include/functions.php

   1 <?php
   2         define('EXPECTED_CONFIG_VERSION', 26);
   3         define('SCHEMA_VERSION', 115);
   4
   5         define('LABEL_BASE_INDEX', -1024);
   6         define('PLUGIN_FEED_BASE_INDEX', -128);
   7
   8         $fetch_last_error = false;
   9         $fetch_last_error_code = false;
  10         $pluginhost = false;
  11
  12         function __autoload($class) {
  13                 $class_file = str_replace("_", "/", strtolower(basename($class)));
  14
  15                 $file = dirname(__FILE__)."/../classes/$class_file.php";
  16
  17                 if (file_exists($file)) {
  18                         require $file;
  19                 }
  20
  21         }
  22
  23         mb_internal_encoding("UTF-8");
  24         date_default_timezone_set('UTC');
  25         if (defined('E_DEPRECATED')) {
  26                 error_reporting(E_ALL & ~E_NOTICE & ~E_DEPRECATED);
  27         } else {
  28                 error_reporting(E_ALL & ~E_NOTICE);
  29         }
  30
  31         require_once 'config.php';
  32
  33         /**
  34          * Define a constant if not already defined
  35          *
  36          * @param string $name The constant name.
  37          * @param mixed $value The constant value.
  38          * @access public
  39          * @return boolean True if defined successfully or not.
  40          */
  41         function define_default($name, $value) {
  42                 defined($name) or define($name, $value);
  43         }
  44
  45         ///// Some defaults that you can override in config.php //////
  46
  47         define_default('FEED_FETCH_TIMEOUT', 45);
  48         // How may seconds to wait for response when requesting feed from a site
  49         define_default('FEED_FETCH_NO_CACHE_TIMEOUT', 15);
  50         // How may seconds to wait for response when requesting feed from a
  51         // site when that feed wasn't cached before
  52         define_default('FILE_FETCH_TIMEOUT', 45);
  53         // Default timeout when fetching files from remote sites
  54         define_default('FILE_FETCH_CONNECT_TIMEOUT', 15);
  55         // How many seconds to wait for initial response from website when
  56         // fetching files from remote sites
  57
  58         if (DB_TYPE == "pgsql") {
  59                 define('SUBSTRING_FOR_DATE', 'SUBSTRING_FOR_DATE');
  60         } else {
  61                 define('SUBSTRING_FOR_DATE', 'SUBSTRING');
  62         }
  63
  64         /**
  65          * Return available translations names.
  66          *
  67          * @access public
  68          * @return array A array of available translations.
  69          */
  70         function get_translations() {
  71                 $tr = array(
  72                                         "auto"  => "Detect automatically",
  73                                         "ca_CA" => "Català",
  74                                         "cs_CZ" => "Česky",
  75                                         "en_US" => "English",
  76                                         "es_ES" => "Español",
  77                                         "de_DE" => "Deutsch",
  78                                         "fr_FR" => "Français",
  79                                         "hu_HU" => "Magyar (Hungarian)",
  80                                         "it_IT" => "Italiano",
  81                                         "ja_JP" => "日本語 (Japanese)",
  82                                         "lv_LV" => "Latviešu",
  83                                         "nb_NO" => "Norwegian bokmål",
  84                                         "nl_NL" => "Dutch",
  85                                         "pl_PL" => "Polski",
  86                                         "ru_RU" => "Русский",
  87                                         "pt_BR" => "Portuguese/Brazil",
  88                                         "zh_CN" => "Simplified Chinese",
  89                                         "sv_SE" => "Svenska",
  90                                         "fi_FI" => "Suomi");
  91
  92                 return $tr;
  93         }
  94
  95         require_once "lib/accept-to-gettext.php";
  96         require_once "lib/gettext/gettext.inc";
  97
  98
  99         function startup_gettext() {
 100
 101                 # Get locale from Accept-Language header
 102                 $lang = al2gt(array_keys(get_translations()), "text/html");
 103
 104                 if (defined('_TRANSLATION_OVERRIDE_DEFAULT')) {
 105                         $lang = _TRANSLATION_OVERRIDE_DEFAULT;
 106                 }
 107
 108                 if ($_SESSION["language"] && $_SESSION["language"] != "auto") {
 109                         $lang = $_SESSION["language"];
 110                 }
 111
 112                 if ($lang) {
 113                         if (defined('LC_MESSAGES')) {
 114                                 _setlocale(LC_MESSAGES, $lang);
 115                         } else if (defined('LC_ALL')) {
 116                                 _setlocale(LC_ALL, $lang);
 117                         }
 118
 119                         _bindtextdomain("messages", "locale");
 120
 121                         _textdomain("messages");
 122                         _bind_textdomain_codeset("messages", "UTF-8");
 123                 }
 124         }
 125
 126         startup_gettext();
 127
 128         require_once 'db-prefs.php';
 129         require_once 'version.php';
 130         require_once 'ccache.php';
 131         require_once 'labels.php';
 132
 133         define('SELF_USER_AGENT', 'Tiny Tiny RSS/' . VERSION . ' (http://tt-rss.org/)');
 134         ini_set('user_agent', SELF_USER_AGENT);
 135
 136         require_once 'lib/pubsubhubbub/publisher.php';
 137
 138         $tz_offset = -1;
 139         $utc_tz = new DateTimeZone('UTC');
 140         $schema_version = false;
 141
 142         /**
 143          * Print a timestamped debug message.
 144          *
 145          * @param string $msg The debug message.
 146          * @return void
 147          */
 148         function _debug($msg) {
 149                 $ts = strftime("%H:%M:%S", time());
 150                 if (function_exists('posix_getpid')) {
 151                         $ts = "$ts/" . posix_getpid();
 152                 }
 153
 154                 if (!(defined('QUIET') && QUIET)) {
 155                         print "[$ts] $msg\n";
 156                 }
 157
 158                 if (defined('LOGFILE'))  {
 159                         $fp = fopen(LOGFILE, 'a+');
 160
 161                         if ($fp) {
 162                                 fputs($fp, "[$ts] $msg\n");
 163                                 fclose($fp);
 164                         }
 165                 }
 166
 167         } // function _debug
 168
 169         /**
 170          * Purge a feed old posts.
 171          *
 172          * @param mixed $link A database connection.
 173          * @param mixed $feed_id The id of the purged feed.
 174          * @param mixed $purge_interval Olderness of purged posts.
 175          * @param boolean $debug Set to True to enable the debug. False by default.
 176          * @access public
 177          * @return void
 178          */
 179         function purge_feed($link, $feed_id, $purge_interval, $debug = false) {
 180
 181                 if (!$purge_interval) $purge_interval = feed_purge_interval($link, $feed_id);
 182
 183                 $rows = -1;
 184
 185                 $result = db_query($link,
 186                         "SELECT owner_uid FROM ttrss_feeds WHERE id = '$feed_id'");
 187
 188                 $owner_uid = false;
 189
 190                 if (db_num_rows($result) == 1) {
 191                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 192                 }
 193
 194                 if ($purge_interval == -1 || !$purge_interval) {
 195                         if ($owner_uid) {
 196                                 ccache_update($link, $feed_id, $owner_uid);
 197                         }
 198                         return;
 199                 }
 200
 201                 if (!$owner_uid) return;
 202
 203                 if (FORCE_ARTICLE_PURGE == 0) {
 204                         $purge_unread = get_pref($link, "PURGE_UNREAD_ARTICLES",
 205                                 $owner_uid, false);
 206                 } else {
 207                         $purge_unread = true;
 208                         $purge_interval = FORCE_ARTICLE_PURGE;
 209                 }
 210
 211                 if (!$purge_unread) $query_limit = " unread = false AND ";
 212
 213                 if (DB_TYPE == "pgsql") {
 214                         $pg_version = get_pgsql_version($link);
 215
 216                         if (preg_match("/^7\./", $pg_version) || preg_match("/^8\.0/", $pg_version)) {
 217
 218                                 $result = db_query($link, "DELETE FROM ttrss_user_entries WHERE
 219                                         ttrss_entries.id = ref_id AND
 220                                         marked = false AND
 221                                         feed_id = '$feed_id' AND
 222                                         $query_limit
 223                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 224
 225                         } else {
 226
 227                                 $result = db_query($link, "DELETE FROM ttrss_user_entries
 228                                         USING ttrss_entries
 229                                         WHERE ttrss_entries.id = ref_id AND
 230                                         marked = false AND
 231                                         feed_id = '$feed_id' AND
 232                                         $query_limit
 233                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 234                         }
 235
 236                         $rows = pg_affected_rows($result);
 237
 238                 } else {
 239
 240 /*                      $result = db_query($link, "DELETE FROM ttrss_user_entries WHERE
 241                                 marked = false AND feed_id = '$feed_id' AND
 242                                 (SELECT date_updated FROM ttrss_entries WHERE
 243                                         id = ref_id) < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)"); */
 244
 245                         $result = db_query($link, "DELETE FROM ttrss_user_entries
 246                                 USING ttrss_user_entries, ttrss_entries
 247                                 WHERE ttrss_entries.id = ref_id AND
 248                                 marked = false AND
 249                                 feed_id = '$feed_id' AND
 250                                 $query_limit
 251                                 ttrss_entries.date_updated < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)");
 252
 253                         $rows = mysql_affected_rows($link);
 254
 255                 }
 256
 257                 ccache_update($link, $feed_id, $owner_uid);
 258
 259                 if ($debug) {
 260                         _debug("Purged feed $feed_id ($purge_interval): deleted $rows articles");
 261                 }
 262
 263                 return $rows;
 264         } // function purge_feed
 265
 266         function feed_purge_interval($link, $feed_id) {
 267
 268                 $result = db_query($link, "SELECT purge_interval, owner_uid FROM ttrss_feeds
 269                         WHERE id = '$feed_id'");
 270
 271                 if (db_num_rows($result) == 1) {
 272                         $purge_interval = db_fetch_result($result, 0, "purge_interval");
 273                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 274
 275                         if ($purge_interval == 0) $purge_interval = get_pref($link,
 276                                 'PURGE_OLD_DAYS', $owner_uid);
 277
 278                         return $purge_interval;
 279
 280                 } else {
 281                         return -1;
 282                 }
 283         }
 284
 285         function purge_orphans($link, $do_output = false) {
 286
 287                 // purge orphaned posts in main content table
 288                 $result = db_query($link, "DELETE FROM ttrss_entries WHERE
 289                         (SELECT COUNT(int_id) FROM ttrss_user_entries WHERE ref_id = id) = 0");
 290
 291                 if ($do_output) {
 292                         $rows = db_affected_rows($link, $result);
 293                         _debug("Purged $rows orphaned posts.");
 294                 }
 295         }
 296
 297         function get_feed_update_interval($link, $feed_id) {
 298                 $result = db_query($link, "SELECT owner_uid, update_interval FROM
 299                         ttrss_feeds WHERE id = '$feed_id'");
 300
 301                 if (db_num_rows($result) == 1) {
 302                         $update_interval = db_fetch_result($result, 0, "update_interval");
 303                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 304
 305                         if ($update_interval != 0) {
 306                                 return $update_interval;
 307                         } else {
 308                                 return get_pref($link, 'DEFAULT_UPDATE_INTERVAL', $owner_uid, false);
 309                         }
 310
 311                 } else {
 312                         return -1;
 313                 }
 314         }
 315
 316         function fetch_file_contents($url, $type = false, $login = false, $pass = false, $post_query = false, $timeout = false, $timestamp = 0) {
 317
 318                 global $fetch_last_error;
 319                 global $fetch_last_error_code;
 320
 321                 if (!defined('NO_CURL') && function_exists('curl_init') && !ini_get("open_basedir")) {
 322
 323                         if (ini_get("safe_mode")) {
 324                                 $ch = curl_init(geturl($url));
 325                         } else {
 326                                 $ch = curl_init($url);
 327                         }
 328
 329                         if ($timestamp) {
 330                                 curl_setopt($ch, CURLOPT_HTTPHEADER,
 331                                         array("If-Modified-Since: ".gmdate('D, d M Y H:i:s \G\M\T', $timestamp)));
 332                         }
 333
 334                         curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, $timeout ? $timeout : FILE_FETCH_CONNECT_TIMEOUT);
 335                         curl_setopt($ch, CURLOPT_TIMEOUT, $timeout ? $timeout : FILE_FETCH_TIMEOUT);
 336                         curl_setopt($ch, CURLOPT_FOLLOWLOCATION, !ini_get("safe_mode"));
 337                         curl_setopt($ch, CURLOPT_MAXREDIRS, 20);
 338                         curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
 339                         curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
 340                         curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
 341                         curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_ANY);
 342                         curl_setopt($ch, CURLOPT_USERAGENT, SELF_USER_AGENT);
 343                         curl_setopt($ch, CURLOPT_ENCODING , "gzip");
 344                         curl_setopt($ch, CURLOPT_REFERER, $url);
 345
 346                         if ($post_query) {
 347                                 curl_setopt($ch, CURLOPT_POST, true);
 348                                 curl_setopt($ch, CURLOPT_POSTFIELDS, $post_query);
 349                         }
 350
 351                         if ($login && $pass)
 352                                 curl_setopt($ch, CURLOPT_USERPWD, "$login:$pass");
 353
 354                         $contents = @curl_exec($ch);
 355
 356                         if (curl_errno($ch) === 23 || curl_errno($ch) === 61) {
 357                                 curl_setopt($ch, CURLOPT_ENCODING, 'none');
 358                                 $contents = @curl_exec($ch);
 359                         }
 360
 361                         if ($contents === false) {
 362                                 $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
 363                                 curl_close($ch);
 364                                 return false;
 365                         }
 366
 367                         $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
 368                         $content_type = curl_getinfo($ch, CURLINFO_CONTENT_TYPE);
 369
 370                         $fetch_last_error_code = $http_code;
 371
 372                         if ($http_code != 200 || $type && strpos($content_type, "$type") === false) {
 373                                 if (curl_errno($ch) != 0) {
 374                                         $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
 375                                 } else {
 376                                         $fetch_last_error = "HTTP Code: $http_code";
 377                                 }
 378                                 curl_close($ch);
 379                                 return false;
 380                         }
 381
 382                         curl_close($ch);
 383
 384                         return $contents;
 385                 } else {
 386                         if ($login && $pass){
 387                                 $url_parts = array();
 388
 389                                 preg_match("/(^[^:]*):\/\/(.*)/", $url, $url_parts);
 390
 391                                 $pass = urlencode($pass);
 392
 393                                 if ($url_parts[1] && $url_parts[2]) {
 394                                         $url = $url_parts[1] . "://$login:$pass@" . $url_parts[2];
 395                                 }
 396                         }
 397
 398                         $data = @file_get_contents($url);
 399
 400                         if (!$data && function_exists('error_get_last')) {
 401                                 $error = error_get_last();
 402                                 $fetch_last_error = $error["message"];
 403                         }
 404                         return $data;
 405                 }
 406
 407         }
 408
 409         /**
 410          * Try to determine the favicon URL for a feed.
 411          * adapted from wordpress favicon plugin by Jeff Minard (http://thecodepro.com/)
 412          * http://dev.wp-plugins.org/file/favatars/trunk/favatars.php
 413          *
 414          * @param string $url A feed or page URL
 415          * @access public
 416          * @return mixed The favicon URL, or false if none was found.
 417          */
 418         function get_favicon_url($url) {
 419
 420                 $favicon_url = false;
 421
 422                 if ($html = @fetch_file_contents($url)) {
 423
 424                         libxml_use_internal_errors(true);
 425
 426                         $doc = new DOMDocument();
 427                         $doc->loadHTML($html);
 428                         $xpath = new DOMXPath($doc);
 429
 430                         $base = $xpath->query('/html/head/base');
 431                         foreach ($base as $b) {
 432                                 $url = $b->getAttribute("href");
 433                                 break;
 434                         }
 435
 436                         $entries = $xpath->query('/html/head/link[@rel="shortcut icon" or @rel="icon"]');
 437                         if (count($entries) > 0) {
 438                                 foreach ($entries as $entry) {
 439                                         $favicon_url = rewrite_relative_url($url, $entry->getAttribute("href"));
 440                                         break;
 441                                 }
 442                         }
 443                 }
 444
 445                 if (!$favicon_url)
 446                         $favicon_url = rewrite_relative_url($url, "/favicon.ico");
 447
 448                 return $favicon_url;
 449         } // function get_favicon_url
 450
 451         function check_feed_favicon($site_url, $feed, $link) {
 452 #               print "FAVICON [$site_url]: $favicon_url\n";
 453
 454                 $icon_file = ICONS_DIR . "/$feed.ico";
 455
 456                 if (!file_exists($icon_file)) {
 457                         $favicon_url = get_favicon_url($site_url);
 458
 459                         if ($favicon_url) {
 460                                 // Limiting to "image" type misses those served with text/plain
 461                                 $contents = fetch_file_contents($favicon_url); // , "image");
 462
 463                                 if ($contents) {
 464                                         // Crude image type matching.
 465                                         // Patterns gleaned from the file(1) source code.
 466                                         if (preg_match('/^\x00\x00\x01\x00/', $contents)) {
 467                                                 // 0       string  \000\000\001\000        MS Windows icon resource
 468                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa MS Windows icon resource");
 469                                         }
 470                                         elseif (preg_match('/^GIF8/', $contents)) {
 471                                                 // 0       string          GIF8            GIF image data
 472                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa GIF image");
 473                                         }
 474                                         elseif (preg_match('/^\x89PNG\x0d\x0a\x1a\x0a/', $contents)) {
 475                                                 // 0       string          \x89PNG\x0d\x0a\x1a\x0a         PNG image data
 476                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa PNG image");
 477                                         }
 478                                         elseif (preg_match('/^\xff\xd8/', $contents)) {
 479                                                 // 0       beshort         0xffd8          JPEG image data
 480                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa JPG image");
 481                                         }
 482                                         else {
 483                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa UNKNOWN type");
 484                                                 $contents = "";
 485                                         }
 486                                 }
 487
 488                                 if ($contents) {
 489                                         $fp = @fopen($icon_file, "w");
 490
 491                                         if ($fp) {
 492                                                 fwrite($fp, $contents);
 493                                                 fclose($fp);
 494                                                 chmod($icon_file, 0644);
 495                                         }
 496                                 }
 497                         }
 498                 }
 499         }
 500
 501         function print_select($id, $default, $values, $attributes = "") {
 502                 print "<select name=\"$id\" id=\"$id\" $attributes>";
 503                 foreach ($values as $v) {
 504                         if ($v == $default)
 505                                 $sel = "selected=\"1\"";
 506                          else
 507                                 $sel = "";
 508
 509                         $v = trim($v);
 510
 511                         print "<option value=\"$v\" $sel>$v</option>";
 512                 }
 513                 print "</select>";
 514         }
 515
 516         function print_select_hash($id, $default, $values, $attributes = "") {
 517                 print "<select name=\"$id\" id='$id' $attributes>";
 518                 foreach (array_keys($values) as $v) {
 519                         if ($v == $default)
 520                                 $sel = 'selected="selected"';
 521                          else
 522                                 $sel = "";
 523
 524                         $v = trim($v);
 525
 526                         print "<option $sel value=\"$v\">".$values[$v]."</option>";
 527                 }
 528
 529                 print "</select>";
 530         }
 531
 532         function print_radio($id, $default, $true_is, $values, $attributes = "") {
 533                 foreach ($values as $v) {
 534
 535                         if ($v == $default)
 536                                 $sel = "checked";
 537                          else
 538                                 $sel = "";
 539
 540                         if ($v == $true_is) {
 541                                 $sel .= " value=\"1\"";
 542                         } else {
 543                                 $sel .= " value=\"0\"";
 544                         }
 545
 546                         print "<input class=\"noborder\" dojoType=\"dijit.form.RadioButton\"
 547                                 type=\"radio\" $sel $attributes name=\"$id\">&nbsp;$v&nbsp;";
 548
 549                 }
 550         }
 551
 552         function initialize_user_prefs($link, $uid, $profile = false) {
 553
 554                 $uid = db_escape_string($link, $uid);
 555
 556                 if (!$profile) {
 557                         $profile = "NULL";
 558                         $profile_qpart = "AND profile IS NULL";
 559                 } else {
 560                         $profile_qpart = "AND profile = '$profile'";
 561                 }
 562
 563                 if (get_schema_version($link) < 63) $profile_qpart = "";
 564
 565                 db_query($link, "BEGIN");
 566
 567                 $result = db_query($link, "SELECT pref_name,def_value FROM ttrss_prefs");
 568
 569                 $u_result = db_query($link, "SELECT pref_name
 570                         FROM ttrss_user_prefs WHERE owner_uid = '$uid' $profile_qpart");
 571
 572                 $active_prefs = array();
 573
 574                 while ($line = db_fetch_assoc($u_result)) {
 575                         array_push($active_prefs, $line["pref_name"]);
 576                 }
 577
 578                 while ($line = db_fetch_assoc($result)) {
 579                         if (array_search($line["pref_name"], $active_prefs) === FALSE) {
 580 //                              print "adding " . $line["pref_name"] . "<br>";
 581
 582                                 $line["def_value"] = db_escape_string($link, $line["def_value"]);
 583                                 $line["pref_name"] = db_escape_string($link, $line["pref_name"]);
 584
 585                                 if (get_schema_version($link) < 63) {
 586                                         db_query($link, "INSERT INTO ttrss_user_prefs
 587                                                 (owner_uid,pref_name,value) VALUES
 588                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."')");
 589
 590                                 } else {
 591                                         db_query($link, "INSERT INTO ttrss_user_prefs
 592                                                 (owner_uid,pref_name,value, profile) VALUES
 593                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."', $profile)");
 594                                 }
 595
 596                         }
 597                 }
 598
 599                 db_query($link, "COMMIT");
 600
 601         }
 602
 603         function get_ssl_certificate_id() {
 604                 if ($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"]) {
 605                         return sha1($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"] .
 606                                 $_SERVER["REDIRECT_SSL_CLIENT_V_START"] .
 607                                 $_SERVER["REDIRECT_SSL_CLIENT_V_END"] .
 608                                 $_SERVER["REDIRECT_SSL_CLIENT_S_DN"]);
 609                 }
 610                 return "";
 611         }
 612
 613         function authenticate_user($link, $login, $password, $check_only = false) {
 614
 615                 if (!SINGLE_USER_MODE) {
 616                         $user_id = false;
 617
 618                         global $pluginhost;
 619                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_AUTH_USER) as $plugin) {
 620
 621                                 $user_id = (int) $plugin->authenticate($login, $password);
 622
 623                                 if ($user_id) {
 624                                         $_SESSION["auth_module"] = strtolower(get_class($plugin));
 625                                         break;
 626                                 }
 627                         }
 628
 629                         if ($user_id && !$check_only) {
 630                                 @session_start();
 631
 632                                 $_SESSION["uid"] = $user_id;
 633                                 $_SESSION["version"] = VERSION;
 634
 635                                 $result = db_query($link, "SELECT login,access_level,pwd_hash FROM ttrss_users
 636                                         WHERE id = '$user_id'");
 637
 638                                 $_SESSION["name"] = db_fetch_result($result, 0, "login");
 639                                 $_SESSION["access_level"] = db_fetch_result($result, 0, "access_level");
 640                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 641
 642                                 db_query($link, "UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 643                                         $_SESSION["uid"]);
 644
 645                                 $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 646                                 $_SESSION["user_agent"] = sha1($_SERVER['HTTP_USER_AGENT']);
 647                                 $_SESSION["pwd_hash"] = db_fetch_result($result, 0, "pwd_hash");
 648
 649                                 $_SESSION["last_version_check"] = time();
 650
 651                                 initialize_user_prefs($link, $_SESSION["uid"]);
 652
 653                                 return true;
 654                         }
 655
 656                         return false;
 657
 658                 } else {
 659
 660                         $_SESSION["uid"] = 1;
 661                         $_SESSION["name"] = "admin";
 662                         $_SESSION["access_level"] = 10;
 663
 664                         $_SESSION["hide_hello"] = true;
 665                         $_SESSION["hide_logout"] = true;
 666
 667                         $_SESSION["auth_module"] = false;
 668
 669                         if (!$_SESSION["csrf_token"]) {
 670                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 671                         }
 672
 673                         $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 674
 675                         initialize_user_prefs($link, $_SESSION["uid"]);
 676
 677                         return true;
 678                 }
 679         }
 680
 681         function make_password($length = 8) {
 682
 683                 $password = "";
 684                 $possible = "0123456789abcdfghjkmnpqrstvwxyzABCDFGHJKMNPQRSTVWXYZ";
 685
 686         $i = 0;
 687
 688                 while ($i < $length) {
 689                         $char = substr($possible, mt_rand(0, strlen($possible)-1), 1);
 690
 691                         if (!strstr($password, $char)) {
 692                                 $password .= $char;
 693                                 $i++;
 694                         }
 695                 }
 696                 return $password;
 697         }
 698
 699         // this is called after user is created to initialize default feeds, labels
 700         // or whatever else
 701
 702         // user preferences are checked on every login, not here
 703
 704         function initialize_user($link, $uid) {
 705
 706                 db_query($link, "insert into ttrss_feeds (owner_uid,title,feed_url)
 707                         values ('$uid', 'Tiny Tiny RSS: New Releases',
 708                         'http://tt-rss.org/releases.rss')");
 709
 710                 db_query($link, "insert into ttrss_feeds (owner_uid,title,feed_url)
 711                         values ('$uid', 'Tiny Tiny RSS: Forum',
 712                                 'http://tt-rss.org/forum/rss.php')");
 713         }
 714
 715         function logout_user() {
 716                 session_destroy();
 717                 if (isset($_COOKIE[session_name()])) {
 718                    setcookie(session_name(), '', time()-42000, '/');
 719                 }
 720         }
 721
 722         function validate_csrf($csrf_token) {
 723                 return $csrf_token == $_SESSION['csrf_token'];
 724         }
 725
 726         function load_user_plugins($link, $owner_uid) {
 727                 if ($owner_uid) {
 728                         $plugins = get_pref($link, "_ENABLED_PLUGINS", $owner_uid);
 729
 730                         global $pluginhost;
 731                         $pluginhost->load($plugins, $pluginhost::KIND_USER, $owner_uid);
 732
 733                         if (get_schema_version($link) > 100) {
 734                                 $pluginhost->load_data();
 735                         }
 736                 }
 737         }
 738
 739         function login_sequence($link) {
 740                 $_SESSION["prefs_cache"] = false;
 741
 742                 if (SINGLE_USER_MODE) {
 743                         @session_start();
 744                         authenticate_user($link, "admin", null);
 745                         cache_prefs($link);
 746                         load_user_plugins($link, $_SESSION["uid"]);
 747                 } else {
 748                         if (!validate_session($link)) $_SESSION["uid"] = false;
 749
 750                         if (!$_SESSION["uid"]) {
 751
 752                                 if (AUTH_AUTO_LOGIN && authenticate_user($link, null, null)) {
 753                                     $_SESSION["ref_schema_version"] = get_schema_version($link, true);
 754                                 } else {
 755                                          authenticate_user($link, null, null, true);
 756                                 }
 757
 758                                 if (!$_SESSION["uid"]) {
 759                                         @session_destroy();
 760                                         setcookie(session_name(), '', time()-42000, '/');
 761
 762                                         render_login_form($link);
 763                                         exit;
 764                                 }
 765
 766                         } else {
 767                                 /* bump login timestamp */
 768                                 db_query($link, "UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 769                                         $_SESSION["uid"]);
 770                                 $_SESSION["last_login_update"] = time();
 771                         }
 772
 773                         if ($_SESSION["uid"] && $_SESSION["language"] && SESSION_COOKIE_LIFETIME > 0) {
 774                                 setcookie("ttrss_lang", $_SESSION["language"],
 775                                         time() + SESSION_COOKIE_LIFETIME);
 776                         }
 777
 778                         if ($_SESSION["uid"]) {
 779                                 cache_prefs($link);
 780                                 load_user_plugins($link, $_SESSION["uid"]);
 781
 782                                 /* cleanup ccache */
 783
 784                                 db_query($link, "DELETE FROM ttrss_counters_cache WHERE owner_uid = ".
 785                                         $_SESSION["uid"] . " AND
 786                                                 (SELECT COUNT(id) FROM ttrss_feeds WHERE
 787                                                         ttrss_feeds.id = feed_id) = 0");
 788
 789                                 db_query($link, "DELETE FROM ttrss_cat_counters_cache WHERE owner_uid = ".
 790                                         $_SESSION["uid"] . " AND
 791                                                 (SELECT COUNT(id) FROM ttrss_feed_categories WHERE
 792                                                         ttrss_feed_categories.id = feed_id) = 0");
 793
 794                         }
 795
 796                 }
 797         }
 798
 799         function truncate_string($str, $max_len, $suffix = '&hellip;') {
 800                 if (mb_strlen($str, "utf-8") > $max_len - 3) {
 801                         return mb_substr($str, 0, $max_len, "utf-8") . $suffix;
 802                 } else {
 803                         return $str;
 804                 }
 805         }
 806
 807         function convert_timestamp($timestamp, $source_tz, $dest_tz) {
 808
 809                 try {
 810                         $source_tz = new DateTimeZone($source_tz);
 811                 } catch (Exception $e) {
 812                         $source_tz = new DateTimeZone('UTC');
 813                 }
 814
 815                 try {
 816                         $dest_tz = new DateTimeZone($dest_tz);
 817                 } catch (Exception $e) {
 818                         $dest_tz = new DateTimeZone('UTC');
 819                 }
 820
 821                 $dt = new DateTime(date('Y-m-d H:i:s', $timestamp), $source_tz);
 822                 return $dt->format('U') + $dest_tz->getOffset($dt);
 823         }
 824
 825         function make_local_datetime($link, $timestamp, $long, $owner_uid = false,
 826                                         $no_smart_dt = false) {
 827
 828                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 829                 if (!$timestamp) $timestamp = '1970-01-01 0:00';
 830
 831                 global $utc_tz;
 832                 global $tz_offset;
 833
 834                 # We store date in UTC internally
 835                 $dt = new DateTime($timestamp, $utc_tz);
 836
 837                 if ($tz_offset == -1) {
 838
 839                         $user_tz_string = get_pref($link, 'USER_TIMEZONE', $owner_uid);
 840
 841                         try {
 842                                 $user_tz = new DateTimeZone($user_tz_string);
 843                         } catch (Exception $e) {
 844                                 $user_tz = $utc_tz;
 845                         }
 846
 847                         $tz_offset = $user_tz->getOffset($dt);
 848                 }
 849
 850                 $user_timestamp = $dt->format('U') + $tz_offset;
 851
 852                 if (!$no_smart_dt) {
 853                         return smart_date_time($link, $user_timestamp,
 854                                 $tz_offset, $owner_uid);
 855                 } else {
 856                         if ($long)
 857                                 $format = get_pref($link, 'LONG_DATE_FORMAT', $owner_uid);
 858                         else
 859                                 $format = get_pref($link, 'SHORT_DATE_FORMAT', $owner_uid);
 860
 861                         return date($format, $user_timestamp);
 862                 }
 863         }
 864
 865         function smart_date_time($link, $timestamp, $tz_offset = 0, $owner_uid = false) {
 866                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 867
 868                 if (date("Y.m.d", $timestamp) == date("Y.m.d", time() + $tz_offset)) {
 869                         return date("G:i", $timestamp);
 870                 } else if (date("Y", $timestamp) == date("Y", time() + $tz_offset)) {
 871                         $format = get_pref($link, 'SHORT_DATE_FORMAT', $owner_uid);
 872                         return date($format, $timestamp);
 873                 } else {
 874                         $format = get_pref($link, 'LONG_DATE_FORMAT', $owner_uid);
 875                         return date($format, $timestamp);
 876                 }
 877         }
 878
 879         function sql_bool_to_bool($s) {
 880                 if ($s == "t" || $s == "1" || strtolower($s) == "true") {
 881                         return true;
 882                 } else {
 883                         return false;
 884                 }
 885         }
 886
 887         function bool_to_sql_bool($s) {
 888                 if ($s) {
 889                         return "true";
 890                 } else {
 891                         return "false";
 892                 }
 893         }
 894
 895         // Session caching removed due to causing wrong redirects to upgrade
 896         // script when get_schema_version() is called on an obsolete session
 897         // created on a previous schema version.
 898         function get_schema_version($link, $nocache = false) {
 899                 global $schema_version;
 900
 901                 if (!$schema_version) {
 902                         $result = db_query($link, "SELECT schema_version FROM ttrss_version");
 903                         $version = db_fetch_result($result, 0, "schema_version");
 904                         $schema_version = $version;
 905                         return $version;
 906                 } else {
 907                         return $schema_version;
 908                 }
 909         }
 910
 911         function sanity_check($link) {
 912                 require_once 'errors.php';
 913
 914                 $error_code = 0;
 915                 $schema_version = get_schema_version($link, true);
 916
 917                 if ($schema_version != SCHEMA_VERSION) {
 918                         $error_code = 5;
 919                 }
 920
 921                 if (DB_TYPE == "mysql") {
 922                         $result = db_query($link, "SELECT true", false);
 923                         if (db_num_rows($result) != 1) {
 924                                 $error_code = 10;
 925                         }
 926                 }
 927
 928                 if (db_escape_string($link, "testTEST") != "testTEST") {
 929                         $error_code = 12;
 930                 }
 931
 932                 return array("code" => $error_code, "message" => $ERRORS[$error_code]);
 933         }
 934
 935         function file_is_locked($filename) {
 936                 if (function_exists('flock')) {
 937                         $fp = @fopen(LOCK_DIRECTORY . "/$filename", "r");
 938                         if ($fp) {
 939                                 if (flock($fp, LOCK_EX | LOCK_NB)) {
 940                                         flock($fp, LOCK_UN);
 941                                         fclose($fp);
 942                                         return false;
 943                                 }
 944                                 fclose($fp);
 945                                 return true;
 946                         } else {
 947                                 return false;
 948                         }
 949                 }
 950                 return true; // consider the file always locked and skip the test
 951         }
 952
 953         function make_lockfile($filename) {
 954                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
 955
 956                 if ($fp && flock($fp, LOCK_EX | LOCK_NB)) {
 957                         if (function_exists('posix_getpid')) {
 958                                 fwrite($fp, posix_getpid() . "\n");
 959                         }
 960                         return $fp;
 961                 } else {
 962                         return false;
 963                 }
 964         }
 965
 966         function make_stampfile($filename) {
 967                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
 968
 969                 if (flock($fp, LOCK_EX | LOCK_NB)) {
 970                         fwrite($fp, time() . "\n");
 971                         flock($fp, LOCK_UN);
 972                         fclose($fp);
 973                         return true;
 974                 } else {
 975                         return false;
 976                 }
 977         }
 978
 979         function sql_random_function() {
 980                 if (DB_TYPE == "mysql") {
 981                         return "RAND()";
 982                 } else {
 983                         return "RANDOM()";
 984                 }
 985         }
 986
 987         function catchup_feed($link, $feed, $cat_view, $owner_uid = false, $max_id = false, $mode = 'all') {
 988
 989                         if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 990
 991                         //if (preg_match("/^-?[0-9][0-9]*$/", $feed) != false) {
 992
 993                         // Todo: all this interval stuff needs some generic generator function
 994
 995                         $date_qpart = "false";
 996
 997                         switch ($mode) {
 998                         case "1day":
 999                                 if (DB_TYPE == "pgsql") {
1000                                         $date_qpart = "date_entered < NOW() - INTERVAL '1 day' ";
1001                                 } else {
1002                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 1 DAY) ";
1003                                 }
1004                                 break;
1005                         case "1week":
1006                                 if (DB_TYPE == "pgsql") {
1007                                         $date_qpart = "date_entered < NOW() - INTERVAL '1 week' ";
1008                                 } else {
1009                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 1 WEEK) ";
1010                                 }
1011                                 break;
1012                         case "2weeks":
1013                                 if (DB_TYPE == "pgsql") {
1014                                         $date_qpart = "date_entered < NOW() - INTERVAL '2 week' ";
1015                                 } else {
1016                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 2 WEEK) ";
1017                                 }
1018                                 break;
1019                         default:
1020                                 $date_qpart = "true";
1021                         }
1022
1023                         if (is_numeric($feed)) {
1024                                 if ($cat_view) {
1025
1026                                         if ($feed >= 0) {
1027
1028                                                 if ($feed > 0) {
1029                                                         $children = getChildCategories($link, $feed, $owner_uid);
1030                                                         array_push($children, $feed);
1031
1032                                                         $children = join(",", $children);
1033
1034                                                         $cat_qpart = "cat_id IN ($children)";
1035                                                 } else {
1036                                                         $cat_qpart = "cat_id IS NULL";
1037                                                 }
1038
1039                                                 db_query($link, "UPDATE ttrss_user_entries
1040                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1041                                                                 (SELECT id FROM
1042                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1043                                                                                 AND owner_uid = $owner_uid AND unread = true AND feed_id IN
1044                                                                                         (SELECT id FROM ttrss_feeds WHERE $cat_qpart) AND $date_qpart) as tmp)");
1045
1046                                         } else if ($feed == -2) {
1047
1048                                                 db_query($link, "UPDATE ttrss_user_entries
1049                                                         SET unread = false,last_read = NOW() WHERE (SELECT COUNT(*)
1050                                                                 FROM ttrss_user_labels2 WHERE article_id = ref_id) > 0
1051                                                                 AND unread = true AND $date_qpart AND owner_uid = $owner_uid");
1052                                         }
1053
1054                                 } else if ($feed > 0) {
1055
1056                                         db_query($link, "UPDATE ttrss_user_entries
1057                                                 SET unread = false, last_read = NOW() WHERE ref_id IN
1058                                                         (SELECT id FROM
1059                                                                 (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1060                                                                         AND owner_uid = $owner_uid AND unread = true AND feed_id = $feed AND $date_qpart) as tmp)");
1061
1062                                 } else if ($feed < 0 && $feed > LABEL_BASE_INDEX) { // special, like starred
1063
1064                                         if ($feed == -1) {
1065                                                 db_query($link, "UPDATE ttrss_user_entries
1066                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1067                                                                 (SELECT id FROM
1068                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1069                                                                                 AND owner_uid = $owner_uid AND unread = true AND marked = true AND $date_qpart) as tmp)");
1070                                         }
1071
1072                                         if ($feed == -2) {
1073                                                 db_query($link, "UPDATE ttrss_user_entries
1074                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1075                                                                 (SELECT id FROM
1076                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1077                                                                                 AND owner_uid = $owner_uid AND unread = true AND published = true AND $date_qpart) as tmp)");
1078                                         }
1079
1080                                         if ($feed == -3) {
1081
1082                                                 $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE");
1083
1084                                                 if (DB_TYPE == "pgsql") {
1085                                                         $match_part = "date_entered > NOW() - INTERVAL '$intl hour' ";
1086                                                 } else {
1087                                                         $match_part = "date_entered > DATE_SUB(NOW(),
1088                                                                 INTERVAL $intl HOUR) ";
1089                                                 }
1090
1091                                                 db_query($link, "UPDATE ttrss_user_entries
1092                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1093                                                                 (SELECT id FROM
1094                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1095                                                                                 AND owner_uid = $owner_uid AND unread = true AND $date_qpart AND $match_part) as tmp)");
1096                                         }
1097
1098                                         if ($feed == -4) {
1099                                                 db_query($link, "UPDATE ttrss_user_entries
1100                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1101                                                                 (SELECT id FROM
1102                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1103                                                                                 AND owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1104                                         }
1105
1106                                 } else if ($feed < LABEL_BASE_INDEX) { // label
1107
1108                                         $label_id = feed_to_label_id($feed);
1109
1110                                         db_query($link, "UPDATE ttrss_user_entries
1111                                                 SET unread = false, last_read = NOW() WHERE ref_id IN
1112                                                         (SELECT id FROM
1113                                                                 (SELECT ttrss_entries.id FROM ttrss_entries, ttrss_user_entries, ttrss_user_labels2 WHERE ref_id = id
1114                                                                         AND label_id = '$label_id' AND ref_id = article_id
1115                                                                         AND owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1116
1117                                 }
1118
1119                                 ccache_update($link, $feed, $owner_uid, $cat_view);
1120
1121                         } else { // tag
1122                                 db_query($link, "UPDATE ttrss_user_entries
1123                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1124                                                 (SELECT id FROM
1125                                                         (SELECT ttrss_entries.id FROM ttrss_entries, ttrss_user_entries, ttrss_tags WHERE ref_id = ttrss_entries.id
1126                                                                 AND post_int_id = int_id AND tag_name = '$feed'
1127                                                                 AND ttrss_user_entries.owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1128
1129                         }
1130         }
1131
1132         function getAllCounters($link) {
1133                 $data = getGlobalCounters($link);
1134
1135                 $data = array_merge($data, getVirtCounters($link));
1136                 $data = array_merge($data, getLabelCounters($link));
1137                 $data = array_merge($data, getFeedCounters($link, $active_feed));
1138                 $data = array_merge($data, getCategoryCounters($link));
1139
1140                 return $data;
1141         }
1142
1143         function getCategoryTitle($link, $cat_id) {
1144
1145                 if ($cat_id == -1) {
1146                         return __("Special");
1147                 } else if ($cat_id == -2) {
1148                         return __("Labels");
1149                 } else {
1150
1151                         $result = db_query($link, "SELECT title FROM ttrss_feed_categories WHERE
1152                                 id = '$cat_id'");
1153
1154                         if (db_num_rows($result) == 1) {
1155                                 return db_fetch_result($result, 0, "title");
1156                         } else {
1157                                 return __("Uncategorized");
1158                         }
1159                 }
1160         }
1161
1162
1163         function getCategoryCounters($link) {
1164                 $ret_arr = array();
1165
1166                 /* Labels category */
1167
1168                 $cv = array("id" => -2, "kind" => "cat",
1169                         "counter" => getCategoryUnread($link, -2));
1170
1171                 array_push($ret_arr, $cv);
1172
1173                 $result = db_query($link, "SELECT id AS cat_id, value AS unread,
1174                         (SELECT COUNT(id) FROM ttrss_feed_categories AS c2
1175                                 WHERE c2.parent_cat = ttrss_feed_categories.id) AS num_children
1176                         FROM ttrss_feed_categories, ttrss_cat_counters_cache
1177                         WHERE ttrss_cat_counters_cache.feed_id = id AND
1178                         ttrss_cat_counters_cache.owner_uid = ttrss_feed_categories.owner_uid AND
1179                         ttrss_feed_categories.owner_uid = " . $_SESSION["uid"]);
1180
1181                 while ($line = db_fetch_assoc($result)) {
1182                         $line["cat_id"] = (int) $line["cat_id"];
1183
1184                         if ($line["num_children"] > 0) {
1185                                 $child_counter = getCategoryChildrenUnread($link, $line["cat_id"], $_SESSION["uid"]);
1186                         } else {
1187                                 $child_counter = 0;
1188                         }
1189
1190                         $cv = array("id" => $line["cat_id"], "kind" => "cat",
1191                                 "counter" => $line["unread"] + $child_counter);
1192
1193                         array_push($ret_arr, $cv);
1194                 }
1195
1196                 /* Special case: NULL category doesn't actually exist in the DB */
1197
1198                 $cv = array("id" => 0, "kind" => "cat",
1199                         "counter" => (int) ccache_find($link, 0, $_SESSION["uid"], true));
1200
1201                 array_push($ret_arr, $cv);
1202
1203                 return $ret_arr;
1204         }
1205
1206         // only accepts real cats (>= 0)
1207         function getCategoryChildrenUnread($link, $cat, $owner_uid = false) {
1208                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1209
1210                 $result = db_query($link, "SELECT id FROM ttrss_feed_categories WHERE parent_cat = '$cat'
1211                                 AND owner_uid = $owner_uid");
1212
1213                 $unread = 0;
1214
1215                 while ($line = db_fetch_assoc($result)) {
1216                         $unread += getCategoryUnread($link, $line["id"], $owner_uid);
1217                         $unread += getCategoryChildrenUnread($link, $line["id"], $owner_uid);
1218                 }
1219
1220                 return $unread;
1221         }
1222
1223         function getCategoryUnread($link, $cat, $owner_uid = false) {
1224
1225                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1226
1227                 if ($cat >= 0) {
1228
1229                         if ($cat != 0) {
1230                                 $cat_query = "cat_id = '$cat'";
1231                         } else {
1232                                 $cat_query = "cat_id IS NULL";
1233                         }
1234
1235                         $result = db_query($link, "SELECT id FROM ttrss_feeds WHERE $cat_query
1236                                         AND owner_uid = " . $owner_uid);
1237
1238                         $cat_feeds = array();
1239                         while ($line = db_fetch_assoc($result)) {
1240                                 array_push($cat_feeds, "feed_id = " . $line["id"]);
1241                         }
1242
1243                         if (count($cat_feeds) == 0) return 0;
1244
1245                         $match_part = implode(" OR ", $cat_feeds);
1246
1247                         $result = db_query($link, "SELECT COUNT(int_id) AS unread
1248                                 FROM ttrss_user_entries
1249                                 WHERE   unread = true AND ($match_part)
1250                                 AND owner_uid = " . $owner_uid);
1251
1252                         $unread = 0;
1253
1254                         # this needs to be rewritten
1255                         while ($line = db_fetch_assoc($result)) {
1256                                 $unread += $line["unread"];
1257                         }
1258
1259                         return $unread;
1260                 } else if ($cat == -1) {
1261                         return getFeedUnread($link, -1) + getFeedUnread($link, -2) + getFeedUnread($link, -3) + getFeedUnread($link, 0);
1262                 } else if ($cat == -2) {
1263
1264                         $result = db_query($link, "
1265                                 SELECT COUNT(unread) AS unread FROM
1266                                         ttrss_user_entries, ttrss_user_labels2
1267                                 WHERE article_id = ref_id AND unread = true
1268                                         AND ttrss_user_entries.owner_uid = '$owner_uid'");
1269
1270                         $unread = db_fetch_result($result, 0, "unread");
1271
1272                         return $unread;
1273
1274                 }
1275         }
1276
1277         function getFeedUnread($link, $feed, $is_cat = false) {
1278                 return getFeedArticles($link, $feed, $is_cat, true, $_SESSION["uid"]);
1279         }
1280
1281         function getLabelUnread($link, $label_id, $owner_uid = false) {
1282                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1283
1284                 $result = db_query($link, "SELECT COUNT(ref_id) AS unread FROM ttrss_user_entries, ttrss_user_labels2
1285                         WHERE owner_uid = '$owner_uid' AND unread = true AND label_id = '$label_id' AND article_id = ref_id");
1286
1287                 if (db_num_rows($result) != 0) {
1288                         return db_fetch_result($result, 0, "unread");
1289                 } else {
1290                         return 0;
1291                 }
1292         }
1293
1294         function getFeedArticles($link, $feed, $is_cat = false, $unread_only = false,
1295                 $owner_uid = false) {
1296
1297                 $n_feed = (int) $feed;
1298                 $need_entries = false;
1299
1300                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1301
1302                 if ($unread_only) {
1303                         $unread_qpart = "unread = true";
1304                 } else {
1305                         $unread_qpart = "true";
1306                 }
1307
1308                 if ($is_cat) {
1309                         return getCategoryUnread($link, $n_feed, $owner_uid);
1310                 } else if ($n_feed == -6) {
1311                         return 0;
1312                 } else if ($feed != "0" && $n_feed == 0) {
1313
1314                         $feed = db_escape_string($link, $feed);
1315
1316                         $result = db_query($link, "SELECT SUM((SELECT COUNT(int_id)
1317                                 FROM ttrss_user_entries,ttrss_entries WHERE int_id = post_int_id
1318                                         AND ref_id = id AND $unread_qpart)) AS count FROM ttrss_tags
1319                                 WHERE owner_uid = $owner_uid AND tag_name = '$feed'");
1320                         return db_fetch_result($result, 0, "count");
1321
1322                 } else if ($n_feed == -1) {
1323                         $match_part = "marked = true";
1324                 } else if ($n_feed == -2) {
1325                         $match_part = "published = true";
1326                 } else if ($n_feed == -3) {
1327                         $match_part = "unread = true AND score >= 0";
1328
1329                         $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE", $owner_uid);
1330
1331                         if (DB_TYPE == "pgsql") {
1332                                 $match_part .= " AND updated > NOW() - INTERVAL '$intl hour' ";
1333                         } else {
1334                                 $match_part .= " AND updated > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
1335                         }
1336
1337                         $need_entries = true;
1338
1339                 } else if ($n_feed == -4) {
1340                         $match_part = "true";
1341                 } else if ($n_feed >= 0) {
1342
1343                         if ($n_feed != 0) {
1344                                 $match_part = "feed_id = '$n_feed'";
1345                         } else {
1346                                 $match_part = "feed_id IS NULL";
1347                         }
1348
1349                 } else if ($feed < LABEL_BASE_INDEX) {
1350
1351                         $label_id = feed_to_label_id($feed);
1352
1353                         return getLabelUnread($link, $label_id, $owner_uid);
1354
1355                 }
1356
1357                 if ($match_part) {
1358
1359                         if ($need_entries) {
1360                                 $from_qpart = "ttrss_user_entries,ttrss_entries";
1361                                 $from_where = "ttrss_entries.id = ttrss_user_entries.ref_id AND";
1362                         } else {
1363                                 $from_qpart = "ttrss_user_entries";
1364                         }
1365
1366                         $query = "SELECT count(int_id) AS unread
1367                                 FROM $from_qpart WHERE
1368                                 $unread_qpart AND $from_where ($match_part) AND ttrss_user_entries.owner_uid = $owner_uid";
1369
1370                         //echo "[$feed/$query]\n";
1371
1372                         $result = db_query($link, $query);
1373
1374                 } else {
1375
1376                         $result = db_query($link, "SELECT COUNT(post_int_id) AS unread
1377                                 FROM ttrss_tags,ttrss_user_entries,ttrss_entries
1378                                 WHERE tag_name = '$feed' AND post_int_id = int_id AND ref_id = ttrss_entries.id
1379                                 AND $unread_qpart AND ttrss_tags.owner_uid = " . $owner_uid);
1380                 }
1381
1382                 $unread = db_fetch_result($result, 0, "unread");
1383
1384                 return $unread;
1385         }
1386
1387         function getGlobalUnread($link, $user_id = false) {
1388
1389                 if (!$user_id) {
1390                         $user_id = $_SESSION["uid"];
1391                 }
1392
1393                 $result = db_query($link, "SELECT SUM(value) AS c_id FROM ttrss_counters_cache
1394                         WHERE owner_uid = '$user_id' AND feed_id > 0");
1395
1396                 $c_id = db_fetch_result($result, 0, "c_id");
1397
1398                 return $c_id;
1399         }
1400
1401         function getGlobalCounters($link, $global_unread = -1) {
1402                 $ret_arr = array();
1403
1404                 if ($global_unread == -1) {
1405                         $global_unread = getGlobalUnread($link);
1406                 }
1407
1408                 $cv = array("id" => "global-unread",
1409                         "counter" => (int) $global_unread);
1410
1411                 array_push($ret_arr, $cv);
1412
1413                 $result = db_query($link, "SELECT COUNT(id) AS fn FROM
1414                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1415
1416                 $subscribed_feeds = db_fetch_result($result, 0, "fn");
1417
1418                 $cv = array("id" => "subscribed-feeds",
1419                         "counter" => (int) $subscribed_feeds);
1420
1421                 array_push($ret_arr, $cv);
1422
1423                 return $ret_arr;
1424         }
1425
1426         function getVirtCounters($link) {
1427
1428                 $ret_arr = array();
1429
1430                 for ($i = 0; $i >= -4; $i--) {
1431
1432                         $count = getFeedUnread($link, $i);
1433
1434                         $cv = array("id" => $i,
1435                                 "counter" => (int) $count);
1436
1437 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1438 //                              $cv["xmsg"] = getFeedArticles($link, $i)." ".__("total");
1439
1440                         array_push($ret_arr, $cv);
1441                 }
1442
1443                 global $pluginhost;
1444
1445                 if ($pluginhost) {
1446                         $feeds = $pluginhost->get_feeds(-1);
1447
1448                         if (is_array($feeds)) {
1449                                 foreach ($feeds as $feed) {
1450                                         $cv = array("id" => PluginHost::pfeed_to_feed_id($feed['id']),
1451                                                 "counter" => $feed['sender']->get_unread($feed['id']));
1452
1453                                         array_push($ret_arr, $cv);
1454                                 }
1455                         }
1456                 }
1457
1458                 return $ret_arr;
1459         }
1460
1461         function getLabelCounters($link, $descriptions = false) {
1462
1463                 $ret_arr = array();
1464
1465                 $owner_uid = $_SESSION["uid"];
1466
1467                 $result = db_query($link, "SELECT id,caption,COUNT(unread) AS unread
1468                         FROM ttrss_labels2 LEFT JOIN ttrss_user_labels2 ON
1469                                 (ttrss_labels2.id = label_id)
1470                                         LEFT JOIN ttrss_user_entries ON (ref_id = article_id AND unread = true)
1471                                 WHERE ttrss_labels2.owner_uid = $owner_uid GROUP BY ttrss_labels2.id,
1472                                         ttrss_labels2.caption");
1473
1474                 while ($line = db_fetch_assoc($result)) {
1475
1476                         $id = label_to_feed_id($line["id"]);
1477
1478                         $label_name = $line["caption"];
1479                         $count = $line["unread"];
1480
1481                         $cv = array("id" => $id,
1482                                 "counter" => (int) $count);
1483
1484                         if ($descriptions)
1485                                 $cv["description"] = $label_name;
1486
1487 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1488 //                              $cv["xmsg"] = getFeedArticles($link, $id)." ".__("total");
1489
1490                         array_push($ret_arr, $cv);
1491                 }
1492
1493                 return $ret_arr;
1494         }
1495
1496         function getFeedCounters($link, $active_feed = false) {
1497
1498                 $ret_arr = array();
1499
1500                 $query = "SELECT ttrss_feeds.id,
1501                                 ttrss_feeds.title,
1502                                 ".SUBSTRING_FOR_DATE."(ttrss_feeds.last_updated,1,19) AS last_updated,
1503                                 last_error, value AS count
1504                         FROM ttrss_feeds, ttrss_counters_cache
1505                         WHERE ttrss_feeds.owner_uid = ".$_SESSION["uid"]."
1506                                 AND ttrss_counters_cache.owner_uid = ttrss_feeds.owner_uid
1507                                 AND ttrss_counters_cache.feed_id = id";
1508
1509                 $result = db_query($link, $query);
1510                 $fctrs_modified = false;
1511
1512                 while ($line = db_fetch_assoc($result)) {
1513
1514                         $id = $line["id"];
1515                         $count = $line["count"];
1516                         $last_error = htmlspecialchars($line["last_error"]);
1517
1518                         $last_updated = make_local_datetime($link, $line['last_updated'], false);
1519
1520                         $has_img = feed_has_icon($id);
1521
1522                         if (date('Y') - date('Y', strtotime($line['last_updated'])) > 2)
1523                                 $last_updated = '';
1524
1525                         $cv = array("id" => $id,
1526                                 "updated" => $last_updated,
1527                                 "counter" => (int) $count,
1528                                 "has_img" => (int) $has_img);
1529
1530                         if ($last_error)
1531                                 $cv["error"] = $last_error;
1532
1533 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1534 //                              $cv["xmsg"] = getFeedArticles($link, $id)." ".__("total");
1535
1536                         if ($active_feed && $id == $active_feed)
1537                                 $cv["title"] = truncate_string($line["title"], 30);
1538
1539                         array_push($ret_arr, $cv);
1540
1541                 }
1542
1543                 return $ret_arr;
1544         }
1545
1546         function get_pgsql_version($link) {
1547                 $result = db_query($link, "SELECT version() AS version");
1548                 $version = explode(" ", db_fetch_result($result, 0, "version"));
1549                 return $version[1];
1550         }
1551
1552         /**
1553          * @return array (code => Status code, message => error message if available)
1554          *
1555          *                 0 - OK, Feed already exists
1556          *                 1 - OK, Feed added
1557          *                 2 - Invalid URL
1558          *                 3 - URL content is HTML, no feeds available
1559          *                 4 - URL content is HTML which contains multiple feeds.
1560          *                     Here you should call extractfeedurls in rpc-backend
1561          *                     to get all possible feeds.
1562          *                 5 - Couldn't download the URL content.
1563          */
1564         function subscribe_to_feed($link, $url, $cat_id = 0,
1565                         $auth_login = '', $auth_pass = '') {
1566
1567                 global $fetch_last_error;
1568
1569                 require_once "include/rssfuncs.php";
1570
1571                 $url = fix_url($url);
1572
1573                 if (!$url || !validate_feed_url($url)) return array("code" => 2);
1574
1575                 $contents = @fetch_file_contents($url, false, $auth_login, $auth_pass);
1576
1577                 if (!$contents) {
1578                         return array("code" => 5, "message" => $fetch_last_error);
1579                 }
1580
1581                 if (is_html($contents)) {
1582                         $feedUrls = get_feeds_from_html($url, $contents);
1583
1584                         if (count($feedUrls) == 0) {
1585                                 return array("code" => 3);
1586                         } else if (count($feedUrls) > 1) {
1587                                 return array("code" => 4, "feeds" => $feedUrls);
1588                         }
1589                         //use feed url as new URL
1590                         $url = key($feedUrls);
1591                 }
1592
1593                 if ($cat_id == "0" || !$cat_id) {
1594                         $cat_qpart = "NULL";
1595                 } else {
1596                         $cat_qpart = "'$cat_id'";
1597                 }
1598
1599                 $result = db_query($link,
1600                         "SELECT id FROM ttrss_feeds
1601                         WHERE feed_url = '$url' AND owner_uid = ".$_SESSION["uid"]);
1602
1603                 if (db_num_rows($result) == 0) {
1604                         $result = db_query($link,
1605                                 "INSERT INTO ttrss_feeds
1606                                         (owner_uid,feed_url,title,cat_id, auth_login,auth_pass,update_method)
1607                                 VALUES ('".$_SESSION["uid"]."', '$url',
1608                                 '[Unknown]', $cat_qpart, '$auth_login', '$auth_pass', 0)");
1609
1610                         $result = db_query($link,
1611                                 "SELECT id FROM ttrss_feeds WHERE feed_url = '$url'
1612                                         AND owner_uid = " . $_SESSION["uid"]);
1613
1614                         $feed_id = db_fetch_result($result, 0, "id");
1615
1616                         if ($feed_id) {
1617                                 update_rss_feed($link, $feed_id, true);
1618                         }
1619
1620                         return array("code" => 1);
1621                 } else {
1622                         return array("code" => 0);
1623                 }
1624         }
1625
1626         function print_feed_select($link, $id, $default_id = "",
1627                 $attributes = "", $include_all_feeds = true,
1628                 $root_id = false, $nest_level = 0) {
1629
1630                 if (!$root_id) {
1631                         print "<select id=\"$id\" name=\"$id\" $attributes>";
1632                         if ($include_all_feeds) {
1633                                 $is_selected = ("0" == $default_id) ? "selected=\"1\"" : "";
1634                                 print "<option $is_selected value=\"0\">".__('All feeds')."</option>";
1635                         }
1636                 }
1637
1638                 if (get_pref($link, 'ENABLE_FEED_CATS')) {
1639
1640                         if ($root_id)
1641                                 $parent_qpart = "parent_cat = '$root_id'";
1642                         else
1643                                 $parent_qpart = "parent_cat IS NULL";
1644
1645                         $result = db_query($link, "SELECT id,title,
1646                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1647                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1648                                 FROM ttrss_feed_categories
1649                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1650
1651                         while ($line = db_fetch_assoc($result)) {
1652
1653                                 for ($i = 0; $i < $nest_level; $i++)
1654                                         $line["title"] = " - " . $line["title"];
1655
1656                                 $is_selected = ("CAT:".$line["id"] == $default_id) ? "selected=\"1\"" : "";
1657
1658                                 printf("<option $is_selected value='CAT:%d'>%s</option>",
1659                                         $line["id"], htmlspecialchars($line["title"]));
1660
1661                                 if ($line["num_children"] > 0)
1662                                         print_feed_select($link, $id, $default_id, $attributes,
1663                                                 $include_all_feeds, $line["id"], $nest_level+1);
1664
1665                                 $feed_result = db_query($link, "SELECT id,title FROM ttrss_feeds
1666                                         WHERE cat_id = '".$line["id"]."' AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1667
1668                                 while ($fline = db_fetch_assoc($feed_result)) {
1669                                         $is_selected = ($fline["id"] == $default_id) ? "selected=\"1\"" : "";
1670
1671                                         $fline["title"] = " + " . $fline["title"];
1672
1673                                         for ($i = 0; $i < $nest_level; $i++)
1674                                                 $fline["title"] = " - " . $fline["title"];
1675
1676                                         printf("<option $is_selected value='%d'>%s</option>",
1677                                                 $fline["id"], htmlspecialchars($fline["title"]));
1678                                 }
1679                         }
1680
1681                         if (!$root_id) {
1682                                 $is_selected = ($default_id == "CAT:0") ? "selected=\"1\"" : "";
1683
1684                                 printf("<option $is_selected value='CAT:0'>%s</option>",
1685                                         __("Uncategorized"));
1686
1687                                 $feed_result = db_query($link, "SELECT id,title FROM ttrss_feeds
1688                                         WHERE cat_id IS NULL AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1689
1690                                 while ($fline = db_fetch_assoc($feed_result)) {
1691                                         $is_selected = ($fline["id"] == $default_id && !$default_is_cat) ? "selected=\"1\"" : "";
1692
1693                                         $fline["title"] = " + " . $fline["title"];
1694
1695                                         for ($i = 0; $i < $nest_level; $i++)
1696                                                 $fline["title"] = " - " . $fline["title"];
1697
1698                                         printf("<option $is_selected value='%d'>%s</option>",
1699                                                 $fline["id"], htmlspecialchars($fline["title"]));
1700                                 }
1701                         }
1702
1703                 } else {
1704                         $result = db_query($link, "SELECT id,title FROM ttrss_feeds
1705                                 WHERE owner_uid = ".$_SESSION["uid"]." ORDER BY title");
1706
1707                         while ($line = db_fetch_assoc($result)) {
1708
1709                                 $is_selected = ($line["id"] == $default_id) ? "selected=\"1\"" : "";
1710
1711                                 printf("<option $is_selected value='%d'>%s</option>",
1712                                         $line["id"], htmlspecialchars($line["title"]));
1713                         }
1714                 }
1715
1716                 if (!$root_id) {
1717                         print "</select>";
1718                 }
1719         }
1720
1721         function print_feed_cat_select($link, $id, $default_id,
1722                 $attributes, $include_all_cats = true, $root_id = false, $nest_level = 0) {
1723
1724                         if (!$root_id) {
1725                                         print "<select id=\"$id\" name=\"$id\" default=\"$default_id\" onchange=\"catSelectOnChange(this)\" $attributes>";
1726                         }
1727
1728                         if ($root_id)
1729                                 $parent_qpart = "parent_cat = '$root_id'";
1730                         else
1731                                 $parent_qpart = "parent_cat IS NULL";
1732
1733                         $result = db_query($link, "SELECT id,title,
1734                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1735                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1736                                 FROM ttrss_feed_categories
1737                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1738
1739                         while ($line = db_fetch_assoc($result)) {
1740                                 if ($line["id"] == $default_id) {
1741                                         $is_selected = "selected=\"1\"";
1742                                 } else {
1743                                         $is_selected = "";
1744                                 }
1745
1746                                 for ($i = 0; $i < $nest_level; $i++)
1747                                         $line["title"] = " - " . $line["title"];
1748
1749                                 if ($line["title"])
1750                                         printf("<option $is_selected value='%d'>%s</option>",
1751                                                 $line["id"], htmlspecialchars($line["title"]));
1752
1753                                 if ($line["num_children"] > 0)
1754                                         print_feed_cat_select($link, $id, $default_id, $attributes,
1755                                                 $include_all_cats, $line["id"], $nest_level+1);
1756                         }
1757
1758                         if (!$root_id) {
1759                                 if ($include_all_cats) {
1760                                         if (db_num_rows($result) > 0) {
1761                                                 print "<option disabled=\"1\">--------</option>";
1762                                         }
1763
1764                                         if ($default_id == 0) {
1765                                                 $is_selected = "selected=\"1\"";
1766                                         } else {
1767                                                 $is_selected = "";
1768                                         }
1769
1770                                         print "<option $is_selected value=\"0\">".__('Uncategorized')."</option>";
1771                                 }
1772                                 print "</select>";
1773                         }
1774                 }
1775
1776         function checkbox_to_sql_bool($val) {
1777                 return ($val == "on") ? "true" : "false";
1778         }
1779
1780         function getFeedCatTitle($link, $id) {
1781                 if ($id == -1) {
1782                         return __("Special");
1783                 } else if ($id < LABEL_BASE_INDEX) {
1784                         return __("Labels");
1785                 } else if ($id > 0) {
1786                         $result = db_query($link, "SELECT ttrss_feed_categories.title
1787                                 FROM ttrss_feeds, ttrss_feed_categories WHERE ttrss_feeds.id = '$id' AND
1788                                         cat_id = ttrss_feed_categories.id");
1789                         if (db_num_rows($result) == 1) {
1790                                 return db_fetch_result($result, 0, "title");
1791                         } else {
1792                                 return __("Uncategorized");
1793                         }
1794                 } else {
1795                         return "getFeedCatTitle($id) failed";
1796                 }
1797
1798         }
1799
1800         function getFeedIcon($id) {
1801                 switch ($id) {
1802                 case 0:
1803                         return "images/archive.png";
1804                         break;
1805                 case -1:
1806                         return "images/mark_set.svg";
1807                         break;
1808                 case -2:
1809                         return "images/pub_set.svg";
1810                         break;
1811                 case -3:
1812                         return "images/fresh.png";
1813                         break;
1814                 case -4:
1815                         return "images/tag.png";
1816                         break;
1817                 case -6:
1818                         return "images/recently_read.png";
1819                         break;
1820                 default:
1821                         if ($id < LABEL_BASE_INDEX) {
1822                                 return "images/label.png";
1823                         } else {
1824                                 if (file_exists(ICONS_DIR . "/$id.ico"))
1825                                         return ICONS_URL . "/$id.ico";
1826                         }
1827                         break;
1828                 }
1829         }
1830
1831         function getFeedTitle($link, $id, $cat = false) {
1832                 if ($cat) {
1833                         return getCategoryTitle($link, $id);
1834                 } else if ($id == -1) {
1835                         return __("Starred articles");
1836                 } else if ($id == -2) {
1837                         return __("Published articles");
1838                 } else if ($id == -3) {
1839                         return __("Fresh articles");
1840                 } else if ($id == -4) {
1841                         return __("All articles");
1842                 } else if ($id === 0 || $id === "0") {
1843                         return __("Archived articles");
1844                 } else if ($id == -6) {
1845                         return __("Recently read");
1846                 } else if ($id < LABEL_BASE_INDEX) {
1847                         $label_id = feed_to_label_id($id);
1848                         $result = db_query($link, "SELECT caption FROM ttrss_labels2 WHERE id = '$label_id'");
1849                         if (db_num_rows($result) == 1) {
1850                                 return db_fetch_result($result, 0, "caption");
1851                         } else {
1852                                 return "Unknown label ($label_id)";
1853                         }
1854
1855                 } else if (is_numeric($id) && $id > 0) {
1856                         $result = db_query($link, "SELECT title FROM ttrss_feeds WHERE id = '$id'");
1857                         if (db_num_rows($result) == 1) {
1858                                 return db_fetch_result($result, 0, "title");
1859                         } else {
1860                                 return "Unknown feed ($id)";
1861                         }
1862                 } else {
1863                         return $id;
1864                 }
1865         }
1866
1867         function make_init_params($link) {
1868                 $params = array();
1869
1870                 foreach (array("ON_CATCHUP_SHOW_NEXT_FEED", "HIDE_READ_FEEDS",
1871                         "ENABLE_FEED_CATS", "FEEDS_SORT_BY_UNREAD", "CONFIRM_FEED_CATCHUP",
1872                         "CDM_AUTO_CATCHUP", "FRESH_ARTICLE_MAX_AGE",
1873                         "HIDE_READ_SHOWS_SPECIAL", "COMBINED_DISPLAY_MODE") as $param) {
1874
1875                                  $params[strtolower($param)] = (int) get_pref($link, $param);
1876                  }
1877
1878                 $params["icons_url"] = ICONS_URL;
1879                 $params["cookie_lifetime"] = SESSION_COOKIE_LIFETIME;
1880                 $params["default_view_mode"] = get_pref($link, "_DEFAULT_VIEW_MODE");
1881                 $params["default_view_limit"] = (int) get_pref($link, "_DEFAULT_VIEW_LIMIT");
1882                 $params["default_view_order_by"] = get_pref($link, "_DEFAULT_VIEW_ORDER_BY");
1883                 $params["bw_limit"] = (int) $_SESSION["bw_limit"];
1884                 $params["label_base_index"] = (int) LABEL_BASE_INDEX;
1885
1886                 $result = db_query($link, "SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
1887                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1888
1889                 $max_feed_id = db_fetch_result($result, 0, "mid");
1890                 $num_feeds = db_fetch_result($result, 0, "nf");
1891
1892                 $params["max_feed_id"] = (int) $max_feed_id;
1893                 $params["num_feeds"] = (int) $num_feeds;
1894
1895                 $params["collapsed_feedlist"] = (int) get_pref($link, "_COLLAPSED_FEEDLIST");
1896                 $params["hotkeys"] = get_hotkeys_map($link);
1897
1898                 $params["csrf_token"] = $_SESSION["csrf_token"];
1899                 $params["widescreen"] = (int) $_COOKIE["ttrss_widescreen"];
1900
1901                 $params['simple_update'] = defined('SIMPLE_UPDATE_MODE') && SIMPLE_UPDATE_MODE;
1902
1903                 return $params;
1904         }
1905
1906         function get_hotkeys_info($link) {
1907                 $hotkeys = array(
1908                         __("Navigation") => array(
1909                                 "next_feed" => __("Open next feed"),
1910                                 "prev_feed" => __("Open previous feed"),
1911                                 "next_article" => __("Open next article"),
1912                                 "prev_article" => __("Open previous article"),
1913                                 "next_article_noscroll" => __("Open next article (don't scroll long articles)"),
1914                                 "prev_article_noscroll" => __("Open previous article (don't scroll long articles)"),
1915                                 "search_dialog" => __("Show search dialog")),
1916                         __("Article") => array(
1917                                 "toggle_mark" => __("Toggle starred"),
1918                                 "toggle_publ" => __("Toggle published"),
1919                                 "toggle_unread" => __("Toggle unread"),
1920                                 "edit_tags" => __("Edit tags"),
1921                                 "dismiss_selected" => __("Dismiss selected"),
1922                                 "dismiss_read" => __("Dismiss read"),
1923                                 "open_in_new_window" => __("Open in new window"),
1924                                 "catchup_below" => __("Mark below as read"),
1925                                 "catchup_above" => __("Mark above as read"),
1926                                 "article_scroll_down" => __("Scroll down"),
1927                                 "article_scroll_up" => __("Scroll up"),
1928                                 "select_article_cursor" => __("Select article under cursor"),
1929                                 "email_article" => __("Email article"),
1930                                 "close_article" => __("Close/collapse article"),
1931                                 "toggle_widescreen" => __("Toggle widescreen mode"),
1932                                 "toggle_embed_original" => __("Toggle embed original")),
1933                         __("Article selection") => array(
1934                                 "select_all" => __("Select all articles"),
1935                                 "select_unread" => __("Select unread"),
1936                                 "select_marked" => __("Select starred"),
1937                                 "select_published" => __("Select published"),
1938                                 "select_invert" => __("Invert selection"),
1939                                 "select_none" => __("Deselect everything")),
1940                         __("Feed") => array(
1941                                 "feed_refresh" => __("Refresh current feed"),
1942                                 "feed_unhide_read" => __("Un/hide read feeds"),
1943                                 "feed_subscribe" => __("Subscribe to feed"),
1944                                 "feed_edit" => __("Edit feed"),
1945                                 "feed_catchup" => __("Mark as read"),
1946                                 "feed_reverse" => __("Reverse headlines"),
1947                                 "feed_debug_update" => __("Debug feed update"),
1948                                 "catchup_all" => __("Mark all feeds as read"),
1949                                 "cat_toggle_collapse" => __("Un/collapse current category"),
1950                                 "toggle_combined_mode" => __("Toggle combined mode"),
1951                                 "toggle_cdm_expanded" => __("Toggle auto expand in combined mode")),
1952                         __("Go to") => array(
1953                                 "goto_all" => __("All articles"),
1954                                 "goto_fresh" => __("Fresh"),
1955                                 "goto_marked" => __("Starred"),
1956                                 "goto_published" => __("Published"),
1957                                 "goto_tagcloud" => __("Tag cloud"),
1958                                 "goto_prefs" => __("Preferences")),
1959                         __("Other") => array(
1960                                 "create_label" => __("Create label"),
1961                                 "create_filter" => __("Create filter"),
1962                                 "collapse_sidebar" => __("Un/collapse sidebar"),
1963                                 "help_dialog" => __("Show help dialog"))
1964                         );
1965
1966                 global $pluginhost;
1967                 foreach ($pluginhost->get_hooks($pluginhost::HOOK_HOTKEY_INFO) as $plugin) {
1968                         $hotkeys = $plugin->hook_hotkey_info($hotkeys);
1969                 }
1970
1971                 return $hotkeys;
1972         }
1973
1974         function get_hotkeys_map($link) {
1975                 $hotkeys = array(
1976 //                      "navigation" => array(
1977                                 "k" => "next_feed",
1978                                 "j" => "prev_feed",
1979                                 "n" => "next_article",
1980                                 "p" => "prev_article",
1981                                 "(38)|up" => "prev_article",
1982                                 "(40)|down" => "next_article",
1983 //                              "^(38)|Ctrl-up" => "prev_article_noscroll",
1984 //                              "^(40)|Ctrl-down" => "next_article_noscroll",
1985                                 "(191)|/" => "search_dialog",
1986 //                      "article" => array(
1987                                 "s" => "toggle_mark",
1988                                 "*s" => "toggle_publ",
1989                                 "u" => "toggle_unread",
1990                                 "*t" => "edit_tags",
1991                                 "*d" => "dismiss_selected",
1992                                 "*x" => "dismiss_read",
1993                                 "o" => "open_in_new_window",
1994                                 "c p" => "catchup_below",
1995                                 "c n" => "catchup_above",
1996                                 "*n" => "article_scroll_down",
1997                                 "*p" => "article_scroll_up",
1998                                 "*(38)|Shift+up" => "article_scroll_up",
1999                                 "*(40)|Shift+down" => "article_scroll_down",
2000                                 "a *w" => "toggle_widescreen",
2001                                 "a e" => "toggle_embed_original",
2002                                 "e" => "email_article",
2003                                 "a q" => "close_article",
2004 //                      "article_selection" => array(
2005                                 "a a" => "select_all",
2006                                 "a u" => "select_unread",
2007                                 "a *u" => "select_marked",
2008                                 "a p" => "select_published",
2009                                 "a i" => "select_invert",
2010                                 "a n" => "select_none",
2011 //                      "feed" => array(
2012                                 "f r" => "feed_refresh",
2013                                 "f a" => "feed_unhide_read",
2014                                 "f s" => "feed_subscribe",
2015                                 "f e" => "feed_edit",
2016                                 "f q" => "feed_catchup",
2017                                 "f x" => "feed_reverse",
2018                                 "f *d" => "feed_debug_update",
2019                                 "f *c" => "toggle_combined_mode",
2020                                 "f c" => "toggle_cdm_expanded",
2021                                 "*q" => "catchup_all",
2022                                 "x" => "cat_toggle_collapse",
2023 //                      "goto" => array(
2024                                 "g a" => "goto_all",
2025                                 "g f" => "goto_fresh",
2026                                 "g s" => "goto_marked",
2027                                 "g p" => "goto_published",
2028                                 "g t" => "goto_tagcloud",
2029                                 "g *p" => "goto_prefs",
2030 //                      "other" => array(
2031                                 "(9)|Tab" => "select_article_cursor", // tab
2032                                 "c l" => "create_label",
2033                                 "c f" => "create_filter",
2034                                 "c s" => "collapse_sidebar",
2035                                 "^(191)|Ctrl+/" => "help_dialog",
2036                         );
2037
2038                 if (get_pref($link, 'COMBINED_DISPLAY_MODE')) {
2039                         $hotkeys["^(38)|Ctrl-up"] = "prev_article_noscroll";
2040                         $hotkeys["^(40)|Ctrl-down"] = "next_article_noscroll";
2041                 }
2042
2043                 global $pluginhost;
2044                 foreach ($pluginhost->get_hooks($pluginhost::HOOK_HOTKEY_MAP) as $plugin) {
2045                         $hotkeys = $plugin->hook_hotkey_map($hotkeys);
2046                 }
2047
2048                 $prefixes = array();
2049
2050                 foreach (array_keys($hotkeys) as $hotkey) {
2051                         $pair = explode(" ", $hotkey, 2);
2052
2053                         if (count($pair) > 1 && !in_array($pair[0], $prefixes)) {
2054                                 array_push($prefixes, $pair[0]);
2055                         }
2056                 }
2057
2058                 return array($prefixes, $hotkeys);
2059         }
2060
2061         function make_runtime_info($link) {
2062                 $data = array();
2063
2064                 $result = db_query($link, "SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
2065                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
2066
2067                 $max_feed_id = db_fetch_result($result, 0, "mid");
2068                 $num_feeds = db_fetch_result($result, 0, "nf");
2069
2070                 $data["max_feed_id"] = (int) $max_feed_id;
2071                 $data["num_feeds"] = (int) $num_feeds;
2072
2073                 $data['last_article_id'] = getLastArticleId($link);
2074                 $data['cdm_expanded'] = get_pref($link, 'CDM_EXPANDED');
2075
2076                 $data['dep_ts'] = calculate_dep_timestamp();
2077                 $data['reload_on_ts_change'] = !defined('_NO_RELOAD_ON_TS_CHANGE');
2078
2079                 if (file_exists(LOCK_DIRECTORY . "/update_daemon.lock")) {
2080
2081                         $data['daemon_is_running'] = (int) file_is_locked("update_daemon.lock");
2082
2083                         if (time() - $_SESSION["daemon_stamp_check"] > 30) {
2084
2085                                 $stamp = (int) @file_get_contents(LOCK_DIRECTORY . "/update_daemon.stamp");
2086
2087                                 if ($stamp) {
2088                                         $stamp_delta = time() - $stamp;
2089
2090                                         if ($stamp_delta > 1800) {
2091                                                 $stamp_check = 0;
2092                                         } else {
2093                                                 $stamp_check = 1;
2094                                                 $_SESSION["daemon_stamp_check"] = time();
2095                                         }
2096
2097                                         $data['daemon_stamp_ok'] = $stamp_check;
2098
2099                                         $stamp_fmt = date("Y.m.d, G:i", $stamp);
2100
2101                                         $data['daemon_stamp'] = $stamp_fmt;
2102                                 }
2103                         }
2104                 }
2105
2106                 if ($_SESSION["last_version_check"] + 86400 + rand(-1000, 1000) < time()) {
2107                                 $new_version_details = @check_for_update($link);
2108
2109                                 $data['new_version_available'] = (int) ($new_version_details != false);
2110
2111                                 $_SESSION["last_version_check"] = time();
2112                                 $_SESSION["version_data"] = $new_version_details;
2113                 }
2114
2115                 return $data;
2116         }
2117
2118         function search_to_sql($link, $search) {
2119
2120                 $search_query_part = "";
2121
2122                 $keywords = explode(" ", $search);
2123                 $query_keywords = array();
2124
2125                 foreach ($keywords as $k) {
2126                         if (strpos($k, "-") === 0) {
2127                                 $k = substr($k, 1);
2128                                 $not = "NOT";
2129                         } else {
2130                                 $not = "";
2131                         }
2132
2133                         $commandpair = explode(":", mb_strtolower($k), 2);
2134
2135                         if ($commandpair[0] == "note" && $commandpair[1]) {
2136
2137                                 if ($commandpair[1] == "true")
2138                                         array_push($query_keywords, "($not (note IS NOT NULL AND note != ''))");
2139                                 else if ($commandpair[1] == "false")
2140                                         array_push($query_keywords, "($not (note IS NULL OR note = ''))");
2141                                 else
2142                                         array_push($query_keywords, "($not (note LIKE '%".
2143                                                 db_escape_string($link, $commandpair[1])."%'))");
2144
2145                         } else if ($commandpair[0] == "star" && $commandpair[1]) {
2146
2147                                 if ($commandpair[1] == "true")
2148                                         array_push($query_keywords, "($not (marked = true))");
2149                                 else
2150                                         array_push($query_keywords, "($not (marked = false))");
2151
2152                         } else if ($commandpair[0] == "pub" && $commandpair[1]) {
2153
2154                                 if ($commandpair[1] == "true")
2155                                         array_push($query_keywords, "($not (published = true))");
2156                                 else
2157                                         array_push($query_keywords, "($not (published = false))");
2158
2159                         } else if (strpos($k, "@") === 0) {
2160
2161                                 $user_tz_string = get_pref($link, 'USER_TIMEZONE', $_SESSION['uid']);
2162                                 $orig_ts = strtotime(substr($k, 1));
2163                                 $k = date("Y-m-d", convert_timestamp($orig_ts, $user_tz_string, 'UTC'));
2164
2165                                 //$k = date("Y-m-d", strtotime(substr($k, 1)));
2166
2167                                 array_push($query_keywords, "(".SUBSTRING_FOR_DATE."(updated,1,LENGTH('$k')) $not = '$k')");
2168                         } else {
2169                                 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2170                                                 OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2171                         }
2172                 }
2173
2174                 $search_query_part = implode("AND", $query_keywords);
2175
2176                 return $search_query_part;
2177         }
2178
2179         function getParentCategories($link, $cat, $owner_uid) {
2180                 $rv = array();
2181
2182                 $result = db_query($link, "SELECT parent_cat FROM ttrss_feed_categories
2183                         WHERE id = '$cat' AND parent_cat IS NOT NULL AND owner_uid = $owner_uid");
2184
2185                 while ($line = db_fetch_assoc($result)) {
2186                         array_push($rv, $line["parent_cat"]);
2187                         $rv = array_merge($rv, getParentCategories($link, $line["parent_cat"], $owner_uid));
2188                 }
2189
2190                 return $rv;
2191         }
2192
2193         function getChildCategories($link, $cat, $owner_uid) {
2194                 $rv = array();
2195
2196                 $result = db_query($link, "SELECT id FROM ttrss_feed_categories
2197                         WHERE parent_cat = '$cat' AND owner_uid = $owner_uid");
2198
2199                 while ($line = db_fetch_assoc($result)) {
2200                         array_push($rv, $line["id"]);
2201                         $rv = array_merge($rv, getChildCategories($link, $line["id"], $owner_uid));
2202                 }
2203
2204                 return $rv;
2205         }
2206
2207         function queryFeedHeadlines($link, $feed, $limit, $view_mode, $cat_view, $search, $search_mode, $override_order = false, $offset = 0, $owner_uid = 0, $filter = false, $since_id = 0, $include_children = false, $ignore_vfeed_group = false) {
2208
2209                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2210
2211                 $ext_tables_part = "";
2212
2213                         if ($search) {
2214
2215                                 if (SPHINX_ENABLED) {
2216                                         $ids = join(",", @sphinx_search($search, 0, 500));
2217
2218                                         if ($ids)
2219                                                 $search_query_part = "ref_id IN ($ids) AND ";
2220                                         else
2221                                                 $search_query_part = "ref_id = -1 AND ";
2222
2223                                 } else {
2224                                         $search_query_part = search_to_sql($link, $search);
2225                                         $search_query_part .= " AND ";
2226                                 }
2227
2228                         } else {
2229                                 $search_query_part = "";
2230                         }
2231
2232                         if ($filter) {
2233
2234                                 if (DB_TYPE == "pgsql") {
2235                                         $query_strategy_part .= " AND updated > NOW() - INTERVAL '14 days' ";
2236                                 } else {
2237                                         $query_strategy_part .= " AND updated > DATE_SUB(NOW(), INTERVAL 14 DAY) ";
2238                                 }
2239
2240                                 $override_order = "updated DESC";
2241
2242                                 $filter_query_part = filter_to_sql($link, $filter, $owner_uid);
2243
2244                                 // Try to check if SQL regexp implementation chokes on a valid regexp
2245                                 $result = db_query($link, "SELECT true AS true_val FROM ttrss_entries,
2246                                         ttrss_user_entries, ttrss_feeds, ttrss_feed_categories
2247                                         WHERE $filter_query_part LIMIT 1", false);
2248
2249                                 if ($result) {
2250                                         $test = db_fetch_result($result, 0, "true_val");
2251
2252                                         if (!$test) {
2253                                                 $filter_query_part = "false AND";
2254                                         } else {
2255                                                 $filter_query_part .= " AND";
2256                                         }
2257                                 } else {
2258                                         $filter_query_part = "false AND";
2259                                 }
2260
2261                         } else {
2262                                 $filter_query_part = "";
2263                         }
2264
2265                         if ($since_id) {
2266                                 $since_id_part = "ttrss_entries.id > $since_id AND ";
2267                         } else {
2268                                 $since_id_part = "";
2269                         }
2270
2271                         $view_query_part = "";
2272
2273                         if ($view_mode == "adaptive") {
2274                                 if ($search) {
2275                                         $view_query_part = " ";
2276                                 } else if ($feed != -1) {
2277
2278                                         $unread = getFeedUnread($link, $feed, $cat_view);
2279
2280                                         if ($cat_view && $feed > 0 && $include_children)
2281                                                 $unread += getCategoryChildrenUnread($link, $feed);
2282
2283                                         if ($unread > 0)
2284                                 $view_query_part = " unread = true AND ";
2285
2286                                 }
2287                         }
2288
2289                         if ($view_mode == "marked") {
2290                                 $view_query_part = " marked = true AND ";
2291                         }
2292
2293                         if ($view_mode == "has_note") {
2294                                 $view_query_part = " (note IS NOT NULL AND note != '') AND ";
2295                         }
2296
2297                         if ($view_mode == "published") {
2298                                 $view_query_part = " published = true AND ";
2299                         }
2300
2301                         if ($view_mode == "unread" && $feed != -6) {
2302                                 $view_query_part = " unread = true AND ";
2303                         }
2304
2305                         if ($limit > 0) {
2306                                 $limit_query_part = "LIMIT " . $limit;
2307                         }
2308
2309                         $allow_archived = false;
2310
2311                         $vfeed_query_part = "";
2312
2313                         // override query strategy and enable feed display when searching globally
2314                         if ($search && $search_mode == "all_feeds") {
2315                                 $query_strategy_part = "true";
2316                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2317                         /* tags */
2318                         } else if (!is_numeric($feed)) {
2319                                 $query_strategy_part = "true";
2320                                 $vfeed_query_part = "(SELECT title FROM ttrss_feeds WHERE
2321                                         id = feed_id) as feed_title,";
2322                         } else if ($search && $search_mode == "this_cat") {
2323                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2324
2325                                 if ($feed > 0) {
2326                                         if ($include_children) {
2327                                                 $subcats = getChildCategories($link, $feed, $owner_uid);
2328                                                 array_push($subcats, $feed);
2329                                                 $cats_qpart = join(",", $subcats);
2330                                         } else {
2331                                                 $cats_qpart = $feed;
2332                                         }
2333
2334                                         $query_strategy_part = "ttrss_feeds.cat_id IN ($cats_qpart)";
2335
2336                                 } else {
2337                                         $query_strategy_part = "ttrss_feeds.cat_id IS NULL";
2338                                 }
2339
2340                         } else if ($feed > 0) {
2341
2342                                 if ($cat_view) {
2343
2344                                         if ($feed > 0) {
2345                                                 if ($include_children) {
2346                                                         # sub-cats
2347                                                         $subcats = getChildCategories($link, $feed, $owner_uid);
2348
2349                                                         array_push($subcats, $feed);
2350                                                         $query_strategy_part = "cat_id IN (".
2351                                                                         implode(",", $subcats).")";
2352
2353                                                 } else {
2354                                                         $query_strategy_part = "cat_id = '$feed'";
2355                                                 }
2356
2357                                         } else {
2358                                                 $query_strategy_part = "cat_id IS NULL";
2359                                         }
2360
2361                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2362
2363                                 } else {
2364                                         $query_strategy_part = "feed_id = '$feed'";
2365                                 }
2366                         } else if ($feed == 0 && !$cat_view) { // archive virtual feed
2367                                 $query_strategy_part = "feed_id IS NULL";
2368                                 $allow_archived = true;
2369                         } else if ($feed == 0 && $cat_view) { // uncategorized
2370                                 $query_strategy_part = "cat_id IS NULL AND feed_id IS NOT NULL";
2371                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2372                         } else if ($feed == -1) { // starred virtual feed
2373                                 $query_strategy_part = "marked = true";
2374                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2375                                 $allow_archived = true;
2376
2377                                 if (!$override_order) {
2378                                         $override_order = "last_marked DESC, date_entered DESC, updated DESC";
2379                                 }
2380
2381                         } else if ($feed == -2) { // published virtual feed OR labels category
2382
2383                                 if (!$cat_view) {
2384                                         $query_strategy_part = "published = true";
2385                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2386                                         $allow_archived = true;
2387
2388                                         if (!$override_order) {
2389                                                 $override_order = "last_published DESC, date_entered DESC, updated DESC";
2390                                         }
2391
2392                                 } else {
2393                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2394
2395                                         $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2396
2397                                         $query_strategy_part = "ttrss_labels2.id = ttrss_user_labels2.label_id AND
2398                                                 ttrss_user_labels2.article_id = ref_id";
2399
2400                                 }
2401                         } else if ($feed == -6) { // recently read
2402                                 $query_strategy_part = "unread = false AND last_read IS NOT NULL";
2403                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2404                                 $allow_archived = true;
2405
2406                                 if (!$override_order) $override_order = "last_read DESC";
2407                         } else if ($feed == -3) { // fresh virtual feed
2408                                 $query_strategy_part = "unread = true AND score >= 0";
2409
2410                                 $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE", $owner_uid);
2411
2412                                 if (DB_TYPE == "pgsql") {
2413                                         $query_strategy_part .= " AND date_entered > NOW() - INTERVAL '$intl hour' ";
2414                                 } else {
2415                                         $query_strategy_part .= " AND date_entered > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
2416                                 }
2417
2418                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2419                         } else if ($feed == -4) { // all articles virtual feed
2420                                 $allow_archived = true;
2421                                 $query_strategy_part = "true";
2422                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2423                         } else if ($feed <= LABEL_BASE_INDEX) { // labels
2424                                 $label_id = feed_to_label_id($feed);
2425
2426                                 $query_strategy_part = "label_id = '$label_id' AND
2427                                         ttrss_labels2.id = ttrss_user_labels2.label_id AND
2428                                         ttrss_user_labels2.article_id = ref_id";
2429
2430                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2431                                 $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2432                                 $allow_archived = true;
2433
2434                         } else {
2435                                 $query_strategy_part = "true";
2436                         }
2437
2438                         $order_by = "score DESC, date_entered DESC, updated DESC";
2439
2440                         if ($view_mode == "unread_first") {
2441                                 $order_by = "unread DESC, $order_by";
2442                         }
2443
2444                         if ($override_order) {
2445                                 $order_by = $override_order;
2446                         }
2447
2448                         $feed_title = "";
2449
2450                         if ($search) {
2451                                 $feed_title = T_sprintf("Search results: %s", $search);
2452                         } else {
2453                                 if ($cat_view) {
2454                                         $feed_title = getCategoryTitle($link, $feed);
2455                                 } else {
2456                                         if (is_numeric($feed) && $feed > 0) {
2457                                                 $result = db_query($link, "SELECT title,site_url,last_error
2458                                                         FROM ttrss_feeds WHERE id = '$feed' AND owner_uid = $owner_uid");
2459
2460                                                 $feed_title = db_fetch_result($result, 0, "title");
2461                                                 $feed_site_url = db_fetch_result($result, 0, "site_url");
2462                                                 $last_error = db_fetch_result($result, 0, "last_error");
2463                                         } else {
2464                                                 $feed_title = getFeedTitle($link, $feed);
2465                                         }
2466                                 }
2467                         }
2468
2469                         $content_query_part = "content as content_preview, cached_content, ";
2470
2471                         if (is_numeric($feed)) {
2472
2473                                 if ($feed >= 0) {
2474                                         $feed_kind = "Feeds";
2475                                 } else {
2476                                         $feed_kind = "Labels";
2477                                 }
2478
2479                                 if ($limit_query_part) {
2480                                         $offset_query_part = "OFFSET $offset";
2481                                 }
2482
2483                                 // proper override_order applied above
2484                                 if ($vfeed_query_part && !$ignore_vfeed_group && get_pref($link, 'VFEED_GROUP_BY_FEED', $owner_uid)) {
2485                                         if (!$override_order) {
2486                                                 $order_by = "ttrss_feeds.title, $order_by";
2487                                         } else {
2488                                                 $order_by = "ttrss_feeds.title, $override_order";
2489                                         }
2490                                 }
2491
2492                                 if (!$allow_archived) {
2493                                         $from_qpart = "ttrss_entries,ttrss_user_entries,ttrss_feeds$ext_tables_part";
2494                                         $feed_check_qpart = "ttrss_user_entries.feed_id = ttrss_feeds.id AND";
2495
2496                                 } else {
2497                                         $from_qpart = "ttrss_entries$ext_tables_part,ttrss_user_entries
2498                                                 LEFT JOIN ttrss_feeds ON (feed_id = ttrss_feeds.id)";
2499                                 }
2500
2501                                 $query = "SELECT DISTINCT
2502                                                 date_entered,
2503                                                 guid,
2504                                                 ttrss_entries.id,ttrss_entries.title,
2505                                                 updated,
2506                                                 label_cache,
2507                                                 tag_cache,
2508                                                 always_display_enclosures,
2509                                                 site_url,
2510                                                 note,
2511                                                 num_comments,
2512                                                 comments,
2513                                                 int_id,
2514                                                 hide_images,
2515                                                 unread,feed_id,marked,published,link,last_read,orig_feed_id,
2516                                                 last_marked, last_published,
2517                                                 $vfeed_query_part
2518                                                 $content_query_part
2519                                                 author,score
2520                                         FROM
2521                                                 $from_qpart
2522                                         WHERE
2523                                         $feed_check_qpart
2524                                         ttrss_user_entries.ref_id = ttrss_entries.id AND
2525                                         ttrss_user_entries.owner_uid = '$owner_uid' AND
2526                                         $search_query_part
2527                                         $filter_query_part
2528                                         $view_query_part
2529                                         $since_id_part
2530                                         $query_strategy_part ORDER BY $order_by
2531                                         $limit_query_part $offset_query_part";
2532
2533                                 if ($_REQUEST["debug"]) print $query;
2534
2535                                 $result = db_query($link, $query);
2536
2537                         } else {
2538                                 // browsing by tag
2539
2540                                 $select_qpart = "SELECT DISTINCT " .
2541                                                                 "date_entered," .
2542                                                                 "guid," .
2543                                                                 "note," .
2544                                                                 "ttrss_entries.id as id," .
2545                                                                 "title," .
2546                                                                 "updated," .
2547                                                                 "unread," .
2548                                                                 "feed_id," .
2549                                                                 "orig_feed_id," .
2550                                                                 "marked," .
2551                                                                 "num_comments, " .
2552                                                                 "comments, " .
2553                                                                 "tag_cache," .
2554                                                                 "label_cache," .
2555                                                                 "link," .
2556                                                                 "last_read," .
2557                                                                 "(SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) AS hide_images," .
2558                                                                 "last_marked, last_published, " .
2559                                                                 $since_id_part .
2560                                                                 $vfeed_query_part .
2561                                                                 $content_query_part .
2562                                                                 "score ";
2563
2564                                 $feed_kind = "Tags";
2565                                 $all_tags = explode(",", $feed);
2566                                 if ($search_mode == 'any') {
2567                                         $tag_sql = "tag_name in (" . implode(", ", array_map("db_quote", $all_tags)) . ")";
2568                                         $from_qpart = " FROM ttrss_entries,ttrss_user_entries,ttrss_tags ";
2569                                         $where_qpart = " WHERE " .
2570                                                                    "ref_id = ttrss_entries.id AND " .
2571                                                                    "ttrss_user_entries.owner_uid = $owner_uid AND " .
2572                                                                    "post_int_id = int_id AND $tag_sql AND " .
2573                                                                    $view_query_part .
2574                                                                    $search_query_part .
2575                                                                    $query_strategy_part . " ORDER BY $order_by " .
2576                                                                    $limit_query_part;
2577
2578                                 } else {
2579                                         $i = 1;
2580                                         $sub_selects = array();
2581                                         $sub_ands = array();
2582                                         foreach ($all_tags as $term) {
2583                                                 array_push($sub_selects, "(SELECT post_int_id from ttrss_tags WHERE tag_name = " . db_quote($term) . " AND owner_uid = $owner_uid) as A$i");
2584                                                 $i++;
2585                                         }
2586                                         if ($i > 2) {
2587                                                 $x = 1;
2588                                                 $y = 2;
2589                                                 do {
2590                                                         array_push($sub_ands, "A$x.post_int_id = A$y.post_int_id");
2591                                                         $x++;
2592                                                         $y++;
2593                                                 } while ($y < $i);
2594                                         }
2595                                         array_push($sub_ands, "A1.post_int_id = ttrss_user_entries.int_id and ttrss_user_entries.owner_uid = $owner_uid");
2596                                         array_push($sub_ands, "ttrss_user_entries.ref_id = ttrss_entries.id");
2597                                         $from_qpart = " FROM " . implode(", ", $sub_selects) . ", ttrss_user_entries, ttrss_entries";
2598                                         $where_qpart = " WHERE " . implode(" AND ", $sub_ands);
2599                                 }
2600                                 //                              error_log("TAG SQL: " . $tag_sql);
2601                                 // $tag_sql = "tag_name = '$feed'";   DEFAULT way
2602
2603                                 //                              error_log("[". $select_qpart . "][" . $from_qpart . "][" .$where_qpart . "]");
2604                                 $result = db_query($link, $select_qpart . $from_qpart . $where_qpart);
2605                         }
2606
2607                         return array($result, $feed_title, $feed_site_url, $last_error);
2608
2609         }
2610
2611         function sanitize($link, $str, $force_remove_images = false, $owner = false, $site_url = false) {
2612                 if (!$owner) $owner = $_SESSION["uid"];
2613
2614                 $res = trim($str); if (!$res) return '';
2615
2616                 if (strpos($res, "href=") === false)
2617                         $res = rewrite_urls($res);
2618
2619                 $charset_hack = '<head>
2620                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
2621                 </head>';
2622
2623                 $res = trim($res); if (!$res) return '';
2624
2625                 libxml_use_internal_errors(true);
2626
2627                 $doc = new DOMDocument();
2628                 $doc->loadHTML($charset_hack . $res);
2629                 $xpath = new DOMXPath($doc);
2630
2631                 $entries = $xpath->query('(//a[@href]|//img[@src])');
2632
2633                 foreach ($entries as $entry) {
2634
2635                         if ($site_url) {
2636
2637                                 if ($entry->hasAttribute('href'))
2638                                         $entry->setAttribute('href',
2639                                                 rewrite_relative_url($site_url, $entry->getAttribute('href')));
2640
2641                                 if ($entry->hasAttribute('src')) {
2642                                         $src = rewrite_relative_url($site_url, $entry->getAttribute('src'));
2643
2644                                         $cached_filename = CACHE_DIR . '/images/' . sha1($src) . '.png';
2645
2646                                         if (file_exists($cached_filename)) {
2647                                                 $src = SELF_URL_PATH . '/image.php?hash=' . sha1($src);
2648                                         }
2649
2650                                         $entry->setAttribute('src', $src);
2651                                 }
2652
2653                                 if ($entry->nodeName == 'img') {
2654                                         if (($owner && get_pref($link, "STRIP_IMAGES", $owner)) ||
2655                                                         $force_remove_images || $_SESSION["bw_limit"]) {
2656
2657                                                 $p = $doc->createElement('p');
2658
2659                                                 $a = $doc->createElement('a');
2660                                                 $a->setAttribute('href', $entry->getAttribute('src'));
2661
2662                                                 $a->appendChild(new DOMText($entry->getAttribute('src')));
2663                                                 $a->setAttribute('target', '_blank');
2664
2665                                                 $p->appendChild($a);
2666
2667                                                 $entry->parentNode->replaceChild($p, $entry);
2668                                         }
2669                                 }
2670                         }
2671
2672                         if (strtolower($entry->nodeName) == "a") {
2673                                 $entry->setAttribute("target", "_blank");
2674                         }
2675                 }
2676
2677                 $entries = $xpath->query('//iframe');
2678                 foreach ($entries as $entry) {
2679                         $entry->setAttribute('sandbox', 'allow-scripts');
2680
2681                 }
2682
2683                 $allowed_elements = array('a', 'address', 'audio', 'article',
2684                         'b', 'big', 'blockquote', 'body', 'br', 'cite', 'center',
2685                         'code', 'dd', 'del', 'details', 'div', 'dl', 'font',
2686                         'dt', 'em', 'footer', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6',
2687                         'header', 'html', 'i', 'img', 'ins', 'kbd',
2688                         'li', 'nav', 'noscript', 'ol', 'p', 'pre', 'q', 's','small',
2689                         'source', 'span', 'strike', 'strong', 'sub', 'summary',
2690                         'sup', 'table', 'tbody', 'td', 'tfoot', 'th', 'thead',
2691                         'tr', 'track', 'tt', 'u', 'ul', 'var', 'wbr', 'video' );
2692
2693                 if ($_SESSION['hasSandbox']) $allowed_elements[] = 'iframe';
2694
2695                 $disallowed_attributes = array('id', 'style', 'class');
2696
2697                 global $pluginhost;
2698
2699                 if (isset($pluginhost)) {
2700                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_SANITIZE) as $plugin) {
2701                                 $retval = $plugin->hook_sanitize($doc, $site_url, $allowed_elements, $disallowed_attributes);
2702                                 if (is_array($retval)) {
2703                                         $doc = $retval[0];
2704                                         $allowed_elements = $retval[1];
2705                                         $disallowed_attributes = $retval[2];
2706                                 } else {
2707                                         $doc = $retval;
2708                                 }
2709                         }
2710                 }
2711
2712                 $doc->removeChild($doc->firstChild); //remove doctype
2713                 $doc = strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes);
2714                 $res = $doc->saveHTML();
2715                 return $res;
2716         }
2717
2718         function strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes) {
2719                 $entries = $doc->getElementsByTagName("*");
2720
2721                 foreach ($entries as $entry) {
2722                         if (!in_array($entry->nodeName, $allowed_elements)) {
2723                                 $entry->parentNode->removeChild($entry);
2724                         }
2725
2726                         if ($entry->hasAttributes()) {
2727                                 $attrs_to_remove = array();
2728
2729                                 foreach ($entry->attributes as $attr) {
2730
2731                                         if (strpos($attr->nodeName, 'on') === 0) {
2732                                                 array_push($attrs_to_remove, $attr);
2733                                         }
2734
2735                                         if (in_array($attr->nodeName, $disallowed_attributes)) {
2736                                                 array_push($attrs_to_remove, $attr);
2737                                         }
2738                                 }
2739
2740                                 foreach ($attrs_to_remove as $attr) {
2741                                         $entry->removeAttributeNode($attr);
2742                                 }
2743                         }
2744                 }
2745
2746                 return $doc;
2747         }
2748
2749         function check_for_update($link) {
2750                 if (CHECK_FOR_NEW_VERSION && $_SESSION['access_level'] >= 10) {
2751                         $version_url = "http://tt-rss.org/version.php?ver=" . VERSION .
2752                                 "&iid=" . sha1(SELF_URL_PATH);
2753
2754                         $version_data = @fetch_file_contents($version_url);
2755
2756                         if ($version_data) {
2757                                 $version_data = json_decode($version_data, true);
2758                                 if ($version_data && $version_data['version']) {
2759
2760                                         if (version_compare(VERSION, $version_data['version']) == -1) {
2761                                                 return $version_data;
2762                                         }
2763                                 }
2764                         }
2765                 }
2766                 return false;
2767         }
2768
2769         function catchupArticlesById($link, $ids, $cmode, $owner_uid = false) {
2770
2771                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2772                 if (count($ids) == 0) return;
2773
2774                 $tmp_ids = array();
2775
2776                 foreach ($ids as $id) {
2777                         array_push($tmp_ids, "ref_id = '$id'");
2778                 }
2779
2780                 $ids_qpart = join(" OR ", $tmp_ids);
2781
2782                 if ($cmode == 0) {
2783                         db_query($link, "UPDATE ttrss_user_entries SET
2784                         unread = false,last_read = NOW()
2785                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2786                 } else if ($cmode == 1) {
2787                         db_query($link, "UPDATE ttrss_user_entries SET
2788                         unread = true
2789                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2790                 } else {
2791                         db_query($link, "UPDATE ttrss_user_entries SET
2792                         unread = NOT unread,last_read = NOW()
2793                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2794                 }
2795
2796                 /* update ccache */
2797
2798                 $result = db_query($link, "SELECT DISTINCT feed_id FROM ttrss_user_entries
2799                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2800
2801                 while ($line = db_fetch_assoc($result)) {
2802                         ccache_update($link, $line["feed_id"], $owner_uid);
2803                 }
2804         }
2805
2806         function get_article_tags($link, $id, $owner_uid = 0, $tag_cache = false) {
2807
2808                 $a_id = db_escape_string($link, $id);
2809
2810                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2811
2812                 $query = "SELECT DISTINCT tag_name,
2813                         owner_uid as owner FROM
2814                         ttrss_tags WHERE post_int_id = (SELECT int_id FROM ttrss_user_entries WHERE
2815                         ref_id = '$a_id' AND owner_uid = '$owner_uid' LIMIT 1) ORDER BY tag_name";
2816
2817                 $obj_id = md5("TAGS:$owner_uid:$id");
2818                 $tags = array();
2819
2820                 /* check cache first */
2821
2822                 if ($tag_cache === false) {
2823                         $result = db_query($link, "SELECT tag_cache FROM ttrss_user_entries
2824                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
2825
2826                         $tag_cache = db_fetch_result($result, 0, "tag_cache");
2827                 }
2828
2829                 if ($tag_cache) {
2830                         $tags = explode(",", $tag_cache);
2831                 } else {
2832
2833                         /* do it the hard way */
2834
2835                         $tmp_result = db_query($link, $query);
2836
2837                         while ($tmp_line = db_fetch_assoc($tmp_result)) {
2838                                 array_push($tags, $tmp_line["tag_name"]);
2839                         }
2840
2841                         /* update the cache */
2842
2843                         $tags_str = db_escape_string($link, join(",", $tags));
2844
2845                         db_query($link, "UPDATE ttrss_user_entries
2846                                 SET tag_cache = '$tags_str' WHERE ref_id = '$id'
2847                                 AND owner_uid = $owner_uid");
2848                 }
2849
2850                 return $tags;
2851         }
2852
2853         function trim_array($array) {
2854                 $tmp = $array;
2855                 array_walk($tmp, 'trim');
2856                 return $tmp;
2857         }
2858
2859         function tag_is_valid($tag) {
2860                 if ($tag == '') return false;
2861                 if (preg_match("/^[0-9]*$/", $tag)) return false;
2862                 if (mb_strlen($tag) > 250) return false;
2863
2864                 if (function_exists('iconv')) {
2865                         $tag = iconv("utf-8", "utf-8", $tag);
2866                 }
2867
2868                 if (!$tag) return false;
2869
2870                 return true;
2871         }
2872
2873         function render_login_form($link) {
2874                 require_once "login_form.php";
2875                 exit;
2876         }
2877
2878         // from http://developer.apple.com/internet/safari/faq.html
2879         function no_cache_incantation() {
2880                 header("Expires: Mon, 22 Dec 1980 00:00:00 GMT"); // Happy birthday to me :)
2881                 header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT"); // always modified
2882                 header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0"); // HTTP/1.1
2883                 header("Cache-Control: post-check=0, pre-check=0", false);
2884                 header("Pragma: no-cache"); // HTTP/1.0
2885         }
2886
2887         function format_warning($msg, $id = "") {
2888                 global $link;
2889                 return "<div class=\"warning\" id=\"$id\">
2890                         <img src=\"images/sign_excl.svg\"><div class='inner'>$msg</div></div>";
2891         }
2892
2893         function format_notice($msg, $id = "") {
2894                 global $link;
2895                 return "<div class=\"notice\" id=\"$id\">
2896                         <img src=\"images/sign_info.svg\"><div class='inner'>$msg</div></div>";
2897         }
2898
2899         function format_error($msg, $id = "") {
2900                 global $link;
2901                 return "<div class=\"error\" id=\"$id\">
2902                         <img src=\"images/sign_excl.svg\"><div class='inner'>$msg</div></div>";
2903         }
2904
2905         function print_notice($msg) {
2906                 return print format_notice($msg);
2907         }
2908
2909         function print_warning($msg) {
2910                 return print format_warning($msg);
2911         }
2912
2913         function print_error($msg) {
2914                 return print format_error($msg);
2915         }
2916
2917
2918         function T_sprintf() {
2919                 $args = func_get_args();
2920                 return vsprintf(__(array_shift($args)), $args);
2921         }
2922
2923         function format_inline_player($link, $url, $ctype) {
2924
2925                 $entry = "";
2926
2927                 $url = htmlspecialchars($url);
2928
2929                 if (strpos($ctype, "audio/") === 0) {
2930
2931                         if ($_SESSION["hasAudio"] && (strpos($ctype, "ogg") !== false ||
2932                                 strpos($_SERVER['HTTP_USER_AGENT'], "Chrome") !== false ||
2933                                 strpos($_SERVER['HTTP_USER_AGENT'], "Safari") !== false )) {
2934
2935                                 $id = 'AUDIO-' . uniqid();
2936
2937                                 $entry .= "<audio id=\"$id\"\" controls style='display : none'>
2938                                         <source type=\"$ctype\" src=\"$url\"></source>
2939                                         </audio>";
2940
2941                                 $entry .= "<span onclick=\"player(this)\"
2942                                         title=\"".__("Click to play")."\" status=\"0\"
2943                                         class=\"player\" audio-id=\"$id\">".__("Play")."</span>";
2944
2945                         } else {
2946
2947                                 $entry .= "<object type=\"application/x-shockwave-flash\"
2948                                         data=\"lib/button/musicplayer.swf?song_url=$url\"
2949                                         width=\"17\" height=\"17\" style='float : left; margin-right : 5px;'>
2950                                         <param name=\"movie\"
2951                                                 value=\"lib/button/musicplayer.swf?song_url=$url\" />
2952                                         </object>";
2953                         }
2954
2955                         if ($entry) $entry .= "&nbsp; <a target=\"_blank\"
2956                                 href=\"$url\">" . basename($url) . "</a>";
2957
2958                         return $entry;
2959
2960                 }
2961
2962                 return "";
2963
2964 /*              $filename = substr($url, strrpos($url, "/")+1);
2965
2966                 $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
2967                         $filename . " (" . $ctype . ")" . "</a>"; */
2968
2969         }
2970
2971         function format_article($link, $id, $mark_as_read = true, $zoom_mode = false, $owner_uid = false) {
2972                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2973
2974                 $rv = array();
2975
2976                 $rv['id'] = $id;
2977
2978                 /* we can figure out feed_id from article id anyway, why do we
2979                  * pass feed_id here? let's ignore the argument :( */
2980
2981                 $result = db_query($link, "SELECT feed_id FROM ttrss_user_entries
2982                         WHERE ref_id = '$id'");
2983
2984                 $feed_id = (int) db_fetch_result($result, 0, "feed_id");
2985
2986                 $rv['feed_id'] = $feed_id;
2987
2988                 //if (!$zoom_mode) { print "<article id='$id'><![CDATA["; };
2989
2990                 if ($mark_as_read) {
2991                         $result = db_query($link, "UPDATE ttrss_user_entries
2992                                 SET unread = false,last_read = NOW()
2993                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
2994
2995                         ccache_update($link, $feed_id, $owner_uid);
2996                 }
2997
2998                 $result = db_query($link, "SELECT id,title,link,content,feed_id,comments,int_id,
2999                         ".SUBSTRING_FOR_DATE."(updated,1,16) as updated,
3000                         (SELECT site_url FROM ttrss_feeds WHERE id = feed_id) as site_url,
3001                         (SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) as hide_images,
3002                         num_comments,
3003                         tag_cache,
3004                         author,
3005                         orig_feed_id,
3006                         note,
3007                         cached_content
3008                         FROM ttrss_entries,ttrss_user_entries
3009                         WHERE   id = '$id' AND ref_id = id AND owner_uid = $owner_uid");
3010
3011                 if ($result) {
3012
3013                         $line = db_fetch_assoc($result);
3014
3015                         $tag_cache = $line["tag_cache"];
3016
3017                         $line["tags"] = get_article_tags($link, $id, $owner_uid, $line["tag_cache"]);
3018                         unset($line["tag_cache"]);
3019
3020                         $line["content"] = sanitize($link, $line["content"], false, $owner_uid, $line["site_url"]);
3021
3022                         global $pluginhost;
3023
3024                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_RENDER_ARTICLE) as $p) {
3025                                 $line = $p->hook_render_article($line);
3026                         }
3027
3028                         $num_comments = $line["num_comments"];
3029                         $entry_comments = "";
3030
3031                         if ($num_comments > 0) {
3032                                 if ($line["comments"]) {
3033                                         $comments_url = htmlspecialchars($line["comments"]);
3034                                 } else {
3035                                         $comments_url = htmlspecialchars($line["link"]);
3036                                 }
3037                                 $entry_comments = "<a target='_blank' href=\"$comments_url\">$num_comments comments</a>";
3038                         } else {
3039                                 if ($line["comments"] && $line["link"] != $line["comments"]) {
3040                                         $entry_comments = "<a target='_blank' href=\"".htmlspecialchars($line["comments"])."\">comments</a>";
3041                                 }
3042                         }
3043
3044                         if ($zoom_mode) {
3045                                 header("Content-Type: text/html");
3046                                 $rv['content'] .= "<html><head>
3047                                                 <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"/>
3048                                                 <title>Tiny Tiny RSS - ".$line["title"]."</title>
3049                                                 <link rel=\"stylesheet\" type=\"text/css\" href=\"tt-rss.css\">
3050                                         </head><body id=\"ttrssZoom\">";
3051                         }
3052
3053                         $rv['content'] .= "<div class=\"postReply\" id=\"POST-$id\">";
3054
3055                         $rv['content'] .= "<div class=\"postHeader\" id=\"POSTHDR-$id\">";
3056
3057                         $entry_author = $line["author"];
3058
3059                         if ($entry_author) {
3060                                 $entry_author = __(" - ") . $entry_author;
3061                         }
3062
3063                         $parsed_updated = make_local_datetime($link, $line["updated"], true,
3064                                 $owner_uid, true);
3065
3066                         $rv['content'] .= "<div class=\"postDate\">$parsed_updated</div>";
3067
3068                         if ($line["link"]) {
3069                                 $rv['content'] .= "<div class='postTitle'><a target='_blank'
3070                                         title=\"".htmlspecialchars($line['title'])."\"
3071                                         href=\"" .
3072                                         htmlspecialchars($line["link"]) . "\">" .
3073                                         $line["title"] . "</a>" .
3074                                         "<span class='author'>$entry_author</span></div>";
3075                         } else {
3076                                 $rv['content'] .= "<div class='postTitle'>" . $line["title"] . "$entry_author</div>";
3077                         }
3078
3079                         $tags_str = format_tags_string($line["tags"], $id);
3080                         $tags_str_full = join(", ", $line["tags"]);
3081
3082                         if (!$tags_str_full) $tags_str_full = __("no tags");
3083
3084                         if (!$entry_comments) $entry_comments = "&nbsp;"; # placeholder
3085
3086                         $rv['content'] .= "<div class='postTags' style='float : right'>
3087                                 <img src='images/tag.png'
3088                                 class='tagsPic' alt='Tags' title='Tags'>&nbsp;";
3089
3090                         if (!$zoom_mode) {
3091                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>
3092                                         <a title=\"".__('Edit tags for this article')."\"
3093                                         href=\"#\" onclick=\"editArticleTags($id, $feed_id)\">(+)</a>";
3094
3095                                 $rv['content'] .= "<div dojoType=\"dijit.Tooltip\"
3096                                         id=\"ATSTRTIP-$id\" connectId=\"ATSTR-$id\"
3097                                         position=\"below\">$tags_str_full</div>";
3098
3099                                 global $pluginhost;
3100
3101                                 foreach ($pluginhost->get_hooks($pluginhost::HOOK_ARTICLE_BUTTON) as $p) {
3102                                         $rv['content'] .= $p->hook_article_button($line);
3103                                 }
3104
3105
3106                         } else {
3107                                 $tags_str = strip_tags($tags_str);
3108                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>";
3109                         }
3110                         $rv['content'] .= "</div>";
3111                         $rv['content'] .= "<div clear='both'>$entry_comments</div>";
3112
3113                         if ($line["orig_feed_id"]) {
3114
3115                                 $tmp_result = db_query($link, "SELECT * FROM ttrss_archived_feeds
3116                                         WHERE id = ".$line["orig_feed_id"]);
3117
3118                                 if (db_num_rows($tmp_result) != 0) {
3119
3120                                         $rv['content'] .= "<div clear='both'>";
3121                                         $rv['content'] .= __("Originally from:");
3122
3123                                         $rv['content'] .= "&nbsp;";
3124
3125                                         $tmp_line = db_fetch_assoc($tmp_result);
3126
3127                                         $rv['content'] .= "<a target='_blank'
3128                                                 href=' " . htmlspecialchars($tmp_line['site_url']) . "'>" .
3129                                                 $tmp_line['title'] . "</a>";
3130
3131                                         $rv['content'] .= "&nbsp;";
3132
3133                                         $rv['content'] .= "<a target='_blank' href='" . htmlspecialchars($tmp_line['feed_url']) . "'>";
3134                                         $rv['content'] .= "<img title='".__('Feed URL')."'class='tinyFeedIcon' src='images/pub_set.svg'></a>";
3135
3136                                         $rv['content'] .= "</div>";
3137                                 }
3138                         }
3139
3140                         $rv['content'] .= "</div>";
3141
3142                         $rv['content'] .= "<div id=\"POSTNOTE-$id\">";
3143                                 if ($line['note']) {
3144                                         $rv['content'] .= format_article_note($id, $line['note'], !$zoom_mode);
3145                                 }
3146                         $rv['content'] .= "</div>";
3147
3148                         $rv['content'] .= "<div class=\"postContent\">";
3149
3150                         $rv['content'] .= $line["content"];
3151
3152                         $rv['content'] .= format_article_enclosures($link, $id,
3153                                 $always_display_enclosures, $line["content"], $line["hide_images"]);
3154
3155                         $rv['content'] .= "</div>";
3156
3157                         $rv['content'] .= "</div>";
3158
3159                 }
3160
3161                 if ($zoom_mode) {
3162                         $rv['content'] .= "
3163                                 <div class='footer'>
3164                                 <button onclick=\"return window.close()\">".
3165                                         __("Close this window")."</button></div>";
3166                         $rv['content'] .= "</body></html>";
3167                 }
3168
3169                 return $rv;
3170
3171         }
3172
3173         function print_checkpoint($n, $s) {
3174                 $ts = microtime(true);
3175                 echo sprintf("<!-- CP[$n] %.4f seconds -->", $ts - $s);
3176                 return $ts;
3177         }
3178
3179         function sanitize_tag($tag) {
3180                 $tag = trim($tag);
3181
3182                 $tag = mb_strtolower($tag, 'utf-8');
3183
3184                 $tag = preg_replace('/[\'\"\+\>\<]/', "", $tag);
3185
3186 //              $tag = str_replace('"', "", $tag);
3187 //              $tag = str_replace("+", " ", $tag);
3188                 $tag = str_replace("technorati tag: ", "", $tag);
3189
3190                 return $tag;
3191         }
3192
3193         function get_self_url_prefix() {
3194                 if (strrpos(SELF_URL_PATH, "/") === strlen(SELF_URL_PATH)-1) {
3195                         return substr(SELF_URL_PATH, 0, strlen(SELF_URL_PATH)-1);
3196                 } else {
3197                         return SELF_URL_PATH;
3198                 }
3199         }
3200
3201         /**
3202          * Compute the Mozilla Firefox feed adding URL from server HOST and REQUEST_URI.
3203          *
3204          * @return string The Mozilla Firefox feed adding URL.
3205          */
3206         function add_feed_url() {
3207                 //$url_path = ($_SERVER['HTTPS'] != "on" ? 'http://' :  'https://') . $_SERVER["HTTP_HOST"] . parse_url($_SERVER["REQUEST_URI"], PHP_URL_PATH);
3208
3209                 $url_path = get_self_url_prefix() .
3210                         "/public.php?op=subscribe&feed_url=%s";
3211                 return $url_path;
3212         } // function add_feed_url
3213
3214         function encrypt_password($pass, $salt = '', $mode2 = false) {
3215                 if ($salt && $mode2) {
3216                         return "MODE2:" . hash('sha256', $salt . $pass);
3217                 } else if ($salt) {
3218                         return "SHA1X:" . sha1("$salt:$pass");
3219                 } else {
3220                         return "SHA1:" . sha1($pass);
3221                 }
3222         } // function encrypt_password
3223
3224         function load_filters($link, $feed_id, $owner_uid, $action_id = false) {
3225                 $filters = array();
3226
3227                 $cat_id = (int)getFeedCategory($link, $feed_id);
3228
3229                 $result = db_query($link, "SELECT * FROM ttrss_filters2 WHERE
3230                         owner_uid = $owner_uid AND enabled = true ORDER BY order_id, title");
3231
3232                 $check_cats = join(",", array_merge(
3233                         getParentCategories($link, $cat_id, $owner_uid),
3234                         array($cat_id)));
3235
3236                 while ($line = db_fetch_assoc($result)) {
3237                         $filter_id = $line["id"];
3238
3239                         $result2 = db_query($link, "SELECT
3240                                 r.reg_exp, r.inverse, r.feed_id, r.cat_id, r.cat_filter, t.name AS type_name
3241                                 FROM ttrss_filters2_rules AS r,
3242                                 ttrss_filter_types AS t
3243                                 WHERE
3244                                         (cat_id IS NULL OR cat_id IN ($check_cats)) AND
3245                                         (feed_id IS NULL OR feed_id = '$feed_id') AND
3246                                         filter_type = t.id AND filter_id = '$filter_id'");
3247
3248                         $rules = array();
3249                         $actions = array();
3250
3251                         while ($rule_line = db_fetch_assoc($result2)) {
3252 #                               print_r($rule_line);
3253
3254                                 $rule = array();
3255                                 $rule["reg_exp"] = $rule_line["reg_exp"];
3256                                 $rule["type"] = $rule_line["type_name"];
3257                                 $rule["inverse"] = sql_bool_to_bool($rule_line["inverse"]);
3258
3259                                 array_push($rules, $rule);
3260                         }
3261
3262                         $result2 = db_query($link, "SELECT a.action_param,t.name AS type_name
3263                                 FROM ttrss_filters2_actions AS a,
3264                                 ttrss_filter_actions AS t
3265                                 WHERE
3266                                         action_id = t.id AND filter_id = '$filter_id'");
3267
3268                         while ($action_line = db_fetch_assoc($result2)) {
3269 #                               print_r($action_line);
3270
3271                                 $action = array();
3272                                 $action["type"] = $action_line["type_name"];
3273                                 $action["param"] = $action_line["action_param"];
3274
3275                                 array_push($actions, $action);
3276                         }
3277
3278
3279                         $filter = array();
3280                         $filter["match_any_rule"] = sql_bool_to_bool($line["match_any_rule"]);
3281                         $filter["inverse"] = sql_bool_to_bool($line["inverse"]);
3282                         $filter["rules"] = $rules;
3283                         $filter["actions"] = $actions;
3284
3285                         if (count($rules) > 0 && count($actions) > 0) {
3286                                 array_push($filters, $filter);
3287                         }
3288                 }
3289
3290                 return $filters;
3291         }
3292
3293         function get_score_pic($score) {
3294                 if ($score > 100) {
3295                         return "score_high.png";
3296                 } else if ($score > 0) {
3297                         return "score_half_high.png";
3298                 } else if ($score < -100) {
3299                         return "score_low.png";
3300                 } else if ($score < 0) {
3301                         return "score_half_low.png";
3302                 } else {
3303                         return "score_neutral.png";
3304                 }
3305         }
3306
3307         function feed_has_icon($id) {
3308                 return is_file(ICONS_DIR . "/$id.ico") && filesize(ICONS_DIR . "/$id.ico") > 0;
3309         }
3310
3311         function init_connection($link) {
3312                 if ($link) {
3313
3314                         if (DB_TYPE == "pgsql") {
3315                                 pg_query($link, "set client_encoding = 'UTF-8'");
3316                                 pg_set_client_encoding("UNICODE");
3317                                 pg_query($link, "set datestyle = 'ISO, european'");
3318                                 pg_query($link, "set TIME ZONE 0");
3319                         } else {
3320                                 db_query($link, "SET time_zone = '+0:0'");
3321
3322                                 if (defined('MYSQL_CHARSET') && MYSQL_CHARSET) {
3323                                         db_query($link, "SET NAMES " . MYSQL_CHARSET);
3324                                 }
3325                         }
3326
3327                         global $pluginhost;
3328
3329                         $pluginhost = new PluginHost($link);
3330                         $pluginhost->load(PLUGINS, $pluginhost::KIND_ALL);
3331
3332                         return true;
3333                 } else {
3334                         print "Unable to connect to database:" . db_last_error();
3335                         return false;
3336                 }
3337         }
3338
3339         function format_tags_string($tags, $id) {
3340
3341                 $tags_str = "";
3342                 $tags_nolinks_str = "";
3343
3344                 $num_tags = 0;
3345
3346                 $tag_limit = 6;
3347
3348                 $formatted_tags = array();
3349
3350                 foreach ($tags as $tag) {
3351                         $num_tags++;
3352                         $tag_escaped = str_replace("'", "\\'", $tag);
3353
3354                         if (mb_strlen($tag) > 30) {
3355                                 $tag = truncate_string($tag, 30);
3356                         }
3357
3358                         $tag_str = "<a href=\"javascript:viewfeed('$tag_escaped')\">$tag</a>";
3359
3360                         array_push($formatted_tags, $tag_str);
3361
3362                         $tmp_tags_str = implode(", ", $formatted_tags);
3363
3364                         if ($num_tags == $tag_limit || mb_strlen($tmp_tags_str) > 150) {
3365                                 break;
3366                         }
3367                 }
3368
3369                 $tags_str = implode(", ", $formatted_tags);
3370
3371                 if ($num_tags < count($tags)) {
3372                         $tags_str .= ", &hellip;";
3373                 }
3374
3375                 if ($num_tags == 0) {
3376                         $tags_str = __("no tags");
3377                 }
3378
3379                 return $tags_str;
3380
3381         }
3382
3383         function format_article_labels($labels, $id) {
3384
3385                 $labels_str = "";
3386
3387                 foreach ($labels as $l) {
3388                         $labels_str .= sprintf("<span class='hlLabelRef'
3389                                 style='color : %s; background-color : %s'>%s</span>",
3390                                         $l[2], $l[3], $l[1]);
3391                         }
3392
3393                 return $labels_str;
3394
3395         }
3396
3397         function format_article_note($id, $note, $allow_edit = true) {
3398
3399                 $str = "<div class='articleNote'        onclick=\"editArticleNote($id)\">
3400                         <div class='noteEdit' onclick=\"editArticleNote($id)\">".
3401                         ($allow_edit ? __('(edit note)') : "")."</div>$note</div>";
3402
3403                 return $str;
3404         }
3405
3406
3407         function get_feed_category($link, $feed_cat, $parent_cat_id = false) {
3408                 if ($parent_cat_id) {
3409                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3410                         $parent_insert = "'$parent_cat_id'";
3411                 } else {
3412                         $parent_qpart = "parent_cat IS NULL";
3413                         $parent_insert = "NULL";
3414                 }
3415
3416                 $result = db_query($link,
3417                         "SELECT id FROM ttrss_feed_categories
3418                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3419
3420                 if (db_num_rows($result) == 0) {
3421                         return false;
3422                 } else {
3423                         return db_fetch_result($result, 0, "id");
3424                 }
3425         }
3426
3427         function add_feed_category($link, $feed_cat, $parent_cat_id = false) {
3428
3429                 if (!$feed_cat) return false;
3430
3431                 db_query($link, "BEGIN");
3432
3433                 if ($parent_cat_id) {
3434                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3435                         $parent_insert = "'$parent_cat_id'";
3436                 } else {
3437                         $parent_qpart = "parent_cat IS NULL";
3438                         $parent_insert = "NULL";
3439                 }
3440
3441                 $feed_cat = mb_substr($feed_cat, 0, 250);
3442
3443                 $result = db_query($link,
3444                         "SELECT id FROM ttrss_feed_categories
3445                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3446
3447                 if (db_num_rows($result) == 0) {
3448
3449                         $result = db_query($link,
3450                                 "INSERT INTO ttrss_feed_categories (owner_uid,title,parent_cat)
3451                                 VALUES ('".$_SESSION["uid"]."', '$feed_cat', $parent_insert)");
3452
3453                         db_query($link, "COMMIT");
3454
3455                         return true;
3456                 }
3457
3458                 return false;
3459         }
3460
3461         function getArticleFeed($link, $id) {
3462                 $result = db_query($link, "SELECT feed_id FROM ttrss_user_entries
3463                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
3464
3465                 if (db_num_rows($result) != 0) {
3466                         return db_fetch_result($result, 0, "feed_id");
3467                 } else {
3468                         return 0;
3469                 }
3470         }
3471
3472         /**
3473          * Fixes incomplete URLs by prepending "http://".
3474          * Also replaces feed:// with http://, and
3475          * prepends a trailing slash if the url is a domain name only.
3476          *
3477          * @param string $url Possibly incomplete URL
3478          *
3479          * @return string Fixed URL.
3480          */
3481         function fix_url($url) {
3482                 if (strpos($url, '://') === false) {
3483                         $url = 'http://' . $url;
3484                 } else if (substr($url, 0, 5) == 'feed:') {
3485                         $url = 'http:' . substr($url, 5);
3486                 }
3487
3488                 //prepend slash if the URL has no slash in it
3489                 // "http://www.example" -> "http://www.example/"
3490                 if (strpos($url, '/', strpos($url, ':') + 3) === false) {
3491                         $url .= '/';
3492                 }
3493
3494                 if ($url != "http:///")
3495                         return $url;
3496                 else
3497                         return '';
3498         }
3499
3500         function validate_feed_url($url) {
3501                 $parts = parse_url($url);
3502
3503                 return ($parts['scheme'] == 'http' || $parts['scheme'] == 'feed' || $parts['scheme'] == 'https');
3504
3505         }
3506
3507         function get_article_enclosures($link, $id) {
3508
3509                 $query = "SELECT * FROM ttrss_enclosures
3510                         WHERE post_id = '$id' AND content_url != ''";
3511
3512                 $rv = array();
3513
3514                 $result = db_query($link, $query);
3515
3516                 if (db_num_rows($result) > 0) {
3517                         while ($line = db_fetch_assoc($result)) {
3518                                 array_push($rv, $line);
3519                         }
3520                 }
3521
3522                 return $rv;
3523         }
3524
3525         function save_email_address($link, $email) {
3526                 // FIXME: implement persistent storage of emails
3527
3528                 if (!$_SESSION['stored_emails'])
3529                         $_SESSION['stored_emails'] = array();
3530
3531                 if (!in_array($email, $_SESSION['stored_emails']))
3532                         array_push($_SESSION['stored_emails'], $email);
3533         }
3534
3535
3536         function get_feed_access_key($link, $feed_id, $is_cat, $owner_uid = false) {
3537
3538                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3539
3540                 $sql_is_cat = bool_to_sql_bool($is_cat);
3541
3542                 $result = db_query($link, "SELECT access_key FROM ttrss_access_keys
3543                         WHERE feed_id = '$feed_id'      AND is_cat = $sql_is_cat
3544                         AND owner_uid = " . $owner_uid);
3545
3546                 if (db_num_rows($result) == 1) {
3547                         return db_fetch_result($result, 0, "access_key");
3548                 } else {
3549                         $key = db_escape_string($link, sha1(uniqid(rand(), true)));
3550
3551                         $result = db_query($link, "INSERT INTO ttrss_access_keys
3552                                 (access_key, feed_id, is_cat, owner_uid)
3553                                 VALUES ('$key', '$feed_id', $sql_is_cat, '$owner_uid')");
3554
3555                         return $key;
3556                 }
3557                 return false;
3558         }
3559
3560         function get_feeds_from_html($url, $content)
3561         {
3562                 $url     = fix_url($url);
3563                 $baseUrl = substr($url, 0, strrpos($url, '/') + 1);
3564
3565                 libxml_use_internal_errors(true);
3566
3567                 $doc = new DOMDocument();
3568                 $doc->loadHTML($content);
3569                 $xpath = new DOMXPath($doc);
3570                 $entries = $xpath->query('/html/head/link[@rel="alternate"]');
3571                 $feedUrls = array();
3572                 foreach ($entries as $entry) {
3573                         if ($entry->hasAttribute('href')) {
3574                                 $title = $entry->getAttribute('title');
3575                                 if ($title == '') {
3576                                         $title = $entry->getAttribute('type');
3577                                 }
3578                                 $feedUrl = rewrite_relative_url(
3579                                         $baseUrl, $entry->getAttribute('href')
3580                                 );
3581                                 $feedUrls[$feedUrl] = $title;
3582                         }
3583                 }
3584                 return $feedUrls;
3585         }
3586
3587         function is_html($content) {
3588                 return preg_match("/<html|DOCTYPE html/i", substr($content, 0, 20)) !== 0;
3589         }
3590
3591         function url_is_html($url, $login = false, $pass = false) {
3592                 return is_html(fetch_file_contents($url, false, $login, $pass));
3593         }
3594
3595         function print_label_select($link, $name, $value, $attributes = "") {
3596
3597                 $result = db_query($link, "SELECT caption FROM ttrss_labels2
3598                         WHERE owner_uid = '".$_SESSION["uid"]."' ORDER BY caption");
3599
3600                 print "<select default=\"$value\" name=\"" . htmlspecialchars($name) .
3601                         "\" $attributes onchange=\"labelSelectOnChange(this)\" >";
3602
3603                 while ($line = db_fetch_assoc($result)) {
3604
3605                         $issel = ($line["caption"] == $value) ? "selected=\"1\"" : "";
3606
3607                         print "<option value=\"".htmlspecialchars($line["caption"])."\"
3608                                 $issel>" . htmlspecialchars($line["caption"]) . "</option>";
3609
3610                 }
3611
3612 #               print "<option value=\"ADD_LABEL\">" .__("Add label...") . "</option>";
3613
3614                 print "</select>";
3615
3616
3617         }
3618
3619         function format_article_enclosures($link, $id, $always_display_enclosures,
3620                                         $article_content, $hide_images = false) {
3621
3622                 $result = get_article_enclosures($link, $id);
3623                 $rv = '';
3624
3625                 if (count($result) > 0) {
3626
3627                         $entries_html = array();
3628                         $entries = array();
3629                         $entries_inline = array();
3630
3631                         foreach ($result as $line) {
3632
3633                                 $url = $line["content_url"];
3634                                 $ctype = $line["content_type"];
3635
3636                                 if (!$ctype) $ctype = __("unknown type");
3637
3638                                 $filename = substr($url, strrpos($url, "/")+1);
3639
3640                                 $player = format_inline_player($link, $url, $ctype);
3641
3642                                 if ($player) array_push($entries_inline, $player);
3643
3644 #                               $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
3645 #                                       $filename . " (" . $ctype . ")" . "</a>";
3646
3647                                 $entry = "<div onclick=\"window.open('".htmlspecialchars($url)."')\"
3648                                         dojoType=\"dijit.MenuItem\">$filename ($ctype)</div>";
3649
3650                                 array_push($entries_html, $entry);
3651
3652                                 $entry = array();
3653
3654                                 $entry["type"] = $ctype;
3655                                 $entry["filename"] = $filename;
3656                                 $entry["url"] = $url;
3657
3658                                 array_push($entries, $entry);
3659                         }
3660
3661                         if ($_SESSION['uid'] && !get_pref($link, "STRIP_IMAGES") && !$_SESSION["bw_limit"]) {
3662                                 if ($always_display_enclosures ||
3663                                                         !preg_match("/<img/i", $article_content)) {
3664
3665                                         foreach ($entries as $entry) {
3666
3667                                                 if (preg_match("/image/", $entry["type"]) ||
3668                                                                 preg_match("/\.(jpg|png|gif|bmp)/i", $entry["filename"])) {
3669
3670                                                                 if (!$hide_images) {
3671                                                                         $rv .= "<p><img
3672                                                                         alt=\"".htmlspecialchars($entry["filename"])."\"
3673                                                                         src=\"" .htmlspecialchars($entry["url"]) . "\"/></p>";
3674                                                                 } else {
3675                                                                         $rv .= "<p><a target=\"_blank\"
3676                                                                         href=\"".htmlspecialchars($entry["url"])."\"
3677                                                                         >" .htmlspecialchars($entry["url"]) . "</a></p>";
3678
3679                                                                 }
3680                                                 }
3681                                         }
3682                                 }
3683                         }
3684
3685                         if (count($entries_inline) > 0) {
3686                                 $rv .= "<hr clear='both'/>";
3687                                 foreach ($entries_inline as $entry) { $rv .= $entry; };
3688                                 $rv .= "<hr clear='both'/>";
3689                         }
3690
3691                         $rv .= "<select class=\"attachments\" onchange=\"openSelectedAttachment(this)\">".
3692                                 "<option value=''>" . __('Attachments')."</option>";
3693
3694                         foreach ($entries as $entry) {
3695                                 $rv .= "<option value=\"".htmlspecialchars($entry["url"])."\">" . htmlspecialchars($entry["filename"]) . "</option>";
3696
3697                         };
3698
3699                         $rv .= "</select>";
3700                 }
3701
3702                 return $rv;
3703         }
3704
3705         function getLastArticleId($link) {
3706                 $result = db_query($link, "SELECT MAX(ref_id) AS id FROM ttrss_user_entries
3707                         WHERE owner_uid = " . $_SESSION["uid"]);
3708
3709                 if (db_num_rows($result) == 1) {
3710                         return db_fetch_result($result, 0, "id");
3711                 } else {
3712                         return -1;
3713                 }
3714         }
3715
3716         function build_url($parts) {
3717                 return $parts['scheme'] . "://" . $parts['host'] . $parts['path'];
3718         }
3719
3720         /**
3721          * Converts a (possibly) relative URL to a absolute one.
3722          *
3723          * @param string $url     Base URL (i.e. from where the document is)
3724          * @param string $rel_url Possibly relative URL in the document
3725          *
3726          * @return string Absolute URL
3727          */
3728         function rewrite_relative_url($url, $rel_url) {
3729                 if (strpos($rel_url, "magnet:") === 0) {
3730                         return $rel_url;
3731                 } else if (strpos($rel_url, "://") !== false) {
3732                         return $rel_url;
3733                 } else if (strpos($rel_url, "//") === 0) {
3734                         # protocol-relative URL (rare but they exist)
3735                         return $rel_url;
3736                 } else if (strpos($rel_url, "/") === 0)
3737                 {
3738                         $parts = parse_url($url);
3739                         $parts['path'] = $rel_url;
3740
3741                         return build_url($parts);
3742
3743                 } else {
3744                         $parts = parse_url($url);
3745                         if (!isset($parts['path'])) {
3746                                 $parts['path'] = '/';
3747                         }
3748                         $dir = $parts['path'];
3749                         if (substr($dir, -1) !== '/') {
3750                                 $dir = dirname($parts['path']);
3751                                 $dir !== '/' && $dir .= '/';
3752                         }
3753                         $parts['path'] = $dir . $rel_url;
3754
3755                         return build_url($parts);
3756                 }
3757         }
3758
3759         function sphinx_search($query, $offset = 0, $limit = 30) {
3760                 require_once 'lib/sphinxapi.php';
3761
3762                 $sphinxClient = new SphinxClient();
3763
3764                 $sphinxClient->SetServer('localhost', 9312);
3765                 $sphinxClient->SetConnectTimeout(1);
3766
3767                 $sphinxClient->SetFieldWeights(array('title' => 70, 'content' => 30,
3768                         'feed_title' => 20));
3769
3770                 $sphinxClient->SetMatchMode(SPH_MATCH_EXTENDED2);
3771                 $sphinxClient->SetRankingMode(SPH_RANK_PROXIMITY_BM25);
3772                 $sphinxClient->SetLimits($offset, $limit, 1000);
3773                 $sphinxClient->SetArrayResult(false);
3774                 $sphinxClient->SetFilter('owner_uid', array($_SESSION['uid']));
3775
3776                 $result = $sphinxClient->Query($query, SPHINX_INDEX);
3777
3778                 $ids = array();
3779
3780                 if (is_array($result['matches'])) {
3781                         foreach (array_keys($result['matches']) as $int_id) {
3782                                 $ref_id = $result['matches'][$int_id]['attrs']['ref_id'];
3783                                 array_push($ids, $ref_id);
3784                         }
3785                 }
3786
3787                 return $ids;
3788         }
3789
3790         function cleanup_tags($link, $days = 14, $limit = 1000) {
3791
3792                 if (DB_TYPE == "pgsql") {
3793                         $interval_query = "date_updated < NOW() - INTERVAL '$days days'";
3794                 } else if (DB_TYPE == "mysql") {
3795                         $interval_query = "date_updated < DATE_SUB(NOW(), INTERVAL $days DAY)";
3796                 }
3797
3798                 $tags_deleted = 0;
3799
3800                 while ($limit > 0) {
3801                         $limit_part = 500;
3802
3803                         $query = "SELECT ttrss_tags.id AS id
3804                                 FROM ttrss_tags, ttrss_user_entries, ttrss_entries
3805                                 WHERE post_int_id = int_id AND $interval_query AND
3806                                 ref_id = ttrss_entries.id AND tag_cache != '' LIMIT $limit_part";
3807
3808                         $result = db_query($link, $query);
3809
3810                         $ids = array();
3811
3812                         while ($line = db_fetch_assoc($result)) {
3813                                 array_push($ids, $line['id']);
3814                         }
3815
3816                         if (count($ids) > 0) {
3817                                 $ids = join(",", $ids);
3818
3819                                 $tmp_result = db_query($link, "DELETE FROM ttrss_tags WHERE id IN ($ids)");
3820                                 $tags_deleted += db_affected_rows($link, $tmp_result);
3821                         } else {
3822                                 break;
3823                         }
3824
3825                         $limit -= $limit_part;
3826                 }
3827
3828                 return $tags_deleted;
3829         }
3830
3831         function print_user_stylesheet($link) {
3832                 $value = get_pref($link, 'USER_STYLESHEET');
3833
3834                 if ($value) {
3835                         print "<style type=\"text/css\">";
3836                         print str_replace("<br/>", "\n", $value);
3837                         print "</style>";
3838                 }
3839
3840         }
3841
3842         function rewrite_urls($html) {
3843                 libxml_use_internal_errors(true);
3844
3845                 $charset_hack = '<head>
3846                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
3847                 </head>';
3848
3849                 $doc = new DOMDocument();
3850                 $doc->loadHTML($charset_hack . $html);
3851                 $xpath = new DOMXPath($doc);
3852
3853                 $entries = $xpath->query('//*/text()');
3854
3855                 foreach ($entries as $entry) {
3856                         if (strstr($entry->wholeText, "://") !== false) {
3857                                 $text = preg_replace("/((?<!=.)((http|https|ftp)+):\/\/[^ ,!]+)/i",
3858                                         "<a target=\"_blank\" href=\"\\1\">\\1</a>", $entry->wholeText);
3859
3860                                 if ($text != $entry->wholeText) {
3861                                         $cdoc = new DOMDocument();
3862                                         $cdoc->loadHTML($charset_hack . $text);
3863
3864
3865                                         foreach ($cdoc->childNodes as $cnode) {
3866                                                 $cnode = $doc->importNode($cnode, true);
3867
3868                                                 if ($cnode) {
3869                                                         $entry->parentNode->insertBefore($cnode);
3870                                                 }
3871                                         }
3872
3873                                         $entry->parentNode->removeChild($entry);
3874
3875                                 }
3876                         }
3877                 }
3878
3879                 $node = $doc->getElementsByTagName('body')->item(0);
3880
3881                 // http://tt-rss.org/forum/viewtopic.php?f=1&t=970
3882                 if ($node)
3883                         return $doc->saveXML($node);
3884                 else
3885                         return $html;
3886         }
3887
3888         function filter_to_sql($link, $filter, $owner_uid) {
3889                 $query = array();
3890
3891                 if (DB_TYPE == "pgsql")
3892                         $reg_qpart = "~";
3893                 else
3894                         $reg_qpart = "REGEXP";
3895
3896                 foreach ($filter["rules"] AS $rule) {
3897                         $regexp_valid = preg_match('/' . $rule['reg_exp'] . '/',
3898                                 $rule['reg_exp']) !== FALSE;
3899
3900                         if ($regexp_valid) {
3901
3902                                 $rule['reg_exp'] = db_escape_string($link, $rule['reg_exp']);
3903
3904                                         switch ($rule["type"]) {
3905                                         case "title":
3906                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
3907                                                         $rule['reg_exp'] . "')";
3908                                                 break;
3909                                         case "content":
3910                                                 $qpart = "LOWER(ttrss_entries.content) $reg_qpart LOWER('".
3911                                                         $rule['reg_exp'] . "')";
3912                                                 break;
3913                                         case "both":
3914                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
3915                                                         $rule['reg_exp'] . "') OR LOWER(" .
3916                                                         "ttrss_entries.content) $reg_qpart LOWER('" . $rule['reg_exp'] . "')";
3917                                                 break;
3918                                         case "tag":
3919                                                 $qpart = "LOWER(ttrss_user_entries.tag_cache) $reg_qpart LOWER('".
3920                                                         $rule['reg_exp'] . "')";
3921                                                 break;
3922                                         case "link":
3923                                                 $qpart = "LOWER(ttrss_entries.link) $reg_qpart LOWER('".
3924                                                         $rule['reg_exp'] . "')";
3925                                                 break;
3926                                         case "author":
3927                                                 $qpart = "LOWER(ttrss_entries.author) $reg_qpart LOWER('".
3928                                                         $rule['reg_exp'] . "')";
3929                                                 break;
3930                                 }
3931
3932                                 if (isset($rule['inverse'])) $qpart = "NOT ($qpart)";
3933
3934                                 if (isset($rule["feed_id"]) && $rule["feed_id"] > 0) {
3935                                         $qpart .= " AND feed_id = " . db_escape_string($link, $rule["feed_id"]);
3936                                 }
3937
3938                                 if (isset($rule["cat_id"])) {
3939
3940                                         if ($rule["cat_id"] > 0) {
3941                                                 $children = getChildCategories($link, $rule["cat_id"], $owner_uid);
3942                                                 array_push($children, $rule["cat_id"]);
3943
3944                                                 $children = join(",", $children);
3945
3946                                                 $cat_qpart = "cat_id IN ($children)";
3947                                         } else {
3948                                                 $cat_qpart = "cat_id IS NULL";
3949                                         }
3950
3951                                         $qpart .= " AND $cat_qpart";
3952                                 }
3953
3954                                 array_push($query, "($qpart)");
3955
3956                         }
3957                 }
3958
3959                 if (count($query) > 0) {
3960                         $fullquery = "(" . join($filter["match_any_rule"] ? "OR" : "AND", $query) . ")";
3961                 } else {
3962                         $fullquery = "(false)";
3963                 }
3964
3965                 if ($filter['inverse']) $fullquery = "(NOT $fullquery)";
3966
3967                 return $fullquery;
3968         }
3969
3970         if (!function_exists('gzdecode')) {
3971                 function gzdecode($string) { // no support for 2nd argument
3972                         return file_get_contents('compress.zlib://data:who/cares;base64,'.
3973                                 base64_encode($string));
3974                 }
3975         }
3976
3977         function get_random_bytes($length) {
3978                 if (function_exists('openssl_random_pseudo_bytes')) {
3979                         return openssl_random_pseudo_bytes($length);
3980                 } else {
3981                         $output = "";
3982
3983                         for ($i = 0; $i < $length; $i++)
3984                                 $output .= chr(mt_rand(0, 255));
3985
3986                         return $output;
3987                 }
3988         }
3989
3990         function read_stdin() {
3991                 $fp = fopen("php://stdin", "r");
3992
3993                 if ($fp) {
3994                         $line = trim(fgets($fp));
3995                         fclose($fp);
3996                         return $line;
3997                 }
3998
3999                 return null;
4000         }
4001
4002         function tmpdirname($path, $prefix) {
4003                 // Use PHP's tmpfile function to create a temporary
4004                 // directory name. Delete the file and keep the name.
4005                 $tempname = tempnam($path,$prefix);
4006                 if (!$tempname)
4007                         return false;
4008
4009                 if (!unlink($tempname))
4010                         return false;
4011
4012        return $tempname;
4013         }
4014
4015         function getFeedCategory($link, $feed) {
4016                 $result = db_query($link, "SELECT cat_id FROM ttrss_feeds
4017                         WHERE id = '$feed'");
4018
4019                 if (db_num_rows($result) > 0) {
4020                         return db_fetch_result($result, 0, "cat_id");
4021                 } else {
4022                         return false;
4023                 }
4024
4025         }
4026
4027         function implements_interface($class, $interface) {
4028                 return in_array($interface, class_implements($class));
4029         }
4030
4031         function geturl($url){
4032
4033                 (function_exists('curl_init')) ? '' : die('cURL Must be installed for geturl function to work. Ask your host to enable it or uncomment extension=php_curl.dll in php.ini');
4034
4035                 $curl = curl_init();
4036                 $header[0] = "Accept: text/xml,application/xml,application/xhtml+xml,";
4037                 $header[0] .= "text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5";
4038                 $header[] = "Cache-Control: max-age=0";
4039                 $header[] = "Connection: keep-alive";
4040                 $header[] = "Keep-Alive: 300";
4041                 $header[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
4042                 $header[] = "Accept-Language: en-us,en;q=0.5";
4043                 $header[] = "Pragma: ";
4044
4045                 curl_setopt($curl, CURLOPT_URL, $url);
4046                 curl_setopt($curl, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 5.1; rv:5.0) Gecko/20100101 Firefox/5.0 Firefox/5.0');
4047                 curl_setopt($curl, CURLOPT_HTTPHEADER, $header);
4048                 curl_setopt($curl, CURLOPT_HEADER, true);
4049                 curl_setopt($curl, CURLOPT_REFERER, $url);
4050                 curl_setopt($curl, CURLOPT_ENCODING, 'gzip,deflate');
4051                 curl_setopt($curl, CURLOPT_AUTOREFERER, true);
4052                 curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
4053                 //curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true); //CURLOPT_FOLLOWLOCATION Disabled...
4054                 curl_setopt($curl, CURLOPT_TIMEOUT, 60);
4055
4056                 $html = curl_exec($curl);
4057
4058                 $status = curl_getinfo($curl);
4059                 curl_close($curl);
4060
4061                 if($status['http_code']!=200){
4062                         if($status['http_code'] == 301 || $status['http_code'] == 302) {
4063                                 list($header) = explode("\r\n\r\n", $html, 2);
4064                                 $matches = array();
4065                                 preg_match("/(Location:|URI:)[^(\n)]*/", $header, $matches);
4066                                 $url = trim(str_replace($matches[1],"",$matches[0]));
4067                                 $url_parsed = parse_url($url);
4068                                 return (isset($url_parsed))? geturl($url, $referer):'';
4069                         }
4070                         $oline='';
4071                         foreach($status as $key=>$eline){$oline.='['.$key.']'.$eline.' ';}
4072                         $line =$oline." \r\n ".$url."\r\n-----------------\r\n";
4073 #                       $handle = @fopen('./curl.error.log', 'a');
4074 #                       fwrite($handle, $line);
4075                         return FALSE;
4076                 }
4077                 return $url;
4078         }
4079
4080         function get_minified_js($files) {
4081                 require_once 'lib/jshrink/Minifier.php';
4082
4083                 $rv = '';
4084
4085                 foreach ($files as $js) {
4086                         if (!isset($_GET['debug'])) {
4087                                 $cached_file = CACHE_DIR . "/js/$js.js";
4088
4089                                 if (file_exists($cached_file) &&
4090                                                 is_readable($cached_file) &&
4091                                                 filemtime($cached_file) >= filemtime("js/$js.js")) {
4092
4093                                         $rv .= file_get_contents($cached_file);
4094
4095                                 } else {
4096                                         $minified = JShrink\Minifier::minify(file_get_contents("js/$js.js"));
4097                                         file_put_contents($cached_file, $minified);
4098                                         $rv .= $minified;
4099                                 }
4100                         } else {
4101                                 $rv .= file_get_contents("js/$js.js");
4102                         }
4103                 }
4104
4105                 return $rv;
4106         }
4107
4108         function stylesheet_tag($filename) {
4109                 $timestamp = filemtime($filename);
4110
4111                 echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"$filename?$timestamp\"/>\n";
4112         }
4113
4114         function javascript_tag($filename) {
4115                 $query = "";
4116
4117                 if (!(strpos($filename, "?") === FALSE)) {
4118                         $query = substr($filename, strpos($filename, "?")+1);
4119                         $filename = substr($filename, 0, strpos($filename, "?"));
4120                 }
4121
4122                 $timestamp = filemtime($filename);
4123
4124                 if ($query) $timestamp .= "&$query";
4125
4126                 echo "<script type=\"text/javascript\" charset=\"utf-8\" src=\"$filename?$timestamp\"></script>\n";
4127         }
4128
4129         function calculate_dep_timestamp() {
4130                 $files = array_merge(glob("js/*.js"), glob("*.css"));
4131
4132                 $max_ts = -1;
4133
4134                 foreach ($files as $file) {
4135                         if (filemtime($file) > $max_ts) $max_ts = filemtime($file);
4136                 }
4137
4138                 return $max_ts;
4139         }
4140
4141         function T_js_decl($s1, $s2) {
4142                 if ($s1 && $s2) {
4143                         $s1 = preg_replace("/\n/", "", $s1);
4144                         $s2 = preg_replace("/\n/", "", $s2);
4145
4146                         $s1 = preg_replace("/\"/", "\\\"", $s1);
4147                         $s2 = preg_replace("/\"/", "\\\"", $s2);
4148
4149                         return "T_messages[\"$s1\"] = \"$s2\";\n";
4150                 }
4151         }
4152
4153         function init_js_translations() {
4154
4155         print 'var T_messages = new Object();
4156
4157                 function __(msg) {
4158                         if (T_messages[msg]) {
4159                                 return T_messages[msg];
4160                         } else {
4161                                 return msg;
4162                         }
4163                 }
4164
4165                 function ngettext(msg1, msg2, n) {
4166                         return (parseInt(n) > 1) ? msg2 : msg1;
4167                 }';
4168
4169                 $l10n = _get_reader();
4170
4171                 for ($i = 0; $i < $l10n->total; $i++) {
4172                         $orig = $l10n->get_original_string($i);
4173                         $translation = __($orig);
4174
4175                         print T_js_decl($orig, $translation);
4176                 }
4177         }
4178
4179         function label_to_feed_id($label) {
4180                 return LABEL_BASE_INDEX - 1 - abs($label);
4181         }
4182
4183         function feed_to_label_id($feed) {
4184                 return LABEL_BASE_INDEX - 1 + abs($feed);
4185         }
4186
4187 ?>