include/functions.php

   1 <?php
   2         define('EXPECTED_CONFIG_VERSION', 26);
   3         define('SCHEMA_VERSION', 122);
   4
   5         define('LABEL_BASE_INDEX', -1024);
   6         define('PLUGIN_FEED_BASE_INDEX', -128);
   7
   8         define('COOKIE_LIFETIME_LONG', 86400*365);
   9
  10         $fetch_last_error = false;
  11         $fetch_last_error_code = false;
  12         $fetch_last_content_type = false;
  13         $fetch_curl_used = false;
  14
  15         mb_internal_encoding("UTF-8");
  16         date_default_timezone_set('UTC');
  17         if (defined('E_DEPRECATED')) {
  18                 error_reporting(E_ALL & ~E_NOTICE & ~E_DEPRECATED);
  19         } else {
  20                 error_reporting(E_ALL & ~E_NOTICE);
  21         }
  22
  23         require_once 'config.php';
  24
  25         /**
  26          * Define a constant if not already defined
  27          *
  28          * @param string $name The constant name.
  29          * @param mixed $value The constant value.
  30          * @access public
  31          * @return boolean True if defined successfully or not.
  32          */
  33         function define_default($name, $value) {
  34                 defined($name) or define($name, $value);
  35         }
  36
  37         ///// Some defaults that you can override in config.php //////
  38
  39         define_default('FEED_FETCH_TIMEOUT', 45);
  40         // How may seconds to wait for response when requesting feed from a site
  41         define_default('FEED_FETCH_NO_CACHE_TIMEOUT', 15);
  42         // How may seconds to wait for response when requesting feed from a
  43         // site when that feed wasn't cached before
  44         define_default('FILE_FETCH_TIMEOUT', 45);
  45         // Default timeout when fetching files from remote sites
  46         define_default('FILE_FETCH_CONNECT_TIMEOUT', 15);
  47         // How many seconds to wait for initial response from website when
  48         // fetching files from remote sites
  49
  50         if (DB_TYPE == "pgsql") {
  51                 define('SUBSTRING_FOR_DATE', 'SUBSTRING_FOR_DATE');
  52         } else {
  53                 define('SUBSTRING_FOR_DATE', 'SUBSTRING');
  54         }
  55
  56         /**
  57          * Return available translations names.
  58          *
  59          * @access public
  60          * @return array A array of available translations.
  61          */
  62         function get_translations() {
  63                 $tr = array(
  64                                         "auto"  => "Detect automatically",
  65                                         "ca_CA" => "Català",
  66                                         "cs_CZ" => "Česky",
  67                                         "en_US" => "English",
  68                                         "es_ES" => "Español",
  69                                         "de_DE" => "Deutsch",
  70                                         "fr_FR" => "Français",
  71                                         "hu_HU" => "Magyar (Hungarian)",
  72                                         "it_IT" => "Italiano",
  73                                         "ja_JP" => "日本語 (Japanese)",
  74                                         "lv_LV" => "Latviešu",
  75                                         "nb_NO" => "Norwegian bokmål",
  76                                         "nl_NL" => "Dutch",
  77                                         "pl_PL" => "Polski",
  78                                         "ru_RU" => "Русский",
  79                                         "pt_BR" => "Portuguese/Brazil",
  80                                         "zh_CN" => "Simplified Chinese",
  81                                         "sv_SE" => "Svenska",
  82                                         "fi_FI" => "Suomi");
  83
  84                 return $tr;
  85         }
  86
  87         require_once "lib/accept-to-gettext.php";
  88         require_once "lib/gettext/gettext.inc";
  89
  90         require_once "lib/languagedetect/LanguageDetect.php";
  91
  92         function startup_gettext() {
  93
  94                 # Get locale from Accept-Language header
  95                 $lang = al2gt(array_keys(get_translations()), "text/html");
  96
  97                 if (defined('_TRANSLATION_OVERRIDE_DEFAULT')) {
  98                         $lang = _TRANSLATION_OVERRIDE_DEFAULT;
  99                 }
 100
 101                 if ($_SESSION["uid"] && get_schema_version() >= 120) {
 102                         $pref_lang = get_pref("USER_LANGUAGE", $_SESSION["uid"]);
 103
 104                         if ($pref_lang && $pref_lang != 'auto') {
 105                                 $lang = $pref_lang;
 106                         }
 107                 }
 108
 109                 if ($lang) {
 110                         if (defined('LC_MESSAGES')) {
 111                                 _setlocale(LC_MESSAGES, $lang);
 112                         } else if (defined('LC_ALL')) {
 113                                 _setlocale(LC_ALL, $lang);
 114                         }
 115
 116                         _bindtextdomain("messages", "locale");
 117
 118                         _textdomain("messages");
 119                         _bind_textdomain_codeset("messages", "UTF-8");
 120                 }
 121         }
 122
 123         require_once 'db-prefs.php';
 124         require_once 'version.php';
 125         require_once 'ccache.php';
 126         require_once 'labels.php';
 127
 128         define('SELF_USER_AGENT', 'Tiny Tiny RSS/' . VERSION . ' (http://tt-rss.org/)');
 129         ini_set('user_agent', SELF_USER_AGENT);
 130
 131         require_once 'lib/pubsubhubbub/publisher.php';
 132
 133         $schema_version = false;
 134
 135         /**
 136          * Print a timestamped debug message.
 137          *
 138          * @param string $msg The debug message.
 139          * @return void
 140          */
 141         function _debug($msg, $show = true) {
 142
 143                 $ts = strftime("%H:%M:%S", time());
 144                 if (function_exists('posix_getpid')) {
 145                         $ts = "$ts/" . posix_getpid();
 146                 }
 147
 148                 if ($show && !(defined('QUIET') && QUIET)) {
 149                         print "[$ts] $msg\n";
 150                 }
 151
 152                 if (defined('LOGFILE'))  {
 153                         $fp = fopen(LOGFILE, 'a+');
 154
 155                         if ($fp) {
 156                                 fputs($fp, "[$ts] $msg\n");
 157                                 fclose($fp);
 158                         }
 159                 }
 160
 161         } // function _debug
 162
 163         /**
 164          * Purge a feed old posts.
 165          *
 166          * @param mixed $link A database connection.
 167          * @param mixed $feed_id The id of the purged feed.
 168          * @param mixed $purge_interval Olderness of purged posts.
 169          * @param boolean $debug Set to True to enable the debug. False by default.
 170          * @access public
 171          * @return void
 172          */
 173         function purge_feed($feed_id, $purge_interval, $debug = false) {
 174
 175                 if (!$purge_interval) $purge_interval = feed_purge_interval($feed_id);
 176
 177                 $rows = -1;
 178
 179                 $result = db_query(
 180                         "SELECT owner_uid FROM ttrss_feeds WHERE id = '$feed_id'");
 181
 182                 $owner_uid = false;
 183
 184                 if (db_num_rows($result) == 1) {
 185                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 186                 }
 187
 188                 if ($purge_interval == -1 || !$purge_interval) {
 189                         if ($owner_uid) {
 190                                 ccache_update($feed_id, $owner_uid);
 191                         }
 192                         return;
 193                 }
 194
 195                 if (!$owner_uid) return;
 196
 197                 if (FORCE_ARTICLE_PURGE == 0) {
 198                         $purge_unread = get_pref("PURGE_UNREAD_ARTICLES",
 199                                 $owner_uid, false);
 200                 } else {
 201                         $purge_unread = true;
 202                         $purge_interval = FORCE_ARTICLE_PURGE;
 203                 }
 204
 205                 if (!$purge_unread) $query_limit = " unread = false AND ";
 206
 207                 if (DB_TYPE == "pgsql") {
 208                         $pg_version = get_pgsql_version();
 209
 210                         if (preg_match("/^7\./", $pg_version) || preg_match("/^8\.0/", $pg_version)) {
 211
 212                                 $result = db_query("DELETE FROM ttrss_user_entries WHERE
 213                                         ttrss_entries.id = ref_id AND
 214                                         marked = false AND
 215                                         feed_id = '$feed_id' AND
 216                                         $query_limit
 217                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 218
 219                         } else {
 220
 221                                 $result = db_query("DELETE FROM ttrss_user_entries
 222                                         USING ttrss_entries
 223                                         WHERE ttrss_entries.id = ref_id AND
 224                                         marked = false AND
 225                                         feed_id = '$feed_id' AND
 226                                         $query_limit
 227                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 228                         }
 229
 230                 } else {
 231
 232 /*                      $result = db_query("DELETE FROM ttrss_user_entries WHERE
 233                                 marked = false AND feed_id = '$feed_id' AND
 234                                 (SELECT date_updated FROM ttrss_entries WHERE
 235                                         id = ref_id) < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)"); */
 236
 237                         $result = db_query("DELETE FROM ttrss_user_entries
 238                                 USING ttrss_user_entries, ttrss_entries
 239                                 WHERE ttrss_entries.id = ref_id AND
 240                                 marked = false AND
 241                                 feed_id = '$feed_id' AND
 242                                 $query_limit
 243                                 ttrss_entries.date_updated < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)");
 244                 }
 245
 246                 $rows = db_affected_rows($result);
 247
 248                 ccache_update($feed_id, $owner_uid);
 249
 250                 if ($debug) {
 251                         _debug("Purged feed $feed_id ($purge_interval): deleted $rows articles");
 252                 }
 253
 254                 return $rows;
 255         } // function purge_feed
 256
 257         function feed_purge_interval($feed_id) {
 258
 259                 $result = db_query("SELECT purge_interval, owner_uid FROM ttrss_feeds
 260                         WHERE id = '$feed_id'");
 261
 262                 if (db_num_rows($result) == 1) {
 263                         $purge_interval = db_fetch_result($result, 0, "purge_interval");
 264                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 265
 266                         if ($purge_interval == 0) $purge_interval = get_pref(
 267                                 'PURGE_OLD_DAYS', $owner_uid);
 268
 269                         return $purge_interval;
 270
 271                 } else {
 272                         return -1;
 273                 }
 274         }
 275
 276         function purge_orphans($do_output = false) {
 277
 278                 // purge orphaned posts in main content table
 279                 $result = db_query("DELETE FROM ttrss_entries WHERE
 280                         (SELECT COUNT(int_id) FROM ttrss_user_entries WHERE ref_id = id) = 0");
 281
 282                 if ($do_output) {
 283                         $rows = db_affected_rows($result);
 284                         _debug("Purged $rows orphaned posts.");
 285                 }
 286         }
 287
 288         function get_feed_update_interval($feed_id) {
 289                 $result = db_query("SELECT owner_uid, update_interval FROM
 290                         ttrss_feeds WHERE id = '$feed_id'");
 291
 292                 if (db_num_rows($result) == 1) {
 293                         $update_interval = db_fetch_result($result, 0, "update_interval");
 294                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 295
 296                         if ($update_interval != 0) {
 297                                 return $update_interval;
 298                         } else {
 299                                 return get_pref('DEFAULT_UPDATE_INTERVAL', $owner_uid, false);
 300                         }
 301
 302                 } else {
 303                         return -1;
 304                 }
 305         }
 306
 307         function fetch_file_contents($url, $type = false, $login = false, $pass = false, $post_query = false, $timeout = false, $timestamp = 0) {
 308
 309                 global $fetch_last_error;
 310                 global $fetch_last_error_code;
 311                 global $fetch_last_content_type;
 312                 global $fetch_curl_used;
 313
 314                 $url = str_replace(' ', '%20', $url);
 315
 316                 if (!defined('NO_CURL') && function_exists('curl_init')) {
 317
 318                         $fetch_curl_used = true;
 319
 320                         if (ini_get("safe_mode") || ini_get("open_basedir")) {
 321                                 $new_url = geturl($url);
 322                                 if (!$new_url) {
 323                                     // geturl has already populated $fetch_last_error
 324                                     return false;
 325                                 }
 326                                 $ch = curl_init($new_url);
 327                         } else {
 328                                 $ch = curl_init($url);
 329                         }
 330
 331                         if ($timestamp && !$post_query) {
 332                                 curl_setopt($ch, CURLOPT_HTTPHEADER,
 333                                         array("If-Modified-Since: ".gmdate('D, d M Y H:i:s \G\M\T', $timestamp)));
 334                         }
 335
 336                         curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, $timeout ? $timeout : FILE_FETCH_CONNECT_TIMEOUT);
 337                         curl_setopt($ch, CURLOPT_TIMEOUT, $timeout ? $timeout : FILE_FETCH_TIMEOUT);
 338                         curl_setopt($ch, CURLOPT_FOLLOWLOCATION, !ini_get("safe_mode") && !ini_get("open_basedir"));
 339                         curl_setopt($ch, CURLOPT_MAXREDIRS, 20);
 340                         curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
 341                         curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
 342                         curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
 343                         curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_ANY);
 344                         curl_setopt($ch, CURLOPT_USERAGENT, SELF_USER_AGENT);
 345                         curl_setopt($ch, CURLOPT_ENCODING, "");
 346                         curl_setopt($ch, CURLOPT_REFERER, $url);
 347
 348                         if ($post_query) {
 349                                 curl_setopt($ch, CURLOPT_POST, true);
 350                                 curl_setopt($ch, CURLOPT_POSTFIELDS, $post_query);
 351                         }
 352
 353                         if ((OPENSSL_VERSION_NUMBER >= 0x0090808f) && (OPENSSL_VERSION_NUMBER < 0x10000000)) {
 354                                 curl_setopt($ch, CURLOPT_SSLVERSION, 3);
 355                         }
 356
 357                         if ($login && $pass)
 358                                 curl_setopt($ch, CURLOPT_USERPWD, "$login:$pass");
 359
 360                         $contents = @curl_exec($ch);
 361
 362                         if (curl_errno($ch) === 23 || curl_errno($ch) === 61) {
 363                                 curl_setopt($ch, CURLOPT_ENCODING, 'none');
 364                                 $contents = @curl_exec($ch);
 365                         }
 366
 367                         if ($contents === false) {
 368                                 $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
 369                                 curl_close($ch);
 370                                 return false;
 371                         }
 372
 373                         $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
 374                         $fetch_last_content_type = curl_getinfo($ch, CURLINFO_CONTENT_TYPE);
 375
 376                         $fetch_last_error_code = $http_code;
 377
 378                         if ($http_code != 200 || $type && strpos($fetch_last_content_type, "$type") === false) {
 379                                 if (curl_errno($ch) != 0) {
 380                                         $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
 381                                 } else {
 382                                         $fetch_last_error = "HTTP Code: $http_code";
 383                                 }
 384                                 curl_close($ch);
 385                                 return false;
 386                         }
 387
 388                         curl_close($ch);
 389
 390                         return $contents;
 391                 } else {
 392
 393                         $fetch_curl_used = false;
 394
 395                         if ($login && $pass){
 396                                 $url_parts = array();
 397
 398                                 preg_match("/(^[^:]*):\/\/(.*)/", $url, $url_parts);
 399
 400                                 $pass = urlencode($pass);
 401
 402                                 if ($url_parts[1] && $url_parts[2]) {
 403                                         $url = $url_parts[1] . "://$login:$pass@" . $url_parts[2];
 404                                 }
 405                         }
 406
 407                         if (!$post_query && $timestamp) {
 408                                 $context = stream_context_create(array(
 409                                         'http' => array(
 410                                                 'method' => 'GET',
 411                                                 'header' => "If-Modified-Since: ".gmdate("D, d M Y H:i:s \\G\\M\\T\r\n", $timestamp)
 412                                         )));
 413                         } else {
 414                                 $context = NULL;
 415                         }
 416
 417                         $old_error = error_get_last();
 418
 419                         $data = @file_get_contents($url, false, $context);
 420
 421                         $fetch_last_content_type = false;  // reset if no type was sent from server
 422                         if (isset($http_response_header) && is_array($http_response_header)) {
 423                                 foreach ($http_response_header as $h) {
 424                                         if (substr(strtolower($h), 0, 13) == 'content-type:') {
 425                                                 $fetch_last_content_type = substr($h, 14);
 426                                                 // don't abort here b/c there might be more than one
 427                                                 // e.g. if we were being redirected -- last one is the right one
 428                                         }
 429
 430                                         if (substr(strtolower($h), 0, 7) == 'http/1.') {
 431                                                 $fetch_last_error_code = (int) substr($h, 9, 3);
 432                                         }
 433                                 }
 434                         }
 435
 436                         if (!$data) {
 437                                 $error = error_get_last();
 438
 439                                 if ($error['message'] != $old_error['message']) {
 440                                         $fetch_last_error = $error["message"];
 441                                 } else {
 442                                         $fetch_last_error = "HTTP Code: $fetch_last_error_code";
 443                                 }
 444                         }
 445                         return $data;
 446                 }
 447
 448         }
 449
 450         /**
 451          * Try to determine the favicon URL for a feed.
 452          * adapted from wordpress favicon plugin by Jeff Minard (http://thecodepro.com/)
 453          * http://dev.wp-plugins.org/file/favatars/trunk/favatars.php
 454          *
 455          * @param string $url A feed or page URL
 456          * @access public
 457          * @return mixed The favicon URL, or false if none was found.
 458          */
 459         function get_favicon_url($url) {
 460
 461                 $favicon_url = false;
 462
 463                 if ($html = @fetch_file_contents($url)) {
 464
 465                         libxml_use_internal_errors(true);
 466
 467                         $doc = new DOMDocument();
 468                         $doc->loadHTML($html);
 469                         $xpath = new DOMXPath($doc);
 470
 471                         $base = $xpath->query('/html/head/base');
 472                         foreach ($base as $b) {
 473                                 $url = $b->getAttribute("href");
 474                                 break;
 475                         }
 476
 477                         $entries = $xpath->query('/html/head/link[@rel="shortcut icon" or @rel="icon"]');
 478                         if (count($entries) > 0) {
 479                                 foreach ($entries as $entry) {
 480                                         $favicon_url = rewrite_relative_url($url, $entry->getAttribute("href"));
 481                                         break;
 482                                 }
 483                         }
 484                 }
 485
 486                 if (!$favicon_url)
 487                         $favicon_url = rewrite_relative_url($url, "/favicon.ico");
 488
 489                 return $favicon_url;
 490         } // function get_favicon_url
 491
 492         function check_feed_favicon($site_url, $feed) {
 493 #               print "FAVICON [$site_url]: $favicon_url\n";
 494
 495                 $icon_file = ICONS_DIR . "/$feed.ico";
 496
 497                 if (!file_exists($icon_file)) {
 498                         $favicon_url = get_favicon_url($site_url);
 499
 500                         if ($favicon_url) {
 501                                 // Limiting to "image" type misses those served with text/plain
 502                                 $contents = fetch_file_contents($favicon_url); // , "image");
 503
 504                                 if ($contents) {
 505                                         // Crude image type matching.
 506                                         // Patterns gleaned from the file(1) source code.
 507                                         if (preg_match('/^\x00\x00\x01\x00/', $contents)) {
 508                                                 // 0       string  \000\000\001\000        MS Windows icon resource
 509                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa MS Windows icon resource");
 510                                         }
 511                                         elseif (preg_match('/^GIF8/', $contents)) {
 512                                                 // 0       string          GIF8            GIF image data
 513                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa GIF image");
 514                                         }
 515                                         elseif (preg_match('/^\x89PNG\x0d\x0a\x1a\x0a/', $contents)) {
 516                                                 // 0       string          \x89PNG\x0d\x0a\x1a\x0a         PNG image data
 517                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa PNG image");
 518                                         }
 519                                         elseif (preg_match('/^\xff\xd8/', $contents)) {
 520                                                 // 0       beshort         0xffd8          JPEG image data
 521                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa JPG image");
 522                                         }
 523                                         else {
 524                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa UNKNOWN type");
 525                                                 $contents = "";
 526                                         }
 527                                 }
 528
 529                                 if ($contents) {
 530                                         $fp = @fopen($icon_file, "w");
 531
 532                                         if ($fp) {
 533                                                 fwrite($fp, $contents);
 534                                                 fclose($fp);
 535                                                 chmod($icon_file, 0644);
 536                                         }
 537                                 }
 538                         }
 539             return $icon_file;
 540                 }
 541         }
 542
 543         function print_select($id, $default, $values, $attributes = "") {
 544                 print "<select name=\"$id\" id=\"$id\" $attributes>";
 545                 foreach ($values as $v) {
 546                         if ($v == $default)
 547                                 $sel = "selected=\"1\"";
 548                          else
 549                                 $sel = "";
 550
 551                         $v = trim($v);
 552
 553                         print "<option value=\"$v\" $sel>$v</option>";
 554                 }
 555                 print "</select>";
 556         }
 557
 558         function print_select_hash($id, $default, $values, $attributes = "") {
 559                 print "<select name=\"$id\" id='$id' $attributes>";
 560                 foreach (array_keys($values) as $v) {
 561                         if ($v == $default)
 562                                 $sel = 'selected="selected"';
 563                          else
 564                                 $sel = "";
 565
 566                         $v = trim($v);
 567
 568                         print "<option $sel value=\"$v\">".$values[$v]."</option>";
 569                 }
 570
 571                 print "</select>";
 572         }
 573
 574         function print_radio($id, $default, $true_is, $values, $attributes = "") {
 575                 foreach ($values as $v) {
 576
 577                         if ($v == $default)
 578                                 $sel = "checked";
 579                          else
 580                                 $sel = "";
 581
 582                         if ($v == $true_is) {
 583                                 $sel .= " value=\"1\"";
 584                         } else {
 585                                 $sel .= " value=\"0\"";
 586                         }
 587
 588                         print "<input class=\"noborder\" dojoType=\"dijit.form.RadioButton\"
 589                                 type=\"radio\" $sel $attributes name=\"$id\">&nbsp;$v&nbsp;";
 590
 591                 }
 592         }
 593
 594         function initialize_user_prefs($uid, $profile = false) {
 595
 596                 $uid = db_escape_string($uid);
 597
 598                 if (!$profile) {
 599                         $profile = "NULL";
 600                         $profile_qpart = "AND profile IS NULL";
 601                 } else {
 602                         $profile_qpart = "AND profile = '$profile'";
 603                 }
 604
 605                 if (get_schema_version() < 63) $profile_qpart = "";
 606
 607                 db_query("BEGIN");
 608
 609                 $result = db_query("SELECT pref_name,def_value FROM ttrss_prefs");
 610
 611                 $u_result = db_query("SELECT pref_name
 612                         FROM ttrss_user_prefs WHERE owner_uid = '$uid' $profile_qpart");
 613
 614                 $active_prefs = array();
 615
 616                 while ($line = db_fetch_assoc($u_result)) {
 617                         array_push($active_prefs, $line["pref_name"]);
 618                 }
 619
 620                 while ($line = db_fetch_assoc($result)) {
 621                         if (array_search($line["pref_name"], $active_prefs) === FALSE) {
 622 //                              print "adding " . $line["pref_name"] . "<br>";
 623
 624                                 $line["def_value"] = db_escape_string($line["def_value"]);
 625                                 $line["pref_name"] = db_escape_string($line["pref_name"]);
 626
 627                                 if (get_schema_version() < 63) {
 628                                         db_query("INSERT INTO ttrss_user_prefs
 629                                                 (owner_uid,pref_name,value) VALUES
 630                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."')");
 631
 632                                 } else {
 633                                         db_query("INSERT INTO ttrss_user_prefs
 634                                                 (owner_uid,pref_name,value, profile) VALUES
 635                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."', $profile)");
 636                                 }
 637
 638                         }
 639                 }
 640
 641                 db_query("COMMIT");
 642
 643         }
 644
 645         function get_ssl_certificate_id() {
 646                 if ($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"]) {
 647                         return sha1($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"] .
 648                                 $_SERVER["REDIRECT_SSL_CLIENT_V_START"] .
 649                                 $_SERVER["REDIRECT_SSL_CLIENT_V_END"] .
 650                                 $_SERVER["REDIRECT_SSL_CLIENT_S_DN"]);
 651                 }
 652                 return "";
 653         }
 654
 655         function authenticate_user($login, $password, $check_only = false) {
 656
 657                 if (!SINGLE_USER_MODE) {
 658                         $user_id = false;
 659
 660                         foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_AUTH_USER) as $plugin) {
 661
 662                                 $user_id = (int) $plugin->authenticate($login, $password);
 663
 664                                 if ($user_id) {
 665                                         $_SESSION["auth_module"] = strtolower(get_class($plugin));
 666                                         break;
 667                                 }
 668                         }
 669
 670                         if ($user_id && !$check_only) {
 671                                 @session_start();
 672
 673                                 $_SESSION["uid"] = $user_id;
 674                                 $_SESSION["version"] = VERSION_STATIC;
 675
 676                                 $result = db_query("SELECT login,access_level,pwd_hash FROM ttrss_users
 677                                         WHERE id = '$user_id'");
 678
 679                                 $_SESSION["name"] = db_fetch_result($result, 0, "login");
 680                                 $_SESSION["access_level"] = db_fetch_result($result, 0, "access_level");
 681                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 682
 683                                 db_query("UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 684                                         $_SESSION["uid"]);
 685
 686                                 $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 687                                 $_SESSION["user_agent"] = sha1($_SERVER['HTTP_USER_AGENT']);
 688                                 $_SESSION["pwd_hash"] = db_fetch_result($result, 0, "pwd_hash");
 689
 690                                 $_SESSION["last_version_check"] = time();
 691
 692                                 initialize_user_prefs($_SESSION["uid"]);
 693
 694                                 return true;
 695                         }
 696
 697                         return false;
 698
 699                 } else {
 700
 701                         $_SESSION["uid"] = 1;
 702                         $_SESSION["name"] = "admin";
 703                         $_SESSION["access_level"] = 10;
 704
 705                         $_SESSION["hide_hello"] = true;
 706                         $_SESSION["hide_logout"] = true;
 707
 708                         $_SESSION["auth_module"] = false;
 709
 710                         if (!$_SESSION["csrf_token"]) {
 711                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 712                         }
 713
 714                         $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 715
 716                         initialize_user_prefs($_SESSION["uid"]);
 717
 718                         return true;
 719                 }
 720         }
 721
 722         function make_password($length = 8) {
 723
 724                 $password = "";
 725                 $possible = "0123456789abcdfghjkmnpqrstvwxyzABCDFGHJKMNPQRSTVWXYZ";
 726
 727         $i = 0;
 728
 729                 while ($i < $length) {
 730                         $char = substr($possible, mt_rand(0, strlen($possible)-1), 1);
 731
 732                         if (!strstr($password, $char)) {
 733                                 $password .= $char;
 734                                 $i++;
 735                         }
 736                 }
 737                 return $password;
 738         }
 739
 740         // this is called after user is created to initialize default feeds, labels
 741         // or whatever else
 742
 743         // user preferences are checked on every login, not here
 744
 745         function initialize_user($uid) {
 746
 747                 db_query("insert into ttrss_feeds (owner_uid,title,feed_url)
 748                         values ('$uid', 'Tiny Tiny RSS: New Releases',
 749                         'http://tt-rss.org/releases.rss')");
 750
 751                 db_query("insert into ttrss_feeds (owner_uid,title,feed_url)
 752                         values ('$uid', 'Tiny Tiny RSS: Forum',
 753                                 'http://tt-rss.org/forum/rss.php')");
 754         }
 755
 756         function logout_user() {
 757                 session_destroy();
 758                 if (isset($_COOKIE[session_name()])) {
 759                    setcookie(session_name(), '', time()-42000, '/');
 760                 }
 761         }
 762
 763         function validate_csrf($csrf_token) {
 764                 return $csrf_token == $_SESSION['csrf_token'];
 765         }
 766
 767         function load_user_plugins($owner_uid) {
 768                 if ($owner_uid) {
 769                         $plugins = get_pref("_ENABLED_PLUGINS", $owner_uid);
 770
 771                         PluginHost::getInstance()->load($plugins, PluginHost::KIND_USER, $owner_uid);
 772
 773                         if (get_schema_version() > 100) {
 774                                 PluginHost::getInstance()->load_data();
 775                         }
 776                 }
 777         }
 778
 779         function login_sequence() {
 780                 if (SINGLE_USER_MODE) {
 781                         @session_start();
 782                         authenticate_user("admin", null);
 783                         load_user_plugins($_SESSION["uid"]);
 784                 } else {
 785                         if (!validate_session()) $_SESSION["uid"] = false;
 786
 787                         if (!$_SESSION["uid"]) {
 788
 789                                 if (AUTH_AUTO_LOGIN && authenticate_user(null, null)) {
 790                                     $_SESSION["ref_schema_version"] = get_schema_version(true);
 791                                 } else {
 792                                          authenticate_user(null, null, true);
 793                                 }
 794
 795                                 if (!$_SESSION["uid"]) {
 796                                         @session_destroy();
 797                                         setcookie(session_name(), '', time()-42000, '/');
 798
 799                                         render_login_form();
 800                                         exit;
 801                                 }
 802
 803                         } else {
 804                                 /* bump login timestamp */
 805                                 db_query("UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 806                                         $_SESSION["uid"]);
 807                                 $_SESSION["last_login_update"] = time();
 808                         }
 809
 810                         if ($_SESSION["uid"]) {
 811                                 startup_gettext();
 812                                 load_user_plugins($_SESSION["uid"]);
 813
 814                                 /* cleanup ccache */
 815
 816                                 db_query("DELETE FROM ttrss_counters_cache WHERE owner_uid = ".
 817                                         $_SESSION["uid"] . " AND
 818                                                 (SELECT COUNT(id) FROM ttrss_feeds WHERE
 819                                                         ttrss_feeds.id = feed_id) = 0");
 820
 821                                 db_query("DELETE FROM ttrss_cat_counters_cache WHERE owner_uid = ".
 822                                         $_SESSION["uid"] . " AND
 823                                                 (SELECT COUNT(id) FROM ttrss_feed_categories WHERE
 824                                                         ttrss_feed_categories.id = feed_id) = 0");
 825
 826                         }
 827
 828                 }
 829         }
 830
 831         function truncate_string($str, $max_len, $suffix = '&hellip;') {
 832                 if (mb_strlen($str, "utf-8") > $max_len - 3) {
 833                         return mb_substr($str, 0, $max_len, "utf-8") . $suffix;
 834                 } else {
 835                         return $str;
 836                 }
 837         }
 838
 839         function convert_timestamp($timestamp, $source_tz, $dest_tz) {
 840
 841                 try {
 842                         $source_tz = new DateTimeZone($source_tz);
 843                 } catch (Exception $e) {
 844                         $source_tz = new DateTimeZone('UTC');
 845                 }
 846
 847                 try {
 848                         $dest_tz = new DateTimeZone($dest_tz);
 849                 } catch (Exception $e) {
 850                         $dest_tz = new DateTimeZone('UTC');
 851                 }
 852
 853                 $dt = new DateTime(date('Y-m-d H:i:s', $timestamp), $source_tz);
 854                 return $dt->format('U') + $dest_tz->getOffset($dt);
 855         }
 856
 857         function make_local_datetime($timestamp, $long, $owner_uid = false,
 858                                         $no_smart_dt = false) {
 859
 860                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 861                 if (!$timestamp) $timestamp = '1970-01-01 0:00';
 862
 863                 global $utc_tz;
 864                 global $user_tz;
 865
 866                 if (!$utc_tz) $utc_tz = new DateTimeZone('UTC');
 867
 868                 $timestamp = substr($timestamp, 0, 19);
 869
 870                 # We store date in UTC internally
 871                 $dt = new DateTime($timestamp, $utc_tz);
 872
 873                 $user_tz_string = get_pref('USER_TIMEZONE', $owner_uid);
 874
 875                 if ($user_tz_string != 'Automatic') {
 876
 877                         try {
 878                                 if (!$user_tz) $user_tz = new DateTimeZone($user_tz_string);
 879                         } catch (Exception $e) {
 880                                 $user_tz = $utc_tz;
 881                         }
 882
 883                         $tz_offset = $user_tz->getOffset($dt);
 884                 } else {
 885                         $tz_offset = (int) -$_SESSION["clientTzOffset"];
 886                 }
 887
 888                 $user_timestamp = $dt->format('U') + $tz_offset;
 889
 890                 if (!$no_smart_dt) {
 891                         return smart_date_time($user_timestamp,
 892                                 $tz_offset, $owner_uid);
 893                 } else {
 894                         if ($long)
 895                                 $format = get_pref('LONG_DATE_FORMAT', $owner_uid);
 896                         else
 897                                 $format = get_pref('SHORT_DATE_FORMAT', $owner_uid);
 898
 899                         return date($format, $user_timestamp);
 900                 }
 901         }
 902
 903         function smart_date_time($timestamp, $tz_offset = 0, $owner_uid = false) {
 904                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 905
 906                 if (date("Y.m.d", $timestamp) == date("Y.m.d", time() + $tz_offset)) {
 907                         return date("G:i", $timestamp);
 908                 } else if (date("Y", $timestamp) == date("Y", time() + $tz_offset)) {
 909                         $format = get_pref('SHORT_DATE_FORMAT', $owner_uid);
 910                         return date($format, $timestamp);
 911                 } else {
 912                         $format = get_pref('LONG_DATE_FORMAT', $owner_uid);
 913                         return date($format, $timestamp);
 914                 }
 915         }
 916
 917         function sql_bool_to_bool($s) {
 918                 if ($s == "t" || $s == "1" || strtolower($s) == "true") {
 919                         return true;
 920                 } else {
 921                         return false;
 922                 }
 923         }
 924
 925         function bool_to_sql_bool($s) {
 926                 if ($s) {
 927                         return "true";
 928                 } else {
 929                         return "false";
 930                 }
 931         }
 932
 933         // Session caching removed due to causing wrong redirects to upgrade
 934         // script when get_schema_version() is called on an obsolete session
 935         // created on a previous schema version.
 936         function get_schema_version($nocache = false) {
 937                 global $schema_version;
 938
 939                 if (!$schema_version && !$nocache) {
 940                         $result = db_query("SELECT schema_version FROM ttrss_version");
 941                         $version = db_fetch_result($result, 0, "schema_version");
 942                         $schema_version = $version;
 943                         return $version;
 944                 } else {
 945                         return $schema_version;
 946                 }
 947         }
 948
 949         function sanity_check() {
 950                 require_once 'errors.php';
 951
 952                 $error_code = 0;
 953                 $schema_version = get_schema_version(true);
 954
 955                 if ($schema_version != SCHEMA_VERSION) {
 956                         $error_code = 5;
 957                 }
 958
 959                 if (DB_TYPE == "mysql") {
 960                         $result = db_query("SELECT true", false);
 961                         if (db_num_rows($result) != 1) {
 962                                 $error_code = 10;
 963                         }
 964                 }
 965
 966                 if (db_escape_string("testTEST") != "testTEST") {
 967                         $error_code = 12;
 968                 }
 969
 970                 return array("code" => $error_code, "message" => $ERRORS[$error_code]);
 971         }
 972
 973         function file_is_locked($filename) {
 974                 if (file_exists(LOCK_DIRECTORY . "/$filename")) {
 975                         if (function_exists('flock')) {
 976                                 $fp = @fopen(LOCK_DIRECTORY . "/$filename", "r");
 977                                 if ($fp) {
 978                                         if (flock($fp, LOCK_EX | LOCK_NB)) {
 979                                                 flock($fp, LOCK_UN);
 980                                                 fclose($fp);
 981                                                 return false;
 982                                         }
 983                                         fclose($fp);
 984                                         return true;
 985                                 } else {
 986                                         return false;
 987                                 }
 988                         }
 989                         return true; // consider the file always locked and skip the test
 990                 } else {
 991                         return false;
 992                 }
 993         }
 994
 995
 996         function make_lockfile($filename) {
 997                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
 998
 999                 if ($fp && flock($fp, LOCK_EX | LOCK_NB)) {
1000                         $stat_h = fstat($fp);
1001                         $stat_f = stat(LOCK_DIRECTORY . "/$filename");
1002
1003                         if (strtoupper(substr(PHP_OS, 0, 3)) !== 'WIN') {
1004                                 if ($stat_h["ino"] != $stat_f["ino"] ||
1005                                                 $stat_h["dev"] != $stat_f["dev"]) {
1006
1007                                         return false;
1008                                 }
1009                         }
1010
1011                         if (function_exists('posix_getpid')) {
1012                                 fwrite($fp, posix_getpid() . "\n");
1013                         }
1014                         return $fp;
1015                 } else {
1016                         return false;
1017                 }
1018         }
1019
1020         function make_stampfile($filename) {
1021                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
1022
1023                 if (flock($fp, LOCK_EX | LOCK_NB)) {
1024                         fwrite($fp, time() . "\n");
1025                         flock($fp, LOCK_UN);
1026                         fclose($fp);
1027                         return true;
1028                 } else {
1029                         return false;
1030                 }
1031         }
1032
1033         function sql_random_function() {
1034                 if (DB_TYPE == "mysql") {
1035                         return "RAND()";
1036                 } else {
1037                         return "RANDOM()";
1038                 }
1039         }
1040
1041         function catchup_feed($feed, $cat_view, $owner_uid = false, $max_id = false, $mode = 'all') {
1042
1043                         if (!$owner_uid) $owner_uid = $_SESSION['uid'];
1044
1045                         //if (preg_match("/^-?[0-9][0-9]*$/", $feed) != false) {
1046
1047                         // Todo: all this interval stuff needs some generic generator function
1048
1049                         $date_qpart = "false";
1050
1051                         switch ($mode) {
1052                         case "1day":
1053                                 if (DB_TYPE == "pgsql") {
1054                                         $date_qpart = "date_entered < NOW() - INTERVAL '1 day' ";
1055                                 } else {
1056                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 1 DAY) ";
1057                                 }
1058                                 break;
1059                         case "1week":
1060                                 if (DB_TYPE == "pgsql") {
1061                                         $date_qpart = "date_entered < NOW() - INTERVAL '1 week' ";
1062                                 } else {
1063                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 1 WEEK) ";
1064                                 }
1065                                 break;
1066                         case "2week":
1067                                 if (DB_TYPE == "pgsql") {
1068                                         $date_qpart = "date_entered < NOW() - INTERVAL '2 week' ";
1069                                 } else {
1070                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 2 WEEK) ";
1071                                 }
1072                                 break;
1073                         default:
1074                                 $date_qpart = "true";
1075                         }
1076
1077                         if (is_numeric($feed)) {
1078                                 if ($cat_view) {
1079
1080                                         if ($feed >= 0) {
1081
1082                                                 if ($feed > 0) {
1083                                                         $children = getChildCategories($feed, $owner_uid);
1084                                                         array_push($children, $feed);
1085
1086                                                         $children = join(",", $children);
1087
1088                                                         $cat_qpart = "cat_id IN ($children)";
1089                                                 } else {
1090                                                         $cat_qpart = "cat_id IS NULL";
1091                                                 }
1092
1093                                                 db_query("UPDATE ttrss_user_entries
1094                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1095                                                                 (SELECT id FROM
1096                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1097                                                                                 AND owner_uid = $owner_uid AND unread = true AND feed_id IN
1098                                                                                         (SELECT id FROM ttrss_feeds WHERE $cat_qpart) AND $date_qpart) as tmp)");
1099
1100                                         } else if ($feed == -2) {
1101
1102                                                 db_query("UPDATE ttrss_user_entries
1103                                                         SET unread = false,last_read = NOW() WHERE (SELECT COUNT(*)
1104                                                                 FROM ttrss_user_labels2 WHERE article_id = ref_id) > 0
1105                                                                 AND unread = true AND $date_qpart AND owner_uid = $owner_uid");
1106                                         }
1107
1108                                 } else if ($feed > 0) {
1109
1110                                         db_query("UPDATE ttrss_user_entries
1111                                                 SET unread = false, last_read = NOW() WHERE ref_id IN
1112                                                         (SELECT id FROM
1113                                                                 (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1114                                                                         AND owner_uid = $owner_uid AND unread = true AND feed_id = $feed AND $date_qpart) as tmp)");
1115
1116                                 } else if ($feed < 0 && $feed > LABEL_BASE_INDEX) { // special, like starred
1117
1118                                         if ($feed == -1) {
1119                                                 db_query("UPDATE ttrss_user_entries
1120                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1121                                                                 (SELECT id FROM
1122                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1123                                                                                 AND owner_uid = $owner_uid AND unread = true AND marked = true AND $date_qpart) as tmp)");
1124                                         }
1125
1126                                         if ($feed == -2) {
1127                                                 db_query("UPDATE ttrss_user_entries
1128                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1129                                                                 (SELECT id FROM
1130                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1131                                                                                 AND owner_uid = $owner_uid AND unread = true AND published = true AND $date_qpart) as tmp)");
1132                                         }
1133
1134                                         if ($feed == -3) {
1135
1136                                                 $intl = get_pref("FRESH_ARTICLE_MAX_AGE");
1137
1138                                                 if (DB_TYPE == "pgsql") {
1139                                                         $match_part = "date_entered > NOW() - INTERVAL '$intl hour' ";
1140                                                 } else {
1141                                                         $match_part = "date_entered > DATE_SUB(NOW(),
1142                                                                 INTERVAL $intl HOUR) ";
1143                                                 }
1144
1145                                                 db_query("UPDATE ttrss_user_entries
1146                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1147                                                                 (SELECT id FROM
1148                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1149                                                                                 AND owner_uid = $owner_uid AND unread = true AND $date_qpart AND $match_part) as tmp)");
1150                                         }
1151
1152                                         if ($feed == -4) {
1153                                                 db_query("UPDATE ttrss_user_entries
1154                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1155                                                                 (SELECT id FROM
1156                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1157                                                                                 AND owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1158                                         }
1159
1160                                 } else if ($feed < LABEL_BASE_INDEX) { // label
1161
1162                                         $label_id = feed_to_label_id($feed);
1163
1164                                         db_query("UPDATE ttrss_user_entries
1165                                                 SET unread = false, last_read = NOW() WHERE ref_id IN
1166                                                         (SELECT id FROM
1167                                                                 (SELECT ttrss_entries.id FROM ttrss_entries, ttrss_user_entries, ttrss_user_labels2 WHERE ref_id = id
1168                                                                         AND label_id = '$label_id' AND ref_id = article_id
1169                                                                         AND owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1170
1171                                 }
1172
1173                                 ccache_update($feed, $owner_uid, $cat_view);
1174
1175                         } else { // tag
1176                                 db_query("UPDATE ttrss_user_entries
1177                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1178                                                 (SELECT id FROM
1179                                                         (SELECT ttrss_entries.id FROM ttrss_entries, ttrss_user_entries, ttrss_tags WHERE ref_id = ttrss_entries.id
1180                                                                 AND post_int_id = int_id AND tag_name = '$feed'
1181                                                                 AND ttrss_user_entries.owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1182
1183                         }
1184         }
1185
1186         function getAllCounters() {
1187                 $data = getGlobalCounters();
1188
1189                 $data = array_merge($data, getVirtCounters());
1190                 $data = array_merge($data, getLabelCounters());
1191                 $data = array_merge($data, getFeedCounters());
1192                 $data = array_merge($data, getCategoryCounters());
1193
1194                 return $data;
1195         }
1196
1197         function getCategoryTitle($cat_id) {
1198
1199                 if ($cat_id == -1) {
1200                         return __("Special");
1201                 } else if ($cat_id == -2) {
1202                         return __("Labels");
1203                 } else {
1204
1205                         $result = db_query("SELECT title FROM ttrss_feed_categories WHERE
1206                                 id = '$cat_id'");
1207
1208                         if (db_num_rows($result) == 1) {
1209                                 return db_fetch_result($result, 0, "title");
1210                         } else {
1211                                 return __("Uncategorized");
1212                         }
1213                 }
1214         }
1215
1216
1217         function getCategoryCounters() {
1218                 $ret_arr = array();
1219
1220                 /* Labels category */
1221
1222                 $cv = array("id" => -2, "kind" => "cat",
1223                         "counter" => getCategoryUnread(-2));
1224
1225                 array_push($ret_arr, $cv);
1226
1227                 $result = db_query("SELECT id AS cat_id, value AS unread,
1228                         (SELECT COUNT(id) FROM ttrss_feed_categories AS c2
1229                                 WHERE c2.parent_cat = ttrss_feed_categories.id) AS num_children
1230                         FROM ttrss_feed_categories, ttrss_cat_counters_cache
1231                         WHERE ttrss_cat_counters_cache.feed_id = id AND
1232                         ttrss_cat_counters_cache.owner_uid = ttrss_feed_categories.owner_uid AND
1233                         ttrss_feed_categories.owner_uid = " . $_SESSION["uid"]);
1234
1235                 while ($line = db_fetch_assoc($result)) {
1236                         $line["cat_id"] = (int) $line["cat_id"];
1237
1238                         if ($line["num_children"] > 0) {
1239                                 $child_counter = getCategoryChildrenUnread($line["cat_id"], $_SESSION["uid"]);
1240                         } else {
1241                                 $child_counter = 0;
1242                         }
1243
1244                         $cv = array("id" => $line["cat_id"], "kind" => "cat",
1245                                 "counter" => $line["unread"] + $child_counter);
1246
1247                         array_push($ret_arr, $cv);
1248                 }
1249
1250                 /* Special case: NULL category doesn't actually exist in the DB */
1251
1252                 $cv = array("id" => 0, "kind" => "cat",
1253                         "counter" => (int) ccache_find(0, $_SESSION["uid"], true));
1254
1255                 array_push($ret_arr, $cv);
1256
1257                 return $ret_arr;
1258         }
1259
1260         // only accepts real cats (>= 0)
1261         function getCategoryChildrenUnread($cat, $owner_uid = false) {
1262                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1263
1264                 $result = db_query("SELECT id FROM ttrss_feed_categories WHERE parent_cat = '$cat'
1265                                 AND owner_uid = $owner_uid");
1266
1267                 $unread = 0;
1268
1269                 while ($line = db_fetch_assoc($result)) {
1270                         $unread += getCategoryUnread($line["id"], $owner_uid);
1271                         $unread += getCategoryChildrenUnread($line["id"], $owner_uid);
1272                 }
1273
1274                 return $unread;
1275         }
1276
1277         function getCategoryUnread($cat, $owner_uid = false) {
1278
1279                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1280
1281                 if ($cat >= 0) {
1282
1283                         if ($cat != 0) {
1284                                 $cat_query = "cat_id = '$cat'";
1285                         } else {
1286                                 $cat_query = "cat_id IS NULL";
1287                         }
1288
1289                         $result = db_query("SELECT id FROM ttrss_feeds WHERE $cat_query
1290                                         AND owner_uid = " . $owner_uid);
1291
1292                         $cat_feeds = array();
1293                         while ($line = db_fetch_assoc($result)) {
1294                                 array_push($cat_feeds, "feed_id = " . $line["id"]);
1295                         }
1296
1297                         if (count($cat_feeds) == 0) return 0;
1298
1299                         $match_part = implode(" OR ", $cat_feeds);
1300
1301                         $result = db_query("SELECT COUNT(int_id) AS unread
1302                                 FROM ttrss_user_entries
1303                                 WHERE   unread = true AND ($match_part)
1304                                 AND owner_uid = " . $owner_uid);
1305
1306                         $unread = 0;
1307
1308                         # this needs to be rewritten
1309                         while ($line = db_fetch_assoc($result)) {
1310                                 $unread += $line["unread"];
1311                         }
1312
1313                         return $unread;
1314                 } else if ($cat == -1) {
1315                         return getFeedUnread(-1) + getFeedUnread(-2) + getFeedUnread(-3) + getFeedUnread(0);
1316                 } else if ($cat == -2) {
1317
1318                         $result = db_query("
1319                                 SELECT COUNT(unread) AS unread FROM
1320                                         ttrss_user_entries, ttrss_user_labels2
1321                                 WHERE article_id = ref_id AND unread = true
1322                                         AND ttrss_user_entries.owner_uid = '$owner_uid'");
1323
1324                         $unread = db_fetch_result($result, 0, "unread");
1325
1326                         return $unread;
1327
1328                 }
1329         }
1330
1331         function getFeedUnread($feed, $is_cat = false) {
1332                 return getFeedArticles($feed, $is_cat, true, $_SESSION["uid"]);
1333         }
1334
1335         function getLabelUnread($label_id, $owner_uid = false) {
1336                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1337
1338                 $result = db_query("SELECT COUNT(ref_id) AS unread FROM ttrss_user_entries, ttrss_user_labels2
1339                         WHERE owner_uid = '$owner_uid' AND unread = true AND label_id = '$label_id' AND article_id = ref_id");
1340
1341                 if (db_num_rows($result) != 0) {
1342                         return db_fetch_result($result, 0, "unread");
1343                 } else {
1344                         return 0;
1345                 }
1346         }
1347
1348         function getFeedArticles($feed, $is_cat = false, $unread_only = false,
1349                 $owner_uid = false) {
1350
1351                 $n_feed = (int) $feed;
1352                 $need_entries = false;
1353
1354                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1355
1356                 if ($unread_only) {
1357                         $unread_qpart = "unread = true";
1358                 } else {
1359                         $unread_qpart = "true";
1360                 }
1361
1362                 if ($is_cat) {
1363                         return getCategoryUnread($n_feed, $owner_uid);
1364                 } else if ($n_feed == -6) {
1365                         return 0;
1366                 } else if ($feed != "0" && $n_feed == 0) {
1367
1368                         $feed = db_escape_string($feed);
1369
1370                         $result = db_query("SELECT SUM((SELECT COUNT(int_id)
1371                                 FROM ttrss_user_entries,ttrss_entries WHERE int_id = post_int_id
1372                                         AND ref_id = id AND $unread_qpart)) AS count FROM ttrss_tags
1373                                 WHERE owner_uid = $owner_uid AND tag_name = '$feed'");
1374                         return db_fetch_result($result, 0, "count");
1375
1376                 } else if ($n_feed == -1) {
1377                         $match_part = "marked = true";
1378                 } else if ($n_feed == -2) {
1379                         $match_part = "published = true";
1380                 } else if ($n_feed == -3) {
1381                         $match_part = "unread = true AND score >= 0";
1382
1383                         $intl = get_pref("FRESH_ARTICLE_MAX_AGE", $owner_uid);
1384
1385                         if (DB_TYPE == "pgsql") {
1386                                 $match_part .= " AND updated > NOW() - INTERVAL '$intl hour' ";
1387                         } else {
1388                                 $match_part .= " AND updated > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
1389                         }
1390
1391                         $need_entries = true;
1392
1393                 } else if ($n_feed == -4) {
1394                         $match_part = "true";
1395                 } else if ($n_feed >= 0) {
1396
1397                         if ($n_feed != 0) {
1398                                 $match_part = "feed_id = '$n_feed'";
1399                         } else {
1400                                 $match_part = "feed_id IS NULL";
1401                         }
1402
1403                 } else if ($feed < LABEL_BASE_INDEX) {
1404
1405                         $label_id = feed_to_label_id($feed);
1406
1407                         return getLabelUnread($label_id, $owner_uid);
1408
1409                 }
1410
1411                 if ($match_part) {
1412
1413                         if ($need_entries) {
1414                                 $from_qpart = "ttrss_user_entries,ttrss_entries";
1415                                 $from_where = "ttrss_entries.id = ttrss_user_entries.ref_id AND";
1416                         } else {
1417                                 $from_qpart = "ttrss_user_entries";
1418                         }
1419
1420                         $query = "SELECT count(int_id) AS unread
1421                                 FROM $from_qpart WHERE
1422                                 $unread_qpart AND $from_where ($match_part) AND ttrss_user_entries.owner_uid = $owner_uid";
1423
1424                         //echo "[$feed/$query]\n";
1425
1426                         $result = db_query($query);
1427
1428                 } else {
1429
1430                         $result = db_query("SELECT COUNT(post_int_id) AS unread
1431                                 FROM ttrss_tags,ttrss_user_entries,ttrss_entries
1432                                 WHERE tag_name = '$feed' AND post_int_id = int_id AND ref_id = ttrss_entries.id
1433                                 AND $unread_qpart AND ttrss_tags.owner_uid = " . $owner_uid);
1434                 }
1435
1436                 $unread = db_fetch_result($result, 0, "unread");
1437
1438                 return $unread;
1439         }
1440
1441         function getGlobalUnread($user_id = false) {
1442
1443                 if (!$user_id) {
1444                         $user_id = $_SESSION["uid"];
1445                 }
1446
1447                 $result = db_query("SELECT SUM(value) AS c_id FROM ttrss_counters_cache
1448                         WHERE owner_uid = '$user_id' AND feed_id > 0");
1449
1450                 $c_id = db_fetch_result($result, 0, "c_id");
1451
1452                 return $c_id;
1453         }
1454
1455         function getGlobalCounters($global_unread = -1) {
1456                 $ret_arr = array();
1457
1458                 if ($global_unread == -1) {
1459                         $global_unread = getGlobalUnread();
1460                 }
1461
1462                 $cv = array("id" => "global-unread",
1463                         "counter" => (int) $global_unread);
1464
1465                 array_push($ret_arr, $cv);
1466
1467                 $result = db_query("SELECT COUNT(id) AS fn FROM
1468                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1469
1470                 $subscribed_feeds = db_fetch_result($result, 0, "fn");
1471
1472                 $cv = array("id" => "subscribed-feeds",
1473                         "counter" => (int) $subscribed_feeds);
1474
1475                 array_push($ret_arr, $cv);
1476
1477                 return $ret_arr;
1478         }
1479
1480         function getVirtCounters() {
1481
1482                 $ret_arr = array();
1483
1484                 for ($i = 0; $i >= -4; $i--) {
1485
1486                         $count = getFeedUnread($i);
1487
1488                         if ($i == 0 || $i == -1 || $i == -2)
1489                                 $auxctr = getFeedArticles($i, false);
1490                         else
1491                                 $auxctr = 0;
1492
1493                         $cv = array("id" => $i,
1494                                 "counter" => (int) $count,
1495                                 "auxcounter" => $auxctr);
1496
1497 //                      if (get_pref('EXTENDED_FEEDLIST'))
1498 //                              $cv["xmsg"] = getFeedArticles($i)." ".__("total");
1499
1500                         array_push($ret_arr, $cv);
1501                 }
1502
1503                 $feeds = PluginHost::getInstance()->get_feeds(-1);
1504
1505                 if (is_array($feeds)) {
1506                         foreach ($feeds as $feed) {
1507                                 $cv = array("id" => PluginHost::pfeed_to_feed_id($feed['id']),
1508                                         "counter" => $feed['sender']->get_unread($feed['id']));
1509
1510                                 if (method_exists($feed['sender'], 'get_total'))
1511                                         $cv["auxcounter"] = $feed['sender']->get_total($feed['id']);
1512
1513                                 array_push($ret_arr, $cv);
1514                         }
1515                 }
1516
1517                 return $ret_arr;
1518         }
1519
1520         function getLabelCounters($descriptions = false) {
1521
1522                 $ret_arr = array();
1523
1524                 $owner_uid = $_SESSION["uid"];
1525
1526                 $result = db_query("SELECT id,caption,COUNT(u1.unread) AS unread,COUNT(u2.unread) AS total
1527                         FROM ttrss_labels2 LEFT JOIN ttrss_user_labels2 ON
1528                                 (ttrss_labels2.id = label_id)
1529                                 LEFT JOIN ttrss_user_entries AS u1 ON (u1.ref_id = article_id AND u1.unread = true
1530                                         AND u1.owner_uid = $owner_uid)
1531                                 LEFT JOIN ttrss_user_entries AS u2 ON (u2.ref_id = article_id AND u2.unread = false
1532                                         AND u2.owner_uid = $owner_uid)
1533                                 WHERE ttrss_labels2.owner_uid = $owner_uid GROUP BY ttrss_labels2.id,
1534                                         ttrss_labels2.caption");
1535
1536                 while ($line = db_fetch_assoc($result)) {
1537
1538                         $id = label_to_feed_id($line["id"]);
1539
1540                         $cv = array("id" => $id,
1541                                 "counter" => (int) $line["unread"],
1542                                 "auxcounter" => (int) $line["total"]);
1543
1544                         if ($descriptions)
1545                                 $cv["description"] = $line["caption"];
1546
1547                         array_push($ret_arr, $cv);
1548                 }
1549
1550                 return $ret_arr;
1551         }
1552
1553         function getFeedCounters($active_feed = false) {
1554
1555                 $ret_arr = array();
1556
1557                 $query = "SELECT ttrss_feeds.id,
1558                                 ttrss_feeds.title,
1559                                 ".SUBSTRING_FOR_DATE."(ttrss_feeds.last_updated,1,19) AS last_updated,
1560                                 last_error, value AS count
1561                         FROM ttrss_feeds, ttrss_counters_cache
1562                         WHERE ttrss_feeds.owner_uid = ".$_SESSION["uid"]."
1563                                 AND ttrss_counters_cache.owner_uid = ttrss_feeds.owner_uid
1564                                 AND ttrss_counters_cache.feed_id = id";
1565
1566                 $result = db_query($query);
1567                 $fctrs_modified = false;
1568
1569                 while ($line = db_fetch_assoc($result)) {
1570
1571                         $id = $line["id"];
1572                         $count = $line["count"];
1573                         $last_error = htmlspecialchars($line["last_error"]);
1574
1575                         $last_updated = make_local_datetime($line['last_updated'], false);
1576
1577                         $has_img = feed_has_icon($id);
1578
1579                         if (date('Y') - date('Y', strtotime($line['last_updated'])) > 2)
1580                                 $last_updated = '';
1581
1582                         $cv = array("id" => $id,
1583                                 "updated" => $last_updated,
1584                                 "counter" => (int) $count,
1585                                 "has_img" => (int) $has_img);
1586
1587                         if ($last_error)
1588                                 $cv["error"] = $last_error;
1589
1590 //                      if (get_pref('EXTENDED_FEEDLIST'))
1591 //                              $cv["xmsg"] = getFeedArticles($id)." ".__("total");
1592
1593                         if ($active_feed && $id == $active_feed)
1594                                 $cv["title"] = truncate_string($line["title"], 30);
1595
1596                         array_push($ret_arr, $cv);
1597
1598                 }
1599
1600                 return $ret_arr;
1601         }
1602
1603         function get_pgsql_version() {
1604                 $result = db_query("SELECT version() AS version");
1605                 $version = explode(" ", db_fetch_result($result, 0, "version"));
1606                 return $version[1];
1607         }
1608
1609         /**
1610          * @return array (code => Status code, message => error message if available)
1611          *
1612          *                 0 - OK, Feed already exists
1613          *                 1 - OK, Feed added
1614          *                 2 - Invalid URL
1615          *                 3 - URL content is HTML, no feeds available
1616          *                 4 - URL content is HTML which contains multiple feeds.
1617          *                     Here you should call extractfeedurls in rpc-backend
1618          *                     to get all possible feeds.
1619          *                 5 - Couldn't download the URL content.
1620          *                 6 - Content is an invalid XML.
1621          */
1622         function subscribe_to_feed($url, $cat_id = 0,
1623                         $auth_login = '', $auth_pass = '') {
1624
1625                 global $fetch_last_error;
1626
1627                 require_once "include/rssfuncs.php";
1628
1629                 $url = fix_url($url);
1630
1631                 if (!$url || !validate_feed_url($url)) return array("code" => 2);
1632
1633                 $contents = @fetch_file_contents($url, false, $auth_login, $auth_pass);
1634
1635                 if (!$contents) {
1636                         return array("code" => 5, "message" => $fetch_last_error);
1637                 }
1638
1639                 if (is_html($contents)) {
1640                         $feedUrls = get_feeds_from_html($url, $contents);
1641
1642                         if (count($feedUrls) == 0) {
1643                                 return array("code" => 3);
1644                         } else if (count($feedUrls) > 1) {
1645                                 return array("code" => 4, "feeds" => $feedUrls);
1646                         }
1647                         //use feed url as new URL
1648                         $url = key($feedUrls);
1649                 }
1650
1651                 /* libxml_use_internal_errors(true);
1652                 $doc = new DOMDocument();
1653                 $doc->loadXML($contents);
1654                 $error = libxml_get_last_error();
1655                 libxml_clear_errors();
1656
1657                 if ($error) {
1658                         $error_message = format_libxml_error($error);
1659
1660                         return array("code" => 6, "message" => $error_message);
1661                 } */
1662
1663                 if ($cat_id == "0" || !$cat_id) {
1664                         $cat_qpart = "NULL";
1665                 } else {
1666                         $cat_qpart = "'$cat_id'";
1667                 }
1668
1669                 $result = db_query(
1670                         "SELECT id FROM ttrss_feeds
1671                         WHERE feed_url = '$url' AND owner_uid = ".$_SESSION["uid"]);
1672
1673                 if (strlen(FEED_CRYPT_KEY) > 0) {
1674                         require_once "crypt.php";
1675                         $auth_pass = substr(encrypt_string($auth_pass), 0, 250);
1676                         $auth_pass_encrypted = 'true';
1677                 } else {
1678                         $auth_pass_encrypted = 'false';
1679                 }
1680
1681                 $auth_pass = db_escape_string($auth_pass);
1682
1683                 if (db_num_rows($result) == 0) {
1684                         $result = db_query(
1685                                 "INSERT INTO ttrss_feeds
1686                                         (owner_uid,feed_url,title,cat_id, auth_login,auth_pass,update_method,auth_pass_encrypted)
1687                                 VALUES ('".$_SESSION["uid"]."', '$url',
1688                                 '[Unknown]', $cat_qpart, '$auth_login', '$auth_pass', 0, $auth_pass_encrypted)");
1689
1690                         $result = db_query(
1691                                 "SELECT id FROM ttrss_feeds WHERE feed_url = '$url'
1692                                         AND owner_uid = " . $_SESSION["uid"]);
1693
1694                         $feed_id = db_fetch_result($result, 0, "id");
1695
1696                         if ($feed_id) {
1697                                 update_rss_feed($feed_id, true);
1698                         }
1699
1700                         return array("code" => 1);
1701                 } else {
1702                         return array("code" => 0);
1703                 }
1704         }
1705
1706         function print_feed_select($id, $default_id = "",
1707                 $attributes = "", $include_all_feeds = true,
1708                 $root_id = false, $nest_level = 0) {
1709
1710                 if (!$root_id) {
1711                         print "<select id=\"$id\" name=\"$id\" $attributes>";
1712                         if ($include_all_feeds) {
1713                                 $is_selected = ("0" == $default_id) ? "selected=\"1\"" : "";
1714                                 print "<option $is_selected value=\"0\">".__('All feeds')."</option>";
1715                         }
1716                 }
1717
1718                 if (get_pref('ENABLE_FEED_CATS')) {
1719
1720                         if ($root_id)
1721                                 $parent_qpart = "parent_cat = '$root_id'";
1722                         else
1723                                 $parent_qpart = "parent_cat IS NULL";
1724
1725                         $result = db_query("SELECT id,title,
1726                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1727                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1728                                 FROM ttrss_feed_categories
1729                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1730
1731                         while ($line = db_fetch_assoc($result)) {
1732
1733                                 for ($i = 0; $i < $nest_level; $i++)
1734                                         $line["title"] = " - " . $line["title"];
1735
1736                                 $is_selected = ("CAT:".$line["id"] == $default_id) ? "selected=\"1\"" : "";
1737
1738                                 printf("<option $is_selected value='CAT:%d'>%s</option>",
1739                                         $line["id"], htmlspecialchars($line["title"]));
1740
1741                                 if ($line["num_children"] > 0)
1742                                         print_feed_select($id, $default_id, $attributes,
1743                                                 $include_all_feeds, $line["id"], $nest_level+1);
1744
1745                                 $feed_result = db_query("SELECT id,title FROM ttrss_feeds
1746                                         WHERE cat_id = '".$line["id"]."' AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1747
1748                                 while ($fline = db_fetch_assoc($feed_result)) {
1749                                         $is_selected = ($fline["id"] == $default_id) ? "selected=\"1\"" : "";
1750
1751                                         $fline["title"] = " + " . $fline["title"];
1752
1753                                         for ($i = 0; $i < $nest_level; $i++)
1754                                                 $fline["title"] = " - " . $fline["title"];
1755
1756                                         printf("<option $is_selected value='%d'>%s</option>",
1757                                                 $fline["id"], htmlspecialchars($fline["title"]));
1758                                 }
1759                         }
1760
1761                         if (!$root_id) {
1762                                 $default_is_cat = ($default_id == "CAT:0");
1763                                 $is_selected = $default_is_cat ? "selected=\"1\"" : "";
1764
1765                                 printf("<option $is_selected value='CAT:0'>%s</option>",
1766                                         __("Uncategorized"));
1767
1768                                 $feed_result = db_query("SELECT id,title FROM ttrss_feeds
1769                                         WHERE cat_id IS NULL AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1770
1771                                 while ($fline = db_fetch_assoc($feed_result)) {
1772                                         $is_selected = ($fline["id"] == $default_id && !$default_is_cat) ? "selected=\"1\"" : "";
1773
1774                                         $fline["title"] = " + " . $fline["title"];
1775
1776                                         for ($i = 0; $i < $nest_level; $i++)
1777                                                 $fline["title"] = " - " . $fline["title"];
1778
1779                                         printf("<option $is_selected value='%d'>%s</option>",
1780                                                 $fline["id"], htmlspecialchars($fline["title"]));
1781                                 }
1782                         }
1783
1784                 } else {
1785                         $result = db_query("SELECT id,title FROM ttrss_feeds
1786                                 WHERE owner_uid = ".$_SESSION["uid"]." ORDER BY title");
1787
1788                         while ($line = db_fetch_assoc($result)) {
1789
1790                                 $is_selected = ($line["id"] == $default_id) ? "selected=\"1\"" : "";
1791
1792                                 printf("<option $is_selected value='%d'>%s</option>",
1793                                         $line["id"], htmlspecialchars($line["title"]));
1794                         }
1795                 }
1796
1797                 if (!$root_id) {
1798                         print "</select>";
1799                 }
1800         }
1801
1802         function print_feed_cat_select($id, $default_id,
1803                 $attributes, $include_all_cats = true, $root_id = false, $nest_level = 0) {
1804
1805                         if (!$root_id) {
1806                                         print "<select id=\"$id\" name=\"$id\" default=\"$default_id\" onchange=\"catSelectOnChange(this)\" $attributes>";
1807                         }
1808
1809                         if ($root_id)
1810                                 $parent_qpart = "parent_cat = '$root_id'";
1811                         else
1812                                 $parent_qpart = "parent_cat IS NULL";
1813
1814                         $result = db_query("SELECT id,title,
1815                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1816                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1817                                 FROM ttrss_feed_categories
1818                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1819
1820                         while ($line = db_fetch_assoc($result)) {
1821                                 if ($line["id"] == $default_id) {
1822                                         $is_selected = "selected=\"1\"";
1823                                 } else {
1824                                         $is_selected = "";
1825                                 }
1826
1827                                 for ($i = 0; $i < $nest_level; $i++)
1828                                         $line["title"] = " - " . $line["title"];
1829
1830                                 if ($line["title"])
1831                                         printf("<option $is_selected value='%d'>%s</option>",
1832                                                 $line["id"], htmlspecialchars($line["title"]));
1833
1834                                 if ($line["num_children"] > 0)
1835                                         print_feed_cat_select($id, $default_id, $attributes,
1836                                                 $include_all_cats, $line["id"], $nest_level+1);
1837                         }
1838
1839                         if (!$root_id) {
1840                                 if ($include_all_cats) {
1841                                         if (db_num_rows($result) > 0) {
1842                                                 print "<option disabled=\"1\">--------</option>";
1843                                         }
1844
1845                                         if ($default_id == 0) {
1846                                                 $is_selected = "selected=\"1\"";
1847                                         } else {
1848                                                 $is_selected = "";
1849                                         }
1850
1851                                         print "<option $is_selected value=\"0\">".__('Uncategorized')."</option>";
1852                                 }
1853                                 print "</select>";
1854                         }
1855                 }
1856
1857         function checkbox_to_sql_bool($val) {
1858                 return ($val == "on") ? "true" : "false";
1859         }
1860
1861         function getFeedCatTitle($id) {
1862                 if ($id == -1) {
1863                         return __("Special");
1864                 } else if ($id < LABEL_BASE_INDEX) {
1865                         return __("Labels");
1866                 } else if ($id > 0) {
1867                         $result = db_query("SELECT ttrss_feed_categories.title
1868                                 FROM ttrss_feeds, ttrss_feed_categories WHERE ttrss_feeds.id = '$id' AND
1869                                         cat_id = ttrss_feed_categories.id");
1870                         if (db_num_rows($result) == 1) {
1871                                 return db_fetch_result($result, 0, "title");
1872                         } else {
1873                                 return __("Uncategorized");
1874                         }
1875                 } else {
1876                         return "getFeedCatTitle($id) failed";
1877                 }
1878
1879         }
1880
1881         function getFeedIcon($id) {
1882                 switch ($id) {
1883                 case 0:
1884                         return "images/archive.png";
1885                         break;
1886                 case -1:
1887                         return "images/star.png";
1888                         break;
1889                 case -2:
1890                         return "images/feed.png";
1891                         break;
1892                 case -3:
1893                         return "images/fresh.png";
1894                         break;
1895                 case -4:
1896                         return "images/folder.png";
1897                         break;
1898                 case -6:
1899                         return "images/time.png";
1900                         break;
1901                 default:
1902                         if ($id < LABEL_BASE_INDEX) {
1903                                 return "images/label.png";
1904                         } else {
1905                                 if (file_exists(ICONS_DIR . "/$id.ico"))
1906                                         return ICONS_URL . "/$id.ico";
1907                         }
1908                         break;
1909                 }
1910
1911                 return false;
1912         }
1913
1914         function getFeedTitle($id, $cat = false) {
1915                 if ($cat) {
1916                         return getCategoryTitle($id);
1917                 } else if ($id == -1) {
1918                         return __("Starred articles");
1919                 } else if ($id == -2) {
1920                         return __("Published articles");
1921                 } else if ($id == -3) {
1922                         return __("Fresh articles");
1923                 } else if ($id == -4) {
1924                         return __("All articles");
1925                 } else if ($id === 0 || $id === "0") {
1926                         return __("Archived articles");
1927                 } else if ($id == -6) {
1928                         return __("Recently read");
1929                 } else if ($id < LABEL_BASE_INDEX) {
1930                         $label_id = feed_to_label_id($id);
1931                         $result = db_query("SELECT caption FROM ttrss_labels2 WHERE id = '$label_id'");
1932                         if (db_num_rows($result) == 1) {
1933                                 return db_fetch_result($result, 0, "caption");
1934                         } else {
1935                                 return "Unknown label ($label_id)";
1936                         }
1937
1938                 } else if (is_numeric($id) && $id > 0) {
1939                         $result = db_query("SELECT title FROM ttrss_feeds WHERE id = '$id'");
1940                         if (db_num_rows($result) == 1) {
1941                                 return db_fetch_result($result, 0, "title");
1942                         } else {
1943                                 return "Unknown feed ($id)";
1944                         }
1945                 } else {
1946                         return $id;
1947                 }
1948         }
1949
1950         function make_init_params() {
1951                 $params = array();
1952
1953                 foreach (array("ON_CATCHUP_SHOW_NEXT_FEED", "HIDE_READ_FEEDS",
1954                         "ENABLE_FEED_CATS", "FEEDS_SORT_BY_UNREAD", "CONFIRM_FEED_CATCHUP",
1955                         "CDM_AUTO_CATCHUP", "FRESH_ARTICLE_MAX_AGE",
1956                         "HIDE_READ_SHOWS_SPECIAL", "COMBINED_DISPLAY_MODE") as $param) {
1957
1958                                  $params[strtolower($param)] = (int) get_pref($param);
1959                  }
1960
1961                 $params["icons_url"] = ICONS_URL;
1962                 $params["cookie_lifetime"] = SESSION_COOKIE_LIFETIME;
1963                 $params["default_view_mode"] = get_pref("_DEFAULT_VIEW_MODE");
1964                 $params["default_view_limit"] = (int) get_pref("_DEFAULT_VIEW_LIMIT");
1965                 $params["default_view_order_by"] = get_pref("_DEFAULT_VIEW_ORDER_BY");
1966                 $params["bw_limit"] = (int) $_SESSION["bw_limit"];
1967                 $params["label_base_index"] = (int) LABEL_BASE_INDEX;
1968
1969                 $result = db_query("SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
1970                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1971
1972                 $max_feed_id = db_fetch_result($result, 0, "mid");
1973                 $num_feeds = db_fetch_result($result, 0, "nf");
1974
1975                 $params["max_feed_id"] = (int) $max_feed_id;
1976                 $params["num_feeds"] = (int) $num_feeds;
1977
1978                 $params["hotkeys"] = get_hotkeys_map();
1979
1980                 $params["csrf_token"] = $_SESSION["csrf_token"];
1981                 $params["widescreen"] = (int) $_COOKIE["ttrss_widescreen"];
1982
1983                 $params['simple_update'] = defined('SIMPLE_UPDATE_MODE') && SIMPLE_UPDATE_MODE;
1984
1985                 return $params;
1986         }
1987
1988         function get_hotkeys_info() {
1989                 $hotkeys = array(
1990                         __("Navigation") => array(
1991                                 "next_feed" => __("Open next feed"),
1992                                 "prev_feed" => __("Open previous feed"),
1993                                 "next_article" => __("Open next article"),
1994                                 "prev_article" => __("Open previous article"),
1995                                 "next_article_noscroll" => __("Open next article (don't scroll long articles)"),
1996                                 "prev_article_noscroll" => __("Open previous article (don't scroll long articles)"),
1997                                 "next_article_noexpand" => __("Move to next article (don't expand or mark read)"),
1998                                 "prev_article_noexpand" => __("Move to previous article (don't expand or mark read)"),
1999                                 "search_dialog" => __("Show search dialog")),
2000                         __("Article") => array(
2001                                 "toggle_mark" => __("Toggle starred"),
2002                                 "toggle_publ" => __("Toggle published"),
2003                                 "toggle_unread" => __("Toggle unread"),
2004                                 "edit_tags" => __("Edit tags"),
2005                                 "dismiss_selected" => __("Dismiss selected"),
2006                                 "dismiss_read" => __("Dismiss read"),
2007                                 "open_in_new_window" => __("Open in new window"),
2008                                 "catchup_below" => __("Mark below as read"),
2009                                 "catchup_above" => __("Mark above as read"),
2010                                 "article_scroll_down" => __("Scroll down"),
2011                                 "article_scroll_up" => __("Scroll up"),
2012                                 "select_article_cursor" => __("Select article under cursor"),
2013                                 "email_article" => __("Email article"),
2014                                 "close_article" => __("Close/collapse article"),
2015                                 "toggle_expand" => __("Toggle article expansion (combined mode)"),
2016                                 "toggle_widescreen" => __("Toggle widescreen mode"),
2017                                 "toggle_embed_original" => __("Toggle embed original")),
2018                         __("Article selection") => array(
2019                                 "select_all" => __("Select all articles"),
2020                                 "select_unread" => __("Select unread"),
2021                                 "select_marked" => __("Select starred"),
2022                                 "select_published" => __("Select published"),
2023                                 "select_invert" => __("Invert selection"),
2024                                 "select_none" => __("Deselect everything")),
2025                         __("Feed") => array(
2026                                 "feed_refresh" => __("Refresh current feed"),
2027                                 "feed_unhide_read" => __("Un/hide read feeds"),
2028                                 "feed_subscribe" => __("Subscribe to feed"),
2029                                 "feed_edit" => __("Edit feed"),
2030                                 "feed_catchup" => __("Mark as read"),
2031                                 "feed_reverse" => __("Reverse headlines"),
2032                                 "feed_debug_update" => __("Debug feed update"),
2033                                 "catchup_all" => __("Mark all feeds as read"),
2034                                 "cat_toggle_collapse" => __("Un/collapse current category"),
2035                                 "toggle_combined_mode" => __("Toggle combined mode"),
2036                                 "toggle_cdm_expanded" => __("Toggle auto expand in combined mode")),
2037                         __("Go to") => array(
2038                                 "goto_all" => __("All articles"),
2039                                 "goto_fresh" => __("Fresh"),
2040                                 "goto_marked" => __("Starred"),
2041                                 "goto_published" => __("Published"),
2042                                 "goto_tagcloud" => __("Tag cloud"),
2043                                 "goto_prefs" => __("Preferences")),
2044                         __("Other") => array(
2045                                 "create_label" => __("Create label"),
2046                                 "create_filter" => __("Create filter"),
2047                                 "collapse_sidebar" => __("Un/collapse sidebar"),
2048                                 "help_dialog" => __("Show help dialog"))
2049                         );
2050
2051                 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_HOTKEY_INFO) as $plugin) {
2052                         $hotkeys = $plugin->hook_hotkey_info($hotkeys);
2053                 }
2054
2055                 return $hotkeys;
2056         }
2057
2058         function get_hotkeys_map() {
2059                 $hotkeys = array(
2060 //                      "navigation" => array(
2061                                 "k" => "next_feed",
2062                                 "j" => "prev_feed",
2063                                 "n" => "next_article",
2064                                 "p" => "prev_article",
2065                                 "(38)|up" => "prev_article",
2066                                 "(40)|down" => "next_article",
2067 //                              "^(38)|Ctrl-up" => "prev_article_noscroll",
2068 //                              "^(40)|Ctrl-down" => "next_article_noscroll",
2069                                 "(191)|/" => "search_dialog",
2070 //                      "article" => array(
2071                                 "s" => "toggle_mark",
2072                                 "*s" => "toggle_publ",
2073                                 "u" => "toggle_unread",
2074                                 "*t" => "edit_tags",
2075                                 "*d" => "dismiss_selected",
2076                                 "*x" => "dismiss_read",
2077                                 "o" => "open_in_new_window",
2078                                 "c p" => "catchup_below",
2079                                 "c n" => "catchup_above",
2080                                 "*n" => "article_scroll_down",
2081                                 "*p" => "article_scroll_up",
2082                                 "*(38)|Shift+up" => "article_scroll_up",
2083                                 "*(40)|Shift+down" => "article_scroll_down",
2084                                 "a *w" => "toggle_widescreen",
2085                                 "a e" => "toggle_embed_original",
2086                                 "e" => "email_article",
2087                                 "a q" => "close_article",
2088 //                      "article_selection" => array(
2089                                 "a a" => "select_all",
2090                                 "a u" => "select_unread",
2091                                 "a *u" => "select_marked",
2092                                 "a p" => "select_published",
2093                                 "a i" => "select_invert",
2094                                 "a n" => "select_none",
2095 //                      "feed" => array(
2096                                 "f r" => "feed_refresh",
2097                                 "f a" => "feed_unhide_read",
2098                                 "f s" => "feed_subscribe",
2099                                 "f e" => "feed_edit",
2100                                 "f q" => "feed_catchup",
2101                                 "f x" => "feed_reverse",
2102                                 "f *d" => "feed_debug_update",
2103                                 "f *c" => "toggle_combined_mode",
2104                                 "f c" => "toggle_cdm_expanded",
2105                                 "*q" => "catchup_all",
2106                                 "x" => "cat_toggle_collapse",
2107 //                      "goto" => array(
2108                                 "g a" => "goto_all",
2109                                 "g f" => "goto_fresh",
2110                                 "g s" => "goto_marked",
2111                                 "g p" => "goto_published",
2112                                 "g t" => "goto_tagcloud",
2113                                 "g *p" => "goto_prefs",
2114 //                      "other" => array(
2115                                 "(9)|Tab" => "select_article_cursor", // tab
2116                                 "c l" => "create_label",
2117                                 "c f" => "create_filter",
2118                                 "c s" => "collapse_sidebar",
2119                                 "^(191)|Ctrl+/" => "help_dialog",
2120                         );
2121
2122                 if (get_pref('COMBINED_DISPLAY_MODE')) {
2123                         $hotkeys["^(38)|Ctrl-up"] = "prev_article_noscroll";
2124                         $hotkeys["^(40)|Ctrl-down"] = "next_article_noscroll";
2125                 }
2126
2127                 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_HOTKEY_MAP) as $plugin) {
2128                         $hotkeys = $plugin->hook_hotkey_map($hotkeys);
2129                 }
2130
2131                 $prefixes = array();
2132
2133                 foreach (array_keys($hotkeys) as $hotkey) {
2134                         $pair = explode(" ", $hotkey, 2);
2135
2136                         if (count($pair) > 1 && !in_array($pair[0], $prefixes)) {
2137                                 array_push($prefixes, $pair[0]);
2138                         }
2139                 }
2140
2141                 return array($prefixes, $hotkeys);
2142         }
2143
2144         function make_runtime_info() {
2145                 $data = array();
2146
2147                 $result = db_query("SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
2148                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
2149
2150                 $max_feed_id = db_fetch_result($result, 0, "mid");
2151                 $num_feeds = db_fetch_result($result, 0, "nf");
2152
2153                 $data["max_feed_id"] = (int) $max_feed_id;
2154                 $data["num_feeds"] = (int) $num_feeds;
2155
2156                 $data['last_article_id'] = getLastArticleId();
2157                 $data['cdm_expanded'] = get_pref('CDM_EXPANDED');
2158
2159                 $data['dep_ts'] = calculate_dep_timestamp();
2160                 $data['reload_on_ts_change'] = !defined('_NO_RELOAD_ON_TS_CHANGE');
2161
2162                 if (file_exists(LOCK_DIRECTORY . "/update_daemon.lock")) {
2163
2164                         $data['daemon_is_running'] = (int) file_is_locked("update_daemon.lock");
2165
2166                         if (time() - $_SESSION["daemon_stamp_check"] > 30) {
2167
2168                                 $stamp = (int) @file_get_contents(LOCK_DIRECTORY . "/update_daemon.stamp");
2169
2170                                 if ($stamp) {
2171                                         $stamp_delta = time() - $stamp;
2172
2173                                         if ($stamp_delta > 1800) {
2174                                                 $stamp_check = 0;
2175                                         } else {
2176                                                 $stamp_check = 1;
2177                                                 $_SESSION["daemon_stamp_check"] = time();
2178                                         }
2179
2180                                         $data['daemon_stamp_ok'] = $stamp_check;
2181
2182                                         $stamp_fmt = date("Y.m.d, G:i", $stamp);
2183
2184                                         $data['daemon_stamp'] = $stamp_fmt;
2185                                 }
2186                         }
2187                 }
2188
2189                 if ($_SESSION["last_version_check"] + 86400 + rand(-1000, 1000) < time()) {
2190                                 $new_version_details = @check_for_update();
2191
2192                                 $data['new_version_available'] = (int) ($new_version_details != false);
2193
2194                                 $_SESSION["last_version_check"] = time();
2195                                 $_SESSION["version_data"] = $new_version_details;
2196                 }
2197
2198                 return $data;
2199         }
2200
2201         function search_to_sql($search) {
2202
2203                 $search_query_part = "";
2204
2205                 $keywords = explode(" ", $search);
2206                 $query_keywords = array();
2207                 $search_words = array();
2208
2209                 foreach ($keywords as $k) {
2210                         if (strpos($k, "-") === 0) {
2211                                 $k = substr($k, 1);
2212                                 $not = "NOT";
2213                         } else {
2214                                 $not = "";
2215                         }
2216
2217                         $commandpair = explode(":", mb_strtolower($k), 2);
2218
2219                         switch ($commandpair[0]) {
2220                         case "title":
2221                                 if ($commandpair[1]) {
2222                                         array_push($query_keywords, "($not (LOWER(ttrss_entries.title) LIKE '%".
2223                                                 db_escape_string(mb_strtolower($commandpair[1]))."%'))");
2224                                 } else {
2225                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2226                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2227                                         array_push($search_words, $k);
2228                                 }
2229                                 break;
2230                         case "author":
2231                                 if ($commandpair[1]) {
2232                                         array_push($query_keywords, "($not (LOWER(author) LIKE '%".
2233                                                 db_escape_string(mb_strtolower($commandpair[1]))."%'))");
2234                                 } else {
2235                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2236                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2237                                         array_push($search_words, $k);
2238                                 }
2239                                 break;
2240                         case "note":
2241                                 if ($commandpair[1]) {
2242                                         if ($commandpair[1] == "true")
2243                                                 array_push($query_keywords, "($not (note IS NOT NULL AND note != ''))");
2244                                         else if ($commandpair[1] == "false")
2245                                                 array_push($query_keywords, "($not (note IS NULL OR note = ''))");
2246                                         else
2247                                                 array_push($query_keywords, "($not (LOWER(note) LIKE '%".
2248                                                         db_escape_string(mb_strtolower($commandpair[1]))."%'))");
2249                                 } else {
2250                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2251                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2252                                         if (!$not) array_push($search_words, $k);
2253                                 }
2254                                 break;
2255                         case "star":
2256
2257                                 if ($commandpair[1]) {
2258                                         if ($commandpair[1] == "true")
2259                                                 array_push($query_keywords, "($not (marked = true))");
2260                                         else
2261                                                 array_push($query_keywords, "($not (marked = false))");
2262                                 } else {
2263                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2264                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2265                                         if (!$not) array_push($search_words, $k);
2266                                 }
2267                                 break;
2268                         case "pub":
2269                                 if ($commandpair[1]) {
2270                                         if ($commandpair[1] == "true")
2271                                                 array_push($query_keywords, "($not (published = true))");
2272                                         else
2273                                                 array_push($query_keywords, "($not (published = false))");
2274
2275                                 } else {
2276                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2277                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2278                                         if (!$not) array_push($search_words, $k);
2279                                 }
2280                                 break;
2281                         default:
2282                                 if (strpos($k, "@") === 0) {
2283
2284                                         $user_tz_string = get_pref('USER_TIMEZONE', $_SESSION['uid']);
2285                                         $orig_ts = strtotime(substr($k, 1));
2286                                         $k = date("Y-m-d", convert_timestamp($orig_ts, $user_tz_string, 'UTC'));
2287
2288                                         //$k = date("Y-m-d", strtotime(substr($k, 1)));
2289
2290                                         array_push($query_keywords, "(".SUBSTRING_FOR_DATE."(updated,1,LENGTH('$k')) $not = '$k')");
2291                                 } else {
2292                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2293                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2294
2295                                         if (!$not) array_push($search_words, $k);
2296                                 }
2297                         }
2298                 }
2299
2300                 $search_query_part = implode("AND", $query_keywords);
2301
2302                 return array($search_query_part, $search_words);
2303         }
2304
2305         function getParentCategories($cat, $owner_uid) {
2306                 $rv = array();
2307
2308                 $result = db_query("SELECT parent_cat FROM ttrss_feed_categories
2309                         WHERE id = '$cat' AND parent_cat IS NOT NULL AND owner_uid = $owner_uid");
2310
2311                 while ($line = db_fetch_assoc($result)) {
2312                         array_push($rv, $line["parent_cat"]);
2313                         $rv = array_merge($rv, getParentCategories($line["parent_cat"], $owner_uid));
2314                 }
2315
2316                 return $rv;
2317         }
2318
2319         function getChildCategories($cat, $owner_uid) {
2320                 $rv = array();
2321
2322                 $result = db_query("SELECT id FROM ttrss_feed_categories
2323                         WHERE parent_cat = '$cat' AND owner_uid = $owner_uid");
2324
2325                 while ($line = db_fetch_assoc($result)) {
2326                         array_push($rv, $line["id"]);
2327                         $rv = array_merge($rv, getChildCategories($line["id"], $owner_uid));
2328                 }
2329
2330                 return $rv;
2331         }
2332
2333         function queryFeedHeadlines($feed, $limit, $view_mode, $cat_view, $search, $search_mode, $override_order = false, $offset = 0, $owner_uid = 0, $filter = false, $since_id = 0, $include_children = false, $ignore_vfeed_group = false, $override_strategy = false, $override_vfeed = false) {
2334
2335                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2336
2337                 $ext_tables_part = "";
2338                 $search_words = array();
2339
2340                         if ($search) {
2341
2342                                 if (SPHINX_ENABLED) {
2343                                         $ids = join(",", @sphinx_search($search, 0, 500));
2344
2345                                         if ($ids)
2346                                                 $search_query_part = "ref_id IN ($ids) AND ";
2347                                         else
2348                                                 $search_query_part = "ref_id = -1 AND ";
2349
2350                                 } else {
2351                                         list($search_query_part, $search_words) = search_to_sql($search);
2352                                         $search_query_part .= " AND ";
2353                                 }
2354
2355                         } else {
2356                                 $search_query_part = "";
2357                         }
2358
2359                         if ($filter) {
2360
2361                                 if (DB_TYPE == "pgsql") {
2362                                         $query_strategy_part .= " AND updated > NOW() - INTERVAL '14 days' ";
2363                                 } else {
2364                                         $query_strategy_part .= " AND updated > DATE_SUB(NOW(), INTERVAL 14 DAY) ";
2365                                 }
2366
2367                                 $override_order = "updated DESC";
2368
2369                                 $filter_query_part = filter_to_sql($filter, $owner_uid);
2370
2371                                 // Try to check if SQL regexp implementation chokes on a valid regexp
2372
2373
2374                                 $result = db_query("SELECT true AS true_val FROM ttrss_entries,
2375                                         ttrss_user_entries, ttrss_feeds
2376                                         WHERE $filter_query_part LIMIT 1", false);
2377
2378                                 if ($result) {
2379                                         $test = db_fetch_result($result, 0, "true_val");
2380
2381                                         if (!$test) {
2382                                                 $filter_query_part = "false AND";
2383                                         } else {
2384                                                 $filter_query_part .= " AND";
2385                                         }
2386                                 } else {
2387                                         $filter_query_part = "false AND";
2388                                 }
2389
2390                         } else {
2391                                 $filter_query_part = "";
2392                         }
2393
2394                         if ($since_id) {
2395                                 $since_id_part = "ttrss_entries.id > $since_id AND ";
2396                         } else {
2397                                 $since_id_part = "";
2398                         }
2399
2400                         $view_query_part = "";
2401
2402                         if ($view_mode == "adaptive") {
2403                                 if ($search) {
2404                                         $view_query_part = " ";
2405                                 } else if ($feed != -1) {
2406
2407                                         $unread = getFeedUnread($feed, $cat_view);
2408
2409                                         if ($cat_view && $feed > 0 && $include_children)
2410                                                 $unread += getCategoryChildrenUnread($feed);
2411
2412                                         if ($unread > 0)
2413                                 $view_query_part = " unread = true AND ";
2414
2415                                 }
2416                         }
2417
2418                         if ($view_mode == "marked") {
2419                                 $view_query_part = " marked = true AND ";
2420                         }
2421
2422                         if ($view_mode == "has_note") {
2423                                 $view_query_part = " (note IS NOT NULL AND note != '') AND ";
2424                         }
2425
2426                         if ($view_mode == "published") {
2427                                 $view_query_part = " published = true AND ";
2428                         }
2429
2430                         if ($view_mode == "unread" && $feed != -6) {
2431                                 $view_query_part = " unread = true AND ";
2432                         }
2433
2434                         if ($limit > 0) {
2435                                 $limit_query_part = "LIMIT " . $limit;
2436                         }
2437
2438                         $allow_archived = false;
2439
2440                         $vfeed_query_part = "";
2441
2442                         // override query strategy and enable feed display when searching globally
2443                         if ($search && $search_mode == "all_feeds") {
2444                                 $query_strategy_part = "true";
2445                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2446                         /* tags */
2447                         } else if (!is_numeric($feed)) {
2448                                 $query_strategy_part = "true";
2449                                 $vfeed_query_part = "(SELECT title FROM ttrss_feeds WHERE
2450                                         id = feed_id) as feed_title,";
2451                         } else if ($search && $search_mode == "this_cat") {
2452                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2453
2454                                 if ($feed > 0) {
2455                                         if ($include_children) {
2456                                                 $subcats = getChildCategories($feed, $owner_uid);
2457                                                 array_push($subcats, $feed);
2458                                                 $cats_qpart = join(",", $subcats);
2459                                         } else {
2460                                                 $cats_qpart = $feed;
2461                                         }
2462
2463                                         $query_strategy_part = "ttrss_feeds.cat_id IN ($cats_qpart)";
2464
2465                                 } else {
2466                                         $query_strategy_part = "ttrss_feeds.cat_id IS NULL";
2467                                 }
2468
2469                         } else if ($feed > 0) {
2470
2471                                 if ($cat_view) {
2472
2473                                         if ($feed > 0) {
2474                                                 if ($include_children) {
2475                                                         # sub-cats
2476                                                         $subcats = getChildCategories($feed, $owner_uid);
2477
2478                                                         array_push($subcats, $feed);
2479                                                         $query_strategy_part = "cat_id IN (".
2480                                                                         implode(",", $subcats).")";
2481
2482                                                 } else {
2483                                                         $query_strategy_part = "cat_id = '$feed'";
2484                                                 }
2485
2486                                         } else {
2487                                                 $query_strategy_part = "cat_id IS NULL";
2488                                         }
2489
2490                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2491
2492                                 } else {
2493                                         $query_strategy_part = "feed_id = '$feed'";
2494                                 }
2495                         } else if ($feed == 0 && !$cat_view) { // archive virtual feed
2496                                 $query_strategy_part = "feed_id IS NULL";
2497                                 $allow_archived = true;
2498                         } else if ($feed == 0 && $cat_view) { // uncategorized
2499                                 $query_strategy_part = "cat_id IS NULL AND feed_id IS NOT NULL";
2500                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2501                         } else if ($feed == -1) { // starred virtual feed
2502                                 $query_strategy_part = "marked = true";
2503                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2504                                 $allow_archived = true;
2505
2506                                 if (!$override_order) {
2507                                         $override_order = "last_marked DESC, date_entered DESC, updated DESC";
2508                                 }
2509
2510                         } else if ($feed == -2) { // published virtual feed OR labels category
2511
2512                                 if (!$cat_view) {
2513                                         $query_strategy_part = "published = true";
2514                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2515                                         $allow_archived = true;
2516
2517                                         if (!$override_order) {
2518                                                 $override_order = "last_published DESC, date_entered DESC, updated DESC";
2519                                         }
2520
2521                                 } else {
2522                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2523
2524                                         $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2525
2526                                         $query_strategy_part = "ttrss_labels2.id = ttrss_user_labels2.label_id AND
2527                                                 ttrss_user_labels2.article_id = ref_id";
2528
2529                                 }
2530                         } else if ($feed == -6) { // recently read
2531                                 $query_strategy_part = "unread = false AND last_read IS NOT NULL";
2532                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2533                                 $allow_archived = true;
2534
2535                                 if (!$override_order) $override_order = "last_read DESC";
2536
2537 /*                      } else if ($feed == -7) { // shared
2538                                 $query_strategy_part = "uuid != ''";
2539                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2540                                 $allow_archived = true; */
2541                         } else if ($feed == -3) { // fresh virtual feed
2542                                 $query_strategy_part = "unread = true AND score >= 0";
2543
2544                                 $intl = get_pref("FRESH_ARTICLE_MAX_AGE", $owner_uid);
2545
2546                                 if (DB_TYPE == "pgsql") {
2547                                         $query_strategy_part .= " AND date_entered > NOW() - INTERVAL '$intl hour' ";
2548                                 } else {
2549                                         $query_strategy_part .= " AND date_entered > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
2550                                 }
2551
2552                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2553                         } else if ($feed == -4) { // all articles virtual feed
2554                                 $allow_archived = true;
2555                                 $query_strategy_part = "true";
2556                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2557                         } else if ($feed <= LABEL_BASE_INDEX) { // labels
2558                                 $label_id = feed_to_label_id($feed);
2559
2560                                 $query_strategy_part = "label_id = '$label_id' AND
2561                                         ttrss_labels2.id = ttrss_user_labels2.label_id AND
2562                                         ttrss_user_labels2.article_id = ref_id";
2563
2564                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2565                                 $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2566                                 $allow_archived = true;
2567
2568                         } else {
2569                                 $query_strategy_part = "true";
2570                         }
2571
2572                         $order_by = "score DESC, date_entered DESC, updated DESC";
2573
2574                         if ($view_mode == "unread_first") {
2575                                 $order_by = "unread DESC, $order_by";
2576                         }
2577
2578                         if ($override_order) {
2579                                 $order_by = $override_order;
2580                         }
2581
2582                         if ($override_strategy) {
2583                                 $query_strategy_part = $override_strategy;
2584                         }
2585
2586                         if ($override_vfeed) {
2587                                 $vfeed_query_part = $override_vfeed;
2588                         }
2589
2590                         $feed_title = "";
2591
2592                         if ($search) {
2593                                 $feed_title = T_sprintf("Search results: %s", $search);
2594                         } else {
2595                                 if ($cat_view) {
2596                                         $feed_title = getCategoryTitle($feed);
2597                                 } else {
2598                                         if (is_numeric($feed) && $feed > 0) {
2599                                                 $result = db_query("SELECT title,site_url,last_error,last_updated
2600                                                         FROM ttrss_feeds WHERE id = '$feed' AND owner_uid = $owner_uid");
2601
2602                                                 $feed_title = db_fetch_result($result, 0, "title");
2603                                                 $feed_site_url = db_fetch_result($result, 0, "site_url");
2604                                                 $last_error = db_fetch_result($result, 0, "last_error");
2605                                                 $last_updated = db_fetch_result($result, 0, "last_updated");
2606                                         } else {
2607                                                 $feed_title = getFeedTitle($feed);
2608                                         }
2609                                 }
2610                         }
2611
2612
2613                         $content_query_part = "content, content AS content_preview, ";
2614
2615
2616                         if (is_numeric($feed)) {
2617
2618                                 if ($feed >= 0) {
2619                                         $feed_kind = "Feeds";
2620                                 } else {
2621                                         $feed_kind = "Labels";
2622                                 }
2623
2624                                 if ($limit_query_part) {
2625                                         $offset_query_part = "OFFSET $offset";
2626                                 }
2627
2628                                 // proper override_order applied above
2629                                 if ($vfeed_query_part && !$ignore_vfeed_group && get_pref('VFEED_GROUP_BY_FEED', $owner_uid)) {
2630                                         if (!$override_order) {
2631                                                 $order_by = "ttrss_feeds.title, $order_by";
2632                                         } else {
2633                                                 $order_by = "ttrss_feeds.title, $override_order";
2634                                         }
2635                                 }
2636
2637                                 if (!$allow_archived) {
2638                                         $from_qpart = "ttrss_entries,ttrss_user_entries,ttrss_feeds$ext_tables_part";
2639                                         $feed_check_qpart = "ttrss_user_entries.feed_id = ttrss_feeds.id AND";
2640
2641                                 } else {
2642                                         $from_qpart = "ttrss_entries$ext_tables_part,ttrss_user_entries
2643                                                 LEFT JOIN ttrss_feeds ON (feed_id = ttrss_feeds.id)";
2644                                 }
2645
2646                                 if ($vfeed_query_part)
2647                                         $vfeed_query_part .= "favicon_avg_color,";
2648
2649                                 $query = "SELECT DISTINCT
2650                                                 date_entered,
2651                                                 guid,
2652                                                 ttrss_entries.id,ttrss_entries.title,
2653                                                 updated,
2654                                                 label_cache,
2655                                                 tag_cache,
2656                                                 always_display_enclosures,
2657                                                 site_url,
2658                                                 note,
2659                                                 num_comments,
2660                                                 comments,
2661                                                 int_id,
2662                                                 uuid,
2663                                                 lang,
2664                                                 hide_images,
2665                                                 unread,feed_id,marked,published,link,last_read,orig_feed_id,
2666                                                 last_marked, last_published,
2667                                                 $vfeed_query_part
2668                                                 $content_query_part
2669                                                 author,score
2670                                         FROM
2671                                                 $from_qpart
2672                                         WHERE
2673                                         $feed_check_qpart
2674                                         ttrss_user_entries.ref_id = ttrss_entries.id AND
2675                                         ttrss_user_entries.owner_uid = '$owner_uid' AND
2676                                         $search_query_part
2677                                         $filter_query_part
2678                                         $view_query_part
2679                                         $since_id_part
2680                                         $query_strategy_part ORDER BY $order_by
2681                                         $limit_query_part $offset_query_part";
2682
2683                                 if ($_REQUEST["debug"]) print $query;
2684
2685                                 $result = db_query($query);
2686
2687                         } else {
2688                                 // browsing by tag
2689
2690                                 $select_qpart = "SELECT DISTINCT " .
2691                                                                 "date_entered," .
2692                                                                 "guid," .
2693                                                                 "note," .
2694                                                                 "ttrss_entries.id as id," .
2695                                                                 "title," .
2696                                                                 "updated," .
2697                                                                 "unread," .
2698                                                                 "feed_id," .
2699                                                                 "orig_feed_id," .
2700                                                                 "marked," .
2701                                                                 "num_comments, " .
2702                                                                 "comments, " .
2703                                                                 "tag_cache," .
2704                                                                 "label_cache," .
2705                                                                 "link," .
2706                                                                 "lang," .
2707                                                                 "uuid," .
2708                                                                 "last_read," .
2709                                                                 "(SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) AS hide_images," .
2710                                                                 "last_marked, last_published, " .
2711                                                                 $since_id_part .
2712                                                                 $vfeed_query_part .
2713                                                                 $content_query_part .
2714                                                                 "score ";
2715
2716                                 $feed_kind = "Tags";
2717                                 $all_tags = explode(",", $feed);
2718                                 if ($search_mode == 'any') {
2719                                         $tag_sql = "tag_name in (" . implode(", ", array_map("db_quote", $all_tags)) . ")";
2720                                         $from_qpart = " FROM ttrss_entries,ttrss_user_entries,ttrss_tags ";
2721                                         $where_qpart = " WHERE " .
2722                                                                    "ref_id = ttrss_entries.id AND " .
2723                                                                    "ttrss_user_entries.owner_uid = $owner_uid AND " .
2724                                                                    "post_int_id = int_id AND $tag_sql AND " .
2725                                                                    $view_query_part .
2726                                                                    $search_query_part .
2727                                                                    $query_strategy_part . " ORDER BY $order_by " .
2728                                                                    $limit_query_part;
2729
2730                                 } else {
2731                                         $i = 1;
2732                                         $sub_selects = array();
2733                                         $sub_ands = array();
2734                                         foreach ($all_tags as $term) {
2735                                                 array_push($sub_selects, "(SELECT post_int_id from ttrss_tags WHERE tag_name = " . db_quote($term) . " AND owner_uid = $owner_uid) as A$i");
2736                                                 $i++;
2737                                         }
2738                                         if ($i > 2) {
2739                                                 $x = 1;
2740                                                 $y = 2;
2741                                                 do {
2742                                                         array_push($sub_ands, "A$x.post_int_id = A$y.post_int_id");
2743                                                         $x++;
2744                                                         $y++;
2745                                                 } while ($y < $i);
2746                                         }
2747                                         array_push($sub_ands, "A1.post_int_id = ttrss_user_entries.int_id and ttrss_user_entries.owner_uid = $owner_uid");
2748                                         array_push($sub_ands, "ttrss_user_entries.ref_id = ttrss_entries.id");
2749                                         $from_qpart = " FROM " . implode(", ", $sub_selects) . ", ttrss_user_entries, ttrss_entries";
2750                                         $where_qpart = " WHERE " . implode(" AND ", $sub_ands);
2751                                 }
2752                                 //                              error_log("TAG SQL: " . $tag_sql);
2753                                 // $tag_sql = "tag_name = '$feed'";   DEFAULT way
2754
2755                                 //                              error_log("[". $select_qpart . "][" . $from_qpart . "][" .$where_qpart . "]");
2756                                 $result = db_query($select_qpart . $from_qpart . $where_qpart);
2757                         }
2758
2759                         return array($result, $feed_title, $feed_site_url, $last_error, $last_updated, $search_words);
2760
2761         }
2762
2763         function sanitize($str, $force_remove_images = false, $owner = false, $site_url = false, $highlight_words = false) {
2764                 if (!$owner) $owner = $_SESSION["uid"];
2765
2766                 $res = trim($str); if (!$res) return '';
2767
2768                 $charset_hack = '<head>
2769                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
2770                 </head>';
2771
2772                 $res = trim($res); if (!$res) return '';
2773
2774                 libxml_use_internal_errors(true);
2775
2776                 $doc = new DOMDocument();
2777                 $doc->loadHTML($charset_hack . $res);
2778                 $xpath = new DOMXPath($doc);
2779
2780                 $entries = $xpath->query('(//a[@href]|//img[@src])');
2781
2782                 foreach ($entries as $entry) {
2783
2784                         if ($site_url) {
2785
2786                                 if ($entry->hasAttribute('href'))
2787                                         $entry->setAttribute('href',
2788                                                 rewrite_relative_url($site_url, $entry->getAttribute('href')));
2789
2790                                 if ($entry->hasAttribute('src')) {
2791                                         $src = rewrite_relative_url($site_url, $entry->getAttribute('src'));
2792
2793                                         $cached_filename = CACHE_DIR . '/images/' . sha1($src) . '.png';
2794
2795                                         if (file_exists($cached_filename)) {
2796                                                 $src = SELF_URL_PATH . '/image.php?hash=' . sha1($src);
2797                                         }
2798
2799                                         $entry->setAttribute('src', $src);
2800                                 }
2801
2802                                 if ($entry->nodeName == 'img') {
2803                                         if (($owner && get_pref("STRIP_IMAGES", $owner)) ||
2804                                                         $force_remove_images || $_SESSION["bw_limit"]) {
2805
2806                                                 $p = $doc->createElement('p');
2807
2808                                                 $a = $doc->createElement('a');
2809                                                 $a->setAttribute('href', $entry->getAttribute('src'));
2810
2811                                                 $a->appendChild(new DOMText($entry->getAttribute('src')));
2812                                                 $a->setAttribute('target', '_blank');
2813
2814                                                 $p->appendChild($a);
2815
2816                                                 $entry->parentNode->replaceChild($p, $entry);
2817                                         }
2818                                 }
2819                         }
2820
2821                         if (strtolower($entry->nodeName) == "a") {
2822                                 $entry->setAttribute("target", "_blank");
2823                         }
2824                 }
2825
2826                 $entries = $xpath->query('//iframe');
2827                 foreach ($entries as $entry) {
2828                         $entry->setAttribute('sandbox', 'allow-scripts');
2829
2830                 }
2831
2832                 $allowed_elements = array('a', 'address', 'audio', 'article', 'aside',
2833                         'b', 'bdi', 'bdo', 'big', 'blockquote', 'body', 'br',
2834                         'caption', 'cite', 'center', 'code', 'col', 'colgroup',
2835                         'data', 'dd', 'del', 'details', 'div', 'dl', 'font',
2836                         'dt', 'em', 'footer', 'figure', 'figcaption',
2837                         'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'header', 'html', 'i',
2838                         'img', 'ins', 'kbd', 'li', 'main', 'mark', 'nav', 'noscript',
2839                         'ol', 'p', 'pre', 'q', 'ruby', 'rp', 'rt', 's', 'samp', 'section',
2840                         'small', 'source', 'span', 'strike', 'strong', 'sub', 'summary',
2841                         'sup', 'table', 'tbody', 'td', 'tfoot', 'th', 'thead', 'time',
2842                         'tr', 'track', 'tt', 'u', 'ul', 'var', 'wbr', 'video' );
2843
2844                 if ($_SESSION['hasSandbox']) $allowed_elements[] = 'iframe';
2845
2846                 $disallowed_attributes = array('id', 'style', 'class');
2847
2848                 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_SANITIZE) as $plugin) {
2849                         $retval = $plugin->hook_sanitize($doc, $site_url, $allowed_elements, $disallowed_attributes);
2850                         if (is_array($retval)) {
2851                                 $doc = $retval[0];
2852                                 $allowed_elements = $retval[1];
2853                                 $disallowed_attributes = $retval[2];
2854                         } else {
2855                                 $doc = $retval;
2856                         }
2857                 }
2858
2859                 $doc->removeChild($doc->firstChild); //remove doctype
2860                 $doc = strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes);
2861
2862                 if ($highlight_words) {
2863                         foreach ($highlight_words as $word) {
2864
2865                                 // http://stackoverflow.com/questions/4081372/highlight-keywords-in-a-paragraph
2866
2867                                 $elements = $xpath->query('//*[contains(.,"'.$word.'")]');
2868
2869                                 foreach ($elements as $element) {
2870                                         foreach ($element->childNodes as $child) {
2871
2872                                                 if (!$child instanceof DomText) continue;
2873
2874                                                 $fragment = $doc->createDocumentFragment();
2875                                       $text = $child->textContent;
2876                                                 $stubs = array();
2877
2878                                                 while (($pos = stripos($text, $word)) !== false) {
2879                                                         $fragment->appendChild(new DomText(substr($text, 0, $pos)));
2880                                                         $word = substr($text, $pos, strlen($word));
2881                                                         $highlight = $doc->createElement('span');
2882                                                         $highlight->appendChild(new DomText($word));
2883                                                         $highlight->setAttribute('class', 'highlight');
2884                                                         $fragment->appendChild($highlight);
2885                                                         $text = substr($text, $pos + strlen($word));
2886                                                 }
2887
2888                                                 if (!empty($text)) $fragment->appendChild(new DomText($text));
2889
2890                                                 $element->replaceChild($fragment, $child);
2891                                         }
2892                                 }
2893                         }
2894                 }
2895
2896                 $res = $doc->saveHTML();
2897
2898                 return $res;
2899         }
2900
2901         function strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes) {
2902                 $xpath = new DOMXPath($doc);
2903                 $entries = $xpath->query('//*');
2904
2905                 foreach ($entries as $entry) {
2906                         if (!in_array($entry->nodeName, $allowed_elements)) {
2907                                 $entry->parentNode->removeChild($entry);
2908                         }
2909
2910                         if ($entry->hasAttributes()) {
2911                                 $attrs_to_remove = array();
2912
2913                                 foreach ($entry->attributes as $attr) {
2914
2915                                         if (strpos($attr->nodeName, 'on') === 0) {
2916                                                 array_push($attrs_to_remove, $attr);
2917                                         }
2918
2919                                         if (in_array($attr->nodeName, $disallowed_attributes)) {
2920                                                 array_push($attrs_to_remove, $attr);
2921                                         }
2922                                 }
2923
2924                                 foreach ($attrs_to_remove as $attr) {
2925                                         $entry->removeAttributeNode($attr);
2926                                 }
2927                         }
2928                 }
2929
2930                 return $doc;
2931         }
2932
2933         function check_for_update() {
2934                 if (CHECK_FOR_NEW_VERSION && $_SESSION['access_level'] >= 10) {
2935                         $version_url = "http://tt-rss.org/version.php?ver=" . VERSION .
2936                                 "&iid=" . sha1(SELF_URL_PATH);
2937
2938                         $version_data = @fetch_file_contents($version_url);
2939
2940                         if ($version_data) {
2941                                 $version_data = json_decode($version_data, true);
2942                                 if ($version_data && $version_data['version']) {
2943                                         if (version_compare(VERSION_STATIC, $version_data['version']) == -1) {
2944                                                 return $version_data;
2945                                         }
2946                                 }
2947                         }
2948                 }
2949                 return false;
2950         }
2951
2952         function catchupArticlesById($ids, $cmode, $owner_uid = false) {
2953
2954                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2955                 if (count($ids) == 0) return;
2956
2957                 $tmp_ids = array();
2958
2959                 foreach ($ids as $id) {
2960                         array_push($tmp_ids, "ref_id = '$id'");
2961                 }
2962
2963                 $ids_qpart = join(" OR ", $tmp_ids);
2964
2965                 if ($cmode == 0) {
2966                         db_query("UPDATE ttrss_user_entries SET
2967                         unread = false,last_read = NOW()
2968                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2969                 } else if ($cmode == 1) {
2970                         db_query("UPDATE ttrss_user_entries SET
2971                         unread = true
2972                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2973                 } else {
2974                         db_query("UPDATE ttrss_user_entries SET
2975                         unread = NOT unread,last_read = NOW()
2976                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2977                 }
2978
2979                 /* update ccache */
2980
2981                 $result = db_query("SELECT DISTINCT feed_id FROM ttrss_user_entries
2982                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2983
2984                 while ($line = db_fetch_assoc($result)) {
2985                         ccache_update($line["feed_id"], $owner_uid);
2986                 }
2987         }
2988
2989         function get_article_tags($id, $owner_uid = 0, $tag_cache = false) {
2990
2991                 $a_id = db_escape_string($id);
2992
2993                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2994
2995                 $query = "SELECT DISTINCT tag_name,
2996                         owner_uid as owner FROM
2997                         ttrss_tags WHERE post_int_id = (SELECT int_id FROM ttrss_user_entries WHERE
2998                         ref_id = '$a_id' AND owner_uid = '$owner_uid' LIMIT 1) ORDER BY tag_name";
2999
3000                 $tags = array();
3001
3002                 /* check cache first */
3003
3004                 if ($tag_cache === false) {
3005                         $result = db_query("SELECT tag_cache FROM ttrss_user_entries
3006                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
3007
3008                         $tag_cache = db_fetch_result($result, 0, "tag_cache");
3009                 }
3010
3011                 if ($tag_cache) {
3012                         $tags = explode(",", $tag_cache);
3013                 } else {
3014
3015                         /* do it the hard way */
3016
3017                         $tmp_result = db_query($query);
3018
3019                         while ($tmp_line = db_fetch_assoc($tmp_result)) {
3020                                 array_push($tags, $tmp_line["tag_name"]);
3021                         }
3022
3023                         /* update the cache */
3024
3025                         $tags_str = db_escape_string(join(",", $tags));
3026
3027                         db_query("UPDATE ttrss_user_entries
3028                                 SET tag_cache = '$tags_str' WHERE ref_id = '$id'
3029                                 AND owner_uid = $owner_uid");
3030                 }
3031
3032                 return $tags;
3033         }
3034
3035         function trim_array($array) {
3036                 $tmp = $array;
3037                 array_walk($tmp, 'trim');
3038                 return $tmp;
3039         }
3040
3041         function tag_is_valid($tag) {
3042                 if ($tag == '') return false;
3043                 if (preg_match("/^[0-9]*$/", $tag)) return false;
3044                 if (mb_strlen($tag) > 250) return false;
3045
3046                 if (function_exists('iconv')) {
3047                         $tag = iconv("utf-8", "utf-8", $tag);
3048                 }
3049
3050                 if (!$tag) return false;
3051
3052                 return true;
3053         }
3054
3055         function render_login_form() {
3056                 header('Cache-Control: public');
3057
3058                 require_once "login_form.php";
3059                 exit;
3060         }
3061
3062         function format_warning($msg, $id = "") {
3063                 global $link;
3064                 return "<div class=\"warning\" id=\"$id\">
3065                         <span><img src=\"images/alert.png\"></span><span>$msg</span></div>";
3066         }
3067
3068         function format_notice($msg, $id = "") {
3069                 global $link;
3070                 return "<div class=\"notice\" id=\"$id\">
3071                         <span><img src=\"images/information.png\"></span><span>$msg</span></div>";
3072         }
3073
3074         function format_error($msg, $id = "") {
3075                 global $link;
3076                 return "<div class=\"error\" id=\"$id\">
3077                         <span><img src=\"images/alert.png\"></span><span>$msg</span></div>";
3078         }
3079
3080         function print_notice($msg) {
3081                 return print format_notice($msg);
3082         }
3083
3084         function print_warning($msg) {
3085                 return print format_warning($msg);
3086         }
3087
3088         function print_error($msg) {
3089                 return print format_error($msg);
3090         }
3091
3092
3093         function T_sprintf() {
3094                 $args = func_get_args();
3095                 return vsprintf(__(array_shift($args)), $args);
3096         }
3097
3098         function format_inline_player($url, $ctype) {
3099
3100                 $entry = "";
3101
3102                 $url = htmlspecialchars($url);
3103
3104                 if (strpos($ctype, "audio/") === 0) {
3105
3106                         if ($_SESSION["hasAudio"] && (strpos($ctype, "ogg") !== false ||
3107                                 $_SESSION["hasMp3"])) {
3108
3109                                 $entry .= "<audio preload=\"none\" controls>
3110                                         <source type=\"$ctype\" src=\"$url\"></source>
3111                                         </audio>";
3112
3113                         } else {
3114
3115                                 $entry .= "<object type=\"application/x-shockwave-flash\"
3116                                         data=\"lib/button/musicplayer.swf?song_url=$url\"
3117                                         width=\"17\" height=\"17\" style='float : left; margin-right : 5px;'>
3118                                         <param name=\"movie\"
3119                                                 value=\"lib/button/musicplayer.swf?song_url=$url\" />
3120                                         </object>";
3121                         }
3122
3123                         if ($entry) $entry .= "&nbsp; <a target=\"_blank\"
3124                                 href=\"$url\">" . basename($url) . "</a>";
3125
3126                         return $entry;
3127
3128                 }
3129
3130                 return "";
3131
3132 /*              $filename = substr($url, strrpos($url, "/")+1);
3133
3134                 $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
3135                         $filename . " (" . $ctype . ")" . "</a>"; */
3136
3137         }
3138
3139         function format_article($id, $mark_as_read = true, $zoom_mode = false, $owner_uid = false) {
3140                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3141
3142                 $rv = array();
3143
3144                 $rv['id'] = $id;
3145
3146                 /* we can figure out feed_id from article id anyway, why do we
3147                  * pass feed_id here? let's ignore the argument :(*/
3148
3149                 $result = db_query("SELECT feed_id FROM ttrss_user_entries
3150                         WHERE ref_id = '$id'");
3151
3152                 $feed_id = (int) db_fetch_result($result, 0, "feed_id");
3153
3154                 $rv['feed_id'] = $feed_id;
3155
3156                 //if (!$zoom_mode) { print "<article id='$id'><![CDATA["; };
3157
3158                 if ($mark_as_read) {
3159                         $result = db_query("UPDATE ttrss_user_entries
3160                                 SET unread = false,last_read = NOW()
3161                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
3162
3163                         ccache_update($feed_id, $owner_uid);
3164                 }
3165
3166                 $result = db_query("SELECT id,title,link,content,feed_id,comments,int_id,lang,
3167                         ".SUBSTRING_FOR_DATE."(updated,1,16) as updated,
3168                         (SELECT site_url FROM ttrss_feeds WHERE id = feed_id) as site_url,
3169                         (SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) as hide_images,
3170                         (SELECT always_display_enclosures FROM ttrss_feeds WHERE id = feed_id) as always_display_enclosures,
3171                         num_comments,
3172                         tag_cache,
3173                         author,
3174                         orig_feed_id,
3175                         note
3176                         FROM ttrss_entries,ttrss_user_entries
3177                         WHERE   id = '$id' AND ref_id = id AND owner_uid = $owner_uid");
3178
3179                 if ($result) {
3180
3181                         $line = db_fetch_assoc($result);
3182
3183                         $tag_cache = $line["tag_cache"];
3184
3185                         $line["tags"] = get_article_tags($id, $owner_uid, $line["tag_cache"]);
3186                         unset($line["tag_cache"]);
3187
3188                         $line["content"] = sanitize($line["content"],
3189                                 sql_bool_to_bool($line['hide_images']),
3190                                 $owner_uid, $line["site_url"]);
3191
3192                         foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_RENDER_ARTICLE) as $p) {
3193                                 $line = $p->hook_render_article($line);
3194                         }
3195
3196                         $num_comments = $line["num_comments"];
3197                         $entry_comments = "";
3198
3199                         if ($num_comments > 0) {
3200                                 if ($line["comments"]) {
3201                                         $comments_url = htmlspecialchars($line["comments"]);
3202                                 } else {
3203                                         $comments_url = htmlspecialchars($line["link"]);
3204                                 }
3205                                 $entry_comments = "<a target='_blank' href=\"$comments_url\">$num_comments comments</a>";
3206                         } else {
3207                                 if ($line["comments"] && $line["link"] != $line["comments"]) {
3208                                         $entry_comments = "<a target='_blank' href=\"".htmlspecialchars($line["comments"])."\">comments</a>";
3209                                 }
3210                         }
3211
3212                         if ($zoom_mode) {
3213                                 header("Content-Type: text/html");
3214                                 $rv['content'] .= "<html><head>
3215                                                 <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"/>
3216                                                 <title>Tiny Tiny RSS - ".$line["title"]."</title>
3217                                                 <link rel=\"stylesheet\" type=\"text/css\" href=\"css/tt-rss.css\">
3218                                                 <script type=\"text/javascript\">
3219                                                 function openSelectedAttachment(elem) {
3220                                                         try {
3221                                                                 var url = elem[elem.selectedIndex].value;
3222
3223                                                                 if (url) {
3224                                                                         window.open(url);
3225                                                                         elem.selectedIndex = 0;
3226                                                                 }
3227
3228                                                         } catch (e) {
3229                                                                 exception_error(\"openSelectedAttachment\", e);
3230                                                         }
3231                                                 }
3232                                         </script>
3233                                         </head><body id=\"ttrssZoom\">";
3234                         }
3235
3236                         $rv['content'] .= "<div class=\"postReply\" id=\"POST-$id\">";
3237
3238                         $rv['content'] .= "<div class=\"postHeader\" id=\"POSTHDR-$id\">";
3239
3240                         $entry_author = $line["author"];
3241
3242                         if ($entry_author) {
3243                                 $entry_author = __(" - ") . $entry_author;
3244                         }
3245
3246                         $parsed_updated = make_local_datetime($line["updated"], true,
3247                                 $owner_uid, true);
3248
3249                         if (!$zoom_mode)
3250                                 $rv['content'] .= "<div class=\"postDate\">$parsed_updated</div>";
3251
3252                         if ($line["link"]) {
3253                                 $rv['content'] .= "<div class='postTitle'><a target='_blank'
3254                                         title=\"".htmlspecialchars($line['title'])."\"
3255                                         href=\"" .
3256                                         htmlspecialchars($line["link"]) . "\">" .
3257                                         $line["title"] . "</a>" .
3258                                         "<span class='author'>$entry_author</span></div>";
3259                         } else {
3260                                 $rv['content'] .= "<div class='postTitle'>" . $line["title"] . "$entry_author</div>";
3261                         }
3262
3263                         if ($zoom_mode)
3264                                 $rv['content'] .= "<div class=\"postDate\">$parsed_updated</div>";
3265
3266                         $tags_str = format_tags_string($line["tags"], $id);
3267                         $tags_str_full = join(", ", $line["tags"]);
3268
3269                         if (!$tags_str_full) $tags_str_full = __("no tags");
3270
3271                         if (!$entry_comments) $entry_comments = "&nbsp;"; # placeholder
3272
3273                         $rv['content'] .= "<div class='postTags' style='float : right'>
3274                                 <img src='images/tag.png'
3275                                 class='tagsPic' alt='Tags' title='Tags'>&nbsp;";
3276
3277                         if (!$zoom_mode) {
3278                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>
3279                                         <a title=\"".__('Edit tags for this article')."\"
3280                                         href=\"#\" onclick=\"editArticleTags($id, $feed_id)\">(+)</a>";
3281
3282                                 $rv['content'] .= "<div dojoType=\"dijit.Tooltip\"
3283                                         id=\"ATSTRTIP-$id\" connectId=\"ATSTR-$id\"
3284                                         position=\"below\">$tags_str_full</div>";
3285
3286                                 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_ARTICLE_BUTTON) as $p) {
3287                                         $rv['content'] .= $p->hook_article_button($line);
3288                                 }
3289
3290                         } else {
3291                                 $tags_str = strip_tags($tags_str);
3292                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>";
3293                         }
3294                         $rv['content'] .= "</div>";
3295                         $rv['content'] .= "<div clear='both'>";
3296
3297                         foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_ARTICLE_LEFT_BUTTON) as $p) {
3298                                 $rv['content'] .= $p->hook_article_left_button($line);
3299                         }
3300
3301                         $rv['content'] .= "$entry_comments</div>";
3302
3303                         if ($line["orig_feed_id"]) {
3304
3305                                 $tmp_result = db_query("SELECT * FROM ttrss_archived_feeds
3306                                         WHERE id = ".$line["orig_feed_id"]);
3307
3308                                 if (db_num_rows($tmp_result) != 0) {
3309
3310                                         $rv['content'] .= "<div clear='both'>";
3311                                         $rv['content'] .= __("Originally from:");
3312
3313                                         $rv['content'] .= "&nbsp;";
3314
3315                                         $tmp_line = db_fetch_assoc($tmp_result);
3316
3317                                         $rv['content'] .= "<a target='_blank'
3318                                                 href=' " . htmlspecialchars($tmp_line['site_url']) . "'>" .
3319                                                 $tmp_line['title'] . "</a>";
3320
3321                                         $rv['content'] .= "&nbsp;";
3322
3323                                         $rv['content'] .= "<a target='_blank' href='" . htmlspecialchars($tmp_line['feed_url']) . "'>";
3324                                         $rv['content'] .= "<img title='".__('Feed URL')."'class='tinyFeedIcon' src='images/pub_set.svg'></a>";
3325
3326                                         $rv['content'] .= "</div>";
3327                                 }
3328                         }
3329
3330                         $rv['content'] .= "</div>";
3331
3332                         $rv['content'] .= "<div id=\"POSTNOTE-$id\">";
3333                                 if ($line['note']) {
3334                                         $rv['content'] .= format_article_note($id, $line['note'], !$zoom_mode);
3335                                 }
3336                         $rv['content'] .= "</div>";
3337
3338                         if (!$line['lang']) $line['lang'] = 'en';
3339
3340                         $rv['content'] .= "<div class=\"postContent\" lang=\"".$line['lang']."\">";
3341
3342                         $rv['content'] .= $line["content"];
3343                         $rv['content'] .= format_article_enclosures($id,
3344                                 sql_bool_to_bool($line["always_display_enclosures"]),
3345                                 $line["content"],
3346                                 sql_bool_to_bool($line["hide_images"]));
3347
3348                         $rv['content'] .= "</div>";
3349
3350                         $rv['content'] .= "</div>";
3351
3352                 }
3353
3354                 if ($zoom_mode) {
3355                         $rv['content'] .= "
3356                                 <div class='footer'>
3357                                 <button onclick=\"return window.close()\">".
3358                                         __("Close this window")."</button></div>";
3359                         $rv['content'] .= "</body></html>";
3360                 }
3361
3362                 return $rv;
3363
3364         }
3365
3366         function print_checkpoint($n, $s) {
3367                 $ts = microtime(true);
3368                 echo sprintf("<!-- CP[$n] %.4f seconds -->\n", $ts - $s);
3369                 return $ts;
3370         }
3371
3372         function sanitize_tag($tag) {
3373                 $tag = trim($tag);
3374
3375                 $tag = mb_strtolower($tag, 'utf-8');
3376
3377                 $tag = preg_replace('/[\'\"\+\>\<]/', "", $tag);
3378
3379 //              $tag = str_replace('"', "", $tag);
3380 //              $tag = str_replace("+", " ", $tag);
3381                 $tag = str_replace("technorati tag: ", "", $tag);
3382
3383                 return $tag;
3384         }
3385
3386         function get_self_url_prefix() {
3387                 if (strrpos(SELF_URL_PATH, "/") === strlen(SELF_URL_PATH)-1) {
3388                         return substr(SELF_URL_PATH, 0, strlen(SELF_URL_PATH)-1);
3389                 } else {
3390                         return SELF_URL_PATH;
3391                 }
3392         }
3393
3394         /**
3395          * Compute the Mozilla Firefox feed adding URL from server HOST and REQUEST_URI.
3396          *
3397          * @return string The Mozilla Firefox feed adding URL.
3398          */
3399         function add_feed_url() {
3400                 //$url_path = ($_SERVER['HTTPS'] != "on" ? 'http://' :  'https://') . $_SERVER["HTTP_HOST"] . parse_url($_SERVER["REQUEST_URI"], PHP_URL_PATH);
3401
3402                 $url_path = get_self_url_prefix() .
3403                         "/public.php?op=subscribe&feed_url=%s";
3404                 return $url_path;
3405         } // function add_feed_url
3406
3407         function encrypt_password($pass, $salt = '', $mode2 = false) {
3408                 if ($salt && $mode2) {
3409                         return "MODE2:" . hash('sha256', $salt . $pass);
3410                 } else if ($salt) {
3411                         return "SHA1X:" . sha1("$salt:$pass");
3412                 } else {
3413                         return "SHA1:" . sha1($pass);
3414                 }
3415         } // function encrypt_password
3416
3417         function load_filters($feed_id, $owner_uid, $action_id = false) {
3418                 $filters = array();
3419
3420                 $cat_id = (int)getFeedCategory($feed_id);
3421
3422                 $result = db_query("SELECT * FROM ttrss_filters2 WHERE
3423                         owner_uid = $owner_uid AND enabled = true ORDER BY order_id, title");
3424
3425                 $check_cats = join(",", array_merge(
3426                         getParentCategories($cat_id, $owner_uid),
3427                         array($cat_id)));
3428
3429                 while ($line = db_fetch_assoc($result)) {
3430                         $filter_id = $line["id"];
3431
3432                         $result2 = db_query("SELECT
3433                                 r.reg_exp, r.inverse, r.feed_id, r.cat_id, r.cat_filter, t.name AS type_name
3434                                 FROM ttrss_filters2_rules AS r,
3435                                 ttrss_filter_types AS t
3436                                 WHERE
3437                                         (cat_id IS NULL OR cat_id IN ($check_cats)) AND
3438                                         (feed_id IS NULL OR feed_id = '$feed_id') AND
3439                                         filter_type = t.id AND filter_id = '$filter_id'");
3440
3441                         $rules = array();
3442                         $actions = array();
3443
3444                         while ($rule_line = db_fetch_assoc($result2)) {
3445 #                               print_r($rule_line);
3446
3447                                 $rule = array();
3448                                 $rule["reg_exp"] = $rule_line["reg_exp"];
3449                                 $rule["type"] = $rule_line["type_name"];
3450                                 $rule["inverse"] = sql_bool_to_bool($rule_line["inverse"]);
3451
3452                                 array_push($rules, $rule);
3453                         }
3454
3455                         $result2 = db_query("SELECT a.action_param,t.name AS type_name
3456                                 FROM ttrss_filters2_actions AS a,
3457                                 ttrss_filter_actions AS t
3458                                 WHERE
3459                                         action_id = t.id AND filter_id = '$filter_id'");
3460
3461                         while ($action_line = db_fetch_assoc($result2)) {
3462 #                               print_r($action_line);
3463
3464                                 $action = array();
3465                                 $action["type"] = $action_line["type_name"];
3466                                 $action["param"] = $action_line["action_param"];
3467
3468                                 array_push($actions, $action);
3469                         }
3470
3471
3472                         $filter = array();
3473                         $filter["match_any_rule"] = sql_bool_to_bool($line["match_any_rule"]);
3474                         $filter["inverse"] = sql_bool_to_bool($line["inverse"]);
3475                         $filter["rules"] = $rules;
3476                         $filter["actions"] = $actions;
3477
3478                         if (count($rules) > 0 && count($actions) > 0) {
3479                                 array_push($filters, $filter);
3480                         }
3481                 }
3482
3483                 return $filters;
3484         }
3485
3486         function get_score_pic($score) {
3487                 if ($score > 100) {
3488                         return "score_high.png";
3489                 } else if ($score > 0) {
3490                         return "score_half_high.png";
3491                 } else if ($score < -100) {
3492                         return "score_low.png";
3493                 } else if ($score < 0) {
3494                         return "score_half_low.png";
3495                 } else {
3496                         return "score_neutral.png";
3497                 }
3498         }
3499
3500         function feed_has_icon($id) {
3501                 return is_file(ICONS_DIR . "/$id.ico") && filesize(ICONS_DIR . "/$id.ico") > 0;
3502         }
3503
3504         function init_plugins() {
3505                 PluginHost::getInstance()->load(PLUGINS, PluginHost::KIND_ALL);
3506
3507                 return true;
3508         }
3509
3510         function format_tags_string($tags, $id) {
3511                 if (!is_array($tags) || count($tags) == 0) {
3512                         return __("no tags");
3513                 } else {
3514                         $maxtags = min(5, count($tags));
3515
3516                         for ($i = 0; $i < $maxtags; $i++) {
3517                                 $tags_str .= "<a class=\"tag\" href=\"#\" onclick=\"viewfeed('".$tags[$i]."')\">" . $tags[$i] . "</a>, ";
3518                         }
3519
3520                         $tags_str = mb_substr($tags_str, 0, mb_strlen($tags_str)-2);
3521
3522                         if (count($tags) > $maxtags)
3523                                 $tags_str .= ", &hellip;";
3524
3525                         return $tags_str;
3526                 }
3527         }
3528
3529         function format_article_labels($labels, $id) {
3530
3531                 if (!is_array($labels)) return '';
3532
3533                 $labels_str = "";
3534
3535                 foreach ($labels as $l) {
3536                         $labels_str .= sprintf("<span class='hlLabelRef'
3537                                 style='color : %s; background-color : %s'>%s</span>",
3538                                         $l[2], $l[3], $l[1]);
3539                         }
3540
3541                 return $labels_str;
3542
3543         }
3544
3545         function format_article_note($id, $note, $allow_edit = true) {
3546
3547                 $str = "<div class='articleNote'        onclick=\"editArticleNote($id)\">
3548                         <div class='noteEdit' onclick=\"editArticleNote($id)\">".
3549                         ($allow_edit ? __('(edit note)') : "")."</div>$note</div>";
3550
3551                 return $str;
3552         }
3553
3554
3555         function get_feed_category($feed_cat, $parent_cat_id = false) {
3556                 if ($parent_cat_id) {
3557                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3558                         $parent_insert = "'$parent_cat_id'";
3559                 } else {
3560                         $parent_qpart = "parent_cat IS NULL";
3561                         $parent_insert = "NULL";
3562                 }
3563
3564                 $result = db_query(
3565                         "SELECT id FROM ttrss_feed_categories
3566                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3567
3568                 if (db_num_rows($result) == 0) {
3569                         return false;
3570                 } else {
3571                         return db_fetch_result($result, 0, "id");
3572                 }
3573         }
3574
3575         function add_feed_category($feed_cat, $parent_cat_id = false) {
3576
3577                 if (!$feed_cat) return false;
3578
3579                 db_query("BEGIN");
3580
3581                 if ($parent_cat_id) {
3582                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3583                         $parent_insert = "'$parent_cat_id'";
3584                 } else {
3585                         $parent_qpart = "parent_cat IS NULL";
3586                         $parent_insert = "NULL";
3587                 }
3588
3589                 $feed_cat = mb_substr($feed_cat, 0, 250);
3590
3591                 $result = db_query(
3592                         "SELECT id FROM ttrss_feed_categories
3593                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3594
3595                 if (db_num_rows($result) == 0) {
3596
3597                         $result = db_query(
3598                                 "INSERT INTO ttrss_feed_categories (owner_uid,title,parent_cat)
3599                                 VALUES ('".$_SESSION["uid"]."', '$feed_cat', $parent_insert)");
3600
3601                         db_query("COMMIT");
3602
3603                         return true;
3604                 }
3605
3606                 return false;
3607         }
3608
3609         function getArticleFeed($id) {
3610                 $result = db_query("SELECT feed_id FROM ttrss_user_entries
3611                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
3612
3613                 if (db_num_rows($result) != 0) {
3614                         return db_fetch_result($result, 0, "feed_id");
3615                 } else {
3616                         return 0;
3617                 }
3618         }
3619
3620         /**
3621          * Fixes incomplete URLs by prepending "http://".
3622          * Also replaces feed:// with http://, and
3623          * prepends a trailing slash if the url is a domain name only.
3624          *
3625          * @param string $url Possibly incomplete URL
3626          *
3627          * @return string Fixed URL.
3628          */
3629         function fix_url($url) {
3630                 if (strpos($url, '://') === false) {
3631                         $url = 'http://' . $url;
3632                 } else if (substr($url, 0, 5) == 'feed:') {
3633                         $url = 'http:' . substr($url, 5);
3634                 }
3635
3636                 //prepend slash if the URL has no slash in it
3637                 // "http://www.example" -> "http://www.example/"
3638                 if (strpos($url, '/', strpos($url, ':') + 3) === false) {
3639                         $url .= '/';
3640                 }
3641
3642                 if ($url != "http:///")
3643                         return $url;
3644                 else
3645                         return '';
3646         }
3647
3648         function validate_feed_url($url) {
3649                 $parts = parse_url($url);
3650
3651                 return ($parts['scheme'] == 'http' || $parts['scheme'] == 'feed' || $parts['scheme'] == 'https');
3652
3653         }
3654
3655         function get_article_enclosures($id) {
3656
3657                 $query = "SELECT * FROM ttrss_enclosures
3658                         WHERE post_id = '$id' AND content_url != ''";
3659
3660                 $rv = array();
3661
3662                 $result = db_query($query);
3663
3664                 if (db_num_rows($result) > 0) {
3665                         while ($line = db_fetch_assoc($result)) {
3666                                 array_push($rv, $line);
3667                         }
3668                 }
3669
3670                 return $rv;
3671         }
3672
3673         function save_email_address($email) {
3674                 // FIXME: implement persistent storage of emails
3675
3676                 if (!$_SESSION['stored_emails'])
3677                         $_SESSION['stored_emails'] = array();
3678
3679                 if (!in_array($email, $_SESSION['stored_emails']))
3680                         array_push($_SESSION['stored_emails'], $email);
3681         }
3682
3683
3684         function get_feed_access_key($feed_id, $is_cat, $owner_uid = false) {
3685
3686                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3687
3688                 $sql_is_cat = bool_to_sql_bool($is_cat);
3689
3690                 $result = db_query("SELECT access_key FROM ttrss_access_keys
3691                         WHERE feed_id = '$feed_id'      AND is_cat = $sql_is_cat
3692                         AND owner_uid = " . $owner_uid);
3693
3694                 if (db_num_rows($result) == 1) {
3695                         return db_fetch_result($result, 0, "access_key");
3696                 } else {
3697                         $key = db_escape_string(sha1(uniqid(rand(), true)));
3698
3699                         $result = db_query("INSERT INTO ttrss_access_keys
3700                                 (access_key, feed_id, is_cat, owner_uid)
3701                                 VALUES ('$key', '$feed_id', $sql_is_cat, '$owner_uid')");
3702
3703                         return $key;
3704                 }
3705                 return false;
3706         }
3707
3708         function get_feeds_from_html($url, $content)
3709         {
3710                 $url     = fix_url($url);
3711                 $baseUrl = substr($url, 0, strrpos($url, '/') + 1);
3712
3713                 libxml_use_internal_errors(true);
3714
3715                 $doc = new DOMDocument();
3716                 $doc->loadHTML($content);
3717                 $xpath = new DOMXPath($doc);
3718                 $entries = $xpath->query('/html/head/link[@rel="alternate"]');
3719                 $feedUrls = array();
3720                 foreach ($entries as $entry) {
3721                         if ($entry->hasAttribute('href')) {
3722                                 $title = $entry->getAttribute('title');
3723                                 if ($title == '') {
3724                                         $title = $entry->getAttribute('type');
3725                                 }
3726                                 $feedUrl = rewrite_relative_url(
3727                                         $baseUrl, $entry->getAttribute('href')
3728                                 );
3729                                 $feedUrls[$feedUrl] = $title;
3730                         }
3731                 }
3732                 return $feedUrls;
3733         }
3734
3735         function is_html($content) {
3736                 return preg_match("/<html|DOCTYPE html/i", substr($content, 0, 20)) !== 0;
3737         }
3738
3739         function url_is_html($url, $login = false, $pass = false) {
3740                 return is_html(fetch_file_contents($url, false, $login, $pass));
3741         }
3742
3743         function print_label_select($name, $value, $attributes = "") {
3744
3745                 $result = db_query("SELECT caption FROM ttrss_labels2
3746                         WHERE owner_uid = '".$_SESSION["uid"]."' ORDER BY caption");
3747
3748                 print "<select default=\"$value\" name=\"" . htmlspecialchars($name) .
3749                         "\" $attributes onchange=\"labelSelectOnChange(this)\" >";
3750
3751                 while ($line = db_fetch_assoc($result)) {
3752
3753                         $issel = ($line["caption"] == $value) ? "selected=\"1\"" : "";
3754
3755                         print "<option value=\"".htmlspecialchars($line["caption"])."\"
3756                                 $issel>" . htmlspecialchars($line["caption"]) . "</option>";
3757
3758                 }
3759
3760 #               print "<option value=\"ADD_LABEL\">" .__("Add label...") . "</option>";
3761
3762                 print "</select>";
3763
3764
3765         }
3766
3767         function format_article_enclosures($id, $always_display_enclosures,
3768                                         $article_content, $hide_images = false) {
3769
3770                 $result = get_article_enclosures($id);
3771                 $rv = '';
3772
3773                 if (count($result) > 0) {
3774
3775                         $entries_html = array();
3776                         $entries = array();
3777                         $entries_inline = array();
3778
3779                         foreach ($result as $line) {
3780
3781                                 $url = $line["content_url"];
3782                                 $ctype = $line["content_type"];
3783
3784                                 if (!$ctype) $ctype = __("unknown type");
3785
3786                                 $filename = substr($url, strrpos($url, "/")+1);
3787
3788                                 $player = format_inline_player($url, $ctype);
3789
3790                                 if ($player) array_push($entries_inline, $player);
3791
3792 #                               $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
3793 #                                       $filename . " (" . $ctype . ")" . "</a>";
3794
3795                                 $entry = "<div onclick=\"window.open('".htmlspecialchars($url)."')\"
3796                                         dojoType=\"dijit.MenuItem\">$filename ($ctype)</div>";
3797
3798                                 array_push($entries_html, $entry);
3799
3800                                 $entry = array();
3801
3802                                 $entry["type"] = $ctype;
3803                                 $entry["filename"] = $filename;
3804                                 $entry["url"] = $url;
3805
3806                                 array_push($entries, $entry);
3807                         }
3808
3809                         if ($_SESSION['uid'] && !get_pref("STRIP_IMAGES") && !$_SESSION["bw_limit"]) {
3810                                 if ($always_display_enclosures ||
3811                                                         !preg_match("/<img/i", $article_content)) {
3812
3813                                         foreach ($entries as $entry) {
3814
3815                                                 if (preg_match("/image/", $entry["type"]) ||
3816                                                                 preg_match("/\.(jpg|png|gif|bmp)/i", $entry["filename"])) {
3817
3818                                                                 if (!$hide_images) {
3819                                                                         $rv .= "<p><img
3820                                                                         alt=\"".htmlspecialchars($entry["filename"])."\"
3821                                                                         src=\"" .htmlspecialchars($entry["url"]) . "\"/></p>";
3822                                                                 } else {
3823                                                                         $rv .= "<p><a target=\"_blank\"
3824                                                                         href=\"".htmlspecialchars($entry["url"])."\"
3825                                                                         >" .htmlspecialchars($entry["url"]) . "</a></p>";
3826
3827                                                                 }
3828                                                 }
3829                                         }
3830                                 }
3831                         }
3832
3833                         if (count($entries_inline) > 0) {
3834                                 $rv .= "<hr clear='both'/>";
3835                                 foreach ($entries_inline as $entry) { $rv .= $entry; };
3836                                 $rv .= "<hr clear='both'/>";
3837                         }
3838
3839                         $rv .= "<select class=\"attachments\" onchange=\"openSelectedAttachment(this)\">".
3840                                 "<option value=''>" . __('Attachments')."</option>";
3841
3842                         foreach ($entries as $entry) {
3843                                 $rv .= "<option value=\"".htmlspecialchars($entry["url"])."\">" . htmlspecialchars($entry["filename"]) . "</option>";
3844
3845                         };
3846
3847                         $rv .= "</select>";
3848                 }
3849
3850                 return $rv;
3851         }
3852
3853         function getLastArticleId() {
3854                 $result = db_query("SELECT MAX(ref_id) AS id FROM ttrss_user_entries
3855                         WHERE owner_uid = " . $_SESSION["uid"]);
3856
3857                 if (db_num_rows($result) == 1) {
3858                         return db_fetch_result($result, 0, "id");
3859                 } else {
3860                         return -1;
3861                 }
3862         }
3863
3864         function build_url($parts) {
3865                 return $parts['scheme'] . "://" . $parts['host'] . $parts['path'];
3866         }
3867
3868         /**
3869          * Converts a (possibly) relative URL to a absolute one.
3870          *
3871          * @param string $url     Base URL (i.e. from where the document is)
3872          * @param string $rel_url Possibly relative URL in the document
3873          *
3874          * @return string Absolute URL
3875          */
3876         function rewrite_relative_url($url, $rel_url) {
3877                 if (strpos($rel_url, ":") !== false) {
3878                         return $rel_url;
3879                 } else if (strpos($rel_url, "://") !== false) {
3880                         return $rel_url;
3881                 } else if (strpos($rel_url, "//") === 0) {
3882                         # protocol-relative URL (rare but they exist)
3883                         return $rel_url;
3884                 } else if (strpos($rel_url, "/") === 0)
3885                 {
3886                         $parts = parse_url($url);
3887                         $parts['path'] = $rel_url;
3888
3889                         return build_url($parts);
3890
3891                 } else {
3892                         $parts = parse_url($url);
3893                         if (!isset($parts['path'])) {
3894                                 $parts['path'] = '/';
3895                         }
3896                         $dir = $parts['path'];
3897                         if (substr($dir, -1) !== '/') {
3898                                 $dir = dirname($parts['path']);
3899                                 $dir !== '/' && $dir .= '/';
3900                         }
3901                         $parts['path'] = $dir . $rel_url;
3902
3903                         return build_url($parts);
3904                 }
3905         }
3906
3907         function sphinx_search($query, $offset = 0, $limit = 30) {
3908                 require_once 'lib/sphinxapi.php';
3909
3910                 $sphinxClient = new SphinxClient();
3911
3912                 $sphinxpair = explode(":", SPHINX_SERVER, 2);
3913
3914                 $sphinxClient->SetServer($sphinxpair[0], (int)$sphinxpair[1]);
3915                 $sphinxClient->SetConnectTimeout(1);
3916
3917                 $sphinxClient->SetFieldWeights(array('title' => 70, 'content' => 30,
3918                         'feed_title' => 20));
3919
3920                 $sphinxClient->SetMatchMode(SPH_MATCH_EXTENDED2);
3921                 $sphinxClient->SetRankingMode(SPH_RANK_PROXIMITY_BM25);
3922                 $sphinxClient->SetLimits($offset, $limit, 1000);
3923                 $sphinxClient->SetArrayResult(false);
3924                 $sphinxClient->SetFilter('owner_uid', array($_SESSION['uid']));
3925
3926                 $result = $sphinxClient->Query($query, SPHINX_INDEX);
3927
3928                 $ids = array();
3929
3930                 if (is_array($result['matches'])) {
3931                         foreach (array_keys($result['matches']) as $int_id) {
3932                                 $ref_id = $result['matches'][$int_id]['attrs']['ref_id'];
3933                                 array_push($ids, $ref_id);
3934                         }
3935                 }
3936
3937                 return $ids;
3938         }
3939
3940         function cleanup_tags($days = 14, $limit = 1000) {
3941
3942                 if (DB_TYPE == "pgsql") {
3943                         $interval_query = "date_updated < NOW() - INTERVAL '$days days'";
3944                 } else if (DB_TYPE == "mysql") {
3945                         $interval_query = "date_updated < DATE_SUB(NOW(), INTERVAL $days DAY)";
3946                 }
3947
3948                 $tags_deleted = 0;
3949
3950                 while ($limit > 0) {
3951                         $limit_part = 500;
3952
3953                         $query = "SELECT ttrss_tags.id AS id
3954                                 FROM ttrss_tags, ttrss_user_entries, ttrss_entries
3955                                 WHERE post_int_id = int_id AND $interval_query AND
3956                                 ref_id = ttrss_entries.id AND tag_cache != '' LIMIT $limit_part";
3957
3958                         $result = db_query($query);
3959
3960                         $ids = array();
3961
3962                         while ($line = db_fetch_assoc($result)) {
3963                                 array_push($ids, $line['id']);
3964                         }
3965
3966                         if (count($ids) > 0) {
3967                                 $ids = join(",", $ids);
3968
3969                                 $tmp_result = db_query("DELETE FROM ttrss_tags WHERE id IN ($ids)");
3970                                 $tags_deleted += db_affected_rows($tmp_result);
3971                         } else {
3972                                 break;
3973                         }
3974
3975                         $limit -= $limit_part;
3976                 }
3977
3978                 return $tags_deleted;
3979         }
3980
3981         function print_user_stylesheet() {
3982                 $value = get_pref('USER_STYLESHEET');
3983
3984                 if ($value) {
3985                         print "<style type=\"text/css\">";
3986                         print str_replace("<br/>", "\n", $value);
3987                         print "</style>";
3988                 }
3989
3990         }
3991
3992         function filter_to_sql($filter, $owner_uid) {
3993                 $query = array();
3994
3995                 if (DB_TYPE == "pgsql")
3996                         $reg_qpart = "~";
3997                 else
3998                         $reg_qpart = "REGEXP";
3999
4000                 foreach ($filter["rules"] AS $rule) {
4001                         $rule['reg_exp'] = str_replace('/', '\/', $rule["reg_exp"]);
4002                         $regexp_valid = preg_match('/' . $rule['reg_exp'] . '/',
4003                                 $rule['reg_exp']) !== FALSE;
4004
4005                         if ($regexp_valid) {
4006
4007                                 $rule['reg_exp'] = db_escape_string($rule['reg_exp']);
4008
4009                                         switch ($rule["type"]) {
4010                                         case "title":
4011                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
4012                                                         $rule['reg_exp'] . "')";
4013                                                 break;
4014                                         case "content":
4015                                                 $qpart = "LOWER(ttrss_entries.content) $reg_qpart LOWER('".
4016                                                         $rule['reg_exp'] . "')";
4017                                                 break;
4018                                         case "both":
4019                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
4020                                                         $rule['reg_exp'] . "') OR LOWER(" .
4021                                                         "ttrss_entries.content) $reg_qpart LOWER('" . $rule['reg_exp'] . "')";
4022                                                 break;
4023                                         case "tag":
4024                                                 $qpart = "LOWER(ttrss_user_entries.tag_cache) $reg_qpart LOWER('".
4025                                                         $rule['reg_exp'] . "')";
4026                                                 break;
4027                                         case "link":
4028                                                 $qpart = "LOWER(ttrss_entries.link) $reg_qpart LOWER('".
4029                                                         $rule['reg_exp'] . "')";
4030                                                 break;
4031                                         case "author":
4032                                                 $qpart = "LOWER(ttrss_entries.author) $reg_qpart LOWER('".
4033                                                         $rule['reg_exp'] . "')";
4034                                                 break;
4035                                 }
4036
4037                                 if (isset($rule['inverse'])) $qpart = "NOT ($qpart)";
4038
4039                                 if (isset($rule["feed_id"]) && $rule["feed_id"] > 0) {
4040                                         $qpart .= " AND feed_id = " . db_escape_string($rule["feed_id"]);
4041                                 }
4042
4043                                 if (isset($rule["cat_id"])) {
4044
4045                                         if ($rule["cat_id"] > 0) {
4046                                                 $children = getChildCategories($rule["cat_id"], $owner_uid);
4047                                                 array_push($children, $rule["cat_id"]);
4048
4049                                                 $children = join(",", $children);
4050
4051                                                 $cat_qpart = "cat_id IN ($children)";
4052                                         } else {
4053                                                 $cat_qpart = "cat_id IS NULL";
4054                                         }
4055
4056                                         $qpart .= " AND $cat_qpart";
4057                                 }
4058
4059                                 array_push($query, "($qpart)");
4060
4061                         }
4062                 }
4063
4064                 if (count($query) > 0) {
4065                         $fullquery = "(" . join($filter["match_any_rule"] ? "OR" : "AND", $query) . ")";
4066                 } else {
4067                         $fullquery = "(false)";
4068                 }
4069
4070                 if ($filter['inverse']) $fullquery = "(NOT $fullquery)";
4071
4072                 return $fullquery;
4073         }
4074
4075         if (!function_exists('gzdecode')) {
4076                 function gzdecode($string) { // no support for 2nd argument
4077                         return file_get_contents('compress.zlib://data:who/cares;base64,'.
4078                                 base64_encode($string));
4079                 }
4080         }
4081
4082         function get_random_bytes($length) {
4083                 if (function_exists('openssl_random_pseudo_bytes')) {
4084                         return openssl_random_pseudo_bytes($length);
4085                 } else {
4086                         $output = "";
4087
4088                         for ($i = 0; $i < $length; $i++)
4089                                 $output .= chr(mt_rand(0, 255));
4090
4091                         return $output;
4092                 }
4093         }
4094
4095         function read_stdin() {
4096                 $fp = fopen("php://stdin", "r");
4097
4098                 if ($fp) {
4099                         $line = trim(fgets($fp));
4100                         fclose($fp);
4101                         return $line;
4102                 }
4103
4104                 return null;
4105         }
4106
4107         function tmpdirname($path, $prefix) {
4108                 // Use PHP's tmpfile function to create a temporary
4109                 // directory name. Delete the file and keep the name.
4110                 $tempname = tempnam($path,$prefix);
4111                 if (!$tempname)
4112                         return false;
4113
4114                 if (!unlink($tempname))
4115                         return false;
4116
4117        return $tempname;
4118         }
4119
4120         function getFeedCategory($feed) {
4121                 $result = db_query("SELECT cat_id FROM ttrss_feeds
4122                         WHERE id = '$feed'");
4123
4124                 if (db_num_rows($result) > 0) {
4125                         return db_fetch_result($result, 0, "cat_id");
4126                 } else {
4127                         return false;
4128                 }
4129
4130         }
4131
4132         function implements_interface($class, $interface) {
4133                 return in_array($interface, class_implements($class));
4134         }
4135
4136         function geturl($url, $depth = 0){
4137
4138                 if ($depth == 20) return $url;
4139
4140                 if (!function_exists('curl_init'))
4141                         return user_error('CURL Must be installed for geturl function to work. Ask your host to enable it or uncomment extension=php_curl.dll in php.ini', E_USER_ERROR);
4142
4143                 $curl = curl_init();
4144                 $header[0] = "Accept: text/xml,application/xml,application/xhtml+xml,";
4145                 $header[0] .= "text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5";
4146                 $header[] = "Cache-Control: max-age=0";
4147                 $header[] = "Connection: keep-alive";
4148                 $header[] = "Keep-Alive: 300";
4149                 $header[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
4150                 $header[] = "Accept-Language: en-us,en;q=0.5";
4151                 $header[] = "Pragma: ";
4152
4153                 curl_setopt($curl, CURLOPT_URL, $url);
4154                 curl_setopt($curl, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 5.1; rv:5.0) Gecko/20100101 Firefox/5.0 Firefox/5.0');
4155                 curl_setopt($curl, CURLOPT_HTTPHEADER, $header);
4156                 curl_setopt($curl, CURLOPT_HEADER, true);
4157                 curl_setopt($curl, CURLOPT_REFERER, $url);
4158                 curl_setopt($curl, CURLOPT_ENCODING, 'gzip,deflate');
4159                 curl_setopt($curl, CURLOPT_AUTOREFERER, true);
4160                 curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
4161                 //curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true); //CURLOPT_FOLLOWLOCATION Disabled...
4162                 curl_setopt($curl, CURLOPT_TIMEOUT, 60);
4163                 curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);
4164
4165                 if ((OPENSSL_VERSION_NUMBER >= 0x0090808f) && (OPENSSL_VERSION_NUMBER < 0x10000000)) {
4166                         curl_setopt($curl, CURLOPT_SSLVERSION, 3);
4167                 }
4168
4169                 $html = curl_exec($curl);
4170
4171                 $status = curl_getinfo($curl);
4172
4173                 if($status['http_code']!=200){
4174                         if($status['http_code'] == 301 || $status['http_code'] == 302) {
4175                                 curl_close($curl);
4176                                 list($header) = explode("\r\n\r\n", $html, 2);
4177                                 $matches = array();
4178                                 preg_match("/(Location:|URI:)[^(\n)]*/", $header, $matches);
4179                                 $url = trim(str_replace($matches[1],"",$matches[0]));
4180                                 $url_parsed = parse_url($url);
4181                                 return (isset($url_parsed))? geturl($url, $depth + 1):'';
4182                         }
4183
4184                         global $fetch_last_error;
4185
4186                         $fetch_last_error = curl_errno($curl) . " " . curl_error($curl);
4187                         curl_close($curl);
4188
4189                         $oline='';
4190                         foreach($status as $key=>$eline){$oline.='['.$key.']'.$eline.' ';}
4191                         $line =$oline." \r\n ".$url."\r\n-----------------\r\n";
4192 #                       $handle = @fopen('./curl.error.log', 'a');
4193 #                       fwrite($handle, $line);
4194                         return FALSE;
4195                 }
4196                 curl_close($curl);
4197                 return $url;
4198         }
4199
4200         function get_minified_js($files) {
4201                 require_once 'lib/jshrink/Minifier.php';
4202
4203                 $rv = '';
4204
4205                 foreach ($files as $js) {
4206                         if (!isset($_GET['debug'])) {
4207                                 $cached_file = CACHE_DIR . "/js/".basename($js).".js";
4208
4209                                 if (file_exists($cached_file) &&
4210                                                 is_readable($cached_file) &&
4211                                                 filemtime($cached_file) >= filemtime("js/$js.js")) {
4212
4213                                         $rv .= file_get_contents($cached_file);
4214
4215                                 } else {
4216                                         $minified = JShrink\Minifier::minify(file_get_contents("js/$js.js"));
4217                                         file_put_contents($cached_file, $minified);
4218                                         $rv .= $minified;
4219                                 }
4220                         } else {
4221                                 $rv .= file_get_contents("js/$js.js");
4222                         }
4223                 }
4224
4225                 return $rv;
4226         }
4227
4228         function stylesheet_tag($filename) {
4229                 $timestamp = filemtime($filename);
4230
4231                 echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"$filename?$timestamp\"/>\n";
4232         }
4233
4234         function javascript_tag($filename) {
4235                 $query = "";
4236
4237                 if (!(strpos($filename, "?") === FALSE)) {
4238                         $query = substr($filename, strpos($filename, "?")+1);
4239                         $filename = substr($filename, 0, strpos($filename, "?"));
4240                 }
4241
4242                 $timestamp = filemtime($filename);
4243
4244                 if ($query) $timestamp .= "&$query";
4245
4246                 echo "<script type=\"text/javascript\" charset=\"utf-8\" src=\"$filename?$timestamp\"></script>\n";
4247         }
4248
4249         function calculate_dep_timestamp() {
4250                 $files = array_merge(glob("js/*.js"), glob("css/*.css"));
4251
4252                 $max_ts = -1;
4253
4254                 foreach ($files as $file) {
4255                         if (filemtime($file) > $max_ts) $max_ts = filemtime($file);
4256                 }
4257
4258                 return $max_ts;
4259         }
4260
4261         function T_js_decl($s1, $s2) {
4262                 if ($s1 && $s2) {
4263                         $s1 = preg_replace("/\n/", "", $s1);
4264                         $s2 = preg_replace("/\n/", "", $s2);
4265
4266                         $s1 = preg_replace("/\"/", "\\\"", $s1);
4267                         $s2 = preg_replace("/\"/", "\\\"", $s2);
4268
4269                         return "T_messages[\"$s1\"] = \"$s2\";\n";
4270                 }
4271         }
4272
4273         function init_js_translations() {
4274
4275         print 'var T_messages = new Object();
4276
4277                 function __(msg) {
4278                         if (T_messages[msg]) {
4279                                 return T_messages[msg];
4280                         } else {
4281                                 return msg;
4282                         }
4283                 }
4284
4285                 function ngettext(msg1, msg2, n) {
4286                         return __((parseInt(n) > 1) ? msg2 : msg1);
4287                 }';
4288
4289                 $l10n = _get_reader();
4290
4291                 for ($i = 0; $i < $l10n->total; $i++) {
4292                         $orig = $l10n->get_original_string($i);
4293                         if(strpos($orig, "\000") !== FALSE) { // Plural forms
4294                                 $key = explode(chr(0), $orig);
4295                                 print T_js_decl($key[0], _ngettext($key[0], $key[1], 1)); // Singular
4296                                 print T_js_decl($key[1], _ngettext($key[0], $key[1], 2)); // Plural
4297                         } else {
4298                                 $translation = __($orig);
4299                                 print T_js_decl($orig, $translation);
4300                         }
4301                 }
4302         }
4303
4304         function label_to_feed_id($label) {
4305                 return LABEL_BASE_INDEX - 1 - abs($label);
4306         }
4307
4308         function feed_to_label_id($feed) {
4309                 return LABEL_BASE_INDEX - 1 + abs($feed);
4310         }
4311
4312         function format_libxml_error($error) {
4313                 return T_sprintf("LibXML error %s at line %d (column %d): %s",
4314                                 $error->code, $error->line, $error->column,
4315                                 $error->message);
4316         }
4317
4318 ?>