include/functions.php

   1 <?php
   2         define('EXPECTED_CONFIG_VERSION', 26);
   3         define('SCHEMA_VERSION', 97);
   4
   5         $fetch_last_error = false;
   6
   7         function __autoload($class) {
   8                 $class_file = str_replace("_", "/", strtolower(basename($class)));
   9
  10                 $file = dirname(__FILE__)."/../classes/$class_file.php";
  11
  12                 if (file_exists($file)) {
  13                         require $file;
  14                 }
  15         }
  16
  17         mb_internal_encoding("UTF-8");
  18         date_default_timezone_set('UTC');
  19         if (defined('E_DEPRECATED')) {
  20                 error_reporting(E_ALL & ~E_NOTICE & ~E_DEPRECATED);
  21         } else {
  22                 error_reporting(E_ALL & ~E_NOTICE);
  23         }
  24
  25         require_once 'config.php';
  26
  27         if (DB_TYPE == "pgsql") {
  28                 define('SUBSTRING_FOR_DATE', 'SUBSTRING_FOR_DATE');
  29         } else {
  30                 define('SUBSTRING_FOR_DATE', 'SUBSTRING');
  31         }
  32
  33         define('THEME_VERSION_REQUIRED', 1.1);
  34
  35         /**
  36          * Return available translations names.
  37          *
  38          * @access public
  39          * @return array A array of available translations.
  40          */
  41         function get_translations() {
  42                 $tr = array(
  43                                         "auto"  => "Detect automatically",
  44                                         "ca_CA" => "Català",
  45                                         "en_US" => "English",
  46                                         "es_ES" => "Español",
  47                                         "de_DE" => "Deutsch",
  48                                         "fr_FR" => "Français",
  49                                         "hu_HU" => "Magyar (Hungarian)",
  50                                         "it_IT" => "Italiano",
  51                                         "ja_JP" => "日本語 (Japanese)",
  52                                         "nb_NO" => "Norwegian bokmål",
  53                                         "ru_RU" => "Русский",
  54                                         "pt_BR" => "Portuguese/Brazil",
  55                                         "zh_CN" => "Simplified Chinese");
  56
  57                 return $tr;
  58         }
  59
  60         require_once "lib/accept-to-gettext.php";
  61         require_once "lib/gettext/gettext.inc";
  62
  63         function startup_gettext() {
  64
  65                 # Get locale from Accept-Language header
  66                 $lang = al2gt(array_keys(get_translations()), "text/html");
  67
  68                 if (defined('_TRANSLATION_OVERRIDE_DEFAULT')) {
  69                         $lang = _TRANSLATION_OVERRIDE_DEFAULT;
  70                 }
  71
  72                 if ($_COOKIE["ttrss_lang"] && $_COOKIE["ttrss_lang"] != "auto") {
  73                         $lang = $_COOKIE["ttrss_lang"];
  74                 }
  75
  76                 /* In login action of mobile version */
  77                 if ($_POST["language"] && defined('MOBILE_VERSION')) {
  78                         $lang = $_POST["language"];
  79                         $_COOKIE["ttrss_lang"] = $lang;
  80                 }
  81
  82                 if ($lang) {
  83                         if (defined('LC_MESSAGES')) {
  84                                 _setlocale(LC_MESSAGES, $lang);
  85                         } else if (defined('LC_ALL')) {
  86                                 _setlocale(LC_ALL, $lang);
  87                         }
  88
  89                         if (defined('MOBILE_VERSION')) {
  90                                 _bindtextdomain("messages", "../locale");
  91                         } else {
  92                                 _bindtextdomain("messages", "locale");
  93                         }
  94
  95                         _textdomain("messages");
  96                         _bind_textdomain_codeset("messages", "UTF-8");
  97                 }
  98         }
  99
 100         startup_gettext();
 101
 102         require_once 'db-prefs.php';
 103         require_once 'version.php';
 104
 105         define('MAGPIE_OUTPUT_ENCODING', 'UTF-8');
 106
 107         define('SELF_USER_AGENT', 'Tiny Tiny RSS/' . VERSION . ' (http://tt-rss.org/)');
 108         define('MAGPIE_USER_AGENT', SELF_USER_AGENT);
 109
 110         ini_set('user_agent', SELF_USER_AGENT);
 111
 112         require_once 'lib/pubsubhubbub/publisher.php';
 113
 114         $purifier = false;
 115
 116         $tz_offset = -1;
 117         $utc_tz = new DateTimeZone('UTC');
 118         $schema_version = false;
 119
 120         /**
 121          * Print a timestamped debug message.
 122          *
 123          * @param string $msg The debug message.
 124          * @return void
 125          */
 126         function _debug($msg) {
 127                 if (defined('QUIET') && QUIET) {
 128                         return;
 129                 }
 130                 $ts = strftime("%H:%M:%S", time());
 131                 if (function_exists('posix_getpid')) {
 132                         $ts = "$ts/" . posix_getpid();
 133                 }
 134                 print "[$ts] $msg\n";
 135         } // function _debug
 136
 137         /**
 138          * Purge a feed old posts.
 139          *
 140          * @param mixed $link A database connection.
 141          * @param mixed $feed_id The id of the purged feed.
 142          * @param mixed $purge_interval Olderness of purged posts.
 143          * @param boolean $debug Set to True to enable the debug. False by default.
 144          * @access public
 145          * @return void
 146          */
 147         function purge_feed($link, $feed_id, $purge_interval, $debug = false) {
 148
 149                 if (!$purge_interval) $purge_interval = feed_purge_interval($link, $feed_id);
 150
 151                 $rows = -1;
 152
 153                 $result = db_query($link,
 154                         "SELECT owner_uid FROM ttrss_feeds WHERE id = '$feed_id'");
 155
 156                 $owner_uid = false;
 157
 158                 if (db_num_rows($result) == 1) {
 159                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 160                 }
 161
 162                 if ($purge_interval == -1 || !$purge_interval) {
 163                         if ($owner_uid) {
 164                                 ccache_update($link, $feed_id, $owner_uid);
 165                         }
 166                         return;
 167                 }
 168
 169                 if (!$owner_uid) return;
 170
 171                 if (FORCE_ARTICLE_PURGE == 0) {
 172                         $purge_unread = get_pref($link, "PURGE_UNREAD_ARTICLES",
 173                                 $owner_uid, false);
 174                 } else {
 175                         $purge_unread = true;
 176                         $purge_interval = FORCE_ARTICLE_PURGE;
 177                 }
 178
 179                 if (!$purge_unread) $query_limit = " unread = false AND ";
 180
 181                 if (DB_TYPE == "pgsql") {
 182                         $pg_version = get_pgsql_version($link);
 183
 184                         if (preg_match("/^7\./", $pg_version) || preg_match("/^8\.0/", $pg_version)) {
 185
 186                                 $result = db_query($link, "DELETE FROM ttrss_user_entries WHERE
 187                                         ttrss_entries.id = ref_id AND
 188                                         marked = false AND
 189                                         feed_id = '$feed_id' AND
 190                                         $query_limit
 191                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 192
 193                         } else {
 194
 195                                 $result = db_query($link, "DELETE FROM ttrss_user_entries
 196                                         USING ttrss_entries
 197                                         WHERE ttrss_entries.id = ref_id AND
 198                                         marked = false AND
 199                                         feed_id = '$feed_id' AND
 200                                         $query_limit
 201                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 202                         }
 203
 204                         $rows = pg_affected_rows($result);
 205
 206                 } else {
 207
 208 /*                      $result = db_query($link, "DELETE FROM ttrss_user_entries WHERE
 209                                 marked = false AND feed_id = '$feed_id' AND
 210                                 (SELECT date_updated FROM ttrss_entries WHERE
 211                                         id = ref_id) < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)"); */
 212
 213                         $result = db_query($link, "DELETE FROM ttrss_user_entries
 214                                 USING ttrss_user_entries, ttrss_entries
 215                                 WHERE ttrss_entries.id = ref_id AND
 216                                 marked = false AND
 217                                 feed_id = '$feed_id' AND
 218                                 $query_limit
 219                                 ttrss_entries.date_updated < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)");
 220
 221                         $rows = mysql_affected_rows($link);
 222
 223                 }
 224
 225                 ccache_update($link, $feed_id, $owner_uid);
 226
 227                 if ($debug) {
 228                         _debug("Purged feed $feed_id ($purge_interval): deleted $rows articles");
 229                 }
 230         } // function purge_feed
 231
 232         function feed_purge_interval($link, $feed_id) {
 233
 234                 $result = db_query($link, "SELECT purge_interval, owner_uid FROM ttrss_feeds
 235                         WHERE id = '$feed_id'");
 236
 237                 if (db_num_rows($result) == 1) {
 238                         $purge_interval = db_fetch_result($result, 0, "purge_interval");
 239                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 240
 241                         if ($purge_interval == 0) $purge_interval = get_pref($link,
 242                                 'PURGE_OLD_DAYS', $owner_uid);
 243
 244                         return $purge_interval;
 245
 246                 } else {
 247                         return -1;
 248                 }
 249         }
 250
 251         function purge_orphans($link, $do_output = false) {
 252
 253                 // purge orphaned posts in main content table
 254                 $result = db_query($link, "DELETE FROM ttrss_entries WHERE
 255                         (SELECT COUNT(int_id) FROM ttrss_user_entries WHERE ref_id = id) = 0");
 256
 257                 if ($do_output) {
 258                         $rows = db_affected_rows($link, $result);
 259                         _debug("Purged $rows orphaned posts.");
 260                 }
 261         }
 262
 263         function get_feed_update_interval($link, $feed_id) {
 264                 $result = db_query($link, "SELECT owner_uid, update_interval FROM
 265                         ttrss_feeds WHERE id = '$feed_id'");
 266
 267                 if (db_num_rows($result) == 1) {
 268                         $update_interval = db_fetch_result($result, 0, "update_interval");
 269                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 270
 271                         if ($update_interval != 0) {
 272                                 return $update_interval;
 273                         } else {
 274                                 return get_pref($link, 'DEFAULT_UPDATE_INTERVAL', $owner_uid, false);
 275                         }
 276
 277                 } else {
 278                         return -1;
 279                 }
 280         }
 281
 282         function fetch_file_contents($url, $type = false, $login = false, $pass = false, $post_query = false) {
 283                 $login = urlencode($login);
 284                 $pass = urlencode($pass);
 285
 286                 global $fetch_last_error;
 287
 288                 if (function_exists('curl_init') && !ini_get("open_basedir")) {
 289                         $ch = curl_init($url);
 290
 291                         curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 15);
 292                         curl_setopt($ch, CURLOPT_TIMEOUT, 45);
 293                         curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
 294                         curl_setopt($ch, CURLOPT_MAXREDIRS, 20);
 295                         curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
 296                         curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
 297                         curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
 298                         curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_ANY);
 299                         curl_setopt($ch, CURLOPT_USERAGENT, SELF_USER_AGENT);
 300                         curl_setopt($ch, CURLOPT_ENCODING , "gzip");
 301
 302                         if ($post_query) {
 303                                 curl_setopt($ch, CURLOPT_POST, true);
 304                                 curl_setopt($ch, CURLOPT_POSTFIELDS, $post_query);
 305                         }
 306
 307                         if ($login && $pass)
 308                                 curl_setopt($ch, CURLOPT_USERPWD, "$login:$pass");
 309
 310                         $contents = @curl_exec($ch);
 311
 312                         if ($contents === false) {
 313                                 $fetch_last_error = curl_error($ch);
 314                                 curl_close($ch);
 315                                 return false;
 316                         }
 317
 318                         $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
 319                         $content_type = curl_getinfo($ch, CURLINFO_CONTENT_TYPE);
 320                         curl_close($ch);
 321
 322                         if ($http_code != 200 || $type && strpos($content_type, "$type") === false) {
 323                                 return false;
 324                         }
 325
 326                         return $contents;
 327                 } else {
 328                         if ($login && $pass ){
 329                                 $url_parts = array();
 330
 331                                 preg_match("/(^[^:]*):\/\/(.*)/", $url, $url_parts);
 332
 333                                 if ($url_parts[1] && $url_parts[2]) {
 334                                         $url = $url_parts[1] . "://$login:$pass@" . $url_parts[2];
 335                                 }
 336                         }
 337
 338                         $data = @file_get_contents($url);
 339
 340                         if (!$data && function_exists('error_get_last')) {
 341                                 $error = error_get_last();
 342                                 $fetch_last_error = $error["message"];
 343                         }
 344                         return $data;
 345                 }
 346
 347         }
 348
 349         /**
 350          * Try to determine the favicon URL for a feed.
 351          * adapted from wordpress favicon plugin by Jeff Minard (http://thecodepro.com/)
 352          * http://dev.wp-plugins.org/file/favatars/trunk/favatars.php
 353          *
 354          * @param string $url A feed or page URL
 355          * @access public
 356          * @return mixed The favicon URL, or false if none was found.
 357          */
 358         function get_favicon_url($url) {
 359
 360                 $favicon_url = false;
 361
 362                 if ($html = @fetch_file_contents($url)) {
 363
 364                         libxml_use_internal_errors(true);
 365
 366                         $doc = new DOMDocument();
 367                         $doc->loadHTML($html);
 368                         $xpath = new DOMXPath($doc);
 369
 370                         $base = $xpath->query('/html/head/base');
 371                         foreach ($base as $b) {
 372                                 $url = $b->getAttribute("href");
 373                                 break;
 374                         }
 375
 376                         $entries = $xpath->query('/html/head/link[@rel="shortcut icon" or @rel="icon"]');
 377                         if (count($entries) > 0) {
 378                                 foreach ($entries as $entry) {
 379                                         $favicon_url = rewrite_relative_url($url, $entry->getAttribute("href"));
 380                                         break;
 381                                 }
 382                         }
 383                 }
 384
 385                 if (!$favicon_url)
 386                         $favicon_url = rewrite_relative_url($url, "/favicon.ico");
 387
 388                 return $favicon_url;
 389         } // function get_favicon_url
 390
 391         function check_feed_favicon($site_url, $feed, $link) {
 392 #               print "FAVICON [$site_url]: $favicon_url\n";
 393
 394                 $icon_file = ICONS_DIR . "/$feed.ico";
 395
 396                 if (!file_exists($icon_file)) {
 397                         $favicon_url = get_favicon_url($site_url);
 398
 399                         if ($favicon_url) {
 400                                 // Limiting to "image" type misses those served with text/plain
 401                                 $contents = fetch_file_contents($favicon_url); // , "image");
 402
 403                                 if ($contents) {
 404                                         // Crude image type matching.
 405                                         // Patterns gleaned from the file(1) source code.
 406                                         if (preg_match('/^\x00\x00\x01\x00/', $contents)) {
 407                                                 // 0       string  \000\000\001\000        MS Windows icon resource
 408                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa MS Windows icon resource");
 409                                         }
 410                                         elseif (preg_match('/^GIF8/', $contents)) {
 411                                                 // 0       string          GIF8            GIF image data
 412                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa GIF image");
 413                                         }
 414                                         elseif (preg_match('/^\x89PNG\x0d\x0a\x1a\x0a/', $contents)) {
 415                                                 // 0       string          \x89PNG\x0d\x0a\x1a\x0a         PNG image data
 416                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa PNG image");
 417                                         }
 418                                         elseif (preg_match('/^\xff\xd8/', $contents)) {
 419                                                 // 0       beshort         0xffd8          JPEG image data
 420                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa JPG image");
 421                                         }
 422                                         else {
 423                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa UNKNOWN type");
 424                                                 $contents = "";
 425                                         }
 426                                 }
 427
 428                                 if ($contents) {
 429                                         $fp = @fopen($icon_file, "w");
 430
 431                                         if ($fp) {
 432                                                 fwrite($fp, $contents);
 433                                                 fclose($fp);
 434                                                 chmod($icon_file, 0644);
 435                                         }
 436                                 }
 437                         }
 438                 }
 439         }
 440
 441         function print_select($id, $default, $values, $attributes = "") {
 442                 print "<select name=\"$id\" id=\"$id\" $attributes>";
 443                 foreach ($values as $v) {
 444                         if ($v == $default)
 445                                 $sel = "selected=\"1\"";
 446                          else
 447                                 $sel = "";
 448
 449                         print "<option value=\"$v\" $sel>$v</option>";
 450                 }
 451                 print "</select>";
 452         }
 453
 454         function print_select_hash($id, $default, $values, $attributes = "") {
 455                 print "<select name=\"$id\" id='$id' $attributes>";
 456                 foreach (array_keys($values) as $v) {
 457                         if ($v == $default)
 458                                 $sel = 'selected="selected"';
 459                          else
 460                                 $sel = "";
 461
 462                         print "<option $sel value=\"$v\">".$values[$v]."</option>";
 463                 }
 464
 465                 print "</select>";
 466         }
 467
 468         function get_article_filters($filters, $title, $content, $link, $timestamp, $author, $tags) {
 469                 $matches = array();
 470
 471                 foreach ($filters as $filter) {
 472                         $match_any_rule = $filter["match_any_rule"];
 473                         $filter_match = false;
 474
 475                         foreach ($filter["rules"] as $rule) {
 476                                 $match = false;
 477                                 $reg_exp = $rule["reg_exp"];
 478
 479                                 if (!$reg_exp)
 480                                         continue;
 481
 482                                 switch ($rule["type"]) {
 483                                 case "title":
 484                                         $match = @preg_match("/$reg_exp/i", $title);
 485                                         break;
 486                                 case "content":
 487                                         $match = @preg_match("/$reg_exp/i", $content);
 488                                         break;
 489                                 case "both":
 490                                         $match = (@preg_match("/$reg_exp/i", $title) || @preg_match("/$reg_exp/i", $title));
 491                                         break;
 492                                 case "link":
 493                                         $match = @preg_match("/$reg_exp/i", $link);
 494                                         break;
 495                                 case "author":
 496                                         $match = @preg_match("/$reg_exp/i", $author);
 497                                         break;
 498                                 case "tag":
 499                                         $tag_string = join(",", $tags);
 500                                         $match = @preg_match("/$reg_exp/i", $tag_string);
 501                                         break;
 502                                 }
 503
 504                                 if ($match_any_rule) {
 505                                         if ($match) {
 506                                                 $filter_match = true;
 507                                                 break;
 508                                         }
 509                                 } else {
 510                                         $filter_match = $match;
 511                                         if (!$match) {
 512                                                 break;
 513                                         }
 514                                 }
 515                         }
 516
 517                         if ($filter_match) {
 518                                 foreach ($filter["actions"] AS $action) {
 519                                         array_push($matches, $action);
 520                                 }
 521                         }
 522                 }
 523
 524                 return $matches;
 525         }
 526
 527         function find_article_filter($filters, $filter_name) {
 528                 foreach ($filters as $f) {
 529                         if ($f["type"] == $filter_name) {
 530                                 return $f;
 531                         };
 532                 }
 533                 return false;
 534         }
 535
 536         function find_article_filters($filters, $filter_name) {
 537                 $results = array();
 538
 539                 foreach ($filters as $f) {
 540                         if ($f["type"] == $filter_name) {
 541                                 array_push($results, $f);
 542                         };
 543                 }
 544                 return $results;
 545         }
 546
 547         function calculate_article_score($filters) {
 548                 $score = 0;
 549
 550                 foreach ($filters as $f) {
 551                         if ($f["type"] == "score") {
 552                                 $score += $f["param"];
 553                         };
 554                 }
 555                 return $score;
 556         }
 557
 558         function assign_article_to_labels($link, $id, $filters, $owner_uid) {
 559                 foreach ($filters as $f) {
 560                         if ($f["type"] == "label") {
 561                                 label_add_article($link, $id, $f["param"], $owner_uid);
 562                         };
 563                 }
 564         }
 565
 566         function getmicrotime() {
 567                 list($usec, $sec) = explode(" ",microtime());
 568                 return ((float)$usec + (float)$sec);
 569         }
 570
 571         function print_radio($id, $default, $true_is, $values, $attributes = "") {
 572                 foreach ($values as $v) {
 573
 574                         if ($v == $default)
 575                                 $sel = "checked";
 576                          else
 577                                 $sel = "";
 578
 579                         if ($v == $true_is) {
 580                                 $sel .= " value=\"1\"";
 581                         } else {
 582                                 $sel .= " value=\"0\"";
 583                         }
 584
 585                         print "<input class=\"noborder\" dojoType=\"dijit.form.RadioButton\"
 586                                 type=\"radio\" $sel $attributes name=\"$id\">&nbsp;$v&nbsp;";
 587
 588                 }
 589         }
 590
 591         function initialize_user_prefs($link, $uid, $profile = false) {
 592
 593                 $uid = db_escape_string($uid);
 594
 595                 if (!$profile) {
 596                         $profile = "NULL";
 597                         $profile_qpart = "AND profile IS NULL";
 598                 } else {
 599                         $profile_qpart = "AND profile = '$profile'";
 600                 }
 601
 602                 if (get_schema_version($link) < 63) $profile_qpart = "";
 603
 604                 db_query($link, "BEGIN");
 605
 606                 $result = db_query($link, "SELECT pref_name,def_value FROM ttrss_prefs");
 607
 608                 $u_result = db_query($link, "SELECT pref_name
 609                         FROM ttrss_user_prefs WHERE owner_uid = '$uid' $profile_qpart");
 610
 611                 $active_prefs = array();
 612
 613                 while ($line = db_fetch_assoc($u_result)) {
 614                         array_push($active_prefs, $line["pref_name"]);
 615                 }
 616
 617                 while ($line = db_fetch_assoc($result)) {
 618                         if (array_search($line["pref_name"], $active_prefs) === FALSE) {
 619 //                              print "adding " . $line["pref_name"] . "<br>";
 620
 621                                 if (get_schema_version($link) < 63) {
 622                                         db_query($link, "INSERT INTO ttrss_user_prefs
 623                                                 (owner_uid,pref_name,value) VALUES
 624                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."')");
 625
 626                                 } else {
 627                                         db_query($link, "INSERT INTO ttrss_user_prefs
 628                                                 (owner_uid,pref_name,value, profile) VALUES
 629                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."', $profile)");
 630                                 }
 631
 632                         }
 633                 }
 634
 635                 db_query($link, "COMMIT");
 636
 637         }
 638
 639         function get_ssl_certificate_id() {
 640                 if ($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"]) {
 641                         return sha1($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"] .
 642                                 $_SERVER["REDIRECT_SSL_CLIENT_V_START"] .
 643                                 $_SERVER["REDIRECT_SSL_CLIENT_V_END"] .
 644                                 $_SERVER["REDIRECT_SSL_CLIENT_S_DN"]);
 645                 }
 646                 return "";
 647         }
 648
 649         function authenticate_user($link, $login, $password, $check_only = false) {
 650
 651                 if (!SINGLE_USER_MODE) {
 652
 653                         $user_id = false;
 654                         $modules = explode(",", AUTH_MODULES);
 655
 656                         foreach ($modules as $module) {
 657                                 $module_class = "auth_$module";
 658                                 if (class_exists($module_class)) {
 659                                         $authenticator = new $module_class($link);
 660
 661                                         $user_id = (int) $authenticator->authenticate($login, $password);
 662
 663                                         if ($user_id) {
 664                                                 $_SESSION["auth_module"] = $module;
 665                                                 break;
 666                                         }
 667
 668                                 } else {
 669                                         print T_sprintf("Fatal: authentication module %s not found.", $module);
 670                                         die;
 671                                 }
 672                         }
 673
 674                         if ($user_id && !$check_only) {
 675                                 $_SESSION["uid"] = $user_id;
 676
 677                                 $result = db_query($link, "SELECT login,access_level,pwd_hash FROM ttrss_users
 678                                         WHERE id = '$user_id'");
 679
 680                                 $_SESSION["name"] = db_fetch_result($result, 0, "login");
 681                                 $_SESSION["access_level"] = db_fetch_result($result, 0, "access_level");
 682                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 683
 684                                 db_query($link, "UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 685                                         $_SESSION["uid"]);
 686
 687                                 $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 688                                 $_SESSION["pwd_hash"] = db_fetch_result($result, 0, "pwd_hash");
 689
 690                                 $_SESSION["last_version_check"] = time();
 691
 692                                 initialize_user_prefs($link, $_SESSION["uid"]);
 693
 694                                 return true;
 695                         }
 696
 697                         return false;
 698
 699                 } else {
 700
 701                         $_SESSION["uid"] = 1;
 702                         $_SESSION["name"] = "admin";
 703                         $_SESSION["access_level"] = 10;
 704
 705                         $_SESSION["hide_hello"] = true;
 706                         $_SESSION["hide_logout"] = true;
 707
 708                         $_SESSION["auth_module"] = false;
 709
 710                         if (!$_SESSION["csrf_token"]) {
 711                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 712                         }
 713
 714                         $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 715
 716                         initialize_user_prefs($link, $_SESSION["uid"]);
 717
 718                         return true;
 719                 }
 720         }
 721
 722         function make_password($length = 8) {
 723
 724                 $password = "";
 725                 $possible = "0123456789abcdfghjkmnpqrstvwxyzABCDFGHJKMNPQRSTVWXYZ";
 726
 727         $i = 0;
 728
 729                 while ($i < $length) {
 730                         $char = substr($possible, mt_rand(0, strlen($possible)-1), 1);
 731
 732                         if (!strstr($password, $char)) {
 733                                 $password .= $char;
 734                                 $i++;
 735                         }
 736                 }
 737                 return $password;
 738         }
 739
 740         // this is called after user is created to initialize default feeds, labels
 741         // or whatever else
 742
 743         // user preferences are checked on every login, not here
 744
 745         function initialize_user($link, $uid) {
 746
 747                 db_query($link, "insert into ttrss_feeds (owner_uid,title,feed_url)
 748                         values ('$uid', 'Tiny Tiny RSS: New Releases',
 749                         'http://tt-rss.org/releases.rss')");
 750
 751                 db_query($link, "insert into ttrss_feeds (owner_uid,title,feed_url)
 752                         values ('$uid', 'Tiny Tiny RSS: Forum',
 753                                 'http://tt-rss.org/forum/rss.php')");
 754         }
 755
 756         function logout_user() {
 757                 session_destroy();
 758                 if (isset($_COOKIE[session_name()])) {
 759                    setcookie(session_name(), '', time()-42000, '/');
 760                 }
 761         }
 762
 763         function validate_csrf($csrf_token) {
 764                 return $csrf_token == $_SESSION['csrf_token'];
 765         }
 766
 767         function validate_session($link) {
 768                 if (SINGLE_USER_MODE) return true;
 769
 770                 $check_ip = $_SESSION['ip_address'];
 771
 772                 switch (SESSION_CHECK_ADDRESS) {
 773                 case 0:
 774                         $check_ip = '';
 775                         break;
 776                 case 1:
 777                         $check_ip = substr($check_ip, 0, strrpos($check_ip, '.')+1);
 778                         break;
 779                 case 2:
 780                         $check_ip = substr($check_ip, 0, strrpos($check_ip, '.'));
 781                         $check_ip = substr($check_ip, 0, strrpos($check_ip, '.')+1);
 782                         break;
 783                 };
 784
 785                 if ($check_ip && strpos($_SERVER['REMOTE_ADDR'], $check_ip) !== 0) {
 786                         $_SESSION["login_error_msg"] =
 787                                 __("Session failed to validate (incorrect IP)");
 788                         return false;
 789                 }
 790
 791                 if ($_SESSION["ref_schema_version"] != get_schema_version($link, true))
 792                         return false;
 793
 794                 if ($_SESSION["uid"]) {
 795
 796                         $result = db_query($link,
 797                                 "SELECT pwd_hash FROM ttrss_users WHERE id = '".$_SESSION["uid"]."'");
 798
 799                         $pwd_hash = db_fetch_result($result, 0, "pwd_hash");
 800
 801                         if ($pwd_hash != $_SESSION["pwd_hash"]) {
 802                                 return false;
 803                         }
 804                 }
 805
 806 /*              if ($_SESSION["cookie_lifetime"] && $_SESSION["uid"]) {
 807
 808                         //print_r($_SESSION);
 809
 810                         if (time() > $_SESSION["cookie_lifetime"]) {
 811                                 return false;
 812                         }
 813                 } */
 814
 815                 return true;
 816         }
 817
 818         function login_sequence($link, $login_form = 0) {
 819                 if (SINGLE_USER_MODE) {
 820                         return authenticate_user($link, "admin", null);
 821                 } else {
 822                         if (!$_SESSION["uid"] || !validate_session($link)) {
 823
 824                                 if (AUTH_AUTO_LOGIN && authenticate_user($link, null, null)) {
 825                                     $_SESSION["ref_schema_version"] = get_schema_version($link, true);
 826                                 } else {
 827                                          authenticate_user($link, null, null, true);
 828                                 }
 829
 830                                 if (!$_SESSION["uid"]) render_login_form($link, $login_form);
 831
 832                         } else {
 833                                 /* bump login timestamp */
 834                                 db_query($link, "UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 835                                         $_SESSION["uid"]);
 836
 837                                 if ($_SESSION["language"] && SESSION_COOKIE_LIFETIME > 0) {
 838                                         setcookie("ttrss_lang", $_SESSION["language"],
 839                                                 time() + SESSION_COOKIE_LIFETIME);
 840                                 }
 841                         }
 842                 }
 843         }
 844
 845
 846         /* function login_sequence($link, $mobile = false) {
 847                 $_SESSION["prefs_cache"] = array();
 848
 849                 if (!SINGLE_USER_MODE) {
 850
 851                         $login_action = $_POST["login_action"];
 852
 853                         # try to authenticate user if called from login form
 854                         if ($login_action == "do_login") {
 855                                 $login = db_escape_string($_POST["login"]);
 856                                 $password = $_POST["password"];
 857                                 $remember_me = $_POST["remember_me"];
 858
 859                                 if (authenticate_user($link, $login, $password)) {
 860                                         $_POST["password"] = "";
 861
 862                                         $_SESSION["language"] = $_POST["language"];
 863                                         $_SESSION["ref_schema_version"] = get_schema_version($link, true);
 864                                         $_SESSION["bw_limit"] = !!$_POST["bw_limit"];
 865
 866                                         if ($_POST["profile"]) {
 867
 868                                                 $profile = db_escape_string($_POST["profile"]);
 869
 870                                                 $result = db_query($link, "SELECT id FROM ttrss_settings_profiles
 871                                                         WHERE id = '$profile' AND owner_uid = " . $_SESSION["uid"]);
 872
 873                                                 if (db_num_rows($result) != 0) {
 874                                                         $_SESSION["profile"] = $profile;
 875                                                         $_SESSION["prefs_cache"] = array();
 876                                                 }
 877                                         }
 878
 879                                         if ($_REQUEST['return']) {
 880                                                 header("Location: " . $_REQUEST['return']);
 881                                         } else {
 882                                                 header("Location: " . $_SERVER["REQUEST_URI"]);
 883                                         }
 884
 885                                         exit;
 886
 887                                         return;
 888                                 } else {
 889                                         $_SESSION["login_error_msg"] = __("Incorrect username or password");
 890                                 }
 891                         }
 892
 893                         if (!$_SESSION["uid"] || !validate_session($link)) {
 894
 895                                 if (AUTH_AUTO_LOGIN && authenticate_user($link, null, null)) {
 896                                     $_SESSION["ref_schema_version"] = get_schema_version($link, true);
 897                                 } else {
 898                                          authenticate_user($link, null, null, true);
 899                                     render_login_form($link, $mobile);
 900                                     exit;
 901                                 }
 902                         } else {
 903                                 // bump login timestamp
 904                                 db_query($link, "UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 905                                         $_SESSION["uid"]);
 906
 907                                 if ($_SESSION["language"] && SESSION_COOKIE_LIFETIME > 0) {
 908                                         setcookie("ttrss_lang", $_SESSION["language"],
 909                                                 time() + SESSION_COOKIE_LIFETIME);
 910                                 }
 911
 912                                 // try to remove possible duplicates from feed counter cache
 913 //                              ccache_cleanup($link, $_SESSION["uid"]);
 914                         }
 915
 916                 } else {
 917                         return authenticate_user($link, "admin", null);
 918                 }
 919         } */
 920
 921         function truncate_string($str, $max_len, $suffix = '&hellip;') {
 922                 if (mb_strlen($str, "utf-8") > $max_len - 3) {
 923                         return mb_substr($str, 0, $max_len, "utf-8") . $suffix;
 924                 } else {
 925                         return $str;
 926                 }
 927         }
 928
 929         function theme_image($link, $filename) {
 930                 if ($link) {
 931                         $theme_path = get_user_theme_path($link);
 932
 933                         if ($theme_path && is_file($theme_path.$filename)) {
 934                                 return $theme_path.$filename;
 935                         } else {
 936                                 return $filename;
 937                         }
 938                 } else {
 939                         return $filename;
 940                 }
 941         }
 942
 943         function get_user_theme($link) {
 944
 945                 if (get_schema_version($link) >= 63 && $_SESSION["uid"]) {
 946                         $theme_name = get_pref($link, "_THEME_ID");
 947                         if (is_dir("themes/$theme_name")) {
 948                                 return $theme_name;
 949                         } else {
 950                                 return '';
 951                         }
 952                 } else {
 953                         return '';
 954                 }
 955
 956         }
 957
 958         function get_user_theme_path($link) {
 959                 $theme_path = '';
 960
 961                 if (get_schema_version($link) >= 63 && $_SESSION["uid"]) {
 962                         $theme_name = get_pref($link, "_THEME_ID");
 963
 964                         if ($theme_name && is_dir("themes/$theme_name")) {
 965                                 $theme_path = "themes/$theme_name/";
 966                         } else {
 967                                 $theme_name = '';
 968                         }
 969                 } else {
 970                         $theme_path = '';
 971                 }
 972
 973                 if ($theme_path) {
 974                         if (is_file("$theme_path/theme.ini")) {
 975                                 $ini = parse_ini_file("$theme_path/theme.ini", true);
 976                                 if ($ini['theme']['version'] >= THEME_VERSION_REQUIRED) {
 977                                         return $theme_path;
 978                                 }
 979                         }
 980                 }
 981                 return '';
 982         }
 983
 984         function get_user_theme_options($link) {
 985                 $t = get_user_theme_path($link);
 986
 987                 if ($t) {
 988                         if (is_file("$t/theme.ini")) {
 989                                 $ini = parse_ini_file("$t/theme.ini", true);
 990                                 if ($ini['theme']['version']) {
 991                                         return $ini['theme']['options'];
 992                                 }
 993                         }
 994                 }
 995                 return '';
 996         }
 997
 998         function print_theme_includes($link) {
 999
1000                 $t = get_user_theme_path($link);
1001                 $time = time();
1002
1003                 if ($t) {
1004                         print "<link rel=\"stylesheet\" type=\"text/css\"
1005                                 href=\"$t/theme.css?$time \">";
1006                         if (file_exists("$t/theme.js")) {
1007                                 print "<script type=\"text/javascript\" src=\"$t/theme.js?$time\">
1008                                         </script>";
1009                         }
1010                 }
1011         }
1012
1013         function get_all_themes() {
1014                 $themes = glob("themes/*");
1015
1016                 asort($themes);
1017
1018                 $rv = array();
1019
1020                 foreach ($themes as $t) {
1021                         if (is_file("$t/theme.ini")) {
1022                                 $ini = parse_ini_file("$t/theme.ini", true);
1023                                 if ($ini['theme']['version'] >= THEME_VERSION_REQUIRED &&
1024                                                         !$ini['theme']['disabled']) {
1025                                         $entry = array();
1026                                         $entry["path"] = $t;
1027                                         $entry["base"] = basename($t);
1028                                         $entry["name"] = $ini['theme']['name'];
1029                                         $entry["version"] = $ini['theme']['version'];
1030                                         $entry["author"] = $ini['theme']['author'];
1031                                         $entry["options"] = $ini['theme']['options'];
1032                                         array_push($rv, $entry);
1033                                 }
1034                         }
1035                 }
1036
1037                 return $rv;
1038         }
1039
1040         function convert_timestamp($timestamp, $source_tz, $dest_tz) {
1041
1042                 try {
1043                         $source_tz = new DateTimeZone($source_tz);
1044                 } catch (Exception $e) {
1045                         $source_tz = new DateTimeZone('UTC');
1046                 }
1047
1048                 try {
1049                         $dest_tz = new DateTimeZone($dest_tz);
1050                 } catch (Exception $e) {
1051                         $dest_tz = new DateTimeZone('UTC');
1052                 }
1053
1054                 $dt = new DateTime(date('Y-m-d H:i:s', $timestamp), $source_tz);
1055                 return $dt->format('U') + $dest_tz->getOffset($dt);
1056         }
1057
1058         function make_local_datetime($link, $timestamp, $long, $owner_uid = false,
1059                                         $no_smart_dt = false) {
1060
1061                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
1062                 if (!$timestamp) $timestamp = '1970-01-01 0:00';
1063
1064                 global $utc_tz;
1065                 global $tz_offset;
1066
1067                 # We store date in UTC internally
1068                 $dt = new DateTime($timestamp, $utc_tz);
1069
1070                 if ($tz_offset == -1) {
1071
1072                         $user_tz_string = get_pref($link, 'USER_TIMEZONE', $owner_uid);
1073
1074                         try {
1075                                 $user_tz = new DateTimeZone($user_tz_string);
1076                         } catch (Exception $e) {
1077                                 $user_tz = $utc_tz;
1078                         }
1079
1080                         $tz_offset = $user_tz->getOffset($dt);
1081                 }
1082
1083                 $user_timestamp = $dt->format('U') + $tz_offset;
1084
1085                 if (!$no_smart_dt) {
1086                         return smart_date_time($link, $user_timestamp,
1087                                 $tz_offset, $owner_uid);
1088                 } else {
1089                         if ($long)
1090                                 $format = get_pref($link, 'LONG_DATE_FORMAT', $owner_uid);
1091                         else
1092                                 $format = get_pref($link, 'SHORT_DATE_FORMAT', $owner_uid);
1093
1094                         return date($format, $user_timestamp);
1095                 }
1096         }
1097
1098         function smart_date_time($link, $timestamp, $tz_offset = 0, $owner_uid = false) {
1099                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
1100
1101                 if (date("Y.m.d", $timestamp) == date("Y.m.d", time() + $tz_offset)) {
1102                         return date("G:i", $timestamp);
1103                 } else if (date("Y", $timestamp) == date("Y", time() + $tz_offset)) {
1104                         $format = get_pref($link, 'SHORT_DATE_FORMAT', $owner_uid);
1105                         return date($format, $timestamp);
1106                 } else {
1107                         $format = get_pref($link, 'LONG_DATE_FORMAT', $owner_uid);
1108                         return date($format, $timestamp);
1109                 }
1110         }
1111
1112         function sql_bool_to_bool($s) {
1113                 if ($s == "t" || $s == "1" || $s == "true") {
1114                         return true;
1115                 } else {
1116                         return false;
1117                 }
1118         }
1119
1120         function bool_to_sql_bool($s) {
1121                 if ($s) {
1122                         return "true";
1123                 } else {
1124                         return "false";
1125                 }
1126         }
1127
1128         // Session caching removed due to causing wrong redirects to upgrade
1129         // script when get_schema_version() is called on an obsolete session
1130         // created on a previous schema version.
1131         function get_schema_version($link, $nocache = false) {
1132                 global $schema_version;
1133
1134                 if (!$schema_version) {
1135                         $result = db_query($link, "SELECT schema_version FROM ttrss_version");
1136                         $version = db_fetch_result($result, 0, "schema_version");
1137                         $schema_version = $version;
1138                         return $version;
1139                 } else {
1140                         return $schema_version;
1141                 }
1142         }
1143
1144         function sanity_check($link) {
1145                 require_once 'errors.php';
1146
1147                 $error_code = 0;
1148                 $schema_version = get_schema_version($link, true);
1149
1150                 if ($schema_version != SCHEMA_VERSION) {
1151                         $error_code = 5;
1152                 }
1153
1154                 if (DB_TYPE == "mysql") {
1155                         $result = db_query($link, "SELECT true", false);
1156                         if (db_num_rows($result) != 1) {
1157                                 $error_code = 10;
1158                         }
1159                 }
1160
1161                 if (db_escape_string("testTEST") != "testTEST") {
1162                         $error_code = 12;
1163                 }
1164
1165                 return array("code" => $error_code, "message" => $ERRORS[$error_code]);
1166         }
1167
1168         function file_is_locked($filename) {
1169                 if (function_exists('flock')) {
1170                         $fp = @fopen(LOCK_DIRECTORY . "/$filename", "r");
1171                         if ($fp) {
1172                                 if (flock($fp, LOCK_EX | LOCK_NB)) {
1173                                         flock($fp, LOCK_UN);
1174                                         fclose($fp);
1175                                         return false;
1176                                 }
1177                                 fclose($fp);
1178                                 return true;
1179                         } else {
1180                                 return false;
1181                         }
1182                 }
1183                 return true; // consider the file always locked and skip the test
1184         }
1185
1186         function make_lockfile($filename) {
1187                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
1188
1189                 if (flock($fp, LOCK_EX | LOCK_NB)) {
1190                         if (function_exists('posix_getpid')) {
1191                                 fwrite($fp, posix_getpid() . "\n");
1192                         }
1193                         return $fp;
1194                 } else {
1195                         return false;
1196                 }
1197         }
1198
1199         function make_stampfile($filename) {
1200                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
1201
1202                 if (flock($fp, LOCK_EX | LOCK_NB)) {
1203                         fwrite($fp, time() . "\n");
1204                         flock($fp, LOCK_UN);
1205                         fclose($fp);
1206                         return true;
1207                 } else {
1208                         return false;
1209                 }
1210         }
1211
1212         function sql_random_function() {
1213                 if (DB_TYPE == "mysql") {
1214                         return "RAND()";
1215                 } else {
1216                         return "RANDOM()";
1217                 }
1218         }
1219
1220         function catchup_feed($link, $feed, $cat_view, $owner_uid = false, $max_id = false) {
1221
1222                         if (!$owner_uid) $owner_uid = $_SESSION['uid'];
1223
1224                         //if (preg_match("/^-?[0-9][0-9]*$/", $feed) != false) {
1225
1226                         $ref_check_qpart = ($max_id &&
1227                                 !get_pref($link, 'REVERSE_HEADLINES')) ? "ref_id <= '$max_id'" : "true";
1228
1229                         if (is_numeric($feed)) {
1230                                 if ($cat_view) {
1231
1232                                         if ($feed >= 0) {
1233
1234                                                 if ($feed > 0) {
1235                                                         $cat_qpart = "cat_id = '$feed'";
1236                                                 } else {
1237                                                         $cat_qpart = "cat_id IS NULL";
1238                                                 }
1239
1240                                                 $tmp_result = db_query($link, "SELECT id
1241                                                         FROM ttrss_feeds WHERE $cat_qpart AND owner_uid = $owner_uid");
1242
1243                                                 while ($tmp_line = db_fetch_assoc($tmp_result)) {
1244
1245                                                         $tmp_feed = $tmp_line["id"];
1246
1247                                                         db_query($link, "UPDATE ttrss_user_entries
1248                                                                 SET unread = false,last_read = NOW()
1249                                                                 WHERE feed_id = '$tmp_feed'
1250                                                                 AND $ref_check_qpart
1251                                                                 AND owner_uid = $owner_uid");
1252                                                 }
1253                                         } else if ($feed == -2) {
1254
1255                                                 db_query($link, "UPDATE ttrss_user_entries
1256                                                         SET unread = false,last_read = NOW() WHERE (SELECT COUNT(*)
1257                                                                 FROM ttrss_user_labels2 WHERE article_id = ref_id) > 0
1258                                                                 AND $ref_check_qpart
1259                                                                 AND unread = true AND owner_uid = $owner_uid");
1260                                         }
1261
1262                                 } else if ($feed > 0) {
1263
1264                                         db_query($link, "UPDATE ttrss_user_entries
1265                                                         SET unread = false,last_read = NOW()
1266                                                         WHERE feed_id = '$feed'
1267                                                         AND $ref_check_qpart
1268                                                         AND owner_uid = $owner_uid");
1269
1270                                 } else if ($feed < 0 && $feed > -10) { // special, like starred
1271
1272                                         if ($feed == -1) {
1273                                                 db_query($link, "UPDATE ttrss_user_entries
1274                                                         SET unread = false,last_read = NOW()
1275                                                         WHERE marked = true
1276                                                         AND $ref_check_qpart
1277                                                         AND owner_uid = $owner_uid");
1278                                         }
1279
1280                                         if ($feed == -2) {
1281                                                 db_query($link, "UPDATE ttrss_user_entries
1282                                                         SET unread = false,last_read = NOW()
1283                                                         WHERE published = true
1284                                                         AND $ref_check_qpart
1285                                                         AND owner_uid = $owner_uid");
1286                                         }
1287
1288                                         if ($feed == -3) {
1289
1290                                                 $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE");
1291
1292                                                 if (DB_TYPE == "pgsql") {
1293                                                         $match_part = "updated > NOW() - INTERVAL '$intl hour' ";
1294                                                 } else {
1295                                                         $match_part = "updated > DATE_SUB(NOW(),
1296                                                                 INTERVAL $intl HOUR) ";
1297                                                 }
1298
1299                                                 $result = db_query($link, "SELECT id FROM ttrss_entries,
1300                                                         ttrss_user_entries WHERE $match_part AND
1301                                                         unread = true AND
1302                                                         ttrss_user_entries.ref_id = ttrss_entries.id AND
1303                                                         owner_uid = $owner_uid");
1304
1305                                                 $affected_ids = array();
1306
1307                                                 while ($line = db_fetch_assoc($result)) {
1308                                                         array_push($affected_ids, $line["id"]);
1309                                                 }
1310
1311                                                 catchupArticlesById($link, $affected_ids, 0);
1312                                         }
1313
1314                                         if ($feed == -4) {
1315                                                 db_query($link, "UPDATE ttrss_user_entries
1316                                                         SET unread = false,last_read = NOW()
1317                                                         WHERE $ref_check_qpart AND owner_uid = $owner_uid");
1318                                         }
1319
1320                                 } else if ($feed < -10) { // label
1321
1322                                         $label_id = -$feed - 11;
1323
1324                                         db_query($link, "UPDATE ttrss_user_entries, ttrss_user_labels2
1325                                                 SET unread = false, last_read = NOW()
1326                                                         WHERE label_id = '$label_id' AND unread = true
1327                                                         AND $ref_check_qpart
1328                                                         AND owner_uid = '$owner_uid' AND ref_id = article_id");
1329
1330                                 }
1331
1332                                 ccache_update($link, $feed, $owner_uid, $cat_view);
1333
1334                         } else { // tag
1335                                 db_query($link, "BEGIN");
1336
1337                                 $tag_name = db_escape_string($feed);
1338
1339                                 $result = db_query($link, "SELECT post_int_id FROM ttrss_tags
1340                                         WHERE tag_name = '$tag_name' AND owner_uid = $owner_uid");
1341
1342                                 while ($line = db_fetch_assoc($result)) {
1343                                         db_query($link, "UPDATE ttrss_user_entries SET
1344                                                 unread = false, last_read = NOW()
1345                                                 WHERE $ref_check_qpart AND int_id = " . $line["post_int_id"]);
1346                                 }
1347                                 db_query($link, "COMMIT");
1348                         }
1349         }
1350
1351         function getAllCounters($link, $omode = "flc", $active_feed = false) {
1352
1353                 if (!$omode) $omode = "flc";
1354
1355                 $data = getGlobalCounters($link);
1356
1357                 $data = array_merge($data, getVirtCounters($link));
1358
1359                 if (strchr($omode, "l")) $data = array_merge($data, getLabelCounters($link));
1360                 if (strchr($omode, "f")) $data = array_merge($data, getFeedCounters($link, $active_feed));
1361                 if (strchr($omode, "t")) $data = array_merge($data, getTagCounters($link));
1362                 if (strchr($omode, "c")) $data = array_merge($data, getCategoryCounters($link));
1363
1364                 return $data;
1365         }
1366
1367         function getCategoryTitle($link, $cat_id) {
1368
1369                 if ($cat_id == -1) {
1370                         return __("Special");
1371                 } else if ($cat_id == -2) {
1372                         return __("Labels");
1373                 } else {
1374
1375                         $result = db_query($link, "SELECT title FROM ttrss_feed_categories WHERE
1376                                 id = '$cat_id'");
1377
1378                         if (db_num_rows($result) == 1) {
1379                                 return db_fetch_result($result, 0, "title");
1380                         } else {
1381                                 return "Uncategorized";
1382                         }
1383                 }
1384         }
1385
1386
1387         function getCategoryCounters($link) {
1388                 $ret_arr = array();
1389
1390                 /* Labels category */
1391
1392                 $cv = array("id" => -2, "kind" => "cat",
1393                         "counter" => getCategoryUnread($link, -2));
1394
1395                 array_push($ret_arr, $cv);
1396
1397                 $result = db_query($link, "SELECT id AS cat_id, value AS unread,
1398                         (SELECT COUNT(id) FROM ttrss_feed_categories AS c2
1399                                 WHERE c2.parent_cat = ttrss_feed_categories.id) AS num_children
1400                         FROM ttrss_feed_categories, ttrss_cat_counters_cache
1401                         WHERE ttrss_cat_counters_cache.feed_id = id AND
1402                         ttrss_cat_counters_cache.owner_uid = ttrss_feed_categories.owner_uid AND
1403                         ttrss_feed_categories.owner_uid = " . $_SESSION["uid"]);
1404
1405                 while ($line = db_fetch_assoc($result)) {
1406                         $line["cat_id"] = (int) $line["cat_id"];
1407
1408                         if ($line["num_children"] > 0) {
1409                                 $child_counter = getCategoryChildrenUnread($link, $line["cat_id"], $_SESSION["uid"]);
1410                         } else {
1411                                 $child_counter = 0;
1412                         }
1413
1414                         $cv = array("id" => $line["cat_id"], "kind" => "cat",
1415                                 "child_counter" => $child_counter,
1416                                 "counter" => $line["unread"]);
1417
1418                         array_push($ret_arr, $cv);
1419                 }
1420
1421                 /* Special case: NULL category doesn't actually exist in the DB */
1422
1423                 $cv = array("id" => 0, "kind" => "cat",
1424                         "counter" => ccache_find($link, 0, $_SESSION["uid"], true));
1425
1426                 array_push($ret_arr, $cv);
1427
1428                 return $ret_arr;
1429         }
1430
1431         // only accepts real cats (>= 0)
1432         function getCategoryChildrenUnread($link, $cat, $owner_uid = false) {
1433                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1434
1435                 $result = db_query($link, "SELECT id FROM ttrss_feed_categories WHERE parent_cat = '$cat'
1436                                 AND owner_uid = $owner_uid");
1437
1438                 $unread = 0;
1439
1440                 while ($line = db_fetch_assoc($result)) {
1441                         $unread += getCategoryUnread($link, $line["id"], $owner_uid);
1442                         $unread += getCategoryChildrenUnread($link, $line["id"], $owner_uid);
1443                 }
1444
1445                 return $unread;
1446         }
1447
1448         function getCategoryUnread($link, $cat, $owner_uid = false) {
1449
1450                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1451
1452                 if ($cat >= 0) {
1453
1454                         if ($cat != 0) {
1455                                 $cat_query = "cat_id = '$cat'";
1456                         } else {
1457                                 $cat_query = "cat_id IS NULL";
1458                         }
1459
1460                         $result = db_query($link, "SELECT id FROM ttrss_feeds WHERE $cat_query
1461                                         AND owner_uid = " . $owner_uid);
1462
1463                         $cat_feeds = array();
1464                         while ($line = db_fetch_assoc($result)) {
1465                                 array_push($cat_feeds, "feed_id = " . $line["id"]);
1466                         }
1467
1468                         if (count($cat_feeds) == 0) return 0;
1469
1470                         $match_part = implode(" OR ", $cat_feeds);
1471
1472                         $result = db_query($link, "SELECT COUNT(int_id) AS unread
1473                                 FROM ttrss_user_entries
1474                                 WHERE   unread = true AND ($match_part)
1475                                 AND owner_uid = " . $owner_uid);
1476
1477                         $unread = 0;
1478
1479                         # this needs to be rewritten
1480                         while ($line = db_fetch_assoc($result)) {
1481                                 $unread += $line["unread"];
1482                         }
1483
1484                         return $unread;
1485                 } else if ($cat == -1) {
1486                         return getFeedUnread($link, -1) + getFeedUnread($link, -2) + getFeedUnread($link, -3) + getFeedUnread($link, 0);
1487                 } else if ($cat == -2) {
1488
1489                         $result = db_query($link, "
1490                                 SELECT COUNT(unread) AS unread FROM
1491                                         ttrss_user_entries, ttrss_user_labels2
1492                                 WHERE article_id = ref_id AND unread = true
1493                                         AND ttrss_user_entries.owner_uid = '$owner_uid'");
1494
1495                         $unread = db_fetch_result($result, 0, "unread");
1496
1497                         return $unread;
1498
1499                 }
1500         }
1501
1502         function getFeedUnread($link, $feed, $is_cat = false) {
1503                 return getFeedArticles($link, $feed, $is_cat, true, $_SESSION["uid"]);
1504         }
1505
1506         function getLabelUnread($link, $label_id, $owner_uid = false) {
1507                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1508
1509                 $result = db_query($link, "SELECT COUNT(ref_id) AS unread FROM ttrss_user_entries, ttrss_user_labels2
1510                         WHERE owner_uid = '$owner_uid' AND unread = true AND label_id = '$label_id' AND article_id = ref_id");
1511
1512                 if (db_num_rows($result) != 0) {
1513                         return db_fetch_result($result, 0, "unread");
1514                 } else {
1515                         return 0;
1516                 }
1517         }
1518
1519         function getFeedArticles($link, $feed, $is_cat = false, $unread_only = false,
1520                 $owner_uid = false) {
1521
1522                 $n_feed = (int) $feed;
1523                 $need_entries = false;
1524
1525                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1526
1527                 if ($unread_only) {
1528                         $unread_qpart = "unread = true";
1529                 } else {
1530                         $unread_qpart = "true";
1531                 }
1532
1533                 if ($is_cat) {
1534                         return getCategoryUnread($link, $n_feed, $owner_uid);
1535                 } else if ($n_feed == -6) {
1536                         return 0;
1537                 } else if ($feed != "0" && $n_feed == 0) {
1538
1539                         $feed = db_escape_string($feed);
1540
1541                         $result = db_query($link, "SELECT SUM((SELECT COUNT(int_id)
1542                                 FROM ttrss_user_entries,ttrss_entries WHERE int_id = post_int_id
1543                                         AND ref_id = id AND $unread_qpart)) AS count FROM ttrss_tags
1544                                 WHERE owner_uid = $owner_uid AND tag_name = '$feed'");
1545                         return db_fetch_result($result, 0, "count");
1546
1547                 } else if ($n_feed == -1) {
1548                         $match_part = "marked = true";
1549                 } else if ($n_feed == -2) {
1550                         $match_part = "published = true";
1551                 } else if ($n_feed == -3) {
1552                         $match_part = "unread = true AND score >= 0";
1553
1554                         $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE", $owner_uid);
1555
1556                         if (DB_TYPE == "pgsql") {
1557                                 $match_part .= " AND updated > NOW() - INTERVAL '$intl hour' ";
1558                         } else {
1559                                 $match_part .= " AND updated > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
1560                         }
1561
1562                         $need_entries = true;
1563
1564                 } else if ($n_feed == -4) {
1565                         $match_part = "true";
1566                 } else if ($n_feed >= 0) {
1567
1568                         if ($n_feed != 0) {
1569                                 $match_part = "feed_id = '$n_feed'";
1570                         } else {
1571                                 $match_part = "feed_id IS NULL";
1572                         }
1573
1574                 } else if ($feed < -10) {
1575
1576                         $label_id = -$feed - 11;
1577
1578                         return getLabelUnread($link, $label_id, $owner_uid);
1579
1580                 }
1581
1582                 if ($match_part) {
1583
1584                         if ($need_entries) {
1585                                 $from_qpart = "ttrss_user_entries,ttrss_entries";
1586                                 $from_where = "ttrss_entries.id = ttrss_user_entries.ref_id AND";
1587                         } else {
1588                                 $from_qpart = "ttrss_user_entries";
1589                         }
1590
1591                         $query = "SELECT count(int_id) AS unread
1592                                 FROM $from_qpart WHERE
1593                                 $unread_qpart AND $from_where ($match_part) AND ttrss_user_entries.owner_uid = $owner_uid";
1594
1595                         //echo "[$feed/$query]\n";
1596
1597                         $result = db_query($link, $query);
1598
1599                 } else {
1600
1601                         $result = db_query($link, "SELECT COUNT(post_int_id) AS unread
1602                                 FROM ttrss_tags,ttrss_user_entries,ttrss_entries
1603                                 WHERE tag_name = '$feed' AND post_int_id = int_id AND ref_id = ttrss_entries.id
1604                                 AND $unread_qpart AND ttrss_tags.owner_uid = " . $owner_uid);
1605                 }
1606
1607                 $unread = db_fetch_result($result, 0, "unread");
1608
1609                 return $unread;
1610         }
1611
1612         function getGlobalUnread($link, $user_id = false) {
1613
1614                 if (!$user_id) {
1615                         $user_id = $_SESSION["uid"];
1616                 }
1617
1618                 $result = db_query($link, "SELECT SUM(value) AS c_id FROM ttrss_counters_cache
1619                         WHERE owner_uid = '$user_id' AND feed_id > 0");
1620
1621                 $c_id = db_fetch_result($result, 0, "c_id");
1622
1623                 return $c_id;
1624         }
1625
1626         function getGlobalCounters($link, $global_unread = -1) {
1627                 $ret_arr = array();
1628
1629                 if ($global_unread == -1) {
1630                         $global_unread = getGlobalUnread($link);
1631                 }
1632
1633                 $cv = array("id" => "global-unread",
1634                         "counter" => $global_unread);
1635
1636                 array_push($ret_arr, $cv);
1637
1638                 $result = db_query($link, "SELECT COUNT(id) AS fn FROM
1639                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1640
1641                 $subscribed_feeds = db_fetch_result($result, 0, "fn");
1642
1643                 $cv = array("id" => "subscribed-feeds",
1644                         "counter" => $subscribed_feeds);
1645
1646                 array_push($ret_arr, $cv);
1647
1648                 return $ret_arr;
1649         }
1650
1651         function getTagCounters($link) {
1652
1653                 $ret_arr = array();
1654
1655                 $result = db_query($link, "SELECT tag_name,SUM((SELECT COUNT(int_id)
1656                         FROM ttrss_user_entries,ttrss_entries WHERE int_id = post_int_id
1657                                 AND ref_id = id AND unread = true)) AS count FROM ttrss_tags
1658                                 WHERE owner_uid = ".$_SESSION['uid']." GROUP BY tag_name
1659                                 ORDER BY count DESC LIMIT 55");
1660
1661                 $tags = array();
1662
1663                 while ($line = db_fetch_assoc($result)) {
1664                         $tags[$line["tag_name"]] += $line["count"];
1665                 }
1666
1667                 foreach (array_keys($tags) as $tag) {
1668                         $unread = $tags[$tag];
1669                         $tag = htmlspecialchars($tag);
1670
1671                         $cv = array("id" => $tag,
1672                                 "kind" => "tag",
1673                                 "counter" => $unread);
1674
1675                         array_push($ret_arr, $cv);
1676                 }
1677
1678                 return $ret_arr;
1679         }
1680
1681         function getVirtCounters($link) {
1682
1683                 $ret_arr = array();
1684
1685                 for ($i = 0; $i >= -4; $i--) {
1686
1687                         $count = getFeedUnread($link, $i);
1688
1689                         $cv = array("id" => $i,
1690                                 "counter" => $count);
1691
1692 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1693 //                              $cv["xmsg"] = getFeedArticles($link, $i)." ".__("total");
1694
1695                         array_push($ret_arr, $cv);
1696                 }
1697
1698                 return $ret_arr;
1699         }
1700
1701         function getLabelCounters($link, $descriptions = false) {
1702
1703                 $ret_arr = array();
1704
1705                 $owner_uid = $_SESSION["uid"];
1706
1707                 $result = db_query($link, "SELECT id, caption FROM ttrss_labels2
1708                         WHERE owner_uid = '$owner_uid'");
1709
1710                 while ($line = db_fetch_assoc($result)) {
1711
1712                         $id = -$line["id"] - 11;
1713
1714                         $label_name = $line["caption"];
1715                         $count = getFeedUnread($link, $id);
1716
1717                         $cv = array("id" => $id,
1718                                 "counter" => $count);
1719
1720                         if ($descriptions)
1721                                 $cv["description"] = $label_name;
1722
1723 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1724 //                              $cv["xmsg"] = getFeedArticles($link, $id)." ".__("total");
1725
1726                         array_push($ret_arr, $cv);
1727                 }
1728
1729                 return $ret_arr;
1730         }
1731
1732         function getFeedCounters($link, $active_feed = false) {
1733
1734                 $ret_arr = array();
1735
1736                 $query = "SELECT ttrss_feeds.id,
1737                                 ttrss_feeds.title,
1738                                 ".SUBSTRING_FOR_DATE."(ttrss_feeds.last_updated,1,19) AS last_updated,
1739                                 last_error, value AS count
1740                         FROM ttrss_feeds, ttrss_counters_cache
1741                         WHERE ttrss_feeds.owner_uid = ".$_SESSION["uid"]."
1742                                 AND ttrss_counters_cache.owner_uid = ttrss_feeds.owner_uid
1743                                 AND ttrss_counters_cache.feed_id = id";
1744
1745                 $result = db_query($link, $query);
1746                 $fctrs_modified = false;
1747
1748                 while ($line = db_fetch_assoc($result)) {
1749
1750                         $id = $line["id"];
1751                         $count = $line["count"];
1752                         $last_error = htmlspecialchars($line["last_error"]);
1753
1754                         $last_updated = make_local_datetime($link, $line['last_updated'], false);
1755
1756                         $has_img = feed_has_icon($id);
1757
1758                         if (date('Y') - date('Y', strtotime($line['last_updated'])) > 2)
1759                                 $last_updated = '';
1760
1761                         $cv = array("id" => $id,
1762                                 "updated" => $last_updated,
1763                                 "counter" => $count,
1764                                 "has_img" => (int) $has_img);
1765
1766                         if ($last_error)
1767                                 $cv["error"] = $last_error;
1768
1769 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1770 //                              $cv["xmsg"] = getFeedArticles($link, $id)." ".__("total");
1771
1772                         if ($active_feed && $id == $active_feed)
1773                                 $cv["title"] = truncate_string($line["title"], 30);
1774
1775                         array_push($ret_arr, $cv);
1776
1777                 }
1778
1779                 return $ret_arr;
1780         }
1781
1782         function get_pgsql_version($link) {
1783                 $result = db_query($link, "SELECT version() AS version");
1784                 $version = explode(" ", db_fetch_result($result, 0, "version"));
1785                 return $version[1];
1786         }
1787
1788         /**
1789          * @return array (code => Status code, message => error message if available)
1790          *
1791          *                 0 - OK, Feed already exists
1792          *                 1 - OK, Feed added
1793          *                 2 - Invalid URL
1794          *                 3 - URL content is HTML, no feeds available
1795          *                 4 - URL content is HTML which contains multiple feeds.
1796          *                     Here you should call extractfeedurls in rpc-backend
1797          *                     to get all possible feeds.
1798          *                 5 - Couldn't download the URL content.
1799          */
1800         function subscribe_to_feed($link, $url, $cat_id = 0,
1801                         $auth_login = '', $auth_pass = '', $need_auth = false) {
1802
1803                 global $fetch_last_error;
1804
1805                 require_once "include/rssfuncs.php";
1806
1807                 $url = fix_url($url);
1808
1809                 if (!$url || !validate_feed_url($url)) return array("code" => 2);
1810
1811                 $update_method = 0;
1812
1813                 $contents = @fetch_file_contents($url, false, $auth_login, $auth_pass);
1814
1815                 if (!$contents) {
1816                         return array("code" => 5, "message" => $fetch_last_error);
1817                 }
1818
1819                 if (is_html($contents)) {
1820                         $feedUrls = get_feeds_from_html($url, $contents);
1821
1822                         if (count($feedUrls) == 0) {
1823                                 return array("code" => 3);
1824                         } else if (count($feedUrls) > 1) {
1825                                 return array("code" => 4, "feeds" => $feedUrls);
1826                         }
1827                         //use feed url as new URL
1828                         $url = key($feedUrls);
1829                 }
1830
1831                 if ($cat_id == "0" || !$cat_id) {
1832                         $cat_qpart = "NULL";
1833                 } else {
1834                         $cat_qpart = "'$cat_id'";
1835                 }
1836
1837                 $result = db_query($link,
1838                         "SELECT id FROM ttrss_feeds
1839                         WHERE feed_url = '$url' AND owner_uid = ".$_SESSION["uid"]);
1840
1841                 if (db_num_rows($result) == 0) {
1842                         $result = db_query($link,
1843                                 "INSERT INTO ttrss_feeds
1844                                         (owner_uid,feed_url,title,cat_id, auth_login,auth_pass,update_method)
1845                                 VALUES ('".$_SESSION["uid"]."', '$url',
1846                                 '[Unknown]', $cat_qpart, '$auth_login', '$auth_pass', '$update_method')");
1847
1848                         $result = db_query($link,
1849                                 "SELECT id FROM ttrss_feeds WHERE feed_url = '$url'
1850                                         AND owner_uid = " . $_SESSION["uid"]);
1851
1852                         $feed_id = db_fetch_result($result, 0, "id");
1853
1854                         if ($feed_id) {
1855                                 update_rss_feed($link, $feed_id, true);
1856                         }
1857
1858                         return array("code" => 1);
1859                 } else {
1860                         return array("code" => 0);
1861                 }
1862         }
1863
1864         function print_feed_select($link, $id, $default_id = "",
1865                 $attributes = "", $include_all_feeds = true,
1866                 $root_id = false, $nest_level = 0) {
1867
1868                 if (!$root_id) {
1869                         print "<select id=\"$id\" name=\"$id\" $attributes>";
1870                         if ($include_all_feeds) {
1871                                 $is_selected = ("0" == $default_id) ? "selected=\"1\"" : "";
1872                                 print "<option $is_selected value=\"0\">".__('All feeds')."</option>";
1873                         }
1874                 }
1875
1876                 if (get_pref($link, 'ENABLE_FEED_CATS')) {
1877
1878                         if ($root_id)
1879                                 $parent_qpart = "parent_cat = '$root_id'";
1880                         else
1881                                 $parent_qpart = "parent_cat IS NULL";
1882
1883                         $result = db_query($link, "SELECT id,title,
1884                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1885                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1886                                 FROM ttrss_feed_categories
1887                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1888
1889                         while ($line = db_fetch_assoc($result)) {
1890
1891                                 for ($i = 0; $i < $nest_level; $i++)
1892                                         $line["title"] = " - " . $line["title"];
1893
1894                                 $is_selected = ("CAT:".$line["id"] == $default_id) ? "selected=\"1\"" : "";
1895
1896                                 printf("<option $is_selected value='CAT:%d'>%s</option>",
1897                                         $line["id"], htmlspecialchars($line["title"]));
1898
1899                                 if ($line["num_children"] > 0)
1900                                         print_feed_select($link, $id, $default_id, $attributes,
1901                                                 $include_all_feeds, $line["id"], $nest_level+1);
1902
1903                                 $feed_result = db_query($link, "SELECT id,title FROM ttrss_feeds
1904                                         WHERE cat_id = '".$line["id"]."' AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1905
1906                                 while ($fline = db_fetch_assoc($feed_result)) {
1907                                         $is_selected = ($fline["id"] == $default_id) ? "selected=\"1\"" : "";
1908
1909                                         $fline["title"] = " + " . $fline["title"];
1910
1911                                         for ($i = 0; $i < $nest_level; $i++)
1912                                                 $fline["title"] = " - " . $fline["title"];
1913
1914                                         printf("<option $is_selected value='%d'>%s</option>",
1915                                                 $fline["id"], htmlspecialchars($fline["title"]));
1916                                 }
1917                         }
1918
1919                         if (!$root_id) {
1920                                 $is_selected = ($default_id == "CAT:0") ? "selected=\"1\"" : "";
1921
1922                                 printf("<option $is_selected value='CAT:0'>%s</option>",
1923                                         __("Uncategorized"));
1924
1925                                 $feed_result = db_query($link, "SELECT id,title FROM ttrss_feeds
1926                                         WHERE cat_id IS NULL AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1927
1928                                 while ($fline = db_fetch_assoc($feed_result)) {
1929                                         $is_selected = ($fline["id"] == $default_id && !$default_is_cat) ? "selected=\"1\"" : "";
1930
1931                                         $fline["title"] = " + " . $fline["title"];
1932
1933                                         for ($i = 0; $i < $nest_level; $i++)
1934                                                 $fline["title"] = " - " . $fline["title"];
1935
1936                                         printf("<option $is_selected value='%d'>%s</option>",
1937                                                 $fline["id"], htmlspecialchars($fline["title"]));
1938                                 }
1939                         }
1940
1941                 } else {
1942                         $result = db_query($link, "SELECT id,title FROM ttrss_feeds
1943                                 WHERE owner_uid = ".$_SESSION["uid"]." ORDER BY title");
1944
1945                         while ($line = db_fetch_assoc($result)) {
1946
1947                                 $is_selected = ($line["id"] == $default_id) ? "selected=\"1\"" : "";
1948
1949                                 printf("<option $is_selected value='%d'>%s</option>",
1950                                         $line["id"], htmlspecialchars($line["title"]));
1951                         }
1952                 }
1953
1954                 if (!$root_id) {
1955                         print "</select>";
1956                 }
1957         }
1958
1959         function print_feed_cat_select($link, $id, $default_id,
1960                 $attributes, $include_all_cats = true, $root_id = false, $nest_level = 0) {
1961
1962                         if (!$root_id) {
1963                                         print "<select id=\"$id\" name=\"$id\" default=\"$default_id\" onchange=\"catSelectOnChange(this)\" $attributes>";
1964                         }
1965
1966                         if ($root_id)
1967                                 $parent_qpart = "parent_cat = '$root_id'";
1968                         else
1969                                 $parent_qpart = "parent_cat IS NULL";
1970
1971                         $result = db_query($link, "SELECT id,title,
1972                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1973                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1974                                 FROM ttrss_feed_categories
1975                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1976
1977                         while ($line = db_fetch_assoc($result)) {
1978                                 if ($line["id"] == $default_id) {
1979                                         $is_selected = "selected=\"1\"";
1980                                 } else {
1981                                         $is_selected = "";
1982                                 }
1983
1984                                 for ($i = 0; $i < $nest_level; $i++)
1985                                         $line["title"] = " - " . $line["title"];
1986
1987                                 if ($line["title"])
1988                                         printf("<option $is_selected value='%d'>%s</option>",
1989                                                 $line["id"], htmlspecialchars($line["title"]));
1990
1991                                 if ($line["num_children"] > 0)
1992                                         print_feed_cat_select($link, $id, $default_id, $attributes,
1993                                                 $include_all_cats, $line["id"], $nest_level+1);
1994                         }
1995
1996                         if (!$root_id) {
1997                                 if ($include_all_cats) {
1998                                         if (db_num_rows($result) > 0) {
1999                                                 print "<option disabled=\"1\">--------</option>";
2000                                         }
2001
2002                                         if ($default_id == 0) {
2003                                                 $is_selected = "selected=\"1\"";
2004                                         } else {
2005                                                 $is_selected = "";
2006                                         }
2007
2008                                         print "<option $is_selected value=\"0\">".__('Uncategorized')."</option>";
2009                                 }
2010                                 print "</select>";
2011                         }
2012                 }
2013
2014         function checkbox_to_sql_bool($val) {
2015                 return ($val == "on") ? "true" : "false";
2016         }
2017
2018         function getFeedCatTitle($link, $id) {
2019                 if ($id == -1) {
2020                         return __("Special");
2021                 } else if ($id < -10) {
2022                         return __("Labels");
2023                 } else if ($id > 0) {
2024                         $result = db_query($link, "SELECT ttrss_feed_categories.title
2025                                 FROM ttrss_feeds, ttrss_feed_categories WHERE ttrss_feeds.id = '$id' AND
2026                                         cat_id = ttrss_feed_categories.id");
2027                         if (db_num_rows($result) == 1) {
2028                                 return db_fetch_result($result, 0, "title");
2029                         } else {
2030                                 return __("Uncategorized");
2031                         }
2032                 } else {
2033                         return "getFeedCatTitle($id) failed";
2034                 }
2035
2036         }
2037
2038         function getFeedIcon($id) {
2039                 switch ($id) {
2040                 case 0:
2041                         return "images/archive.png";
2042                         break;
2043                 case -1:
2044                         return "images/mark_set.png";
2045                         break;
2046                 case -2:
2047                         return "images/pub_set.png";
2048                         break;
2049                 case -3:
2050                         return "images/fresh.png";
2051                         break;
2052                 case -4:
2053                         return "images/tag.png";
2054                         break;
2055                 case -6:
2056                         return "images/recently_read.png";
2057                         break;
2058                 default:
2059                         if ($id < -10) {
2060                                 return "images/label.png";
2061                         } else {
2062                                 if (file_exists(ICONS_DIR . "/$id.ico"))
2063                                         return ICONS_URL . "/$id.ico";
2064                         }
2065                         break;
2066                 }
2067         }
2068
2069         function getFeedTitle($link, $id, $cat = false) {
2070                 if ($cat) {
2071                         return getCategoryTitle($link, $id);
2072                 } else if ($id == -1) {
2073                         return __("Starred articles");
2074                 } else if ($id == -2) {
2075                         return __("Published articles");
2076                 } else if ($id == -3) {
2077                         return __("Fresh articles");
2078                 } else if ($id == -4) {
2079                         return __("All articles");
2080                 } else if ($id === 0 || $id === "0") {
2081                         return __("Archived articles");
2082                 } else if ($id == -6) {
2083                         return __("Recently read");
2084                 } else if ($id < -10) {
2085                         $label_id = -$id - 11;
2086                         $result = db_query($link, "SELECT caption FROM ttrss_labels2 WHERE id = '$label_id'");
2087                         if (db_num_rows($result) == 1) {
2088                                 return db_fetch_result($result, 0, "caption");
2089                         } else {
2090                                 return "Unknown label ($label_id)";
2091                         }
2092
2093                 } else if (is_numeric($id) && $id > 0) {
2094                         $result = db_query($link, "SELECT title FROM ttrss_feeds WHERE id = '$id'");
2095                         if (db_num_rows($result) == 1) {
2096                                 return db_fetch_result($result, 0, "title");
2097                         } else {
2098                                 return "Unknown feed ($id)";
2099                         }
2100                 } else {
2101                         return $id;
2102                 }
2103         }
2104
2105         function make_init_params($link) {
2106                 $params = array();
2107
2108                 $params["theme"] = get_user_theme($link);
2109                 $params["theme_options"] = get_user_theme_options($link);
2110
2111                 $params["sign_progress"] = theme_image($link, "images/indicator_white.gif");
2112                 $params["sign_progress_tiny"] = theme_image($link, "images/indicator_tiny.gif");
2113                 $params["sign_excl"] = theme_image($link, "images/sign_excl.png");
2114                 $params["sign_info"] = theme_image($link, "images/sign_info.png");
2115
2116                 foreach (array("ON_CATCHUP_SHOW_NEXT_FEED", "HIDE_READ_FEEDS",
2117                         "ENABLE_FEED_CATS", "FEEDS_SORT_BY_UNREAD", "CONFIRM_FEED_CATCHUP",
2118                         "CDM_AUTO_CATCHUP", "FRESH_ARTICLE_MAX_AGE", "DEFAULT_ARTICLE_LIMIT",
2119                         "HIDE_READ_SHOWS_SPECIAL", "COMBINED_DISPLAY_MODE") as $param) {
2120
2121                                  $params[strtolower($param)] = (int) get_pref($link, $param);
2122                  }
2123
2124                 $params["icons_url"] = ICONS_URL;
2125                 $params["cookie_lifetime"] = SESSION_COOKIE_LIFETIME;
2126                 $params["default_include_children"] = get_pref($link, "_DEFAULT_INCLUDE_CHILDREN");
2127                 $params["default_view_mode"] = get_pref($link, "_DEFAULT_VIEW_MODE");
2128                 $params["default_view_limit"] = (int) get_pref($link, "_DEFAULT_VIEW_LIMIT");
2129                 $params["default_view_order_by"] = get_pref($link, "_DEFAULT_VIEW_ORDER_BY");
2130                 $params["bw_limit"] = (int) $_SESSION["bw_limit"];
2131
2132                 $result = db_query($link, "SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
2133                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
2134
2135                 $max_feed_id = db_fetch_result($result, 0, "mid");
2136                 $num_feeds = db_fetch_result($result, 0, "nf");
2137
2138                 $params["max_feed_id"] = (int) $max_feed_id;
2139                 $params["num_feeds"] = (int) $num_feeds;
2140
2141                 $params["collapsed_feedlist"] = (int) get_pref($link, "_COLLAPSED_FEEDLIST");
2142
2143                 $params["csrf_token"] = $_SESSION["csrf_token"];
2144
2145                 return $params;
2146         }
2147
2148         function make_runtime_info($link) {
2149                 $data = array();
2150
2151                 $result = db_query($link, "SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
2152                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
2153
2154                 $max_feed_id = db_fetch_result($result, 0, "mid");
2155                 $num_feeds = db_fetch_result($result, 0, "nf");
2156
2157                 $data["max_feed_id"] = (int) $max_feed_id;
2158                 $data["num_feeds"] = (int) $num_feeds;
2159
2160                 $data['last_article_id'] = getLastArticleId($link);
2161                 $data['cdm_expanded'] = get_pref($link, 'CDM_EXPANDED');
2162
2163                 if (file_exists(LOCK_DIRECTORY . "/update_daemon.lock")) {
2164
2165                         $data['daemon_is_running'] = (int) file_is_locked("update_daemon.lock");
2166
2167                         if (time() - $_SESSION["daemon_stamp_check"] > 30) {
2168
2169                                 $stamp = (int) @file_get_contents(LOCK_DIRECTORY . "/update_daemon.stamp");
2170
2171                                 if ($stamp) {
2172                                         $stamp_delta = time() - $stamp;
2173
2174                                         if ($stamp_delta > 1800) {
2175                                                 $stamp_check = 0;
2176                                         } else {
2177                                                 $stamp_check = 1;
2178                                                 $_SESSION["daemon_stamp_check"] = time();
2179                                         }
2180
2181                                         $data['daemon_stamp_ok'] = $stamp_check;
2182
2183                                         $stamp_fmt = date("Y.m.d, G:i", $stamp);
2184
2185                                         $data['daemon_stamp'] = $stamp_fmt;
2186                                 }
2187                         }
2188                 }
2189
2190                 if ($_SESSION["last_version_check"] + 86400 + rand(-1000, 1000) < time()) {
2191                                 $new_version_details = @check_for_update($link);
2192
2193                                 $data['new_version_available'] = (int) ($new_version_details != false);
2194
2195                                 $_SESSION["last_version_check"] = time();
2196                                 $_SESSION["version_data"] = $new_version_details;
2197                 }
2198
2199                 return $data;
2200         }
2201
2202         function search_to_sql($link, $search, $match_on) {
2203
2204                 $search_query_part = "";
2205
2206                 $keywords = explode(" ", $search);
2207                 $query_keywords = array();
2208
2209                 foreach ($keywords as $k) {
2210                         if (strpos($k, "-") === 0) {
2211                                 $k = substr($k, 1);
2212                                 $not = "NOT";
2213                         } else {
2214                                 $not = "";
2215                         }
2216
2217                         $commandpair = explode(":", mb_strtolower($k), 2);
2218
2219                         if ($commandpair[0] == "note" && $commandpair[1]) {
2220
2221                                 if ($commandpair[1] == "true")
2222                                         array_push($query_keywords, "($not (note IS NOT NULL AND note != ''))");
2223                                 else
2224                                         array_push($query_keywords, "($not (note IS NULL OR note = ''))");
2225
2226                         } else if ($commandpair[0] == "star" && $commandpair[1]) {
2227
2228                                 if ($commandpair[1] == "true")
2229                                         array_push($query_keywords, "($not (marked = true))");
2230                                 else
2231                                         array_push($query_keywords, "($not (marked = false))");
2232
2233                         } else if ($commandpair[0] == "pub" && $commandpair[1]) {
2234
2235                                 if ($commandpair[1] == "true")
2236                                         array_push($query_keywords, "($not (published = true))");
2237                                 else
2238                                         array_push($query_keywords, "($not (published = false))");
2239
2240                         } else if (strpos($k, "@") === 0) {
2241
2242                                 $user_tz_string = get_pref($link, 'USER_TIMEZONE', $_SESSION['uid']);
2243                                 $orig_ts = strtotime(substr($k, 1));
2244                                 $k = date("Y-m-d", convert_timestamp($orig_ts, $user_tz_string, 'UTC'));
2245
2246                                 //$k = date("Y-m-d", strtotime(substr($k, 1)));
2247
2248                                 array_push($query_keywords, "(".SUBSTRING_FOR_DATE."(updated,1,LENGTH('$k')) $not = '$k')");
2249                         } else if ($match_on == "both") {
2250                                 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2251                                                 OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2252                         } else if ($match_on == "title") {
2253                                 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%'))");
2254                         } else if ($match_on == "content") {
2255                                 array_push($query_keywords, "(UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2256                         }
2257                 }
2258
2259                 $search_query_part = implode("AND", $query_keywords);
2260
2261                 return $search_query_part;
2262         }
2263
2264         function getChildCategories($link, $cat, $owner_uid) {
2265                 $rv = array();
2266
2267                 $result = db_query($link, "SELECT id FROM ttrss_feed_categories
2268                         WHERE parent_cat = '$cat' AND owner_uid = $owner_uid");
2269
2270                 while ($line = db_fetch_assoc($result)) {
2271                         array_push($rv, $line["id"]);
2272                         $rv = array_merge($rv, getChildCategories($link, $line["id"], $owner_uid));
2273                 }
2274
2275                 return $rv;
2276         }
2277
2278         function queryFeedHeadlines($link, $feed, $limit, $view_mode, $cat_view, $search, $search_mode, $match_on, $override_order = false, $offset = 0, $owner_uid = 0, $filter = false, $since_id = 0, $include_children = false) {
2279
2280                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2281
2282                 $ext_tables_part = "";
2283
2284                         if ($search) {
2285
2286                                 if (SPHINX_ENABLED) {
2287                                         $ids = join(",", @sphinx_search($search, 0, 500));
2288
2289                                         if ($ids)
2290                                                 $search_query_part = "ref_id IN ($ids) AND ";
2291                                         else
2292                                                 $search_query_part = "ref_id = -1 AND ";
2293
2294                                 } else {
2295                                         $search_query_part = search_to_sql($link, $search, $match_on);
2296                                         $search_query_part .= " AND ";
2297                                 }
2298
2299                         } else {
2300                                 $search_query_part = "";
2301                         }
2302
2303                         if ($filter) {
2304
2305                                 if (DB_TYPE == "pgsql") {
2306                                         $query_strategy_part .= " AND updated > NOW() - INTERVAL '14 days' ";
2307                                 } else {
2308                                         $query_strategy_part .= " AND updated > DATE_SUB(NOW(), INTERVAL 14 DAY) ";
2309                                 }
2310
2311                                 $override_order = "updated DESC";
2312
2313                                 $filter_query_part = filter_to_sql($filter) . " AND";
2314                         } else {
2315                                 $filter_query_part = "";
2316                         }
2317
2318                         if ($since_id) {
2319                                 $since_id_part = "ttrss_entries.id > $since_id AND ";
2320                         } else {
2321                                 $since_id_part = "";
2322                         }
2323
2324                         $view_query_part = "";
2325
2326                         if ($view_mode == "adaptive" || $view_query_part == "noscores") {
2327                                 if ($search) {
2328                                         $view_query_part = " ";
2329                                 } else if ($feed != -1) {
2330                                         $unread = getFeedUnread($link, $feed, $cat_view);
2331
2332                                         if ($cat_view && $feed > 0 && $include_children)
2333                                                 $unread += getCategoryChildrenUnread($link, $feed);
2334
2335                                         if ($unread > 0) {
2336                                                 $view_query_part = " unread = true AND ";
2337                                         }
2338                                 }
2339                         }
2340
2341                         if ($view_mode == "marked") {
2342                                 $view_query_part = " marked = true AND ";
2343                         }
2344
2345                         if ($view_mode == "published") {
2346                                 $view_query_part = " published = true AND ";
2347                         }
2348
2349                         if ($view_mode == "unread") {
2350                                 $view_query_part = " unread = true AND ";
2351                         }
2352
2353                         if ($view_mode == "updated") {
2354                                 $view_query_part = " (last_read is null and unread = false) AND ";
2355                         }
2356
2357                         if ($limit > 0) {
2358                                 $limit_query_part = "LIMIT " . $limit;
2359                         }
2360
2361                         $allow_archived = false;
2362
2363                         $vfeed_query_part = "";
2364
2365                         // override query strategy and enable feed display when searching globally
2366                         if ($search && $search_mode == "all_feeds") {
2367                                 $query_strategy_part = "true";
2368                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2369                         /* tags */
2370                         } else if (!is_numeric($feed)) {
2371                                 $query_strategy_part = "true";
2372                                 $vfeed_query_part = "(SELECT title FROM ttrss_feeds WHERE
2373                                         id = feed_id) as feed_title,";
2374                         } else if ($search && $search_mode == "this_cat") {
2375                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2376
2377                                 if ($feed > 0) {
2378                                         if ($include_children) {
2379                                                 $subcats = getChildCategories($link, $feed, $owner_uid);
2380                                                 array_push($subcats, $feed);
2381                                                 $cats_qpart = join(",", $subcats);
2382                                         } else {
2383                                                 $cats_qpart = $feed;
2384                                         }
2385
2386                                         $query_strategy_part = "ttrss_feeds.cat_id IN ($cats_qpart)";
2387
2388                                 } else {
2389                                         $query_strategy_part = "ttrss_feeds.cat_id IS NULL";
2390                                 }
2391
2392                         } else if ($feed > 0) {
2393
2394                                 if ($cat_view) {
2395
2396                                         if ($feed > 0) {
2397                                                 if ($include_children) {
2398                                                         # sub-cats
2399                                                         $subcats = getChildCategories($link, $feed, $owner_uid);
2400
2401                                                         array_push($subcats, $feed);
2402                                                         $query_strategy_part = "cat_id IN (".
2403                                                                         implode(",", $subcats).")";
2404
2405                                                 } else {
2406                                                         $query_strategy_part = "cat_id = '$feed'";
2407                                                 }
2408
2409                                         } else {
2410                                                 $query_strategy_part = "cat_id IS NULL";
2411                                         }
2412
2413                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2414
2415                                 } else {
2416                                         $query_strategy_part = "feed_id = '$feed'";
2417                                 }
2418                         } else if ($feed == 0 && !$cat_view) { // archive virtual feed
2419                                 $query_strategy_part = "feed_id IS NULL";
2420                                 $allow_archived = true;
2421                         } else if ($feed == 0 && $cat_view) { // uncategorized
2422                                 $query_strategy_part = "cat_id IS NULL AND feed_id IS NOT NULL";
2423                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2424                         } else if ($feed == -1) { // starred virtual feed
2425                                 $query_strategy_part = "marked = true";
2426                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2427                         } else if ($feed == -2) { // published virtual feed OR labels category
2428
2429                                 if (!$cat_view) {
2430                                         $query_strategy_part = "published = true";
2431                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2432                                         $allow_archived = true;
2433
2434                                         if (!$override_order) $override_order = "last_read DESC, updated DESC";
2435                                 } else {
2436                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2437
2438                                         $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2439
2440                                         $query_strategy_part = "ttrss_labels2.id = ttrss_user_labels2.label_id AND
2441                                                 ttrss_user_labels2.article_id = ref_id";
2442
2443                                 }
2444                         } else if ($feed == -6) { // recently read
2445                                 $query_strategy_part = "unread = false AND last_read IS NOT NULL";
2446                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2447
2448                                 if (!$override_order) $override_order = "last_read DESC";
2449                         } else if ($feed == -3) { // fresh virtual feed
2450                                 $query_strategy_part = "unread = true AND score >= 0";
2451
2452                                 $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE", $owner_uid);
2453
2454                                 if (DB_TYPE == "pgsql") {
2455                                         $query_strategy_part .= " AND updated > NOW() - INTERVAL '$intl hour' ";
2456                                 } else {
2457                                         $query_strategy_part .= " AND updated > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
2458                                 }
2459
2460                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2461                         } else if ($feed == -4) { // all articles virtual feed
2462                                 $query_strategy_part = "true";
2463                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2464                         } else if ($feed <= -10) { // labels
2465                                 $label_id = -$feed - 11;
2466
2467                                 $query_strategy_part = "label_id = '$label_id' AND
2468                                         ttrss_labels2.id = ttrss_user_labels2.label_id AND
2469                                         ttrss_user_labels2.article_id = ref_id";
2470
2471                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2472                                 $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2473
2474                         } else {
2475                                 $query_strategy_part = "id > 0"; // dumb
2476                         }
2477
2478                         if (get_pref($link, "SORT_HEADLINES_BY_FEED_DATE", $owner_uid)) {
2479                                 $date_sort_field = "updated";
2480                         } else {
2481                                 $date_sort_field = "date_entered";
2482                         }
2483
2484                         if (get_pref($link, 'REVERSE_HEADLINES', $owner_uid)) {
2485                                 $order_by = "$date_sort_field";
2486                         } else {
2487                                 $order_by = "$date_sort_field DESC";
2488                         }
2489
2490                         if ($view_mode != "noscores") {
2491                                 $order_by = "score DESC, $order_by";
2492                         }
2493
2494                         if ($override_order) {
2495                                 $order_by = $override_order;
2496                         }
2497
2498                         $feed_title = "";
2499
2500                         if ($search) {
2501                                 $feed_title = T_sprintf("Search results: %s", $search);
2502                         } else {
2503                                 if ($cat_view) {
2504                                         $feed_title = getCategoryTitle($link, $feed);
2505                                 } else {
2506                                         if (is_numeric($feed) && $feed > 0) {
2507                                                 $result = db_query($link, "SELECT title,site_url,last_error
2508                                                         FROM ttrss_feeds WHERE id = '$feed' AND owner_uid = $owner_uid");
2509
2510                                                 $feed_title = db_fetch_result($result, 0, "title");
2511                                                 $feed_site_url = db_fetch_result($result, 0, "site_url");
2512                                                 $last_error = db_fetch_result($result, 0, "last_error");
2513                                         } else {
2514                                                 $feed_title = getFeedTitle($link, $feed);
2515                                         }
2516                                 }
2517                         }
2518
2519                         $content_query_part = "content as content_preview,";
2520
2521                         if (is_numeric($feed)) {
2522
2523                                 if ($feed >= 0) {
2524                                         $feed_kind = "Feeds";
2525                                 } else {
2526                                         $feed_kind = "Labels";
2527                                 }
2528
2529                                 if ($limit_query_part) {
2530                                         $offset_query_part = "OFFSET $offset";
2531                                 }
2532
2533                                 if ($vfeed_query_part && get_pref($link, 'VFEED_GROUP_BY_FEED', $owner_uid)) {
2534                                         if (!$override_order) {
2535                                                 $order_by = "ttrss_feeds.title, $order_by";
2536                                         }
2537                                 }
2538
2539                                 if (!$allow_archived) {
2540                                         $from_qpart = "ttrss_entries,ttrss_user_entries,ttrss_feeds$ext_tables_part";
2541                                         $feed_check_qpart = "ttrss_user_entries.feed_id = ttrss_feeds.id AND";
2542
2543                                 } else {
2544                                         $from_qpart = "ttrss_entries,ttrss_user_entries$ext_tables_part
2545                                                 LEFT JOIN ttrss_feeds ON (feed_id = ttrss_feeds.id)";
2546                                 }
2547
2548                                 $query = "SELECT DISTINCT
2549                                                 date_entered,
2550                                                 guid,
2551                                                 ttrss_entries.id,ttrss_entries.title,
2552                                                 updated,
2553                                                 label_cache,
2554                                                 tag_cache,
2555                                                 always_display_enclosures,
2556                                                 site_url,
2557                                                 note,
2558                                                 num_comments,
2559                                                 comments,
2560                                                 int_id,
2561                                                 unread,feed_id,marked,published,link,last_read,orig_feed_id,
2562                                                 ".SUBSTRING_FOR_DATE."(last_read,1,19) as last_read_noms,
2563                                                 $vfeed_query_part
2564                                                 $content_query_part
2565                                                 ".SUBSTRING_FOR_DATE."(updated,1,19) as updated_noms,
2566                                                 author,score
2567                                         FROM
2568                                                 $from_qpart
2569                                         WHERE
2570                                         $feed_check_qpart
2571                                         ttrss_user_entries.ref_id = ttrss_entries.id AND
2572                                         ttrss_user_entries.owner_uid = '$owner_uid' AND
2573                                         $search_query_part
2574                                         $filter_query_part
2575                                         $view_query_part
2576                                         $since_id_part
2577                                         $query_strategy_part ORDER BY $order_by
2578                                         $limit_query_part $offset_query_part";
2579
2580                                 if ($_REQUEST["debug"]) print $query;
2581
2582                                 $result = db_query($link, $query);
2583
2584                         } else {
2585                                 // browsing by tag
2586
2587                                 $select_qpart = "SELECT DISTINCT " .
2588                                                                 "date_entered," .
2589                                                                 "guid," .
2590                                                                 "note," .
2591                                                                 "ttrss_entries.id as id," .
2592                                                                 "title," .
2593                                                                 "updated," .
2594                                                                 "unread," .
2595                                                                 "feed_id," .
2596                                                                 "orig_feed_id," .
2597                                                                 "marked," .
2598                                                                 "num_comments, " .
2599                                                                 "comments, " .
2600                                                                 "tag_cache," .
2601                                                                 "label_cache," .
2602                                                                 "link," .
2603                                                                 "last_read," .
2604                                                                 SUBSTRING_FOR_DATE . "(last_read,1,19) as last_read_noms," .
2605                                                                 $since_id_part .
2606                                                                 $vfeed_query_part .
2607                                                                 $content_query_part .
2608                                                                 SUBSTRING_FOR_DATE . "(updated,1,19) as updated_noms," .
2609                                                                 "score ";
2610
2611                                 $feed_kind = "Tags";
2612                                 $all_tags = explode(",", $feed);
2613                                 if ($search_mode == 'any') {
2614                                         $tag_sql = "tag_name in (" . implode(", ", array_map("db_quote", $all_tags)) . ")";
2615                                         $from_qpart = " FROM ttrss_entries,ttrss_user_entries,ttrss_tags ";
2616                                         $where_qpart = " WHERE " .
2617                                                                    "ref_id = ttrss_entries.id AND " .
2618                                                                    "ttrss_user_entries.owner_uid = $owner_uid AND " .
2619                                                                    "post_int_id = int_id AND $tag_sql AND " .
2620                                                                    $view_query_part .
2621                                                                    $search_query_part .
2622                                                                    $query_strategy_part . " ORDER BY $order_by " .
2623                                                                    $limit_query_part;
2624
2625                                 } else {
2626                                         $i = 1;
2627                                         $sub_selects = array();
2628                                         $sub_ands = array();
2629                                         foreach ($all_tags as $term) {
2630                                                 array_push($sub_selects, "(SELECT post_int_id from ttrss_tags WHERE tag_name = " . db_quote($term) . " AND owner_uid = $owner_uid) as A$i");
2631                                                 $i++;
2632                                         }
2633                                         if ($i > 2) {
2634                                                 $x = 1;
2635                                                 $y = 2;
2636                                                 do {
2637                                                         array_push($sub_ands, "A$x.post_int_id = A$y.post_int_id");
2638                                                         $x++;
2639                                                         $y++;
2640                                                 } while ($y < $i);
2641                                         }
2642                                         array_push($sub_ands, "A1.post_int_id = ttrss_user_entries.int_id and ttrss_user_entries.owner_uid = $owner_uid");
2643                                         array_push($sub_ands, "ttrss_user_entries.ref_id = ttrss_entries.id");
2644                                         $from_qpart = " FROM " . implode(", ", $sub_selects) . ", ttrss_user_entries, ttrss_entries";
2645                                         $where_qpart = " WHERE " . implode(" AND ", $sub_ands);
2646                                 }
2647                                 //                              error_log("TAG SQL: " . $tag_sql);
2648                                 // $tag_sql = "tag_name = '$feed'";   DEFAULT way
2649
2650                                 //                              error_log("[". $select_qpart . "][" . $from_qpart . "][" .$where_qpart . "]");
2651                                 $result = db_query($link, $select_qpart . $from_qpart . $where_qpart);
2652                         }
2653
2654                         return array($result, $feed_title, $feed_site_url, $last_error);
2655
2656         }
2657
2658         function sanitize($link, $str, $force_strip_tags = false, $owner = false, $site_url = false) {
2659                 global $purifier;
2660
2661                 if (!$owner) $owner = $_SESSION["uid"];
2662
2663                 $res = trim($str); if (!$res) return '';
2664
2665                 // create global Purifier object if needed
2666                 if (!$purifier) {
2667                         require_once 'lib/htmlpurifier/library/HTMLPurifier.auto.php';
2668
2669                         $config = HTMLPurifier_Config::createDefault();
2670
2671                         $allowed = "p,a[href],i,em,b,strong,code,pre,blockquote,br,img[src|alt|title|align|hspace],ul,ol,li,h1,h2,h3,h4,s,object[classid|type|id|name|width|height|codebase],param[name|value],table,tr,td,span[class]";
2672
2673                         $config->set('HTML.SafeObject', true);
2674                         @$config->set('HTML', 'Allowed', $allowed);
2675                         $config->set('Output.FlashCompat', true);
2676                         $config->set('Attr.EnableID', true);
2677                         if (!defined('MOBILE_VERSION')) {
2678                                 @$config->set('Cache', 'SerializerPath', CACHE_DIR . "/htmlpurifier");
2679                         } else {
2680                                 @$config->set('Cache', 'SerializerPath', "../" . CACHE_DIR . "/htmlpurifier");
2681                         }
2682
2683                         $config->set('Filter.YouTube', true);
2684
2685                         $purifier = new HTMLPurifier($config);
2686                 }
2687
2688                 $res = $purifier->purify($res);
2689
2690                 if (get_pref($link, "STRIP_IMAGES", $owner)) {
2691                         $res = preg_replace('/<img[^>]+>/is', '', $res);
2692                 }
2693
2694                 if (strpos($res, "href=") === false)
2695                         $res = rewrite_urls($res);
2696
2697                 $charset_hack = '<head>
2698                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
2699                 </head>';
2700
2701                 $res = trim($res); if (!$res) return '';
2702
2703                 libxml_use_internal_errors(true);
2704
2705                 $doc = new DOMDocument();
2706                 $doc->loadHTML($charset_hack . $res);
2707                 $xpath = new DOMXPath($doc);
2708
2709                 $entries = $xpath->query('(//a[@href]|//img[@src])');
2710                 $br_inserted = 0;
2711
2712                 foreach ($entries as $entry) {
2713
2714                         if ($site_url) {
2715
2716                                 if ($entry->hasAttribute('href'))
2717                                         $entry->setAttribute('href',
2718                                                 rewrite_relative_url($site_url, $entry->getAttribute('href')));
2719
2720                                 if ($entry->hasAttribute('src'))
2721                                         if (preg_match('/^image.php\?i=[a-z0-9]+$/', $entry->getAttribute('src')) == 0)
2722                                                 $entry->setAttribute('src',
2723                                                         rewrite_relative_url($site_url, $entry->getAttribute('src')));
2724                         }
2725
2726                         if (strtolower($entry->nodeName) == "a") {
2727                                 $entry->setAttribute("target", "_blank");
2728                         }
2729
2730                         if (strtolower($entry->nodeName) == "img" && !$br_inserted) {
2731                                 $br = $doc->createElement("br");
2732
2733                                 if ($entry->parentNode->nextSibling) {
2734                                         $entry->parentNode->insertBefore($br, $entry->nextSibling);
2735                                         $br_inserted = 1;
2736                                 }
2737
2738                         }
2739                 }
2740
2741                 $node = $doc->getElementsByTagName('body')->item(0);
2742
2743                 return $doc->saveXML($node, LIBXML_NOEMPTYTAG);
2744         }
2745
2746         /**
2747          * Send by mail a digest of last articles.
2748          *
2749          * @param mixed $link The database connection.
2750          * @param integer $limit The maximum number of articles by digest.
2751          * @return boolean Return false if digests are not enabled.
2752          */
2753         function send_headlines_digests($link, $debug = false) {
2754
2755                 require_once 'lib/phpmailer/class.phpmailer.php';
2756
2757                 $user_limit = 15; // amount of users to process (e.g. emails to send out)
2758                 $limit = 1000; // maximum amount of headlines to include
2759
2760                 if ($debug) _debug("Sending digests, batch of max $user_limit users, headline limit = $limit");
2761
2762                 if (DB_TYPE == "pgsql") {
2763                         $interval_query = "last_digest_sent < NOW() - INTERVAL '1 days'";
2764                 } else if (DB_TYPE == "mysql") {
2765                         $interval_query = "last_digest_sent < DATE_SUB(NOW(), INTERVAL 1 DAY)";
2766                 }
2767
2768                 $result = db_query($link, "SELECT id,email FROM ttrss_users
2769                                 WHERE email != '' AND (last_digest_sent IS NULL OR $interval_query)");
2770
2771                 while ($line = db_fetch_assoc($result)) {
2772
2773                         if (get_pref($link, 'DIGEST_ENABLE', $line['id'], false)) {
2774                                 $preferred_ts = strtotime(get_pref($link, 'DIGEST_PREFERRED_TIME', $line['id'], '00:00'));
2775
2776                                 // try to send digests within 2 hours of preferred time
2777                                 if ($preferred_ts && time() >= $preferred_ts &&
2778                                                 time() - $preferred_ts <= 7200) {
2779
2780                                         if ($debug) print "Sending digest for UID:" . $line['id'] . " - " . $line["email"] . " ... ";
2781
2782                                         $do_catchup = get_pref($link, 'DIGEST_CATCHUP', $line['id'], false);
2783
2784                                         global $tz_offset;
2785
2786                                         // reset tz_offset global to prevent tz cache clash between users
2787                                         $tz_offset = -1;
2788
2789                                         $tuple = prepare_headlines_digest($link, $line["id"], 1, $limit);
2790                                         $digest = $tuple[0];
2791                                         $headlines_count = $tuple[1];
2792                                         $affected_ids = $tuple[2];
2793                                         $digest_text = $tuple[3];
2794
2795                                         if ($headlines_count > 0) {
2796
2797                                                 $mail = new PHPMailer();
2798
2799                                                 $mail->PluginDir = "lib/phpmailer/";
2800                                                 $mail->SetLanguage("en", "lib/phpmailer/language/");
2801
2802                                                 $mail->CharSet = "UTF-8";
2803
2804                                                 $mail->From = SMTP_FROM_ADDRESS;
2805                                                 $mail->FromName = SMTP_FROM_NAME;
2806                                                 $mail->AddAddress($line["email"], $line["login"]);
2807
2808                                                 if (SMTP_HOST) {
2809                                                         $mail->Host = SMTP_HOST;
2810                                                         $mail->Mailer = "smtp";
2811                                                         $mail->SMTPAuth = SMTP_LOGIN != '';
2812                                                         $mail->Username = SMTP_LOGIN;
2813                                                         $mail->Password = SMTP_PASSWORD;
2814                                                 }
2815
2816                                                 $mail->IsHTML(true);
2817                                                 $mail->Subject = DIGEST_SUBJECT;
2818                                                 $mail->Body = $digest;
2819                                                 $mail->AltBody = $digest_text;
2820
2821                                                 $rc = $mail->Send();
2822
2823                                                 if (!$rc && $debug) print "ERROR: " . $mail->ErrorInfo;
2824
2825                                                 if ($debug) print "RC=$rc\n";
2826
2827                                                 if ($rc && $do_catchup) {
2828                                                         if ($debug) print "Marking affected articles as read...\n";
2829                                                         catchupArticlesById($link, $affected_ids, 0, $line["id"]);
2830                                                 }
2831                                         } else {
2832                                                 if ($debug) print "No headlines\n";
2833                                         }
2834
2835                                         db_query($link, "UPDATE ttrss_users SET last_digest_sent = NOW()
2836                                                 WHERE id = " . $line["id"]);
2837
2838                                 }
2839                         }
2840                 }
2841
2842                 if ($debug) _debug("All done.");
2843
2844         }
2845
2846         function prepare_headlines_digest($link, $user_id, $days = 1, $limit = 1000) {
2847
2848                 require_once "lib/MiniTemplator.class.php";
2849
2850                 $tpl = new MiniTemplator;
2851                 $tpl_t = new MiniTemplator;
2852
2853                 $tpl->readTemplateFromFile("templates/digest_template_html.txt");
2854                 $tpl_t->readTemplateFromFile("templates/digest_template.txt");
2855
2856                 $user_tz_string = get_pref($link, 'USER_TIMEZONE', $user_id);
2857                 $local_ts = convert_timestamp(time(), 'UTC', $user_tz_string);
2858
2859                 $tpl->setVariable('CUR_DATE', date('Y/m/d', $local_ts));
2860                 $tpl->setVariable('CUR_TIME', date('G:i', $local_ts));
2861
2862                 $tpl_t->setVariable('CUR_DATE', date('Y/m/d', $local_ts));
2863                 $tpl_t->setVariable('CUR_TIME', date('G:i', $local_ts));
2864
2865                 $affected_ids = array();
2866
2867                 if (DB_TYPE == "pgsql") {
2868                         $interval_query = "ttrss_entries.date_updated > NOW() - INTERVAL '$days days'";
2869                 } else if (DB_TYPE == "mysql") {
2870                         $interval_query = "ttrss_entries.date_updated > DATE_SUB(NOW(), INTERVAL $days DAY)";
2871                 }
2872
2873                 $result = db_query($link, "SELECT ttrss_entries.title,
2874                                 ttrss_feeds.title AS feed_title,
2875                                 COALESCE(ttrss_feed_categories.title, '".__('Uncategorized')."') AS cat_title,
2876                                 date_updated,
2877                                 ttrss_user_entries.ref_id,
2878                                 link,
2879                                 score,
2880                                 content,
2881                                 ".SUBSTRING_FOR_DATE."(last_updated,1,19) AS last_updated
2882                         FROM
2883                                 ttrss_user_entries,ttrss_entries,ttrss_feeds
2884                         LEFT JOIN
2885                                 ttrss_feed_categories ON (cat_id = ttrss_feed_categories.id)
2886                         WHERE
2887                                 ref_id = ttrss_entries.id AND feed_id = ttrss_feeds.id
2888                                 AND include_in_digest = true
2889                                 AND $interval_query
2890                                 AND ttrss_user_entries.owner_uid = $user_id
2891                                 AND unread = true
2892                                 AND score >= 0
2893                         ORDER BY ttrss_feed_categories.title, ttrss_feeds.title, score DESC, date_updated DESC
2894                         LIMIT $limit");
2895
2896                 $cur_feed_title = "";
2897
2898                 $headlines_count = db_num_rows($result);
2899
2900                 $headlines = array();
2901
2902                 while ($line = db_fetch_assoc($result)) {
2903                         array_push($headlines, $line);
2904                 }
2905
2906                 for ($i = 0; $i < sizeof($headlines); $i++) {
2907
2908                         $line = $headlines[$i];
2909
2910                         array_push($affected_ids, $line["ref_id"]);
2911
2912                         $updated = make_local_datetime($link, $line['last_updated'], false,
2913                                 $user_id);
2914
2915 /*                      if ($line["score"] != 0) {
2916                                 if ($line["score"] > 0) $line["score"] = '+' . $line["score"];
2917
2918                                 $line["title"] .= " (".$line['score'].")";
2919                         } */
2920
2921                         if (get_pref($link, 'ENABLE_FEED_CATS', $user_id)) {
2922                                 $line['feed_title'] = $line['cat_title'] . " / " . $line['feed_title'];
2923                         }
2924
2925                         $tpl->setVariable('FEED_TITLE', $line["feed_title"]);
2926                         $tpl->setVariable('ARTICLE_TITLE', $line["title"]);
2927                         $tpl->setVariable('ARTICLE_LINK', $line["link"]);
2928                         $tpl->setVariable('ARTICLE_UPDATED', $updated);
2929                         $tpl->setVariable('ARTICLE_EXCERPT',
2930                                 truncate_string(strip_tags($line["content"]), 300));
2931 //                      $tpl->setVariable('ARTICLE_CONTENT',
2932 //                              strip_tags($article_content));
2933
2934                         $tpl->addBlock('article');
2935
2936                         $tpl_t->setVariable('FEED_TITLE', $line["feed_title"]);
2937                         $tpl_t->setVariable('ARTICLE_TITLE', $line["title"]);
2938                         $tpl_t->setVariable('ARTICLE_LINK', $line["link"]);
2939                         $tpl_t->setVariable('ARTICLE_UPDATED', $updated);
2940 //                      $tpl_t->setVariable('ARTICLE_EXCERPT',
2941 //                              truncate_string(strip_tags($line["excerpt"]), 100));
2942
2943                         $tpl_t->addBlock('article');
2944
2945                         if ($headlines[$i]['feed_title'] != $headlines[$i+1]['feed_title']) {
2946                                 $tpl->addBlock('feed');
2947                                 $tpl_t->addBlock('feed');
2948                         }
2949
2950                 }
2951
2952                 $tpl->addBlock('digest');
2953                 $tpl->generateOutputToString($tmp);
2954
2955                 $tpl_t->addBlock('digest');
2956                 $tpl_t->generateOutputToString($tmp_t);
2957
2958                 return array($tmp, $headlines_count, $affected_ids, $tmp_t);
2959         }
2960
2961         function check_for_update($link) {
2962                 if (CHECK_FOR_NEW_VERSION && $_SESSION['access_level'] >= 10) {
2963                         $version_url = "http://tt-rss.org/version.php?ver=" . VERSION;
2964
2965                         $version_data = @fetch_file_contents($version_url);
2966
2967                         if ($version_data) {
2968                                 $version_data = json_decode($version_data, true);
2969                                 if ($version_data && $version_data['version']) {
2970
2971                                         if (version_compare(VERSION, $version_data['version']) == -1) {
2972                                                 return $version_data;
2973                                         }
2974                                 }
2975                         }
2976                 }
2977                 return false;
2978         }
2979
2980         function markArticlesById($link, $ids, $cmode) {
2981
2982                 $tmp_ids = array();
2983
2984                 foreach ($ids as $id) {
2985                         array_push($tmp_ids, "ref_id = '$id'");
2986                 }
2987
2988                 $ids_qpart = join(" OR ", $tmp_ids);
2989
2990                 if ($cmode == 0) {
2991                         db_query($link, "UPDATE ttrss_user_entries SET
2992                         marked = false,last_read = NOW()
2993                         WHERE ($ids_qpart) AND owner_uid = " . $_SESSION["uid"]);
2994                 } else if ($cmode == 1) {
2995                         db_query($link, "UPDATE ttrss_user_entries SET
2996                         marked = true
2997                         WHERE ($ids_qpart) AND owner_uid = " . $_SESSION["uid"]);
2998                 } else {
2999                         db_query($link, "UPDATE ttrss_user_entries SET
3000                         marked = NOT marked,last_read = NOW()
3001                         WHERE ($ids_qpart) AND owner_uid = " . $_SESSION["uid"]);
3002                 }
3003         }
3004
3005         function publishArticlesById($link, $ids, $cmode) {
3006
3007                 $tmp_ids = array();
3008
3009                 foreach ($ids as $id) {
3010                         array_push($tmp_ids, "ref_id = '$id'");
3011                 }
3012
3013                 $ids_qpart = join(" OR ", $tmp_ids);
3014
3015                 if ($cmode == 0) {
3016                         db_query($link, "UPDATE ttrss_user_entries SET
3017                         published = false,last_read = NOW()
3018                         WHERE ($ids_qpart) AND owner_uid = " . $_SESSION["uid"]);
3019                 } else if ($cmode == 1) {
3020                         db_query($link, "UPDATE ttrss_user_entries SET
3021                         published = true,last_read = NOW()
3022                         WHERE ($ids_qpart) AND owner_uid = " . $_SESSION["uid"]);
3023                 } else {
3024                         db_query($link, "UPDATE ttrss_user_entries SET
3025                         published = NOT published,last_read = NOW()
3026                         WHERE ($ids_qpart) AND owner_uid = " . $_SESSION["uid"]);
3027                 }
3028
3029                 if (PUBSUBHUBBUB_HUB) {
3030                         $rss_link = get_self_url_prefix() .
3031                                 "/public.php?op=rss&id=-2&key=" .
3032                                 get_feed_access_key($link, -2, false);
3033
3034                         $p = new Publisher(PUBSUBHUBBUB_HUB);
3035
3036                         $pubsub_result = $p->publish_update($rss_link);
3037                 }
3038         }
3039
3040         function catchupArticlesById($link, $ids, $cmode, $owner_uid = false) {
3041
3042                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3043                 if (count($ids) == 0) return;
3044
3045                 $tmp_ids = array();
3046
3047                 foreach ($ids as $id) {
3048                         array_push($tmp_ids, "ref_id = '$id'");
3049                 }
3050
3051                 $ids_qpart = join(" OR ", $tmp_ids);
3052
3053                 if ($cmode == 0) {
3054                         db_query($link, "UPDATE ttrss_user_entries SET
3055                         unread = false,last_read = NOW()
3056                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
3057                 } else if ($cmode == 1) {
3058                         db_query($link, "UPDATE ttrss_user_entries SET
3059                         unread = true
3060                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
3061                 } else {
3062                         db_query($link, "UPDATE ttrss_user_entries SET
3063                         unread = NOT unread,last_read = NOW()
3064                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
3065                 }
3066
3067                 /* update ccache */
3068
3069                 $result = db_query($link, "SELECT DISTINCT feed_id FROM ttrss_user_entries
3070                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
3071
3072                 while ($line = db_fetch_assoc($result)) {
3073                         ccache_update($link, $line["feed_id"], $owner_uid);
3074                 }
3075         }
3076
3077         function catchupArticleById($link, $id, $cmode) {
3078
3079                 if ($cmode == 0) {
3080                         db_query($link, "UPDATE ttrss_user_entries SET
3081                         unread = false,last_read = NOW()
3082                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
3083                 } else if ($cmode == 1) {
3084                         db_query($link, "UPDATE ttrss_user_entries SET
3085                         unread = true
3086                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
3087                 } else {
3088                         db_query($link, "UPDATE ttrss_user_entries SET
3089                         unread = NOT unread,last_read = NOW()
3090                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
3091                 }
3092
3093                 $feed_id = getArticleFeed($link, $id);
3094                 ccache_update($link, $feed_id, $_SESSION["uid"]);
3095         }
3096
3097         function make_guid_from_title($title) {
3098                 return preg_replace("/[ \"\',.:;]/", "-",
3099                         mb_strtolower(strip_tags($title), 'utf-8'));
3100         }
3101
3102         function get_article_tags($link, $id, $owner_uid = 0, $tag_cache = false) {
3103
3104                 $a_id = db_escape_string($id);
3105
3106                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3107
3108                 $query = "SELECT DISTINCT tag_name,
3109                         owner_uid as owner FROM
3110                         ttrss_tags WHERE post_int_id = (SELECT int_id FROM ttrss_user_entries WHERE
3111                         ref_id = '$a_id' AND owner_uid = '$owner_uid' LIMIT 1) ORDER BY tag_name";
3112
3113                 $obj_id = md5("TAGS:$owner_uid:$id");
3114                 $tags = array();
3115
3116                 /* check cache first */
3117
3118                 if ($tag_cache === false) {
3119                         $result = db_query($link, "SELECT tag_cache FROM ttrss_user_entries
3120                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
3121
3122                         $tag_cache = db_fetch_result($result, 0, "tag_cache");
3123                 }
3124
3125                 if ($tag_cache) {
3126                         $tags = explode(",", $tag_cache);
3127                 } else {
3128
3129                         /* do it the hard way */
3130
3131                         $tmp_result = db_query($link, $query);
3132
3133                         while ($tmp_line = db_fetch_assoc($tmp_result)) {
3134                                 array_push($tags, $tmp_line["tag_name"]);
3135                         }
3136
3137                         /* update the cache */
3138
3139                         $tags_str = db_escape_string(join(",", $tags));
3140
3141                         db_query($link, "UPDATE ttrss_user_entries
3142                                 SET tag_cache = '$tags_str' WHERE ref_id = '$id'
3143                                 AND owner_uid = $owner_uid");
3144                 }
3145
3146                 return $tags;
3147         }
3148
3149         function trim_array($array) {
3150                 $tmp = $array;
3151                 array_walk($tmp, 'trim');
3152                 return $tmp;
3153         }
3154
3155         function tag_is_valid($tag) {
3156                 if ($tag == '') return false;
3157                 if (preg_match("/^[0-9]*$/", $tag)) return false;
3158                 if (mb_strlen($tag) > 250) return false;
3159
3160                 if (function_exists('iconv')) {
3161                         $tag = iconv("utf-8", "utf-8", $tag);
3162                 }
3163
3164                 if (!$tag) return false;
3165
3166                 return true;
3167         }
3168
3169         function render_login_form($link, $form_id = 0) {
3170                 switch ($form_id) {
3171                 case 0:
3172                         require_once "login_form.php";
3173                         break;
3174                 case 1:
3175                         require_once "mobile/login_form.php";
3176                         break;
3177                 }
3178                 exit;
3179         }
3180
3181         // from http://developer.apple.com/internet/safari/faq.html
3182         function no_cache_incantation() {
3183                 header("Expires: Mon, 22 Dec 1980 00:00:00 GMT"); // Happy birthday to me :)
3184                 header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT"); // always modified
3185                 header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0"); // HTTP/1.1
3186                 header("Cache-Control: post-check=0, pre-check=0", false);
3187                 header("Pragma: no-cache"); // HTTP/1.0
3188         }
3189
3190         function format_warning($msg, $id = "") {
3191                 global $link;
3192                 return "<div class=\"warning\" id=\"$id\">
3193                         <img src=\"".theme_image($link, "images/sign_excl.png")."\">$msg</div>";
3194         }
3195
3196         function format_notice($msg, $id = "") {
3197                 global $link;
3198                 return "<div class=\"notice\" id=\"$id\">
3199                         <img src=\"".theme_image($link, "images/sign_info.png")."\">$msg</div>";
3200         }
3201
3202         function format_error($msg, $id = "") {
3203                 global $link;
3204                 return "<div class=\"error\" id=\"$id\">
3205                         <img src=\"".theme_image($link, "images/sign_excl.png")."\">$msg</div>";
3206         }
3207
3208         function print_notice($msg) {
3209                 return print format_notice($msg);
3210         }
3211
3212         function print_warning($msg) {
3213                 return print format_warning($msg);
3214         }
3215
3216         function print_error($msg) {
3217                 return print format_error($msg);
3218         }
3219
3220
3221         function T_sprintf() {
3222                 $args = func_get_args();
3223                 return vsprintf(__(array_shift($args)), $args);
3224         }
3225
3226         function format_inline_player($link, $url, $ctype) {
3227
3228                 $entry = "";
3229
3230                 if (strpos($ctype, "audio/") === 0) {
3231
3232                         if ($_SESSION["hasAudio"] && (strpos($ctype, "ogg") !== false ||
3233                                 strpos($_SERVER['HTTP_USER_AGENT'], "Chrome") !== false ||
3234                                 strpos($_SERVER['HTTP_USER_AGENT'], "Safari") !== false )) {
3235
3236                                 $id = 'AUDIO-' . uniqid();
3237
3238                                 $entry .= "<audio id=\"$id\"\">
3239                                         <source src=\"$url\"></source>
3240                                         </audio>";
3241
3242                                 $entry .= "<span onclick=\"player(this)\"
3243                                         title=\"".__("Click to play")."\" status=\"0\"
3244                                         class=\"player\" audio-id=\"$id\">".__("Play")."</span>";
3245
3246                         } else {
3247
3248                                 $entry .= "<object type=\"application/x-shockwave-flash\"
3249                                         data=\"lib/button/musicplayer.swf?song_url=$url\"
3250                                         width=\"17\" height=\"17\" style='float : left; margin-right : 5px;'>
3251                                         <param name=\"movie\"
3252                                                 value=\"lib/button/musicplayer.swf?song_url=$url\" />
3253                                         </object>";
3254                         }
3255                 }
3256
3257                 $filename = substr($url, strrpos($url, "/")+1);
3258
3259                 $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
3260                         $filename . " (" . $ctype . ")" . "</a>";
3261
3262                 return $entry;
3263         }
3264
3265         function format_article($link, $id, $mark_as_read = true, $zoom_mode = false, $owner_uid = false) {
3266                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3267
3268                 $rv = array();
3269
3270                 $rv['id'] = $id;
3271
3272                 /* we can figure out feed_id from article id anyway, why do we
3273                  * pass feed_id here? let's ignore the argument :( */
3274
3275                 $result = db_query($link, "SELECT feed_id FROM ttrss_user_entries
3276                         WHERE ref_id = '$id'");
3277
3278                 $feed_id = (int) db_fetch_result($result, 0, "feed_id");
3279
3280                 $rv['feed_id'] = $feed_id;
3281
3282                 //if (!$zoom_mode) { print "<article id='$id'><![CDATA["; };
3283
3284                 $result = db_query($link, "SELECT rtl_content, always_display_enclosures FROM ttrss_feeds
3285                         WHERE id = '$feed_id' AND owner_uid = $owner_uid");
3286
3287                 if (db_num_rows($result) == 1) {
3288                         $rtl_content = sql_bool_to_bool(db_fetch_result($result, 0, "rtl_content"));
3289                         $always_display_enclosures = sql_bool_to_bool(db_fetch_result($result, 0, "always_display_enclosures"));
3290                 } else {
3291                         $rtl_content = false;
3292                         $always_display_enclosures = false;
3293                 }
3294
3295                 if ($rtl_content) {
3296                         $rtl_tag = "dir=\"RTL\"";
3297                         $rtl_class = "RTL";
3298                 } else {
3299                         $rtl_tag = "";
3300                         $rtl_class = "";
3301                 }
3302
3303                 if ($mark_as_read) {
3304                         $result = db_query($link, "UPDATE ttrss_user_entries
3305                                 SET unread = false,last_read = NOW()
3306                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
3307
3308                         ccache_update($link, $feed_id, $owner_uid);
3309                 }
3310
3311                 $result = db_query($link, "SELECT title,link,content,feed_id,comments,int_id,
3312                         ".SUBSTRING_FOR_DATE."(updated,1,16) as updated,
3313                         (SELECT icon_url FROM ttrss_feeds WHERE id = feed_id) as icon_url,
3314                         (SELECT site_url FROM ttrss_feeds WHERE id = feed_id) as site_url,
3315                         num_comments,
3316                         tag_cache,
3317                         author,
3318                         orig_feed_id,
3319                         note
3320                         FROM ttrss_entries,ttrss_user_entries
3321                         WHERE   id = '$id' AND ref_id = id AND owner_uid = $owner_uid");
3322
3323                 if ($result) {
3324
3325                         $line = db_fetch_assoc($result);
3326
3327                         if ($line["icon_url"]) {
3328                                 $feed_icon = "<img src=\"" . $line["icon_url"] . "\">";
3329                         } else {
3330                                 $feed_icon = "&nbsp;";
3331                         }
3332
3333                         $feed_site_url = $line['site_url'];
3334
3335                         $num_comments = $line["num_comments"];
3336                         $entry_comments = "";
3337
3338                         if ($num_comments > 0) {
3339                                 if ($line["comments"]) {
3340                                         $comments_url = $line["comments"];
3341                                 } else {
3342                                         $comments_url = $line["link"];
3343                                 }
3344                                 $entry_comments = "<a target='_blank' href=\"$comments_url\">$num_comments comments</a>";
3345                         } else {
3346                                 if ($line["comments"] && $line["link"] != $line["comments"]) {
3347                                         $entry_comments = "<a target='_blank' href=\"".$line["comments"]."\">comments</a>";
3348                                 }
3349                         }
3350
3351                         if ($zoom_mode) {
3352                                 header("Content-Type: text/html");
3353                                 $rv['content'] .= "<html><head>
3354                                                 <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"/>
3355                                                 <title>Tiny Tiny RSS - ".$line["title"]."</title>
3356                                                 <link rel=\"stylesheet\" type=\"text/css\" href=\"tt-rss.css\">
3357                                         </head><body>";
3358                         }
3359
3360                         $title_escaped = db_escape_string($line['title']);
3361
3362                         $rv['content'] .= "<div id=\"PTITLE-$id\" style=\"display : none\">" .
3363                                 truncate_string(strip_tags($line['title']), 15) . "</div>";
3364
3365                         $rv['content'] .= "<div id=\"PTITLE-FULL-$id\" style=\"display : none\">" .
3366                                 strip_tags($line['title']) . "</div>";
3367
3368                         $rv['content'] .= "<div class=\"postReply\" id=\"POST-$id\">";
3369
3370                         $rv['content'] .= "<div onclick=\"return postClicked(event, $id)\"
3371                                 class=\"postHeader\" id=\"POSTHDR-$id\">";
3372
3373                         $entry_author = $line["author"];
3374
3375                         if ($entry_author) {
3376                                 $entry_author = __(" - ") . $entry_author;
3377                         }
3378
3379                         $parsed_updated = make_local_datetime($link, $line["updated"], true,
3380                                 $owner_uid, true);
3381
3382                         $rv['content'] .= "<div class=\"postDate$rtl_class\">$parsed_updated</div>";
3383
3384                         if ($line["link"]) {
3385                                 $rv['content'] .= "<div class='postTitle'><a target='_blank'
3386                                         title=\"".htmlspecialchars($line['title'])."\"
3387                                         href=\"" .
3388                                         $line["link"] . "\">" .
3389                                         $line["title"] .
3390                                         "<span class='author'>$entry_author</span></a></div>";
3391                         } else {
3392                                 $rv['content'] .= "<div class='postTitle'>" . $line["title"] . "$entry_author</div>";
3393                         }
3394
3395                         $tag_cache = $line["tag_cache"];
3396
3397                         if (!$tag_cache)
3398                                 $tags = get_article_tags($link, $id, $owner_uid);
3399                         else
3400                                 $tags = explode(",", $tag_cache);
3401
3402                         $tags_str = format_tags_string($tags, $id);
3403                         $tags_str_full = join(", ", $tags);
3404
3405                         if (!$tags_str_full) $tags_str_full = __("no tags");
3406
3407                         if (!$entry_comments) $entry_comments = "&nbsp;"; # placeholder
3408
3409                         $rv['content'] .= "<div class='postTags' style='float : right'>
3410                                 <img src='".theme_image($link, 'images/tag.png')."'
3411                                 class='tagsPic' alt='Tags' title='Tags'>&nbsp;";
3412
3413                         if (!$zoom_mode) {
3414                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>
3415                                         <a title=\"".__('Edit tags for this article')."\"
3416                                         href=\"#\" onclick=\"editArticleTags($id, $feed_id)\">(+)</a>";
3417
3418                                 $rv['content'] .= "<div dojoType=\"dijit.Tooltip\"
3419                                         id=\"ATSTRTIP-$id\" connectId=\"ATSTR-$id\"
3420                                         position=\"below\">$tags_str_full</div>";
3421
3422                                 $rv['content'] .= "<img src=\"".theme_image($link, 'images/art-zoom.png')."\"
3423                                                 class='tagsPic' style=\"cursor : pointer\"
3424                                                 onclick=\"postOpenInNewTab(event, $id)\"
3425                                                 alt='Zoom' title='".__('Open article in new tab')."'>";
3426
3427                                 $button_plugins = explode(",", ARTICLE_BUTTON_PLUGINS);
3428
3429                                 foreach ($button_plugins as $p) {
3430                                         $pclass = trim("button_${p}");
3431
3432                                         if (class_exists($pclass)) {
3433                                                 $plugin = new $pclass($link);
3434                                                 $rv['content'] .= $plugin->render($id, $line);
3435                                         }
3436                                 }
3437
3438                                 $rv['content'] .= "<img src=\"".theme_image($link, 'images/digest_checkbox.png')."\"
3439                                                 class='tagsPic' style=\"cursor : pointer\"
3440                                                 onclick=\"closeArticlePanel($id)\"
3441                                                 title='".__('Close article')."'>";
3442
3443                         } else {
3444                                 $tags_str = strip_tags($tags_str);
3445                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>";
3446                         }
3447                         $rv['content'] .= "</div>";
3448                         $rv['content'] .= "<div clear='both'>$entry_comments</div>";
3449
3450                         if ($line["orig_feed_id"]) {
3451
3452                                 $tmp_result = db_query($link, "SELECT * FROM ttrss_archived_feeds
3453                                         WHERE id = ".$line["orig_feed_id"]);
3454
3455                                 if (db_num_rows($tmp_result) != 0) {
3456
3457                                         $rv['content'] .= "<div clear='both'>";
3458                                         $rv['content'] .= __("Originally from:");
3459
3460                                         $rv['content'] .= "&nbsp;";
3461
3462                                         $tmp_line = db_fetch_assoc($tmp_result);
3463
3464                                         $rv['content'] .= "<a target='_blank'
3465                                                 href=' " . htmlspecialchars($tmp_line['site_url']) . "'>" .
3466                                                 $tmp_line['title'] . "</a>";
3467
3468                                         $rv['content'] .= "&nbsp;";
3469
3470                                         $rv['content'] .= "<a target='_blank' href='" . htmlspecialchars($tmp_line['feed_url']) . "'>";
3471                                         $rv['content'] .= "<img title='".__('Feed URL')."'class='tinyFeedIcon' src='images/pub_set.png'></a>";
3472
3473                                         $rv['content'] .= "</div>";
3474                                 }
3475                         }
3476
3477                         $rv['content'] .= "</div>";
3478
3479                         $rv['content'] .= "<div id=\"POSTNOTE-$id\">";
3480                                 if ($line['note']) {
3481                                         $rv['content'] .= format_article_note($id, $line['note']);
3482                                 }
3483                         $rv['content'] .= "</div>";
3484
3485                         $rv['content'] .= "<div class=\"postIcon\">" .
3486                                 "<a target=\"_blank\" title=\"".__("Visit the website")."\"$
3487                                 href=\"".htmlspecialchars($feed_site_url)."\">".
3488                                 $feed_icon . "</a></div>";
3489
3490                         $rv['content'] .= "<div class=\"postContent\">";
3491
3492                         // N-grams
3493
3494                         if (DB_TYPE == "pgsql" and defined('_NGRAM_TITLE_RELATED_THRESHOLD')) {
3495
3496                                 $ngram_result = db_query($link, "SELECT id,title FROM
3497                                                 ttrss_entries,ttrss_user_entries
3498                                         WHERE ref_id = id AND updated >= NOW() - INTERVAL '7 day'
3499                                                 AND similarity(title, '$title_escaped') >= "._NGRAM_TITLE_RELATED_THRESHOLD."
3500                                                 AND title != '$title_escaped'
3501                                                 AND owner_uid = $owner_uid");
3502
3503                                 if (db_num_rows($ngram_result) > 0) {
3504                                         $rv['content'] .= "<div dojoType=\"dijit.form.DropDownButton\">".
3505                                                 "<span>" . __('Related')."</span>";
3506                                         $rv['content'] .= "<div dojoType=\"dijit.Menu\" style=\"display: none;\">";
3507
3508                                         while ($nline = db_fetch_assoc($ngram_result)) {
3509                                                 $rv['content'] .= "<div onclick=\"hlOpenInNewTab(null,".$nline['id'].")\"
3510                                                         dojoType=\"dijit.MenuItem\">".$nline['title']."</div>";
3511
3512                                         }
3513                                         $rv['content'] .= "</div></div><br/";
3514                                 }
3515                         }
3516
3517                         $article_content = sanitize($link, $line["content"], false, $owner_uid,
3518                                 $feed_site_url);
3519
3520                         $rv['content'] .= $article_content;
3521
3522                         $rv['content'] .= format_article_enclosures($link, $id,
3523                                 $always_display_enclosures, $article_content);
3524
3525                         $rv['content'] .= "</div>";
3526
3527                         $rv['content'] .= "</div>";
3528
3529                 }
3530
3531                 if ($zoom_mode) {
3532                         $rv['content'] .= "
3533                                 <div style=\"text-align : center\">
3534                                 <button onclick=\"return window.close()\">".
3535                                         __("Close this window")."</button></div>";
3536                         $rv['content'] .= "</body></html>";
3537                 }
3538
3539                 return $rv;
3540
3541         }
3542
3543         function print_checkpoint($n, $s) {
3544                 $ts = getmicrotime();
3545                 echo sprintf("<!-- CP[$n] %.4f seconds -->", $ts - $s);
3546                 return $ts;
3547         }
3548
3549         function sanitize_tag($tag) {
3550                 $tag = trim($tag);
3551
3552                 $tag = mb_strtolower($tag, 'utf-8');
3553
3554                 $tag = preg_replace('/[\'\"\+\>\<]/', "", $tag);
3555
3556 //              $tag = str_replace('"', "", $tag);
3557 //              $tag = str_replace("+", " ", $tag);
3558                 $tag = str_replace("technorati tag: ", "", $tag);
3559
3560                 return $tag;
3561         }
3562
3563         function get_self_url_prefix() {
3564                 return SELF_URL_PATH;
3565         }
3566
3567         function opml_publish_url($link){
3568
3569                 $url_path = get_self_url_prefix();
3570                 $url_path .= "/opml.php?op=publish&key=" .
3571                         get_feed_access_key($link, 'OPML:Publish', false, $_SESSION["uid"]);
3572
3573                 return $url_path;
3574         }
3575
3576         /**
3577          * Purge a feed contents, marked articles excepted.
3578          *
3579          * @param mixed $link The database connection.
3580          * @param integer $id The id of the feed to purge.
3581          * @return void
3582          */
3583         function clear_feed_articles($link, $id) {
3584
3585                 if ($id != 0) {
3586                         $result = db_query($link, "DELETE FROM ttrss_user_entries
3587                         WHERE feed_id = '$id' AND marked = false AND owner_uid = " . $_SESSION["uid"]);
3588                 } else {
3589                         $result = db_query($link, "DELETE FROM ttrss_user_entries
3590                         WHERE feed_id IS NULL AND marked = false AND owner_uid = " . $_SESSION["uid"]);
3591                 }
3592
3593                 $result = db_query($link, "DELETE FROM ttrss_entries WHERE
3594                         (SELECT COUNT(int_id) FROM ttrss_user_entries WHERE ref_id = id) = 0");
3595
3596                 ccache_update($link, $id, $_SESSION['uid']);
3597         } // function clear_feed_articles
3598
3599         /**
3600          * Compute the Mozilla Firefox feed adding URL from server HOST and REQUEST_URI.
3601          *
3602          * @return string The Mozilla Firefox feed adding URL.
3603          */
3604         function add_feed_url() {
3605                 //$url_path = ($_SERVER['HTTPS'] != "on" ? 'http://' :  'https://') . $_SERVER["HTTP_HOST"] . parse_url($_SERVER["REQUEST_URI"], PHP_URL_PATH);
3606
3607                 $url_path = get_self_url_prefix() .
3608                         "/public.php?op=subscribe&feed_url=%s";
3609                 return $url_path;
3610         } // function add_feed_url
3611
3612         function encrypt_password($pass, $salt = '', $mode2 = false) {
3613                 if ($salt && $mode2) {
3614                         return "MODE2:" . hash('sha256', $salt . $pass);
3615                 } else if ($salt) {
3616                         return "SHA1X:" . sha1("$salt:$pass");
3617                 } else {
3618                         return "SHA1:" . sha1($pass);
3619                 }
3620         } // function encrypt_password
3621
3622         function sanitize_article_content($text) {
3623                 # we don't support CDATA sections in articles, they break our own escaping
3624                 $text = preg_replace("/\[\[CDATA/", "", $text);
3625                 $text = preg_replace("/\]\]\>/", "", $text);
3626                 return $text;
3627         }
3628
3629         function load_filters($link, $feed_id, $owner_uid, $action_id = false) {
3630                 $filters = array();
3631
3632                 $cat_id = (int)getFeedCategory($link, $feed_id);
3633
3634                 $result = db_query($link, "SELECT * FROM ttrss_filters2 WHERE
3635                         owner_uid = $owner_uid AND enabled = true");
3636
3637                 while ($line = db_fetch_assoc($result)) {
3638                         $filter_id = $line["id"];
3639
3640                         $result2 = db_query($link, "SELECT
3641                                 r.reg_exp, r.feed_id, r.cat_id, r.cat_filter, t.name AS type_name
3642                                 FROM ttrss_filters2_rules AS r,
3643                                 ttrss_filter_types AS t
3644                                 WHERE
3645                                         (cat_id IS NULL OR cat_id = '$cat_id') AND
3646                                         (feed_id IS NULL OR feed_id = '$feed_id') AND
3647                                         filter_type = t.id AND filter_id = '$filter_id'");
3648
3649                         $rules = array();
3650                         $actions = array();
3651
3652                         while ($rule_line = db_fetch_assoc($result2)) {
3653 #                               print_r($rule_line);
3654
3655                                 $rule = array();
3656                                 $rule["reg_exp"] = $rule_line["reg_exp"];
3657                                 $rule["type"] = $rule_line["type_name"];
3658
3659                                 array_push($rules, $rule);
3660                         }
3661
3662                         $result2 = db_query($link, "SELECT a.action_param,t.name AS type_name
3663                                 FROM ttrss_filters2_actions AS a,
3664                                 ttrss_filter_actions AS t
3665                                 WHERE
3666                                         action_id = t.id AND filter_id = '$filter_id'");
3667
3668                         while ($action_line = db_fetch_assoc($result2)) {
3669 #                               print_r($action_line);
3670
3671                                 $action = array();
3672                                 $action["type"] = $action_line["type_name"];
3673                                 $action["param"] = $action_line["action_param"];
3674
3675                                 array_push($actions, $action);
3676                         }
3677
3678
3679                         $filter = array();
3680                         $filter["match_any_rule"] = sql_bool_to_bool($line["match_any_rule"]);
3681                         $filter["rules"] = $rules;
3682                         $filter["actions"] = $actions;
3683
3684                         if (count($rules) > 0 && count($actions) > 0) {
3685                                 array_push($filters, $filter);
3686                         }
3687                 }
3688
3689                 return $filters;
3690         }
3691
3692         function get_score_pic($score) {
3693                 if ($score > 100) {
3694                         return "score_high.png";
3695                 } else if ($score > 0) {
3696                         return "score_half_high.png";
3697                 } else if ($score < -100) {
3698                         return "score_low.png";
3699                 } else if ($score < 0) {
3700                         return "score_half_low.png";
3701                 } else {
3702                         return "score_neutral.png";
3703                 }
3704         }
3705
3706         function feed_has_icon($id) {
3707                 return is_file(ICONS_DIR . "/$id.ico") && filesize(ICONS_DIR . "/$id.ico") > 0;
3708         }
3709
3710         function init_connection($link) {
3711                 if ($link) {
3712
3713                         if (DB_TYPE == "pgsql") {
3714                                 pg_query($link, "set client_encoding = 'UTF-8'");
3715                                 pg_set_client_encoding("UNICODE");
3716                                 pg_query($link, "set datestyle = 'ISO, european'");
3717                                 pg_query($link, "set TIME ZONE 0");
3718                         } else {
3719                                 db_query($link, "SET time_zone = '+0:0'");
3720
3721                                 if (defined('MYSQL_CHARSET') && MYSQL_CHARSET) {
3722                                         db_query($link, "SET NAMES " . MYSQL_CHARSET);
3723                                 }
3724                         }
3725                         return true;
3726                 } else {
3727                         print "Unable to connect to database:" . db_last_error();
3728                         return false;
3729                 }
3730         }
3731
3732         /* function ccache_zero($link, $feed_id, $owner_uid) {
3733                 db_query($link, "UPDATE ttrss_counters_cache SET
3734                         value = 0, updated = NOW() WHERE
3735                         feed_id = '$feed_id' AND owner_uid = '$owner_uid'");
3736         } */
3737
3738         function ccache_zero_all($link, $owner_uid) {
3739                 db_query($link, "UPDATE ttrss_counters_cache SET
3740                         value = 0 WHERE owner_uid = '$owner_uid'");
3741
3742                 db_query($link, "UPDATE ttrss_cat_counters_cache SET
3743                         value = 0 WHERE owner_uid = '$owner_uid'");
3744         }
3745
3746         function ccache_remove($link, $feed_id, $owner_uid, $is_cat = false) {
3747
3748                 if (!$is_cat) {
3749                         $table = "ttrss_counters_cache";
3750                 } else {
3751                         $table = "ttrss_cat_counters_cache";
3752                 }
3753
3754                 db_query($link, "DELETE FROM $table WHERE
3755                         feed_id = '$feed_id' AND owner_uid = '$owner_uid'");
3756
3757         }
3758
3759         function ccache_update_all($link, $owner_uid) {
3760
3761                 if (get_pref($link, 'ENABLE_FEED_CATS', $owner_uid)) {
3762
3763                         $result = db_query($link, "SELECT feed_id FROM ttrss_cat_counters_cache
3764                                 WHERE feed_id > 0 AND owner_uid = '$owner_uid'");
3765
3766                         while ($line = db_fetch_assoc($result)) {
3767                                 ccache_update($link, $line["feed_id"], $owner_uid, true);
3768                         }
3769
3770                         /* We have to manually include category 0 */
3771
3772                         ccache_update($link, 0, $owner_uid, true);
3773
3774                 } else {
3775                         $result = db_query($link, "SELECT feed_id FROM ttrss_counters_cache
3776                                 WHERE feed_id > 0 AND owner_uid = '$owner_uid'");
3777
3778                         while ($line = db_fetch_assoc($result)) {
3779                                 print ccache_update($link, $line["feed_id"], $owner_uid);
3780
3781                         }
3782
3783                 }
3784         }
3785
3786         function ccache_find($link, $feed_id, $owner_uid, $is_cat = false,
3787                 $no_update = false) {
3788
3789                 if (!is_numeric($feed_id)) return;
3790
3791                 if (!$is_cat) {
3792                         $table = "ttrss_counters_cache";
3793                         if ($feed_id > 0) {
3794                                 $tmp_result = db_query($link, "SELECT owner_uid FROM ttrss_feeds
3795                                         WHERE id = '$feed_id'");
3796                                 $owner_uid = db_fetch_result($tmp_result, 0, "owner_uid");
3797                         }
3798                 } else {
3799                         $table = "ttrss_cat_counters_cache";
3800                 }
3801
3802                 if (DB_TYPE == "pgsql") {
3803                         $date_qpart = "updated > NOW() - INTERVAL '15 minutes'";
3804                 } else if (DB_TYPE == "mysql") {
3805                         $date_qpart = "updated > DATE_SUB(NOW(), INTERVAL 15 MINUTE)";
3806                 }
3807
3808                 $result = db_query($link, "SELECT value FROM $table
3809                         WHERE owner_uid = '$owner_uid' AND feed_id = '$feed_id'
3810                         LIMIT 1");
3811
3812                 if (db_num_rows($result) == 1) {
3813                         return db_fetch_result($result, 0, "value");
3814                 } else {
3815                         if ($no_update) {
3816                                 return -1;
3817                         } else {
3818                                 return ccache_update($link, $feed_id, $owner_uid, $is_cat);
3819                         }
3820                 }
3821
3822         }
3823
3824         function ccache_update($link, $feed_id, $owner_uid, $is_cat = false,
3825                 $update_pcat = true) {
3826
3827                 if (!is_numeric($feed_id)) return;
3828
3829                 if (!$is_cat && $feed_id > 0) {
3830                         $tmp_result = db_query($link, "SELECT owner_uid FROM ttrss_feeds
3831                                 WHERE id = '$feed_id'");
3832                         $owner_uid = db_fetch_result($tmp_result, 0, "owner_uid");
3833                 }
3834
3835                 $prev_unread = ccache_find($link, $feed_id, $owner_uid, $is_cat, true);
3836
3837                 /* When updating a label, all we need to do is recalculate feed counters
3838                  * because labels are not cached */
3839
3840                 if ($feed_id < 0) {
3841                         ccache_update_all($link, $owner_uid);
3842                         return;
3843                 }
3844
3845                 if (!$is_cat) {
3846                         $table = "ttrss_counters_cache";
3847                 } else {
3848                         $table = "ttrss_cat_counters_cache";
3849                 }
3850
3851                 if ($is_cat && $feed_id >= 0) {
3852                         if ($feed_id != 0) {
3853                                 $cat_qpart = "cat_id = '$feed_id'";
3854                         } else {
3855                                 $cat_qpart = "cat_id IS NULL";
3856                         }
3857
3858                         /* Recalculate counters for child feeds */
3859
3860                         $result = db_query($link, "SELECT id FROM ttrss_feeds
3861                                                 WHERE owner_uid = '$owner_uid' AND $cat_qpart");
3862
3863                         while ($line = db_fetch_assoc($result)) {
3864                                 ccache_update($link, $line["id"], $owner_uid, false, false);
3865                         }
3866
3867                         $result = db_query($link, "SELECT SUM(value) AS sv
3868                                 FROM ttrss_counters_cache, ttrss_feeds
3869                                 WHERE id = feed_id AND $cat_qpart AND
3870                                 ttrss_feeds.owner_uid = '$owner_uid'");
3871
3872                         $unread = (int) db_fetch_result($result, 0, "sv");
3873
3874                 } else {
3875                         $unread = (int) getFeedArticles($link, $feed_id, $is_cat, true, $owner_uid);
3876                 }
3877
3878                 db_query($link, "BEGIN");
3879
3880                 $result = db_query($link, "SELECT feed_id FROM $table
3881                         WHERE owner_uid = '$owner_uid' AND feed_id = '$feed_id' LIMIT 1");
3882
3883                 if (db_num_rows($result) == 1) {
3884                         db_query($link, "UPDATE $table SET
3885                                 value = '$unread', updated = NOW() WHERE
3886                                 feed_id = '$feed_id' AND owner_uid = '$owner_uid'");
3887
3888                 } else {
3889                         db_query($link, "INSERT INTO $table
3890                                 (feed_id, value, owner_uid, updated)
3891                                 VALUES
3892                                 ($feed_id, $unread, $owner_uid, NOW())");
3893                 }
3894
3895                 db_query($link, "COMMIT");
3896
3897                 if ($feed_id > 0 && $prev_unread != $unread) {
3898
3899                         if (!$is_cat) {
3900
3901                                 /* Update parent category */
3902
3903                                 if ($update_pcat) {
3904
3905                                         $result = db_query($link, "SELECT cat_id FROM ttrss_feeds
3906                                                 WHERE owner_uid = '$owner_uid' AND id = '$feed_id'");
3907
3908                                         $cat_id = (int) db_fetch_result($result, 0, "cat_id");
3909
3910                                         ccache_update($link, $cat_id, $owner_uid, true);
3911
3912                                 }
3913                         }
3914                 } else if ($feed_id < 0) {
3915                         ccache_update_all($link, $owner_uid);
3916                 }
3917
3918                 return $unread;
3919         }
3920
3921         /* function ccache_cleanup($link, $owner_uid) {
3922
3923                 if (DB_TYPE == "pgsql") {
3924                         db_query($link, "DELETE FROM ttrss_counters_cache AS c1 WHERE
3925                                 (SELECT count(*) FROM ttrss_counters_cache AS c2
3926                                         WHERE c1.feed_id = c2.feed_id AND c2.owner_uid = c1.owner_uid) > 1
3927                                         AND owner_uid = '$owner_uid'");
3928
3929                         db_query($link, "DELETE FROM ttrss_cat_counters_cache AS c1 WHERE
3930                                 (SELECT count(*) FROM ttrss_cat_counters_cache AS c2
3931                                         WHERE c1.feed_id = c2.feed_id AND c2.owner_uid = c1.owner_uid) > 1
3932                                         AND owner_uid = '$owner_uid'");
3933                 } else {
3934                         db_query($link, "DELETE c1 FROM
3935                                         ttrss_counters_cache AS c1,
3936                                         ttrss_counters_cache AS c2
3937                                 WHERE
3938                                         c1.owner_uid = '$owner_uid' AND
3939                                         c1.owner_uid = c2.owner_uid AND
3940                                         c1.feed_id = c2.feed_id");
3941
3942                         db_query($link, "DELETE c1 FROM
3943                                         ttrss_cat_counters_cache AS c1,
3944                                         ttrss_cat_counters_cache AS c2
3945                                 WHERE
3946                                         c1.owner_uid = '$owner_uid' AND
3947                                         c1.owner_uid = c2.owner_uid AND
3948                                         c1.feed_id = c2.feed_id");
3949
3950                 }
3951         } */
3952
3953         function label_find_id($link, $label, $owner_uid) {
3954                 $result = db_query($link,
3955                         "SELECT id FROM ttrss_labels2 WHERE caption = '$label'
3956                                 AND owner_uid = '$owner_uid' LIMIT 1");
3957
3958                 if (db_num_rows($result) == 1) {
3959                         return db_fetch_result($result, 0, "id");
3960                 } else {
3961                         return 0;
3962                 }
3963         }
3964
3965         function get_article_labels($link, $id) {
3966                 $rv = array();
3967
3968
3969                 $result = db_query($link, "SELECT label_cache FROM
3970                         ttrss_user_entries WHERE ref_id = '$id' AND owner_uid = " .
3971                         $_SESSION["uid"]);
3972
3973                 $label_cache = db_fetch_result($result, 0, "label_cache");
3974
3975                 if ($label_cache) {
3976
3977                         $label_cache = json_decode($label_cache, true);
3978
3979                         if ($label_cache["no-labels"] == 1)
3980                                 return $rv;
3981                         else
3982                                 return $label_cache;
3983                 }
3984
3985                 $result = db_query($link,
3986                         "SELECT DISTINCT label_id,caption,fg_color,bg_color
3987                                 FROM ttrss_labels2, ttrss_user_labels2
3988                         WHERE id = label_id
3989                                 AND article_id = '$id'
3990                                 AND owner_uid = ".$_SESSION["uid"] . "
3991                         ORDER BY caption");
3992
3993                 while ($line = db_fetch_assoc($result)) {
3994                         $rk = array($line["label_id"], $line["caption"], $line["fg_color"],
3995                                 $line["bg_color"]);
3996                         array_push($rv, $rk);
3997                 }
3998
3999                 if (count($rv) > 0)
4000                         label_update_cache($link, $id, $rv);
4001                 else
4002                         label_update_cache($link, $id, array("no-labels" => 1));
4003
4004                 return $rv;
4005         }
4006
4007
4008         function label_find_caption($link, $label, $owner_uid) {
4009                 $result = db_query($link,
4010                         "SELECT caption FROM ttrss_labels2 WHERE id = '$label'
4011                                 AND owner_uid = '$owner_uid' LIMIT 1");
4012
4013                 if (db_num_rows($result) == 1) {
4014                         return db_fetch_result($result, 0, "caption");
4015                 } else {
4016                         return "";
4017                 }
4018         }
4019
4020         function label_update_cache($link, $id, $labels = false, $force = false) {
4021
4022                 if ($force)
4023                         label_clear_cache($link, $id);
4024
4025                 if (!$labels)
4026                         $labels = get_article_labels($link, $id);
4027
4028                 $labels = db_escape_string(json_encode($labels));
4029
4030                 db_query($link, "UPDATE ttrss_user_entries SET
4031                         label_cache = '$labels' WHERE ref_id = '$id'");
4032
4033         }
4034
4035         function label_clear_cache($link, $id) {
4036
4037                 db_query($link, "UPDATE ttrss_user_entries SET
4038                         label_cache = '' WHERE ref_id = '$id'");
4039
4040         }
4041
4042         function label_remove_article($link, $id, $label, $owner_uid) {
4043
4044                 $label_id = label_find_id($link, $label, $owner_uid);
4045
4046                 if (!$label_id) return;
4047
4048                 $result = db_query($link,
4049                         "DELETE FROM ttrss_user_labels2
4050                         WHERE
4051                                 label_id = '$label_id' AND
4052                                 article_id = '$id'");
4053
4054                 label_clear_cache($link, $id);
4055         }
4056
4057         function label_add_article($link, $id, $label, $owner_uid) {
4058
4059                 $label_id = label_find_id($link, $label, $owner_uid);
4060
4061                 if (!$label_id) return;
4062
4063                 $result = db_query($link,
4064                         "SELECT
4065                                 article_id FROM ttrss_labels2, ttrss_user_labels2
4066                         WHERE
4067                                 label_id = id AND
4068                                 label_id = '$label_id' AND
4069                                 article_id = '$id' AND owner_uid = '$owner_uid'
4070                         LIMIT 1");
4071
4072                 if (db_num_rows($result) == 0) {
4073                         db_query($link, "INSERT INTO ttrss_user_labels2
4074                                 (label_id, article_id) VALUES ('$label_id', '$id')");
4075                 }
4076
4077                 label_clear_cache($link, $id);
4078
4079         }
4080
4081         function label_remove($link, $id, $owner_uid) {
4082                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
4083
4084                 db_query($link, "BEGIN");
4085
4086                 $result = db_query($link, "SELECT caption FROM ttrss_labels2
4087                         WHERE id = '$id'");
4088
4089                 $caption = db_fetch_result($result, 0, "caption");
4090
4091                 $result = db_query($link, "DELETE FROM ttrss_labels2 WHERE id = '$id'
4092                         AND owner_uid = " . $owner_uid);
4093
4094                 if (db_affected_rows($link, $result) != 0 && $caption) {
4095
4096                         /* Remove access key for the label */
4097
4098                         $ext_id = -11 - $id;
4099
4100                         db_query($link, "DELETE FROM ttrss_access_keys WHERE
4101                                 feed_id = '$ext_id' AND owner_uid = $owner_uid");
4102
4103                         /* Disable filters that reference label being removed */
4104
4105                         db_query($link, "UPDATE ttrss_filters SET
4106                                 enabled = false WHERE action_param = '$caption'
4107                                         AND action_id = 7
4108                                         AND owner_uid = " . $owner_uid);
4109
4110                         /* Remove cached data */
4111
4112                         db_query($link, "UPDATE ttrss_user_entries SET label_cache = ''
4113                                 WHERE label_cache LIKE '%$caption%' AND owner_uid = " . $owner_uid);
4114
4115                 }
4116
4117                 db_query($link, "COMMIT");
4118         }
4119
4120         function label_create($link, $caption, $fg_color = '', $bg_color = '', $owner_uid) {
4121
4122                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
4123
4124                 db_query($link, "BEGIN");
4125
4126                 $result = false;
4127
4128                 $result = db_query($link, "SELECT id FROM ttrss_labels2
4129                         WHERE caption = '$caption' AND owner_uid = $owner_uid");
4130
4131                 if (db_num_rows($result) == 0) {
4132                         $result = db_query($link,
4133                                 "INSERT INTO ttrss_labels2 (caption,owner_uid,fg_color,bg_color)
4134                                         VALUES ('$caption', '$owner_uid', '$fg_color', '$bg_color')");
4135
4136                         $result = db_affected_rows($link, $result) != 0;
4137                 }
4138
4139                 db_query($link, "COMMIT");
4140
4141                 return $result;
4142         }
4143
4144         function format_tags_string($tags, $id) {
4145
4146                 $tags_str = "";
4147                 $tags_nolinks_str = "";
4148
4149                 $num_tags = 0;
4150
4151                 $tag_limit = 6;
4152
4153                 $formatted_tags = array();
4154
4155                 foreach ($tags as $tag) {
4156                         $num_tags++;
4157                         $tag_escaped = str_replace("'", "\\'", $tag);
4158
4159                         if (mb_strlen($tag) > 30) {
4160                                 $tag = truncate_string($tag, 30);
4161                         }
4162
4163                         $tag_str = "<a href=\"javascript:viewfeed('$tag_escaped')\">$tag</a>";
4164
4165                         array_push($formatted_tags, $tag_str);
4166
4167                         $tmp_tags_str = implode(", ", $formatted_tags);
4168
4169                         if ($num_tags == $tag_limit || mb_strlen($tmp_tags_str) > 150) {
4170                                 break;
4171                         }
4172                 }
4173
4174                 $tags_str = implode(", ", $formatted_tags);
4175
4176                 if ($num_tags < count($tags)) {
4177                         $tags_str .= ", &hellip;";
4178                 }
4179
4180                 if ($num_tags == 0) {
4181                         $tags_str = __("no tags");
4182                 }
4183
4184                 return $tags_str;
4185
4186         }
4187
4188         function format_article_labels($labels, $id) {
4189
4190                 $labels_str = "";
4191
4192                 foreach ($labels as $l) {
4193                         $labels_str .= sprintf("<span class='hlLabelRef'
4194                                 style='color : %s; background-color : %s'>%s</span>",
4195                                         $l[2], $l[3], $l[1]);
4196                         }
4197
4198                 return $labels_str;
4199
4200         }
4201
4202         function format_article_note($id, $note) {
4203
4204                 $str = "<div class='articleNote'        onclick=\"editArticleNote($id)\">
4205                         <div class='noteEdit' onclick=\"editArticleNote($id)\">".
4206                         __('(edit note)')."</div>$note</div>";
4207
4208                 return $str;
4209         }
4210
4211         function toggle_collapse_cat($link, $cat_id, $mode) {
4212                 if ($cat_id > 0) {
4213                         $mode = bool_to_sql_bool($mode);
4214
4215                         db_query($link, "UPDATE ttrss_feed_categories SET
4216                                 collapsed = $mode WHERE id = '$cat_id' AND owner_uid = " .
4217                                 $_SESSION["uid"]);
4218                 } else {
4219                         $pref_name = '';
4220
4221                         switch ($cat_id) {
4222                         case -1:
4223                                 $pref_name = '_COLLAPSED_SPECIAL';
4224                                 break;
4225                         case -2:
4226                                 $pref_name = '_COLLAPSED_LABELS';
4227                                 break;
4228                         case 0:
4229                                 $pref_name = '_COLLAPSED_UNCAT';
4230                                 break;
4231                         }
4232
4233                         if ($pref_name) {
4234                                 if ($mode) {
4235                                         set_pref($link, $pref_name, 'true');
4236                                 } else {
4237                                         set_pref($link, $pref_name, 'false');
4238                                 }
4239                         }
4240                 }
4241         }
4242
4243         function remove_feed($link, $id, $owner_uid) {
4244
4245                 if ($id > 0) {
4246
4247                         /* save starred articles in Archived feed */
4248
4249                         db_query($link, "BEGIN");
4250
4251                         /* prepare feed if necessary */
4252
4253                         $result = db_query($link, "SELECT id FROM ttrss_archived_feeds
4254                                 WHERE id = '$id'");
4255
4256                         if (db_num_rows($result) == 0) {
4257                                 db_query($link, "INSERT INTO ttrss_archived_feeds
4258                                         (id, owner_uid, title, feed_url, site_url)
4259                                 SELECT id, owner_uid, title, feed_url, site_url from ttrss_feeds
4260                                 WHERE id = '$id'");
4261                         }
4262
4263                         db_query($link, "UPDATE ttrss_user_entries SET feed_id = NULL,
4264                                 orig_feed_id = '$id' WHERE feed_id = '$id' AND
4265                                         marked = true AND owner_uid = $owner_uid");
4266
4267                         /* Remove access key for the feed */
4268
4269                         db_query($link, "DELETE FROM ttrss_access_keys WHERE
4270                                 feed_id = '$id' AND owner_uid = $owner_uid");
4271
4272                         /* remove the feed */
4273
4274                         db_query($link, "DELETE FROM ttrss_feeds
4275                                         WHERE id = '$id' AND owner_uid = $owner_uid");
4276
4277                         db_query($link, "COMMIT");
4278
4279                         if (file_exists(ICONS_DIR . "/$id.ico")) {
4280                                 unlink(ICONS_DIR . "/$id.ico");
4281                         }
4282
4283                         ccache_remove($link, $id, $owner_uid);
4284
4285                 } else {
4286                         label_remove($link, -11-$id, $owner_uid);
4287                         ccache_remove($link, -11-$id, $owner_uid);
4288                 }
4289         }
4290
4291         function get_feed_category($link, $feed_cat, $parent_cat_id = false) {
4292                 if ($parent_cat_id) {
4293                         $parent_qpart = "parent_cat = '$parent_cat_id'";
4294                         $parent_insert = "'$parent_cat_id'";
4295                 } else {
4296                         $parent_qpart = "parent_cat IS NULL";
4297                         $parent_insert = "NULL";
4298                 }
4299
4300                 $result = db_query($link,
4301                         "SELECT id FROM ttrss_feed_categories
4302                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
4303
4304                 if (db_num_rows($result) == 0) {
4305                         return false;
4306                 } else {
4307                         return db_fetch_result($result, 0, "id");
4308                 }
4309         }
4310
4311         function add_feed_category($link, $feed_cat, $parent_cat_id = false) {
4312
4313                 if (!$feed_cat) return false;
4314
4315                 db_query($link, "BEGIN");
4316
4317                 if ($parent_cat_id) {
4318                         $parent_qpart = "parent_cat = '$parent_cat_id'";
4319                         $parent_insert = "'$parent_cat_id'";
4320                 } else {
4321                         $parent_qpart = "parent_cat IS NULL";
4322                         $parent_insert = "NULL";
4323                 }
4324
4325                 $result = db_query($link,
4326                         "SELECT id FROM ttrss_feed_categories
4327                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
4328
4329                 if (db_num_rows($result) == 0) {
4330
4331                         $result = db_query($link,
4332                                 "INSERT INTO ttrss_feed_categories (owner_uid,title,parent_cat)
4333                                 VALUES ('".$_SESSION["uid"]."', '$feed_cat', $parent_insert)");
4334
4335                         db_query($link, "COMMIT");
4336
4337                         return true;
4338                 }
4339
4340                 return false;
4341         }
4342
4343         function remove_feed_category($link, $id, $owner_uid) {
4344
4345                 db_query($link, "DELETE FROM ttrss_feed_categories
4346                         WHERE id = '$id' AND owner_uid = $owner_uid");
4347
4348                 ccache_remove($link, $id, $owner_uid, true);
4349         }
4350
4351         function archive_article($link, $id, $owner_uid) {
4352                 db_query($link, "BEGIN");
4353
4354                 $result = db_query($link, "SELECT feed_id FROM ttrss_user_entries
4355                         WHERE ref_id = '$id' AND owner_uid = $owner_uid");
4356
4357                 if (db_num_rows($result) != 0) {
4358
4359                         /* prepare the archived table */
4360
4361                         $feed_id = (int) db_fetch_result($result, 0, "feed_id");
4362
4363                         if ($feed_id) {
4364                                 $result = db_query($link, "SELECT id FROM ttrss_archived_feeds
4365                                         WHERE id = '$feed_id'");
4366
4367                                 if (db_num_rows($result) == 0) {
4368                                         db_query($link, "INSERT INTO ttrss_archived_feeds
4369                                                 (id, owner_uid, title, feed_url, site_url)
4370                                         SELECT id, owner_uid, title, feed_url, site_url from ttrss_feeds
4371                                         WHERE id = '$feed_id'");
4372                                 }
4373
4374                                 db_query($link, "UPDATE ttrss_user_entries
4375                                         SET orig_feed_id = feed_id, feed_id = NULL
4376                                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
4377                         }
4378                 }
4379
4380                 db_query($link, "COMMIT");
4381         }
4382
4383         function getArticleFeed($link, $id) {
4384                 $result = db_query($link, "SELECT feed_id FROM ttrss_user_entries
4385                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
4386
4387                 if (db_num_rows($result) != 0) {
4388                         return db_fetch_result($result, 0, "feed_id");
4389                 } else {
4390                         return 0;
4391                 }
4392         }
4393
4394         /**
4395          * Fixes incomplete URLs by prepending "http://".
4396          * Also replaces feed:// with http://, and
4397          * prepends a trailing slash if the url is a domain name only.
4398          *
4399          * @param string $url Possibly incomplete URL
4400          *
4401          * @return string Fixed URL.
4402          */
4403         function fix_url($url) {
4404                 if (strpos($url, '://') === false) {
4405                         $url = 'http://' . $url;
4406                 } else if (substr($url, 0, 5) == 'feed:') {
4407                         $url = 'http:' . substr($url, 5);
4408                 }
4409
4410                 //prepend slash if the URL has no slash in it
4411                 // "http://www.example" -> "http://www.example/"
4412                 if (strpos($url, '/', strpos($url, ':') + 3) === false) {
4413                         $url .= '/';
4414                 }
4415
4416                 if ($url != "http:///")
4417                         return $url;
4418                 else
4419                         return '';
4420         }
4421
4422         function validate_feed_url($url) {
4423                 $parts = parse_url($url);
4424
4425                 return ($parts['scheme'] == 'http' || $parts['scheme'] == 'feed' || $parts['scheme'] == 'https');
4426
4427         }
4428
4429         function get_article_enclosures($link, $id) {
4430
4431                 $query = "SELECT * FROM ttrss_enclosures
4432                         WHERE post_id = '$id' AND content_url != ''";
4433
4434                 $rv = array();
4435
4436                 $result = db_query($link, $query);
4437
4438                 if (db_num_rows($result) > 0) {
4439                         while ($line = db_fetch_assoc($result)) {
4440                                 array_push($rv, $line);
4441                         }
4442                 }
4443
4444                 return $rv;
4445         }
4446
4447         function api_get_feeds($link, $cat_id, $unread_only, $limit, $offset, $include_nested = false) {
4448
4449                         $feeds = array();
4450
4451                         /* Labels */
4452
4453                         if ($cat_id == -4 || $cat_id == -2) {
4454                                 $counters = getLabelCounters($link, true);
4455
4456                                 foreach (array_values($counters) as $cv) {
4457
4458                                         $unread = $cv["counter"];
4459
4460                                         if ($unread || !$unread_only) {
4461
4462                                                 $row = array(
4463                                                                 "id" => $cv["id"],
4464                                                                 "title" => $cv["description"],
4465                                                                 "unread" => $cv["counter"],
4466                                                                 "cat_id" => -2,
4467                                                         );
4468
4469                                                 array_push($feeds, $row);
4470                                         }
4471                                 }
4472                         }
4473
4474                         /* Virtual feeds */
4475
4476                         if ($cat_id == -4 || $cat_id == -1) {
4477                                 foreach (array(-1, -2, -3, -4, -6, 0) as $i) {
4478                                         $unread = getFeedUnread($link, $i);
4479
4480                                         if ($unread || !$unread_only) {
4481                                                 $title = getFeedTitle($link, $i);
4482
4483                                                 $row = array(
4484                                                                 "id" => $i,
4485                                                                 "title" => $title,
4486                                                                 "unread" => $unread,
4487                                                                 "cat_id" => -1,
4488                                                         );
4489                                                 array_push($feeds, $row);
4490                                         }
4491
4492                                 }
4493                         }
4494
4495                         /* Child cats */
4496
4497                         if ($include_nested && $cat_id) {
4498                                 $result = db_query($link, "SELECT
4499                                         id, title FROM ttrss_feed_categories
4500                                         WHERE parent_cat = '$cat_id' AND owner_uid = " . $_SESSION["uid"] .
4501                                         "ORDER BY id, title");
4502
4503                                 while ($line = db_fetch_assoc($result)) {
4504                                         $unread = getFeedUnread($link, $line["id"], true) +
4505                                                 getCategoryChildrenUnread($link, $line["id"]);
4506
4507                                         if ($unread || !$unread_only) {
4508                                                 $row = array(
4509                                                                 "id" => $line["id"],
4510                                                                 "title" => $line["title"],
4511                                                                 "unread" => $unread,
4512                                                                 "is_cat" => true,
4513                                                         );
4514                                                 array_push($feeds, $row);
4515                                         }
4516                                 }
4517                         }
4518
4519                         /* Real feeds */
4520
4521                         if ($limit) {
4522                                 $limit_qpart = "LIMIT $limit OFFSET $offset";
4523                         } else {
4524                                 $limit_qpart = "";
4525                         }
4526
4527                         if ($cat_id == -4 || $cat_id == -3) {
4528                                 $result = db_query($link, "SELECT
4529                                         id, feed_url, cat_id, title, order_id, ".
4530                                                 SUBSTRING_FOR_DATE."(last_updated,1,19) AS last_updated
4531                                                 FROM ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"] .
4532                                                 " ORDER BY cat_id, title " . $limit_qpart);
4533                         } else {
4534
4535                                 if ($cat_id)
4536                                         $cat_qpart = "cat_id = '$cat_id'";
4537                                 else
4538                                         $cat_qpart = "cat_id IS NULL";
4539
4540                                 $result = db_query($link, "SELECT
4541                                         id, feed_url, cat_id, title, order_id, ".
4542                                                 SUBSTRING_FOR_DATE."(last_updated,1,19) AS last_updated
4543                                                 FROM ttrss_feeds WHERE
4544                                                 $cat_qpart AND owner_uid = " . $_SESSION["uid"] .
4545                                                 " ORDER BY cat_id, title " . $limit_qpart);
4546                         }
4547
4548                         while ($line = db_fetch_assoc($result)) {
4549
4550                                 $unread = getFeedUnread($link, $line["id"]);
4551
4552                                 $has_icon = feed_has_icon($line['id']);
4553
4554                                 if ($unread || !$unread_only) {
4555
4556                                         $row = array(
4557                                                         "feed_url" => $line["feed_url"],
4558                                                         "title" => $line["title"],
4559                                                         "id" => (int)$line["id"],
4560                                                         "unread" => (int)$unread,
4561                                                         "has_icon" => $has_icon,
4562                                                         "cat_id" => (int)$line["cat_id"],
4563                                                         "last_updated" => strtotime($line["last_updated"]),
4564                                                         "order_id" => (int) $line["order_id"],
4565                                                 );
4566
4567                                         array_push($feeds, $row);
4568                                 }
4569                         }
4570
4571                 return $feeds;
4572         }
4573
4574         function api_get_headlines($link, $feed_id, $limit, $offset,
4575                                 $filter, $is_cat, $show_excerpt, $show_content, $view_mode, $order,
4576                                 $include_attachments, $since_id,
4577                                 $search = "", $search_mode = "", $match_on = "", $include_nested = false) {
4578
4579                         $qfh_ret = queryFeedHeadlines($link, $feed_id, $limit,
4580                                 $view_mode, $is_cat, $search, $search_mode, $match_on,
4581                                 $order, $offset, 0, false, $since_id, $include_nested);
4582
4583                         $result = $qfh_ret[0];
4584                         $feed_title = $qfh_ret[1];
4585
4586                         $headlines = array();
4587
4588                         while ($line = db_fetch_assoc($result)) {
4589                                 $is_updated = ($line["last_read"] == "" &&
4590                                         ($line["unread"] != "t" && $line["unread"] != "1"));
4591
4592                                 $tags = explode(",", $line["tag_cache"]);
4593                                 $labels = json_decode($line["label_cache"], true);
4594
4595                                 //if (!$tags) $tags = get_article_tags($link, $line["id"]);
4596                                 //if (!$labels) $labels = get_article_labels($link, $line["id"]);
4597
4598                                 $headline_row = array(
4599                                                 "id" => (int)$line["id"],
4600                                                 "unread" => sql_bool_to_bool($line["unread"]),
4601                                                 "marked" => sql_bool_to_bool($line["marked"]),
4602                                                 "published" => sql_bool_to_bool($line["published"]),
4603                                                 "updated" => strtotime($line["updated"]),
4604                                                 "is_updated" => $is_updated,
4605                                                 "title" => $line["title"],
4606                                                 "link" => $line["link"],
4607                                                 "feed_id" => $line["feed_id"],
4608                                                 "tags" => $tags,
4609                                         );
4610
4611                                         if ($include_attachments)
4612                                                 $headline_row['attachments'] = get_article_enclosures($link,
4613                                                         $line['id']);
4614
4615                                 if ($show_excerpt) {
4616                                         $excerpt = truncate_string(strip_tags($line["content_preview"]), 100);
4617                                         $headline_row["excerpt"] = $excerpt;
4618                                 }
4619
4620                                 if ($show_content) {
4621                                         $headline_row["content"] = $line["content_preview"];
4622                                 }
4623
4624                                 // unify label output to ease parsing
4625                                 if ($labels["no-labels"] == 1) $labels = array();
4626
4627                                 $headline_row["labels"] = $labels;
4628
4629                                 $headline_row["feed_title"] = $line["feed_title"];
4630
4631                                 array_push($headlines, $headline_row);
4632                         }
4633
4634                         return $headlines;
4635         }
4636
4637         function generate_error_feed($link, $error) {
4638                 $reply = array();
4639
4640                 $reply['headlines']['id'] = -6;
4641                 $reply['headlines']['is_cat'] = false;
4642
4643                 $reply['headlines']['toolbar'] = '';
4644                 $reply['headlines']['content'] = "<div class='whiteBox'>". $error . "</div>";
4645
4646                 $reply['headlines-info'] = array("count" => 0,
4647                         "vgroup_last_feed" => '',
4648                         "unread" => 0,
4649                         "disable_cache" => true);
4650
4651                 return $reply;
4652         }
4653
4654
4655         function generate_dashboard_feed($link) {
4656                 $reply = array();
4657
4658                 $reply['headlines']['id'] = -5;
4659                 $reply['headlines']['is_cat'] = false;
4660
4661                 $reply['headlines']['toolbar'] = '';
4662                 $reply['headlines']['content'] = "<div class='whiteBox'>".__('No feed selected.');
4663
4664                 $reply['headlines']['content'] .= "<p class=\"small\"><span class=\"insensitive\">";
4665
4666                 $result = db_query($link, "SELECT ".SUBSTRING_FOR_DATE."(MAX(last_updated), 1, 19) AS last_updated FROM ttrss_feeds
4667                         WHERE owner_uid = " . $_SESSION['uid']);
4668
4669                 $last_updated = db_fetch_result($result, 0, "last_updated");
4670                 $last_updated = make_local_datetime($link, $last_updated, false);
4671
4672                 $reply['headlines']['content'] .= sprintf(__("Feeds last updated at %s"), $last_updated);
4673
4674                 $result = db_query($link, "SELECT COUNT(id) AS num_errors
4675                         FROM ttrss_feeds WHERE last_error != '' AND owner_uid = ".$_SESSION["uid"]);
4676
4677                 $num_errors = db_fetch_result($result, 0, "num_errors");
4678
4679                 if ($num_errors > 0) {
4680                         $reply['headlines']['content'] .= "<br/>";
4681                         $reply['headlines']['content'] .= "<a class=\"insensitive\" href=\"#\" onclick=\"showFeedsWithErrors()\">".
4682                                 __('Some feeds have update errors (click for details)')."</a>";
4683                 }
4684                 $reply['headlines']['content'] .= "</span></p>";
4685
4686                 $reply['headlines-info'] = array("count" => 0,
4687                         "vgroup_last_feed" => '',
4688                         "unread" => 0,
4689                         "disable_cache" => true);
4690
4691                 return $reply;
4692         }
4693
4694         function save_email_address($link, $email) {
4695                 // FIXME: implement persistent storage of emails
4696
4697                 if (!$_SESSION['stored_emails'])
4698                         $_SESSION['stored_emails'] = array();
4699
4700                 if (!in_array($email, $_SESSION['stored_emails']))
4701                         array_push($_SESSION['stored_emails'], $email);
4702         }
4703
4704         function update_feed_access_key($link, $feed_id, $is_cat, $owner_uid = false) {
4705                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
4706
4707                 $sql_is_cat = bool_to_sql_bool($is_cat);
4708
4709                 $result = db_query($link, "SELECT access_key FROM ttrss_access_keys
4710                         WHERE feed_id = '$feed_id'      AND is_cat = $sql_is_cat
4711                         AND owner_uid = " . $owner_uid);
4712
4713                 if (db_num_rows($result) == 1) {
4714                         $key = db_escape_string(sha1(uniqid(rand(), true)));
4715
4716                         db_query($link, "UPDATE ttrss_access_keys SET access_key = '$key'
4717                                 WHERE feed_id = '$feed_id' AND is_cat = $sql_is_cat
4718                                 AND owner_uid = " . $owner_uid);
4719
4720                         return $key;
4721
4722                 } else {
4723                         return get_feed_access_key($link, $feed_id, $is_cat, $owner_uid);
4724                 }
4725         }
4726
4727         function get_feed_access_key($link, $feed_id, $is_cat, $owner_uid = false) {
4728
4729                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
4730
4731                 $sql_is_cat = bool_to_sql_bool($is_cat);
4732
4733                 $result = db_query($link, "SELECT access_key FROM ttrss_access_keys
4734                         WHERE feed_id = '$feed_id'      AND is_cat = $sql_is_cat
4735                         AND owner_uid = " . $owner_uid);
4736
4737                 if (db_num_rows($result) == 1) {
4738                         return db_fetch_result($result, 0, "access_key");
4739                 } else {
4740                         $key = db_escape_string(sha1(uniqid(rand(), true)));
4741
4742                         $result = db_query($link, "INSERT INTO ttrss_access_keys
4743                                 (access_key, feed_id, is_cat, owner_uid)
4744                                 VALUES ('$key', '$feed_id', $sql_is_cat, '$owner_uid')");
4745
4746                         return $key;
4747                 }
4748                 return false;
4749         }
4750
4751         function get_feeds_from_html($url, $content)
4752         {
4753                 $url     = fix_url($url);
4754                 $baseUrl = substr($url, 0, strrpos($url, '/') + 1);
4755
4756                 libxml_use_internal_errors(true);
4757
4758                 $doc = new DOMDocument();
4759                 $doc->loadHTML($content);
4760                 $xpath = new DOMXPath($doc);
4761                 $entries = $xpath->query('/html/head/link[@rel="alternate"]');
4762                 $feedUrls = array();
4763                 foreach ($entries as $entry) {
4764                         if ($entry->hasAttribute('href')) {
4765                                 $title = $entry->getAttribute('title');
4766                                 if ($title == '') {
4767                                         $title = $entry->getAttribute('type');
4768                                 }
4769                                 $feedUrl = rewrite_relative_url(
4770                                         $baseUrl, $entry->getAttribute('href')
4771                                 );
4772                                 $feedUrls[$feedUrl] = $title;
4773                         }
4774                 }
4775                 return $feedUrls;
4776         }
4777
4778         function is_html($content) {
4779                 return preg_match("/<html|DOCTYPE html/i", $content) !== 0;
4780         }
4781
4782         function url_is_html($url, $login = false, $pass = false) {
4783                 return is_html(fetch_file_contents($url, false, $login, $pass));
4784         }
4785
4786         function print_label_select($link, $name, $value, $attributes = "") {
4787
4788                 $result = db_query($link, "SELECT caption FROM ttrss_labels2
4789                         WHERE owner_uid = '".$_SESSION["uid"]."' ORDER BY caption");
4790
4791                 print "<select default=\"$value\" name=\"" . htmlspecialchars($name) .
4792                         "\" $attributes onchange=\"labelSelectOnChange(this)\" >";
4793
4794                 while ($line = db_fetch_assoc($result)) {
4795
4796                         $issel = ($line["caption"] == $value) ? "selected=\"1\"" : "";
4797
4798                         print "<option value=\"".htmlspecialchars($line["caption"])."\"
4799                                 $issel>" . htmlspecialchars($line["caption"]) . "</option>";
4800
4801                 }
4802
4803 #               print "<option value=\"ADD_LABEL\">" .__("Add label...") . "</option>";
4804
4805                 print "</select>";
4806
4807
4808         }
4809
4810         function format_article_enclosures($link, $id, $always_display_enclosures,
4811                                         $article_content) {
4812
4813                 $result = get_article_enclosures($link, $id);
4814                 $rv = '';
4815
4816                 if (count($result) > 0) {
4817
4818                         $entries_html = array();
4819                         $entries = array();
4820
4821                         foreach ($result as $line) {
4822
4823                                 $url = $line["content_url"];
4824                                 $ctype = $line["content_type"];
4825
4826                                 if (!$ctype) $ctype = __("unknown type");
4827
4828                                 $filename = substr($url, strrpos($url, "/")+1);
4829
4830 #                               $player = format_inline_player($link, $url, $ctype);
4831
4832 #                               $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
4833 #                                       $filename . " (" . $ctype . ")" . "</a>";
4834
4835                                 $entry = "<div onclick=\"window.open('".htmlspecialchars($url)."')\"
4836                                         dojoType=\"dijit.MenuItem\">$filename ($ctype)</div>";
4837
4838                                 array_push($entries_html, $entry);
4839
4840                                 $entry = array();
4841
4842                                 $entry["type"] = $ctype;
4843                                 $entry["filename"] = $filename;
4844                                 $entry["url"] = $url;
4845
4846                                 array_push($entries, $entry);
4847                         }
4848
4849                         if (!get_pref($link, "STRIP_IMAGES")) {
4850                                 if ($always_display_enclosures ||
4851                                                         !preg_match("/<img/i", $article_content)) {
4852
4853                                         foreach ($entries as $entry) {
4854
4855                                                 if (preg_match("/image/", $entry["type"]) ||
4856                                                                 preg_match("/\.(jpg|png|gif|bmp)/i", $entry["filename"])) {
4857
4858                                                                 $rv .= "<p><img
4859                                                                 alt=\"".htmlspecialchars($entry["filename"])."\"
4860                                                                 src=\"" .htmlspecialchars($entry["url"]) . "\"/></p>";
4861
4862                                                 }
4863                                         }
4864                                 }
4865                         }
4866
4867                         $rv .= "<br/><div dojoType=\"dijit.form.DropDownButton\">".
4868                                 "<span>" . __('Attachments')."</span>";
4869                         $rv .= "<div dojoType=\"dijit.Menu\" style=\"display: none;\">";
4870
4871                         foreach ($entries_html as $entry) { $rv .= $entry; };
4872
4873                         $rv .= "</div></div>";
4874                 }
4875
4876                 return $rv;
4877         }
4878
4879         function getLastArticleId($link) {
4880                 $result = db_query($link, "SELECT MAX(ref_id) AS id FROM ttrss_user_entries
4881                         WHERE owner_uid = " . $_SESSION["uid"]);
4882
4883                 if (db_num_rows($result) == 1) {
4884                         return db_fetch_result($result, 0, "id");
4885                 } else {
4886                         return -1;
4887                 }
4888         }
4889
4890         function build_url($parts) {
4891                 return $parts['scheme'] . "://" . $parts['host'] . $parts['path'];
4892         }
4893
4894         /**
4895          * Converts a (possibly) relative URL to a absolute one.
4896          *
4897          * @param string $url     Base URL (i.e. from where the document is)
4898          * @param string $rel_url Possibly relative URL in the document
4899          *
4900          * @return string Absolute URL
4901          */
4902         function rewrite_relative_url($url, $rel_url) {
4903                 if (strpos($rel_url, "magnet:") === 0) {
4904                         return $rel_url;
4905                 } else if (strpos($rel_url, "://") !== false) {
4906                         return $rel_url;
4907                 } else if (strpos($rel_url, "//") === 0) {
4908                         # protocol-relative URL (rare but they exist)
4909                         return $rel_url;
4910                 } else if (strpos($rel_url, "/") === 0)
4911                 {
4912                         $parts = parse_url($url);
4913                         $parts['path'] = $rel_url;
4914
4915                         return build_url($parts);
4916
4917                 } else {
4918                         $parts = parse_url($url);
4919                         if (!isset($parts['path'])) {
4920                                 $parts['path'] = '/';
4921                         }
4922                         $dir = $parts['path'];
4923                         if (substr($dir, -1) !== '/') {
4924                                 $dir = dirname($parts['path']);
4925                                 $dir !== '/' && $dir .= '/';
4926                         }
4927                         $parts['path'] = $dir . $rel_url;
4928
4929                         return build_url($parts);
4930                 }
4931         }
4932
4933         function sphinx_search($query, $offset = 0, $limit = 30) {
4934                 require_once 'lib/sphinxapi.php';
4935
4936                 $sphinxClient = new SphinxClient();
4937
4938                 $sphinxClient->SetServer('localhost', 9312);
4939                 $sphinxClient->SetConnectTimeout(1);
4940
4941                 $sphinxClient->SetFieldWeights(array('title' => 70, 'content' => 30,
4942                         'feed_title' => 20));
4943
4944                 $sphinxClient->SetMatchMode(SPH_MATCH_EXTENDED2);
4945                 $sphinxClient->SetRankingMode(SPH_RANK_PROXIMITY_BM25);
4946                 $sphinxClient->SetLimits($offset, $limit, 1000);
4947                 $sphinxClient->SetArrayResult(false);
4948                 $sphinxClient->SetFilter('owner_uid', array($_SESSION['uid']));
4949
4950                 $result = $sphinxClient->Query($query, SPHINX_INDEX);
4951
4952                 $ids = array();
4953
4954                 if (is_array($result['matches'])) {
4955                         foreach (array_keys($result['matches']) as $int_id) {
4956                                 $ref_id = $result['matches'][$int_id]['attrs']['ref_id'];
4957                                 array_push($ids, $ref_id);
4958                         }
4959                 }
4960
4961                 return $ids;
4962         }
4963
4964         function cleanup_tags($link, $days = 14, $limit = 1000) {
4965
4966                 if (DB_TYPE == "pgsql") {
4967                         $interval_query = "date_updated < NOW() - INTERVAL '$days days'";
4968                 } else if (DB_TYPE == "mysql") {
4969                         $interval_query = "date_updated < DATE_SUB(NOW(), INTERVAL $days DAY)";
4970                 }
4971
4972                 $tags_deleted = 0;
4973
4974                 while ($limit > 0) {
4975                         $limit_part = 500;
4976
4977                         $query = "SELECT ttrss_tags.id AS id
4978                                 FROM ttrss_tags, ttrss_user_entries, ttrss_entries
4979                                 WHERE post_int_id = int_id AND $interval_query AND
4980                                 ref_id = ttrss_entries.id AND tag_cache != '' LIMIT $limit_part";
4981
4982                         $result = db_query($link, $query);
4983
4984                         $ids = array();
4985
4986                         while ($line = db_fetch_assoc($result)) {
4987                                 array_push($ids, $line['id']);
4988                         }
4989
4990                         if (count($ids) > 0) {
4991                                 $ids = join(",", $ids);
4992                                 print ".";
4993
4994                                 $tmp_result = db_query($link, "DELETE FROM ttrss_tags WHERE id IN ($ids)");
4995                                 $tags_deleted += db_affected_rows($link, $tmp_result);
4996                         } else {
4997                                 break;
4998                         }
4999
5000                         $limit -= $limit_part;
5001                 }
5002
5003                 print "\n";
5004
5005                 return $tags_deleted;
5006         }
5007
5008         function print_user_stylesheet($link) {
5009                 $value = get_pref($link, 'USER_STYLESHEET');
5010
5011                 if ($value) {
5012                         print "<style type=\"text/css\">";
5013                         print str_replace("<br/>", "\n", $value);
5014                         print "</style>";
5015                 }
5016
5017         }
5018
5019 /*      function rewrite_urls($line) {
5020                 global $url_regex;
5021
5022                 $urls = null;
5023
5024                 $result = preg_replace("/((?<!=.)((http|https|ftp)+):\/\/[^ ,!]+)/i",
5025                         "<a target=\"_blank\" href=\"\\1\">\\1</a>", $line);
5026
5027                 return $result;
5028         } */
5029
5030         function rewrite_urls($html) {
5031                 libxml_use_internal_errors(true);
5032
5033                 $charset_hack = '<head>
5034                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
5035                 </head>';
5036
5037                 $doc = new DOMDocument();
5038                 $doc->loadHTML($charset_hack . $html);
5039                 $xpath = new DOMXPath($doc);
5040
5041                 $entries = $xpath->query('//*/text()');
5042
5043                 foreach ($entries as $entry) {
5044                         if (strstr($entry->wholeText, "://") !== false) {
5045                                 $text = preg_replace("/((?<!=.)((http|https|ftp)+):\/\/[^ ,!]+)/i",
5046                                         "<a target=\"_blank\" href=\"\\1\">\\1</a>", $entry->wholeText);
5047
5048                                 if ($text != $entry->wholeText) {
5049                                         $cdoc = new DOMDocument();
5050                                         $cdoc->loadHTML($charset_hack . $text);
5051
5052
5053                                         foreach ($cdoc->childNodes as $cnode) {
5054                                                 $cnode = $doc->importNode($cnode, true);
5055
5056                                                 if ($cnode) {
5057                                                         $entry->parentNode->insertBefore($cnode);
5058                                                 }
5059                                         }
5060
5061                                         $entry->parentNode->removeChild($entry);
5062
5063                                 }
5064                         }
5065                 }
5066
5067                 $node = $doc->getElementsByTagName('body')->item(0);
5068
5069                 // http://tt-rss.org/forum/viewtopic.php?f=1&t=970
5070                 if ($node)
5071                         return $doc->saveXML($node, LIBXML_NOEMPTYTAG);
5072                 else
5073                         return $html;
5074         }
5075
5076         function filter_to_sql($filter) {
5077                 $query = array();
5078
5079                 if (DB_TYPE == "pgsql")
5080                         $reg_qpart = "~";
5081                 else
5082                         $reg_qpart = "REGEXP";
5083
5084                 foreach ($filter["rules"] AS $rule) {
5085                         $regexp_valid = preg_match('/' . $rule['reg_exp'] . '/',
5086                                 $rule['reg_exp']) !== FALSE;
5087
5088                         if ($regexp_valid) {
5089
5090                                 $rule['reg_exp'] = db_escape_string($rule['reg_exp']);
5091
5092                                 switch ($rule["type"]) {
5093                                         case "title":
5094                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
5095                                                         $rule['reg_exp'] . "')";
5096                                                 break;
5097                                         case "content":
5098                                                 $qpart = "LOWER(ttrss_entries.content) $reg_qpart LOWER('".
5099                                                         $rule['reg_exp'] . "')";
5100                                                 break;
5101                                         case "both":
5102                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
5103                                                         $rule['reg_exp'] . "') OR LOWER(" .
5104                                                         "ttrss_entries.content) $reg_qpart LOWER('" . $rule['reg_exp'] . "')";
5105                                                 break;
5106                                         case "tag":
5107                                                 $qpart = "LOWER(ttrss_user_entries.tag_cache) $reg_qpart LOWER('".
5108                                                         $rule['reg_exp'] . "')";
5109                                                 break;
5110                                         case "link":
5111                                                 $qpart = "LOWER(ttrss_entries.link) $reg_qpart LOWER('".
5112                                                         $rule['reg_exp'] . "')";
5113                                                 break;
5114                                         case "author":
5115                                                 $qpart = "LOWER(ttrss_entries.author) $reg_qpart LOWER('".
5116                                                         $rule['reg_exp'] . "')";
5117                                                 break;
5118                                 }
5119
5120                                 if (isset($rule["feed_id"]) && $rule["feed_id"] > 0) {
5121                                         $qpart .= " AND feed_id = " . db_escape_string($rule["feed_id"]);
5122                                 }
5123
5124                                 if (isset($rule["cat_id"])) {
5125                                         $qpart .= " AND cat_id " . ($rule["cat_id"] ? '= ' . $rule["cat_id"] : 'IS NULL');
5126                                 }
5127
5128                                 array_push($query, "($qpart)");
5129
5130                         }
5131                 }
5132
5133                 if (count($query) > 0) {
5134                         return "(" . join($filter["match_any_rule"] ? "OR" : "AND", $query) . ")";
5135                 } else {
5136                         return "(false)";
5137                 }
5138         }
5139
5140         // Status codes:
5141         // -1  - never connected
5142         // 0   - no data received
5143         // 1   - data received successfully
5144         // 2   - did not receive valid data
5145         // >10 - server error, code + 10 (e.g. 16 means server error 6)
5146
5147         function get_linked_feeds($link, $instance_id = false) {
5148                 if ($instance_id)
5149                         $instance_qpart = "id = '$instance_id' AND ";
5150                 else
5151                         $instance_qpart = "";
5152
5153                 if (DB_TYPE == "pgsql") {
5154                         $date_qpart = "last_connected < NOW() - INTERVAL '6 hours'";
5155                 } else {
5156                         $date_qpart = "last_connected < DATE_SUB(NOW(), INTERVAL 6 HOUR)";
5157                 }
5158
5159                 $result = db_query($link, "SELECT id, access_key, access_url FROM ttrss_linked_instances
5160                         WHERE $instance_qpart $date_qpart ORDER BY last_connected");
5161
5162                 while ($line = db_fetch_assoc($result)) {
5163                         $id = $line['id'];
5164
5165                         _debug("Updating: " . $line['access_url'] . " ($id)");
5166
5167                         $fetch_url = $line['access_url'] . '/public.php?op=fbexport';
5168                         $post_query = 'key=' . $line['access_key'];
5169
5170                         $feeds = fetch_file_contents($fetch_url, false, false, false, $post_query);
5171
5172                         // try doing it the old way
5173                         if (!$feeds) {
5174                                 $fetch_url = $line['access_url'] . '/backend.php?op=fbexport';
5175                                 $feeds = fetch_file_contents($fetch_url, false, false, false, $post_query);
5176                         }
5177
5178                         if ($feeds) {
5179                                 $feeds = json_decode($feeds, true);
5180
5181                                 if ($feeds) {
5182                                         if ($feeds['error']) {
5183                                                 $status = $feeds['error']['code'] + 10;
5184                                         } else {
5185                                                 $status = 1;
5186
5187                                                 if (count($feeds['feeds']) > 0) {
5188
5189                                                         db_query($link, "DELETE FROM ttrss_linked_feeds
5190                                                                 WHERE instance_id = '$id'");
5191
5192                                                         foreach ($feeds['feeds'] as $feed) {
5193                                                                 $feed_url = db_escape_string($feed['feed_url']);
5194                                                                 $title = db_escape_string($feed['title']);
5195                                                                 $subscribers = db_escape_string($feed['subscribers']);
5196                                                                 $site_url = db_escape_string($feed['site_url']);
5197
5198                                                                 db_query($link, "INSERT INTO ttrss_linked_feeds
5199                                                                         (feed_url, site_url, title, subscribers, instance_id, created, updated)
5200                                                                 VALUES
5201                                                                         ('$feed_url', '$site_url', '$title', '$subscribers', '$id', NOW(), NOW())");
5202                                                         }
5203                                                 } else {
5204                                                         // received 0 feeds, this might indicate that
5205                                                         // the instance on the other hand is rebuilding feedbrowser cache
5206                                                         // we will try again later
5207
5208                                                         // TODO: maybe perform expiration based on updated here?
5209                                                 }
5210
5211                                                 _debug("Processed " . count($feeds['feeds']) . " feeds.");
5212                                         }
5213                                 } else {
5214                                         $status = 2;
5215                                 }
5216
5217                         } else {
5218                                 $status = 0;
5219                         }
5220
5221                         _debug("Status: $status");
5222
5223                         db_query($link, "UPDATE ttrss_linked_instances SET
5224                                 last_status_out = '$status', last_connected = NOW() WHERE id = '$id'");
5225
5226                 }
5227         }
5228
5229         function make_feed_browser($link, $search, $limit, $mode = 1) {
5230
5231                 $owner_uid = $_SESSION["uid"];
5232                 $rv = '';
5233
5234                 if ($search) {
5235                         $search_qpart = "AND (UPPER(feed_url) LIKE UPPER('%$search%') OR
5236                                                 UPPER(title) LIKE UPPER('%$search%'))";
5237                 } else {
5238                         $search_qpart = "";
5239                 }
5240
5241                 if ($mode == 1) {
5242                         /* $result = db_query($link, "SELECT feed_url, subscribers FROM
5243                          ttrss_feedbrowser_cache WHERE (SELECT COUNT(id) = 0 FROM ttrss_feeds AS tf
5244                         WHERE tf.feed_url = ttrss_feedbrowser_cache.feed_url
5245                         AND owner_uid = '$owner_uid') $search_qpart
5246                         ORDER BY subscribers DESC LIMIT $limit"); */
5247
5248                         $result = db_query($link, "SELECT feed_url, site_url, title, SUM(subscribers) AS subscribers FROM
5249                                                 (SELECT feed_url, site_url, title, subscribers FROM ttrss_feedbrowser_cache UNION ALL
5250                                                         SELECT feed_url, site_url, title, subscribers FROM ttrss_linked_feeds) AS qqq
5251                                                 WHERE
5252                                                         (SELECT COUNT(id) = 0 FROM ttrss_feeds AS tf
5253                                                                 WHERE tf.feed_url = qqq.feed_url
5254                                                                         AND owner_uid = '$owner_uid') $search_qpart
5255                                                 GROUP BY feed_url, site_url, title ORDER BY subscribers DESC LIMIT $limit");
5256
5257                 } else if ($mode == 2) {
5258                         $result = db_query($link, "SELECT *,
5259                                                 (SELECT COUNT(*) FROM ttrss_user_entries WHERE
5260                                                         orig_feed_id = ttrss_archived_feeds.id) AS articles_archived
5261                                                 FROM
5262                                                         ttrss_archived_feeds
5263                                                 WHERE
5264                                                 (SELECT COUNT(*) FROM ttrss_feeds
5265                                                         WHERE ttrss_feeds.feed_url = ttrss_archived_feeds.feed_url AND
5266                                                                 owner_uid = '$owner_uid') = 0   AND
5267                                                 owner_uid = '$owner_uid' $search_qpart
5268                                                 ORDER BY id DESC LIMIT $limit");
5269                 }
5270
5271                 $feedctr = 0;
5272
5273                 while ($line = db_fetch_assoc($result)) {
5274
5275                         if ($mode == 1) {
5276
5277                                 $feed_url = htmlspecialchars($line["feed_url"]);
5278                                 $site_url = htmlspecialchars($line["site_url"]);
5279                                 $subscribers = $line["subscribers"];
5280
5281                                 $check_box = "<input onclick='toggleSelectListRow2(this)'
5282                                                         dojoType=\"dijit.form.CheckBox\"
5283                                                         type=\"checkbox\" \">";
5284
5285                                 $class = ($feedctr % 2) ? "even" : "odd";
5286
5287                                 $site_url = "<a target=\"_blank\"
5288                                                         href=\"$site_url\">
5289                                                         <span class=\"fb_feedTitle\">".
5290                                 htmlspecialchars($line["title"])."</span></a>";
5291
5292                                 $feed_url = "<a target=\"_blank\" class=\"fb_feedUrl\"
5293                                                         href=\"$feed_url\"><img src='images/feed-icon-12x12.png'
5294                                                         style='vertical-align : middle'></a>";
5295
5296                                 $rv .= "<li>$check_box $feed_url $site_url".
5297                                                         "&nbsp;<span class='subscribers'>($subscribers)</span></li>";
5298
5299                         } else if ($mode == 2) {
5300                                 $feed_url = htmlspecialchars($line["feed_url"]);
5301                                 $site_url = htmlspecialchars($line["site_url"]);
5302                                 $title = htmlspecialchars($line["title"]);
5303
5304                                 $check_box = "<input onclick='toggleSelectListRow2(this)' dojoType=\"dijit.form.CheckBox\"
5305                                                         type=\"checkbox\">";
5306
5307                                 $class = ($feedctr % 2) ? "even" : "odd";
5308
5309                                 if ($line['articles_archived'] > 0) {
5310                                         $archived = sprintf(__("%d archived articles"), $line['articles_archived']);
5311                                         $archived = "&nbsp;<span class='subscribers'>($archived)</span>";
5312                                 } else {
5313                                         $archived = '';
5314                                 }
5315
5316                                 $site_url = "<a target=\"_blank\"
5317                                                         href=\"$site_url\">
5318                                                         <span class=\"fb_feedTitle\">".
5319                                 htmlspecialchars($line["title"])."</span></a>";
5320
5321                                 $feed_url = "<a target=\"_blank\" class=\"fb_feedUrl\"
5322                                                         href=\"$feed_url\"><img src='images/feed-icon-12x12.png'
5323                                                         style='vertical-align : middle'></a>";
5324
5325
5326                                 $rv .= "<li id=\"FBROW-".$line["id"]."\">".
5327                                                         "$check_box $feed_url $site_url $archived</li>";
5328                         }
5329
5330                         ++$feedctr;
5331                 }
5332
5333                 if ($feedctr == 0) {
5334                         $rv .= "<li style=\"text-align : center\"><p>".__('No feeds found.')."</p></li>";
5335                 }
5336
5337                 return $rv;
5338         }
5339
5340         if (!function_exists('gzdecode')) {
5341                 function gzdecode($string) { // no support for 2nd argument
5342                         return file_get_contents('compress.zlib://data:who/cares;base64,'.
5343                                 base64_encode($string));
5344                 }
5345         }
5346
5347         function perform_data_import($link, $filename, $owner_uid) {
5348
5349                 $num_imported = 0;
5350                 $num_processed = 0;
5351                 $num_feeds_created = 0;
5352
5353                 $doc = @DOMDocument::load($filename);
5354
5355                 if (!$doc) {
5356                         $contents = file_get_contents($filename);
5357
5358                         if ($contents) {
5359                                 $data = @gzuncompress($contents);
5360                         }
5361
5362                         if (!$data) {
5363                                 $data = @gzdecode($contents);
5364                         }
5365
5366                         if ($data)
5367                                 $doc = DOMDocument::loadXML($data);
5368                 }
5369
5370                 if ($doc) {
5371
5372                         $xpath = new DOMXpath($doc);
5373
5374                         $container = $doc->firstChild;
5375
5376                         if ($container && $container->hasAttribute('schema-version')) {
5377                                 $schema_version = $container->getAttribute('schema-version');
5378
5379                                 if ($schema_version != SCHEMA_VERSION) {
5380                                         print "<p>" .__("Could not import: incorrect schema version.") . "</p>";
5381                                         return;
5382                                 }
5383
5384                         } else {
5385                                 print "<p>" . __("Could not import: unrecognized document format.") . "</p>";
5386                                 return;
5387                         }
5388
5389                         $articles = $xpath->query("//article");
5390
5391                         foreach ($articles as $article_node) {
5392                                 if ($article_node->childNodes) {
5393
5394                                         $ref_id = 0;
5395
5396                                         $article = array();
5397
5398                                         foreach ($article_node->childNodes as $child) {
5399                                                 if ($child->nodeName != 'label_cache')
5400                                                         $article[$child->nodeName] = db_escape_string($child->nodeValue);
5401                                                 else
5402                                                         $article[$child->nodeName] = $child->nodeValue;
5403                                         }
5404
5405                                         //print_r($article);
5406
5407                                         if ($article['guid']) {
5408
5409                                                 ++$num_processed;
5410
5411                                                 //db_query($link, "BEGIN");
5412
5413                                                 //print 'GUID:' . $article['guid'] . "\n";
5414
5415                                                 $result = db_query($link, "SELECT id FROM ttrss_entries
5416                                                         WHERE guid = '".$article['guid']."'");
5417
5418                                                 if (db_num_rows($result) == 0) {
5419
5420                                                         $result = db_query($link,
5421                                                                 "INSERT INTO ttrss_entries
5422                                                                         (title,
5423                                                                         guid,
5424                                                                         link,
5425                                                                         updated,
5426                                                                         content,
5427                                                                         content_hash,
5428                                                                         no_orig_date,
5429                                                                         date_updated,
5430                                                                         date_entered,
5431                                                                         comments,
5432                                                                         num_comments,
5433                                                                         author)
5434                                                                 VALUES
5435                                                                         ('".$article['title']."',
5436                                                                         '".$article['guid']."',
5437                                                                         '".$article['link']."',
5438                                                                         '".$article['updated']."',
5439                                                                         '".$article['content']."',
5440                                                                         '".sha1($article['content'])."',
5441                                                                         false,
5442                                                                         NOW(),
5443                                                                         NOW(),
5444                                                                         '',
5445                                                                         '0',
5446                                                                         '')");
5447
5448                                                         $result = db_query($link, "SELECT id FROM ttrss_entries
5449                                                                 WHERE guid = '".$article['guid']."'");
5450
5451                                                         if (db_num_rows($result) != 0) {
5452                                                                 $ref_id = db_fetch_result($result, 0, "id");
5453                                                         }
5454
5455                                                 } else {
5456                                                         $ref_id = db_fetch_result($result, 0, "id");
5457                                                 }
5458
5459                                                 //print "Got ref ID: $ref_id\n";
5460
5461                                                 if ($ref_id) {
5462
5463                                                         $feed_url = $article['feed_url'];
5464                                                         $feed_title = $article['feed_title'];
5465
5466                                                         $feed = 'NULL';
5467
5468                                                         if ($feed_url && $feed_title) {
5469                                                                 $result = db_query($link, "SELECT id FROM ttrss_feeds
5470                                                                         WHERE feed_url = '$feed_url' AND owner_uid = '$owner_uid'");
5471
5472                                                                 if (db_num_rows($result) != 0) {
5473                                                                         $feed = db_fetch_result($result, 0, "id");
5474                                                                 } else {
5475                                                                         // try autocreating feed in Uncategorized...
5476
5477                                                                         $result = db_query($link, "INSERT INTO ttrss_feeds (owner_uid,
5478                                                                                 feed_url, title) VALUES ($owner_uid, '$feed_url', '$feed_title')");
5479
5480                                                                         $result = db_query($link, "SELECT id FROM ttrss_feeds
5481                                                                                 WHERE feed_url = '$feed_url' AND owner_uid = '$owner_uid'");
5482
5483                                                                         if (db_num_rows($result) != 0) {
5484                                                                                 ++$num_feeds_created;
5485
5486                                                                                 $feed = db_fetch_result($result, 0, "id");
5487                                                                         }
5488                                                                 }
5489                                                         }
5490
5491                                                         if ($feed != 'NULL')
5492                                                                 $feed_qpart = "feed_id = $feed";
5493                                                         else
5494                                                                 $feed_qpart = "feed_id IS NULL";
5495
5496                                                         //print "$ref_id / $feed / " . $article['title'] . "\n";
5497
5498                                                         $result = db_query($link, "SELECT int_id FROM ttrss_user_entries
5499                                                                 WHERE ref_id = '$ref_id' AND owner_uid = '$owner_uid' AND $feed_qpart");
5500
5501                                                         if (db_num_rows($result) == 0) {
5502
5503                                                                 $marked = bool_to_sql_bool(sql_bool_to_bool($article['marked']));
5504                                                                 $published = bool_to_sql_bool(sql_bool_to_bool($article['published']));
5505                                                                 $score = (int) $article['score'];
5506
5507                                                                 $tag_cache = $article['tag_cache'];
5508                                                                 $label_cache = db_escape_string($article['label_cache']);
5509                                                                 $note = $article['note'];
5510
5511                                                                 //print "Importing " . $article['title'] . "<br/>";
5512
5513                                                                 ++$num_imported;
5514
5515                                                                 $result = db_query($link,
5516                                                                         "INSERT INTO ttrss_user_entries
5517                                                                         (ref_id, owner_uid, feed_id, unread, last_read, marked,
5518                                                                                 published, score, tag_cache, label_cache, uuid, note)
5519                                                                         VALUES ($ref_id, $owner_uid, $feed, false,
5520                                                                                 NULL, $marked, $published, $score, '$tag_cache',
5521                                                                                         '$label_cache', '', '$note')");
5522
5523                                                                 $label_cache = json_decode($label_cache, true);
5524
5525                                                                 if (is_array($label_cache) && $label_cache["no-labels"] != 1) {
5526                                                                         foreach ($label_cache as $label) {
5527
5528                                                                                 label_create($link, $label[1],
5529                                                                                         $label[2], $label[3], $owner_uid);
5530
5531                                                                                 label_add_article($link, $ref_id, $label[1], $owner_uid);
5532
5533                                                                         }
5534                                                                 }
5535
5536                                                                 //db_query($link, "COMMIT");
5537                                                         }
5538                                                 }
5539                                         }
5540                                 }
5541                         }
5542
5543                         print "<p>" .
5544                                 T_sprintf("Finished: %d articles processed, %d imported, %d feeds created.",
5545                                         $num_processed, $num_imported, $num_feeds_created) .
5546                                         "</p>";
5547
5548                 } else {
5549
5550                         print "<p>" . __("Could not load XML document.") . "</p>";
5551
5552                 }
5553         }
5554
5555         function get_random_bytes($length) {
5556                 if (function_exists('openssl_random_pseudo_bytes')) {
5557                         return openssl_random_pseudo_bytes($length);
5558                 } else {
5559                         $output = "";
5560
5561                         for ($i = 0; $i < $length; $i++)
5562                                 $output .= chr(mt_rand(0, 255));
5563
5564                         return $output;
5565                 }
5566         }
5567
5568         function read_stdin() {
5569                 $fp = fopen("php://stdin", "r");
5570
5571                 if ($fp) {
5572                         $line = trim(fgets($fp));
5573                         fclose($fp);
5574                         return $line;
5575                 }
5576
5577                 return null;
5578         }
5579
5580         function tmpdirname($path, $prefix) {
5581                 // Use PHP's tmpfile function to create a temporary
5582                 // directory name. Delete the file and keep the name.
5583                 $tempname = tempnam($path,$prefix);
5584                 if (!$tempname)
5585                         return false;
5586
5587                 if (!unlink($tempname))
5588                         return false;
5589
5590        return $tempname;
5591         }
5592
5593         function getFeedCategory($link, $feed) {
5594                 $result = db_query($link, "SELECT cat_id FROM ttrss_feeds
5595                         WHERE id = '$feed'");
5596
5597                 if (db_num_rows($result) > 0) {
5598                         return db_fetch_result($result, 0, "cat_id");
5599                 } else {
5600                         return false;
5601                 }
5602
5603         }
5604
5605         function create_published_article($link, $title, $url, $content, $owner_uid) {
5606                 $guid = sha1($url);
5607                 $content_hash = sha1($content);
5608
5609                 $rc = false;
5610
5611                 if (!$title) $title = $url;
5612                 if (!$title && !$url) return false;
5613
5614                 if (filter_var($url, FILTER_VALIDATE_URL) === FALSE) return false;
5615
5616                 db_query($link, "BEGIN");
5617
5618                 // only check for our user data here, others might have shared this with different content etc
5619                 $result = db_query($link, "SELECT id FROM ttrss_entries, ttrss_user_entries WHERE
5620                         link = '$url' AND ref_id = id AND owner_uid = '$owner_uid' LIMIT 1");
5621
5622                 if (db_num_rows($result) != 0) {
5623                         $ref_id = db_fetch_result($result, 0, "id");
5624
5625                         $result = db_query($link, "SELECT int_id FROM ttrss_user_entries WHERE
5626                                 ref_id = '$ref_id' AND owner_uid = '$owner_uid' LIMIT 1");
5627
5628                         if (db_num_rows($result) != 0) {
5629                                 $int_id = db_fetch_result($result, 0, "int_id");
5630
5631                                 db_query($link, "UPDATE ttrss_entries SET
5632                                         content = '$content', content_hash = '$content_hash' WHERE id = '$ref_id'");
5633
5634                                 db_query($link, "UPDATE ttrss_user_entries SET published = true WHERE
5635                                                 int_id = '$int_id' AND owner_uid = '$owner_uid'");
5636                         } else {
5637
5638                                 db_query($link, "INSERT INTO ttrss_user_entries
5639                                         (ref_id, uuid, feed_id, orig_feed_id, owner_uid, published, tag_cache, label_cache, last_read, note, unread)
5640                                         VALUES
5641                                         ('$ref_id', '', NULL, NULL, $owner_uid, true, '', '', NOW(), '', false)");
5642                         }
5643
5644                         $rc = true;
5645
5646                 } else {
5647                         $result = db_query($link, "INSERT INTO ttrss_entries
5648                                 (title, guid, link, updated, content, content_hash, date_entered, date_updated)
5649                                 VALUES
5650                                 ('$title', '$guid', '$url', NOW(), '$content', '$content_hash', NOW(), NOW())");
5651
5652                         $result = db_query($link, "SELECT id FROM ttrss_entries WHERE guid = '$guid'");
5653
5654                         if (db_num_rows($result) != 0) {
5655                                 $ref_id = db_fetch_result($result, 0, "id");
5656
5657                                 db_query($link, "INSERT INTO ttrss_user_entries
5658                                         (ref_id, uuid, feed_id, orig_feed_id, owner_uid, published, tag_cache, label_cache, last_read, note, unread)
5659                                         VALUES
5660                                         ('$ref_id', '', NULL, NULL, $owner_uid, true, '', '', NOW(), '', false)");
5661
5662                                 $rc = true;
5663                         }
5664                 }
5665
5666                 db_query($link, "COMMIT");
5667
5668                 return $rc;
5669         }
5670
5671 ?>