include/functions.php

   1 <?php
   2         define('EXPECTED_CONFIG_VERSION', 26);
   3         define('SCHEMA_VERSION', 121);
   4
   5         define('LABEL_BASE_INDEX', -1024);
   6         define('PLUGIN_FEED_BASE_INDEX', -128);
   7
   8         define('COOKIE_LIFETIME_LONG', 86400*365);
   9
  10         $fetch_last_error = false;
  11         $fetch_last_error_code = false;
  12         $fetch_last_content_type = false;
  13         $fetch_curl_used = false;
  14
  15         mb_internal_encoding("UTF-8");
  16         date_default_timezone_set('UTC');
  17         if (defined('E_DEPRECATED')) {
  18                 error_reporting(E_ALL & ~E_NOTICE & ~E_DEPRECATED);
  19         } else {
  20                 error_reporting(E_ALL & ~E_NOTICE);
  21         }
  22
  23         require_once 'config.php';
  24
  25         /**
  26          * Define a constant if not already defined
  27          *
  28          * @param string $name The constant name.
  29          * @param mixed $value The constant value.
  30          * @access public
  31          * @return boolean True if defined successfully or not.
  32          */
  33         function define_default($name, $value) {
  34                 defined($name) or define($name, $value);
  35         }
  36
  37         ///// Some defaults that you can override in config.php //////
  38
  39         define_default('FEED_FETCH_TIMEOUT', 45);
  40         // How may seconds to wait for response when requesting feed from a site
  41         define_default('FEED_FETCH_NO_CACHE_TIMEOUT', 15);
  42         // How may seconds to wait for response when requesting feed from a
  43         // site when that feed wasn't cached before
  44         define_default('FILE_FETCH_TIMEOUT', 45);
  45         // Default timeout when fetching files from remote sites
  46         define_default('FILE_FETCH_CONNECT_TIMEOUT', 15);
  47         // How many seconds to wait for initial response from website when
  48         // fetching files from remote sites
  49
  50         if (DB_TYPE == "pgsql") {
  51                 define('SUBSTRING_FOR_DATE', 'SUBSTRING_FOR_DATE');
  52         } else {
  53                 define('SUBSTRING_FOR_DATE', 'SUBSTRING');
  54         }
  55
  56         /**
  57          * Return available translations names.
  58          *
  59          * @access public
  60          * @return array A array of available translations.
  61          */
  62         function get_translations() {
  63                 $tr = array(
  64                                         "auto"  => "Detect automatically",
  65                                         "ca_CA" => "Català",
  66                                         "cs_CZ" => "Česky",
  67                                         "en_US" => "English",
  68                                         "es_ES" => "Español",
  69                                         "de_DE" => "Deutsch",
  70                                         "fr_FR" => "Français",
  71                                         "hu_HU" => "Magyar (Hungarian)",
  72                                         "it_IT" => "Italiano",
  73                                         "ja_JP" => "日本語 (Japanese)",
  74                                         "lv_LV" => "Latviešu",
  75                                         "nb_NO" => "Norwegian bokmål",
  76                                         "nl_NL" => "Dutch",
  77                                         "pl_PL" => "Polski",
  78                                         "ru_RU" => "Русский",
  79                                         "pt_BR" => "Portuguese/Brazil",
  80                                         "zh_CN" => "Simplified Chinese",
  81                                         "sv_SE" => "Svenska",
  82                                         "fi_FI" => "Suomi");
  83
  84                 return $tr;
  85         }
  86
  87         require_once "lib/accept-to-gettext.php";
  88         require_once "lib/gettext/gettext.inc";
  89
  90
  91         function startup_gettext() {
  92
  93                 # Get locale from Accept-Language header
  94                 $lang = al2gt(array_keys(get_translations()), "text/html");
  95
  96                 if (defined('_TRANSLATION_OVERRIDE_DEFAULT')) {
  97                         $lang = _TRANSLATION_OVERRIDE_DEFAULT;
  98                 }
  99
 100                 if ($_SESSION["uid"] && get_schema_version() >= 120) {
 101                         $pref_lang = get_pref("USER_LANGUAGE", $_SESSION["uid"]);
 102
 103                         if ($pref_lang && $pref_lang != 'auto') {
 104                                 $lang = $pref_lang;
 105                         }
 106                 }
 107
 108                 if ($lang) {
 109                         if (defined('LC_MESSAGES')) {
 110                                 _setlocale(LC_MESSAGES, $lang);
 111                         } else if (defined('LC_ALL')) {
 112                                 _setlocale(LC_ALL, $lang);
 113                         }
 114
 115                         _bindtextdomain("messages", "locale");
 116
 117                         _textdomain("messages");
 118                         _bind_textdomain_codeset("messages", "UTF-8");
 119                 }
 120         }
 121
 122         require_once 'db-prefs.php';
 123         require_once 'version.php';
 124         require_once 'ccache.php';
 125         require_once 'labels.php';
 126
 127         define('SELF_USER_AGENT', 'Tiny Tiny RSS/' . VERSION . ' (http://tt-rss.org/)');
 128         ini_set('user_agent', SELF_USER_AGENT);
 129
 130         require_once 'lib/pubsubhubbub/publisher.php';
 131
 132         $schema_version = false;
 133
 134         /**
 135          * Print a timestamped debug message.
 136          *
 137          * @param string $msg The debug message.
 138          * @return void
 139          */
 140         function _debug($msg, $show = true) {
 141
 142                 $ts = strftime("%H:%M:%S", time());
 143                 if (function_exists('posix_getpid')) {
 144                         $ts = "$ts/" . posix_getpid();
 145                 }
 146
 147                 if ($show && !(defined('QUIET') && QUIET)) {
 148                         print "[$ts] $msg\n";
 149                 }
 150
 151                 if (defined('LOGFILE'))  {
 152                         $fp = fopen(LOGFILE, 'a+');
 153
 154                         if ($fp) {
 155                                 fputs($fp, "[$ts] $msg\n");
 156                                 fclose($fp);
 157                         }
 158                 }
 159
 160         } // function _debug
 161
 162         /**
 163          * Purge a feed old posts.
 164          *
 165          * @param mixed $link A database connection.
 166          * @param mixed $feed_id The id of the purged feed.
 167          * @param mixed $purge_interval Olderness of purged posts.
 168          * @param boolean $debug Set to True to enable the debug. False by default.
 169          * @access public
 170          * @return void
 171          */
 172         function purge_feed($feed_id, $purge_interval, $debug = false) {
 173
 174                 if (!$purge_interval) $purge_interval = feed_purge_interval($feed_id);
 175
 176                 $rows = -1;
 177
 178                 $result = db_query(
 179                         "SELECT owner_uid FROM ttrss_feeds WHERE id = '$feed_id'");
 180
 181                 $owner_uid = false;
 182
 183                 if (db_num_rows($result) == 1) {
 184                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 185                 }
 186
 187                 if ($purge_interval == -1 || !$purge_interval) {
 188                         if ($owner_uid) {
 189                                 ccache_update($feed_id, $owner_uid);
 190                         }
 191                         return;
 192                 }
 193
 194                 if (!$owner_uid) return;
 195
 196                 if (FORCE_ARTICLE_PURGE == 0) {
 197                         $purge_unread = get_pref("PURGE_UNREAD_ARTICLES",
 198                                 $owner_uid, false);
 199                 } else {
 200                         $purge_unread = true;
 201                         $purge_interval = FORCE_ARTICLE_PURGE;
 202                 }
 203
 204                 if (!$purge_unread) $query_limit = " unread = false AND ";
 205
 206                 if (DB_TYPE == "pgsql") {
 207                         $pg_version = get_pgsql_version();
 208
 209                         if (preg_match("/^7\./", $pg_version) || preg_match("/^8\.0/", $pg_version)) {
 210
 211                                 $result = db_query("DELETE FROM ttrss_user_entries WHERE
 212                                         ttrss_entries.id = ref_id AND
 213                                         marked = false AND
 214                                         feed_id = '$feed_id' AND
 215                                         $query_limit
 216                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 217
 218                         } else {
 219
 220                                 $result = db_query("DELETE FROM ttrss_user_entries
 221                                         USING ttrss_entries
 222                                         WHERE ttrss_entries.id = ref_id AND
 223                                         marked = false AND
 224                                         feed_id = '$feed_id' AND
 225                                         $query_limit
 226                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 227                         }
 228
 229                 } else {
 230
 231 /*                      $result = db_query("DELETE FROM ttrss_user_entries WHERE
 232                                 marked = false AND feed_id = '$feed_id' AND
 233                                 (SELECT date_updated FROM ttrss_entries WHERE
 234                                         id = ref_id) < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)"); */
 235
 236                         $result = db_query("DELETE FROM ttrss_user_entries
 237                                 USING ttrss_user_entries, ttrss_entries
 238                                 WHERE ttrss_entries.id = ref_id AND
 239                                 marked = false AND
 240                                 feed_id = '$feed_id' AND
 241                                 $query_limit
 242                                 ttrss_entries.date_updated < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)");
 243                 }
 244
 245                 $rows = db_affected_rows($result);
 246
 247                 ccache_update($feed_id, $owner_uid);
 248
 249                 if ($debug) {
 250                         _debug("Purged feed $feed_id ($purge_interval): deleted $rows articles");
 251                 }
 252
 253                 return $rows;
 254         } // function purge_feed
 255
 256         function feed_purge_interval($feed_id) {
 257
 258                 $result = db_query("SELECT purge_interval, owner_uid FROM ttrss_feeds
 259                         WHERE id = '$feed_id'");
 260
 261                 if (db_num_rows($result) == 1) {
 262                         $purge_interval = db_fetch_result($result, 0, "purge_interval");
 263                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 264
 265                         if ($purge_interval == 0) $purge_interval = get_pref(
 266                                 'PURGE_OLD_DAYS', $owner_uid);
 267
 268                         return $purge_interval;
 269
 270                 } else {
 271                         return -1;
 272                 }
 273         }
 274
 275         function purge_orphans($do_output = false) {
 276
 277                 // purge orphaned posts in main content table
 278                 $result = db_query("DELETE FROM ttrss_entries WHERE
 279                         (SELECT COUNT(int_id) FROM ttrss_user_entries WHERE ref_id = id) = 0");
 280
 281                 if ($do_output) {
 282                         $rows = db_affected_rows($result);
 283                         _debug("Purged $rows orphaned posts.");
 284                 }
 285         }
 286
 287         function get_feed_update_interval($feed_id) {
 288                 $result = db_query("SELECT owner_uid, update_interval FROM
 289                         ttrss_feeds WHERE id = '$feed_id'");
 290
 291                 if (db_num_rows($result) == 1) {
 292                         $update_interval = db_fetch_result($result, 0, "update_interval");
 293                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 294
 295                         if ($update_interval != 0) {
 296                                 return $update_interval;
 297                         } else {
 298                                 return get_pref('DEFAULT_UPDATE_INTERVAL', $owner_uid, false);
 299                         }
 300
 301                 } else {
 302                         return -1;
 303                 }
 304         }
 305
 306         function fetch_file_contents($url, $type = false, $login = false, $pass = false, $post_query = false, $timeout = false, $timestamp = 0) {
 307
 308                 global $fetch_last_error;
 309                 global $fetch_last_error_code;
 310                 global $fetch_last_content_type;
 311                 global $fetch_curl_used;
 312
 313                 $url = str_replace(' ', '%20', $url);
 314
 315                 if (!defined('NO_CURL') && function_exists('curl_init')) {
 316
 317                         $fetch_curl_used = true;
 318
 319                         if (ini_get("safe_mode") || ini_get("open_basedir")) {
 320                                 $new_url = geturl($url);
 321                                 if (!$new_url) {
 322                                     // geturl has already populated $fetch_last_error
 323                                     return false;
 324                                 }
 325                                 $ch = curl_init($new_url);
 326                         } else {
 327                                 $ch = curl_init($url);
 328                         }
 329
 330                         if ($timestamp && !$post_query) {
 331                                 curl_setopt($ch, CURLOPT_HTTPHEADER,
 332                                         array("If-Modified-Since: ".gmdate('D, d M Y H:i:s \G\M\T', $timestamp)));
 333                         }
 334
 335                         curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, $timeout ? $timeout : FILE_FETCH_CONNECT_TIMEOUT);
 336                         curl_setopt($ch, CURLOPT_TIMEOUT, $timeout ? $timeout : FILE_FETCH_TIMEOUT);
 337                         curl_setopt($ch, CURLOPT_FOLLOWLOCATION, !ini_get("safe_mode") && !ini_get("open_basedir"));
 338                         curl_setopt($ch, CURLOPT_MAXREDIRS, 20);
 339                         curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
 340                         curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
 341                         curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
 342                         curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_ANY);
 343                         curl_setopt($ch, CURLOPT_USERAGENT, SELF_USER_AGENT);
 344                         curl_setopt($ch, CURLOPT_ENCODING, "");
 345                         curl_setopt($ch, CURLOPT_REFERER, $url);
 346
 347                         if ($post_query) {
 348                                 curl_setopt($ch, CURLOPT_POST, true);
 349                                 curl_setopt($ch, CURLOPT_POSTFIELDS, $post_query);
 350                         }
 351
 352                         if ((OPENSSL_VERSION_NUMBER >= 0x0090808f) && (OPENSSL_VERSION_NUMBER < 0x10000000)) {
 353                                 curl_setopt($ch, CURLOPT_SSLVERSION, 3);
 354                         }
 355
 356                         if ($login && $pass)
 357                                 curl_setopt($ch, CURLOPT_USERPWD, "$login:$pass");
 358
 359                         $contents = @curl_exec($ch);
 360
 361                         if (curl_errno($ch) === 23 || curl_errno($ch) === 61) {
 362                                 curl_setopt($ch, CURLOPT_ENCODING, 'none');
 363                                 $contents = @curl_exec($ch);
 364                         }
 365
 366                         if ($contents === false) {
 367                                 $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
 368                                 curl_close($ch);
 369                                 return false;
 370                         }
 371
 372                         $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
 373                         $fetch_last_content_type = curl_getinfo($ch, CURLINFO_CONTENT_TYPE);
 374
 375                         $fetch_last_error_code = $http_code;
 376
 377                         if ($http_code != 200 || $type && strpos($fetch_last_content_type, "$type") === false) {
 378                                 if (curl_errno($ch) != 0) {
 379                                         $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
 380                                 } else {
 381                                         $fetch_last_error = "HTTP Code: $http_code";
 382                                 }
 383                                 curl_close($ch);
 384                                 return false;
 385                         }
 386
 387                         curl_close($ch);
 388
 389                         return $contents;
 390                 } else {
 391
 392                         $fetch_curl_used = false;
 393
 394                         if ($login && $pass){
 395                                 $url_parts = array();
 396
 397                                 preg_match("/(^[^:]*):\/\/(.*)/", $url, $url_parts);
 398
 399                                 $pass = urlencode($pass);
 400
 401                                 if ($url_parts[1] && $url_parts[2]) {
 402                                         $url = $url_parts[1] . "://$login:$pass@" . $url_parts[2];
 403                                 }
 404                         }
 405
 406                         if (!$post_query && $timestamp) {
 407                                 $context = stream_context_create(array(
 408                                         'http' => array(
 409                                                 'method' => 'GET',
 410                                                 'header' => "If-Modified-Since: ".gmdate("D, d M Y H:i:s \\G\\M\\T\r\n", $timestamp)
 411                                         )));
 412                         } else {
 413                                 $context = NULL;
 414                         }
 415
 416                         $old_error = error_get_last();
 417
 418                         $data = @file_get_contents($url, false, $context);
 419
 420                         $fetch_last_content_type = false;  // reset if no type was sent from server
 421                         if (isset($http_response_header) && is_array($http_response_header)) {
 422                                 foreach ($http_response_header as $h) {
 423                                         if (substr(strtolower($h), 0, 13) == 'content-type:') {
 424                                                 $fetch_last_content_type = substr($h, 14);
 425                                                 // don't abort here b/c there might be more than one
 426                                                 // e.g. if we were being redirected -- last one is the right one
 427                                         }
 428
 429                                         if (substr(strtolower($h), 0, 7) == 'http/1.') {
 430                                                 $fetch_last_error_code = (int) substr($h, 9, 3);
 431                                         }
 432                                 }
 433                         }
 434
 435                         if (!$data) {
 436                                 $error = error_get_last();
 437
 438                                 if ($error['message'] != $old_error['message']) {
 439                                         $fetch_last_error = $error["message"];
 440                                 } else {
 441                                         $fetch_last_error = "HTTP Code: $fetch_last_error_code";
 442                                 }
 443                         }
 444                         return $data;
 445                 }
 446
 447         }
 448
 449         /**
 450          * Try to determine the favicon URL for a feed.
 451          * adapted from wordpress favicon plugin by Jeff Minard (http://thecodepro.com/)
 452          * http://dev.wp-plugins.org/file/favatars/trunk/favatars.php
 453          *
 454          * @param string $url A feed or page URL
 455          * @access public
 456          * @return mixed The favicon URL, or false if none was found.
 457          */
 458         function get_favicon_url($url) {
 459
 460                 $favicon_url = false;
 461
 462                 if ($html = @fetch_file_contents($url)) {
 463
 464                         libxml_use_internal_errors(true);
 465
 466                         $doc = new DOMDocument();
 467                         $doc->loadHTML($html);
 468                         $xpath = new DOMXPath($doc);
 469
 470                         $base = $xpath->query('/html/head/base');
 471                         foreach ($base as $b) {
 472                                 $url = $b->getAttribute("href");
 473                                 break;
 474                         }
 475
 476                         $entries = $xpath->query('/html/head/link[@rel="shortcut icon" or @rel="icon"]');
 477                         if (count($entries) > 0) {
 478                                 foreach ($entries as $entry) {
 479                                         $favicon_url = rewrite_relative_url($url, $entry->getAttribute("href"));
 480                                         break;
 481                                 }
 482                         }
 483                 }
 484
 485                 if (!$favicon_url)
 486                         $favicon_url = rewrite_relative_url($url, "/favicon.ico");
 487
 488                 return $favicon_url;
 489         } // function get_favicon_url
 490
 491         function check_feed_favicon($site_url, $feed) {
 492 #               print "FAVICON [$site_url]: $favicon_url\n";
 493
 494                 $icon_file = ICONS_DIR . "/$feed.ico";
 495
 496                 if (!file_exists($icon_file)) {
 497                         $favicon_url = get_favicon_url($site_url);
 498
 499                         if ($favicon_url) {
 500                                 // Limiting to "image" type misses those served with text/plain
 501                                 $contents = fetch_file_contents($favicon_url); // , "image");
 502
 503                                 if ($contents) {
 504                                         // Crude image type matching.
 505                                         // Patterns gleaned from the file(1) source code.
 506                                         if (preg_match('/^\x00\x00\x01\x00/', $contents)) {
 507                                                 // 0       string  \000\000\001\000        MS Windows icon resource
 508                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa MS Windows icon resource");
 509                                         }
 510                                         elseif (preg_match('/^GIF8/', $contents)) {
 511                                                 // 0       string          GIF8            GIF image data
 512                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa GIF image");
 513                                         }
 514                                         elseif (preg_match('/^\x89PNG\x0d\x0a\x1a\x0a/', $contents)) {
 515                                                 // 0       string          \x89PNG\x0d\x0a\x1a\x0a         PNG image data
 516                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa PNG image");
 517                                         }
 518                                         elseif (preg_match('/^\xff\xd8/', $contents)) {
 519                                                 // 0       beshort         0xffd8          JPEG image data
 520                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa JPG image");
 521                                         }
 522                                         else {
 523                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa UNKNOWN type");
 524                                                 $contents = "";
 525                                         }
 526                                 }
 527
 528                                 if ($contents) {
 529                                         $fp = @fopen($icon_file, "w");
 530
 531                                         if ($fp) {
 532                                                 fwrite($fp, $contents);
 533                                                 fclose($fp);
 534                                                 chmod($icon_file, 0644);
 535                                         }
 536                                 }
 537                         }
 538             return $icon_file;
 539                 }
 540         }
 541
 542         function print_select($id, $default, $values, $attributes = "") {
 543                 print "<select name=\"$id\" id=\"$id\" $attributes>";
 544                 foreach ($values as $v) {
 545                         if ($v == $default)
 546                                 $sel = "selected=\"1\"";
 547                          else
 548                                 $sel = "";
 549
 550                         $v = trim($v);
 551
 552                         print "<option value=\"$v\" $sel>$v</option>";
 553                 }
 554                 print "</select>";
 555         }
 556
 557         function print_select_hash($id, $default, $values, $attributes = "") {
 558                 print "<select name=\"$id\" id='$id' $attributes>";
 559                 foreach (array_keys($values) as $v) {
 560                         if ($v == $default)
 561                                 $sel = 'selected="selected"';
 562                          else
 563                                 $sel = "";
 564
 565                         $v = trim($v);
 566
 567                         print "<option $sel value=\"$v\">".$values[$v]."</option>";
 568                 }
 569
 570                 print "</select>";
 571         }
 572
 573         function print_radio($id, $default, $true_is, $values, $attributes = "") {
 574                 foreach ($values as $v) {
 575
 576                         if ($v == $default)
 577                                 $sel = "checked";
 578                          else
 579                                 $sel = "";
 580
 581                         if ($v == $true_is) {
 582                                 $sel .= " value=\"1\"";
 583                         } else {
 584                                 $sel .= " value=\"0\"";
 585                         }
 586
 587                         print "<input class=\"noborder\" dojoType=\"dijit.form.RadioButton\"
 588                                 type=\"radio\" $sel $attributes name=\"$id\">&nbsp;$v&nbsp;";
 589
 590                 }
 591         }
 592
 593         function initialize_user_prefs($uid, $profile = false) {
 594
 595                 $uid = db_escape_string($uid);
 596
 597                 if (!$profile) {
 598                         $profile = "NULL";
 599                         $profile_qpart = "AND profile IS NULL";
 600                 } else {
 601                         $profile_qpart = "AND profile = '$profile'";
 602                 }
 603
 604                 if (get_schema_version() < 63) $profile_qpart = "";
 605
 606                 db_query("BEGIN");
 607
 608                 $result = db_query("SELECT pref_name,def_value FROM ttrss_prefs");
 609
 610                 $u_result = db_query("SELECT pref_name
 611                         FROM ttrss_user_prefs WHERE owner_uid = '$uid' $profile_qpart");
 612
 613                 $active_prefs = array();
 614
 615                 while ($line = db_fetch_assoc($u_result)) {
 616                         array_push($active_prefs, $line["pref_name"]);
 617                 }
 618
 619                 while ($line = db_fetch_assoc($result)) {
 620                         if (array_search($line["pref_name"], $active_prefs) === FALSE) {
 621 //                              print "adding " . $line["pref_name"] . "<br>";
 622
 623                                 $line["def_value"] = db_escape_string($line["def_value"]);
 624                                 $line["pref_name"] = db_escape_string($line["pref_name"]);
 625
 626                                 if (get_schema_version() < 63) {
 627                                         db_query("INSERT INTO ttrss_user_prefs
 628                                                 (owner_uid,pref_name,value) VALUES
 629                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."')");
 630
 631                                 } else {
 632                                         db_query("INSERT INTO ttrss_user_prefs
 633                                                 (owner_uid,pref_name,value, profile) VALUES
 634                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."', $profile)");
 635                                 }
 636
 637                         }
 638                 }
 639
 640                 db_query("COMMIT");
 641
 642         }
 643
 644         function get_ssl_certificate_id() {
 645                 if ($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"]) {
 646                         return sha1($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"] .
 647                                 $_SERVER["REDIRECT_SSL_CLIENT_V_START"] .
 648                                 $_SERVER["REDIRECT_SSL_CLIENT_V_END"] .
 649                                 $_SERVER["REDIRECT_SSL_CLIENT_S_DN"]);
 650                 }
 651                 return "";
 652         }
 653
 654         function authenticate_user($login, $password, $check_only = false) {
 655
 656                 if (!SINGLE_USER_MODE) {
 657                         $user_id = false;
 658
 659                         foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_AUTH_USER) as $plugin) {
 660
 661                                 $user_id = (int) $plugin->authenticate($login, $password);
 662
 663                                 if ($user_id) {
 664                                         $_SESSION["auth_module"] = strtolower(get_class($plugin));
 665                                         break;
 666                                 }
 667                         }
 668
 669                         if ($user_id && !$check_only) {
 670                                 @session_start();
 671
 672                                 $_SESSION["uid"] = $user_id;
 673                                 $_SESSION["version"] = VERSION_STATIC;
 674
 675                                 $result = db_query("SELECT login,access_level,pwd_hash FROM ttrss_users
 676                                         WHERE id = '$user_id'");
 677
 678                                 $_SESSION["name"] = db_fetch_result($result, 0, "login");
 679                                 $_SESSION["access_level"] = db_fetch_result($result, 0, "access_level");
 680                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 681
 682                                 db_query("UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 683                                         $_SESSION["uid"]);
 684
 685                                 $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 686                                 $_SESSION["user_agent"] = sha1($_SERVER['HTTP_USER_AGENT']);
 687                                 $_SESSION["pwd_hash"] = db_fetch_result($result, 0, "pwd_hash");
 688
 689                                 $_SESSION["last_version_check"] = time();
 690
 691                                 initialize_user_prefs($_SESSION["uid"]);
 692
 693                                 return true;
 694                         }
 695
 696                         return false;
 697
 698                 } else {
 699
 700                         $_SESSION["uid"] = 1;
 701                         $_SESSION["name"] = "admin";
 702                         $_SESSION["access_level"] = 10;
 703
 704                         $_SESSION["hide_hello"] = true;
 705                         $_SESSION["hide_logout"] = true;
 706
 707                         $_SESSION["auth_module"] = false;
 708
 709                         if (!$_SESSION["csrf_token"]) {
 710                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 711                         }
 712
 713                         $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 714
 715                         initialize_user_prefs($_SESSION["uid"]);
 716
 717                         return true;
 718                 }
 719         }
 720
 721         function make_password($length = 8) {
 722
 723                 $password = "";
 724                 $possible = "0123456789abcdfghjkmnpqrstvwxyzABCDFGHJKMNPQRSTVWXYZ";
 725
 726         $i = 0;
 727
 728                 while ($i < $length) {
 729                         $char = substr($possible, mt_rand(0, strlen($possible)-1), 1);
 730
 731                         if (!strstr($password, $char)) {
 732                                 $password .= $char;
 733                                 $i++;
 734                         }
 735                 }
 736                 return $password;
 737         }
 738
 739         // this is called after user is created to initialize default feeds, labels
 740         // or whatever else
 741
 742         // user preferences are checked on every login, not here
 743
 744         function initialize_user($uid) {
 745
 746                 db_query("insert into ttrss_feeds (owner_uid,title,feed_url)
 747                         values ('$uid', 'Tiny Tiny RSS: New Releases',
 748                         'http://tt-rss.org/releases.rss')");
 749
 750                 db_query("insert into ttrss_feeds (owner_uid,title,feed_url)
 751                         values ('$uid', 'Tiny Tiny RSS: Forum',
 752                                 'http://tt-rss.org/forum/rss.php')");
 753         }
 754
 755         function logout_user() {
 756                 session_destroy();
 757                 if (isset($_COOKIE[session_name()])) {
 758                    setcookie(session_name(), '', time()-42000, '/');
 759                 }
 760         }
 761
 762         function validate_csrf($csrf_token) {
 763                 return $csrf_token == $_SESSION['csrf_token'];
 764         }
 765
 766         function load_user_plugins($owner_uid) {
 767                 if ($owner_uid) {
 768                         $plugins = get_pref("_ENABLED_PLUGINS", $owner_uid);
 769
 770                         PluginHost::getInstance()->load($plugins, PluginHost::KIND_USER, $owner_uid);
 771
 772                         if (get_schema_version() > 100) {
 773                                 PluginHost::getInstance()->load_data();
 774                         }
 775                 }
 776         }
 777
 778         function login_sequence() {
 779                 if (SINGLE_USER_MODE) {
 780                         @session_start();
 781                         authenticate_user("admin", null);
 782                         load_user_plugins($_SESSION["uid"]);
 783                 } else {
 784                         if (!validate_session()) $_SESSION["uid"] = false;
 785
 786                         if (!$_SESSION["uid"]) {
 787
 788                                 if (AUTH_AUTO_LOGIN && authenticate_user(null, null)) {
 789                                     $_SESSION["ref_schema_version"] = get_schema_version(true);
 790                                 } else {
 791                                          authenticate_user(null, null, true);
 792                                 }
 793
 794                                 if (!$_SESSION["uid"]) {
 795                                         @session_destroy();
 796                                         setcookie(session_name(), '', time()-42000, '/');
 797
 798                                         render_login_form();
 799                                         exit;
 800                                 }
 801
 802                         } else {
 803                                 /* bump login timestamp */
 804                                 db_query("UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 805                                         $_SESSION["uid"]);
 806                                 $_SESSION["last_login_update"] = time();
 807                         }
 808
 809                         if ($_SESSION["uid"]) {
 810                                 startup_gettext();
 811                                 load_user_plugins($_SESSION["uid"]);
 812
 813                                 /* cleanup ccache */
 814
 815                                 db_query("DELETE FROM ttrss_counters_cache WHERE owner_uid = ".
 816                                         $_SESSION["uid"] . " AND
 817                                                 (SELECT COUNT(id) FROM ttrss_feeds WHERE
 818                                                         ttrss_feeds.id = feed_id) = 0");
 819
 820                                 db_query("DELETE FROM ttrss_cat_counters_cache WHERE owner_uid = ".
 821                                         $_SESSION["uid"] . " AND
 822                                                 (SELECT COUNT(id) FROM ttrss_feed_categories WHERE
 823                                                         ttrss_feed_categories.id = feed_id) = 0");
 824
 825                         }
 826
 827                 }
 828         }
 829
 830         function truncate_string($str, $max_len, $suffix = '&hellip;') {
 831                 if (mb_strlen($str, "utf-8") > $max_len - 3) {
 832                         return mb_substr($str, 0, $max_len, "utf-8") . $suffix;
 833                 } else {
 834                         return $str;
 835                 }
 836         }
 837
 838         function convert_timestamp($timestamp, $source_tz, $dest_tz) {
 839
 840                 try {
 841                         $source_tz = new DateTimeZone($source_tz);
 842                 } catch (Exception $e) {
 843                         $source_tz = new DateTimeZone('UTC');
 844                 }
 845
 846                 try {
 847                         $dest_tz = new DateTimeZone($dest_tz);
 848                 } catch (Exception $e) {
 849                         $dest_tz = new DateTimeZone('UTC');
 850                 }
 851
 852                 $dt = new DateTime(date('Y-m-d H:i:s', $timestamp), $source_tz);
 853                 return $dt->format('U') + $dest_tz->getOffset($dt);
 854         }
 855
 856         function make_local_datetime($timestamp, $long, $owner_uid = false,
 857                                         $no_smart_dt = false) {
 858
 859                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 860                 if (!$timestamp) $timestamp = '1970-01-01 0:00';
 861
 862                 global $utc_tz;
 863                 global $user_tz;
 864
 865                 if (!$utc_tz) $utc_tz = new DateTimeZone('UTC');
 866
 867                 $timestamp = substr($timestamp, 0, 19);
 868
 869                 # We store date in UTC internally
 870                 $dt = new DateTime($timestamp, $utc_tz);
 871
 872                 $user_tz_string = get_pref('USER_TIMEZONE', $owner_uid);
 873
 874                 if ($user_tz_string != 'Automatic') {
 875
 876                         try {
 877                                 if (!$user_tz) $user_tz = new DateTimeZone($user_tz_string);
 878                         } catch (Exception $e) {
 879                                 $user_tz = $utc_tz;
 880                         }
 881
 882                         $tz_offset = $user_tz->getOffset($dt);
 883                 } else {
 884                         $tz_offset = (int) -$_SESSION["clientTzOffset"];
 885                 }
 886
 887                 $user_timestamp = $dt->format('U') + $tz_offset;
 888
 889                 if (!$no_smart_dt) {
 890                         return smart_date_time($user_timestamp,
 891                                 $tz_offset, $owner_uid);
 892                 } else {
 893                         if ($long)
 894                                 $format = get_pref('LONG_DATE_FORMAT', $owner_uid);
 895                         else
 896                                 $format = get_pref('SHORT_DATE_FORMAT', $owner_uid);
 897
 898                         return date($format, $user_timestamp);
 899                 }
 900         }
 901
 902         function smart_date_time($timestamp, $tz_offset = 0, $owner_uid = false) {
 903                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 904
 905                 if (date("Y.m.d", $timestamp) == date("Y.m.d", time() + $tz_offset)) {
 906                         return date("G:i", $timestamp);
 907                 } else if (date("Y", $timestamp) == date("Y", time() + $tz_offset)) {
 908                         $format = get_pref('SHORT_DATE_FORMAT', $owner_uid);
 909                         return date($format, $timestamp);
 910                 } else {
 911                         $format = get_pref('LONG_DATE_FORMAT', $owner_uid);
 912                         return date($format, $timestamp);
 913                 }
 914         }
 915
 916         function sql_bool_to_bool($s) {
 917                 if ($s == "t" || $s == "1" || strtolower($s) == "true") {
 918                         return true;
 919                 } else {
 920                         return false;
 921                 }
 922         }
 923
 924         function bool_to_sql_bool($s) {
 925                 if ($s) {
 926                         return "true";
 927                 } else {
 928                         return "false";
 929                 }
 930         }
 931
 932         // Session caching removed due to causing wrong redirects to upgrade
 933         // script when get_schema_version() is called on an obsolete session
 934         // created on a previous schema version.
 935         function get_schema_version($nocache = false) {
 936                 global $schema_version;
 937
 938                 if (!$schema_version && !$nocache) {
 939                         $result = db_query("SELECT schema_version FROM ttrss_version");
 940                         $version = db_fetch_result($result, 0, "schema_version");
 941                         $schema_version = $version;
 942                         return $version;
 943                 } else {
 944                         return $schema_version;
 945                 }
 946         }
 947
 948         function sanity_check() {
 949                 require_once 'errors.php';
 950
 951                 $error_code = 0;
 952                 $schema_version = get_schema_version(true);
 953
 954                 if ($schema_version != SCHEMA_VERSION) {
 955                         $error_code = 5;
 956                 }
 957
 958                 if (DB_TYPE == "mysql") {
 959                         $result = db_query("SELECT true", false);
 960                         if (db_num_rows($result) != 1) {
 961                                 $error_code = 10;
 962                         }
 963                 }
 964
 965                 if (db_escape_string("testTEST") != "testTEST") {
 966                         $error_code = 12;
 967                 }
 968
 969                 return array("code" => $error_code, "message" => $ERRORS[$error_code]);
 970         }
 971
 972         function file_is_locked($filename) {
 973                 if (file_exists(LOCK_DIRECTORY . "/$filename")) {
 974                         if (function_exists('flock')) {
 975                                 $fp = @fopen(LOCK_DIRECTORY . "/$filename", "r");
 976                                 if ($fp) {
 977                                         if (flock($fp, LOCK_EX | LOCK_NB)) {
 978                                                 flock($fp, LOCK_UN);
 979                                                 fclose($fp);
 980                                                 return false;
 981                                         }
 982                                         fclose($fp);
 983                                         return true;
 984                                 } else {
 985                                         return false;
 986                                 }
 987                         }
 988                         return true; // consider the file always locked and skip the test
 989                 } else {
 990                         return false;
 991                 }
 992         }
 993
 994
 995         function make_lockfile($filename) {
 996                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
 997
 998                 if ($fp && flock($fp, LOCK_EX | LOCK_NB)) {
 999                         $stat_h = fstat($fp);
1000                         $stat_f = stat(LOCK_DIRECTORY . "/$filename");
1001
1002                         if (strtoupper(substr(PHP_OS, 0, 3)) !== 'WIN') {
1003                                 if ($stat_h["ino"] != $stat_f["ino"] ||
1004                                                 $stat_h["dev"] != $stat_f["dev"]) {
1005
1006                                         return false;
1007                                 }
1008                         }
1009
1010                         if (function_exists('posix_getpid')) {
1011                                 fwrite($fp, posix_getpid() . "\n");
1012                         }
1013                         return $fp;
1014                 } else {
1015                         return false;
1016                 }
1017         }
1018
1019         function make_stampfile($filename) {
1020                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
1021
1022                 if (flock($fp, LOCK_EX | LOCK_NB)) {
1023                         fwrite($fp, time() . "\n");
1024                         flock($fp, LOCK_UN);
1025                         fclose($fp);
1026                         return true;
1027                 } else {
1028                         return false;
1029                 }
1030         }
1031
1032         function sql_random_function() {
1033                 if (DB_TYPE == "mysql") {
1034                         return "RAND()";
1035                 } else {
1036                         return "RANDOM()";
1037                 }
1038         }
1039
1040         function catchup_feed($feed, $cat_view, $owner_uid = false, $max_id = false, $mode = 'all') {
1041
1042                         if (!$owner_uid) $owner_uid = $_SESSION['uid'];
1043
1044                         //if (preg_match("/^-?[0-9][0-9]*$/", $feed) != false) {
1045
1046                         // Todo: all this interval stuff needs some generic generator function
1047
1048                         $date_qpart = "false";
1049
1050                         switch ($mode) {
1051                         case "1day":
1052                                 if (DB_TYPE == "pgsql") {
1053                                         $date_qpart = "date_entered < NOW() - INTERVAL '1 day' ";
1054                                 } else {
1055                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 1 DAY) ";
1056                                 }
1057                                 break;
1058                         case "1week":
1059                                 if (DB_TYPE == "pgsql") {
1060                                         $date_qpart = "date_entered < NOW() - INTERVAL '1 week' ";
1061                                 } else {
1062                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 1 WEEK) ";
1063                                 }
1064                                 break;
1065                         case "2week":
1066                                 if (DB_TYPE == "pgsql") {
1067                                         $date_qpart = "date_entered < NOW() - INTERVAL '2 week' ";
1068                                 } else {
1069                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 2 WEEK) ";
1070                                 }
1071                                 break;
1072                         default:
1073                                 $date_qpart = "true";
1074                         }
1075
1076                         if (is_numeric($feed)) {
1077                                 if ($cat_view) {
1078
1079                                         if ($feed >= 0) {
1080
1081                                                 if ($feed > 0) {
1082                                                         $children = getChildCategories($feed, $owner_uid);
1083                                                         array_push($children, $feed);
1084
1085                                                         $children = join(",", $children);
1086
1087                                                         $cat_qpart = "cat_id IN ($children)";
1088                                                 } else {
1089                                                         $cat_qpart = "cat_id IS NULL";
1090                                                 }
1091
1092                                                 db_query("UPDATE ttrss_user_entries
1093                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1094                                                                 (SELECT id FROM
1095                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1096                                                                                 AND owner_uid = $owner_uid AND unread = true AND feed_id IN
1097                                                                                         (SELECT id FROM ttrss_feeds WHERE $cat_qpart) AND $date_qpart) as tmp)");
1098
1099                                         } else if ($feed == -2) {
1100
1101                                                 db_query("UPDATE ttrss_user_entries
1102                                                         SET unread = false,last_read = NOW() WHERE (SELECT COUNT(*)
1103                                                                 FROM ttrss_user_labels2 WHERE article_id = ref_id) > 0
1104                                                                 AND unread = true AND $date_qpart AND owner_uid = $owner_uid");
1105                                         }
1106
1107                                 } else if ($feed > 0) {
1108
1109                                         db_query("UPDATE ttrss_user_entries
1110                                                 SET unread = false, last_read = NOW() WHERE ref_id IN
1111                                                         (SELECT id FROM
1112                                                                 (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1113                                                                         AND owner_uid = $owner_uid AND unread = true AND feed_id = $feed AND $date_qpart) as tmp)");
1114
1115                                 } else if ($feed < 0 && $feed > LABEL_BASE_INDEX) { // special, like starred
1116
1117                                         if ($feed == -1) {
1118                                                 db_query("UPDATE ttrss_user_entries
1119                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1120                                                                 (SELECT id FROM
1121                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1122                                                                                 AND owner_uid = $owner_uid AND unread = true AND marked = true AND $date_qpart) as tmp)");
1123                                         }
1124
1125                                         if ($feed == -2) {
1126                                                 db_query("UPDATE ttrss_user_entries
1127                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1128                                                                 (SELECT id FROM
1129                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1130                                                                                 AND owner_uid = $owner_uid AND unread = true AND published = true AND $date_qpart) as tmp)");
1131                                         }
1132
1133                                         if ($feed == -3) {
1134
1135                                                 $intl = get_pref("FRESH_ARTICLE_MAX_AGE");
1136
1137                                                 if (DB_TYPE == "pgsql") {
1138                                                         $match_part = "date_entered > NOW() - INTERVAL '$intl hour' ";
1139                                                 } else {
1140                                                         $match_part = "date_entered > DATE_SUB(NOW(),
1141                                                                 INTERVAL $intl HOUR) ";
1142                                                 }
1143
1144                                                 db_query("UPDATE ttrss_user_entries
1145                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1146                                                                 (SELECT id FROM
1147                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1148                                                                                 AND owner_uid = $owner_uid AND unread = true AND $date_qpart AND $match_part) as tmp)");
1149                                         }
1150
1151                                         if ($feed == -4) {
1152                                                 db_query("UPDATE ttrss_user_entries
1153                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1154                                                                 (SELECT id FROM
1155                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1156                                                                                 AND owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1157                                         }
1158
1159                                 } else if ($feed < LABEL_BASE_INDEX) { // label
1160
1161                                         $label_id = feed_to_label_id($feed);
1162
1163                                         db_query("UPDATE ttrss_user_entries
1164                                                 SET unread = false, last_read = NOW() WHERE ref_id IN
1165                                                         (SELECT id FROM
1166                                                                 (SELECT ttrss_entries.id FROM ttrss_entries, ttrss_user_entries, ttrss_user_labels2 WHERE ref_id = id
1167                                                                         AND label_id = '$label_id' AND ref_id = article_id
1168                                                                         AND owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1169
1170                                 }
1171
1172                                 ccache_update($feed, $owner_uid, $cat_view);
1173
1174                         } else { // tag
1175                                 db_query("UPDATE ttrss_user_entries
1176                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1177                                                 (SELECT id FROM
1178                                                         (SELECT ttrss_entries.id FROM ttrss_entries, ttrss_user_entries, ttrss_tags WHERE ref_id = ttrss_entries.id
1179                                                                 AND post_int_id = int_id AND tag_name = '$feed'
1180                                                                 AND ttrss_user_entries.owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1181
1182                         }
1183         }
1184
1185         function getAllCounters() {
1186                 $data = getGlobalCounters();
1187
1188                 $data = array_merge($data, getVirtCounters());
1189                 $data = array_merge($data, getLabelCounters());
1190                 $data = array_merge($data, getFeedCounters());
1191                 $data = array_merge($data, getCategoryCounters());
1192
1193                 return $data;
1194         }
1195
1196         function getCategoryTitle($cat_id) {
1197
1198                 if ($cat_id == -1) {
1199                         return __("Special");
1200                 } else if ($cat_id == -2) {
1201                         return __("Labels");
1202                 } else {
1203
1204                         $result = db_query("SELECT title FROM ttrss_feed_categories WHERE
1205                                 id = '$cat_id'");
1206
1207                         if (db_num_rows($result) == 1) {
1208                                 return db_fetch_result($result, 0, "title");
1209                         } else {
1210                                 return __("Uncategorized");
1211                         }
1212                 }
1213         }
1214
1215
1216         function getCategoryCounters() {
1217                 $ret_arr = array();
1218
1219                 /* Labels category */
1220
1221                 $cv = array("id" => -2, "kind" => "cat",
1222                         "counter" => getCategoryUnread(-2));
1223
1224                 array_push($ret_arr, $cv);
1225
1226                 $result = db_query("SELECT id AS cat_id, value AS unread,
1227                         (SELECT COUNT(id) FROM ttrss_feed_categories AS c2
1228                                 WHERE c2.parent_cat = ttrss_feed_categories.id) AS num_children
1229                         FROM ttrss_feed_categories, ttrss_cat_counters_cache
1230                         WHERE ttrss_cat_counters_cache.feed_id = id AND
1231                         ttrss_cat_counters_cache.owner_uid = ttrss_feed_categories.owner_uid AND
1232                         ttrss_feed_categories.owner_uid = " . $_SESSION["uid"]);
1233
1234                 while ($line = db_fetch_assoc($result)) {
1235                         $line["cat_id"] = (int) $line["cat_id"];
1236
1237                         if ($line["num_children"] > 0) {
1238                                 $child_counter = getCategoryChildrenUnread($line["cat_id"], $_SESSION["uid"]);
1239                         } else {
1240                                 $child_counter = 0;
1241                         }
1242
1243                         $cv = array("id" => $line["cat_id"], "kind" => "cat",
1244                                 "counter" => $line["unread"] + $child_counter);
1245
1246                         array_push($ret_arr, $cv);
1247                 }
1248
1249                 /* Special case: NULL category doesn't actually exist in the DB */
1250
1251                 $cv = array("id" => 0, "kind" => "cat",
1252                         "counter" => (int) ccache_find(0, $_SESSION["uid"], true));
1253
1254                 array_push($ret_arr, $cv);
1255
1256                 return $ret_arr;
1257         }
1258
1259         // only accepts real cats (>= 0)
1260         function getCategoryChildrenUnread($cat, $owner_uid = false) {
1261                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1262
1263                 $result = db_query("SELECT id FROM ttrss_feed_categories WHERE parent_cat = '$cat'
1264                                 AND owner_uid = $owner_uid");
1265
1266                 $unread = 0;
1267
1268                 while ($line = db_fetch_assoc($result)) {
1269                         $unread += getCategoryUnread($line["id"], $owner_uid);
1270                         $unread += getCategoryChildrenUnread($line["id"], $owner_uid);
1271                 }
1272
1273                 return $unread;
1274         }
1275
1276         function getCategoryUnread($cat, $owner_uid = false) {
1277
1278                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1279
1280                 if ($cat >= 0) {
1281
1282                         if ($cat != 0) {
1283                                 $cat_query = "cat_id = '$cat'";
1284                         } else {
1285                                 $cat_query = "cat_id IS NULL";
1286                         }
1287
1288                         $result = db_query("SELECT id FROM ttrss_feeds WHERE $cat_query
1289                                         AND owner_uid = " . $owner_uid);
1290
1291                         $cat_feeds = array();
1292                         while ($line = db_fetch_assoc($result)) {
1293                                 array_push($cat_feeds, "feed_id = " . $line["id"]);
1294                         }
1295
1296                         if (count($cat_feeds) == 0) return 0;
1297
1298                         $match_part = implode(" OR ", $cat_feeds);
1299
1300                         $result = db_query("SELECT COUNT(int_id) AS unread
1301                                 FROM ttrss_user_entries
1302                                 WHERE   unread = true AND ($match_part)
1303                                 AND owner_uid = " . $owner_uid);
1304
1305                         $unread = 0;
1306
1307                         # this needs to be rewritten
1308                         while ($line = db_fetch_assoc($result)) {
1309                                 $unread += $line["unread"];
1310                         }
1311
1312                         return $unread;
1313                 } else if ($cat == -1) {
1314                         return getFeedUnread(-1) + getFeedUnread(-2) + getFeedUnread(-3) + getFeedUnread(0);
1315                 } else if ($cat == -2) {
1316
1317                         $result = db_query("
1318                                 SELECT COUNT(unread) AS unread FROM
1319                                         ttrss_user_entries, ttrss_user_labels2
1320                                 WHERE article_id = ref_id AND unread = true
1321                                         AND ttrss_user_entries.owner_uid = '$owner_uid'");
1322
1323                         $unread = db_fetch_result($result, 0, "unread");
1324
1325                         return $unread;
1326
1327                 }
1328         }
1329
1330         function getFeedUnread($feed, $is_cat = false) {
1331                 return getFeedArticles($feed, $is_cat, true, $_SESSION["uid"]);
1332         }
1333
1334         function getLabelUnread($label_id, $owner_uid = false) {
1335                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1336
1337                 $result = db_query("SELECT COUNT(ref_id) AS unread FROM ttrss_user_entries, ttrss_user_labels2
1338                         WHERE owner_uid = '$owner_uid' AND unread = true AND label_id = '$label_id' AND article_id = ref_id");
1339
1340                 if (db_num_rows($result) != 0) {
1341                         return db_fetch_result($result, 0, "unread");
1342                 } else {
1343                         return 0;
1344                 }
1345         }
1346
1347         function getFeedArticles($feed, $is_cat = false, $unread_only = false,
1348                 $owner_uid = false) {
1349
1350                 $n_feed = (int) $feed;
1351                 $need_entries = false;
1352
1353                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1354
1355                 if ($unread_only) {
1356                         $unread_qpart = "unread = true";
1357                 } else {
1358                         $unread_qpart = "true";
1359                 }
1360
1361                 if ($is_cat) {
1362                         return getCategoryUnread($n_feed, $owner_uid);
1363                 } else if ($n_feed == -6) {
1364                         return 0;
1365                 } else if ($feed != "0" && $n_feed == 0) {
1366
1367                         $feed = db_escape_string($feed);
1368
1369                         $result = db_query("SELECT SUM((SELECT COUNT(int_id)
1370                                 FROM ttrss_user_entries,ttrss_entries WHERE int_id = post_int_id
1371                                         AND ref_id = id AND $unread_qpart)) AS count FROM ttrss_tags
1372                                 WHERE owner_uid = $owner_uid AND tag_name = '$feed'");
1373                         return db_fetch_result($result, 0, "count");
1374
1375                 } else if ($n_feed == -1) {
1376                         $match_part = "marked = true";
1377                 } else if ($n_feed == -2) {
1378                         $match_part = "published = true";
1379                 } else if ($n_feed == -3) {
1380                         $match_part = "unread = true AND score >= 0";
1381
1382                         $intl = get_pref("FRESH_ARTICLE_MAX_AGE", $owner_uid);
1383
1384                         if (DB_TYPE == "pgsql") {
1385                                 $match_part .= " AND updated > NOW() - INTERVAL '$intl hour' ";
1386                         } else {
1387                                 $match_part .= " AND updated > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
1388                         }
1389
1390                         $need_entries = true;
1391
1392                 } else if ($n_feed == -4) {
1393                         $match_part = "true";
1394                 } else if ($n_feed >= 0) {
1395
1396                         if ($n_feed != 0) {
1397                                 $match_part = "feed_id = '$n_feed'";
1398                         } else {
1399                                 $match_part = "feed_id IS NULL";
1400                         }
1401
1402                 } else if ($feed < LABEL_BASE_INDEX) {
1403
1404                         $label_id = feed_to_label_id($feed);
1405
1406                         return getLabelUnread($label_id, $owner_uid);
1407
1408                 }
1409
1410                 if ($match_part) {
1411
1412                         if ($need_entries) {
1413                                 $from_qpart = "ttrss_user_entries,ttrss_entries";
1414                                 $from_where = "ttrss_entries.id = ttrss_user_entries.ref_id AND";
1415                         } else {
1416                                 $from_qpart = "ttrss_user_entries";
1417                         }
1418
1419                         $query = "SELECT count(int_id) AS unread
1420                                 FROM $from_qpart WHERE
1421                                 $unread_qpart AND $from_where ($match_part) AND ttrss_user_entries.owner_uid = $owner_uid";
1422
1423                         //echo "[$feed/$query]\n";
1424
1425                         $result = db_query($query);
1426
1427                 } else {
1428
1429                         $result = db_query("SELECT COUNT(post_int_id) AS unread
1430                                 FROM ttrss_tags,ttrss_user_entries,ttrss_entries
1431                                 WHERE tag_name = '$feed' AND post_int_id = int_id AND ref_id = ttrss_entries.id
1432                                 AND $unread_qpart AND ttrss_tags.owner_uid = " . $owner_uid);
1433                 }
1434
1435                 $unread = db_fetch_result($result, 0, "unread");
1436
1437                 return $unread;
1438         }
1439
1440         function getGlobalUnread($user_id = false) {
1441
1442                 if (!$user_id) {
1443                         $user_id = $_SESSION["uid"];
1444                 }
1445
1446                 $result = db_query("SELECT SUM(value) AS c_id FROM ttrss_counters_cache
1447                         WHERE owner_uid = '$user_id' AND feed_id > 0");
1448
1449                 $c_id = db_fetch_result($result, 0, "c_id");
1450
1451                 return $c_id;
1452         }
1453
1454         function getGlobalCounters($global_unread = -1) {
1455                 $ret_arr = array();
1456
1457                 if ($global_unread == -1) {
1458                         $global_unread = getGlobalUnread();
1459                 }
1460
1461                 $cv = array("id" => "global-unread",
1462                         "counter" => (int) $global_unread);
1463
1464                 array_push($ret_arr, $cv);
1465
1466                 $result = db_query("SELECT COUNT(id) AS fn FROM
1467                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1468
1469                 $subscribed_feeds = db_fetch_result($result, 0, "fn");
1470
1471                 $cv = array("id" => "subscribed-feeds",
1472                         "counter" => (int) $subscribed_feeds);
1473
1474                 array_push($ret_arr, $cv);
1475
1476                 return $ret_arr;
1477         }
1478
1479         function getVirtCounters() {
1480
1481                 $ret_arr = array();
1482
1483                 for ($i = 0; $i >= -4; $i--) {
1484
1485                         $count = getFeedUnread($i);
1486
1487                         if ($i == 0 || $i == -1 || $i == -2)
1488                                 $auxctr = getFeedArticles($i, false);
1489                         else
1490                                 $auxctr = 0;
1491
1492                         $cv = array("id" => $i,
1493                                 "counter" => (int) $count,
1494                                 "auxcounter" => $auxctr);
1495
1496 //                      if (get_pref('EXTENDED_FEEDLIST'))
1497 //                              $cv["xmsg"] = getFeedArticles($i)." ".__("total");
1498
1499                         array_push($ret_arr, $cv);
1500                 }
1501
1502                 $feeds = PluginHost::getInstance()->get_feeds(-1);
1503
1504                 if (is_array($feeds)) {
1505                         foreach ($feeds as $feed) {
1506                                 $cv = array("id" => PluginHost::pfeed_to_feed_id($feed['id']),
1507                                         "counter" => $feed['sender']->get_unread($feed['id']));
1508
1509                                 if (method_exists($feed['sender'], 'get_total'))
1510                                         $cv["auxcounter"] = $feed['sender']->get_total($feed['id']);
1511
1512                                 array_push($ret_arr, $cv);
1513                         }
1514                 }
1515
1516                 return $ret_arr;
1517         }
1518
1519         function getLabelCounters($descriptions = false) {
1520
1521                 $ret_arr = array();
1522
1523                 $owner_uid = $_SESSION["uid"];
1524
1525                 $result = db_query("SELECT id,caption,COUNT(u1.unread) AS unread,COUNT(u2.unread) AS total
1526                         FROM ttrss_labels2 LEFT JOIN ttrss_user_labels2 ON
1527                                 (ttrss_labels2.id = label_id)
1528                                 LEFT JOIN ttrss_user_entries AS u1 ON (u1.ref_id = article_id AND u1.unread = true
1529                                         AND u1.owner_uid = $owner_uid)
1530                                 LEFT JOIN ttrss_user_entries AS u2 ON (u2.ref_id = article_id AND u2.unread = false
1531                                         AND u2.owner_uid = $owner_uid)
1532                                 WHERE ttrss_labels2.owner_uid = $owner_uid GROUP BY ttrss_labels2.id,
1533                                         ttrss_labels2.caption");
1534
1535                 while ($line = db_fetch_assoc($result)) {
1536
1537                         $id = label_to_feed_id($line["id"]);
1538
1539                         $cv = array("id" => $id,
1540                                 "counter" => (int) $line["unread"],
1541                                 "auxcounter" => (int) $line["total"]);
1542
1543                         if ($descriptions)
1544                                 $cv["description"] = $line["caption"];
1545
1546                         array_push($ret_arr, $cv);
1547                 }
1548
1549                 return $ret_arr;
1550         }
1551
1552         function getFeedCounters($active_feed = false) {
1553
1554                 $ret_arr = array();
1555
1556                 $query = "SELECT ttrss_feeds.id,
1557                                 ttrss_feeds.title,
1558                                 ".SUBSTRING_FOR_DATE."(ttrss_feeds.last_updated,1,19) AS last_updated,
1559                                 last_error, value AS count
1560                         FROM ttrss_feeds, ttrss_counters_cache
1561                         WHERE ttrss_feeds.owner_uid = ".$_SESSION["uid"]."
1562                                 AND ttrss_counters_cache.owner_uid = ttrss_feeds.owner_uid
1563                                 AND ttrss_counters_cache.feed_id = id";
1564
1565                 $result = db_query($query);
1566                 $fctrs_modified = false;
1567
1568                 while ($line = db_fetch_assoc($result)) {
1569
1570                         $id = $line["id"];
1571                         $count = $line["count"];
1572                         $last_error = htmlspecialchars($line["last_error"]);
1573
1574                         $last_updated = make_local_datetime($line['last_updated'], false);
1575
1576                         $has_img = feed_has_icon($id);
1577
1578                         if (date('Y') - date('Y', strtotime($line['last_updated'])) > 2)
1579                                 $last_updated = '';
1580
1581                         $cv = array("id" => $id,
1582                                 "updated" => $last_updated,
1583                                 "counter" => (int) $count,
1584                                 "has_img" => (int) $has_img);
1585
1586                         if ($last_error)
1587                                 $cv["error"] = $last_error;
1588
1589 //                      if (get_pref('EXTENDED_FEEDLIST'))
1590 //                              $cv["xmsg"] = getFeedArticles($id)." ".__("total");
1591
1592                         if ($active_feed && $id == $active_feed)
1593                                 $cv["title"] = truncate_string($line["title"], 30);
1594
1595                         array_push($ret_arr, $cv);
1596
1597                 }
1598
1599                 return $ret_arr;
1600         }
1601
1602         function get_pgsql_version() {
1603                 $result = db_query("SELECT version() AS version");
1604                 $version = explode(" ", db_fetch_result($result, 0, "version"));
1605                 return $version[1];
1606         }
1607
1608         /**
1609          * @return array (code => Status code, message => error message if available)
1610          *
1611          *                 0 - OK, Feed already exists
1612          *                 1 - OK, Feed added
1613          *                 2 - Invalid URL
1614          *                 3 - URL content is HTML, no feeds available
1615          *                 4 - URL content is HTML which contains multiple feeds.
1616          *                     Here you should call extractfeedurls in rpc-backend
1617          *                     to get all possible feeds.
1618          *                 5 - Couldn't download the URL content.
1619          *                 6 - Content is an invalid XML.
1620          */
1621         function subscribe_to_feed($url, $cat_id = 0,
1622                         $auth_login = '', $auth_pass = '') {
1623
1624                 global $fetch_last_error;
1625
1626                 require_once "include/rssfuncs.php";
1627
1628                 $url = fix_url($url);
1629
1630                 if (!$url || !validate_feed_url($url)) return array("code" => 2);
1631
1632                 $contents = @fetch_file_contents($url, false, $auth_login, $auth_pass);
1633
1634                 if (!$contents) {
1635                         return array("code" => 5, "message" => $fetch_last_error);
1636                 }
1637
1638                 if (is_html($contents)) {
1639                         $feedUrls = get_feeds_from_html($url, $contents);
1640
1641                         if (count($feedUrls) == 0) {
1642                                 return array("code" => 3);
1643                         } else if (count($feedUrls) > 1) {
1644                                 return array("code" => 4, "feeds" => $feedUrls);
1645                         }
1646                         //use feed url as new URL
1647                         $url = key($feedUrls);
1648                 }
1649
1650                 /* libxml_use_internal_errors(true);
1651                 $doc = new DOMDocument();
1652                 $doc->loadXML($contents);
1653                 $error = libxml_get_last_error();
1654                 libxml_clear_errors();
1655
1656                 if ($error) {
1657                         $error_message = format_libxml_error($error);
1658
1659                         return array("code" => 6, "message" => $error_message);
1660                 } */
1661
1662                 if ($cat_id == "0" || !$cat_id) {
1663                         $cat_qpart = "NULL";
1664                 } else {
1665                         $cat_qpart = "'$cat_id'";
1666                 }
1667
1668                 $result = db_query(
1669                         "SELECT id FROM ttrss_feeds
1670                         WHERE feed_url = '$url' AND owner_uid = ".$_SESSION["uid"]);
1671
1672                 if (strlen(FEED_CRYPT_KEY) > 0) {
1673                         require_once "crypt.php";
1674                         $auth_pass = substr(encrypt_string($auth_pass), 0, 250);
1675                         $auth_pass_encrypted = 'true';
1676                 } else {
1677                         $auth_pass_encrypted = 'false';
1678                 }
1679
1680                 $auth_pass = db_escape_string($auth_pass);
1681
1682                 if (db_num_rows($result) == 0) {
1683                         $result = db_query(
1684                                 "INSERT INTO ttrss_feeds
1685                                         (owner_uid,feed_url,title,cat_id, auth_login,auth_pass,update_method,auth_pass_encrypted)
1686                                 VALUES ('".$_SESSION["uid"]."', '$url',
1687                                 '[Unknown]', $cat_qpart, '$auth_login', '$auth_pass', 0, $auth_pass_encrypted)");
1688
1689                         $result = db_query(
1690                                 "SELECT id FROM ttrss_feeds WHERE feed_url = '$url'
1691                                         AND owner_uid = " . $_SESSION["uid"]);
1692
1693                         $feed_id = db_fetch_result($result, 0, "id");
1694
1695                         if ($feed_id) {
1696                                 update_rss_feed($feed_id, true);
1697                         }
1698
1699                         return array("code" => 1);
1700                 } else {
1701                         return array("code" => 0);
1702                 }
1703         }
1704
1705         function print_feed_select($id, $default_id = "",
1706                 $attributes = "", $include_all_feeds = true,
1707                 $root_id = false, $nest_level = 0) {
1708
1709                 if (!$root_id) {
1710                         print "<select id=\"$id\" name=\"$id\" $attributes>";
1711                         if ($include_all_feeds) {
1712                                 $is_selected = ("0" == $default_id) ? "selected=\"1\"" : "";
1713                                 print "<option $is_selected value=\"0\">".__('All feeds')."</option>";
1714                         }
1715                 }
1716
1717                 if (get_pref('ENABLE_FEED_CATS')) {
1718
1719                         if ($root_id)
1720                                 $parent_qpart = "parent_cat = '$root_id'";
1721                         else
1722                                 $parent_qpart = "parent_cat IS NULL";
1723
1724                         $result = db_query("SELECT id,title,
1725                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1726                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1727                                 FROM ttrss_feed_categories
1728                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1729
1730                         while ($line = db_fetch_assoc($result)) {
1731
1732                                 for ($i = 0; $i < $nest_level; $i++)
1733                                         $line["title"] = " - " . $line["title"];
1734
1735                                 $is_selected = ("CAT:".$line["id"] == $default_id) ? "selected=\"1\"" : "";
1736
1737                                 printf("<option $is_selected value='CAT:%d'>%s</option>",
1738                                         $line["id"], htmlspecialchars($line["title"]));
1739
1740                                 if ($line["num_children"] > 0)
1741                                         print_feed_select($id, $default_id, $attributes,
1742                                                 $include_all_feeds, $line["id"], $nest_level+1);
1743
1744                                 $feed_result = db_query("SELECT id,title FROM ttrss_feeds
1745                                         WHERE cat_id = '".$line["id"]."' AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1746
1747                                 while ($fline = db_fetch_assoc($feed_result)) {
1748                                         $is_selected = ($fline["id"] == $default_id) ? "selected=\"1\"" : "";
1749
1750                                         $fline["title"] = " + " . $fline["title"];
1751
1752                                         for ($i = 0; $i < $nest_level; $i++)
1753                                                 $fline["title"] = " - " . $fline["title"];
1754
1755                                         printf("<option $is_selected value='%d'>%s</option>",
1756                                                 $fline["id"], htmlspecialchars($fline["title"]));
1757                                 }
1758                         }
1759
1760                         if (!$root_id) {
1761                                 $default_is_cat = ($default_id == "CAT:0");
1762                                 $is_selected = $default_is_cat ? "selected=\"1\"" : "";
1763
1764                                 printf("<option $is_selected value='CAT:0'>%s</option>",
1765                                         __("Uncategorized"));
1766
1767                                 $feed_result = db_query("SELECT id,title FROM ttrss_feeds
1768                                         WHERE cat_id IS NULL AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1769
1770                                 while ($fline = db_fetch_assoc($feed_result)) {
1771                                         $is_selected = ($fline["id"] == $default_id && !$default_is_cat) ? "selected=\"1\"" : "";
1772
1773                                         $fline["title"] = " + " . $fline["title"];
1774
1775                                         for ($i = 0; $i < $nest_level; $i++)
1776                                                 $fline["title"] = " - " . $fline["title"];
1777
1778                                         printf("<option $is_selected value='%d'>%s</option>",
1779                                                 $fline["id"], htmlspecialchars($fline["title"]));
1780                                 }
1781                         }
1782
1783                 } else {
1784                         $result = db_query("SELECT id,title FROM ttrss_feeds
1785                                 WHERE owner_uid = ".$_SESSION["uid"]." ORDER BY title");
1786
1787                         while ($line = db_fetch_assoc($result)) {
1788
1789                                 $is_selected = ($line["id"] == $default_id) ? "selected=\"1\"" : "";
1790
1791                                 printf("<option $is_selected value='%d'>%s</option>",
1792                                         $line["id"], htmlspecialchars($line["title"]));
1793                         }
1794                 }
1795
1796                 if (!$root_id) {
1797                         print "</select>";
1798                 }
1799         }
1800
1801         function print_feed_cat_select($id, $default_id,
1802                 $attributes, $include_all_cats = true, $root_id = false, $nest_level = 0) {
1803
1804                         if (!$root_id) {
1805                                         print "<select id=\"$id\" name=\"$id\" default=\"$default_id\" onchange=\"catSelectOnChange(this)\" $attributes>";
1806                         }
1807
1808                         if ($root_id)
1809                                 $parent_qpart = "parent_cat = '$root_id'";
1810                         else
1811                                 $parent_qpart = "parent_cat IS NULL";
1812
1813                         $result = db_query("SELECT id,title,
1814                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1815                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1816                                 FROM ttrss_feed_categories
1817                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1818
1819                         while ($line = db_fetch_assoc($result)) {
1820                                 if ($line["id"] == $default_id) {
1821                                         $is_selected = "selected=\"1\"";
1822                                 } else {
1823                                         $is_selected = "";
1824                                 }
1825
1826                                 for ($i = 0; $i < $nest_level; $i++)
1827                                         $line["title"] = " - " . $line["title"];
1828
1829                                 if ($line["title"])
1830                                         printf("<option $is_selected value='%d'>%s</option>",
1831                                                 $line["id"], htmlspecialchars($line["title"]));
1832
1833                                 if ($line["num_children"] > 0)
1834                                         print_feed_cat_select($id, $default_id, $attributes,
1835                                                 $include_all_cats, $line["id"], $nest_level+1);
1836                         }
1837
1838                         if (!$root_id) {
1839                                 if ($include_all_cats) {
1840                                         if (db_num_rows($result) > 0) {
1841                                                 print "<option disabled=\"1\">--------</option>";
1842                                         }
1843
1844                                         if ($default_id == 0) {
1845                                                 $is_selected = "selected=\"1\"";
1846                                         } else {
1847                                                 $is_selected = "";
1848                                         }
1849
1850                                         print "<option $is_selected value=\"0\">".__('Uncategorized')."</option>";
1851                                 }
1852                                 print "</select>";
1853                         }
1854                 }
1855
1856         function checkbox_to_sql_bool($val) {
1857                 return ($val == "on") ? "true" : "false";
1858         }
1859
1860         function getFeedCatTitle($id) {
1861                 if ($id == -1) {
1862                         return __("Special");
1863                 } else if ($id < LABEL_BASE_INDEX) {
1864                         return __("Labels");
1865                 } else if ($id > 0) {
1866                         $result = db_query("SELECT ttrss_feed_categories.title
1867                                 FROM ttrss_feeds, ttrss_feed_categories WHERE ttrss_feeds.id = '$id' AND
1868                                         cat_id = ttrss_feed_categories.id");
1869                         if (db_num_rows($result) == 1) {
1870                                 return db_fetch_result($result, 0, "title");
1871                         } else {
1872                                 return __("Uncategorized");
1873                         }
1874                 } else {
1875                         return "getFeedCatTitle($id) failed";
1876                 }
1877
1878         }
1879
1880         function getFeedIcon($id) {
1881                 switch ($id) {
1882                 case 0:
1883                         return "images/archive.png";
1884                         break;
1885                 case -1:
1886                         return "images/star.png";
1887                         break;
1888                 case -2:
1889                         return "images/feed.png";
1890                         break;
1891                 case -3:
1892                         return "images/fresh.png";
1893                         break;
1894                 case -4:
1895                         return "images/folder.png";
1896                         break;
1897                 case -6:
1898                         return "images/time.png";
1899                         break;
1900                 default:
1901                         if ($id < LABEL_BASE_INDEX) {
1902                                 return "images/label.png";
1903                         } else {
1904                                 if (file_exists(ICONS_DIR . "/$id.ico"))
1905                                         return ICONS_URL . "/$id.ico";
1906                         }
1907                         break;
1908                 }
1909
1910                 return false;
1911         }
1912
1913         function getFeedTitle($id, $cat = false) {
1914                 if ($cat) {
1915                         return getCategoryTitle($id);
1916                 } else if ($id == -1) {
1917                         return __("Starred articles");
1918                 } else if ($id == -2) {
1919                         return __("Published articles");
1920                 } else if ($id == -3) {
1921                         return __("Fresh articles");
1922                 } else if ($id == -4) {
1923                         return __("All articles");
1924                 } else if ($id === 0 || $id === "0") {
1925                         return __("Archived articles");
1926                 } else if ($id == -6) {
1927                         return __("Recently read");
1928                 } else if ($id < LABEL_BASE_INDEX) {
1929                         $label_id = feed_to_label_id($id);
1930                         $result = db_query("SELECT caption FROM ttrss_labels2 WHERE id = '$label_id'");
1931                         if (db_num_rows($result) == 1) {
1932                                 return db_fetch_result($result, 0, "caption");
1933                         } else {
1934                                 return "Unknown label ($label_id)";
1935                         }
1936
1937                 } else if (is_numeric($id) && $id > 0) {
1938                         $result = db_query("SELECT title FROM ttrss_feeds WHERE id = '$id'");
1939                         if (db_num_rows($result) == 1) {
1940                                 return db_fetch_result($result, 0, "title");
1941                         } else {
1942                                 return "Unknown feed ($id)";
1943                         }
1944                 } else {
1945                         return $id;
1946                 }
1947         }
1948
1949         function make_init_params() {
1950                 $params = array();
1951
1952                 foreach (array("ON_CATCHUP_SHOW_NEXT_FEED", "HIDE_READ_FEEDS",
1953                         "ENABLE_FEED_CATS", "FEEDS_SORT_BY_UNREAD", "CONFIRM_FEED_CATCHUP",
1954                         "CDM_AUTO_CATCHUP", "FRESH_ARTICLE_MAX_AGE",
1955                         "HIDE_READ_SHOWS_SPECIAL", "COMBINED_DISPLAY_MODE") as $param) {
1956
1957                                  $params[strtolower($param)] = (int) get_pref($param);
1958                  }
1959
1960                 $params["icons_url"] = ICONS_URL;
1961                 $params["cookie_lifetime"] = SESSION_COOKIE_LIFETIME;
1962                 $params["default_view_mode"] = get_pref("_DEFAULT_VIEW_MODE");
1963                 $params["default_view_limit"] = (int) get_pref("_DEFAULT_VIEW_LIMIT");
1964                 $params["default_view_order_by"] = get_pref("_DEFAULT_VIEW_ORDER_BY");
1965                 $params["bw_limit"] = (int) $_SESSION["bw_limit"];
1966                 $params["label_base_index"] = (int) LABEL_BASE_INDEX;
1967
1968                 $result = db_query("SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
1969                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1970
1971                 $max_feed_id = db_fetch_result($result, 0, "mid");
1972                 $num_feeds = db_fetch_result($result, 0, "nf");
1973
1974                 $params["max_feed_id"] = (int) $max_feed_id;
1975                 $params["num_feeds"] = (int) $num_feeds;
1976
1977                 $params["hotkeys"] = get_hotkeys_map();
1978
1979                 $params["csrf_token"] = $_SESSION["csrf_token"];
1980                 $params["widescreen"] = (int) $_COOKIE["ttrss_widescreen"];
1981
1982                 $params['simple_update'] = defined('SIMPLE_UPDATE_MODE') && SIMPLE_UPDATE_MODE;
1983
1984                 return $params;
1985         }
1986
1987         function get_hotkeys_info() {
1988                 $hotkeys = array(
1989                         __("Navigation") => array(
1990                                 "next_feed" => __("Open next feed"),
1991                                 "prev_feed" => __("Open previous feed"),
1992                                 "next_article" => __("Open next article"),
1993                                 "prev_article" => __("Open previous article"),
1994                                 "next_article_noscroll" => __("Open next article (don't scroll long articles)"),
1995                                 "prev_article_noscroll" => __("Open previous article (don't scroll long articles)"),
1996                                 "next_article_noexpand" => __("Move to next article (don't expand or mark read)"),
1997                                 "prev_article_noexpand" => __("Move to previous article (don't expand or mark read)"),
1998                                 "search_dialog" => __("Show search dialog")),
1999                         __("Article") => array(
2000                                 "toggle_mark" => __("Toggle starred"),
2001                                 "toggle_publ" => __("Toggle published"),
2002                                 "toggle_unread" => __("Toggle unread"),
2003                                 "edit_tags" => __("Edit tags"),
2004                                 "dismiss_selected" => __("Dismiss selected"),
2005                                 "dismiss_read" => __("Dismiss read"),
2006                                 "open_in_new_window" => __("Open in new window"),
2007                                 "catchup_below" => __("Mark below as read"),
2008                                 "catchup_above" => __("Mark above as read"),
2009                                 "article_scroll_down" => __("Scroll down"),
2010                                 "article_scroll_up" => __("Scroll up"),
2011                                 "select_article_cursor" => __("Select article under cursor"),
2012                                 "email_article" => __("Email article"),
2013                                 "close_article" => __("Close/collapse article"),
2014                                 "toggle_expand" => __("Toggle article expansion (combined mode)"),
2015                                 "toggle_widescreen" => __("Toggle widescreen mode"),
2016                                 "toggle_embed_original" => __("Toggle embed original")),
2017                         __("Article selection") => array(
2018                                 "select_all" => __("Select all articles"),
2019                                 "select_unread" => __("Select unread"),
2020                                 "select_marked" => __("Select starred"),
2021                                 "select_published" => __("Select published"),
2022                                 "select_invert" => __("Invert selection"),
2023                                 "select_none" => __("Deselect everything")),
2024                         __("Feed") => array(
2025                                 "feed_refresh" => __("Refresh current feed"),
2026                                 "feed_unhide_read" => __("Un/hide read feeds"),
2027                                 "feed_subscribe" => __("Subscribe to feed"),
2028                                 "feed_edit" => __("Edit feed"),
2029                                 "feed_catchup" => __("Mark as read"),
2030                                 "feed_reverse" => __("Reverse headlines"),
2031                                 "feed_debug_update" => __("Debug feed update"),
2032                                 "catchup_all" => __("Mark all feeds as read"),
2033                                 "cat_toggle_collapse" => __("Un/collapse current category"),
2034                                 "toggle_combined_mode" => __("Toggle combined mode"),
2035                                 "toggle_cdm_expanded" => __("Toggle auto expand in combined mode")),
2036                         __("Go to") => array(
2037                                 "goto_all" => __("All articles"),
2038                                 "goto_fresh" => __("Fresh"),
2039                                 "goto_marked" => __("Starred"),
2040                                 "goto_published" => __("Published"),
2041                                 "goto_tagcloud" => __("Tag cloud"),
2042                                 "goto_prefs" => __("Preferences")),
2043                         __("Other") => array(
2044                                 "create_label" => __("Create label"),
2045                                 "create_filter" => __("Create filter"),
2046                                 "collapse_sidebar" => __("Un/collapse sidebar"),
2047                                 "help_dialog" => __("Show help dialog"))
2048                         );
2049
2050                 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_HOTKEY_INFO) as $plugin) {
2051                         $hotkeys = $plugin->hook_hotkey_info($hotkeys);
2052                 }
2053
2054                 return $hotkeys;
2055         }
2056
2057         function get_hotkeys_map() {
2058                 $hotkeys = array(
2059 //                      "navigation" => array(
2060                                 "k" => "next_feed",
2061                                 "j" => "prev_feed",
2062                                 "n" => "next_article",
2063                                 "p" => "prev_article",
2064                                 "(38)|up" => "prev_article",
2065                                 "(40)|down" => "next_article",
2066 //                              "^(38)|Ctrl-up" => "prev_article_noscroll",
2067 //                              "^(40)|Ctrl-down" => "next_article_noscroll",
2068                                 "(191)|/" => "search_dialog",
2069 //                      "article" => array(
2070                                 "s" => "toggle_mark",
2071                                 "*s" => "toggle_publ",
2072                                 "u" => "toggle_unread",
2073                                 "*t" => "edit_tags",
2074                                 "*d" => "dismiss_selected",
2075                                 "*x" => "dismiss_read",
2076                                 "o" => "open_in_new_window",
2077                                 "c p" => "catchup_below",
2078                                 "c n" => "catchup_above",
2079                                 "*n" => "article_scroll_down",
2080                                 "*p" => "article_scroll_up",
2081                                 "*(38)|Shift+up" => "article_scroll_up",
2082                                 "*(40)|Shift+down" => "article_scroll_down",
2083                                 "a *w" => "toggle_widescreen",
2084                                 "a e" => "toggle_embed_original",
2085                                 "e" => "email_article",
2086                                 "a q" => "close_article",
2087 //                      "article_selection" => array(
2088                                 "a a" => "select_all",
2089                                 "a u" => "select_unread",
2090                                 "a *u" => "select_marked",
2091                                 "a p" => "select_published",
2092                                 "a i" => "select_invert",
2093                                 "a n" => "select_none",
2094 //                      "feed" => array(
2095                                 "f r" => "feed_refresh",
2096                                 "f a" => "feed_unhide_read",
2097                                 "f s" => "feed_subscribe",
2098                                 "f e" => "feed_edit",
2099                                 "f q" => "feed_catchup",
2100                                 "f x" => "feed_reverse",
2101                                 "f *d" => "feed_debug_update",
2102                                 "f *c" => "toggle_combined_mode",
2103                                 "f c" => "toggle_cdm_expanded",
2104                                 "*q" => "catchup_all",
2105                                 "x" => "cat_toggle_collapse",
2106 //                      "goto" => array(
2107                                 "g a" => "goto_all",
2108                                 "g f" => "goto_fresh",
2109                                 "g s" => "goto_marked",
2110                                 "g p" => "goto_published",
2111                                 "g t" => "goto_tagcloud",
2112                                 "g *p" => "goto_prefs",
2113 //                      "other" => array(
2114                                 "(9)|Tab" => "select_article_cursor", // tab
2115                                 "c l" => "create_label",
2116                                 "c f" => "create_filter",
2117                                 "c s" => "collapse_sidebar",
2118                                 "^(191)|Ctrl+/" => "help_dialog",
2119                         );
2120
2121                 if (get_pref('COMBINED_DISPLAY_MODE')) {
2122                         $hotkeys["^(38)|Ctrl-up"] = "prev_article_noscroll";
2123                         $hotkeys["^(40)|Ctrl-down"] = "next_article_noscroll";
2124                 }
2125
2126                 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_HOTKEY_MAP) as $plugin) {
2127                         $hotkeys = $plugin->hook_hotkey_map($hotkeys);
2128                 }
2129
2130                 $prefixes = array();
2131
2132                 foreach (array_keys($hotkeys) as $hotkey) {
2133                         $pair = explode(" ", $hotkey, 2);
2134
2135                         if (count($pair) > 1 && !in_array($pair[0], $prefixes)) {
2136                                 array_push($prefixes, $pair[0]);
2137                         }
2138                 }
2139
2140                 return array($prefixes, $hotkeys);
2141         }
2142
2143         function make_runtime_info() {
2144                 $data = array();
2145
2146                 $result = db_query("SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
2147                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
2148
2149                 $max_feed_id = db_fetch_result($result, 0, "mid");
2150                 $num_feeds = db_fetch_result($result, 0, "nf");
2151
2152                 $data["max_feed_id"] = (int) $max_feed_id;
2153                 $data["num_feeds"] = (int) $num_feeds;
2154
2155                 $data['last_article_id'] = getLastArticleId();
2156                 $data['cdm_expanded'] = get_pref('CDM_EXPANDED');
2157
2158                 $data['dep_ts'] = calculate_dep_timestamp();
2159                 $data['reload_on_ts_change'] = !defined('_NO_RELOAD_ON_TS_CHANGE');
2160
2161                 if (file_exists(LOCK_DIRECTORY . "/update_daemon.lock")) {
2162
2163                         $data['daemon_is_running'] = (int) file_is_locked("update_daemon.lock");
2164
2165                         if (time() - $_SESSION["daemon_stamp_check"] > 30) {
2166
2167                                 $stamp = (int) @file_get_contents(LOCK_DIRECTORY . "/update_daemon.stamp");
2168
2169                                 if ($stamp) {
2170                                         $stamp_delta = time() - $stamp;
2171
2172                                         if ($stamp_delta > 1800) {
2173                                                 $stamp_check = 0;
2174                                         } else {
2175                                                 $stamp_check = 1;
2176                                                 $_SESSION["daemon_stamp_check"] = time();
2177                                         }
2178
2179                                         $data['daemon_stamp_ok'] = $stamp_check;
2180
2181                                         $stamp_fmt = date("Y.m.d, G:i", $stamp);
2182
2183                                         $data['daemon_stamp'] = $stamp_fmt;
2184                                 }
2185                         }
2186                 }
2187
2188                 if ($_SESSION["last_version_check"] + 86400 + rand(-1000, 1000) < time()) {
2189                                 $new_version_details = @check_for_update();
2190
2191                                 $data['new_version_available'] = (int) ($new_version_details != false);
2192
2193                                 $_SESSION["last_version_check"] = time();
2194                                 $_SESSION["version_data"] = $new_version_details;
2195                 }
2196
2197                 return $data;
2198         }
2199
2200         function search_to_sql($search) {
2201
2202                 $search_query_part = "";
2203
2204                 $keywords = explode(" ", $search);
2205                 $query_keywords = array();
2206
2207                 foreach ($keywords as $k) {
2208                         if (strpos($k, "-") === 0) {
2209                                 $k = substr($k, 1);
2210                                 $not = "NOT";
2211                         } else {
2212                                 $not = "";
2213                         }
2214
2215                         $commandpair = explode(":", mb_strtolower($k), 2);
2216
2217                         switch ($commandpair[0]) {
2218                         case "title":
2219                                 if ($commandpair[1]) {
2220                                         array_push($query_keywords, "($not (LOWER(ttrss_entries.title) LIKE '%".
2221                                                 db_escape_string(mb_strtolower($commandpair[1]))."%'))");
2222                                 } else {
2223                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2224                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2225                                 }
2226                                 break;
2227                         case "author":
2228                                 if ($commandpair[1]) {
2229                                         array_push($query_keywords, "($not (LOWER(author) LIKE '%".
2230                                                 db_escape_string(mb_strtolower($commandpair[1]))."%'))");
2231                                 } else {
2232                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2233                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2234                                 }
2235                                 break;
2236                         case "note":
2237                                 if ($commandpair[1]) {
2238                                         if ($commandpair[1] == "true")
2239                                                 array_push($query_keywords, "($not (note IS NOT NULL AND note != ''))");
2240                                         else if ($commandpair[1] == "false")
2241                                                 array_push($query_keywords, "($not (note IS NULL OR note = ''))");
2242                                         else
2243                                                 array_push($query_keywords, "($not (LOWER(note) LIKE '%".
2244                                                         db_escape_string(mb_strtolower($commandpair[1]))."%'))");
2245                                 } else {
2246                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2247                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2248                                 }
2249                                 break;
2250                         case "star":
2251
2252                                 if ($commandpair[1]) {
2253                                         if ($commandpair[1] == "true")
2254                                                 array_push($query_keywords, "($not (marked = true))");
2255                                         else
2256                                                 array_push($query_keywords, "($not (marked = false))");
2257                                 } else {
2258                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2259                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2260                                 }
2261                                 break;
2262                         case "pub":
2263                                 if ($commandpair[1]) {
2264                                         if ($commandpair[1] == "true")
2265                                                 array_push($query_keywords, "($not (published = true))");
2266                                         else
2267                                                 array_push($query_keywords, "($not (published = false))");
2268
2269                                 } else {
2270                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2271                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2272                                 }
2273                                 break;
2274                         default:
2275                                 if (strpos($k, "@") === 0) {
2276
2277                                         $user_tz_string = get_pref('USER_TIMEZONE', $_SESSION['uid']);
2278                                         $orig_ts = strtotime(substr($k, 1));
2279                                         $k = date("Y-m-d", convert_timestamp($orig_ts, $user_tz_string, 'UTC'));
2280
2281                                         //$k = date("Y-m-d", strtotime(substr($k, 1)));
2282
2283                                         array_push($query_keywords, "(".SUBSTRING_FOR_DATE."(updated,1,LENGTH('$k')) $not = '$k')");
2284                                 } else {
2285                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2286                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2287                                 }
2288                         }
2289                 }
2290
2291                 $search_query_part = implode("AND", $query_keywords);
2292
2293                 return $search_query_part;
2294         }
2295
2296         function getParentCategories($cat, $owner_uid) {
2297                 $rv = array();
2298
2299                 $result = db_query("SELECT parent_cat FROM ttrss_feed_categories
2300                         WHERE id = '$cat' AND parent_cat IS NOT NULL AND owner_uid = $owner_uid");
2301
2302                 while ($line = db_fetch_assoc($result)) {
2303                         array_push($rv, $line["parent_cat"]);
2304                         $rv = array_merge($rv, getParentCategories($line["parent_cat"], $owner_uid));
2305                 }
2306
2307                 return $rv;
2308         }
2309
2310         function getChildCategories($cat, $owner_uid) {
2311                 $rv = array();
2312
2313                 $result = db_query("SELECT id FROM ttrss_feed_categories
2314                         WHERE parent_cat = '$cat' AND owner_uid = $owner_uid");
2315
2316                 while ($line = db_fetch_assoc($result)) {
2317                         array_push($rv, $line["id"]);
2318                         $rv = array_merge($rv, getChildCategories($line["id"], $owner_uid));
2319                 }
2320
2321                 return $rv;
2322         }
2323
2324         function queryFeedHeadlines($feed, $limit, $view_mode, $cat_view, $search, $search_mode, $override_order = false, $offset = 0, $owner_uid = 0, $filter = false, $since_id = 0, $include_children = false, $ignore_vfeed_group = false, $override_strategy = false, $override_vfeed = false) {
2325
2326                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2327
2328                 $ext_tables_part = "";
2329
2330                         if ($search) {
2331
2332                                 if (SPHINX_ENABLED) {
2333                                         $ids = join(",", @sphinx_search($search, 0, 500));
2334
2335                                         if ($ids)
2336                                                 $search_query_part = "ref_id IN ($ids) AND ";
2337                                         else
2338                                                 $search_query_part = "ref_id = -1 AND ";
2339
2340                                 } else {
2341                                         $search_query_part = search_to_sql($search);
2342                                         $search_query_part .= " AND ";
2343                                 }
2344
2345                         } else {
2346                                 $search_query_part = "";
2347                         }
2348
2349                         if ($filter) {
2350
2351                                 if (DB_TYPE == "pgsql") {
2352                                         $query_strategy_part .= " AND updated > NOW() - INTERVAL '14 days' ";
2353                                 } else {
2354                                         $query_strategy_part .= " AND updated > DATE_SUB(NOW(), INTERVAL 14 DAY) ";
2355                                 }
2356
2357                                 $override_order = "updated DESC";
2358
2359                                 $filter_query_part = filter_to_sql($filter, $owner_uid);
2360
2361                                 // Try to check if SQL regexp implementation chokes on a valid regexp
2362
2363
2364                                 $result = db_query("SELECT true AS true_val FROM ttrss_entries,
2365                                         ttrss_user_entries, ttrss_feeds
2366                                         WHERE $filter_query_part LIMIT 1", false);
2367
2368                                 if ($result) {
2369                                         $test = db_fetch_result($result, 0, "true_val");
2370
2371                                         if (!$test) {
2372                                                 $filter_query_part = "false AND";
2373                                         } else {
2374                                                 $filter_query_part .= " AND";
2375                                         }
2376                                 } else {
2377                                         $filter_query_part = "false AND";
2378                                 }
2379
2380                         } else {
2381                                 $filter_query_part = "";
2382                         }
2383
2384                         if ($since_id) {
2385                                 $since_id_part = "ttrss_entries.id > $since_id AND ";
2386                         } else {
2387                                 $since_id_part = "";
2388                         }
2389
2390                         $view_query_part = "";
2391
2392                         if ($view_mode == "adaptive") {
2393                                 if ($search) {
2394                                         $view_query_part = " ";
2395                                 } else if ($feed != -1) {
2396
2397                                         $unread = getFeedUnread($feed, $cat_view);
2398
2399                                         if ($cat_view && $feed > 0 && $include_children)
2400                                                 $unread += getCategoryChildrenUnread($feed);
2401
2402                                         if ($unread > 0)
2403                                 $view_query_part = " unread = true AND ";
2404
2405                                 }
2406                         }
2407
2408                         if ($view_mode == "marked") {
2409                                 $view_query_part = " marked = true AND ";
2410                         }
2411
2412                         if ($view_mode == "has_note") {
2413                                 $view_query_part = " (note IS NOT NULL AND note != '') AND ";
2414                         }
2415
2416                         if ($view_mode == "published") {
2417                                 $view_query_part = " published = true AND ";
2418                         }
2419
2420                         if ($view_mode == "unread" && $feed != -6) {
2421                                 $view_query_part = " unread = true AND ";
2422                         }
2423
2424                         if ($limit > 0) {
2425                                 $limit_query_part = "LIMIT " . $limit;
2426                         }
2427
2428                         $allow_archived = false;
2429
2430                         $vfeed_query_part = "";
2431
2432                         // override query strategy and enable feed display when searching globally
2433                         if ($search && $search_mode == "all_feeds") {
2434                                 $query_strategy_part = "true";
2435                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2436                         /* tags */
2437                         } else if (!is_numeric($feed)) {
2438                                 $query_strategy_part = "true";
2439                                 $vfeed_query_part = "(SELECT title FROM ttrss_feeds WHERE
2440                                         id = feed_id) as feed_title,";
2441                         } else if ($search && $search_mode == "this_cat") {
2442                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2443
2444                                 if ($feed > 0) {
2445                                         if ($include_children) {
2446                                                 $subcats = getChildCategories($feed, $owner_uid);
2447                                                 array_push($subcats, $feed);
2448                                                 $cats_qpart = join(",", $subcats);
2449                                         } else {
2450                                                 $cats_qpart = $feed;
2451                                         }
2452
2453                                         $query_strategy_part = "ttrss_feeds.cat_id IN ($cats_qpart)";
2454
2455                                 } else {
2456                                         $query_strategy_part = "ttrss_feeds.cat_id IS NULL";
2457                                 }
2458
2459                         } else if ($feed > 0) {
2460
2461                                 if ($cat_view) {
2462
2463                                         if ($feed > 0) {
2464                                                 if ($include_children) {
2465                                                         # sub-cats
2466                                                         $subcats = getChildCategories($feed, $owner_uid);
2467
2468                                                         array_push($subcats, $feed);
2469                                                         $query_strategy_part = "cat_id IN (".
2470                                                                         implode(",", $subcats).")";
2471
2472                                                 } else {
2473                                                         $query_strategy_part = "cat_id = '$feed'";
2474                                                 }
2475
2476                                         } else {
2477                                                 $query_strategy_part = "cat_id IS NULL";
2478                                         }
2479
2480                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2481
2482                                 } else {
2483                                         $query_strategy_part = "feed_id = '$feed'";
2484                                 }
2485                         } else if ($feed == 0 && !$cat_view) { // archive virtual feed
2486                                 $query_strategy_part = "feed_id IS NULL";
2487                                 $allow_archived = true;
2488                         } else if ($feed == 0 && $cat_view) { // uncategorized
2489                                 $query_strategy_part = "cat_id IS NULL AND feed_id IS NOT NULL";
2490                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2491                         } else if ($feed == -1) { // starred virtual feed
2492                                 $query_strategy_part = "marked = true";
2493                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2494                                 $allow_archived = true;
2495
2496                                 if (!$override_order) {
2497                                         $override_order = "last_marked DESC, date_entered DESC, updated DESC";
2498                                 }
2499
2500                         } else if ($feed == -2) { // published virtual feed OR labels category
2501
2502                                 if (!$cat_view) {
2503                                         $query_strategy_part = "published = true";
2504                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2505                                         $allow_archived = true;
2506
2507                                         if (!$override_order) {
2508                                                 $override_order = "last_published DESC, date_entered DESC, updated DESC";
2509                                         }
2510
2511                                 } else {
2512                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2513
2514                                         $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2515
2516                                         $query_strategy_part = "ttrss_labels2.id = ttrss_user_labels2.label_id AND
2517                                                 ttrss_user_labels2.article_id = ref_id";
2518
2519                                 }
2520                         } else if ($feed == -6) { // recently read
2521                                 $query_strategy_part = "unread = false AND last_read IS NOT NULL";
2522                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2523                                 $allow_archived = true;
2524
2525                                 if (!$override_order) $override_order = "last_read DESC";
2526
2527 /*                      } else if ($feed == -7) { // shared
2528                                 $query_strategy_part = "uuid != ''";
2529                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2530                                 $allow_archived = true; */
2531                         } else if ($feed == -3) { // fresh virtual feed
2532                                 $query_strategy_part = "unread = true AND score >= 0";
2533
2534                                 $intl = get_pref("FRESH_ARTICLE_MAX_AGE", $owner_uid);
2535
2536                                 if (DB_TYPE == "pgsql") {
2537                                         $query_strategy_part .= " AND date_entered > NOW() - INTERVAL '$intl hour' ";
2538                                 } else {
2539                                         $query_strategy_part .= " AND date_entered > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
2540                                 }
2541
2542                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2543                         } else if ($feed == -4) { // all articles virtual feed
2544                                 $allow_archived = true;
2545                                 $query_strategy_part = "true";
2546                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2547                         } else if ($feed <= LABEL_BASE_INDEX) { // labels
2548                                 $label_id = feed_to_label_id($feed);
2549
2550                                 $query_strategy_part = "label_id = '$label_id' AND
2551                                         ttrss_labels2.id = ttrss_user_labels2.label_id AND
2552                                         ttrss_user_labels2.article_id = ref_id";
2553
2554                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2555                                 $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2556                                 $allow_archived = true;
2557
2558                         } else {
2559                                 $query_strategy_part = "true";
2560                         }
2561
2562                         $order_by = "score DESC, date_entered DESC, updated DESC";
2563
2564                         if ($view_mode == "unread_first") {
2565                                 $order_by = "unread DESC, $order_by";
2566                         }
2567
2568                         if ($override_order) {
2569                                 $order_by = $override_order;
2570                         }
2571
2572                         if ($override_strategy) {
2573                                 $query_strategy_part = $override_strategy;
2574                         }
2575
2576                         if ($override_vfeed) {
2577                                 $vfeed_query_part = $override_vfeed;
2578                         }
2579
2580                         $feed_title = "";
2581
2582                         if ($search) {
2583                                 $feed_title = T_sprintf("Search results: %s", $search);
2584                         } else {
2585                                 if ($cat_view) {
2586                                         $feed_title = getCategoryTitle($feed);
2587                                 } else {
2588                                         if (is_numeric($feed) && $feed > 0) {
2589                                                 $result = db_query("SELECT title,site_url,last_error,last_updated
2590                                                         FROM ttrss_feeds WHERE id = '$feed' AND owner_uid = $owner_uid");
2591
2592                                                 $feed_title = db_fetch_result($result, 0, "title");
2593                                                 $feed_site_url = db_fetch_result($result, 0, "site_url");
2594                                                 $last_error = db_fetch_result($result, 0, "last_error");
2595                                                 $last_updated = db_fetch_result($result, 0, "last_updated");
2596                                         } else {
2597                                                 $feed_title = getFeedTitle($feed);
2598                                         }
2599                                 }
2600                         }
2601
2602
2603                         $content_query_part = "content, content AS content_preview, ";
2604
2605
2606                         if (is_numeric($feed)) {
2607
2608                                 if ($feed >= 0) {
2609                                         $feed_kind = "Feeds";
2610                                 } else {
2611                                         $feed_kind = "Labels";
2612                                 }
2613
2614                                 if ($limit_query_part) {
2615                                         $offset_query_part = "OFFSET $offset";
2616                                 }
2617
2618                                 // proper override_order applied above
2619                                 if ($vfeed_query_part && !$ignore_vfeed_group && get_pref('VFEED_GROUP_BY_FEED', $owner_uid)) {
2620                                         if (!$override_order) {
2621                                                 $order_by = "ttrss_feeds.title, $order_by";
2622                                         } else {
2623                                                 $order_by = "ttrss_feeds.title, $override_order";
2624                                         }
2625                                 }
2626
2627                                 if (!$allow_archived) {
2628                                         $from_qpart = "ttrss_entries,ttrss_user_entries,ttrss_feeds$ext_tables_part";
2629                                         $feed_check_qpart = "ttrss_user_entries.feed_id = ttrss_feeds.id AND";
2630
2631                                 } else {
2632                                         $from_qpart = "ttrss_entries$ext_tables_part,ttrss_user_entries
2633                                                 LEFT JOIN ttrss_feeds ON (feed_id = ttrss_feeds.id)";
2634                                 }
2635
2636                                 if ($vfeed_query_part)
2637                                         $vfeed_query_part .= "favicon_avg_color,";
2638
2639                                 $query = "SELECT DISTINCT
2640                                                 date_entered,
2641                                                 guid,
2642                                                 ttrss_entries.id,ttrss_entries.title,
2643                                                 updated,
2644                                                 label_cache,
2645                                                 tag_cache,
2646                                                 always_display_enclosures,
2647                                                 site_url,
2648                                                 note,
2649                                                 num_comments,
2650                                                 comments,
2651                                                 int_id,
2652                                                 uuid,
2653                                                 hide_images,
2654                                                 unread,feed_id,marked,published,link,last_read,orig_feed_id,
2655                                                 last_marked, last_published,
2656                                                 $vfeed_query_part
2657                                                 $content_query_part
2658                                                 author,score
2659                                         FROM
2660                                                 $from_qpart
2661                                         WHERE
2662                                         $feed_check_qpart
2663                                         ttrss_user_entries.ref_id = ttrss_entries.id AND
2664                                         ttrss_user_entries.owner_uid = '$owner_uid' AND
2665                                         $search_query_part
2666                                         $filter_query_part
2667                                         $view_query_part
2668                                         $since_id_part
2669                                         $query_strategy_part ORDER BY $order_by
2670                                         $limit_query_part $offset_query_part";
2671
2672                                 if ($_REQUEST["debug"]) print $query;
2673
2674                                 $result = db_query($query);
2675
2676                         } else {
2677                                 // browsing by tag
2678
2679                                 $select_qpart = "SELECT DISTINCT " .
2680                                                                 "date_entered," .
2681                                                                 "guid," .
2682                                                                 "note," .
2683                                                                 "ttrss_entries.id as id," .
2684                                                                 "title," .
2685                                                                 "updated," .
2686                                                                 "unread," .
2687                                                                 "feed_id," .
2688                                                                 "orig_feed_id," .
2689                                                                 "marked," .
2690                                                                 "num_comments, " .
2691                                                                 "comments, " .
2692                                                                 "tag_cache," .
2693                                                                 "label_cache," .
2694                                                                 "link," .
2695                                                                 "uuid," .
2696                                                                 "last_read," .
2697                                                                 "(SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) AS hide_images," .
2698                                                                 "last_marked, last_published, " .
2699                                                                 $since_id_part .
2700                                                                 $vfeed_query_part .
2701                                                                 $content_query_part .
2702                                                                 "score ";
2703
2704                                 $feed_kind = "Tags";
2705                                 $all_tags = explode(",", $feed);
2706                                 if ($search_mode == 'any') {
2707                                         $tag_sql = "tag_name in (" . implode(", ", array_map("db_quote", $all_tags)) . ")";
2708                                         $from_qpart = " FROM ttrss_entries,ttrss_user_entries,ttrss_tags ";
2709                                         $where_qpart = " WHERE " .
2710                                                                    "ref_id = ttrss_entries.id AND " .
2711                                                                    "ttrss_user_entries.owner_uid = $owner_uid AND " .
2712                                                                    "post_int_id = int_id AND $tag_sql AND " .
2713                                                                    $view_query_part .
2714                                                                    $search_query_part .
2715                                                                    $query_strategy_part . " ORDER BY $order_by " .
2716                                                                    $limit_query_part;
2717
2718                                 } else {
2719                                         $i = 1;
2720                                         $sub_selects = array();
2721                                         $sub_ands = array();
2722                                         foreach ($all_tags as $term) {
2723                                                 array_push($sub_selects, "(SELECT post_int_id from ttrss_tags WHERE tag_name = " . db_quote($term) . " AND owner_uid = $owner_uid) as A$i");
2724                                                 $i++;
2725                                         }
2726                                         if ($i > 2) {
2727                                                 $x = 1;
2728                                                 $y = 2;
2729                                                 do {
2730                                                         array_push($sub_ands, "A$x.post_int_id = A$y.post_int_id");
2731                                                         $x++;
2732                                                         $y++;
2733                                                 } while ($y < $i);
2734                                         }
2735                                         array_push($sub_ands, "A1.post_int_id = ttrss_user_entries.int_id and ttrss_user_entries.owner_uid = $owner_uid");
2736                                         array_push($sub_ands, "ttrss_user_entries.ref_id = ttrss_entries.id");
2737                                         $from_qpart = " FROM " . implode(", ", $sub_selects) . ", ttrss_user_entries, ttrss_entries";
2738                                         $where_qpart = " WHERE " . implode(" AND ", $sub_ands);
2739                                 }
2740                                 //                              error_log("TAG SQL: " . $tag_sql);
2741                                 // $tag_sql = "tag_name = '$feed'";   DEFAULT way
2742
2743                                 //                              error_log("[". $select_qpart . "][" . $from_qpart . "][" .$where_qpart . "]");
2744                                 $result = db_query($select_qpart . $from_qpart . $where_qpart);
2745                         }
2746
2747                         return array($result, $feed_title, $feed_site_url, $last_error, $last_updated);
2748
2749         }
2750
2751         function sanitize($str, $force_remove_images = false, $owner = false, $site_url = false) {
2752                 if (!$owner) $owner = $_SESSION["uid"];
2753
2754                 $res = trim($str); if (!$res) return '';
2755
2756                 if (strpos($res, "href=") === false)
2757                         $res = rewrite_urls($res);
2758
2759                 $charset_hack = '<head>
2760                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
2761                 </head>';
2762
2763                 $res = trim($res); if (!$res) return '';
2764
2765                 libxml_use_internal_errors(true);
2766
2767                 $doc = new DOMDocument();
2768                 $doc->loadHTML($charset_hack . $res);
2769                 $xpath = new DOMXPath($doc);
2770
2771                 $entries = $xpath->query('(//a[@href]|//img[@src])');
2772
2773                 foreach ($entries as $entry) {
2774
2775                         if ($site_url) {
2776
2777                                 if ($entry->hasAttribute('href'))
2778                                         $entry->setAttribute('href',
2779                                                 rewrite_relative_url($site_url, $entry->getAttribute('href')));
2780
2781                                 if ($entry->hasAttribute('src')) {
2782                                         $src = rewrite_relative_url($site_url, $entry->getAttribute('src'));
2783
2784                                         $cached_filename = CACHE_DIR . '/images/' . sha1($src) . '.png';
2785
2786                                         if (file_exists($cached_filename)) {
2787                                                 $src = SELF_URL_PATH . '/image.php?hash=' . sha1($src);
2788                                         }
2789
2790                                         $entry->setAttribute('src', $src);
2791                                 }
2792
2793                                 if ($entry->nodeName == 'img') {
2794                                         if (($owner && get_pref("STRIP_IMAGES", $owner)) ||
2795                                                         $force_remove_images || $_SESSION["bw_limit"]) {
2796
2797                                                 $p = $doc->createElement('p');
2798
2799                                                 $a = $doc->createElement('a');
2800                                                 $a->setAttribute('href', $entry->getAttribute('src'));
2801
2802                                                 $a->appendChild(new DOMText($entry->getAttribute('src')));
2803                                                 $a->setAttribute('target', '_blank');
2804
2805                                                 $p->appendChild($a);
2806
2807                                                 $entry->parentNode->replaceChild($p, $entry);
2808                                         }
2809                                 }
2810                         }
2811
2812                         if (strtolower($entry->nodeName) == "a") {
2813                                 $entry->setAttribute("target", "_blank");
2814                         }
2815                 }
2816
2817                 $entries = $xpath->query('//iframe');
2818                 foreach ($entries as $entry) {
2819                         $entry->setAttribute('sandbox', 'allow-scripts');
2820
2821                 }
2822
2823                 $allowed_elements = array('a', 'address', 'audio', 'article', 'aside',
2824                         'b', 'bdi', 'bdo', 'big', 'blockquote', 'body', 'br',
2825                         'caption', 'cite', 'center', 'code', 'col', 'colgroup',
2826                         'data', 'dd', 'del', 'details', 'div', 'dl', 'font',
2827                         'dt', 'em', 'footer', 'figure', 'figcaption',
2828                         'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'header', 'html', 'i',
2829                         'img', 'ins', 'kbd', 'li', 'main', 'mark', 'nav', 'noscript',
2830                         'ol', 'p', 'pre', 'q', 'ruby', 'rp', 'rt', 's', 'samp', 'section',
2831                         'small', 'source', 'span', 'strike', 'strong', 'sub', 'summary',
2832                         'sup', 'table', 'tbody', 'td', 'tfoot', 'th', 'thead', 'time',
2833                         'tr', 'track', 'tt', 'u', 'ul', 'var', 'wbr', 'video' );
2834
2835                 if ($_SESSION['hasSandbox']) $allowed_elements[] = 'iframe';
2836
2837                 $disallowed_attributes = array('id', 'style', 'class');
2838
2839                 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_SANITIZE) as $plugin) {
2840                         $retval = $plugin->hook_sanitize($doc, $site_url, $allowed_elements, $disallowed_attributes);
2841                         if (is_array($retval)) {
2842                                 $doc = $retval[0];
2843                                 $allowed_elements = $retval[1];
2844                                 $disallowed_attributes = $retval[2];
2845                         } else {
2846                                 $doc = $retval;
2847                         }
2848                 }
2849
2850                 $doc->removeChild($doc->firstChild); //remove doctype
2851                 $doc = strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes);
2852                 $res = $doc->saveHTML();
2853                 return $res;
2854         }
2855
2856         function strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes) {
2857                 $xpath = new DOMXPath($doc);
2858                 $entries = $xpath->query('//*');
2859
2860                 foreach ($entries as $entry) {
2861                         if (!in_array($entry->nodeName, $allowed_elements)) {
2862                                 $entry->parentNode->removeChild($entry);
2863                         }
2864
2865                         if ($entry->hasAttributes()) {
2866                                 $attrs_to_remove = array();
2867
2868                                 foreach ($entry->attributes as $attr) {
2869
2870                                         if (strpos($attr->nodeName, 'on') === 0) {
2871                                                 array_push($attrs_to_remove, $attr);
2872                                         }
2873
2874                                         if (in_array($attr->nodeName, $disallowed_attributes)) {
2875                                                 array_push($attrs_to_remove, $attr);
2876                                         }
2877                                 }
2878
2879                                 foreach ($attrs_to_remove as $attr) {
2880                                         $entry->removeAttributeNode($attr);
2881                                 }
2882                         }
2883                 }
2884
2885                 return $doc;
2886         }
2887
2888         function check_for_update() {
2889                 if (CHECK_FOR_NEW_VERSION && $_SESSION['access_level'] >= 10) {
2890                         $version_url = "http://tt-rss.org/version.php?ver=" . VERSION .
2891                                 "&iid=" . sha1(SELF_URL_PATH);
2892
2893                         $version_data = @fetch_file_contents($version_url);
2894
2895                         if ($version_data) {
2896                                 $version_data = json_decode($version_data, true);
2897                                 if ($version_data && $version_data['version']) {
2898                                         if (version_compare(VERSION_STATIC, $version_data['version']) == -1) {
2899                                                 return $version_data;
2900                                         }
2901                                 }
2902                         }
2903                 }
2904                 return false;
2905         }
2906
2907         function catchupArticlesById($ids, $cmode, $owner_uid = false) {
2908
2909                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2910                 if (count($ids) == 0) return;
2911
2912                 $tmp_ids = array();
2913
2914                 foreach ($ids as $id) {
2915                         array_push($tmp_ids, "ref_id = '$id'");
2916                 }
2917
2918                 $ids_qpart = join(" OR ", $tmp_ids);
2919
2920                 if ($cmode == 0) {
2921                         db_query("UPDATE ttrss_user_entries SET
2922                         unread = false,last_read = NOW()
2923                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2924                 } else if ($cmode == 1) {
2925                         db_query("UPDATE ttrss_user_entries SET
2926                         unread = true
2927                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2928                 } else {
2929                         db_query("UPDATE ttrss_user_entries SET
2930                         unread = NOT unread,last_read = NOW()
2931                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2932                 }
2933
2934                 /* update ccache */
2935
2936                 $result = db_query("SELECT DISTINCT feed_id FROM ttrss_user_entries
2937                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2938
2939                 while ($line = db_fetch_assoc($result)) {
2940                         ccache_update($line["feed_id"], $owner_uid);
2941                 }
2942         }
2943
2944         function get_article_tags($id, $owner_uid = 0, $tag_cache = false) {
2945
2946                 $a_id = db_escape_string($id);
2947
2948                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2949
2950                 $query = "SELECT DISTINCT tag_name,
2951                         owner_uid as owner FROM
2952                         ttrss_tags WHERE post_int_id = (SELECT int_id FROM ttrss_user_entries WHERE
2953                         ref_id = '$a_id' AND owner_uid = '$owner_uid' LIMIT 1) ORDER BY tag_name";
2954
2955                 $tags = array();
2956
2957                 /* check cache first */
2958
2959                 if ($tag_cache === false) {
2960                         $result = db_query("SELECT tag_cache FROM ttrss_user_entries
2961                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
2962
2963                         $tag_cache = db_fetch_result($result, 0, "tag_cache");
2964                 }
2965
2966                 if ($tag_cache) {
2967                         $tags = explode(",", $tag_cache);
2968                 } else {
2969
2970                         /* do it the hard way */
2971
2972                         $tmp_result = db_query($query);
2973
2974                         while ($tmp_line = db_fetch_assoc($tmp_result)) {
2975                                 array_push($tags, $tmp_line["tag_name"]);
2976                         }
2977
2978                         /* update the cache */
2979
2980                         $tags_str = db_escape_string(join(",", $tags));
2981
2982                         db_query("UPDATE ttrss_user_entries
2983                                 SET tag_cache = '$tags_str' WHERE ref_id = '$id'
2984                                 AND owner_uid = $owner_uid");
2985                 }
2986
2987                 return $tags;
2988         }
2989
2990         function trim_array($array) {
2991                 $tmp = $array;
2992                 array_walk($tmp, 'trim');
2993                 return $tmp;
2994         }
2995
2996         function tag_is_valid($tag) {
2997                 if ($tag == '') return false;
2998                 if (preg_match("/^[0-9]*$/", $tag)) return false;
2999                 if (mb_strlen($tag) > 250) return false;
3000
3001                 if (function_exists('iconv')) {
3002                         $tag = iconv("utf-8", "utf-8", $tag);
3003                 }
3004
3005                 if (!$tag) return false;
3006
3007                 return true;
3008         }
3009
3010         function render_login_form() {
3011                 header('Cache-Control: public');
3012
3013                 require_once "login_form.php";
3014                 exit;
3015         }
3016
3017         function format_warning($msg, $id = "") {
3018                 global $link;
3019                 return "<div class=\"warning\" id=\"$id\">
3020                         <span><img src=\"images/alert.png\"></span><span>$msg</span></div>";
3021         }
3022
3023         function format_notice($msg, $id = "") {
3024                 global $link;
3025                 return "<div class=\"notice\" id=\"$id\">
3026                         <span><img src=\"images/information.png\"></span><span>$msg</span></div>";
3027         }
3028
3029         function format_error($msg, $id = "") {
3030                 global $link;
3031                 return "<div class=\"error\" id=\"$id\">
3032                         <span><img src=\"images/alert.png\"></span><span>$msg</span></div>";
3033         }
3034
3035         function print_notice($msg) {
3036                 return print format_notice($msg);
3037         }
3038
3039         function print_warning($msg) {
3040                 return print format_warning($msg);
3041         }
3042
3043         function print_error($msg) {
3044                 return print format_error($msg);
3045         }
3046
3047
3048         function T_sprintf() {
3049                 $args = func_get_args();
3050                 return vsprintf(__(array_shift($args)), $args);
3051         }
3052
3053         function format_inline_player($url, $ctype) {
3054
3055                 $entry = "";
3056
3057                 $url = htmlspecialchars($url);
3058
3059                 if (strpos($ctype, "audio/") === 0) {
3060
3061                         if ($_SESSION["hasAudio"] && (strpos($ctype, "ogg") !== false ||
3062                                 $_SESSION["hasMp3"])) {
3063
3064                                 $entry .= "<audio preload=\"none\" controls>
3065                                         <source type=\"$ctype\" src=\"$url\"></source>
3066                                         </audio>";
3067
3068                         } else {
3069
3070                                 $entry .= "<object type=\"application/x-shockwave-flash\"
3071                                         data=\"lib/button/musicplayer.swf?song_url=$url\"
3072                                         width=\"17\" height=\"17\" style='float : left; margin-right : 5px;'>
3073                                         <param name=\"movie\"
3074                                                 value=\"lib/button/musicplayer.swf?song_url=$url\" />
3075                                         </object>";
3076                         }
3077
3078                         if ($entry) $entry .= "&nbsp; <a target=\"_blank\"
3079                                 href=\"$url\">" . basename($url) . "</a>";
3080
3081                         return $entry;
3082
3083                 }
3084
3085                 return "";
3086
3087 /*              $filename = substr($url, strrpos($url, "/")+1);
3088
3089                 $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
3090                         $filename . " (" . $ctype . ")" . "</a>"; */
3091
3092         }
3093
3094         function format_article($id, $mark_as_read = true, $zoom_mode = false, $owner_uid = false) {
3095                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3096
3097                 $rv = array();
3098
3099                 $rv['id'] = $id;
3100
3101                 /* we can figure out feed_id from article id anyway, why do we
3102                  * pass feed_id here? let's ignore the argument :(*/
3103
3104                 $result = db_query("SELECT feed_id FROM ttrss_user_entries
3105                         WHERE ref_id = '$id'");
3106
3107                 $feed_id = (int) db_fetch_result($result, 0, "feed_id");
3108
3109                 $rv['feed_id'] = $feed_id;
3110
3111                 //if (!$zoom_mode) { print "<article id='$id'><![CDATA["; };
3112
3113                 if ($mark_as_read) {
3114                         $result = db_query("UPDATE ttrss_user_entries
3115                                 SET unread = false,last_read = NOW()
3116                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
3117
3118                         ccache_update($feed_id, $owner_uid);
3119                 }
3120
3121                 $result = db_query("SELECT id,title,link,content,feed_id,comments,int_id,
3122                         ".SUBSTRING_FOR_DATE."(updated,1,16) as updated,
3123                         (SELECT site_url FROM ttrss_feeds WHERE id = feed_id) as site_url,
3124                         (SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) as hide_images,
3125                         (SELECT always_display_enclosures FROM ttrss_feeds WHERE id = feed_id) as always_display_enclosures,
3126                         num_comments,
3127                         tag_cache,
3128                         author,
3129                         orig_feed_id,
3130                         note
3131                         FROM ttrss_entries,ttrss_user_entries
3132                         WHERE   id = '$id' AND ref_id = id AND owner_uid = $owner_uid");
3133
3134                 if ($result) {
3135
3136                         $line = db_fetch_assoc($result);
3137
3138                         $tag_cache = $line["tag_cache"];
3139
3140                         $line["tags"] = get_article_tags($id, $owner_uid, $line["tag_cache"]);
3141                         unset($line["tag_cache"]);
3142
3143                         $line["content"] = sanitize($line["content"],
3144                                 sql_bool_to_bool($line['hide_images']),
3145                                 $owner_uid, $line["site_url"]);
3146
3147                         foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_RENDER_ARTICLE) as $p) {
3148                                 $line = $p->hook_render_article($line);
3149                         }
3150
3151                         $num_comments = $line["num_comments"];
3152                         $entry_comments = "";
3153
3154                         if ($num_comments > 0) {
3155                                 if ($line["comments"]) {
3156                                         $comments_url = htmlspecialchars($line["comments"]);
3157                                 } else {
3158                                         $comments_url = htmlspecialchars($line["link"]);
3159                                 }
3160                                 $entry_comments = "<a target='_blank' href=\"$comments_url\">$num_comments comments</a>";
3161                         } else {
3162                                 if ($line["comments"] && $line["link"] != $line["comments"]) {
3163                                         $entry_comments = "<a target='_blank' href=\"".htmlspecialchars($line["comments"])."\">comments</a>";
3164                                 }
3165                         }
3166
3167                         if ($zoom_mode) {
3168                                 header("Content-Type: text/html");
3169                                 $rv['content'] .= "<html><head>
3170                                                 <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"/>
3171                                                 <title>Tiny Tiny RSS - ".$line["title"]."</title>
3172                                                 <link rel=\"stylesheet\" type=\"text/css\" href=\"css/tt-rss.css\">
3173                                                 <script type=\"text/javascript\">
3174                                                 function openSelectedAttachment(elem) {
3175                                                         try {
3176                                                                 var url = elem[elem.selectedIndex].value;
3177
3178                                                                 if (url) {
3179                                                                         window.open(url);
3180                                                                         elem.selectedIndex = 0;
3181                                                                 }
3182
3183                                                         } catch (e) {
3184                                                                 exception_error(\"openSelectedAttachment\", e);
3185                                                         }
3186                                                 }
3187                                         </script>
3188                                         </head><body id=\"ttrssZoom\">";
3189                         }
3190
3191                         $rv['content'] .= "<div class=\"postReply\" id=\"POST-$id\">";
3192
3193                         $rv['content'] .= "<div class=\"postHeader\" id=\"POSTHDR-$id\">";
3194
3195                         $entry_author = $line["author"];
3196
3197                         if ($entry_author) {
3198                                 $entry_author = __(" - ") . $entry_author;
3199                         }
3200
3201                         $parsed_updated = make_local_datetime($line["updated"], true,
3202                                 $owner_uid, true);
3203
3204                         if (!$zoom_mode)
3205                                 $rv['content'] .= "<div class=\"postDate\">$parsed_updated</div>";
3206
3207                         if ($line["link"]) {
3208                                 $rv['content'] .= "<div class='postTitle'><a target='_blank'
3209                                         title=\"".htmlspecialchars($line['title'])."\"
3210                                         href=\"" .
3211                                         htmlspecialchars($line["link"]) . "\">" .
3212                                         $line["title"] . "</a>" .
3213                                         "<span class='author'>$entry_author</span></div>";
3214                         } else {
3215                                 $rv['content'] .= "<div class='postTitle'>" . $line["title"] . "$entry_author</div>";
3216                         }
3217
3218                         if ($zoom_mode)
3219                                 $rv['content'] .= "<div class=\"postDate\">$parsed_updated</div>";
3220
3221                         $tags_str = format_tags_string($line["tags"], $id);
3222                         $tags_str_full = join(", ", $line["tags"]);
3223
3224                         if (!$tags_str_full) $tags_str_full = __("no tags");
3225
3226                         if (!$entry_comments) $entry_comments = "&nbsp;"; # placeholder
3227
3228                         $rv['content'] .= "<div class='postTags' style='float : right'>
3229                                 <img src='images/tag.png'
3230                                 class='tagsPic' alt='Tags' title='Tags'>&nbsp;";
3231
3232                         if (!$zoom_mode) {
3233                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>
3234                                         <a title=\"".__('Edit tags for this article')."\"
3235                                         href=\"#\" onclick=\"editArticleTags($id, $feed_id)\">(+)</a>";
3236
3237                                 $rv['content'] .= "<div dojoType=\"dijit.Tooltip\"
3238                                         id=\"ATSTRTIP-$id\" connectId=\"ATSTR-$id\"
3239                                         position=\"below\">$tags_str_full</div>";
3240
3241                                 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_ARTICLE_BUTTON) as $p) {
3242                                         $rv['content'] .= $p->hook_article_button($line);
3243                                 }
3244
3245                         } else {
3246                                 $tags_str = strip_tags($tags_str);
3247                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>";
3248                         }
3249                         $rv['content'] .= "</div>";
3250                         $rv['content'] .= "<div clear='both'>";
3251
3252                         foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_ARTICLE_LEFT_BUTTON) as $p) {
3253                                 $rv['content'] .= $p->hook_article_left_button($line);
3254                         }
3255
3256                         $rv['content'] .= "$entry_comments</div>";
3257
3258                         if ($line["orig_feed_id"]) {
3259
3260                                 $tmp_result = db_query("SELECT * FROM ttrss_archived_feeds
3261                                         WHERE id = ".$line["orig_feed_id"]);
3262
3263                                 if (db_num_rows($tmp_result) != 0) {
3264
3265                                         $rv['content'] .= "<div clear='both'>";
3266                                         $rv['content'] .= __("Originally from:");
3267
3268                                         $rv['content'] .= "&nbsp;";
3269
3270                                         $tmp_line = db_fetch_assoc($tmp_result);
3271
3272                                         $rv['content'] .= "<a target='_blank'
3273                                                 href=' " . htmlspecialchars($tmp_line['site_url']) . "'>" .
3274                                                 $tmp_line['title'] . "</a>";
3275
3276                                         $rv['content'] .= "&nbsp;";
3277
3278                                         $rv['content'] .= "<a target='_blank' href='" . htmlspecialchars($tmp_line['feed_url']) . "'>";
3279                                         $rv['content'] .= "<img title='".__('Feed URL')."'class='tinyFeedIcon' src='images/pub_set.svg'></a>";
3280
3281                                         $rv['content'] .= "</div>";
3282                                 }
3283                         }
3284
3285                         $rv['content'] .= "</div>";
3286
3287                         $rv['content'] .= "<div id=\"POSTNOTE-$id\">";
3288                                 if ($line['note']) {
3289                                         $rv['content'] .= format_article_note($id, $line['note'], !$zoom_mode);
3290                                 }
3291                         $rv['content'] .= "</div>";
3292
3293                         $rv['content'] .= "<div class=\"postContent\" lang=\"en\">";
3294
3295                         $rv['content'] .= $line["content"];
3296                         $rv['content'] .= format_article_enclosures($id,
3297                                 sql_bool_to_bool($line["always_display_enclosures"]),
3298                                 $line["content"],
3299                                 sql_bool_to_bool($line["hide_images"]));
3300
3301                         $rv['content'] .= "</div>";
3302
3303                         $rv['content'] .= "</div>";
3304
3305                 }
3306
3307                 if ($zoom_mode) {
3308                         $rv['content'] .= "
3309                                 <div class='footer'>
3310                                 <button onclick=\"return window.close()\">".
3311                                         __("Close this window")."</button></div>";
3312                         $rv['content'] .= "</body></html>";
3313                 }
3314
3315                 return $rv;
3316
3317         }
3318
3319         function print_checkpoint($n, $s) {
3320                 $ts = microtime(true);
3321                 echo sprintf("<!-- CP[$n] %.4f seconds -->\n", $ts - $s);
3322                 return $ts;
3323         }
3324
3325         function sanitize_tag($tag) {
3326                 $tag = trim($tag);
3327
3328                 $tag = mb_strtolower($tag, 'utf-8');
3329
3330                 $tag = preg_replace('/[\'\"\+\>\<]/', "", $tag);
3331
3332 //              $tag = str_replace('"', "", $tag);
3333 //              $tag = str_replace("+", " ", $tag);
3334                 $tag = str_replace("technorati tag: ", "", $tag);
3335
3336                 return $tag;
3337         }
3338
3339         function get_self_url_prefix() {
3340                 if (strrpos(SELF_URL_PATH, "/") === strlen(SELF_URL_PATH)-1) {
3341                         return substr(SELF_URL_PATH, 0, strlen(SELF_URL_PATH)-1);
3342                 } else {
3343                         return SELF_URL_PATH;
3344                 }
3345         }
3346
3347         /**
3348          * Compute the Mozilla Firefox feed adding URL from server HOST and REQUEST_URI.
3349          *
3350          * @return string The Mozilla Firefox feed adding URL.
3351          */
3352         function add_feed_url() {
3353                 //$url_path = ($_SERVER['HTTPS'] != "on" ? 'http://' :  'https://') . $_SERVER["HTTP_HOST"] . parse_url($_SERVER["REQUEST_URI"], PHP_URL_PATH);
3354
3355                 $url_path = get_self_url_prefix() .
3356                         "/public.php?op=subscribe&feed_url=%s";
3357                 return $url_path;
3358         } // function add_feed_url
3359
3360         function encrypt_password($pass, $salt = '', $mode2 = false) {
3361                 if ($salt && $mode2) {
3362                         return "MODE2:" . hash('sha256', $salt . $pass);
3363                 } else if ($salt) {
3364                         return "SHA1X:" . sha1("$salt:$pass");
3365                 } else {
3366                         return "SHA1:" . sha1($pass);
3367                 }
3368         } // function encrypt_password
3369
3370         function load_filters($feed_id, $owner_uid, $action_id = false) {
3371                 $filters = array();
3372
3373                 $cat_id = (int)getFeedCategory($feed_id);
3374
3375                 $result = db_query("SELECT * FROM ttrss_filters2 WHERE
3376                         owner_uid = $owner_uid AND enabled = true ORDER BY order_id, title");
3377
3378                 $check_cats = join(",", array_merge(
3379                         getParentCategories($cat_id, $owner_uid),
3380                         array($cat_id)));
3381
3382                 while ($line = db_fetch_assoc($result)) {
3383                         $filter_id = $line["id"];
3384
3385                         $result2 = db_query("SELECT
3386                                 r.reg_exp, r.inverse, r.feed_id, r.cat_id, r.cat_filter, t.name AS type_name
3387                                 FROM ttrss_filters2_rules AS r,
3388                                 ttrss_filter_types AS t
3389                                 WHERE
3390                                         (cat_id IS NULL OR cat_id IN ($check_cats)) AND
3391                                         (feed_id IS NULL OR feed_id = '$feed_id') AND
3392                                         filter_type = t.id AND filter_id = '$filter_id'");
3393
3394                         $rules = array();
3395                         $actions = array();
3396
3397                         while ($rule_line = db_fetch_assoc($result2)) {
3398 #                               print_r($rule_line);
3399
3400                                 $rule = array();
3401                                 $rule["reg_exp"] = $rule_line["reg_exp"];
3402                                 $rule["type"] = $rule_line["type_name"];
3403                                 $rule["inverse"] = sql_bool_to_bool($rule_line["inverse"]);
3404
3405                                 array_push($rules, $rule);
3406                         }
3407
3408                         $result2 = db_query("SELECT a.action_param,t.name AS type_name
3409                                 FROM ttrss_filters2_actions AS a,
3410                                 ttrss_filter_actions AS t
3411                                 WHERE
3412                                         action_id = t.id AND filter_id = '$filter_id'");
3413
3414                         while ($action_line = db_fetch_assoc($result2)) {
3415 #                               print_r($action_line);
3416
3417                                 $action = array();
3418                                 $action["type"] = $action_line["type_name"];
3419                                 $action["param"] = $action_line["action_param"];
3420
3421                                 array_push($actions, $action);
3422                         }
3423
3424
3425                         $filter = array();
3426                         $filter["match_any_rule"] = sql_bool_to_bool($line["match_any_rule"]);
3427                         $filter["inverse"] = sql_bool_to_bool($line["inverse"]);
3428                         $filter["rules"] = $rules;
3429                         $filter["actions"] = $actions;
3430
3431                         if (count($rules) > 0 && count($actions) > 0) {
3432                                 array_push($filters, $filter);
3433                         }
3434                 }
3435
3436                 return $filters;
3437         }
3438
3439         function get_score_pic($score) {
3440                 if ($score > 100) {
3441                         return "score_high.png";
3442                 } else if ($score > 0) {
3443                         return "score_half_high.png";
3444                 } else if ($score < -100) {
3445                         return "score_low.png";
3446                 } else if ($score < 0) {
3447                         return "score_half_low.png";
3448                 } else {
3449                         return "score_neutral.png";
3450                 }
3451         }
3452
3453         function feed_has_icon($id) {
3454                 return is_file(ICONS_DIR . "/$id.ico") && filesize(ICONS_DIR . "/$id.ico") > 0;
3455         }
3456
3457         function init_plugins() {
3458                 PluginHost::getInstance()->load(PLUGINS, PluginHost::KIND_ALL);
3459
3460                 return true;
3461         }
3462
3463         function format_tags_string($tags, $id) {
3464                 if (!is_array($tags) || count($tags) == 0) {
3465                         return __("no tags");
3466                 } else {
3467                         $maxtags = min(5, count($tags));
3468
3469                         for ($i = 0; $i < $maxtags; $i++) {
3470                                 $tags_str .= "<a class=\"tag\" href=\"#\" onclick=\"viewfeed('".$tags[$i]."')\">" . $tags[$i] . "</a>, ";
3471                         }
3472
3473                         $tags_str = mb_substr($tags_str, 0, mb_strlen($tags_str)-2);
3474
3475                         if (count($tags) > $maxtags)
3476                                 $tags_str .= ", &hellip;";
3477
3478                         return $tags_str;
3479                 }
3480         }
3481
3482         function format_article_labels($labels, $id) {
3483
3484                 if (!is_array($labels)) return '';
3485
3486                 $labels_str = "";
3487
3488                 foreach ($labels as $l) {
3489                         $labels_str .= sprintf("<span class='hlLabelRef'
3490                                 style='color : %s; background-color : %s'>%s</span>",
3491                                         $l[2], $l[3], $l[1]);
3492                         }
3493
3494                 return $labels_str;
3495
3496         }
3497
3498         function format_article_note($id, $note, $allow_edit = true) {
3499
3500                 $str = "<div class='articleNote'        onclick=\"editArticleNote($id)\">
3501                         <div class='noteEdit' onclick=\"editArticleNote($id)\">".
3502                         ($allow_edit ? __('(edit note)') : "")."</div>$note</div>";
3503
3504                 return $str;
3505         }
3506
3507
3508         function get_feed_category($feed_cat, $parent_cat_id = false) {
3509                 if ($parent_cat_id) {
3510                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3511                         $parent_insert = "'$parent_cat_id'";
3512                 } else {
3513                         $parent_qpart = "parent_cat IS NULL";
3514                         $parent_insert = "NULL";
3515                 }
3516
3517                 $result = db_query(
3518                         "SELECT id FROM ttrss_feed_categories
3519                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3520
3521                 if (db_num_rows($result) == 0) {
3522                         return false;
3523                 } else {
3524                         return db_fetch_result($result, 0, "id");
3525                 }
3526         }
3527
3528         function add_feed_category($feed_cat, $parent_cat_id = false) {
3529
3530                 if (!$feed_cat) return false;
3531
3532                 db_query("BEGIN");
3533
3534                 if ($parent_cat_id) {
3535                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3536                         $parent_insert = "'$parent_cat_id'";
3537                 } else {
3538                         $parent_qpart = "parent_cat IS NULL";
3539                         $parent_insert = "NULL";
3540                 }
3541
3542                 $feed_cat = mb_substr($feed_cat, 0, 250);
3543
3544                 $result = db_query(
3545                         "SELECT id FROM ttrss_feed_categories
3546                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3547
3548                 if (db_num_rows($result) == 0) {
3549
3550                         $result = db_query(
3551                                 "INSERT INTO ttrss_feed_categories (owner_uid,title,parent_cat)
3552                                 VALUES ('".$_SESSION["uid"]."', '$feed_cat', $parent_insert)");
3553
3554                         db_query("COMMIT");
3555
3556                         return true;
3557                 }
3558
3559                 return false;
3560         }
3561
3562         function getArticleFeed($id) {
3563                 $result = db_query("SELECT feed_id FROM ttrss_user_entries
3564                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
3565
3566                 if (db_num_rows($result) != 0) {
3567                         return db_fetch_result($result, 0, "feed_id");
3568                 } else {
3569                         return 0;
3570                 }
3571         }
3572
3573         /**
3574          * Fixes incomplete URLs by prepending "http://".
3575          * Also replaces feed:// with http://, and
3576          * prepends a trailing slash if the url is a domain name only.
3577          *
3578          * @param string $url Possibly incomplete URL
3579          *
3580          * @return string Fixed URL.
3581          */
3582         function fix_url($url) {
3583                 if (strpos($url, '://') === false) {
3584                         $url = 'http://' . $url;
3585                 } else if (substr($url, 0, 5) == 'feed:') {
3586                         $url = 'http:' . substr($url, 5);
3587                 }
3588
3589                 //prepend slash if the URL has no slash in it
3590                 // "http://www.example" -> "http://www.example/"
3591                 if (strpos($url, '/', strpos($url, ':') + 3) === false) {
3592                         $url .= '/';
3593                 }
3594
3595                 if ($url != "http:///")
3596                         return $url;
3597                 else
3598                         return '';
3599         }
3600
3601         function validate_feed_url($url) {
3602                 $parts = parse_url($url);
3603
3604                 return ($parts['scheme'] == 'http' || $parts['scheme'] == 'feed' || $parts['scheme'] == 'https');
3605
3606         }
3607
3608         function get_article_enclosures($id) {
3609
3610                 $query = "SELECT * FROM ttrss_enclosures
3611                         WHERE post_id = '$id' AND content_url != ''";
3612
3613                 $rv = array();
3614
3615                 $result = db_query($query);
3616
3617                 if (db_num_rows($result) > 0) {
3618                         while ($line = db_fetch_assoc($result)) {
3619                                 array_push($rv, $line);
3620                         }
3621                 }
3622
3623                 return $rv;
3624         }
3625
3626         function save_email_address($email) {
3627                 // FIXME: implement persistent storage of emails
3628
3629                 if (!$_SESSION['stored_emails'])
3630                         $_SESSION['stored_emails'] = array();
3631
3632                 if (!in_array($email, $_SESSION['stored_emails']))
3633                         array_push($_SESSION['stored_emails'], $email);
3634         }
3635
3636
3637         function get_feed_access_key($feed_id, $is_cat, $owner_uid = false) {
3638
3639                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3640
3641                 $sql_is_cat = bool_to_sql_bool($is_cat);
3642
3643                 $result = db_query("SELECT access_key FROM ttrss_access_keys
3644                         WHERE feed_id = '$feed_id'      AND is_cat = $sql_is_cat
3645                         AND owner_uid = " . $owner_uid);
3646
3647                 if (db_num_rows($result) == 1) {
3648                         return db_fetch_result($result, 0, "access_key");
3649                 } else {
3650                         $key = db_escape_string(sha1(uniqid(rand(), true)));
3651
3652                         $result = db_query("INSERT INTO ttrss_access_keys
3653                                 (access_key, feed_id, is_cat, owner_uid)
3654                                 VALUES ('$key', '$feed_id', $sql_is_cat, '$owner_uid')");
3655
3656                         return $key;
3657                 }
3658                 return false;
3659         }
3660
3661         function get_feeds_from_html($url, $content)
3662         {
3663                 $url     = fix_url($url);
3664                 $baseUrl = substr($url, 0, strrpos($url, '/') + 1);
3665
3666                 libxml_use_internal_errors(true);
3667
3668                 $doc = new DOMDocument();
3669                 $doc->loadHTML($content);
3670                 $xpath = new DOMXPath($doc);
3671                 $entries = $xpath->query('/html/head/link[@rel="alternate"]');
3672                 $feedUrls = array();
3673                 foreach ($entries as $entry) {
3674                         if ($entry->hasAttribute('href')) {
3675                                 $title = $entry->getAttribute('title');
3676                                 if ($title == '') {
3677                                         $title = $entry->getAttribute('type');
3678                                 }
3679                                 $feedUrl = rewrite_relative_url(
3680                                         $baseUrl, $entry->getAttribute('href')
3681                                 );
3682                                 $feedUrls[$feedUrl] = $title;
3683                         }
3684                 }
3685                 return $feedUrls;
3686         }
3687
3688         function is_html($content) {
3689                 return preg_match("/<html|DOCTYPE html/i", substr($content, 0, 20)) !== 0;
3690         }
3691
3692         function url_is_html($url, $login = false, $pass = false) {
3693                 return is_html(fetch_file_contents($url, false, $login, $pass));
3694         }
3695
3696         function print_label_select($name, $value, $attributes = "") {
3697
3698                 $result = db_query("SELECT caption FROM ttrss_labels2
3699                         WHERE owner_uid = '".$_SESSION["uid"]."' ORDER BY caption");
3700
3701                 print "<select default=\"$value\" name=\"" . htmlspecialchars($name) .
3702                         "\" $attributes onchange=\"labelSelectOnChange(this)\" >";
3703
3704                 while ($line = db_fetch_assoc($result)) {
3705
3706                         $issel = ($line["caption"] == $value) ? "selected=\"1\"" : "";
3707
3708                         print "<option value=\"".htmlspecialchars($line["caption"])."\"
3709                                 $issel>" . htmlspecialchars($line["caption"]) . "</option>";
3710
3711                 }
3712
3713 #               print "<option value=\"ADD_LABEL\">" .__("Add label...") . "</option>";
3714
3715                 print "</select>";
3716
3717
3718         }
3719
3720         function format_article_enclosures($id, $always_display_enclosures,
3721                                         $article_content, $hide_images = false) {
3722
3723                 $result = get_article_enclosures($id);
3724                 $rv = '';
3725
3726                 if (count($result) > 0) {
3727
3728                         $entries_html = array();
3729                         $entries = array();
3730                         $entries_inline = array();
3731
3732                         foreach ($result as $line) {
3733
3734                                 $url = $line["content_url"];
3735                                 $ctype = $line["content_type"];
3736
3737                                 if (!$ctype) $ctype = __("unknown type");
3738
3739                                 $filename = substr($url, strrpos($url, "/")+1);
3740
3741                                 $player = format_inline_player($url, $ctype);
3742
3743                                 if ($player) array_push($entries_inline, $player);
3744
3745 #                               $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
3746 #                                       $filename . " (" . $ctype . ")" . "</a>";
3747
3748                                 $entry = "<div onclick=\"window.open('".htmlspecialchars($url)."')\"
3749                                         dojoType=\"dijit.MenuItem\">$filename ($ctype)</div>";
3750
3751                                 array_push($entries_html, $entry);
3752
3753                                 $entry = array();
3754
3755                                 $entry["type"] = $ctype;
3756                                 $entry["filename"] = $filename;
3757                                 $entry["url"] = $url;
3758
3759                                 array_push($entries, $entry);
3760                         }
3761
3762                         if ($_SESSION['uid'] && !get_pref("STRIP_IMAGES") && !$_SESSION["bw_limit"]) {
3763                                 if ($always_display_enclosures ||
3764                                                         !preg_match("/<img/i", $article_content)) {
3765
3766                                         foreach ($entries as $entry) {
3767
3768                                                 if (preg_match("/image/", $entry["type"]) ||
3769                                                                 preg_match("/\.(jpg|png|gif|bmp)/i", $entry["filename"])) {
3770
3771                                                                 if (!$hide_images) {
3772                                                                         $rv .= "<p><img
3773                                                                         alt=\"".htmlspecialchars($entry["filename"])."\"
3774                                                                         src=\"" .htmlspecialchars($entry["url"]) . "\"/></p>";
3775                                                                 } else {
3776                                                                         $rv .= "<p><a target=\"_blank\"
3777                                                                         href=\"".htmlspecialchars($entry["url"])."\"
3778                                                                         >" .htmlspecialchars($entry["url"]) . "</a></p>";
3779
3780                                                                 }
3781                                                 }
3782                                         }
3783                                 }
3784                         }
3785
3786                         if (count($entries_inline) > 0) {
3787                                 $rv .= "<hr clear='both'/>";
3788                                 foreach ($entries_inline as $entry) { $rv .= $entry; };
3789                                 $rv .= "<hr clear='both'/>";
3790                         }
3791
3792                         $rv .= "<select class=\"attachments\" onchange=\"openSelectedAttachment(this)\">".
3793                                 "<option value=''>" . __('Attachments')."</option>";
3794
3795                         foreach ($entries as $entry) {
3796                                 $rv .= "<option value=\"".htmlspecialchars($entry["url"])."\">" . htmlspecialchars($entry["filename"]) . "</option>";
3797
3798                         };
3799
3800                         $rv .= "</select>";
3801                 }
3802
3803                 return $rv;
3804         }
3805
3806         function getLastArticleId() {
3807                 $result = db_query("SELECT MAX(ref_id) AS id FROM ttrss_user_entries
3808                         WHERE owner_uid = " . $_SESSION["uid"]);
3809
3810                 if (db_num_rows($result) == 1) {
3811                         return db_fetch_result($result, 0, "id");
3812                 } else {
3813                         return -1;
3814                 }
3815         }
3816
3817         function build_url($parts) {
3818                 return $parts['scheme'] . "://" . $parts['host'] . $parts['path'];
3819         }
3820
3821         /**
3822          * Converts a (possibly) relative URL to a absolute one.
3823          *
3824          * @param string $url     Base URL (i.e. from where the document is)
3825          * @param string $rel_url Possibly relative URL in the document
3826          *
3827          * @return string Absolute URL
3828          */
3829         function rewrite_relative_url($url, $rel_url) {
3830                 if (strpos($rel_url, ":") !== false) {
3831                         return $rel_url;
3832                 } else if (strpos($rel_url, "://") !== false) {
3833                         return $rel_url;
3834                 } else if (strpos($rel_url, "//") === 0) {
3835                         # protocol-relative URL (rare but they exist)
3836                         return $rel_url;
3837                 } else if (strpos($rel_url, "/") === 0)
3838                 {
3839                         $parts = parse_url($url);
3840                         $parts['path'] = $rel_url;
3841
3842                         return build_url($parts);
3843
3844                 } else {
3845                         $parts = parse_url($url);
3846                         if (!isset($parts['path'])) {
3847                                 $parts['path'] = '/';
3848                         }
3849                         $dir = $parts['path'];
3850                         if (substr($dir, -1) !== '/') {
3851                                 $dir = dirname($parts['path']);
3852                                 $dir !== '/' && $dir .= '/';
3853                         }
3854                         $parts['path'] = $dir . $rel_url;
3855
3856                         return build_url($parts);
3857                 }
3858         }
3859
3860         function sphinx_search($query, $offset = 0, $limit = 30) {
3861                 require_once 'lib/sphinxapi.php';
3862
3863                 $sphinxClient = new SphinxClient();
3864
3865                 $sphinxpair = explode(":", SPHINX_SERVER, 2);
3866
3867                 $sphinxClient->SetServer($sphinxpair[0], (int)$sphinxpair[1]);
3868                 $sphinxClient->SetConnectTimeout(1);
3869
3870                 $sphinxClient->SetFieldWeights(array('title' => 70, 'content' => 30,
3871                         'feed_title' => 20));
3872
3873                 $sphinxClient->SetMatchMode(SPH_MATCH_EXTENDED2);
3874                 $sphinxClient->SetRankingMode(SPH_RANK_PROXIMITY_BM25);
3875                 $sphinxClient->SetLimits($offset, $limit, 1000);
3876                 $sphinxClient->SetArrayResult(false);
3877                 $sphinxClient->SetFilter('owner_uid', array($_SESSION['uid']));
3878
3879                 $result = $sphinxClient->Query($query, SPHINX_INDEX);
3880
3881                 $ids = array();
3882
3883                 if (is_array($result['matches'])) {
3884                         foreach (array_keys($result['matches']) as $int_id) {
3885                                 $ref_id = $result['matches'][$int_id]['attrs']['ref_id'];
3886                                 array_push($ids, $ref_id);
3887                         }
3888                 }
3889
3890                 return $ids;
3891         }
3892
3893         function cleanup_tags($days = 14, $limit = 1000) {
3894
3895                 if (DB_TYPE == "pgsql") {
3896                         $interval_query = "date_updated < NOW() - INTERVAL '$days days'";
3897                 } else if (DB_TYPE == "mysql") {
3898                         $interval_query = "date_updated < DATE_SUB(NOW(), INTERVAL $days DAY)";
3899                 }
3900
3901                 $tags_deleted = 0;
3902
3903                 while ($limit > 0) {
3904                         $limit_part = 500;
3905
3906                         $query = "SELECT ttrss_tags.id AS id
3907                                 FROM ttrss_tags, ttrss_user_entries, ttrss_entries
3908                                 WHERE post_int_id = int_id AND $interval_query AND
3909                                 ref_id = ttrss_entries.id AND tag_cache != '' LIMIT $limit_part";
3910
3911                         $result = db_query($query);
3912
3913                         $ids = array();
3914
3915                         while ($line = db_fetch_assoc($result)) {
3916                                 array_push($ids, $line['id']);
3917                         }
3918
3919                         if (count($ids) > 0) {
3920                                 $ids = join(",", $ids);
3921
3922                                 $tmp_result = db_query("DELETE FROM ttrss_tags WHERE id IN ($ids)");
3923                                 $tags_deleted += db_affected_rows($tmp_result);
3924                         } else {
3925                                 break;
3926                         }
3927
3928                         $limit -= $limit_part;
3929                 }
3930
3931                 return $tags_deleted;
3932         }
3933
3934         function print_user_stylesheet() {
3935                 $value = get_pref('USER_STYLESHEET');
3936
3937                 if ($value) {
3938                         print "<style type=\"text/css\">";
3939                         print str_replace("<br/>", "\n", $value);
3940                         print "</style>";
3941                 }
3942
3943         }
3944
3945         function rewrite_urls($html) {
3946                 libxml_use_internal_errors(true);
3947
3948                 $charset_hack = '<head>
3949                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
3950                 </head>';
3951
3952                 $doc = new DOMDocument();
3953                 $doc->loadHTML($charset_hack . $html);
3954                 $xpath = new DOMXPath($doc);
3955
3956                 $entries = $xpath->query('//*/text()');
3957
3958                 foreach ($entries as $entry) {
3959                         if (strstr($entry->wholeText, "://") !== false) {
3960                                 $text = preg_replace("/((?<!=.)((http|https|ftp)+):\/\/[^ ,!]+)/i",
3961                                         "<a target=\"_blank\" href=\"\\1\">\\1</a>", $entry->wholeText);
3962
3963                                 if ($text != $entry->wholeText) {
3964                                         $cdoc = new DOMDocument();
3965                                         $cdoc->loadHTML($charset_hack . $text);
3966
3967
3968                                         foreach ($cdoc->childNodes as $cnode) {
3969                                                 $cnode = $doc->importNode($cnode, true);
3970
3971                                                 if ($cnode) {
3972                                                         $entry->parentNode->insertBefore($cnode);
3973                                                 }
3974                                         }
3975
3976                                         $entry->parentNode->removeChild($entry);
3977
3978                                 }
3979                         }
3980                 }
3981
3982                 $node = $doc->getElementsByTagName('body')->item(0);
3983
3984                 // http://tt-rss.org/forum/viewtopic.php?f=1&t=970
3985                 if ($node)
3986                         return $doc->saveXML($node);
3987                 else
3988                         return $html;
3989         }
3990
3991         function filter_to_sql($filter, $owner_uid) {
3992                 $query = array();
3993
3994                 if (DB_TYPE == "pgsql")
3995                         $reg_qpart = "~";
3996                 else
3997                         $reg_qpart = "REGEXP";
3998
3999                 foreach ($filter["rules"] AS $rule) {
4000                         $rule['reg_exp'] = str_replace('/', '\/', $rule["reg_exp"]);
4001                         $regexp_valid = preg_match('/' . $rule['reg_exp'] . '/',
4002                                 $rule['reg_exp']) !== FALSE;
4003
4004                         if ($regexp_valid) {
4005
4006                                 $rule['reg_exp'] = db_escape_string($rule['reg_exp']);
4007
4008                                         switch ($rule["type"]) {
4009                                         case "title":
4010                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
4011                                                         $rule['reg_exp'] . "')";
4012                                                 break;
4013                                         case "content":
4014                                                 $qpart = "LOWER(ttrss_entries.content) $reg_qpart LOWER('".
4015                                                         $rule['reg_exp'] . "')";
4016                                                 break;
4017                                         case "both":
4018                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
4019                                                         $rule['reg_exp'] . "') OR LOWER(" .
4020                                                         "ttrss_entries.content) $reg_qpart LOWER('" . $rule['reg_exp'] . "')";
4021                                                 break;
4022                                         case "tag":
4023                                                 $qpart = "LOWER(ttrss_user_entries.tag_cache) $reg_qpart LOWER('".
4024                                                         $rule['reg_exp'] . "')";
4025                                                 break;
4026                                         case "link":
4027                                                 $qpart = "LOWER(ttrss_entries.link) $reg_qpart LOWER('".
4028                                                         $rule['reg_exp'] . "')";
4029                                                 break;
4030                                         case "author":
4031                                                 $qpart = "LOWER(ttrss_entries.author) $reg_qpart LOWER('".
4032                                                         $rule['reg_exp'] . "')";
4033                                                 break;
4034                                 }
4035
4036                                 if (isset($rule['inverse'])) $qpart = "NOT ($qpart)";
4037
4038                                 if (isset($rule["feed_id"]) && $rule["feed_id"] > 0) {
4039                                         $qpart .= " AND feed_id = " . db_escape_string($rule["feed_id"]);
4040                                 }
4041
4042                                 if (isset($rule["cat_id"])) {
4043
4044                                         if ($rule["cat_id"] > 0) {
4045                                                 $children = getChildCategories($rule["cat_id"], $owner_uid);
4046                                                 array_push($children, $rule["cat_id"]);
4047
4048                                                 $children = join(",", $children);
4049
4050                                                 $cat_qpart = "cat_id IN ($children)";
4051                                         } else {
4052                                                 $cat_qpart = "cat_id IS NULL";
4053                                         }
4054
4055                                         $qpart .= " AND $cat_qpart";
4056                                 }
4057
4058                                 array_push($query, "($qpart)");
4059
4060                         }
4061                 }
4062
4063                 if (count($query) > 0) {
4064                         $fullquery = "(" . join($filter["match_any_rule"] ? "OR" : "AND", $query) . ")";
4065                 } else {
4066                         $fullquery = "(false)";
4067                 }
4068
4069                 if ($filter['inverse']) $fullquery = "(NOT $fullquery)";
4070
4071                 return $fullquery;
4072         }
4073
4074         if (!function_exists('gzdecode')) {
4075                 function gzdecode($string) { // no support for 2nd argument
4076                         return file_get_contents('compress.zlib://data:who/cares;base64,'.
4077                                 base64_encode($string));
4078                 }
4079         }
4080
4081         function get_random_bytes($length) {
4082                 if (function_exists('openssl_random_pseudo_bytes')) {
4083                         return openssl_random_pseudo_bytes($length);
4084                 } else {
4085                         $output = "";
4086
4087                         for ($i = 0; $i < $length; $i++)
4088                                 $output .= chr(mt_rand(0, 255));
4089
4090                         return $output;
4091                 }
4092         }
4093
4094         function read_stdin() {
4095                 $fp = fopen("php://stdin", "r");
4096
4097                 if ($fp) {
4098                         $line = trim(fgets($fp));
4099                         fclose($fp);
4100                         return $line;
4101                 }
4102
4103                 return null;
4104         }
4105
4106         function tmpdirname($path, $prefix) {
4107                 // Use PHP's tmpfile function to create a temporary
4108                 // directory name. Delete the file and keep the name.
4109                 $tempname = tempnam($path,$prefix);
4110                 if (!$tempname)
4111                         return false;
4112
4113                 if (!unlink($tempname))
4114                         return false;
4115
4116        return $tempname;
4117         }
4118
4119         function getFeedCategory($feed) {
4120                 $result = db_query("SELECT cat_id FROM ttrss_feeds
4121                         WHERE id = '$feed'");
4122
4123                 if (db_num_rows($result) > 0) {
4124                         return db_fetch_result($result, 0, "cat_id");
4125                 } else {
4126                         return false;
4127                 }
4128
4129         }
4130
4131         function implements_interface($class, $interface) {
4132                 return in_array($interface, class_implements($class));
4133         }
4134
4135         function geturl($url, $depth = 0){
4136
4137                 if ($depth == 20) return $url;
4138
4139                 if (!function_exists('curl_init'))
4140                         return user_error('CURL Must be installed for geturl function to work. Ask your host to enable it or uncomment extension=php_curl.dll in php.ini', E_USER_ERROR);
4141
4142                 $curl = curl_init();
4143                 $header[0] = "Accept: text/xml,application/xml,application/xhtml+xml,";
4144                 $header[0] .= "text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5";
4145                 $header[] = "Cache-Control: max-age=0";
4146                 $header[] = "Connection: keep-alive";
4147                 $header[] = "Keep-Alive: 300";
4148                 $header[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
4149                 $header[] = "Accept-Language: en-us,en;q=0.5";
4150                 $header[] = "Pragma: ";
4151
4152                 curl_setopt($curl, CURLOPT_URL, $url);
4153                 curl_setopt($curl, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 5.1; rv:5.0) Gecko/20100101 Firefox/5.0 Firefox/5.0');
4154                 curl_setopt($curl, CURLOPT_HTTPHEADER, $header);
4155                 curl_setopt($curl, CURLOPT_HEADER, true);
4156                 curl_setopt($curl, CURLOPT_REFERER, $url);
4157                 curl_setopt($curl, CURLOPT_ENCODING, 'gzip,deflate');
4158                 curl_setopt($curl, CURLOPT_AUTOREFERER, true);
4159                 curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
4160                 //curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true); //CURLOPT_FOLLOWLOCATION Disabled...
4161                 curl_setopt($curl, CURLOPT_TIMEOUT, 60);
4162                 curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);
4163
4164                 if ((OPENSSL_VERSION_NUMBER >= 0x0090808f) && (OPENSSL_VERSION_NUMBER < 0x10000000)) {
4165                         curl_setopt($curl, CURLOPT_SSLVERSION, 3);
4166                 }
4167
4168                 $html = curl_exec($curl);
4169
4170                 $status = curl_getinfo($curl);
4171
4172                 if($status['http_code']!=200){
4173                         if($status['http_code'] == 301 || $status['http_code'] == 302) {
4174                                 curl_close($curl);
4175                                 list($header) = explode("\r\n\r\n", $html, 2);
4176                                 $matches = array();
4177                                 preg_match("/(Location:|URI:)[^(\n)]*/", $header, $matches);
4178                                 $url = trim(str_replace($matches[1],"",$matches[0]));
4179                                 $url_parsed = parse_url($url);
4180                                 return (isset($url_parsed))? geturl($url, $depth + 1):'';
4181                         }
4182
4183                         global $fetch_last_error;
4184
4185                         $fetch_last_error = curl_errno($curl) . " " . curl_error($curl);
4186                         curl_close($curl);
4187
4188                         $oline='';
4189                         foreach($status as $key=>$eline){$oline.='['.$key.']'.$eline.' ';}
4190                         $line =$oline." \r\n ".$url."\r\n-----------------\r\n";
4191 #                       $handle = @fopen('./curl.error.log', 'a');
4192 #                       fwrite($handle, $line);
4193                         return FALSE;
4194                 }
4195                 curl_close($curl);
4196                 return $url;
4197         }
4198
4199         function get_minified_js($files) {
4200                 require_once 'lib/jshrink/Minifier.php';
4201
4202                 $rv = '';
4203
4204                 foreach ($files as $js) {
4205                         if (!isset($_GET['debug'])) {
4206                                 $cached_file = CACHE_DIR . "/js/".basename($js).".js";
4207
4208                                 if (file_exists($cached_file) &&
4209                                                 is_readable($cached_file) &&
4210                                                 filemtime($cached_file) >= filemtime("js/$js.js")) {
4211
4212                                         $rv .= file_get_contents($cached_file);
4213
4214                                 } else {
4215                                         $minified = JShrink\Minifier::minify(file_get_contents("js/$js.js"));
4216                                         file_put_contents($cached_file, $minified);
4217                                         $rv .= $minified;
4218                                 }
4219                         } else {
4220                                 $rv .= file_get_contents("js/$js.js");
4221                         }
4222                 }
4223
4224                 return $rv;
4225         }
4226
4227         function stylesheet_tag($filename) {
4228                 $timestamp = filemtime($filename);
4229
4230                 echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"$filename?$timestamp\"/>\n";
4231         }
4232
4233         function javascript_tag($filename) {
4234                 $query = "";
4235
4236                 if (!(strpos($filename, "?") === FALSE)) {
4237                         $query = substr($filename, strpos($filename, "?")+1);
4238                         $filename = substr($filename, 0, strpos($filename, "?"));
4239                 }
4240
4241                 $timestamp = filemtime($filename);
4242
4243                 if ($query) $timestamp .= "&$query";
4244
4245                 echo "<script type=\"text/javascript\" charset=\"utf-8\" src=\"$filename?$timestamp\"></script>\n";
4246         }
4247
4248         function calculate_dep_timestamp() {
4249                 $files = array_merge(glob("js/*.js"), glob("css/*.css"));
4250
4251                 $max_ts = -1;
4252
4253                 foreach ($files as $file) {
4254                         if (filemtime($file) > $max_ts) $max_ts = filemtime($file);
4255                 }
4256
4257                 return $max_ts;
4258         }
4259
4260         function T_js_decl($s1, $s2) {
4261                 if ($s1 && $s2) {
4262                         $s1 = preg_replace("/\n/", "", $s1);
4263                         $s2 = preg_replace("/\n/", "", $s2);
4264
4265                         $s1 = preg_replace("/\"/", "\\\"", $s1);
4266                         $s2 = preg_replace("/\"/", "\\\"", $s2);
4267
4268                         return "T_messages[\"$s1\"] = \"$s2\";\n";
4269                 }
4270         }
4271
4272         function init_js_translations() {
4273
4274         print 'var T_messages = new Object();
4275
4276                 function __(msg) {
4277                         if (T_messages[msg]) {
4278                                 return T_messages[msg];
4279                         } else {
4280                                 return msg;
4281                         }
4282                 }
4283
4284                 function ngettext(msg1, msg2, n) {
4285                         return __((parseInt(n) > 1) ? msg2 : msg1);
4286                 }';
4287
4288                 $l10n = _get_reader();
4289
4290                 for ($i = 0; $i < $l10n->total; $i++) {
4291                         $orig = $l10n->get_original_string($i);
4292                         if(strpos($orig, "\000") !== FALSE) { // Plural forms
4293                                 $key = explode(chr(0), $orig);
4294                                 print T_js_decl($key[0], _ngettext($key[0], $key[1], 1)); // Singular
4295                                 print T_js_decl($key[1], _ngettext($key[0], $key[1], 2)); // Plural
4296                         } else {
4297                                 $translation = __($orig);
4298                                 print T_js_decl($orig, $translation);
4299                         }
4300                 }
4301         }
4302
4303         function label_to_feed_id($label) {
4304                 return LABEL_BASE_INDEX - 1 - abs($label);
4305         }
4306
4307         function feed_to_label_id($feed) {
4308                 return LABEL_BASE_INDEX - 1 + abs($feed);
4309         }
4310
4311         function format_libxml_error($error) {
4312                 return T_sprintf("LibXML error %s at line %d (column %d): %s",
4313                                 $error->code, $error->line, $error->column,
4314                                 $error->message);
4315         }
4316
4317 ?>