {
675                                         db_query("INSERT INTO ttrss_user_prefs
676                                                 (owner_uid,pref_name,value, profile) VALUES
677                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."', $profile)");
678                                 }
679
680                         }
681                 }
682
683                 db_query("COMMIT");
684
685         }
686
687         function get_ssl_certificate_id() {
688                 if ($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"]) {
689                         return sha1($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"] .
690                                 $_SERVER["REDIRECT_SSL_CLIENT_V_START"] .
691                                 $_SERVER["REDIRECT_SSL_CLIENT_V_END"] .
692                                 $_SERVER["REDIRECT_SSL_CLIENT_S_DN"]);
693                 }
694                 return "";
695         }
696
697         function authenticate_user($login, $password, $check_only = false) {
698
699                 if (!SINGLE_USER_MODE) {
700                         $user_id = false;
701
702                         foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_AUTH_USER) as $plugin) {
703
704                                 $user_id = (int) $plugin->authenticate($login, $password);
705
706                                 if ($user_id) {
707                                         $_SESSION["auth_module"] = strtolower(get_class($plugin));
708                                         break;
709                                 }
710                         }
711
712                         if ($user_id && !$check_only) {
713                                 @session_start();
714
715                                 $_SESSION["uid"] = $user_id;
716                                 $_SESSION["version"] = VERSION_STATIC;
717
718                                 $result = db_query("SELECT login,access_level,pwd_hash FROM ttrss_users
719                                         WHERE id = '$user_id'");
720
721                                 $_SESSION["name"] = db_fetch_result($result, 0, "login");
722                                 $_SESSION["access_level"] = db_fetch_result($result, 0, "access_level");
723                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
724
725                                 db_query("UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
726                                         $_SESSION["uid"]);
727
728                                 $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
729                                 $_SESSION["user_agent"] = sha1($_SERVER['HTTP_USER_AGENT']);
730                                 $_SESSION["pwd_hash"] = db_fetch_result($result, 0, "pwd_hash");
731
732                                 $_SESSION["last_version_check"] = time();
733
734                                 initialize_user_prefs($_SESSION["uid"]);
735
736                                 return true;
737                         }
738
739                         return false;
740
741                 } else {
742
743                         $_SESSION["uid"] = 1;
744                         $_SESSION["name"] = "admin";
745                         $_SESSION["access_level"] = 10;
746
747                         $_SESSION["hide_hello"] = true;
748                         $_SESSION["hide_logout"] = true;
749
750                         $_SESSION["auth_module"] = false;
751
752                         if (!$_SESSION["csrf_token"]) {
753                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
754                         }
755
756                         $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
757
758                         initialize_user_prefs($_SESSION["uid"]);
759
760                         return true;
761                 }
762         }
763
764         function make_password($length = 8) {
765
766                 $password = "";
767                 $possible = "0123456789abcdfghjkmnpqrstvwxyzABCDFGHJKMNPQRSTVWXYZ";
768
769         $i = 0;
770
771                 while ($i < $length) {
772                         $char = substr($possible, mt_rand(0, strlen($possible)-1), 1);
773
774                         if (!strstr($password, $char)) {
775                                 $password .= $char;
776                                 $i++;
777                         }
778                 }
779                 return $password;
780         }
781
782         // this is called after user is created to initialize default feeds, labels
783         // or whatever else
784
785         // user preferences are checked on every login, not here
786
787         function initialize_user($uid) {
788
789                 db_query("insert into ttrss_feeds (owner_uid,title,feed_url)
790                         values ('$uid', 'Tiny Tiny RSS: New Releases',
791                         'http://tt-rss.org/releases.rss')");
792
793                 db_query("insert into ttrss_feeds (owner_uid,title,feed_url)
794                         values ('$uid', 'Tiny Tiny RSS: Forum',
795                                 'http://tt-rss.org/forum/rss.php')");
796         }
797
798         function logout_user() {
799                 session_destroy();
800                 if (isset($_COOKIE[session_name()])) {
801                    setcookie(session_name(), '', time()-42000, '/');
802                 }
803         }
804
805         function validate_csrf($csrf_token) {
806                 return $csrf_token == $_SESSION['csrf_token'];
807         }
808
809         function load_user_plugins($owner_uid) {
810                 if ($owner_uid && SCHEMA_VERSION >= 100) {
811                         $plugins = get_pref("_ENABLED_PLUGINS", $owner_uid);
812
813                         PluginHost::getInstance()->load($plugins, PluginHost::KIND_USER, $owner_uid);
814
815                         if (get_schema_version() > 100) {
816                                 PluginHost::getInstance()->load_data();
817                         }
818                 }
819         }
820
821         function login_sequence() {
822                 if (SINGLE_USER_MODE) {
823                         @session_start();
824                         authenticate_user("admin", null);
825                         startup_gettext();
826                         load_user_plugins($_SESSION["uid"]);
827                 } else {
828                         if (!validate_session()) $_SESSION["uid"] = false;
829
830                         if (!$_SESSION["uid"]) {
831
832                                 if (AUTH_AUTO_LOGIN && authenticate_user(null, null)) {
833                                     $_SESSION["ref_schema_version"] = get_schema_version(true);
834                                 } else {
835                                          authenticate_user(null, null, true);
836                                 }
837
838                                 if (!$_SESSION["uid"]) {
839                                         @session_destroy();
840                                         setcookie(session_name(), '', time()-42000, '/');
841
842                                         render_login_form();
843                                         exit;
844                                 }
845
846                         } else {
847                                 /* bump login timestamp */
848                                 db_query("UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
849                                         $_SESSION["uid"]);
850                                 $_SESSION["last_login_update"] = time();
851                         }
852
853                         if ($_SESSION["uid"]) {
854                                 startup_gettext();
855                                 load_user_plugins($_SESSION["uid"]);
856
857                                 /* cleanup ccache */
858
859                                 db_query("DELETE FROM ttrss_counters_cache WHERE owner_uid = ".
860                                         $_SESSION["uid"] . " AND
861                                                 (SELECT COUNT(id) FROM ttrss_feeds WHERE
862                                                         ttrss_feeds.id = feed_id) = 0");
863
864                                 db_query("DELETE FROM ttrss_cat_counters_cache WHERE owner_uid = ".
865                                         $_SESSION["uid"] . " AND
866                                                 (SELECT COUNT(id) FROM ttrss_feed_categories WHERE
867                                                         ttrss_feed_categories.id = feed_id) = 0");
868
869                         }
870
871                 }
872         }
873
874         function truncate_string($str, $max_len, $suffix = '&hellip;') {
875                 if (mb_strlen($str, "utf-8") > $max_len - 3) {
876                         return mb_substr($str, 0, $max_len, "utf-8") . $suffix;
877                 } else {
878                         return $str;
879                 }
880         }
881
882         function convert_timestamp($timestamp, $source_tz, $dest_tz) {
883
884                 try {
885                         $source_tz = new DateTimeZone($source_tz);
886                 } catch (Exception $e) {
887                         $source_tz = new DateTimeZone('UTC');
888                 }
889
890                 try {
891                         $dest_tz = new DateTimeZone($dest_tz);
892                 } catch (Exception $e) {
893                         $dest_tz = new DateTimeZone('UTC');
894                 }
895
896                 $dt = new DateTime(date('Y-m-d H:i:s', $timestamp), $source_tz);
897                 return $dt->format('U') + $dest_tz->getOffset($dt);
898         }
899
900         function make_local_datetime($timestamp, $long, $owner_uid = false,
901                                         $no_smart_dt = false) {
902
903                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
904                 if (!$timestamp) $timestamp = '1970-01-01 0:00';
905
906                 global $utc_tz;
907                 global $user_tz;
908
909                 if (!$utc_tz) $utc_tz = new DateTimeZone('UTC');
910
911                 $timestamp = substr($timestamp, 0, 19);
912
913                 # We store date in UTC internally
914                 $dt = new DateTime($timestamp, $utc_tz);
915
916                 $user_tz_string = get_pref('USER_TIMEZONE', $owner_uid);
917
918                 if ($user_tz_string != 'Automatic') {
919
920                         try {
921                                 if (!$user_tz) $user_tz = new DateTimeZone($user_tz_string);
922                         } catch (Exception $e) {
923                                 $user_tz = $utc_tz;
924                         }
925
926                         $tz_offset = $user_tz->getOffset($dt);
927                 } else {
928                         $tz_offset = (int) -$_SESSION["clientTzOffset"];
929                 }
930
931                 $user_timestamp = $dt->format('U') + $tz_offset;
932
933                 if (!$no_smart_dt) {
934                         return smart_date_time($user_timestamp,
935                                 $tz_offset, $owner_uid);
936                 } else {
937                         if ($long)
938                                 $format = get_pref('LONG_DATE_FORMAT', $owner_uid);
939                         else
940                                 $format = get_pref('SHORT_DATE_FORMAT', $owner_uid);
941
942                         return date($format, $user_timestamp);
943                 }
944         }
945
946         function smart_date_time($timestamp, $tz_offset = 0, $owner_uid = false) {
947                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
948
949                 if (date("Y.m.d", $timestamp) == date("Y.m.d", time() + $tz_offset)) {
950                         return date("G:i", $timestamp);
951                 } else if (date("Y", $timestamp) == date("Y", time() + $tz_offset)) {
952                         $format = get_pref('SHORT_DATE_FORMAT', $owner_uid);
953                         return date($format, $timestamp);
954                 } else {
955                         $format = get_pref('LONG_DATE_FORMAT', $owner_uid);
956                         return date($format, $timestamp);
957                 }
958         }
959
960         function sql_bool_to_bool($s) {
961                 if ($s == "t" || $s == "1" || strtolower($s) == "true") {
962                         return true;
963                 } else {
964                         return false;
965                 }
966         }
967
968         function bool_to_sql_bool($s) {
969                 if ($s) {
970                         return "true";
971                 } else {
972                         return "false";
973                 }
974         }
975
976         // Session caching removed due to causing wrong redirects to upgrade
977         // script when get_schema_version() is called on an obsolete session
978         // created on a previous schema version.
979         function get_schema_version($nocache = false) {
980                 global $schema_version;
981
982                 if (!$schema_version && !$nocache) {
983                         $result = db_query("SELECT schema_version FROM ttrss_version");
984                         $version = db_fetch_result($result, 0, "schema_version");
985                         $schema_version = $version;
986                         return $version;
987                 } else {
988                         return $schema_version;
989                 }
990         }
991
992         function sanity_check() {
993                 require_once 'errors.php';
994
995                 $error_code = 0;
996                 $schema_version = get_schema_version(true);
997
998                 if ($schema_version != SCHEMA_VERSION) {
999                         $error_code = 5;
1000                 }
1001
1002                 if (DB_TYPE == "mysql") {
1003                         $result = db_query("SELECT true", false);
1004                         if (db_num_rows($result) != 1) {
1005                                 $error_code = 10;
1006                         }
1007                 }
1008
1009                 if (db_escape_string("testTEST") != "testTEST") {
1010                         $error_code = 12;
1011                 }
1012
1013                 return array("code" => $error_code, "message" => $ERRORS[$error_code]);
1014         }
1015
1016         function file_is_locked($filename) {
1017                 if (file_exists(LOCK_DIRECTORY . "/$filename")) {
1018                         if (function_exists('flock')) {
1019                                 $fp = @fopen(LOCK_DIRECTORY . "/$filename", "r");
1020                                 if ($fp) {
1021                                         if (flock($fp, LOCK_EX | LOCK_NB)) {
1022                                                 flock($fp, LOCK_UN);
1023                                                 fclose($fp);
1024                                                 return false;
1025                                         }
1026                                         fclose($fp);
1027                                         return true;
1028                                 } else {
1029                                         return false;
1030                                 }
1031                         }
1032                         return true; // consider the file always locked and skip the test
1033                 } else {
1034                         return false;
1035                 }
1036         }
1037
1038
1039         function make_lockfile($filename) {
1040                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
1041
1042                 if ($fp && flock($fp, LOCK_EX | LOCK_NB)) {
1043                         $stat_h = fstat($fp);
1044                         $stat_f = stat(LOCK_DIRECTORY . "/$filename");
1045
1046                         if (strtoupper(substr(PHP_OS, 0, 3)) !== 'WIN') {
1047                                 if ($stat_h["ino"] != $stat_f["ino"] ||
1048                                                 $stat_h["dev"] != $stat_f["dev"]) {
1049
1050                                         return false;
1051                                 }
1052                         }
1053
1054                         if (function_exists('posix_getpid')) {
1055                                 fwrite($fp, posix_getpid() . "\n");
1056                         }
1057                         return $fp;
1058                 } else {
1059                         return false;
1060                 }
1061         }
1062
1063         function make_stampfile($filename) {
1064                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
1065
1066                 if (flock($fp, LOCK_EX | LOCK_NB)) {
1067                         fwrite($fp, time() . "\n");
1068                         flock($fp, LOCK_UN);
1069                         fclose($fp);
1070                         return true;
1071                 } else {
1072                         return false;
1073                 }
1074         }
1075
1076         function sql_random_function() {
1077                 if (DB_TYPE == "mysql") {
1078                         return "RAND()";
1079                 } else {
1080                         return "RANDOM()";
1081                 }
1082         }
1083
1084         function catchup_feed($feed, $cat_view, $owner_uid = false, $max_id = false, $mode = 'all') {
1085
1086                         if (!$owner_uid) $owner_uid = $_SESSION['uid'];
1087
1088                         //if (preg_match("/^-?[0-9][0-9]*$/", $feed) != false) {
1089
1090                         // Todo: all this interval stuff needs some generic generator function
1091
1092                         $date_qpart = "false";
1093
1094                         switch ($mode) {
1095                         case "1day":
1096                                 if (DB_TYPE == "pgsql") {
1097                                         $date_qpart = "date_entered < NOW() - INTERVAL '1 day' ";
1098                                 } else {
1099                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 1 DAY) ";
1100                                 }
1101                                 break;
1102                         case "1week":
1103                                 if (DB_TYPE == "pgsql") {
1104                                         $date_qpart = "date_entered < NOW() - INTERVAL '1 week' ";
1105                                 } else {
1106                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 1 WEEK) ";
1107                                 }
1108                                 break;
1109                         case "2week":
1110                                 if (DB_TYPE == "pgsql") {
1111                                         $date_qpart = "date_entered < NOW() - INTERVAL '2 week' ";
1112                                 } else {
1113                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 2 WEEK) ";
1114                                 }
1115                                 break;
1116                         default:
1117                                 $date_qpart = "true";
1118                         }
1119
1120                         if (is_numeric($feed)) {
1121                                 if ($cat_view) {
1122
1123                                         if ($feed >= 0) {
1124
1125                                                 if ($feed > 0) {
1126                                                         $children = getChildCategories($feed, $owner_uid);
1127                                                         array_push($children, $feed);
1128
1129                                                         $children = join(",", $children);
1130
1131                                                         $cat_qpart = "cat_id IN ($children)";
1132                                                 } else {
1133                                                         $cat_qpart = "cat_id IS NULL";
1134                                                 }
1135
1136                                                 db_query("UPDATE ttrss_user_entries
1137                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1138                                                                 (SELECT id FROM
1139                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1140                                                                                 AND owner_uid = $owner_uid AND unread = true AND feed_id IN
1141                                                                                         (SELECT id FROM ttrss_feeds WHERE $cat_qpart) AND $date_qpart) as tmp)");
1142
1143                                         } else if ($feed == -2) {
1144
1145                                                 db_query("UPDATE ttrss_user_entries
1146                                                         SET unread = false,last_read = NOW() WHERE (SELECT COUNT(*)
1147                                                                 FROM ttrss_user_labels2 WHERE article_id = ref_id) > 0
1148                                                                 AND unread = true AND $date_qpart AND owner_uid = $owner_uid");
1149                                         }
1150
1151                                 } else if ($feed > 0) {
1152
1153                                         db_query("UPDATE ttrss_user_entries
1154                                                 SET unread = false, last_read = NOW() WHERE ref_id IN
1155                                                         (SELECT id FROM
1156                                                                 (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1157                                                                         AND owner_uid = $owner_uid AND unread = true AND feed_id = $feed AND $date_qpart) as tmp)");
1158
1159                                 } else if ($feed < 0 && $feed > LABEL_BASE_INDEX) { // special, like starred
1160
1161                                         if ($feed == -1) {
1162                                                 db_query("UPDATE ttrss_user_entries
1163                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1164                                                                 (SELECT id FROM
1165                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1166                                                                                 AND owner_uid = $owner_uid AND unread = true AND marked = true AND $date_qpart) as tmp)");
1167                                         }
1168
1169                                         if ($feed == -2) {
1170                                                 db_query("UPDATE ttrss_user_entries
1171                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1172                                                                 (SELECT id FROM
1173                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1174                                                                                 AND owner_uid = $owner_uid AND unread = true AND published = true AND $date_qpart) as tmp)");
1175                                         }
1176
1177                                         if ($feed == -3) {
1178
1179                                                 $intl = get_pref("FRESH_ARTICLE_MAX_AGE");
1180
1181                                                 if (DB_TYPE == "pgsql") {
1182                                                         $match_part = "date_entered > NOW() - INTERVAL '$intl hour' ";
1183                                                 } else {
1184                                                         $match_part = "date_entered > DATE_SUB(NOW(),
1185                                                                 INTERVAL $intl HOUR) ";
1186                                                 }
1187
1188                                                 db_query("UPDATE ttrss_user_entries
1189                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1190                                                                 (SELECT id FROM
1191                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1192                                                                                 AND owner_uid = $owner_uid AND unread = true AND $date_qpart AND $match_part) as tmp)");
1193                                         }
1194
1195                                         if ($feed == -4) {
1196                                                 db_query("UPDATE ttrss_user_entries
1197                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1198                                                                 (SELECT id FROM
1199                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1200                                                                                 AND owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1201                                         }
1202
1203                                 } else if ($feed < LABEL_BASE_INDEX) { // label
1204
1205                                         $label_id = feed_to_label_id($feed);
1206
1207                                         db_query("UPDATE ttrss_user_entries
1208                                                 SET unread = false, last_read = NOW() WHERE ref_id IN
1209                                                         (SELECT id FROM
1210                                                                 (SELECT ttrss_entries.id FROM ttrss_entries, ttrss_user_entries, ttrss_user_labels2 WHERE ref_id = id
1211                                                                         AND label_id = '$label_id' AND ref_id = article_id
1212                                                                         AND owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1213
1214                                 }
1215
1216                                 ccache_update($feed, $owner_uid, $cat_view);
1217
1218                         } else { // tag
1219                                 db_query("UPDATE ttrss_user_entries
1220                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1221                                                 (SELECT id FROM
1222                                                         (SELECT ttrss_entries.id FROM ttrss_entries, ttrss_user_entries, ttrss_tags WHERE ref_id = ttrss_entries.id
1223                                                                 AND post_int_id = int_id AND tag_name = '$feed'
1224                                                                 AND ttrss_user_entries.owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1225
1226                         }
1227         }
1228
1229         function getAllCounters() {
1230                 $data = getGlobalCounters();
1231
1232                 $data = array_merge($data, getVirtCounters());
1233                 $data = array_merge($data, getLabelCounters());
1234                 $data = array_merge($data, getFeedCounters());
1235                 $data = array_merge($data, getCategoryCounters());
1236
1237                 return $data;
1238         }
1239
1240         function getCategoryTitle($cat_id) {
1241
1242                 if ($cat_id == -1) {
1243                         return __("Special");
1244                 } else if ($cat_id == -2) {
1245                         return __("Labels");
1246                 } else {
1247
1248                         $result = db_query("SELECT title FROM ttrss_feed_categories WHERE
1249                                 id = '$cat_id'");
1250
1251                         if (db_num_rows($result) == 1) {
1252                                 return db_fetch_result($result, 0, "title");
1253                         } else {
1254                                 return __("Uncategorized");
1255                         }
1256                 }
1257         }
1258
1259
1260         function getCategoryCounters() {
1261                 $ret_arr = array();
1262
1263                 /* Labels category */
1264
1265                 $cv = array("id" => -2, "kind" => "cat",
1266                         "counter" => getCategoryUnread(-2));
1267
1268                 array_push($ret_arr, $cv);
1269
1270                 $result = db_query("SELECT id AS cat_id, value AS unread,
1271                         (SELECT COUNT(id) FROM ttrss_feed_categories AS c2
1272                                 WHERE c2.parent_cat = ttrss_feed_categories.id) AS num_children
1273                         FROM ttrss_feed_categories, ttrss_cat_counters_cache
1274                         WHERE ttrss_cat_counters_cache.feed_id = id AND
1275                         ttrss_cat_counters_cache.owner_uid = ttrss_feed_categories.owner_uid AND
1276                         ttrss_feed_categories.owner_uid = " . $_SESSION["uid"]);
1277
1278                 while ($line = db_fetch_assoc($result)) {
1279                         $line["cat_id"] = (int) $line["cat_id"];
1280
1281                         if ($line["num_children"] > 0) {
1282                                 $child_counter = getCategoryChildrenUnread($line["cat_id"], $_SESSION["uid"]);
1283                         } else {
1284                                 $child_counter = 0;
1285                         }
1286
1287                         $cv = array("id" => $line["cat_id"], "kind" => "cat",
1288                                 "counter" => $line["unread"] + $child_counter);
1289
1290                         array_push($ret_arr, $cv);
1291                 }
1292
1293                 /* Special case: NULL category doesn't actually exist in the DB */
1294
1295                 $cv = array("id" => 0, "kind" => "cat",
1296                         "counter" => (int) ccache_find(0, $_SESSION["uid"], true));
1297
1298                 array_push($ret_arr, $cv);
1299
1300                 return $ret_arr;
1301         }
1302
1303         // only accepts real cats (>= 0)
1304         function getCategoryChildrenUnread($cat, $owner_uid = false) {
1305                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1306
1307                 $result = db_query("SELECT id FROM ttrss_feed_categories WHERE parent_cat = '$cat'
1308                                 AND owner_uid = $owner_uid");
1309
1310                 $unread = 0;
1311
1312                 while ($line = db_fetch_assoc($result)) {
1313                         $unread += getCategoryUnread($line["id"], $owner_uid);
1314                         $unread += getCategoryChildrenUnread($line["id"], $owner_uid);
1315                 }
1316
1317                 return $unread;
1318         }
1319
1320         function getCategoryUnread($cat, $owner_uid = false) {
1321
1322                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1323
1324                 if ($cat >= 0) {
1325
1326                         if ($cat != 0) {
1327                                 $cat_query = "cat_id = '$cat'";
1328                         } else {
1329                                 $cat_query = "cat_id IS NULL";
1330                         }
1331
1332                         $result = db_query("SELECT id FROM ttrss_feeds WHERE $cat_query
1333                                         AND owner_uid = " . $owner_uid);
1334
1335                         $cat_feeds = array();
1336                         while ($line = db_fetch_assoc($result)) {
1337                                 array_push($cat_feeds, "feed_id = " . $line["id"]);
1338                         }
1339
1340                         if (count($cat_feeds) == 0) return 0;
1341
1342                         $match_part = implode(" OR ", $cat_feeds);
1343
1344                         $result = db_query("SELECT COUNT(int_id) AS unread
1345                                 FROM ttrss_user_entries
1346                                 WHERE   unread = true AND ($match_part)
1347                                 AND owner_uid = " . $owner_uid);
1348
1349                         $unread = 0;
1350
1351                         # this needs to be rewritten
1352                         while ($line = db_fetch_assoc($result)) {
1353                                 $unread += $line["unread"];
1354                         }
1355
1356                         return $unread;
1357                 } else if ($cat == -1) {
1358                         return getFeedUnread(-1) + getFeedUnread(-2) + getFeedUnread(-3) + getFeedUnread(0);
1359                 } else if ($cat == -2) {
1360
1361                         $result = db_query("
1362                                 SELECT COUNT(unread) AS unread FROM
1363                                         ttrss_user_entries, ttrss_user_labels2
1364                                 WHERE article_id = ref_id AND unread = true
1365                                         AND ttrss_user_entries.owner_uid = '$owner_uid'");
1366
1367                         $unread = db_fetch_result($result, 0, "unread");
1368
1369                         return $unread;
1370
1371                 }
1372         }
1373
1374         function getFeedUnread($feed, $is_cat = false) {
1375                 return getFeedArticles($feed, $is_cat, true, $_SESSION["uid"]);
1376         }
1377
1378         function getLabelUnread($label_id, $owner_uid = false) {
1379                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1380
1381                 $result = db_query("SELECT COUNT(ref_id) AS unread FROM ttrss_user_entries, ttrss_user_labels2
1382                         WHERE owner_uid = '$owner_uid' AND unread = true AND label_id = '$label_id' AND article_id = ref_id");
1383
1384                 if (db_num_rows($result) != 0) {
1385                         return db_fetch_result($result, 0, "unread");
1386                 } else {
1387                         return 0;
1388                 }
1389         }
1390
1391         function getFeedArticles($feed, $is_cat = false, $unread_only = false,
1392                 $owner_uid = false) {
1393
1394                 $n_feed = (int) $feed;
1395                 $need_entries = false;
1396
1397                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1398
1399                 if ($unread_only) {
1400                         $unread_qpart = "unread = true";
1401                 } else {
1402                         $unread_qpart = "true";
1403                 }
1404
1405                 if ($is_cat) {
1406                         return getCategoryUnread($n_feed, $owner_uid);
1407                 } else if ($n_feed == -6) {
1408                         return 0;
1409                 } else if ($feed != "0" && $n_feed == 0) {
1410
1411                         $feed = db_escape_string($feed);
1412
1413                         $result = db_query("SELECT SUM((SELECT COUNT(int_id)
1414                                 FROM ttrss_user_entries,ttrss_entries WHERE int_id = post_int_id
1415                                         AND ref_id = id AND $unread_qpart)) AS count FROM ttrss_tags
1416                                 WHERE owner_uid = $owner_uid AND tag_name = '$feed'");
1417                         return db_fetch_result($result, 0, "count");
1418
1419                 } else if ($n_feed == -1) {
1420                         $match_part = "marked = true";
1421                 } else if ($n_feed == -2) {
1422                         $match_part = "published = true";
1423                 } else if ($n_feed == -3) {
1424                         $match_part = "unread = true AND score >= 0";
1425
1426                         $intl = get_pref("FRESH_ARTICLE_MAX_AGE", $owner_uid);
1427
1428                         if (DB_TYPE == "pgsql") {
1429                                 $match_part .= " AND date_entered > NOW() - INTERVAL '$intl hour' ";
1430                         } else {
1431                                 $match_part .= " AND date_entered > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
1432                         }
1433
1434                         $need_entries = true;
1435
1436                 } else if ($n_feed == -4) {
1437                         $match_part = "true";
1438                 } else if ($n_feed >= 0) {
1439
1440                         if ($n_feed != 0) {
1441                                 $match_part = "feed_id = '$n_feed'";
1442                         } else {
1443                                 $match_part = "feed_id IS NULL";
1444                         }
1445
1446                 } else if ($feed < LABEL_BASE_INDEX) {
1447
1448                         $label_id = feed_to_label_id($feed);
1449
1450                         return getLabelUnread($label_id, $owner_uid);
1451
1452                 }
1453
1454                 if ($match_part) {
1455
1456                         if ($need_entries) {
1457                                 $from_qpart = "ttrss_user_entries,ttrss_entries";
1458                                 $from_where = "ttrss_entries.id = ttrss_user_entries.ref_id AND";
1459                         } else {
1460                                 $from_qpart = "ttrss_user_entries";
1461                                 $from_where = "";
1462                         }
1463
1464                         $query = "SELECT count(int_id) AS unread
1465                                 FROM $from_qpart WHERE
1466                                 $unread_qpart AND $from_where ($match_part) AND ttrss_user_entries.owner_uid = $owner_uid";
1467
1468                         //echo "[$feed/$query]\n";
1469
1470                         $result = db_query($query);
1471
1472                 } else {
1473
1474                         $result = db_query("SELECT COUNT(post_int_id) AS unread
1475                                 FROM ttrss_tags,ttrss_user_entries,ttrss_entries
1476                                 WHERE tag_name = '$feed' AND post_int_id = int_id AND ref_id = ttrss_entries.id
1477                                 AND $unread_qpart AND ttrss_tags.owner_uid = " . $owner_uid);
1478                 }
1479
1480                 $unread = db_fetch_result($result, 0, "unread");
1481
1482                 return $unread;
1483         }
1484
1485         function getGlobalUnread($user_id = false) {
1486
1487                 if (!$user_id) {
1488                         $user_id = $_SESSION["uid"];
1489                 }
1490
1491                 $result = db_query("SELECT SUM(value) AS c_id FROM ttrss_counters_cache
1492                         WHERE owner_uid = '$user_id' AND feed_id > 0");
1493
1494                 $c_id = db_fetch_result($result, 0, "c_id");
1495
1496                 return $c_id;
1497         }
1498
1499         function getGlobalCounters($global_unread = -1) {
1500                 $ret_arr = array();
1501
1502                 if ($global_unread == -1) {
1503                         $global_unread = getGlobalUnread();
1504                 }
1505
1506                 $cv = array("id" => "global-unread",
1507                         "counter" => (int) $global_unread);
1508
1509                 array_push($ret_arr, $cv);
1510
1511                 $result = db_query("SELECT COUNT(id) AS fn FROM
1512                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1513
1514                 $subscribed_feeds = db_fetch_result($result, 0, "fn");
1515
1516                 $cv = array("id" => "subscribed-feeds",
1517                         "counter" => (int) $subscribed_feeds);
1518
1519                 array_push($ret_arr, $cv);
1520
1521                 return $ret_arr;
1522         }
1523
1524         function getVirtCounters() {
1525
1526                 $ret_arr = array();
1527
1528                 for ($i = 0; $i >= -4; $i--) {
1529
1530                         $count = getFeedUnread($i);
1531
1532                         if ($i == 0 || $i == -1 || $i == -2)
1533                                 $auxctr = getFeedArticles($i, false);
1534                         else
1535                                 $auxctr = 0;
1536
1537                         $cv = array("id" => $i,
1538                                 "counter" => (int) $count,
1539                                 "auxcounter" => $auxctr);
1540
1541 //                      if (get_pref('EXTENDED_FEEDLIST'))
1542 //                              $cv["xmsg"] = getFeedArticles($i)." ".__("total");
1543
1544                         array_push($ret_arr, $cv);
1545                 }
1546
1547                 $feeds = PluginHost::getInstance()->get_feeds(-1);
1548
1549                 if (is_array($feeds)) {
1550                         foreach ($feeds as $feed) {
1551                                 $cv = array("id" => PluginHost::pfeed_to_feed_id($feed['id']),
1552                                         "counter" => $feed['sender']->get_unread($feed['id']));
1553
1554                                 if (method_exists($feed['sender'], 'get_total'))
1555                                         $cv["auxcounter"] = $feed['sender']->get_total($feed['id']);
1556
1557                                 array_push($ret_arr, $cv);
1558                         }
1559                 }
1560
1561                 return $ret_arr;
1562         }
1563
1564         function getLabelCounters($descriptions = false) {
1565
1566                 $ret_arr = array();
1567
1568                 $owner_uid = $_SESSION["uid"];
1569
1570                 $result = db_query("SELECT id,caption,SUM(CASE WHEN u1.unread = true THEN 1 ELSE 0 END) AS unread, COUNT(u1.unread) AS total
1571                         FROM ttrss_labels2 LEFT JOIN ttrss_user_labels2 ON
1572                                 (ttrss_labels2.id = label_id)
1573                                 LEFT JOIN ttrss_user_entries AS u1 ON u1.ref_id = article_id
1574                                 WHERE ttrss_labels2.owner_uid = $owner_uid GROUP BY ttrss_labels2.id,
1575                                         ttrss_labels2.caption");
1576
1577                 while ($line = db_fetch_assoc($result)) {
1578
1579                         $id = label_to_feed_id($line["id"]);
1580
1581                         $cv = array("id" => $id,
1582                                 "counter" => (int) $line["unread"],
1583                                 "auxcounter" => (int) $line["total"]);
1584
1585                         if ($descriptions)
1586                                 $cv["description"] = $line["caption"];
1587
1588                         array_push($ret_arr, $cv);
1589                 }
1590
1591                 return $ret_arr;
1592         }
1593
1594         function getFeedCounters($active_feed = false) {
1595
1596                 $ret_arr = array();
1597
1598                 $query = "SELECT ttrss_feeds.id,
1599                                 ttrss_feeds.title,
1600                                 ".SUBSTRING_FOR_DATE."(ttrss_feeds.last_updated,1,19) AS last_updated,
1601                                 last_error, value AS count
1602                         FROM ttrss_feeds, ttrss_counters_cache
1603                         WHERE ttrss_feeds.owner_uid = ".$_SESSION["uid"]."
1604                                 AND ttrss_counters_cache.owner_uid = ttrss_feeds.owner_uid
1605                                 AND ttrss_counters_cache.feed_id = id";
1606
1607                 $result = db_query($query);
1608                 $fctrs_modified = false;
1609
1610                 while ($line = db_fetch_assoc($result)) {
1611
1612                         $id = $line["id"];
1613                         $count = $line["count"];
1614                         $last_error = htmlspecialchars($line["last_error"]);
1615
1616                         $last_updated = make_local_datetime($line['last_updated'], false);
1617
1618                         $has_img = feed_has_icon($id);
1619
1620                         if (date('Y') - date('Y', strtotime($line['last_updated'])) > 2)
1621                                 $last_updated = '';
1622
1623                         $cv = array("id" => $id,
1624                                 "updated" => $last_updated,
1625                                 "counter" => (int) $count,
1626                                 "has_img" => (int) $has_img);
1627
1628                         if ($last_error)
1629                                 $cv["error"] = $last_error;
1630
1631 //                      if (get_pref('EXTENDED_FEEDLIST'))
1632 //                              $cv["xmsg"] = getFeedArticles($id)." ".__("total");
1633
1634                         if ($active_feed && $id == $active_feed)
1635                                 $cv["title"] = truncate_string($line["title"], 30);
1636
1637                         array_push($ret_arr, $cv);
1638
1639                 }
1640
1641                 return $ret_arr;
1642         }
1643
1644         function get_pgsql_version() {
1645                 $result = db_query("SELECT version() AS version");
1646                 $version = explode(" ", db_fetch_result($result, 0, "version"));
1647                 return $version[1];
1648         }
1649
1650         /**
1651          * @return array (code => Status code, message => error message if available)
1652          *
1653          *                 0 - OK, Feed already exists
1654          *                 1 - OK, Feed added
1655          *                 2 - Invalid URL
1656          *                 3 - URL content is HTML, no feeds available
1657          *                 4 - URL content is HTML which contains multiple feeds.
1658          *                     Here you should call extractfeedurls in rpc-backend
1659          *                     to get all possible feeds.
1660          *                 5 - Couldn't download the URL content.
1661          *                 6 - Content is an invalid XML.
1662          */
1663         function subscribe_to_feed($url, $cat_id = 0,
1664                         $auth_login = '', $auth_pass = '') {
1665
1666                 global $fetch_last_error;
1667
1668                 require_once "include/rssfuncs.php";
1669
1670                 $url = fix_url($url);
1671
1672                 if (!$url || !validate_feed_url($url)) return array("code" => 2);
1673
1674                 $contents = @fetch_file_contents($url, false, $auth_login, $auth_pass);
1675
1676                 if (!$contents) {
1677                         return array("code" => 5, "message" => $fetch_last_error);
1678                 }
1679
1680                 if (is_html($contents)) {
1681                         $feedUrls = get_feeds_from_html($url, $contents);
1682
1683                         if (count($feedUrls) == 0) {
1684                                 return array("code" => 3);
1685                         } else if (count($feedUrls) > 1) {
1686                                 return array("code" => 4, "feeds" => $feedUrls);
1687                         }
1688                         //use feed url as new URL
1689                         $url = key($feedUrls);
1690                 }
1691
1692                 /* libxml_use_internal_errors(true);
1693                 $doc = new DOMDocument();
1694                 $doc->loadXML($contents);
1695                 $error = libxml_get_last_error();
1696                 libxml_clear_errors();
1697
1698                 if ($error) {
1699                         $error_message = format_libxml_error($error);
1700
1701                         return array("code" => 6, "message" => $error_message);
1702                 } */
1703
1704                 if ($cat_id == "0" || !$cat_id) {
1705                         $cat_qpart = "NULL";
1706                 } else {
1707                         $cat_qpart = "'$cat_id'";
1708                 }
1709
1710                 $result = db_query(
1711                         "SELECT id FROM ttrss_feeds
1712                         WHERE feed_url = '$url' AND owner_uid = ".$_SESSION["uid"]);
1713
1714                 if (strlen(FEED_CRYPT_KEY) > 0) {
1715                         require_once "crypt.php";
1716                         $auth_pass = substr(encrypt_string($auth_pass), 0, 250);
1717                         $auth_pass_encrypted = 'true';
1718                 } else {
1719                         $auth_pass_encrypted = 'false';
1720                 }
1721
1722                 $auth_pass = db_escape_string($auth_pass);
1723
1724                 if (db_num_rows($result) == 0) {
1725                         $result = db_query(
1726                                 "INSERT INTO ttrss_feeds
1727                                         (owner_uid,feed_url,title,cat_id, auth_login,auth_pass,update_method,auth_pass_encrypted)
1728                                 VALUES ('".$_SESSION["uid"]."', '$url',
1729                                 '[Unknown]', $cat_qpart, '$auth_login', '$auth_pass', 0, $auth_pass_encrypted)");
1730
1731                         $result = db_query(
1732                                 "SELECT id FROM ttrss_feeds WHERE feed_url = '$url'
1733                                         AND owner_uid = " . $_SESSION["uid"]);
1734
1735                         $feed_id = db_fetch_result($result, 0, "id");
1736
1737                         if ($feed_id) {
1738                                 update_rss_feed($feed_id, true);
1739                         }
1740
1741                         return array("code" => 1);
1742                 } else {
1743                         return array("code" => 0);
1744                 }
1745         }
1746
1747         function print_feed_select($id, $default_id = "",
1748                 $attributes = "", $include_all_feeds = true,
1749                 $root_id = false, $nest_level = 0) {
1750
1751                 if (!$root_id) {
1752                         print "<select id=\"$id\" name=\"$id\" $attributes>";
1753                         if ($include_all_feeds) {
1754                                 $is_selected = ("0" == $default_id) ? "selected=\"1\"" : "";
1755                                 print "<option $is_selected value=\"0\">".__('All feeds')."</option>";
1756                         }
1757                 }
1758
1759                 if (get_pref('ENABLE_FEED_CATS')) {
1760
1761                         if ($root_id)
1762                                 $parent_qpart = "parent_cat = '$root_id'";
1763                         else
1764                                 $parent_qpart = "parent_cat IS NULL";
1765
1766                         $result = db_query("SELECT id,title,
1767                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1768                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1769                                 FROM ttrss_feed_categories
1770                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1771
1772                         while ($line = db_fetch_assoc($result)) {
1773
1774                                 for ($i = 0; $i < $nest_level; $i++)
1775                                         $line["title"] = " - " . $line["title"];
1776
1777                                 $is_selected = ("CAT:".$line["id"] == $default_id) ? "selected=\"1\"" : "";
1778
1779                                 printf("<option $is_selected value='CAT:%d'>%s</option>",
1780                                         $line["id"], htmlspecialchars($line["title"]));
1781
1782                                 if ($line["num_children"] > 0)
1783                                         print_feed_select($id, $default_id, $attributes,
1784                                                 $include_all_feeds, $line["id"], $nest_level+1);
1785
1786                                 $feed_result = db_query("SELECT id,title FROM ttrss_feeds
1787                                         WHERE cat_id = '".$line["id"]."' AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1788
1789                                 while ($fline = db_fetch_assoc($feed_result)) {
1790                                         $is_selected = ($fline["id"] == $default_id) ? "selected=\"1\"" : "";
1791
1792                                         $fline["title"] = " + " . $fline["title"];
1793
1794                                         for ($i = 0; $i < $nest_level; $i++)
1795                                                 $fline["title"] = " - " . $fline["title"];
1796
1797                                         printf("<option $is_selected value='%d'>%s</option>",
1798                                                 $fline["id"], htmlspecialchars($fline["title"]));
1799                                 }
1800                         }
1801
1802                         if (!$root_id) {
1803                                 $default_is_cat = ($default_id == "CAT:0");
1804                                 $is_selected = $default_is_cat ? "selected=\"1\"" : "";
1805
1806                                 printf("<option $is_selected value='CAT:0'>%s</option>",
1807                                         __("Uncategorized"));
1808
1809                                 $feed_result = db_query("SELECT id,title FROM ttrss_feeds
1810                                         WHERE cat_id IS NULL AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1811
1812                                 while ($fline = db_fetch_assoc($feed_result)) {
1813                                         $is_selected = ($fline["id"] == $default_id && !$default_is_cat) ? "selected=\"1\"" : "";
1814
1815                                         $fline["title"] = " + " . $fline["title"];
1816
1817                                         for ($i = 0; $i < $nest_level; $i++)
1818                                                 $fline["title"] = " - " . $fline["title"];
1819
1820                                         printf("<option $is_selected value='%d'>%s</option>",
1821                                                 $fline["id"], htmlspecialchars($fline["title"]));
1822                                 }
1823                         }
1824
1825                 } else {
1826                         $result = db_query("SELECT id,title FROM ttrss_feeds
1827                                 WHERE owner_uid = ".$_SESSION["uid"]." ORDER BY title");
1828
1829                         while ($line = db_fetch_assoc($result)) {
1830
1831                                 $is_selected = ($line["id"] == $default_id) ? "selected=\"1\"" : "";
1832
1833                                 printf("<option $is_selected value='%d'>%s</option>",
1834                                         $line["id"], htmlspecialchars($line["title"]));
1835                         }
1836                 }
1837
1838                 if (!$root_id) {
1839                         print "</select>";
1840                 }
1841         }
1842
1843         function print_feed_cat_select($id, $default_id,
1844                 $attributes, $include_all_cats = true, $root_id = false, $nest_level = 0) {
1845
1846                         if (!$root_id) {
1847                                         print "<select id=\"$id\" name=\"$id\" default=\"$default_id\" onchange=\"catSelectOnChange(this)\" $attributes>";
1848                         }
1849
1850                         if ($root_id)
1851                                 $parent_qpart = "parent_cat = '$root_id'";
1852                         else
1853                                 $parent_qpart = "parent_cat IS NULL";
1854
1855                         $result = db_query("SELECT id,title,
1856                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1857                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1858                                 FROM ttrss_feed_categories
1859                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1860
1861                         while ($line = db_fetch_assoc($result)) {
1862                                 if ($line["id"] == $default_id) {
1863                                         $is_selected = "selected=\"1\"";
1864                                 } else {
1865                                         $is_selected = "";
1866                                 }
1867
1868                                 for ($i = 0; $i < $nest_level; $i++)
1869                                         $line["title"] = " - " . $line["title"];
1870
1871                                 if ($line["title"])
1872                                         printf("<option $is_selected value='%d'>%s</option>",
1873                                                 $line["id"], htmlspecialchars($line["title"]));
1874
1875                                 if ($line["num_children"] > 0)
1876                                         print_feed_cat_select($id, $default_id, $attributes,
1877                                                 $include_all_cats, $line["id"], $nest_level+1);
1878                         }
1879
1880                         if (!$root_id) {
1881                                 if ($include_all_cats) {
1882                                         if (db_num_rows($result) > 0) {
1883                                                 print "<option disabled=\"1\">--------</option>";
1884                                         }
1885
1886                                         if ($default_id == 0) {
1887                                                 $is_selected = "selected=\"1\"";
1888                                         } else {
1889                                                 $is_selected = "";
1890                                         }
1891
1892                                         print "<option $is_selected value=\"0\">".__('Uncategorized')."</option>";
1893                                 }
1894                                 print "</select>";
1895                         }
1896                 }
1897
1898         function checkbox_to_sql_bool($val) {
1899                 return ($val == "on") ? "true" : "false";
1900         }
1901
1902         function getFeedCatTitle($id) {
1903                 if ($id == -1) {
1904                         return __("Special");
1905                 } else if ($id < LABEL_BASE_INDEX) {
1906                         return __("Labels");
1907                 } else if ($id > 0) {
1908                         $result = db_query("SELECT ttrss_feed_categories.title
1909                                 FROM ttrss_feeds, ttrss_feed_categories WHERE ttrss_feeds.id = '$id' AND
1910                                         cat_id = ttrss_feed_categories.id");
1911                         if (db_num_rows($result) == 1) {
1912                                 return db_fetch_result($result, 0, "title");
1913                         } else {
1914                                 return __("Uncategorized");
1915                         }
1916                 } else {
1917                         return "getFeedCatTitle($id) failed";
1918                 }
1919
1920         }
1921
1922         function getFeedIcon($id) {
1923                 switch ($id) {
1924                 case 0:
1925                         return "images/archive.png";
1926                         break;
1927                 case -1:
1928                         return "images/star.png";
1929                         break;
1930                 case -2:
1931                         return "images/feed.png";
1932                         break;
1933                 case -3:
1934                         return "images/fresh.png";
1935                         break;
1936                 case -4:
1937                         return "images/folder.png";
1938                         break;
1939                 case -6:
1940                         return "images/time.png";
1941                         break;
1942                 default:
1943                         if ($id < LABEL_BASE_INDEX) {
1944                                 return "images/label.png";
1945                         } else {
1946                                 if (file_exists(ICONS_DIR . "/$id.ico"))
1947                                         return ICONS_URL . "/$id.ico";
1948                         }
1949                         break;
1950                 }
1951
1952                 return false;
1953         }
1954
1955         function getFeedTitle($id, $cat = false) {
1956                 if ($cat) {
1957                         return getCategoryTitle($id);
1958                 } else if ($id == -1) {
1959                         return __("Starred articles");
1960                 } else if ($id == -2) {
1961                         return __("Published articles");
1962                 } else if ($id == -3) {
1963                         return __("Fresh articles");
1964                 } else if ($id == -4) {
1965                         return __("All articles");
1966                 } else if ($id === 0 || $id === "0") {
1967                         return __("Archived articles");
1968                 } else if ($id == -6) {
1969                         return __("Recently read");
1970                 } else if ($id < LABEL_BASE_INDEX) {
1971                         $label_id = feed_to_label_id($id);
1972                         $result = db_query("SELECT caption FROM ttrss_labels2 WHERE id = '$label_id'");
1973                         if (db_num_rows($result) == 1) {
1974                                 return db_fetch_result($result, 0, "caption");
1975                         } else {
1976                                 return "Unknown label ($label_id)";
1977                         }
1978
1979                 } else if (is_numeric($id) && $id > 0) {
1980                         $result = db_query("SELECT title FROM ttrss_feeds WHERE id = '$id'");
1981                         if (db_num_rows($result) == 1) {
1982                                 return db_fetch_result($result, 0, "title");
1983                         } else {
1984                                 return "Unknown feed ($id)";
1985                         }
1986                 } else {
1987                         return $id;
1988                 }
1989         }
1990
1991         function make_init_params() {
1992                 $params = array();
1993
1994                 foreach (array("ON_CATCHUP_SHOW_NEXT_FEED", "HIDE_READ_FEEDS",
1995                         "ENABLE_FEED_CATS", "FEEDS_SORT_BY_UNREAD", "CONFIRM_FEED_CATCHUP",
1996                         "CDM_AUTO_CATCHUP", "FRESH_ARTICLE_MAX_AGE",
1997                         "HIDE_READ_SHOWS_SPECIAL", "COMBINED_DISPLAY_MODE") as $param) {
1998
1999                                  $params[strtolower($param)] = (int) get_pref($param);
2000                  }
2001
2002                 $params["icons_url"] = ICONS_URL;
2003                 $params["cookie_lifetime"] = SESSION_COOKIE_LIFETIME;
2004                 $params["default_view_mode"] = get_pref("_DEFAULT_VIEW_MODE");
2005                 $params["default_view_limit"] = (int) get_pref("_DEFAULT_VIEW_LIMIT");
2006                 $params["default_view_order_by"] = get_pref("_DEFAULT_VIEW_ORDER_BY");
2007                 $params["bw_limit"] = (int) $_SESSION["bw_limit"];
2008                 $params["label_base_index"] = (int) LABEL_BASE_INDEX;
2009
2010                 $result = db_query("SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
2011                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
2012
2013                 $max_feed_id = db_fetch_result($result, 0, "mid");
2014                 $num_feeds = db_fetch_result($result, 0, "nf");
2015
2016                 $params["max_feed_id"] = (int) $max_feed_id;
2017                 $params["num_feeds"] = (int) $num_feeds;
2018
2019                 $params["hotkeys"] = get_hotkeys_map();
2020
2021                 $params["csrf_token"] = $_SESSION["csrf_token"];
2022                 $params["widescreen"] = (int) $_COOKIE["ttrss_widescreen"];
2023
2024                 $params['simple_update'] = defined('SIMPLE_UPDATE_MODE') && SIMPLE_UPDATE_MODE;
2025
2026                 return $params;
2027         }
2028
2029         function get_hotkeys_info() {
2030                 $hotkeys = array(
2031                         __("Navigation") => array(
2032                                 "next_feed" => __("Open next feed"),
2033                                 "prev_feed" => __("Open previous feed"),
2034                                 "next_article" => __("Open next article"),
2035                                 "prev_article" => __("Open previous article"),
2036                                 "next_article_noscroll" => __("Open next article (don't scroll long articles)"),
2037                                 "prev_article_noscroll" => __("Open previous article (don't scroll long articles)"),
2038                                 "next_article_noexpand" => __("Move to next article (don't expand or mark read)"),
2039                                 "prev_article_noexpand" => __("Move to previous article (don't expand or mark read)"),
2040                                 "search_dialog" => __("Show search dialog")),
2041                         __("Article") => array(
2042                                 "toggle_mark" => __("Toggle starred"),
2043                                 "toggle_publ" => __("Toggle published"),
2044                                 "toggle_unread" => __("Toggle unread"),
2045                                 "edit_tags" => __("Edit tags"),
2046                                 "dismiss_selected" => __("Dismiss selected"),
2047                                 "dismiss_read" => __("Dismiss read"),
2048                                 "open_in_new_window" => __("Open in new window"),
2049                                 "catchup_below" => __("Mark below as read"),
2050                                 "catchup_above" => __("Mark above as read"),
2051                                 "article_scroll_down" => __("Scroll down"),
2052                                 "article_scroll_up" => __("Scroll up"),
2053                                 "select_article_cursor" => __("Select article under cursor"),
2054                                 "email_article" => __("Email article"),
2055                                 "close_article" => __("Close/collapse article"),
2056                                 "toggle_expand" => __("Toggle article expansion (combined mode)"),
2057                                 "toggle_widescreen" => __("Toggle widescreen mode"),
2058                                 "toggle_embed_original" => __("Toggle embed original")),
2059                         __("Article selection") => array(
2060                                 "select_all" => __("Select all articles"),
2061                                 "select_unread" => __("Select unread"),
2062                                 "select_marked" => __("Select starred"),
2063                                 "select_published" => __("Select published"),
2064                                 "select_invert" => __("Invert selection"),
2065                                 "select_none" => __("Deselect everything")),
2066                         __("Feed") => array(
2067                                 "feed_refresh" => __("Refresh current feed"),
2068                                 "feed_unhide_read" => __("Un/hide read feeds"),
2069                                 "feed_subscribe" => __("Subscribe to feed"),
2070                                 "feed_edit" => __("Edit feed"),
2071                                 "feed_catchup" => __("Mark as read"),
2072                                 "feed_reverse" => __("Reverse headlines"),
2073                                 "feed_debug_update" => __("Debug feed update"),
2074                                 "catchup_all" => __("Mark all feeds as read"),
2075                                 "cat_toggle_collapse" => __("Un/collapse current category"),
2076                                 "toggle_combined_mode" => __("Toggle combined mode"),
2077                                 "toggle_cdm_expanded" => __("Toggle auto expand in combined mode")),
2078                         __("Go to") => array(
2079                                 "goto_all" => __("All articles"),
2080                                 "goto_fresh" => __("Fresh"),
2081                                 "goto_marked" => __("Starred"),
2082                                 "goto_published" => __("Published"),
2083                                 "goto_tagcloud" => __("Tag cloud"),
2084                                 "goto_prefs" => __("Preferences")),
2085                         __("Other") => array(
2086                                 "create_label" => __("Create label"),
2087                                 "create_filter" => __("Create filter"),
2088                                 "collapse_sidebar" => __("Un/collapse sidebar"),
2089                                 "help_dialog" => __("Show help dialog"))
2090                         );
2091
2092                 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_HOTKEY_INFO) as $plugin) {
2093                         $hotkeys = $plugin->hook_hotkey_info($hotkeys);
2094                 }
2095
2096                 return $hotkeys;
2097         }
2098
2099         function get_hotkeys_map() {
2100                 $hotkeys = array(
2101 //                      "navigation" => array(
2102                                 "k" => "next_feed",
2103                                 "j" => "prev_feed",
2104                                 "n" => "next_article",
2105                                 "p" => "prev_article",
2106                                 "(38)|up" => "prev_article",
2107                                 "(40)|down" => "next_article",
2108 //                              "^(38)|Ctrl-up" => "prev_article_noscroll",
2109 //                              "^(40)|Ctrl-down" => "next_article_noscroll",
2110                                 "(191)|/" => "search_dialog",
2111 //                      "article" => array(
2112                                 "s" => "toggle_mark",
2113                                 "*s" => "toggle_publ",
2114                                 "u" => "toggle_unread",
2115                                 "*t" => "edit_tags",
2116                                 "*d" => "dismiss_selected",
2117                                 "*x" => "dismiss_read",
2118                                 "o" => "open_in_new_window",
2119                                 "c p" => "catchup_below",
2120                                 "c n" => "catchup_above",
2121                                 "*n" => "article_scroll_down",
2122                                 "*p" => "article_scroll_up",
2123                                 "*(38)|Shift+up" => "article_scroll_up",
2124                                 "*(40)|Shift+down" => "article_scroll_down",
2125                                 "a *w" => "toggle_widescreen",
2126                                 "a e" => "toggle_embed_original",
2127                                 "e" => "email_article",
2128                                 "a q" => "close_article",
2129 //                      "article_selection" => array(
2130                                 "a a" => "select_all",
2131                                 "a u" => "select_unread",
2132                                 "a *u" => "select_marked",
2133                                 "a p" => "select_published",
2134                                 "a i" => "select_invert",
2135                                 "a n" => "select_none",
2136 //                      "feed" => array(
2137                                 "f r" => "feed_refresh",
2138                                 "f a" => "feed_unhide_read",
2139                                 "f s" => "feed_subscribe",
2140                                 "f e" => "feed_edit",
2141                                 "f q" => "feed_catchup",
2142                                 "f x" => "feed_reverse",
2143                                 "f *d" => "feed_debug_update",
2144                                 "f *c" => "toggle_combined_mode",
2145                                 "f c" => "toggle_cdm_expanded",
2146                                 "*q" => "catchup_all",
2147                                 "x" => "cat_toggle_collapse",
2148 //                      "goto" => array(
2149                                 "g a" => "goto_all",
2150                                 "g f" => "goto_fresh",
2151                                 "g s" => "goto_marked",
2152                                 "g p" => "goto_published",
2153                                 "g t" => "goto_tagcloud",
2154                                 "g *p" => "goto_prefs",
2155 //                      "other" => array(
2156                                 "(9)|Tab" => "select_article_cursor", // tab
2157                                 "c l" => "create_label",
2158                                 "c f" => "create_filter",
2159                                 "c s" => "collapse_sidebar",
2160                                 "^(191)|Ctrl+/" => "help_dialog",
2161                         );
2162
2163                 if (get_pref('COMBINED_DISPLAY_MODE')) {
2164                         $hotkeys["^(38)|Ctrl-up"] = "prev_article_noscroll";
2165                         $hotkeys["^(40)|Ctrl-down"] = "next_article_noscroll";
2166                 }
2167
2168                 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_HOTKEY_MAP) as $plugin) {
2169                         $hotkeys = $plugin->hook_hotkey_map($hotkeys);
2170                 }
2171
2172                 $prefixes = array();
2173
2174                 foreach (array_keys($hotkeys) as $hotkey) {
2175                         $pair = explode(" ", $hotkey, 2);
2176
2177                         if (count($pair) > 1 && !in_array($pair[0], $prefixes)) {
2178                                 array_push($prefixes, $pair[0]);
2179                         }
2180                 }
2181
2182                 return array($prefixes, $hotkeys);
2183         }
2184
2185         function make_runtime_info() {
2186                 $data = array();
2187
2188                 $result = db_query("SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
2189                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
2190
2191                 $max_feed_id = db_fetch_result($result, 0, "mid");
2192                 $num_feeds = db_fetch_result($result, 0, "nf");
2193
2194                 $data["max_feed_id"] = (int) $max_feed_id;
2195                 $data["num_feeds"] = (int) $num_feeds;
2196
2197                 $data['last_article_id'] = getLastArticleId();
2198                 $data['cdm_expanded'] = get_pref('CDM_EXPANDED');
2199
2200                 $data['dep_ts'] = calculate_dep_timestamp();
2201                 $data['reload_on_ts_change'] = !defined('_NO_RELOAD_ON_TS_CHANGE');
2202
2203                 if (file_exists(LOCK_DIRECTORY . "/update_daemon.lock")) {
2204
2205                         $data['daemon_is_running'] = (int) file_is_locked("update_daemon.lock");
2206
2207                         if (time() - $_SESSION["daemon_stamp_check"] > 30) {
2208
2209                                 $stamp = (int) @file_get_contents(LOCK_DIRECTORY . "/update_daemon.stamp");
2210
2211                                 if ($stamp) {
2212                                         $stamp_delta = time() - $stamp;
2213
2214                                         if ($stamp_delta > 1800) {
2215                                                 $stamp_check = 0;
2216                                         } else {
2217                                                 $stamp_check = 1;
2218                                                 $_SESSION["daemon_stamp_check"] = time();
2219                                         }
2220
2221                                         $data['daemon_stamp_ok'] = $stamp_check;
2222
2223                                         $stamp_fmt = date("Y.m.d, G:i", $stamp);
2224
2225                                         $data['daemon_stamp'] = $stamp_fmt;
2226                                 }
2227                         }
2228                 }
2229
2230                 if ($_SESSION["last_version_check"] + 86400 + rand(-1000, 1000) < time()) {
2231                                 $new_version_details = @check_for_update();
2232
2233                                 $data['new_version_available'] = (int) ($new_version_details != false);
2234
2235                                 $_SESSION["last_version_check"] = time();
2236                                 $_SESSION["version_data"] = $new_version_details;
2237                 }
2238
2239                 return $data;
2240         }
2241
2242         function search_to_sql($search) {
2243
2244                 $search_query_part = "";
2245
2246                 $keywords = explode(" ", $search);
2247                 $query_keywords = array();
2248                 $search_words = array();
2249
2250                 foreach ($keywords as $k) {
2251                         if (strpos($k, "-") === 0) {
2252                                 $k = substr($k, 1);
2253                                 $not = "NOT";
2254                         } else {
2255                                 $not = "";
2256                         }
2257
2258                         $commandpair = explode(":", mb_strtolower($k), 2);
2259
2260                         switch ($commandpair[0]) {
2261                         case "title":
2262                                 if ($commandpair[1]) {
2263                                         array_push($query_keywords, "($not (LOWER(ttrss_entries.title) LIKE '%".
2264                                                 db_escape_string(mb_strtolower($commandpair[1]))."%'))");
2265                                 } else {
2266                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2267                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2268                                         array_push($search_words, $k);
2269                                 }
2270                                 break;
2271                         case "author":
2272                                 if ($commandpair[1]) {
2273                                         array_push($query_keywords, "($not (LOWER(author) LIKE '%".
2274                                                 db_escape_string(mb_strtolower($commandpair[1]))."%'))");
2275                                 } else {
2276                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2277                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2278                                         array_push($search_words, $k);
2279                                 }
2280                                 break;
2281                         case "note":
2282                                 if ($commandpair[1]) {
2283                                         if ($commandpair[1] == "true")
2284                                                 array_push($query_keywords, "($not (note IS NOT NULL AND note != ''))");
2285                                         else if ($commandpair[1] == "false")
2286                                                 array_push($query_keywords, "($not (note IS NULL OR note = ''))");
2287                                         else
2288                                                 array_push($query_keywords, "($not (LOWER(note) LIKE '%".
2289                                                         db_escape_string(mb_strtolower($commandpair[1]))."%'))");
2290                                 } else {
2291                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2292                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2293                                         if (!$not) array_push($search_words, $k);
2294                                 }
2295                                 break;
2296                         case "star":
2297
2298                                 if ($commandpair[1]) {
2299                                         if ($commandpair[1] == "true")
2300                                                 array_push($query_keywords, "($not (marked = true))");
2301                                         else
2302                                                 array_push($query_keywords, "($not (marked = false))");
2303                                 } else {
2304                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2305                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2306                                         if (!$not) array_push($search_words, $k);
2307                                 }
2308                                 break;
2309                         case "pub":
2310                                 if ($commandpair[1]) {
2311                                         if ($commandpair[1] == "true")
2312                                                 array_push($query_keywords, "($not (published = true))");
2313                                         else
2314                                                 array_push($query_keywords, "($not (published = false))");
2315
2316                                 } else {
2317                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2318                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2319                                         if (!$not) array_push($search_words, $k);
2320                                 }
2321                                 break;
2322                         default:
2323                                 if (strpos($k, "@") === 0) {
2324
2325                                         $user_tz_string = get_pref('USER_TIMEZONE', $_SESSION['uid']);
2326                                         $orig_ts = strtotime(substr($k, 1));
2327                                         $k = date("Y-m-d", convert_timestamp($orig_ts, $user_tz_string, 'UTC'));
2328
2329                                         //$k = date("Y-m-d", strtotime(substr($k, 1)));
2330
2331                                         array_push($query_keywords, "(".SUBSTRING_FOR_DATE."(updated,1,LENGTH('$k')) $not = '$k')");
2332                                 } else {
2333                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2334                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2335
2336                                         if (!$not) array_push($search_words, $k);
2337                                 }
2338                         }
2339                 }
2340
2341                 $search_query_part = implode("AND", $query_keywords);
2342
2343                 return array($search_query_part, $search_words);
2344         }
2345
2346         function getParentCategories($cat, $owner_uid) {
2347                 $rv = array();
2348
2349                 $result = db_query("SELECT parent_cat FROM ttrss_feed_categories
2350                         WHERE id = '$cat' AND parent_cat IS NOT NULL AND owner_uid = $owner_uid");
2351
2352                 while ($line = db_fetch_assoc($result)) {
2353                         array_push($rv, $line["parent_cat"]);
2354                         $rv = array_merge($rv, getParentCategories($line["parent_cat"], $owner_uid));
2355                 }
2356
2357                 return $rv;
2358         }
2359
2360         function getChildCategories($cat, $owner_uid) {
2361                 $rv = array();
2362
2363                 $result = db_query("SELECT id FROM ttrss_feed_categories
2364                         WHERE parent_cat = '$cat' AND owner_uid = $owner_uid");
2365
2366                 while ($line = db_fetch_assoc($result)) {
2367                         array_push($rv, $line["id"]);
2368                         $rv = array_merge($rv, getChildCategories($line["id"], $owner_uid));
2369                 }
2370
2371                 return $rv;
2372         }
2373
2374         function queryFeedHeadlines($feed, $limit, $view_mode, $cat_view, $search, $search_mode, $override_order = false, $offset = 0, $owner_uid = 0, $filter = false, $since_id = 0, $include_children = false, $ignore_vfeed_group = false, $override_strategy = false, $override_vfeed = false) {
2375
2376                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2377
2378                 $ext_tables_part = "";
2379                 $search_words = array();
2380
2381                         if ($search) {
2382
2383                                 if (SPHINX_ENABLED) {
2384                                         $ids = join(",", @sphinx_search($search, 0, 500));
2385
2386                                         if ($ids)
2387                                                 $search_query_part = "ref_id IN ($ids) AND ";
2388                                         else
2389                                                 $search_query_part = "ref_id = -1 AND ";
2390
2391                                 } else {
2392                                         list($search_query_part, $search_words) = search_to_sql($search);
2393                                         $search_query_part .= " AND ";
2394                                 }
2395
2396                         } else {
2397                                 $search_query_part = "";
2398                         }
2399
2400                         if ($filter) {
2401
2402                                 if (DB_TYPE == "pgsql") {
2403                                         $query_strategy_part .= " AND updated > NOW() - INTERVAL '14 days' ";
2404                                 } else {
2405                                         $query_strategy_part .= " AND updated > DATE_SUB(NOW(), INTERVAL 14 DAY) ";
2406                                 }
2407
2408                                 $override_order = "updated DESC";
2409
2410                                 $filter_query_part = filter_to_sql($filter, $owner_uid);
2411
2412                                 // Try to check if SQL regexp implementation chokes on a valid regexp
2413
2414
2415                                 $result = db_query("SELECT true AS true_val FROM ttrss_entries,
2416                                         ttrss_user_entries, ttrss_feeds
2417                                         WHERE $filter_query_part LIMIT 1", false);
2418
2419                                 if ($result) {
2420                                         $test = db_fetch_result($result, 0, "true_val");
2421
2422                                         if (!$test) {
2423                                                 $filter_query_part = "false AND";
2424                                         } else {
2425                                                 $filter_query_part .= " AND";
2426                                         }
2427                                 } else {
2428                                         $filter_query_part = "false AND";
2429                                 }
2430
2431                         } else {
2432                                 $filter_query_part = "";
2433                         }
2434
2435                         if ($since_id) {
2436                                 $since_id_part = "ttrss_entries.id > $since_id AND ";
2437                         } else {
2438                                 $since_id_part = "";
2439                         }
2440
2441                         $view_query_part = "";
2442
2443                         if ($view_mode == "adaptive") {
2444                                 if ($search) {
2445                                         $view_query_part = " ";
2446                                 } else if ($feed != -1) {
2447
2448                                         $unread = getFeedUnread($feed, $cat_view);
2449
2450                                         if ($cat_view && $feed > 0 && $include_children)
2451                                                 $unread += getCategoryChildrenUnread($feed);
2452
2453                                         if ($unread > 0)
2454                                 $view_query_part = " unread = true AND ";
2455
2456                                 }
2457                         }
2458
2459                         if ($view_mode == "marked") {
2460                                 $view_query_part = " marked = true AND ";
2461                         }
2462
2463                         if ($view_mode == "has_note") {
2464                                 $view_query_part = " (note IS NOT NULL AND note != '') AND ";
2465                         }
2466
2467                         if ($view_mode == "published") {
2468                                 $view_query_part = " published = true AND ";
2469                         }
2470
2471                         if ($view_mode == "unread" && $feed != -6) {
2472                                 $view_query_part = " unread = true AND ";
2473                         }
2474
2475                         if ($limit > 0) {
2476                                 $limit_query_part = "LIMIT " . $limit;
2477                         }
2478
2479                         $allow_archived = false;
2480
2481                         $vfeed_query_part = "";
2482
2483                         // override query strategy and enable feed display when searching globally
2484                         if ($search && $search_mode == "all_feeds") {
2485                                 $query_strategy_part = "true";
2486                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2487                         /* tags */
2488                         } else if (!is_numeric($feed)) {
2489                                 $query_strategy_part = "true";
2490                                 $vfeed_query_part = "(SELECT title FROM ttrss_feeds WHERE
2491                                         id = feed_id) as feed_title,";
2492                         } else if ($search && $search_mode == "this_cat") {
2493                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2494
2495                                 if ($feed > 0) {
2496                                         if ($include_children) {
2497                                                 $subcats = getChildCategories($feed, $owner_uid);
2498                                                 array_push($subcats, $feed);
2499                                                 $cats_qpart = join(",", $subcats);
2500                                         } else {
2501                                                 $cats_qpart = $feed;
2502                                         }
2503
2504                                         $query_strategy_part = "ttrss_feeds.cat_id IN ($cats_qpart)";
2505
2506                                 } else {
2507                                         $query_strategy_part = "ttrss_feeds.cat_id IS NULL";
2508                                 }
2509
2510                         } else if ($feed > 0) {
2511
2512                                 if ($cat_view) {
2513
2514                                         if ($feed > 0) {
2515                                                 if ($include_children) {
2516                                                         # sub-cats
2517                                                         $subcats = getChildCategories($feed, $owner_uid);
2518
2519                                                         array_push($subcats, $feed);
2520                                                         $query_strategy_part = "cat_id IN (".
2521                                                                         implode(",", $subcats).")";
2522
2523                                                 } else {
2524                                                         $query_strategy_part = "cat_id = '$feed'";
2525                                                 }
2526
2527                                         } else {
2528                                                 $query_strategy_part = "cat_id IS NULL";
2529                                         }
2530
2531                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2532
2533                                 } else {
2534                                         $query_strategy_part = "feed_id = '$feed'";
2535                                 }
2536                         } else if ($feed == 0 && !$cat_view) { // archive virtual feed
2537                                 $query_strategy_part = "feed_id IS NULL";
2538                                 $allow_archived = true;
2539                         } else if ($feed == 0 && $cat_view) { // uncategorized
2540                                 $query_strategy_part = "cat_id IS NULL AND feed_id IS NOT NULL";
2541                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2542                         } else if ($feed == -1) { // starred virtual feed
2543                                 $query_strategy_part = "marked = true";
2544                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2545                                 $allow_archived = true;
2546
2547                                 if (!$override_order) {
2548                                         $override_order = "last_marked DESC, date_entered DESC, updated DESC";
2549                                 }
2550
2551                         } else if ($feed == -2) { // published virtual feed OR labels category
2552
2553                                 if (!$cat_view) {
2554                                         $query_strategy_part = "published = true";
2555                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2556                                         $allow_archived = true;
2557
2558                                         if (!$override_order) {
2559                                                 $override_order = "last_published DESC, date_entered DESC, updated DESC";
2560                                         }
2561
2562                                 } else {
2563                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2564
2565                                         $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2566
2567                                         $query_strategy_part = "ttrss_labels2.id = ttrss_user_labels2.label_id AND
2568                                                 ttrss_user_labels2.article_id = ref_id";
2569
2570                                 }
2571                         } else if ($feed == -6) { // recently read
2572                                 $query_strategy_part = "unread = false AND last_read IS NOT NULL";
2573                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2574                                 $allow_archived = true;
2575
2576                                 if (!$override_order) $override_order = "last_read DESC";
2577
2578 /*                      } else if ($feed == -7) { // shared
2579                                 $query_strategy_part = "uuid != ''";
2580                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2581                                 $allow_archived = true; */
2582                         } else if ($feed == -3) { // fresh virtual feed
2583                                 $query_strategy_part = "unread = true AND score >= 0";
2584
2585                                 $intl = get_pref("FRESH_ARTICLE_MAX_AGE", $owner_uid);
2586
2587                                 if (DB_TYPE == "pgsql") {
2588                                         $query_strategy_part .= " AND date_entered > NOW() - INTERVAL '$intl hour' ";
2589                                 } else {
2590                                         $query_strategy_part .= " AND date_entered > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
2591                                 }
2592
2593                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2594                         } else if ($feed == -4) { // all articles virtual feed
2595                                 $allow_archived = true;
2596                                 $query_strategy_part = "true";
2597                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2598                         } else if ($feed <= LABEL_BASE_INDEX) { // labels
2599                                 $label_id = feed_to_label_id($feed);
2600
2601                                 $query_strategy_part = "label_id = '$label_id' AND
2602                                         ttrss_labels2.id = ttrss_user_labels2.label_id AND
2603                                         ttrss_user_labels2.article_id = ref_id";
2604
2605                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2606                                 $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2607                                 $allow_archived = true;
2608
2609                         } else {
2610                                 $query_strategy_part = "true";
2611                         }
2612
2613                         $order_by = "score DESC, date_entered DESC, updated DESC";
2614
2615                         if ($view_mode == "unread_first") {
2616                                 $order_by = "unread DESC, $order_by";
2617                         }
2618
2619                         if ($override_order) {
2620                                 $order_by = $override_order;
2621                         }
2622
2623                         if ($override_strategy) {
2624                                 $query_strategy_part = $override_strategy;
2625                         }
2626
2627                         if ($override_vfeed) {
2628                                 $vfeed_query_part = $override_vfeed;
2629                         }
2630
2631                         $feed_title = "";
2632
2633                         if ($search) {
2634                                 $feed_title = T_sprintf("Search results: %s", $search);
2635                         } else {
2636                                 if ($cat_view) {
2637                                         $feed_title = getCategoryTitle($feed);
2638                                 } else {
2639                                         if (is_numeric($feed) && $feed > 0) {
2640                                                 $result = db_query("SELECT title,site_url,last_error,last_updated
2641                                                         FROM ttrss_feeds WHERE id = '$feed' AND owner_uid = $owner_uid");
2642
2643                                                 $feed_title = db_fetch_result($result, 0, "title");
2644                                                 $feed_site_url = db_fetch_result($result, 0, "site_url");
2645                                                 $last_error = db_fetch_result($result, 0, "last_error");
2646                                                 $last_updated = db_fetch_result($result, 0, "last_updated");
2647                                         } else {
2648                                                 $feed_title = getFeedTitle($feed);
2649                                         }
2650                                 }
2651                         }
2652
2653
2654                         $content_query_part = "content, content AS content_preview, ";
2655
2656
2657                         if (is_numeric($feed)) {
2658
2659                                 if ($feed >= 0) {
2660                                         $feed_kind = "Feeds";
2661                                 } else {
2662                                         $feed_kind = "Labels";
2663                                 }
2664
2665                                 if ($limit_query_part) {
2666                                         $offset_query_part = "OFFSET $offset";
2667                                 }
2668
2669                                 // proper override_order applied above
2670                                 if ($vfeed_query_part && !$ignore_vfeed_group && get_pref('VFEED_GROUP_BY_FEED', $owner_uid)) {
2671                                         if (!$override_order) {
2672                                                 $order_by = "ttrss_feeds.title, $order_by";
2673                                         } else {
2674                                                 $order_by = "ttrss_feeds.title, $override_order";
2675                                         }
2676                                 }
2677
2678                                 if (!$allow_archived) {
2679                                         $from_qpart = "ttrss_entries,ttrss_user_entries,ttrss_feeds$ext_tables_part";
2680                                         $feed_check_qpart = "ttrss_user_entries.feed_id = ttrss_feeds.id AND";
2681
2682                                 } else {
2683                                         $from_qpart = "ttrss_entries$ext_tables_part,ttrss_user_entries
2684                                                 LEFT JOIN ttrss_feeds ON (feed_id = ttrss_feeds.id)";
2685                                 }
2686
2687                                 if ($vfeed_query_part)
2688                                         $vfeed_query_part .= "favicon_avg_color,";
2689
2690                                 $query = "SELECT DISTINCT
2691                                                 date_entered,
2692                                                 guid,
2693                                                 ttrss_entries.id,ttrss_entries.title,
2694                                                 updated,
2695                                                 label_cache,
2696                                                 tag_cache,
2697                                                 always_display_enclosures,
2698                                                 site_url,
2699                                                 note,
2700                                                 num_comments,
2701                                                 comments,
2702                                                 int_id,
2703                                                 uuid,
2704                                                 lang,
2705                                                 hide_images,
2706                                                 unread,feed_id,marked,published,link,last_read,orig_feed_id,
2707                                                 last_marked, last_published,
2708                                                 $vfeed_query_part
2709                                                 $content_query_part
2710                                                 author,score
2711                                         FROM
2712                                                 $from_qpart
2713                                         WHERE
2714                                         $feed_check_qpart
2715                                         ttrss_user_entries.ref_id = ttrss_entries.id AND
2716                                         ttrss_user_entries.owner_uid = '$owner_uid' AND
2717                                         $search_query_part
2718                                         $filter_query_part
2719                                         $view_query_part
2720                                         $since_id_part
2721                                         $query_strategy_part ORDER BY $order_by
2722                                         $limit_query_part $offset_query_part";
2723
2724                                 if ($_REQUEST["debug"]) print $query;
2725
2726                                 $result = db_query($query);
2727
2728                         } else {
2729                                 // browsing by tag
2730
2731                                 $select_qpart = "SELECT DISTINCT " .
2732                                                                 "date_entered," .
2733                                                                 "guid," .
2734                                                                 "note," .
2735                                                                 "ttrss_entries.id as id," .
2736                                                                 "title," .
2737                                                                 "updated," .
2738                                                                 "unread," .
2739                                                                 "feed_id," .
2740                                                                 "orig_feed_id," .
2741                                                                 "marked," .
2742                                                                 "num_comments, " .
2743                                                                 "comments, " .
2744                                                                 "tag_cache," .
2745                                                                 "label_cache," .
2746                                                                 "link," .
2747                                                                 "lang," .
2748                                                                 "uuid," .
2749                                                                 "last_read," .
2750                                                                 "(SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) AS hide_images," .
2751                                                                 "last_marked, last_published, " .
2752                                                                 $since_id_part .
2753                                                                 $vfeed_query_part .
2754                                                                 $content_query_part .
2755                                                                 "score ";
2756
2757                                 $feed_kind = "Tags";
2758                                 $all_tags = explode(",", $feed);
2759                                 if ($search_mode == 'any') {
2760                                         $tag_sql = "tag_name in (" . implode(", ", array_map("db_quote", $all_tags)) . ")";
2761                                         $from_qpart = " FROM ttrss_entries,ttrss_user_entries,ttrss_tags ";
2762                                         $where_qpart = " WHERE " .
2763                                                                    "ref_id = ttrss_entries.id AND " .
2764                                                                    "ttrss_user_entries.owner_uid = $owner_uid AND " .
2765                                                                    "post_int_id = int_id AND $tag_sql AND " .
2766                                                                    $view_query_part .
2767                                                                    $search_query_part .
2768                                                                    $query_strategy_part . " ORDER BY $order_by " .
2769                                                                    $limit_query_part;
2770
2771                                 } else {
2772                                         $i = 1;
2773                                         $sub_selects = array();
2774                                         $sub_ands = array();
2775                                         foreach ($all_tags as $term) {
2776                                                 array_push($sub_selects, "(SELECT post_int_id from ttrss_tags WHERE tag_name = " . db_quote($term) . " AND owner_uid = $owner_uid) as A$i");
2777                                                 $i++;
2778                                         }
2779                                         if ($i > 2) {
2780                                                 $x = 1;
2781                                                 $y = 2;
2782                                                 do {
2783                                                         array_push($sub_ands, "A$x.post_int_id = A$y.post_int_id");
2784                                                         $x++;
2785                                                         $y++;
2786                                                 } while ($y < $i);
2787                                         }
2788                                         array_push($sub_ands, "A1.post_int_id = ttrss_user_entries.int_id and ttrss_user_entries.owner_uid = $owner_uid");
2789                                         array_push($sub_ands, "ttrss_user_entries.ref_id = ttrss_entries.id");
2790                                         $from_qpart = " FROM " . implode(", ", $sub_selects) . ", ttrss_user_entries, ttrss_entries";
2791                                         $where_qpart = " WHERE " . implode(" AND ", $sub_ands);
2792                                 }
2793                                 //                              error_log("TAG SQL: " . $tag_sql);
2794                                 // $tag_sql = "tag_name = '$feed'";   DEFAULT way
2795
2796                                 //                              error_log("[". $select_qpart . "][" . $from_qpart . "][" .$where_qpart . "]");
2797                                 $result = db_query($select_qpart . $from_qpart . $where_qpart);
2798                         }
2799
2800                         return array($result, $feed_title, $feed_site_url, $last_error, $last_updated, $search_words);
2801
2802         }
2803
2804         function sanitize($str, $force_remove_images = false, $owner = false, $site_url = false, $highlight_words = false, $article_id = false) {
2805                 if (!$owner) $owner = $_SESSION["uid"];
2806
2807                 $res = trim($str); if (!$res) return '';
2808
2809                 $charset_hack = '<head>
2810                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
2811                 </head>';
2812
2813                 $res = trim($res); if (!$res) return '';
2814
2815                 libxml_use_internal_errors(true);
2816
2817                 $doc = new DOMDocument();
2818                 $doc->loadHTML($charset_hack . $res);
2819                 $xpath = new DOMXPath($doc);
2820
2821                 $entries = $xpath->query('(//a[@href]|//img[@src])');
2822
2823                 foreach ($entries as $entry) {
2824
2825                         if ($site_url) {
2826
2827                                 if ($entry->hasAttribute('href'))
2828                                         $entry->setAttribute('href',
2829                                                 rewrite_relative_url($site_url, $entry->getAttribute('href')));
2830
2831                                 if ($entry->hasAttribute('src')) {
2832                                         $src = rewrite_relative_url($site_url, $entry->getAttribute('src'));
2833
2834                                         $cached_filename = CACHE_DIR . '/images/' . sha1($src) . '.png';
2835
2836                                         if (file_exists($cached_filename)) {
2837                                                 $src = SELF_URL_PATH . '/image.php?hash=' . sha1($src);
2838                                         }
2839
2840                                         $entry->setAttribute('src', $src);
2841                                 }
2842
2843                                 if ($entry->nodeName == 'img') {
2844                                         if (($owner && get_pref("STRIP_IMAGES", $owner)) ||
2845                                                         $force_remove_images || $_SESSION["bw_limit"]) {
2846
2847                                                 $p = $doc->createElement('p');
2848
2849                                                 $a = $doc->createElement('a');
2850                                                 $a->setAttribute('href', $entry->getAttribute('src'));
2851
2852                                                 $a->appendChild(new DOMText($entry->getAttribute('src')));
2853                                                 $a->setAttribute('target', '_blank');
2854
2855                                                 $p->appendChild($a);
2856
2857                                                 $entry->parentNode->replaceChild($p, $entry);
2858                                         }
2859                                 }
2860                         }
2861
2862                         if (strtolower($entry->nodeName) == "a") {
2863                                 $entry->setAttribute("target", "_blank");
2864                         }
2865                 }
2866
2867                 $entries = $xpath->query('//iframe');
2868                 foreach ($entries as $entry) {
2869                         $entry->setAttribute('sandbox', 'allow-scripts');
2870
2871                 }
2872
2873                 $allowed_elements = array('a', 'address', 'audio', 'article', 'aside',
2874                         'b', 'bdi', 'bdo', 'big', 'blockquote', 'body', 'br',
2875                         'caption', 'cite', 'center', 'code', 'col', 'colgroup',
2876                         'data', 'dd', 'del', 'details', 'div', 'dl', 'font',
2877                         'dt', 'em', 'footer', 'figure', 'figcaption',
2878                         'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'header', 'html', 'i',
2879                         'img', 'ins', 'kbd', 'li', 'main', 'mark', 'nav', 'noscript',
2880                         'ol', 'p', 'pre', 'q', 'ruby', 'rp', 'rt', 's', 'samp', 'section',
2881                         'small', 'source', 'span', 'strike', 'strong', 'sub', 'summary',
2882                         'sup', 'table', 'tbody', 'td', 'tfoot', 'th', 'thead', 'time',
2883                         'tr', 'track', 'tt', 'u', 'ul', 'var', 'wbr', 'video' );
2884
2885                 if ($_SESSION['hasSandbox']) $allowed_elements[] = 'iframe';
2886
2887                 $disallowed_attributes = array('id', 'style', 'class');
2888
2889                 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_SANITIZE) as $plugin) {
2890                         $retval = $plugin->hook_sanitize($doc, $site_url, $allowed_elements, $disallowed_attributes, $article_id);
2891                         if (is_array($retval)) {
2892                                 $doc = $retval[0];
2893                                 $allowed_elements = $retval[1];
2894                                 $disallowed_attributes = $retval[2];
2895                         } else {
2896                                 $doc = $retval;
2897                         }
2898                 }
2899
2900                 $doc->removeChild($doc->firstChild); //remove doctype
2901                 $doc = strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes);
2902
2903                 if ($highlight_words) {
2904                         foreach ($highlight_words as $word) {
2905
2906                                 // http://stackoverflow.com/questions/4081372/highlight-keywords-in-a-paragraph
2907
2908                                 $elements = $xpath->query("//*/text()");
2909
2910                                 foreach ($elements as $child) {
2911
2912                                         $fragment = $doc->createDocumentFragment();
2913                                         $text = $child->textContent;
2914                                         $stubs = array();
2915
2916                                         while (($pos = mb_stripos($text, $word)) !== false) {
2917                                                 $fragment->appendChild(new DomText(mb_substr($text, 0, $pos)));
2918                                                 $word = mb_substr($text, $pos, mb_strlen($word));
2919                                                 $highlight = $doc->createElement('span');
2920                                                 $highlight->appendChild(new DomText($word));
2921                                                 $highlight->setAttribute('class', 'highlight');
2922                                                 $fragment->appendChild($highlight);
2923                                                 $text = mb_substr($text, $pos + mb_strlen($word));
2924                                         }
2925
2926                                         if (!empty($text)) $fragment->appendChild(new DomText($text));
2927
2928                                         $child->parentNode->replaceChild($fragment, $child);
2929                                 }
2930                         }
2931                 }
2932
2933                 $res = $doc->saveHTML();
2934
2935                 return $res;
2936         }
2937
2938         function strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes) {
2939                 $xpath = new DOMXPath($doc);
2940                 $entries = $xpath->query('//*');
2941
2942                 foreach ($entries as $entry) {
2943                         if (!in_array($entry->nodeName, $allowed_elements)) {
2944                                 $entry->parentNode->removeChild($entry);
2945                         }
2946
2947                         if ($entry->hasAttributes()) {
2948                                 $attrs_to_remove = array();
2949
2950                                 foreach ($entry->attributes as $attr) {
2951
2952                                         if (strpos($attr->nodeName, 'on') === 0) {
2953                                                 array_push($attrs_to_remove, $attr);
2954                                         }
2955
2956                                         if (in_array($attr->nodeName, $disallowed_attributes)) {
2957                                                 array_push($attrs_to_remove, $attr);
2958                                         }
2959                                 }
2960
2961                                 foreach ($attrs_to_remove as $attr) {
2962                                         $entry->removeAttributeNode($attr);
2963                                 }
2964                         }
2965                 }
2966
2967                 return $doc;
2968         }
2969
2970         function check_for_update() {
2971                 if (CHECK_FOR_NEW_VERSION && $_SESSION['access_level'] >= 10) {
2972                         $version_url = "http://tt-rss.org/version.php?ver=" . VERSION .
2973                                 "&iid=" . sha1(SELF_URL_PATH);
2974
2975                         $version_data = @fetch_file_contents($version_url);
2976
2977                         if ($version_data) {
2978                                 $version_data = json_decode($version_data, true);
2979                                 if ($version_data && $version_data['version']) {
2980                                         if (version_compare(VERSION_STATIC, $version_data['version']) == -1) {
2981                                                 return $version_data;
2982                                         }
2983                                 }
2984                         }
2985                 }
2986                 return false;
2987         }
2988
2989         function catchupArticlesById($ids, $cmode, $owner_uid = false) {
2990
2991                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2992                 if (count($ids) == 0) return;
2993
2994                 $tmp_ids = array();
2995
2996                 foreach ($ids as $id) {
2997                         array_push($tmp_ids, "ref_id = '$id'");
2998                 }
2999
3000                 $ids_qpart = join(" OR ", $tmp_ids);
3001
3002                 if ($cmode == 0) {
3003                         db_query("UPDATE ttrss_user_entries SET
3004                         unread = false,last_read = NOW()
3005                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
3006                 } else if ($cmode == 1) {
3007                         db_query("UPDATE ttrss_user_entries SET
3008                         unread = true
3009                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
3010                 } else {
3011                         db_query("UPDATE ttrss_user_entries SET
3012                         unread = NOT unread,last_read = NOW()
3013                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
3014                 }
3015
3016                 /* update ccache */
3017
3018                 $result = db_query("SELECT DISTINCT feed_id FROM ttrss_user_entries
3019                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
3020
3021                 while ($line = db_fetch_assoc($result)) {
3022                         ccache_update($line["feed_id"], $owner_uid);
3023                 }
3024         }
3025
3026         function get_article_tags($id, $owner_uid = 0, $tag_cache = false) {
3027
3028                 $a_id = db_escape_string($id);
3029
3030                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3031
3032                 $query = "SELECT DISTINCT tag_name,
3033                         owner_uid as owner FROM
3034                         ttrss_tags WHERE post_int_id = (SELECT int_id FROM ttrss_user_entries WHERE
3035                         ref_id = '$a_id' AND owner_uid = '$owner_uid' LIMIT 1) ORDER BY tag_name";
3036
3037                 $tags = array();
3038
3039                 /* check cache first */
3040
3041                 if ($tag_cache === false) {
3042                         $result = db_query("SELECT tag_cache FROM ttrss_user_entries
3043                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
3044
3045                         $tag_cache = db_fetch_result($result, 0, "tag_cache");
3046                 }
3047
3048                 if ($tag_cache) {
3049                         $tags = explode(",", $tag_cache);
3050                 } else {
3051
3052                         /* do it the hard way */
3053
3054                         $tmp_result = db_query($query);
3055
3056                         while ($tmp_line = db_fetch_assoc($tmp_result)) {
3057                                 array_push($tags, $tmp_line["tag_name"]);
3058                         }
3059
3060                         /* update the cache */
3061
3062                         $tags_str = db_escape_string(join(",", $tags));
3063
3064                         db_query("UPDATE ttrss_user_entries
3065                                 SET tag_cache = '$tags_str' WHERE ref_id = '$id'
3066                                 AND owner_uid = $owner_uid");
3067                 }
3068
3069                 return $tags;
3070         }
3071
3072         function trim_array($array) {
3073                 $tmp = $array;
3074                 array_walk($tmp, 'trim');
3075                 return $tmp;
3076         }
3077
3078         function tag_is_valid($tag) {
3079                 if ($tag == '') return false;
3080                 if (preg_match("/^[0-9]*$/", $tag)) return false;
3081                 if (mb_strlen($tag) > 250) return false;
3082
3083                 if (!$tag) return false;
3084
3085                 return true;
3086         }
3087
3088         function render_login_form() {
3089                 header('Cache-Control: public');
3090
3091                 require_once "login_form.php";
3092                 exit;
3093         }
3094
3095         function format_warning($msg, $id = "") {
3096                 global $link;
3097                 return "<div class=\"warning\" id=\"$id\">
3098                         <span><img src=\"images/alert.png\"></span><span>$msg</span></div>";
3099         }
3100
3101         function format_notice($msg, $id = "") {
3102                 global $link;
3103                 return "<div class=\"notice\" id=\"$id\">
3104                         <span><img src=\"images/information.png\"></span><span>$msg</span></div>";
3105         }
3106
3107         function format_error($msg, $id = "") {
3108                 global $link;
3109                 return "<div class=\"error\" id=\"$id\">
3110                         <span><img src=\"images/alert.png\"></span><span>$msg</span></div>";
3111         }
3112
3113         function print_notice($msg) {
3114                 return print format_notice($msg);
3115         }
3116
3117         function print_warning($msg) {
3118                 return print format_warning($msg);
3119         }
3120
3121         function print_error($msg) {
3122                 return print format_error($msg);
3123         }
3124
3125
3126         function T_sprintf() {
3127                 $args = func_get_args();
3128                 return vsprintf(__(array_shift($args)), $args);
3129         }
3130
3131         function format_inline_player($url, $ctype) {
3132
3133                 $entry = "";
3134
3135                 $url = htmlspecialchars($url);
3136
3137                 if (strpos($ctype, "audio/") === 0) {
3138
3139                         if ($_SESSION["hasAudio"] && (strpos($ctype, "ogg") !== false ||
3140                                 $_SESSION["hasMp3"])) {
3141
3142                                 $entry .= "<audio preload=\"none\" controls>
3143                                         <source type=\"$ctype\" src=\"$url\"></source>
3144                                         </audio>";
3145
3146                         } else {
3147
3148                                 $entry .= "<object type=\"application/x-shockwave-flash\"
3149                                         data=\"lib/button/musicplayer.swf?song_url=$url\"
3150                                         width=\"17\" height=\"17\" style='float : left; margin-right : 5px;'>
3151                                         <param name=\"movie\"
3152                                                 value=\"lib/button/musicplayer.swf?song_url=$url\" />
3153                                         </object>";
3154                         }
3155
3156                         if ($entry) $entry .= "&nbsp; <a target=\"_blank\"
3157                                 href=\"$url\">" . basename($url) . "</a>";
3158
3159                         return $entry;
3160
3161                 }
3162
3163                 return "";
3164
3165 /*              $filename = substr($url, strrpos($url, "/")+1);
3166
3167                 $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
3168                         $filename . " (" . $ctype . ")" . "</a>"; */
3169
3170         }
3171
3172         function format_article($id, $mark_as_read = true, $zoom_mode = false, $owner_uid = false) {
3173                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3174
3175                 $rv = array();
3176
3177                 $rv['id'] = $id;
3178
3179                 /* we can figure out feed_id from article id anyway, why do we
3180                  * pass feed_id here? let's ignore the argument :(*/
3181
3182                 $result = db_query("SELECT feed_id FROM ttrss_user_entries
3183                         WHERE ref_id = '$id'");
3184
3185                 $feed_id = (int) db_fetch_result($result, 0, "feed_id");
3186
3187                 $rv['feed_id'] = $feed_id;
3188
3189                 //if (!$zoom_mode) { print "<article id='$id'><![CDATA["; };
3190
3191                 if ($mark_as_read) {
3192                         $result = db_query("UPDATE ttrss_user_entries
3193                                 SET unread = false,last_read = NOW()
3194                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
3195
3196                         ccache_update($feed_id, $owner_uid);
3197                 }
3198
3199                 $result = db_query("SELECT id,title,link,content,feed_id,comments,int_id,lang,
3200                         ".SUBSTRING_FOR_DATE."(updated,1,16) as updated,
3201                         (SELECT site_url FROM ttrss_feeds WHERE id = feed_id) as site_url,
3202                         (SELECT title FROM ttrss_feeds WHERE id = feed_id) as feed_title,
3203                         (SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) as hide_images,
3204                         (SELECT always_display_enclosures FROM ttrss_feeds WHERE id = feed_id) as always_display_enclosures,
3205                         num_comments,
3206                         tag_cache,
3207                         author,
3208                         orig_feed_id,
3209                         note
3210                         FROM ttrss_entries,ttrss_user_entries
3211                         WHERE   id = '$id' AND ref_id = id AND owner_uid = $owner_uid");
3212
3213                 if ($result) {
3214
3215                         $line = db_fetch_assoc($result);
3216
3217                         $tag_cache = $line["tag_cache"];
3218
3219                         $line["tags"] = get_article_tags($id, $owner_uid, $line["tag_cache"]);
3220                         unset($line["tag_cache"]);
3221
3222                         $line["content"] = sanitize($line["content"],
3223                                 sql_bool_to_bool($line['hide_images']),
3224                                 $owner_uid, $line["site_url"], false, $line["id"]);
3225
3226                         foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_RENDER_ARTICLE) as $p) {
3227                                 $line = $p->hook_render_article($line);
3228                         }
3229
3230                         $num_comments = $line["num_comments"];
3231                         $entry_comments = "";
3232
3233                         if ($num_comments > 0) {
3234                                 if ($line["comments"]) {
3235                                         $comments_url = htmlspecialchars($line["comments"]);
3236                                 } else {
3237                                         $comments_url = htmlspecialchars($line["link"]);
3238                                 }
3239                                 $entry_comments = "<a class=\"postComments\"
3240                                         target='_blank' href=\"$comments_url\">$num_comments ".
3241                                         _ngettext("comment", "comments", $num_comments)."</a>";
3242
3243                         } else {
3244                                 if ($line["comments"] && $line["link"] != $line["comments"]) {
3245                                         $entry_comments = "<a class=\"postComments\" target='_blank' href=\"".htmlspecialchars($line["comments"])."\">".__("comments")."</a>";
3246                                 }
3247                         }
3248
3249                         if ($zoom_mode) {
3250                                 header("Content-Type: text/html");
3251                                 $rv['content'] .= "<html><head>
3252                                                 <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"/>
3253                                                 <title>Tiny Tiny RSS - ".$line["title"]."</title>
3254                                                 <link rel=\"stylesheet\" type=\"text/css\" href=\"css/tt-rss.css\">
3255                                                 <link rel=\"shortcut icon\" type=\"image/png\" href=\"images/favicon.png\">
3256                                                 <link rel=\"icon\" type=\"image/png\" sizes=\"72x72\" href=\"images/favicon-72px.png\">
3257
3258                                                 <script type=\"text/javascript\">
3259                                                 function openSelectedAttachment(elem) {
3260                                                         try {
3261                                                                 var url = elem[elem.selectedIndex].value;
3262
3263                                                                 if (url) {
3264                                                                         window.open(url);
3265                                                                         elem.selectedIndex = 0;
3266                                                                 }
3267
3268                                                         } catch (e) {
3269                                                                 exception_error(\"openSelectedAttachment\", e);
3270                                                         }
3271                                                 }
3272                                         </script>
3273                                         </head><body id=\"ttrssZoom\">";
3274                         }
3275
3276                         $rv['content'] .= "<div class=\"postReply\" id=\"POST-$id\">";
3277
3278                         $rv['content'] .= "<div class=\"postHeader\" id=\"POSTHDR-$id\">";
3279
3280                         $entry_author = $line["author"];
3281
3282                         if ($entry_author) {
3283                                 $entry_author = __(" - ") . $entry_author;
3284                         }
3285
3286                         $parsed_updated = make_local_datetime($line["updated"], true,
3287                                 $owner_uid, true);
3288
3289                         if (!$zoom_mode)
3290                                 $rv['content'] .= "<div class=\"postDate\">$parsed_updated</div>";
3291
3292                         if ($line["link"]) {
3293                                 $rv['content'] .= "<div class='postTitle'><a target='_blank'
3294                                         title=\"".htmlspecialchars($line['title'])."\"
3295                                         href=\"" .
3296                                         htmlspecialchars($line["link"]) . "\">" .
3297                                         $line["title"] . "</a>" .
3298                                         "<span class='author'>$entry_author</span></div>";
3299                         } else {
3300                                 $rv['content'] .= "<div class='postTitle'>" . $line["title"] . "$entry_author</div>";
3301                         }
3302
3303                         if ($zoom_mode) {
3304                                 $feed_title = "<a href=\"".htmlspecialchars($line["site_url"]).
3305                                         "\" target=\"_blank\">".
3306                                         htmlspecialchars($line["feed_title"])."</a>";
3307
3308                                 $rv['content'] .= "<div class=\"postFeedTitle\">$feed_title</div>";
3309
3310                                 $rv['content'] .= "<div class=\"postDate\">$parsed_updated</div>";
3311                         }
3312
3313                         $tags_str = format_tags_string($line["tags"], $id);
3314                         $tags_str_full = join(", ", $line["tags"]);
3315
3316                         if (!$tags_str_full) $tags_str_full = __("no tags");
3317
3318                         if (!$entry_comments) $entry_comments = "&nbsp;"; # placeholder
3319
3320                         $rv['content'] .= "<div class='postTags' style='float : right'>
3321                                 <img src='images/tag.png'
3322                                 class='tagsPic' alt='Tags' title='Tags'>&nbsp;";
3323
3324                         if (!$zoom_mode) {
3325                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>
3326                                         <a title=\"".__('Edit tags for this article')."\"
3327                                         href=\"#\" onclick=\"editArticleTags($id, $feed_id)\">(+)</a>";
3328
3329                                 $rv['content'] .= "<div dojoType=\"dijit.Tooltip\"
3330                                         id=\"ATSTRTIP-$id\" connectId=\"ATSTR-$id\"
3331                                         position=\"below\">$tags_str_full</div>";
3332
3333                                 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_ARTICLE_BUTTON) as $p) {
3334                                         $rv['content'] .= $p->hook_article_button($line);
3335                                 }
3336
3337                         } else {
3338                                 $tags_str = strip_tags($tags_str);
3339                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>";
3340                         }
3341                         $rv['content'] .= "</div>";
3342                         $rv['content'] .= "<div clear='both'>";
3343
3344                         foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_ARTICLE_LEFT_BUTTON) as $p) {
3345                                 $rv['content'] .= $p->hook_article_left_button($line);
3346                         }
3347
3348                         $rv['content'] .= "$entry_comments</div>";
3349
3350                         if ($line["orig_feed_id"]) {
3351
3352                                 $tmp_result = db_query("SELECT * FROM ttrss_archived_feeds
3353                                         WHERE id = ".$line["orig_feed_id"]);
3354
3355                                 if (db_num_rows($tmp_result) != 0) {
3356
3357                                         $rv['content'] .= "<div clear='both'>";
3358                                         $rv['content'] .= __("Originally from:");
3359
3360                                         $rv['content'] .= "&nbsp;";
3361
3362                                         $tmp_line = db_fetch_assoc($tmp_result);
3363
3364                                         $rv['content'] .= "<a target='_blank'
3365                                                 href=' " . htmlspecialchars($tmp_line['site_url']) . "'>" .
3366                                                 $tmp_line['title'] . "</a>";
3367
3368                                         $rv['content'] .= "&nbsp;";
3369
3370                                         $rv['content'] .= "<a target='_blank' href='" . htmlspecialchars($tmp_line['feed_url']) . "'>";
3371                                         $rv['content'] .= "<img title='".__('Feed URL')."'class='tinyFeedIcon' src='images/pub_set.svg'></a>";
3372
3373                                         $rv['content'] .= "</div>";
3374                                 }
3375                         }
3376
3377                         $rv['content'] .= "</div>";
3378
3379                         $rv['content'] .= "<div id=\"POSTNOTE-$id\">";
3380                                 if ($line['note']) {
3381                                         $rv['content'] .= format_article_note($id, $line['note'], !$zoom_mode);
3382                                 }
3383                         $rv['content'] .= "</div>";
3384
3385                         if (!$line['lang']) $line['lang'] = 'en';
3386
3387                         $rv['content'] .= "<div class=\"postContent\" lang=\"".$line['lang']."\">";
3388
3389                         $rv['content'] .= $line["content"];
3390                         $rv['content'] .= format_article_enclosures($id,
3391                                 sql_bool_to_bool($line["always_display_enclosures"]),
3392                                 $line["content"],
3393                                 sql_bool_to_bool($line["hide_images"]));
3394
3395                         $rv['content'] .= "</div>";
3396
3397                         $rv['content'] .= "</div>";
3398
3399                 }
3400
3401                 if ($zoom_mode) {
3402                         $rv['content'] .= "
3403                                 <div class='footer'>
3404                                 <button onclick=\"return window.close()\">".
3405                                         __("Close this window")."</button></div>";
3406                         $rv['content'] .= "</body></html>";
3407                 }
3408
3409                 return $rv;
3410
3411         }
3412
3413         function print_checkpoint($n, $s) {
3414                 $ts = microtime(true);
3415                 echo sprintf("<!-- CP[$n] %.4f seconds -->\n", $ts - $s);
3416                 return $ts;
3417         }
3418
3419         function sanitize_tag($tag) {
3420                 $tag = trim($tag);
3421
3422                 $tag = mb_strtolower($tag, 'utf-8');
3423
3424                 $tag = preg_replace('/[\'\"\+\>\<]/', "", $tag);
3425
3426 //              $tag = str_replace('"', "", $tag);
3427 //              $tag = str_replace("+", " ", $tag);
3428                 $tag = str_replace("technorati tag: ", "", $tag);
3429
3430                 return $tag;
3431         }
3432
3433         function get_self_url_prefix() {
3434                 if (strrpos(SELF_URL_PATH, "/") === strlen(SELF_URL_PATH)-1) {
3435                         return substr(SELF_URL_PATH, 0, strlen(SELF_URL_PATH)-1);
3436                 } else {
3437                         return SELF_URL_PATH;
3438                 }
3439         }
3440
3441         /**
3442          * Compute the Mozilla Firefox feed adding URL from server HOST and REQUEST_URI.
3443          *
3444          * @return string The Mozilla Firefox feed adding URL.
3445          */
3446         function add_feed_url() {
3447                 //$url_path = ($_SERVER['HTTPS'] != "on" ? 'http://' :  'https://') . $_SERVER["HTTP_HOST"] . parse_url($_SERVER["REQUEST_URI"], PHP_URL_PATH);
3448
3449                 $url_path = get_self_url_prefix() .
3450                         "/public.php?op=subscribe&feed_url=%s";
3451                 return $url_path;
3452         } // function add_feed_url
3453
3454         function encrypt_password($pass, $salt = '', $mode2 = false) {
3455                 if ($salt && $mode2) {
3456                         return "MODE2:" . hash('sha256', $salt . $pass);
3457                 } else if ($salt) {
3458                         return "SHA1X:" . sha1("$salt:$pass");
3459                 } else {
3460                         return "SHA1:" . sha1($pass);
3461                 }
3462         } // function encrypt_password
3463
3464         function load_filters($feed_id, $owner_uid, $action_id = false) {
3465                 $filters = array();
3466
3467                 $cat_id = (int)getFeedCategory($feed_id);
3468
3469                 if ($cat_id == 0)
3470                         $null_cat_qpart = "cat_id IS NULL OR";
3471                 else
3472                         $null_cat_qpart = "";
3473
3474                 $result = db_query("SELECT * FROM ttrss_filters2 WHERE
3475                         owner_uid = $owner_uid AND enabled = true ORDER BY order_id, title");
3476
3477                 $check_cats = join(",", array_merge(
3478                         getParentCategories($cat_id, $owner_uid),
3479                         array($cat_id)));
3480
3481                 while ($line = db_fetch_assoc($result)) {
3482                         $filter_id = $line["id"];
3483
3484                         $result2 = db_query("SELECT
3485                                 r.reg_exp, r.inverse, r.feed_id, r.cat_id, r.cat_filter, t.name AS type_name
3486                                 FROM ttrss_filters2_rules AS r,
3487                                 ttrss_filter_types AS t
3488                                 WHERE
3489                                         ($null_cat_qpart (cat_id IS NULL AND cat_filter = false) OR cat_id IN ($check_cats)) AND
3490                                         (feed_id IS NULL OR feed_id = '$feed_id') AND
3491                                         filter_type = t.id AND filter_id = '$filter_id'");
3492
3493                         $rules = array();
3494                         $actions = array();
3495
3496                         while ($rule_line = db_fetch_assoc($result2)) {
3497 #                               print_r($rule_line);
3498
3499                                 $rule = array();
3500                                 $rule["reg_exp"] = $rule_line["reg_exp"];
3501                                 $rule["type"] = $rule_line["type_name"];
3502                                 $rule["inverse"] = sql_bool_to_bool($rule_line["inverse"]);
3503
3504                                 array_push($rules, $rule);
3505                         }
3506
3507                         $result2 = db_query("SELECT a.action_param,t.name AS type_name
3508                                 FROM ttrss_filters2_actions AS a,
3509                                 ttrss_filter_actions AS t
3510                                 WHERE
3511                                         action_id = t.id AND filter_id = '$filter_id'");
3512
3513                         while ($action_line = db_fetch_assoc($result2)) {
3514 #                               print_r($action_line);
3515
3516                                 $action = array();
3517                                 $action["type"] = $action_line["type_name"];
3518                                 $action["param"] = $action_line["action_param"];
3519
3520                                 array_push($actions, $action);
3521                         }
3522
3523
3524                         $filter = array();
3525                         $filter["match_any_rule"] = sql_bool_to_bool($line["match_any_rule"]);
3526                         $filter["inverse"] = sql_bool_to_bool($line["inverse"]);
3527                         $filter["rules"] = $rules;
3528                         $filter["actions"] = $actions;
3529
3530                         if (count($rules) > 0 && count($actions) > 0) {
3531                                 array_push($filters, $filter);
3532                         }
3533                 }
3534
3535                 return $filters;
3536         }
3537
3538         function get_score_pic($score) {
3539                 if ($score > 100) {
3540                         return "score_high.png";
3541                 } else if ($score > 0) {
3542                         return "score_half_high.png";
3543                 } else if ($score < -100) {
3544                         return "score_low.png";
3545                 } else if ($score < 0) {
3546                         return "score_half_low.png";
3547                 } else {
3548                         return "score_neutral.png";
3549                 }
3550         }
3551
3552         function feed_has_icon($id) {
3553                 return is_file(ICONS_DIR . "/$id.ico") && filesize(ICONS_DIR . "/$id.ico") > 0;
3554         }
3555
3556         function init_plugins() {
3557                 PluginHost::getInstance()->load(PLUGINS, PluginHost::KIND_ALL);
3558
3559                 return true;
3560         }
3561
3562         function format_tags_string($tags, $id) {
3563                 if (!is_array($tags) || count($tags) == 0) {
3564                         return __("no tags");
3565                 } else {
3566                         $maxtags = min(5, count($tags));
3567
3568                         for ($i = 0; $i < $maxtags; $i++) {
3569                                 $tags_str .= "<a class=\"tag\" href=\"#\" onclick=\"viewfeed('".$tags[$i]."')\">" . $tags[$i] . "</a>, ";
3570                         }
3571
3572                         $tags_str = mb_substr($tags_str, 0, mb_strlen($tags_str)-2);
3573
3574                         if (count($tags) > $maxtags)
3575                                 $tags_str .= ", &hellip;";
3576
3577                         return $tags_str;
3578                 }
3579         }
3580
3581         function format_article_labels($labels, $id) {
3582
3583                 if (!is_array($labels)) return '';
3584
3585                 $labels_str = "";
3586
3587                 foreach ($labels as $l) {
3588                         $labels_str .= sprintf("<span class='hlLabelRef'
3589                                 style='color : %s; background-color : %s'>%s</span>",
3590                                         $l[2], $l[3], $l[1]);
3591                         }
3592
3593                 return $labels_str;
3594
3595         }
3596
3597         function format_article_note($id, $note, $allow_edit = true) {
3598
3599                 $str = "<div class='articleNote'        onclick=\"editArticleNote($id)\">
3600                         <div class='noteEdit' onclick=\"editArticleNote($id)\">".
3601                         ($allow_edit ? __('(edit note)') : "")."</div>$note</div>";
3602
3603                 return $str;
3604         }
3605
3606
3607         function get_feed_category($feed_cat, $parent_cat_id = false) {
3608                 if ($parent_cat_id) {
3609                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3610                         $parent_insert = "'$parent_cat_id'";
3611                 } else {
3612                         $parent_qpart = "parent_cat IS NULL";
3613                         $parent_insert = "NULL";
3614                 }
3615
3616                 $result = db_query(
3617                         "SELECT id FROM ttrss_feed_categories
3618                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3619
3620                 if (db_num_rows($result) == 0) {
3621                         return false;
3622                 } else {
3623                         return db_fetch_result($result, 0, "id");
3624                 }
3625         }
3626
3627         function add_feed_category($feed_cat, $parent_cat_id = false) {
3628
3629                 if (!$feed_cat) return false;
3630
3631                 db_query("BEGIN");
3632
3633                 if ($parent_cat_id) {
3634                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3635                         $parent_insert = "'$parent_cat_id'";
3636                 } else {
3637                         $parent_qpart = "parent_cat IS NULL";
3638                         $parent_insert = "NULL";
3639                 }
3640
3641                 $feed_cat = mb_substr($feed_cat, 0, 250);
3642
3643                 $result = db_query(
3644                         "SELECT id FROM ttrss_feed_categories
3645                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3646
3647                 if (db_num_rows($result) == 0) {
3648
3649                         $result = db_query(
3650                                 "INSERT INTO ttrss_feed_categories (owner_uid,title,parent_cat)
3651                                 VALUES ('".$_SESSION["uid"]."', '$feed_cat', $parent_insert)");
3652
3653                         db_query("COMMIT");
3654
3655                         return true;
3656                 }
3657
3658                 return false;
3659         }
3660
3661         function getArticleFeed($id) {
3662                 $result = db_query("SELECT feed_id FROM ttrss_user_entries
3663                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
3664
3665                 if (db_num_rows($result) != 0) {
3666                         return db_fetch_result($result, 0, "feed_id");
3667                 } else {
3668                         return 0;
3669                 }
3670         }
3671
3672         /**
3673          * Fixes incomplete URLs by prepending "http://".
3674          * Also replaces feed:// with http://, and
3675          * prepends a trailing slash if the url is a domain name only.
3676          *
3677          * @param string $url Possibly incomplete URL
3678          *
3679          * @return string Fixed URL.
3680          */
3681         function fix_url($url) {
3682                 if (strpos($url, '://') === false) {
3683                         $url = 'http://' . $url;
3684                 } else if (substr($url, 0, 5) == 'feed:') {
3685                         $url = 'http:' . substr($url, 5);
3686                 }
3687
3688                 //prepend slash if the URL has no slash in it
3689                 // "http://www.example" -> "http://www.example/"
3690                 if (strpos($url, '/', strpos($url, ':') + 3) === false) {
3691                         $url .= '/';
3692                 }
3693
3694                 if ($url != "http:///")
3695                         return $url;
3696                 else
3697                         return '';
3698         }
3699
3700         function validate_feed_url($url) {
3701                 $parts = parse_url($url);
3702
3703                 return ($parts['scheme'] == 'http' || $parts['scheme'] == 'feed' || $parts['scheme'] == 'https');
3704
3705         }
3706
3707         function get_article_enclosures($id) {
3708
3709                 $query = "SELECT * FROM ttrss_enclosures
3710                         WHERE post_id = '$id' AND content_url != ''";
3711
3712                 $rv = array();
3713
3714                 $result = db_query($query);
3715
3716                 if (db_num_rows($result) > 0) {
3717                         while ($line = db_fetch_assoc($result)) {
3718                                 array_push($rv, $line);
3719                         }
3720                 }
3721
3722                 return $rv;
3723         }
3724
3725         function save_email_address($email) {
3726                 // FIXME: implement persistent storage of emails
3727
3728                 if (!$_SESSION['stored_emails'])
3729                         $_SESSION['stored_emails'] = array();
3730
3731                 if (!in_array($email, $_SESSION['stored_emails']))
3732                         array_push($_SESSION['stored_emails'], $email);
3733         }
3734
3735
3736         function get_feed_access_key($feed_id, $is_cat, $owner_uid = false) {
3737
3738                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3739
3740                 $sql_is_cat = bool_to_sql_bool($is_cat);
3741
3742                 $result = db_query("SELECT access_key FROM ttrss_access_keys
3743                         WHERE feed_id = '$feed_id'      AND is_cat = $sql_is_cat
3744                         AND owner_uid = " . $owner_uid);
3745
3746                 if (db_num_rows($result) == 1) {
3747                         return db_fetch_result($result, 0, "access_key");
3748                 } else {
3749                         $key = db_escape_string(sha1(uniqid(rand(), true)));
3750
3751                         $result = db_query("INSERT INTO ttrss_access_keys
3752                                 (access_key, feed_id, is_cat, owner_uid)
3753                                 VALUES ('$key', '$feed_id', $sql_is_cat, '$owner_uid')");
3754
3755                         return $key;
3756                 }
3757                 return false;
3758         }
3759
3760         function get_feeds_from_html($url, $content)
3761         {
3762                 $url     = fix_url($url);
3763                 $baseUrl = substr($url, 0, strrpos($url, '/') + 1);
3764
3765                 libxml_use_internal_errors(true);
3766
3767                 $doc = new DOMDocument();
3768                 $doc->loadHTML($content);
3769                 $xpath = new DOMXPath($doc);
3770                 $entries = $xpath->query('/html/head/link[@rel="alternate"]');
3771                 $feedUrls = array();
3772                 foreach ($entries as $entry) {
3773                         if ($entry->hasAttribute('href')) {
3774                                 $title = $entry->getAttribute('title');
3775                                 if ($title == '') {
3776                                         $title = $entry->getAttribute('type');
3777                                 }
3778                                 $feedUrl = rewrite_relative_url(
3779                                         $baseUrl, $entry->getAttribute('href')
3780                                 );
3781                                 $feedUrls[$feedUrl] = $title;
3782                         }
3783                 }
3784                 return $feedUrls;
3785         }
3786
3787         function is_html($content) {
3788                 return preg_match("/<html|DOCTYPE html/i", substr($content, 0, 20)) !== 0;
3789         }
3790
3791         function url_is_html($url, $login = false, $pass = false) {
3792                 return is_html(fetch_file_contents($url, false, $login, $pass));
3793         }
3794
3795         function print_label_select($name, $value, $attributes = "") {
3796
3797                 $result = db_query("SELECT caption FROM ttrss_labels2
3798                         WHERE owner_uid = '".$_SESSION["uid"]."' ORDER BY caption");
3799
3800                 print "<select default=\"$value\" name=\"" . htmlspecialchars($name) .
3801                         "\" $attributes onchange=\"labelSelectOnChange(this)\" >";
3802
3803                 while ($line = db_fetch_assoc($result)) {
3804
3805                         $issel = ($line["caption"] == $value) ? "selected=\"1\"" : "";
3806
3807                         print "<option value=\"".htmlspecialchars($line["caption"])."\"
3808                                 $issel>" . htmlspecialchars($line["caption"]) . "</option>";
3809
3810                 }
3811
3812 #               print "<option value=\"ADD_LABEL\">" .__("Add label...") . "</option>";
3813
3814                 print "</select>";
3815
3816
3817         }
3818
3819         function format_article_enclosures($id, $always_display_enclosures,
3820                                         $article_content, $hide_images = false) {
3821
3822                 $result = get_article_enclosures($id);
3823                 $rv = '';
3824
3825                 if (count($result) > 0) {
3826
3827                         $entries_html = array();
3828                         $entries = array();
3829                         $entries_inline = array();
3830
3831                         foreach ($result as $line) {
3832
3833                                 $url = $line["content_url"];
3834                                 $ctype = $line["content_type"];
3835                                 $title = $line["title"];
3836
3837                                 if (!$ctype) $ctype = __("unknown type");
3838
3839                                 $filename = substr($url, strrpos($url, "/")+1);
3840
3841                                 $player = format_inline_player($url, $ctype);
3842
3843                                 if ($player) array_push($entries_inline, $player);
3844
3845 #                               $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
3846 #                                       $filename . " (" . $ctype . ")" . "</a>";
3847
3848                                 $entry = "<div onclick=\"window.open('".htmlspecialchars($url)."')\"
3849                                         dojoType=\"dijit.MenuItem\">$filename ($ctype)</div>";
3850
3851                                 array_push($entries_html, $entry);
3852
3853                                 $entry = array();
3854
3855                                 $entry["type"] = $ctype;
3856                                 $entry["filename"] = $filename;
3857                                 $entry["url"] = $url;
3858                                 $entry["title"] = $title;
3859
3860                                 array_push($entries, $entry);
3861                         }
3862
3863                         if ($_SESSION['uid'] && !get_pref("STRIP_IMAGES") && !$_SESSION["bw_limit"]) {
3864                                 if ($always_display_enclosures ||
3865                                                         !preg_match("/<img/i", $article_content)) {
3866
3867                                         foreach ($entries as $entry) {
3868
3869                                                 if (preg_match("/image/", $entry["type"]) ||
3870                                                                 preg_match("/\.(jpg|png|gif|bmp)/i", $entry["filename"])) {
3871
3872                                                                 if (!$hide_images) {
3873                                                                         $rv .= "<p><img
3874                                                                         alt=\"".htmlspecialchars($entry["filename"])."\"
3875                                                                         src=\"" .htmlspecialchars($entry["url"]) . "\"/></p>";
3876                                                                 } else {
3877                                                                         $rv .= "<p><a target=\"_blank\"
3878                                                                         href=\"".htmlspecialchars($entry["url"])."\"
3879                                                                         >" .htmlspecialchars($entry["url"]) . "</a></p>";
3880                                                                 }
3881
3882                                                                 if ($entry['title']) {
3883                                                                         $rv.= "<div class=\"enclosure_title\">${entry['title']}</div>";
3884                                                                 }
3885                                                 }
3886                                         }
3887                                 }
3888                         }
3889
3890                         if (count($entries_inline) > 0) {
3891                                 $rv .= "<hr clear='both'/>";
3892                                 foreach ($entries_inline as $entry) { $rv .= $entry; };
3893                                 $rv .= "<hr clear='both'/>";
3894                         }
3895
3896                         $rv .= "<select class=\"attachments\" onchange=\"openSelectedAttachment(this)\">".
3897                                 "<option value=''>" . __('Attachments')."</option>";
3898
3899                         foreach ($entries as $entry) {
3900                                 if ($entry["title"])
3901                                         $title = "&mdash; " . truncate_string($entry["title"], 30);
3902                                 else
3903                                         $title = "";
3904
3905                                 $rv .= "<option value=\"".htmlspecialchars($entry["url"])."\">" . htmlspecialchars($entry["filename"]) . "$title</option>";
3906
3907                         };
3908
3909                         $rv .= "</select>";
3910                 }
3911
3912                 return $rv;
3913         }
3914
3915         function getLastArticleId() {
3916                 $result = db_query("SELECT MAX(ref_id) AS id FROM ttrss_user_entries
3917                         WHERE owner_uid = " . $_SESSION["uid"]);
3918
3919                 if (db_num_rows($result) == 1) {
3920                         return db_fetch_result($result, 0, "id");
3921                 } else {
3922                         return -1;
3923                 }
3924         }
3925
3926         function build_url($parts) {
3927                 return $parts['scheme'] . "://" . $parts['host'] . $parts['path'];
3928         }
3929
3930         /**
3931          * Converts a (possibly) relative URL to a absolute one.
3932          *
3933          * @param string $url     Base URL (i.e. from where the document is)
3934          * @param string $rel_url Possibly relative URL in the document
3935          *
3936          * @return string Absolute URL
3937          */
3938         function rewrite_relative_url($url, $rel_url) {
3939                 if (strpos($rel_url, ":") !== false) {
3940                         return $rel_url;
3941                 } else if (strpos($rel_url, "://") !== false) {
3942                         return $rel_url;
3943                 } else if (strpos($rel_url, "//") === 0) {
3944                         # protocol-relative URL (rare but they exist)
3945                         return $rel_url;
3946                 } else if (strpos($rel_url, "/") === 0)
3947                 {
3948                         $parts = parse_url($url);
3949                         $parts['path'] = $rel_url;
3950
3951                         return build_url($parts);
3952
3953                 } else {
3954                         $parts = parse_url($url);
3955                         if (!isset($parts['path'])) {
3956                                 $parts['path'] = '/';
3957                         }
3958                         $dir = $parts['path'];
3959                         if (substr($dir, -1) !== '/') {
3960                                 $dir = dirname($parts['path']);
3961                                 $dir !== '/' && $dir .= '/';
3962                         }
3963                         $parts['path'] = $dir . $rel_url;
3964
3965                         return build_url($parts);
3966                 }
3967         }
3968
3969         function sphinx_search($query, $offset = 0, $limit = 30) {
3970                 require_once 'lib/sphinxapi.php';
3971
3972                 $sphinxClient = new SphinxClient();
3973
3974                 $sphinxpair = explode(":", SPHINX_SERVER, 2);
3975
3976                 $sphinxClient->SetServer($sphinxpair[0], (int)$sphinxpair[1]);
3977                 $sphinxClient->SetConnectTimeout(1);
3978
3979                 $sphinxClient->SetFieldWeights(array('title' => 70, 'content' => 30,
3980                         'feed_title' => 20));
3981
3982                 $sphinxClient->SetMatchMode(SPH_MATCH_EXTENDED2);
3983                 $sphinxClient->SetRankingMode(SPH_RANK_PROXIMITY_BM25);
3984                 $sphinxClient->SetLimits($offset, $limit, 1000);
3985                 $sphinxClient->SetArrayResult(false);
3986                 $sphinxClient->SetFilter('owner_uid', array($_SESSION['uid']));
3987
3988                 $result = $sphinxClient->Query($query, SPHINX_INDEX);
3989
3990                 $ids = array();
3991
3992                 if (is_array($result['matches'])) {
3993                         foreach (array_keys($result['matches']) as $int_id) {
3994                                 $ref_id = $result['matches'][$int_id]['attrs']['ref_id'];
3995                                 array_push($ids, $ref_id);
3996                         }
3997                 }
3998
3999                 return $ids;
4000         }
4001
4002         function cleanup_tags($days = 14, $limit = 1000) {
4003
4004                 if (DB_TYPE == "pgsql") {
4005                         $interval_query = "date_updated < NOW() - INTERVAL '$days days'";
4006                 } else if (DB_TYPE == "mysql") {
4007                         $interval_query = "date_updated < DATE_SUB(NOW(), INTERVAL $days DAY)";
4008                 }
4009
4010                 $tags_deleted = 0;
4011
4012                 while ($limit > 0) {
4013                         $limit_part = 500;
4014
4015                         $query = "SELECT ttrss_tags.id AS id
4016                                 FROM ttrss_tags, ttrss_user_entries, ttrss_entries
4017                                 WHERE post_int_id = int_id AND $interval_query AND
4018                                 ref_id = ttrss_entries.id AND tag_cache != '' LIMIT $limit_part";
4019
4020                         $result = db_query($query);
4021
4022                         $ids = array();
4023
4024                         while ($line = db_fetch_assoc($result)) {
4025                                 array_push($ids, $line['id']);
4026                         }
4027
4028                         if (count($ids) > 0) {
4029                                 $ids = join(",", $ids);
4030
4031                                 $tmp_result = db_query("DELETE FROM ttrss_tags WHERE id IN ($ids)");
4032                                 $tags_deleted += db_affected_rows($tmp_result);
4033                         } else {
4034                                 break;
4035                         }
4036
4037                         $limit -= $limit_part;
4038                 }
4039
4040                 return $tags_deleted;
4041         }
4042
4043         function print_user_stylesheet() {
4044                 $value = get_pref('USER_STYLESHEET');
4045
4046                 if ($value) {
4047                         print "<style type=\"text/css\">";
4048                         print str_replace("<br/>", "\n", $value);
4049                         print "</style>";
4050                 }
4051
4052         }
4053
4054         function filter_to_sql($filter, $owner_uid) {
4055                 $query = array();
4056
4057                 if (DB_TYPE == "pgsql")
4058                         $reg_qpart = "~";
4059                 else
4060                         $reg_qpart = "REGEXP";
4061
4062                 foreach ($filter["rules"] AS $rule) {
4063                         $rule['reg_exp'] = str_replace('/', '\/', $rule["reg_exp"]);
4064                         $regexp_valid = preg_match('/' . $rule['reg_exp'] . '/',
4065                                 $rule['reg_exp']) !== FALSE;
4066
4067                         if ($regexp_valid) {
4068
4069                                 $rule['reg_exp'] = db_escape_string($rule['reg_exp']);
4070
4071                                         switch ($rule["type"]) {
4072                                         case "title":
4073                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
4074                                                         $rule['reg_exp'] . "')";
4075                                                 break;
4076                                         case "content":
4077                                                 $qpart = "LOWER(ttrss_entries.content) $reg_qpart LOWER('".
4078                                                         $rule['reg_exp'] . "')";
4079                                                 break;
4080                                         case "both":
4081                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
4082                                                         $rule['reg_exp'] . "') OR LOWER(" .
4083                                                         "ttrss_entries.content) $reg_qpart LOWER('" . $rule['reg_exp'] . "')";
4084                                                 break;
4085                                         case "tag":
4086                                                 $qpart = "LOWER(ttrss_user_entries.tag_cache) $reg_qpart LOWER('".
4087                                                         $rule['reg_exp'] . "')";
4088                                                 break;
4089                                         case "link":
4090                                                 $qpart = "LOWER(ttrss_entries.link) $reg_qpart LOWER('".
4091                                                         $rule['reg_exp'] . "')";
4092                                                 break;
4093                                         case "author":
4094                                                 $qpart = "LOWER(ttrss_entries.author) $reg_qpart LOWER('".
4095                                                         $rule['reg_exp'] . "')";
4096                                                 break;
4097                                 }
4098
4099                                 if (isset($rule['inverse'])) $qpart = "NOT ($qpart)";
4100
4101                                 if (isset($rule["feed_id"]) && $rule["feed_id"] > 0) {
4102                                         $qpart .= " AND feed_id = " . db_escape_string($rule["feed_id"]);
4103                                 }
4104
4105                                 if (isset($rule["cat_id"])) {
4106
4107                                         if ($rule["cat_id"] > 0) {
4108                                                 $children = getChildCategories($rule["cat_id"], $owner_uid);
4109                                                 array_push($children, $rule["cat_id"]);
4110
4111                                                 $children = join(",", $children);
4112
4113                                                 $cat_qpart = "cat_id IN ($children)";
4114                                         } else {
4115                                                 $cat_qpart = "cat_id IS NULL";
4116                                         }
4117
4118                                         $qpart .= " AND $cat_qpart";
4119                                 }
4120
4121                                 $qpart .= " AND feed_id IS NOT NULL";
4122
4123                                 array_push($query, "($qpart)");
4124
4125                         }
4126                 }
4127
4128                 if (count($query) > 0) {
4129                         $fullquery = "(" . join($filter["match_any_rule"] ? "OR" : "AND", $query) . ")";
4130                 } else {
4131                         $fullquery = "(false)";
4132                 }
4133
4134                 if ($filter['inverse']) $fullquery = "(NOT $fullquery)";
4135
4136                 return $fullquery;
4137         }
4138
4139         if (!function_exists('gzdecode')) {
4140                 function gzdecode($string) { // no support for 2nd argument
4141                         return file_get_contents('compress.zlib://data:who/cares;base64,'.
4142                                 base64_encode($string));
4143                 }
4144         }
4145
4146         function get_random_bytes($length) {
4147                 if (function_exists('openssl_random_pseudo_bytes')) {
4148                         return openssl_random_pseudo_bytes($length);
4149                 } else {
4150                         $output = "";
4151
4152                         for ($i = 0; $i < $length; $i++)
4153                                 $output .= chr(mt_rand(0, 255));
4154
4155                         return $output;
4156                 }
4157         }
4158
4159         function read_stdin() {
4160                 $fp = fopen("php://stdin", "r");
4161
4162                 if ($fp) {
4163                         $line = trim(fgets($fp));
4164                         fclose($fp);
4165                         return $line;
4166                 }
4167
4168                 return null;
4169         }
4170
4171         function tmpdirname($path, $prefix) {
4172                 // Use PHP's tmpfile function to create a temporary
4173                 // directory name. Delete the file and keep the name.
4174                 $tempname = tempnam($path,$prefix);
4175                 if (!$tempname)
4176                         return false;
4177
4178                 if (!unlink($tempname))
4179                         return false;
4180
4181        return $tempname;
4182         }
4183
4184         function getFeedCategory($feed) {
4185                 $result = db_query("SELECT cat_id FROM ttrss_feeds
4186                         WHERE id = '$feed'");
4187
4188                 if (db_num_rows($result) > 0) {
4189                         return db_fetch_result($result, 0, "cat_id");
4190                 } else {
4191                         return false;
4192                 }
4193
4194         }
4195
4196         function implements_interface($class, $interface) {
4197                 return in_array($interface, class_implements($class));
4198         }
4199
4200         function geturl($url, $depth = 0){
4201
4202                 if ($depth == 20) return $url;
4203
4204                 if (!function_exists('curl_init'))
4205                         return user_error('CURL Must be installed for geturl function to work. Ask your host to enable it or uncomment extension=php_curl.dll in php.ini', E_USER_ERROR);
4206
4207                 $curl = curl_init();
4208                 $header[0] = "Accept: text/xml,application/xml,application/xhtml+xml,";
4209                 $header[0] .= "text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5";
4210                 $header[] = "Cache-Control: max-age=0";
4211                 $header[] = "Connection: keep-alive";
4212                 $header[] = "Keep-Alive: 300";
4213                 $header[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
4214                 $header[] = "Accept-Language: en-us,en;q=0.5";
4215                 $header[] = "Pragma: ";
4216
4217                 curl_setopt($curl, CURLOPT_URL, $url);
4218                 curl_setopt($curl, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 5.1; rv:5.0) Gecko/20100101 Firefox/5.0 Firefox/5.0');
4219                 curl_setopt($curl, CURLOPT_HTTPHEADER, $header);
4220                 curl_setopt($curl, CURLOPT_HEADER, true);
4221                 curl_setopt($curl, CURLOPT_REFERER, $url);
4222                 curl_setopt($curl, CURLOPT_ENCODING, 'gzip,deflate');
4223                 curl_setopt($curl, CURLOPT_AUTOREFERER, true);
4224                 curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
4225                 //curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true); //CURLOPT_FOLLOWLOCATION Disabled...
4226                 curl_setopt($curl, CURLOPT_TIMEOUT, 60);
4227                 curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);
4228
4229                 if (defined('_CURL_HTTP_PROXY')) {
4230                         curl_setopt($curl, CURLOPT_PROXY, _CURL_HTTP_PROXY);
4231                 }
4232
4233                 if ((OPENSSL_VERSION_NUMBER >= 0x0090808f) && (OPENSSL_VERSION_NUMBER < 0x10000000)) {
4234                         curl_setopt($curl, CURLOPT_SSLVERSION, 3);
4235                 }
4236
4237                 $html = curl_exec($curl);
4238
4239                 $status = curl_getinfo($curl);
4240
4241                 if($status['http_code']!=200){
4242                         if($status['http_code'] == 301 || $status['http_code'] == 302) {
4243                                 curl_close($curl);
4244                                 list($header) = explode("\r\n\r\n", $html, 2);
4245                                 $matches = array();
4246                                 preg_match("/(Location:|URI:)[^(\n)]*/", $header, $matches);
4247                                 $url = trim(str_replace($matches[1],"",$matches[0]));
4248                                 $url_parsed = parse_url($url);
4249                                 return (isset($url_parsed))? geturl($url, $depth + 1):'';
4250                         }
4251
4252                         global $fetch_last_error;
4253
4254                         $fetch_last_error = curl_errno($curl) . " " . curl_error($curl);
4255                         curl_close($curl);
4256
4257                         $oline='';
4258                         foreach($status as $key=>$eline){$oline.='['.$key.']'.$eline.' ';}
4259                         $line =$oline." \r\n ".$url."\r\n-----------------\r\n";
4260 #                       $handle = @fopen('./curl.error.log', 'a');
4261 #                       fwrite($handle, $line);
4262                         return FALSE;
4263                 }
4264                 curl_close($curl);
4265                 return $url;
4266         }
4267
4268         function get_minified_js($files) {
4269                 require_once 'lib/jshrink/Minifier.php';
4270
4271                 $rv = '';
4272
4273                 foreach ($files as $js) {
4274                         if (!isset($_GET['debug'])) {
4275                                 $cached_file = CACHE_DIR . "/js/".basename($js).".js";
4276
4277                                 if (file_exists($cached_file) &&
4278                                                 is_readable($cached_file) &&
4279                                                 filemtime($cached_file) >= filemtime("js/$js.js")) {
4280
4281                                         $rv .= file_get_contents($cached_file);
4282
4283                                 } else {
4284                                         $minified = JShrink\Minifier::minify(file_get_contents("js/$js.js"));
4285                                         file_put_contents($cached_file, $minified);
4286                                         $rv .= $minified;
4287                                 }
4288                         } else {
4289                                 $rv .= file_get_contents("js/$js.js");
4290                         }
4291                 }
4292
4293                 return $rv;
4294         }
4295
4296         function stylesheet_tag($filename) {
4297                 $timestamp = filemtime($filename);
4298
4299                 echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"$filename?$timestamp\"/>\n";
4300         }
4301
4302         function javascript_tag($filename) {
4303                 $query = "";
4304
4305                 if (!(strpos($filename, "?") === FALSE)) {
4306                         $query = substr($filename, strpos($filename, "?")+1);
4307                         $filename = substr($filename, 0, strpos($filename, "?"));
4308                 }
4309
4310                 $timestamp = filemtime($filename);
4311
4312                 if ($query) $timestamp .= "&$query";
4313
4314                 echo "<script type=\"text/javascript\" charset=\"utf-8\" src=\"$filename?$timestamp\"></script>\n";
4315         }
4316
4317         function calculate_dep_timestamp() {
4318                 $files = array_merge(glob("js/*.js"), glob("css/*.css"));
4319
4320                 $max_ts = -1;
4321
4322                 foreach ($files as $file) {
4323                         if (filemtime($file) > $max_ts) $max_ts = filemtime($file);
4324                 }
4325
4326                 return $max_ts;
4327         }
4328
4329         function T_js_decl($s1, $s2) {
4330                 if ($s1 && $s2) {
4331                         $s1 = preg_replace("/\n/", "", $s1);
4332                         $s2 = preg_replace("/\n/", "", $s2);
4333
4334                         $s1 = preg_replace("/\"/", "\\\"", $s1);
4335                         $s2 = preg_replace("/\"/", "\\\"", $s2);
4336
4337                         return "T_messages[\"$s1\"] = \"$s2\";\n";
4338                 }
4339         }
4340
4341         function init_js_translations() {
4342
4343         print 'var T_messages = new Object();
4344
4345                 function __(msg) {
4346                         if (T_messages[msg]) {
4347                                 return T_messages[msg];
4348                         } else {
4349                                 return msg;
4350                         }
4351                 }
4352
4353                 function ngettext(msg1, msg2, n) {
4354                         return __((parseInt(n) > 1) ? msg2 : msg1);
4355                 }';
4356
4357                 $l10n = _get_reader();
4358
4359                 for ($i = 0; $i < $l10n->total; $i++) {
4360                         $orig = $l10n->get_original_string($i);
4361                         if(strpos($orig, "\000") !== FALSE) { // Plural forms
4362                                 $key = explode(chr(0), $orig);
4363                                 print T_js_decl($key[0], _ngettext($key[0], $key[1], 1)); // Singular
4364                                 print T_js_decl($key[1], _ngettext($key[0], $key[1], 2)); // Plural
4365                         } else {
4366                                 $translation = __($orig);
4367                                 print T_js_decl($orig, $translation);
4368                         }
4369                 }
4370         }
4371
4372         function label_to_feed_id($label) {
4373                 return LABEL_BASE_INDEX - 1 - abs($label);
4374         }
4375
4376         function feed_to_label_id($feed) {
4377                 return LABEL_BASE_INDEX - 1 + abs($feed);
4378         }
4379
4380         function format_libxml_error($error) {
4381                 return T_sprintf("LibXML error %s at line %d (column %d): %s",
4382                                 $error->code, $error->line, $error->column,
4383                                 $error->message);
4384         }
4385
4386 ?>