include/functions.php

   1 <?php
   2         define('EXPECTED_CONFIG_VERSION', 26);
   3         define('SCHEMA_VERSION', 118);
   4
   5         define('LABEL_BASE_INDEX', -1024);
   6         define('PLUGIN_FEED_BASE_INDEX', -128);
   7
   8         $fetch_last_error = false;
   9         $fetch_last_error_code = false;
  10         $fetch_last_content_type = false;
  11         $pluginhost = false;
  12
  13         mb_internal_encoding("UTF-8");
  14         date_default_timezone_set('UTC');
  15         if (defined('E_DEPRECATED')) {
  16                 error_reporting(E_ALL & ~E_NOTICE & ~E_DEPRECATED);
  17         } else {
  18                 error_reporting(E_ALL & ~E_NOTICE);
  19         }
  20
  21         require_once 'config.php';
  22
  23         /**
  24          * Define a constant if not already defined
  25          *
  26          * @param string $name The constant name.
  27          * @param mixed $value The constant value.
  28          * @access public
  29          * @return boolean True if defined successfully or not.
  30          */
  31         function define_default($name, $value) {
  32                 defined($name) or define($name, $value);
  33         }
  34
  35         ///// Some defaults that you can override in config.php //////
  36
  37         define_default('FEED_FETCH_TIMEOUT', 45);
  38         // How may seconds to wait for response when requesting feed from a site
  39         define_default('FEED_FETCH_NO_CACHE_TIMEOUT', 15);
  40         // How may seconds to wait for response when requesting feed from a
  41         // site when that feed wasn't cached before
  42         define_default('FILE_FETCH_TIMEOUT', 45);
  43         // Default timeout when fetching files from remote sites
  44         define_default('FILE_FETCH_CONNECT_TIMEOUT', 15);
  45         // How many seconds to wait for initial response from website when
  46         // fetching files from remote sites
  47
  48         if (DB_TYPE == "pgsql") {
  49                 define('SUBSTRING_FOR_DATE', 'SUBSTRING_FOR_DATE');
  50         } else {
  51                 define('SUBSTRING_FOR_DATE', 'SUBSTRING');
  52         }
  53
  54         /**
  55          * Return available translations names.
  56          *
  57          * @access public
  58          * @return array A array of available translations.
  59          */
  60         function get_translations() {
  61                 $tr = array(
  62                                         "auto"  => "Detect automatically",
  63                                         "ca_CA" => "Català",
  64                                         "cs_CZ" => "Česky",
  65                                         "en_US" => "English",
  66                                         "es_ES" => "Español",
  67                                         "de_DE" => "Deutsch",
  68                                         "fr_FR" => "Français",
  69                                         "hu_HU" => "Magyar (Hungarian)",
  70                                         "it_IT" => "Italiano",
  71                                         "ja_JP" => "日本語 (Japanese)",
  72                                         "lv_LV" => "Latviešu",
  73                                         "nb_NO" => "Norwegian bokmål",
  74                                         "nl_NL" => "Dutch",
  75                                         "pl_PL" => "Polski",
  76                                         "ru_RU" => "Русский",
  77                                         "pt_BR" => "Portuguese/Brazil",
  78                                         "zh_CN" => "Simplified Chinese",
  79                                         "sv_SE" => "Svenska",
  80                                         "fi_FI" => "Suomi");
  81
  82                 return $tr;
  83         }
  84
  85         require_once "lib/accept-to-gettext.php";
  86         require_once "lib/gettext/gettext.inc";
  87
  88
  89         function startup_gettext() {
  90
  91                 # Get locale from Accept-Language header
  92                 $lang = al2gt(array_keys(get_translations()), "text/html");
  93
  94                 if (defined('_TRANSLATION_OVERRIDE_DEFAULT')) {
  95                         $lang = _TRANSLATION_OVERRIDE_DEFAULT;
  96                 }
  97
  98                 if ($_SESSION["language"] && $_SESSION["language"] != "auto") {
  99                         $lang = $_SESSION["language"];
 100                 }
 101
 102                 if ($lang) {
 103                         if (defined('LC_MESSAGES')) {
 104                                 _setlocale(LC_MESSAGES, $lang);
 105                         } else if (defined('LC_ALL')) {
 106                                 _setlocale(LC_ALL, $lang);
 107                         }
 108
 109                         _bindtextdomain("messages", "locale");
 110
 111                         _textdomain("messages");
 112                         _bind_textdomain_codeset("messages", "UTF-8");
 113                 }
 114         }
 115
 116         startup_gettext();
 117
 118         require_once 'db-prefs.php';
 119         require_once 'version.php';
 120         require_once 'ccache.php';
 121         require_once 'labels.php';
 122
 123         define('SELF_USER_AGENT', 'Tiny Tiny RSS/' . VERSION . ' (http://tt-rss.org/)');
 124         ini_set('user_agent', SELF_USER_AGENT);
 125
 126         require_once 'lib/pubsubhubbub/publisher.php';
 127
 128         $tz_offset = -1;
 129         $utc_tz = new DateTimeZone('UTC');
 130         $schema_version = false;
 131
 132         /**
 133          * Print a timestamped debug message.
 134          *
 135          * @param string $msg The debug message.
 136          * @return void
 137          */
 138         function _debug($msg) {
 139                 $ts = strftime("%H:%M:%S", time());
 140                 if (function_exists('posix_getpid')) {
 141                         $ts = "$ts/" . posix_getpid();
 142                 }
 143
 144                 if (!(defined('QUIET') && QUIET)) {
 145                         print "[$ts] $msg\n";
 146                 }
 147
 148                 if (defined('LOGFILE'))  {
 149                         $fp = fopen(LOGFILE, 'a+');
 150
 151                         if ($fp) {
 152                                 fputs($fp, "[$ts] $msg\n");
 153                                 fclose($fp);
 154                         }
 155                 }
 156
 157         } // function _debug
 158
 159         /**
 160          * Purge a feed old posts.
 161          *
 162          * @param mixed $link A database connection.
 163          * @param mixed $feed_id The id of the purged feed.
 164          * @param mixed $purge_interval Olderness of purged posts.
 165          * @param boolean $debug Set to True to enable the debug. False by default.
 166          * @access public
 167          * @return void
 168          */
 169         function purge_feed($feed_id, $purge_interval, $debug = false) {
 170
 171                 if (!$purge_interval) $purge_interval = feed_purge_interval($feed_id);
 172
 173                 $rows = -1;
 174
 175                 $result = db_query(
 176                         "SELECT owner_uid FROM ttrss_feeds WHERE id = '$feed_id'");
 177
 178                 $owner_uid = false;
 179
 180                 if (db_num_rows($result) == 1) {
 181                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 182                 }
 183
 184                 if ($purge_interval == -1 || !$purge_interval) {
 185                         if ($owner_uid) {
 186                                 ccache_update($feed_id, $owner_uid);
 187                         }
 188                         return;
 189                 }
 190
 191                 if (!$owner_uid) return;
 192
 193                 if (FORCE_ARTICLE_PURGE == 0) {
 194                         $purge_unread = get_pref("PURGE_UNREAD_ARTICLES",
 195                                 $owner_uid, false);
 196                 } else {
 197                         $purge_unread = true;
 198                         $purge_interval = FORCE_ARTICLE_PURGE;
 199                 }
 200
 201                 if (!$purge_unread) $query_limit = " unread = false AND ";
 202
 203                 if (DB_TYPE == "pgsql") {
 204                         $pg_version = get_pgsql_version();
 205
 206                         if (preg_match("/^7\./", $pg_version) || preg_match("/^8\.0/", $pg_version)) {
 207
 208                                 $result = db_query("DELETE FROM ttrss_user_entries WHERE
 209                                         ttrss_entries.id = ref_id AND
 210                                         marked = false AND
 211                                         feed_id = '$feed_id' AND
 212                                         $query_limit
 213                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 214
 215                         } else {
 216
 217                                 $result = db_query("DELETE FROM ttrss_user_entries
 218                                         USING ttrss_entries
 219                                         WHERE ttrss_entries.id = ref_id AND
 220                                         marked = false AND
 221                                         feed_id = '$feed_id' AND
 222                                         $query_limit
 223                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 224                         }
 225
 226                 } else {
 227
 228 /*                      $result = db_query("DELETE FROM ttrss_user_entries WHERE
 229                                 marked = false AND feed_id = '$feed_id' AND
 230                                 (SELECT date_updated FROM ttrss_entries WHERE
 231                                         id = ref_id) < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)"); */
 232
 233                         $result = db_query("DELETE FROM ttrss_user_entries
 234                                 USING ttrss_user_entries, ttrss_entries
 235                                 WHERE ttrss_entries.id = ref_id AND
 236                                 marked = false AND
 237                                 feed_id = '$feed_id' AND
 238                                 $query_limit
 239                                 ttrss_entries.date_updated < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)");
 240                 }
 241
 242                 $rows = db_affected_rows($result);
 243
 244                 ccache_update($feed_id, $owner_uid);
 245
 246                 if ($debug) {
 247                         _debug("Purged feed $feed_id ($purge_interval): deleted $rows articles");
 248                 }
 249
 250                 return $rows;
 251         } // function purge_feed
 252
 253         function feed_purge_interval($feed_id) {
 254
 255                 $result = db_query("SELECT purge_interval, owner_uid FROM ttrss_feeds
 256                         WHERE id = '$feed_id'");
 257
 258                 if (db_num_rows($result) == 1) {
 259                         $purge_interval = db_fetch_result($result, 0, "purge_interval");
 260                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 261
 262                         if ($purge_interval == 0) $purge_interval = get_pref(
 263                                 'PURGE_OLD_DAYS', $owner_uid);
 264
 265                         return $purge_interval;
 266
 267                 } else {
 268                         return -1;
 269                 }
 270         }
 271
 272         function purge_orphans($do_output = false) {
 273
 274                 // purge orphaned posts in main content table
 275                 $result = db_query("DELETE FROM ttrss_entries WHERE
 276                         (SELECT COUNT(int_id) FROM ttrss_user_entries WHERE ref_id = id) = 0");
 277
 278                 if ($do_output) {
 279                         $rows = db_affected_rows($result);
 280                         _debug("Purged $rows orphaned posts.");
 281                 }
 282         }
 283
 284         function get_feed_update_interval($feed_id) {
 285                 $result = db_query("SELECT owner_uid, update_interval FROM
 286                         ttrss_feeds WHERE id = '$feed_id'");
 287
 288                 if (db_num_rows($result) == 1) {
 289                         $update_interval = db_fetch_result($result, 0, "update_interval");
 290                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 291
 292                         if ($update_interval != 0) {
 293                                 return $update_interval;
 294                         } else {
 295                                 return get_pref('DEFAULT_UPDATE_INTERVAL', $owner_uid, false);
 296                         }
 297
 298                 } else {
 299                         return -1;
 300                 }
 301         }
 302
 303         function fetch_file_contents($url, $type = false, $login = false, $pass = false, $post_query = false, $timeout = false, $timestamp = 0) {
 304
 305                 global $fetch_last_error;
 306                 global $fetch_last_error_code;
 307                 global $fetch_last_content_type;
 308
 309                 $url = str_replace(' ', '%20', $url);
 310
 311                 if (!defined('NO_CURL') && function_exists('curl_init') && !ini_get("open_basedir")) {
 312
 313                         if (ini_get("safe_mode") || ini_get("open_basedir")) {
 314                                 $ch = curl_init(geturl($url));
 315                         } else {
 316                                 $ch = curl_init($url);
 317                         }
 318
 319                         if ($timestamp) {
 320                                 curl_setopt($ch, CURLOPT_HTTPHEADER,
 321                                         array("If-Modified-Since: ".gmdate('D, d M Y H:i:s \G\M\T', $timestamp)));
 322                         }
 323
 324                         curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, $timeout ? $timeout : FILE_FETCH_CONNECT_TIMEOUT);
 325                         curl_setopt($ch, CURLOPT_TIMEOUT, $timeout ? $timeout : FILE_FETCH_TIMEOUT);
 326                         curl_setopt($ch, CURLOPT_FOLLOWLOCATION, !ini_get("safe_mode") && !ini_get("open_basedir"));
 327                         curl_setopt($ch, CURLOPT_MAXREDIRS, 20);
 328                         curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
 329                         curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
 330                         curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
 331                         curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_ANY);
 332                         curl_setopt($ch, CURLOPT_USERAGENT, SELF_USER_AGENT);
 333                         curl_setopt($ch, CURLOPT_ENCODING , "gzip");
 334                         curl_setopt($ch, CURLOPT_REFERER, $url);
 335
 336                         if ($post_query) {
 337                                 curl_setopt($ch, CURLOPT_POST, true);
 338                                 curl_setopt($ch, CURLOPT_POSTFIELDS, $post_query);
 339                         }
 340
 341                         if ($login && $pass)
 342                                 curl_setopt($ch, CURLOPT_USERPWD, "$login:$pass");
 343
 344                         $contents = @curl_exec($ch);
 345
 346                         if (curl_errno($ch) === 23 || curl_errno($ch) === 61) {
 347                                 curl_setopt($ch, CURLOPT_ENCODING, 'none');
 348                                 $contents = @curl_exec($ch);
 349                         }
 350
 351                         if ($contents === false) {
 352                                 $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
 353                                 curl_close($ch);
 354                                 return false;
 355                         }
 356
 357                         $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
 358                         $fetch_last_content_type = curl_getinfo($ch, CURLINFO_CONTENT_TYPE);
 359
 360                         $fetch_last_error_code = $http_code;
 361
 362                         if ($http_code != 200 || $type && strpos($fetch_last_content_type, "$type") === false) {
 363                                 if (curl_errno($ch) != 0) {
 364                                         $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
 365                                 } else {
 366                                         $fetch_last_error = "HTTP Code: $http_code";
 367                                 }
 368                                 curl_close($ch);
 369                                 return false;
 370                         }
 371
 372                         curl_close($ch);
 373
 374                         return $contents;
 375                 } else {
 376                         if ($login && $pass){
 377                                 $url_parts = array();
 378
 379                                 preg_match("/(^[^:]*):\/\/(.*)/", $url, $url_parts);
 380
 381                                 $pass = urlencode($pass);
 382
 383                                 if ($url_parts[1] && $url_parts[2]) {
 384                                         $url = $url_parts[1] . "://$login:$pass@" . $url_parts[2];
 385                                 }
 386                         }
 387
 388                         $data = @file_get_contents($url);
 389
 390                         $fetch_last_content_type = false;  // reset if no type was sent from server
 391                         foreach ($http_response_header as $h) {
 392                                 if (substr(strtolower($h), 0, 13) == 'content-type:') {
 393                                         $fetch_last_content_type = substr($h, 14);
 394                                         // don't abort here b/c there might be more than one
 395                                         // e.g. if we were being redirected -- last one is the right one
 396                                 }
 397                         }
 398
 399                         if (!$data && function_exists('error_get_last')) {
 400                                 $error = error_get_last();
 401                                 $fetch_last_error = $error["message"];
 402                         }
 403                         return $data;
 404                 }
 405
 406         }
 407
 408         /**
 409          * Try to determine the favicon URL for a feed.
 410          * adapted from wordpress favicon plugin by Jeff Minard (http://thecodepro.com/)
 411          * http://dev.wp-plugins.org/file/favatars/trunk/favatars.php
 412          *
 413          * @param string $url A feed or page URL
 414          * @access public
 415          * @return mixed The favicon URL, or false if none was found.
 416          */
 417         function get_favicon_url($url) {
 418
 419                 $favicon_url = false;
 420
 421                 if ($html = @fetch_file_contents($url)) {
 422
 423                         libxml_use_internal_errors(true);
 424
 425                         $doc = new DOMDocument();
 426                         $doc->loadHTML($html);
 427                         $xpath = new DOMXPath($doc);
 428
 429                         $base = $xpath->query('/html/head/base');
 430                         foreach ($base as $b) {
 431                                 $url = $b->getAttribute("href");
 432                                 break;
 433                         }
 434
 435                         $entries = $xpath->query('/html/head/link[@rel="shortcut icon" or @rel="icon"]');
 436                         if (count($entries) > 0) {
 437                                 foreach ($entries as $entry) {
 438                                         $favicon_url = rewrite_relative_url($url, $entry->getAttribute("href"));
 439                                         break;
 440                                 }
 441                         }
 442                 }
 443
 444                 if (!$favicon_url)
 445                         $favicon_url = rewrite_relative_url($url, "/favicon.ico");
 446
 447                 return $favicon_url;
 448         } // function get_favicon_url
 449
 450         function check_feed_favicon($site_url, $feed) {
 451 #               print "FAVICON [$site_url]: $favicon_url\n";
 452
 453                 $icon_file = ICONS_DIR . "/$feed.ico";
 454
 455                 if (!file_exists($icon_file)) {
 456                         $favicon_url = get_favicon_url($site_url);
 457
 458                         if ($favicon_url) {
 459                                 // Limiting to "image" type misses those served with text/plain
 460                                 $contents = fetch_file_contents($favicon_url); // , "image");
 461
 462                                 if ($contents) {
 463                                         // Crude image type matching.
 464                                         // Patterns gleaned from the file(1) source code.
 465                                         if (preg_match('/^\x00\x00\x01\x00/', $contents)) {
 466                                                 // 0       string  \000\000\001\000        MS Windows icon resource
 467                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa MS Windows icon resource");
 468                                         }
 469                                         elseif (preg_match('/^GIF8/', $contents)) {
 470                                                 // 0       string          GIF8            GIF image data
 471                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa GIF image");
 472                                         }
 473                                         elseif (preg_match('/^\x89PNG\x0d\x0a\x1a\x0a/', $contents)) {
 474                                                 // 0       string          \x89PNG\x0d\x0a\x1a\x0a         PNG image data
 475                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa PNG image");
 476                                         }
 477                                         elseif (preg_match('/^\xff\xd8/', $contents)) {
 478                                                 // 0       beshort         0xffd8          JPEG image data
 479                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa JPG image");
 480                                         }
 481                                         else {
 482                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa UNKNOWN type");
 483                                                 $contents = "";
 484                                         }
 485                                 }
 486
 487                                 if ($contents) {
 488                                         $fp = @fopen($icon_file, "w");
 489
 490                                         if ($fp) {
 491                                                 fwrite($fp, $contents);
 492                                                 fclose($fp);
 493                                                 chmod($icon_file, 0644);
 494                                         }
 495                                 }
 496                         }
 497             return $icon_file;
 498                 }
 499         }
 500
 501         function print_select($id, $default, $values, $attributes = "") {
 502                 print "<select name=\"$id\" id=\"$id\" $attributes>";
 503                 foreach ($values as $v) {
 504                         if ($v == $default)
 505                                 $sel = "selected=\"1\"";
 506                          else
 507                                 $sel = "";
 508
 509                         $v = trim($v);
 510
 511                         print "<option value=\"$v\" $sel>$v</option>";
 512                 }
 513                 print "</select>";
 514         }
 515
 516         function print_select_hash($id, $default, $values, $attributes = "") {
 517                 print "<select name=\"$id\" id='$id' $attributes>";
 518                 foreach (array_keys($values) as $v) {
 519                         if ($v == $default)
 520                                 $sel = 'selected="selected"';
 521                          else
 522                                 $sel = "";
 523
 524                         $v = trim($v);
 525
 526                         print "<option $sel value=\"$v\">".$values[$v]."</option>";
 527                 }
 528
 529                 print "</select>";
 530         }
 531
 532         function print_radio($id, $default, $true_is, $values, $attributes = "") {
 533                 foreach ($values as $v) {
 534
 535                         if ($v == $default)
 536                                 $sel = "checked";
 537                          else
 538                                 $sel = "";
 539
 540                         if ($v == $true_is) {
 541                                 $sel .= " value=\"1\"";
 542                         } else {
 543                                 $sel .= " value=\"0\"";
 544                         }
 545
 546                         print "<input class=\"noborder\" dojoType=\"dijit.form.RadioButton\"
 547                                 type=\"radio\" $sel $attributes name=\"$id\">&nbsp;$v&nbsp;";
 548
 549                 }
 550         }
 551
 552         function initialize_user_prefs($uid, $profile = false) {
 553
 554                 $uid = db_escape_string($uid);
 555
 556                 if (!$profile) {
 557                         $profile = "NULL";
 558                         $profile_qpart = "AND profile IS NULL";
 559                 } else {
 560                         $profile_qpart = "AND profile = '$profile'";
 561                 }
 562
 563                 if (get_schema_version() < 63) $profile_qpart = "";
 564
 565                 db_query("BEGIN");
 566
 567                 $result = db_query("SELECT pref_name,def_value FROM ttrss_prefs");
 568
 569                 $u_result = db_query("SELECT pref_name
 570                         FROM ttrss_user_prefs WHERE owner_uid = '$uid' $profile_qpart");
 571
 572                 $active_prefs = array();
 573
 574                 while ($line = db_fetch_assoc($u_result)) {
 575                         array_push($active_prefs, $line["pref_name"]);
 576                 }
 577
 578                 while ($line = db_fetch_assoc($result)) {
 579                         if (array_search($line["pref_name"], $active_prefs) === FALSE) {
 580 //                              print "adding " . $line["pref_name"] . "<br>";
 581
 582                                 $line["def_value"] = db_escape_string($line["def_value"]);
 583                                 $line["pref_name"] = db_escape_string($line["pref_name"]);
 584
 585                                 if (get_schema_version() < 63) {
 586                                         db_query("INSERT INTO ttrss_user_prefs
 587                                                 (owner_uid,pref_name,value) VALUES
 588                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."')");
 589
 590                                 } else {
 591                                         db_query("INSERT INTO ttrss_user_prefs
 592                                                 (owner_uid,pref_name,value, profile) VALUES
 593                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."', $profile)");
 594                                 }
 595
 596                         }
 597                 }
 598
 599                 db_query("COMMIT");
 600
 601         }
 602
 603         function get_ssl_certificate_id() {
 604                 if ($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"]) {
 605                         return sha1($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"] .
 606                                 $_SERVER["REDIRECT_SSL_CLIENT_V_START"] .
 607                                 $_SERVER["REDIRECT_SSL_CLIENT_V_END"] .
 608                                 $_SERVER["REDIRECT_SSL_CLIENT_S_DN"]);
 609                 }
 610                 return "";
 611         }
 612
 613         function authenticate_user($login, $password, $check_only = false) {
 614
 615                 if (!SINGLE_USER_MODE) {
 616                         $user_id = false;
 617
 618                         global $pluginhost;
 619                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_AUTH_USER) as $plugin) {
 620
 621                                 $user_id = (int) $plugin->authenticate($login, $password);
 622
 623                                 if ($user_id) {
 624                                         $_SESSION["auth_module"] = strtolower(get_class($plugin));
 625                                         break;
 626                                 }
 627                         }
 628
 629                         if ($user_id && !$check_only) {
 630                                 @session_start();
 631
 632                                 $_SESSION["uid"] = $user_id;
 633                                 $_SESSION["version"] = VERSION;
 634
 635                                 $result = db_query("SELECT login,access_level,pwd_hash FROM ttrss_users
 636                                         WHERE id = '$user_id'");
 637
 638                                 $_SESSION["name"] = db_fetch_result($result, 0, "login");
 639                                 $_SESSION["access_level"] = db_fetch_result($result, 0, "access_level");
 640                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 641
 642                                 db_query("UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 643                                         $_SESSION["uid"]);
 644
 645                                 $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 646                                 $_SESSION["user_agent"] = sha1($_SERVER['HTTP_USER_AGENT']);
 647                                 $_SESSION["pwd_hash"] = db_fetch_result($result, 0, "pwd_hash");
 648
 649                                 $_SESSION["last_version_check"] = time();
 650
 651                                 initialize_user_prefs($_SESSION["uid"]);
 652
 653                                 return true;
 654                         }
 655
 656                         return false;
 657
 658                 } else {
 659
 660                         $_SESSION["uid"] = 1;
 661                         $_SESSION["name"] = "admin";
 662                         $_SESSION["access_level"] = 10;
 663
 664                         $_SESSION["hide_hello"] = true;
 665                         $_SESSION["hide_logout"] = true;
 666
 667                         $_SESSION["auth_module"] = false;
 668
 669                         if (!$_SESSION["csrf_token"]) {
 670                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 671                         }
 672
 673                         $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 674
 675                         initialize_user_prefs($_SESSION["uid"]);
 676
 677                         return true;
 678                 }
 679         }
 680
 681         function make_password($length = 8) {
 682
 683                 $password = "";
 684                 $possible = "0123456789abcdfghjkmnpqrstvwxyzABCDFGHJKMNPQRSTVWXYZ";
 685
 686         $i = 0;
 687
 688                 while ($i < $length) {
 689                         $char = substr($possible, mt_rand(0, strlen($possible)-1), 1);
 690
 691                         if (!strstr($password, $char)) {
 692                                 $password .= $char;
 693                                 $i++;
 694                         }
 695                 }
 696                 return $password;
 697         }
 698
 699         // this is called after user is created to initialize default feeds, labels
 700         // or whatever else
 701
 702         // user preferences are checked on every login, not here
 703
 704         function initialize_user($uid) {
 705
 706                 db_query("insert into ttrss_feeds (owner_uid,title,feed_url)
 707                         values ('$uid', 'Tiny Tiny RSS: New Releases',
 708                         'http://tt-rss.org/releases.rss')");
 709
 710                 db_query("insert into ttrss_feeds (owner_uid,title,feed_url)
 711                         values ('$uid', 'Tiny Tiny RSS: Forum',
 712                                 'http://tt-rss.org/forum/rss.php')");
 713         }
 714
 715         function logout_user() {
 716                 session_destroy();
 717                 if (isset($_COOKIE[session_name()])) {
 718                    setcookie(session_name(), '', time()-42000, '/');
 719                 }
 720         }
 721
 722         function validate_csrf($csrf_token) {
 723                 return $csrf_token == $_SESSION['csrf_token'];
 724         }
 725
 726         function load_user_plugins($owner_uid) {
 727                 if ($owner_uid) {
 728                         $plugins = get_pref("_ENABLED_PLUGINS", $owner_uid);
 729
 730                         global $pluginhost;
 731                         $pluginhost->load($plugins, $pluginhost::KIND_USER, $owner_uid);
 732
 733                         if (get_schema_version() > 100) {
 734                                 $pluginhost->load_data();
 735                         }
 736                 }
 737         }
 738
 739         function login_sequence() {
 740                 $_SESSION["prefs_cache"] = false;
 741
 742                 if (SINGLE_USER_MODE) {
 743                         @session_start();
 744                         authenticate_user("admin", null);
 745                         cache_prefs();
 746                         load_user_plugins($_SESSION["uid"]);
 747                 } else {
 748                         if (!validate_session()) $_SESSION["uid"] = false;
 749
 750                         if (!$_SESSION["uid"]) {
 751
 752                                 if (AUTH_AUTO_LOGIN && authenticate_user(null, null)) {
 753                                     $_SESSION["ref_schema_version"] = get_schema_version(true);
 754                                 } else {
 755                                          authenticate_user(null, null, true);
 756                                 }
 757
 758                                 if (!$_SESSION["uid"]) {
 759                                         @session_destroy();
 760                                         setcookie(session_name(), '', time()-42000, '/');
 761
 762                                         render_login_form();
 763                                         exit;
 764                                 }
 765
 766                         } else {
 767                                 /* bump login timestamp */
 768                                 db_query("UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 769                                         $_SESSION["uid"]);
 770                                 $_SESSION["last_login_update"] = time();
 771                         }
 772
 773                         if ($_SESSION["uid"] && $_SESSION["language"] && SESSION_COOKIE_LIFETIME > 0) {
 774                                 setcookie("ttrss_lang", $_SESSION["language"],
 775                                         time() + SESSION_COOKIE_LIFETIME);
 776                         }
 777
 778                         if ($_SESSION["uid"]) {
 779                                 cache_prefs();
 780                                 load_user_plugins($_SESSION["uid"]);
 781
 782                                 /* cleanup ccache */
 783
 784                                 db_query("DELETE FROM ttrss_counters_cache WHERE owner_uid = ".
 785                                         $_SESSION["uid"] . " AND
 786                                                 (SELECT COUNT(id) FROM ttrss_feeds WHERE
 787                                                         ttrss_feeds.id = feed_id) = 0");
 788
 789                                 db_query("DELETE FROM ttrss_cat_counters_cache WHERE owner_uid = ".
 790                                         $_SESSION["uid"] . " AND
 791                                                 (SELECT COUNT(id) FROM ttrss_feed_categories WHERE
 792                                                         ttrss_feed_categories.id = feed_id) = 0");
 793
 794                         }
 795
 796                 }
 797         }
 798
 799         function truncate_string($str, $max_len, $suffix = '&hellip;') {
 800                 if (mb_strlen($str, "utf-8") > $max_len - 3) {
 801                         return mb_substr($str, 0, $max_len, "utf-8") . $suffix;
 802                 } else {
 803                         return $str;
 804                 }
 805         }
 806
 807         function convert_timestamp($timestamp, $source_tz, $dest_tz) {
 808
 809                 try {
 810                         $source_tz = new DateTimeZone($source_tz);
 811                 } catch (Exception $e) {
 812                         $source_tz = new DateTimeZone('UTC');
 813                 }
 814
 815                 try {
 816                         $dest_tz = new DateTimeZone($dest_tz);
 817                 } catch (Exception $e) {
 818                         $dest_tz = new DateTimeZone('UTC');
 819                 }
 820
 821                 $dt = new DateTime(date('Y-m-d H:i:s', $timestamp), $source_tz);
 822                 return $dt->format('U') + $dest_tz->getOffset($dt);
 823         }
 824
 825         function make_local_datetime($timestamp, $long, $owner_uid = false,
 826                                         $no_smart_dt = false) {
 827
 828                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 829                 if (!$timestamp) $timestamp = '1970-01-01 0:00';
 830
 831                 global $utc_tz;
 832                 global $tz_offset;
 833
 834                 # We store date in UTC internally
 835                 $dt = new DateTime($timestamp, $utc_tz);
 836
 837                 if ($tz_offset == -1) {
 838
 839                         $user_tz_string = get_pref('USER_TIMEZONE', $owner_uid);
 840
 841                         try {
 842                                 $user_tz = new DateTimeZone($user_tz_string);
 843                         } catch (Exception $e) {
 844                                 $user_tz = $utc_tz;
 845                         }
 846
 847                         $tz_offset = $user_tz->getOffset($dt);
 848                 }
 849
 850                 $user_timestamp = $dt->format('U') + $tz_offset;
 851
 852                 if (!$no_smart_dt) {
 853                         return smart_date_time($user_timestamp,
 854                                 $tz_offset, $owner_uid);
 855                 } else {
 856                         if ($long)
 857                                 $format = get_pref('LONG_DATE_FORMAT', $owner_uid);
 858                         else
 859                                 $format = get_pref('SHORT_DATE_FORMAT', $owner_uid);
 860
 861                         return date($format, $user_timestamp);
 862                 }
 863         }
 864
 865         function smart_date_time($timestamp, $tz_offset = 0, $owner_uid = false) {
 866                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 867
 868                 if (date("Y.m.d", $timestamp) == date("Y.m.d", time() + $tz_offset)) {
 869                         return date("G:i", $timestamp);
 870                 } else if (date("Y", $timestamp) == date("Y", time() + $tz_offset)) {
 871                         $format = get_pref('SHORT_DATE_FORMAT', $owner_uid);
 872                         return date($format, $timestamp);
 873                 } else {
 874                         $format = get_pref('LONG_DATE_FORMAT', $owner_uid);
 875                         return date($format, $timestamp);
 876                 }
 877         }
 878
 879         function sql_bool_to_bool($s) {
 880                 if ($s == "t" || $s == "1" || strtolower($s) == "true") {
 881                         return true;
 882                 } else {
 883                         return false;
 884                 }
 885         }
 886
 887         function bool_to_sql_bool($s) {
 888                 if ($s) {
 889                         return "true";
 890                 } else {
 891                         return "false";
 892                 }
 893         }
 894
 895         // Session caching removed due to causing wrong redirects to upgrade
 896         // script when get_schema_version() is called on an obsolete session
 897         // created on a previous schema version.
 898         function get_schema_version($nocache = false) {
 899                 global $schema_version;
 900
 901                 if (!$schema_version) {
 902                         $result = db_query("SELECT schema_version FROM ttrss_version");
 903                         $version = db_fetch_result($result, 0, "schema_version");
 904                         $schema_version = $version;
 905                         return $version;
 906                 } else {
 907                         return $schema_version;
 908                 }
 909         }
 910
 911         function sanity_check() {
 912                 require_once 'errors.php';
 913
 914                 $error_code = 0;
 915                 $schema_version = get_schema_version(true);
 916
 917                 if ($schema_version != SCHEMA_VERSION) {
 918                         $error_code = 5;
 919                 }
 920
 921                 if (DB_TYPE == "mysql") {
 922                         $result = db_query("SELECT true", false);
 923                         if (db_num_rows($result) != 1) {
 924                                 $error_code = 10;
 925                         }
 926                 }
 927
 928                 if (db_escape_string("testTEST") != "testTEST") {
 929                         $error_code = 12;
 930                 }
 931
 932                 return array("code" => $error_code, "message" => $ERRORS[$error_code]);
 933         }
 934
 935         function file_is_locked($filename) {
 936                 if (function_exists('flock')) {
 937                         $fp = @fopen(LOCK_DIRECTORY . "/$filename", "r");
 938                         if ($fp) {
 939                                 if (flock($fp, LOCK_EX | LOCK_NB)) {
 940                                         flock($fp, LOCK_UN);
 941                                         fclose($fp);
 942                                         return false;
 943                                 }
 944                                 fclose($fp);
 945                                 return true;
 946                         } else {
 947                                 return false;
 948                         }
 949                 }
 950                 return true; // consider the file always locked and skip the test
 951         }
 952
 953         function make_lockfile($filename) {
 954                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
 955
 956                 if ($fp && flock($fp, LOCK_EX | LOCK_NB)) {
 957                         if (function_exists('posix_getpid')) {
 958                                 fwrite($fp, posix_getpid() . "\n");
 959                         }
 960                         return $fp;
 961                 } else {
 962                         return false;
 963                 }
 964         }
 965
 966         function make_stampfile($filename) {
 967                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
 968
 969                 if (flock($fp, LOCK_EX | LOCK_NB)) {
 970                         fwrite($fp, time() . "\n");
 971                         flock($fp, LOCK_UN);
 972                         fclose($fp);
 973                         return true;
 974                 } else {
 975                         return false;
 976                 }
 977         }
 978
 979         function sql_random_function() {
 980                 if (DB_TYPE == "mysql") {
 981                         return "RAND()";
 982                 } else {
 983                         return "RANDOM()";
 984                 }
 985         }
 986
 987         function catchup_feed($feed, $cat_view, $owner_uid = false, $max_id = false, $mode = 'all') {
 988
 989                         if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 990
 991                         //if (preg_match("/^-?[0-9][0-9]*$/", $feed) != false) {
 992
 993                         // Todo: all this interval stuff needs some generic generator function
 994
 995                         $date_qpart = "false";
 996
 997                         switch ($mode) {
 998                         case "1day":
 999                                 if (DB_TYPE == "pgsql") {
1000                                         $date_qpart = "date_entered < NOW() - INTERVAL '1 day' ";
1001                                 } else {
1002                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 1 DAY) ";
1003                                 }
1004                                 break;
1005                         case "1week":
1006                                 if (DB_TYPE == "pgsql") {
1007                                         $date_qpart = "date_entered < NOW() - INTERVAL '1 week' ";
1008                                 } else {
1009                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 1 WEEK) ";
1010                                 }
1011                                 break;
1012                         case "2weeks":
1013                                 if (DB_TYPE == "pgsql") {
1014                                         $date_qpart = "date_entered < NOW() - INTERVAL '2 week' ";
1015                                 } else {
1016                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 2 WEEK) ";
1017                                 }
1018                                 break;
1019                         default:
1020                                 $date_qpart = "true";
1021                         }
1022
1023                         if (is_numeric($feed)) {
1024                                 if ($cat_view) {
1025
1026                                         if ($feed >= 0) {
1027
1028                                                 if ($feed > 0) {
1029                                                         $children = getChildCategories($feed, $owner_uid);
1030                                                         array_push($children, $feed);
1031
1032                                                         $children = join(",", $children);
1033
1034                                                         $cat_qpart = "cat_id IN ($children)";
1035                                                 } else {
1036                                                         $cat_qpart = "cat_id IS NULL";
1037                                                 }
1038
1039                                                 db_query("UPDATE ttrss_user_entries
1040                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1041                                                                 (SELECT id FROM
1042                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1043                                                                                 AND owner_uid = $owner_uid AND unread = true AND feed_id IN
1044                                                                                         (SELECT id FROM ttrss_feeds WHERE $cat_qpart) AND $date_qpart) as tmp)");
1045
1046                                         } else if ($feed == -2) {
1047
1048                                                 db_query("UPDATE ttrss_user_entries
1049                                                         SET unread = false,last_read = NOW() WHERE (SELECT COUNT(*)
1050                                                                 FROM ttrss_user_labels2 WHERE article_id = ref_id) > 0
1051                                                                 AND unread = true AND $date_qpart AND owner_uid = $owner_uid");
1052                                         }
1053
1054                                 } else if ($feed > 0) {
1055
1056                                         db_query("UPDATE ttrss_user_entries
1057                                                 SET unread = false, last_read = NOW() WHERE ref_id IN
1058                                                         (SELECT id FROM
1059                                                                 (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1060                                                                         AND owner_uid = $owner_uid AND unread = true AND feed_id = $feed AND $date_qpart) as tmp)");
1061
1062                                 } else if ($feed < 0 && $feed > LABEL_BASE_INDEX) { // special, like starred
1063
1064                                         if ($feed == -1) {
1065                                                 db_query("UPDATE ttrss_user_entries
1066                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1067                                                                 (SELECT id FROM
1068                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1069                                                                                 AND owner_uid = $owner_uid AND unread = true AND marked = true AND $date_qpart) as tmp)");
1070                                         }
1071
1072                                         if ($feed == -2) {
1073                                                 db_query("UPDATE ttrss_user_entries
1074                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1075                                                                 (SELECT id FROM
1076                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1077                                                                                 AND owner_uid = $owner_uid AND unread = true AND published = true AND $date_qpart) as tmp)");
1078                                         }
1079
1080                                         if ($feed == -3) {
1081
1082                                                 $intl = get_pref("FRESH_ARTICLE_MAX_AGE");
1083
1084                                                 if (DB_TYPE == "pgsql") {
1085                                                         $match_part = "date_entered > NOW() - INTERVAL '$intl hour' ";
1086                                                 } else {
1087                                                         $match_part = "date_entered > DATE_SUB(NOW(),
1088                                                                 INTERVAL $intl HOUR) ";
1089                                                 }
1090
1091                                                 db_query("UPDATE ttrss_user_entries
1092                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1093                                                                 (SELECT id FROM
1094                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1095                                                                                 AND owner_uid = $owner_uid AND unread = true AND $date_qpart AND $match_part) as tmp)");
1096                                         }
1097
1098                                         if ($feed == -4) {
1099                                                 db_query("UPDATE ttrss_user_entries
1100                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1101                                                                 (SELECT id FROM
1102                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1103                                                                                 AND owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1104                                         }
1105
1106                                 } else if ($feed < LABEL_BASE_INDEX) { // label
1107
1108                                         $label_id = feed_to_label_id($feed);
1109
1110                                         db_query("UPDATE ttrss_user_entries
1111                                                 SET unread = false, last_read = NOW() WHERE ref_id IN
1112                                                         (SELECT id FROM
1113                                                                 (SELECT ttrss_entries.id FROM ttrss_entries, ttrss_user_entries, ttrss_user_labels2 WHERE ref_id = id
1114                                                                         AND label_id = '$label_id' AND ref_id = article_id
1115                                                                         AND owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1116
1117                                 }
1118
1119                                 ccache_update($feed, $owner_uid, $cat_view);
1120
1121                         } else { // tag
1122                                 db_query("UPDATE ttrss_user_entries
1123                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1124                                                 (SELECT id FROM
1125                                                         (SELECT ttrss_entries.id FROM ttrss_entries, ttrss_user_entries, ttrss_tags WHERE ref_id = ttrss_entries.id
1126                                                                 AND post_int_id = int_id AND tag_name = '$feed'
1127                                                                 AND ttrss_user_entries.owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1128
1129                         }
1130         }
1131
1132         function getAllCounters() {
1133                 $data = getGlobalCounters();
1134
1135                 $data = array_merge($data, getVirtCounters());
1136                 $data = array_merge($data, getLabelCounters());
1137                 $data = array_merge($data, getFeedCounters($active_feed));
1138                 $data = array_merge($data, getCategoryCounters());
1139
1140                 return $data;
1141         }
1142
1143         function getCategoryTitle($cat_id) {
1144
1145                 if ($cat_id == -1) {
1146                         return __("Special");
1147                 } else if ($cat_id == -2) {
1148                         return __("Labels");
1149                 } else {
1150
1151                         $result = db_query("SELECT title FROM ttrss_feed_categories WHERE
1152                                 id = '$cat_id'");
1153
1154                         if (db_num_rows($result) == 1) {
1155                                 return db_fetch_result($result, 0, "title");
1156                         } else {
1157                                 return __("Uncategorized");
1158                         }
1159                 }
1160         }
1161
1162
1163         function getCategoryCounters() {
1164                 $ret_arr = array();
1165
1166                 /* Labels category */
1167
1168                 $cv = array("id" => -2, "kind" => "cat",
1169                         "counter" => getCategoryUnread(-2));
1170
1171                 array_push($ret_arr, $cv);
1172
1173                 $result = db_query("SELECT id AS cat_id, value AS unread,
1174                         (SELECT COUNT(id) FROM ttrss_feed_categories AS c2
1175                                 WHERE c2.parent_cat = ttrss_feed_categories.id) AS num_children
1176                         FROM ttrss_feed_categories, ttrss_cat_counters_cache
1177                         WHERE ttrss_cat_counters_cache.feed_id = id AND
1178                         ttrss_cat_counters_cache.owner_uid = ttrss_feed_categories.owner_uid AND
1179                         ttrss_feed_categories.owner_uid = " . $_SESSION["uid"]);
1180
1181                 while ($line = db_fetch_assoc($result)) {
1182                         $line["cat_id"] = (int) $line["cat_id"];
1183
1184                         if ($line["num_children"] > 0) {
1185                                 $child_counter = getCategoryChildrenUnread($line["cat_id"], $_SESSION["uid"]);
1186                         } else {
1187                                 $child_counter = 0;
1188                         }
1189
1190                         $cv = array("id" => $line["cat_id"], "kind" => "cat",
1191                                 "counter" => $line["unread"] + $child_counter);
1192
1193                         array_push($ret_arr, $cv);
1194                 }
1195
1196                 /* Special case: NULL category doesn't actually exist in the DB */
1197
1198                 $cv = array("id" => 0, "kind" => "cat",
1199                         "counter" => (int) ccache_find(0, $_SESSION["uid"], true));
1200
1201                 array_push($ret_arr, $cv);
1202
1203                 return $ret_arr;
1204         }
1205
1206         // only accepts real cats (>= 0)
1207         function getCategoryChildrenUnread($cat, $owner_uid = false) {
1208                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1209
1210                 $result = db_query("SELECT id FROM ttrss_feed_categories WHERE parent_cat = '$cat'
1211                                 AND owner_uid = $owner_uid");
1212
1213                 $unread = 0;
1214
1215                 while ($line = db_fetch_assoc($result)) {
1216                         $unread += getCategoryUnread($line["id"], $owner_uid);
1217                         $unread += getCategoryChildrenUnread($line["id"], $owner_uid);
1218                 }
1219
1220                 return $unread;
1221         }
1222
1223         function getCategoryUnread($cat, $owner_uid = false) {
1224
1225                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1226
1227                 if ($cat >= 0) {
1228
1229                         if ($cat != 0) {
1230                                 $cat_query = "cat_id = '$cat'";
1231                         } else {
1232                                 $cat_query = "cat_id IS NULL";
1233                         }
1234
1235                         $result = db_query("SELECT id FROM ttrss_feeds WHERE $cat_query
1236                                         AND owner_uid = " . $owner_uid);
1237
1238                         $cat_feeds = array();
1239                         while ($line = db_fetch_assoc($result)) {
1240                                 array_push($cat_feeds, "feed_id = " . $line["id"]);
1241                         }
1242
1243                         if (count($cat_feeds) == 0) return 0;
1244
1245                         $match_part = implode(" OR ", $cat_feeds);
1246
1247                         $result = db_query("SELECT COUNT(int_id) AS unread
1248                                 FROM ttrss_user_entries
1249                                 WHERE   unread = true AND ($match_part)
1250                                 AND owner_uid = " . $owner_uid);
1251
1252                         $unread = 0;
1253
1254                         # this needs to be rewritten
1255                         while ($line = db_fetch_assoc($result)) {
1256                                 $unread += $line["unread"];
1257                         }
1258
1259                         return $unread;
1260                 } else if ($cat == -1) {
1261                         return getFeedUnread(-1) + getFeedUnread($link, -2) + getFeedUnread($link, -3) + getFeedUnread($link, 0);
1262                 } else if ($cat == -2) {
1263
1264                         $result = db_query("
1265                                 SELECT COUNT(unread) AS unread FROM
1266                                         ttrss_user_entries, ttrss_user_labels2
1267                                 WHERE article_id = ref_id AND unread = true
1268                                         AND ttrss_user_entries.owner_uid = '$owner_uid'");
1269
1270                         $unread = db_fetch_result($result, 0, "unread");
1271
1272                         return $unread;
1273
1274                 }
1275         }
1276
1277         function getFeedUnread($feed, $is_cat = false) {
1278                 return getFeedArticles($feed, $is_cat, true, $_SESSION["uid"]);
1279         }
1280
1281         function getLabelUnread($label_id, $owner_uid = false) {
1282                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1283
1284                 $result = db_query("SELECT COUNT(ref_id) AS unread FROM ttrss_user_entries, ttrss_user_labels2
1285                         WHERE owner_uid = '$owner_uid' AND unread = true AND label_id = '$label_id' AND article_id = ref_id");
1286
1287                 if (db_num_rows($result) != 0) {
1288                         return db_fetch_result($result, 0, "unread");
1289                 } else {
1290                         return 0;
1291                 }
1292         }
1293
1294         function getFeedArticles($feed, $is_cat = false, $unread_only = false,
1295                 $owner_uid = false) {
1296
1297                 $n_feed = (int) $feed;
1298                 $need_entries = false;
1299
1300                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1301
1302                 if ($unread_only) {
1303                         $unread_qpart = "unread = true";
1304                 } else {
1305                         $unread_qpart = "true";
1306                 }
1307
1308                 if ($is_cat) {
1309                         return getCategoryUnread($n_feed, $owner_uid);
1310                 } else if ($n_feed == -6) {
1311                         return 0;
1312                 } else if ($feed != "0" && $n_feed == 0) {
1313
1314                         $feed = db_escape_string($feed);
1315
1316                         $result = db_query("SELECT SUM((SELECT COUNT(int_id)
1317                                 FROM ttrss_user_entries,ttrss_entries WHERE int_id = post_int_id
1318                                         AND ref_id = id AND $unread_qpart)) AS count FROM ttrss_tags
1319                                 WHERE owner_uid = $owner_uid AND tag_name = '$feed'");
1320                         return db_fetch_result($result, 0, "count");
1321
1322                 } else if ($n_feed == -1) {
1323                         $match_part = "marked = true";
1324                 } else if ($n_feed == -2) {
1325                         $match_part = "published = true";
1326                 } else if ($n_feed == -3) {
1327                         $match_part = "unread = true AND score >= 0";
1328
1329                         $intl = get_pref("FRESH_ARTICLE_MAX_AGE", $owner_uid);
1330
1331                         if (DB_TYPE == "pgsql") {
1332                                 $match_part .= " AND updated > NOW() - INTERVAL '$intl hour' ";
1333                         } else {
1334                                 $match_part .= " AND updated > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
1335                         }
1336
1337                         $need_entries = true;
1338
1339                 } else if ($n_feed == -4) {
1340                         $match_part = "true";
1341                 } else if ($n_feed >= 0) {
1342
1343                         if ($n_feed != 0) {
1344                                 $match_part = "feed_id = '$n_feed'";
1345                         } else {
1346                                 $match_part = "feed_id IS NULL";
1347                         }
1348
1349                 } else if ($feed < LABEL_BASE_INDEX) {
1350
1351                         $label_id = feed_to_label_id($feed);
1352
1353                         return getLabelUnread($label_id, $owner_uid);
1354
1355                 }
1356
1357                 if ($match_part) {
1358
1359                         if ($need_entries) {
1360                                 $from_qpart = "ttrss_user_entries,ttrss_entries";
1361                                 $from_where = "ttrss_entries.id = ttrss_user_entries.ref_id AND";
1362                         } else {
1363                                 $from_qpart = "ttrss_user_entries";
1364                         }
1365
1366                         $query = "SELECT count(int_id) AS unread
1367                                 FROM $from_qpart WHERE
1368                                 $unread_qpart AND $from_where ($match_part) AND ttrss_user_entries.owner_uid = $owner_uid";
1369
1370                         //echo "[$feed/$query]\n";
1371
1372                         $result = db_query($query);
1373
1374                 } else {
1375
1376                         $result = db_query("SELECT COUNT(post_int_id) AS unread
1377                                 FROM ttrss_tags,ttrss_user_entries,ttrss_entries
1378                                 WHERE tag_name = '$feed' AND post_int_id = int_id AND ref_id = ttrss_entries.id
1379                                 AND $unread_qpart AND ttrss_tags.owner_uid = " . $owner_uid);
1380                 }
1381
1382                 $unread = db_fetch_result($result, 0, "unread");
1383
1384                 return $unread;
1385         }
1386
1387         function getGlobalUnread($user_id = false) {
1388
1389                 if (!$user_id) {
1390                         $user_id = $_SESSION["uid"];
1391                 }
1392
1393                 $result = db_query("SELECT SUM(value) AS c_id FROM ttrss_counters_cache
1394                         WHERE owner_uid = '$user_id' AND feed_id > 0");
1395
1396                 $c_id = db_fetch_result($result, 0, "c_id");
1397
1398                 return $c_id;
1399         }
1400
1401         function getGlobalCounters($global_unread = -1) {
1402                 $ret_arr = array();
1403
1404                 if ($global_unread == -1) {
1405                         $global_unread = getGlobalUnread();
1406                 }
1407
1408                 $cv = array("id" => "global-unread",
1409                         "counter" => (int) $global_unread);
1410
1411                 array_push($ret_arr, $cv);
1412
1413                 $result = db_query("SELECT COUNT(id) AS fn FROM
1414                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1415
1416                 $subscribed_feeds = db_fetch_result($result, 0, "fn");
1417
1418                 $cv = array("id" => "subscribed-feeds",
1419                         "counter" => (int) $subscribed_feeds);
1420
1421                 array_push($ret_arr, $cv);
1422
1423                 return $ret_arr;
1424         }
1425
1426         function getVirtCounters() {
1427
1428                 $ret_arr = array();
1429
1430                 for ($i = 0; $i >= -4; $i--) {
1431
1432                         $count = getFeedUnread($i);
1433
1434                         $cv = array("id" => $i,
1435                                 "counter" => (int) $count);
1436
1437 //                      if (get_pref('EXTENDED_FEEDLIST'))
1438 //                              $cv["xmsg"] = getFeedArticles($i)." ".__("total");
1439
1440                         array_push($ret_arr, $cv);
1441                 }
1442
1443                 global $pluginhost;
1444
1445                 if ($pluginhost) {
1446                         $feeds = $pluginhost->get_feeds(-1);
1447
1448                         if (is_array($feeds)) {
1449                                 foreach ($feeds as $feed) {
1450                                         $cv = array("id" => PluginHost::pfeed_to_feed_id($feed['id']),
1451                                                 "counter" => $feed['sender']->get_unread($feed['id']));
1452
1453                                         array_push($ret_arr, $cv);
1454                                 }
1455                         }
1456                 }
1457
1458                 return $ret_arr;
1459         }
1460
1461         function getLabelCounters($descriptions = false) {
1462
1463                 $ret_arr = array();
1464
1465                 $owner_uid = $_SESSION["uid"];
1466
1467                 $result = db_query("SELECT id,caption,COUNT(unread) AS unread
1468                         FROM ttrss_labels2 LEFT JOIN ttrss_user_labels2 ON
1469                                 (ttrss_labels2.id = label_id)
1470                                 LEFT JOIN ttrss_user_entries ON (ref_id = article_id AND unread = true
1471                                         AND ttrss_user_entries.owner_uid = $owner_uid)
1472                                 WHERE ttrss_labels2.owner_uid = $owner_uid GROUP BY ttrss_labels2.id,
1473                                         ttrss_labels2.caption");
1474
1475                 while ($line = db_fetch_assoc($result)) {
1476
1477                         $id = label_to_feed_id($line["id"]);
1478
1479                         $label_name = $line["caption"];
1480                         $count = $line["unread"];
1481
1482                         $cv = array("id" => $id,
1483                                 "counter" => (int) $count);
1484
1485                         if ($descriptions)
1486                                 $cv["description"] = $label_name;
1487
1488 //                      if (get_pref('EXTENDED_FEEDLIST'))
1489 //                              $cv["xmsg"] = getFeedArticles($id)." ".__("total");
1490
1491                         array_push($ret_arr, $cv);
1492                 }
1493
1494                 return $ret_arr;
1495         }
1496
1497         function getFeedCounters($active_feed = false) {
1498
1499                 $ret_arr = array();
1500
1501                 $query = "SELECT ttrss_feeds.id,
1502                                 ttrss_feeds.title,
1503                                 ".SUBSTRING_FOR_DATE."(ttrss_feeds.last_updated,1,19) AS last_updated,
1504                                 last_error, value AS count
1505                         FROM ttrss_feeds, ttrss_counters_cache
1506                         WHERE ttrss_feeds.owner_uid = ".$_SESSION["uid"]."
1507                                 AND ttrss_counters_cache.owner_uid = ttrss_feeds.owner_uid
1508                                 AND ttrss_counters_cache.feed_id = id";
1509
1510                 $result = db_query($query);
1511                 $fctrs_modified = false;
1512
1513                 while ($line = db_fetch_assoc($result)) {
1514
1515                         $id = $line["id"];
1516                         $count = $line["count"];
1517                         $last_error = htmlspecialchars($line["last_error"]);
1518
1519                         $last_updated = make_local_datetime($line['last_updated'], false);
1520
1521                         $has_img = feed_has_icon($id);
1522
1523                         if (date('Y') - date('Y', strtotime($line['last_updated'])) > 2)
1524                                 $last_updated = '';
1525
1526                         $cv = array("id" => $id,
1527                                 "updated" => $last_updated,
1528                                 "counter" => (int) $count,
1529                                 "has_img" => (int) $has_img);
1530
1531                         if ($last_error)
1532                                 $cv["error"] = $last_error;
1533
1534 //                      if (get_pref('EXTENDED_FEEDLIST'))
1535 //                              $cv["xmsg"] = getFeedArticles($id)." ".__("total");
1536
1537                         if ($active_feed && $id == $active_feed)
1538                                 $cv["title"] = truncate_string($line["title"], 30);
1539
1540                         array_push($ret_arr, $cv);
1541
1542                 }
1543
1544                 return $ret_arr;
1545         }
1546
1547         function get_pgsql_version() {
1548                 $result = db_query("SELECT version() AS version");
1549                 $version = explode(" ", db_fetch_result($result, 0, "version"));
1550                 return $version[1];
1551         }
1552
1553         /**
1554          * @return array (code => Status code, message => error message if available)
1555          *
1556          *                 0 - OK, Feed already exists
1557          *                 1 - OK, Feed added
1558          *                 2 - Invalid URL
1559          *                 3 - URL content is HTML, no feeds available
1560          *                 4 - URL content is HTML which contains multiple feeds.
1561          *                     Here you should call extractfeedurls in rpc-backend
1562          *                     to get all possible feeds.
1563          *                 5 - Couldn't download the URL content.
1564          */
1565         function subscribe_to_feed($url, $cat_id = 0,
1566                         $auth_login = '', $auth_pass = '') {
1567
1568                 global $fetch_last_error;
1569
1570                 require_once "include/rssfuncs.php";
1571
1572                 $url = fix_url($url);
1573
1574                 if (!$url || !validate_feed_url($url)) return array("code" => 2);
1575
1576                 $contents = @fetch_file_contents($url, false, $auth_login, $auth_pass);
1577
1578                 if (!$contents) {
1579                         return array("code" => 5, "message" => $fetch_last_error);
1580                 }
1581
1582                 if (is_html($contents)) {
1583                         $feedUrls = get_feeds_from_html($url, $contents);
1584
1585                         if (count($feedUrls) == 0) {
1586                                 return array("code" => 3);
1587                         } else if (count($feedUrls) > 1) {
1588                                 return array("code" => 4, "feeds" => $feedUrls);
1589                         }
1590                         //use feed url as new URL
1591                         $url = key($feedUrls);
1592                 }
1593
1594                 if ($cat_id == "0" || !$cat_id) {
1595                         $cat_qpart = "NULL";
1596                 } else {
1597                         $cat_qpart = "'$cat_id'";
1598                 }
1599
1600                 $result = db_query(
1601                         "SELECT id FROM ttrss_feeds
1602                         WHERE feed_url = '$url' AND owner_uid = ".$_SESSION["uid"]);
1603
1604                 if (strlen(FEED_CRYPT_KEY) > 0) {
1605                         require_once "crypt.php";
1606                         $auth_pass = substr(encrypt_string($auth_pass), 0, 250);
1607                         $auth_pass_encrypted = 'true';
1608                 } else {
1609                         $auth_pass_encrypted = 'false';
1610                 }
1611
1612                 $auth_pass = db_escape_string($auth_pass);
1613
1614                 if (db_num_rows($result) == 0) {
1615                         $result = db_query(
1616                                 "INSERT INTO ttrss_feeds
1617                                         (owner_uid,feed_url,title,cat_id, auth_login,auth_pass,update_method,auth_pass_encrypted)
1618                                 VALUES ('".$_SESSION["uid"]."', '$url',
1619                                 '[Unknown]', $cat_qpart, '$auth_login', '$auth_pass', 0, $auth_pass_encrypted)");
1620
1621                         $result = db_query(
1622                                 "SELECT id FROM ttrss_feeds WHERE feed_url = '$url'
1623                                         AND owner_uid = " . $_SESSION["uid"]);
1624
1625                         $feed_id = db_fetch_result($result, 0, "id");
1626
1627                         if ($feed_id) {
1628                                 update_rss_feed($feed_id, true);
1629                         }
1630
1631                         return array("code" => 1);
1632                 } else {
1633                         return array("code" => 0);
1634                 }
1635         }
1636
1637         function print_feed_select($id, $default_id = "",
1638                 $attributes = "", $include_all_feeds = true,
1639                 $root_id = false, $nest_level = 0) {
1640
1641                 if (!$root_id) {
1642                         print "<select id=\"$id\" name=\"$id\" $attributes>";
1643                         if ($include_all_feeds) {
1644                                 $is_selected = ("0" == $default_id) ? "selected=\"1\"" : "";
1645                                 print "<option $is_selected value=\"0\">".__('All feeds')."</option>";
1646                         }
1647                 }
1648
1649                 if (get_pref('ENABLE_FEED_CATS')) {
1650
1651                         if ($root_id)
1652                                 $parent_qpart = "parent_cat = '$root_id'";
1653                         else
1654                                 $parent_qpart = "parent_cat IS NULL";
1655
1656                         $result = db_query("SELECT id,title,
1657                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1658                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1659                                 FROM ttrss_feed_categories
1660                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1661
1662                         while ($line = db_fetch_assoc($result)) {
1663
1664                                 for ($i = 0; $i < $nest_level; $i++)
1665                                         $line["title"] = " - " . $line["title"];
1666
1667                                 $is_selected = ("CAT:".$line["id"] == $default_id) ? "selected=\"1\"" : "";
1668
1669                                 printf("<option $is_selected value='CAT:%d'>%s</option>",
1670                                         $line["id"], htmlspecialchars($line["title"]));
1671
1672                                 if ($line["num_children"] > 0)
1673                                         print_feed_select($id, $default_id, $attributes,
1674                                                 $include_all_feeds, $line["id"], $nest_level+1);
1675
1676                                 $feed_result = db_query("SELECT id,title FROM ttrss_feeds
1677                                         WHERE cat_id = '".$line["id"]."' AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1678
1679                                 while ($fline = db_fetch_assoc($feed_result)) {
1680                                         $is_selected = ($fline["id"] == $default_id) ? "selected=\"1\"" : "";
1681
1682                                         $fline["title"] = " + " . $fline["title"];
1683
1684                                         for ($i = 0; $i < $nest_level; $i++)
1685                                                 $fline["title"] = " - " . $fline["title"];
1686
1687                                         printf("<option $is_selected value='%d'>%s</option>",
1688                                                 $fline["id"], htmlspecialchars($fline["title"]));
1689                                 }
1690                         }
1691
1692                         if (!$root_id) {
1693                                 $is_selected = ($default_id == "CAT:0") ? "selected=\"1\"" : "";
1694
1695                                 printf("<option $is_selected value='CAT:0'>%s</option>",
1696                                         __("Uncategorized"));
1697
1698                                 $feed_result = db_query("SELECT id,title FROM ttrss_feeds
1699                                         WHERE cat_id IS NULL AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1700
1701                                 while ($fline = db_fetch_assoc($feed_result)) {
1702                                         $is_selected = ($fline["id"] == $default_id && !$default_is_cat) ? "selected=\"1\"" : "";
1703
1704                                         $fline["title"] = " + " . $fline["title"];
1705
1706                                         for ($i = 0; $i < $nest_level; $i++)
1707                                                 $fline["title"] = " - " . $fline["title"];
1708
1709                                         printf("<option $is_selected value='%d'>%s</option>",
1710                                                 $fline["id"], htmlspecialchars($fline["title"]));
1711                                 }
1712                         }
1713
1714                 } else {
1715                         $result = db_query("SELECT id,title FROM ttrss_feeds
1716                                 WHERE owner_uid = ".$_SESSION["uid"]." ORDER BY title");
1717
1718                         while ($line = db_fetch_assoc($result)) {
1719
1720                                 $is_selected = ($line["id"] == $default_id) ? "selected=\"1\"" : "";
1721
1722                                 printf("<option $is_selected value='%d'>%s</option>",
1723                                         $line["id"], htmlspecialchars($line["title"]));
1724                         }
1725                 }
1726
1727                 if (!$root_id) {
1728                         print "</select>";
1729                 }
1730         }
1731
1732         function print_feed_cat_select($id, $default_id,
1733                 $attributes, $include_all_cats = true, $root_id = false, $nest_level = 0) {
1734
1735                         if (!$root_id) {
1736                                         print "<select id=\"$id\" name=\"$id\" default=\"$default_id\" onchange=\"catSelectOnChange(this)\" $attributes>";
1737                         }
1738
1739                         if ($root_id)
1740                                 $parent_qpart = "parent_cat = '$root_id'";
1741                         else
1742                                 $parent_qpart = "parent_cat IS NULL";
1743
1744                         $result = db_query("SELECT id,title,
1745                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1746                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1747                                 FROM ttrss_feed_categories
1748                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1749
1750                         while ($line = db_fetch_assoc($result)) {
1751                                 if ($line["id"] == $default_id) {
1752                                         $is_selected = "selected=\"1\"";
1753                                 } else {
1754                                         $is_selected = "";
1755                                 }
1756
1757                                 for ($i = 0; $i < $nest_level; $i++)
1758                                         $line["title"] = " - " . $line["title"];
1759
1760                                 if ($line["title"])
1761                                         printf("<option $is_selected value='%d'>%s</option>",
1762                                                 $line["id"], htmlspecialchars($line["title"]));
1763
1764                                 if ($line["num_children"] > 0)
1765                                         print_feed_cat_select($id, $default_id, $attributes,
1766                                                 $include_all_cats, $line["id"], $nest_level+1);
1767                         }
1768
1769                         if (!$root_id) {
1770                                 if ($include_all_cats) {
1771                                         if (db_num_rows($result) > 0) {
1772                                                 print "<option disabled=\"1\">--------</option>";
1773                                         }
1774
1775                                         if ($default_id == 0) {
1776                                                 $is_selected = "selected=\"1\"";
1777                                         } else {
1778                                                 $is_selected = "";
1779                                         }
1780
1781                                         print "<option $is_selected value=\"0\">".__('Uncategorized')."</option>";
1782                                 }
1783                                 print "</select>";
1784                         }
1785                 }
1786
1787         function checkbox_to_sql_bool($val) {
1788                 return ($val == "on") ? "true" : "false";
1789         }
1790
1791         function getFeedCatTitle($id) {
1792                 if ($id == -1) {
1793                         return __("Special");
1794                 } else if ($id < LABEL_BASE_INDEX) {
1795                         return __("Labels");
1796                 } else if ($id > 0) {
1797                         $result = db_query("SELECT ttrss_feed_categories.title
1798                                 FROM ttrss_feeds, ttrss_feed_categories WHERE ttrss_feeds.id = '$id' AND
1799                                         cat_id = ttrss_feed_categories.id");
1800                         if (db_num_rows($result) == 1) {
1801                                 return db_fetch_result($result, 0, "title");
1802                         } else {
1803                                 return __("Uncategorized");
1804                         }
1805                 } else {
1806                         return "getFeedCatTitle($id) failed";
1807                 }
1808
1809         }
1810
1811         function getFeedIcon($id) {
1812                 switch ($id) {
1813                 case 0:
1814                         return "images/archive.png";
1815                         break;
1816                 case -1:
1817                         return "images/mark_set.svg";
1818                         break;
1819                 case -2:
1820                         return "images/pub_set.svg";
1821                         break;
1822                 case -3:
1823                         return "images/fresh.png";
1824                         break;
1825                 case -4:
1826                         return "images/tag.png";
1827                         break;
1828                 case -6:
1829                         return "images/recently_read.png";
1830                         break;
1831                 default:
1832                         if ($id < LABEL_BASE_INDEX) {
1833                                 return "images/label.png";
1834                         } else {
1835                                 if (file_exists(ICONS_DIR . "/$id.ico"))
1836                                         return ICONS_URL . "/$id.ico";
1837                         }
1838                         break;
1839                 }
1840
1841                 return false;
1842         }
1843
1844         function getFeedTitle($id, $cat = false) {
1845                 if ($cat) {
1846                         return getCategoryTitle($id);
1847                 } else if ($id == -1) {
1848                         return __("Starred articles");
1849                 } else if ($id == -2) {
1850                         return __("Published articles");
1851                 } else if ($id == -3) {
1852                         return __("Fresh articles");
1853                 } else if ($id == -4) {
1854                         return __("All articles");
1855                 } else if ($id === 0 || $id === "0") {
1856                         return __("Archived articles");
1857                 } else if ($id == -6) {
1858                         return __("Recently read");
1859                 } else if ($id < LABEL_BASE_INDEX) {
1860                         $label_id = feed_to_label_id($id);
1861                         $result = db_query("SELECT caption FROM ttrss_labels2 WHERE id = '$label_id'");
1862                         if (db_num_rows($result) == 1) {
1863                                 return db_fetch_result($result, 0, "caption");
1864                         } else {
1865                                 return "Unknown label ($label_id)";
1866                         }
1867
1868                 } else if (is_numeric($id) && $id > 0) {
1869                         $result = db_query("SELECT title FROM ttrss_feeds WHERE id = '$id'");
1870                         if (db_num_rows($result) == 1) {
1871                                 return db_fetch_result($result, 0, "title");
1872                         } else {
1873                                 return "Unknown feed ($id)";
1874                         }
1875                 } else {
1876                         return $id;
1877                 }
1878         }
1879
1880         function make_init_params() {
1881                 $params = array();
1882
1883                 foreach (array("ON_CATCHUP_SHOW_NEXT_FEED", "HIDE_READ_FEEDS",
1884                         "ENABLE_FEED_CATS", "FEEDS_SORT_BY_UNREAD", "CONFIRM_FEED_CATCHUP",
1885                         "CDM_AUTO_CATCHUP", "FRESH_ARTICLE_MAX_AGE",
1886                         "HIDE_READ_SHOWS_SPECIAL", "COMBINED_DISPLAY_MODE") as $param) {
1887
1888                                  $params[strtolower($param)] = (int) get_pref($param);
1889                  }
1890
1891                 $params["icons_url"] = ICONS_URL;
1892                 $params["cookie_lifetime"] = SESSION_COOKIE_LIFETIME;
1893                 $params["default_view_mode"] = get_pref("_DEFAULT_VIEW_MODE");
1894                 $params["default_view_limit"] = (int) get_pref("_DEFAULT_VIEW_LIMIT");
1895                 $params["default_view_order_by"] = get_pref("_DEFAULT_VIEW_ORDER_BY");
1896                 $params["bw_limit"] = (int) $_SESSION["bw_limit"];
1897                 $params["label_base_index"] = (int) LABEL_BASE_INDEX;
1898
1899                 $result = db_query("SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
1900                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1901
1902                 $max_feed_id = db_fetch_result($result, 0, "mid");
1903                 $num_feeds = db_fetch_result($result, 0, "nf");
1904
1905                 $params["max_feed_id"] = (int) $max_feed_id;
1906                 $params["num_feeds"] = (int) $num_feeds;
1907
1908                 $params["collapsed_feedlist"] = (int) get_pref("_COLLAPSED_FEEDLIST");
1909                 $params["hotkeys"] = get_hotkeys_map();
1910
1911                 $params["csrf_token"] = $_SESSION["csrf_token"];
1912                 $params["widescreen"] = (int) $_COOKIE["ttrss_widescreen"];
1913
1914                 $params['simple_update'] = defined('SIMPLE_UPDATE_MODE') && SIMPLE_UPDATE_MODE;
1915
1916                 return $params;
1917         }
1918
1919         function get_hotkeys_info() {
1920                 $hotkeys = array(
1921                         __("Navigation") => array(
1922                                 "next_feed" => __("Open next feed"),
1923                                 "prev_feed" => __("Open previous feed"),
1924                                 "next_article" => __("Open next article"),
1925                                 "prev_article" => __("Open previous article"),
1926                                 "next_article_noscroll" => __("Open next article (don't scroll long articles)"),
1927                                 "prev_article_noscroll" => __("Open previous article (don't scroll long articles)"),
1928                                 "next_article_noexpand" => __("Move to next article (don't expand or mark read)"),
1929                                 "prev_article_noexpand" => __("Move to previous article (don't expand or mark read)"),
1930                                 "search_dialog" => __("Show search dialog")),
1931                         __("Article") => array(
1932                                 "toggle_mark" => __("Toggle starred"),
1933                                 "toggle_publ" => __("Toggle published"),
1934                                 "toggle_unread" => __("Toggle unread"),
1935                                 "edit_tags" => __("Edit tags"),
1936                                 "dismiss_selected" => __("Dismiss selected"),
1937                                 "dismiss_read" => __("Dismiss read"),
1938                                 "open_in_new_window" => __("Open in new window"),
1939                                 "catchup_below" => __("Mark below as read"),
1940                                 "catchup_above" => __("Mark above as read"),
1941                                 "article_scroll_down" => __("Scroll down"),
1942                                 "article_scroll_up" => __("Scroll up"),
1943                                 "select_article_cursor" => __("Select article under cursor"),
1944                                 "email_article" => __("Email article"),
1945                                 "close_article" => __("Close/collapse article"),
1946                                 "toggle_expand" => __("Toggle article expansion (combined mode)"),
1947                                 "toggle_widescreen" => __("Toggle widescreen mode"),
1948                                 "toggle_embed_original" => __("Toggle embed original")),
1949                         __("Article selection") => array(
1950                                 "select_all" => __("Select all articles"),
1951                                 "select_unread" => __("Select unread"),
1952                                 "select_marked" => __("Select starred"),
1953                                 "select_published" => __("Select published"),
1954                                 "select_invert" => __("Invert selection"),
1955                                 "select_none" => __("Deselect everything")),
1956                         __("Feed") => array(
1957                                 "feed_refresh" => __("Refresh current feed"),
1958                                 "feed_unhide_read" => __("Un/hide read feeds"),
1959                                 "feed_subscribe" => __("Subscribe to feed"),
1960                                 "feed_edit" => __("Edit feed"),
1961                                 "feed_catchup" => __("Mark as read"),
1962                                 "feed_reverse" => __("Reverse headlines"),
1963                                 "feed_debug_update" => __("Debug feed update"),
1964                                 "catchup_all" => __("Mark all feeds as read"),
1965                                 "cat_toggle_collapse" => __("Un/collapse current category"),
1966                                 "toggle_combined_mode" => __("Toggle combined mode"),
1967                                 "toggle_cdm_expanded" => __("Toggle auto expand in combined mode")),
1968                         __("Go to") => array(
1969                                 "goto_all" => __("All articles"),
1970                                 "goto_fresh" => __("Fresh"),
1971                                 "goto_marked" => __("Starred"),
1972                                 "goto_published" => __("Published"),
1973                                 "goto_tagcloud" => __("Tag cloud"),
1974                                 "goto_prefs" => __("Preferences")),
1975                         __("Other") => array(
1976                                 "create_label" => __("Create label"),
1977                                 "create_filter" => __("Create filter"),
1978                                 "collapse_sidebar" => __("Un/collapse sidebar"),
1979                                 "help_dialog" => __("Show help dialog"))
1980                         );
1981
1982                 global $pluginhost;
1983                 foreach ($pluginhost->get_hooks($pluginhost::HOOK_HOTKEY_INFO) as $plugin) {
1984                         $hotkeys = $plugin->hook_hotkey_info($hotkeys);
1985                 }
1986
1987                 return $hotkeys;
1988         }
1989
1990         function get_hotkeys_map() {
1991                 $hotkeys = array(
1992 //                      "navigation" => array(
1993                                 "k" => "next_feed",
1994                                 "j" => "prev_feed",
1995                                 "n" => "next_article",
1996                                 "p" => "prev_article",
1997                                 "(38)|up" => "prev_article",
1998                                 "(40)|down" => "next_article",
1999 //                              "^(38)|Ctrl-up" => "prev_article_noscroll",
2000 //                              "^(40)|Ctrl-down" => "next_article_noscroll",
2001                                 "(191)|/" => "search_dialog",
2002 //                      "article" => array(
2003                                 "s" => "toggle_mark",
2004                                 "*s" => "toggle_publ",
2005                                 "u" => "toggle_unread",
2006                                 "*t" => "edit_tags",
2007                                 "*d" => "dismiss_selected",
2008                                 "*x" => "dismiss_read",
2009                                 "o" => "open_in_new_window",
2010                                 "c p" => "catchup_below",
2011                                 "c n" => "catchup_above",
2012                                 "*n" => "article_scroll_down",
2013                                 "*p" => "article_scroll_up",
2014                                 "*(38)|Shift+up" => "article_scroll_up",
2015                                 "*(40)|Shift+down" => "article_scroll_down",
2016                                 "a *w" => "toggle_widescreen",
2017                                 "a e" => "toggle_embed_original",
2018                                 "e" => "email_article",
2019                                 "a q" => "close_article",
2020 //                      "article_selection" => array(
2021                                 "a a" => "select_all",
2022                                 "a u" => "select_unread",
2023                                 "a *u" => "select_marked",
2024                                 "a p" => "select_published",
2025                                 "a i" => "select_invert",
2026                                 "a n" => "select_none",
2027 //                      "feed" => array(
2028                                 "f r" => "feed_refresh",
2029                                 "f a" => "feed_unhide_read",
2030                                 "f s" => "feed_subscribe",
2031                                 "f e" => "feed_edit",
2032                                 "f q" => "feed_catchup",
2033                                 "f x" => "feed_reverse",
2034                                 "f *d" => "feed_debug_update",
2035                                 "f *c" => "toggle_combined_mode",
2036                                 "f c" => "toggle_cdm_expanded",
2037                                 "*q" => "catchup_all",
2038                                 "x" => "cat_toggle_collapse",
2039 //                      "goto" => array(
2040                                 "g a" => "goto_all",
2041                                 "g f" => "goto_fresh",
2042                                 "g s" => "goto_marked",
2043                                 "g p" => "goto_published",
2044                                 "g t" => "goto_tagcloud",
2045                                 "g *p" => "goto_prefs",
2046 //                      "other" => array(
2047                                 "(9)|Tab" => "select_article_cursor", // tab
2048                                 "c l" => "create_label",
2049                                 "c f" => "create_filter",
2050                                 "c s" => "collapse_sidebar",
2051                                 "^(191)|Ctrl+/" => "help_dialog",
2052                         );
2053
2054                 if (get_pref('COMBINED_DISPLAY_MODE')) {
2055                         $hotkeys["^(38)|Ctrl-up"] = "prev_article_noscroll";
2056                         $hotkeys["^(40)|Ctrl-down"] = "next_article_noscroll";
2057                 }
2058
2059                 global $pluginhost;
2060                 foreach ($pluginhost->get_hooks($pluginhost::HOOK_HOTKEY_MAP) as $plugin) {
2061                         $hotkeys = $plugin->hook_hotkey_map($hotkeys);
2062                 }
2063
2064                 $prefixes = array();
2065
2066                 foreach (array_keys($hotkeys) as $hotkey) {
2067                         $pair = explode(" ", $hotkey, 2);
2068
2069                         if (count($pair) > 1 && !in_array($pair[0], $prefixes)) {
2070                                 array_push($prefixes, $pair[0]);
2071                         }
2072                 }
2073
2074                 return array($prefixes, $hotkeys);
2075         }
2076
2077         function make_runtime_info() {
2078                 $data = array();
2079
2080                 $result = db_query("SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
2081                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
2082
2083                 $max_feed_id = db_fetch_result($result, 0, "mid");
2084                 $num_feeds = db_fetch_result($result, 0, "nf");
2085
2086                 $data["max_feed_id"] = (int) $max_feed_id;
2087                 $data["num_feeds"] = (int) $num_feeds;
2088
2089                 $data['last_article_id'] = getLastArticleId();
2090                 $data['cdm_expanded'] = get_pref('CDM_EXPANDED');
2091
2092                 $data['dep_ts'] = calculate_dep_timestamp();
2093                 $data['reload_on_ts_change'] = !defined('_NO_RELOAD_ON_TS_CHANGE');
2094
2095                 if (file_exists(LOCK_DIRECTORY . "/update_daemon.lock")) {
2096
2097                         $data['daemon_is_running'] = (int) file_is_locked("update_daemon.lock");
2098
2099                         if (time() - $_SESSION["daemon_stamp_check"] > 30) {
2100
2101                                 $stamp = (int) @file_get_contents(LOCK_DIRECTORY . "/update_daemon.stamp");
2102
2103                                 if ($stamp) {
2104                                         $stamp_delta = time() - $stamp;
2105
2106                                         if ($stamp_delta > 1800) {
2107                                                 $stamp_check = 0;
2108                                         } else {
2109                                                 $stamp_check = 1;
2110                                                 $_SESSION["daemon_stamp_check"] = time();
2111                                         }
2112
2113                                         $data['daemon_stamp_ok'] = $stamp_check;
2114
2115                                         $stamp_fmt = date("Y.m.d, G:i", $stamp);
2116
2117                                         $data['daemon_stamp'] = $stamp_fmt;
2118                                 }
2119                         }
2120                 }
2121
2122                 if ($_SESSION["last_version_check"] + 86400 + rand(-1000, 1000) < time()) {
2123                                 $new_version_details = @check_for_update();
2124
2125                                 $data['new_version_available'] = (int) ($new_version_details != false);
2126
2127                                 $_SESSION["last_version_check"] = time();
2128                                 $_SESSION["version_data"] = $new_version_details;
2129                 }
2130
2131                 return $data;
2132         }
2133
2134         function search_to_sql($search) {
2135
2136                 $search_query_part = "";
2137
2138                 $keywords = explode(" ", $search);
2139                 $query_keywords = array();
2140
2141                 foreach ($keywords as $k) {
2142                         if (strpos($k, "-") === 0) {
2143                                 $k = substr($k, 1);
2144                                 $not = "NOT";
2145                         } else {
2146                                 $not = "";
2147                         }
2148
2149                         $commandpair = explode(":", mb_strtolower($k), 2);
2150
2151                         switch ($commandpair[0]) {
2152                         case "title":
2153                                 if ($commandpair[1]) {
2154                                         array_push($query_keywords, "($not (LOWER(ttrss_entries.title) LIKE '%".
2155                                                 db_escape_string(mb_strtolower($commandpair[1]))."%'))");
2156                                 } else {
2157                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2158                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2159                                 }
2160                                 break;
2161                         case "author":
2162                                 if ($commandpair[1]) {
2163                                         array_push($query_keywords, "($not (LOWER(author) LIKE '%".
2164                                                 db_escape_string(mb_strtolower($commandpair[1]))."%'))");
2165                                 } else {
2166                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2167                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2168                                 }
2169                                 break;
2170                         case "note":
2171                                 if ($commandpair[1]) {
2172                                         if ($commandpair[1] == "true")
2173                                                 array_push($query_keywords, "($not (note IS NOT NULL AND note != ''))");
2174                                         else if ($commandpair[1] == "false")
2175                                                 array_push($query_keywords, "($not (note IS NULL OR note = ''))");
2176                                         else
2177                                                 array_push($query_keywords, "($not (LOWER(note) LIKE '%".
2178                                                         db_escape_string(mb_strtolower($commandpair[1]))."%'))");
2179                                 } else {
2180                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2181                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2182                                 }
2183                                 break;
2184                         case "star":
2185
2186                                 if ($commandpair[1]) {
2187                                         if ($commandpair[1] == "true")
2188                                                 array_push($query_keywords, "($not (marked = true))");
2189                                         else
2190                                                 array_push($query_keywords, "($not (marked = false))");
2191                                 } else {
2192                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2193                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2194                                 }
2195                                 break;
2196                         case "pub":
2197                                 if ($commandpair[1]) {
2198                                         if ($commandpair[1] == "true")
2199                                                 array_push($query_keywords, "($not (published = true))");
2200                                         else
2201                                                 array_push($query_keywords, "($not (published = false))");
2202
2203                                 } else {
2204                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2205                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2206                                 }
2207                                 break;
2208                         default:
2209                                 if (strpos($k, "@") === 0) {
2210
2211                                         $user_tz_string = get_pref('USER_TIMEZONE', $_SESSION['uid']);
2212                                         $orig_ts = strtotime(substr($k, 1));
2213                                         $k = date("Y-m-d", convert_timestamp($orig_ts, $user_tz_string, 'UTC'));
2214
2215                                         //$k = date("Y-m-d", strtotime(substr($k, 1)));
2216
2217                                         array_push($query_keywords, "(".SUBSTRING_FOR_DATE."(updated,1,LENGTH('$k')) $not = '$k')");
2218                                 } else {
2219                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2220                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2221                                 }
2222                         }
2223                 }
2224
2225                 $search_query_part = implode("AND", $query_keywords);
2226
2227                 return $search_query_part;
2228         }
2229
2230         function getParentCategories($cat, $owner_uid) {
2231                 $rv = array();
2232
2233                 $result = db_query("SELECT parent_cat FROM ttrss_feed_categories
2234                         WHERE id = '$cat' AND parent_cat IS NOT NULL AND owner_uid = $owner_uid");
2235
2236                 while ($line = db_fetch_assoc($result)) {
2237                         array_push($rv, $line["parent_cat"]);
2238                         $rv = array_merge($rv, getParentCategories($line["parent_cat"], $owner_uid));
2239                 }
2240
2241                 return $rv;
2242         }
2243
2244         function getChildCategories($cat, $owner_uid) {
2245                 $rv = array();
2246
2247                 $result = db_query("SELECT id FROM ttrss_feed_categories
2248                         WHERE parent_cat = '$cat' AND owner_uid = $owner_uid");
2249
2250                 while ($line = db_fetch_assoc($result)) {
2251                         array_push($rv, $line["id"]);
2252                         $rv = array_merge($rv, getChildCategories($line["id"], $owner_uid));
2253                 }
2254
2255                 return $rv;
2256         }
2257
2258         function queryFeedHeadlines($feed, $limit, $view_mode, $cat_view, $search, $search_mode, $override_order = false, $offset = 0, $owner_uid = 0, $filter = false, $since_id = 0, $include_children = false, $ignore_vfeed_group = false) {
2259
2260                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2261
2262                 $ext_tables_part = "";
2263
2264                         if ($search) {
2265
2266                                 if (SPHINX_ENABLED) {
2267                                         $ids = join(",", @sphinx_search($search, 0, 500));
2268
2269                                         if ($ids)
2270                                                 $search_query_part = "ref_id IN ($ids) AND ";
2271                                         else
2272                                                 $search_query_part = "ref_id = -1 AND ";
2273
2274                                 } else {
2275                                         $search_query_part = search_to_sql($search);
2276                                         $search_query_part .= " AND ";
2277                                 }
2278
2279                         } else {
2280                                 $search_query_part = "";
2281                         }
2282
2283                         if ($filter) {
2284
2285                                 if (DB_TYPE == "pgsql") {
2286                                         $query_strategy_part .= " AND updated > NOW() - INTERVAL '14 days' ";
2287                                 } else {
2288                                         $query_strategy_part .= " AND updated > DATE_SUB(NOW(), INTERVAL 14 DAY) ";
2289                                 }
2290
2291                                 $override_order = "updated DESC";
2292
2293                                 $filter_query_part = filter_to_sql($filter, $owner_uid);
2294
2295                                 // Try to check if SQL regexp implementation chokes on a valid regexp
2296                                 $result = db_query("SELECT true AS true_val FROM ttrss_entries,
2297                                         ttrss_user_entries, ttrss_feeds, ttrss_feed_categories
2298                                         WHERE $filter_query_part LIMIT 1", false);
2299
2300                                 if ($result) {
2301                                         $test = db_fetch_result($result, 0, "true_val");
2302
2303                                         if (!$test) {
2304                                                 $filter_query_part = "false AND";
2305                                         } else {
2306                                                 $filter_query_part .= " AND";
2307                                         }
2308                                 } else {
2309                                         $filter_query_part = "false AND";
2310                                 }
2311
2312                         } else {
2313                                 $filter_query_part = "";
2314                         }
2315
2316                         if ($since_id) {
2317                                 $since_id_part = "ttrss_entries.id > $since_id AND ";
2318                         } else {
2319                                 $since_id_part = "";
2320                         }
2321
2322                         $view_query_part = "";
2323
2324                         if ($view_mode == "adaptive") {
2325                                 if ($search) {
2326                                         $view_query_part = " ";
2327                                 } else if ($feed != -1) {
2328
2329                                         $unread = getFeedUnread($feed, $cat_view);
2330
2331                                         if ($cat_view && $feed > 0 && $include_children)
2332                                                 $unread += getCategoryChildrenUnread($feed);
2333
2334                                         if ($unread > 0)
2335                                 $view_query_part = " unread = true AND ";
2336
2337                                 }
2338                         }
2339
2340                         if ($view_mode == "marked") {
2341                                 $view_query_part = " marked = true AND ";
2342                         }
2343
2344                         if ($view_mode == "has_note") {
2345                                 $view_query_part = " (note IS NOT NULL AND note != '') AND ";
2346                         }
2347
2348                         if ($view_mode == "published") {
2349                                 $view_query_part = " published = true AND ";
2350                         }
2351
2352                         if ($view_mode == "unread" && $feed != -6) {
2353                                 $view_query_part = " unread = true AND ";
2354                         }
2355
2356                         if ($limit > 0) {
2357                                 $limit_query_part = "LIMIT " . $limit;
2358                         }
2359
2360                         $allow_archived = false;
2361
2362                         $vfeed_query_part = "";
2363
2364                         // override query strategy and enable feed display when searching globally
2365                         if ($search && $search_mode == "all_feeds") {
2366                                 $query_strategy_part = "true";
2367                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2368                         /* tags */
2369                         } else if (!is_numeric($feed)) {
2370                                 $query_strategy_part = "true";
2371                                 $vfeed_query_part = "(SELECT title FROM ttrss_feeds WHERE
2372                                         id = feed_id) as feed_title,";
2373                         } else if ($search && $search_mode == "this_cat") {
2374                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2375
2376                                 if ($feed > 0) {
2377                                         if ($include_children) {
2378                                                 $subcats = getChildCategories($feed, $owner_uid);
2379                                                 array_push($subcats, $feed);
2380                                                 $cats_qpart = join(",", $subcats);
2381                                         } else {
2382                                                 $cats_qpart = $feed;
2383                                         }
2384
2385                                         $query_strategy_part = "ttrss_feeds.cat_id IN ($cats_qpart)";
2386
2387                                 } else {
2388                                         $query_strategy_part = "ttrss_feeds.cat_id IS NULL";
2389                                 }
2390
2391                         } else if ($feed > 0) {
2392
2393                                 if ($cat_view) {
2394
2395                                         if ($feed > 0) {
2396                                                 if ($include_children) {
2397                                                         # sub-cats
2398                                                         $subcats = getChildCategories($feed, $owner_uid);
2399
2400                                                         array_push($subcats, $feed);
2401                                                         $query_strategy_part = "cat_id IN (".
2402                                                                         implode(",", $subcats).")";
2403
2404                                                 } else {
2405                                                         $query_strategy_part = "cat_id = '$feed'";
2406                                                 }
2407
2408                                         } else {
2409                                                 $query_strategy_part = "cat_id IS NULL";
2410                                         }
2411
2412                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2413
2414                                 } else {
2415                                         $query_strategy_part = "feed_id = '$feed'";
2416                                 }
2417                         } else if ($feed == 0 && !$cat_view) { // archive virtual feed
2418                                 $query_strategy_part = "feed_id IS NULL";
2419                                 $allow_archived = true;
2420                         } else if ($feed == 0 && $cat_view) { // uncategorized
2421                                 $query_strategy_part = "cat_id IS NULL AND feed_id IS NOT NULL";
2422                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2423                         } else if ($feed == -1) { // starred virtual feed
2424                                 $query_strategy_part = "marked = true";
2425                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2426                                 $allow_archived = true;
2427
2428                                 if (!$override_order) {
2429                                         $override_order = "last_marked DESC, date_entered DESC, updated DESC";
2430                                 }
2431
2432                         } else if ($feed == -2) { // published virtual feed OR labels category
2433
2434                                 if (!$cat_view) {
2435                                         $query_strategy_part = "published = true";
2436                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2437                                         $allow_archived = true;
2438
2439                                         if (!$override_order) {
2440                                                 $override_order = "last_published DESC, date_entered DESC, updated DESC";
2441                                         }
2442
2443                                 } else {
2444                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2445
2446                                         $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2447
2448                                         $query_strategy_part = "ttrss_labels2.id = ttrss_user_labels2.label_id AND
2449                                                 ttrss_user_labels2.article_id = ref_id";
2450
2451                                 }
2452                         } else if ($feed == -6) { // recently read
2453                                 $query_strategy_part = "unread = false AND last_read IS NOT NULL";
2454                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2455                                 $allow_archived = true;
2456
2457                                 if (!$override_order) $override_order = "last_read DESC";
2458                         } else if ($feed == -3) { // fresh virtual feed
2459                                 $query_strategy_part = "unread = true AND score >= 0";
2460
2461                                 $intl = get_pref("FRESH_ARTICLE_MAX_AGE", $owner_uid);
2462
2463                                 if (DB_TYPE == "pgsql") {
2464                                         $query_strategy_part .= " AND date_entered > NOW() - INTERVAL '$intl hour' ";
2465                                 } else {
2466                                         $query_strategy_part .= " AND date_entered > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
2467                                 }
2468
2469                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2470                         } else if ($feed == -4) { // all articles virtual feed
2471                                 $allow_archived = true;
2472                                 $query_strategy_part = "true";
2473                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2474                         } else if ($feed <= LABEL_BASE_INDEX) { // labels
2475                                 $label_id = feed_to_label_id($feed);
2476
2477                                 $query_strategy_part = "label_id = '$label_id' AND
2478                                         ttrss_labels2.id = ttrss_user_labels2.label_id AND
2479                                         ttrss_user_labels2.article_id = ref_id";
2480
2481                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2482                                 $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2483                                 $allow_archived = true;
2484
2485                         } else {
2486                                 $query_strategy_part = "true";
2487                         }
2488
2489                         $order_by = "score DESC, date_entered DESC, updated DESC";
2490
2491                         if ($view_mode == "unread_first") {
2492                                 $order_by = "unread DESC, $order_by";
2493                         }
2494
2495                         if ($override_order) {
2496                                 $order_by = $override_order;
2497                         }
2498
2499                         $feed_title = "";
2500
2501                         if ($search) {
2502                                 $feed_title = T_sprintf("Search results: %s", $search);
2503                         } else {
2504                                 if ($cat_view) {
2505                                         $feed_title = getCategoryTitle($feed);
2506                                 } else {
2507                                         if (is_numeric($feed) && $feed > 0) {
2508                                                 $result = db_query("SELECT title,site_url,last_error
2509                                                         FROM ttrss_feeds WHERE id = '$feed' AND owner_uid = $owner_uid");
2510
2511                                                 $feed_title = db_fetch_result($result, 0, "title");
2512                                                 $feed_site_url = db_fetch_result($result, 0, "site_url");
2513                                                 $last_error = db_fetch_result($result, 0, "last_error");
2514                                         } else {
2515                                                 $feed_title = getFeedTitle($feed);
2516                                         }
2517                                 }
2518                         }
2519
2520                         $content_query_part = "content as content_preview, cached_content, ";
2521
2522                         if (is_numeric($feed)) {
2523
2524                                 if ($feed >= 0) {
2525                                         $feed_kind = "Feeds";
2526                                 } else {
2527                                         $feed_kind = "Labels";
2528                                 }
2529
2530                                 if ($limit_query_part) {
2531                                         $offset_query_part = "OFFSET $offset";
2532                                 }
2533
2534                                 // proper override_order applied above
2535                                 if ($vfeed_query_part && !$ignore_vfeed_group && get_pref('VFEED_GROUP_BY_FEED', $owner_uid)) {
2536                                         if (!$override_order) {
2537                                                 $order_by = "ttrss_feeds.title, $order_by";
2538                                         } else {
2539                                                 $order_by = "ttrss_feeds.title, $override_order";
2540                                         }
2541                                 }
2542
2543                                 if (!$allow_archived) {
2544                                         $from_qpart = "ttrss_entries,ttrss_user_entries,ttrss_feeds$ext_tables_part";
2545                                         $feed_check_qpart = "ttrss_user_entries.feed_id = ttrss_feeds.id AND";
2546
2547                                 } else {
2548                                         $from_qpart = "ttrss_entries$ext_tables_part,ttrss_user_entries
2549                                                 LEFT JOIN ttrss_feeds ON (feed_id = ttrss_feeds.id)";
2550                                 }
2551
2552                                 if ($vfeed_query_part)
2553                                         $vfeed_query_part .= "favicon_avg_color,";
2554
2555                                 $query = "SELECT DISTINCT
2556                                                 date_entered,
2557                                                 guid,
2558                                                 ttrss_entries.id,ttrss_entries.title,
2559                                                 updated,
2560                                                 label_cache,
2561                                                 tag_cache,
2562                                                 always_display_enclosures,
2563                                                 site_url,
2564                                                 note,
2565                                                 num_comments,
2566                                                 comments,
2567                                                 int_id,
2568                                                 hide_images,
2569                                                 unread,feed_id,marked,published,link,last_read,orig_feed_id,
2570                                                 last_marked, last_published,
2571                                                 $vfeed_query_part
2572                                                 $content_query_part
2573                                                 author,score
2574                                         FROM
2575                                                 $from_qpart
2576                                         WHERE
2577                                         $feed_check_qpart
2578                                         ttrss_user_entries.ref_id = ttrss_entries.id AND
2579                                         ttrss_user_entries.owner_uid = '$owner_uid' AND
2580                                         $search_query_part
2581                                         $filter_query_part
2582                                         $view_query_part
2583                                         $since_id_part
2584                                         $query_strategy_part ORDER BY $order_by
2585                                         $limit_query_part $offset_query_part";
2586
2587                                 if ($_REQUEST["debug"]) print $query;
2588
2589                                 $result = db_query($query);
2590
2591                         } else {
2592                                 // browsing by tag
2593
2594                                 $select_qpart = "SELECT DISTINCT " .
2595                                                                 "date_entered," .
2596                                                                 "guid," .
2597                                                                 "note," .
2598                                                                 "ttrss_entries.id as id," .
2599                                                                 "title," .
2600                                                                 "updated," .
2601                                                                 "unread," .
2602                                                                 "feed_id," .
2603                                                                 "orig_feed_id," .
2604                                                                 "marked," .
2605                                                                 "num_comments, " .
2606                                                                 "comments, " .
2607                                                                 "tag_cache," .
2608                                                                 "label_cache," .
2609                                                                 "link," .
2610                                                                 "last_read," .
2611                                                                 "(SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) AS hide_images," .
2612                                                                 "last_marked, last_published, " .
2613                                                                 $since_id_part .
2614                                                                 $vfeed_query_part .
2615                                                                 $content_query_part .
2616                                                                 "score ";
2617
2618                                 $feed_kind = "Tags";
2619                                 $all_tags = explode(",", $feed);
2620                                 if ($search_mode == 'any') {
2621                                         $tag_sql = "tag_name in (" . implode(", ", array_map("db_quote", $all_tags)) . ")";
2622                                         $from_qpart = " FROM ttrss_entries,ttrss_user_entries,ttrss_tags ";
2623                                         $where_qpart = " WHERE " .
2624                                                                    "ref_id = ttrss_entries.id AND " .
2625                                                                    "ttrss_user_entries.owner_uid = $owner_uid AND " .
2626                                                                    "post_int_id = int_id AND $tag_sql AND " .
2627                                                                    $view_query_part .
2628                                                                    $search_query_part .
2629                                                                    $query_strategy_part . " ORDER BY $order_by " .
2630                                                                    $limit_query_part;
2631
2632                                 } else {
2633                                         $i = 1;
2634                                         $sub_selects = array();
2635                                         $sub_ands = array();
2636                                         foreach ($all_tags as $term) {
2637                                                 array_push($sub_selects, "(SELECT post_int_id from ttrss_tags WHERE tag_name = " . db_quote($term) . " AND owner_uid = $owner_uid) as A$i");
2638                                                 $i++;
2639                                         }
2640                                         if ($i > 2) {
2641                                                 $x = 1;
2642                                                 $y = 2;
2643                                                 do {
2644                                                         array_push($sub_ands, "A$x.post_int_id = A$y.post_int_id");
2645                                                         $x++;
2646                                                         $y++;
2647                                                 } while ($y < $i);
2648                                         }
2649                                         array_push($sub_ands, "A1.post_int_id = ttrss_user_entries.int_id and ttrss_user_entries.owner_uid = $owner_uid");
2650                                         array_push($sub_ands, "ttrss_user_entries.ref_id = ttrss_entries.id");
2651                                         $from_qpart = " FROM " . implode(", ", $sub_selects) . ", ttrss_user_entries, ttrss_entries";
2652                                         $where_qpart = " WHERE " . implode(" AND ", $sub_ands);
2653                                 }
2654                                 //                              error_log("TAG SQL: " . $tag_sql);
2655                                 // $tag_sql = "tag_name = '$feed'";   DEFAULT way
2656
2657                                 //                              error_log("[". $select_qpart . "][" . $from_qpart . "][" .$where_qpart . "]");
2658                                 $result = db_query($select_qpart . $from_qpart . $where_qpart);
2659                         }
2660
2661                         return array($result, $feed_title, $feed_site_url, $last_error);
2662
2663         }
2664
2665         function sanitize($str, $force_remove_images = false, $owner = false, $site_url = false) {
2666                 if (!$owner) $owner = $_SESSION["uid"];
2667
2668                 $res = trim($str); if (!$res) return '';
2669
2670                 if (strpos($res, "href=") === false)
2671                         $res = rewrite_urls($res);
2672
2673                 $charset_hack = '<head>
2674                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
2675                 </head>';
2676
2677                 $res = trim($res); if (!$res) return '';
2678
2679                 libxml_use_internal_errors(true);
2680
2681                 $doc = new DOMDocument();
2682                 $doc->loadHTML($charset_hack . $res);
2683                 $xpath = new DOMXPath($doc);
2684
2685                 $entries = $xpath->query('(//a[@href]|//img[@src])');
2686
2687                 foreach ($entries as $entry) {
2688
2689                         if ($site_url) {
2690
2691                                 if ($entry->hasAttribute('href'))
2692                                         $entry->setAttribute('href',
2693                                                 rewrite_relative_url($site_url, $entry->getAttribute('href')));
2694
2695                                 if ($entry->hasAttribute('src')) {
2696                                         $src = rewrite_relative_url($site_url, $entry->getAttribute('src'));
2697
2698                                         $cached_filename = CACHE_DIR . '/images/' . sha1($src) . '.png';
2699
2700                                         if (file_exists($cached_filename)) {
2701                                                 $src = SELF_URL_PATH . '/image.php?hash=' . sha1($src);
2702                                         }
2703
2704                                         $entry->setAttribute('src', $src);
2705                                 }
2706
2707                                 if ($entry->nodeName == 'img') {
2708                                         if (($owner && get_pref("STRIP_IMAGES", $owner)) ||
2709                                                         $force_remove_images || $_SESSION["bw_limit"]) {
2710
2711                                                 $p = $doc->createElement('p');
2712
2713                                                 $a = $doc->createElement('a');
2714                                                 $a->setAttribute('href', $entry->getAttribute('src'));
2715
2716                                                 $a->appendChild(new DOMText($entry->getAttribute('src')));
2717                                                 $a->setAttribute('target', '_blank');
2718
2719                                                 $p->appendChild($a);
2720
2721                                                 $entry->parentNode->replaceChild($p, $entry);
2722                                         }
2723                                 }
2724                         }
2725
2726                         if (strtolower($entry->nodeName) == "a") {
2727                                 $entry->setAttribute("target", "_blank");
2728                         }
2729                 }
2730
2731                 $entries = $xpath->query('//iframe');
2732                 foreach ($entries as $entry) {
2733                         $entry->setAttribute('sandbox', 'allow-scripts');
2734
2735                 }
2736
2737                 $allowed_elements = array('a', 'address', 'audio', 'article', 'aside',
2738                         'b', 'bdi', 'bdo', 'big', 'blockquote', 'body', 'br',
2739                         'caption', 'cite', 'center', 'code', 'col', 'colgroup',
2740                         'data', 'dd', 'del', 'details', 'div', 'dl', 'font',
2741                         'dt', 'em', 'footer', 'figure', 'figcaption',
2742                         'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'header', 'html', 'i',
2743                         'img', 'ins', 'kbd', 'li', 'main', 'mark', 'nav', 'noscript',
2744                         'ol', 'p', 'pre', 'q', 'ruby', 'rp', 'rt', 's', 'samp', 'section',
2745                         'small', 'source', 'span', 'strike', 'strong', 'sub', 'summary',
2746                         'sup', 'table', 'tbody', 'td', 'tfoot', 'th', 'thead', 'time',
2747                         'tr', 'track', 'tt', 'u', 'ul', 'var', 'wbr', 'video' );
2748
2749                 if ($_SESSION['hasSandbox']) $allowed_elements[] = 'iframe';
2750
2751                 $disallowed_attributes = array('id', 'style', 'class');
2752
2753                 global $pluginhost;
2754
2755                 if (isset($pluginhost)) {
2756                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_SANITIZE) as $plugin) {
2757                                 $retval = $plugin->hook_sanitize($doc, $site_url, $allowed_elements, $disallowed_attributes);
2758                                 if (is_array($retval)) {
2759                                         $doc = $retval[0];
2760                                         $allowed_elements = $retval[1];
2761                                         $disallowed_attributes = $retval[2];
2762                                 } else {
2763                                         $doc = $retval;
2764                                 }
2765                         }
2766                 }
2767
2768                 $doc->removeChild($doc->firstChild); //remove doctype
2769                 $doc = strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes);
2770                 $res = $doc->saveHTML();
2771                 return $res;
2772         }
2773
2774         function strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes) {
2775                 $entries = $doc->getElementsByTagName("*");
2776
2777                 foreach ($entries as $entry) {
2778                         if (!in_array($entry->nodeName, $allowed_elements)) {
2779                                 $entry->parentNode->removeChild($entry);
2780                         }
2781
2782                         if ($entry->hasAttributes()) {
2783                                 $attrs_to_remove = array();
2784
2785                                 foreach ($entry->attributes as $attr) {
2786
2787                                         if (strpos($attr->nodeName, 'on') === 0) {
2788                                                 array_push($attrs_to_remove, $attr);
2789                                         }
2790
2791                                         if (in_array($attr->nodeName, $disallowed_attributes)) {
2792                                                 array_push($attrs_to_remove, $attr);
2793                                         }
2794                                 }
2795
2796                                 foreach ($attrs_to_remove as $attr) {
2797                                         $entry->removeAttributeNode($attr);
2798                                 }
2799                         }
2800                 }
2801
2802                 return $doc;
2803         }
2804
2805         function check_for_update() {
2806                 if (CHECK_FOR_NEW_VERSION && $_SESSION['access_level'] >= 10) {
2807                         $version_url = "http://tt-rss.org/version.php?ver=" . VERSION .
2808                                 "&iid=" . sha1(SELF_URL_PATH);
2809
2810                         $version_data = @fetch_file_contents($version_url);
2811
2812                         if ($version_data) {
2813                                 $version_data = json_decode($version_data, true);
2814                                 if ($version_data && $version_data['version']) {
2815
2816                                         if (version_compare(VERSION, $version_data['version']) == -1) {
2817                                                 return $version_data;
2818                                         }
2819                                 }
2820                         }
2821                 }
2822                 return false;
2823         }
2824
2825         function catchupArticlesById($ids, $cmode, $owner_uid = false) {
2826
2827                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2828                 if (count($ids) == 0) return;
2829
2830                 $tmp_ids = array();
2831
2832                 foreach ($ids as $id) {
2833                         array_push($tmp_ids, "ref_id = '$id'");
2834                 }
2835
2836                 $ids_qpart = join(" OR ", $tmp_ids);
2837
2838                 if ($cmode == 0) {
2839                         db_query("UPDATE ttrss_user_entries SET
2840                         unread = false,last_read = NOW()
2841                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2842                 } else if ($cmode == 1) {
2843                         db_query("UPDATE ttrss_user_entries SET
2844                         unread = true
2845                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2846                 } else {
2847                         db_query("UPDATE ttrss_user_entries SET
2848                         unread = NOT unread,last_read = NOW()
2849                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2850                 }
2851
2852                 /* update ccache */
2853
2854                 $result = db_query("SELECT DISTINCT feed_id FROM ttrss_user_entries
2855                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2856
2857                 while ($line = db_fetch_assoc($result)) {
2858                         ccache_update($line["feed_id"], $owner_uid);
2859                 }
2860         }
2861
2862         function get_article_tags($id, $owner_uid = 0, $tag_cache = false) {
2863
2864                 $a_id = db_escape_string($id);
2865
2866                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2867
2868                 $query = "SELECT DISTINCT tag_name,
2869                         owner_uid as owner FROM
2870                         ttrss_tags WHERE post_int_id = (SELECT int_id FROM ttrss_user_entries WHERE
2871                         ref_id = '$a_id' AND owner_uid = '$owner_uid' LIMIT 1) ORDER BY tag_name";
2872
2873                 $obj_id = md5("TAGS:$owner_uid:$id");
2874                 $tags = array();
2875
2876                 /* check cache first */
2877
2878                 if ($tag_cache === false) {
2879                         $result = db_query("SELECT tag_cache FROM ttrss_user_entries
2880                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
2881
2882                         $tag_cache = db_fetch_result($result, 0, "tag_cache");
2883                 }
2884
2885                 if ($tag_cache) {
2886                         $tags = explode(",", $tag_cache);
2887                 } else {
2888
2889                         /* do it the hard way */
2890
2891                         $tmp_result = db_query($query);
2892
2893                         while ($tmp_line = db_fetch_assoc($tmp_result)) {
2894                                 array_push($tags, $tmp_line["tag_name"]);
2895                         }
2896
2897                         /* update the cache */
2898
2899                         $tags_str = db_escape_string(join(",", $tags));
2900
2901                         db_query("UPDATE ttrss_user_entries
2902                                 SET tag_cache = '$tags_str' WHERE ref_id = '$id'
2903                                 AND owner_uid = $owner_uid");
2904                 }
2905
2906                 return $tags;
2907         }
2908
2909         function trim_array($array) {
2910                 $tmp = $array;
2911                 array_walk($tmp, 'trim');
2912                 return $tmp;
2913         }
2914
2915         function tag_is_valid($tag) {
2916                 if ($tag == '') return false;
2917                 if (preg_match("/^[0-9]*$/", $tag)) return false;
2918                 if (mb_strlen($tag) > 250) return false;
2919
2920                 if (function_exists('iconv')) {
2921                         $tag = iconv("utf-8", "utf-8", $tag);
2922                 }
2923
2924                 if (!$tag) return false;
2925
2926                 return true;
2927         }
2928
2929         function render_login_form() {
2930                 header('Cache-Control: public');
2931
2932                 require_once "login_form.php";
2933                 exit;
2934         }
2935
2936         function format_warning($msg, $id = "") {
2937                 global $link;
2938                 return "<div class=\"warning\" id=\"$id\">
2939                         <img src=\"images/sign_excl.svg\"><div class='inner'>$msg</div></div>";
2940         }
2941
2942         function format_notice($msg, $id = "") {
2943                 global $link;
2944                 return "<div class=\"notice\" id=\"$id\">
2945                         <img src=\"images/sign_info.svg\"><div class='inner'>$msg</div></div>";
2946         }
2947
2948         function format_error($msg, $id = "") {
2949                 global $link;
2950                 return "<div class=\"error\" id=\"$id\">
2951                         <img src=\"images/sign_excl.svg\"><div class='inner'>$msg</div></div>";
2952         }
2953
2954         function print_notice($msg) {
2955                 return print format_notice($msg);
2956         }
2957
2958         function print_warning($msg) {
2959                 return print format_warning($msg);
2960         }
2961
2962         function print_error($msg) {
2963                 return print format_error($msg);
2964         }
2965
2966
2967         function T_sprintf() {
2968                 $args = func_get_args();
2969                 return vsprintf(__(array_shift($args)), $args);
2970         }
2971
2972         function format_inline_player($url, $ctype) {
2973
2974                 $entry = "";
2975
2976                 $url = htmlspecialchars($url);
2977
2978                 if (strpos($ctype, "audio/") === 0) {
2979
2980                         if ($_SESSION["hasAudio"] && (strpos($ctype, "ogg") !== false ||
2981                                 $_SESSION["hasMp3"])) {
2982
2983                                 $entry .= "<audio controls>
2984                                         <source type=\"$ctype\" src=\"$url\"></source>
2985                                         </audio>";
2986
2987                         } else {
2988
2989                                 $entry .= "<object type=\"application/x-shockwave-flash\"
2990                                         data=\"lib/button/musicplayer.swf?song_url=$url\"
2991                                         width=\"17\" height=\"17\" style='float : left; margin-right : 5px;'>
2992                                         <param name=\"movie\"
2993                                                 value=\"lib/button/musicplayer.swf?song_url=$url\" />
2994                                         </object>";
2995                         }
2996
2997                         if ($entry) $entry .= "&nbsp; <a target=\"_blank\"
2998                                 href=\"$url\">" . basename($url) . "</a>";
2999
3000                         return $entry;
3001
3002                 }
3003
3004                 return "";
3005
3006 /*              $filename = substr($url, strrpos($url, "/")+1);
3007
3008                 $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
3009                         $filename . " (" . $ctype . ")" . "</a>"; */
3010
3011         }
3012
3013         function format_article($id, $mark_as_read = true, $zoom_mode = false, $owner_uid = false) {
3014                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3015
3016                 $rv = array();
3017
3018                 $rv['id'] = $id;
3019
3020                 /* we can figure out feed_id from article id anyway, why do we
3021                  * pass feed_id here? let's ignore the argument :(*/
3022
3023                 $result = db_query("SELECT feed_id FROM ttrss_user_entries
3024                         WHERE ref_id = '$id'");
3025
3026                 $feed_id = (int) db_fetch_result($result, 0, "feed_id");
3027
3028                 $rv['feed_id'] = $feed_id;
3029
3030                 //if (!$zoom_mode) { print "<article id='$id'><![CDATA["; };
3031
3032                 if ($mark_as_read) {
3033                         $result = db_query("UPDATE ttrss_user_entries
3034                                 SET unread = false,last_read = NOW()
3035                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
3036
3037                         ccache_update($feed_id, $owner_uid);
3038                 }
3039
3040                 $result = db_query("SELECT id,title,link,content,feed_id,comments,int_id,
3041                         ".SUBSTRING_FOR_DATE."(updated,1,16) as updated,
3042                         (SELECT site_url FROM ttrss_feeds WHERE id = feed_id) as site_url,
3043                         (SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) as hide_images,
3044                         (SELECT always_display_enclosures FROM ttrss_feeds WHERE id = feed_id) as always_display_enclosures,
3045                         num_comments,
3046                         tag_cache,
3047                         author,
3048                         orig_feed_id,
3049                         note,
3050                         cached_content
3051                         FROM ttrss_entries,ttrss_user_entries
3052                         WHERE   id = '$id' AND ref_id = id AND owner_uid = $owner_uid");
3053
3054                 if ($result) {
3055
3056                         $line = db_fetch_assoc($result);
3057
3058                         $tag_cache = $line["tag_cache"];
3059
3060                         $line["tags"] = get_article_tags($id, $owner_uid, $line["tag_cache"]);
3061                         unset($line["tag_cache"]);
3062
3063                         $line["content"] = sanitize($line["content"], false, $owner_uid,        $line["site_url"]);
3064
3065                         global $pluginhost;
3066
3067                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_RENDER_ARTICLE) as $p) {
3068                                 $line = $p->hook_render_article($line);
3069                         }
3070
3071                         $num_comments = $line["num_comments"];
3072                         $entry_comments = "";
3073
3074                         if ($num_comments > 0) {
3075                                 if ($line["comments"]) {
3076                                         $comments_url = htmlspecialchars($line["comments"]);
3077                                 } else {
3078                                         $comments_url = htmlspecialchars($line["link"]);
3079                                 }
3080                                 $entry_comments = "<a target='_blank' href=\"$comments_url\">$num_comments comments</a>";
3081                         } else {
3082                                 if ($line["comments"] && $line["link"] != $line["comments"]) {
3083                                         $entry_comments = "<a target='_blank' href=\"".htmlspecialchars($line["comments"])."\">comments</a>";
3084                                 }
3085                         }
3086
3087                         if ($zoom_mode) {
3088                                 header("Content-Type: text/html");
3089                                 $rv['content'] .= "<html><head>
3090                                                 <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"/>
3091                                                 <title>Tiny Tiny RSS - ".$line["title"]."</title>
3092                                                 <link rel=\"stylesheet\" type=\"text/css\" href=\"tt-rss.css\">
3093                                         </head><body id=\"ttrssZoom\">";
3094                         }
3095
3096                         $rv['content'] .= "<div class=\"postReply\" id=\"POST-$id\">";
3097
3098                         $rv['content'] .= "<div class=\"postHeader\" id=\"POSTHDR-$id\">";
3099
3100                         $entry_author = $line["author"];
3101
3102                         if ($entry_author) {
3103                                 $entry_author = __(" - ") . $entry_author;
3104                         }
3105
3106                         $parsed_updated = make_local_datetime($line["updated"], true,
3107                                 $owner_uid, true);
3108
3109                         $rv['content'] .= "<div class=\"postDate\">$parsed_updated</div>";
3110
3111                         if ($line["link"]) {
3112                                 $rv['content'] .= "<div class='postTitle'><a target='_blank'
3113                                         title=\"".htmlspecialchars($line['title'])."\"
3114                                         href=\"" .
3115                                         htmlspecialchars($line["link"]) . "\">" .
3116                                         $line["title"] . "</a>" .
3117                                         "<span class='author'>$entry_author</span></div>";
3118                         } else {
3119                                 $rv['content'] .= "<div class='postTitle'>" . $line["title"] . "$entry_author</div>";
3120                         }
3121
3122                         $tags_str = format_tags_string($line["tags"], $id);
3123                         $tags_str_full = join(", ", $line["tags"]);
3124
3125                         if (!$tags_str_full) $tags_str_full = __("no tags");
3126
3127                         if (!$entry_comments) $entry_comments = "&nbsp;"; # placeholder
3128
3129                         $rv['content'] .= "<div class='postTags' style='float : right'>
3130                                 <img src='images/tag.png'
3131                                 class='tagsPic' alt='Tags' title='Tags'>&nbsp;";
3132
3133                         if (!$zoom_mode) {
3134                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>
3135                                         <a title=\"".__('Edit tags for this article')."\"
3136                                         href=\"#\" onclick=\"editArticleTags($id, $feed_id)\">(+)</a>";
3137
3138                                 $rv['content'] .= "<div dojoType=\"dijit.Tooltip\"
3139                                         id=\"ATSTRTIP-$id\" connectId=\"ATSTR-$id\"
3140                                         position=\"below\">$tags_str_full</div>";
3141
3142                                 global $pluginhost;
3143                                 foreach ($pluginhost->get_hooks($pluginhost::HOOK_ARTICLE_BUTTON) as $p) {
3144                                         $rv['content'] .= $p->hook_article_button($line);
3145                                 }
3146
3147                         } else {
3148                                 $tags_str = strip_tags($tags_str);
3149                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>";
3150                         }
3151                         $rv['content'] .= "</div>";
3152                         $rv['content'] .= "<div clear='both'>";
3153
3154                         global $pluginhost;
3155                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_ARTICLE_LEFT_BUTTON) as $p) {
3156                                 $rv['content'] .= $p->hook_article_left_button($line);
3157                         }
3158
3159                         $rv['content'] .= "$entry_comments</div>";
3160
3161                         if ($line["orig_feed_id"]) {
3162
3163                                 $tmp_result = db_query("SELECT * FROM ttrss_archived_feeds
3164                                         WHERE id = ".$line["orig_feed_id"]);
3165
3166                                 if (db_num_rows($tmp_result) != 0) {
3167
3168                                         $rv['content'] .= "<div clear='both'>";
3169                                         $rv['content'] .= __("Originally from:");
3170
3171                                         $rv['content'] .= "&nbsp;";
3172
3173                                         $tmp_line = db_fetch_assoc($tmp_result);
3174
3175                                         $rv['content'] .= "<a target='_blank'
3176                                                 href=' " . htmlspecialchars($tmp_line['site_url']) . "'>" .
3177                                                 $tmp_line['title'] . "</a>";
3178
3179                                         $rv['content'] .= "&nbsp;";
3180
3181                                         $rv['content'] .= "<a target='_blank' href='" . htmlspecialchars($tmp_line['feed_url']) . "'>";
3182                                         $rv['content'] .= "<img title='".__('Feed URL')."'class='tinyFeedIcon' src='images/pub_set.svg'></a>";
3183
3184                                         $rv['content'] .= "</div>";
3185                                 }
3186                         }
3187
3188                         $rv['content'] .= "</div>";
3189
3190                         $rv['content'] .= "<div id=\"POSTNOTE-$id\">";
3191                                 if ($line['note']) {
3192                                         $rv['content'] .= format_article_note($id, $line['note'], !$zoom_mode);
3193                                 }
3194                         $rv['content'] .= "</div>";
3195
3196                         $rv['content'] .= "<div class=\"postContent\">";
3197
3198                         $rv['content'] .= $line["content"];
3199                         $rv['content'] .= format_article_enclosures($id,
3200                                 sql_bool_to_bool($line["always_display_enclosures"]),
3201                                 $line["content"],
3202                                 sql_bool_to_bool($line["hide_images"]));
3203
3204                         $rv['content'] .= "</div>";
3205
3206                         $rv['content'] .= "</div>";
3207
3208                 }
3209
3210                 if ($zoom_mode) {
3211                         $rv['content'] .= "
3212                                 <div class='footer'>
3213                                 <button onclick=\"return window.close()\">".
3214                                         __("Close this window")."</button></div>";
3215                         $rv['content'] .= "</body></html>";
3216                 }
3217
3218                 return $rv;
3219
3220         }
3221
3222         function print_checkpoint($n, $s) {
3223                 $ts = microtime(true);
3224                 echo sprintf("<!-- CP[$n] %.4f seconds -->", $ts - $s);
3225                 return $ts;
3226         }
3227
3228         function sanitize_tag($tag) {
3229                 $tag = trim($tag);
3230
3231                 $tag = mb_strtolower($tag, 'utf-8');
3232
3233                 $tag = preg_replace('/[\'\"\+\>\<]/', "", $tag);
3234
3235 //              $tag = str_replace('"', "", $tag);
3236 //              $tag = str_replace("+", " ", $tag);
3237                 $tag = str_replace("technorati tag: ", "", $tag);
3238
3239                 return $tag;
3240         }
3241
3242         function get_self_url_prefix() {
3243                 if (strrpos(SELF_URL_PATH, "/") === strlen(SELF_URL_PATH)-1) {
3244                         return substr(SELF_URL_PATH, 0, strlen(SELF_URL_PATH)-1);
3245                 } else {
3246                         return SELF_URL_PATH;
3247                 }
3248         }
3249
3250         /**
3251          * Compute the Mozilla Firefox feed adding URL from server HOST and REQUEST_URI.
3252          *
3253          * @return string The Mozilla Firefox feed adding URL.
3254          */
3255         function add_feed_url() {
3256                 //$url_path = ($_SERVER['HTTPS'] != "on" ? 'http://' :  'https://') . $_SERVER["HTTP_HOST"] . parse_url($_SERVER["REQUEST_URI"], PHP_URL_PATH);
3257
3258                 $url_path = get_self_url_prefix() .
3259                         "/public.php?op=subscribe&feed_url=%s";
3260                 return $url_path;
3261         } // function add_feed_url
3262
3263         function encrypt_password($pass, $salt = '', $mode2 = false) {
3264                 if ($salt && $mode2) {
3265                         return "MODE2:" . hash('sha256', $salt . $pass);
3266                 } else if ($salt) {
3267                         return "SHA1X:" . sha1("$salt:$pass");
3268                 } else {
3269                         return "SHA1:" . sha1($pass);
3270                 }
3271         } // function encrypt_password
3272
3273         function load_filters($feed_id, $owner_uid, $action_id = false) {
3274                 $filters = array();
3275
3276                 $cat_id = (int)getFeedCategory($feed_id);
3277
3278                 $result = db_query("SELECT * FROM ttrss_filters2 WHERE
3279                         owner_uid = $owner_uid AND enabled = true ORDER BY order_id, title");
3280
3281                 $check_cats = join(",", array_merge(
3282                         getParentCategories($cat_id, $owner_uid),
3283                         array($cat_id)));
3284
3285                 while ($line = db_fetch_assoc($result)) {
3286                         $filter_id = $line["id"];
3287
3288                         $result2 = db_query("SELECT
3289                                 r.reg_exp, r.inverse, r.feed_id, r.cat_id, r.cat_filter, t.name AS type_name
3290                                 FROM ttrss_filters2_rules AS r,
3291                                 ttrss_filter_types AS t
3292                                 WHERE
3293                                         (cat_id IS NULL OR cat_id IN ($check_cats)) AND
3294                                         (feed_id IS NULL OR feed_id = '$feed_id') AND
3295                                         filter_type = t.id AND filter_id = '$filter_id'");
3296
3297                         $rules = array();
3298                         $actions = array();
3299
3300                         while ($rule_line = db_fetch_assoc($result2)) {
3301 #                               print_r($rule_line);
3302
3303                                 $rule = array();
3304                                 $rule["reg_exp"] = $rule_line["reg_exp"];
3305                                 $rule["type"] = $rule_line["type_name"];
3306                                 $rule["inverse"] = sql_bool_to_bool($rule_line["inverse"]);
3307
3308                                 array_push($rules, $rule);
3309                         }
3310
3311                         $result2 = db_query("SELECT a.action_param,t.name AS type_name
3312                                 FROM ttrss_filters2_actions AS a,
3313                                 ttrss_filter_actions AS t
3314                                 WHERE
3315                                         action_id = t.id AND filter_id = '$filter_id'");
3316
3317                         while ($action_line = db_fetch_assoc($result2)) {
3318 #                               print_r($action_line);
3319
3320                                 $action = array();
3321                                 $action["type"] = $action_line["type_name"];
3322                                 $action["param"] = $action_line["action_param"];
3323
3324                                 array_push($actions, $action);
3325                         }
3326
3327
3328                         $filter = array();
3329                         $filter["match_any_rule"] = sql_bool_to_bool($line["match_any_rule"]);
3330                         $filter["inverse"] = sql_bool_to_bool($line["inverse"]);
3331                         $filter["rules"] = $rules;
3332                         $filter["actions"] = $actions;
3333
3334                         if (count($rules) > 0 && count($actions) > 0) {
3335                                 array_push($filters, $filter);
3336                         }
3337                 }
3338
3339                 return $filters;
3340         }
3341
3342         function get_score_pic($score) {
3343                 if ($score > 100) {
3344                         return "score_high.png";
3345                 } else if ($score > 0) {
3346                         return "score_half_high.png";
3347                 } else if ($score < -100) {
3348                         return "score_low.png";
3349                 } else if ($score < 0) {
3350                         return "score_half_low.png";
3351                 } else {
3352                         return "score_neutral.png";
3353                 }
3354         }
3355
3356         function feed_has_icon($id) {
3357                 return is_file(ICONS_DIR . "/$id.ico") && filesize(ICONS_DIR . "/$id.ico") > 0;
3358         }
3359
3360         function init_plugins() {
3361                 global $pluginhost;
3362
3363                 $pluginhost = new PluginHost(Db::get());
3364                 $pluginhost->load(PLUGINS, $pluginhost::KIND_ALL);
3365
3366                 return true;
3367         }
3368
3369         function format_tags_string($tags, $id) {
3370
3371                 $tags_str = "";
3372                 $tags_nolinks_str = "";
3373
3374                 $num_tags = 0;
3375
3376                 $tag_limit = 6;
3377
3378                 $formatted_tags = array();
3379
3380                 foreach ($tags as $tag) {
3381                         $num_tags++;
3382                         $tag_escaped = str_replace("'", "\\'", $tag);
3383
3384                         if (mb_strlen($tag) > 30) {
3385                                 $tag = truncate_string($tag, 30);
3386                         }
3387
3388                         $tag_str = "<a href=\"javascript:viewfeed('$tag_escaped')\">$tag</a>";
3389
3390                         array_push($formatted_tags, $tag_str);
3391
3392                         $tmp_tags_str = implode(", ", $formatted_tags);
3393
3394                         if ($num_tags == $tag_limit || mb_strlen($tmp_tags_str) > 150) {
3395                                 break;
3396                         }
3397                 }
3398
3399                 $tags_str = implode(", ", $formatted_tags);
3400
3401                 if ($num_tags < count($tags)) {
3402                         $tags_str .= ", &hellip;";
3403                 }
3404
3405                 if ($num_tags == 0) {
3406                         $tags_str = __("no tags");
3407                 }
3408
3409                 return $tags_str;
3410
3411         }
3412
3413         function format_article_labels($labels, $id) {
3414
3415                 if (is_array($labels)) return '';
3416
3417                 $labels_str = "";
3418
3419                 foreach ($labels as $l) {
3420                         $labels_str .= sprintf("<span class='hlLabelRef'
3421                                 style='color : %s; background-color : %s'>%s</span>",
3422                                         $l[2], $l[3], $l[1]);
3423                         }
3424
3425                 return $labels_str;
3426
3427         }
3428
3429         function format_article_note($id, $note, $allow_edit = true) {
3430
3431                 $str = "<div class='articleNote'        onclick=\"editArticleNote($id)\">
3432                         <div class='noteEdit' onclick=\"editArticleNote($id)\">".
3433                         ($allow_edit ? __('(edit note)') : "")."</div>$note</div>";
3434
3435                 return $str;
3436         }
3437
3438
3439         function get_feed_category($feed_cat, $parent_cat_id = false) {
3440                 if ($parent_cat_id) {
3441                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3442                         $parent_insert = "'$parent_cat_id'";
3443                 } else {
3444                         $parent_qpart = "parent_cat IS NULL";
3445                         $parent_insert = "NULL";
3446                 }
3447
3448                 $result = db_query(
3449                         "SELECT id FROM ttrss_feed_categories
3450                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3451
3452                 if (db_num_rows($result) == 0) {
3453                         return false;
3454                 } else {
3455                         return db_fetch_result($result, 0, "id");
3456                 }
3457         }
3458
3459         function add_feed_category($feed_cat, $parent_cat_id = false) {
3460
3461                 if (!$feed_cat) return false;
3462
3463                 db_query("BEGIN");
3464
3465                 if ($parent_cat_id) {
3466                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3467                         $parent_insert = "'$parent_cat_id'";
3468                 } else {
3469                         $parent_qpart = "parent_cat IS NULL";
3470                         $parent_insert = "NULL";
3471                 }
3472
3473                 $feed_cat = mb_substr($feed_cat, 0, 250);
3474
3475                 $result = db_query(
3476                         "SELECT id FROM ttrss_feed_categories
3477                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3478
3479                 if (db_num_rows($result) == 0) {
3480
3481                         $result = db_query(
3482                                 "INSERT INTO ttrss_feed_categories (owner_uid,title,parent_cat)
3483                                 VALUES ('".$_SESSION["uid"]."', '$feed_cat', $parent_insert)");
3484
3485                         db_query("COMMIT");
3486
3487                         return true;
3488                 }
3489
3490                 return false;
3491         }
3492
3493         function getArticleFeed($id) {
3494                 $result = db_query("SELECT feed_id FROM ttrss_user_entries
3495                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
3496
3497                 if (db_num_rows($result) != 0) {
3498                         return db_fetch_result($result, 0, "feed_id");
3499                 } else {
3500                         return 0;
3501                 }
3502         }
3503
3504         /**
3505          * Fixes incomplete URLs by prepending "http://".
3506          * Also replaces feed:// with http://, and
3507          * prepends a trailing slash if the url is a domain name only.
3508          *
3509          * @param string $url Possibly incomplete URL
3510          *
3511          * @return string Fixed URL.
3512          */
3513         function fix_url($url) {
3514                 if (strpos($url, '://') === false) {
3515                         $url = 'http://' . $url;
3516                 } else if (substr($url, 0, 5) == 'feed:') {
3517                         $url = 'http:' . substr($url, 5);
3518                 }
3519
3520                 //prepend slash if the URL has no slash in it
3521                 // "http://www.example" -> "http://www.example/"
3522                 if (strpos($url, '/', strpos($url, ':') + 3) === false) {
3523                         $url .= '/';
3524                 }
3525
3526                 if ($url != "http:///")
3527                         return $url;
3528                 else
3529                         return '';
3530         }
3531
3532         function validate_feed_url($url) {
3533                 $parts = parse_url($url);
3534
3535                 return ($parts['scheme'] == 'http' || $parts['scheme'] == 'feed' || $parts['scheme'] == 'https');
3536
3537         }
3538
3539         function get_article_enclosures($id) {
3540
3541                 $query = "SELECT * FROM ttrss_enclosures
3542                         WHERE post_id = '$id' AND content_url != ''";
3543
3544                 $rv = array();
3545
3546                 $result = db_query($query);
3547
3548                 if (db_num_rows($result) > 0) {
3549                         while ($line = db_fetch_assoc($result)) {
3550                                 array_push($rv, $line);
3551                         }
3552                 }
3553
3554                 return $rv;
3555         }
3556
3557         function save_email_address($email) {
3558                 // FIXME: implement persistent storage of emails
3559
3560                 if (!$_SESSION['stored_emails'])
3561                         $_SESSION['stored_emails'] = array();
3562
3563                 if (!in_array($email, $_SESSION['stored_emails']))
3564                         array_push($_SESSION['stored_emails'], $email);
3565         }
3566
3567
3568         function get_feed_access_key($feed_id, $is_cat, $owner_uid = false) {
3569
3570                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3571
3572                 $sql_is_cat = bool_to_sql_bool($is_cat);
3573
3574                 $result = db_query("SELECT access_key FROM ttrss_access_keys
3575                         WHERE feed_id = '$feed_id'      AND is_cat = $sql_is_cat
3576                         AND owner_uid = " . $owner_uid);
3577
3578                 if (db_num_rows($result) == 1) {
3579                         return db_fetch_result($result, 0, "access_key");
3580                 } else {
3581                         $key = db_escape_string(sha1(uniqid(rand(), true)));
3582
3583                         $result = db_query("INSERT INTO ttrss_access_keys
3584                                 (access_key, feed_id, is_cat, owner_uid)
3585                                 VALUES ('$key', '$feed_id', $sql_is_cat, '$owner_uid')");
3586
3587                         return $key;
3588                 }
3589                 return false;
3590         }
3591
3592         function get_feeds_from_html($url, $content)
3593         {
3594                 $url     = fix_url($url);
3595                 $baseUrl = substr($url, 0, strrpos($url, '/') + 1);
3596
3597                 libxml_use_internal_errors(true);
3598
3599                 $doc = new DOMDocument();
3600                 $doc->loadHTML($content);
3601                 $xpath = new DOMXPath($doc);
3602                 $entries = $xpath->query('/html/head/link[@rel="alternate"]');
3603                 $feedUrls = array();
3604                 foreach ($entries as $entry) {
3605                         if ($entry->hasAttribute('href')) {
3606                                 $title = $entry->getAttribute('title');
3607                                 if ($title == '') {
3608                                         $title = $entry->getAttribute('type');
3609                                 }
3610                                 $feedUrl = rewrite_relative_url(
3611                                         $baseUrl, $entry->getAttribute('href')
3612                                 );
3613                                 $feedUrls[$feedUrl] = $title;
3614                         }
3615                 }
3616                 return $feedUrls;
3617         }
3618
3619         function is_html($content) {
3620                 return preg_match("/<html|DOCTYPE html/i", substr($content, 0, 20)) !== 0;
3621         }
3622
3623         function url_is_html($url, $login = false, $pass = false) {
3624                 return is_html(fetch_file_contents($url, false, $login, $pass));
3625         }
3626
3627         function print_label_select($name, $value, $attributes = "") {
3628
3629                 $result = db_query("SELECT caption FROM ttrss_labels2
3630                         WHERE owner_uid = '".$_SESSION["uid"]."' ORDER BY caption");
3631
3632                 print "<select default=\"$value\" name=\"" . htmlspecialchars($name) .
3633                         "\" $attributes onchange=\"labelSelectOnChange(this)\" >";
3634
3635                 while ($line = db_fetch_assoc($result)) {
3636
3637                         $issel = ($line["caption"] == $value) ? "selected=\"1\"" : "";
3638
3639                         print "<option value=\"".htmlspecialchars($line["caption"])."\"
3640                                 $issel>" . htmlspecialchars($line["caption"]) . "</option>";
3641
3642                 }
3643
3644 #               print "<option value=\"ADD_LABEL\">" .__("Add label...") . "</option>";
3645
3646                 print "</select>";
3647
3648
3649         }
3650
3651         function format_article_enclosures($id, $always_display_enclosures,
3652                                         $article_content, $hide_images = false) {
3653
3654                 $result = get_article_enclosures($id);
3655                 $rv = '';
3656
3657                 if (count($result) > 0) {
3658
3659                         $entries_html = array();
3660                         $entries = array();
3661                         $entries_inline = array();
3662
3663                         foreach ($result as $line) {
3664
3665                                 $url = $line["content_url"];
3666                                 $ctype = $line["content_type"];
3667
3668                                 if (!$ctype) $ctype = __("unknown type");
3669
3670                                 $filename = substr($url, strrpos($url, "/")+1);
3671
3672                                 $player = format_inline_player($url, $ctype);
3673
3674                                 if ($player) array_push($entries_inline, $player);
3675
3676 #                               $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
3677 #                                       $filename . " (" . $ctype . ")" . "</a>";
3678
3679                                 $entry = "<div onclick=\"window.open('".htmlspecialchars($url)."')\"
3680                                         dojoType=\"dijit.MenuItem\">$filename ($ctype)</div>";
3681
3682                                 array_push($entries_html, $entry);
3683
3684                                 $entry = array();
3685
3686                                 $entry["type"] = $ctype;
3687                                 $entry["filename"] = $filename;
3688                                 $entry["url"] = $url;
3689
3690                                 array_push($entries, $entry);
3691                         }
3692
3693                         if ($_SESSION['uid'] && !get_pref("STRIP_IMAGES") && !$_SESSION["bw_limit"]) {
3694                                 if ($always_display_enclosures ||
3695                                                         !preg_match("/<img/i", $article_content)) {
3696
3697                                         foreach ($entries as $entry) {
3698
3699                                                 if (preg_match("/image/", $entry["type"]) ||
3700                                                                 preg_match("/\.(jpg|png|gif|bmp)/i", $entry["filename"])) {
3701
3702                                                                 if (!$hide_images) {
3703                                                                         $rv .= "<p><img
3704                                                                         alt=\"".htmlspecialchars($entry["filename"])."\"
3705                                                                         src=\"" .htmlspecialchars($entry["url"]) . "\"/></p>";
3706                                                                 } else {
3707                                                                         $rv .= "<p><a target=\"_blank\"
3708                                                                         href=\"".htmlspecialchars($entry["url"])."\"
3709                                                                         >" .htmlspecialchars($entry["url"]) . "</a></p>";
3710
3711                                                                 }
3712                                                 }
3713                                         }
3714                                 }
3715                         }
3716
3717                         if (count($entries_inline) > 0) {
3718                                 $rv .= "<hr clear='both'/>";
3719                                 foreach ($entries_inline as $entry) { $rv .= $entry; };
3720                                 $rv .= "<hr clear='both'/>";
3721                         }
3722
3723                         $rv .= "<select class=\"attachments\" onchange=\"openSelectedAttachment(this)\">".
3724                                 "<option value=''>" . __('Attachments')."</option>";
3725
3726                         foreach ($entries as $entry) {
3727                                 $rv .= "<option value=\"".htmlspecialchars($entry["url"])."\">" . htmlspecialchars($entry["filename"]) . "</option>";
3728
3729                         };
3730
3731                         $rv .= "</select>";
3732                 }
3733
3734                 return $rv;
3735         }
3736
3737         function getLastArticleId() {
3738                 $result = db_query("SELECT MAX(ref_id) AS id FROM ttrss_user_entries
3739                         WHERE owner_uid = " . $_SESSION["uid"]);
3740
3741                 if (db_num_rows($result) == 1) {
3742                         return db_fetch_result($result, 0, "id");
3743                 } else {
3744                         return -1;
3745                 }
3746         }
3747
3748         function build_url($parts) {
3749                 return $parts['scheme'] . "://" . $parts['host'] . $parts['path'];
3750         }
3751
3752         /**
3753          * Converts a (possibly) relative URL to a absolute one.
3754          *
3755          * @param string $url     Base URL (i.e. from where the document is)
3756          * @param string $rel_url Possibly relative URL in the document
3757          *
3758          * @return string Absolute URL
3759          */
3760         function rewrite_relative_url($url, $rel_url) {
3761                 if (strpos($rel_url, "magnet:") === 0) {
3762                         return $rel_url;
3763                 } else if (strpos($rel_url, "://") !== false) {
3764                         return $rel_url;
3765                 } else if (strpos($rel_url, "//") === 0) {
3766                         # protocol-relative URL (rare but they exist)
3767                         return $rel_url;
3768                 } else if (strpos($rel_url, "/") === 0)
3769                 {
3770                         $parts = parse_url($url);
3771                         $parts['path'] = $rel_url;
3772
3773                         return build_url($parts);
3774
3775                 } else {
3776                         $parts = parse_url($url);
3777                         if (!isset($parts['path'])) {
3778                                 $parts['path'] = '/';
3779                         }
3780                         $dir = $parts['path'];
3781                         if (substr($dir, -1) !== '/') {
3782                                 $dir = dirname($parts['path']);
3783                                 $dir !== '/' && $dir .= '/';
3784                         }
3785                         $parts['path'] = $dir . $rel_url;
3786
3787                         return build_url($parts);
3788                 }
3789         }
3790
3791         function sphinx_search($query, $offset = 0, $limit = 30) {
3792                 require_once 'lib/sphinxapi.php';
3793
3794                 $sphinxClient = new SphinxClient();
3795
3796                 $sphinxpair = explode(":", SPHINX_SERVER, 2);
3797
3798                 $sphinxClient->SetServer($sphinxpair[0], $sphinxpair[1]);
3799                 $sphinxClient->SetConnectTimeout(1);
3800
3801                 $sphinxClient->SetFieldWeights(array('title' => 70, 'content' => 30,
3802                         'feed_title' => 20));
3803
3804                 $sphinxClient->SetMatchMode(SPH_MATCH_EXTENDED2);
3805                 $sphinxClient->SetRankingMode(SPH_RANK_PROXIMITY_BM25);
3806                 $sphinxClient->SetLimits($offset, $limit, 1000);
3807                 $sphinxClient->SetArrayResult(false);
3808                 $sphinxClient->SetFilter('owner_uid', array($_SESSION['uid']));
3809
3810                 $result = $sphinxClient->Query($query, SPHINX_INDEX);
3811
3812                 $ids = array();
3813
3814                 if (is_array($result['matches'])) {
3815                         foreach (array_keys($result['matches']) as $int_id) {
3816                                 $ref_id = $result['matches'][$int_id]['attrs']['ref_id'];
3817                                 array_push($ids, $ref_id);
3818                         }
3819                 }
3820
3821                 return $ids;
3822         }
3823
3824         function cleanup_tags($days = 14, $limit = 1000) {
3825
3826                 if (DB_TYPE == "pgsql") {
3827                         $interval_query = "date_updated < NOW() - INTERVAL '$days days'";
3828                 } else if (DB_TYPE == "mysql") {
3829                         $interval_query = "date_updated < DATE_SUB(NOW(), INTERVAL $days DAY)";
3830                 }
3831
3832                 $tags_deleted = 0;
3833
3834                 while ($limit > 0) {
3835                         $limit_part = 500;
3836
3837                         $query = "SELECT ttrss_tags.id AS id
3838                                 FROM ttrss_tags, ttrss_user_entries, ttrss_entries
3839                                 WHERE post_int_id = int_id AND $interval_query AND
3840                                 ref_id = ttrss_entries.id AND tag_cache != '' LIMIT $limit_part";
3841
3842                         $result = db_query($query);
3843
3844                         $ids = array();
3845
3846                         while ($line = db_fetch_assoc($result)) {
3847                                 array_push($ids, $line['id']);
3848                         }
3849
3850                         if (count($ids) > 0) {
3851                                 $ids = join(",", $ids);
3852
3853                                 $tmp_result = db_query("DELETE FROM ttrss_tags WHERE id IN ($ids)");
3854                                 $tags_deleted += db_affected_rows($tmp_result);
3855                         } else {
3856                                 break;
3857                         }
3858
3859                         $limit -= $limit_part;
3860                 }
3861
3862                 return $tags_deleted;
3863         }
3864
3865         function print_user_stylesheet() {
3866                 $value = get_pref('USER_STYLESHEET');
3867
3868                 if ($value) {
3869                         print "<style type=\"text/css\">";
3870                         print str_replace("<br/>", "\n", $value);
3871                         print "</style>";
3872                 }
3873
3874         }
3875
3876         function rewrite_urls($html) {
3877                 libxml_use_internal_errors(true);
3878
3879                 $charset_hack = '<head>
3880                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
3881                 </head>';
3882
3883                 $doc = new DOMDocument();
3884                 $doc->loadHTML($charset_hack . $html);
3885                 $xpath = new DOMXPath($doc);
3886
3887                 $entries = $xpath->query('//*/text()');
3888
3889                 foreach ($entries as $entry) {
3890                         if (strstr($entry->wholeText, "://") !== false) {
3891                                 $text = preg_replace("/((?<!=.)((http|https|ftp)+):\/\/[^ ,!]+)/i",
3892                                         "<a target=\"_blank\" href=\"\\1\">\\1</a>", $entry->wholeText);
3893
3894                                 if ($text != $entry->wholeText) {
3895                                         $cdoc = new DOMDocument();
3896                                         $cdoc->loadHTML($charset_hack . $text);
3897
3898
3899                                         foreach ($cdoc->childNodes as $cnode) {
3900                                                 $cnode = $doc->importNode($cnode, true);
3901
3902                                                 if ($cnode) {
3903                                                         $entry->parentNode->insertBefore($cnode);
3904                                                 }
3905                                         }
3906
3907                                         $entry->parentNode->removeChild($entry);
3908
3909                                 }
3910                         }
3911                 }
3912
3913                 $node = $doc->getElementsByTagName('body')->item(0);
3914
3915                 // http://tt-rss.org/forum/viewtopic.php?f=1&t=970
3916                 if ($node)
3917                         return $doc->saveXML($node);
3918                 else
3919                         return $html;
3920         }
3921
3922         function filter_to_sql($filter, $owner_uid) {
3923                 $query = array();
3924
3925                 if (DB_TYPE == "pgsql")
3926                         $reg_qpart = "~";
3927                 else
3928                         $reg_qpart = "REGEXP";
3929
3930                 foreach ($filter["rules"] AS $rule) {
3931                         $regexp_valid = preg_match('/' . $rule['reg_exp'] . '/',
3932                                 $rule['reg_exp']) !== FALSE;
3933
3934                         if ($regexp_valid) {
3935
3936                                 $rule['reg_exp'] = db_escape_string($rule['reg_exp']);
3937
3938                                         switch ($rule["type"]) {
3939                                         case "title":
3940                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
3941                                                         $rule['reg_exp'] . "')";
3942                                                 break;
3943                                         case "content":
3944                                                 $qpart = "LOWER(ttrss_entries.content) $reg_qpart LOWER('".
3945                                                         $rule['reg_exp'] . "')";
3946                                                 break;
3947                                         case "both":
3948                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
3949                                                         $rule['reg_exp'] . "') OR LOWER(" .
3950                                                         "ttrss_entries.content) $reg_qpart LOWER('" . $rule['reg_exp'] . "')";
3951                                                 break;
3952                                         case "tag":
3953                                                 $qpart = "LOWER(ttrss_user_entries.tag_cache) $reg_qpart LOWER('".
3954                                                         $rule['reg_exp'] . "')";
3955                                                 break;
3956                                         case "link":
3957                                                 $qpart = "LOWER(ttrss_entries.link) $reg_qpart LOWER('".
3958                                                         $rule['reg_exp'] . "')";
3959                                                 break;
3960                                         case "author":
3961                                                 $qpart = "LOWER(ttrss_entries.author) $reg_qpart LOWER('".
3962                                                         $rule['reg_exp'] . "')";
3963                                                 break;
3964                                 }
3965
3966                                 if (isset($rule['inverse'])) $qpart = "NOT ($qpart)";
3967
3968                                 if (isset($rule["feed_id"]) && $rule["feed_id"] > 0) {
3969                                         $qpart .= " AND feed_id = " . db_escape_string($rule["feed_id"]);
3970                                 }
3971
3972                                 if (isset($rule["cat_id"])) {
3973
3974                                         if ($rule["cat_id"] > 0) {
3975                                                 $children = getChildCategories($rule["cat_id"], $owner_uid);
3976                                                 array_push($children, $rule["cat_id"]);
3977
3978                                                 $children = join(",", $children);
3979
3980                                                 $cat_qpart = "cat_id IN ($children)";
3981                                         } else {
3982                                                 $cat_qpart = "cat_id IS NULL";
3983                                         }
3984
3985                                         $qpart .= " AND $cat_qpart";
3986                                 }
3987
3988                                 array_push($query, "($qpart)");
3989
3990                         }
3991                 }
3992
3993                 if (count($query) > 0) {
3994                         $fullquery = "(" . join($filter["match_any_rule"] ? "OR" : "AND", $query) . ")";
3995                 } else {
3996                         $fullquery = "(false)";
3997                 }
3998
3999                 if ($filter['inverse']) $fullquery = "(NOT $fullquery)";
4000
4001                 return $fullquery;
4002         }
4003
4004         if (!function_exists('gzdecode')) {
4005                 function gzdecode($string) { // no support for 2nd argument
4006                         return file_get_contents('compress.zlib://data:who/cares;base64,'.
4007                                 base64_encode($string));
4008                 }
4009         }
4010
4011         function get_random_bytes($length) {
4012                 if (function_exists('openssl_random_pseudo_bytes')) {
4013                         return openssl_random_pseudo_bytes($length);
4014                 } else {
4015                         $output = "";
4016
4017                         for ($i = 0; $i < $length; $i++)
4018                                 $output .= chr(mt_rand(0, 255));
4019
4020                         return $output;
4021                 }
4022         }
4023
4024         function read_stdin() {
4025                 $fp = fopen("php://stdin", "r");
4026
4027                 if ($fp) {
4028                         $line = trim(fgets($fp));
4029                         fclose($fp);
4030                         return $line;
4031                 }
4032
4033                 return null;
4034         }
4035
4036         function tmpdirname($path, $prefix) {
4037                 // Use PHP's tmpfile function to create a temporary
4038                 // directory name. Delete the file and keep the name.
4039                 $tempname = tempnam($path,$prefix);
4040                 if (!$tempname)
4041                         return false;
4042
4043                 if (!unlink($tempname))
4044                         return false;
4045
4046        return $tempname;
4047         }
4048
4049         function getFeedCategory($feed) {
4050                 $result = db_query("SELECT cat_id FROM ttrss_feeds
4051                         WHERE id = '$feed'");
4052
4053                 if (db_num_rows($result) > 0) {
4054                         return db_fetch_result($result, 0, "cat_id");
4055                 } else {
4056                         return false;
4057                 }
4058
4059         }
4060
4061         function implements_interface($class, $interface) {
4062                 return in_array($interface, class_implements($class));
4063         }
4064
4065         function geturl($url){
4066
4067                 (function_exists('curl_init')) ? '' : die('cURL Must be installed for geturl function to work. Ask your host to enable it or uncomment extension=php_curl.dll in php.ini');
4068
4069                 $curl = curl_init();
4070                 $header[0] = "Accept: text/xml,application/xml,application/xhtml+xml,";
4071                 $header[0] .= "text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5";
4072                 $header[] = "Cache-Control: max-age=0";
4073                 $header[] = "Connection: keep-alive";
4074                 $header[] = "Keep-Alive: 300";
4075                 $header[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
4076                 $header[] = "Accept-Language: en-us,en;q=0.5";
4077                 $header[] = "Pragma: ";
4078
4079                 curl_setopt($curl, CURLOPT_URL, $url);
4080                 curl_setopt($curl, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 5.1; rv:5.0) Gecko/20100101 Firefox/5.0 Firefox/5.0');
4081                 curl_setopt($curl, CURLOPT_HTTPHEADER, $header);
4082                 curl_setopt($curl, CURLOPT_HEADER, true);
4083                 curl_setopt($curl, CURLOPT_REFERER, $url);
4084                 curl_setopt($curl, CURLOPT_ENCODING, 'gzip,deflate');
4085                 curl_setopt($curl, CURLOPT_AUTOREFERER, true);
4086                 curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
4087                 //curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true); //CURLOPT_FOLLOWLOCATION Disabled...
4088                 curl_setopt($curl, CURLOPT_TIMEOUT, 60);
4089
4090                 $html = curl_exec($curl);
4091
4092                 $status = curl_getinfo($curl);
4093                 curl_close($curl);
4094
4095                 if($status['http_code']!=200){
4096                         if($status['http_code'] == 301 || $status['http_code'] == 302) {
4097                                 list($header) = explode("\r\n\r\n", $html, 2);
4098                                 $matches = array();
4099                                 preg_match("/(Location:|URI:)[^(\n)]*/", $header, $matches);
4100                                 $url = trim(str_replace($matches[1],"",$matches[0]));
4101                                 $url_parsed = parse_url($url);
4102                                 return (isset($url_parsed))? geturl($url, $referer):'';
4103                         }
4104                         $oline='';
4105                         foreach($status as $key=>$eline){$oline.='['.$key.']'.$eline.' ';}
4106                         $line =$oline." \r\n ".$url."\r\n-----------------\r\n";
4107 #                       $handle = @fopen('./curl.error.log', 'a');
4108 #                       fwrite($handle, $line);
4109                         return FALSE;
4110                 }
4111                 return $url;
4112         }
4113
4114         function get_minified_js($files) {
4115                 require_once 'lib/jshrink/Minifier.php';
4116
4117                 $rv = '';
4118
4119                 foreach ($files as $js) {
4120                         if (!isset($_GET['debug'])) {
4121                                 $cached_file = CACHE_DIR . "/js/$js.js";
4122
4123                                 if (file_exists($cached_file) &&
4124                                                 is_readable($cached_file) &&
4125                                                 filemtime($cached_file) >= filemtime("js/$js.js")) {
4126
4127                                         $rv .= file_get_contents($cached_file);
4128
4129                                 } else {
4130                                         $minified = JShrink\Minifier::minify(file_get_contents("js/$js.js"));
4131                                         file_put_contents($cached_file, $minified);
4132                                         $rv .= $minified;
4133                                 }
4134                         } else {
4135                                 $rv .= file_get_contents("js/$js.js");
4136                         }
4137                 }
4138
4139                 return $rv;
4140         }
4141
4142         function stylesheet_tag($filename) {
4143                 $timestamp = filemtime($filename);
4144
4145                 echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"$filename?$timestamp\"/>\n";
4146         }
4147
4148         function javascript_tag($filename) {
4149                 $query = "";
4150
4151                 if (!(strpos($filename, "?") === FALSE)) {
4152                         $query = substr($filename, strpos($filename, "?")+1);
4153                         $filename = substr($filename, 0, strpos($filename, "?"));
4154                 }
4155
4156                 $timestamp = filemtime($filename);
4157
4158                 if ($query) $timestamp .= "&$query";
4159
4160                 echo "<script type=\"text/javascript\" charset=\"utf-8\" src=\"$filename?$timestamp\"></script>\n";
4161         }
4162
4163         function calculate_dep_timestamp() {
4164                 $files = array_merge(glob("js/*.js"), glob("*.css"));
4165
4166                 $max_ts = -1;
4167
4168                 foreach ($files as $file) {
4169                         if (filemtime($file) > $max_ts) $max_ts = filemtime($file);
4170                 }
4171
4172                 return $max_ts;
4173         }
4174
4175         function T_js_decl($s1, $s2) {
4176                 if ($s1 && $s2) {
4177                         $s1 = preg_replace("/\n/", "", $s1);
4178                         $s2 = preg_replace("/\n/", "", $s2);
4179
4180                         $s1 = preg_replace("/\"/", "\\\"", $s1);
4181                         $s2 = preg_replace("/\"/", "\\\"", $s2);
4182
4183                         return "T_messages[\"$s1\"] = \"$s2\";\n";
4184                 }
4185         }
4186
4187         function init_js_translations() {
4188
4189         print 'var T_messages = new Object();
4190
4191                 function __(msg) {
4192                         if (T_messages[msg]) {
4193                                 return T_messages[msg];
4194                         } else {
4195                                 return msg;
4196                         }
4197                 }
4198
4199                 function ngettext(msg1, msg2, n) {
4200                         return (parseInt(n) > 1) ? msg2 : msg1;
4201                 }';
4202
4203                 $l10n = _get_reader();
4204
4205                 for ($i = 0; $i < $l10n->total; $i++) {
4206                         $orig = $l10n->get_original_string($i);
4207                         $translation = __($orig);
4208
4209                         print T_js_decl($orig, $translation);
4210                 }
4211         }
4212
4213         function label_to_feed_id($label) {
4214                 return LABEL_BASE_INDEX - 1 - abs($label);
4215         }
4216
4217         function feed_to_label_id($feed) {
4218                 return LABEL_BASE_INDEX - 1 + abs($feed);
4219         }
4220
4221 ?>