include/functions.php

   1 <?php
   2         define('EXPECTED_CONFIG_VERSION', 26);
   3         define('SCHEMA_VERSION', 109);
   4
   5         define('LABEL_BASE_INDEX', -1024);
   6         define('PLUGIN_FEED_BASE_INDEX', -128);
   7
   8         $fetch_last_error = false;
   9         $pluginhost = false;
  10
  11         function __autoload($class) {
  12                 $class_file = str_replace("_", "/", strtolower(basename($class)));
  13
  14                 $file = dirname(__FILE__)."/../classes/$class_file.php";
  15
  16                 if (file_exists($file)) {
  17                         require $file;
  18                 }
  19
  20         }
  21
  22         mb_internal_encoding("UTF-8");
  23         date_default_timezone_set('UTC');
  24         if (defined('E_DEPRECATED')) {
  25                 error_reporting(E_ALL & ~E_NOTICE & ~E_DEPRECATED);
  26         } else {
  27                 error_reporting(E_ALL & ~E_NOTICE);
  28         }
  29
  30         require_once 'config.php';
  31
  32         if (DB_TYPE == "pgsql") {
  33                 define('SUBSTRING_FOR_DATE', 'SUBSTRING_FOR_DATE');
  34         } else {
  35                 define('SUBSTRING_FOR_DATE', 'SUBSTRING');
  36         }
  37
  38         define('THEME_VERSION_REQUIRED', 1.1);
  39
  40         /**
  41          * Return available translations names.
  42          *
  43          * @access public
  44          * @return array A array of available translations.
  45          */
  46         function get_translations() {
  47                 $tr = array(
  48                                         "auto"  => "Detect automatically",
  49                                         "ca_CA" => "Català",
  50                                         "cs_CZ" => "Česky",
  51                                         "en_US" => "English",
  52                                         "es_ES" => "Español",
  53                                         "de_DE" => "Deutsch",
  54                                         "fr_FR" => "Français",
  55                                         "hu_HU" => "Magyar (Hungarian)",
  56                                         "it_IT" => "Italiano",
  57                                         "ja_JP" => "日本語 (Japanese)",
  58                                         "lv_LV" => "Latviešu",
  59                                         "nb_NO" => "Norwegian bokmål",
  60                                         "nl_NL" => "Dutch",
  61                                         "pl_PL" => "Polski",
  62                                         "ru_RU" => "Русский",
  63                                         "pt_BR" => "Portuguese/Brazil",
  64                                         "zh_CN" => "Simplified Chinese");
  65
  66                 return $tr;
  67         }
  68
  69         require_once "lib/accept-to-gettext.php";
  70         require_once "lib/gettext/gettext.inc";
  71
  72
  73         function startup_gettext() {
  74
  75                 # Get locale from Accept-Language header
  76                 $lang = al2gt(array_keys(get_translations()), "text/html");
  77
  78                 if (defined('_TRANSLATION_OVERRIDE_DEFAULT')) {
  79                         $lang = _TRANSLATION_OVERRIDE_DEFAULT;
  80                 }
  81
  82                 if ($_SESSION["language"] && $_SESSION["language"] != "auto") {
  83                         $lang = $_SESSION["language"];
  84                 }
  85
  86                 if ($lang) {
  87                         if (defined('LC_MESSAGES')) {
  88                                 _setlocale(LC_MESSAGES, $lang);
  89                         } else if (defined('LC_ALL')) {
  90                                 _setlocale(LC_ALL, $lang);
  91                         }
  92
  93                         _bindtextdomain("messages", "locale");
  94
  95                         _textdomain("messages");
  96                         _bind_textdomain_codeset("messages", "UTF-8");
  97                 }
  98         }
  99
 100         startup_gettext();
 101
 102         require_once 'db-prefs.php';
 103         require_once 'version.php';
 104         require_once 'ccache.php';
 105         require_once 'labels.php';
 106
 107         define('SELF_USER_AGENT', 'Tiny Tiny RSS/' . VERSION . ' (http://tt-rss.org/)');
 108         ini_set('user_agent', SELF_USER_AGENT);
 109
 110         require_once 'lib/pubsubhubbub/publisher.php';
 111
 112         $tz_offset = -1;
 113         $utc_tz = new DateTimeZone('UTC');
 114         $schema_version = false;
 115
 116         /**
 117          * Print a timestamped debug message.
 118          *
 119          * @param string $msg The debug message.
 120          * @return void
 121          */
 122         function _debug($msg) {
 123                 $ts = strftime("%H:%M:%S", time());
 124                 if (function_exists('posix_getpid')) {
 125                         $ts = "$ts/" . posix_getpid();
 126                 }
 127
 128                 if (!(defined('QUIET') && QUIET)) {
 129                         print "[$ts] $msg\n";
 130                 }
 131
 132                 if (defined('LOGFILE'))  {
 133                         $fp = fopen(LOGFILE, 'a+');
 134
 135                         if ($fp) {
 136                                 fputs($fp, "[$ts] $msg\n");
 137                                 fclose($fp);
 138                         }
 139                 }
 140
 141         } // function _debug
 142
 143         /**
 144          * Purge a feed old posts.
 145          *
 146          * @param mixed $link A database connection.
 147          * @param mixed $feed_id The id of the purged feed.
 148          * @param mixed $purge_interval Olderness of purged posts.
 149          * @param boolean $debug Set to True to enable the debug. False by default.
 150          * @access public
 151          * @return void
 152          */
 153         function purge_feed($link, $feed_id, $purge_interval, $debug = false) {
 154
 155                 if (!$purge_interval) $purge_interval = feed_purge_interval($link, $feed_id);
 156
 157                 $rows = -1;
 158
 159                 $result = db_query($link,
 160                         "SELECT owner_uid FROM ttrss_feeds WHERE id = '$feed_id'");
 161
 162                 $owner_uid = false;
 163
 164                 if (db_num_rows($result) == 1) {
 165                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 166                 }
 167
 168                 if ($purge_interval == -1 || !$purge_interval) {
 169                         if ($owner_uid) {
 170                                 ccache_update($link, $feed_id, $owner_uid);
 171                         }
 172                         return;
 173                 }
 174
 175                 if (!$owner_uid) return;
 176
 177                 if (FORCE_ARTICLE_PURGE == 0) {
 178                         $purge_unread = get_pref($link, "PURGE_UNREAD_ARTICLES",
 179                                 $owner_uid, false);
 180                 } else {
 181                         $purge_unread = true;
 182                         $purge_interval = FORCE_ARTICLE_PURGE;
 183                 }
 184
 185                 if (!$purge_unread) $query_limit = " unread = false AND ";
 186
 187                 if (DB_TYPE == "pgsql") {
 188                         $pg_version = get_pgsql_version($link);
 189
 190                         if (preg_match("/^7\./", $pg_version) || preg_match("/^8\.0/", $pg_version)) {
 191
 192                                 $result = db_query($link, "DELETE FROM ttrss_user_entries WHERE
 193                                         ttrss_entries.id = ref_id AND
 194                                         marked = false AND
 195                                         feed_id = '$feed_id' AND
 196                                         $query_limit
 197                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 198
 199                         } else {
 200
 201                                 $result = db_query($link, "DELETE FROM ttrss_user_entries
 202                                         USING ttrss_entries
 203                                         WHERE ttrss_entries.id = ref_id AND
 204                                         marked = false AND
 205                                         feed_id = '$feed_id' AND
 206                                         $query_limit
 207                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 208                         }
 209
 210                         $rows = pg_affected_rows($result);
 211
 212                 } else {
 213
 214 /*                      $result = db_query($link, "DELETE FROM ttrss_user_entries WHERE
 215                                 marked = false AND feed_id = '$feed_id' AND
 216                                 (SELECT date_updated FROM ttrss_entries WHERE
 217                                         id = ref_id) < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)"); */
 218
 219                         $result = db_query($link, "DELETE FROM ttrss_user_entries
 220                                 USING ttrss_user_entries, ttrss_entries
 221                                 WHERE ttrss_entries.id = ref_id AND
 222                                 marked = false AND
 223                                 feed_id = '$feed_id' AND
 224                                 $query_limit
 225                                 ttrss_entries.date_updated < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)");
 226
 227                         $rows = mysql_affected_rows($link);
 228
 229                 }
 230
 231                 ccache_update($link, $feed_id, $owner_uid);
 232
 233                 if ($debug) {
 234                         _debug("Purged feed $feed_id ($purge_interval): deleted $rows articles");
 235                 }
 236
 237                 return $rows;
 238         } // function purge_feed
 239
 240         function feed_purge_interval($link, $feed_id) {
 241
 242                 $result = db_query($link, "SELECT purge_interval, owner_uid FROM ttrss_feeds
 243                         WHERE id = '$feed_id'");
 244
 245                 if (db_num_rows($result) == 1) {
 246                         $purge_interval = db_fetch_result($result, 0, "purge_interval");
 247                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 248
 249                         if ($purge_interval == 0) $purge_interval = get_pref($link,
 250                                 'PURGE_OLD_DAYS', $owner_uid);
 251
 252                         return $purge_interval;
 253
 254                 } else {
 255                         return -1;
 256                 }
 257         }
 258
 259         function purge_orphans($link, $do_output = false) {
 260
 261                 // purge orphaned posts in main content table
 262                 $result = db_query($link, "DELETE FROM ttrss_entries WHERE
 263                         (SELECT COUNT(int_id) FROM ttrss_user_entries WHERE ref_id = id) = 0");
 264
 265                 if ($do_output) {
 266                         $rows = db_affected_rows($link, $result);
 267                         _debug("Purged $rows orphaned posts.");
 268                 }
 269         }
 270
 271         function get_feed_update_interval($link, $feed_id) {
 272                 $result = db_query($link, "SELECT owner_uid, update_interval FROM
 273                         ttrss_feeds WHERE id = '$feed_id'");
 274
 275                 if (db_num_rows($result) == 1) {
 276                         $update_interval = db_fetch_result($result, 0, "update_interval");
 277                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 278
 279                         if ($update_interval != 0) {
 280                                 return $update_interval;
 281                         } else {
 282                                 return get_pref($link, 'DEFAULT_UPDATE_INTERVAL', $owner_uid, false);
 283                         }
 284
 285                 } else {
 286                         return -1;
 287                 }
 288         }
 289
 290         function fetch_file_contents($url, $type = false, $login = false, $pass = false, $post_query = false, $timeout = false) {
 291
 292                 global $fetch_last_error;
 293
 294                 if (function_exists('curl_init') && !ini_get("open_basedir")) {
 295
 296                         if (ini_get("safe_mode")) {
 297                                 $ch = curl_init(geturl($url));
 298                         } else {
 299                                 $ch = curl_init($url);
 300                         }
 301
 302                         curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, $timeout ? $timeout : 15);
 303                         curl_setopt($ch, CURLOPT_TIMEOUT, $timeout ? $timeout : 45);
 304                         curl_setopt($ch, CURLOPT_FOLLOWLOCATION, !ini_get("safe_mode"));
 305                         curl_setopt($ch, CURLOPT_MAXREDIRS, 20);
 306                         curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
 307                         curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
 308                         curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
 309                         curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_ANY);
 310                         curl_setopt($ch, CURLOPT_USERAGENT, SELF_USER_AGENT);
 311                         curl_setopt($ch, CURLOPT_ENCODING , "gzip");
 312                         curl_setopt($ch, CURLOPT_REFERER, $url);
 313
 314                         if ($post_query) {
 315                                 curl_setopt($ch, CURLOPT_POST, true);
 316                                 curl_setopt($ch, CURLOPT_POSTFIELDS, $post_query);
 317                         }
 318
 319                         if ($login && $pass)
 320                                 curl_setopt($ch, CURLOPT_USERPWD, "$login:$pass");
 321
 322                         $contents = @curl_exec($ch);
 323
 324                         if (curl_errno($ch) === 23 || curl_errno($ch) === 61) {
 325                                 curl_setopt($ch, CURLOPT_ENCODING, 'none');
 326                                 $contents = @curl_exec($ch);
 327                         }
 328
 329                         if ($contents === false) {
 330                                 $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
 331                                 curl_close($ch);
 332                                 return false;
 333                         }
 334
 335                         $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
 336                         $content_type = curl_getinfo($ch, CURLINFO_CONTENT_TYPE);
 337
 338                         if ($http_code != 200 || $type && strpos($content_type, "$type") === false) {
 339                                 if (curl_errno($ch) != 0) {
 340                                         $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
 341                                 } else {
 342                                         $fetch_last_error = "HTTP Code: $http_code";
 343                                 }
 344                                 curl_close($ch);
 345                                 return false;
 346                         }
 347
 348                         curl_close($ch);
 349
 350                         return $contents;
 351                 } else {
 352                         if ($login && $pass){
 353                                 $url_parts = array();
 354
 355                                 preg_match("/(^[^:]*):\/\/(.*)/", $url, $url_parts);
 356
 357                                 $pass = urlencode($pass);
 358
 359                                 if ($url_parts[1] && $url_parts[2]) {
 360                                         $url = $url_parts[1] . "://$login:$pass@" . $url_parts[2];
 361                                 }
 362                         }
 363
 364                         $data = @file_get_contents($url);
 365
 366                         @$gzdecoded = gzdecode($data);
 367                         if ($gzdecoded) $data = $gzdecoded;
 368
 369                         if (!$data && function_exists('error_get_last')) {
 370                                 $error = error_get_last();
 371                                 $fetch_last_error = $error["message"];
 372                         }
 373                         return $data;
 374                 }
 375
 376         }
 377
 378         /**
 379          * Try to determine the favicon URL for a feed.
 380          * adapted from wordpress favicon plugin by Jeff Minard (http://thecodepro.com/)
 381          * http://dev.wp-plugins.org/file/favatars/trunk/favatars.php
 382          *
 383          * @param string $url A feed or page URL
 384          * @access public
 385          * @return mixed The favicon URL, or false if none was found.
 386          */
 387         function get_favicon_url($url) {
 388
 389                 $favicon_url = false;
 390
 391                 if ($html = @fetch_file_contents($url)) {
 392
 393                         libxml_use_internal_errors(true);
 394
 395                         $doc = new DOMDocument();
 396                         $doc->loadHTML($html);
 397                         $xpath = new DOMXPath($doc);
 398
 399                         $base = $xpath->query('/html/head/base');
 400                         foreach ($base as $b) {
 401                                 $url = $b->getAttribute("href");
 402                                 break;
 403                         }
 404
 405                         $entries = $xpath->query('/html/head/link[@rel="shortcut icon" or @rel="icon"]');
 406                         if (count($entries) > 0) {
 407                                 foreach ($entries as $entry) {
 408                                         $favicon_url = rewrite_relative_url($url, $entry->getAttribute("href"));
 409                                         break;
 410                                 }
 411                         }
 412                 }
 413
 414                 if (!$favicon_url)
 415                         $favicon_url = rewrite_relative_url($url, "/favicon.ico");
 416
 417                 return $favicon_url;
 418         } // function get_favicon_url
 419
 420         function check_feed_favicon($site_url, $feed, $link) {
 421 #               print "FAVICON [$site_url]: $favicon_url\n";
 422
 423                 $icon_file = ICONS_DIR . "/$feed.ico";
 424
 425                 if (!file_exists($icon_file)) {
 426                         $favicon_url = get_favicon_url($site_url);
 427
 428                         if ($favicon_url) {
 429                                 // Limiting to "image" type misses those served with text/plain
 430                                 $contents = fetch_file_contents($favicon_url); // , "image");
 431
 432                                 if ($contents) {
 433                                         // Crude image type matching.
 434                                         // Patterns gleaned from the file(1) source code.
 435                                         if (preg_match('/^\x00\x00\x01\x00/', $contents)) {
 436                                                 // 0       string  \000\000\001\000        MS Windows icon resource
 437                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa MS Windows icon resource");
 438                                         }
 439                                         elseif (preg_match('/^GIF8/', $contents)) {
 440                                                 // 0       string          GIF8            GIF image data
 441                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa GIF image");
 442                                         }
 443                                         elseif (preg_match('/^\x89PNG\x0d\x0a\x1a\x0a/', $contents)) {
 444                                                 // 0       string          \x89PNG\x0d\x0a\x1a\x0a         PNG image data
 445                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa PNG image");
 446                                         }
 447                                         elseif (preg_match('/^\xff\xd8/', $contents)) {
 448                                                 // 0       beshort         0xffd8          JPEG image data
 449                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa JPG image");
 450                                         }
 451                                         else {
 452                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa UNKNOWN type");
 453                                                 $contents = "";
 454                                         }
 455                                 }
 456
 457                                 if ($contents) {
 458                                         $fp = @fopen($icon_file, "w");
 459
 460                                         if ($fp) {
 461                                                 fwrite($fp, $contents);
 462                                                 fclose($fp);
 463                                                 chmod($icon_file, 0644);
 464                                         }
 465                                 }
 466                         }
 467                 }
 468         }
 469
 470         function print_select($id, $default, $values, $attributes = "") {
 471                 print "<select name=\"$id\" id=\"$id\" $attributes>";
 472                 foreach ($values as $v) {
 473                         if ($v == $default)
 474                                 $sel = "selected=\"1\"";
 475                          else
 476                                 $sel = "";
 477
 478                         $v = trim($v);
 479
 480                         print "<option value=\"$v\" $sel>$v</option>";
 481                 }
 482                 print "</select>";
 483         }
 484
 485         function print_select_hash($id, $default, $values, $attributes = "") {
 486                 print "<select name=\"$id\" id='$id' $attributes>";
 487                 foreach (array_keys($values) as $v) {
 488                         if ($v == $default)
 489                                 $sel = 'selected="selected"';
 490                          else
 491                                 $sel = "";
 492
 493                         $v = trim($v);
 494
 495                         print "<option $sel value=\"$v\">".$values[$v]."</option>";
 496                 }
 497
 498                 print "</select>";
 499         }
 500
 501         function print_radio($id, $default, $true_is, $values, $attributes = "") {
 502                 foreach ($values as $v) {
 503
 504                         if ($v == $default)
 505                                 $sel = "checked";
 506                          else
 507                                 $sel = "";
 508
 509                         if ($v == $true_is) {
 510                                 $sel .= " value=\"1\"";
 511                         } else {
 512                                 $sel .= " value=\"0\"";
 513                         }
 514
 515                         print "<input class=\"noborder\" dojoType=\"dijit.form.RadioButton\"
 516                                 type=\"radio\" $sel $attributes name=\"$id\">&nbsp;$v&nbsp;";
 517
 518                 }
 519         }
 520
 521         function initialize_user_prefs($link, $uid, $profile = false) {
 522
 523                 $uid = db_escape_string($link, $uid);
 524
 525                 if (!$profile) {
 526                         $profile = "NULL";
 527                         $profile_qpart = "AND profile IS NULL";
 528                 } else {
 529                         $profile_qpart = "AND profile = '$profile'";
 530                 }
 531
 532                 if (get_schema_version($link) < 63) $profile_qpart = "";
 533
 534                 db_query($link, "BEGIN");
 535
 536                 $result = db_query($link, "SELECT pref_name,def_value FROM ttrss_prefs");
 537
 538                 $u_result = db_query($link, "SELECT pref_name
 539                         FROM ttrss_user_prefs WHERE owner_uid = '$uid' $profile_qpart");
 540
 541                 $active_prefs = array();
 542
 543                 while ($line = db_fetch_assoc($u_result)) {
 544                         array_push($active_prefs, $line["pref_name"]);
 545                 }
 546
 547                 while ($line = db_fetch_assoc($result)) {
 548                         if (array_search($line["pref_name"], $active_prefs) === FALSE) {
 549 //                              print "adding " . $line["pref_name"] . "<br>";
 550
 551                                 if (get_schema_version($link) < 63) {
 552                                         db_query($link, "INSERT INTO ttrss_user_prefs
 553                                                 (owner_uid,pref_name,value) VALUES
 554                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."')");
 555
 556                                 } else {
 557                                         db_query($link, "INSERT INTO ttrss_user_prefs
 558                                                 (owner_uid,pref_name,value, profile) VALUES
 559                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."', $profile)");
 560                                 }
 561
 562                         }
 563                 }
 564
 565                 db_query($link, "COMMIT");
 566
 567         }
 568
 569         function get_ssl_certificate_id() {
 570                 if ($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"]) {
 571                         return sha1($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"] .
 572                                 $_SERVER["REDIRECT_SSL_CLIENT_V_START"] .
 573                                 $_SERVER["REDIRECT_SSL_CLIENT_V_END"] .
 574                                 $_SERVER["REDIRECT_SSL_CLIENT_S_DN"]);
 575                 }
 576                 return "";
 577         }
 578
 579         function authenticate_user($link, $login, $password, $check_only = false) {
 580
 581                 if (!SINGLE_USER_MODE) {
 582
 583                         $user_id = false;
 584
 585                         global $pluginhost;
 586                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_AUTH_USER) as $plugin) {
 587
 588                                 $user_id = (int) $plugin->authenticate($login, $password);
 589
 590                                 if ($user_id) {
 591                                         $_SESSION["auth_module"] = strtolower(get_class($plugin));
 592                                         break;
 593                                 }
 594                         }
 595
 596                         if ($user_id && !$check_only) {
 597                                 $_SESSION["uid"] = $user_id;
 598
 599                                 $result = db_query($link, "SELECT login,access_level,pwd_hash FROM ttrss_users
 600                                         WHERE id = '$user_id'");
 601
 602                                 $_SESSION["name"] = db_fetch_result($result, 0, "login");
 603                                 $_SESSION["access_level"] = db_fetch_result($result, 0, "access_level");
 604                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 605
 606                                 db_query($link, "UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 607                                         $_SESSION["uid"]);
 608
 609                                 $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 610                                 $_SESSION["pwd_hash"] = db_fetch_result($result, 0, "pwd_hash");
 611
 612                                 $_SESSION["last_version_check"] = time();
 613
 614                                 initialize_user_prefs($link, $_SESSION["uid"]);
 615
 616                                 return true;
 617                         }
 618
 619                         return false;
 620
 621                 } else {
 622
 623                         $_SESSION["uid"] = 1;
 624                         $_SESSION["name"] = "admin";
 625                         $_SESSION["access_level"] = 10;
 626
 627                         $_SESSION["hide_hello"] = true;
 628                         $_SESSION["hide_logout"] = true;
 629
 630                         $_SESSION["auth_module"] = false;
 631
 632                         if (!$_SESSION["csrf_token"]) {
 633                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 634                         }
 635
 636                         $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 637
 638                         initialize_user_prefs($link, $_SESSION["uid"]);
 639
 640                         return true;
 641                 }
 642         }
 643
 644         function make_password($length = 8) {
 645
 646                 $password = "";
 647                 $possible = "0123456789abcdfghjkmnpqrstvwxyzABCDFGHJKMNPQRSTVWXYZ";
 648
 649         $i = 0;
 650
 651                 while ($i < $length) {
 652                         $char = substr($possible, mt_rand(0, strlen($possible)-1), 1);
 653
 654                         if (!strstr($password, $char)) {
 655                                 $password .= $char;
 656                                 $i++;
 657                         }
 658                 }
 659                 return $password;
 660         }
 661
 662         // this is called after user is created to initialize default feeds, labels
 663         // or whatever else
 664
 665         // user preferences are checked on every login, not here
 666
 667         function initialize_user($link, $uid) {
 668
 669                 db_query($link, "insert into ttrss_feeds (owner_uid,title,feed_url)
 670                         values ('$uid', 'Tiny Tiny RSS: New Releases',
 671                         'http://tt-rss.org/releases.rss')");
 672
 673                 db_query($link, "insert into ttrss_feeds (owner_uid,title,feed_url)
 674                         values ('$uid', 'Tiny Tiny RSS: Forum',
 675                                 'http://tt-rss.org/forum/rss.php')");
 676         }
 677
 678         function logout_user() {
 679                 session_destroy();
 680                 if (isset($_COOKIE[session_name()])) {
 681                    setcookie(session_name(), '', time()-42000, '/');
 682                 }
 683         }
 684
 685         function validate_csrf($csrf_token) {
 686                 return $csrf_token == $_SESSION['csrf_token'];
 687         }
 688
 689         function validate_session($link) {
 690                 if (SINGLE_USER_MODE) return true;
 691
 692                 $check_ip = $_SESSION['ip_address'];
 693
 694                 switch (SESSION_CHECK_ADDRESS) {
 695                 case 0:
 696                         $check_ip = '';
 697                         break;
 698                 case 1:
 699                         $check_ip = substr($check_ip, 0, strrpos($check_ip, '.')+1);
 700                         break;
 701                 case 2:
 702                         $check_ip = substr($check_ip, 0, strrpos($check_ip, '.'));
 703                         $check_ip = substr($check_ip, 0, strrpos($check_ip, '.')+1);
 704                         break;
 705                 };
 706
 707                 if ($check_ip && strpos($_SERVER['REMOTE_ADDR'], $check_ip) !== 0) {
 708                         $_SESSION["login_error_msg"] =
 709                                 __("Session failed to validate (incorrect IP)");
 710                         return false;
 711                 }
 712
 713                 if ($_SESSION["ref_schema_version"] != get_schema_version($link, true))
 714                         return false;
 715
 716                 if ($_SESSION["uid"]) {
 717
 718                         $result = db_query($link,
 719                                 "SELECT pwd_hash FROM ttrss_users WHERE id = '".$_SESSION["uid"]."'");
 720
 721                         $pwd_hash = db_fetch_result($result, 0, "pwd_hash");
 722
 723                         if ($pwd_hash != $_SESSION["pwd_hash"]) {
 724                                 return false;
 725                         }
 726                 }
 727
 728 /*              if ($_SESSION["cookie_lifetime"] && $_SESSION["uid"]) {
 729
 730                         //print_r($_SESSION);
 731
 732                         if (time() > $_SESSION["cookie_lifetime"]) {
 733                                 return false;
 734                         }
 735                 } */
 736
 737                 return true;
 738         }
 739
 740         function load_user_plugins($link, $owner_uid) {
 741                 if ($owner_uid) {
 742                         $plugins = get_pref($link, "_ENABLED_PLUGINS", $owner_uid);
 743
 744                         global $pluginhost;
 745                         $pluginhost->load($plugins, $pluginhost::KIND_USER, $owner_uid);
 746
 747                         if (get_schema_version($link) > 100) {
 748                                 $pluginhost->load_data();
 749                         }
 750                 }
 751         }
 752
 753         function login_sequence($link) {
 754                 $_SESSION["prefs_cache"] = false;
 755
 756                 if (SINGLE_USER_MODE) {
 757                         authenticate_user($link, "admin", null);
 758                         cache_prefs($link);
 759                         load_user_plugins($link, $_SESSION["uid"]);
 760                 } else {
 761                         if (!$_SESSION["uid"] || !validate_session($link)) {
 762
 763                                 if (AUTH_AUTO_LOGIN && authenticate_user($link, null, null)) {
 764                                     $_SESSION["ref_schema_version"] = get_schema_version($link, true);
 765                                 } else {
 766                                          authenticate_user($link, null, null, true);
 767                                 }
 768
 769                                 if (!$_SESSION["uid"]) render_login_form($link);
 770
 771                         } else {
 772                                 /* bump login timestamp */
 773                                 db_query($link, "UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 774                                         $_SESSION["uid"]);
 775                                 $_SESSION["last_login_update"] = time();
 776                         }
 777
 778                         if ($_SESSION["uid"] && $_SESSION["language"] && SESSION_COOKIE_LIFETIME > 0) {
 779                                 setcookie("ttrss_lang", $_SESSION["language"],
 780                                         time() + SESSION_COOKIE_LIFETIME);
 781                         }
 782
 783                         if ($_SESSION["uid"]) {
 784                                 cache_prefs($link);
 785                                 load_user_plugins($link, $_SESSION["uid"]);
 786
 787                                 /* cleanup ccache */
 788
 789                                 db_query($link, "DELETE FROM ttrss_counters_cache WHERE owner_uid = ".
 790                                         $_SESSION["uid"] . " AND
 791                                                 (SELECT COUNT(id) FROM ttrss_feeds WHERE
 792                                                         ttrss_feeds.id = feed_id) = 0");
 793
 794                                 db_query($link, "DELETE FROM ttrss_cat_counters_cache WHERE owner_uid = ".
 795                                         $_SESSION["uid"] . " AND
 796                                                 (SELECT COUNT(id) FROM ttrss_feed_categories WHERE
 797                                                         ttrss_feed_categories.id = feed_id) = 0");
 798
 799                         }
 800
 801                 }
 802         }
 803
 804         function truncate_string($str, $max_len, $suffix = '&hellip;') {
 805                 if (mb_strlen($str, "utf-8") > $max_len - 3) {
 806                         return mb_substr($str, 0, $max_len, "utf-8") . $suffix;
 807                 } else {
 808                         return $str;
 809                 }
 810         }
 811
 812         function convert_timestamp($timestamp, $source_tz, $dest_tz) {
 813
 814                 try {
 815                         $source_tz = new DateTimeZone($source_tz);
 816                 } catch (Exception $e) {
 817                         $source_tz = new DateTimeZone('UTC');
 818                 }
 819
 820                 try {
 821                         $dest_tz = new DateTimeZone($dest_tz);
 822                 } catch (Exception $e) {
 823                         $dest_tz = new DateTimeZone('UTC');
 824                 }
 825
 826                 $dt = new DateTime(date('Y-m-d H:i:s', $timestamp), $source_tz);
 827                 return $dt->format('U') + $dest_tz->getOffset($dt);
 828         }
 829
 830         function make_local_datetime($link, $timestamp, $long, $owner_uid = false,
 831                                         $no_smart_dt = false) {
 832
 833                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 834                 if (!$timestamp) $timestamp = '1970-01-01 0:00';
 835
 836                 global $utc_tz;
 837                 global $tz_offset;
 838
 839                 # We store date in UTC internally
 840                 $dt = new DateTime($timestamp, $utc_tz);
 841
 842                 if ($tz_offset == -1) {
 843
 844                         $user_tz_string = get_pref($link, 'USER_TIMEZONE', $owner_uid);
 845
 846                         try {
 847                                 $user_tz = new DateTimeZone($user_tz_string);
 848                         } catch (Exception $e) {
 849                                 $user_tz = $utc_tz;
 850                         }
 851
 852                         $tz_offset = $user_tz->getOffset($dt);
 853                 }
 854
 855                 $user_timestamp = $dt->format('U') + $tz_offset;
 856
 857                 if (!$no_smart_dt) {
 858                         return smart_date_time($link, $user_timestamp,
 859                                 $tz_offset, $owner_uid);
 860                 } else {
 861                         if ($long)
 862                                 $format = get_pref($link, 'LONG_DATE_FORMAT', $owner_uid);
 863                         else
 864                                 $format = get_pref($link, 'SHORT_DATE_FORMAT', $owner_uid);
 865
 866                         return date($format, $user_timestamp);
 867                 }
 868         }
 869
 870         function smart_date_time($link, $timestamp, $tz_offset = 0, $owner_uid = false) {
 871                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 872
 873                 if (date("Y.m.d", $timestamp) == date("Y.m.d", time() + $tz_offset)) {
 874                         return date("G:i", $timestamp);
 875                 } else if (date("Y", $timestamp) == date("Y", time() + $tz_offset)) {
 876                         $format = get_pref($link, 'SHORT_DATE_FORMAT', $owner_uid);
 877                         return date($format, $timestamp);
 878                 } else {
 879                         $format = get_pref($link, 'LONG_DATE_FORMAT', $owner_uid);
 880                         return date($format, $timestamp);
 881                 }
 882         }
 883
 884         function sql_bool_to_bool($s) {
 885                 if ($s == "t" || $s == "1" || strtolower($s) == "true") {
 886                         return true;
 887                 } else {
 888                         return false;
 889                 }
 890         }
 891
 892         function bool_to_sql_bool($s) {
 893                 if ($s) {
 894                         return "true";
 895                 } else {
 896                         return "false";
 897                 }
 898         }
 899
 900         // Session caching removed due to causing wrong redirects to upgrade
 901         // script when get_schema_version() is called on an obsolete session
 902         // created on a previous schema version.
 903         function get_schema_version($link, $nocache = false) {
 904                 global $schema_version;
 905
 906                 if (!$schema_version) {
 907                         $result = db_query($link, "SELECT schema_version FROM ttrss_version");
 908                         $version = db_fetch_result($result, 0, "schema_version");
 909                         $schema_version = $version;
 910                         return $version;
 911                 } else {
 912                         return $schema_version;
 913                 }
 914         }
 915
 916         function sanity_check($link) {
 917                 require_once 'errors.php';
 918
 919                 $error_code = 0;
 920                 $schema_version = get_schema_version($link, true);
 921
 922                 if ($schema_version != SCHEMA_VERSION) {
 923                         $error_code = 5;
 924                 }
 925
 926                 if (DB_TYPE == "mysql") {
 927                         $result = db_query($link, "SELECT true", false);
 928                         if (db_num_rows($result) != 1) {
 929                                 $error_code = 10;
 930                         }
 931                 }
 932
 933                 if (db_escape_string($link, "testTEST") != "testTEST") {
 934                         $error_code = 12;
 935                 }
 936
 937                 return array("code" => $error_code, "message" => $ERRORS[$error_code]);
 938         }
 939
 940         function file_is_locked($filename) {
 941                 if (function_exists('flock')) {
 942                         $fp = @fopen(LOCK_DIRECTORY . "/$filename", "r");
 943                         if ($fp) {
 944                                 if (flock($fp, LOCK_EX | LOCK_NB)) {
 945                                         flock($fp, LOCK_UN);
 946                                         fclose($fp);
 947                                         return false;
 948                                 }
 949                                 fclose($fp);
 950                                 return true;
 951                         } else {
 952                                 return false;
 953                         }
 954                 }
 955                 return true; // consider the file always locked and skip the test
 956         }
 957
 958         function make_lockfile($filename) {
 959                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
 960
 961                 if ($fp && flock($fp, LOCK_EX | LOCK_NB)) {
 962                         if (function_exists('posix_getpid')) {
 963                                 fwrite($fp, posix_getpid() . "\n");
 964                         }
 965                         return $fp;
 966                 } else {
 967                         return false;
 968                 }
 969         }
 970
 971         function make_stampfile($filename) {
 972                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
 973
 974                 if (flock($fp, LOCK_EX | LOCK_NB)) {
 975                         fwrite($fp, time() . "\n");
 976                         flock($fp, LOCK_UN);
 977                         fclose($fp);
 978                         return true;
 979                 } else {
 980                         return false;
 981                 }
 982         }
 983
 984         function sql_random_function() {
 985                 if (DB_TYPE == "mysql") {
 986                         return "RAND()";
 987                 } else {
 988                         return "RANDOM()";
 989                 }
 990         }
 991
 992         function catchup_feed($link, $feed, $cat_view, $owner_uid = false, $max_id = false) {
 993
 994                         if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 995
 996                         //if (preg_match("/^-?[0-9][0-9]*$/", $feed) != false) {
 997
 998                         $ref_check_qpart = ($max_id &&
 999                                 !get_pref($link, 'REVERSE_HEADLINES')) ? "ref_id <= '$max_id'" : "true";
1000
1001                         if (is_numeric($feed)) {
1002                                 if ($cat_view) {
1003
1004                                         if ($feed >= 0) {
1005
1006                                                 if ($feed > 0) {
1007                                                         $children = getChildCategories($link, $feed, $owner_uid);
1008                                                         array_push($children, $feed);
1009
1010                                                         $children = join(",", $children);
1011
1012                                                         $cat_qpart = "cat_id IN ($children)";
1013                                                 } else {
1014                                                         $cat_qpart = "cat_id IS NULL";
1015                                                 }
1016
1017                                                 db_query($link, "UPDATE ttrss_user_entries
1018                                                         SET unread = false,last_read = NOW()
1019                                                         WHERE feed_id IN (SELECT id FROM ttrss_feeds WHERE $cat_qpart)
1020                                                         AND $ref_check_qpart AND unread = true
1021                                                         AND owner_uid = $owner_uid");
1022
1023                                         } else if ($feed == -2) {
1024
1025                                                 db_query($link, "UPDATE ttrss_user_entries
1026                                                         SET unread = false,last_read = NOW() WHERE (SELECT COUNT(*)
1027                                                                 FROM ttrss_user_labels2 WHERE article_id = ref_id) > 0
1028                                                                 AND $ref_check_qpart
1029                                                                 AND unread = true AND owner_uid = $owner_uid");
1030                                         }
1031
1032                                 } else if ($feed > 0) {
1033
1034                                         db_query($link, "UPDATE ttrss_user_entries
1035                                                         SET unread = false,last_read = NOW()
1036                                                         WHERE feed_id = '$feed'
1037                                                         AND $ref_check_qpart AND unread = true
1038                                                         AND owner_uid = $owner_uid");
1039
1040                                 } else if ($feed < 0 && $feed > LABEL_BASE_INDEX) { // special, like starred
1041
1042                                         if ($feed == -1) {
1043                                                 db_query($link, "UPDATE ttrss_user_entries
1044                                                         SET unread = false,last_read = NOW()
1045                                                         WHERE marked = true
1046                                                         AND $ref_check_qpart AND unread = true
1047                                                         AND owner_uid = $owner_uid");
1048                                         }
1049
1050                                         if ($feed == -2) {
1051                                                 db_query($link, "UPDATE ttrss_user_entries
1052                                                         SET unread = false,last_read = NOW()
1053                                                         WHERE published = true
1054                                                         AND $ref_check_qpart AND unread = true
1055                                                         AND owner_uid = $owner_uid");
1056                                         }
1057
1058                                         if ($feed == -3) {
1059
1060                                                 $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE");
1061
1062                                                 if (DB_TYPE == "pgsql") {
1063                                                         $match_part = "updated > NOW() - INTERVAL '$intl hour' ";
1064                                                 } else {
1065                                                         $match_part = "updated > DATE_SUB(NOW(),
1066                                                                 INTERVAL $intl HOUR) ";
1067                                                 }
1068
1069                                                 $result = db_query($link, "SELECT id FROM ttrss_entries,
1070                                                         ttrss_user_entries WHERE $match_part AND
1071                                                         unread = true AND
1072                                                         ttrss_user_entries.ref_id = ttrss_entries.id AND
1073                                                         owner_uid = $owner_uid");
1074
1075                                                 $affected_ids = array();
1076
1077                                                 while ($line = db_fetch_assoc($result)) {
1078                                                         array_push($affected_ids, $line["id"]);
1079                                                 }
1080
1081                                                 catchupArticlesById($link, $affected_ids, 0);
1082                                         }
1083
1084                                         if ($feed == -4) {
1085                                                 db_query($link, "UPDATE ttrss_user_entries
1086                                                         SET unread = false,last_read = NOW()
1087                                                         WHERE $ref_check_qpart AND unread = true AND
1088                                                         owner_uid = $owner_uid");
1089                                         }
1090
1091                                 } else if ($feed < LABEL_BASE_INDEX) { // label
1092
1093                                         $label_id = feed_to_label_id($feed);
1094
1095                                         db_query($link, "UPDATE ttrss_user_entries, ttrss_user_labels2
1096                                                 SET unread = false, last_read = NOW()
1097                                                         WHERE label_id = '$label_id' AND unread = true
1098                                                         AND $ref_check_qpart
1099                                                         AND owner_uid = '$owner_uid' AND ref_id = article_id");
1100
1101                                 }
1102
1103                                 ccache_update($link, $feed, $owner_uid, $cat_view);
1104
1105                         } else { // tag
1106                                 db_query($link, "BEGIN");
1107
1108                                 $tag_name = db_escape_string($link, $feed);
1109
1110                                 $result = db_query($link, "SELECT post_int_id FROM ttrss_tags
1111                                         WHERE tag_name = '$tag_name' AND owner_uid = $owner_uid");
1112
1113                                 while ($line = db_fetch_assoc($result)) {
1114                                         db_query($link, "UPDATE ttrss_user_entries SET
1115                                                 unread = false, last_read = NOW()
1116                                                 WHERE $ref_check_qpart AND unread = true
1117                                                 AND int_id = " . $line["post_int_id"]);
1118                                 }
1119                                 db_query($link, "COMMIT");
1120                         }
1121         }
1122
1123         function getAllCounters($link) {
1124                 $data = getGlobalCounters($link);
1125
1126                 $data = array_merge($data, getVirtCounters($link));
1127                 $data = array_merge($data, getLabelCounters($link));
1128                 $data = array_merge($data, getFeedCounters($link, $active_feed));
1129                 $data = array_merge($data, getCategoryCounters($link));
1130
1131                 return $data;
1132         }
1133
1134         function getCategoryTitle($link, $cat_id) {
1135
1136                 if ($cat_id == -1) {
1137                         return __("Special");
1138                 } else if ($cat_id == -2) {
1139                         return __("Labels");
1140                 } else {
1141
1142                         $result = db_query($link, "SELECT title FROM ttrss_feed_categories WHERE
1143                                 id = '$cat_id'");
1144
1145                         if (db_num_rows($result) == 1) {
1146                                 return db_fetch_result($result, 0, "title");
1147                         } else {
1148                                 return __("Uncategorized");
1149                         }
1150                 }
1151         }
1152
1153
1154         function getCategoryCounters($link) {
1155                 $ret_arr = array();
1156
1157                 /* Labels category */
1158
1159                 $cv = array("id" => -2, "kind" => "cat",
1160                         "counter" => getCategoryUnread($link, -2));
1161
1162                 array_push($ret_arr, $cv);
1163
1164                 $result = db_query($link, "SELECT id AS cat_id, value AS unread,
1165                         (SELECT COUNT(id) FROM ttrss_feed_categories AS c2
1166                                 WHERE c2.parent_cat = ttrss_feed_categories.id) AS num_children
1167                         FROM ttrss_feed_categories, ttrss_cat_counters_cache
1168                         WHERE ttrss_cat_counters_cache.feed_id = id AND
1169                         ttrss_cat_counters_cache.owner_uid = ttrss_feed_categories.owner_uid AND
1170                         ttrss_feed_categories.owner_uid = " . $_SESSION["uid"]);
1171
1172                 while ($line = db_fetch_assoc($result)) {
1173                         $line["cat_id"] = (int) $line["cat_id"];
1174
1175                         if ($line["num_children"] > 0) {
1176                                 $child_counter = getCategoryChildrenUnread($link, $line["cat_id"], $_SESSION["uid"]);
1177                         } else {
1178                                 $child_counter = 0;
1179                         }
1180
1181                         $cv = array("id" => $line["cat_id"], "kind" => "cat",
1182                                 "counter" => $line["unread"] + $child_counter);
1183
1184                         array_push($ret_arr, $cv);
1185                 }
1186
1187                 /* Special case: NULL category doesn't actually exist in the DB */
1188
1189                 $cv = array("id" => 0, "kind" => "cat",
1190                         "counter" => (int) ccache_find($link, 0, $_SESSION["uid"], true));
1191
1192                 array_push($ret_arr, $cv);
1193
1194                 return $ret_arr;
1195         }
1196
1197         // only accepts real cats (>= 0)
1198         function getCategoryChildrenUnread($link, $cat, $owner_uid = false) {
1199                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1200
1201                 $result = db_query($link, "SELECT id FROM ttrss_feed_categories WHERE parent_cat = '$cat'
1202                                 AND owner_uid = $owner_uid");
1203
1204                 $unread = 0;
1205
1206                 while ($line = db_fetch_assoc($result)) {
1207                         $unread += getCategoryUnread($link, $line["id"], $owner_uid);
1208                         $unread += getCategoryChildrenUnread($link, $line["id"], $owner_uid);
1209                 }
1210
1211                 return $unread;
1212         }
1213
1214         function getCategoryUnread($link, $cat, $owner_uid = false) {
1215
1216                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1217
1218                 if ($cat >= 0) {
1219
1220                         if ($cat != 0) {
1221                                 $cat_query = "cat_id = '$cat'";
1222                         } else {
1223                                 $cat_query = "cat_id IS NULL";
1224                         }
1225
1226                         $result = db_query($link, "SELECT id FROM ttrss_feeds WHERE $cat_query
1227                                         AND owner_uid = " . $owner_uid);
1228
1229                         $cat_feeds = array();
1230                         while ($line = db_fetch_assoc($result)) {
1231                                 array_push($cat_feeds, "feed_id = " . $line["id"]);
1232                         }
1233
1234                         if (count($cat_feeds) == 0) return 0;
1235
1236                         $match_part = implode(" OR ", $cat_feeds);
1237
1238                         $result = db_query($link, "SELECT COUNT(int_id) AS unread
1239                                 FROM ttrss_user_entries
1240                                 WHERE   unread = true AND ($match_part)
1241                                 AND owner_uid = " . $owner_uid);
1242
1243                         $unread = 0;
1244
1245                         # this needs to be rewritten
1246                         while ($line = db_fetch_assoc($result)) {
1247                                 $unread += $line["unread"];
1248                         }
1249
1250                         return $unread;
1251                 } else if ($cat == -1) {
1252                         return getFeedUnread($link, -1) + getFeedUnread($link, -2) + getFeedUnread($link, -3) + getFeedUnread($link, 0);
1253                 } else if ($cat == -2) {
1254
1255                         $result = db_query($link, "
1256                                 SELECT COUNT(unread) AS unread FROM
1257                                         ttrss_user_entries, ttrss_user_labels2
1258                                 WHERE article_id = ref_id AND unread = true
1259                                         AND ttrss_user_entries.owner_uid = '$owner_uid'");
1260
1261                         $unread = db_fetch_result($result, 0, "unread");
1262
1263                         return $unread;
1264
1265                 }
1266         }
1267
1268         function getFeedUnread($link, $feed, $is_cat = false) {
1269                 return getFeedArticles($link, $feed, $is_cat, true, $_SESSION["uid"]);
1270         }
1271
1272         function getLabelUnread($link, $label_id, $owner_uid = false) {
1273                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1274
1275                 $result = db_query($link, "SELECT COUNT(ref_id) AS unread FROM ttrss_user_entries, ttrss_user_labels2
1276                         WHERE owner_uid = '$owner_uid' AND unread = true AND label_id = '$label_id' AND article_id = ref_id");
1277
1278                 if (db_num_rows($result) != 0) {
1279                         return db_fetch_result($result, 0, "unread");
1280                 } else {
1281                         return 0;
1282                 }
1283         }
1284
1285         function getFeedArticles($link, $feed, $is_cat = false, $unread_only = false,
1286                 $owner_uid = false) {
1287
1288                 $n_feed = (int) $feed;
1289                 $need_entries = false;
1290
1291                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1292
1293                 if ($unread_only) {
1294                         $unread_qpart = "unread = true";
1295                 } else {
1296                         $unread_qpart = "true";
1297                 }
1298
1299                 if ($is_cat) {
1300                         return getCategoryUnread($link, $n_feed, $owner_uid);
1301                 } else if ($n_feed == -6) {
1302                         return 0;
1303                 } else if ($feed != "0" && $n_feed == 0) {
1304
1305                         $feed = db_escape_string($link, $feed);
1306
1307                         $result = db_query($link, "SELECT SUM((SELECT COUNT(int_id)
1308                                 FROM ttrss_user_entries,ttrss_entries WHERE int_id = post_int_id
1309                                         AND ref_id = id AND $unread_qpart)) AS count FROM ttrss_tags
1310                                 WHERE owner_uid = $owner_uid AND tag_name = '$feed'");
1311                         return db_fetch_result($result, 0, "count");
1312
1313                 } else if ($n_feed == -1) {
1314                         $match_part = "marked = true";
1315                 } else if ($n_feed == -2) {
1316                         $match_part = "published = true";
1317                 } else if ($n_feed == -3) {
1318                         $match_part = "unread = true AND score >= 0";
1319
1320                         $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE", $owner_uid);
1321
1322                         if (DB_TYPE == "pgsql") {
1323                                 $match_part .= " AND updated > NOW() - INTERVAL '$intl hour' ";
1324                         } else {
1325                                 $match_part .= " AND updated > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
1326                         }
1327
1328                         $need_entries = true;
1329
1330                 } else if ($n_feed == -4) {
1331                         $match_part = "true";
1332                 } else if ($n_feed >= 0) {
1333
1334                         if ($n_feed != 0) {
1335                                 $match_part = "feed_id = '$n_feed'";
1336                         } else {
1337                                 $match_part = "feed_id IS NULL";
1338                         }
1339
1340                 } else if ($feed < LABEL_BASE_INDEX) {
1341
1342                         $label_id = feed_to_label_id($feed);
1343
1344                         return getLabelUnread($link, $label_id, $owner_uid);
1345
1346                 }
1347
1348                 if ($match_part) {
1349
1350                         if ($need_entries) {
1351                                 $from_qpart = "ttrss_user_entries,ttrss_entries";
1352                                 $from_where = "ttrss_entries.id = ttrss_user_entries.ref_id AND";
1353                         } else {
1354                                 $from_qpart = "ttrss_user_entries";
1355                         }
1356
1357                         $query = "SELECT count(int_id) AS unread
1358                                 FROM $from_qpart WHERE
1359                                 $unread_qpart AND $from_where ($match_part) AND ttrss_user_entries.owner_uid = $owner_uid";
1360
1361                         //echo "[$feed/$query]\n";
1362
1363                         $result = db_query($link, $query);
1364
1365                 } else {
1366
1367                         $result = db_query($link, "SELECT COUNT(post_int_id) AS unread
1368                                 FROM ttrss_tags,ttrss_user_entries,ttrss_entries
1369                                 WHERE tag_name = '$feed' AND post_int_id = int_id AND ref_id = ttrss_entries.id
1370                                 AND $unread_qpart AND ttrss_tags.owner_uid = " . $owner_uid);
1371                 }
1372
1373                 $unread = db_fetch_result($result, 0, "unread");
1374
1375                 return $unread;
1376         }
1377
1378         function getGlobalUnread($link, $user_id = false) {
1379
1380                 if (!$user_id) {
1381                         $user_id = $_SESSION["uid"];
1382                 }
1383
1384                 $result = db_query($link, "SELECT SUM(value) AS c_id FROM ttrss_counters_cache
1385                         WHERE owner_uid = '$user_id' AND feed_id > 0");
1386
1387                 $c_id = db_fetch_result($result, 0, "c_id");
1388
1389                 return $c_id;
1390         }
1391
1392         function getGlobalCounters($link, $global_unread = -1) {
1393                 $ret_arr = array();
1394
1395                 if ($global_unread == -1) {
1396                         $global_unread = getGlobalUnread($link);
1397                 }
1398
1399                 $cv = array("id" => "global-unread",
1400                         "counter" => (int) $global_unread);
1401
1402                 array_push($ret_arr, $cv);
1403
1404                 $result = db_query($link, "SELECT COUNT(id) AS fn FROM
1405                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1406
1407                 $subscribed_feeds = db_fetch_result($result, 0, "fn");
1408
1409                 $cv = array("id" => "subscribed-feeds",
1410                         "counter" => (int) $subscribed_feeds);
1411
1412                 array_push($ret_arr, $cv);
1413
1414                 return $ret_arr;
1415         }
1416
1417         function getVirtCounters($link) {
1418
1419                 $ret_arr = array();
1420
1421                 for ($i = 0; $i >= -4; $i--) {
1422
1423                         $count = getFeedUnread($link, $i);
1424
1425                         $cv = array("id" => $i,
1426                                 "counter" => (int) $count);
1427
1428 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1429 //                              $cv["xmsg"] = getFeedArticles($link, $i)." ".__("total");
1430
1431                         array_push($ret_arr, $cv);
1432                 }
1433
1434                 global $pluginhost;
1435
1436                 if ($pluginhost) {
1437                         $feeds = $pluginhost->get_feeds(-1);
1438
1439                         foreach ($feeds as $feed) {
1440                                 $cv = array("id" => PluginHost::pfeed_to_feed_id($feed['id']),
1441                                         "counter" => $feed['sender']->get_unread($feed['id']));
1442
1443                                 array_push($ret_arr, $cv);
1444                         }
1445
1446                 }
1447
1448                 return $ret_arr;
1449         }
1450
1451         function getLabelCounters($link, $descriptions = false) {
1452
1453                 $ret_arr = array();
1454
1455                 $owner_uid = $_SESSION["uid"];
1456
1457                 $result = db_query($link, "SELECT id,caption,COUNT(unread) AS unread
1458                         FROM ttrss_labels2 LEFT JOIN ttrss_user_labels2 ON
1459                                 (ttrss_labels2.id = label_id)
1460                                         LEFT JOIN ttrss_user_entries ON (ref_id = article_id AND unread = true)
1461                                 WHERE ttrss_labels2.owner_uid = $owner_uid GROUP BY ttrss_labels2.id,
1462                                         ttrss_labels2.caption");
1463
1464                 while ($line = db_fetch_assoc($result)) {
1465
1466                         $id = label_to_feed_id($line["id"]);
1467
1468                         $label_name = $line["caption"];
1469                         $count = $line["unread"];
1470
1471                         $cv = array("id" => $id,
1472                                 "counter" => (int) $count);
1473
1474                         if ($descriptions)
1475                                 $cv["description"] = $label_name;
1476
1477 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1478 //                              $cv["xmsg"] = getFeedArticles($link, $id)." ".__("total");
1479
1480                         array_push($ret_arr, $cv);
1481                 }
1482
1483                 return $ret_arr;
1484         }
1485
1486         function getFeedCounters($link, $active_feed = false) {
1487
1488                 $ret_arr = array();
1489
1490                 $query = "SELECT ttrss_feeds.id,
1491                                 ttrss_feeds.title,
1492                                 ".SUBSTRING_FOR_DATE."(ttrss_feeds.last_updated,1,19) AS last_updated,
1493                                 last_error, value AS count
1494                         FROM ttrss_feeds, ttrss_counters_cache
1495                         WHERE ttrss_feeds.owner_uid = ".$_SESSION["uid"]."
1496                                 AND ttrss_counters_cache.owner_uid = ttrss_feeds.owner_uid
1497                                 AND ttrss_counters_cache.feed_id = id";
1498
1499                 $result = db_query($link, $query);
1500                 $fctrs_modified = false;
1501
1502                 while ($line = db_fetch_assoc($result)) {
1503
1504                         $id = $line["id"];
1505                         $count = $line["count"];
1506                         $last_error = htmlspecialchars($line["last_error"]);
1507
1508                         $last_updated = make_local_datetime($link, $line['last_updated'], false);
1509
1510                         $has_img = feed_has_icon($id);
1511
1512                         if (date('Y') - date('Y', strtotime($line['last_updated'])) > 2)
1513                                 $last_updated = '';
1514
1515                         $cv = array("id" => $id,
1516                                 "updated" => $last_updated,
1517                                 "counter" => (int) $count,
1518                                 "has_img" => (int) $has_img);
1519
1520                         if ($last_error)
1521                                 $cv["error"] = $last_error;
1522
1523 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1524 //                              $cv["xmsg"] = getFeedArticles($link, $id)." ".__("total");
1525
1526                         if ($active_feed && $id == $active_feed)
1527                                 $cv["title"] = truncate_string($line["title"], 30);
1528
1529                         array_push($ret_arr, $cv);
1530
1531                 }
1532
1533                 return $ret_arr;
1534         }
1535
1536         function get_pgsql_version($link) {
1537                 $result = db_query($link, "SELECT version() AS version");
1538                 $version = explode(" ", db_fetch_result($result, 0, "version"));
1539                 return $version[1];
1540         }
1541
1542         /**
1543          * @return array (code => Status code, message => error message if available)
1544          *
1545          *                 0 - OK, Feed already exists
1546          *                 1 - OK, Feed added
1547          *                 2 - Invalid URL
1548          *                 3 - URL content is HTML, no feeds available
1549          *                 4 - URL content is HTML which contains multiple feeds.
1550          *                     Here you should call extractfeedurls in rpc-backend
1551          *                     to get all possible feeds.
1552          *                 5 - Couldn't download the URL content.
1553          */
1554         function subscribe_to_feed($link, $url, $cat_id = 0,
1555                         $auth_login = '', $auth_pass = '') {
1556
1557                 global $fetch_last_error;
1558
1559                 require_once "include/rssfuncs.php";
1560
1561                 $url = fix_url($url);
1562
1563                 if (!$url || !validate_feed_url($url)) return array("code" => 2);
1564
1565                 $contents = @fetch_file_contents($url, false, $auth_login, $auth_pass);
1566
1567                 if (!$contents) {
1568                         return array("code" => 5, "message" => $fetch_last_error);
1569                 }
1570
1571                 if (is_html($contents)) {
1572                         $feedUrls = get_feeds_from_html($url, $contents);
1573
1574                         if (count($feedUrls) == 0) {
1575                                 return array("code" => 3);
1576                         } else if (count($feedUrls) > 1) {
1577                                 return array("code" => 4, "feeds" => $feedUrls);
1578                         }
1579                         //use feed url as new URL
1580                         $url = key($feedUrls);
1581                 }
1582
1583                 if ($cat_id == "0" || !$cat_id) {
1584                         $cat_qpart = "NULL";
1585                 } else {
1586                         $cat_qpart = "'$cat_id'";
1587                 }
1588
1589                 $result = db_query($link,
1590                         "SELECT id FROM ttrss_feeds
1591                         WHERE feed_url = '$url' AND owner_uid = ".$_SESSION["uid"]);
1592
1593                 if (db_num_rows($result) == 0) {
1594                         $result = db_query($link,
1595                                 "INSERT INTO ttrss_feeds
1596                                         (owner_uid,feed_url,title,cat_id, auth_login,auth_pass,update_method)
1597                                 VALUES ('".$_SESSION["uid"]."', '$url',
1598                                 '[Unknown]', $cat_qpart, '$auth_login', '$auth_pass', 0)");
1599
1600                         $result = db_query($link,
1601                                 "SELECT id FROM ttrss_feeds WHERE feed_url = '$url'
1602                                         AND owner_uid = " . $_SESSION["uid"]);
1603
1604                         $feed_id = db_fetch_result($result, 0, "id");
1605
1606                         if ($feed_id) {
1607                                 update_rss_feed($link, $feed_id, true);
1608                         }
1609
1610                         return array("code" => 1);
1611                 } else {
1612                         return array("code" => 0);
1613                 }
1614         }
1615
1616         function print_feed_select($link, $id, $default_id = "",
1617                 $attributes = "", $include_all_feeds = true,
1618                 $root_id = false, $nest_level = 0) {
1619
1620                 if (!$root_id) {
1621                         print "<select id=\"$id\" name=\"$id\" $attributes>";
1622                         if ($include_all_feeds) {
1623                                 $is_selected = ("0" == $default_id) ? "selected=\"1\"" : "";
1624                                 print "<option $is_selected value=\"0\">".__('All feeds')."</option>";
1625                         }
1626                 }
1627
1628                 if (get_pref($link, 'ENABLE_FEED_CATS')) {
1629
1630                         if ($root_id)
1631                                 $parent_qpart = "parent_cat = '$root_id'";
1632                         else
1633                                 $parent_qpart = "parent_cat IS NULL";
1634
1635                         $result = db_query($link, "SELECT id,title,
1636                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1637                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1638                                 FROM ttrss_feed_categories
1639                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1640
1641                         while ($line = db_fetch_assoc($result)) {
1642
1643                                 for ($i = 0; $i < $nest_level; $i++)
1644                                         $line["title"] = " - " . $line["title"];
1645
1646                                 $is_selected = ("CAT:".$line["id"] == $default_id) ? "selected=\"1\"" : "";
1647
1648                                 printf("<option $is_selected value='CAT:%d'>%s</option>",
1649                                         $line["id"], htmlspecialchars($line["title"]));
1650
1651                                 if ($line["num_children"] > 0)
1652                                         print_feed_select($link, $id, $default_id, $attributes,
1653                                                 $include_all_feeds, $line["id"], $nest_level+1);
1654
1655                                 $feed_result = db_query($link, "SELECT id,title FROM ttrss_feeds
1656                                         WHERE cat_id = '".$line["id"]."' AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1657
1658                                 while ($fline = db_fetch_assoc($feed_result)) {
1659                                         $is_selected = ($fline["id"] == $default_id) ? "selected=\"1\"" : "";
1660
1661                                         $fline["title"] = " + " . $fline["title"];
1662
1663                                         for ($i = 0; $i < $nest_level; $i++)
1664                                                 $fline["title"] = " - " . $fline["title"];
1665
1666                                         printf("<option $is_selected value='%d'>%s</option>",
1667                                                 $fline["id"], htmlspecialchars($fline["title"]));
1668                                 }
1669                         }
1670
1671                         if (!$root_id) {
1672                                 $is_selected = ($default_id == "CAT:0") ? "selected=\"1\"" : "";
1673
1674                                 printf("<option $is_selected value='CAT:0'>%s</option>",
1675                                         __("Uncategorized"));
1676
1677                                 $feed_result = db_query($link, "SELECT id,title FROM ttrss_feeds
1678                                         WHERE cat_id IS NULL AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1679
1680                                 while ($fline = db_fetch_assoc($feed_result)) {
1681                                         $is_selected = ($fline["id"] == $default_id && !$default_is_cat) ? "selected=\"1\"" : "";
1682
1683                                         $fline["title"] = " + " . $fline["title"];
1684
1685                                         for ($i = 0; $i < $nest_level; $i++)
1686                                                 $fline["title"] = " - " . $fline["title"];
1687
1688                                         printf("<option $is_selected value='%d'>%s</option>",
1689                                                 $fline["id"], htmlspecialchars($fline["title"]));
1690                                 }
1691                         }
1692
1693                 } else {
1694                         $result = db_query($link, "SELECT id,title FROM ttrss_feeds
1695                                 WHERE owner_uid = ".$_SESSION["uid"]." ORDER BY title");
1696
1697                         while ($line = db_fetch_assoc($result)) {
1698
1699                                 $is_selected = ($line["id"] == $default_id) ? "selected=\"1\"" : "";
1700
1701                                 printf("<option $is_selected value='%d'>%s</option>",
1702                                         $line["id"], htmlspecialchars($line["title"]));
1703                         }
1704                 }
1705
1706                 if (!$root_id) {
1707                         print "</select>";
1708                 }
1709         }
1710
1711         function print_feed_cat_select($link, $id, $default_id,
1712                 $attributes, $include_all_cats = true, $root_id = false, $nest_level = 0) {
1713
1714                         if (!$root_id) {
1715                                         print "<select id=\"$id\" name=\"$id\" default=\"$default_id\" onchange=\"catSelectOnChange(this)\" $attributes>";
1716                         }
1717
1718                         if ($root_id)
1719                                 $parent_qpart = "parent_cat = '$root_id'";
1720                         else
1721                                 $parent_qpart = "parent_cat IS NULL";
1722
1723                         $result = db_query($link, "SELECT id,title,
1724                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1725                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1726                                 FROM ttrss_feed_categories
1727                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1728
1729                         while ($line = db_fetch_assoc($result)) {
1730                                 if ($line["id"] == $default_id) {
1731                                         $is_selected = "selected=\"1\"";
1732                                 } else {
1733                                         $is_selected = "";
1734                                 }
1735
1736                                 for ($i = 0; $i < $nest_level; $i++)
1737                                         $line["title"] = " - " . $line["title"];
1738
1739                                 if ($line["title"])
1740                                         printf("<option $is_selected value='%d'>%s</option>",
1741                                                 $line["id"], htmlspecialchars($line["title"]));
1742
1743                                 if ($line["num_children"] > 0)
1744                                         print_feed_cat_select($link, $id, $default_id, $attributes,
1745                                                 $include_all_cats, $line["id"], $nest_level+1);
1746                         }
1747
1748                         if (!$root_id) {
1749                                 if ($include_all_cats) {
1750                                         if (db_num_rows($result) > 0) {
1751                                                 print "<option disabled=\"1\">--------</option>";
1752                                         }
1753
1754                                         if ($default_id == 0) {
1755                                                 $is_selected = "selected=\"1\"";
1756                                         } else {
1757                                                 $is_selected = "";
1758                                         }
1759
1760                                         print "<option $is_selected value=\"0\">".__('Uncategorized')."</option>";
1761                                 }
1762                                 print "</select>";
1763                         }
1764                 }
1765
1766         function checkbox_to_sql_bool($val) {
1767                 return ($val == "on") ? "true" : "false";
1768         }
1769
1770         function getFeedCatTitle($link, $id) {
1771                 if ($id == -1) {
1772                         return __("Special");
1773                 } else if ($id < LABEL_BASE_INDEX) {
1774                         return __("Labels");
1775                 } else if ($id > 0) {
1776                         $result = db_query($link, "SELECT ttrss_feed_categories.title
1777                                 FROM ttrss_feeds, ttrss_feed_categories WHERE ttrss_feeds.id = '$id' AND
1778                                         cat_id = ttrss_feed_categories.id");
1779                         if (db_num_rows($result) == 1) {
1780                                 return db_fetch_result($result, 0, "title");
1781                         } else {
1782                                 return __("Uncategorized");
1783                         }
1784                 } else {
1785                         return "getFeedCatTitle($id) failed";
1786                 }
1787
1788         }
1789
1790         function getFeedIcon($id) {
1791                 switch ($id) {
1792                 case 0:
1793                         return "images/archive.png";
1794                         break;
1795                 case -1:
1796                         return "images/mark_set.svg";
1797                         break;
1798                 case -2:
1799                         return "images/pub_set.svg";
1800                         break;
1801                 case -3:
1802                         return "images/fresh.png";
1803                         break;
1804                 case -4:
1805                         return "images/tag.png";
1806                         break;
1807                 case -6:
1808                         return "images/recently_read.png";
1809                         break;
1810                 default:
1811                         if ($id < LABEL_BASE_INDEX) {
1812                                 return "images/label.png";
1813                         } else {
1814                                 if (file_exists(ICONS_DIR . "/$id.ico"))
1815                                         return ICONS_URL . "/$id.ico";
1816                         }
1817                         break;
1818                 }
1819         }
1820
1821         function getFeedTitle($link, $id, $cat = false) {
1822                 if ($cat) {
1823                         return getCategoryTitle($link, $id);
1824                 } else if ($id == -1) {
1825                         return __("Starred articles");
1826                 } else if ($id == -2) {
1827                         return __("Published articles");
1828                 } else if ($id == -3) {
1829                         return __("Fresh articles");
1830                 } else if ($id == -4) {
1831                         return __("All articles");
1832                 } else if ($id === 0 || $id === "0") {
1833                         return __("Archived articles");
1834                 } else if ($id == -6) {
1835                         return __("Recently read");
1836                 } else if ($id < LABEL_BASE_INDEX) {
1837                         $label_id = feed_to_label_id($id);
1838                         $result = db_query($link, "SELECT caption FROM ttrss_labels2 WHERE id = '$label_id'");
1839                         if (db_num_rows($result) == 1) {
1840                                 return db_fetch_result($result, 0, "caption");
1841                         } else {
1842                                 return "Unknown label ($label_id)";
1843                         }
1844
1845                 } else if (is_numeric($id) && $id > 0) {
1846                         $result = db_query($link, "SELECT title FROM ttrss_feeds WHERE id = '$id'");
1847                         if (db_num_rows($result) == 1) {
1848                                 return db_fetch_result($result, 0, "title");
1849                         } else {
1850                                 return "Unknown feed ($id)";
1851                         }
1852                 } else {
1853                         return $id;
1854                 }
1855         }
1856
1857         function make_init_params($link) {
1858                 $params = array();
1859
1860                 foreach (array("ON_CATCHUP_SHOW_NEXT_FEED", "HIDE_READ_FEEDS",
1861                         "ENABLE_FEED_CATS", "FEEDS_SORT_BY_UNREAD", "CONFIRM_FEED_CATCHUP",
1862                         "CDM_AUTO_CATCHUP", "FRESH_ARTICLE_MAX_AGE", "DEFAULT_ARTICLE_LIMIT",
1863                         "HIDE_READ_SHOWS_SPECIAL", "COMBINED_DISPLAY_MODE") as $param) {
1864
1865                                  $params[strtolower($param)] = (int) get_pref($link, $param);
1866                  }
1867
1868                 $params["icons_url"] = ICONS_URL;
1869                 $params["cookie_lifetime"] = SESSION_COOKIE_LIFETIME;
1870                 $params["default_view_mode"] = get_pref($link, "_DEFAULT_VIEW_MODE");
1871                 $params["default_view_limit"] = (int) get_pref($link, "_DEFAULT_VIEW_LIMIT");
1872                 $params["default_view_order_by"] = get_pref($link, "_DEFAULT_VIEW_ORDER_BY");
1873                 $params["bw_limit"] = (int) $_SESSION["bw_limit"];
1874                 $params["label_base_index"] = (int) LABEL_BASE_INDEX;
1875
1876                 $result = db_query($link, "SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
1877                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1878
1879                 $max_feed_id = db_fetch_result($result, 0, "mid");
1880                 $num_feeds = db_fetch_result($result, 0, "nf");
1881
1882                 $params["max_feed_id"] = (int) $max_feed_id;
1883                 $params["num_feeds"] = (int) $num_feeds;
1884
1885                 $params["collapsed_feedlist"] = (int) get_pref($link, "_COLLAPSED_FEEDLIST");
1886                 $params["hotkeys"] = get_hotkeys_map($link);
1887
1888                 $params["csrf_token"] = $_SESSION["csrf_token"];
1889                 $params["widescreen"] = (int) $_COOKIE["ttrss_widescreen"];
1890
1891                 $params['simple_update'] = defined('SIMPLE_UPDATE_MODE') && SIMPLE_UPDATE_MODE;
1892
1893                 return $params;
1894         }
1895
1896         function get_hotkeys_info($link) {
1897                 $hotkeys = array(
1898                         __("Navigation") => array(
1899                                 "next_feed" => __("Open next feed"),
1900                                 "prev_feed" => __("Open previous feed"),
1901                                 "next_article" => __("Open next article"),
1902                                 "prev_article" => __("Open previous article"),
1903                                 "next_article_noscroll" => __("Open next article (don't scroll long articles)"),
1904                                 "prev_article_noscroll" => __("Open previous article (don't scroll long articles)"),
1905                                 "search_dialog" => __("Show search dialog")),
1906                         __("Article") => array(
1907                                 "toggle_mark" => __("Toggle starred"),
1908                                 "toggle_publ" => __("Toggle published"),
1909                                 "toggle_unread" => __("Toggle unread"),
1910                                 "edit_tags" => __("Edit tags"),
1911                                 "dismiss_selected" => __("Dismiss selected"),
1912                                 "dismiss_read" => __("Dismiss read"),
1913                                 "open_in_new_window" => __("Open in new window"),
1914                                 "catchup_below" => __("Mark below as read"),
1915                                 "catchup_above" => __("Mark above as read"),
1916                                 "article_scroll_down" => __("Scroll down"),
1917                                 "article_scroll_up" => __("Scroll up"),
1918                                 "select_article_cursor" => __("Select article under cursor"),
1919                                 "email_article" => __("Email article"),
1920                                 "close_article" => __("Close/collapse article"),
1921                                 "toggle_widescreen" => __("Toggle widescreen mode"),
1922                                 "toggle_embed_original" => __("Toggle embed original")),
1923                         __("Article selection") => array(
1924                                 "select_all" => __("Select all articles"),
1925                                 "select_unread" => __("Select unread"),
1926                                 "select_marked" => __("Select starred"),
1927                                 "select_published" => __("Select published"),
1928                                 "select_invert" => __("Invert selection"),
1929                                 "select_none" => __("Deselect everything")),
1930                         __("Feed") => array(
1931                                 "feed_refresh" => __("Refresh current feed"),
1932                                 "feed_unhide_read" => __("Un/hide read feeds"),
1933                                 "feed_subscribe" => __("Subscribe to feed"),
1934                                 "feed_edit" => __("Edit feed"),
1935                                 "feed_catchup" => __("Mark as read"),
1936                                 "feed_reverse" => __("Reverse headlines"),
1937                                 "feed_debug_update" => __("Debug feed update"),
1938                                 "catchup_all" => __("Mark all feeds as read"),
1939                                 "cat_toggle_collapse" => __("Un/collapse current category"),
1940                                 "toggle_combined_mode" => __("Toggle combined mode")),
1941                         __("Go to") => array(
1942                                 "goto_all" => __("All articles"),
1943                                 "goto_fresh" => __("Fresh"),
1944                                 "goto_marked" => __("Starred"),
1945                                 "goto_published" => __("Published"),
1946                                 "goto_tagcloud" => __("Tag cloud"),
1947                                 "goto_prefs" => __("Preferences")),
1948                         __("Other") => array(
1949                                 "create_label" => __("Create label"),
1950                                 "create_filter" => __("Create filter"),
1951                                 "collapse_sidebar" => __("Un/collapse sidebar"),
1952                                 "help_dialog" => __("Show help dialog"))
1953                         );
1954
1955                 return $hotkeys;
1956         }
1957
1958         function get_hotkeys_map($link) {
1959                 $hotkeys = array(
1960 //                      "navigation" => array(
1961                                 "k" => "next_feed",
1962                                 "j" => "prev_feed",
1963                                 "n" => "next_article",
1964                                 "p" => "prev_article",
1965                                 "(38)|up" => "prev_article",
1966                                 "(40)|down" => "next_article",
1967 //                              "^(38)|Ctrl-up" => "prev_article_noscroll",
1968 //                              "^(40)|Ctrl-down" => "next_article_noscroll",
1969                                 "(191)|/" => "search_dialog",
1970 //                      "article" => array(
1971                                 "s" => "toggle_mark",
1972                                 "*s" => "toggle_publ",
1973                                 "u" => "toggle_unread",
1974                                 "*t" => "edit_tags",
1975                                 "*d" => "dismiss_selected",
1976                                 "*x" => "dismiss_read",
1977                                 "o" => "open_in_new_window",
1978                                 "c p" => "catchup_below",
1979                                 "c n" => "catchup_above",
1980                                 "*n" => "article_scroll_down",
1981                                 "*p" => "article_scroll_up",
1982                                 "*(38)|Shift+up" => "article_scroll_up",
1983                                 "*(40)|Shift+down" => "article_scroll_down",
1984                                 "a *w" => "toggle_widescreen",
1985                                 "a e" => "toggle_embed_original",
1986                                 "e" => "email_article",
1987                                 "a q" => "close_article",
1988 //                      "article_selection" => array(
1989                                 "a a" => "select_all",
1990                                 "a u" => "select_unread",
1991                                 "a *u" => "select_marked",
1992                                 "a p" => "select_published",
1993                                 "a i" => "select_invert",
1994                                 "a n" => "select_none",
1995 //                      "feed" => array(
1996                                 "f r" => "feed_refresh",
1997                                 "f a" => "feed_unhide_read",
1998                                 "f s" => "feed_subscribe",
1999                                 "f e" => "feed_edit",
2000                                 "f q" => "feed_catchup",
2001                                 "f x" => "feed_reverse",
2002                                 "f *d" => "feed_debug_update",
2003                                 "f *c" => "toggle_combined_mode",
2004                                 "*q" => "catchup_all",
2005                                 "x" => "cat_toggle_collapse",
2006 //                      "goto" => array(
2007                                 "g a" => "goto_all",
2008                                 "g f" => "goto_fresh",
2009                                 "g s" => "goto_marked",
2010                                 "g p" => "goto_published",
2011                                 "g t" => "goto_tagcloud",
2012                                 "g *p" => "goto_prefs",
2013 //                      "other" => array(
2014                                 "(9)|Tab" => "select_article_cursor", // tab
2015                                 "c l" => "create_label",
2016                                 "c f" => "create_filter",
2017                                 "c s" => "collapse_sidebar",
2018                                 "^(191)|Ctrl+/" => "help_dialog",
2019                         );
2020
2021                 if (get_pref($link, 'COMBINED_DISPLAY_MODE')) {
2022                         $hotkeys["^(38)|Ctrl-up"] = "prev_article_noscroll";
2023                         $hotkeys["^(40)|Ctrl-down"] = "next_article_noscroll";
2024                 }
2025
2026                 global $pluginhost;
2027                 foreach ($pluginhost->get_hooks($pluginhost::HOOK_HOTKEY_MAP) as $plugin) {
2028                         $hotkeys = $plugin->hook_hotkey_map($hotkeys);
2029                 }
2030
2031                 $prefixes = array();
2032
2033                 foreach (array_keys($hotkeys) as $hotkey) {
2034                         $pair = explode(" ", $hotkey, 2);
2035
2036                         if (count($pair) > 1 && !in_array($pair[0], $prefixes)) {
2037                                 array_push($prefixes, $pair[0]);
2038                         }
2039                 }
2040
2041                 return array($prefixes, $hotkeys);
2042         }
2043
2044         function make_runtime_info($link) {
2045                 $data = array();
2046
2047                 $result = db_query($link, "SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
2048                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
2049
2050                 $max_feed_id = db_fetch_result($result, 0, "mid");
2051                 $num_feeds = db_fetch_result($result, 0, "nf");
2052
2053                 $data["max_feed_id"] = (int) $max_feed_id;
2054                 $data["num_feeds"] = (int) $num_feeds;
2055
2056                 $data['last_article_id'] = getLastArticleId($link);
2057                 $data['cdm_expanded'] = get_pref($link, 'CDM_EXPANDED');
2058
2059                 $data['dep_ts'] = calculate_dep_timestamp();
2060                 $data['reload_on_ts_change'] = !defined('_NO_RELOAD_ON_TS_CHANGE');
2061
2062                 if (file_exists(LOCK_DIRECTORY . "/update_daemon.lock")) {
2063
2064                         $data['daemon_is_running'] = (int) file_is_locked("update_daemon.lock");
2065
2066                         if (time() - $_SESSION["daemon_stamp_check"] > 30) {
2067
2068                                 $stamp = (int) @file_get_contents(LOCK_DIRECTORY . "/update_daemon.stamp");
2069
2070                                 if ($stamp) {
2071                                         $stamp_delta = time() - $stamp;
2072
2073                                         if ($stamp_delta > 1800) {
2074                                                 $stamp_check = 0;
2075                                         } else {
2076                                                 $stamp_check = 1;
2077                                                 $_SESSION["daemon_stamp_check"] = time();
2078                                         }
2079
2080                                         $data['daemon_stamp_ok'] = $stamp_check;
2081
2082                                         $stamp_fmt = date("Y.m.d, G:i", $stamp);
2083
2084                                         $data['daemon_stamp'] = $stamp_fmt;
2085                                 }
2086                         }
2087                 }
2088
2089                 if ($_SESSION["last_version_check"] + 86400 + rand(-1000, 1000) < time()) {
2090                                 $new_version_details = @check_for_update($link);
2091
2092                                 $data['new_version_available'] = (int) ($new_version_details != false);
2093
2094                                 $_SESSION["last_version_check"] = time();
2095                                 $_SESSION["version_data"] = $new_version_details;
2096                 }
2097
2098                 return $data;
2099         }
2100
2101         function search_to_sql($link, $search) {
2102
2103                 $search_query_part = "";
2104
2105                 $keywords = explode(" ", $search);
2106                 $query_keywords = array();
2107
2108                 foreach ($keywords as $k) {
2109                         if (strpos($k, "-") === 0) {
2110                                 $k = substr($k, 1);
2111                                 $not = "NOT";
2112                         } else {
2113                                 $not = "";
2114                         }
2115
2116                         $commandpair = explode(":", mb_strtolower($k), 2);
2117
2118                         if ($commandpair[0] == "note" && $commandpair[1]) {
2119
2120                                 if ($commandpair[1] == "true")
2121                                         array_push($query_keywords, "($not (note IS NOT NULL AND note != ''))");
2122                                 else
2123                                         array_push($query_keywords, "($not (note IS NULL OR note = ''))");
2124
2125                         } else if ($commandpair[0] == "star" && $commandpair[1]) {
2126
2127                                 if ($commandpair[1] == "true")
2128                                         array_push($query_keywords, "($not (marked = true))");
2129                                 else
2130                                         array_push($query_keywords, "($not (marked = false))");
2131
2132                         } else if ($commandpair[0] == "pub" && $commandpair[1]) {
2133
2134                                 if ($commandpair[1] == "true")
2135                                         array_push($query_keywords, "($not (published = true))");
2136                                 else
2137                                         array_push($query_keywords, "($not (published = false))");
2138
2139                         } else if (strpos($k, "@") === 0) {
2140
2141                                 $user_tz_string = get_pref($link, 'USER_TIMEZONE', $_SESSION['uid']);
2142                                 $orig_ts = strtotime(substr($k, 1));
2143                                 $k = date("Y-m-d", convert_timestamp($orig_ts, $user_tz_string, 'UTC'));
2144
2145                                 //$k = date("Y-m-d", strtotime(substr($k, 1)));
2146
2147                                 array_push($query_keywords, "(".SUBSTRING_FOR_DATE."(updated,1,LENGTH('$k')) $not = '$k')");
2148                         } else {
2149                                 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2150                                                 OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2151                         }
2152                 }
2153
2154                 $search_query_part = implode("AND", $query_keywords);
2155
2156                 return $search_query_part;
2157         }
2158
2159         function getParentCategories($link, $cat, $owner_uid) {
2160                 $rv = array();
2161
2162                 $result = db_query($link, "SELECT parent_cat FROM ttrss_feed_categories
2163                         WHERE id = '$cat' AND parent_cat IS NOT NULL AND owner_uid = $owner_uid");
2164
2165                 while ($line = db_fetch_assoc($result)) {
2166                         array_push($rv, $line["parent_cat"]);
2167                         $rv = array_merge($rv, getParentCategories($link, $line["parent_cat"], $owner_uid));
2168                 }
2169
2170                 return $rv;
2171         }
2172
2173         function getChildCategories($link, $cat, $owner_uid) {
2174                 $rv = array();
2175
2176                 $result = db_query($link, "SELECT id FROM ttrss_feed_categories
2177                         WHERE parent_cat = '$cat' AND owner_uid = $owner_uid");
2178
2179                 while ($line = db_fetch_assoc($result)) {
2180                         array_push($rv, $line["id"]);
2181                         $rv = array_merge($rv, getChildCategories($link, $line["id"], $owner_uid));
2182                 }
2183
2184                 return $rv;
2185         }
2186
2187         function queryFeedHeadlines($link, $feed, $limit, $view_mode, $cat_view, $search, $search_mode, $override_order = false, $offset = 0, $owner_uid = 0, $filter = false, $since_id = 0, $include_children = false, $ignore_vfeed_group = false) {
2188
2189                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2190
2191                 $ext_tables_part = "";
2192
2193                         if ($search) {
2194
2195                                 if (SPHINX_ENABLED) {
2196                                         $ids = join(",", @sphinx_search($search, 0, 500));
2197
2198                                         if ($ids)
2199                                                 $search_query_part = "ref_id IN ($ids) AND ";
2200                                         else
2201                                                 $search_query_part = "ref_id = -1 AND ";
2202
2203                                 } else {
2204                                         $search_query_part = search_to_sql($link, $search);
2205                                         $search_query_part .= " AND ";
2206                                 }
2207
2208                         } else {
2209                                 $search_query_part = "";
2210                         }
2211
2212                         if ($filter) {
2213
2214                                 if (DB_TYPE == "pgsql") {
2215                                         $query_strategy_part .= " AND updated > NOW() - INTERVAL '14 days' ";
2216                                 } else {
2217                                         $query_strategy_part .= " AND updated > DATE_SUB(NOW(), INTERVAL 14 DAY) ";
2218                                 }
2219
2220                                 $override_order = "updated DESC";
2221
2222                                 $filter_query_part = filter_to_sql($link, $filter, $owner_uid);
2223
2224                                 // Try to check if SQL regexp implementation chokes on a valid regexp
2225                                 $result = db_query($link, "SELECT true AS true_val FROM ttrss_entries,
2226                                         ttrss_user_entries, ttrss_feeds, ttrss_feed_categories
2227                                         WHERE $filter_query_part LIMIT 1", false);
2228
2229                                 if ($result) {
2230                                         $test = db_fetch_result($result, 0, "true_val");
2231
2232                                         if (!$test) {
2233                                                 $filter_query_part = "false AND";
2234                                         } else {
2235                                                 $filter_query_part .= " AND";
2236                                         }
2237                                 } else {
2238                                         $filter_query_part = "false AND";
2239                                 }
2240
2241                         } else {
2242                                 $filter_query_part = "";
2243                         }
2244
2245                         if ($since_id) {
2246                                 $since_id_part = "ttrss_entries.id > $since_id AND ";
2247                         } else {
2248                                 $since_id_part = "";
2249                         }
2250
2251                         $view_query_part = "";
2252
2253                         if ($view_mode == "adaptive" || $view_query_part == "noscores") {
2254                                 if ($search) {
2255                                         $view_query_part = " ";
2256                                 } else if ($feed != -1) {
2257
2258                                         $unread = getFeedUnread($link, $feed, $cat_view);
2259
2260                                         if ($cat_view && $feed > 0 && $include_children)
2261                                                 $unread += getCategoryChildrenUnread($link, $feed);
2262
2263                                         if ($unread > 0)
2264                                 $view_query_part = " unread = true AND ";
2265
2266                                 }
2267                         }
2268
2269                         if ($view_mode == "marked") {
2270                                 $view_query_part = " marked = true AND ";
2271                         }
2272
2273                         if ($view_mode == "published") {
2274                                 $view_query_part = " published = true AND ";
2275                         }
2276
2277                         if ($view_mode == "unread" && $feed != -6) {
2278                                 $view_query_part = " unread = true AND ";
2279                         }
2280
2281                         if ($view_mode == "updated") {
2282                                 $view_query_part = " (last_read is null and unread = false) AND ";
2283                         }
2284
2285                         if ($limit > 0) {
2286                                 $limit_query_part = "LIMIT " . $limit;
2287                         }
2288
2289                         $allow_archived = false;
2290
2291                         $vfeed_query_part = "";
2292
2293                         // override query strategy and enable feed display when searching globally
2294                         if ($search && $search_mode == "all_feeds") {
2295                                 $query_strategy_part = "true";
2296                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2297                         /* tags */
2298                         } else if (!is_numeric($feed)) {
2299                                 $query_strategy_part = "true";
2300                                 $vfeed_query_part = "(SELECT title FROM ttrss_feeds WHERE
2301                                         id = feed_id) as feed_title,";
2302                         } else if ($search && $search_mode == "this_cat") {
2303                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2304
2305                                 if ($feed > 0) {
2306                                         if ($include_children) {
2307                                                 $subcats = getChildCategories($link, $feed, $owner_uid);
2308                                                 array_push($subcats, $feed);
2309                                                 $cats_qpart = join(",", $subcats);
2310                                         } else {
2311                                                 $cats_qpart = $feed;
2312                                         }
2313
2314                                         $query_strategy_part = "ttrss_feeds.cat_id IN ($cats_qpart)";
2315
2316                                 } else {
2317                                         $query_strategy_part = "ttrss_feeds.cat_id IS NULL";
2318                                 }
2319
2320                         } else if ($feed > 0) {
2321
2322                                 if ($cat_view) {
2323
2324                                         if ($feed > 0) {
2325                                                 if ($include_children) {
2326                                                         # sub-cats
2327                                                         $subcats = getChildCategories($link, $feed, $owner_uid);
2328
2329                                                         array_push($subcats, $feed);
2330                                                         $query_strategy_part = "cat_id IN (".
2331                                                                         implode(",", $subcats).")";
2332
2333                                                 } else {
2334                                                         $query_strategy_part = "cat_id = '$feed'";
2335                                                 }
2336
2337                                         } else {
2338                                                 $query_strategy_part = "cat_id IS NULL";
2339                                         }
2340
2341                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2342
2343                                 } else {
2344                                         $query_strategy_part = "feed_id = '$feed'";
2345                                 }
2346                         } else if ($feed == 0 && !$cat_view) { // archive virtual feed
2347                                 $query_strategy_part = "feed_id IS NULL";
2348                                 $allow_archived = true;
2349                         } else if ($feed == 0 && $cat_view) { // uncategorized
2350                                 $query_strategy_part = "cat_id IS NULL AND feed_id IS NOT NULL";
2351                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2352                         } else if ($feed == -1) { // starred virtual feed
2353                                 $query_strategy_part = "marked = true";
2354                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2355                                 $allow_archived = true;
2356
2357                                 if (!$override_order) {
2358                                         if (get_pref($link, 'REVERSE_HEADLINES', $owner_uid)) {
2359                                                 $override_order = "date_entered, updated";
2360                                         } else {
2361                                                 $override_order = "last_marked DESC, date_entered DESC, updated DESC";
2362                                         }
2363                                 }
2364
2365                         } else if ($feed == -2) { // published virtual feed OR labels category
2366
2367                                 if (!$cat_view) {
2368                                         $query_strategy_part = "published = true";
2369                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2370                                         $allow_archived = true;
2371
2372                                         if (!$override_order) {
2373                                                 if (get_pref($link, 'REVERSE_HEADLINES', $owner_uid)) {
2374                                                         $override_order = "date_entered, updated";
2375                                                 } else {
2376                                                         $override_order = "last_published DESC, date_entered DESC, updated DESC";
2377                                                 }
2378                                         }
2379
2380                                 } else {
2381                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2382
2383                                         $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2384
2385                                         $query_strategy_part = "ttrss_labels2.id = ttrss_user_labels2.label_id AND
2386                                                 ttrss_user_labels2.article_id = ref_id";
2387
2388                                 }
2389                         } else if ($feed == -6) { // recently read
2390                                 $query_strategy_part = "unread = false AND last_read IS NOT NULL";
2391                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2392                                 $allow_archived = true;
2393
2394                                 if (!$override_order) $override_order = "last_read DESC";
2395                         } else if ($feed == -3) { // fresh virtual feed
2396                                 $query_strategy_part = "unread = true AND score >= 0";
2397
2398                                 $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE", $owner_uid);
2399
2400                                 if (DB_TYPE == "pgsql") {
2401                                         $query_strategy_part .= " AND date_entered > NOW() - INTERVAL '$intl hour' ";
2402                                 } else {
2403                                         $query_strategy_part .= " AND date_entered > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
2404                                 }
2405
2406                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2407                         } else if ($feed == -4) { // all articles virtual feed
2408                                 $query_strategy_part = "true";
2409                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2410                         } else if ($feed <= LABEL_BASE_INDEX) { // labels
2411                                 $label_id = feed_to_label_id($feed);
2412
2413                                 $query_strategy_part = "label_id = '$label_id' AND
2414                                         ttrss_labels2.id = ttrss_user_labels2.label_id AND
2415                                         ttrss_user_labels2.article_id = ref_id";
2416
2417                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2418                                 $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2419                                 $allow_archived = true;
2420
2421                         } else {
2422                                 $query_strategy_part = "true";
2423                         }
2424
2425                         if (get_pref($link, "SORT_HEADLINES_BY_FEED_DATE", $owner_uid)) {
2426                                 $date_sort_field = "updated";
2427                         } else {
2428                                 $date_sort_field = "date_entered";
2429                         }
2430
2431                         if (get_pref($link, 'REVERSE_HEADLINES', $owner_uid)) {
2432                                 $order_by = "$date_sort_field, updated";
2433                         } else {
2434                                 $order_by = "$date_sort_field DESC, updated DESC";
2435                         }
2436
2437                         if ($view_mode != "noscores") {
2438                                 $order_by = "score DESC, $order_by";
2439                         }
2440
2441                         if ($view_mode == "unread_first") {
2442                                 $order_by = "unread DESC, $order_by";
2443                         }
2444
2445                         if ($override_order) {
2446                                 $order_by = $override_order;
2447                         }
2448
2449                         $feed_title = "";
2450
2451                         if ($search) {
2452                                 $feed_title = T_sprintf("Search results: %s", $search);
2453                         } else {
2454                                 if ($cat_view) {
2455                                         $feed_title = getCategoryTitle($link, $feed);
2456                                 } else {
2457                                         if (is_numeric($feed) && $feed > 0) {
2458                                                 $result = db_query($link, "SELECT title,site_url,last_error
2459                                                         FROM ttrss_feeds WHERE id = '$feed' AND owner_uid = $owner_uid");
2460
2461                                                 $feed_title = db_fetch_result($result, 0, "title");
2462                                                 $feed_site_url = db_fetch_result($result, 0, "site_url");
2463                                                 $last_error = db_fetch_result($result, 0, "last_error");
2464                                         } else {
2465                                                 $feed_title = getFeedTitle($link, $feed);
2466                                         }
2467                                 }
2468                         }
2469
2470                         $content_query_part = "content as content_preview, cached_content, ";
2471
2472                         if (is_numeric($feed)) {
2473
2474                                 if ($feed >= 0) {
2475                                         $feed_kind = "Feeds";
2476                                 } else {
2477                                         $feed_kind = "Labels";
2478                                 }
2479
2480                                 if ($limit_query_part) {
2481                                         $offset_query_part = "OFFSET $offset";
2482                                 }
2483
2484                                 // proper override_order applied above
2485                                 if ($vfeed_query_part && !$ignore_vfeed_group && get_pref($link, 'VFEED_GROUP_BY_FEED', $owner_uid)) {
2486                                         if (!$override_order) {
2487                                                 $order_by = "ttrss_feeds.title, $order_by";
2488                                         } else {
2489                                                 $order_by = "ttrss_feeds.title, $override_order";
2490                                         }
2491                                 }
2492
2493                                 if (!$allow_archived) {
2494                                         $from_qpart = "ttrss_entries,ttrss_user_entries,ttrss_feeds$ext_tables_part";
2495                                         $feed_check_qpart = "ttrss_user_entries.feed_id = ttrss_feeds.id AND";
2496
2497                                 } else {
2498                                         $from_qpart = "ttrss_entries$ext_tables_part,ttrss_user_entries
2499                                                 LEFT JOIN ttrss_feeds ON (feed_id = ttrss_feeds.id)";
2500                                 }
2501
2502                                 $query = "SELECT DISTINCT
2503                                                 date_entered,
2504                                                 guid,
2505                                                 ttrss_entries.id,ttrss_entries.title,
2506                                                 updated,
2507                                                 label_cache,
2508                                                 tag_cache,
2509                                                 always_display_enclosures,
2510                                                 site_url,
2511                                                 note,
2512                                                 num_comments,
2513                                                 comments,
2514                                                 int_id,
2515                                                 hide_images,
2516                                                 unread,feed_id,marked,published,link,last_read,orig_feed_id,
2517                                                 last_marked, last_published,
2518                                                 $vfeed_query_part
2519                                                 $content_query_part
2520                                                 author,score
2521                                         FROM
2522                                                 $from_qpart
2523                                         WHERE
2524                                         $feed_check_qpart
2525                                         ttrss_user_entries.ref_id = ttrss_entries.id AND
2526                                         ttrss_user_entries.owner_uid = '$owner_uid' AND
2527                                         $search_query_part
2528                                         $filter_query_part
2529                                         $view_query_part
2530                                         $since_id_part
2531                                         $query_strategy_part ORDER BY $order_by
2532                                         $limit_query_part $offset_query_part";
2533
2534                                 if ($_REQUEST["debug"]) print $query;
2535
2536                                 $result = db_query($link, $query);
2537
2538                         } else {
2539                                 // browsing by tag
2540
2541                                 $select_qpart = "SELECT DISTINCT " .
2542                                                                 "date_entered," .
2543                                                                 "guid," .
2544                                                                 "note," .
2545                                                                 "ttrss_entries.id as id," .
2546                                                                 "title," .
2547                                                                 "updated," .
2548                                                                 "unread," .
2549                                                                 "feed_id," .
2550                                                                 "orig_feed_id," .
2551                                                                 "marked," .
2552                                                                 "num_comments, " .
2553                                                                 "comments, " .
2554                                                                 "tag_cache," .
2555                                                                 "label_cache," .
2556                                                                 "link," .
2557                                                                 "last_read," .
2558                                                                 "(SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) AS hide_images," .
2559                                                                 "last_marked, last_published, " .
2560                                                                 $since_id_part .
2561                                                                 $vfeed_query_part .
2562                                                                 $content_query_part .
2563                                                                 "score ";
2564
2565                                 $feed_kind = "Tags";
2566                                 $all_tags = explode(",", $feed);
2567                                 if ($search_mode == 'any') {
2568                                         $tag_sql = "tag_name in (" . implode(", ", array_map("db_quote", $all_tags)) . ")";
2569                                         $from_qpart = " FROM ttrss_entries,ttrss_user_entries,ttrss_tags ";
2570                                         $where_qpart = " WHERE " .
2571                                                                    "ref_id = ttrss_entries.id AND " .
2572                                                                    "ttrss_user_entries.owner_uid = $owner_uid AND " .
2573                                                                    "post_int_id = int_id AND $tag_sql AND " .
2574                                                                    $view_query_part .
2575                                                                    $search_query_part .
2576                                                                    $query_strategy_part . " ORDER BY $order_by " .
2577                                                                    $limit_query_part;
2578
2579                                 } else {
2580                                         $i = 1;
2581                                         $sub_selects = array();
2582                                         $sub_ands = array();
2583                                         foreach ($all_tags as $term) {
2584                                                 array_push($sub_selects, "(SELECT post_int_id from ttrss_tags WHERE tag_name = " . db_quote($term) . " AND owner_uid = $owner_uid) as A$i");
2585                                                 $i++;
2586                                         }
2587                                         if ($i > 2) {
2588                                                 $x = 1;
2589                                                 $y = 2;
2590                                                 do {
2591                                                         array_push($sub_ands, "A$x.post_int_id = A$y.post_int_id");
2592                                                         $x++;
2593                                                         $y++;
2594                                                 } while ($y < $i);
2595                                         }
2596                                         array_push($sub_ands, "A1.post_int_id = ttrss_user_entries.int_id and ttrss_user_entries.owner_uid = $owner_uid");
2597                                         array_push($sub_ands, "ttrss_user_entries.ref_id = ttrss_entries.id");
2598                                         $from_qpart = " FROM " . implode(", ", $sub_selects) . ", ttrss_user_entries, ttrss_entries";
2599                                         $where_qpart = " WHERE " . implode(" AND ", $sub_ands);
2600                                 }
2601                                 //                              error_log("TAG SQL: " . $tag_sql);
2602                                 // $tag_sql = "tag_name = '$feed'";   DEFAULT way
2603
2604                                 //                              error_log("[". $select_qpart . "][" . $from_qpart . "][" .$where_qpart . "]");
2605                                 $result = db_query($link, $select_qpart . $from_qpart . $where_qpart);
2606                         }
2607
2608                         return array($result, $feed_title, $feed_site_url, $last_error);
2609
2610         }
2611
2612         function sanitize($link, $str, $force_remove_images = false, $owner = false, $site_url = false) {
2613                 if (!$owner) $owner = $_SESSION["uid"];
2614
2615                 $res = trim($str); if (!$res) return '';
2616
2617                 if (strpos($res, "href=") === false)
2618                         $res = rewrite_urls($res);
2619
2620                 $charset_hack = '<head>
2621                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
2622                 </head>';
2623
2624                 $res = trim($res); if (!$res) return '';
2625
2626                 libxml_use_internal_errors(true);
2627
2628                 $doc = new DOMDocument();
2629                 $doc->loadHTML($charset_hack . $res);
2630                 $xpath = new DOMXPath($doc);
2631
2632                 $entries = $xpath->query('(//a[@href]|//img[@src])');
2633
2634                 foreach ($entries as $entry) {
2635
2636                         if ($site_url) {
2637
2638                                 if ($entry->hasAttribute('href'))
2639                                         $entry->setAttribute('href',
2640                                                 rewrite_relative_url($site_url, $entry->getAttribute('href')));
2641
2642                                 if ($entry->hasAttribute('src')) {
2643                                         $src = rewrite_relative_url($site_url, $entry->getAttribute('src'));
2644
2645                                         $cached_filename = CACHE_DIR . '/images/' . sha1($src) . '.png';
2646
2647                                         if (file_exists($cached_filename)) {
2648                                                 $src = SELF_URL_PATH . '/image.php?hash=' . sha1($src);
2649                                         }
2650
2651                                         $entry->setAttribute('src', $src);
2652                                 }
2653
2654                                 if ($entry->nodeName == 'img') {
2655                                         if (($owner && get_pref($link, "STRIP_IMAGES", $owner)) ||
2656                                                         $force_remove_images) {
2657
2658                                                 $p = $doc->createElement('p');
2659
2660                                                 $a = $doc->createElement('a');
2661                                                 $a->setAttribute('href', $entry->getAttribute('src'));
2662
2663                                                 $a->appendChild(new DOMText($entry->getAttribute('src')));
2664                                                 $a->setAttribute('target', '_blank');
2665
2666                                                 $p->appendChild($a);
2667
2668                                                 $entry->parentNode->replaceChild($p, $entry);
2669                                         }
2670                                 }
2671                         }
2672
2673                         if (strtolower($entry->nodeName) == "a") {
2674                                 $entry->setAttribute("target", "_blank");
2675                         }
2676                 }
2677
2678                 $entries = $xpath->query('//iframe');
2679                 foreach ($entries as $entry) {
2680                         $entry->setAttribute('sandbox', 'allow-scripts');
2681
2682                 }
2683
2684                 $allowed_elements = array('a', 'address', 'audio', 'article',
2685                         'b', 'big', 'blockquote', 'body', 'br', 'cite', 'center',
2686                         'code', 'dd', 'del', 'details', 'div', 'dl', 'font',
2687                         'dt', 'em', 'footer', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6',
2688                         'header', 'html', 'i', 'img', 'ins', 'kbd',
2689                         'li', 'nav', 'ol', 'p', 'pre', 'q', 's','small',
2690                         'source', 'span', 'strike', 'strong', 'sub', 'summary',
2691                         'sup', 'table', 'tbody', 'td', 'tfoot', 'th', 'thead',
2692                         'tr', 'track', 'tt', 'u', 'ul', 'var', 'wbr', 'video' );
2693
2694                 if ($_SESSION['hasSandbox']) $allowed_elements[] = 'iframe';
2695
2696                 $disallowed_attributes = array('id', 'style', 'class');
2697
2698                 global $pluginhost;
2699
2700                 if (isset($pluginhost)) {
2701                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_SANITIZE) as $plugin) {
2702                                 $retval = $plugin->hook_sanitize($doc, $site_url, $allowed_elements, $disallowed_attributes);
2703                                 if (is_array($retval)) {
2704                                         $doc = $retval[0];
2705                                         $allowed_elements = $retval[1];
2706                                         $disallowed_attributes = $retval[2];
2707                                 } else {
2708                                         $doc = $retval;
2709                                 }
2710                         }
2711                 }
2712
2713                 $doc->removeChild($doc->firstChild); //remove doctype
2714                 $doc = strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes);
2715                 $res = $doc->saveHTML();
2716                 return $res;
2717         }
2718
2719         function strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes) {
2720                 $entries = $doc->getElementsByTagName("*");
2721
2722                 foreach ($entries as $entry) {
2723                         if (!in_array($entry->nodeName, $allowed_elements)) {
2724                                 $entry->parentNode->removeChild($entry);
2725                         }
2726
2727                         if ($entry->hasAttributes()) {
2728                                 $attrs_to_remove = array();
2729
2730                                 foreach ($entry->attributes as $attr) {
2731
2732                                         if (strpos($attr->nodeName, 'on') === 0) {
2733                                                 array_push($attrs_to_remove, $attr);
2734                                         }
2735
2736                                         if (in_array($attr->nodeName, $disallowed_attributes)) {
2737                                                 array_push($attrs_to_remove, $attr);
2738                                         }
2739                                 }
2740
2741                                 foreach ($attrs_to_remove as $attr) {
2742                                         $entry->removeAttributeNode($attr);
2743                                 }
2744                         }
2745                 }
2746
2747                 return $doc;
2748         }
2749
2750         function check_for_update($link) {
2751                 if (CHECK_FOR_NEW_VERSION && $_SESSION['access_level'] >= 10) {
2752                         $version_url = "http://tt-rss.org/version.php?ver=" . VERSION .
2753                                 "&iid=" . sha1(SELF_URL_PATH);
2754
2755                         $version_data = @fetch_file_contents($version_url);
2756
2757                         if ($version_data) {
2758                                 $version_data = json_decode($version_data, true);
2759                                 if ($version_data && $version_data['version']) {
2760
2761                                         if (version_compare(VERSION, $version_data['version']) == -1) {
2762                                                 return $version_data;
2763                                         }
2764                                 }
2765                         }
2766                 }
2767                 return false;
2768         }
2769
2770         function catchupArticlesById($link, $ids, $cmode, $owner_uid = false) {
2771
2772                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2773                 if (count($ids) == 0) return;
2774
2775                 $tmp_ids = array();
2776
2777                 foreach ($ids as $id) {
2778                         array_push($tmp_ids, "ref_id = '$id'");
2779                 }
2780
2781                 $ids_qpart = join(" OR ", $tmp_ids);
2782
2783                 if ($cmode == 0) {
2784                         db_query($link, "UPDATE ttrss_user_entries SET
2785                         unread = false,last_read = NOW()
2786                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2787                 } else if ($cmode == 1) {
2788                         db_query($link, "UPDATE ttrss_user_entries SET
2789                         unread = true
2790                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2791                 } else {
2792                         db_query($link, "UPDATE ttrss_user_entries SET
2793                         unread = NOT unread,last_read = NOW()
2794                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2795                 }
2796
2797                 /* update ccache */
2798
2799                 $result = db_query($link, "SELECT DISTINCT feed_id FROM ttrss_user_entries
2800                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2801
2802                 while ($line = db_fetch_assoc($result)) {
2803                         ccache_update($link, $line["feed_id"], $owner_uid);
2804                 }
2805         }
2806
2807         function get_article_tags($link, $id, $owner_uid = 0, $tag_cache = false) {
2808
2809                 $a_id = db_escape_string($link, $id);
2810
2811                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2812
2813                 $query = "SELECT DISTINCT tag_name,
2814                         owner_uid as owner FROM
2815                         ttrss_tags WHERE post_int_id = (SELECT int_id FROM ttrss_user_entries WHERE
2816                         ref_id = '$a_id' AND owner_uid = '$owner_uid' LIMIT 1) ORDER BY tag_name";
2817
2818                 $obj_id = md5("TAGS:$owner_uid:$id");
2819                 $tags = array();
2820
2821                 /* check cache first */
2822
2823                 if ($tag_cache === false) {
2824                         $result = db_query($link, "SELECT tag_cache FROM ttrss_user_entries
2825                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
2826
2827                         $tag_cache = db_fetch_result($result, 0, "tag_cache");
2828                 }
2829
2830                 if ($tag_cache) {
2831                         $tags = explode(",", $tag_cache);
2832                 } else {
2833
2834                         /* do it the hard way */
2835
2836                         $tmp_result = db_query($link, $query);
2837
2838                         while ($tmp_line = db_fetch_assoc($tmp_result)) {
2839                                 array_push($tags, $tmp_line["tag_name"]);
2840                         }
2841
2842                         /* update the cache */
2843
2844                         $tags_str = db_escape_string($link, join(",", $tags));
2845
2846                         db_query($link, "UPDATE ttrss_user_entries
2847                                 SET tag_cache = '$tags_str' WHERE ref_id = '$id'
2848                                 AND owner_uid = $owner_uid");
2849                 }
2850
2851                 return $tags;
2852         }
2853
2854         function trim_array($array) {
2855                 $tmp = $array;
2856                 array_walk($tmp, 'trim');
2857                 return $tmp;
2858         }
2859
2860         function tag_is_valid($tag) {
2861                 if ($tag == '') return false;
2862                 if (preg_match("/^[0-9]*$/", $tag)) return false;
2863                 if (mb_strlen($tag) > 250) return false;
2864
2865                 if (function_exists('iconv')) {
2866                         $tag = iconv("utf-8", "utf-8", $tag);
2867                 }
2868
2869                 if (!$tag) return false;
2870
2871                 return true;
2872         }
2873
2874         function render_login_form($link) {
2875                 require_once "login_form.php";
2876                 exit;
2877         }
2878
2879         // from http://developer.apple.com/internet/safari/faq.html
2880         function no_cache_incantation() {
2881                 header("Expires: Mon, 22 Dec 1980 00:00:00 GMT"); // Happy birthday to me :)
2882                 header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT"); // always modified
2883                 header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0"); // HTTP/1.1
2884                 header("Cache-Control: post-check=0, pre-check=0", false);
2885                 header("Pragma: no-cache"); // HTTP/1.0
2886         }
2887
2888         function format_warning($msg, $id = "") {
2889                 global $link;
2890                 return "<div class=\"warning\" id=\"$id\">
2891                         <img src=\"images/sign_excl.svg\">$msg</div>";
2892         }
2893
2894         function format_notice($msg, $id = "") {
2895                 global $link;
2896                 return "<div class=\"notice\" id=\"$id\">
2897                         <img src=\"images/sign_info.svg\">$msg</div>";
2898         }
2899
2900         function format_error($msg, $id = "") {
2901                 global $link;
2902                 return "<div class=\"error\" id=\"$id\">
2903                         <img src=\"images/sign_excl.svg\">$msg</div>";
2904         }
2905
2906         function print_notice($msg) {
2907                 return print format_notice($msg);
2908         }
2909
2910         function print_warning($msg) {
2911                 return print format_warning($msg);
2912         }
2913
2914         function print_error($msg) {
2915                 return print format_error($msg);
2916         }
2917
2918
2919         function T_sprintf() {
2920                 $args = func_get_args();
2921                 return vsprintf(__(array_shift($args)), $args);
2922         }
2923
2924         function format_inline_player($link, $url, $ctype) {
2925
2926                 $entry = "";
2927
2928                 $url = htmlspecialchars($url);
2929
2930                 if (strpos($ctype, "audio/") === 0) {
2931
2932                         if ($_SESSION["hasAudio"] && (strpos($ctype, "ogg") !== false ||
2933                                 strpos($_SERVER['HTTP_USER_AGENT'], "Chrome") !== false ||
2934                                 strpos($_SERVER['HTTP_USER_AGENT'], "Safari") !== false )) {
2935
2936                                 $id = 'AUDIO-' . uniqid();
2937
2938                                 $entry .= "<audio id=\"$id\"\" controls style='display : none'>
2939                                         <source type=\"$ctype\" src=\"$url\"></source>
2940                                         </audio>";
2941
2942                                 $entry .= "<span onclick=\"player(this)\"
2943                                         title=\"".__("Click to play")."\" status=\"0\"
2944                                         class=\"player\" audio-id=\"$id\">".__("Play")."</span>";
2945
2946                         } else {
2947
2948                                 $entry .= "<object type=\"application/x-shockwave-flash\"
2949                                         data=\"lib/button/musicplayer.swf?song_url=$url\"
2950                                         width=\"17\" height=\"17\" style='float : left; margin-right : 5px;'>
2951                                         <param name=\"movie\"
2952                                                 value=\"lib/button/musicplayer.swf?song_url=$url\" />
2953                                         </object>";
2954                         }
2955
2956                         if ($entry) $entry .= "&nbsp; <a target=\"_blank\"
2957                                 href=\"$url\">" . basename($url) . "</a>";
2958
2959                         return $entry;
2960
2961                 }
2962
2963                 return "";
2964
2965 /*              $filename = substr($url, strrpos($url, "/")+1);
2966
2967                 $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
2968                         $filename . " (" . $ctype . ")" . "</a>"; */
2969
2970         }
2971
2972         function format_article($link, $id, $mark_as_read = true, $zoom_mode = false, $owner_uid = false) {
2973                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2974
2975                 $rv = array();
2976
2977                 $rv['id'] = $id;
2978
2979                 /* we can figure out feed_id from article id anyway, why do we
2980                  * pass feed_id here? let's ignore the argument :( */
2981
2982                 $result = db_query($link, "SELECT feed_id FROM ttrss_user_entries
2983                         WHERE ref_id = '$id'");
2984
2985                 $feed_id = (int) db_fetch_result($result, 0, "feed_id");
2986
2987                 $rv['feed_id'] = $feed_id;
2988
2989                 //if (!$zoom_mode) { print "<article id='$id'><![CDATA["; };
2990
2991                 if ($mark_as_read) {
2992                         $result = db_query($link, "UPDATE ttrss_user_entries
2993                                 SET unread = false,last_read = NOW()
2994                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
2995
2996                         ccache_update($link, $feed_id, $owner_uid);
2997                 }
2998
2999                 $result = db_query($link, "SELECT id,title,link,content,feed_id,comments,int_id,
3000                         ".SUBSTRING_FOR_DATE."(updated,1,16) as updated,
3001                         (SELECT site_url FROM ttrss_feeds WHERE id = feed_id) as site_url,
3002                         (SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) as hide_images,
3003                         num_comments,
3004                         tag_cache,
3005                         author,
3006                         orig_feed_id,
3007                         note,
3008                         cached_content
3009                         FROM ttrss_entries,ttrss_user_entries
3010                         WHERE   id = '$id' AND ref_id = id AND owner_uid = $owner_uid");
3011
3012                 if ($result) {
3013
3014                         $line = db_fetch_assoc($result);
3015
3016                         $tag_cache = $line["tag_cache"];
3017
3018                         $line["tags"] = get_article_tags($link, $id, $owner_uid, $line["tag_cache"]);
3019                         unset($line["tag_cache"]);
3020
3021                         $line["content"] = sanitize($link, $line["content"], false, $owner_uid, $line["site_url"]);
3022
3023                         global $pluginhost;
3024
3025                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_RENDER_ARTICLE) as $p) {
3026                                 $line = $p->hook_render_article($line);
3027                         }
3028
3029                         $num_comments = $line["num_comments"];
3030                         $entry_comments = "";
3031
3032                         if ($num_comments > 0) {
3033                                 if ($line["comments"]) {
3034                                         $comments_url = htmlspecialchars($line["comments"]);
3035                                 } else {
3036                                         $comments_url = htmlspecialchars($line["link"]);
3037                                 }
3038                                 $entry_comments = "<a target='_blank' href=\"$comments_url\">$num_comments comments</a>";
3039                         } else {
3040                                 if ($line["comments"] && $line["link"] != $line["comments"]) {
3041                                         $entry_comments = "<a target='_blank' href=\"".htmlspecialchars($line["comments"])."\">comments</a>";
3042                                 }
3043                         }
3044
3045                         if ($zoom_mode) {
3046                                 header("Content-Type: text/html");
3047                                 $rv['content'] .= "<html><head>
3048                                                 <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"/>
3049                                                 <title>Tiny Tiny RSS - ".$line["title"]."</title>
3050                                                 <link rel=\"stylesheet\" type=\"text/css\" href=\"tt-rss.css\">
3051                                         </head><body id=\"ttrssZoom\">";
3052                         }
3053
3054                         $rv['content'] .= "<div class=\"postReply\" id=\"POST-$id\">";
3055
3056                         $rv['content'] .= "<div class=\"postHeader\" id=\"POSTHDR-$id\">";
3057
3058                         $entry_author = $line["author"];
3059
3060                         if ($entry_author) {
3061                                 $entry_author = __(" - ") . $entry_author;
3062                         }
3063
3064                         $parsed_updated = make_local_datetime($link, $line["updated"], true,
3065                                 $owner_uid, true);
3066
3067                         $rv['content'] .= "<div class=\"postDate\">$parsed_updated</div>";
3068
3069                         if ($line["link"]) {
3070                                 $rv['content'] .= "<div class='postTitle'><a target='_blank'
3071                                         title=\"".htmlspecialchars($line['title'])."\"
3072                                         href=\"" .
3073                                         htmlspecialchars($line["link"]) . "\">" .
3074                                         $line["title"] . "</a>" .
3075                                         "<span class='author'>$entry_author</span></div>";
3076                         } else {
3077                                 $rv['content'] .= "<div class='postTitle'>" . $line["title"] . "$entry_author</div>";
3078                         }
3079
3080                         $tags_str = format_tags_string($line["tags"], $id);
3081                         $tags_str_full = join(", ", $line["tags"]);
3082
3083                         if (!$tags_str_full) $tags_str_full = __("no tags");
3084
3085                         if (!$entry_comments) $entry_comments = "&nbsp;"; # placeholder
3086
3087                         $rv['content'] .= "<div class='postTags' style='float : right'>
3088                                 <img src='images/tag.png'
3089                                 class='tagsPic' alt='Tags' title='Tags'>&nbsp;";
3090
3091                         if (!$zoom_mode) {
3092                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>
3093                                         <a title=\"".__('Edit tags for this article')."\"
3094                                         href=\"#\" onclick=\"editArticleTags($id, $feed_id)\">(+)</a>";
3095
3096                                 $rv['content'] .= "<div dojoType=\"dijit.Tooltip\"
3097                                         id=\"ATSTRTIP-$id\" connectId=\"ATSTR-$id\"
3098                                         position=\"below\">$tags_str_full</div>";
3099
3100                                 global $pluginhost;
3101
3102                                 foreach ($pluginhost->get_hooks($pluginhost::HOOK_ARTICLE_BUTTON) as $p) {
3103                                         $rv['content'] .= $p->hook_article_button($line);
3104                                 }
3105
3106
3107                         } else {
3108                                 $tags_str = strip_tags($tags_str);
3109                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>";
3110                         }
3111                         $rv['content'] .= "</div>";
3112                         $rv['content'] .= "<div clear='both'>$entry_comments</div>";
3113
3114                         if ($line["orig_feed_id"]) {
3115
3116                                 $tmp_result = db_query($link, "SELECT * FROM ttrss_archived_feeds
3117                                         WHERE id = ".$line["orig_feed_id"]);
3118
3119                                 if (db_num_rows($tmp_result) != 0) {
3120
3121                                         $rv['content'] .= "<div clear='both'>";
3122                                         $rv['content'] .= __("Originally from:");
3123
3124                                         $rv['content'] .= "&nbsp;";
3125
3126                                         $tmp_line = db_fetch_assoc($tmp_result);
3127
3128                                         $rv['content'] .= "<a target='_blank'
3129                                                 href=' " . htmlspecialchars($tmp_line['site_url']) . "'>" .
3130                                                 $tmp_line['title'] . "</a>";
3131
3132                                         $rv['content'] .= "&nbsp;";
3133
3134                                         $rv['content'] .= "<a target='_blank' href='" . htmlspecialchars($tmp_line['feed_url']) . "'>";
3135                                         $rv['content'] .= "<img title='".__('Feed URL')."'class='tinyFeedIcon' src='images/pub_set.svg'></a>";
3136
3137                                         $rv['content'] .= "</div>";
3138                                 }
3139                         }
3140
3141                         $rv['content'] .= "</div>";
3142
3143                         $rv['content'] .= "<div id=\"POSTNOTE-$id\">";
3144                                 if ($line['note']) {
3145                                         $rv['content'] .= format_article_note($id, $line['note'], !$zoom_mode);
3146                                 }
3147                         $rv['content'] .= "</div>";
3148
3149                         $rv['content'] .= "<div class=\"postContent\">";
3150
3151                         $rv['content'] .= $line["content"];
3152
3153                         $rv['content'] .= format_article_enclosures($link, $id,
3154                                 $always_display_enclosures, $line["content"], $line["hide_images"]);
3155
3156                         $rv['content'] .= "</div>";
3157
3158                         $rv['content'] .= "</div>";
3159
3160                 }
3161
3162                 if ($zoom_mode) {
3163                         $rv['content'] .= "
3164                                 <div class='footer'>
3165                                 <button onclick=\"return window.close()\">".
3166                                         __("Close this window")."</button></div>";
3167                         $rv['content'] .= "</body></html>";
3168                 }
3169
3170                 return $rv;
3171
3172         }
3173
3174         function print_checkpoint($n, $s) {
3175                 $ts = microtime(true);
3176                 echo sprintf("<!-- CP[$n] %.4f seconds -->", $ts - $s);
3177                 return $ts;
3178         }
3179
3180         function sanitize_tag($tag) {
3181                 $tag = trim($tag);
3182
3183                 $tag = mb_strtolower($tag, 'utf-8');
3184
3185                 $tag = preg_replace('/[\'\"\+\>\<]/', "", $tag);
3186
3187 //              $tag = str_replace('"', "", $tag);
3188 //              $tag = str_replace("+", " ", $tag);
3189                 $tag = str_replace("technorati tag: ", "", $tag);
3190
3191                 return $tag;
3192         }
3193
3194         function get_self_url_prefix() {
3195                 if (strrpos(SELF_URL_PATH, "/") === strlen(SELF_URL_PATH)-1) {
3196                         return substr(SELF_URL_PATH, 0, strlen(SELF_URL_PATH)-1);
3197                 } else {
3198                         return SELF_URL_PATH;
3199                 }
3200         }
3201
3202         /**
3203          * Compute the Mozilla Firefox feed adding URL from server HOST and REQUEST_URI.
3204          *
3205          * @return string The Mozilla Firefox feed adding URL.
3206          */
3207         function add_feed_url() {
3208                 //$url_path = ($_SERVER['HTTPS'] != "on" ? 'http://' :  'https://') . $_SERVER["HTTP_HOST"] . parse_url($_SERVER["REQUEST_URI"], PHP_URL_PATH);
3209
3210                 $url_path = get_self_url_prefix() .
3211                         "/public.php?op=subscribe&feed_url=%s";
3212                 return $url_path;
3213         } // function add_feed_url
3214
3215         function encrypt_password($pass, $salt = '', $mode2 = false) {
3216                 if ($salt && $mode2) {
3217                         return "MODE2:" . hash('sha256', $salt . $pass);
3218                 } else if ($salt) {
3219                         return "SHA1X:" . sha1("$salt:$pass");
3220                 } else {
3221                         return "SHA1:" . sha1($pass);
3222                 }
3223         } // function encrypt_password
3224
3225         function load_filters($link, $feed_id, $owner_uid, $action_id = false) {
3226                 $filters = array();
3227
3228                 $cat_id = (int)getFeedCategory($link, $feed_id);
3229
3230                 $result = db_query($link, "SELECT * FROM ttrss_filters2 WHERE
3231                         owner_uid = $owner_uid AND enabled = true");
3232
3233                 $check_cats = join(",", array_merge(
3234                         getParentCategories($link, $cat_id, $owner_uid),
3235                         array($cat_id)));
3236
3237                 while ($line = db_fetch_assoc($result)) {
3238                         $filter_id = $line["id"];
3239
3240                         $result2 = db_query($link, "SELECT
3241                                 r.reg_exp, r.inverse, r.feed_id, r.cat_id, r.cat_filter, t.name AS type_name
3242                                 FROM ttrss_filters2_rules AS r,
3243                                 ttrss_filter_types AS t
3244                                 WHERE
3245                                         (cat_id IS NULL OR cat_id IN ($check_cats)) AND
3246                                         (feed_id IS NULL OR feed_id = '$feed_id') AND
3247                                         filter_type = t.id AND filter_id = '$filter_id'");
3248
3249                         $rules = array();
3250                         $actions = array();
3251
3252                         while ($rule_line = db_fetch_assoc($result2)) {
3253 #                               print_r($rule_line);
3254
3255                                 $rule = array();
3256                                 $rule["reg_exp"] = $rule_line["reg_exp"];
3257                                 $rule["type"] = $rule_line["type_name"];
3258                                 $rule["inverse"] = sql_bool_to_bool($rule_line["inverse"]);
3259
3260                                 array_push($rules, $rule);
3261                         }
3262
3263                         $result2 = db_query($link, "SELECT a.action_param,t.name AS type_name
3264                                 FROM ttrss_filters2_actions AS a,
3265                                 ttrss_filter_actions AS t
3266                                 WHERE
3267                                         action_id = t.id AND filter_id = '$filter_id'");
3268
3269                         while ($action_line = db_fetch_assoc($result2)) {
3270 #                               print_r($action_line);
3271
3272                                 $action = array();
3273                                 $action["type"] = $action_line["type_name"];
3274                                 $action["param"] = $action_line["action_param"];
3275
3276                                 array_push($actions, $action);
3277                         }
3278
3279
3280                         $filter = array();
3281                         $filter["match_any_rule"] = sql_bool_to_bool($line["match_any_rule"]);
3282                         $filter["inverse"] = sql_bool_to_bool($line["inverse"]);
3283                         $filter["rules"] = $rules;
3284                         $filter["actions"] = $actions;
3285
3286                         if (count($rules) > 0 && count($actions) > 0) {
3287                                 array_push($filters, $filter);
3288                         }
3289                 }
3290
3291                 return $filters;
3292         }
3293
3294         function get_score_pic($score) {
3295                 if ($score > 100) {
3296                         return "score_high.png";
3297                 } else if ($score > 0) {
3298                         return "score_half_high.png";
3299                 } else if ($score < -100) {
3300                         return "score_low.png";
3301                 } else if ($score < 0) {
3302                         return "score_half_low.png";
3303                 } else {
3304                         return "score_neutral.png";
3305                 }
3306         }
3307
3308         function feed_has_icon($id) {
3309                 return is_file(ICONS_DIR . "/$id.ico") && filesize(ICONS_DIR . "/$id.ico") > 0;
3310         }
3311
3312         function init_connection($link) {
3313                 if ($link) {
3314
3315                         if (DB_TYPE == "pgsql") {
3316                                 pg_query($link, "set client_encoding = 'UTF-8'");
3317                                 pg_set_client_encoding("UNICODE");
3318                                 pg_query($link, "set datestyle = 'ISO, european'");
3319                                 pg_query($link, "set TIME ZONE 0");
3320                         } else {
3321                                 db_query($link, "SET time_zone = '+0:0'");
3322
3323                                 if (defined('MYSQL_CHARSET') && MYSQL_CHARSET) {
3324                                         db_query($link, "SET NAMES " . MYSQL_CHARSET);
3325                                 }
3326                         }
3327
3328                         global $pluginhost;
3329
3330                         $pluginhost = new PluginHost($link);
3331                         $pluginhost->load(PLUGINS, $pluginhost::KIND_ALL);
3332
3333                         return true;
3334                 } else {
3335                         print "Unable to connect to database:" . db_last_error();
3336                         return false;
3337                 }
3338         }
3339
3340         function format_tags_string($tags, $id) {
3341
3342                 $tags_str = "";
3343                 $tags_nolinks_str = "";
3344
3345                 $num_tags = 0;
3346
3347                 $tag_limit = 6;
3348
3349                 $formatted_tags = array();
3350
3351                 foreach ($tags as $tag) {
3352                         $num_tags++;
3353                         $tag_escaped = str_replace("'", "\\'", $tag);
3354
3355                         if (mb_strlen($tag) > 30) {
3356                                 $tag = truncate_string($tag, 30);
3357                         }
3358
3359                         $tag_str = "<a href=\"javascript:viewfeed('$tag_escaped')\">$tag</a>";
3360
3361                         array_push($formatted_tags, $tag_str);
3362
3363                         $tmp_tags_str = implode(", ", $formatted_tags);
3364
3365                         if ($num_tags == $tag_limit || mb_strlen($tmp_tags_str) > 150) {
3366                                 break;
3367                         }
3368                 }
3369
3370                 $tags_str = implode(", ", $formatted_tags);
3371
3372                 if ($num_tags < count($tags)) {
3373                         $tags_str .= ", &hellip;";
3374                 }
3375
3376                 if ($num_tags == 0) {
3377                         $tags_str = __("no tags");
3378                 }
3379
3380                 return $tags_str;
3381
3382         }
3383
3384         function format_article_labels($labels, $id) {
3385
3386                 $labels_str = "";
3387
3388                 foreach ($labels as $l) {
3389                         $labels_str .= sprintf("<span class='hlLabelRef'
3390                                 style='color : %s; background-color : %s'>%s</span>",
3391                                         $l[2], $l[3], $l[1]);
3392                         }
3393
3394                 return $labels_str;
3395
3396         }
3397
3398         function format_article_note($id, $note, $allow_edit = true) {
3399
3400                 $str = "<div class='articleNote'        onclick=\"editArticleNote($id)\">
3401                         <div class='noteEdit' onclick=\"editArticleNote($id)\">".
3402                         ($allow_edit ? __('(edit note)') : "")."</div>$note</div>";
3403
3404                 return $str;
3405         }
3406
3407
3408         function get_feed_category($link, $feed_cat, $parent_cat_id = false) {
3409                 if ($parent_cat_id) {
3410                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3411                         $parent_insert = "'$parent_cat_id'";
3412                 } else {
3413                         $parent_qpart = "parent_cat IS NULL";
3414                         $parent_insert = "NULL";
3415                 }
3416
3417                 $result = db_query($link,
3418                         "SELECT id FROM ttrss_feed_categories
3419                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3420
3421                 if (db_num_rows($result) == 0) {
3422                         return false;
3423                 } else {
3424                         return db_fetch_result($result, 0, "id");
3425                 }
3426         }
3427
3428         function add_feed_category($link, $feed_cat, $parent_cat_id = false) {
3429
3430                 if (!$feed_cat) return false;
3431
3432                 db_query($link, "BEGIN");
3433
3434                 if ($parent_cat_id) {
3435                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3436                         $parent_insert = "'$parent_cat_id'";
3437                 } else {
3438                         $parent_qpart = "parent_cat IS NULL";
3439                         $parent_insert = "NULL";
3440                 }
3441
3442                 $result = db_query($link,
3443                         "SELECT id FROM ttrss_feed_categories
3444                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3445
3446                 if (db_num_rows($result) == 0) {
3447
3448                         $result = db_query($link,
3449                                 "INSERT INTO ttrss_feed_categories (owner_uid,title,parent_cat)
3450                                 VALUES ('".$_SESSION["uid"]."', '$feed_cat', $parent_insert)");
3451
3452                         db_query($link, "COMMIT");
3453
3454                         return true;
3455                 }
3456
3457                 return false;
3458         }
3459
3460         function getArticleFeed($link, $id) {
3461                 $result = db_query($link, "SELECT feed_id FROM ttrss_user_entries
3462                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
3463
3464                 if (db_num_rows($result) != 0) {
3465                         return db_fetch_result($result, 0, "feed_id");
3466                 } else {
3467                         return 0;
3468                 }
3469         }
3470
3471         /**
3472          * Fixes incomplete URLs by prepending "http://".
3473          * Also replaces feed:// with http://, and
3474          * prepends a trailing slash if the url is a domain name only.
3475          *
3476          * @param string $url Possibly incomplete URL
3477          *
3478          * @return string Fixed URL.
3479          */
3480         function fix_url($url) {
3481                 if (strpos($url, '://') === false) {
3482                         $url = 'http://' . $url;
3483                 } else if (substr($url, 0, 5) == 'feed:') {
3484                         $url = 'http:' . substr($url, 5);
3485                 }
3486
3487                 //prepend slash if the URL has no slash in it
3488                 // "http://www.example" -> "http://www.example/"
3489                 if (strpos($url, '/', strpos($url, ':') + 3) === false) {
3490                         $url .= '/';
3491                 }
3492
3493                 if ($url != "http:///")
3494                         return $url;
3495                 else
3496                         return '';
3497         }
3498
3499         function validate_feed_url($url) {
3500                 $parts = parse_url($url);
3501
3502                 return ($parts['scheme'] == 'http' || $parts['scheme'] == 'feed' || $parts['scheme'] == 'https');
3503
3504         }
3505
3506         function get_article_enclosures($link, $id) {
3507
3508                 $query = "SELECT * FROM ttrss_enclosures
3509                         WHERE post_id = '$id' AND content_url != ''";
3510
3511                 $rv = array();
3512
3513                 $result = db_query($link, $query);
3514
3515                 if (db_num_rows($result) > 0) {
3516                         while ($line = db_fetch_assoc($result)) {
3517                                 array_push($rv, $line);
3518                         }
3519                 }
3520
3521                 return $rv;
3522         }
3523
3524         function save_email_address($link, $email) {
3525                 // FIXME: implement persistent storage of emails
3526
3527                 if (!$_SESSION['stored_emails'])
3528                         $_SESSION['stored_emails'] = array();
3529
3530                 if (!in_array($email, $_SESSION['stored_emails']))
3531                         array_push($_SESSION['stored_emails'], $email);
3532         }
3533
3534
3535         function get_feed_access_key($link, $feed_id, $is_cat, $owner_uid = false) {
3536
3537                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3538
3539                 $sql_is_cat = bool_to_sql_bool($is_cat);
3540
3541                 $result = db_query($link, "SELECT access_key FROM ttrss_access_keys
3542                         WHERE feed_id = '$feed_id'      AND is_cat = $sql_is_cat
3543                         AND owner_uid = " . $owner_uid);
3544
3545                 if (db_num_rows($result) == 1) {
3546                         return db_fetch_result($result, 0, "access_key");
3547                 } else {
3548                         $key = db_escape_string($link, sha1(uniqid(rand(), true)));
3549
3550                         $result = db_query($link, "INSERT INTO ttrss_access_keys
3551                                 (access_key, feed_id, is_cat, owner_uid)
3552                                 VALUES ('$key', '$feed_id', $sql_is_cat, '$owner_uid')");
3553
3554                         return $key;
3555                 }
3556                 return false;
3557         }
3558
3559         function get_feeds_from_html($url, $content)
3560         {
3561                 $url     = fix_url($url);
3562                 $baseUrl = substr($url, 0, strrpos($url, '/') + 1);
3563
3564                 libxml_use_internal_errors(true);
3565
3566                 $doc = new DOMDocument();
3567                 $doc->loadHTML($content);
3568                 $xpath = new DOMXPath($doc);
3569                 $entries = $xpath->query('/html/head/link[@rel="alternate"]');
3570                 $feedUrls = array();
3571                 foreach ($entries as $entry) {
3572                         if ($entry->hasAttribute('href')) {
3573                                 $title = $entry->getAttribute('title');
3574                                 if ($title == '') {
3575                                         $title = $entry->getAttribute('type');
3576                                 }
3577                                 $feedUrl = rewrite_relative_url(
3578                                         $baseUrl, $entry->getAttribute('href')
3579                                 );
3580                                 $feedUrls[$feedUrl] = $title;
3581                         }
3582                 }
3583                 return $feedUrls;
3584         }
3585
3586         function is_html($content) {
3587                 return preg_match("/<html|DOCTYPE html/i", substr($content, 0, 20)) !== 0;
3588         }
3589
3590         function url_is_html($url, $login = false, $pass = false) {
3591                 return is_html(fetch_file_contents($url, false, $login, $pass));
3592         }
3593
3594         function print_label_select($link, $name, $value, $attributes = "") {
3595
3596                 $result = db_query($link, "SELECT caption FROM ttrss_labels2
3597                         WHERE owner_uid = '".$_SESSION["uid"]."' ORDER BY caption");
3598
3599                 print "<select default=\"$value\" name=\"" . htmlspecialchars($name) .
3600                         "\" $attributes onchange=\"labelSelectOnChange(this)\" >";
3601
3602                 while ($line = db_fetch_assoc($result)) {
3603
3604                         $issel = ($line["caption"] == $value) ? "selected=\"1\"" : "";
3605
3606                         print "<option value=\"".htmlspecialchars($line["caption"])."\"
3607                                 $issel>" . htmlspecialchars($line["caption"]) . "</option>";
3608
3609                 }
3610
3611 #               print "<option value=\"ADD_LABEL\">" .__("Add label...") . "</option>";
3612
3613                 print "</select>";
3614
3615
3616         }
3617
3618         function format_article_enclosures($link, $id, $always_display_enclosures,
3619                                         $article_content, $hide_images = false) {
3620
3621                 $result = get_article_enclosures($link, $id);
3622                 $rv = '';
3623
3624                 if (count($result) > 0) {
3625
3626                         $entries_html = array();
3627                         $entries = array();
3628                         $entries_inline = array();
3629
3630                         foreach ($result as $line) {
3631
3632                                 $url = $line["content_url"];
3633                                 $ctype = $line["content_type"];
3634
3635                                 if (!$ctype) $ctype = __("unknown type");
3636
3637                                 $filename = substr($url, strrpos($url, "/")+1);
3638
3639                                 $player = format_inline_player($link, $url, $ctype);
3640
3641                                 if ($player) array_push($entries_inline, $player);
3642
3643 #                               $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
3644 #                                       $filename . " (" . $ctype . ")" . "</a>";
3645
3646                                 $entry = "<div onclick=\"window.open('".htmlspecialchars($url)."')\"
3647                                         dojoType=\"dijit.MenuItem\">$filename ($ctype)</div>";
3648
3649                                 array_push($entries_html, $entry);
3650
3651                                 $entry = array();
3652
3653                                 $entry["type"] = $ctype;
3654                                 $entry["filename"] = $filename;
3655                                 $entry["url"] = $url;
3656
3657                                 array_push($entries, $entry);
3658                         }
3659
3660                         if ($_SESSION['uid'] && !get_pref($link, "STRIP_IMAGES")) {
3661                                 if ($always_display_enclosures ||
3662                                                         !preg_match("/<img/i", $article_content)) {
3663
3664                                         foreach ($entries as $entry) {
3665
3666                                                 if (preg_match("/image/", $entry["type"]) ||
3667                                                                 preg_match("/\.(jpg|png|gif|bmp)/i", $entry["filename"])) {
3668
3669                                                                 if (!$hide_images) {
3670                                                                         $rv .= "<p><img
3671                                                                         alt=\"".htmlspecialchars($entry["filename"])."\"
3672                                                                         src=\"" .htmlspecialchars($entry["url"]) . "\"/></p>";
3673                                                                 } else {
3674                                                                         $rv .= "<p><a target=\"_blank\"
3675                                                                         href=\"".htmlspecialchars($entry["url"])."\"
3676                                                                         >" .htmlspecialchars($entry["url"]) . "</a></p>";
3677
3678                                                                 }
3679                                                 }
3680                                         }
3681                                 }
3682                         }
3683
3684                         if (count($entries_inline) > 0) {
3685                                 $rv .= "<hr clear='both'/>";
3686                                 foreach ($entries_inline as $entry) { $rv .= $entry; };
3687                                 $rv .= "<hr clear='both'/>";
3688                         }
3689
3690                         $rv .= "<br/><div dojoType=\"dijit.form.DropDownButton\">".
3691                                 "<span>" . __('Attachments')."</span>";
3692                         $rv .= "<div dojoType=\"dijit.Menu\" style=\"display: none;\">";
3693
3694                         foreach ($entries_html as $entry) { $rv .= $entry; };
3695
3696                         $rv .= "</div></div>";
3697                 }
3698
3699                 return $rv;
3700         }
3701
3702         function getLastArticleId($link) {
3703                 $result = db_query($link, "SELECT MAX(ref_id) AS id FROM ttrss_user_entries
3704                         WHERE owner_uid = " . $_SESSION["uid"]);
3705
3706                 if (db_num_rows($result) == 1) {
3707                         return db_fetch_result($result, 0, "id");
3708                 } else {
3709                         return -1;
3710                 }
3711         }
3712
3713         function build_url($parts) {
3714                 return $parts['scheme'] . "://" . $parts['host'] . $parts['path'];
3715         }
3716
3717         /**
3718          * Converts a (possibly) relative URL to a absolute one.
3719          *
3720          * @param string $url     Base URL (i.e. from where the document is)
3721          * @param string $rel_url Possibly relative URL in the document
3722          *
3723          * @return string Absolute URL
3724          */
3725         function rewrite_relative_url($url, $rel_url) {
3726                 if (strpos($rel_url, "magnet:") === 0) {
3727                         return $rel_url;
3728                 } else if (strpos($rel_url, "://") !== false) {
3729                         return $rel_url;
3730                 } else if (strpos($rel_url, "//") === 0) {
3731                         # protocol-relative URL (rare but they exist)
3732                         return $rel_url;
3733                 } else if (strpos($rel_url, "/") === 0)
3734                 {
3735                         $parts = parse_url($url);
3736                         $parts['path'] = $rel_url;
3737
3738                         return build_url($parts);
3739
3740                 } else {
3741                         $parts = parse_url($url);
3742                         if (!isset($parts['path'])) {
3743                                 $parts['path'] = '/';
3744                         }
3745                         $dir = $parts['path'];
3746                         if (substr($dir, -1) !== '/') {
3747                                 $dir = dirname($parts['path']);
3748                                 $dir !== '/' && $dir .= '/';
3749                         }
3750                         $parts['path'] = $dir . $rel_url;
3751
3752                         return build_url($parts);
3753                 }
3754         }
3755
3756         function sphinx_search($query, $offset = 0, $limit = 30) {
3757                 require_once 'lib/sphinxapi.php';
3758
3759                 $sphinxClient = new SphinxClient();
3760
3761                 $sphinxClient->SetServer('localhost', 9312);
3762                 $sphinxClient->SetConnectTimeout(1);
3763
3764                 $sphinxClient->SetFieldWeights(array('title' => 70, 'content' => 30,
3765                         'feed_title' => 20));
3766
3767                 $sphinxClient->SetMatchMode(SPH_MATCH_EXTENDED2);
3768                 $sphinxClient->SetRankingMode(SPH_RANK_PROXIMITY_BM25);
3769                 $sphinxClient->SetLimits($offset, $limit, 1000);
3770                 $sphinxClient->SetArrayResult(false);
3771                 $sphinxClient->SetFilter('owner_uid', array($_SESSION['uid']));
3772
3773                 $result = $sphinxClient->Query($query, SPHINX_INDEX);
3774
3775                 $ids = array();
3776
3777                 if (is_array($result['matches'])) {
3778                         foreach (array_keys($result['matches']) as $int_id) {
3779                                 $ref_id = $result['matches'][$int_id]['attrs']['ref_id'];
3780                                 array_push($ids, $ref_id);
3781                         }
3782                 }
3783
3784                 return $ids;
3785         }
3786
3787         function cleanup_tags($link, $days = 14, $limit = 1000) {
3788
3789                 if (DB_TYPE == "pgsql") {
3790                         $interval_query = "date_updated < NOW() - INTERVAL '$days days'";
3791                 } else if (DB_TYPE == "mysql") {
3792                         $interval_query = "date_updated < DATE_SUB(NOW(), INTERVAL $days DAY)";
3793                 }
3794
3795                 $tags_deleted = 0;
3796
3797                 while ($limit > 0) {
3798                         $limit_part = 500;
3799
3800                         $query = "SELECT ttrss_tags.id AS id
3801                                 FROM ttrss_tags, ttrss_user_entries, ttrss_entries
3802                                 WHERE post_int_id = int_id AND $interval_query AND
3803                                 ref_id = ttrss_entries.id AND tag_cache != '' LIMIT $limit_part";
3804
3805                         $result = db_query($link, $query);
3806
3807                         $ids = array();
3808
3809                         while ($line = db_fetch_assoc($result)) {
3810                                 array_push($ids, $line['id']);
3811                         }
3812
3813                         if (count($ids) > 0) {
3814                                 $ids = join(",", $ids);
3815                                 print ".";
3816
3817                                 $tmp_result = db_query($link, "DELETE FROM ttrss_tags WHERE id IN ($ids)");
3818                                 $tags_deleted += db_affected_rows($link, $tmp_result);
3819                         } else {
3820                                 break;
3821                         }
3822
3823                         $limit -= $limit_part;
3824                 }
3825
3826                 print "\n";
3827
3828                 return $tags_deleted;
3829         }
3830
3831         function print_user_stylesheet($link) {
3832                 $value = get_pref($link, 'USER_STYLESHEET');
3833
3834                 if ($value) {
3835                         print "<style type=\"text/css\">";
3836                         print str_replace("<br/>", "\n", $value);
3837                         print "</style>";
3838                 }
3839
3840         }
3841
3842         function rewrite_urls($html) {
3843                 libxml_use_internal_errors(true);
3844
3845                 $charset_hack = '<head>
3846                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
3847                 </head>';
3848
3849                 $doc = new DOMDocument();
3850                 $doc->loadHTML($charset_hack . $html);
3851                 $xpath = new DOMXPath($doc);
3852
3853                 $entries = $xpath->query('//*/text()');
3854
3855                 foreach ($entries as $entry) {
3856                         if (strstr($entry->wholeText, "://") !== false) {
3857                                 $text = preg_replace("/((?<!=.)((http|https|ftp)+):\/\/[^ ,!]+)/i",
3858                                         "<a target=\"_blank\" href=\"\\1\">\\1</a>", $entry->wholeText);
3859
3860                                 if ($text != $entry->wholeText) {
3861                                         $cdoc = new DOMDocument();
3862                                         $cdoc->loadHTML($charset_hack . $text);
3863
3864
3865                                         foreach ($cdoc->childNodes as $cnode) {
3866                                                 $cnode = $doc->importNode($cnode, true);
3867
3868                                                 if ($cnode) {
3869                                                         $entry->parentNode->insertBefore($cnode);
3870                                                 }
3871                                         }
3872
3873                                         $entry->parentNode->removeChild($entry);
3874
3875                                 }
3876                         }
3877                 }
3878
3879                 $node = $doc->getElementsByTagName('body')->item(0);
3880
3881                 // http://tt-rss.org/forum/viewtopic.php?f=1&t=970
3882                 if ($node)
3883                         return $doc->saveXML($node);
3884                 else
3885                         return $html;
3886         }
3887
3888         function filter_to_sql($link, $filter, $owner_uid) {
3889                 $query = array();
3890
3891                 if (DB_TYPE == "pgsql")
3892                         $reg_qpart = "~";
3893                 else
3894                         $reg_qpart = "REGEXP";
3895
3896                 foreach ($filter["rules"] AS $rule) {
3897                         $regexp_valid = preg_match('/' . $rule['reg_exp'] . '/',
3898                                 $rule['reg_exp']) !== FALSE;
3899
3900                         if ($regexp_valid) {
3901
3902                                 $rule['reg_exp'] = db_escape_string($link, $rule['reg_exp']);
3903
3904                                         switch ($rule["type"]) {
3905                                         case "title":
3906                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
3907                                                         $rule['reg_exp'] . "')";
3908                                                 break;
3909                                         case "content":
3910                                                 $qpart = "LOWER(ttrss_entries.content) $reg_qpart LOWER('".
3911                                                         $rule['reg_exp'] . "')";
3912                                                 break;
3913                                         case "both":
3914                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
3915                                                         $rule['reg_exp'] . "') OR LOWER(" .
3916                                                         "ttrss_entries.content) $reg_qpart LOWER('" . $rule['reg_exp'] . "')";
3917                                                 break;
3918                                         case "tag":
3919                                                 $qpart = "LOWER(ttrss_user_entries.tag_cache) $reg_qpart LOWER('".
3920                                                         $rule['reg_exp'] . "')";
3921                                                 break;
3922                                         case "link":
3923                                                 $qpart = "LOWER(ttrss_entries.link) $reg_qpart LOWER('".
3924                                                         $rule['reg_exp'] . "')";
3925                                                 break;
3926                                         case "author":
3927                                                 $qpart = "LOWER(ttrss_entries.author) $reg_qpart LOWER('".
3928                                                         $rule['reg_exp'] . "')";
3929                                                 break;
3930                                 }
3931
3932                                 if (isset($rule['inverse'])) $qpart = "NOT ($qpart)";
3933
3934                                 if (isset($rule["feed_id"]) && $rule["feed_id"] > 0) {
3935                                         $qpart .= " AND feed_id = " . db_escape_string($link, $rule["feed_id"]);
3936                                 }
3937
3938                                 if (isset($rule["cat_id"])) {
3939
3940                                         if ($rule["cat_id"] > 0) {
3941                                                 $children = getChildCategories($link, $rule["cat_id"], $owner_uid);
3942                                                 array_push($children, $rule["cat_id"]);
3943
3944                                                 $children = join(",", $children);
3945
3946                                                 $cat_qpart = "cat_id IN ($children)";
3947                                         } else {
3948                                                 $cat_qpart = "cat_id IS NULL";
3949                                         }
3950
3951                                         $qpart .= " AND $cat_qpart";
3952                                 }
3953
3954                                 array_push($query, "($qpart)");
3955
3956                         }
3957                 }
3958
3959                 if (count($query) > 0) {
3960                         $fullquery = "(" . join($filter["match_any_rule"] ? "OR" : "AND", $query) . ")";
3961                 } else {
3962                         $fullquery = "(false)";
3963                 }
3964
3965                 if ($filter['inverse']) $fullquery = "(NOT $fullquery)";
3966
3967                 return $fullquery;
3968         }
3969
3970         if (!function_exists('gzdecode')) {
3971                 function gzdecode($string) { // no support for 2nd argument
3972                         return file_get_contents('compress.zlib://data:who/cares;base64,'.
3973                                 base64_encode($string));
3974                 }
3975         }
3976
3977         function get_random_bytes($length) {
3978                 if (function_exists('openssl_random_pseudo_bytes')) {
3979                         return openssl_random_pseudo_bytes($length);
3980                 } else {
3981                         $output = "";
3982
3983                         for ($i = 0; $i < $length; $i++)
3984                                 $output .= chr(mt_rand(0, 255));
3985
3986                         return $output;
3987                 }
3988         }
3989
3990         function read_stdin() {
3991                 $fp = fopen("php://stdin", "r");
3992
3993                 if ($fp) {
3994                         $line = trim(fgets($fp));
3995                         fclose($fp);
3996                         return $line;
3997                 }
3998
3999                 return null;
4000         }
4001
4002         function tmpdirname($path, $prefix) {
4003                 // Use PHP's tmpfile function to create a temporary
4004                 // directory name. Delete the file and keep the name.
4005                 $tempname = tempnam($path,$prefix);
4006                 if (!$tempname)
4007                         return false;
4008
4009                 if (!unlink($tempname))
4010                         return false;
4011
4012        return $tempname;
4013         }
4014
4015         function getFeedCategory($link, $feed) {
4016                 $result = db_query($link, "SELECT cat_id FROM ttrss_feeds
4017                         WHERE id = '$feed'");
4018
4019                 if (db_num_rows($result) > 0) {
4020                         return db_fetch_result($result, 0, "cat_id");
4021                 } else {
4022                         return false;
4023                 }
4024
4025         }
4026
4027         function implements_interface($class, $interface) {
4028                 return in_array($interface, class_implements($class));
4029         }
4030
4031         function geturl($url){
4032
4033                 (function_exists('curl_init')) ? '' : die('cURL Must be installed for geturl function to work. Ask your host to enable it or uncomment extension=php_curl.dll in php.ini');
4034
4035                 $curl = curl_init();
4036                 $header[0] = "Accept: text/xml,application/xml,application/xhtml+xml,";
4037                 $header[0] .= "text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5";
4038                 $header[] = "Cache-Control: max-age=0";
4039                 $header[] = "Connection: keep-alive";
4040                 $header[] = "Keep-Alive: 300";
4041                 $header[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
4042                 $header[] = "Accept-Language: en-us,en;q=0.5";
4043                 $header[] = "Pragma: ";
4044
4045                 curl_setopt($curl, CURLOPT_URL, $url);
4046                 curl_setopt($curl, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 5.1; rv:5.0) Gecko/20100101 Firefox/5.0 Firefox/5.0');
4047                 curl_setopt($curl, CURLOPT_HTTPHEADER, $header);
4048                 curl_setopt($curl, CURLOPT_HEADER, true);
4049                 curl_setopt($curl, CURLOPT_REFERER, $url);
4050                 curl_setopt($curl, CURLOPT_ENCODING, 'gzip,deflate');
4051                 curl_setopt($curl, CURLOPT_AUTOREFERER, true);
4052                 curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
4053                 //curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true); //CURLOPT_FOLLOWLOCATION Disabled...
4054                 curl_setopt($curl, CURLOPT_TIMEOUT, 60);
4055
4056                 $html = curl_exec($curl);
4057
4058                 $status = curl_getinfo($curl);
4059                 curl_close($curl);
4060
4061                 if($status['http_code']!=200){
4062                         if($status['http_code'] == 301 || $status['http_code'] == 302) {
4063                                 list($header) = explode("\r\n\r\n", $html, 2);
4064                                 $matches = array();
4065                                 preg_match("/(Location:|URI:)[^(\n)]*/", $header, $matches);
4066                                 $url = trim(str_replace($matches[1],"",$matches[0]));
4067                                 $url_parsed = parse_url($url);
4068                                 return (isset($url_parsed))? geturl($url, $referer):'';
4069                         }
4070                         $oline='';
4071                         foreach($status as $key=>$eline){$oline.='['.$key.']'.$eline.' ';}
4072                         $line =$oline." \r\n ".$url."\r\n-----------------\r\n";
4073 #                       $handle = @fopen('./curl.error.log', 'a');
4074 #                       fwrite($handle, $line);
4075                         return FALSE;
4076                 }
4077                 return $url;
4078         }
4079
4080         function get_minified_js($files) {
4081                 require_once 'lib/jshrink/Minifier.php';
4082
4083                 $rv = '';
4084
4085                 foreach ($files as $js) {
4086                         if (!isset($_GET['debug'])) {
4087                                 $cached_file = CACHE_DIR . "/js/$js.js";
4088
4089                                 if (file_exists($cached_file) &&
4090                                                 is_readable($cached_file) &&
4091                                                 filemtime($cached_file) >= filemtime("js/$js.js")) {
4092
4093                                         $rv .= file_get_contents($cached_file);
4094
4095                                 } else {
4096                                         $minified = JShrink\Minifier::minify(file_get_contents("js/$js.js"));
4097                                         file_put_contents($cached_file, $minified);
4098                                         $rv .= $minified;
4099                                 }
4100                         } else {
4101                                 $rv .= file_get_contents("js/$js.js");
4102                         }
4103                 }
4104
4105                 return $rv;
4106         }
4107
4108         function stylesheet_tag($filename) {
4109                 $timestamp = filemtime($filename);
4110
4111                 echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"$filename?$timestamp\"/>\n";
4112         }
4113
4114         function javascript_tag($filename) {
4115                 $query = "";
4116
4117                 if (!(strpos($filename, "?") === FALSE)) {
4118                         $query = substr($filename, strpos($filename, "?")+1);
4119                         $filename = substr($filename, 0, strpos($filename, "?"));
4120                 }
4121
4122                 $timestamp = filemtime($filename);
4123
4124                 if ($query) $timestamp .= "&$query";
4125
4126                 echo "<script type=\"text/javascript\" charset=\"utf-8\" src=\"$filename?$timestamp\"></script>\n";
4127         }
4128
4129         function calculate_dep_timestamp() {
4130                 $files = array_merge(glob("js/*.js"), glob("*.css"));
4131
4132                 $max_ts = -1;
4133
4134                 foreach ($files as $file) {
4135                         if (filemtime($file) > $max_ts) $max_ts = filemtime($file);
4136                 }
4137
4138                 return $max_ts;
4139         }
4140
4141         function T_js_decl($s1, $s2) {
4142                 if ($s1 && $s2) {
4143                         $s1 = preg_replace("/\n/", "", $s1);
4144                         $s2 = preg_replace("/\n/", "", $s2);
4145
4146                         $s1 = preg_replace("/\"/", "\\\"", $s1);
4147                         $s2 = preg_replace("/\"/", "\\\"", $s2);
4148
4149                         return "T_messages[\"$s1\"] = \"$s2\";\n";
4150                 }
4151         }
4152
4153         function init_js_translations() {
4154
4155         print 'var T_messages = new Object();
4156
4157                 function __(msg) {
4158                         if (T_messages[msg]) {
4159                                 return T_messages[msg];
4160                         } else {
4161                                 return msg;
4162                         }
4163                 }
4164
4165                 function ngettext(msg1, msg2, n) {
4166                         return (parseInt(n) > 1) ? msg2 : msg1;
4167                 }';
4168
4169                 $l10n = _get_reader();
4170
4171                 for ($i = 0; $i < $l10n->total; $i++) {
4172                         $orig = $l10n->get_original_string($i);
4173                         $translation = __($orig);
4174
4175                         print T_js_decl($orig, $translation);
4176                 }
4177         }
4178
4179         function label_to_feed_id($label) {
4180                 return LABEL_BASE_INDEX - 1 - abs($label);
4181         }
4182
4183         function feed_to_label_id($feed) {
4184                 return LABEL_BASE_INDEX - 1 + abs($feed);
4185         }
4186
4187 ?>