include/functions.php

   1 <?php
   2         define('EXPECTED_CONFIG_VERSION', 26);
   3         define('SCHEMA_VERSION', 97);
   4
   5         $fetch_last_error = false;
   6
   7         function __autoload($class) {
   8                 $class_file = str_replace("_", "/", strtolower(basename($class)));
   9
  10                 $file = dirname(__FILE__)."/../classes/$class_file.php";
  11
  12                 if (file_exists($file)) {
  13                         require $file;
  14                 }
  15         }
  16
  17         mb_internal_encoding("UTF-8");
  18         date_default_timezone_set('UTC');
  19         if (defined('E_DEPRECATED')) {
  20                 error_reporting(E_ALL & ~E_NOTICE & ~E_DEPRECATED);
  21         } else {
  22                 error_reporting(E_ALL & ~E_NOTICE);
  23         }
  24
  25         require_once 'config.php';
  26
  27         if (DB_TYPE == "pgsql") {
  28                 define('SUBSTRING_FOR_DATE', 'SUBSTRING_FOR_DATE');
  29         } else {
  30                 define('SUBSTRING_FOR_DATE', 'SUBSTRING');
  31         }
  32
  33         define('THEME_VERSION_REQUIRED', 1.1);
  34
  35         /**
  36          * Return available translations names.
  37          *
  38          * @access public
  39          * @return array A array of available translations.
  40          */
  41         function get_translations() {
  42                 $tr = array(
  43                                         "auto"  => "Detect automatically",
  44                                         "ca_CA" => "Català",
  45                                         "en_US" => "English",
  46                                         "es_ES" => "Español",
  47                                         "de_DE" => "Deutsch",
  48                                         "fr_FR" => "Français",
  49                                         "hu_HU" => "Magyar (Hungarian)",
  50                                         "it_IT" => "Italiano",
  51                                         "ja_JP" => "日本語 (Japanese)",
  52                                         "nb_NO" => "Norwegian bokmål",
  53                                         "pl_PL" => "Polski",
  54                                         "ru_RU" => "Русский",
  55                                         "pt_BR" => "Portuguese/Brazil",
  56                                         "zh_CN" => "Simplified Chinese");
  57
  58                 return $tr;
  59         }
  60
  61         require_once "lib/accept-to-gettext.php";
  62         require_once "lib/gettext/gettext.inc";
  63
  64         function startup_gettext() {
  65
  66                 # Get locale from Accept-Language header
  67                 $lang = al2gt(array_keys(get_translations()), "text/html");
  68
  69                 if (defined('_TRANSLATION_OVERRIDE_DEFAULT')) {
  70                         $lang = _TRANSLATION_OVERRIDE_DEFAULT;
  71                 }
  72
  73                 if ($_COOKIE["ttrss_lang"] && $_COOKIE["ttrss_lang"] != "auto") {
  74                         $lang = $_COOKIE["ttrss_lang"];
  75                 }
  76
  77                 /* In login action of mobile version */
  78                 if ($_POST["language"] && defined('MOBILE_VERSION')) {
  79                         $lang = $_POST["language"];
  80                         $_COOKIE["ttrss_lang"] = $lang;
  81                 }
  82
  83                 if ($lang) {
  84                         if (defined('LC_MESSAGES')) {
  85                                 _setlocale(LC_MESSAGES, $lang);
  86                         } else if (defined('LC_ALL')) {
  87                                 _setlocale(LC_ALL, $lang);
  88                         }
  89
  90                         if (defined('MOBILE_VERSION')) {
  91                                 _bindtextdomain("messages", "../locale");
  92                         } else {
  93                                 _bindtextdomain("messages", "locale");
  94                         }
  95
  96                         _textdomain("messages");
  97                         _bind_textdomain_codeset("messages", "UTF-8");
  98                 }
  99         }
 100
 101         startup_gettext();
 102
 103         require_once 'db-prefs.php';
 104         require_once 'version.php';
 105
 106         define('MAGPIE_OUTPUT_ENCODING', 'UTF-8');
 107
 108         define('SELF_USER_AGENT', 'Tiny Tiny RSS/' . VERSION . ' (http://tt-rss.org/)');
 109         define('MAGPIE_USER_AGENT', SELF_USER_AGENT);
 110
 111         ini_set('user_agent', SELF_USER_AGENT);
 112
 113         require_once 'lib/pubsubhubbub/publisher.php';
 114
 115         $purifier = false;
 116
 117         $tz_offset = -1;
 118         $utc_tz = new DateTimeZone('UTC');
 119         $schema_version = false;
 120
 121         /**
 122          * Print a timestamped debug message.
 123          *
 124          * @param string $msg The debug message.
 125          * @return void
 126          */
 127         function _debug($msg) {
 128                 if (defined('QUIET') && QUIET) {
 129                         return;
 130                 }
 131                 $ts = strftime("%H:%M:%S", time());
 132                 if (function_exists('posix_getpid')) {
 133                         $ts = "$ts/" . posix_getpid();
 134                 }
 135                 print "[$ts] $msg\n";
 136         } // function _debug
 137
 138         /**
 139          * Purge a feed old posts.
 140          *
 141          * @param mixed $link A database connection.
 142          * @param mixed $feed_id The id of the purged feed.
 143          * @param mixed $purge_interval Olderness of purged posts.
 144          * @param boolean $debug Set to True to enable the debug. False by default.
 145          * @access public
 146          * @return void
 147          */
 148         function purge_feed($link, $feed_id, $purge_interval, $debug = false) {
 149
 150                 if (!$purge_interval) $purge_interval = feed_purge_interval($link, $feed_id);
 151
 152                 $rows = -1;
 153
 154                 $result = db_query($link,
 155                         "SELECT owner_uid FROM ttrss_feeds WHERE id = '$feed_id'");
 156
 157                 $owner_uid = false;
 158
 159                 if (db_num_rows($result) == 1) {
 160                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 161                 }
 162
 163                 if ($purge_interval == -1 || !$purge_interval) {
 164                         if ($owner_uid) {
 165                                 ccache_update($link, $feed_id, $owner_uid);
 166                         }
 167                         return;
 168                 }
 169
 170                 if (!$owner_uid) return;
 171
 172                 if (FORCE_ARTICLE_PURGE == 0) {
 173                         $purge_unread = get_pref($link, "PURGE_UNREAD_ARTICLES",
 174                                 $owner_uid, false);
 175                 } else {
 176                         $purge_unread = true;
 177                         $purge_interval = FORCE_ARTICLE_PURGE;
 178                 }
 179
 180                 if (!$purge_unread) $query_limit = " unread = false AND ";
 181
 182                 if (DB_TYPE == "pgsql") {
 183                         $pg_version = get_pgsql_version($link);
 184
 185                         if (preg_match("/^7\./", $pg_version) || preg_match("/^8\.0/", $pg_version)) {
 186
 187                                 $result = db_query($link, "DELETE FROM ttrss_user_entries WHERE
 188                                         ttrss_entries.id = ref_id AND
 189                                         marked = false AND
 190                                         feed_id = '$feed_id' AND
 191                                         $query_limit
 192                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 193
 194                         } else {
 195
 196                                 $result = db_query($link, "DELETE FROM ttrss_user_entries
 197                                         USING ttrss_entries
 198                                         WHERE ttrss_entries.id = ref_id AND
 199                                         marked = false AND
 200                                         feed_id = '$feed_id' AND
 201                                         $query_limit
 202                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 203                         }
 204
 205                         $rows = pg_affected_rows($result);
 206
 207                 } else {
 208
 209 /*                      $result = db_query($link, "DELETE FROM ttrss_user_entries WHERE
 210                                 marked = false AND feed_id = '$feed_id' AND
 211                                 (SELECT date_updated FROM ttrss_entries WHERE
 212                                         id = ref_id) < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)"); */
 213
 214                         $result = db_query($link, "DELETE FROM ttrss_user_entries
 215                                 USING ttrss_user_entries, ttrss_entries
 216                                 WHERE ttrss_entries.id = ref_id AND
 217                                 marked = false AND
 218                                 feed_id = '$feed_id' AND
 219                                 $query_limit
 220                                 ttrss_entries.date_updated < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)");
 221
 222                         $rows = mysql_affected_rows($link);
 223
 224                 }
 225
 226                 ccache_update($link, $feed_id, $owner_uid);
 227
 228                 if ($debug) {
 229                         _debug("Purged feed $feed_id ($purge_interval): deleted $rows articles");
 230                 }
 231         } // function purge_feed
 232
 233         function feed_purge_interval($link, $feed_id) {
 234
 235                 $result = db_query($link, "SELECT purge_interval, owner_uid FROM ttrss_feeds
 236                         WHERE id = '$feed_id'");
 237
 238                 if (db_num_rows($result) == 1) {
 239                         $purge_interval = db_fetch_result($result, 0, "purge_interval");
 240                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 241
 242                         if ($purge_interval == 0) $purge_interval = get_pref($link,
 243                                 'PURGE_OLD_DAYS', $owner_uid);
 244
 245                         return $purge_interval;
 246
 247                 } else {
 248                         return -1;
 249                 }
 250         }
 251
 252         function purge_orphans($link, $do_output = false) {
 253
 254                 // purge orphaned posts in main content table
 255                 $result = db_query($link, "DELETE FROM ttrss_entries WHERE
 256                         (SELECT COUNT(int_id) FROM ttrss_user_entries WHERE ref_id = id) = 0");
 257
 258                 if ($do_output) {
 259                         $rows = db_affected_rows($link, $result);
 260                         _debug("Purged $rows orphaned posts.");
 261                 }
 262         }
 263
 264         function get_feed_update_interval($link, $feed_id) {
 265                 $result = db_query($link, "SELECT owner_uid, update_interval FROM
 266                         ttrss_feeds WHERE id = '$feed_id'");
 267
 268                 if (db_num_rows($result) == 1) {
 269                         $update_interval = db_fetch_result($result, 0, "update_interval");
 270                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 271
 272                         if ($update_interval != 0) {
 273                                 return $update_interval;
 274                         } else {
 275                                 return get_pref($link, 'DEFAULT_UPDATE_INTERVAL', $owner_uid, false);
 276                         }
 277
 278                 } else {
 279                         return -1;
 280                 }
 281         }
 282
 283         function fetch_file_contents($url, $type = false, $login = false, $pass = false, $post_query = false) {
 284                 $login = urlencode($login);
 285                 $pass = urlencode($pass);
 286
 287                 global $fetch_last_error;
 288
 289                 if (function_exists('curl_init') && !ini_get("open_basedir")) {
 290                         $ch = curl_init($url);
 291
 292                         curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 15);
 293                         curl_setopt($ch, CURLOPT_TIMEOUT, 45);
 294                         curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
 295                         curl_setopt($ch, CURLOPT_MAXREDIRS, 20);
 296                         curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
 297                         curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
 298                         curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
 299                         curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_ANY);
 300                         curl_setopt($ch, CURLOPT_USERAGENT, SELF_USER_AGENT);
 301                         curl_setopt($ch, CURLOPT_ENCODING , "gzip");
 302
 303                         if ($post_query) {
 304                                 curl_setopt($ch, CURLOPT_POST, true);
 305                                 curl_setopt($ch, CURLOPT_POSTFIELDS, $post_query);
 306                         }
 307
 308                         if ($login && $pass)
 309                                 curl_setopt($ch, CURLOPT_USERPWD, "$login:$pass");
 310
 311                         $contents = @curl_exec($ch);
 312
 313                         if ($contents === false) {
 314                                 $fetch_last_error = curl_error($ch);
 315                                 curl_close($ch);
 316                                 return false;
 317                         }
 318
 319                         $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
 320                         $content_type = curl_getinfo($ch, CURLINFO_CONTENT_TYPE);
 321                         curl_close($ch);
 322
 323                         if ($http_code != 200 || $type && strpos($content_type, "$type") === false) {
 324                                 return false;
 325                         }
 326
 327                         return $contents;
 328                 } else {
 329                         if ($login && $pass ){
 330                                 $url_parts = array();
 331
 332                                 preg_match("/(^[^:]*):\/\/(.*)/", $url, $url_parts);
 333
 334                                 if ($url_parts[1] && $url_parts[2]) {
 335                                         $url = $url_parts[1] . "://$login:$pass@" . $url_parts[2];
 336                                 }
 337                         }
 338
 339                         $data = @file_get_contents($url);
 340
 341                         if (!$data && function_exists('error_get_last')) {
 342                                 $error = error_get_last();
 343                                 $fetch_last_error = $error["message"];
 344                         }
 345                         return $data;
 346                 }
 347
 348         }
 349
 350         /**
 351          * Try to determine the favicon URL for a feed.
 352          * adapted from wordpress favicon plugin by Jeff Minard (http://thecodepro.com/)
 353          * http://dev.wp-plugins.org/file/favatars/trunk/favatars.php
 354          *
 355          * @param string $url A feed or page URL
 356          * @access public
 357          * @return mixed The favicon URL, or false if none was found.
 358          */
 359         function get_favicon_url($url) {
 360
 361                 $favicon_url = false;
 362
 363                 if ($html = @fetch_file_contents($url)) {
 364
 365                         libxml_use_internal_errors(true);
 366
 367                         $doc = new DOMDocument();
 368                         $doc->loadHTML($html);
 369                         $xpath = new DOMXPath($doc);
 370
 371                         $base = $xpath->query('/html/head/base');
 372                         foreach ($base as $b) {
 373                                 $url = $b->getAttribute("href");
 374                                 break;
 375                         }
 376
 377                         $entries = $xpath->query('/html/head/link[@rel="shortcut icon" or @rel="icon"]');
 378                         if (count($entries) > 0) {
 379                                 foreach ($entries as $entry) {
 380                                         $favicon_url = rewrite_relative_url($url, $entry->getAttribute("href"));
 381                                         break;
 382                                 }
 383                         }
 384                 }
 385
 386                 if (!$favicon_url)
 387                         $favicon_url = rewrite_relative_url($url, "/favicon.ico");
 388
 389                 return $favicon_url;
 390         } // function get_favicon_url
 391
 392         function check_feed_favicon($site_url, $feed, $link) {
 393 #               print "FAVICON [$site_url]: $favicon_url\n";
 394
 395                 $icon_file = ICONS_DIR . "/$feed.ico";
 396
 397                 if (!file_exists($icon_file)) {
 398                         $favicon_url = get_favicon_url($site_url);
 399
 400                         if ($favicon_url) {
 401                                 // Limiting to "image" type misses those served with text/plain
 402                                 $contents = fetch_file_contents($favicon_url); // , "image");
 403
 404                                 if ($contents) {
 405                                         // Crude image type matching.
 406                                         // Patterns gleaned from the file(1) source code.
 407                                         if (preg_match('/^\x00\x00\x01\x00/', $contents)) {
 408                                                 // 0       string  \000\000\001\000        MS Windows icon resource
 409                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa MS Windows icon resource");
 410                                         }
 411                                         elseif (preg_match('/^GIF8/', $contents)) {
 412                                                 // 0       string          GIF8            GIF image data
 413                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa GIF image");
 414                                         }
 415                                         elseif (preg_match('/^\x89PNG\x0d\x0a\x1a\x0a/', $contents)) {
 416                                                 // 0       string          \x89PNG\x0d\x0a\x1a\x0a         PNG image data
 417                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa PNG image");
 418                                         }
 419                                         elseif (preg_match('/^\xff\xd8/', $contents)) {
 420                                                 // 0       beshort         0xffd8          JPEG image data
 421                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa JPG image");
 422                                         }
 423                                         else {
 424                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa UNKNOWN type");
 425                                                 $contents = "";
 426                                         }
 427                                 }
 428
 429                                 if ($contents) {
 430                                         $fp = @fopen($icon_file, "w");
 431
 432                                         if ($fp) {
 433                                                 fwrite($fp, $contents);
 434                                                 fclose($fp);
 435                                                 chmod($icon_file, 0644);
 436                                         }
 437                                 }
 438                         }
 439                 }
 440         }
 441
 442         function print_select($id, $default, $values, $attributes = "") {
 443                 print "<select name=\"$id\" id=\"$id\" $attributes>";
 444                 foreach ($values as $v) {
 445                         if ($v == $default)
 446                                 $sel = "selected=\"1\"";
 447                          else
 448                                 $sel = "";
 449
 450                         print "<option value=\"$v\" $sel>$v</option>";
 451                 }
 452                 print "</select>";
 453         }
 454
 455         function print_select_hash($id, $default, $values, $attributes = "") {
 456                 print "<select name=\"$id\" id='$id' $attributes>";
 457                 foreach (array_keys($values) as $v) {
 458                         if ($v == $default)
 459                                 $sel = 'selected="selected"';
 460                          else
 461                                 $sel = "";
 462
 463                         print "<option $sel value=\"$v\">".$values[$v]."</option>";
 464                 }
 465
 466                 print "</select>";
 467         }
 468
 469         function get_article_filters($filters, $title, $content, $link, $timestamp, $author, $tags) {
 470                 $matches = array();
 471
 472                 foreach ($filters as $filter) {
 473                         $match_any_rule = $filter["match_any_rule"];
 474                         $filter_match = false;
 475
 476                         foreach ($filter["rules"] as $rule) {
 477                                 $match = false;
 478                                 $reg_exp = $rule["reg_exp"];
 479
 480                                 if (!$reg_exp)
 481                                         continue;
 482
 483                                 switch ($rule["type"]) {
 484                                 case "title":
 485                                         $match = @preg_match("/$reg_exp/i", $title);
 486                                         break;
 487                                 case "content":
 488                                         $match = @preg_match("/$reg_exp/i", $content);
 489                                         break;
 490                                 case "both":
 491                                         $match = (@preg_match("/$reg_exp/i", $title) || @preg_match("/$reg_exp/i", $title));
 492                                         break;
 493                                 case "link":
 494                                         $match = @preg_match("/$reg_exp/i", $link);
 495                                         break;
 496                                 case "author":
 497                                         $match = @preg_match("/$reg_exp/i", $author);
 498                                         break;
 499                                 case "tag":
 500                                         $tag_string = join(",", $tags);
 501                                         $match = @preg_match("/$reg_exp/i", $tag_string);
 502                                         break;
 503                                 }
 504
 505                                 if ($match_any_rule) {
 506                                         if ($match) {
 507                                                 $filter_match = true;
 508                                                 break;
 509                                         }
 510                                 } else {
 511                                         $filter_match = $match;
 512                                         if (!$match) {
 513                                                 break;
 514                                         }
 515                                 }
 516                         }
 517
 518                         if ($filter_match) {
 519                                 foreach ($filter["actions"] AS $action) {
 520                                         array_push($matches, $action);
 521                                 }
 522                         }
 523                 }
 524
 525                 return $matches;
 526         }
 527
 528         function find_article_filter($filters, $filter_name) {
 529                 foreach ($filters as $f) {
 530                         if ($f["type"] == $filter_name) {
 531                                 return $f;
 532                         };
 533                 }
 534                 return false;
 535         }
 536
 537         function find_article_filters($filters, $filter_name) {
 538                 $results = array();
 539
 540                 foreach ($filters as $f) {
 541                         if ($f["type"] == $filter_name) {
 542                                 array_push($results, $f);
 543                         };
 544                 }
 545                 return $results;
 546         }
 547
 548         function calculate_article_score($filters) {
 549                 $score = 0;
 550
 551                 foreach ($filters as $f) {
 552                         if ($f["type"] == "score") {
 553                                 $score += $f["param"];
 554                         };
 555                 }
 556                 return $score;
 557         }
 558
 559         function assign_article_to_labels($link, $id, $filters, $owner_uid) {
 560                 foreach ($filters as $f) {
 561                         if ($f["type"] == "label") {
 562                                 label_add_article($link, $id, $f["param"], $owner_uid);
 563                         };
 564                 }
 565         }
 566
 567         function getmicrotime() {
 568                 list($usec, $sec) = explode(" ",microtime());
 569                 return ((float)$usec + (float)$sec);
 570         }
 571
 572         function print_radio($id, $default, $true_is, $values, $attributes = "") {
 573                 foreach ($values as $v) {
 574
 575                         if ($v == $default)
 576                                 $sel = "checked";
 577                          else
 578                                 $sel = "";
 579
 580                         if ($v == $true_is) {
 581                                 $sel .= " value=\"1\"";
 582                         } else {
 583                                 $sel .= " value=\"0\"";
 584                         }
 585
 586                         print "<input class=\"noborder\" dojoType=\"dijit.form.RadioButton\"
 587                                 type=\"radio\" $sel $attributes name=\"$id\">&nbsp;$v&nbsp;";
 588
 589                 }
 590         }
 591
 592         function initialize_user_prefs($link, $uid, $profile = false) {
 593
 594                 $uid = db_escape_string($uid);
 595
 596                 if (!$profile) {
 597                         $profile = "NULL";
 598                         $profile_qpart = "AND profile IS NULL";
 599                 } else {
 600                         $profile_qpart = "AND profile = '$profile'";
 601                 }
 602
 603                 if (get_schema_version($link) < 63) $profile_qpart = "";
 604
 605                 db_query($link, "BEGIN");
 606
 607                 $result = db_query($link, "SELECT pref_name,def_value FROM ttrss_prefs");
 608
 609                 $u_result = db_query($link, "SELECT pref_name
 610                         FROM ttrss_user_prefs WHERE owner_uid = '$uid' $profile_qpart");
 611
 612                 $active_prefs = array();
 613
 614                 while ($line = db_fetch_assoc($u_result)) {
 615                         array_push($active_prefs, $line["pref_name"]);
 616                 }
 617
 618                 while ($line = db_fetch_assoc($result)) {
 619                         if (array_search($line["pref_name"], $active_prefs) === FALSE) {
 620 //                              print "adding " . $line["pref_name"] . "<br>";
 621
 622                                 if (get_schema_version($link) < 63) {
 623                                         db_query($link, "INSERT INTO ttrss_user_prefs
 624                                                 (owner_uid,pref_name,value) VALUES
 625                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."')");
 626
 627                                 } else {
 628                                         db_query($link, "INSERT INTO ttrss_user_prefs
 629                                                 (owner_uid,pref_name,value, profile) VALUES
 630                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."', $profile)");
 631                                 }
 632
 633                         }
 634                 }
 635
 636                 db_query($link, "COMMIT");
 637
 638         }
 639
 640         function get_ssl_certificate_id() {
 641                 if ($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"]) {
 642                         return sha1($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"] .
 643                                 $_SERVER["REDIRECT_SSL_CLIENT_V_START"] .
 644                                 $_SERVER["REDIRECT_SSL_CLIENT_V_END"] .
 645                                 $_SERVER["REDIRECT_SSL_CLIENT_S_DN"]);
 646                 }
 647                 return "";
 648         }
 649
 650         function authenticate_user($link, $login, $password, $check_only = false) {
 651
 652                 if (!SINGLE_USER_MODE) {
 653
 654                         $user_id = false;
 655                         $modules = explode(",", AUTH_MODULES);
 656
 657                         foreach ($modules as $module) {
 658                                 $module_class = "auth_$module";
 659                                 if (class_exists($module_class)) {
 660                                         $authenticator = new $module_class($link);
 661
 662                                         $user_id = (int) $authenticator->authenticate($login, $password);
 663
 664                                         if ($user_id) {
 665                                                 $_SESSION["auth_module"] = $module;
 666                                                 break;
 667                                         }
 668
 669                                 } else {
 670                                         print T_sprintf("Fatal: authentication module %s not found.", $module);
 671                                         die;
 672                                 }
 673                         }
 674
 675                         if ($user_id && !$check_only) {
 676                                 $_SESSION["uid"] = $user_id;
 677
 678                                 $result = db_query($link, "SELECT login,access_level,pwd_hash FROM ttrss_users
 679                                         WHERE id = '$user_id'");
 680
 681                                 $_SESSION["name"] = db_fetch_result($result, 0, "login");
 682                                 $_SESSION["access_level"] = db_fetch_result($result, 0, "access_level");
 683                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 684
 685                                 db_query($link, "UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 686                                         $_SESSION["uid"]);
 687
 688                                 $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 689                                 $_SESSION["pwd_hash"] = db_fetch_result($result, 0, "pwd_hash");
 690
 691                                 $_SESSION["last_version_check"] = time();
 692
 693                                 initialize_user_prefs($link, $_SESSION["uid"]);
 694
 695                                 return true;
 696                         }
 697
 698                         return false;
 699
 700                 } else {
 701
 702                         $_SESSION["uid"] = 1;
 703                         $_SESSION["name"] = "admin";
 704                         $_SESSION["access_level"] = 10;
 705
 706                         $_SESSION["hide_hello"] = true;
 707                         $_SESSION["hide_logout"] = true;
 708
 709                         $_SESSION["auth_module"] = false;
 710
 711                         if (!$_SESSION["csrf_token"]) {
 712                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 713                         }
 714
 715                         $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 716
 717                         initialize_user_prefs($link, $_SESSION["uid"]);
 718
 719                         return true;
 720                 }
 721         }
 722
 723         function make_password($length = 8) {
 724
 725                 $password = "";
 726                 $possible = "0123456789abcdfghjkmnpqrstvwxyzABCDFGHJKMNPQRSTVWXYZ";
 727
 728         $i = 0;
 729
 730                 while ($i < $length) {
 731                         $char = substr($possible, mt_rand(0, strlen($possible)-1), 1);
 732
 733                         if (!strstr($password, $char)) {
 734                                 $password .= $char;
 735                                 $i++;
 736                         }
 737                 }
 738                 return $password;
 739         }
 740
 741         // this is called after user is created to initialize default feeds, labels
 742         // or whatever else
 743
 744         // user preferences are checked on every login, not here
 745
 746         function initialize_user($link, $uid) {
 747
 748                 db_query($link, "insert into ttrss_feeds (owner_uid,title,feed_url)
 749                         values ('$uid', 'Tiny Tiny RSS: New Releases',
 750                         'http://tt-rss.org/releases.rss')");
 751
 752                 db_query($link, "insert into ttrss_feeds (owner_uid,title,feed_url)
 753                         values ('$uid', 'Tiny Tiny RSS: Forum',
 754                                 'http://tt-rss.org/forum/rss.php')");
 755         }
 756
 757         function logout_user() {
 758                 session_destroy();
 759                 if (isset($_COOKIE[session_name()])) {
 760                    setcookie(session_name(), '', time()-42000, '/');
 761                 }
 762         }
 763
 764         function validate_csrf($csrf_token) {
 765                 return $csrf_token == $_SESSION['csrf_token'];
 766         }
 767
 768         function validate_session($link) {
 769                 if (SINGLE_USER_MODE) return true;
 770
 771                 $check_ip = $_SESSION['ip_address'];
 772
 773                 switch (SESSION_CHECK_ADDRESS) {
 774                 case 0:
 775                         $check_ip = '';
 776                         break;
 777                 case 1:
 778                         $check_ip = substr($check_ip, 0, strrpos($check_ip, '.')+1);
 779                         break;
 780                 case 2:
 781                         $check_ip = substr($check_ip, 0, strrpos($check_ip, '.'));
 782                         $check_ip = substr($check_ip, 0, strrpos($check_ip, '.')+1);
 783                         break;
 784                 };
 785
 786                 if ($check_ip && strpos($_SERVER['REMOTE_ADDR'], $check_ip) !== 0) {
 787                         $_SESSION["login_error_msg"] =
 788                                 __("Session failed to validate (incorrect IP)");
 789                         return false;
 790                 }
 791
 792                 if ($_SESSION["ref_schema_version"] != get_schema_version($link, true))
 793                         return false;
 794
 795                 if ($_SESSION["uid"]) {
 796
 797                         $result = db_query($link,
 798                                 "SELECT pwd_hash FROM ttrss_users WHERE id = '".$_SESSION["uid"]."'");
 799
 800                         $pwd_hash = db_fetch_result($result, 0, "pwd_hash");
 801
 802                         if ($pwd_hash != $_SESSION["pwd_hash"]) {
 803                                 return false;
 804                         }
 805                 }
 806
 807 /*              if ($_SESSION["cookie_lifetime"] && $_SESSION["uid"]) {
 808
 809                         //print_r($_SESSION);
 810
 811                         if (time() > $_SESSION["cookie_lifetime"]) {
 812                                 return false;
 813                         }
 814                 } */
 815
 816                 return true;
 817         }
 818
 819         function login_sequence($link, $login_form = 0) {
 820                 if (SINGLE_USER_MODE) {
 821                         return authenticate_user($link, "admin", null);
 822                 } else {
 823                         if (!$_SESSION["uid"] || !validate_session($link)) {
 824
 825                                 if (AUTH_AUTO_LOGIN && authenticate_user($link, null, null)) {
 826                                     $_SESSION["ref_schema_version"] = get_schema_version($link, true);
 827                                 } else {
 828                                          authenticate_user($link, null, null, true);
 829                                 }
 830
 831                                 if (!$_SESSION["uid"]) render_login_form($link, $login_form);
 832
 833                         } else {
 834                                 /* bump login timestamp */
 835                                 db_query($link, "UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 836                                         $_SESSION["uid"]);
 837
 838                                 if ($_SESSION["language"] && SESSION_COOKIE_LIFETIME > 0) {
 839                                         setcookie("ttrss_lang", $_SESSION["language"],
 840                                                 time() + SESSION_COOKIE_LIFETIME);
 841                                 }
 842                         }
 843                 }
 844         }
 845
 846
 847         /* function login_sequence($link, $mobile = false) {
 848                 $_SESSION["prefs_cache"] = array();
 849
 850                 if (!SINGLE_USER_MODE) {
 851
 852                         $login_action = $_POST["login_action"];
 853
 854                         # try to authenticate user if called from login form
 855                         if ($login_action == "do_login") {
 856                                 $login = db_escape_string($_POST["login"]);
 857                                 $password = $_POST["password"];
 858                                 $remember_me = $_POST["remember_me"];
 859
 860                                 if (authenticate_user($link, $login, $password)) {
 861                                         $_POST["password"] = "";
 862
 863                                         $_SESSION["language"] = $_POST["language"];
 864                                         $_SESSION["ref_schema_version"] = get_schema_version($link, true);
 865                                         $_SESSION["bw_limit"] = !!$_POST["bw_limit"];
 866
 867                                         if ($_POST["profile"]) {
 868
 869                                                 $profile = db_escape_string($_POST["profile"]);
 870
 871                                                 $result = db_query($link, "SELECT id FROM ttrss_settings_profiles
 872                                                         WHERE id = '$profile' AND owner_uid = " . $_SESSION["uid"]);
 873
 874                                                 if (db_num_rows($result) != 0) {
 875                                                         $_SESSION["profile"] = $profile;
 876                                                         $_SESSION["prefs_cache"] = array();
 877                                                 }
 878                                         }
 879
 880                                         if ($_REQUEST['return']) {
 881                                                 header("Location: " . $_REQUEST['return']);
 882                                         } else {
 883                                                 header("Location: " . $_SERVER["REQUEST_URI"]);
 884                                         }
 885
 886                                         exit;
 887
 888                                         return;
 889                                 } else {
 890                                         $_SESSION["login_error_msg"] = __("Incorrect username or password");
 891                                 }
 892                         }
 893
 894                         if (!$_SESSION["uid"] || !validate_session($link)) {
 895
 896                                 if (AUTH_AUTO_LOGIN && authenticate_user($link, null, null)) {
 897                                     $_SESSION["ref_schema_version"] = get_schema_version($link, true);
 898                                 } else {
 899                                          authenticate_user($link, null, null, true);
 900                                     render_login_form($link, $mobile);
 901                                     exit;
 902                                 }
 903                         } else {
 904                                 // bump login timestamp
 905                                 db_query($link, "UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 906                                         $_SESSION["uid"]);
 907
 908                                 if ($_SESSION["language"] && SESSION_COOKIE_LIFETIME > 0) {
 909                                         setcookie("ttrss_lang", $_SESSION["language"],
 910                                                 time() + SESSION_COOKIE_LIFETIME);
 911                                 }
 912
 913                                 // try to remove possible duplicates from feed counter cache
 914 //                              ccache_cleanup($link, $_SESSION["uid"]);
 915                         }
 916
 917                 } else {
 918                         return authenticate_user($link, "admin", null);
 919                 }
 920         } */
 921
 922         function truncate_string($str, $max_len, $suffix = '&hellip;') {
 923                 if (mb_strlen($str, "utf-8") > $max_len - 3) {
 924                         return mb_substr($str, 0, $max_len, "utf-8") . $suffix;
 925                 } else {
 926                         return $str;
 927                 }
 928         }
 929
 930         function theme_image($link, $filename) {
 931                 if ($link) {
 932                         $theme_path = get_user_theme_path($link);
 933
 934                         if ($theme_path && is_file($theme_path.$filename)) {
 935                                 return $theme_path.$filename;
 936                         } else {
 937                                 return $filename;
 938                         }
 939                 } else {
 940                         return $filename;
 941                 }
 942         }
 943
 944         function get_user_theme($link) {
 945
 946                 if (get_schema_version($link) >= 63 && $_SESSION["uid"]) {
 947                         $theme_name = get_pref($link, "_THEME_ID");
 948                         if (is_dir("themes/$theme_name")) {
 949                                 return $theme_name;
 950                         } else {
 951                                 return '';
 952                         }
 953                 } else {
 954                         return '';
 955                 }
 956
 957         }
 958
 959         function get_user_theme_path($link) {
 960                 $theme_path = '';
 961
 962                 if (get_schema_version($link) >= 63 && $_SESSION["uid"]) {
 963                         $theme_name = get_pref($link, "_THEME_ID");
 964
 965                         if ($theme_name && is_dir("themes/$theme_name")) {
 966                                 $theme_path = "themes/$theme_name/";
 967                         } else {
 968                                 $theme_name = '';
 969                         }
 970                 } else {
 971                         $theme_path = '';
 972                 }
 973
 974                 if ($theme_path) {
 975                         if (is_file("$theme_path/theme.ini")) {
 976                                 $ini = parse_ini_file("$theme_path/theme.ini", true);
 977                                 if ($ini['theme']['version'] >= THEME_VERSION_REQUIRED) {
 978                                         return $theme_path;
 979                                 }
 980                         }
 981                 }
 982                 return '';
 983         }
 984
 985         function get_user_theme_options($link) {
 986                 $t = get_user_theme_path($link);
 987
 988                 if ($t) {
 989                         if (is_file("$t/theme.ini")) {
 990                                 $ini = parse_ini_file("$t/theme.ini", true);
 991                                 if ($ini['theme']['version']) {
 992                                         return $ini['theme']['options'];
 993                                 }
 994                         }
 995                 }
 996                 return '';
 997         }
 998
 999         function print_theme_includes($link) {
1000
1001                 $t = get_user_theme_path($link);
1002                 $time = time();
1003
1004                 if ($t) {
1005                         print "<link rel=\"stylesheet\" type=\"text/css\"
1006                                 href=\"$t/theme.css?$time \">";
1007                         if (file_exists("$t/theme.js")) {
1008                                 print "<script type=\"text/javascript\" src=\"$t/theme.js?$time\">
1009                                         </script>";
1010                         }
1011                 }
1012         }
1013
1014         function get_all_themes() {
1015                 $themes = glob("themes/*");
1016
1017                 asort($themes);
1018
1019                 $rv = array();
1020
1021                 foreach ($themes as $t) {
1022                         if (is_file("$t/theme.ini")) {
1023                                 $ini = parse_ini_file("$t/theme.ini", true);
1024                                 if ($ini['theme']['version'] >= THEME_VERSION_REQUIRED &&
1025                                                         !$ini['theme']['disabled']) {
1026                                         $entry = array();
1027                                         $entry["path"] = $t;
1028                                         $entry["base"] = basename($t);
1029                                         $entry["name"] = $ini['theme']['name'];
1030                                         $entry["version"] = $ini['theme']['version'];
1031                                         $entry["author"] = $ini['theme']['author'];
1032                                         $entry["options"] = $ini['theme']['options'];
1033                                         array_push($rv, $entry);
1034                                 }
1035                         }
1036                 }
1037
1038                 return $rv;
1039         }
1040
1041         function convert_timestamp($timestamp, $source_tz, $dest_tz) {
1042
1043                 try {
1044                         $source_tz = new DateTimeZone($source_tz);
1045                 } catch (Exception $e) {
1046                         $source_tz = new DateTimeZone('UTC');
1047                 }
1048
1049                 try {
1050                         $dest_tz = new DateTimeZone($dest_tz);
1051                 } catch (Exception $e) {
1052                         $dest_tz = new DateTimeZone('UTC');
1053                 }
1054
1055                 $dt = new DateTime(date('Y-m-d H:i:s', $timestamp), $source_tz);
1056                 return $dt->format('U') + $dest_tz->getOffset($dt);
1057         }
1058
1059         function make_local_datetime($link, $timestamp, $long, $owner_uid = false,
1060                                         $no_smart_dt = false) {
1061
1062                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
1063                 if (!$timestamp) $timestamp = '1970-01-01 0:00';
1064
1065                 global $utc_tz;
1066                 global $tz_offset;
1067
1068                 # We store date in UTC internally
1069                 $dt = new DateTime($timestamp, $utc_tz);
1070
1071                 if ($tz_offset == -1) {
1072
1073                         $user_tz_string = get_pref($link, 'USER_TIMEZONE', $owner_uid);
1074
1075                         try {
1076                                 $user_tz = new DateTimeZone($user_tz_string);
1077                         } catch (Exception $e) {
1078                                 $user_tz = $utc_tz;
1079                         }
1080
1081                         $tz_offset = $user_tz->getOffset($dt);
1082                 }
1083
1084                 $user_timestamp = $dt->format('U') + $tz_offset;
1085
1086                 if (!$no_smart_dt) {
1087                         return smart_date_time($link, $user_timestamp,
1088                                 $tz_offset, $owner_uid);
1089                 } else {
1090                         if ($long)
1091                                 $format = get_pref($link, 'LONG_DATE_FORMAT', $owner_uid);
1092                         else
1093                                 $format = get_pref($link, 'SHORT_DATE_FORMAT', $owner_uid);
1094
1095                         return date($format, $user_timestamp);
1096                 }
1097         }
1098
1099         function smart_date_time($link, $timestamp, $tz_offset = 0, $owner_uid = false) {
1100                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
1101
1102                 if (date("Y.m.d", $timestamp) == date("Y.m.d", time() + $tz_offset)) {
1103                         return date("G:i", $timestamp);
1104                 } else if (date("Y", $timestamp) == date("Y", time() + $tz_offset)) {
1105                         $format = get_pref($link, 'SHORT_DATE_FORMAT', $owner_uid);
1106                         return date($format, $timestamp);
1107                 } else {
1108                         $format = get_pref($link, 'LONG_DATE_FORMAT', $owner_uid);
1109                         return date($format, $timestamp);
1110                 }
1111         }
1112
1113         function sql_bool_to_bool($s) {
1114                 if ($s == "t" || $s == "1" || $s == "true") {
1115                         return true;
1116                 } else {
1117                         return false;
1118                 }
1119         }
1120
1121         function bool_to_sql_bool($s) {
1122                 if ($s) {
1123                         return "true";
1124                 } else {
1125                         return "false";
1126                 }
1127         }
1128
1129         // Session caching removed due to causing wrong redirects to upgrade
1130         // script when get_schema_version() is called on an obsolete session
1131         // created on a previous schema version.
1132         function get_schema_version($link, $nocache = false) {
1133                 global $schema_version;
1134
1135                 if (!$schema_version) {
1136                         $result = db_query($link, "SELECT schema_version FROM ttrss_version");
1137                         $version = db_fetch_result($result, 0, "schema_version");
1138                         $schema_version = $version;
1139                         return $version;
1140                 } else {
1141                         return $schema_version;
1142                 }
1143         }
1144
1145         function sanity_check($link) {
1146                 require_once 'errors.php';
1147
1148                 $error_code = 0;
1149                 $schema_version = get_schema_version($link, true);
1150
1151                 if ($schema_version != SCHEMA_VERSION) {
1152                         $error_code = 5;
1153                 }
1154
1155                 if (DB_TYPE == "mysql") {
1156                         $result = db_query($link, "SELECT true", false);
1157                         if (db_num_rows($result) != 1) {
1158                                 $error_code = 10;
1159                         }
1160                 }
1161
1162                 if (db_escape_string("testTEST") != "testTEST") {
1163                         $error_code = 12;
1164                 }
1165
1166                 return array("code" => $error_code, "message" => $ERRORS[$error_code]);
1167         }
1168
1169         function file_is_locked($filename) {
1170                 if (function_exists('flock')) {
1171                         $fp = @fopen(LOCK_DIRECTORY . "/$filename", "r");
1172                         if ($fp) {
1173                                 if (flock($fp, LOCK_EX | LOCK_NB)) {
1174                                         flock($fp, LOCK_UN);
1175                                         fclose($fp);
1176                                         return false;
1177                                 }
1178                                 fclose($fp);
1179                                 return true;
1180                         } else {
1181                                 return false;
1182                         }
1183                 }
1184                 return true; // consider the file always locked and skip the test
1185         }
1186
1187         function make_lockfile($filename) {
1188                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
1189
1190                 if (flock($fp, LOCK_EX | LOCK_NB)) {
1191                         if (function_exists('posix_getpid')) {
1192                                 fwrite($fp, posix_getpid() . "\n");
1193                         }
1194                         return $fp;
1195                 } else {
1196                         return false;
1197                 }
1198         }
1199
1200         function make_stampfile($filename) {
1201                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
1202
1203                 if (flock($fp, LOCK_EX | LOCK_NB)) {
1204                         fwrite($fp, time() . "\n");
1205                         flock($fp, LOCK_UN);
1206                         fclose($fp);
1207                         return true;
1208                 } else {
1209                         return false;
1210                 }
1211         }
1212
1213         function sql_random_function() {
1214                 if (DB_TYPE == "mysql") {
1215                         return "RAND()";
1216                 } else {
1217                         return "RANDOM()";
1218                 }
1219         }
1220
1221         function catchup_feed($link, $feed, $cat_view, $owner_uid = false, $max_id = false) {
1222
1223                         if (!$owner_uid) $owner_uid = $_SESSION['uid'];
1224
1225                         //if (preg_match("/^-?[0-9][0-9]*$/", $feed) != false) {
1226
1227                         $ref_check_qpart = ($max_id &&
1228                                 !get_pref($link, 'REVERSE_HEADLINES')) ? "ref_id <= '$max_id'" : "true";
1229
1230                         if (is_numeric($feed)) {
1231                                 if ($cat_view) {
1232
1233                                         if ($feed >= 0) {
1234
1235                                                 if ($feed > 0) {
1236                                                         $cat_qpart = "cat_id = '$feed'";
1237                                                 } else {
1238                                                         $cat_qpart = "cat_id IS NULL";
1239                                                 }
1240
1241                                                 $tmp_result = db_query($link, "SELECT id
1242                                                         FROM ttrss_feeds WHERE $cat_qpart AND owner_uid = $owner_uid");
1243
1244                                                 while ($tmp_line = db_fetch_assoc($tmp_result)) {
1245
1246                                                         $tmp_feed = $tmp_line["id"];
1247
1248                                                         db_query($link, "UPDATE ttrss_user_entries
1249                                                                 SET unread = false,last_read = NOW()
1250                                                                 WHERE feed_id = '$tmp_feed'
1251                                                                 AND $ref_check_qpart
1252                                                                 AND owner_uid = $owner_uid");
1253                                                 }
1254                                         } else if ($feed == -2) {
1255
1256                                                 db_query($link, "UPDATE ttrss_user_entries
1257                                                         SET unread = false,last_read = NOW() WHERE (SELECT COUNT(*)
1258                                                                 FROM ttrss_user_labels2 WHERE article_id = ref_id) > 0
1259                                                                 AND $ref_check_qpart
1260                                                                 AND unread = true AND owner_uid = $owner_uid");
1261                                         }
1262
1263                                 } else if ($feed > 0) {
1264
1265                                         db_query($link, "UPDATE ttrss_user_entries
1266                                                         SET unread = false,last_read = NOW()
1267                                                         WHERE feed_id = '$feed'
1268                                                         AND $ref_check_qpart
1269                                                         AND owner_uid = $owner_uid");
1270
1271                                 } else if ($feed < 0 && $feed > -10) { // special, like starred
1272
1273                                         if ($feed == -1) {
1274                                                 db_query($link, "UPDATE ttrss_user_entries
1275                                                         SET unread = false,last_read = NOW()
1276                                                         WHERE marked = true
1277                                                         AND $ref_check_qpart
1278                                                         AND owner_uid = $owner_uid");
1279                                         }
1280
1281                                         if ($feed == -2) {
1282                                                 db_query($link, "UPDATE ttrss_user_entries
1283                                                         SET unread = false,last_read = NOW()
1284                                                         WHERE published = true
1285                                                         AND $ref_check_qpart
1286                                                         AND owner_uid = $owner_uid");
1287                                         }
1288
1289                                         if ($feed == -3) {
1290
1291                                                 $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE");
1292
1293                                                 if (DB_TYPE == "pgsql") {
1294                                                         $match_part = "updated > NOW() - INTERVAL '$intl hour' ";
1295                                                 } else {
1296                                                         $match_part = "updated > DATE_SUB(NOW(),
1297                                                                 INTERVAL $intl HOUR) ";
1298                                                 }
1299
1300                                                 $result = db_query($link, "SELECT id FROM ttrss_entries,
1301                                                         ttrss_user_entries WHERE $match_part AND
1302                                                         unread = true AND
1303                                                         ttrss_user_entries.ref_id = ttrss_entries.id AND
1304                                                         owner_uid = $owner_uid");
1305
1306                                                 $affected_ids = array();
1307
1308                                                 while ($line = db_fetch_assoc($result)) {
1309                                                         array_push($affected_ids, $line["id"]);
1310                                                 }
1311
1312                                                 catchupArticlesById($link, $affected_ids, 0);
1313                                         }
1314
1315                                         if ($feed == -4) {
1316                                                 db_query($link, "UPDATE ttrss_user_entries
1317                                                         SET unread = false,last_read = NOW()
1318                                                         WHERE $ref_check_qpart AND owner_uid = $owner_uid");
1319                                         }
1320
1321                                 } else if ($feed < -10) { // label
1322
1323                                         $label_id = -$feed - 11;
1324
1325                                         db_query($link, "UPDATE ttrss_user_entries, ttrss_user_labels2
1326                                                 SET unread = false, last_read = NOW()
1327                                                         WHERE label_id = '$label_id' AND unread = true
1328                                                         AND $ref_check_qpart
1329                                                         AND owner_uid = '$owner_uid' AND ref_id = article_id");
1330
1331                                 }
1332
1333                                 ccache_update($link, $feed, $owner_uid, $cat_view);
1334
1335                         } else { // tag
1336                                 db_query($link, "BEGIN");
1337
1338                                 $tag_name = db_escape_string($feed);
1339
1340                                 $result = db_query($link, "SELECT post_int_id FROM ttrss_tags
1341                                         WHERE tag_name = '$tag_name' AND owner_uid = $owner_uid");
1342
1343                                 while ($line = db_fetch_assoc($result)) {
1344                                         db_query($link, "UPDATE ttrss_user_entries SET
1345                                                 unread = false, last_read = NOW()
1346                                                 WHERE $ref_check_qpart AND int_id = " . $line["post_int_id"]);
1347                                 }
1348                                 db_query($link, "COMMIT");
1349                         }
1350         }
1351
1352         function getAllCounters($link, $omode = "flc", $active_feed = false) {
1353
1354                 if (!$omode) $omode = "flc";
1355
1356                 $data = getGlobalCounters($link);
1357
1358                 $data = array_merge($data, getVirtCounters($link));
1359
1360                 if (strchr($omode, "l")) $data = array_merge($data, getLabelCounters($link));
1361                 if (strchr($omode, "f")) $data = array_merge($data, getFeedCounters($link, $active_feed));
1362                 if (strchr($omode, "t")) $data = array_merge($data, getTagCounters($link));
1363                 if (strchr($omode, "c")) $data = array_merge($data, getCategoryCounters($link));
1364
1365                 return $data;
1366         }
1367
1368         function getCategoryTitle($link, $cat_id) {
1369
1370                 if ($cat_id == -1) {
1371                         return __("Special");
1372                 } else if ($cat_id == -2) {
1373                         return __("Labels");
1374                 } else {
1375
1376                         $result = db_query($link, "SELECT title FROM ttrss_feed_categories WHERE
1377                                 id = '$cat_id'");
1378
1379                         if (db_num_rows($result) == 1) {
1380                                 return db_fetch_result($result, 0, "title");
1381                         } else {
1382                                 return __("Uncategorized");
1383                         }
1384                 }
1385         }
1386
1387
1388         function getCategoryCounters($link) {
1389                 $ret_arr = array();
1390
1391                 /* Labels category */
1392
1393                 $cv = array("id" => -2, "kind" => "cat",
1394                         "counter" => getCategoryUnread($link, -2));
1395
1396                 array_push($ret_arr, $cv);
1397
1398                 $result = db_query($link, "SELECT id AS cat_id, value AS unread,
1399                         (SELECT COUNT(id) FROM ttrss_feed_categories AS c2
1400                                 WHERE c2.parent_cat = ttrss_feed_categories.id) AS num_children
1401                         FROM ttrss_feed_categories, ttrss_cat_counters_cache
1402                         WHERE ttrss_cat_counters_cache.feed_id = id AND
1403                         ttrss_cat_counters_cache.owner_uid = ttrss_feed_categories.owner_uid AND
1404                         ttrss_feed_categories.owner_uid = " . $_SESSION["uid"]);
1405
1406                 while ($line = db_fetch_assoc($result)) {
1407                         $line["cat_id"] = (int) $line["cat_id"];
1408
1409                         if ($line["num_children"] > 0) {
1410                                 $child_counter = getCategoryChildrenUnread($link, $line["cat_id"], $_SESSION["uid"]);
1411                         } else {
1412                                 $child_counter = 0;
1413                         }
1414
1415                         $cv = array("id" => $line["cat_id"], "kind" => "cat",
1416                                 "child_counter" => $child_counter,
1417                                 "counter" => $line["unread"]);
1418
1419                         array_push($ret_arr, $cv);
1420                 }
1421
1422                 /* Special case: NULL category doesn't actually exist in the DB */
1423
1424                 $cv = array("id" => 0, "kind" => "cat",
1425                         "counter" => ccache_find($link, 0, $_SESSION["uid"], true));
1426
1427                 array_push($ret_arr, $cv);
1428
1429                 return $ret_arr;
1430         }
1431
1432         // only accepts real cats (>= 0)
1433         function getCategoryChildrenUnread($link, $cat, $owner_uid = false) {
1434                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1435
1436                 $result = db_query($link, "SELECT id FROM ttrss_feed_categories WHERE parent_cat = '$cat'
1437                                 AND owner_uid = $owner_uid");
1438
1439                 $unread = 0;
1440
1441                 while ($line = db_fetch_assoc($result)) {
1442                         $unread += getCategoryUnread($link, $line["id"], $owner_uid);
1443                         $unread += getCategoryChildrenUnread($link, $line["id"], $owner_uid);
1444                 }
1445
1446                 return $unread;
1447         }
1448
1449         function getCategoryUnread($link, $cat, $owner_uid = false) {
1450
1451                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1452
1453                 if ($cat >= 0) {
1454
1455                         if ($cat != 0) {
1456                                 $cat_query = "cat_id = '$cat'";
1457                         } else {
1458                                 $cat_query = "cat_id IS NULL";
1459                         }
1460
1461                         $result = db_query($link, "SELECT id FROM ttrss_feeds WHERE $cat_query
1462                                         AND owner_uid = " . $owner_uid);
1463
1464                         $cat_feeds = array();
1465                         while ($line = db_fetch_assoc($result)) {
1466                                 array_push($cat_feeds, "feed_id = " . $line["id"]);
1467                         }
1468
1469                         if (count($cat_feeds) == 0) return 0;
1470
1471                         $match_part = implode(" OR ", $cat_feeds);
1472
1473                         $result = db_query($link, "SELECT COUNT(int_id) AS unread
1474                                 FROM ttrss_user_entries
1475                                 WHERE   unread = true AND ($match_part)
1476                                 AND owner_uid = " . $owner_uid);
1477
1478                         $unread = 0;
1479
1480                         # this needs to be rewritten
1481                         while ($line = db_fetch_assoc($result)) {
1482                                 $unread += $line["unread"];
1483                         }
1484
1485                         return $unread;
1486                 } else if ($cat == -1) {
1487                         return getFeedUnread($link, -1) + getFeedUnread($link, -2) + getFeedUnread($link, -3) + getFeedUnread($link, 0);
1488                 } else if ($cat == -2) {
1489
1490                         $result = db_query($link, "
1491                                 SELECT COUNT(unread) AS unread FROM
1492                                         ttrss_user_entries, ttrss_user_labels2
1493                                 WHERE article_id = ref_id AND unread = true
1494                                         AND ttrss_user_entries.owner_uid = '$owner_uid'");
1495
1496                         $unread = db_fetch_result($result, 0, "unread");
1497
1498                         return $unread;
1499
1500                 }
1501         }
1502
1503         function getFeedUnread($link, $feed, $is_cat = false) {
1504                 return getFeedArticles($link, $feed, $is_cat, true, $_SESSION["uid"]);
1505         }
1506
1507         function getLabelUnread($link, $label_id, $owner_uid = false) {
1508                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1509
1510                 $result = db_query($link, "SELECT COUNT(ref_id) AS unread FROM ttrss_user_entries, ttrss_user_labels2
1511                         WHERE owner_uid = '$owner_uid' AND unread = true AND label_id = '$label_id' AND article_id = ref_id");
1512
1513                 if (db_num_rows($result) != 0) {
1514                         return db_fetch_result($result, 0, "unread");
1515                 } else {
1516                         return 0;
1517                 }
1518         }
1519
1520         function getFeedArticles($link, $feed, $is_cat = false, $unread_only = false,
1521                 $owner_uid = false) {
1522
1523                 $n_feed = (int) $feed;
1524                 $need_entries = false;
1525
1526                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1527
1528                 if ($unread_only) {
1529                         $unread_qpart = "unread = true";
1530                 } else {
1531                         $unread_qpart = "true";
1532                 }
1533
1534                 if ($is_cat) {
1535                         return getCategoryUnread($link, $n_feed, $owner_uid);
1536                 } else if ($n_feed == -6) {
1537                         return 0;
1538                 } else if ($feed != "0" && $n_feed == 0) {
1539
1540                         $feed = db_escape_string($feed);
1541
1542                         $result = db_query($link, "SELECT SUM((SELECT COUNT(int_id)
1543                                 FROM ttrss_user_entries,ttrss_entries WHERE int_id = post_int_id
1544                                         AND ref_id = id AND $unread_qpart)) AS count FROM ttrss_tags
1545                                 WHERE owner_uid = $owner_uid AND tag_name = '$feed'");
1546                         return db_fetch_result($result, 0, "count");
1547
1548                 } else if ($n_feed == -1) {
1549                         $match_part = "marked = true";
1550                 } else if ($n_feed == -2) {
1551                         $match_part = "published = true";
1552                 } else if ($n_feed == -3) {
1553                         $match_part = "unread = true AND score >= 0";
1554
1555                         $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE", $owner_uid);
1556
1557                         if (DB_TYPE == "pgsql") {
1558                                 $match_part .= " AND updated > NOW() - INTERVAL '$intl hour' ";
1559                         } else {
1560                                 $match_part .= " AND updated > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
1561                         }
1562
1563                         $need_entries = true;
1564
1565                 } else if ($n_feed == -4) {
1566                         $match_part = "true";
1567                 } else if ($n_feed >= 0) {
1568
1569                         if ($n_feed != 0) {
1570                                 $match_part = "feed_id = '$n_feed'";
1571                         } else {
1572                                 $match_part = "feed_id IS NULL";
1573                         }
1574
1575                 } else if ($feed < -10) {
1576
1577                         $label_id = -$feed - 11;
1578
1579                         return getLabelUnread($link, $label_id, $owner_uid);
1580
1581                 }
1582
1583                 if ($match_part) {
1584
1585                         if ($need_entries) {
1586                                 $from_qpart = "ttrss_user_entries,ttrss_entries";
1587                                 $from_where = "ttrss_entries.id = ttrss_user_entries.ref_id AND";
1588                         } else {
1589                                 $from_qpart = "ttrss_user_entries";
1590                         }
1591
1592                         $query = "SELECT count(int_id) AS unread
1593                                 FROM $from_qpart WHERE
1594                                 $unread_qpart AND $from_where ($match_part) AND ttrss_user_entries.owner_uid = $owner_uid";
1595
1596                         //echo "[$feed/$query]\n";
1597
1598                         $result = db_query($link, $query);
1599
1600                 } else {
1601
1602                         $result = db_query($link, "SELECT COUNT(post_int_id) AS unread
1603                                 FROM ttrss_tags,ttrss_user_entries,ttrss_entries
1604                                 WHERE tag_name = '$feed' AND post_int_id = int_id AND ref_id = ttrss_entries.id
1605                                 AND $unread_qpart AND ttrss_tags.owner_uid = " . $owner_uid);
1606                 }
1607
1608                 $unread = db_fetch_result($result, 0, "unread");
1609
1610                 return $unread;
1611         }
1612
1613         function getGlobalUnread($link, $user_id = false) {
1614
1615                 if (!$user_id) {
1616                         $user_id = $_SESSION["uid"];
1617                 }
1618
1619                 $result = db_query($link, "SELECT SUM(value) AS c_id FROM ttrss_counters_cache
1620                         WHERE owner_uid = '$user_id' AND feed_id > 0");
1621
1622                 $c_id = db_fetch_result($result, 0, "c_id");
1623
1624                 return $c_id;
1625         }
1626
1627         function getGlobalCounters($link, $global_unread = -1) {
1628                 $ret_arr = array();
1629
1630                 if ($global_unread == -1) {
1631                         $global_unread = getGlobalUnread($link);
1632                 }
1633
1634                 $cv = array("id" => "global-unread",
1635                         "counter" => $global_unread);
1636
1637                 array_push($ret_arr, $cv);
1638
1639                 $result = db_query($link, "SELECT COUNT(id) AS fn FROM
1640                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1641
1642                 $subscribed_feeds = db_fetch_result($result, 0, "fn");
1643
1644                 $cv = array("id" => "subscribed-feeds",
1645                         "counter" => $subscribed_feeds);
1646
1647                 array_push($ret_arr, $cv);
1648
1649                 return $ret_arr;
1650         }
1651
1652         function getTagCounters($link) {
1653
1654                 $ret_arr = array();
1655
1656                 $result = db_query($link, "SELECT tag_name,SUM((SELECT COUNT(int_id)
1657                         FROM ttrss_user_entries,ttrss_entries WHERE int_id = post_int_id
1658                                 AND ref_id = id AND unread = true)) AS count FROM ttrss_tags
1659                                 WHERE owner_uid = ".$_SESSION['uid']." GROUP BY tag_name
1660                                 ORDER BY count DESC LIMIT 55");
1661
1662                 $tags = array();
1663
1664                 while ($line = db_fetch_assoc($result)) {
1665                         $tags[$line["tag_name"]] += $line["count"];
1666                 }
1667
1668                 foreach (array_keys($tags) as $tag) {
1669                         $unread = $tags[$tag];
1670                         $tag = htmlspecialchars($tag);
1671
1672                         $cv = array("id" => $tag,
1673                                 "kind" => "tag",
1674                                 "counter" => $unread);
1675
1676                         array_push($ret_arr, $cv);
1677                 }
1678
1679                 return $ret_arr;
1680         }
1681
1682         function getVirtCounters($link) {
1683
1684                 $ret_arr = array();
1685
1686                 for ($i = 0; $i >= -4; $i--) {
1687
1688                         $count = getFeedUnread($link, $i);
1689
1690                         $cv = array("id" => $i,
1691                                 "counter" => $count);
1692
1693 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1694 //                              $cv["xmsg"] = getFeedArticles($link, $i)." ".__("total");
1695
1696                         array_push($ret_arr, $cv);
1697                 }
1698
1699                 return $ret_arr;
1700         }
1701
1702         function getLabelCounters($link, $descriptions = false) {
1703
1704                 $ret_arr = array();
1705
1706                 $owner_uid = $_SESSION["uid"];
1707
1708                 $result = db_query($link, "SELECT id, caption FROM ttrss_labels2
1709                         WHERE owner_uid = '$owner_uid'");
1710
1711                 while ($line = db_fetch_assoc($result)) {
1712
1713                         $id = -$line["id"] - 11;
1714
1715                         $label_name = $line["caption"];
1716                         $count = getFeedUnread($link, $id);
1717
1718                         $cv = array("id" => $id,
1719                                 "counter" => $count);
1720
1721                         if ($descriptions)
1722                                 $cv["description"] = $label_name;
1723
1724 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1725 //                              $cv["xmsg"] = getFeedArticles($link, $id)." ".__("total");
1726
1727                         array_push($ret_arr, $cv);
1728                 }
1729
1730                 return $ret_arr;
1731         }
1732
1733         function getFeedCounters($link, $active_feed = false) {
1734
1735                 $ret_arr = array();
1736
1737                 $query = "SELECT ttrss_feeds.id,
1738                                 ttrss_feeds.title,
1739                                 ".SUBSTRING_FOR_DATE."(ttrss_feeds.last_updated,1,19) AS last_updated,
1740                                 last_error, value AS count
1741                         FROM ttrss_feeds, ttrss_counters_cache
1742                         WHERE ttrss_feeds.owner_uid = ".$_SESSION["uid"]."
1743                                 AND ttrss_counters_cache.owner_uid = ttrss_feeds.owner_uid
1744                                 AND ttrss_counters_cache.feed_id = id";
1745
1746                 $result = db_query($link, $query);
1747                 $fctrs_modified = false;
1748
1749                 while ($line = db_fetch_assoc($result)) {
1750
1751                         $id = $line["id"];
1752                         $count = $line["count"];
1753                         $last_error = htmlspecialchars($line["last_error"]);
1754
1755                         $last_updated = make_local_datetime($link, $line['last_updated'], false);
1756
1757                         $has_img = feed_has_icon($id);
1758
1759                         if (date('Y') - date('Y', strtotime($line['last_updated'])) > 2)
1760                                 $last_updated = '';
1761
1762                         $cv = array("id" => $id,
1763                                 "updated" => $last_updated,
1764                                 "counter" => $count,
1765                                 "has_img" => (int) $has_img);
1766
1767                         if ($last_error)
1768                                 $cv["error"] = $last_error;
1769
1770 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1771 //                              $cv["xmsg"] = getFeedArticles($link, $id)." ".__("total");
1772
1773                         if ($active_feed && $id == $active_feed)
1774                                 $cv["title"] = truncate_string($line["title"], 30);
1775
1776                         array_push($ret_arr, $cv);
1777
1778                 }
1779
1780                 return $ret_arr;
1781         }
1782
1783         function get_pgsql_version($link) {
1784                 $result = db_query($link, "SELECT version() AS version");
1785                 $version = explode(" ", db_fetch_result($result, 0, "version"));
1786                 return $version[1];
1787         }
1788
1789         /**
1790          * @return array (code => Status code, message => error message if available)
1791          *
1792          *                 0 - OK, Feed already exists
1793          *                 1 - OK, Feed added
1794          *                 2 - Invalid URL
1795          *                 3 - URL content is HTML, no feeds available
1796          *                 4 - URL content is HTML which contains multiple feeds.
1797          *                     Here you should call extractfeedurls in rpc-backend
1798          *                     to get all possible feeds.
1799          *                 5 - Couldn't download the URL content.
1800          */
1801         function subscribe_to_feed($link, $url, $cat_id = 0,
1802                         $auth_login = '', $auth_pass = '', $need_auth = false) {
1803
1804                 global $fetch_last_error;
1805
1806                 require_once "include/rssfuncs.php";
1807
1808                 $url = fix_url($url);
1809
1810                 if (!$url || !validate_feed_url($url)) return array("code" => 2);
1811
1812                 $update_method = 0;
1813
1814                 $contents = @fetch_file_contents($url, false, $auth_login, $auth_pass);
1815
1816                 if (!$contents) {
1817                         return array("code" => 5, "message" => $fetch_last_error);
1818                 }
1819
1820                 if (is_html($contents)) {
1821                         $feedUrls = get_feeds_from_html($url, $contents);
1822
1823                         if (count($feedUrls) == 0) {
1824                                 return array("code" => 3);
1825                         } else if (count($feedUrls) > 1) {
1826                                 return array("code" => 4, "feeds" => $feedUrls);
1827                         }
1828                         //use feed url as new URL
1829                         $url = key($feedUrls);
1830                 }
1831
1832                 if ($cat_id == "0" || !$cat_id) {
1833                         $cat_qpart = "NULL";
1834                 } else {
1835                         $cat_qpart = "'$cat_id'";
1836                 }
1837
1838                 $result = db_query($link,
1839                         "SELECT id FROM ttrss_feeds
1840                         WHERE feed_url = '$url' AND owner_uid = ".$_SESSION["uid"]);
1841
1842                 if (db_num_rows($result) == 0) {
1843                         $result = db_query($link,
1844                                 "INSERT INTO ttrss_feeds
1845                                         (owner_uid,feed_url,title,cat_id, auth_login,auth_pass,update_method)
1846                                 VALUES ('".$_SESSION["uid"]."', '$url',
1847                                 '[Unknown]', $cat_qpart, '$auth_login', '$auth_pass', '$update_method')");
1848
1849                         $result = db_query($link,
1850                                 "SELECT id FROM ttrss_feeds WHERE feed_url = '$url'
1851                                         AND owner_uid = " . $_SESSION["uid"]);
1852
1853                         $feed_id = db_fetch_result($result, 0, "id");
1854
1855                         if ($feed_id) {
1856                                 update_rss_feed($link, $feed_id, true);
1857                         }
1858
1859                         return array("code" => 1);
1860                 } else {
1861                         return array("code" => 0);
1862                 }
1863         }
1864
1865         function print_feed_select($link, $id, $default_id = "",
1866                 $attributes = "", $include_all_feeds = true,
1867                 $root_id = false, $nest_level = 0) {
1868
1869                 if (!$root_id) {
1870                         print "<select id=\"$id\" name=\"$id\" $attributes>";
1871                         if ($include_all_feeds) {
1872                                 $is_selected = ("0" == $default_id) ? "selected=\"1\"" : "";
1873                                 print "<option $is_selected value=\"0\">".__('All feeds')."</option>";
1874                         }
1875                 }
1876
1877                 if (get_pref($link, 'ENABLE_FEED_CATS')) {
1878
1879                         if ($root_id)
1880                                 $parent_qpart = "parent_cat = '$root_id'";
1881                         else
1882                                 $parent_qpart = "parent_cat IS NULL";
1883
1884                         $result = db_query($link, "SELECT id,title,
1885                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1886                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1887                                 FROM ttrss_feed_categories
1888                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1889
1890                         while ($line = db_fetch_assoc($result)) {
1891
1892                                 for ($i = 0; $i < $nest_level; $i++)
1893                                         $line["title"] = " - " . $line["title"];
1894
1895                                 $is_selected = ("CAT:".$line["id"] == $default_id) ? "selected=\"1\"" : "";
1896
1897                                 printf("<option $is_selected value='CAT:%d'>%s</option>",
1898                                         $line["id"], htmlspecialchars($line["title"]));
1899
1900                                 if ($line["num_children"] > 0)
1901                                         print_feed_select($link, $id, $default_id, $attributes,
1902                                                 $include_all_feeds, $line["id"], $nest_level+1);
1903
1904                                 $feed_result = db_query($link, "SELECT id,title FROM ttrss_feeds
1905                                         WHERE cat_id = '".$line["id"]."' AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1906
1907                                 while ($fline = db_fetch_assoc($feed_result)) {
1908                                         $is_selected = ($fline["id"] == $default_id) ? "selected=\"1\"" : "";
1909
1910                                         $fline["title"] = " + " . $fline["title"];
1911
1912                                         for ($i = 0; $i < $nest_level; $i++)
1913                                                 $fline["title"] = " - " . $fline["title"];
1914
1915                                         printf("<option $is_selected value='%d'>%s</option>",
1916                                                 $fline["id"], htmlspecialchars($fline["title"]));
1917                                 }
1918                         }
1919
1920                         if (!$root_id) {
1921                                 $is_selected = ($default_id == "CAT:0") ? "selected=\"1\"" : "";
1922
1923                                 printf("<option $is_selected value='CAT:0'>%s</option>",
1924                                         __("Uncategorized"));
1925
1926                                 $feed_result = db_query($link, "SELECT id,title FROM ttrss_feeds
1927                                         WHERE cat_id IS NULL AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1928
1929                                 while ($fline = db_fetch_assoc($feed_result)) {
1930                                         $is_selected = ($fline["id"] == $default_id && !$default_is_cat) ? "selected=\"1\"" : "";
1931
1932                                         $fline["title"] = " + " . $fline["title"];
1933
1934                                         for ($i = 0; $i < $nest_level; $i++)
1935                                                 $fline["title"] = " - " . $fline["title"];
1936
1937                                         printf("<option $is_selected value='%d'>%s</option>",
1938                                                 $fline["id"], htmlspecialchars($fline["title"]));
1939                                 }
1940                         }
1941
1942                 } else {
1943                         $result = db_query($link, "SELECT id,title FROM ttrss_feeds
1944                                 WHERE owner_uid = ".$_SESSION["uid"]." ORDER BY title");
1945
1946                         while ($line = db_fetch_assoc($result)) {
1947
1948                                 $is_selected = ($line["id"] == $default_id) ? "selected=\"1\"" : "";
1949
1950                                 printf("<option $is_selected value='%d'>%s</option>",
1951                                         $line["id"], htmlspecialchars($line["title"]));
1952                         }
1953                 }
1954
1955                 if (!$root_id) {
1956                         print "</select>";
1957                 }
1958         }
1959
1960         function print_feed_cat_select($link, $id, $default_id,
1961                 $attributes, $include_all_cats = true, $root_id = false, $nest_level = 0) {
1962
1963                         if (!$root_id) {
1964                                         print "<select id=\"$id\" name=\"$id\" default=\"$default_id\" onchange=\"catSelectOnChange(this)\" $attributes>";
1965                         }
1966
1967                         if ($root_id)
1968                                 $parent_qpart = "parent_cat = '$root_id'";
1969                         else
1970                                 $parent_qpart = "parent_cat IS NULL";
1971
1972                         $result = db_query($link, "SELECT id,title,
1973                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1974                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1975                                 FROM ttrss_feed_categories
1976                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1977
1978                         while ($line = db_fetch_assoc($result)) {
1979                                 if ($line["id"] == $default_id) {
1980                                         $is_selected = "selected=\"1\"";
1981                                 } else {
1982                                         $is_selected = "";
1983                                 }
1984
1985                                 for ($i = 0; $i < $nest_level; $i++)
1986                                         $line["title"] = " - " . $line["title"];
1987
1988                                 if ($line["title"])
1989                                         printf("<option $is_selected value='%d'>%s</option>",
1990                                                 $line["id"], htmlspecialchars($line["title"]));
1991
1992                                 if ($line["num_children"] > 0)
1993                                         print_feed_cat_select($link, $id, $default_id, $attributes,
1994                                                 $include_all_cats, $line["id"], $nest_level+1);
1995                         }
1996
1997                         if (!$root_id) {
1998                                 if ($include_all_cats) {
1999                                         if (db_num_rows($result) > 0) {
2000                                                 print "<option disabled=\"1\">--------</option>";
2001                                         }
2002
2003                                         if ($default_id == 0) {
2004                                                 $is_selected = "selected=\"1\"";
2005                                         } else {
2006                                                 $is_selected = "";
2007                                         }
2008
2009                                         print "<option $is_selected value=\"0\">".__('Uncategorized')."</option>";
2010                                 }
2011                                 print "</select>";
2012                         }
2013                 }
2014
2015         function checkbox_to_sql_bool($val) {
2016                 return ($val == "on") ? "true" : "false";
2017         }
2018
2019         function getFeedCatTitle($link, $id) {
2020                 if ($id == -1) {
2021                         return __("Special");
2022                 } else if ($id < -10) {
2023                         return __("Labels");
2024                 } else if ($id > 0) {
2025                         $result = db_query($link, "SELECT ttrss_feed_categories.title
2026                                 FROM ttrss_feeds, ttrss_feed_categories WHERE ttrss_feeds.id = '$id' AND
2027                                         cat_id = ttrss_feed_categories.id");
2028                         if (db_num_rows($result) == 1) {
2029                                 return db_fetch_result($result, 0, "title");
2030                         } else {
2031                                 return __("Uncategorized");
2032                         }
2033                 } else {
2034                         return "getFeedCatTitle($id) failed";
2035                 }
2036
2037         }
2038
2039         function getFeedIcon($id) {
2040                 switch ($id) {
2041                 case 0:
2042                         return "images/archive.png";
2043                         break;
2044                 case -1:
2045                         return "images/mark_set.png";
2046                         break;
2047                 case -2:
2048                         return "images/pub_set.png";
2049                         break;
2050                 case -3:
2051                         return "images/fresh.png";
2052                         break;
2053                 case -4:
2054                         return "images/tag.png";
2055                         break;
2056                 case -6:
2057                         return "images/recently_read.png";
2058                         break;
2059                 default:
2060                         if ($id < -10) {
2061                                 return "images/label.png";
2062                         } else {
2063                                 if (file_exists(ICONS_DIR . "/$id.ico"))
2064                                         return ICONS_URL . "/$id.ico";
2065                         }
2066                         break;
2067                 }
2068         }
2069
2070         function getFeedTitle($link, $id, $cat = false) {
2071                 if ($cat) {
2072                         return getCategoryTitle($link, $id);
2073                 } else if ($id == -1) {
2074                         return __("Starred articles");
2075                 } else if ($id == -2) {
2076                         return __("Published articles");
2077                 } else if ($id == -3) {
2078                         return __("Fresh articles");
2079                 } else if ($id == -4) {
2080                         return __("All articles");
2081                 } else if ($id === 0 || $id === "0") {
2082                         return __("Archived articles");
2083                 } else if ($id == -6) {
2084                         return __("Recently read");
2085                 } else if ($id < -10) {
2086                         $label_id = -$id - 11;
2087                         $result = db_query($link, "SELECT caption FROM ttrss_labels2 WHERE id = '$label_id'");
2088                         if (db_num_rows($result) == 1) {
2089                                 return db_fetch_result($result, 0, "caption");
2090                         } else {
2091                                 return "Unknown label ($label_id)";
2092                         }
2093
2094                 } else if (is_numeric($id) && $id > 0) {
2095                         $result = db_query($link, "SELECT title FROM ttrss_feeds WHERE id = '$id'");
2096                         if (db_num_rows($result) == 1) {
2097                                 return db_fetch_result($result, 0, "title");
2098                         } else {
2099                                 return "Unknown feed ($id)";
2100                         }
2101                 } else {
2102                         return $id;
2103                 }
2104         }
2105
2106         function make_init_params($link) {
2107                 $params = array();
2108
2109                 $params["theme"] = get_user_theme($link);
2110                 $params["theme_options"] = get_user_theme_options($link);
2111
2112                 $params["sign_progress"] = theme_image($link, "images/indicator_white.gif");
2113                 $params["sign_progress_tiny"] = theme_image($link, "images/indicator_tiny.gif");
2114                 $params["sign_excl"] = theme_image($link, "images/sign_excl.png");
2115                 $params["sign_info"] = theme_image($link, "images/sign_info.png");
2116
2117                 foreach (array("ON_CATCHUP_SHOW_NEXT_FEED", "HIDE_READ_FEEDS",
2118                         "ENABLE_FEED_CATS", "FEEDS_SORT_BY_UNREAD", "CONFIRM_FEED_CATCHUP",
2119                         "CDM_AUTO_CATCHUP", "FRESH_ARTICLE_MAX_AGE", "DEFAULT_ARTICLE_LIMIT",
2120                         "HIDE_READ_SHOWS_SPECIAL", "COMBINED_DISPLAY_MODE") as $param) {
2121
2122                                  $params[strtolower($param)] = (int) get_pref($link, $param);
2123                  }
2124
2125                 $params["icons_url"] = ICONS_URL;
2126                 $params["cookie_lifetime"] = SESSION_COOKIE_LIFETIME;
2127                 $params["default_include_children"] = get_pref($link, "_DEFAULT_INCLUDE_CHILDREN");
2128                 $params["default_view_mode"] = get_pref($link, "_DEFAULT_VIEW_MODE");
2129                 $params["default_view_limit"] = (int) get_pref($link, "_DEFAULT_VIEW_LIMIT");
2130                 $params["default_view_order_by"] = get_pref($link, "_DEFAULT_VIEW_ORDER_BY");
2131                 $params["bw_limit"] = (int) $_SESSION["bw_limit"];
2132
2133                 $result = db_query($link, "SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
2134                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
2135
2136                 $max_feed_id = db_fetch_result($result, 0, "mid");
2137                 $num_feeds = db_fetch_result($result, 0, "nf");
2138
2139                 $params["max_feed_id"] = (int) $max_feed_id;
2140                 $params["num_feeds"] = (int) $num_feeds;
2141
2142                 $params["collapsed_feedlist"] = (int) get_pref($link, "_COLLAPSED_FEEDLIST");
2143
2144                 $params["csrf_token"] = $_SESSION["csrf_token"];
2145
2146                 return $params;
2147         }
2148
2149         function make_runtime_info($link) {
2150                 $data = array();
2151
2152                 $result = db_query($link, "SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
2153                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
2154
2155                 $max_feed_id = db_fetch_result($result, 0, "mid");
2156                 $num_feeds = db_fetch_result($result, 0, "nf");
2157
2158                 $data["max_feed_id"] = (int) $max_feed_id;
2159                 $data["num_feeds"] = (int) $num_feeds;
2160
2161                 $data['last_article_id'] = getLastArticleId($link);
2162                 $data['cdm_expanded'] = get_pref($link, 'CDM_EXPANDED');
2163
2164                 if (file_exists(LOCK_DIRECTORY . "/update_daemon.lock")) {
2165
2166                         $data['daemon_is_running'] = (int) file_is_locked("update_daemon.lock");
2167
2168                         if (time() - $_SESSION["daemon_stamp_check"] > 30) {
2169
2170                                 $stamp = (int) @file_get_contents(LOCK_DIRECTORY . "/update_daemon.stamp");
2171
2172                                 if ($stamp) {
2173                                         $stamp_delta = time() - $stamp;
2174
2175                                         if ($stamp_delta > 1800) {
2176                                                 $stamp_check = 0;
2177                                         } else {
2178                                                 $stamp_check = 1;
2179                                                 $_SESSION["daemon_stamp_check"] = time();
2180                                         }
2181
2182                                         $data['daemon_stamp_ok'] = $stamp_check;
2183
2184                                         $stamp_fmt = date("Y.m.d, G:i", $stamp);
2185
2186                                         $data['daemon_stamp'] = $stamp_fmt;
2187                                 }
2188                         }
2189                 }
2190
2191                 if ($_SESSION["last_version_check"] + 86400 + rand(-1000, 1000) < time()) {
2192                                 $new_version_details = @check_for_update($link);
2193
2194                                 $data['new_version_available'] = (int) ($new_version_details != false);
2195
2196                                 $_SESSION["last_version_check"] = time();
2197                                 $_SESSION["version_data"] = $new_version_details;
2198                 }
2199
2200                 return $data;
2201         }
2202
2203         function search_to_sql($link, $search, $match_on) {
2204
2205                 $search_query_part = "";
2206
2207                 $keywords = explode(" ", $search);
2208                 $query_keywords = array();
2209
2210                 foreach ($keywords as $k) {
2211                         if (strpos($k, "-") === 0) {
2212                                 $k = substr($k, 1);
2213                                 $not = "NOT";
2214                         } else {
2215                                 $not = "";
2216                         }
2217
2218                         $commandpair = explode(":", mb_strtolower($k), 2);
2219
2220                         if ($commandpair[0] == "note" && $commandpair[1]) {
2221
2222                                 if ($commandpair[1] == "true")
2223                                         array_push($query_keywords, "($not (note IS NOT NULL AND note != ''))");
2224                                 else
2225                                         array_push($query_keywords, "($not (note IS NULL OR note = ''))");
2226
2227                         } else if ($commandpair[0] == "star" && $commandpair[1]) {
2228
2229                                 if ($commandpair[1] == "true")
2230                                         array_push($query_keywords, "($not (marked = true))");
2231                                 else
2232                                         array_push($query_keywords, "($not (marked = false))");
2233
2234                         } else if ($commandpair[0] == "pub" && $commandpair[1]) {
2235
2236                                 if ($commandpair[1] == "true")
2237                                         array_push($query_keywords, "($not (published = true))");
2238                                 else
2239                                         array_push($query_keywords, "($not (published = false))");
2240
2241                         } else if (strpos($k, "@") === 0) {
2242
2243                                 $user_tz_string = get_pref($link, 'USER_TIMEZONE', $_SESSION['uid']);
2244                                 $orig_ts = strtotime(substr($k, 1));
2245                                 $k = date("Y-m-d", convert_timestamp($orig_ts, $user_tz_string, 'UTC'));
2246
2247                                 //$k = date("Y-m-d", strtotime(substr($k, 1)));
2248
2249                                 array_push($query_keywords, "(".SUBSTRING_FOR_DATE."(updated,1,LENGTH('$k')) $not = '$k')");
2250                         } else if ($match_on == "both") {
2251                                 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2252                                                 OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2253                         } else if ($match_on == "title") {
2254                                 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%'))");
2255                         } else if ($match_on == "content") {
2256                                 array_push($query_keywords, "(UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2257                         }
2258                 }
2259
2260                 $search_query_part = implode("AND", $query_keywords);
2261
2262                 return $search_query_part;
2263         }
2264
2265         function getParentCategories($link, $cat, $owner_uid) {
2266                 $rv = array();
2267
2268                 $result = db_query($link, "SELECT parent_cat FROM ttrss_feed_categories
2269                         WHERE id = '$cat' AND parent_cat IS NOT NULL AND owner_uid = $owner_uid");
2270
2271                 while ($line = db_fetch_assoc($result)) {
2272                         array_push($rv, $line["parent_cat"]);
2273                         $rv = array_merge($rv, getParentCategories($link, $line["parent_cat"], $owner_uid));
2274                 }
2275
2276                 return $rv;
2277         }
2278
2279         function getChildCategories($link, $cat, $owner_uid) {
2280                 $rv = array();
2281
2282                 $result = db_query($link, "SELECT id FROM ttrss_feed_categories
2283                         WHERE parent_cat = '$cat' AND owner_uid = $owner_uid");
2284
2285                 while ($line = db_fetch_assoc($result)) {
2286                         array_push($rv, $line["id"]);
2287                         $rv = array_merge($rv, getChildCategories($link, $line["id"], $owner_uid));
2288                 }
2289
2290                 return $rv;
2291         }
2292
2293         function queryFeedHeadlines($link, $feed, $limit, $view_mode, $cat_view, $search, $search_mode, $match_on, $override_order = false, $offset = 0, $owner_uid = 0, $filter = false, $since_id = 0, $include_children = false) {
2294
2295                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2296
2297                 $ext_tables_part = "";
2298
2299                         if ($search) {
2300
2301                                 if (SPHINX_ENABLED) {
2302                                         $ids = join(",", @sphinx_search($search, 0, 500));
2303
2304                                         if ($ids)
2305                                                 $search_query_part = "ref_id IN ($ids) AND ";
2306                                         else
2307                                                 $search_query_part = "ref_id = -1 AND ";
2308
2309                                 } else {
2310                                         $search_query_part = search_to_sql($link, $search, $match_on);
2311                                         $search_query_part .= " AND ";
2312                                 }
2313
2314                         } else {
2315                                 $search_query_part = "";
2316                         }
2317
2318                         if ($filter) {
2319
2320                                 if (DB_TYPE == "pgsql") {
2321                                         $query_strategy_part .= " AND updated > NOW() - INTERVAL '14 days' ";
2322                                 } else {
2323                                         $query_strategy_part .= " AND updated > DATE_SUB(NOW(), INTERVAL 14 DAY) ";
2324                                 }
2325
2326                                 $override_order = "updated DESC";
2327
2328                                 $filter_query_part = filter_to_sql($filter) . " AND";
2329                         } else {
2330                                 $filter_query_part = "";
2331                         }
2332
2333                         if ($since_id) {
2334                                 $since_id_part = "ttrss_entries.id > $since_id AND ";
2335                         } else {
2336                                 $since_id_part = "";
2337                         }
2338
2339                         $view_query_part = "";
2340
2341                         if ($view_mode == "adaptive" || $view_query_part == "noscores") {
2342                                 if ($search) {
2343                                         $view_query_part = " ";
2344                                 } else if ($feed != -1) {
2345                                         $unread = getFeedUnread($link, $feed, $cat_view);
2346
2347                                         if ($cat_view && $feed > 0 && $include_children)
2348                                                 $unread += getCategoryChildrenUnread($link, $feed);
2349
2350                                         if ($unread > 0) {
2351                                                 $view_query_part = " unread = true AND ";
2352                                         }
2353                                 }
2354                         }
2355
2356                         if ($view_mode == "marked") {
2357                                 $view_query_part = " marked = true AND ";
2358                         }
2359
2360                         if ($view_mode == "published") {
2361                                 $view_query_part = " published = true AND ";
2362                         }
2363
2364                         if ($view_mode == "unread") {
2365                                 $view_query_part = " unread = true AND ";
2366                         }
2367
2368                         if ($view_mode == "updated") {
2369                                 $view_query_part = " (last_read is null and unread = false) AND ";
2370                         }
2371
2372                         if ($limit > 0) {
2373                                 $limit_query_part = "LIMIT " . $limit;
2374                         }
2375
2376                         $allow_archived = false;
2377
2378                         $vfeed_query_part = "";
2379
2380                         // override query strategy and enable feed display when searching globally
2381                         if ($search && $search_mode == "all_feeds") {
2382                                 $query_strategy_part = "true";
2383                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2384                         /* tags */
2385                         } else if (!is_numeric($feed)) {
2386                                 $query_strategy_part = "true";
2387                                 $vfeed_query_part = "(SELECT title FROM ttrss_feeds WHERE
2388                                         id = feed_id) as feed_title,";
2389                         } else if ($search && $search_mode == "this_cat") {
2390                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2391
2392                                 if ($feed > 0) {
2393                                         if ($include_children) {
2394                                                 $subcats = getChildCategories($link, $feed, $owner_uid);
2395                                                 array_push($subcats, $feed);
2396                                                 $cats_qpart = join(",", $subcats);
2397                                         } else {
2398                                                 $cats_qpart = $feed;
2399                                         }
2400
2401                                         $query_strategy_part = "ttrss_feeds.cat_id IN ($cats_qpart)";
2402
2403                                 } else {
2404                                         $query_strategy_part = "ttrss_feeds.cat_id IS NULL";
2405                                 }
2406
2407                         } else if ($feed > 0) {
2408
2409                                 if ($cat_view) {
2410
2411                                         if ($feed > 0) {
2412                                                 if ($include_children) {
2413                                                         # sub-cats
2414                                                         $subcats = getChildCategories($link, $feed, $owner_uid);
2415
2416                                                         array_push($subcats, $feed);
2417                                                         $query_strategy_part = "cat_id IN (".
2418                                                                         implode(",", $subcats).")";
2419
2420                                                 } else {
2421                                                         $query_strategy_part = "cat_id = '$feed'";
2422                                                 }
2423
2424                                         } else {
2425                                                 $query_strategy_part = "cat_id IS NULL";
2426                                         }
2427
2428                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2429
2430                                 } else {
2431                                         $query_strategy_part = "feed_id = '$feed'";
2432                                 }
2433                         } else if ($feed == 0 && !$cat_view) { // archive virtual feed
2434                                 $query_strategy_part = "feed_id IS NULL";
2435                                 $allow_archived = true;
2436                         } else if ($feed == 0 && $cat_view) { // uncategorized
2437                                 $query_strategy_part = "cat_id IS NULL AND feed_id IS NOT NULL";
2438                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2439                         } else if ($feed == -1) { // starred virtual feed
2440                                 $query_strategy_part = "marked = true";
2441                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2442                         } else if ($feed == -2) { // published virtual feed OR labels category
2443
2444                                 if (!$cat_view) {
2445                                         $query_strategy_part = "published = true";
2446                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2447                                         $allow_archived = true;
2448
2449                                         if (!$override_order) $override_order = "last_read DESC, updated DESC";
2450                                 } else {
2451                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2452
2453                                         $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2454
2455                                         $query_strategy_part = "ttrss_labels2.id = ttrss_user_labels2.label_id AND
2456                                                 ttrss_user_labels2.article_id = ref_id";
2457
2458                                 }
2459                         } else if ($feed == -6) { // recently read
2460                                 $query_strategy_part = "unread = false AND last_read IS NOT NULL";
2461                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2462
2463                                 if (!$override_order) $override_order = "last_read DESC";
2464                         } else if ($feed == -3) { // fresh virtual feed
2465                                 $query_strategy_part = "unread = true AND score >= 0";
2466
2467                                 $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE", $owner_uid);
2468
2469                                 if (DB_TYPE == "pgsql") {
2470                                         $query_strategy_part .= " AND updated > NOW() - INTERVAL '$intl hour' ";
2471                                 } else {
2472                                         $query_strategy_part .= " AND updated > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
2473                                 }
2474
2475                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2476                         } else if ($feed == -4) { // all articles virtual feed
2477                                 $query_strategy_part = "true";
2478                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2479                         } else if ($feed <= -10) { // labels
2480                                 $label_id = -$feed - 11;
2481
2482                                 $query_strategy_part = "label_id = '$label_id' AND
2483                                         ttrss_labels2.id = ttrss_user_labels2.label_id AND
2484                                         ttrss_user_labels2.article_id = ref_id";
2485
2486                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2487                                 $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2488
2489                         } else {
2490                                 $query_strategy_part = "id > 0"; // dumb
2491                         }
2492
2493                         if (get_pref($link, "SORT_HEADLINES_BY_FEED_DATE", $owner_uid)) {
2494                                 $date_sort_field = "updated";
2495                         } else {
2496                                 $date_sort_field = "date_entered";
2497                         }
2498
2499                         if (get_pref($link, 'REVERSE_HEADLINES', $owner_uid)) {
2500                                 $order_by = "$date_sort_field";
2501                         } else {
2502                                 $order_by = "$date_sort_field DESC";
2503                         }
2504
2505                         if ($view_mode != "noscores") {
2506                                 $order_by = "score DESC, $order_by";
2507                         }
2508
2509                         if ($override_order) {
2510                                 $order_by = $override_order;
2511                         }
2512
2513                         $feed_title = "";
2514
2515                         if ($search) {
2516                                 $feed_title = T_sprintf("Search results: %s", $search);
2517                         } else {
2518                                 if ($cat_view) {
2519                                         $feed_title = getCategoryTitle($link, $feed);
2520                                 } else {
2521                                         if (is_numeric($feed) && $feed > 0) {
2522                                                 $result = db_query($link, "SELECT title,site_url,last_error
2523                                                         FROM ttrss_feeds WHERE id = '$feed' AND owner_uid = $owner_uid");
2524
2525                                                 $feed_title = db_fetch_result($result, 0, "title");
2526                                                 $feed_site_url = db_fetch_result($result, 0, "site_url");
2527                                                 $last_error = db_fetch_result($result, 0, "last_error");
2528                                         } else {
2529                                                 $feed_title = getFeedTitle($link, $feed);
2530                                         }
2531                                 }
2532                         }
2533
2534                         $content_query_part = "content as content_preview,";
2535
2536                         if (is_numeric($feed)) {
2537
2538                                 if ($feed >= 0) {
2539                                         $feed_kind = "Feeds";
2540                                 } else {
2541                                         $feed_kind = "Labels";
2542                                 }
2543
2544                                 if ($limit_query_part) {
2545                                         $offset_query_part = "OFFSET $offset";
2546                                 }
2547
2548                                 if ($vfeed_query_part && get_pref($link, 'VFEED_GROUP_BY_FEED', $owner_uid)) {
2549                                         if (!$override_order) {
2550                                                 $order_by = "ttrss_feeds.title, $order_by";
2551                                         }
2552                                 }
2553
2554                                 if (!$allow_archived) {
2555                                         $from_qpart = "ttrss_entries,ttrss_user_entries,ttrss_feeds$ext_tables_part";
2556                                         $feed_check_qpart = "ttrss_user_entries.feed_id = ttrss_feeds.id AND";
2557
2558                                 } else {
2559                                         $from_qpart = "ttrss_entries,ttrss_user_entries$ext_tables_part
2560                                                 LEFT JOIN ttrss_feeds ON (feed_id = ttrss_feeds.id)";
2561                                 }
2562
2563                                 $query = "SELECT DISTINCT
2564                                                 date_entered,
2565                                                 guid,
2566                                                 ttrss_entries.id,ttrss_entries.title,
2567                                                 updated,
2568                                                 label_cache,
2569                                                 tag_cache,
2570                                                 always_display_enclosures,
2571                                                 site_url,
2572                                                 note,
2573                                                 num_comments,
2574                                                 comments,
2575                                                 int_id,
2576                                                 unread,feed_id,marked,published,link,last_read,orig_feed_id,
2577                                                 ".SUBSTRING_FOR_DATE."(last_read,1,19) as last_read_noms,
2578                                                 $vfeed_query_part
2579                                                 $content_query_part
2580                                                 ".SUBSTRING_FOR_DATE."(updated,1,19) as updated_noms,
2581                                                 author,score
2582                                         FROM
2583                                                 $from_qpart
2584                                         WHERE
2585                                         $feed_check_qpart
2586                                         ttrss_user_entries.ref_id = ttrss_entries.id AND
2587                                         ttrss_user_entries.owner_uid = '$owner_uid' AND
2588                                         $search_query_part
2589                                         $filter_query_part
2590                                         $view_query_part
2591                                         $since_id_part
2592                                         $query_strategy_part ORDER BY $order_by
2593                                         $limit_query_part $offset_query_part";
2594
2595                                 if ($_REQUEST["debug"]) print $query;
2596
2597                                 $result = db_query($link, $query);
2598
2599                         } else {
2600                                 // browsing by tag
2601
2602                                 $select_qpart = "SELECT DISTINCT " .
2603                                                                 "date_entered," .
2604                                                                 "guid," .
2605                                                                 "note," .
2606                                                                 "ttrss_entries.id as id," .
2607                                                                 "title," .
2608                                                                 "updated," .
2609                                                                 "unread," .
2610                                                                 "feed_id," .
2611                                                                 "orig_feed_id," .
2612                                                                 "marked," .
2613                                                                 "num_comments, " .
2614                                                                 "comments, " .
2615                                                                 "tag_cache," .
2616                                                                 "label_cache," .
2617                                                                 "link," .
2618                                                                 "last_read," .
2619                                                                 SUBSTRING_FOR_DATE . "(last_read,1,19) as last_read_noms," .
2620                                                                 $since_id_part .
2621                                                                 $vfeed_query_part .
2622                                                                 $content_query_part .
2623                                                                 SUBSTRING_FOR_DATE . "(updated,1,19) as updated_noms," .
2624                                                                 "score ";
2625
2626                                 $feed_kind = "Tags";
2627                                 $all_tags = explode(",", $feed);
2628                                 if ($search_mode == 'any') {
2629                                         $tag_sql = "tag_name in (" . implode(", ", array_map("db_quote", $all_tags)) . ")";
2630                                         $from_qpart = " FROM ttrss_entries,ttrss_user_entries,ttrss_tags ";
2631                                         $where_qpart = " WHERE " .
2632                                                                    "ref_id = ttrss_entries.id AND " .
2633                                                                    "ttrss_user_entries.owner_uid = $owner_uid AND " .
2634                                                                    "post_int_id = int_id AND $tag_sql AND " .
2635                                                                    $view_query_part .
2636                                                                    $search_query_part .
2637                                                                    $query_strategy_part . " ORDER BY $order_by " .
2638                                                                    $limit_query_part;
2639
2640                                 } else {
2641                                         $i = 1;
2642                                         $sub_selects = array();
2643                                         $sub_ands = array();
2644                                         foreach ($all_tags as $term) {
2645                                                 array_push($sub_selects, "(SELECT post_int_id from ttrss_tags WHERE tag_name = " . db_quote($term) . " AND owner_uid = $owner_uid) as A$i");
2646                                                 $i++;
2647                                         }
2648                                         if ($i > 2) {
2649                                                 $x = 1;
2650                                                 $y = 2;
2651                                                 do {
2652                                                         array_push($sub_ands, "A$x.post_int_id = A$y.post_int_id");
2653                                                         $x++;
2654                                                         $y++;
2655                                                 } while ($y < $i);
2656                                         }
2657                                         array_push($sub_ands, "A1.post_int_id = ttrss_user_entries.int_id and ttrss_user_entries.owner_uid = $owner_uid");
2658                                         array_push($sub_ands, "ttrss_user_entries.ref_id = ttrss_entries.id");
2659                                         $from_qpart = " FROM " . implode(", ", $sub_selects) . ", ttrss_user_entries, ttrss_entries";
2660                                         $where_qpart = " WHERE " . implode(" AND ", $sub_ands);
2661                                 }
2662                                 //                              error_log("TAG SQL: " . $tag_sql);
2663                                 // $tag_sql = "tag_name = '$feed'";   DEFAULT way
2664
2665                                 //                              error_log("[". $select_qpart . "][" . $from_qpart . "][" .$where_qpart . "]");
2666                                 $result = db_query($link, $select_qpart . $from_qpart . $where_qpart);
2667                         }
2668
2669                         return array($result, $feed_title, $feed_site_url, $last_error);
2670
2671         }
2672
2673         function sanitize($link, $str, $force_strip_tags = false, $owner = false, $site_url = false) {
2674                 global $purifier;
2675
2676                 if (!$owner) $owner = $_SESSION["uid"];
2677
2678                 $res = trim($str); if (!$res) return '';
2679
2680                 // create global Purifier object if needed
2681                 if (!$purifier) {
2682                         require_once 'lib/htmlpurifier/library/HTMLPurifier.auto.php';
2683
2684                         $config = HTMLPurifier_Config::createDefault();
2685
2686                         $allowed = "p,a[href],i,em,b,strong,code,pre,blockquote,br,img[src|alt|title|align|hspace],ul,ol,li,h1,h2,h3,h4,s,object[classid|type|id|name|width|height|codebase],param[name|value],table,tr,td,span[class]";
2687
2688                         $config->set('HTML.SafeObject', true);
2689                         @$config->set('HTML', 'Allowed', $allowed);
2690                         $config->set('Output.FlashCompat', true);
2691                         $config->set('Attr.EnableID', true);
2692                         if (!defined('MOBILE_VERSION')) {
2693                                 @$config->set('Cache', 'SerializerPath', CACHE_DIR . "/htmlpurifier");
2694                         } else {
2695                                 @$config->set('Cache', 'SerializerPath', "../" . CACHE_DIR . "/htmlpurifier");
2696                         }
2697
2698                         $config->set('Filter.YouTube', true);
2699
2700                         $purifier = new HTMLPurifier($config);
2701                 }
2702
2703                 $res = $purifier->purify($res);
2704
2705                 if (get_pref($link, "STRIP_IMAGES", $owner)) {
2706                         $res = preg_replace('/<img[^>]+>/is', '', $res);
2707                 }
2708
2709                 if (strpos($res, "href=") === false)
2710                         $res = rewrite_urls($res);
2711
2712                 $charset_hack = '<head>
2713                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
2714                 </head>';
2715
2716                 $res = trim($res); if (!$res) return '';
2717
2718                 libxml_use_internal_errors(true);
2719
2720                 $doc = new DOMDocument();
2721                 $doc->loadHTML($charset_hack . $res);
2722                 $xpath = new DOMXPath($doc);
2723
2724                 $entries = $xpath->query('(//a[@href]|//img[@src])');
2725                 $br_inserted = 0;
2726
2727                 foreach ($entries as $entry) {
2728
2729                         if ($site_url) {
2730
2731                                 if ($entry->hasAttribute('href'))
2732                                         $entry->setAttribute('href',
2733                                                 rewrite_relative_url($site_url, $entry->getAttribute('href')));
2734
2735                                 if ($entry->hasAttribute('src'))
2736                                         if (preg_match('/^image.php\?i=[a-z0-9]+$/', $entry->getAttribute('src')) == 0)
2737                                                 $entry->setAttribute('src',
2738                                                         rewrite_relative_url($site_url, $entry->getAttribute('src')));
2739                         }
2740
2741                         if (strtolower($entry->nodeName) == "a") {
2742                                 $entry->setAttribute("target", "_blank");
2743                         }
2744
2745                         if (strtolower($entry->nodeName) == "img" && !$br_inserted) {
2746                                 $br = $doc->createElement("br");
2747
2748                                 if ($entry->parentNode->nextSibling) {
2749                                         $entry->parentNode->insertBefore($br, $entry->nextSibling);
2750                                         $br_inserted = 1;
2751                                 }
2752
2753                         }
2754                 }
2755
2756                 $node = $doc->getElementsByTagName('body')->item(0);
2757
2758                 return $doc->saveXML($node, LIBXML_NOEMPTYTAG);
2759         }
2760
2761         /**
2762          * Send by mail a digest of last articles.
2763          *
2764          * @param mixed $link The database connection.
2765          * @param integer $limit The maximum number of articles by digest.
2766          * @return boolean Return false if digests are not enabled.
2767          */
2768         function send_headlines_digests($link, $debug = false) {
2769
2770                 require_once 'lib/phpmailer/class.phpmailer.php';
2771
2772                 $user_limit = 15; // amount of users to process (e.g. emails to send out)
2773                 $limit = 1000; // maximum amount of headlines to include
2774
2775                 if ($debug) _debug("Sending digests, batch of max $user_limit users, headline limit = $limit");
2776
2777                 if (DB_TYPE == "pgsql") {
2778                         $interval_query = "last_digest_sent < NOW() - INTERVAL '1 days'";
2779                 } else if (DB_TYPE == "mysql") {
2780                         $interval_query = "last_digest_sent < DATE_SUB(NOW(), INTERVAL 1 DAY)";
2781                 }
2782
2783                 $result = db_query($link, "SELECT id,email FROM ttrss_users
2784                                 WHERE email != '' AND (last_digest_sent IS NULL OR $interval_query)");
2785
2786                 while ($line = db_fetch_assoc($result)) {
2787
2788                         if (get_pref($link, 'DIGEST_ENABLE', $line['id'], false)) {
2789                                 $preferred_ts = strtotime(get_pref($link, 'DIGEST_PREFERRED_TIME', $line['id'], '00:00'));
2790
2791                                 // try to send digests within 2 hours of preferred time
2792                                 if ($preferred_ts && time() >= $preferred_ts &&
2793                                                 time() - $preferred_ts <= 7200) {
2794
2795                                         if ($debug) print "Sending digest for UID:" . $line['id'] . " - " . $line["email"] . " ... ";
2796
2797                                         $do_catchup = get_pref($link, 'DIGEST_CATCHUP', $line['id'], false);
2798
2799                                         global $tz_offset;
2800
2801                                         // reset tz_offset global to prevent tz cache clash between users
2802                                         $tz_offset = -1;
2803
2804                                         $tuple = prepare_headlines_digest($link, $line["id"], 1, $limit);
2805                                         $digest = $tuple[0];
2806                                         $headlines_count = $tuple[1];
2807                                         $affected_ids = $tuple[2];
2808                                         $digest_text = $tuple[3];
2809
2810                                         if ($headlines_count > 0) {
2811
2812                                                 $mail = new PHPMailer();
2813
2814                                                 $mail->PluginDir = "lib/phpmailer/";
2815                                                 $mail->SetLanguage("en", "lib/phpmailer/language/");
2816
2817                                                 $mail->CharSet = "UTF-8";
2818
2819                                                 $mail->From = SMTP_FROM_ADDRESS;
2820                                                 $mail->FromName = SMTP_FROM_NAME;
2821                                                 $mail->AddAddress($line["email"], $line["login"]);
2822
2823                                                 if (SMTP_HOST) {
2824                                                         $mail->Host = SMTP_HOST;
2825                                                         $mail->Mailer = "smtp";
2826                                                         $mail->SMTPAuth = SMTP_LOGIN != '';
2827                                                         $mail->Username = SMTP_LOGIN;
2828                                                         $mail->Password = SMTP_PASSWORD;
2829                                                 }
2830
2831                                                 $mail->IsHTML(true);
2832                                                 $mail->Subject = DIGEST_SUBJECT;
2833                                                 $mail->Body = $digest;
2834                                                 $mail->AltBody = $digest_text;
2835
2836                                                 $rc = $mail->Send();
2837
2838                                                 if (!$rc && $debug) print "ERROR: " . $mail->ErrorInfo;
2839
2840                                                 if ($debug) print "RC=$rc\n";
2841
2842                                                 if ($rc && $do_catchup) {
2843                                                         if ($debug) print "Marking affected articles as read...\n";
2844                                                         catchupArticlesById($link, $affected_ids, 0, $line["id"]);
2845                                                 }
2846                                         } else {
2847                                                 if ($debug) print "No headlines\n";
2848                                         }
2849
2850                                         db_query($link, "UPDATE ttrss_users SET last_digest_sent = NOW()
2851                                                 WHERE id = " . $line["id"]);
2852
2853                                 }
2854                         }
2855                 }
2856
2857                 if ($debug) _debug("All done.");
2858
2859         }
2860
2861         function prepare_headlines_digest($link, $user_id, $days = 1, $limit = 1000) {
2862
2863                 require_once "lib/MiniTemplator.class.php";
2864
2865                 $tpl = new MiniTemplator;
2866                 $tpl_t = new MiniTemplator;
2867
2868                 $tpl->readTemplateFromFile("templates/digest_template_html.txt");
2869                 $tpl_t->readTemplateFromFile("templates/digest_template.txt");
2870
2871                 $user_tz_string = get_pref($link, 'USER_TIMEZONE', $user_id);
2872                 $local_ts = convert_timestamp(time(), 'UTC', $user_tz_string);
2873
2874                 $tpl->setVariable('CUR_DATE', date('Y/m/d', $local_ts));
2875                 $tpl->setVariable('CUR_TIME', date('G:i', $local_ts));
2876
2877                 $tpl_t->setVariable('CUR_DATE', date('Y/m/d', $local_ts));
2878                 $tpl_t->setVariable('CUR_TIME', date('G:i', $local_ts));
2879
2880                 $affected_ids = array();
2881
2882                 if (DB_TYPE == "pgsql") {
2883                         $interval_query = "ttrss_entries.date_updated > NOW() - INTERVAL '$days days'";
2884                 } else if (DB_TYPE == "mysql") {
2885                         $interval_query = "ttrss_entries.date_updated > DATE_SUB(NOW(), INTERVAL $days DAY)";
2886                 }
2887
2888                 $result = db_query($link, "SELECT ttrss_entries.title,
2889                                 ttrss_feeds.title AS feed_title,
2890                                 COALESCE(ttrss_feed_categories.title, '".__('Uncategorized')."') AS cat_title,
2891                                 date_updated,
2892                                 ttrss_user_entries.ref_id,
2893                                 link,
2894                                 score,
2895                                 content,
2896                                 ".SUBSTRING_FOR_DATE."(last_updated,1,19) AS last_updated
2897                         FROM
2898                                 ttrss_user_entries,ttrss_entries,ttrss_feeds
2899                         LEFT JOIN
2900                                 ttrss_feed_categories ON (cat_id = ttrss_feed_categories.id)
2901                         WHERE
2902                                 ref_id = ttrss_entries.id AND feed_id = ttrss_feeds.id
2903                                 AND include_in_digest = true
2904                                 AND $interval_query
2905                                 AND ttrss_user_entries.owner_uid = $user_id
2906                                 AND unread = true
2907                                 AND score >= 0
2908                         ORDER BY ttrss_feed_categories.title, ttrss_feeds.title, score DESC, date_updated DESC
2909                         LIMIT $limit");
2910
2911                 $cur_feed_title = "";
2912
2913                 $headlines_count = db_num_rows($result);
2914
2915                 $headlines = array();
2916
2917                 while ($line = db_fetch_assoc($result)) {
2918                         array_push($headlines, $line);
2919                 }
2920
2921                 for ($i = 0; $i < sizeof($headlines); $i++) {
2922
2923                         $line = $headlines[$i];
2924
2925                         array_push($affected_ids, $line["ref_id"]);
2926
2927                         $updated = make_local_datetime($link, $line['last_updated'], false,
2928                                 $user_id);
2929
2930 /*                      if ($line["score"] != 0) {
2931                                 if ($line["score"] > 0) $line["score"] = '+' . $line["score"];
2932
2933                                 $line["title"] .= " (".$line['score'].")";
2934                         } */
2935
2936                         if (get_pref($link, 'ENABLE_FEED_CATS', $user_id)) {
2937                                 $line['feed_title'] = $line['cat_title'] . " / " . $line['feed_title'];
2938                         }
2939
2940                         $tpl->setVariable('FEED_TITLE', $line["feed_title"]);
2941                         $tpl->setVariable('ARTICLE_TITLE', $line["title"]);
2942                         $tpl->setVariable('ARTICLE_LINK', $line["link"]);
2943                         $tpl->setVariable('ARTICLE_UPDATED', $updated);
2944                         $tpl->setVariable('ARTICLE_EXCERPT',
2945                                 truncate_string(strip_tags($line["content"]), 300));
2946 //                      $tpl->setVariable('ARTICLE_CONTENT',
2947 //                              strip_tags($article_content));
2948
2949                         $tpl->addBlock('article');
2950
2951                         $tpl_t->setVariable('FEED_TITLE', $line["feed_title"]);
2952                         $tpl_t->setVariable('ARTICLE_TITLE', $line["title"]);
2953                         $tpl_t->setVariable('ARTICLE_LINK', $line["link"]);
2954                         $tpl_t->setVariable('ARTICLE_UPDATED', $updated);
2955 //                      $tpl_t->setVariable('ARTICLE_EXCERPT',
2956 //                              truncate_string(strip_tags($line["excerpt"]), 100));
2957
2958                         $tpl_t->addBlock('article');
2959
2960                         if ($headlines[$i]['feed_title'] != $headlines[$i+1]['feed_title']) {
2961                                 $tpl->addBlock('feed');
2962                                 $tpl_t->addBlock('feed');
2963                         }
2964
2965                 }
2966
2967                 $tpl->addBlock('digest');
2968                 $tpl->generateOutputToString($tmp);
2969
2970                 $tpl_t->addBlock('digest');
2971                 $tpl_t->generateOutputToString($tmp_t);
2972
2973                 return array($tmp, $headlines_count, $affected_ids, $tmp_t);
2974         }
2975
2976         function check_for_update($link) {
2977                 if (CHECK_FOR_NEW_VERSION && $_SESSION['access_level'] >= 10) {
2978                         $version_url = "http://tt-rss.org/version.php?ver=" . VERSION;
2979
2980                         $version_data = @fetch_file_contents($version_url);
2981
2982                         if ($version_data) {
2983                                 $version_data = json_decode($version_data, true);
2984                                 if ($version_data && $version_data['version']) {
2985
2986                                         if (version_compare(VERSION, $version_data['version']) == -1) {
2987                                                 return $version_data;
2988                                         }
2989                                 }
2990                         }
2991                 }
2992                 return false;
2993         }
2994
2995         function markArticlesById($link, $ids, $cmode) {
2996
2997                 $tmp_ids = array();
2998
2999                 foreach ($ids as $id) {
3000                         array_push($tmp_ids, "ref_id = '$id'");
3001                 }
3002
3003                 $ids_qpart = join(" OR ", $tmp_ids);
3004
3005                 if ($cmode == 0) {
3006                         db_query($link, "UPDATE ttrss_user_entries SET
3007                         marked = false,last_read = NOW()
3008                         WHERE ($ids_qpart) AND owner_uid = " . $_SESSION["uid"]);
3009                 } else if ($cmode == 1) {
3010                         db_query($link, "UPDATE ttrss_user_entries SET
3011                         marked = true
3012                         WHERE ($ids_qpart) AND owner_uid = " . $_SESSION["uid"]);
3013                 } else {
3014                         db_query($link, "UPDATE ttrss_user_entries SET
3015                         marked = NOT marked,last_read = NOW()
3016                         WHERE ($ids_qpart) AND owner_uid = " . $_SESSION["uid"]);
3017                 }
3018         }
3019
3020         function publishArticlesById($link, $ids, $cmode) {
3021
3022                 $tmp_ids = array();
3023
3024                 foreach ($ids as $id) {
3025                         array_push($tmp_ids, "ref_id = '$id'");
3026                 }
3027
3028                 $ids_qpart = join(" OR ", $tmp_ids);
3029
3030                 if ($cmode == 0) {
3031                         db_query($link, "UPDATE ttrss_user_entries SET
3032                         published = false,last_read = NOW()
3033                         WHERE ($ids_qpart) AND owner_uid = " . $_SESSION["uid"]);
3034                 } else if ($cmode == 1) {
3035                         db_query($link, "UPDATE ttrss_user_entries SET
3036                         published = true,last_read = NOW()
3037                         WHERE ($ids_qpart) AND owner_uid = " . $_SESSION["uid"]);
3038                 } else {
3039                         db_query($link, "UPDATE ttrss_user_entries SET
3040                         published = NOT published,last_read = NOW()
3041                         WHERE ($ids_qpart) AND owner_uid = " . $_SESSION["uid"]);
3042                 }
3043
3044                 if (PUBSUBHUBBUB_HUB) {
3045                         $rss_link = get_self_url_prefix() .
3046                                 "/public.php?op=rss&id=-2&key=" .
3047                                 get_feed_access_key($link, -2, false);
3048
3049                         $p = new Publisher(PUBSUBHUBBUB_HUB);
3050
3051                         $pubsub_result = $p->publish_update($rss_link);
3052                 }
3053         }
3054
3055         function catchupArticlesById($link, $ids, $cmode, $owner_uid = false) {
3056
3057                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3058                 if (count($ids) == 0) return;
3059
3060                 $tmp_ids = array();
3061
3062                 foreach ($ids as $id) {
3063                         array_push($tmp_ids, "ref_id = '$id'");
3064                 }
3065
3066                 $ids_qpart = join(" OR ", $tmp_ids);
3067
3068                 if ($cmode == 0) {
3069                         db_query($link, "UPDATE ttrss_user_entries SET
3070                         unread = false,last_read = NOW()
3071                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
3072                 } else if ($cmode == 1) {
3073                         db_query($link, "UPDATE ttrss_user_entries SET
3074                         unread = true
3075                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
3076                 } else {
3077                         db_query($link, "UPDATE ttrss_user_entries SET
3078                         unread = NOT unread,last_read = NOW()
3079                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
3080                 }
3081
3082                 /* update ccache */
3083
3084                 $result = db_query($link, "SELECT DISTINCT feed_id FROM ttrss_user_entries
3085                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
3086
3087                 while ($line = db_fetch_assoc($result)) {
3088                         ccache_update($link, $line["feed_id"], $owner_uid);
3089                 }
3090         }
3091
3092         function catchupArticleById($link, $id, $cmode) {
3093
3094                 if ($cmode == 0) {
3095                         db_query($link, "UPDATE ttrss_user_entries SET
3096                         unread = false,last_read = NOW()
3097                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
3098                 } else if ($cmode == 1) {
3099                         db_query($link, "UPDATE ttrss_user_entries SET
3100                         unread = true
3101                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
3102                 } else {
3103                         db_query($link, "UPDATE ttrss_user_entries SET
3104                         unread = NOT unread,last_read = NOW()
3105                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
3106                 }
3107
3108                 $feed_id = getArticleFeed($link, $id);
3109                 ccache_update($link, $feed_id, $_SESSION["uid"]);
3110         }
3111
3112         function make_guid_from_title($title) {
3113                 return preg_replace("/[ \"\',.:;]/", "-",
3114                         mb_strtolower(strip_tags($title), 'utf-8'));
3115         }
3116
3117         function get_article_tags($link, $id, $owner_uid = 0, $tag_cache = false) {
3118
3119                 $a_id = db_escape_string($id);
3120
3121                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3122
3123                 $query = "SELECT DISTINCT tag_name,
3124                         owner_uid as owner FROM
3125                         ttrss_tags WHERE post_int_id = (SELECT int_id FROM ttrss_user_entries WHERE
3126                         ref_id = '$a_id' AND owner_uid = '$owner_uid' LIMIT 1) ORDER BY tag_name";
3127
3128                 $obj_id = md5("TAGS:$owner_uid:$id");
3129                 $tags = array();
3130
3131                 /* check cache first */
3132
3133                 if ($tag_cache === false) {
3134                         $result = db_query($link, "SELECT tag_cache FROM ttrss_user_entries
3135                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
3136
3137                         $tag_cache = db_fetch_result($result, 0, "tag_cache");
3138                 }
3139
3140                 if ($tag_cache) {
3141                         $tags = explode(",", $tag_cache);
3142                 } else {
3143
3144                         /* do it the hard way */
3145
3146                         $tmp_result = db_query($link, $query);
3147
3148                         while ($tmp_line = db_fetch_assoc($tmp_result)) {
3149                                 array_push($tags, $tmp_line["tag_name"]);
3150                         }
3151
3152                         /* update the cache */
3153
3154                         $tags_str = db_escape_string(join(",", $tags));
3155
3156                         db_query($link, "UPDATE ttrss_user_entries
3157                                 SET tag_cache = '$tags_str' WHERE ref_id = '$id'
3158                                 AND owner_uid = $owner_uid");
3159                 }
3160
3161                 return $tags;
3162         }
3163
3164         function trim_array($array) {
3165                 $tmp = $array;
3166                 array_walk($tmp, 'trim');
3167                 return $tmp;
3168         }
3169
3170         function tag_is_valid($tag) {
3171                 if ($tag == '') return false;
3172                 if (preg_match("/^[0-9]*$/", $tag)) return false;
3173                 if (mb_strlen($tag) > 250) return false;
3174
3175                 if (function_exists('iconv')) {
3176                         $tag = iconv("utf-8", "utf-8", $tag);
3177                 }
3178
3179                 if (!$tag) return false;
3180
3181                 return true;
3182         }
3183
3184         function render_login_form($link, $form_id = 0) {
3185                 switch ($form_id) {
3186                 case 0:
3187                         require_once "login_form.php";
3188                         break;
3189                 case 1:
3190                         require_once "mobile/login_form.php";
3191                         break;
3192                 }
3193                 exit;
3194         }
3195
3196         // from http://developer.apple.com/internet/safari/faq.html
3197         function no_cache_incantation() {
3198                 header("Expires: Mon, 22 Dec 1980 00:00:00 GMT"); // Happy birthday to me :)
3199                 header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT"); // always modified
3200                 header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0"); // HTTP/1.1
3201                 header("Cache-Control: post-check=0, pre-check=0", false);
3202                 header("Pragma: no-cache"); // HTTP/1.0
3203         }
3204
3205         function format_warning($msg, $id = "") {
3206                 global $link;
3207                 return "<div class=\"warning\" id=\"$id\">
3208                         <img src=\"".theme_image($link, "images/sign_excl.png")."\">$msg</div>";
3209         }
3210
3211         function format_notice($msg, $id = "") {
3212                 global $link;
3213                 return "<div class=\"notice\" id=\"$id\">
3214                         <img src=\"".theme_image($link, "images/sign_info.png")."\">$msg</div>";
3215         }
3216
3217         function format_error($msg, $id = "") {
3218                 global $link;
3219                 return "<div class=\"error\" id=\"$id\">
3220                         <img src=\"".theme_image($link, "images/sign_excl.png")."\">$msg</div>";
3221         }
3222
3223         function print_notice($msg) {
3224                 return print format_notice($msg);
3225         }
3226
3227         function print_warning($msg) {
3228                 return print format_warning($msg);
3229         }
3230
3231         function print_error($msg) {
3232                 return print format_error($msg);
3233         }
3234
3235
3236         function T_sprintf() {
3237                 $args = func_get_args();
3238                 return vsprintf(__(array_shift($args)), $args);
3239         }
3240
3241         function format_inline_player($link, $url, $ctype) {
3242
3243                 $entry = "";
3244
3245                 if (strpos($ctype, "audio/") === 0) {
3246
3247                         if ($_SESSION["hasAudio"] && (strpos($ctype, "ogg") !== false ||
3248                                 strpos($_SERVER['HTTP_USER_AGENT'], "Chrome") !== false ||
3249                                 strpos($_SERVER['HTTP_USER_AGENT'], "Safari") !== false )) {
3250
3251                                 $id = 'AUDIO-' . uniqid();
3252
3253                                 $entry .= "<audio id=\"$id\"\">
3254                                         <source src=\"$url\"></source>
3255                                         </audio>";
3256
3257                                 $entry .= "<span onclick=\"player(this)\"
3258                                         title=\"".__("Click to play")."\" status=\"0\"
3259                                         class=\"player\" audio-id=\"$id\">".__("Play")."</span>";
3260
3261                         } else {
3262
3263                                 $entry .= "<object type=\"application/x-shockwave-flash\"
3264                                         data=\"lib/button/musicplayer.swf?song_url=$url\"
3265                                         width=\"17\" height=\"17\" style='float : left; margin-right : 5px;'>
3266                                         <param name=\"movie\"
3267                                                 value=\"lib/button/musicplayer.swf?song_url=$url\" />
3268                                         </object>";
3269                         }
3270                 }
3271
3272                 $filename = substr($url, strrpos($url, "/")+1);
3273
3274                 $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
3275                         $filename . " (" . $ctype . ")" . "</a>";
3276
3277                 return $entry;
3278         }
3279
3280         function format_article($link, $id, $mark_as_read = true, $zoom_mode = false, $owner_uid = false) {
3281                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3282
3283                 $rv = array();
3284
3285                 $rv['id'] = $id;
3286
3287                 /* we can figure out feed_id from article id anyway, why do we
3288                  * pass feed_id here? let's ignore the argument :( */
3289
3290                 $result = db_query($link, "SELECT feed_id FROM ttrss_user_entries
3291                         WHERE ref_id = '$id'");
3292
3293                 $feed_id = (int) db_fetch_result($result, 0, "feed_id");
3294
3295                 $rv['feed_id'] = $feed_id;
3296
3297                 //if (!$zoom_mode) { print "<article id='$id'><![CDATA["; };
3298
3299                 $result = db_query($link, "SELECT rtl_content, always_display_enclosures FROM ttrss_feeds
3300                         WHERE id = '$feed_id' AND owner_uid = $owner_uid");
3301
3302                 if (db_num_rows($result) == 1) {
3303                         $rtl_content = sql_bool_to_bool(db_fetch_result($result, 0, "rtl_content"));
3304                         $always_display_enclosures = sql_bool_to_bool(db_fetch_result($result, 0, "always_display_enclosures"));
3305                 } else {
3306                         $rtl_content = false;
3307                         $always_display_enclosures = false;
3308                 }
3309
3310                 if ($rtl_content) {
3311                         $rtl_tag = "dir=\"RTL\"";
3312                         $rtl_class = "RTL";
3313                 } else {
3314                         $rtl_tag = "";
3315                         $rtl_class = "";
3316                 }
3317
3318                 if ($mark_as_read) {
3319                         $result = db_query($link, "UPDATE ttrss_user_entries
3320                                 SET unread = false,last_read = NOW()
3321                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
3322
3323                         ccache_update($link, $feed_id, $owner_uid);
3324                 }
3325
3326                 $result = db_query($link, "SELECT title,link,content,feed_id,comments,int_id,
3327                         ".SUBSTRING_FOR_DATE."(updated,1,16) as updated,
3328                         (SELECT icon_url FROM ttrss_feeds WHERE id = feed_id) as icon_url,
3329                         (SELECT site_url FROM ttrss_feeds WHERE id = feed_id) as site_url,
3330                         num_comments,
3331                         tag_cache,
3332                         author,
3333                         orig_feed_id,
3334                         note
3335                         FROM ttrss_entries,ttrss_user_entries
3336                         WHERE   id = '$id' AND ref_id = id AND owner_uid = $owner_uid");
3337
3338                 if ($result) {
3339
3340                         $line = db_fetch_assoc($result);
3341
3342                         if ($line["icon_url"]) {
3343                                 $feed_icon = "<img src=\"" . $line["icon_url"] . "\">";
3344                         } else {
3345                                 $feed_icon = "&nbsp;";
3346                         }
3347
3348                         $feed_site_url = $line['site_url'];
3349
3350                         $num_comments = $line["num_comments"];
3351                         $entry_comments = "";
3352
3353                         if ($num_comments > 0) {
3354                                 if ($line["comments"]) {
3355                                         $comments_url = $line["comments"];
3356                                 } else {
3357                                         $comments_url = $line["link"];
3358                                 }
3359                                 $entry_comments = "<a target='_blank' href=\"$comments_url\">$num_comments comments</a>";
3360                         } else {
3361                                 if ($line["comments"] && $line["link"] != $line["comments"]) {
3362                                         $entry_comments = "<a target='_blank' href=\"".$line["comments"]."\">comments</a>";
3363                                 }
3364                         }
3365
3366                         if ($zoom_mode) {
3367                                 header("Content-Type: text/html");
3368                                 $rv['content'] .= "<html><head>
3369                                                 <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"/>
3370                                                 <title>Tiny Tiny RSS - ".$line["title"]."</title>
3371                                                 <link rel=\"stylesheet\" type=\"text/css\" href=\"tt-rss.css\">
3372                                         </head><body>";
3373                         }
3374
3375                         $title_escaped = db_escape_string($line['title']);
3376
3377                         $rv['content'] .= "<div id=\"PTITLE-$id\" style=\"display : none\">" .
3378                                 truncate_string(strip_tags($line['title']), 15) . "</div>";
3379
3380                         $rv['content'] .= "<div id=\"PTITLE-FULL-$id\" style=\"display : none\">" .
3381                                 strip_tags($line['title']) . "</div>";
3382
3383                         $rv['content'] .= "<div class=\"postReply\" id=\"POST-$id\">";
3384
3385                         $rv['content'] .= "<div onclick=\"return postClicked(event, $id)\"
3386                                 class=\"postHeader\" id=\"POSTHDR-$id\">";
3387
3388                         $entry_author = $line["author"];
3389
3390                         if ($entry_author) {
3391                                 $entry_author = __(" - ") . $entry_author;
3392                         }
3393
3394                         $parsed_updated = make_local_datetime($link, $line["updated"], true,
3395                                 $owner_uid, true);
3396
3397                         $rv['content'] .= "<div class=\"postDate$rtl_class\">$parsed_updated</div>";
3398
3399                         if ($line["link"]) {
3400                                 $rv['content'] .= "<div class='postTitle'><a target='_blank'
3401                                         title=\"".htmlspecialchars($line['title'])."\"
3402                                         href=\"" .
3403                                         $line["link"] . "\">" .
3404                                         $line["title"] .
3405                                         "<span class='author'>$entry_author</span></a></div>";
3406                         } else {
3407                                 $rv['content'] .= "<div class='postTitle'>" . $line["title"] . "$entry_author</div>";
3408                         }
3409
3410                         $tag_cache = $line["tag_cache"];
3411
3412                         if (!$tag_cache)
3413                                 $tags = get_article_tags($link, $id, $owner_uid);
3414                         else
3415                                 $tags = explode(",", $tag_cache);
3416
3417                         $tags_str = format_tags_string($tags, $id);
3418                         $tags_str_full = join(", ", $tags);
3419
3420                         if (!$tags_str_full) $tags_str_full = __("no tags");
3421
3422                         if (!$entry_comments) $entry_comments = "&nbsp;"; # placeholder
3423
3424                         $rv['content'] .= "<div class='postTags' style='float : right'>
3425                                 <img src='".theme_image($link, 'images/tag.png')."'
3426                                 class='tagsPic' alt='Tags' title='Tags'>&nbsp;";
3427
3428                         if (!$zoom_mode) {
3429                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>
3430                                         <a title=\"".__('Edit tags for this article')."\"
3431                                         href=\"#\" onclick=\"editArticleTags($id, $feed_id)\">(+)</a>";
3432
3433                                 $rv['content'] .= "<div dojoType=\"dijit.Tooltip\"
3434                                         id=\"ATSTRTIP-$id\" connectId=\"ATSTR-$id\"
3435                                         position=\"below\">$tags_str_full</div>";
3436
3437                                 $rv['content'] .= "<img src=\"".theme_image($link, 'images/art-zoom.png')."\"
3438                                                 class='tagsPic' style=\"cursor : pointer\"
3439                                                 onclick=\"postOpenInNewTab(event, $id)\"
3440                                                 alt='Zoom' title='".__('Open article in new tab')."'>";
3441
3442                                 $button_plugins = explode(",", ARTICLE_BUTTON_PLUGINS);
3443
3444                                 foreach ($button_plugins as $p) {
3445                                         $pclass = trim("button_${p}");
3446
3447                                         if (class_exists($pclass)) {
3448                                                 $plugin = new $pclass($link);
3449                                                 $rv['content'] .= $plugin->render($id, $line);
3450                                         }
3451                                 }
3452
3453                                 $rv['content'] .= "<img src=\"".theme_image($link, 'images/digest_checkbox.png')."\"
3454                                                 class='tagsPic' style=\"cursor : pointer\"
3455                                                 onclick=\"closeArticlePanel($id)\"
3456                                                 title='".__('Close article')."'>";
3457
3458                         } else {
3459                                 $tags_str = strip_tags($tags_str);
3460                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>";
3461                         }
3462                         $rv['content'] .= "</div>";
3463                         $rv['content'] .= "<div clear='both'>$entry_comments</div>";
3464
3465                         if ($line["orig_feed_id"]) {
3466
3467                                 $tmp_result = db_query($link, "SELECT * FROM ttrss_archived_feeds
3468                                         WHERE id = ".$line["orig_feed_id"]);
3469
3470                                 if (db_num_rows($tmp_result) != 0) {
3471
3472                                         $rv['content'] .= "<div clear='both'>";
3473                                         $rv['content'] .= __("Originally from:");
3474
3475                                         $rv['content'] .= "&nbsp;";
3476
3477                                         $tmp_line = db_fetch_assoc($tmp_result);
3478
3479                                         $rv['content'] .= "<a target='_blank'
3480                                                 href=' " . htmlspecialchars($tmp_line['site_url']) . "'>" .
3481                                                 $tmp_line['title'] . "</a>";
3482
3483                                         $rv['content'] .= "&nbsp;";
3484
3485                                         $rv['content'] .= "<a target='_blank' href='" . htmlspecialchars($tmp_line['feed_url']) . "'>";
3486                                         $rv['content'] .= "<img title='".__('Feed URL')."'class='tinyFeedIcon' src='images/pub_set.png'></a>";
3487
3488                                         $rv['content'] .= "</div>";
3489                                 }
3490                         }
3491
3492                         $rv['content'] .= "</div>";
3493
3494                         $rv['content'] .= "<div id=\"POSTNOTE-$id\">";
3495                                 if ($line['note']) {
3496                                         $rv['content'] .= format_article_note($id, $line['note']);
3497                                 }
3498                         $rv['content'] .= "</div>";
3499
3500                         $rv['content'] .= "<div class=\"postIcon\">" .
3501                                 "<a target=\"_blank\" title=\"".__("Visit the website")."\"$
3502                                 href=\"".htmlspecialchars($feed_site_url)."\">".
3503                                 $feed_icon . "</a></div>";
3504
3505                         $rv['content'] .= "<div class=\"postContent\">";
3506
3507                         // N-grams
3508
3509                         if (DB_TYPE == "pgsql" and defined('_NGRAM_TITLE_RELATED_THRESHOLD')) {
3510
3511                                 $ngram_result = db_query($link, "SELECT id,title FROM
3512                                                 ttrss_entries,ttrss_user_entries
3513                                         WHERE ref_id = id AND updated >= NOW() - INTERVAL '7 day'
3514                                                 AND similarity(title, '$title_escaped') >= "._NGRAM_TITLE_RELATED_THRESHOLD."
3515                                                 AND title != '$title_escaped'
3516                                                 AND owner_uid = $owner_uid");
3517
3518                                 if (db_num_rows($ngram_result) > 0) {
3519                                         $rv['content'] .= "<div dojoType=\"dijit.form.DropDownButton\">".
3520                                                 "<span>" . __('Related')."</span>";
3521                                         $rv['content'] .= "<div dojoType=\"dijit.Menu\" style=\"display: none;\">";
3522
3523                                         while ($nline = db_fetch_assoc($ngram_result)) {
3524                                                 $rv['content'] .= "<div onclick=\"hlOpenInNewTab(null,".$nline['id'].")\"
3525                                                         dojoType=\"dijit.MenuItem\">".$nline['title']."</div>";
3526
3527                                         }
3528                                         $rv['content'] .= "</div></div><br/";
3529                                 }
3530                         }
3531
3532                         $article_content = sanitize($link, $line["content"], false, $owner_uid,
3533                                 $feed_site_url);
3534
3535                         $rv['content'] .= $article_content;
3536
3537                         $rv['content'] .= format_article_enclosures($link, $id,
3538                                 $always_display_enclosures, $article_content);
3539
3540                         $rv['content'] .= "</div>";
3541
3542                         $rv['content'] .= "</div>";
3543
3544                 }
3545
3546                 if ($zoom_mode) {
3547                         $rv['content'] .= "
3548                                 <div style=\"text-align : center\">
3549                                 <button onclick=\"return window.close()\">".
3550                                         __("Close this window")."</button></div>";
3551                         $rv['content'] .= "</body></html>";
3552                 }
3553
3554                 return $rv;
3555
3556         }
3557
3558         function print_checkpoint($n, $s) {
3559                 $ts = getmicrotime();
3560                 echo sprintf("<!-- CP[$n] %.4f seconds -->", $ts - $s);
3561                 return $ts;
3562         }
3563
3564         function sanitize_tag($tag) {
3565                 $tag = trim($tag);
3566
3567                 $tag = mb_strtolower($tag, 'utf-8');
3568
3569                 $tag = preg_replace('/[\'\"\+\>\<]/', "", $tag);
3570
3571 //              $tag = str_replace('"', "", $tag);
3572 //              $tag = str_replace("+", " ", $tag);
3573                 $tag = str_replace("technorati tag: ", "", $tag);
3574
3575                 return $tag;
3576         }
3577
3578         function get_self_url_prefix() {
3579                 return SELF_URL_PATH;
3580         }
3581
3582         function opml_publish_url($link){
3583
3584                 $url_path = get_self_url_prefix();
3585                 $url_path .= "/opml.php?op=publish&key=" .
3586                         get_feed_access_key($link, 'OPML:Publish', false, $_SESSION["uid"]);
3587
3588                 return $url_path;
3589         }
3590
3591         /**
3592          * Purge a feed contents, marked articles excepted.
3593          *
3594          * @param mixed $link The database connection.
3595          * @param integer $id The id of the feed to purge.
3596          * @return void
3597          */
3598         function clear_feed_articles($link, $id) {
3599
3600                 if ($id != 0) {
3601                         $result = db_query($link, "DELETE FROM ttrss_user_entries
3602                         WHERE feed_id = '$id' AND marked = false AND owner_uid = " . $_SESSION["uid"]);
3603                 } else {
3604                         $result = db_query($link, "DELETE FROM ttrss_user_entries
3605                         WHERE feed_id IS NULL AND marked = false AND owner_uid = " . $_SESSION["uid"]);
3606                 }
3607
3608                 $result = db_query($link, "DELETE FROM ttrss_entries WHERE
3609                         (SELECT COUNT(int_id) FROM ttrss_user_entries WHERE ref_id = id) = 0");
3610
3611                 ccache_update($link, $id, $_SESSION['uid']);
3612         } // function clear_feed_articles
3613
3614         /**
3615          * Compute the Mozilla Firefox feed adding URL from server HOST and REQUEST_URI.
3616          *
3617          * @return string The Mozilla Firefox feed adding URL.
3618          */
3619         function add_feed_url() {
3620                 //$url_path = ($_SERVER['HTTPS'] != "on" ? 'http://' :  'https://') . $_SERVER["HTTP_HOST"] . parse_url($_SERVER["REQUEST_URI"], PHP_URL_PATH);
3621
3622                 $url_path = get_self_url_prefix() .
3623                         "/public.php?op=subscribe&feed_url=%s";
3624                 return $url_path;
3625         } // function add_feed_url
3626
3627         function encrypt_password($pass, $salt = '', $mode2 = false) {
3628                 if ($salt && $mode2) {
3629                         return "MODE2:" . hash('sha256', $salt . $pass);
3630                 } else if ($salt) {
3631                         return "SHA1X:" . sha1("$salt:$pass");
3632                 } else {
3633                         return "SHA1:" . sha1($pass);
3634                 }
3635         } // function encrypt_password
3636
3637         function sanitize_article_content($text) {
3638                 # we don't support CDATA sections in articles, they break our own escaping
3639                 $text = preg_replace("/\[\[CDATA/", "", $text);
3640                 $text = preg_replace("/\]\]\>/", "", $text);
3641                 return $text;
3642         }
3643
3644         function load_filters($link, $feed_id, $owner_uid, $action_id = false) {
3645                 $filters = array();
3646
3647                 $cat_id = (int)getFeedCategory($link, $feed_id);
3648
3649                 $result = db_query($link, "SELECT * FROM ttrss_filters2 WHERE
3650                         owner_uid = $owner_uid AND enabled = true");
3651
3652                 $check_cats = join(",", array_merge(
3653                         getParentCategories($link, $cat_id, $owner_uid),
3654                         array($cat_id)));
3655
3656                 while ($line = db_fetch_assoc($result)) {
3657                         $filter_id = $line["id"];
3658
3659                         $result2 = db_query($link, "SELECT
3660                                 r.reg_exp, r.feed_id, r.cat_id, r.cat_filter, t.name AS type_name
3661                                 FROM ttrss_filters2_rules AS r,
3662                                 ttrss_filter_types AS t
3663                                 WHERE
3664                                         (cat_id IS NULL OR cat_id IN ($check_cats)) AND
3665                                         (feed_id IS NULL OR feed_id = '$feed_id') AND
3666                                         filter_type = t.id AND filter_id = '$filter_id'");
3667
3668                         $rules = array();
3669                         $actions = array();
3670
3671                         while ($rule_line = db_fetch_assoc($result2)) {
3672 #                               print_r($rule_line);
3673
3674                                 $rule = array();
3675                                 $rule["reg_exp"] = $rule_line["reg_exp"];
3676                                 $rule["type"] = $rule_line["type_name"];
3677
3678                                 array_push($rules, $rule);
3679                         }
3680
3681                         $result2 = db_query($link, "SELECT a.action_param,t.name AS type_name
3682                                 FROM ttrss_filters2_actions AS a,
3683                                 ttrss_filter_actions AS t
3684                                 WHERE
3685                                         action_id = t.id AND filter_id = '$filter_id'");
3686
3687                         while ($action_line = db_fetch_assoc($result2)) {
3688 #                               print_r($action_line);
3689
3690                                 $action = array();
3691                                 $action["type"] = $action_line["type_name"];
3692                                 $action["param"] = $action_line["action_param"];
3693
3694                                 array_push($actions, $action);
3695                         }
3696
3697
3698                         $filter = array();
3699                         $filter["match_any_rule"] = sql_bool_to_bool($line["match_any_rule"]);
3700                         $filter["rules"] = $rules;
3701                         $filter["actions"] = $actions;
3702
3703                         if (count($rules) > 0 && count($actions) > 0) {
3704                                 array_push($filters, $filter);
3705                         }
3706                 }
3707
3708                 return $filters;
3709         }
3710
3711         function get_score_pic($score) {
3712                 if ($score > 100) {
3713                         return "score_high.png";
3714                 } else if ($score > 0) {
3715                         return "score_half_high.png";
3716                 } else if ($score < -100) {
3717                         return "score_low.png";
3718                 } else if ($score < 0) {
3719                         return "score_half_low.png";
3720                 } else {
3721                         return "score_neutral.png";
3722                 }
3723         }
3724
3725         function feed_has_icon($id) {
3726                 return is_file(ICONS_DIR . "/$id.ico") && filesize(ICONS_DIR . "/$id.ico") > 0;
3727         }
3728
3729         function init_connection($link) {
3730                 if ($link) {
3731
3732                         if (DB_TYPE == "pgsql") {
3733                                 pg_query($link, "set client_encoding = 'UTF-8'");
3734                                 pg_set_client_encoding("UNICODE");
3735                                 pg_query($link, "set datestyle = 'ISO, european'");
3736                                 pg_query($link, "set TIME ZONE 0");
3737                         } else {
3738                                 db_query($link, "SET time_zone = '+0:0'");
3739
3740                                 if (defined('MYSQL_CHARSET') && MYSQL_CHARSET) {
3741                                         db_query($link, "SET NAMES " . MYSQL_CHARSET);
3742                                 }
3743                         }
3744                         return true;
3745                 } else {
3746                         print "Unable to connect to database:" . db_last_error();
3747                         return false;
3748                 }
3749         }
3750
3751         /* function ccache_zero($link, $feed_id, $owner_uid) {
3752                 db_query($link, "UPDATE ttrss_counters_cache SET
3753                         value = 0, updated = NOW() WHERE
3754                         feed_id = '$feed_id' AND owner_uid = '$owner_uid'");
3755         } */
3756
3757         function ccache_zero_all($link, $owner_uid) {
3758                 db_query($link, "UPDATE ttrss_counters_cache SET
3759                         value = 0 WHERE owner_uid = '$owner_uid'");
3760
3761                 db_query($link, "UPDATE ttrss_cat_counters_cache SET
3762                         value = 0 WHERE owner_uid = '$owner_uid'");
3763         }
3764
3765         function ccache_remove($link, $feed_id, $owner_uid, $is_cat = false) {
3766
3767                 if (!$is_cat) {
3768                         $table = "ttrss_counters_cache";
3769                 } else {
3770                         $table = "ttrss_cat_counters_cache";
3771                 }
3772
3773                 db_query($link, "DELETE FROM $table WHERE
3774                         feed_id = '$feed_id' AND owner_uid = '$owner_uid'");
3775
3776         }
3777
3778         function ccache_update_all($link, $owner_uid) {
3779
3780                 if (get_pref($link, 'ENABLE_FEED_CATS', $owner_uid)) {
3781
3782                         $result = db_query($link, "SELECT feed_id FROM ttrss_cat_counters_cache
3783                                 WHERE feed_id > 0 AND owner_uid = '$owner_uid'");
3784
3785                         while ($line = db_fetch_assoc($result)) {
3786                                 ccache_update($link, $line["feed_id"], $owner_uid, true);
3787                         }
3788
3789                         /* We have to manually include category 0 */
3790
3791                         ccache_update($link, 0, $owner_uid, true);
3792
3793                 } else {
3794                         $result = db_query($link, "SELECT feed_id FROM ttrss_counters_cache
3795                                 WHERE feed_id > 0 AND owner_uid = '$owner_uid'");
3796
3797                         while ($line = db_fetch_assoc($result)) {
3798                                 print ccache_update($link, $line["feed_id"], $owner_uid);
3799
3800                         }
3801
3802                 }
3803         }
3804
3805         function ccache_find($link, $feed_id, $owner_uid, $is_cat = false,
3806                 $no_update = false) {
3807
3808                 if (!is_numeric($feed_id)) return;
3809
3810                 if (!$is_cat) {
3811                         $table = "ttrss_counters_cache";
3812                         if ($feed_id > 0) {
3813                                 $tmp_result = db_query($link, "SELECT owner_uid FROM ttrss_feeds
3814                                         WHERE id = '$feed_id'");
3815                                 $owner_uid = db_fetch_result($tmp_result, 0, "owner_uid");
3816                         }
3817                 } else {
3818                         $table = "ttrss_cat_counters_cache";
3819                 }
3820
3821                 if (DB_TYPE == "pgsql") {
3822                         $date_qpart = "updated > NOW() - INTERVAL '15 minutes'";
3823                 } else if (DB_TYPE == "mysql") {
3824                         $date_qpart = "updated > DATE_SUB(NOW(), INTERVAL 15 MINUTE)";
3825                 }
3826
3827                 $result = db_query($link, "SELECT value FROM $table
3828                         WHERE owner_uid = '$owner_uid' AND feed_id = '$feed_id'
3829                         LIMIT 1");
3830
3831                 if (db_num_rows($result) == 1) {
3832                         return db_fetch_result($result, 0, "value");
3833                 } else {
3834                         if ($no_update) {
3835                                 return -1;
3836                         } else {
3837                                 return ccache_update($link, $feed_id, $owner_uid, $is_cat);
3838                         }
3839                 }
3840
3841         }
3842
3843         function ccache_update($link, $feed_id, $owner_uid, $is_cat = false,
3844                 $update_pcat = true) {
3845
3846                 if (!is_numeric($feed_id)) return;
3847
3848                 if (!$is_cat && $feed_id > 0) {
3849                         $tmp_result = db_query($link, "SELECT owner_uid FROM ttrss_feeds
3850                                 WHERE id = '$feed_id'");
3851                         $owner_uid = db_fetch_result($tmp_result, 0, "owner_uid");
3852                 }
3853
3854                 $prev_unread = ccache_find($link, $feed_id, $owner_uid, $is_cat, true);
3855
3856                 /* When updating a label, all we need to do is recalculate feed counters
3857                  * because labels are not cached */
3858
3859                 if ($feed_id < 0) {
3860                         ccache_update_all($link, $owner_uid);
3861                         return;
3862                 }
3863
3864                 if (!$is_cat) {
3865                         $table = "ttrss_counters_cache";
3866                 } else {
3867                         $table = "ttrss_cat_counters_cache";
3868                 }
3869
3870                 if ($is_cat && $feed_id >= 0) {
3871                         if ($feed_id != 0) {
3872                                 $cat_qpart = "cat_id = '$feed_id'";
3873                         } else {
3874                                 $cat_qpart = "cat_id IS NULL";
3875                         }
3876
3877                         /* Recalculate counters for child feeds */
3878
3879                         $result = db_query($link, "SELECT id FROM ttrss_feeds
3880                                                 WHERE owner_uid = '$owner_uid' AND $cat_qpart");
3881
3882                         while ($line = db_fetch_assoc($result)) {
3883                                 ccache_update($link, $line["id"], $owner_uid, false, false);
3884                         }
3885
3886                         $result = db_query($link, "SELECT SUM(value) AS sv
3887                                 FROM ttrss_counters_cache, ttrss_feeds
3888                                 WHERE id = feed_id AND $cat_qpart AND
3889                                 ttrss_feeds.owner_uid = '$owner_uid'");
3890
3891                         $unread = (int) db_fetch_result($result, 0, "sv");
3892
3893                 } else {
3894                         $unread = (int) getFeedArticles($link, $feed_id, $is_cat, true, $owner_uid);
3895                 }
3896
3897                 db_query($link, "BEGIN");
3898
3899                 $result = db_query($link, "SELECT feed_id FROM $table
3900                         WHERE owner_uid = '$owner_uid' AND feed_id = '$feed_id' LIMIT 1");
3901
3902                 if (db_num_rows($result) == 1) {
3903                         db_query($link, "UPDATE $table SET
3904                                 value = '$unread', updated = NOW() WHERE
3905                                 feed_id = '$feed_id' AND owner_uid = '$owner_uid'");
3906
3907                 } else {
3908                         db_query($link, "INSERT INTO $table
3909                                 (feed_id, value, owner_uid, updated)
3910                                 VALUES
3911                                 ($feed_id, $unread, $owner_uid, NOW())");
3912                 }
3913
3914                 db_query($link, "COMMIT");
3915
3916                 if ($feed_id > 0 && $prev_unread != $unread) {
3917
3918                         if (!$is_cat) {
3919
3920                                 /* Update parent category */
3921
3922                                 if ($update_pcat) {
3923
3924                                         $result = db_query($link, "SELECT cat_id FROM ttrss_feeds
3925                                                 WHERE owner_uid = '$owner_uid' AND id = '$feed_id'");
3926
3927                                         $cat_id = (int) db_fetch_result($result, 0, "cat_id");
3928
3929                                         ccache_update($link, $cat_id, $owner_uid, true);
3930
3931                                 }
3932                         }
3933                 } else if ($feed_id < 0) {
3934                         ccache_update_all($link, $owner_uid);
3935                 }
3936
3937                 return $unread;
3938         }
3939
3940         /* function ccache_cleanup($link, $owner_uid) {
3941
3942                 if (DB_TYPE == "pgsql") {
3943                         db_query($link, "DELETE FROM ttrss_counters_cache AS c1 WHERE
3944                                 (SELECT count(*) FROM ttrss_counters_cache AS c2
3945                                         WHERE c1.feed_id = c2.feed_id AND c2.owner_uid = c1.owner_uid) > 1
3946                                         AND owner_uid = '$owner_uid'");
3947
3948                         db_query($link, "DELETE FROM ttrss_cat_counters_cache AS c1 WHERE
3949                                 (SELECT count(*) FROM ttrss_cat_counters_cache AS c2
3950                                         WHERE c1.feed_id = c2.feed_id AND c2.owner_uid = c1.owner_uid) > 1
3951                                         AND owner_uid = '$owner_uid'");
3952                 } else {
3953                         db_query($link, "DELETE c1 FROM
3954                                         ttrss_counters_cache AS c1,
3955                                         ttrss_counters_cache AS c2
3956                                 WHERE
3957                                         c1.owner_uid = '$owner_uid' AND
3958                                         c1.owner_uid = c2.owner_uid AND
3959                                         c1.feed_id = c2.feed_id");
3960
3961                         db_query($link, "DELETE c1 FROM
3962                                         ttrss_cat_counters_cache AS c1,
3963                                         ttrss_cat_counters_cache AS c2
3964                                 WHERE
3965                                         c1.owner_uid = '$owner_uid' AND
3966                                         c1.owner_uid = c2.owner_uid AND
3967                                         c1.feed_id = c2.feed_id");
3968
3969                 }
3970         } */
3971
3972         function label_find_id($link, $label, $owner_uid) {
3973                 $result = db_query($link,
3974                         "SELECT id FROM ttrss_labels2 WHERE caption = '$label'
3975                                 AND owner_uid = '$owner_uid' LIMIT 1");
3976
3977                 if (db_num_rows($result) == 1) {
3978                         return db_fetch_result($result, 0, "id");
3979                 } else {
3980                         return 0;
3981                 }
3982         }
3983
3984         function get_article_labels($link, $id) {
3985                 $rv = array();
3986
3987
3988                 $result = db_query($link, "SELECT label_cache FROM
3989                         ttrss_user_entries WHERE ref_id = '$id' AND owner_uid = " .
3990                         $_SESSION["uid"]);
3991
3992                 $label_cache = db_fetch_result($result, 0, "label_cache");
3993
3994                 if ($label_cache) {
3995
3996                         $label_cache = json_decode($label_cache, true);
3997
3998                         if ($label_cache["no-labels"] == 1)
3999                                 return $rv;
4000                         else
4001                                 return $label_cache;
4002                 }
4003
4004                 $result = db_query($link,
4005                         "SELECT DISTINCT label_id,caption,fg_color,bg_color
4006                                 FROM ttrss_labels2, ttrss_user_labels2
4007                         WHERE id = label_id
4008                                 AND article_id = '$id'
4009                                 AND owner_uid = ".$_SESSION["uid"] . "
4010                         ORDER BY caption");
4011
4012                 while ($line = db_fetch_assoc($result)) {
4013                         $rk = array($line["label_id"], $line["caption"], $line["fg_color"],
4014                                 $line["bg_color"]);
4015                         array_push($rv, $rk);
4016                 }
4017
4018                 if (count($rv) > 0)
4019                         label_update_cache($link, $id, $rv);
4020                 else
4021                         label_update_cache($link, $id, array("no-labels" => 1));
4022
4023                 return $rv;
4024         }
4025
4026
4027         function label_find_caption($link, $label, $owner_uid) {
4028                 $result = db_query($link,
4029                         "SELECT caption FROM ttrss_labels2 WHERE id = '$label'
4030                                 AND owner_uid = '$owner_uid' LIMIT 1");
4031
4032                 if (db_num_rows($result) == 1) {
4033                         return db_fetch_result($result, 0, "caption");
4034                 } else {
4035                         return "";
4036                 }
4037         }
4038
4039         function label_update_cache($link, $id, $labels = false, $force = false) {
4040
4041                 if ($force)
4042                         label_clear_cache($link, $id);
4043
4044                 if (!$labels)
4045                         $labels = get_article_labels($link, $id);
4046
4047                 $labels = db_escape_string(json_encode($labels));
4048
4049                 db_query($link, "UPDATE ttrss_user_entries SET
4050                         label_cache = '$labels' WHERE ref_id = '$id'");
4051
4052         }
4053
4054         function label_clear_cache($link, $id) {
4055
4056                 db_query($link, "UPDATE ttrss_user_entries SET
4057                         label_cache = '' WHERE ref_id = '$id'");
4058
4059         }
4060
4061         function label_remove_article($link, $id, $label, $owner_uid) {
4062
4063                 $label_id = label_find_id($link, $label, $owner_uid);
4064
4065                 if (!$label_id) return;
4066
4067                 $result = db_query($link,
4068                         "DELETE FROM ttrss_user_labels2
4069                         WHERE
4070                                 label_id = '$label_id' AND
4071                                 article_id = '$id'");
4072
4073                 label_clear_cache($link, $id);
4074         }
4075
4076         function label_add_article($link, $id, $label, $owner_uid) {
4077
4078                 $label_id = label_find_id($link, $label, $owner_uid);
4079
4080                 if (!$label_id) return;
4081
4082                 $result = db_query($link,
4083                         "SELECT
4084                                 article_id FROM ttrss_labels2, ttrss_user_labels2
4085                         WHERE
4086                                 label_id = id AND
4087                                 label_id = '$label_id' AND
4088                                 article_id = '$id' AND owner_uid = '$owner_uid'
4089                         LIMIT 1");
4090
4091                 if (db_num_rows($result) == 0) {
4092                         db_query($link, "INSERT INTO ttrss_user_labels2
4093                                 (label_id, article_id) VALUES ('$label_id', '$id')");
4094                 }
4095
4096                 label_clear_cache($link, $id);
4097
4098         }
4099
4100         function label_remove($link, $id, $owner_uid) {
4101                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
4102
4103                 db_query($link, "BEGIN");
4104
4105                 $result = db_query($link, "SELECT caption FROM ttrss_labels2
4106                         WHERE id = '$id'");
4107
4108                 $caption = db_fetch_result($result, 0, "caption");
4109
4110                 $result = db_query($link, "DELETE FROM ttrss_labels2 WHERE id = '$id'
4111                         AND owner_uid = " . $owner_uid);
4112
4113                 if (db_affected_rows($link, $result) != 0 && $caption) {
4114
4115                         /* Remove access key for the label */
4116
4117                         $ext_id = -11 - $id;
4118
4119                         db_query($link, "DELETE FROM ttrss_access_keys WHERE
4120                                 feed_id = '$ext_id' AND owner_uid = $owner_uid");
4121
4122                         /* Disable filters that reference label being removed */
4123
4124                         db_query($link, "UPDATE ttrss_filters SET
4125                                 enabled = false WHERE action_param = '$caption'
4126                                         AND action_id = 7
4127                                         AND owner_uid = " . $owner_uid);
4128
4129                         /* Remove cached data */
4130
4131                         db_query($link, "UPDATE ttrss_user_entries SET label_cache = ''
4132                                 WHERE label_cache LIKE '%$caption%' AND owner_uid = " . $owner_uid);
4133
4134                 }
4135
4136                 db_query($link, "COMMIT");
4137         }
4138
4139         function label_create($link, $caption, $fg_color = '', $bg_color = '', $owner_uid) {
4140
4141                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
4142
4143                 db_query($link, "BEGIN");
4144
4145                 $result = false;
4146
4147                 $result = db_query($link, "SELECT id FROM ttrss_labels2
4148                         WHERE caption = '$caption' AND owner_uid = $owner_uid");
4149
4150                 if (db_num_rows($result) == 0) {
4151                         $result = db_query($link,
4152                                 "INSERT INTO ttrss_labels2 (caption,owner_uid,fg_color,bg_color)
4153                                         VALUES ('$caption', '$owner_uid', '$fg_color', '$bg_color')");
4154
4155                         $result = db_affected_rows($link, $result) != 0;
4156                 }
4157
4158                 db_query($link, "COMMIT");
4159
4160                 return $result;
4161         }
4162
4163         function format_tags_string($tags, $id) {
4164
4165                 $tags_str = "";
4166                 $tags_nolinks_str = "";
4167
4168                 $num_tags = 0;
4169
4170                 $tag_limit = 6;
4171
4172                 $formatted_tags = array();
4173
4174                 foreach ($tags as $tag) {
4175                         $num_tags++;
4176                         $tag_escaped = str_replace("'", "\\'", $tag);
4177
4178                         if (mb_strlen($tag) > 30) {
4179                                 $tag = truncate_string($tag, 30);
4180                         }
4181
4182                         $tag_str = "<a href=\"javascript:viewfeed('$tag_escaped')\">$tag</a>";
4183
4184                         array_push($formatted_tags, $tag_str);
4185
4186                         $tmp_tags_str = implode(", ", $formatted_tags);
4187
4188                         if ($num_tags == $tag_limit || mb_strlen($tmp_tags_str) > 150) {
4189                                 break;
4190                         }
4191                 }
4192
4193                 $tags_str = implode(", ", $formatted_tags);
4194
4195                 if ($num_tags < count($tags)) {
4196                         $tags_str .= ", &hellip;";
4197                 }
4198
4199                 if ($num_tags == 0) {
4200                         $tags_str = __("no tags");
4201                 }
4202
4203                 return $tags_str;
4204
4205         }
4206
4207         function format_article_labels($labels, $id) {
4208
4209                 $labels_str = "";
4210
4211                 foreach ($labels as $l) {
4212                         $labels_str .= sprintf("<span class='hlLabelRef'
4213                                 style='color : %s; background-color : %s'>%s</span>",
4214                                         $l[2], $l[3], $l[1]);
4215                         }
4216
4217                 return $labels_str;
4218
4219         }
4220
4221         function format_article_note($id, $note) {
4222
4223                 $str = "<div class='articleNote'        onclick=\"editArticleNote($id)\">
4224                         <div class='noteEdit' onclick=\"editArticleNote($id)\">".
4225                         __('(edit note)')."</div>$note</div>";
4226
4227                 return $str;
4228         }
4229
4230         function toggle_collapse_cat($link, $cat_id, $mode) {
4231                 if ($cat_id > 0) {
4232                         $mode = bool_to_sql_bool($mode);
4233
4234                         db_query($link, "UPDATE ttrss_feed_categories SET
4235                                 collapsed = $mode WHERE id = '$cat_id' AND owner_uid = " .
4236                                 $_SESSION["uid"]);
4237                 } else {
4238                         $pref_name = '';
4239
4240                         switch ($cat_id) {
4241                         case -1:
4242                                 $pref_name = '_COLLAPSED_SPECIAL';
4243                                 break;
4244                         case -2:
4245                                 $pref_name = '_COLLAPSED_LABELS';
4246                                 break;
4247                         case 0:
4248                                 $pref_name = '_COLLAPSED_UNCAT';
4249                                 break;
4250                         }
4251
4252                         if ($pref_name) {
4253                                 if ($mode) {
4254                                         set_pref($link, $pref_name, 'true');
4255                                 } else {
4256                                         set_pref($link, $pref_name, 'false');
4257                                 }
4258                         }
4259                 }
4260         }
4261
4262         function remove_feed($link, $id, $owner_uid) {
4263
4264                 if ($id > 0) {
4265
4266                         /* save starred articles in Archived feed */
4267
4268                         db_query($link, "BEGIN");
4269
4270                         /* prepare feed if necessary */
4271
4272                         $result = db_query($link, "SELECT id FROM ttrss_archived_feeds
4273                                 WHERE id = '$id'");
4274
4275                         if (db_num_rows($result) == 0) {
4276                                 db_query($link, "INSERT INTO ttrss_archived_feeds
4277                                         (id, owner_uid, title, feed_url, site_url)
4278                                 SELECT id, owner_uid, title, feed_url, site_url from ttrss_feeds
4279                                 WHERE id = '$id'");
4280                         }
4281
4282                         db_query($link, "UPDATE ttrss_user_entries SET feed_id = NULL,
4283                                 orig_feed_id = '$id' WHERE feed_id = '$id' AND
4284                                         marked = true AND owner_uid = $owner_uid");
4285
4286                         /* Remove access key for the feed */
4287
4288                         db_query($link, "DELETE FROM ttrss_access_keys WHERE
4289                                 feed_id = '$id' AND owner_uid = $owner_uid");
4290
4291                         /* remove the feed */
4292
4293                         db_query($link, "DELETE FROM ttrss_feeds
4294                                         WHERE id = '$id' AND owner_uid = $owner_uid");
4295
4296                         db_query($link, "COMMIT");
4297
4298                         if (file_exists(ICONS_DIR . "/$id.ico")) {
4299                                 unlink(ICONS_DIR . "/$id.ico");
4300                         }
4301
4302                         ccache_remove($link, $id, $owner_uid);
4303
4304                 } else {
4305                         label_remove($link, -11-$id, $owner_uid);
4306                         ccache_remove($link, -11-$id, $owner_uid);
4307                 }
4308         }
4309
4310         function get_feed_category($link, $feed_cat, $parent_cat_id = false) {
4311                 if ($parent_cat_id) {
4312                         $parent_qpart = "parent_cat = '$parent_cat_id'";
4313                         $parent_insert = "'$parent_cat_id'";
4314                 } else {
4315                         $parent_qpart = "parent_cat IS NULL";
4316                         $parent_insert = "NULL";
4317                 }
4318
4319                 $result = db_query($link,
4320                         "SELECT id FROM ttrss_feed_categories
4321                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
4322
4323                 if (db_num_rows($result) == 0) {
4324                         return false;
4325                 } else {
4326                         return db_fetch_result($result, 0, "id");
4327                 }
4328         }
4329
4330         function add_feed_category($link, $feed_cat, $parent_cat_id = false) {
4331
4332                 if (!$feed_cat) return false;
4333
4334                 db_query($link, "BEGIN");
4335
4336                 if ($parent_cat_id) {
4337                         $parent_qpart = "parent_cat = '$parent_cat_id'";
4338                         $parent_insert = "'$parent_cat_id'";
4339                 } else {
4340                         $parent_qpart = "parent_cat IS NULL";
4341                         $parent_insert = "NULL";
4342                 }
4343
4344                 $result = db_query($link,
4345                         "SELECT id FROM ttrss_feed_categories
4346                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
4347
4348                 if (db_num_rows($result) == 0) {
4349
4350                         $result = db_query($link,
4351                                 "INSERT INTO ttrss_feed_categories (owner_uid,title,parent_cat)
4352                                 VALUES ('".$_SESSION["uid"]."', '$feed_cat', $parent_insert)");
4353
4354                         db_query($link, "COMMIT");
4355
4356                         return true;
4357                 }
4358
4359                 return false;
4360         }
4361
4362         function remove_feed_category($link, $id, $owner_uid) {
4363
4364                 db_query($link, "DELETE FROM ttrss_feed_categories
4365                         WHERE id = '$id' AND owner_uid = $owner_uid");
4366
4367                 ccache_remove($link, $id, $owner_uid, true);
4368         }
4369
4370         function archive_article($link, $id, $owner_uid) {
4371                 db_query($link, "BEGIN");
4372
4373                 $result = db_query($link, "SELECT feed_id FROM ttrss_user_entries
4374                         WHERE ref_id = '$id' AND owner_uid = $owner_uid");
4375
4376                 if (db_num_rows($result) != 0) {
4377
4378                         /* prepare the archived table */
4379
4380                         $feed_id = (int) db_fetch_result($result, 0, "feed_id");
4381
4382                         if ($feed_id) {
4383                                 $result = db_query($link, "SELECT id FROM ttrss_archived_feeds
4384                                         WHERE id = '$feed_id'");
4385
4386                                 if (db_num_rows($result) == 0) {
4387                                         db_query($link, "INSERT INTO ttrss_archived_feeds
4388                                                 (id, owner_uid, title, feed_url, site_url)
4389                                         SELECT id, owner_uid, title, feed_url, site_url from ttrss_feeds
4390                                         WHERE id = '$feed_id'");
4391                                 }
4392
4393                                 db_query($link, "UPDATE ttrss_user_entries
4394                                         SET orig_feed_id = feed_id, feed_id = NULL
4395                                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
4396                         }
4397                 }
4398
4399                 db_query($link, "COMMIT");
4400         }
4401
4402         function getArticleFeed($link, $id) {
4403                 $result = db_query($link, "SELECT feed_id FROM ttrss_user_entries
4404                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
4405
4406                 if (db_num_rows($result) != 0) {
4407                         return db_fetch_result($result, 0, "feed_id");
4408                 } else {
4409                         return 0;
4410                 }
4411         }
4412
4413         /**
4414          * Fixes incomplete URLs by prepending "http://".
4415          * Also replaces feed:// with http://, and
4416          * prepends a trailing slash if the url is a domain name only.
4417          *
4418          * @param string $url Possibly incomplete URL
4419          *
4420          * @return string Fixed URL.
4421          */
4422         function fix_url($url) {
4423                 if (strpos($url, '://') === false) {
4424                         $url = 'http://' . $url;
4425                 } else if (substr($url, 0, 5) == 'feed:') {
4426                         $url = 'http:' . substr($url, 5);
4427                 }
4428
4429                 //prepend slash if the URL has no slash in it
4430                 // "http://www.example" -> "http://www.example/"
4431                 if (strpos($url, '/', strpos($url, ':') + 3) === false) {
4432                         $url .= '/';
4433                 }
4434
4435                 if ($url != "http:///")
4436                         return $url;
4437                 else
4438                         return '';
4439         }
4440
4441         function validate_feed_url($url) {
4442                 $parts = parse_url($url);
4443
4444                 return ($parts['scheme'] == 'http' || $parts['scheme'] == 'feed' || $parts['scheme'] == 'https');
4445
4446         }
4447
4448         function get_article_enclosures($link, $id) {
4449
4450                 $query = "SELECT * FROM ttrss_enclosures
4451                         WHERE post_id = '$id' AND content_url != ''";
4452
4453                 $rv = array();
4454
4455                 $result = db_query($link, $query);
4456
4457                 if (db_num_rows($result) > 0) {
4458                         while ($line = db_fetch_assoc($result)) {
4459                                 array_push($rv, $line);
4460                         }
4461                 }
4462
4463                 return $rv;
4464         }
4465
4466         function api_get_feeds($link, $cat_id, $unread_only, $limit, $offset, $include_nested = false) {
4467
4468                         $feeds = array();
4469
4470                         /* Labels */
4471
4472                         if ($cat_id == -4 || $cat_id == -2) {
4473                                 $counters = getLabelCounters($link, true);
4474
4475                                 foreach (array_values($counters) as $cv) {
4476
4477                                         $unread = $cv["counter"];
4478
4479                                         if ($unread || !$unread_only) {
4480
4481                                                 $row = array(
4482                                                                 "id" => $cv["id"],
4483                                                                 "title" => $cv["description"],
4484                                                                 "unread" => $cv["counter"],
4485                                                                 "cat_id" => -2,
4486                                                         );
4487
4488                                                 array_push($feeds, $row);
4489                                         }
4490                                 }
4491                         }
4492
4493                         /* Virtual feeds */
4494
4495                         if ($cat_id == -4 || $cat_id == -1) {
4496                                 foreach (array(-1, -2, -3, -4, -6, 0) as $i) {
4497                                         $unread = getFeedUnread($link, $i);
4498
4499                                         if ($unread || !$unread_only) {
4500                                                 $title = getFeedTitle($link, $i);
4501
4502                                                 $row = array(
4503                                                                 "id" => $i,
4504                                                                 "title" => $title,
4505                                                                 "unread" => $unread,
4506                                                                 "cat_id" => -1,
4507                                                         );
4508                                                 array_push($feeds, $row);
4509                                         }
4510
4511                                 }
4512                         }
4513
4514                         /* Child cats */
4515
4516                         if ($include_nested && $cat_id) {
4517                                 $result = db_query($link, "SELECT
4518                                         id, title FROM ttrss_feed_categories
4519                                         WHERE parent_cat = '$cat_id' AND owner_uid = " . $_SESSION["uid"] .
4520                                 " ORDER BY id, title");
4521
4522                                 while ($line = db_fetch_assoc($result)) {
4523                                         $unread = getFeedUnread($link, $line["id"], true) +
4524                                                 getCategoryChildrenUnread($link, $line["id"]);
4525
4526                                         if ($unread || !$unread_only) {
4527                                                 $row = array(
4528                                                                 "id" => $line["id"],
4529                                                                 "title" => $line["title"],
4530                                                                 "unread" => $unread,
4531                                                                 "is_cat" => true,
4532                                                         );
4533                                                 array_push($feeds, $row);
4534                                         }
4535                                 }
4536                         }
4537
4538                         /* Real feeds */
4539
4540                         if ($limit) {
4541                                 $limit_qpart = "LIMIT $limit OFFSET $offset";
4542                         } else {
4543                                 $limit_qpart = "";
4544                         }
4545
4546                         if ($cat_id == -4 || $cat_id == -3) {
4547                                 $result = db_query($link, "SELECT
4548                                         id, feed_url, cat_id, title, order_id, ".
4549                                                 SUBSTRING_FOR_DATE."(last_updated,1,19) AS last_updated
4550                                                 FROM ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"] .
4551                                                 " ORDER BY cat_id, title " . $limit_qpart);
4552                         } else {
4553
4554                                 if ($cat_id)
4555                                         $cat_qpart = "cat_id = '$cat_id'";
4556                                 else
4557                                         $cat_qpart = "cat_id IS NULL";
4558
4559                                 $result = db_query($link, "SELECT
4560                                         id, feed_url, cat_id, title, order_id, ".
4561                                                 SUBSTRING_FOR_DATE."(last_updated,1,19) AS last_updated
4562                                                 FROM ttrss_feeds WHERE
4563                                                 $cat_qpart AND owner_uid = " . $_SESSION["uid"] .
4564                                                 " ORDER BY cat_id, title " . $limit_qpart);
4565                         }
4566
4567                         while ($line = db_fetch_assoc($result)) {
4568
4569                                 $unread = getFeedUnread($link, $line["id"]);
4570
4571                                 $has_icon = feed_has_icon($line['id']);
4572
4573                                 if ($unread || !$unread_only) {
4574
4575                                         $row = array(
4576                                                         "feed_url" => $line["feed_url"],
4577                                                         "title" => $line["title"],
4578                                                         "id" => (int)$line["id"],
4579                                                         "unread" => (int)$unread,
4580                                                         "has_icon" => $has_icon,
4581                                                         "cat_id" => (int)$line["cat_id"],
4582                                                         "last_updated" => strtotime($line["last_updated"]),
4583                                                         "order_id" => (int) $line["order_id"],
4584                                                 );
4585
4586                                         array_push($feeds, $row);
4587                                 }
4588                         }
4589
4590                 return $feeds;
4591         }
4592
4593         function api_get_headlines($link, $feed_id, $limit, $offset,
4594                                 $filter, $is_cat, $show_excerpt, $show_content, $view_mode, $order,
4595                                 $include_attachments, $since_id,
4596                                 $search = "", $search_mode = "", $match_on = "", $include_nested = false) {
4597
4598                         $qfh_ret = queryFeedHeadlines($link, $feed_id, $limit,
4599                                 $view_mode, $is_cat, $search, $search_mode, $match_on,
4600                                 $order, $offset, 0, false, $since_id, $include_nested);
4601
4602                         $result = $qfh_ret[0];
4603                         $feed_title = $qfh_ret[1];
4604
4605                         $headlines = array();
4606
4607                         while ($line = db_fetch_assoc($result)) {
4608                                 $is_updated = ($line["last_read"] == "" &&
4609                                         ($line["unread"] != "t" && $line["unread"] != "1"));
4610
4611                                 $tags = explode(",", $line["tag_cache"]);
4612                                 $labels = json_decode($line["label_cache"], true);
4613
4614                                 //if (!$tags) $tags = get_article_tags($link, $line["id"]);
4615                                 //if (!$labels) $labels = get_article_labels($link, $line["id"]);
4616
4617                                 $headline_row = array(
4618                                                 "id" => (int)$line["id"],
4619                                                 "unread" => sql_bool_to_bool($line["unread"]),
4620                                                 "marked" => sql_bool_to_bool($line["marked"]),
4621                                                 "published" => sql_bool_to_bool($line["published"]),
4622                                                 "updated" => strtotime($line["updated"]),
4623                                                 "is_updated" => $is_updated,
4624                                                 "title" => $line["title"],
4625                                                 "link" => $line["link"],
4626                                                 "feed_id" => $line["feed_id"],
4627                                                 "tags" => $tags,
4628                                         );
4629
4630                                         if ($include_attachments)
4631                                                 $headline_row['attachments'] = get_article_enclosures($link,
4632                                                         $line['id']);
4633
4634                                 if ($show_excerpt) {
4635                                         $excerpt = truncate_string(strip_tags($line["content_preview"]), 100);
4636                                         $headline_row["excerpt"] = $excerpt;
4637                                 }
4638
4639                                 if ($show_content) {
4640                                         $headline_row["content"] = $line["content_preview"];
4641                                 }
4642
4643                                 // unify label output to ease parsing
4644                                 if ($labels["no-labels"] == 1) $labels = array();
4645
4646                                 $headline_row["labels"] = $labels;
4647
4648                                 $headline_row["feed_title"] = $line["feed_title"];
4649
4650                                 array_push($headlines, $headline_row);
4651                         }
4652
4653                         return $headlines;
4654         }
4655
4656         function generate_error_feed($link, $error) {
4657                 $reply = array();
4658
4659                 $reply['headlines']['id'] = -6;
4660                 $reply['headlines']['is_cat'] = false;
4661
4662                 $reply['headlines']['toolbar'] = '';
4663                 $reply['headlines']['content'] = "<div class='whiteBox'>". $error . "</div>";
4664
4665                 $reply['headlines-info'] = array("count" => 0,
4666                         "vgroup_last_feed" => '',
4667                         "unread" => 0,
4668                         "disable_cache" => true);
4669
4670                 return $reply;
4671         }
4672
4673
4674         function generate_dashboard_feed($link) {
4675                 $reply = array();
4676
4677                 $reply['headlines']['id'] = -5;
4678                 $reply['headlines']['is_cat'] = false;
4679
4680                 $reply['headlines']['toolbar'] = '';
4681                 $reply['headlines']['content'] = "<div class='whiteBox'>".__('No feed selected.');
4682
4683                 $reply['headlines']['content'] .= "<p class=\"small\"><span class=\"insensitive\">";
4684
4685                 $result = db_query($link, "SELECT ".SUBSTRING_FOR_DATE."(MAX(last_updated), 1, 19) AS last_updated FROM ttrss_feeds
4686                         WHERE owner_uid = " . $_SESSION['uid']);
4687
4688                 $last_updated = db_fetch_result($result, 0, "last_updated");
4689                 $last_updated = make_local_datetime($link, $last_updated, false);
4690
4691                 $reply['headlines']['content'] .= sprintf(__("Feeds last updated at %s"), $last_updated);
4692
4693                 $result = db_query($link, "SELECT COUNT(id) AS num_errors
4694                         FROM ttrss_feeds WHERE last_error != '' AND owner_uid = ".$_SESSION["uid"]);
4695
4696                 $num_errors = db_fetch_result($result, 0, "num_errors");
4697
4698                 if ($num_errors > 0) {
4699                         $reply['headlines']['content'] .= "<br/>";
4700                         $reply['headlines']['content'] .= "<a class=\"insensitive\" href=\"#\" onclick=\"showFeedsWithErrors()\">".
4701                                 __('Some feeds have update errors (click for details)')."</a>";
4702                 }
4703                 $reply['headlines']['content'] .= "</span></p>";
4704
4705                 $reply['headlines-info'] = array("count" => 0,
4706                         "vgroup_last_feed" => '',
4707                         "unread" => 0,
4708                         "disable_cache" => true);
4709
4710                 return $reply;
4711         }
4712
4713         function save_email_address($link, $email) {
4714                 // FIXME: implement persistent storage of emails
4715
4716                 if (!$_SESSION['stored_emails'])
4717                         $_SESSION['stored_emails'] = array();
4718
4719                 if (!in_array($email, $_SESSION['stored_emails']))
4720                         array_push($_SESSION['stored_emails'], $email);
4721         }
4722
4723         function update_feed_access_key($link, $feed_id, $is_cat, $owner_uid = false) {
4724                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
4725
4726                 $sql_is_cat = bool_to_sql_bool($is_cat);
4727
4728                 $result = db_query($link, "SELECT access_key FROM ttrss_access_keys
4729                         WHERE feed_id = '$feed_id'      AND is_cat = $sql_is_cat
4730                         AND owner_uid = " . $owner_uid);
4731
4732                 if (db_num_rows($result) == 1) {
4733                         $key = db_escape_string(sha1(uniqid(rand(), true)));
4734
4735                         db_query($link, "UPDATE ttrss_access_keys SET access_key = '$key'
4736                                 WHERE feed_id = '$feed_id' AND is_cat = $sql_is_cat
4737                                 AND owner_uid = " . $owner_uid);
4738
4739                         return $key;
4740
4741                 } else {
4742                         return get_feed_access_key($link, $feed_id, $is_cat, $owner_uid);
4743                 }
4744         }
4745
4746         function get_feed_access_key($link, $feed_id, $is_cat, $owner_uid = false) {
4747
4748                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
4749
4750                 $sql_is_cat = bool_to_sql_bool($is_cat);
4751
4752                 $result = db_query($link, "SELECT access_key FROM ttrss_access_keys
4753                         WHERE feed_id = '$feed_id'      AND is_cat = $sql_is_cat
4754                         AND owner_uid = " . $owner_uid);
4755
4756                 if (db_num_rows($result) == 1) {
4757                         return db_fetch_result($result, 0, "access_key");
4758                 } else {
4759                         $key = db_escape_string(sha1(uniqid(rand(), true)));
4760
4761                         $result = db_query($link, "INSERT INTO ttrss_access_keys
4762                                 (access_key, feed_id, is_cat, owner_uid)
4763                                 VALUES ('$key', '$feed_id', $sql_is_cat, '$owner_uid')");
4764
4765                         return $key;
4766                 }
4767                 return false;
4768         }
4769
4770         function get_feeds_from_html($url, $content)
4771         {
4772                 $url     = fix_url($url);
4773                 $baseUrl = substr($url, 0, strrpos($url, '/') + 1);
4774
4775                 libxml_use_internal_errors(true);
4776
4777                 $doc = new DOMDocument();
4778                 $doc->loadHTML($content);
4779                 $xpath = new DOMXPath($doc);
4780                 $entries = $xpath->query('/html/head/link[@rel="alternate"]');
4781                 $feedUrls = array();
4782                 foreach ($entries as $entry) {
4783                         if ($entry->hasAttribute('href')) {
4784                                 $title = $entry->getAttribute('title');
4785                                 if ($title == '') {
4786                                         $title = $entry->getAttribute('type');
4787                                 }
4788                                 $feedUrl = rewrite_relative_url(
4789                                         $baseUrl, $entry->getAttribute('href')
4790                                 );
4791                                 $feedUrls[$feedUrl] = $title;
4792                         }
4793                 }
4794                 return $feedUrls;
4795         }
4796
4797         function is_html($content) {
4798                 return preg_match("/<html|DOCTYPE html/i", $content) !== 0;
4799         }
4800
4801         function url_is_html($url, $login = false, $pass = false) {
4802                 return is_html(fetch_file_contents($url, false, $login, $pass));
4803         }
4804
4805         function print_label_select($link, $name, $value, $attributes = "") {
4806
4807                 $result = db_query($link, "SELECT caption FROM ttrss_labels2
4808                         WHERE owner_uid = '".$_SESSION["uid"]."' ORDER BY caption");
4809
4810                 print "<select default=\"$value\" name=\"" . htmlspecialchars($name) .
4811                         "\" $attributes onchange=\"labelSelectOnChange(this)\" >";
4812
4813                 while ($line = db_fetch_assoc($result)) {
4814
4815                         $issel = ($line["caption"] == $value) ? "selected=\"1\"" : "";
4816
4817                         print "<option value=\"".htmlspecialchars($line["caption"])."\"
4818                                 $issel>" . htmlspecialchars($line["caption"]) . "</option>";
4819
4820                 }
4821
4822 #               print "<option value=\"ADD_LABEL\">" .__("Add label...") . "</option>";
4823
4824                 print "</select>";
4825
4826
4827         }
4828
4829         function format_article_enclosures($link, $id, $always_display_enclosures,
4830                                         $article_content) {
4831
4832                 $result = get_article_enclosures($link, $id);
4833                 $rv = '';
4834
4835                 if (count($result) > 0) {
4836
4837                         $entries_html = array();
4838                         $entries = array();
4839
4840                         foreach ($result as $line) {
4841
4842                                 $url = $line["content_url"];
4843                                 $ctype = $line["content_type"];
4844
4845                                 if (!$ctype) $ctype = __("unknown type");
4846
4847                                 $filename = substr($url, strrpos($url, "/")+1);
4848
4849 #                               $player = format_inline_player($link, $url, $ctype);
4850
4851 #                               $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
4852 #                                       $filename . " (" . $ctype . ")" . "</a>";
4853
4854                                 $entry = "<div onclick=\"window.open('".htmlspecialchars($url)."')\"
4855                                         dojoType=\"dijit.MenuItem\">$filename ($ctype)</div>";
4856
4857                                 array_push($entries_html, $entry);
4858
4859                                 $entry = array();
4860
4861                                 $entry["type"] = $ctype;
4862                                 $entry["filename"] = $filename;
4863                                 $entry["url"] = $url;
4864
4865                                 array_push($entries, $entry);
4866                         }
4867
4868                         if (!get_pref($link, "STRIP_IMAGES")) {
4869                                 if ($always_display_enclosures ||
4870                                                         !preg_match("/<img/i", $article_content)) {
4871
4872                                         foreach ($entries as $entry) {
4873
4874                                                 if (preg_match("/image/", $entry["type"]) ||
4875                                                                 preg_match("/\.(jpg|png|gif|bmp)/i", $entry["filename"])) {
4876
4877                                                                 $rv .= "<p><img
4878                                                                 alt=\"".htmlspecialchars($entry["filename"])."\"
4879                                                                 src=\"" .htmlspecialchars($entry["url"]) . "\"/></p>";
4880
4881                                                 }
4882                                         }
4883                                 }
4884                         }
4885
4886                         $rv .= "<br/><div dojoType=\"dijit.form.DropDownButton\">".
4887                                 "<span>" . __('Attachments')."</span>";
4888                         $rv .= "<div dojoType=\"dijit.Menu\" style=\"display: none;\">";
4889
4890                         foreach ($entries_html as $entry) { $rv .= $entry; };
4891
4892                         $rv .= "</div></div>";
4893                 }
4894
4895                 return $rv;
4896         }
4897
4898         function getLastArticleId($link) {
4899                 $result = db_query($link, "SELECT MAX(ref_id) AS id FROM ttrss_user_entries
4900                         WHERE owner_uid = " . $_SESSION["uid"]);
4901
4902                 if (db_num_rows($result) == 1) {
4903                         return db_fetch_result($result, 0, "id");
4904                 } else {
4905                         return -1;
4906                 }
4907         }
4908
4909         function build_url($parts) {
4910                 return $parts['scheme'] . "://" . $parts['host'] . $parts['path'];
4911         }
4912
4913         /**
4914          * Converts a (possibly) relative URL to a absolute one.
4915          *
4916          * @param string $url     Base URL (i.e. from where the document is)
4917          * @param string $rel_url Possibly relative URL in the document
4918          *
4919          * @return string Absolute URL
4920          */
4921         function rewrite_relative_url($url, $rel_url) {
4922                 if (strpos($rel_url, "magnet:") === 0) {
4923                         return $rel_url;
4924                 } else if (strpos($rel_url, "://") !== false) {
4925                         return $rel_url;
4926                 } else if (strpos($rel_url, "//") === 0) {
4927                         # protocol-relative URL (rare but they exist)
4928                         return $rel_url;
4929                 } else if (strpos($rel_url, "/") === 0)
4930                 {
4931                         $parts = parse_url($url);
4932                         $parts['path'] = $rel_url;
4933
4934                         return build_url($parts);
4935
4936                 } else {
4937                         $parts = parse_url($url);
4938                         if (!isset($parts['path'])) {
4939                                 $parts['path'] = '/';
4940                         }
4941                         $dir = $parts['path'];
4942                         if (substr($dir, -1) !== '/') {
4943                                 $dir = dirname($parts['path']);
4944                                 $dir !== '/' && $dir .= '/';
4945                         }
4946                         $parts['path'] = $dir . $rel_url;
4947
4948                         return build_url($parts);
4949                 }
4950         }
4951
4952         function sphinx_search($query, $offset = 0, $limit = 30) {
4953                 require_once 'lib/sphinxapi.php';
4954
4955                 $sphinxClient = new SphinxClient();
4956
4957                 $sphinxClient->SetServer('localhost', 9312);
4958                 $sphinxClient->SetConnectTimeout(1);
4959
4960                 $sphinxClient->SetFieldWeights(array('title' => 70, 'content' => 30,
4961                         'feed_title' => 20));
4962
4963                 $sphinxClient->SetMatchMode(SPH_MATCH_EXTENDED2);
4964                 $sphinxClient->SetRankingMode(SPH_RANK_PROXIMITY_BM25);
4965                 $sphinxClient->SetLimits($offset, $limit, 1000);
4966                 $sphinxClient->SetArrayResult(false);
4967                 $sphinxClient->SetFilter('owner_uid', array($_SESSION['uid']));
4968
4969                 $result = $sphinxClient->Query($query, SPHINX_INDEX);
4970
4971                 $ids = array();
4972
4973                 if (is_array($result['matches'])) {
4974                         foreach (array_keys($result['matches']) as $int_id) {
4975                                 $ref_id = $result['matches'][$int_id]['attrs']['ref_id'];
4976                                 array_push($ids, $ref_id);
4977                         }
4978                 }
4979
4980                 return $ids;
4981         }
4982
4983         function cleanup_tags($link, $days = 14, $limit = 1000) {
4984
4985                 if (DB_TYPE == "pgsql") {
4986                         $interval_query = "date_updated < NOW() - INTERVAL '$days days'";
4987                 } else if (DB_TYPE == "mysql") {
4988                         $interval_query = "date_updated < DATE_SUB(NOW(), INTERVAL $days DAY)";
4989                 }
4990
4991                 $tags_deleted = 0;
4992
4993                 while ($limit > 0) {
4994                         $limit_part = 500;
4995
4996                         $query = "SELECT ttrss_tags.id AS id
4997                                 FROM ttrss_tags, ttrss_user_entries, ttrss_entries
4998                                 WHERE post_int_id = int_id AND $interval_query AND
4999                                 ref_id = ttrss_entries.id AND tag_cache != '' LIMIT $limit_part";
5000
5001                         $result = db_query($link, $query);
5002
5003                         $ids = array();
5004
5005                         while ($line = db_fetch_assoc($result)) {
5006                                 array_push($ids, $line['id']);
5007                         }
5008
5009                         if (count($ids) > 0) {
5010                                 $ids = join(",", $ids);
5011                                 print ".";
5012
5013                                 $tmp_result = db_query($link, "DELETE FROM ttrss_tags WHERE id IN ($ids)");
5014                                 $tags_deleted += db_affected_rows($link, $tmp_result);
5015                         } else {
5016                                 break;
5017                         }
5018
5019                         $limit -= $limit_part;
5020                 }
5021
5022                 print "\n";
5023
5024                 return $tags_deleted;
5025         }
5026
5027         function print_user_stylesheet($link) {
5028                 $value = get_pref($link, 'USER_STYLESHEET');
5029
5030                 if ($value) {
5031                         print "<style type=\"text/css\">";
5032                         print str_replace("<br/>", "\n", $value);
5033                         print "</style>";
5034                 }
5035
5036         }
5037
5038 /*      function rewrite_urls($line) {
5039                 global $url_regex;
5040
5041                 $urls = null;
5042
5043                 $result = preg_replace("/((?<!=.)((http|https|ftp)+):\/\/[^ ,!]+)/i",
5044                         "<a target=\"_blank\" href=\"\\1\">\\1</a>", $line);
5045
5046                 return $result;
5047         } */
5048
5049         function rewrite_urls($html) {
5050                 libxml_use_internal_errors(true);
5051
5052                 $charset_hack = '<head>
5053                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
5054                 </head>';
5055
5056                 $doc = new DOMDocument();
5057                 $doc->loadHTML($charset_hack . $html);
5058                 $xpath = new DOMXPath($doc);
5059
5060                 $entries = $xpath->query('//*/text()');
5061
5062                 foreach ($entries as $entry) {
5063                         if (strstr($entry->wholeText, "://") !== false) {
5064                                 $text = preg_replace("/((?<!=.)((http|https|ftp)+):\/\/[^ ,!]+)/i",
5065                                         "<a target=\"_blank\" href=\"\\1\">\\1</a>", $entry->wholeText);
5066
5067                                 if ($text != $entry->wholeText) {
5068                                         $cdoc = new DOMDocument();
5069                                         $cdoc->loadHTML($charset_hack . $text);
5070
5071
5072                                         foreach ($cdoc->childNodes as $cnode) {
5073                                                 $cnode = $doc->importNode($cnode, true);
5074
5075                                                 if ($cnode) {
5076                                                         $entry->parentNode->insertBefore($cnode);
5077                                                 }
5078                                         }
5079
5080                                         $entry->parentNode->removeChild($entry);
5081
5082                                 }
5083                         }
5084                 }
5085
5086                 $node = $doc->getElementsByTagName('body')->item(0);
5087
5088                 // http://tt-rss.org/forum/viewtopic.php?f=1&t=970
5089                 if ($node)
5090                         return $doc->saveXML($node, LIBXML_NOEMPTYTAG);
5091                 else
5092                         return $html;
5093         }
5094
5095         function filter_to_sql($filter) {
5096                 $query = array();
5097
5098                 if (DB_TYPE == "pgsql")
5099                         $reg_qpart = "~";
5100                 else
5101                         $reg_qpart = "REGEXP";
5102
5103                 foreach ($filter["rules"] AS $rule) {
5104                         $regexp_valid = preg_match('/' . $rule['reg_exp'] . '/',
5105                                 $rule['reg_exp']) !== FALSE;
5106
5107                         if ($regexp_valid) {
5108
5109                                 $rule['reg_exp'] = db_escape_string($rule['reg_exp']);
5110
5111                                 switch ($rule["type"]) {
5112                                         case "title":
5113                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
5114                                                         $rule['reg_exp'] . "')";
5115                                                 break;
5116                                         case "content":
5117                                                 $qpart = "LOWER(ttrss_entries.content) $reg_qpart LOWER('".
5118                                                         $rule['reg_exp'] . "')";
5119                                                 break;
5120                                         case "both":
5121                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
5122                                                         $rule['reg_exp'] . "') OR LOWER(" .
5123                                                         "ttrss_entries.content) $reg_qpart LOWER('" . $rule['reg_exp'] . "')";
5124                                                 break;
5125                                         case "tag":
5126                                                 $qpart = "LOWER(ttrss_user_entries.tag_cache) $reg_qpart LOWER('".
5127                                                         $rule['reg_exp'] . "')";
5128                                                 break;
5129                                         case "link":
5130                                                 $qpart = "LOWER(ttrss_entries.link) $reg_qpart LOWER('".
5131                                                         $rule['reg_exp'] . "')";
5132                                                 break;
5133                                         case "author":
5134                                                 $qpart = "LOWER(ttrss_entries.author) $reg_qpart LOWER('".
5135                                                         $rule['reg_exp'] . "')";
5136                                                 break;
5137                                 }
5138
5139                                 if (isset($rule["feed_id"]) && $rule["feed_id"] > 0) {
5140                                         $qpart .= " AND feed_id = " . db_escape_string($rule["feed_id"]);
5141                                 }
5142
5143                                 if (isset($rule["cat_id"])) {
5144                                         $qpart .= " AND cat_id " . ($rule["cat_id"] ? '= ' . $rule["cat_id"] : 'IS NULL');
5145                                 }
5146
5147                                 array_push($query, "($qpart)");
5148
5149                         }
5150                 }
5151
5152                 if (count($query) > 0) {
5153                         return "(" . join($filter["match_any_rule"] ? "OR" : "AND", $query) . ")";
5154                 } else {
5155                         return "(false)";
5156                 }
5157         }
5158
5159         // Status codes:
5160         // -1  - never connected
5161         // 0   - no data received
5162         // 1   - data received successfully
5163         // 2   - did not receive valid data
5164         // >10 - server error, code + 10 (e.g. 16 means server error 6)
5165
5166         function get_linked_feeds($link, $instance_id = false) {
5167                 if ($instance_id)
5168                         $instance_qpart = "id = '$instance_id' AND ";
5169                 else
5170                         $instance_qpart = "";
5171
5172                 if (DB_TYPE == "pgsql") {
5173                         $date_qpart = "last_connected < NOW() - INTERVAL '6 hours'";
5174                 } else {
5175                         $date_qpart = "last_connected < DATE_SUB(NOW(), INTERVAL 6 HOUR)";
5176                 }
5177
5178                 $result = db_query($link, "SELECT id, access_key, access_url FROM ttrss_linked_instances
5179                         WHERE $instance_qpart $date_qpart ORDER BY last_connected");
5180
5181                 while ($line = db_fetch_assoc($result)) {
5182                         $id = $line['id'];
5183
5184                         _debug("Updating: " . $line['access_url'] . " ($id)");
5185
5186                         $fetch_url = $line['access_url'] . '/public.php?op=fbexport';
5187                         $post_query = 'key=' . $line['access_key'];
5188
5189                         $feeds = fetch_file_contents($fetch_url, false, false, false, $post_query);
5190
5191                         // try doing it the old way
5192                         if (!$feeds) {
5193                                 $fetch_url = $line['access_url'] . '/backend.php?op=fbexport';
5194                                 $feeds = fetch_file_contents($fetch_url, false, false, false, $post_query);
5195                         }
5196
5197                         if ($feeds) {
5198                                 $feeds = json_decode($feeds, true);
5199
5200                                 if ($feeds) {
5201                                         if ($feeds['error']) {
5202                                                 $status = $feeds['error']['code'] + 10;
5203                                         } else {
5204                                                 $status = 1;
5205
5206                                                 if (count($feeds['feeds']) > 0) {
5207
5208                                                         db_query($link, "DELETE FROM ttrss_linked_feeds
5209                                                                 WHERE instance_id = '$id'");
5210
5211                                                         foreach ($feeds['feeds'] as $feed) {
5212                                                                 $feed_url = db_escape_string($feed['feed_url']);
5213                                                                 $title = db_escape_string($feed['title']);
5214                                                                 $subscribers = db_escape_string($feed['subscribers']);
5215                                                                 $site_url = db_escape_string($feed['site_url']);
5216
5217                                                                 db_query($link, "INSERT INTO ttrss_linked_feeds
5218                                                                         (feed_url, site_url, title, subscribers, instance_id, created, updated)
5219                                                                 VALUES
5220                                                                         ('$feed_url', '$site_url', '$title', '$subscribers', '$id', NOW(), NOW())");
5221                                                         }
5222                                                 } else {
5223                                                         // received 0 feeds, this might indicate that
5224                                                         // the instance on the other hand is rebuilding feedbrowser cache
5225                                                         // we will try again later
5226
5227                                                         // TODO: maybe perform expiration based on updated here?
5228                                                 }
5229
5230                                                 _debug("Processed " . count($feeds['feeds']) . " feeds.");
5231                                         }
5232                                 } else {
5233                                         $status = 2;
5234                                 }
5235
5236                         } else {
5237                                 $status = 0;
5238                         }
5239
5240                         _debug("Status: $status");
5241
5242                         db_query($link, "UPDATE ttrss_linked_instances SET
5243                                 last_status_out = '$status', last_connected = NOW() WHERE id = '$id'");
5244
5245                 }
5246         }
5247
5248         function make_feed_browser($link, $search, $limit, $mode = 1) {
5249
5250                 $owner_uid = $_SESSION["uid"];
5251                 $rv = '';
5252
5253                 if ($search) {
5254                         $search_qpart = "AND (UPPER(feed_url) LIKE UPPER('%$search%') OR
5255                                                 UPPER(title) LIKE UPPER('%$search%'))";
5256                 } else {
5257                         $search_qpart = "";
5258                 }
5259
5260                 if ($mode == 1) {
5261                         /* $result = db_query($link, "SELECT feed_url, subscribers FROM
5262                          ttrss_feedbrowser_cache WHERE (SELECT COUNT(id) = 0 FROM ttrss_feeds AS tf
5263                         WHERE tf.feed_url = ttrss_feedbrowser_cache.feed_url
5264                         AND owner_uid = '$owner_uid') $search_qpart
5265                         ORDER BY subscribers DESC LIMIT $limit"); */
5266
5267                         $result = db_query($link, "SELECT feed_url, site_url, title, SUM(subscribers) AS subscribers FROM
5268                                                 (SELECT feed_url, site_url, title, subscribers FROM ttrss_feedbrowser_cache UNION ALL
5269                                                         SELECT feed_url, site_url, title, subscribers FROM ttrss_linked_feeds) AS qqq
5270                                                 WHERE
5271                                                         (SELECT COUNT(id) = 0 FROM ttrss_feeds AS tf
5272                                                                 WHERE tf.feed_url = qqq.feed_url
5273                                                                         AND owner_uid = '$owner_uid') $search_qpart
5274                                                 GROUP BY feed_url, site_url, title ORDER BY subscribers DESC LIMIT $limit");
5275
5276                 } else if ($mode == 2) {
5277                         $result = db_query($link, "SELECT *,
5278                                                 (SELECT COUNT(*) FROM ttrss_user_entries WHERE
5279                                                         orig_feed_id = ttrss_archived_feeds.id) AS articles_archived
5280                                                 FROM
5281                                                         ttrss_archived_feeds
5282                                                 WHERE
5283                                                 (SELECT COUNT(*) FROM ttrss_feeds
5284                                                         WHERE ttrss_feeds.feed_url = ttrss_archived_feeds.feed_url AND
5285                                                                 owner_uid = '$owner_uid') = 0   AND
5286                                                 owner_uid = '$owner_uid' $search_qpart
5287                                                 ORDER BY id DESC LIMIT $limit");
5288                 }
5289
5290                 $feedctr = 0;
5291
5292                 while ($line = db_fetch_assoc($result)) {
5293
5294                         if ($mode == 1) {
5295
5296                                 $feed_url = htmlspecialchars($line["feed_url"]);
5297                                 $site_url = htmlspecialchars($line["site_url"]);
5298                                 $subscribers = $line["subscribers"];
5299
5300                                 $check_box = "<input onclick='toggleSelectListRow2(this)'
5301                                                         dojoType=\"dijit.form.CheckBox\"
5302                                                         type=\"checkbox\" \">";
5303
5304                                 $class = ($feedctr % 2) ? "even" : "odd";
5305
5306                                 $site_url = "<a target=\"_blank\"
5307                                                         href=\"$site_url\">
5308                                                         <span class=\"fb_feedTitle\">".
5309                                 htmlspecialchars($line["title"])."</span></a>";
5310
5311                                 $feed_url = "<a target=\"_blank\" class=\"fb_feedUrl\"
5312                                                         href=\"$feed_url\"><img src='images/feed-icon-12x12.png'
5313                                                         style='vertical-align : middle'></a>";
5314
5315                                 $rv .= "<li>$check_box $feed_url $site_url".
5316                                                         "&nbsp;<span class='subscribers'>($subscribers)</span></li>";
5317
5318                         } else if ($mode == 2) {
5319                                 $feed_url = htmlspecialchars($line["feed_url"]);
5320                                 $site_url = htmlspecialchars($line["site_url"]);
5321                                 $title = htmlspecialchars($line["title"]);
5322
5323                                 $check_box = "<input onclick='toggleSelectListRow2(this)' dojoType=\"dijit.form.CheckBox\"
5324                                                         type=\"checkbox\">";
5325
5326                                 $class = ($feedctr % 2) ? "even" : "odd";
5327
5328                                 if ($line['articles_archived'] > 0) {
5329                                         $archived = sprintf(__("%d archived articles"), $line['articles_archived']);
5330                                         $archived = "&nbsp;<span class='subscribers'>($archived)</span>";
5331                                 } else {
5332                                         $archived = '';
5333                                 }
5334
5335                                 $site_url = "<a target=\"_blank\"
5336                                                         href=\"$site_url\">
5337                                                         <span class=\"fb_feedTitle\">".
5338                                 htmlspecialchars($line["title"])."</span></a>";
5339
5340                                 $feed_url = "<a target=\"_blank\" class=\"fb_feedUrl\"
5341                                                         href=\"$feed_url\"><img src='images/feed-icon-12x12.png'
5342                                                         style='vertical-align : middle'></a>";
5343
5344
5345                                 $rv .= "<li id=\"FBROW-".$line["id"]."\">".
5346                                                         "$check_box $feed_url $site_url $archived</li>";
5347                         }
5348
5349                         ++$feedctr;
5350                 }
5351
5352                 if ($feedctr == 0) {
5353                         $rv .= "<li style=\"text-align : center\"><p>".__('No feeds found.')."</p></li>";
5354                 }
5355
5356                 return $rv;
5357         }
5358
5359         if (!function_exists('gzdecode')) {
5360                 function gzdecode($string) { // no support for 2nd argument
5361                         return file_get_contents('compress.zlib://data:who/cares;base64,'.
5362                                 base64_encode($string));
5363                 }
5364         }
5365
5366         function perform_data_import($link, $filename, $owner_uid) {
5367
5368                 $num_imported = 0;
5369                 $num_processed = 0;
5370                 $num_feeds_created = 0;
5371
5372                 $doc = @DOMDocument::load($filename);
5373
5374                 if (!$doc) {
5375                         $contents = file_get_contents($filename);
5376
5377                         if ($contents) {
5378                                 $data = @gzuncompress($contents);
5379                         }
5380
5381                         if (!$data) {
5382                                 $data = @gzdecode($contents);
5383                         }
5384
5385                         if ($data)
5386                                 $doc = DOMDocument::loadXML($data);
5387                 }
5388
5389                 if ($doc) {
5390
5391                         $xpath = new DOMXpath($doc);
5392
5393                         $container = $doc->firstChild;
5394
5395                         if ($container && $container->hasAttribute('schema-version')) {
5396                                 $schema_version = $container->getAttribute('schema-version');
5397
5398                                 if ($schema_version != SCHEMA_VERSION) {
5399                                         print "<p>" .__("Could not import: incorrect schema version.") . "</p>";
5400                                         return;
5401                                 }
5402
5403                         } else {
5404                                 print "<p>" . __("Could not import: unrecognized document format.") . "</p>";
5405                                 return;
5406                         }
5407
5408                         $articles = $xpath->query("//article");
5409
5410                         foreach ($articles as $article_node) {
5411                                 if ($article_node->childNodes) {
5412
5413                                         $ref_id = 0;
5414
5415                                         $article = array();
5416
5417                                         foreach ($article_node->childNodes as $child) {
5418                                                 if ($child->nodeName != 'label_cache')
5419                                                         $article[$child->nodeName] = db_escape_string($child->nodeValue);
5420                                                 else
5421                                                         $article[$child->nodeName] = $child->nodeValue;
5422                                         }
5423
5424                                         //print_r($article);
5425
5426                                         if ($article['guid']) {
5427
5428                                                 ++$num_processed;
5429
5430                                                 //db_query($link, "BEGIN");
5431
5432                                                 //print 'GUID:' . $article['guid'] . "\n";
5433
5434                                                 $result = db_query($link, "SELECT id FROM ttrss_entries
5435                                                         WHERE guid = '".$article['guid']."'");
5436
5437                                                 if (db_num_rows($result) == 0) {
5438
5439                                                         $result = db_query($link,
5440                                                                 "INSERT INTO ttrss_entries
5441                                                                         (title,
5442                                                                         guid,
5443                                                                         link,
5444                                                                         updated,
5445                                                                         content,
5446                                                                         content_hash,
5447                                                                         no_orig_date,
5448                                                                         date_updated,
5449                                                                         date_entered,
5450                                                                         comments,
5451                                                                         num_comments,
5452                                                                         author)
5453                                                                 VALUES
5454                                                                         ('".$article['title']."',
5455                                                                         '".$article['guid']."',
5456                                                                         '".$article['link']."',
5457                                                                         '".$article['updated']."',
5458                                                                         '".$article['content']."',
5459                                                                         '".sha1($article['content'])."',
5460                                                                         false,
5461                                                                         NOW(),
5462                                                                         NOW(),
5463                                                                         '',
5464                                                                         '0',
5465                                                                         '')");
5466
5467                                                         $result = db_query($link, "SELECT id FROM ttrss_entries
5468                                                                 WHERE guid = '".$article['guid']."'");
5469
5470                                                         if (db_num_rows($result) != 0) {
5471                                                                 $ref_id = db_fetch_result($result, 0, "id");
5472                                                         }
5473
5474                                                 } else {
5475                                                         $ref_id = db_fetch_result($result, 0, "id");
5476                                                 }
5477
5478                                                 //print "Got ref ID: $ref_id\n";
5479
5480                                                 if ($ref_id) {
5481
5482                                                         $feed_url = $article['feed_url'];
5483                                                         $feed_title = $article['feed_title'];
5484
5485                                                         $feed = 'NULL';
5486
5487                                                         if ($feed_url && $feed_title) {
5488                                                                 $result = db_query($link, "SELECT id FROM ttrss_feeds
5489                                                                         WHERE feed_url = '$feed_url' AND owner_uid = '$owner_uid'");
5490
5491                                                                 if (db_num_rows($result) != 0) {
5492                                                                         $feed = db_fetch_result($result, 0, "id");
5493                                                                 } else {
5494                                                                         // try autocreating feed in Uncategorized...
5495
5496                                                                         $result = db_query($link, "INSERT INTO ttrss_feeds (owner_uid,
5497                                                                                 feed_url, title) VALUES ($owner_uid, '$feed_url', '$feed_title')");
5498
5499                                                                         $result = db_query($link, "SELECT id FROM ttrss_feeds
5500                                                                                 WHERE feed_url = '$feed_url' AND owner_uid = '$owner_uid'");
5501
5502                                                                         if (db_num_rows($result) != 0) {
5503                                                                                 ++$num_feeds_created;
5504
5505                                                                                 $feed = db_fetch_result($result, 0, "id");
5506                                                                         }
5507                                                                 }
5508                                                         }
5509
5510                                                         if ($feed != 'NULL')
5511                                                                 $feed_qpart = "feed_id = $feed";
5512                                                         else
5513                                                                 $feed_qpart = "feed_id IS NULL";
5514
5515                                                         //print "$ref_id / $feed / " . $article['title'] . "\n";
5516
5517                                                         $result = db_query($link, "SELECT int_id FROM ttrss_user_entries
5518                                                                 WHERE ref_id = '$ref_id' AND owner_uid = '$owner_uid' AND $feed_qpart");
5519
5520                                                         if (db_num_rows($result) == 0) {
5521
5522                                                                 $marked = bool_to_sql_bool(sql_bool_to_bool($article['marked']));
5523                                                                 $published = bool_to_sql_bool(sql_bool_to_bool($article['published']));
5524                                                                 $score = (int) $article['score'];
5525
5526                                                                 $tag_cache = $article['tag_cache'];
5527                                                                 $label_cache = db_escape_string($article['label_cache']);
5528                                                                 $note = $article['note'];
5529
5530                                                                 //print "Importing " . $article['title'] . "<br/>";
5531
5532                                                                 ++$num_imported;
5533
5534                                                                 $result = db_query($link,
5535                                                                         "INSERT INTO ttrss_user_entries
5536                                                                         (ref_id, owner_uid, feed_id, unread, last_read, marked,
5537                                                                                 published, score, tag_cache, label_cache, uuid, note)
5538                                                                         VALUES ($ref_id, $owner_uid, $feed, false,
5539                                                                                 NULL, $marked, $published, $score, '$tag_cache',
5540                                                                                         '$label_cache', '', '$note')");
5541
5542                                                                 $label_cache = json_decode($label_cache, true);
5543
5544                                                                 if (is_array($label_cache) && $label_cache["no-labels"] != 1) {
5545                                                                         foreach ($label_cache as $label) {
5546
5547                                                                                 label_create($link, $label[1],
5548                                                                                         $label[2], $label[3], $owner_uid);
5549
5550                                                                                 label_add_article($link, $ref_id, $label[1], $owner_uid);
5551
5552                                                                         }
5553                                                                 }
5554
5555                                                                 //db_query($link, "COMMIT");
5556                                                         }
5557                                                 }
5558                                         }
5559                                 }
5560                         }
5561
5562                         print "<p>" .
5563                                 T_sprintf("Finished: %d articles processed, %d imported, %d feeds created.",
5564                                         $num_processed, $num_imported, $num_feeds_created) .
5565                                         "</p>";
5566
5567                 } else {
5568
5569                         print "<p>" . __("Could not load XML document.") . "</p>";
5570
5571                 }
5572         }
5573
5574         function get_random_bytes($length) {
5575                 if (function_exists('openssl_random_pseudo_bytes')) {
5576                         return openssl_random_pseudo_bytes($length);
5577                 } else {
5578                         $output = "";
5579
5580                         for ($i = 0; $i < $length; $i++)
5581                                 $output .= chr(mt_rand(0, 255));
5582
5583                         return $output;
5584                 }
5585         }
5586
5587         function read_stdin() {
5588                 $fp = fopen("php://stdin", "r");
5589
5590                 if ($fp) {
5591                         $line = trim(fgets($fp));
5592                         fclose($fp);
5593                         return $line;
5594                 }
5595
5596                 return null;
5597         }
5598
5599         function tmpdirname($path, $prefix) {
5600                 // Use PHP's tmpfile function to create a temporary
5601                 // directory name. Delete the file and keep the name.
5602                 $tempname = tempnam($path,$prefix);
5603                 if (!$tempname)
5604                         return false;
5605
5606                 if (!unlink($tempname))
5607                         return false;
5608
5609        return $tempname;
5610         }
5611
5612         function getFeedCategory($link, $feed) {
5613                 $result = db_query($link, "SELECT cat_id FROM ttrss_feeds
5614                         WHERE id = '$feed'");
5615
5616                 if (db_num_rows($result) > 0) {
5617                         return db_fetch_result($result, 0, "cat_id");
5618                 } else {
5619                         return false;
5620                 }
5621
5622         }
5623
5624         function create_published_article($link, $title, $url, $content, $owner_uid) {
5625                 $guid = sha1($url);
5626                 $content_hash = sha1($content);
5627
5628                 $rc = false;
5629
5630                 if (!$title) $title = $url;
5631                 if (!$title && !$url) return false;
5632
5633                 if (filter_var($url, FILTER_VALIDATE_URL) === FALSE) return false;
5634
5635                 db_query($link, "BEGIN");
5636
5637                 // only check for our user data here, others might have shared this with different content etc
5638                 $result = db_query($link, "SELECT id FROM ttrss_entries, ttrss_user_entries WHERE
5639                         link = '$url' AND ref_id = id AND owner_uid = '$owner_uid' LIMIT 1");
5640
5641                 if (db_num_rows($result) != 0) {
5642                         $ref_id = db_fetch_result($result, 0, "id");
5643
5644                         $result = db_query($link, "SELECT int_id FROM ttrss_user_entries WHERE
5645                                 ref_id = '$ref_id' AND owner_uid = '$owner_uid' LIMIT 1");
5646
5647                         if (db_num_rows($result) != 0) {
5648                                 $int_id = db_fetch_result($result, 0, "int_id");
5649
5650                                 db_query($link, "UPDATE ttrss_entries SET
5651                                         content = '$content', content_hash = '$content_hash' WHERE id = '$ref_id'");
5652
5653                                 db_query($link, "UPDATE ttrss_user_entries SET published = true WHERE
5654                                                 int_id = '$int_id' AND owner_uid = '$owner_uid'");
5655                         } else {
5656
5657                                 db_query($link, "INSERT INTO ttrss_user_entries
5658                                         (ref_id, uuid, feed_id, orig_feed_id, owner_uid, published, tag_cache, label_cache, last_read, note, unread)
5659                                         VALUES
5660                                         ('$ref_id', '', NULL, NULL, $owner_uid, true, '', '', NOW(), '', false)");
5661                         }
5662
5663                         $rc = true;
5664
5665                 } else {
5666                         $result = db_query($link, "INSERT INTO ttrss_entries
5667                                 (title, guid, link, updated, content, content_hash, date_entered, date_updated)
5668                                 VALUES
5669                                 ('$title', '$guid', '$url', NOW(), '$content', '$content_hash', NOW(), NOW())");
5670
5671                         $result = db_query($link, "SELECT id FROM ttrss_entries WHERE guid = '$guid'");
5672
5673                         if (db_num_rows($result) != 0) {
5674                                 $ref_id = db_fetch_result($result, 0, "id");
5675
5676                                 db_query($link, "INSERT INTO ttrss_user_entries
5677                                         (ref_id, uuid, feed_id, orig_feed_id, owner_uid, published, tag_cache, label_cache, last_read, note, unread)
5678                                         VALUES
5679                                         ('$ref_id', '', NULL, NULL, $owner_uid, true, '', '', NOW(), '', false)");
5680
5681                                 $rc = true;
5682                         }
5683                 }
5684
5685                 db_query($link, "COMMIT");
5686
5687                 return $rc;
5688         }
5689
5690 ?>