include/functions.php

   1 <?php
   2         define('EXPECTED_CONFIG_VERSION', 26);
   3         define('SCHEMA_VERSION', 115);
   4
   5         define('LABEL_BASE_INDEX', -1024);
   6         define('PLUGIN_FEED_BASE_INDEX', -128);
   7
   8         $fetch_last_error = false;
   9         $fetch_last_error_code = false;
  10         $pluginhost = false;
  11
  12         function __autoload($class) {
  13                 $class_file = str_replace("_", "/", strtolower(basename($class)));
  14
  15                 $file = dirname(__FILE__)."/../classes/$class_file.php";
  16
  17                 if (file_exists($file)) {
  18                         require $file;
  19                 }
  20
  21         }
  22
  23         mb_internal_encoding("UTF-8");
  24         date_default_timezone_set('UTC');
  25         if (defined('E_DEPRECATED')) {
  26                 error_reporting(E_ALL & ~E_NOTICE & ~E_DEPRECATED);
  27         } else {
  28                 error_reporting(E_ALL & ~E_NOTICE);
  29         }
  30
  31         require_once 'config.php';
  32
  33         /**
  34          * Define a constant if not already defined
  35          *
  36          * @param string $name The constant name.
  37          * @param mixed $value The constant value.
  38          * @access public
  39          * @return boolean True if defined successfully or not.
  40          */
  41         function define_default($name, $value) {
  42                 defined($name) or define($name, $value);
  43         }
  44
  45         ///// Some defaults that you can override in config.php //////
  46
  47         define_default('FEED_FETCH_TIMEOUT', 45);
  48         // How may seconds to wait for response when requesting feed from a site
  49         define_default('FEED_FETCH_NO_CACHE_TIMEOUT', 15);
  50         // How may seconds to wait for response when requesting feed from a
  51         // site when that feed wasn't cached before
  52         define_default('FILE_FETCH_TIMEOUT', 45);
  53         // Default timeout when fetching files from remote sites
  54         define_default('FILE_FETCH_CONNECT_TIMEOUT', 15);
  55         // How many seconds to wait for initial response from website when
  56         // fetching files from remote sites
  57
  58         if (DB_TYPE == "pgsql") {
  59                 define('SUBSTRING_FOR_DATE', 'SUBSTRING_FOR_DATE');
  60         } else {
  61                 define('SUBSTRING_FOR_DATE', 'SUBSTRING');
  62         }
  63
  64         /**
  65          * Return available translations names.
  66          *
  67          * @access public
  68          * @return array A array of available translations.
  69          */
  70         function get_translations() {
  71                 $tr = array(
  72                                         "auto"  => "Detect automatically",
  73                                         "ca_CA" => "Català",
  74                                         "cs_CZ" => "Česky",
  75                                         "en_US" => "English",
  76                                         "es_ES" => "Español",
  77                                         "de_DE" => "Deutsch",
  78                                         "fr_FR" => "Français",
  79                                         "hu_HU" => "Magyar (Hungarian)",
  80                                         "it_IT" => "Italiano",
  81                                         "ja_JP" => "日本語 (Japanese)",
  82                                         "lv_LV" => "Latviešu",
  83                                         "nb_NO" => "Norwegian bokmål",
  84                                         "nl_NL" => "Dutch",
  85                                         "pl_PL" => "Polski",
  86                                         "ru_RU" => "Русский",
  87                                         "pt_BR" => "Portuguese/Brazil",
  88                                         "zh_CN" => "Simplified Chinese",
  89                                         "sv_SE" => "Svenska",
  90                                         "fi_FI" => "Suomi");
  91
  92                 return $tr;
  93         }
  94
  95         require_once "lib/accept-to-gettext.php";
  96         require_once "lib/gettext/gettext.inc";
  97
  98
  99         function startup_gettext() {
 100
 101                 # Get locale from Accept-Language header
 102                 $lang = al2gt(array_keys(get_translations()), "text/html");
 103
 104                 if (defined('_TRANSLATION_OVERRIDE_DEFAULT')) {
 105                         $lang = _TRANSLATION_OVERRIDE_DEFAULT;
 106                 }
 107
 108                 if ($_SESSION["language"] && $_SESSION["language"] != "auto") {
 109                         $lang = $_SESSION["language"];
 110                 }
 111
 112                 if ($lang) {
 113                         if (defined('LC_MESSAGES')) {
 114                                 _setlocale(LC_MESSAGES, $lang);
 115                         } else if (defined('LC_ALL')) {
 116                                 _setlocale(LC_ALL, $lang);
 117                         }
 118
 119                         _bindtextdomain("messages", "locale");
 120
 121                         _textdomain("messages");
 122                         _bind_textdomain_codeset("messages", "UTF-8");
 123                 }
 124         }
 125
 126         startup_gettext();
 127
 128         require_once 'db-prefs.php';
 129         require_once 'version.php';
 130         require_once 'ccache.php';
 131         require_once 'labels.php';
 132
 133         define('SELF_USER_AGENT', 'Tiny Tiny RSS/' . VERSION . ' (http://tt-rss.org/)');
 134         ini_set('user_agent', SELF_USER_AGENT);
 135
 136         require_once 'lib/pubsubhubbub/publisher.php';
 137
 138         $tz_offset = -1;
 139         $utc_tz = new DateTimeZone('UTC');
 140         $schema_version = false;
 141
 142         /**
 143          * Print a timestamped debug message.
 144          *
 145          * @param string $msg The debug message.
 146          * @return void
 147          */
 148         function _debug($msg) {
 149                 $ts = strftime("%H:%M:%S", time());
 150                 if (function_exists('posix_getpid')) {
 151                         $ts = "$ts/" . posix_getpid();
 152                 }
 153
 154                 if (!(defined('QUIET') && QUIET)) {
 155                         print "[$ts] $msg\n";
 156                 }
 157
 158                 if (defined('LOGFILE'))  {
 159                         $fp = fopen(LOGFILE, 'a+');
 160
 161                         if ($fp) {
 162                                 fputs($fp, "[$ts] $msg\n");
 163                                 fclose($fp);
 164                         }
 165                 }
 166
 167         } // function _debug
 168
 169         /**
 170          * Purge a feed old posts.
 171          *
 172          * @param mixed $link A database connection.
 173          * @param mixed $feed_id The id of the purged feed.
 174          * @param mixed $purge_interval Olderness of purged posts.
 175          * @param boolean $debug Set to True to enable the debug. False by default.
 176          * @access public
 177          * @return void
 178          */
 179         function purge_feed($link, $feed_id, $purge_interval, $debug = false) {
 180
 181                 if (!$purge_interval) $purge_interval = feed_purge_interval($link, $feed_id);
 182
 183                 $rows = -1;
 184
 185                 $result = db_query($link,
 186                         "SELECT owner_uid FROM ttrss_feeds WHERE id = '$feed_id'");
 187
 188                 $owner_uid = false;
 189
 190                 if (db_num_rows($result) == 1) {
 191                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 192                 }
 193
 194                 if ($purge_interval == -1 || !$purge_interval) {
 195                         if ($owner_uid) {
 196                                 ccache_update($link, $feed_id, $owner_uid);
 197                         }
 198                         return;
 199                 }
 200
 201                 if (!$owner_uid) return;
 202
 203                 if (FORCE_ARTICLE_PURGE == 0) {
 204                         $purge_unread = get_pref($link, "PURGE_UNREAD_ARTICLES",
 205                                 $owner_uid, false);
 206                 } else {
 207                         $purge_unread = true;
 208                         $purge_interval = FORCE_ARTICLE_PURGE;
 209                 }
 210
 211                 if (!$purge_unread) $query_limit = " unread = false AND ";
 212
 213                 if (DB_TYPE == "pgsql") {
 214                         $pg_version = get_pgsql_version($link);
 215
 216                         if (preg_match("/^7\./", $pg_version) || preg_match("/^8\.0/", $pg_version)) {
 217
 218                                 $result = db_query($link, "DELETE FROM ttrss_user_entries WHERE
 219                                         ttrss_entries.id = ref_id AND
 220                                         marked = false AND
 221                                         feed_id = '$feed_id' AND
 222                                         $query_limit
 223                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 224
 225                         } else {
 226
 227                                 $result = db_query($link, "DELETE FROM ttrss_user_entries
 228                                         USING ttrss_entries
 229                                         WHERE ttrss_entries.id = ref_id AND
 230                                         marked = false AND
 231                                         feed_id = '$feed_id' AND
 232                                         $query_limit
 233                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 234                         }
 235
 236                         $rows = pg_affected_rows($result);
 237
 238                 } else {
 239
 240 /*                      $result = db_query($link, "DELETE FROM ttrss_user_entries WHERE
 241                                 marked = false AND feed_id = '$feed_id' AND
 242                                 (SELECT date_updated FROM ttrss_entries WHERE
 243                                         id = ref_id) < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)"); */
 244
 245                         $result = db_query($link, "DELETE FROM ttrss_user_entries
 246                                 USING ttrss_user_entries, ttrss_entries
 247                                 WHERE ttrss_entries.id = ref_id AND
 248                                 marked = false AND
 249                                 feed_id = '$feed_id' AND
 250                                 $query_limit
 251                                 ttrss_entries.date_updated < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)");
 252
 253                         $rows = mysql_affected_rows($link);
 254
 255                 }
 256
 257                 ccache_update($link, $feed_id, $owner_uid);
 258
 259                 if ($debug) {
 260                         _debug("Purged feed $feed_id ($purge_interval): deleted $rows articles");
 261                 }
 262
 263                 return $rows;
 264         } // function purge_feed
 265
 266         function feed_purge_interval($link, $feed_id) {
 267
 268                 $result = db_query($link, "SELECT purge_interval, owner_uid FROM ttrss_feeds
 269                         WHERE id = '$feed_id'");
 270
 271                 if (db_num_rows($result) == 1) {
 272                         $purge_interval = db_fetch_result($result, 0, "purge_interval");
 273                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 274
 275                         if ($purge_interval == 0) $purge_interval = get_pref($link,
 276                                 'PURGE_OLD_DAYS', $owner_uid);
 277
 278                         return $purge_interval;
 279
 280                 } else {
 281                         return -1;
 282                 }
 283         }
 284
 285         function purge_orphans($link, $do_output = false) {
 286
 287                 // purge orphaned posts in main content table
 288                 $result = db_query($link, "DELETE FROM ttrss_entries WHERE
 289                         (SELECT COUNT(int_id) FROM ttrss_user_entries WHERE ref_id = id) = 0");
 290
 291                 if ($do_output) {
 292                         $rows = db_affected_rows($link, $result);
 293                         _debug("Purged $rows orphaned posts.");
 294                 }
 295         }
 296
 297         function get_feed_update_interval($link, $feed_id) {
 298                 $result = db_query($link, "SELECT owner_uid, update_interval FROM
 299                         ttrss_feeds WHERE id = '$feed_id'");
 300
 301                 if (db_num_rows($result) == 1) {
 302                         $update_interval = db_fetch_result($result, 0, "update_interval");
 303                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 304
 305                         if ($update_interval != 0) {
 306                                 return $update_interval;
 307                         } else {
 308                                 return get_pref($link, 'DEFAULT_UPDATE_INTERVAL', $owner_uid, false);
 309                         }
 310
 311                 } else {
 312                         return -1;
 313                 }
 314         }
 315
 316         function fetch_file_contents($url, $type = false, $login = false, $pass = false, $post_query = false, $timeout = false, $timestamp = 0) {
 317
 318                 global $fetch_last_error;
 319                 global $fetch_last_error_code;
 320
 321                 if (!defined('NO_CURL') && function_exists('curl_init') && !ini_get("open_basedir")) {
 322
 323                         if (ini_get("safe_mode")) {
 324                                 $ch = curl_init(geturl($url));
 325                         } else {
 326                                 $ch = curl_init($url);
 327                         }
 328
 329                         if ($timestamp) {
 330                                 curl_setopt($ch, CURLOPT_HTTPHEADER,
 331                                         array("If-Modified-Since: ".gmdate('D, d M Y H:i:s \G\M\T', $timestamp)));
 332                         }
 333
 334                         curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, $timeout ? $timeout : FILE_FETCH_CONNECT_TIMEOUT);
 335                         curl_setopt($ch, CURLOPT_TIMEOUT, $timeout ? $timeout : FILE_FETCH_TIMEOUT);
 336                         curl_setopt($ch, CURLOPT_FOLLOWLOCATION, !ini_get("safe_mode"));
 337                         curl_setopt($ch, CURLOPT_MAXREDIRS, 20);
 338                         curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
 339                         curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
 340                         curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
 341                         curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_ANY);
 342                         curl_setopt($ch, CURLOPT_USERAGENT, SELF_USER_AGENT);
 343                         curl_setopt($ch, CURLOPT_ENCODING , "gzip");
 344                         curl_setopt($ch, CURLOPT_REFERER, $url);
 345
 346                         if ($post_query) {
 347                                 curl_setopt($ch, CURLOPT_POST, true);
 348                                 curl_setopt($ch, CURLOPT_POSTFIELDS, $post_query);
 349                         }
 350
 351                         if ($login && $pass)
 352                                 curl_setopt($ch, CURLOPT_USERPWD, "$login:$pass");
 353
 354                         $contents = @curl_exec($ch);
 355
 356                         if (curl_errno($ch) === 23 || curl_errno($ch) === 61) {
 357                                 curl_setopt($ch, CURLOPT_ENCODING, 'none');
 358                                 $contents = @curl_exec($ch);
 359                         }
 360
 361                         if ($contents === false) {
 362                                 $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
 363                                 curl_close($ch);
 364                                 return false;
 365                         }
 366
 367                         $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
 368                         $content_type = curl_getinfo($ch, CURLINFO_CONTENT_TYPE);
 369
 370                         $fetch_last_error_code = $http_code;
 371
 372                         if ($http_code != 200 || $type && strpos($content_type, "$type") === false) {
 373                                 if (curl_errno($ch) != 0) {
 374                                         $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
 375                                 } else {
 376                                         $fetch_last_error = "HTTP Code: $http_code";
 377                                 }
 378                                 curl_close($ch);
 379                                 return false;
 380                         }
 381
 382                         curl_close($ch);
 383
 384                         return $contents;
 385                 } else {
 386                         if ($login && $pass){
 387                                 $url_parts = array();
 388
 389                                 preg_match("/(^[^:]*):\/\/(.*)/", $url, $url_parts);
 390
 391                                 $pass = urlencode($pass);
 392
 393                                 if ($url_parts[1] && $url_parts[2]) {
 394                                         $url = $url_parts[1] . "://$login:$pass@" . $url_parts[2];
 395                                 }
 396                         }
 397
 398                         $data = @file_get_contents($url);
 399
 400                         if (!$data && function_exists('error_get_last')) {
 401                                 $error = error_get_last();
 402                                 $fetch_last_error = $error["message"];
 403                         }
 404                         return $data;
 405                 }
 406
 407         }
 408
 409         /**
 410          * Try to determine the favicon URL for a feed.
 411          * adapted from wordpress favicon plugin by Jeff Minard (http://thecodepro.com/)
 412          * http://dev.wp-plugins.org/file/favatars/trunk/favatars.php
 413          *
 414          * @param string $url A feed or page URL
 415          * @access public
 416          * @return mixed The favicon URL, or false if none was found.
 417          */
 418         function get_favicon_url($url) {
 419
 420                 $favicon_url = false;
 421
 422                 if ($html = @fetch_file_contents($url)) {
 423
 424                         libxml_use_internal_errors(true);
 425
 426                         $doc = new DOMDocument();
 427                         $doc->loadHTML($html);
 428                         $xpath = new DOMXPath($doc);
 429
 430                         $base = $xpath->query('/html/head/base');
 431                         foreach ($base as $b) {
 432                                 $url = $b->getAttribute("href");
 433                                 break;
 434                         }
 435
 436                         $entries = $xpath->query('/html/head/link[@rel="shortcut icon" or @rel="icon"]');
 437                         if (count($entries) > 0) {
 438                                 foreach ($entries as $entry) {
 439                                         $favicon_url = rewrite_relative_url($url, $entry->getAttribute("href"));
 440                                         break;
 441                                 }
 442                         }
 443                 }
 444
 445                 if (!$favicon_url)
 446                         $favicon_url = rewrite_relative_url($url, "/favicon.ico");
 447
 448                 return $favicon_url;
 449         } // function get_favicon_url
 450
 451         function check_feed_favicon($site_url, $feed, $link) {
 452 #               print "FAVICON [$site_url]: $favicon_url\n";
 453
 454                 $icon_file = ICONS_DIR . "/$feed.ico";
 455
 456                 if (!file_exists($icon_file)) {
 457                         $favicon_url = get_favicon_url($site_url);
 458
 459                         if ($favicon_url) {
 460                                 // Limiting to "image" type misses those served with text/plain
 461                                 $contents = fetch_file_contents($favicon_url); // , "image");
 462
 463                                 if ($contents) {
 464                                         // Crude image type matching.
 465                                         // Patterns gleaned from the file(1) source code.
 466                                         if (preg_match('/^\x00\x00\x01\x00/', $contents)) {
 467                                                 // 0       string  \000\000\001\000        MS Windows icon resource
 468                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa MS Windows icon resource");
 469                                         }
 470                                         elseif (preg_match('/^GIF8/', $contents)) {
 471                                                 // 0       string          GIF8            GIF image data
 472                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa GIF image");
 473                                         }
 474                                         elseif (preg_match('/^\x89PNG\x0d\x0a\x1a\x0a/', $contents)) {
 475                                                 // 0       string          \x89PNG\x0d\x0a\x1a\x0a         PNG image data
 476                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa PNG image");
 477                                         }
 478                                         elseif (preg_match('/^\xff\xd8/', $contents)) {
 479                                                 // 0       beshort         0xffd8          JPEG image data
 480                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa JPG image");
 481                                         }
 482                                         else {
 483                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa UNKNOWN type");
 484                                                 $contents = "";
 485                                         }
 486                                 }
 487
 488                                 if ($contents) {
 489                                         $fp = @fopen($icon_file, "w");
 490
 491                                         if ($fp) {
 492                                                 fwrite($fp, $contents);
 493                                                 fclose($fp);
 494                                                 chmod($icon_file, 0644);
 495                                         }
 496                                 }
 497                         }
 498                 }
 499         }
 500
 501         function print_select($id, $default, $values, $attributes = "") {
 502                 print "<select name=\"$id\" id=\"$id\" $attributes>";
 503                 foreach ($values as $v) {
 504                         if ($v == $default)
 505                                 $sel = "selected=\"1\"";
 506                          else
 507                                 $sel = "";
 508
 509                         $v = trim($v);
 510
 511                         print "<option value=\"$v\" $sel>$v</option>";
 512                 }
 513                 print "</select>";
 514         }
 515
 516         function print_select_hash($id, $default, $values, $attributes = "") {
 517                 print "<select name=\"$id\" id='$id' $attributes>";
 518                 foreach (array_keys($values) as $v) {
 519                         if ($v == $default)
 520                                 $sel = 'selected="selected"';
 521                          else
 522                                 $sel = "";
 523
 524                         $v = trim($v);
 525
 526                         print "<option $sel value=\"$v\">".$values[$v]."</option>";
 527                 }
 528
 529                 print "</select>";
 530         }
 531
 532         function print_radio($id, $default, $true_is, $values, $attributes = "") {
 533                 foreach ($values as $v) {
 534
 535                         if ($v == $default)
 536                                 $sel = "checked";
 537                          else
 538                                 $sel = "";
 539
 540                         if ($v == $true_is) {
 541                                 $sel .= " value=\"1\"";
 542                         } else {
 543                                 $sel .= " value=\"0\"";
 544                         }
 545
 546                         print "<input class=\"noborder\" dojoType=\"dijit.form.RadioButton\"
 547                                 type=\"radio\" $sel $attributes name=\"$id\">&nbsp;$v&nbsp;";
 548
 549                 }
 550         }
 551
 552         function initialize_user_prefs($link, $uid, $profile = false) {
 553
 554                 $uid = db_escape_string($link, $uid);
 555
 556                 if (!$profile) {
 557                         $profile = "NULL";
 558                         $profile_qpart = "AND profile IS NULL";
 559                 } else {
 560                         $profile_qpart = "AND profile = '$profile'";
 561                 }
 562
 563                 if (get_schema_version($link) < 63) $profile_qpart = "";
 564
 565                 db_query($link, "BEGIN");
 566
 567                 $result = db_query($link, "SELECT pref_name,def_value FROM ttrss_prefs");
 568
 569                 $u_result = db_query($link, "SELECT pref_name
 570                         FROM ttrss_user_prefs WHERE owner_uid = '$uid' $profile_qpart");
 571
 572                 $active_prefs = array();
 573
 574                 while ($line = db_fetch_assoc($u_result)) {
 575                         array_push($active_prefs, $line["pref_name"]);
 576                 }
 577
 578                 while ($line = db_fetch_assoc($result)) {
 579                         if (array_search($line["pref_name"], $active_prefs) === FALSE) {
 580 //                              print "adding " . $line["pref_name"] . "<br>";
 581
 582                                 $line["def_value"] = db_escape_string($link, $line["def_value"]);
 583                                 $line["pref_name"] = db_escape_string($link, $line["pref_name"]);
 584
 585                                 if (get_schema_version($link) < 63) {
 586                                         db_query($link, "INSERT INTO ttrss_user_prefs
 587                                                 (owner_uid,pref_name,value) VALUES
 588                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."')");
 589
 590                                 } else {
 591                                         db_query($link, "INSERT INTO ttrss_user_prefs
 592                                                 (owner_uid,pref_name,value, profile) VALUES
 593                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."', $profile)");
 594                                 }
 595
 596                         }
 597                 }
 598
 599                 db_query($link, "COMMIT");
 600
 601         }
 602
 603         function get_ssl_certificate_id() {
 604                 if ($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"]) {
 605                         return sha1($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"] .
 606                                 $_SERVER["REDIRECT_SSL_CLIENT_V_START"] .
 607                                 $_SERVER["REDIRECT_SSL_CLIENT_V_END"] .
 608                                 $_SERVER["REDIRECT_SSL_CLIENT_S_DN"]);
 609                 }
 610                 return "";
 611         }
 612
 613         function authenticate_user($link, $login, $password, $check_only = false) {
 614
 615                 if (!SINGLE_USER_MODE) {
 616                         $user_id = false;
 617
 618                         global $pluginhost;
 619                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_AUTH_USER) as $plugin) {
 620
 621                                 $user_id = (int) $plugin->authenticate($login, $password);
 622
 623                                 if ($user_id) {
 624                                         $_SESSION["auth_module"] = strtolower(get_class($plugin));
 625                                         break;
 626                                 }
 627                         }
 628
 629                         if ($user_id && !$check_only) {
 630                                 @session_start();
 631
 632                                 $_SESSION["uid"] = $user_id;
 633                                 $_SESSION["version"] = VERSION;
 634
 635                                 $result = db_query($link, "SELECT login,access_level,pwd_hash FROM ttrss_users
 636                                         WHERE id = '$user_id'");
 637
 638                                 $_SESSION["name"] = db_fetch_result($result, 0, "login");
 639                                 $_SESSION["access_level"] = db_fetch_result($result, 0, "access_level");
 640                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 641
 642                                 db_query($link, "UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 643                                         $_SESSION["uid"]);
 644
 645                                 $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 646                                 $_SESSION["user_agent"] = sha1($_SERVER['HTTP_USER_AGENT']);
 647                                 $_SESSION["pwd_hash"] = db_fetch_result($result, 0, "pwd_hash");
 648
 649                                 $_SESSION["last_version_check"] = time();
 650
 651                                 initialize_user_prefs($link, $_SESSION["uid"]);
 652
 653                                 return true;
 654                         }
 655
 656                         return false;
 657
 658                 } else {
 659
 660                         $_SESSION["uid"] = 1;
 661                         $_SESSION["name"] = "admin";
 662                         $_SESSION["access_level"] = 10;
 663
 664                         $_SESSION["hide_hello"] = true;
 665                         $_SESSION["hide_logout"] = true;
 666
 667                         $_SESSION["auth_module"] = false;
 668
 669                         if (!$_SESSION["csrf_token"]) {
 670                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 671                         }
 672
 673                         $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 674
 675                         initialize_user_prefs($link, $_SESSION["uid"]);
 676
 677                         return true;
 678                 }
 679         }
 680
 681         function make_password($length = 8) {
 682
 683                 $password = "";
 684                 $possible = "0123456789abcdfghjkmnpqrstvwxyzABCDFGHJKMNPQRSTVWXYZ";
 685
 686         $i = 0;
 687
 688                 while ($i < $length) {
 689                         $char = substr($possible, mt_rand(0, strlen($possible)-1), 1);
 690
 691                         if (!strstr($password, $char)) {
 692                                 $password .= $char;
 693                                 $i++;
 694                         }
 695                 }
 696                 return $password;
 697         }
 698
 699         // this is called after user is created to initialize default feeds, labels
 700         // or whatever else
 701
 702         // user preferences are checked on every login, not here
 703
 704         function initialize_user($link, $uid) {
 705
 706                 db_query($link, "insert into ttrss_feeds (owner_uid,title,feed_url)
 707                         values ('$uid', 'Tiny Tiny RSS: New Releases',
 708                         'http://tt-rss.org/releases.rss')");
 709
 710                 db_query($link, "insert into ttrss_feeds (owner_uid,title,feed_url)
 711                         values ('$uid', 'Tiny Tiny RSS: Forum',
 712                                 'http://tt-rss.org/forum/rss.php')");
 713         }
 714
 715         function logout_user() {
 716                 session_destroy();
 717                 if (isset($_COOKIE[session_name()])) {
 718                    setcookie(session_name(), '', time()-42000, '/');
 719                 }
 720         }
 721
 722         function validate_csrf($csrf_token) {
 723                 return $csrf_token == $_SESSION['csrf_token'];
 724         }
 725
 726         function load_user_plugins($link, $owner_uid) {
 727                 if ($owner_uid) {
 728                         $plugins = get_pref($link, "_ENABLED_PLUGINS", $owner_uid);
 729
 730                         global $pluginhost;
 731                         $pluginhost->load($plugins, $pluginhost::KIND_USER, $owner_uid);
 732
 733                         if (get_schema_version($link) > 100) {
 734                                 $pluginhost->load_data();
 735                         }
 736                 }
 737         }
 738
 739         function login_sequence($link) {
 740                 $_SESSION["prefs_cache"] = false;
 741
 742                 if (SINGLE_USER_MODE) {
 743                         @session_start();
 744                         authenticate_user($link, "admin", null);
 745                         cache_prefs($link);
 746                         load_user_plugins($link, $_SESSION["uid"]);
 747                 } else {
 748                         if (!validate_session($link)) $_SESSION["uid"] = false;
 749
 750                         if (!$_SESSION["uid"]) {
 751
 752                                 if (AUTH_AUTO_LOGIN && authenticate_user($link, null, null)) {
 753                                     $_SESSION["ref_schema_version"] = get_schema_version($link, true);
 754                                 } else {
 755                                          authenticate_user($link, null, null, true);
 756                                 }
 757
 758                                 if (!$_SESSION["uid"]) {
 759                                         @session_destroy();
 760                                         setcookie(session_name(), '', time()-42000, '/');
 761
 762                                         render_login_form($link);
 763                                         exit;
 764                                 }
 765
 766                         } else {
 767                                 /* bump login timestamp */
 768                                 db_query($link, "UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 769                                         $_SESSION["uid"]);
 770                                 $_SESSION["last_login_update"] = time();
 771                         }
 772
 773                         if ($_SESSION["uid"] && $_SESSION["language"] && SESSION_COOKIE_LIFETIME > 0) {
 774                                 setcookie("ttrss_lang", $_SESSION["language"],
 775                                         time() + SESSION_COOKIE_LIFETIME);
 776                         }
 777
 778                         if ($_SESSION["uid"]) {
 779                                 cache_prefs($link);
 780                                 load_user_plugins($link, $_SESSION["uid"]);
 781
 782                                 /* cleanup ccache */
 783
 784                                 db_query($link, "DELETE FROM ttrss_counters_cache WHERE owner_uid = ".
 785                                         $_SESSION["uid"] . " AND
 786                                                 (SELECT COUNT(id) FROM ttrss_feeds WHERE
 787                                                         ttrss_feeds.id = feed_id) = 0");
 788
 789                                 db_query($link, "DELETE FROM ttrss_cat_counters_cache WHERE owner_uid = ".
 790                                         $_SESSION["uid"] . " AND
 791                                                 (SELECT COUNT(id) FROM ttrss_feed_categories WHERE
 792                                                         ttrss_feed_categories.id = feed_id) = 0");
 793
 794                         }
 795
 796                 }
 797         }
 798
 799         function truncate_string($str, $max_len, $suffix = '&hellip;') {
 800                 if (mb_strlen($str, "utf-8") > $max_len - 3) {
 801                         return mb_substr($str, 0, $max_len, "utf-8") . $suffix;
 802                 } else {
 803                         return $str;
 804                 }
 805         }
 806
 807         function convert_timestamp($timestamp, $source_tz, $dest_tz) {
 808
 809                 try {
 810                         $source_tz = new DateTimeZone($source_tz);
 811                 } catch (Exception $e) {
 812                         $source_tz = new DateTimeZone('UTC');
 813                 }
 814
 815                 try {
 816                         $dest_tz = new DateTimeZone($dest_tz);
 817                 } catch (Exception $e) {
 818                         $dest_tz = new DateTimeZone('UTC');
 819                 }
 820
 821                 $dt = new DateTime(date('Y-m-d H:i:s', $timestamp), $source_tz);
 822                 return $dt->format('U') + $dest_tz->getOffset($dt);
 823         }
 824
 825         function make_local_datetime($link, $timestamp, $long, $owner_uid = false,
 826                                         $no_smart_dt = false) {
 827
 828                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 829                 if (!$timestamp) $timestamp = '1970-01-01 0:00';
 830
 831                 global $utc_tz;
 832                 global $tz_offset;
 833
 834                 # We store date in UTC internally
 835                 $dt = new DateTime($timestamp, $utc_tz);
 836
 837                 if ($tz_offset == -1) {
 838
 839                         $user_tz_string = get_pref($link, 'USER_TIMEZONE', $owner_uid);
 840
 841                         try {
 842                                 $user_tz = new DateTimeZone($user_tz_string);
 843                         } catch (Exception $e) {
 844                                 $user_tz = $utc_tz;
 845                         }
 846
 847                         $tz_offset = $user_tz->getOffset($dt);
 848                 }
 849
 850                 $user_timestamp = $dt->format('U') + $tz_offset;
 851
 852                 if (!$no_smart_dt) {
 853                         return smart_date_time($link, $user_timestamp,
 854                                 $tz_offset, $owner_uid);
 855                 } else {
 856                         if ($long)
 857                                 $format = get_pref($link, 'LONG_DATE_FORMAT', $owner_uid);
 858                         else
 859                                 $format = get_pref($link, 'SHORT_DATE_FORMAT', $owner_uid);
 860
 861                         return date($format, $user_timestamp);
 862                 }
 863         }
 864
 865         function smart_date_time($link, $timestamp, $tz_offset = 0, $owner_uid = false) {
 866                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 867
 868                 if (date("Y.m.d", $timestamp) == date("Y.m.d", time() + $tz_offset)) {
 869                         return date("G:i", $timestamp);
 870                 } else if (date("Y", $timestamp) == date("Y", time() + $tz_offset)) {
 871                         $format = get_pref($link, 'SHORT_DATE_FORMAT', $owner_uid);
 872                         return date($format, $timestamp);
 873                 } else {
 874                         $format = get_pref($link, 'LONG_DATE_FORMAT', $owner_uid);
 875                         return date($format, $timestamp);
 876                 }
 877         }
 878
 879         function sql_bool_to_bool($s) {
 880                 if ($s == "t" || $s == "1" || strtolower($s) == "true") {
 881                         return true;
 882                 } else {
 883                         return false;
 884                 }
 885         }
 886
 887         function bool_to_sql_bool($s) {
 888                 if ($s) {
 889                         return "true";
 890                 } else {
 891                         return "false";
 892                 }
 893         }
 894
 895         // Session caching removed due to causing wrong redirects to upgrade
 896         // script when get_schema_version() is called on an obsolete session
 897         // created on a previous schema version.
 898         function get_schema_version($link, $nocache = false) {
 899                 global $schema_version;
 900
 901                 if (!$schema_version) {
 902                         $result = db_query($link, "SELECT schema_version FROM ttrss_version");
 903                         $version = db_fetch_result($result, 0, "schema_version");
 904                         $schema_version = $version;
 905                         return $version;
 906                 } else {
 907                         return $schema_version;
 908                 }
 909         }
 910
 911         function sanity_check($link) {
 912                 require_once 'errors.php';
 913
 914                 $error_code = 0;
 915                 $schema_version = get_schema_version($link, true);
 916
 917                 if ($schema_version != SCHEMA_VERSION) {
 918                         $error_code = 5;
 919                 }
 920
 921                 if (DB_TYPE == "mysql") {
 922                         $result = db_query($link, "SELECT true", false);
 923                         if (db_num_rows($result) != 1) {
 924                                 $error_code = 10;
 925                         }
 926                 }
 927
 928                 if (db_escape_string($link, "testTEST") != "testTEST") {
 929                         $error_code = 12;
 930                 }
 931
 932                 return array("code" => $error_code, "message" => $ERRORS[$error_code]);
 933         }
 934
 935         function file_is_locked($filename) {
 936                 if (function_exists('flock')) {
 937                         $fp = @fopen(LOCK_DIRECTORY . "/$filename", "r");
 938                         if ($fp) {
 939                                 if (flock($fp, LOCK_EX | LOCK_NB)) {
 940                                         flock($fp, LOCK_UN);
 941                                         fclose($fp);
 942                                         return false;
 943                                 }
 944                                 fclose($fp);
 945                                 return true;
 946                         } else {
 947                                 return false;
 948                         }
 949                 }
 950                 return true; // consider the file always locked and skip the test
 951         }
 952
 953         function make_lockfile($filename) {
 954                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
 955
 956                 if ($fp && flock($fp, LOCK_EX | LOCK_NB)) {
 957                         if (function_exists('posix_getpid')) {
 958                                 fwrite($fp, posix_getpid() . "\n");
 959                         }
 960                         return $fp;
 961                 } else {
 962                         return false;
 963                 }
 964         }
 965
 966         function make_stampfile($filename) {
 967                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
 968
 969                 if (flock($fp, LOCK_EX | LOCK_NB)) {
 970                         fwrite($fp, time() . "\n");
 971                         flock($fp, LOCK_UN);
 972                         fclose($fp);
 973                         return true;
 974                 } else {
 975                         return false;
 976                 }
 977         }
 978
 979         function sql_random_function() {
 980                 if (DB_TYPE == "mysql") {
 981                         return "RAND()";
 982                 } else {
 983                         return "RANDOM()";
 984                 }
 985         }
 986
 987         function catchup_feed($link, $feed, $cat_view, $owner_uid = false, $max_id = false, $mode = 'all') {
 988
 989                         if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 990
 991                         //if (preg_match("/^-?[0-9][0-9]*$/", $feed) != false) {
 992
 993                         // Todo: all this interval stuff needs some generic generator function
 994
 995                         $date_qpart = "false";
 996
 997                         switch ($mode) {
 998                         case "1day":
 999                                 if (DB_TYPE == "pgsql") {
1000                                         $date_qpart = "date_entered < NOW() - INTERVAL '1 day' ";
1001                                 } else {
1002                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 1 DAY) ";
1003                                 }
1004                                 break;
1005                         case "1week":
1006                                 if (DB_TYPE == "pgsql") {
1007                                         $date_qpart = "date_entered < NOW() - INTERVAL '1 week' ";
1008                                 } else {
1009                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 1 WEEK) ";
1010                                 }
1011                                 break;
1012                         case "2weeks":
1013                                 if (DB_TYPE == "pgsql") {
1014                                         $date_qpart = "date_entered < NOW() - INTERVAL '2 week' ";
1015                                 } else {
1016                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 2 WEEK) ";
1017                                 }
1018                                 break;
1019                         default:
1020                                 $date_qpart = "true";
1021                         }
1022
1023                         if (is_numeric($feed)) {
1024                                 if ($cat_view) {
1025
1026                                         if ($feed >= 0) {
1027
1028                                                 if ($feed > 0) {
1029                                                         $children = getChildCategories($link, $feed, $owner_uid);
1030                                                         array_push($children, $feed);
1031
1032                                                         $children = join(",", $children);
1033
1034                                                         $cat_qpart = "cat_id IN ($children)";
1035                                                 } else {
1036                                                         $cat_qpart = "cat_id IS NULL";
1037                                                 }
1038
1039                                                 db_query($link, "UPDATE ttrss_user_entries
1040                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1041                                                                 (SELECT id FROM
1042                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1043                                                                                 AND owner_uid = $owner_uid AND unread = true AND feed_id IN
1044                                                                                         (SELECT id FROM ttrss_feeds WHERE $cat_qpart) AND $date_qpart) as tmp)");
1045
1046                                         } else if ($feed == -2) {
1047
1048                                                 db_query($link, "UPDATE ttrss_user_entries
1049                                                         SET unread = false,last_read = NOW() WHERE (SELECT COUNT(*)
1050                                                                 FROM ttrss_user_labels2 WHERE article_id = ref_id) > 0
1051                                                                 AND unread = true AND $date_qpart AND owner_uid = $owner_uid");
1052                                         }
1053
1054                                 } else if ($feed > 0) {
1055
1056                                         db_query($link, "UPDATE ttrss_user_entries
1057                                                 SET unread = false, last_read = NOW() WHERE ref_id IN
1058                                                         (SELECT id FROM
1059                                                                 (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1060                                                                         AND owner_uid = $owner_uid AND unread = true AND feed_id = $feed AND $date_qpart) as tmp)");
1061
1062                                 } else if ($feed < 0 && $feed > LABEL_BASE_INDEX) { // special, like starred
1063
1064                                         if ($feed == -1) {
1065                                                 db_query($link, "UPDATE ttrss_user_entries
1066                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1067                                                                 (SELECT id FROM
1068                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1069                                                                                 AND owner_uid = $owner_uid AND unread = true AND marked = true AND $date_qpart) as tmp)");
1070                                         }
1071
1072                                         if ($feed == -2) {
1073                                                 db_query($link, "UPDATE ttrss_user_entries
1074                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1075                                                                 (SELECT id FROM
1076                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1077                                                                                 AND owner_uid = $owner_uid AND unread = true AND published = true AND $date_qpart) as tmp)");
1078                                         }
1079
1080                                         if ($feed == -3) {
1081
1082                                                 $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE");
1083
1084                                                 if (DB_TYPE == "pgsql") {
1085                                                         $match_part = "date_entered > NOW() - INTERVAL '$intl hour' ";
1086                                                 } else {
1087                                                         $match_part = "date_entered > DATE_SUB(NOW(),
1088                                                                 INTERVAL $intl HOUR) ";
1089                                                 }
1090
1091                                                 db_query($link, "UPDATE ttrss_user_entries
1092                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1093                                                                 (SELECT id FROM
1094                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1095                                                                                 AND owner_uid = $owner_uid AND unread = true AND $date_qpart AND $match_part) as tmp)");
1096                                         }
1097
1098                                         if ($feed == -4) {
1099                                                 db_query($link, "UPDATE ttrss_user_entries
1100                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1101                                                                 (SELECT id FROM
1102                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1103                                                                                 AND owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1104                                         }
1105
1106                                 } else if ($feed < LABEL_BASE_INDEX) { // label
1107
1108                                         $label_id = feed_to_label_id($feed);
1109
1110                                         db_query($link, "UPDATE ttrss_user_entries
1111                                                 SET unread = false, last_read = NOW() WHERE ref_id IN
1112                                                         (SELECT id FROM
1113                                                                 (SELECT ttrss_entries.id FROM ttrss_entries, ttrss_user_entries, ttrss_user_labels2 WHERE ref_id = id
1114                                                                         AND label_id = '$label_id' AND ref_id = article_id
1115                                                                         AND owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1116
1117                                 }
1118
1119                                 ccache_update($link, $feed, $owner_uid, $cat_view);
1120
1121                         } else { // tag
1122                                 db_query($link, "UPDATE ttrss_user_entries
1123                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1124                                                 (SELECT id FROM
1125                                                         (SELECT ttrss_entries.id FROM ttrss_entries, ttrss_user_entries, ttrss_tags WHERE ref_id = ttrss_entries.id
1126                                                                 AND post_int_id = int_id AND tag_name = '$feed'
1127                                                                 AND ttrss_user_entries.owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1128
1129                         }
1130         }
1131
1132         function getAllCounters($link) {
1133                 $data = getGlobalCounters($link);
1134
1135                 $data = array_merge($data, getVirtCounters($link));
1136                 $data = array_merge($data, getLabelCounters($link));
1137                 $data = array_merge($data, getFeedCounters($link, $active_feed));
1138                 $data = array_merge($data, getCategoryCounters($link));
1139
1140                 return $data;
1141         }
1142
1143         function getCategoryTitle($link, $cat_id) {
1144
1145                 if ($cat_id == -1) {
1146                         return __("Special");
1147                 } else if ($cat_id == -2) {
1148                         return __("Labels");
1149                 } else {
1150
1151                         $result = db_query($link, "SELECT title FROM ttrss_feed_categories WHERE
1152                                 id = '$cat_id'");
1153
1154                         if (db_num_rows($result) == 1) {
1155                                 return db_fetch_result($result, 0, "title");
1156                         } else {
1157                                 return __("Uncategorized");
1158                         }
1159                 }
1160         }
1161
1162
1163         function getCategoryCounters($link) {
1164                 $ret_arr = array();
1165
1166                 /* Labels category */
1167
1168                 $cv = array("id" => -2, "kind" => "cat",
1169                         "counter" => getCategoryUnread($link, -2));
1170
1171                 array_push($ret_arr, $cv);
1172
1173                 $result = db_query($link, "SELECT id AS cat_id, value AS unread,
1174                         (SELECT COUNT(id) FROM ttrss_feed_categories AS c2
1175                                 WHERE c2.parent_cat = ttrss_feed_categories.id) AS num_children
1176                         FROM ttrss_feed_categories, ttrss_cat_counters_cache
1177                         WHERE ttrss_cat_counters_cache.feed_id = id AND
1178                         ttrss_cat_counters_cache.owner_uid = ttrss_feed_categories.owner_uid AND
1179                         ttrss_feed_categories.owner_uid = " . $_SESSION["uid"]);
1180
1181                 while ($line = db_fetch_assoc($result)) {
1182                         $line["cat_id"] = (int) $line["cat_id"];
1183
1184                         if ($line["num_children"] > 0) {
1185                                 $child_counter = getCategoryChildrenUnread($link, $line["cat_id"], $_SESSION["uid"]);
1186                         } else {
1187                                 $child_counter = 0;
1188                         }
1189
1190                         $cv = array("id" => $line["cat_id"], "kind" => "cat",
1191                                 "counter" => $line["unread"] + $child_counter);
1192
1193                         array_push($ret_arr, $cv);
1194                 }
1195
1196                 /* Special case: NULL category doesn't actually exist in the DB */
1197
1198                 $cv = array("id" => 0, "kind" => "cat",
1199                         "counter" => (int) ccache_find($link, 0, $_SESSION["uid"], true));
1200
1201                 array_push($ret_arr, $cv);
1202
1203                 return $ret_arr;
1204         }
1205
1206         // only accepts real cats (>= 0)
1207         function getCategoryChildrenUnread($link, $cat, $owner_uid = false) {
1208                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1209
1210                 $result = db_query($link, "SELECT id FROM ttrss_feed_categories WHERE parent_cat = '$cat'
1211                                 AND owner_uid = $owner_uid");
1212
1213                 $unread = 0;
1214
1215                 while ($line = db_fetch_assoc($result)) {
1216                         $unread += getCategoryUnread($link, $line["id"], $owner_uid);
1217                         $unread += getCategoryChildrenUnread($link, $line["id"], $owner_uid);
1218                 }
1219
1220                 return $unread;
1221         }
1222
1223         function getCategoryUnread($link, $cat, $owner_uid = false) {
1224
1225                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1226
1227                 if ($cat >= 0) {
1228
1229                         if ($cat != 0) {
1230                                 $cat_query = "cat_id = '$cat'";
1231                         } else {
1232                                 $cat_query = "cat_id IS NULL";
1233                         }
1234
1235                         $result = db_query($link, "SELECT id FROM ttrss_feeds WHERE $cat_query
1236                                         AND owner_uid = " . $owner_uid);
1237
1238                         $cat_feeds = array();
1239                         while ($line = db_fetch_assoc($result)) {
1240                                 array_push($cat_feeds, "feed_id = " . $line["id"]);
1241                         }
1242
1243                         if (count($cat_feeds) == 0) return 0;
1244
1245                         $match_part = implode(" OR ", $cat_feeds);
1246
1247                         $result = db_query($link, "SELECT COUNT(int_id) AS unread
1248                                 FROM ttrss_user_entries
1249                                 WHERE   unread = true AND ($match_part)
1250                                 AND owner_uid = " . $owner_uid);
1251
1252                         $unread = 0;
1253
1254                         # this needs to be rewritten
1255                         while ($line = db_fetch_assoc($result)) {
1256                                 $unread += $line["unread"];
1257                         }
1258
1259                         return $unread;
1260                 } else if ($cat == -1) {
1261                         return getFeedUnread($link, -1) + getFeedUnread($link, -2) + getFeedUnread($link, -3) + getFeedUnread($link, 0);
1262                 } else if ($cat == -2) {
1263
1264                         $result = db_query($link, "
1265                                 SELECT COUNT(unread) AS unread FROM
1266                                         ttrss_user_entries, ttrss_user_labels2
1267                                 WHERE article_id = ref_id AND unread = true
1268                                         AND ttrss_user_entries.owner_uid = '$owner_uid'");
1269
1270                         $unread = db_fetch_result($result, 0, "unread");
1271
1272                         return $unread;
1273
1274                 }
1275         }
1276
1277         function getFeedUnread($link, $feed, $is_cat = false) {
1278                 return getFeedArticles($link, $feed, $is_cat, true, $_SESSION["uid"]);
1279         }
1280
1281         function getLabelUnread($link, $label_id, $owner_uid = false) {
1282                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1283
1284                 $result = db_query($link, "SELECT COUNT(ref_id) AS unread FROM ttrss_user_entries, ttrss_user_labels2
1285                         WHERE owner_uid = '$owner_uid' AND unread = true AND label_id = '$label_id' AND article_id = ref_id");
1286
1287                 if (db_num_rows($result) != 0) {
1288                         return db_fetch_result($result, 0, "unread");
1289                 } else {
1290                         return 0;
1291                 }
1292         }
1293
1294         function getFeedArticles($link, $feed, $is_cat = false, $unread_only = false,
1295                 $owner_uid = false) {
1296
1297                 $n_feed = (int) $feed;
1298                 $need_entries = false;
1299
1300                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1301
1302                 if ($unread_only) {
1303                         $unread_qpart = "unread = true";
1304                 } else {
1305                         $unread_qpart = "true";
1306                 }
1307
1308                 if ($is_cat) {
1309                         return getCategoryUnread($link, $n_feed, $owner_uid);
1310                 } else if ($n_feed == -6) {
1311                         return 0;
1312                 } else if ($feed != "0" && $n_feed == 0) {
1313
1314                         $feed = db_escape_string($link, $feed);
1315
1316                         $result = db_query($link, "SELECT SUM((SELECT COUNT(int_id)
1317                                 FROM ttrss_user_entries,ttrss_entries WHERE int_id = post_int_id
1318                                         AND ref_id = id AND $unread_qpart)) AS count FROM ttrss_tags
1319                                 WHERE owner_uid = $owner_uid AND tag_name = '$feed'");
1320                         return db_fetch_result($result, 0, "count");
1321
1322                 } else if ($n_feed == -1) {
1323                         $match_part = "marked = true";
1324                 } else if ($n_feed == -2) {
1325                         $match_part = "published = true";
1326                 } else if ($n_feed == -3) {
1327                         $match_part = "unread = true AND score >= 0";
1328
1329                         $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE", $owner_uid);
1330
1331                         if (DB_TYPE == "pgsql") {
1332                                 $match_part .= " AND updated > NOW() - INTERVAL '$intl hour' ";
1333                         } else {
1334                                 $match_part .= " AND updated > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
1335                         }
1336
1337                         $need_entries = true;
1338
1339                 } else if ($n_feed == -4) {
1340                         $match_part = "true";
1341                 } else if ($n_feed >= 0) {
1342
1343                         if ($n_feed != 0) {
1344                                 $match_part = "feed_id = '$n_feed'";
1345                         } else {
1346                                 $match_part = "feed_id IS NULL";
1347                         }
1348
1349                 } else if ($feed < LABEL_BASE_INDEX) {
1350
1351                         $label_id = feed_to_label_id($feed);
1352
1353                         return getLabelUnread($link, $label_id, $owner_uid);
1354
1355                 }
1356
1357                 if ($match_part) {
1358
1359                         if ($need_entries) {
1360                                 $from_qpart = "ttrss_user_entries,ttrss_entries";
1361                                 $from_where = "ttrss_entries.id = ttrss_user_entries.ref_id AND";
1362                         } else {
1363                                 $from_qpart = "ttrss_user_entries";
1364                         }
1365
1366                         $query = "SELECT count(int_id) AS unread
1367                                 FROM $from_qpart WHERE
1368                                 $unread_qpart AND $from_where ($match_part) AND ttrss_user_entries.owner_uid = $owner_uid";
1369
1370                         //echo "[$feed/$query]\n";
1371
1372                         $result = db_query($link, $query);
1373
1374                 } else {
1375
1376                         $result = db_query($link, "SELECT COUNT(post_int_id) AS unread
1377                                 FROM ttrss_tags,ttrss_user_entries,ttrss_entries
1378                                 WHERE tag_name = '$feed' AND post_int_id = int_id AND ref_id = ttrss_entries.id
1379                                 AND $unread_qpart AND ttrss_tags.owner_uid = " . $owner_uid);
1380                 }
1381
1382                 $unread = db_fetch_result($result, 0, "unread");
1383
1384                 return $unread;
1385         }
1386
1387         function getGlobalUnread($link, $user_id = false) {
1388
1389                 if (!$user_id) {
1390                         $user_id = $_SESSION["uid"];
1391                 }
1392
1393                 $result = db_query($link, "SELECT SUM(value) AS c_id FROM ttrss_counters_cache
1394                         WHERE owner_uid = '$user_id' AND feed_id > 0");
1395
1396                 $c_id = db_fetch_result($result, 0, "c_id");
1397
1398                 return $c_id;
1399         }
1400
1401         function getGlobalCounters($link, $global_unread = -1) {
1402                 $ret_arr = array();
1403
1404                 if ($global_unread == -1) {
1405                         $global_unread = getGlobalUnread($link);
1406                 }
1407
1408                 $cv = array("id" => "global-unread",
1409                         "counter" => (int) $global_unread);
1410
1411                 array_push($ret_arr, $cv);
1412
1413                 $result = db_query($link, "SELECT COUNT(id) AS fn FROM
1414                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1415
1416                 $subscribed_feeds = db_fetch_result($result, 0, "fn");
1417
1418                 $cv = array("id" => "subscribed-feeds",
1419                         "counter" => (int) $subscribed_feeds);
1420
1421                 array_push($ret_arr, $cv);
1422
1423                 return $ret_arr;
1424         }
1425
1426         function getVirtCounters($link) {
1427
1428                 $ret_arr = array();
1429
1430                 for ($i = 0; $i >= -4; $i--) {
1431
1432                         $count = getFeedUnread($link, $i);
1433
1434                         $cv = array("id" => $i,
1435                                 "counter" => (int) $count);
1436
1437 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1438 //                              $cv["xmsg"] = getFeedArticles($link, $i)." ".__("total");
1439
1440                         array_push($ret_arr, $cv);
1441                 }
1442
1443                 global $pluginhost;
1444
1445                 if ($pluginhost) {
1446                         $feeds = $pluginhost->get_feeds(-1);
1447
1448                         if (is_array($feeds)) {
1449                                 foreach ($feeds as $feed) {
1450                                         $cv = array("id" => PluginHost::pfeed_to_feed_id($feed['id']),
1451                                                 "counter" => $feed['sender']->get_unread($feed['id']));
1452
1453                                         array_push($ret_arr, $cv);
1454                                 }
1455                         }
1456                 }
1457
1458                 return $ret_arr;
1459         }
1460
1461         function getLabelCounters($link, $descriptions = false) {
1462
1463                 $ret_arr = array();
1464
1465                 $owner_uid = $_SESSION["uid"];
1466
1467                 $result = db_query($link, "SELECT id,caption,COUNT(unread) AS unread
1468                         FROM ttrss_labels2 LEFT JOIN ttrss_user_labels2 ON
1469                                 (ttrss_labels2.id = label_id)
1470                                         LEFT JOIN ttrss_user_entries ON (ref_id = article_id AND unread = true)
1471                                 WHERE ttrss_labels2.owner_uid = $owner_uid GROUP BY ttrss_labels2.id,
1472                                         ttrss_labels2.caption");
1473
1474                 while ($line = db_fetch_assoc($result)) {
1475
1476                         $id = label_to_feed_id($line["id"]);
1477
1478                         $label_name = $line["caption"];
1479                         $count = $line["unread"];
1480
1481                         $cv = array("id" => $id,
1482                                 "counter" => (int) $count);
1483
1484                         if ($descriptions)
1485                                 $cv["description"] = $label_name;
1486
1487 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1488 //                              $cv["xmsg"] = getFeedArticles($link, $id)." ".__("total");
1489
1490                         array_push($ret_arr, $cv);
1491                 }
1492
1493                 return $ret_arr;
1494         }
1495
1496         function getFeedCounters($link, $active_feed = false) {
1497
1498                 $ret_arr = array();
1499
1500                 $query = "SELECT ttrss_feeds.id,
1501                                 ttrss_feeds.title,
1502                                 ".SUBSTRING_FOR_DATE."(ttrss_feeds.last_updated,1,19) AS last_updated,
1503                                 last_error, value AS count
1504                         FROM ttrss_feeds, ttrss_counters_cache
1505                         WHERE ttrss_feeds.owner_uid = ".$_SESSION["uid"]."
1506                                 AND ttrss_counters_cache.owner_uid = ttrss_feeds.owner_uid
1507                                 AND ttrss_counters_cache.feed_id = id";
1508
1509                 $result = db_query($link, $query);
1510                 $fctrs_modified = false;
1511
1512                 while ($line = db_fetch_assoc($result)) {
1513
1514                         $id = $line["id"];
1515                         $count = $line["count"];
1516                         $last_error = htmlspecialchars($line["last_error"]);
1517
1518                         $last_updated = make_local_datetime($link, $line['last_updated'], false);
1519
1520                         $has_img = feed_has_icon($id);
1521
1522                         if (date('Y') - date('Y', strtotime($line['last_updated'])) > 2)
1523                                 $last_updated = '';
1524
1525                         $cv = array("id" => $id,
1526                                 "updated" => $last_updated,
1527                                 "counter" => (int) $count,
1528                                 "has_img" => (int) $has_img);
1529
1530                         if ($last_error)
1531                                 $cv["error"] = $last_error;
1532
1533 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1534 //                              $cv["xmsg"] = getFeedArticles($link, $id)." ".__("total");
1535
1536                         if ($active_feed && $id == $active_feed)
1537                                 $cv["title"] = truncate_string($line["title"], 30);
1538
1539                         array_push($ret_arr, $cv);
1540
1541                 }
1542
1543                 return $ret_arr;
1544         }
1545
1546         function get_pgsql_version($link) {
1547                 $result = db_query($link, "SELECT version() AS version");
1548                 $version = explode(" ", db_fetch_result($result, 0, "version"));
1549                 return $version[1];
1550         }
1551
1552         /**
1553          * @return array (code => Status code, message => error message if available)
1554          *
1555          *                 0 - OK, Feed already exists
1556          *                 1 - OK, Feed added
1557          *                 2 - Invalid URL
1558          *                 3 - URL content is HTML, no feeds available
1559          *                 4 - URL content is HTML which contains multiple feeds.
1560          *                     Here you should call extractfeedurls in rpc-backend
1561          *                     to get all possible feeds.
1562          *                 5 - Couldn't download the URL content.
1563          */
1564         function subscribe_to_feed($link, $url, $cat_id = 0,
1565                         $auth_login = '', $auth_pass = '') {
1566
1567                 global $fetch_last_error;
1568
1569                 require_once "include/rssfuncs.php";
1570
1571                 $url = fix_url($url);
1572
1573                 if (!$url || !validate_feed_url($url)) return array("code" => 2);
1574
1575                 $contents = @fetch_file_contents($url, false, $auth_login, $auth_pass);
1576
1577                 if (!$contents) {
1578                         return array("code" => 5, "message" => $fetch_last_error);
1579                 }
1580
1581                 if (is_html($contents)) {
1582                         $feedUrls = get_feeds_from_html($url, $contents);
1583
1584                         if (count($feedUrls) == 0) {
1585                                 return array("code" => 3);
1586                         } else if (count($feedUrls) > 1) {
1587                                 return array("code" => 4, "feeds" => $feedUrls);
1588                         }
1589                         //use feed url as new URL
1590                         $url = key($feedUrls);
1591                 }
1592
1593                 if ($cat_id == "0" || !$cat_id) {
1594                         $cat_qpart = "NULL";
1595                 } else {
1596                         $cat_qpart = "'$cat_id'";
1597                 }
1598
1599                 $result = db_query($link,
1600                         "SELECT id FROM ttrss_feeds
1601                         WHERE feed_url = '$url' AND owner_uid = ".$_SESSION["uid"]);
1602
1603                 if (db_num_rows($result) == 0) {
1604                         $result = db_query($link,
1605                                 "INSERT INTO ttrss_feeds
1606                                         (owner_uid,feed_url,title,cat_id, auth_login,auth_pass,update_method)
1607                                 VALUES ('".$_SESSION["uid"]."', '$url',
1608                                 '[Unknown]', $cat_qpart, '$auth_login', '$auth_pass', 0)");
1609
1610                         $result = db_query($link,
1611                                 "SELECT id FROM ttrss_feeds WHERE feed_url = '$url'
1612                                         AND owner_uid = " . $_SESSION["uid"]);
1613
1614                         $feed_id = db_fetch_result($result, 0, "id");
1615
1616                         if ($feed_id) {
1617                                 update_rss_feed($link, $feed_id, true);
1618                         }
1619
1620                         return array("code" => 1);
1621                 } else {
1622                         return array("code" => 0);
1623                 }
1624         }
1625
1626         function print_feed_select($link, $id, $default_id = "",
1627                 $attributes = "", $include_all_feeds = true,
1628                 $root_id = false, $nest_level = 0) {
1629
1630                 if (!$root_id) {
1631                         print "<select id=\"$id\" name=\"$id\" $attributes>";
1632                         if ($include_all_feeds) {
1633                                 $is_selected = ("0" == $default_id) ? "selected=\"1\"" : "";
1634                                 print "<option $is_selected value=\"0\">".__('All feeds')."</option>";
1635                         }
1636                 }
1637
1638                 if (get_pref($link, 'ENABLE_FEED_CATS')) {
1639
1640                         if ($root_id)
1641                                 $parent_qpart = "parent_cat = '$root_id'";
1642                         else
1643                                 $parent_qpart = "parent_cat IS NULL";
1644
1645                         $result = db_query($link, "SELECT id,title,
1646                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1647                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1648                                 FROM ttrss_feed_categories
1649                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1650
1651                         while ($line = db_fetch_assoc($result)) {
1652
1653                                 for ($i = 0; $i < $nest_level; $i++)
1654                                         $line["title"] = " - " . $line["title"];
1655
1656                                 $is_selected = ("CAT:".$line["id"] == $default_id) ? "selected=\"1\"" : "";
1657
1658                                 printf("<option $is_selected value='CAT:%d'>%s</option>",
1659                                         $line["id"], htmlspecialchars($line["title"]));
1660
1661                                 if ($line["num_children"] > 0)
1662                                         print_feed_select($link, $id, $default_id, $attributes,
1663                                                 $include_all_feeds, $line["id"], $nest_level+1);
1664
1665                                 $feed_result = db_query($link, "SELECT id,title FROM ttrss_feeds
1666                                         WHERE cat_id = '".$line["id"]."' AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1667
1668                                 while ($fline = db_fetch_assoc($feed_result)) {
1669                                         $is_selected = ($fline["id"] == $default_id) ? "selected=\"1\"" : "";
1670
1671                                         $fline["title"] = " + " . $fline["title"];
1672
1673                                         for ($i = 0; $i < $nest_level; $i++)
1674                                                 $fline["title"] = " - " . $fline["title"];
1675
1676                                         printf("<option $is_selected value='%d'>%s</option>",
1677                                                 $fline["id"], htmlspecialchars($fline["title"]));
1678                                 }
1679                         }
1680
1681                         if (!$root_id) {
1682                                 $is_selected = ($default_id == "CAT:0") ? "selected=\"1\"" : "";
1683
1684                                 printf("<option $is_selected value='CAT:0'>%s</option>",
1685                                         __("Uncategorized"));
1686
1687                                 $feed_result = db_query($link, "SELECT id,title FROM ttrss_feeds
1688                                         WHERE cat_id IS NULL AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1689
1690                                 while ($fline = db_fetch_assoc($feed_result)) {
1691                                         $is_selected = ($fline["id"] == $default_id && !$default_is_cat) ? "selected=\"1\"" : "";
1692
1693                                         $fline["title"] = " + " . $fline["title"];
1694
1695                                         for ($i = 0; $i < $nest_level; $i++)
1696                                                 $fline["title"] = " - " . $fline["title"];
1697
1698                                         printf("<option $is_selected value='%d'>%s</option>",
1699                                                 $fline["id"], htmlspecialchars($fline["title"]));
1700                                 }
1701                         }
1702
1703                 } else {
1704                         $result = db_query($link, "SELECT id,title FROM ttrss_feeds
1705                                 WHERE owner_uid = ".$_SESSION["uid"]." ORDER BY title");
1706
1707                         while ($line = db_fetch_assoc($result)) {
1708
1709                                 $is_selected = ($line["id"] == $default_id) ? "selected=\"1\"" : "";
1710
1711                                 printf("<option $is_selected value='%d'>%s</option>",
1712                                         $line["id"], htmlspecialchars($line["title"]));
1713                         }
1714                 }
1715
1716                 if (!$root_id) {
1717                         print "</select>";
1718                 }
1719         }
1720
1721         function print_feed_cat_select($link, $id, $default_id,
1722                 $attributes, $include_all_cats = true, $root_id = false, $nest_level = 0) {
1723
1724                         if (!$root_id) {
1725                                         print "<select id=\"$id\" name=\"$id\" default=\"$default_id\" onchange=\"catSelectOnChange(this)\" $attributes>";
1726                         }
1727
1728                         if ($root_id)
1729                                 $parent_qpart = "parent_cat = '$root_id'";
1730                         else
1731                                 $parent_qpart = "parent_cat IS NULL";
1732
1733                         $result = db_query($link, "SELECT id,title,
1734                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1735                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1736                                 FROM ttrss_feed_categories
1737                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1738
1739                         while ($line = db_fetch_assoc($result)) {
1740                                 if ($line["id"] == $default_id) {
1741                                         $is_selected = "selected=\"1\"";
1742                                 } else {
1743                                         $is_selected = "";
1744                                 }
1745
1746                                 for ($i = 0; $i < $nest_level; $i++)
1747                                         $line["title"] = " - " . $line["title"];
1748
1749                                 if ($line["title"])
1750                                         printf("<option $is_selected value='%d'>%s</option>",
1751                                                 $line["id"], htmlspecialchars($line["title"]));
1752
1753                                 if ($line["num_children"] > 0)
1754                                         print_feed_cat_select($link, $id, $default_id, $attributes,
1755                                                 $include_all_cats, $line["id"], $nest_level+1);
1756                         }
1757
1758                         if (!$root_id) {
1759                                 if ($include_all_cats) {
1760                                         if (db_num_rows($result) > 0) {
1761                                                 print "<option disabled=\"1\">--------</option>";
1762                                         }
1763
1764                                         if ($default_id == 0) {
1765                                                 $is_selected = "selected=\"1\"";
1766                                         } else {
1767                                                 $is_selected = "";
1768                                         }
1769
1770                                         print "<option $is_selected value=\"0\">".__('Uncategorized')."</option>";
1771                                 }
1772                                 print "</select>";
1773                         }
1774                 }
1775
1776         function checkbox_to_sql_bool($val) {
1777                 return ($val == "on") ? "true" : "false";
1778         }
1779
1780         function getFeedCatTitle($link, $id) {
1781                 if ($id == -1) {
1782                         return __("Special");
1783                 } else if ($id < LABEL_BASE_INDEX) {
1784                         return __("Labels");
1785                 } else if ($id > 0) {
1786                         $result = db_query($link, "SELECT ttrss_feed_categories.title
1787                                 FROM ttrss_feeds, ttrss_feed_categories WHERE ttrss_feeds.id = '$id' AND
1788                                         cat_id = ttrss_feed_categories.id");
1789                         if (db_num_rows($result) == 1) {
1790                                 return db_fetch_result($result, 0, "title");
1791                         } else {
1792                                 return __("Uncategorized");
1793                         }
1794                 } else {
1795                         return "getFeedCatTitle($id) failed";
1796                 }
1797
1798         }
1799
1800         function getFeedIcon($id) {
1801                 switch ($id) {
1802                 case 0:
1803                         return "images/archive.png";
1804                         break;
1805                 case -1:
1806                         return "images/mark_set.svg";
1807                         break;
1808                 case -2:
1809                         return "images/pub_set.svg";
1810                         break;
1811                 case -3:
1812                         return "images/fresh.png";
1813                         break;
1814                 case -4:
1815                         return "images/tag.png";
1816                         break;
1817                 case -6:
1818                         return "images/recently_read.png";
1819                         break;
1820                 default:
1821                         if ($id < LABEL_BASE_INDEX) {
1822                                 return "images/label.png";
1823                         } else {
1824                                 if (file_exists(ICONS_DIR . "/$id.ico"))
1825                                         return ICONS_URL . "/$id.ico";
1826                         }
1827                         break;
1828                 }
1829         }
1830
1831         function getFeedTitle($link, $id, $cat = false) {
1832                 if ($cat) {
1833                         return getCategoryTitle($link, $id);
1834                 } else if ($id == -1) {
1835                         return __("Starred articles");
1836                 } else if ($id == -2) {
1837                         return __("Published articles");
1838                 } else if ($id == -3) {
1839                         return __("Fresh articles");
1840                 } else if ($id == -4) {
1841                         return __("All articles");
1842                 } else if ($id === 0 || $id === "0") {
1843                         return __("Archived articles");
1844                 } else if ($id == -6) {
1845                         return __("Recently read");
1846                 } else if ($id < LABEL_BASE_INDEX) {
1847                         $label_id = feed_to_label_id($id);
1848                         $result = db_query($link, "SELECT caption FROM ttrss_labels2 WHERE id = '$label_id'");
1849                         if (db_num_rows($result) == 1) {
1850                                 return db_fetch_result($result, 0, "caption");
1851                         } else {
1852                                 return "Unknown label ($label_id)";
1853                         }
1854
1855                 } else if (is_numeric($id) && $id > 0) {
1856                         $result = db_query($link, "SELECT title FROM ttrss_feeds WHERE id = '$id'");
1857                         if (db_num_rows($result) == 1) {
1858                                 return db_fetch_result($result, 0, "title");
1859                         } else {
1860                                 return "Unknown feed ($id)";
1861                         }
1862                 } else {
1863                         return $id;
1864                 }
1865         }
1866
1867         function make_init_params($link) {
1868                 $params = array();
1869
1870                 foreach (array("ON_CATCHUP_SHOW_NEXT_FEED", "HIDE_READ_FEEDS",
1871                         "ENABLE_FEED_CATS", "FEEDS_SORT_BY_UNREAD", "CONFIRM_FEED_CATCHUP",
1872                         "CDM_AUTO_CATCHUP", "FRESH_ARTICLE_MAX_AGE",
1873                         "HIDE_READ_SHOWS_SPECIAL", "COMBINED_DISPLAY_MODE") as $param) {
1874
1875                                  $params[strtolower($param)] = (int) get_pref($link, $param);
1876                  }
1877
1878                 $params["icons_url"] = ICONS_URL;
1879                 $params["cookie_lifetime"] = SESSION_COOKIE_LIFETIME;
1880                 $params["default_view_mode"] = get_pref($link, "_DEFAULT_VIEW_MODE");
1881                 $params["default_view_limit"] = (int) get_pref($link, "_DEFAULT_VIEW_LIMIT");
1882                 $params["default_view_order_by"] = get_pref($link, "_DEFAULT_VIEW_ORDER_BY");
1883                 $params["bw_limit"] = (int) $_SESSION["bw_limit"];
1884                 $params["label_base_index"] = (int) LABEL_BASE_INDEX;
1885
1886                 $result = db_query($link, "SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
1887                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1888
1889                 $max_feed_id = db_fetch_result($result, 0, "mid");
1890                 $num_feeds = db_fetch_result($result, 0, "nf");
1891
1892                 $params["max_feed_id"] = (int) $max_feed_id;
1893                 $params["num_feeds"] = (int) $num_feeds;
1894
1895                 $params["collapsed_feedlist"] = (int) get_pref($link, "_COLLAPSED_FEEDLIST");
1896                 $params["hotkeys"] = get_hotkeys_map($link);
1897
1898                 $params["csrf_token"] = $_SESSION["csrf_token"];
1899                 $params["widescreen"] = (int) $_COOKIE["ttrss_widescreen"];
1900
1901                 $params['simple_update'] = defined('SIMPLE_UPDATE_MODE') && SIMPLE_UPDATE_MODE;
1902
1903                 return $params;
1904         }
1905
1906         function get_hotkeys_info($link) {
1907                 $hotkeys = array(
1908                         __("Navigation") => array(
1909                                 "next_feed" => __("Open next feed"),
1910                                 "prev_feed" => __("Open previous feed"),
1911                                 "next_article" => __("Open next article"),
1912                                 "prev_article" => __("Open previous article"),
1913                                 "next_article_noscroll" => __("Open next article (don't scroll long articles)"),
1914                                 "prev_article_noscroll" => __("Open previous article (don't scroll long articles)"),
1915                                 "next_article_noexpand" => __("Move to next article (don't expand or mark read)"),
1916                                 "prev_article_noexpand" => __("Move to previous article (don't expand or mark read)"),
1917                                 "search_dialog" => __("Show search dialog")),
1918                         __("Article") => array(
1919                                 "toggle_mark" => __("Toggle starred"),
1920                                 "toggle_publ" => __("Toggle published"),
1921                                 "toggle_unread" => __("Toggle unread"),
1922                                 "edit_tags" => __("Edit tags"),
1923                                 "dismiss_selected" => __("Dismiss selected"),
1924                                 "dismiss_read" => __("Dismiss read"),
1925                                 "open_in_new_window" => __("Open in new window"),
1926                                 "catchup_below" => __("Mark below as read"),
1927                                 "catchup_above" => __("Mark above as read"),
1928                                 "article_scroll_down" => __("Scroll down"),
1929                                 "article_scroll_up" => __("Scroll up"),
1930                                 "select_article_cursor" => __("Select article under cursor"),
1931                                 "email_article" => __("Email article"),
1932                                 "close_article" => __("Close/collapse article"),
1933                                 "toggle_expand" => __("Toggle article expansion (combined mode)"),
1934                                 "toggle_widescreen" => __("Toggle widescreen mode"),
1935                                 "toggle_embed_original" => __("Toggle embed original")),
1936                         __("Article selection") => array(
1937                                 "select_all" => __("Select all articles"),
1938                                 "select_unread" => __("Select unread"),
1939                                 "select_marked" => __("Select starred"),
1940                                 "select_published" => __("Select published"),
1941                                 "select_invert" => __("Invert selection"),
1942                                 "select_none" => __("Deselect everything")),
1943                         __("Feed") => array(
1944                                 "feed_refresh" => __("Refresh current feed"),
1945                                 "feed_unhide_read" => __("Un/hide read feeds"),
1946                                 "feed_subscribe" => __("Subscribe to feed"),
1947                                 "feed_edit" => __("Edit feed"),
1948                                 "feed_catchup" => __("Mark as read"),
1949                                 "feed_reverse" => __("Reverse headlines"),
1950                                 "feed_debug_update" => __("Debug feed update"),
1951                                 "catchup_all" => __("Mark all feeds as read"),
1952                                 "cat_toggle_collapse" => __("Un/collapse current category"),
1953                                 "toggle_combined_mode" => __("Toggle combined mode"),
1954                                 "toggle_cdm_expanded" => __("Toggle auto expand in combined mode")),
1955                         __("Go to") => array(
1956                                 "goto_all" => __("All articles"),
1957                                 "goto_fresh" => __("Fresh"),
1958                                 "goto_marked" => __("Starred"),
1959                                 "goto_published" => __("Published"),
1960                                 "goto_tagcloud" => __("Tag cloud"),
1961                                 "goto_prefs" => __("Preferences")),
1962                         __("Other") => array(
1963                                 "create_label" => __("Create label"),
1964                                 "create_filter" => __("Create filter"),
1965                                 "collapse_sidebar" => __("Un/collapse sidebar"),
1966                                 "help_dialog" => __("Show help dialog"))
1967                         );
1968
1969                 global $pluginhost;
1970                 foreach ($pluginhost->get_hooks($pluginhost::HOOK_HOTKEY_INFO) as $plugin) {
1971                         $hotkeys = $plugin->hook_hotkey_info($hotkeys);
1972                 }
1973
1974                 return $hotkeys;
1975         }
1976
1977         function get_hotkeys_map($link) {
1978                 $hotkeys = array(
1979 //                      "navigation" => array(
1980                                 "k" => "next_feed",
1981                                 "j" => "prev_feed",
1982                                 "n" => "next_article",
1983                                 "p" => "prev_article",
1984                                 "(38)|up" => "prev_article",
1985                                 "(40)|down" => "next_article",
1986 //                              "^(38)|Ctrl-up" => "prev_article_noscroll",
1987 //                              "^(40)|Ctrl-down" => "next_article_noscroll",
1988                                 "(191)|/" => "search_dialog",
1989 //                      "article" => array(
1990                                 "s" => "toggle_mark",
1991                                 "*s" => "toggle_publ",
1992                                 "u" => "toggle_unread",
1993                                 "*t" => "edit_tags",
1994                                 "*d" => "dismiss_selected",
1995                                 "*x" => "dismiss_read",
1996                                 "o" => "open_in_new_window",
1997                                 "c p" => "catchup_below",
1998                                 "c n" => "catchup_above",
1999                                 "*n" => "article_scroll_down",
2000                                 "*p" => "article_scroll_up",
2001                                 "*(38)|Shift+up" => "article_scroll_up",
2002                                 "*(40)|Shift+down" => "article_scroll_down",
2003                                 "a *w" => "toggle_widescreen",
2004                                 "a e" => "toggle_embed_original",
2005                                 "e" => "email_article",
2006                                 "a q" => "close_article",
2007 //                      "article_selection" => array(
2008                                 "a a" => "select_all",
2009                                 "a u" => "select_unread",
2010                                 "a *u" => "select_marked",
2011                                 "a p" => "select_published",
2012                                 "a i" => "select_invert",
2013                                 "a n" => "select_none",
2014 //                      "feed" => array(
2015                                 "f r" => "feed_refresh",
2016                                 "f a" => "feed_unhide_read",
2017                                 "f s" => "feed_subscribe",
2018                                 "f e" => "feed_edit",
2019                                 "f q" => "feed_catchup",
2020                                 "f x" => "feed_reverse",
2021                                 "f *d" => "feed_debug_update",
2022                                 "f *c" => "toggle_combined_mode",
2023                                 "f c" => "toggle_cdm_expanded",
2024                                 "*q" => "catchup_all",
2025                                 "x" => "cat_toggle_collapse",
2026 //                      "goto" => array(
2027                                 "g a" => "goto_all",
2028                                 "g f" => "goto_fresh",
2029                                 "g s" => "goto_marked",
2030                                 "g p" => "goto_published",
2031                                 "g t" => "goto_tagcloud",
2032                                 "g *p" => "goto_prefs",
2033 //                      "other" => array(
2034                                 "(9)|Tab" => "select_article_cursor", // tab
2035                                 "c l" => "create_label",
2036                                 "c f" => "create_filter",
2037                                 "c s" => "collapse_sidebar",
2038                                 "^(191)|Ctrl+/" => "help_dialog",
2039                         );
2040
2041                 if (get_pref($link, 'COMBINED_DISPLAY_MODE')) {
2042                         $hotkeys["^(38)|Ctrl-up"] = "prev_article_noscroll";
2043                         $hotkeys["^(40)|Ctrl-down"] = "next_article_noscroll";
2044                 }
2045
2046                 global $pluginhost;
2047                 foreach ($pluginhost->get_hooks($pluginhost::HOOK_HOTKEY_MAP) as $plugin) {
2048                         $hotkeys = $plugin->hook_hotkey_map($hotkeys);
2049                 }
2050
2051                 $prefixes = array();
2052
2053                 foreach (array_keys($hotkeys) as $hotkey) {
2054                         $pair = explode(" ", $hotkey, 2);
2055
2056                         if (count($pair) > 1 && !in_array($pair[0], $prefixes)) {
2057                                 array_push($prefixes, $pair[0]);
2058                         }
2059                 }
2060
2061                 return array($prefixes, $hotkeys);
2062         }
2063
2064         function make_runtime_info($link) {
2065                 $data = array();
2066
2067                 $result = db_query($link, "SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
2068                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
2069
2070                 $max_feed_id = db_fetch_result($result, 0, "mid");
2071                 $num_feeds = db_fetch_result($result, 0, "nf");
2072
2073                 $data["max_feed_id"] = (int) $max_feed_id;
2074                 $data["num_feeds"] = (int) $num_feeds;
2075
2076                 $data['last_article_id'] = getLastArticleId($link);
2077                 $data['cdm_expanded'] = get_pref($link, 'CDM_EXPANDED');
2078
2079                 $data['dep_ts'] = calculate_dep_timestamp();
2080                 $data['reload_on_ts_change'] = !defined('_NO_RELOAD_ON_TS_CHANGE');
2081
2082                 if (file_exists(LOCK_DIRECTORY . "/update_daemon.lock")) {
2083
2084                         $data['daemon_is_running'] = (int) file_is_locked("update_daemon.lock");
2085
2086                         if (time() - $_SESSION["daemon_stamp_check"] > 30) {
2087
2088                                 $stamp = (int) @file_get_contents(LOCK_DIRECTORY . "/update_daemon.stamp");
2089
2090                                 if ($stamp) {
2091                                         $stamp_delta = time() - $stamp;
2092
2093                                         if ($stamp_delta > 1800) {
2094                                                 $stamp_check = 0;
2095                                         } else {
2096                                                 $stamp_check = 1;
2097                                                 $_SESSION["daemon_stamp_check"] = time();
2098                                         }
2099
2100                                         $data['daemon_stamp_ok'] = $stamp_check;
2101
2102                                         $stamp_fmt = date("Y.m.d, G:i", $stamp);
2103
2104                                         $data['daemon_stamp'] = $stamp_fmt;
2105                                 }
2106                         }
2107                 }
2108
2109                 if ($_SESSION["last_version_check"] + 86400 + rand(-1000, 1000) < time()) {
2110                                 $new_version_details = @check_for_update($link);
2111
2112                                 $data['new_version_available'] = (int) ($new_version_details != false);
2113
2114                                 $_SESSION["last_version_check"] = time();
2115                                 $_SESSION["version_data"] = $new_version_details;
2116                 }
2117
2118                 return $data;
2119         }
2120
2121         function search_to_sql($link, $search) {
2122
2123                 $search_query_part = "";
2124
2125                 $keywords = explode(" ", $search);
2126                 $query_keywords = array();
2127
2128                 foreach ($keywords as $k) {
2129                         if (strpos($k, "-") === 0) {
2130                                 $k = substr($k, 1);
2131                                 $not = "NOT";
2132                         } else {
2133                                 $not = "";
2134                         }
2135
2136                         $commandpair = explode(":", mb_strtolower($k), 2);
2137
2138                         switch ($commandpair[0]) {
2139                         case "title":
2140                                 if ($commandpair[1]) {
2141                                         array_push($query_keywords, "($not (LOWER(ttrss_entries.title) LIKE '%".
2142                                                 db_escape_string($link, mb_strtolower($commandpair[1]))."%'))");
2143                                 }
2144                                 break;
2145                         case "author":
2146                                 if ($commandpair[1]) {
2147                                         array_push($query_keywords, "($not (LOWER(author) LIKE '%".
2148                                                 db_escape_string($link, mb_strtolower($commandpair[1]))."%'))");
2149                                 }
2150                                 break;
2151                         case "note":
2152                                 if ($commandpair[1]) {
2153                                         if ($commandpair[1] == "true")
2154                                                 array_push($query_keywords, "($not (note IS NOT NULL AND note != ''))");
2155                                         else if ($commandpair[1] == "false")
2156                                                 array_push($query_keywords, "($not (note IS NULL OR note = ''))");
2157                                         else
2158                                                 array_push($query_keywords, "($not (LOWER(note) LIKE '%".
2159                                                         db_escape_string($link, mb_strtolower($commandpair[1]))."%'))");
2160                                 }
2161                                 break;
2162                         case "star":
2163
2164                                 if ($commandpair[1]) {
2165                                         if ($commandpair[1] == "true")
2166                                                 array_push($query_keywords, "($not (marked = true))");
2167                                         else
2168                                                 array_push($query_keywords, "($not (marked = false))");
2169                                 }
2170                                 break;
2171                         case "pub":
2172                                 if ($commandpair[1]) {
2173                                         if ($commandpair[1] == "true")
2174                                                 array_push($query_keywords, "($not (published = true))");
2175                                         else
2176                                                 array_push($query_keywords, "($not (published = false))");
2177
2178                                 }
2179                                 break;
2180                         default:
2181                                 if (strpos($k, "@") === 0) {
2182
2183                                         $user_tz_string = get_pref($link, 'USER_TIMEZONE', $_SESSION['uid']);
2184                                         $orig_ts = strtotime(substr($k, 1));
2185                                         $k = date("Y-m-d", convert_timestamp($orig_ts, $user_tz_string, 'UTC'));
2186
2187                                         //$k = date("Y-m-d", strtotime(substr($k, 1)));
2188
2189                                         array_push($query_keywords, "(".SUBSTRING_FOR_DATE."(updated,1,LENGTH('$k')) $not = '$k')");
2190                                 } else {
2191                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2192                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2193                                 }
2194                         }
2195                 }
2196
2197                 $search_query_part = implode("AND", $query_keywords);
2198
2199                 return $search_query_part;
2200         }
2201
2202         function getParentCategories($link, $cat, $owner_uid) {
2203                 $rv = array();
2204
2205                 $result = db_query($link, "SELECT parent_cat FROM ttrss_feed_categories
2206                         WHERE id = '$cat' AND parent_cat IS NOT NULL AND owner_uid = $owner_uid");
2207
2208                 while ($line = db_fetch_assoc($result)) {
2209                         array_push($rv, $line["parent_cat"]);
2210                         $rv = array_merge($rv, getParentCategories($link, $line["parent_cat"], $owner_uid));
2211                 }
2212
2213                 return $rv;
2214         }
2215
2216         function getChildCategories($link, $cat, $owner_uid) {
2217                 $rv = array();
2218
2219                 $result = db_query($link, "SELECT id FROM ttrss_feed_categories
2220                         WHERE parent_cat = '$cat' AND owner_uid = $owner_uid");
2221
2222                 while ($line = db_fetch_assoc($result)) {
2223                         array_push($rv, $line["id"]);
2224                         $rv = array_merge($rv, getChildCategories($link, $line["id"], $owner_uid));
2225                 }
2226
2227                 return $rv;
2228         }
2229
2230         function queryFeedHeadlines($link, $feed, $limit, $view_mode, $cat_view, $search, $search_mode, $override_order = false, $offset = 0, $owner_uid = 0, $filter = false, $since_id = 0, $include_children = false, $ignore_vfeed_group = false) {
2231
2232                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2233
2234                 $ext_tables_part = "";
2235
2236                         if ($search) {
2237
2238                                 if (SPHINX_ENABLED) {
2239                                         $ids = join(",", @sphinx_search($search, 0, 500));
2240
2241                                         if ($ids)
2242                                                 $search_query_part = "ref_id IN ($ids) AND ";
2243                                         else
2244                                                 $search_query_part = "ref_id = -1 AND ";
2245
2246                                 } else {
2247                                         $search_query_part = search_to_sql($link, $search);
2248                                         $search_query_part .= " AND ";
2249                                 }
2250
2251                         } else {
2252                                 $search_query_part = "";
2253                         }
2254
2255                         if ($filter) {
2256
2257                                 if (DB_TYPE == "pgsql") {
2258                                         $query_strategy_part .= " AND updated > NOW() - INTERVAL '14 days' ";
2259                                 } else {
2260                                         $query_strategy_part .= " AND updated > DATE_SUB(NOW(), INTERVAL 14 DAY) ";
2261                                 }
2262
2263                                 $override_order = "updated DESC";
2264
2265                                 $filter_query_part = filter_to_sql($link, $filter, $owner_uid);
2266
2267                                 // Try to check if SQL regexp implementation chokes on a valid regexp
2268                                 $result = db_query($link, "SELECT true AS true_val FROM ttrss_entries,
2269                                         ttrss_user_entries, ttrss_feeds, ttrss_feed_categories
2270                                         WHERE $filter_query_part LIMIT 1", false);
2271
2272                                 if ($result) {
2273                                         $test = db_fetch_result($result, 0, "true_val");
2274
2275                                         if (!$test) {
2276                                                 $filter_query_part = "false AND";
2277                                         } else {
2278                                                 $filter_query_part .= " AND";
2279                                         }
2280                                 } else {
2281                                         $filter_query_part = "false AND";
2282                                 }
2283
2284                         } else {
2285                                 $filter_query_part = "";
2286                         }
2287
2288                         if ($since_id) {
2289                                 $since_id_part = "ttrss_entries.id > $since_id AND ";
2290                         } else {
2291                                 $since_id_part = "";
2292                         }
2293
2294                         $view_query_part = "";
2295
2296                         if ($view_mode == "adaptive") {
2297                                 if ($search) {
2298                                         $view_query_part = " ";
2299                                 } else if ($feed != -1) {
2300
2301                                         $unread = getFeedUnread($link, $feed, $cat_view);
2302
2303                                         if ($cat_view && $feed > 0 && $include_children)
2304                                                 $unread += getCategoryChildrenUnread($link, $feed);
2305
2306                                         if ($unread > 0)
2307                                 $view_query_part = " unread = true AND ";
2308
2309                                 }
2310                         }
2311
2312                         if ($view_mode == "marked") {
2313                                 $view_query_part = " marked = true AND ";
2314                         }
2315
2316                         if ($view_mode == "has_note") {
2317                                 $view_query_part = " (note IS NOT NULL AND note != '') AND ";
2318                         }
2319
2320                         if ($view_mode == "published") {
2321                                 $view_query_part = " published = true AND ";
2322                         }
2323
2324                         if ($view_mode == "unread" && $feed != -6) {
2325                                 $view_query_part = " unread = true AND ";
2326                         }
2327
2328                         if ($limit > 0) {
2329                                 $limit_query_part = "LIMIT " . $limit;
2330                         }
2331
2332                         $allow_archived = false;
2333
2334                         $vfeed_query_part = "";
2335
2336                         // override query strategy and enable feed display when searching globally
2337                         if ($search && $search_mode == "all_feeds") {
2338                                 $query_strategy_part = "true";
2339                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2340                         /* tags */
2341                         } else if (!is_numeric($feed)) {
2342                                 $query_strategy_part = "true";
2343                                 $vfeed_query_part = "(SELECT title FROM ttrss_feeds WHERE
2344                                         id = feed_id) as feed_title,";
2345                         } else if ($search && $search_mode == "this_cat") {
2346                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2347
2348                                 if ($feed > 0) {
2349                                         if ($include_children) {
2350                                                 $subcats = getChildCategories($link, $feed, $owner_uid);
2351                                                 array_push($subcats, $feed);
2352                                                 $cats_qpart = join(",", $subcats);
2353                                         } else {
2354                                                 $cats_qpart = $feed;
2355                                         }
2356
2357                                         $query_strategy_part = "ttrss_feeds.cat_id IN ($cats_qpart)";
2358
2359                                 } else {
2360                                         $query_strategy_part = "ttrss_feeds.cat_id IS NULL";
2361                                 }
2362
2363                         } else if ($feed > 0) {
2364
2365                                 if ($cat_view) {
2366
2367                                         if ($feed > 0) {
2368                                                 if ($include_children) {
2369                                                         # sub-cats
2370                                                         $subcats = getChildCategories($link, $feed, $owner_uid);
2371
2372                                                         array_push($subcats, $feed);
2373                                                         $query_strategy_part = "cat_id IN (".
2374                                                                         implode(",", $subcats).")";
2375
2376                                                 } else {
2377                                                         $query_strategy_part = "cat_id = '$feed'";
2378                                                 }
2379
2380                                         } else {
2381                                                 $query_strategy_part = "cat_id IS NULL";
2382                                         }
2383
2384                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2385
2386                                 } else {
2387                                         $query_strategy_part = "feed_id = '$feed'";
2388                                 }
2389                         } else if ($feed == 0 && !$cat_view) { // archive virtual feed
2390                                 $query_strategy_part = "feed_id IS NULL";
2391                                 $allow_archived = true;
2392                         } else if ($feed == 0 && $cat_view) { // uncategorized
2393                                 $query_strategy_part = "cat_id IS NULL AND feed_id IS NOT NULL";
2394                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2395                         } else if ($feed == -1) { // starred virtual feed
2396                                 $query_strategy_part = "marked = true";
2397                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2398                                 $allow_archived = true;
2399
2400                                 if (!$override_order) {
2401                                         $override_order = "last_marked DESC, date_entered DESC, updated DESC";
2402                                 }
2403
2404                         } else if ($feed == -2) { // published virtual feed OR labels category
2405
2406                                 if (!$cat_view) {
2407                                         $query_strategy_part = "published = true";
2408                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2409                                         $allow_archived = true;
2410
2411                                         if (!$override_order) {
2412                                                 $override_order = "last_published DESC, date_entered DESC, updated DESC";
2413                                         }
2414
2415                                 } else {
2416                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2417
2418                                         $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2419
2420                                         $query_strategy_part = "ttrss_labels2.id = ttrss_user_labels2.label_id AND
2421                                                 ttrss_user_labels2.article_id = ref_id";
2422
2423                                 }
2424                         } else if ($feed == -6) { // recently read
2425                                 $query_strategy_part = "unread = false AND last_read IS NOT NULL";
2426                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2427                                 $allow_archived = true;
2428
2429                                 if (!$override_order) $override_order = "last_read DESC";
2430                         } else if ($feed == -3) { // fresh virtual feed
2431                                 $query_strategy_part = "unread = true AND score >= 0";
2432
2433                                 $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE", $owner_uid);
2434
2435                                 if (DB_TYPE == "pgsql") {
2436                                         $query_strategy_part .= " AND date_entered > NOW() - INTERVAL '$intl hour' ";
2437                                 } else {
2438                                         $query_strategy_part .= " AND date_entered > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
2439                                 }
2440
2441                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2442                         } else if ($feed == -4) { // all articles virtual feed
2443                                 $allow_archived = true;
2444                                 $query_strategy_part = "true";
2445                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2446                         } else if ($feed <= LABEL_BASE_INDEX) { // labels
2447                                 $label_id = feed_to_label_id($feed);
2448
2449                                 $query_strategy_part = "label_id = '$label_id' AND
2450                                         ttrss_labels2.id = ttrss_user_labels2.label_id AND
2451                                         ttrss_user_labels2.article_id = ref_id";
2452
2453                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2454                                 $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2455                                 $allow_archived = true;
2456
2457                         } else {
2458                                 $query_strategy_part = "true";
2459                         }
2460
2461                         $order_by = "score DESC, date_entered DESC, updated DESC";
2462
2463                         if ($view_mode == "unread_first") {
2464                                 $order_by = "unread DESC, $order_by";
2465                         }
2466
2467                         if ($override_order) {
2468                                 $order_by = $override_order;
2469                         }
2470
2471                         $feed_title = "";
2472
2473                         if ($search) {
2474                                 $feed_title = T_sprintf("Search results: %s", $search);
2475                         } else {
2476                                 if ($cat_view) {
2477                                         $feed_title = getCategoryTitle($link, $feed);
2478                                 } else {
2479                                         if (is_numeric($feed) && $feed > 0) {
2480                                                 $result = db_query($link, "SELECT title,site_url,last_error
2481                                                         FROM ttrss_feeds WHERE id = '$feed' AND owner_uid = $owner_uid");
2482
2483                                                 $feed_title = db_fetch_result($result, 0, "title");
2484                                                 $feed_site_url = db_fetch_result($result, 0, "site_url");
2485                                                 $last_error = db_fetch_result($result, 0, "last_error");
2486                                         } else {
2487                                                 $feed_title = getFeedTitle($link, $feed);
2488                                         }
2489                                 }
2490                         }
2491
2492                         $content_query_part = "content as content_preview, cached_content, ";
2493
2494                         if (is_numeric($feed)) {
2495
2496                                 if ($feed >= 0) {
2497                                         $feed_kind = "Feeds";
2498                                 } else {
2499                                         $feed_kind = "Labels";
2500                                 }
2501
2502                                 if ($limit_query_part) {
2503                                         $offset_query_part = "OFFSET $offset";
2504                                 }
2505
2506                                 // proper override_order applied above
2507                                 if ($vfeed_query_part && !$ignore_vfeed_group && get_pref($link, 'VFEED_GROUP_BY_FEED', $owner_uid)) {
2508                                         if (!$override_order) {
2509                                                 $order_by = "ttrss_feeds.title, $order_by";
2510                                         } else {
2511                                                 $order_by = "ttrss_feeds.title, $override_order";
2512                                         }
2513                                 }
2514
2515                                 if (!$allow_archived) {
2516                                         $from_qpart = "ttrss_entries,ttrss_user_entries,ttrss_feeds$ext_tables_part";
2517                                         $feed_check_qpart = "ttrss_user_entries.feed_id = ttrss_feeds.id AND";
2518
2519                                 } else {
2520                                         $from_qpart = "ttrss_entries$ext_tables_part,ttrss_user_entries
2521                                                 LEFT JOIN ttrss_feeds ON (feed_id = ttrss_feeds.id)";
2522                                 }
2523
2524                                 $query = "SELECT DISTINCT
2525                                                 date_entered,
2526                                                 guid,
2527                                                 ttrss_entries.id,ttrss_entries.title,
2528                                                 updated,
2529                                                 label_cache,
2530                                                 tag_cache,
2531                                                 always_display_enclosures,
2532                                                 site_url,
2533                                                 note,
2534                                                 num_comments,
2535                                                 comments,
2536                                                 int_id,
2537                                                 hide_images,
2538                                                 unread,feed_id,marked,published,link,last_read,orig_feed_id,
2539                                                 last_marked, last_published,
2540                                                 $vfeed_query_part
2541                                                 $content_query_part
2542                                                 author,score
2543                                         FROM
2544                                                 $from_qpart
2545                                         WHERE
2546                                         $feed_check_qpart
2547                                         ttrss_user_entries.ref_id = ttrss_entries.id AND
2548                                         ttrss_user_entries.owner_uid = '$owner_uid' AND
2549                                         $search_query_part
2550                                         $filter_query_part
2551                                         $view_query_part
2552                                         $since_id_part
2553                                         $query_strategy_part ORDER BY $order_by
2554                                         $limit_query_part $offset_query_part";
2555
2556                                 if ($_REQUEST["debug"]) print $query;
2557
2558                                 $result = db_query($link, $query);
2559
2560                         } else {
2561                                 // browsing by tag
2562
2563                                 $select_qpart = "SELECT DISTINCT " .
2564                                                                 "date_entered," .
2565                                                                 "guid," .
2566                                                                 "note," .
2567                                                                 "ttrss_entries.id as id," .
2568                                                                 "title," .
2569                                                                 "updated," .
2570                                                                 "unread," .
2571                                                                 "feed_id," .
2572                                                                 "orig_feed_id," .
2573                                                                 "marked," .
2574                                                                 "num_comments, " .
2575                                                                 "comments, " .
2576                                                                 "tag_cache," .
2577                                                                 "label_cache," .
2578                                                                 "link," .
2579                                                                 "last_read," .
2580                                                                 "(SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) AS hide_images," .
2581                                                                 "last_marked, last_published, " .
2582                                                                 $since_id_part .
2583                                                                 $vfeed_query_part .
2584                                                                 $content_query_part .
2585                                                                 "score ";
2586
2587                                 $feed_kind = "Tags";
2588                                 $all_tags = explode(",", $feed);
2589                                 if ($search_mode == 'any') {
2590                                         $tag_sql = "tag_name in (" . implode(", ", array_map("db_quote", $all_tags)) . ")";
2591                                         $from_qpart = " FROM ttrss_entries,ttrss_user_entries,ttrss_tags ";
2592                                         $where_qpart = " WHERE " .
2593                                                                    "ref_id = ttrss_entries.id AND " .
2594                                                                    "ttrss_user_entries.owner_uid = $owner_uid AND " .
2595                                                                    "post_int_id = int_id AND $tag_sql AND " .
2596                                                                    $view_query_part .
2597                                                                    $search_query_part .
2598                                                                    $query_strategy_part . " ORDER BY $order_by " .
2599                                                                    $limit_query_part;
2600
2601                                 } else {
2602                                         $i = 1;
2603                                         $sub_selects = array();
2604                                         $sub_ands = array();
2605                                         foreach ($all_tags as $term) {
2606                                                 array_push($sub_selects, "(SELECT post_int_id from ttrss_tags WHERE tag_name = " . db_quote($term) . " AND owner_uid = $owner_uid) as A$i");
2607                                                 $i++;
2608                                         }
2609                                         if ($i > 2) {
2610                                                 $x = 1;
2611                                                 $y = 2;
2612                                                 do {
2613                                                         array_push($sub_ands, "A$x.post_int_id = A$y.post_int_id");
2614                                                         $x++;
2615                                                         $y++;
2616                                                 } while ($y < $i);
2617                                         }
2618                                         array_push($sub_ands, "A1.post_int_id = ttrss_user_entries.int_id and ttrss_user_entries.owner_uid = $owner_uid");
2619                                         array_push($sub_ands, "ttrss_user_entries.ref_id = ttrss_entries.id");
2620                                         $from_qpart = " FROM " . implode(", ", $sub_selects) . ", ttrss_user_entries, ttrss_entries";
2621                                         $where_qpart = " WHERE " . implode(" AND ", $sub_ands);
2622                                 }
2623                                 //                              error_log("TAG SQL: " . $tag_sql);
2624                                 // $tag_sql = "tag_name = '$feed'";   DEFAULT way
2625
2626                                 //                              error_log("[". $select_qpart . "][" . $from_qpart . "][" .$where_qpart . "]");
2627                                 $result = db_query($link, $select_qpart . $from_qpart . $where_qpart);
2628                         }
2629
2630                         return array($result, $feed_title, $feed_site_url, $last_error);
2631
2632         }
2633
2634         function sanitize($link, $str, $force_remove_images = false, $owner = false, $site_url = false) {
2635                 if (!$owner) $owner = $_SESSION["uid"];
2636
2637                 $res = trim($str); if (!$res) return '';
2638
2639                 if (strpos($res, "href=") === false)
2640                         $res = rewrite_urls($res);
2641
2642                 $charset_hack = '<head>
2643                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
2644                 </head>';
2645
2646                 $res = trim($res); if (!$res) return '';
2647
2648                 libxml_use_internal_errors(true);
2649
2650                 $doc = new DOMDocument();
2651                 $doc->loadHTML($charset_hack . $res);
2652                 $xpath = new DOMXPath($doc);
2653
2654                 $entries = $xpath->query('(//a[@href]|//img[@src])');
2655
2656                 foreach ($entries as $entry) {
2657
2658                         if ($site_url) {
2659
2660                                 if ($entry->hasAttribute('href'))
2661                                         $entry->setAttribute('href',
2662                                                 rewrite_relative_url($site_url, $entry->getAttribute('href')));
2663
2664                                 if ($entry->hasAttribute('src')) {
2665                                         $src = rewrite_relative_url($site_url, $entry->getAttribute('src'));
2666
2667                                         $cached_filename = CACHE_DIR . '/images/' . sha1($src) . '.png';
2668
2669                                         if (file_exists($cached_filename)) {
2670                                                 $src = SELF_URL_PATH . '/image.php?hash=' . sha1($src);
2671                                         }
2672
2673                                         $entry->setAttribute('src', $src);
2674                                 }
2675
2676                                 if ($entry->nodeName == 'img') {
2677                                         if (($owner && get_pref($link, "STRIP_IMAGES", $owner)) ||
2678                                                         $force_remove_images || $_SESSION["bw_limit"]) {
2679
2680                                                 $p = $doc->createElement('p');
2681
2682                                                 $a = $doc->createElement('a');
2683                                                 $a->setAttribute('href', $entry->getAttribute('src'));
2684
2685                                                 $a->appendChild(new DOMText($entry->getAttribute('src')));
2686                                                 $a->setAttribute('target', '_blank');
2687
2688                                                 $p->appendChild($a);
2689
2690                                                 $entry->parentNode->replaceChild($p, $entry);
2691                                         }
2692                                 }
2693                         }
2694
2695                         if (strtolower($entry->nodeName) == "a") {
2696                                 $entry->setAttribute("target", "_blank");
2697                         }
2698                 }
2699
2700                 $entries = $xpath->query('//iframe');
2701                 foreach ($entries as $entry) {
2702                         $entry->setAttribute('sandbox', 'allow-scripts');
2703
2704                 }
2705
2706                 $allowed_elements = array('a', 'address', 'audio', 'article', 'aside',
2707                         'b', 'bdi', 'bdo', 'big', 'blockquote', 'body', 'br',
2708                         'caption', 'cite', 'center', 'code', 'col', 'colgroup',
2709                         'data', 'dd', 'del', 'details', 'div', 'dl', 'font',
2710                         'dt', 'em', 'footer', 'figure', 'figcaption',
2711                         'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'header', 'html', 'i',
2712                         'img', 'ins', 'kbd', 'li', 'main', 'mark', 'nav', 'noscript',
2713                         'ol', 'p', 'pre', 'q', 'ruby', 'rp', 'rt', 's', 'samp', 'small',
2714                         'source', 'span', 'strike', 'strong', 'sub', 'summary',
2715                         'sup', 'table', 'tbody', 'td', 'tfoot', 'th', 'thead', 'time',
2716                         'tr', 'track', 'tt', 'u', 'ul', 'var', 'wbr', 'video' );
2717
2718                 if ($_SESSION['hasSandbox']) $allowed_elements[] = 'iframe';
2719
2720                 $disallowed_attributes = array('id', 'style', 'class');
2721
2722                 global $pluginhost;
2723
2724                 if (isset($pluginhost)) {
2725                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_SANITIZE) as $plugin) {
2726                                 $retval = $plugin->hook_sanitize($doc, $site_url, $allowed_elements, $disallowed_attributes);
2727                                 if (is_array($retval)) {
2728                                         $doc = $retval[0];
2729                                         $allowed_elements = $retval[1];
2730                                         $disallowed_attributes = $retval[2];
2731                                 } else {
2732                                         $doc = $retval;
2733                                 }
2734                         }
2735                 }
2736
2737                 $doc->removeChild($doc->firstChild); //remove doctype
2738                 $doc = strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes);
2739                 $res = $doc->saveHTML();
2740                 return $res;
2741         }
2742
2743         function strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes) {
2744                 $entries = $doc->getElementsByTagName("*");
2745
2746                 foreach ($entries as $entry) {
2747                         if (!in_array($entry->nodeName, $allowed_elements)) {
2748                                 $entry->parentNode->removeChild($entry);
2749                         }
2750
2751                         if ($entry->hasAttributes()) {
2752                                 $attrs_to_remove = array();
2753
2754                                 foreach ($entry->attributes as $attr) {
2755
2756                                         if (strpos($attr->nodeName, 'on') === 0) {
2757                                                 array_push($attrs_to_remove, $attr);
2758                                         }
2759
2760                                         if (in_array($attr->nodeName, $disallowed_attributes)) {
2761                                                 array_push($attrs_to_remove, $attr);
2762                                         }
2763                                 }
2764
2765                                 foreach ($attrs_to_remove as $attr) {
2766                                         $entry->removeAttributeNode($attr);
2767                                 }
2768                         }
2769                 }
2770
2771                 return $doc;
2772         }
2773
2774         function check_for_update($link) {
2775                 if (CHECK_FOR_NEW_VERSION && $_SESSION['access_level'] >= 10) {
2776                         $version_url = "http://tt-rss.org/version.php?ver=" . VERSION .
2777                                 "&iid=" . sha1(SELF_URL_PATH);
2778
2779                         $version_data = @fetch_file_contents($version_url);
2780
2781                         if ($version_data) {
2782                                 $version_data = json_decode($version_data, true);
2783                                 if ($version_data && $version_data['version']) {
2784
2785                                         if (version_compare(VERSION, $version_data['version']) == -1) {
2786                                                 return $version_data;
2787                                         }
2788                                 }
2789                         }
2790                 }
2791                 return false;
2792         }
2793
2794         function catchupArticlesById($link, $ids, $cmode, $owner_uid = false) {
2795
2796                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2797                 if (count($ids) == 0) return;
2798
2799                 $tmp_ids = array();
2800
2801                 foreach ($ids as $id) {
2802                         array_push($tmp_ids, "ref_id = '$id'");
2803                 }
2804
2805                 $ids_qpart = join(" OR ", $tmp_ids);
2806
2807                 if ($cmode == 0) {
2808                         db_query($link, "UPDATE ttrss_user_entries SET
2809                         unread = false,last_read = NOW()
2810                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2811                 } else if ($cmode == 1) {
2812                         db_query($link, "UPDATE ttrss_user_entries SET
2813                         unread = true
2814                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2815                 } else {
2816                         db_query($link, "UPDATE ttrss_user_entries SET
2817                         unread = NOT unread,last_read = NOW()
2818                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2819                 }
2820
2821                 /* update ccache */
2822
2823                 $result = db_query($link, "SELECT DISTINCT feed_id FROM ttrss_user_entries
2824                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2825
2826                 while ($line = db_fetch_assoc($result)) {
2827                         ccache_update($link, $line["feed_id"], $owner_uid);
2828                 }
2829         }
2830
2831         function get_article_tags($link, $id, $owner_uid = 0, $tag_cache = false) {
2832
2833                 $a_id = db_escape_string($link, $id);
2834
2835                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2836
2837                 $query = "SELECT DISTINCT tag_name,
2838                         owner_uid as owner FROM
2839                         ttrss_tags WHERE post_int_id = (SELECT int_id FROM ttrss_user_entries WHERE
2840                         ref_id = '$a_id' AND owner_uid = '$owner_uid' LIMIT 1) ORDER BY tag_name";
2841
2842                 $obj_id = md5("TAGS:$owner_uid:$id");
2843                 $tags = array();
2844
2845                 /* check cache first */
2846
2847                 if ($tag_cache === false) {
2848                         $result = db_query($link, "SELECT tag_cache FROM ttrss_user_entries
2849                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
2850
2851                         $tag_cache = db_fetch_result($result, 0, "tag_cache");
2852                 }
2853
2854                 if ($tag_cache) {
2855                         $tags = explode(",", $tag_cache);
2856                 } else {
2857
2858                         /* do it the hard way */
2859
2860                         $tmp_result = db_query($link, $query);
2861
2862                         while ($tmp_line = db_fetch_assoc($tmp_result)) {
2863                                 array_push($tags, $tmp_line["tag_name"]);
2864                         }
2865
2866                         /* update the cache */
2867
2868                         $tags_str = db_escape_string($link, join(",", $tags));
2869
2870                         db_query($link, "UPDATE ttrss_user_entries
2871                                 SET tag_cache = '$tags_str' WHERE ref_id = '$id'
2872                                 AND owner_uid = $owner_uid");
2873                 }
2874
2875                 return $tags;
2876         }
2877
2878         function trim_array($array) {
2879                 $tmp = $array;
2880                 array_walk($tmp, 'trim');
2881                 return $tmp;
2882         }
2883
2884         function tag_is_valid($tag) {
2885                 if ($tag == '') return false;
2886                 if (preg_match("/^[0-9]*$/", $tag)) return false;
2887                 if (mb_strlen($tag) > 250) return false;
2888
2889                 if (function_exists('iconv')) {
2890                         $tag = iconv("utf-8", "utf-8", $tag);
2891                 }
2892
2893                 if (!$tag) return false;
2894
2895                 return true;
2896         }
2897
2898         function render_login_form($link) {
2899                 require_once "login_form.php";
2900                 exit;
2901         }
2902
2903         // from http://developer.apple.com/internet/safari/faq.html
2904         function no_cache_incantation() {
2905                 header("Expires: Mon, 22 Dec 1980 00:00:00 GMT"); // Happy birthday to me :)
2906                 header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT"); // always modified
2907                 header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0"); // HTTP/1.1
2908                 header("Cache-Control: post-check=0, pre-check=0", false);
2909                 header("Pragma: no-cache"); // HTTP/1.0
2910         }
2911
2912         function format_warning($msg, $id = "") {
2913                 global $link;
2914                 return "<div class=\"warning\" id=\"$id\">
2915                         <img src=\"images/sign_excl.svg\"><div class='inner'>$msg</div></div>";
2916         }
2917
2918         function format_notice($msg, $id = "") {
2919                 global $link;
2920                 return "<div class=\"notice\" id=\"$id\">
2921                         <img src=\"images/sign_info.svg\"><div class='inner'>$msg</div></div>";
2922         }
2923
2924         function format_error($msg, $id = "") {
2925                 global $link;
2926                 return "<div class=\"error\" id=\"$id\">
2927                         <img src=\"images/sign_excl.svg\"><div class='inner'>$msg</div></div>";
2928         }
2929
2930         function print_notice($msg) {
2931                 return print format_notice($msg);
2932         }
2933
2934         function print_warning($msg) {
2935                 return print format_warning($msg);
2936         }
2937
2938         function print_error($msg) {
2939                 return print format_error($msg);
2940         }
2941
2942
2943         function T_sprintf() {
2944                 $args = func_get_args();
2945                 return vsprintf(__(array_shift($args)), $args);
2946         }
2947
2948         function format_inline_player($link, $url, $ctype) {
2949
2950                 $entry = "";
2951
2952                 $url = htmlspecialchars($url);
2953
2954                 if (strpos($ctype, "audio/") === 0) {
2955
2956                         if ($_SESSION["hasAudio"] && (strpos($ctype, "ogg") !== false ||
2957                                 strpos($_SERVER['HTTP_USER_AGENT'], "Chrome") !== false ||
2958                                 strpos($_SERVER['HTTP_USER_AGENT'], "Safari") !== false )) {
2959
2960                                 $id = 'AUDIO-' . uniqid();
2961
2962                                 $entry .= "<audio id=\"$id\"\" controls style='display : none'>
2963                                         <source type=\"$ctype\" src=\"$url\"></source>
2964                                         </audio>";
2965
2966                                 $entry .= "<span onclick=\"player(this)\"
2967                                         title=\"".__("Click to play")."\" status=\"0\"
2968                                         class=\"player\" audio-id=\"$id\">".__("Play")."</span>";
2969
2970                         } else {
2971
2972                                 $entry .= "<object type=\"application/x-shockwave-flash\"
2973                                         data=\"lib/button/musicplayer.swf?song_url=$url\"
2974                                         width=\"17\" height=\"17\" style='float : left; margin-right : 5px;'>
2975                                         <param name=\"movie\"
2976                                                 value=\"lib/button/musicplayer.swf?song_url=$url\" />
2977                                         </object>";
2978                         }
2979
2980                         if ($entry) $entry .= "&nbsp; <a target=\"_blank\"
2981                                 href=\"$url\">" . basename($url) . "</a>";
2982
2983                         return $entry;
2984
2985                 }
2986
2987                 return "";
2988
2989 /*              $filename = substr($url, strrpos($url, "/")+1);
2990
2991                 $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
2992                         $filename . " (" . $ctype . ")" . "</a>"; */
2993
2994         }
2995
2996         function format_article($link, $id, $mark_as_read = true, $zoom_mode = false, $owner_uid = false) {
2997                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2998
2999                 $rv = array();
3000
3001                 $rv['id'] = $id;
3002
3003                 /* we can figure out feed_id from article id anyway, why do we
3004                  * pass feed_id here? let's ignore the argument :( */
3005
3006                 $result = db_query($link, "SELECT feed_id FROM ttrss_user_entries
3007                         WHERE ref_id = '$id'");
3008
3009                 $feed_id = (int) db_fetch_result($result, 0, "feed_id");
3010
3011                 $rv['feed_id'] = $feed_id;
3012
3013                 //if (!$zoom_mode) { print "<article id='$id'><![CDATA["; };
3014
3015                 if ($mark_as_read) {
3016                         $result = db_query($link, "UPDATE ttrss_user_entries
3017                                 SET unread = false,last_read = NOW()
3018                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
3019
3020                         ccache_update($link, $feed_id, $owner_uid);
3021                 }
3022
3023                 $result = db_query($link, "SELECT id,title,link,content,feed_id,comments,int_id,
3024                         ".SUBSTRING_FOR_DATE."(updated,1,16) as updated,
3025                         (SELECT site_url FROM ttrss_feeds WHERE id = feed_id) as site_url,
3026                         (SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) as hide_images,
3027                         num_comments,
3028                         tag_cache,
3029                         author,
3030                         orig_feed_id,
3031                         note,
3032                         cached_content
3033                         FROM ttrss_entries,ttrss_user_entries
3034                         WHERE   id = '$id' AND ref_id = id AND owner_uid = $owner_uid");
3035
3036                 if ($result) {
3037
3038                         $line = db_fetch_assoc($result);
3039
3040                         $tag_cache = $line["tag_cache"];
3041
3042                         $line["tags"] = get_article_tags($link, $id, $owner_uid, $line["tag_cache"]);
3043                         unset($line["tag_cache"]);
3044
3045                         $line["content"] = sanitize($link, $line["content"], false, $owner_uid, $line["site_url"]);
3046
3047                         global $pluginhost;
3048
3049                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_RENDER_ARTICLE) as $p) {
3050                                 $line = $p->hook_render_article($line);
3051                         }
3052
3053                         $num_comments = $line["num_comments"];
3054                         $entry_comments = "";
3055
3056                         if ($num_comments > 0) {
3057                                 if ($line["comments"]) {
3058                                         $comments_url = htmlspecialchars($line["comments"]);
3059                                 } else {
3060                                         $comments_url = htmlspecialchars($line["link"]);
3061                                 }
3062                                 $entry_comments = "<a target='_blank' href=\"$comments_url\">$num_comments comments</a>";
3063                         } else {
3064                                 if ($line["comments"] && $line["link"] != $line["comments"]) {
3065                                         $entry_comments = "<a target='_blank' href=\"".htmlspecialchars($line["comments"])."\">comments</a>";
3066                                 }
3067                         }
3068
3069                         if ($zoom_mode) {
3070                                 header("Content-Type: text/html");
3071                                 $rv['content'] .= "<html><head>
3072                                                 <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"/>
3073                                                 <title>Tiny Tiny RSS - ".$line["title"]."</title>
3074                                                 <link rel=\"stylesheet\" type=\"text/css\" href=\"tt-rss.css\">
3075                                         </head><body id=\"ttrssZoom\">";
3076                         }
3077
3078                         $rv['content'] .= "<div class=\"postReply\" id=\"POST-$id\">";
3079
3080                         $rv['content'] .= "<div class=\"postHeader\" id=\"POSTHDR-$id\">";
3081
3082                         $entry_author = $line["author"];
3083
3084                         if ($entry_author) {
3085                                 $entry_author = __(" - ") . $entry_author;
3086                         }
3087
3088                         $parsed_updated = make_local_datetime($link, $line["updated"], true,
3089                                 $owner_uid, true);
3090
3091                         $rv['content'] .= "<div class=\"postDate\">$parsed_updated</div>";
3092
3093                         if ($line["link"]) {
3094                                 $rv['content'] .= "<div class='postTitle'><a target='_blank'
3095                                         title=\"".htmlspecialchars($line['title'])."\"
3096                                         href=\"" .
3097                                         htmlspecialchars($line["link"]) . "\">" .
3098                                         $line["title"] . "</a>" .
3099                                         "<span class='author'>$entry_author</span></div>";
3100                         } else {
3101                                 $rv['content'] .= "<div class='postTitle'>" . $line["title"] . "$entry_author</div>";
3102                         }
3103
3104                         $tags_str = format_tags_string($line["tags"], $id);
3105                         $tags_str_full = join(", ", $line["tags"]);
3106
3107                         if (!$tags_str_full) $tags_str_full = __("no tags");
3108
3109                         if (!$entry_comments) $entry_comments = "&nbsp;"; # placeholder
3110
3111                         $rv['content'] .= "<div class='postTags' style='float : right'>
3112                                 <img src='images/tag.png'
3113                                 class='tagsPic' alt='Tags' title='Tags'>&nbsp;";
3114
3115                         if (!$zoom_mode) {
3116                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>
3117                                         <a title=\"".__('Edit tags for this article')."\"
3118                                         href=\"#\" onclick=\"editArticleTags($id, $feed_id)\">(+)</a>";
3119
3120                                 $rv['content'] .= "<div dojoType=\"dijit.Tooltip\"
3121                                         id=\"ATSTRTIP-$id\" connectId=\"ATSTR-$id\"
3122                                         position=\"below\">$tags_str_full</div>";
3123
3124                                 global $pluginhost;
3125
3126                                 foreach ($pluginhost->get_hooks($pluginhost::HOOK_ARTICLE_BUTTON) as $p) {
3127                                         $rv['content'] .= $p->hook_article_button($line);
3128                                 }
3129
3130
3131                         } else {
3132                                 $tags_str = strip_tags($tags_str);
3133                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>";
3134                         }
3135                         $rv['content'] .= "</div>";
3136                         $rv['content'] .= "<div clear='both'>$entry_comments</div>";
3137
3138                         if ($line["orig_feed_id"]) {
3139
3140                                 $tmp_result = db_query($link, "SELECT * FROM ttrss_archived_feeds
3141                                         WHERE id = ".$line["orig_feed_id"]);
3142
3143                                 if (db_num_rows($tmp_result) != 0) {
3144
3145                                         $rv['content'] .= "<div clear='both'>";
3146                                         $rv['content'] .= __("Originally from:");
3147
3148                                         $rv['content'] .= "&nbsp;";
3149
3150                                         $tmp_line = db_fetch_assoc($tmp_result);
3151
3152                                         $rv['content'] .= "<a target='_blank'
3153                                                 href=' " . htmlspecialchars($tmp_line['site_url']) . "'>" .
3154                                                 $tmp_line['title'] . "</a>";
3155
3156                                         $rv['content'] .= "&nbsp;";
3157
3158                                         $rv['content'] .= "<a target='_blank' href='" . htmlspecialchars($tmp_line['feed_url']) . "'>";
3159                                         $rv['content'] .= "<img title='".__('Feed URL')."'class='tinyFeedIcon' src='images/pub_set.svg'></a>";
3160
3161                                         $rv['content'] .= "</div>";
3162                                 }
3163                         }
3164
3165                         $rv['content'] .= "</div>";
3166
3167                         $rv['content'] .= "<div id=\"POSTNOTE-$id\">";
3168                                 if ($line['note']) {
3169                                         $rv['content'] .= format_article_note($id, $line['note'], !$zoom_mode);
3170                                 }
3171                         $rv['content'] .= "</div>";
3172
3173                         $rv['content'] .= "<div class=\"postContent\">";
3174
3175                         $rv['content'] .= $line["content"];
3176
3177                         $rv['content'] .= format_article_enclosures($link, $id,
3178                                 $always_display_enclosures, $line["content"], $line["hide_images"]);
3179
3180                         $rv['content'] .= "</div>";
3181
3182                         $rv['content'] .= "</div>";
3183
3184                 }
3185
3186                 if ($zoom_mode) {
3187                         $rv['content'] .= "
3188                                 <div class='footer'>
3189                                 <button onclick=\"return window.close()\">".
3190                                         __("Close this window")."</button></div>";
3191                         $rv['content'] .= "</body></html>";
3192                 }
3193
3194                 return $rv;
3195
3196         }
3197
3198         function print_checkpoint($n, $s) {
3199                 $ts = microtime(true);
3200                 echo sprintf("<!-- CP[$n] %.4f seconds -->", $ts - $s);
3201                 return $ts;
3202         }
3203
3204         function sanitize_tag($tag) {
3205                 $tag = trim($tag);
3206
3207                 $tag = mb_strtolower($tag, 'utf-8');
3208
3209                 $tag = preg_replace('/[\'\"\+\>\<]/', "", $tag);
3210
3211 //              $tag = str_replace('"', "", $tag);
3212 //              $tag = str_replace("+", " ", $tag);
3213                 $tag = str_replace("technorati tag: ", "", $tag);
3214
3215                 return $tag;
3216         }
3217
3218         function get_self_url_prefix() {
3219                 if (strrpos(SELF_URL_PATH, "/") === strlen(SELF_URL_PATH)-1) {
3220                         return substr(SELF_URL_PATH, 0, strlen(SELF_URL_PATH)-1);
3221                 } else {
3222                         return SELF_URL_PATH;
3223                 }
3224         }
3225
3226         /**
3227          * Compute the Mozilla Firefox feed adding URL from server HOST and REQUEST_URI.
3228          *
3229          * @return string The Mozilla Firefox feed adding URL.
3230          */
3231         function add_feed_url() {
3232                 //$url_path = ($_SERVER['HTTPS'] != "on" ? 'http://' :  'https://') . $_SERVER["HTTP_HOST"] . parse_url($_SERVER["REQUEST_URI"], PHP_URL_PATH);
3233
3234                 $url_path = get_self_url_prefix() .
3235                         "/public.php?op=subscribe&feed_url=%s";
3236                 return $url_path;
3237         } // function add_feed_url
3238
3239         function encrypt_password($pass, $salt = '', $mode2 = false) {
3240                 if ($salt && $mode2) {
3241                         return "MODE2:" . hash('sha256', $salt . $pass);
3242                 } else if ($salt) {
3243                         return "SHA1X:" . sha1("$salt:$pass");
3244                 } else {
3245                         return "SHA1:" . sha1($pass);
3246                 }
3247         } // function encrypt_password
3248
3249         function load_filters($link, $feed_id, $owner_uid, $action_id = false) {
3250                 $filters = array();
3251
3252                 $cat_id = (int)getFeedCategory($link, $feed_id);
3253
3254                 $result = db_query($link, "SELECT * FROM ttrss_filters2 WHERE
3255                         owner_uid = $owner_uid AND enabled = true ORDER BY order_id, title");
3256
3257                 $check_cats = join(",", array_merge(
3258                         getParentCategories($link, $cat_id, $owner_uid),
3259                         array($cat_id)));
3260
3261                 while ($line = db_fetch_assoc($result)) {
3262                         $filter_id = $line["id"];
3263
3264                         $result2 = db_query($link, "SELECT
3265                                 r.reg_exp, r.inverse, r.feed_id, r.cat_id, r.cat_filter, t.name AS type_name
3266                                 FROM ttrss_filters2_rules AS r,
3267                                 ttrss_filter_types AS t
3268                                 WHERE
3269                                         (cat_id IS NULL OR cat_id IN ($check_cats)) AND
3270                                         (feed_id IS NULL OR feed_id = '$feed_id') AND
3271                                         filter_type = t.id AND filter_id = '$filter_id'");
3272
3273                         $rules = array();
3274                         $actions = array();
3275
3276                         while ($rule_line = db_fetch_assoc($result2)) {
3277 #                               print_r($rule_line);
3278
3279                                 $rule = array();
3280                                 $rule["reg_exp"] = $rule_line["reg_exp"];
3281                                 $rule["type"] = $rule_line["type_name"];
3282                                 $rule["inverse"] = sql_bool_to_bool($rule_line["inverse"]);
3283
3284                                 array_push($rules, $rule);
3285                         }
3286
3287                         $result2 = db_query($link, "SELECT a.action_param,t.name AS type_name
3288                                 FROM ttrss_filters2_actions AS a,
3289                                 ttrss_filter_actions AS t
3290                                 WHERE
3291                                         action_id = t.id AND filter_id = '$filter_id'");
3292
3293                         while ($action_line = db_fetch_assoc($result2)) {
3294 #                               print_r($action_line);
3295
3296                                 $action = array();
3297                                 $action["type"] = $action_line["type_name"];
3298                                 $action["param"] = $action_line["action_param"];
3299
3300                                 array_push($actions, $action);
3301                         }
3302
3303
3304                         $filter = array();
3305                         $filter["match_any_rule"] = sql_bool_to_bool($line["match_any_rule"]);
3306                         $filter["inverse"] = sql_bool_to_bool($line["inverse"]);
3307                         $filter["rules"] = $rules;
3308                         $filter["actions"] = $actions;
3309
3310                         if (count($rules) > 0 && count($actions) > 0) {
3311                                 array_push($filters, $filter);
3312                         }
3313                 }
3314
3315                 return $filters;
3316         }
3317
3318         function get_score_pic($score) {
3319                 if ($score > 100) {
3320                         return "score_high.png";
3321                 } else if ($score > 0) {
3322                         return "score_half_high.png";
3323                 } else if ($score < -100) {
3324                         return "score_low.png";
3325                 } else if ($score < 0) {
3326                         return "score_half_low.png";
3327                 } else {
3328                         return "score_neutral.png";
3329                 }
3330         }
3331
3332         function feed_has_icon($id) {
3333                 return is_file(ICONS_DIR . "/$id.ico") && filesize(ICONS_DIR . "/$id.ico") > 0;
3334         }
3335
3336         function init_connection($link) {
3337                 if ($link) {
3338
3339                         if (DB_TYPE == "pgsql") {
3340                                 pg_query($link, "set client_encoding = 'UTF-8'");
3341                                 pg_set_client_encoding("UNICODE");
3342                                 pg_query($link, "set datestyle = 'ISO, european'");
3343                                 pg_query($link, "set TIME ZONE 0");
3344                         } else {
3345                                 db_query($link, "SET time_zone = '+0:0'");
3346
3347                                 if (defined('MYSQL_CHARSET') && MYSQL_CHARSET) {
3348                                         db_query($link, "SET NAMES " . MYSQL_CHARSET);
3349                                 }
3350                         }
3351
3352                         global $pluginhost;
3353
3354                         $pluginhost = new PluginHost($link);
3355                         $pluginhost->load(PLUGINS, $pluginhost::KIND_ALL);
3356
3357                         return true;
3358                 } else {
3359                         print "Unable to connect to database:" . db_last_error();
3360                         return false;
3361                 }
3362         }
3363
3364         function format_tags_string($tags, $id) {
3365
3366                 $tags_str = "";
3367                 $tags_nolinks_str = "";
3368
3369                 $num_tags = 0;
3370
3371                 $tag_limit = 6;
3372
3373                 $formatted_tags = array();
3374
3375                 foreach ($tags as $tag) {
3376                         $num_tags++;
3377                         $tag_escaped = str_replace("'", "\\'", $tag);
3378
3379                         if (mb_strlen($tag) > 30) {
3380                                 $tag = truncate_string($tag, 30);
3381                         }
3382
3383                         $tag_str = "<a href=\"javascript:viewfeed('$tag_escaped')\">$tag</a>";
3384
3385                         array_push($formatted_tags, $tag_str);
3386
3387                         $tmp_tags_str = implode(", ", $formatted_tags);
3388
3389                         if ($num_tags == $tag_limit || mb_strlen($tmp_tags_str) > 150) {
3390                                 break;
3391                         }
3392                 }
3393
3394                 $tags_str = implode(", ", $formatted_tags);
3395
3396                 if ($num_tags < count($tags)) {
3397                         $tags_str .= ", &hellip;";
3398                 }
3399
3400                 if ($num_tags == 0) {
3401                         $tags_str = __("no tags");
3402                 }
3403
3404                 return $tags_str;
3405
3406         }
3407
3408         function format_article_labels($labels, $id) {
3409
3410                 $labels_str = "";
3411
3412                 foreach ($labels as $l) {
3413                         $labels_str .= sprintf("<span class='hlLabelRef'
3414                                 style='color : %s; background-color : %s'>%s</span>",
3415                                         $l[2], $l[3], $l[1]);
3416                         }
3417
3418                 return $labels_str;
3419
3420         }
3421
3422         function format_article_note($id, $note, $allow_edit = true) {
3423
3424                 $str = "<div class='articleNote'        onclick=\"editArticleNote($id)\">
3425                         <div class='noteEdit' onclick=\"editArticleNote($id)\">".
3426                         ($allow_edit ? __('(edit note)') : "")."</div>$note</div>";
3427
3428                 return $str;
3429         }
3430
3431
3432         function get_feed_category($link, $feed_cat, $parent_cat_id = false) {
3433                 if ($parent_cat_id) {
3434                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3435                         $parent_insert = "'$parent_cat_id'";
3436                 } else {
3437                         $parent_qpart = "parent_cat IS NULL";
3438                         $parent_insert = "NULL";
3439                 }
3440
3441                 $result = db_query($link,
3442                         "SELECT id FROM ttrss_feed_categories
3443                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3444
3445                 if (db_num_rows($result) == 0) {
3446                         return false;
3447                 } else {
3448                         return db_fetch_result($result, 0, "id");
3449                 }
3450         }
3451
3452         function add_feed_category($link, $feed_cat, $parent_cat_id = false) {
3453
3454                 if (!$feed_cat) return false;
3455
3456                 db_query($link, "BEGIN");
3457
3458                 if ($parent_cat_id) {
3459                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3460                         $parent_insert = "'$parent_cat_id'";
3461                 } else {
3462                         $parent_qpart = "parent_cat IS NULL";
3463                         $parent_insert = "NULL";
3464                 }
3465
3466                 $feed_cat = mb_substr($feed_cat, 0, 250);
3467
3468                 $result = db_query($link,
3469                         "SELECT id FROM ttrss_feed_categories
3470                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3471
3472                 if (db_num_rows($result) == 0) {
3473
3474                         $result = db_query($link,
3475                                 "INSERT INTO ttrss_feed_categories (owner_uid,title,parent_cat)
3476                                 VALUES ('".$_SESSION["uid"]."', '$feed_cat', $parent_insert)");
3477
3478                         db_query($link, "COMMIT");
3479
3480                         return true;
3481                 }
3482
3483                 return false;
3484         }
3485
3486         function getArticleFeed($link, $id) {
3487                 $result = db_query($link, "SELECT feed_id FROM ttrss_user_entries
3488                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
3489
3490                 if (db_num_rows($result) != 0) {
3491                         return db_fetch_result($result, 0, "feed_id");
3492                 } else {
3493                         return 0;
3494                 }
3495         }
3496
3497         /**
3498          * Fixes incomplete URLs by prepending "http://".
3499          * Also replaces feed:// with http://, and
3500          * prepends a trailing slash if the url is a domain name only.
3501          *
3502          * @param string $url Possibly incomplete URL
3503          *
3504          * @return string Fixed URL.
3505          */
3506         function fix_url($url) {
3507                 if (strpos($url, '://') === false) {
3508                         $url = 'http://' . $url;
3509                 } else if (substr($url, 0, 5) == 'feed:') {
3510                         $url = 'http:' . substr($url, 5);
3511                 }
3512
3513                 //prepend slash if the URL has no slash in it
3514                 // "http://www.example" -> "http://www.example/"
3515                 if (strpos($url, '/', strpos($url, ':') + 3) === false) {
3516                         $url .= '/';
3517                 }
3518
3519                 if ($url != "http:///")
3520                         return $url;
3521                 else
3522                         return '';
3523         }
3524
3525         function validate_feed_url($url) {
3526                 $parts = parse_url($url);
3527
3528                 return ($parts['scheme'] == 'http' || $parts['scheme'] == 'feed' || $parts['scheme'] == 'https');
3529
3530         }
3531
3532         function get_article_enclosures($link, $id) {
3533
3534                 $query = "SELECT * FROM ttrss_enclosures
3535                         WHERE post_id = '$id' AND content_url != ''";
3536
3537                 $rv = array();
3538
3539                 $result = db_query($link, $query);
3540
3541                 if (db_num_rows($result) > 0) {
3542                         while ($line = db_fetch_assoc($result)) {
3543                                 array_push($rv, $line);
3544                         }
3545                 }
3546
3547                 return $rv;
3548         }
3549
3550         function save_email_address($link, $email) {
3551                 // FIXME: implement persistent storage of emails
3552
3553                 if (!$_SESSION['stored_emails'])
3554                         $_SESSION['stored_emails'] = array();
3555
3556                 if (!in_array($email, $_SESSION['stored_emails']))
3557                         array_push($_SESSION['stored_emails'], $email);
3558         }
3559
3560
3561         function get_feed_access_key($link, $feed_id, $is_cat, $owner_uid = false) {
3562
3563                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3564
3565                 $sql_is_cat = bool_to_sql_bool($is_cat);
3566
3567                 $result = db_query($link, "SELECT access_key FROM ttrss_access_keys
3568                         WHERE feed_id = '$feed_id'      AND is_cat = $sql_is_cat
3569                         AND owner_uid = " . $owner_uid);
3570
3571                 if (db_num_rows($result) == 1) {
3572                         return db_fetch_result($result, 0, "access_key");
3573                 } else {
3574                         $key = db_escape_string($link, sha1(uniqid(rand(), true)));
3575
3576                         $result = db_query($link, "INSERT INTO ttrss_access_keys
3577                                 (access_key, feed_id, is_cat, owner_uid)
3578                                 VALUES ('$key', '$feed_id', $sql_is_cat, '$owner_uid')");
3579
3580                         return $key;
3581                 }
3582                 return false;
3583         }
3584
3585         function get_feeds_from_html($url, $content)
3586         {
3587                 $url     = fix_url($url);
3588                 $baseUrl = substr($url, 0, strrpos($url, '/') + 1);
3589
3590                 libxml_use_internal_errors(true);
3591
3592                 $doc = new DOMDocument();
3593                 $doc->loadHTML($content);
3594                 $xpath = new DOMXPath($doc);
3595                 $entries = $xpath->query('/html/head/link[@rel="alternate"]');
3596                 $feedUrls = array();
3597                 foreach ($entries as $entry) {
3598                         if ($entry->hasAttribute('href')) {
3599                                 $title = $entry->getAttribute('title');
3600                                 if ($title == '') {
3601                                         $title = $entry->getAttribute('type');
3602                                 }
3603                                 $feedUrl = rewrite_relative_url(
3604                                         $baseUrl, $entry->getAttribute('href')
3605                                 );
3606                                 $feedUrls[$feedUrl] = $title;
3607                         }
3608                 }
3609                 return $feedUrls;
3610         }
3611
3612         function is_html($content) {
3613                 return preg_match("/<html|DOCTYPE html/i", substr($content, 0, 20)) !== 0;
3614         }
3615
3616         function url_is_html($url, $login = false, $pass = false) {
3617                 return is_html(fetch_file_contents($url, false, $login, $pass));
3618         }
3619
3620         function print_label_select($link, $name, $value, $attributes = "") {
3621
3622                 $result = db_query($link, "SELECT caption FROM ttrss_labels2
3623                         WHERE owner_uid = '".$_SESSION["uid"]."' ORDER BY caption");
3624
3625                 print "<select default=\"$value\" name=\"" . htmlspecialchars($name) .
3626                         "\" $attributes onchange=\"labelSelectOnChange(this)\" >";
3627
3628                 while ($line = db_fetch_assoc($result)) {
3629
3630                         $issel = ($line["caption"] == $value) ? "selected=\"1\"" : "";
3631
3632                         print "<option value=\"".htmlspecialchars($line["caption"])."\"
3633                                 $issel>" . htmlspecialchars($line["caption"]) . "</option>";
3634
3635                 }
3636
3637 #               print "<option value=\"ADD_LABEL\">" .__("Add label...") . "</option>";
3638
3639                 print "</select>";
3640
3641
3642         }
3643
3644         function format_article_enclosures($link, $id, $always_display_enclosures,
3645                                         $article_content, $hide_images = false) {
3646
3647                 $result = get_article_enclosures($link, $id);
3648                 $rv = '';
3649
3650                 if (count($result) > 0) {
3651
3652                         $entries_html = array();
3653                         $entries = array();
3654                         $entries_inline = array();
3655
3656                         foreach ($result as $line) {
3657
3658                                 $url = $line["content_url"];
3659                                 $ctype = $line["content_type"];
3660
3661                                 if (!$ctype) $ctype = __("unknown type");
3662
3663                                 $filename = substr($url, strrpos($url, "/")+1);
3664
3665                                 $player = format_inline_player($link, $url, $ctype);
3666
3667                                 if ($player) array_push($entries_inline, $player);
3668
3669 #                               $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
3670 #                                       $filename . " (" . $ctype . ")" . "</a>";
3671
3672                                 $entry = "<div onclick=\"window.open('".htmlspecialchars($url)."')\"
3673                                         dojoType=\"dijit.MenuItem\">$filename ($ctype)</div>";
3674
3675                                 array_push($entries_html, $entry);
3676
3677                                 $entry = array();
3678
3679                                 $entry["type"] = $ctype;
3680                                 $entry["filename"] = $filename;
3681                                 $entry["url"] = $url;
3682
3683                                 array_push($entries, $entry);
3684                         }
3685
3686                         if ($_SESSION['uid'] && !get_pref($link, "STRIP_IMAGES") && !$_SESSION["bw_limit"]) {
3687                                 if ($always_display_enclosures ||
3688                                                         !preg_match("/<img/i", $article_content)) {
3689
3690                                         foreach ($entries as $entry) {
3691
3692                                                 if (preg_match("/image/", $entry["type"]) ||
3693                                                                 preg_match("/\.(jpg|png|gif|bmp)/i", $entry["filename"])) {
3694
3695                                                                 if (!$hide_images) {
3696                                                                         $rv .= "<p><img
3697                                                                         alt=\"".htmlspecialchars($entry["filename"])."\"
3698                                                                         src=\"" .htmlspecialchars($entry["url"]) . "\"/></p>";
3699                                                                 } else {
3700                                                                         $rv .= "<p><a target=\"_blank\"
3701                                                                         href=\"".htmlspecialchars($entry["url"])."\"
3702                                                                         >" .htmlspecialchars($entry["url"]) . "</a></p>";
3703
3704                                                                 }
3705                                                 }
3706                                         }
3707                                 }
3708                         }
3709
3710                         if (count($entries_inline) > 0) {
3711                                 $rv .= "<hr clear='both'/>";
3712                                 foreach ($entries_inline as $entry) { $rv .= $entry; };
3713                                 $rv .= "<hr clear='both'/>";
3714                         }
3715
3716                         $rv .= "<select class=\"attachments\" onchange=\"openSelectedAttachment(this)\">".
3717                                 "<option value=''>" . __('Attachments')."</option>";
3718
3719                         foreach ($entries as $entry) {
3720                                 $rv .= "<option value=\"".htmlspecialchars($entry["url"])."\">" . htmlspecialchars($entry["filename"]) . "</option>";
3721
3722                         };
3723
3724                         $rv .= "</select>";
3725                 }
3726
3727                 return $rv;
3728         }
3729
3730         function getLastArticleId($link) {
3731                 $result = db_query($link, "SELECT MAX(ref_id) AS id FROM ttrss_user_entries
3732                         WHERE owner_uid = " . $_SESSION["uid"]);
3733
3734                 if (db_num_rows($result) == 1) {
3735                         return db_fetch_result($result, 0, "id");
3736                 } else {
3737                         return -1;
3738                 }
3739         }
3740
3741         function build_url($parts) {
3742                 return $parts['scheme'] . "://" . $parts['host'] . $parts['path'];
3743         }
3744
3745         /**
3746          * Converts a (possibly) relative URL to a absolute one.
3747          *
3748          * @param string $url     Base URL (i.e. from where the document is)
3749          * @param string $rel_url Possibly relative URL in the document
3750          *
3751          * @return string Absolute URL
3752          */
3753         function rewrite_relative_url($url, $rel_url) {
3754                 if (strpos($rel_url, "magnet:") === 0) {
3755                         return $rel_url;
3756                 } else if (strpos($rel_url, "://") !== false) {
3757                         return $rel_url;
3758                 } else if (strpos($rel_url, "//") === 0) {
3759                         # protocol-relative URL (rare but they exist)
3760                         return $rel_url;
3761                 } else if (strpos($rel_url, "/") === 0)
3762                 {
3763                         $parts = parse_url($url);
3764                         $parts['path'] = $rel_url;
3765
3766                         return build_url($parts);
3767
3768                 } else {
3769                         $parts = parse_url($url);
3770                         if (!isset($parts['path'])) {
3771                                 $parts['path'] = '/';
3772                         }
3773                         $dir = $parts['path'];
3774                         if (substr($dir, -1) !== '/') {
3775                                 $dir = dirname($parts['path']);
3776                                 $dir !== '/' && $dir .= '/';
3777                         }
3778                         $parts['path'] = $dir . $rel_url;
3779
3780                         return build_url($parts);
3781                 }
3782         }
3783
3784         function sphinx_search($query, $offset = 0, $limit = 30) {
3785                 require_once 'lib/sphinxapi.php';
3786
3787                 $sphinxClient = new SphinxClient();
3788
3789                 $sphinxClient->SetServer('localhost', 9312);
3790                 $sphinxClient->SetConnectTimeout(1);
3791
3792                 $sphinxClient->SetFieldWeights(array('title' => 70, 'content' => 30,
3793                         'feed_title' => 20));
3794
3795                 $sphinxClient->SetMatchMode(SPH_MATCH_EXTENDED2);
3796                 $sphinxClient->SetRankingMode(SPH_RANK_PROXIMITY_BM25);
3797                 $sphinxClient->SetLimits($offset, $limit, 1000);
3798                 $sphinxClient->SetArrayResult(false);
3799                 $sphinxClient->SetFilter('owner_uid', array($_SESSION['uid']));
3800
3801                 $result = $sphinxClient->Query($query, SPHINX_INDEX);
3802
3803                 $ids = array();
3804
3805                 if (is_array($result['matches'])) {
3806                         foreach (array_keys($result['matches']) as $int_id) {
3807                                 $ref_id = $result['matches'][$int_id]['attrs']['ref_id'];
3808                                 array_push($ids, $ref_id);
3809                         }
3810                 }
3811
3812                 return $ids;
3813         }
3814
3815         function cleanup_tags($link, $days = 14, $limit = 1000) {
3816
3817                 if (DB_TYPE == "pgsql") {
3818                         $interval_query = "date_updated < NOW() - INTERVAL '$days days'";
3819                 } else if (DB_TYPE == "mysql") {
3820                         $interval_query = "date_updated < DATE_SUB(NOW(), INTERVAL $days DAY)";
3821                 }
3822
3823                 $tags_deleted = 0;
3824
3825                 while ($limit > 0) {
3826                         $limit_part = 500;
3827
3828                         $query = "SELECT ttrss_tags.id AS id
3829                                 FROM ttrss_tags, ttrss_user_entries, ttrss_entries
3830                                 WHERE post_int_id = int_id AND $interval_query AND
3831                                 ref_id = ttrss_entries.id AND tag_cache != '' LIMIT $limit_part";
3832
3833                         $result = db_query($link, $query);
3834
3835                         $ids = array();
3836
3837                         while ($line = db_fetch_assoc($result)) {
3838                                 array_push($ids, $line['id']);
3839                         }
3840
3841                         if (count($ids) > 0) {
3842                                 $ids = join(",", $ids);
3843
3844                                 $tmp_result = db_query($link, "DELETE FROM ttrss_tags WHERE id IN ($ids)");
3845                                 $tags_deleted += db_affected_rows($link, $tmp_result);
3846                         } else {
3847                                 break;
3848                         }
3849
3850                         $limit -= $limit_part;
3851                 }
3852
3853                 return $tags_deleted;
3854         }
3855
3856         function print_user_stylesheet($link) {
3857                 $value = get_pref($link, 'USER_STYLESHEET');
3858
3859                 if ($value) {
3860                         print "<style type=\"text/css\">";
3861                         print str_replace("<br/>", "\n", $value);
3862                         print "</style>";
3863                 }
3864
3865         }
3866
3867         function rewrite_urls($html) {
3868                 libxml_use_internal_errors(true);
3869
3870                 $charset_hack = '<head>
3871                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
3872                 </head>';
3873
3874                 $doc = new DOMDocument();
3875                 $doc->loadHTML($charset_hack . $html);
3876                 $xpath = new DOMXPath($doc);
3877
3878                 $entries = $xpath->query('//*/text()');
3879
3880                 foreach ($entries as $entry) {
3881                         if (strstr($entry->wholeText, "://") !== false) {
3882                                 $text = preg_replace("/((?<!=.)((http|https|ftp)+):\/\/[^ ,!]+)/i",
3883                                         "<a target=\"_blank\" href=\"\\1\">\\1</a>", $entry->wholeText);
3884
3885                                 if ($text != $entry->wholeText) {
3886                                         $cdoc = new DOMDocument();
3887                                         $cdoc->loadHTML($charset_hack . $text);
3888
3889
3890                                         foreach ($cdoc->childNodes as $cnode) {
3891                                                 $cnode = $doc->importNode($cnode, true);
3892
3893                                                 if ($cnode) {
3894                                                         $entry->parentNode->insertBefore($cnode);
3895                                                 }
3896                                         }
3897
3898                                         $entry->parentNode->removeChild($entry);
3899
3900                                 }
3901                         }
3902                 }
3903
3904                 $node = $doc->getElementsByTagName('body')->item(0);
3905
3906                 // http://tt-rss.org/forum/viewtopic.php?f=1&t=970
3907                 if ($node)
3908                         return $doc->saveXML($node);
3909                 else
3910                         return $html;
3911         }
3912
3913         function filter_to_sql($link, $filter, $owner_uid) {
3914                 $query = array();
3915
3916                 if (DB_TYPE == "pgsql")
3917                         $reg_qpart = "~";
3918                 else
3919                         $reg_qpart = "REGEXP";
3920
3921                 foreach ($filter["rules"] AS $rule) {
3922                         $regexp_valid = preg_match('/' . $rule['reg_exp'] . '/',
3923                                 $rule['reg_exp']) !== FALSE;
3924
3925                         if ($regexp_valid) {
3926
3927                                 $rule['reg_exp'] = db_escape_string($link, $rule['reg_exp']);
3928
3929                                         switch ($rule["type"]) {
3930                                         case "title":
3931                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
3932                                                         $rule['reg_exp'] . "')";
3933                                                 break;
3934                                         case "content":
3935                                                 $qpart = "LOWER(ttrss_entries.content) $reg_qpart LOWER('".
3936                                                         $rule['reg_exp'] . "')";
3937                                                 break;
3938                                         case "both":
3939                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
3940                                                         $rule['reg_exp'] . "') OR LOWER(" .
3941                                                         "ttrss_entries.content) $reg_qpart LOWER('" . $rule['reg_exp'] . "')";
3942                                                 break;
3943                                         case "tag":
3944                                                 $qpart = "LOWER(ttrss_user_entries.tag_cache) $reg_qpart LOWER('".
3945                                                         $rule['reg_exp'] . "')";
3946                                                 break;
3947                                         case "link":
3948                                                 $qpart = "LOWER(ttrss_entries.link) $reg_qpart LOWER('".
3949                                                         $rule['reg_exp'] . "')";
3950                                                 break;
3951                                         case "author":
3952                                                 $qpart = "LOWER(ttrss_entries.author) $reg_qpart LOWER('".
3953                                                         $rule['reg_exp'] . "')";
3954                                                 break;
3955                                 }
3956
3957                                 if (isset($rule['inverse'])) $qpart = "NOT ($qpart)";
3958
3959                                 if (isset($rule["feed_id"]) && $rule["feed_id"] > 0) {
3960                                         $qpart .= " AND feed_id = " . db_escape_string($link, $rule["feed_id"]);
3961                                 }
3962
3963                                 if (isset($rule["cat_id"])) {
3964
3965                                         if ($rule["cat_id"] > 0) {
3966                                                 $children = getChildCategories($link, $rule["cat_id"], $owner_uid);
3967                                                 array_push($children, $rule["cat_id"]);
3968
3969                                                 $children = join(",", $children);
3970
3971                                                 $cat_qpart = "cat_id IN ($children)";
3972                                         } else {
3973                                                 $cat_qpart = "cat_id IS NULL";
3974                                         }
3975
3976                                         $qpart .= " AND $cat_qpart";
3977                                 }
3978
3979                                 array_push($query, "($qpart)");
3980
3981                         }
3982                 }
3983
3984                 if (count($query) > 0) {
3985                         $fullquery = "(" . join($filter["match_any_rule"] ? "OR" : "AND", $query) . ")";
3986                 } else {
3987                         $fullquery = "(false)";
3988                 }
3989
3990                 if ($filter['inverse']) $fullquery = "(NOT $fullquery)";
3991
3992                 return $fullquery;
3993         }
3994
3995         if (!function_exists('gzdecode')) {
3996                 function gzdecode($string) { // no support for 2nd argument
3997                         return file_get_contents('compress.zlib://data:who/cares;base64,'.
3998                                 base64_encode($string));
3999                 }
4000         }
4001
4002         function get_random_bytes($length) {
4003                 if (function_exists('openssl_random_pseudo_bytes')) {
4004                         return openssl_random_pseudo_bytes($length);
4005                 } else {
4006                         $output = "";
4007
4008                         for ($i = 0; $i < $length; $i++)
4009                                 $output .= chr(mt_rand(0, 255));
4010
4011                         return $output;
4012                 }
4013         }
4014
4015         function read_stdin() {
4016                 $fp = fopen("php://stdin", "r");
4017
4018                 if ($fp) {
4019                         $line = trim(fgets($fp));
4020                         fclose($fp);
4021                         return $line;
4022                 }
4023
4024                 return null;
4025         }
4026
4027         function tmpdirname($path, $prefix) {
4028                 // Use PHP's tmpfile function to create a temporary
4029                 // directory name. Delete the file and keep the name.
4030                 $tempname = tempnam($path,$prefix);
4031                 if (!$tempname)
4032                         return false;
4033
4034                 if (!unlink($tempname))
4035                         return false;
4036
4037        return $tempname;
4038         }
4039
4040         function getFeedCategory($link, $feed) {
4041                 $result = db_query($link, "SELECT cat_id FROM ttrss_feeds
4042                         WHERE id = '$feed'");
4043
4044                 if (db_num_rows($result) > 0) {
4045                         return db_fetch_result($result, 0, "cat_id");
4046                 } else {
4047                         return false;
4048                 }
4049
4050         }
4051
4052         function implements_interface($class, $interface) {
4053                 return in_array($interface, class_implements($class));
4054         }
4055
4056         function geturl($url){
4057
4058                 (function_exists('curl_init')) ? '' : die('cURL Must be installed for geturl function to work. Ask your host to enable it or uncomment extension=php_curl.dll in php.ini');
4059
4060                 $curl = curl_init();
4061                 $header[0] = "Accept: text/xml,application/xml,application/xhtml+xml,";
4062                 $header[0] .= "text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5";
4063                 $header[] = "Cache-Control: max-age=0";
4064                 $header[] = "Connection: keep-alive";
4065                 $header[] = "Keep-Alive: 300";
4066                 $header[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
4067                 $header[] = "Accept-Language: en-us,en;q=0.5";
4068                 $header[] = "Pragma: ";
4069
4070                 curl_setopt($curl, CURLOPT_URL, $url);
4071                 curl_setopt($curl, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 5.1; rv:5.0) Gecko/20100101 Firefox/5.0 Firefox/5.0');
4072                 curl_setopt($curl, CURLOPT_HTTPHEADER, $header);
4073                 curl_setopt($curl, CURLOPT_HEADER, true);
4074                 curl_setopt($curl, CURLOPT_REFERER, $url);
4075                 curl_setopt($curl, CURLOPT_ENCODING, 'gzip,deflate');
4076                 curl_setopt($curl, CURLOPT_AUTOREFERER, true);
4077                 curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
4078                 //curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true); //CURLOPT_FOLLOWLOCATION Disabled...
4079                 curl_setopt($curl, CURLOPT_TIMEOUT, 60);
4080
4081                 $html = curl_exec($curl);
4082
4083                 $status = curl_getinfo($curl);
4084                 curl_close($curl);
4085
4086                 if($status['http_code']!=200){
4087                         if($status['http_code'] == 301 || $status['http_code'] == 302) {
4088                                 list($header) = explode("\r\n\r\n", $html, 2);
4089                                 $matches = array();
4090                                 preg_match("/(Location:|URI:)[^(\n)]*/", $header, $matches);
4091                                 $url = trim(str_replace($matches[1],"",$matches[0]));
4092                                 $url_parsed = parse_url($url);
4093                                 return (isset($url_parsed))? geturl($url, $referer):'';
4094                         }
4095                         $oline='';
4096                         foreach($status as $key=>$eline){$oline.='['.$key.']'.$eline.' ';}
4097                         $line =$oline." \r\n ".$url."\r\n-----------------\r\n";
4098 #                       $handle = @fopen('./curl.error.log', 'a');
4099 #                       fwrite($handle, $line);
4100                         return FALSE;
4101                 }
4102                 return $url;
4103         }
4104
4105         function get_minified_js($files) {
4106                 require_once 'lib/jshrink/Minifier.php';
4107
4108                 $rv = '';
4109
4110                 foreach ($files as $js) {
4111                         if (!isset($_GET['debug'])) {
4112                                 $cached_file = CACHE_DIR . "/js/$js.js";
4113
4114                                 if (file_exists($cached_file) &&
4115                                                 is_readable($cached_file) &&
4116                                                 filemtime($cached_file) >= filemtime("js/$js.js")) {
4117
4118                                         $rv .= file_get_contents($cached_file);
4119
4120                                 } else {
4121                                         $minified = JShrink\Minifier::minify(file_get_contents("js/$js.js"));
4122                                         file_put_contents($cached_file, $minified);
4123                                         $rv .= $minified;
4124                                 }
4125                         } else {
4126                                 $rv .= file_get_contents("js/$js.js");
4127                         }
4128                 }
4129
4130                 return $rv;
4131         }
4132
4133         function stylesheet_tag($filename) {
4134                 $timestamp = filemtime($filename);
4135
4136                 echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"$filename?$timestamp\"/>\n";
4137         }
4138
4139         function javascript_tag($filename) {
4140                 $query = "";
4141
4142                 if (!(strpos($filename, "?") === FALSE)) {
4143                         $query = substr($filename, strpos($filename, "?")+1);
4144                         $filename = substr($filename, 0, strpos($filename, "?"));
4145                 }
4146
4147                 $timestamp = filemtime($filename);
4148
4149                 if ($query) $timestamp .= "&$query";
4150
4151                 echo "<script type=\"text/javascript\" charset=\"utf-8\" src=\"$filename?$timestamp\"></script>\n";
4152         }
4153
4154         function calculate_dep_timestamp() {
4155                 $files = array_merge(glob("js/*.js"), glob("*.css"));
4156
4157                 $max_ts = -1;
4158
4159                 foreach ($files as $file) {
4160                         if (filemtime($file) > $max_ts) $max_ts = filemtime($file);
4161                 }
4162
4163                 return $max_ts;
4164         }
4165
4166         function T_js_decl($s1, $s2) {
4167                 if ($s1 && $s2) {
4168                         $s1 = preg_replace("/\n/", "", $s1);
4169                         $s2 = preg_replace("/\n/", "", $s2);
4170
4171                         $s1 = preg_replace("/\"/", "\\\"", $s1);
4172                         $s2 = preg_replace("/\"/", "\\\"", $s2);
4173
4174                         return "T_messages[\"$s1\"] = \"$s2\";\n";
4175                 }
4176         }
4177
4178         function init_js_translations() {
4179
4180         print 'var T_messages = new Object();
4181
4182                 function __(msg) {
4183                         if (T_messages[msg]) {
4184                                 return T_messages[msg];
4185                         } else {
4186                                 return msg;
4187                         }
4188                 }
4189
4190                 function ngettext(msg1, msg2, n) {
4191                         return (parseInt(n) > 1) ? msg2 : msg1;
4192                 }';
4193
4194                 $l10n = _get_reader();
4195
4196                 for ($i = 0; $i < $l10n->total; $i++) {
4197                         $orig = $l10n->get_original_string($i);
4198                         $translation = __($orig);
4199
4200                         print T_js_decl($orig, $translation);
4201                 }
4202         }
4203
4204         function label_to_feed_id($label) {
4205                 return LABEL_BASE_INDEX - 1 - abs($label);
4206         }
4207
4208         function feed_to_label_id($feed) {
4209                 return LABEL_BASE_INDEX - 1 + abs($feed);
4210         }
4211
4212 ?>