]> git.wh0rd.org - tt-rss.git/blobdiff - functions.php
optional login form/http basic auth support
[tt-rss.git] / functions.php
index aac7322329470bdd6a93be500c2a53f61e78fbed..67575cbb24f72da990b1efdafaa081f952efd5da 100644 (file)
@@ -1,49 +1,87 @@
 <?
+       session_start();
+
        require_once 'config.php';
+       require_once 'db-prefs.php';
+
+//     $_SESSION["uid"] = PLACEHOLDER_UID; // FIXME: placeholder
+//     $_SESSION["name"] = PLACEHOLDER_NAME;
 
        define('MAGPIE_OUTPUT_ENCODING', 'UTF-8');
 
-       function purge_old_posts() {
-               if (PURGE_OLD_DAYS) {
-                       $result = pg_query("DELETE FROM ttrss_entries WHERE
-                               date_entered < NOW() - INTERVAL '30 days'");
-               }
+       function purge_old_posts($link) {
+
+               $user_id = $_SESSION["uid"];
+       
+               $result = db_query($link, "SELECT id,purge_interval FROM ttrss_feeds 
+                       WHERE owner_uid = '$user_id'");
+
+               while ($line = db_fetch_assoc($result)) {
+
+                       $feed_id = $line["id"];
+                       $purge_interval = $line["purge_interval"];
+
+                       if ($purge_interval == 0) $purge_interval = get_pref($link, 'PURGE_OLD_DAYS');
+
+                       if ($purge_interval > 0) {
+
+                               if (DB_TYPE == "pgsql") {
+                                       db_query($link, "DELETE FROM ttrss_entries WHERE
+                                               marked = false AND feed_id = '$feed_id' AND
+                                               date_entered < NOW() - INTERVAL '$purge_interval days'");
+                               } else {
+                                       db_query($link, "DELETE FROM ttrss_entries WHERE
+                                               marked = false AND feed_id = '$feed_id' AND
+                                               date_entered < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)");
+                               }
+                       }
+               }       
        }
 
        function update_all_feeds($link, $fetch) {
 
                if (WEB_DEMO_MODE) return;
 
-               pg_query("BEGIN");
+               if (get_pref($link, 'DAEMON_REFRESH_ONLY')) {
+                       if (!$_GET["daemon"]) {
+                               return;
+                       }
+               }
 
-               if (!$fetch) {
+               db_query($link, "BEGIN");
 
-                       $result = pg_query($link, "SELECT feed_url,id FROM ttrss_feeds WHERE
-                               last_updated is null OR title = '' OR
-                               EXTRACT(EPOCH FROM NOW()) - EXTRACT(EPOCH FROM last_updated) > " . 
-                               MIN_UPDATE_TIME);
+               $user_id = $_SESSION["uid"];
 
-               } else {
+               $result = db_query($link, "SELECT feed_url,id,
+                       substring(last_updated,1,19) as last_updated,
+                       update_interval FROM ttrss_feeds WHERE owner_uid = '$user_id'");
 
-                       $result = pg_query($link, "SELECT feed_url,id FROM ttrss_feeds");
-               }
+               while ($line = db_fetch_assoc($result)) {
+                       $upd_intl = $line["update_interval"];
 
-               while ($line = pg_fetch_assoc($result)) {
-                       update_rss_feed($link, $line["feed_url"], $line["id"]);
+                       if (!$upd_intl || $upd_intl == 0) {
+                               $upd_intl = get_pref($link, 'DEFAULT_UPDATE_INTERVAL');
+                       }
+
+                       if (!$line["last_updated"] || 
+                               time() - strtotime($line["last_updated"]) > ($upd_intl * 60)) {
+
+                               update_rss_feed($link, $line["feed_url"], $line["id"]);
+                       }
                }
 
-               purge_old_posts();
+               purge_old_posts($link);
 
-               pg_query("COMMIT");
+               db_query($link, "COMMIT");
 
        }
 
-       function check_feed_favicon($feed_url, $feed) {
+       function check_feed_favicon($feed_url, $feed, $link) {
                $feed_url = str_replace("http://", "", $feed_url);
                $feed_url = preg_replace("/\/.*$/", "", $feed_url);
                
                $icon_url = "http://$feed_url/favicon.ico";
-               $icon_file = ICONS_DIR . "/$feed.ico";
+               $icon_file = get_pref($link, 'ICONS_DIR') . "/$feed.ico";
 
                if (!file_exists($icon_file)) {
                                
 
                if (WEB_DEMO_MODE) return;
 
+               $feed = db_escape_string($feed);
+
                error_reporting(0);
                $rss = fetch_rss($feed_url);
+
                error_reporting (E_ERROR | E_WARNING | E_PARSE);
 
-               pg_query("BEGIN");
+               db_query($link, "BEGIN");
+
+               $feed = db_escape_string($feed);
 
-               $feed = pg_escape_string($feed);
-       
                if ($rss) {
 
-                       if (ENABLE_FEED_ICONS) {        
-                               check_feed_favicon($feed_url, $feed);
+                       if (get_pref($link, 'ENABLE_FEED_ICONS')) {     
+                               check_feed_favicon($feed_url, $feed, $link);
                        }
                
-                       $result = pg_query("SELECT title,icon_url FROM ttrss_feeds WHERE id = '$feed'");
+                       $result = db_query($link, "SELECT title,icon_url FROM ttrss_feeds WHERE id = '$feed'");
 
-                       $registered_title = pg_fetch_result($result, 0, "title");
-                       $orig_icon_url = pg_fetch_result($result, 0, "icon_url");
+                       $registered_title = db_fetch_result($result, 0, "title");
+                       $orig_icon_url = db_fetch_result($result, 0, "icon_url");
 
                        if (!$registered_title) {
-                               $feed_title = $rss->channel["title"];
-                               pg_query("UPDATE ttrss_feeds SET title = '$feed_title' WHERE id = '$feed'");
+                               $feed_title = db_escape_string($rss->channel["title"]);
+                               db_query($link, "UPDATE ttrss_feeds SET title = '$feed_title' WHERE id = '$feed'");
                        }
 
 //                     print "I: " . $rss->channel["image"]["url"];
                        $icon_url = $rss->image["url"];
 
                        if ($icon_url && !$orig_icon_url) {
-                               $icon_url = pg_escape_string($icon_url);
-                               pg_query("UPDATE ttrss_feeds SET icon_url = '$icon_url' WHERE id = '$feed'");
+                               $icon_url = db_escape_string($icon_url);
+                               db_query($link, "UPDATE ttrss_feeds SET icon_url = '$icon_url' WHERE id = '$feed'");
+                       }
+
+
+                       $filters = array();
+
+                       $result = db_query($link, "SELECT reg_exp,
+                               (SELECT name FROM ttrss_filter_types
+                                       WHERE id = filter_type) as name
+                               FROM ttrss_filters WHERE owner_uid = ".$_SESSION["uid"]);
+
+                       while ($line = db_fetch_assoc($result)) {
+                               if (!$filters[$line["name"]]) $filters[$line["name"]] = array();
+                               array_push($filters[$line["name"]], $line["reg_exp"]);
                        }
 
                        foreach ($rss->items as $item) {
                                if (!$entry_guid) $entry_guid = $item["link"];
 
                                if (!$entry_guid) continue;
-       
+
                                $entry_timestamp = "";
 
                                $rss_2_date = $item['pubdate'];
                                if (!$entry_title) continue;
                                if (!$entry_link) continue;
 
-                               $entry_content = $item["description"];
-                               if (!$entry_content) $entry_content = $item["content:escaped"];
+                               $entry_content = $item["content:escaped"];
+
+                               if (!$entry_content) $entry_content = $item["content:encoded"];
                                if (!$entry_content) $entry_content = $item["content"];
+                               if (!$entry_content) $entry_content = $item["description"];
 
-                               if (!$entry_content) continue;
+//                             if (!$entry_content) continue;
+
+                               // WTF
+                               if (is_array($entry_content)) {
+                                       $entry_content = $entry_content["encoded"];
+                                       if (!$entry_content) $entry_content = $entry_content["escaped"];
+                               }
+
+//                             print_r($item);
+//                             print_r($entry_content);
 
                                $content_hash = "SHA1:" . sha1(strip_tags($entry_content));
 
                                $entry_comments = $item["comments"];
 
-                               $result = pg_query($link, "
+                               $entry_guid = db_escape_string($entry_guid);
+
+                               $result = db_query($link, "
                                        SELECT 
                                                id,last_read,no_orig_date,title,feed_id,content_hash,
-                                               EXTRACT(EPOCH FROM updated) as updated_timestamp
+                                               substring(updated,1,19) as updated
                                        FROM
                                                ttrss_entries 
                                        WHERE
-                                               guid = '$entry_guid'");
+                                               guid = '$entry_guid' AND owner_uid = " . $_SESSION["uid"]);
+
+//                             print db_num_rows($result) . "$entry_guid<br/>";
 
-                               if (pg_num_rows($result) == 0) {
+                               if (db_num_rows($result) == 0) {
 
-                                       $entry_guid = pg_escape_string($entry_guid);
-                                       $entry_content = pg_escape_string($entry_content);
-                                       $entry_title = pg_escape_string($entry_title);
-                                       $entry_link = pg_escape_string($entry_link);
-                                       $entry_comments = pg_escape_string($entry_comments);
+                                       error_reporting(0);
+                                       if (is_filtered($entry_title, $entry_content, $filters)) {
+                                               continue;
+                                       }
+                                       error_reporting (E_ERROR | E_WARNING | E_PARSE);
+
+                                       //$entry_guid = db_escape_string($entry_guid);
+                                       $entry_content = db_escape_string($entry_content);
+                                       $entry_title = db_escape_string($entry_title);
+                                       $entry_link = db_escape_string($entry_link);
+                                       $entry_comments = db_escape_string($entry_comments);
 
                                        $query = "INSERT 
                                                INTO ttrss_entries 
                                                        content, 
                                                        content_hash,
                                                        feed_id, 
-                                                       comments,
-                                                       no_orig_date) 
+                                                       comments,                                                       
+                                                       no_orig_date,
+                                                       date_entered,
+                                                       owner_uid) 
                                                VALUES
                                                        ('$entry_title', 
                                                        '$entry_guid', 
                                                        '$content_hash',
                                                        '$feed', 
                                                        '$entry_comments',
-                                                       $no_orig_date)";
+                                                       $no_orig_date,
+                                                       NOW(),".$_SESSION["uid"].")";
 
-                                       $result = pg_query($link, $query);
+                                       $result = db_query($link, $query);
 
                                } else {
 
-                                       $orig_entry_id = pg_fetch_result($result, 0, "id");                     
-                                       $orig_feed_id = pg_fetch_result($result, 0, "feed_id");
+                                       $orig_entry_id = db_fetch_result($result, 0, "id");                     
+                                       $orig_feed_id = db_fetch_result($result, 0, "feed_id");
+
+//                                     print "OED: $orig_entry_id; OID: $orig_feed_id ; FID: $feed<br>";
 
                                        if ($orig_feed_id != $feed) {
-//                                             print "<p>Update from different feed ($orig_feed_id, $feed): $entry_guid [$entry_title]";
+//                                             print "<p>GUID $entry_guid: update from different feed ($orig_feed_id, $feed): $entry_guid [$entry_title]";
                                                continue;
                                        }
+
+                                       $entry_is_modified = false;
                                        
-                                       $orig_timestamp = pg_fetch_result($result, 0, "updated_timestamp");
-                                       $orig_content_hash = pg_fetch_result($result, 0, "content_hash");
-                                       $orig_last_read = pg_fetch_result($result, 0, "last_read");     
-                                       $orig_no_orig_date = pg_fetch_result($result, 0, "no_orig_date");
-                                       $orig_title = pg_fetch_result($result, 0, "title");
+                                       $orig_timestamp = strtotime(db_fetch_result($result, 0, "updated"));
+                                               
+                                       $orig_content_hash = db_fetch_result($result, 0, "content_hash");
+                                       $orig_last_read = db_fetch_result($result, 0, "last_read");     
+                                       $orig_no_orig_date = db_fetch_result($result, 0, "no_orig_date");
+                                       $orig_title = db_fetch_result($result, 0, "title");
 
                                        $last_read_qpart = "";
 
-//                                     if ("$orig_title" != "$entry_title") {
-//                                             $last_read_qpart = 'last_read = null,';
-//                                     }
+                                       if ($orig_content_hash != $content_hash) {
+//                                             print "$orig_content_hash :: $content_hash<br>";
+
+                                               if (get_pref($link, 'UPDATE_POST_ON_CHECKSUM_CHANGE')) {
+                                                       $last_read_qpart = 'last_read = null,';
+                                               }
+                                               $entry_is_modified = true;                                              
+                                       }
+
+                                       if ($orig_title != $entry_title) {
+                                               $entry_is_modified = true;
+                                       }
+
+                                       if ($orig_timestamp != $entry_timestamp && !$orig_no_orig_date) {
+                                               $entry_is_modified = true;
+                                       }
+
+                                       if ($entry_is_modified) {
+
+//                                             print "$entry_guid Modified!<br>";
+
+                                               $entry_comments = db_escape_string($entry_comments);
+                                               $entry_content = db_escape_string($entry_content);
+                                               $entry_title = db_escape_string($entry_title);                                  
+                                               $entry_link = db_escape_string($entry_link);
+
+                                               $query = "UPDATE ttrss_entries 
+                                                       SET 
+                                                               $last_read_qpart 
+                                                               title = '$entry_title',
+                                                               link = '$entry_link', 
+                                                               updated = '$entry_timestamp_fmt',
+                                                               content = '$entry_content',
+                                                               comments = '$entry_comments',
+                                                               content_hash = '$content_hash'
+                                                       WHERE
+                                                               id = '$orig_entry_id'";
+
+                                               $result = db_query($link, $query);
+                                       }
+                               }
+
+                               /* taaaags */
+                               // <a href="http://technorati.com/tag/Xorg" rel="tag">Xorg</a>, //
+
+                               $entry_tags = null;
+
+                               preg_match_all("/<a.*?rel=.tag.*?>([^>]+)<\/a>/i", $entry_content,
+                                       $entry_tags);
+
+                               $entry_tags = $entry_tags[1];
+
+                               if (count($entry_tags) > 0) {
                                
-                                       if (UPDATE_POST_ON_CHECKSUM_CHANGE && 
-                                                       $orig_content_hash != $content_hash) {
-                                               $last_read_qpart = 'last_read = null,';
+                                       $result = db_query($link, "SELECT id FROM ttrss_entries 
+                                               WHERE guid = '$entry_guid'");
+
+                                       if (!$result || db_num_rows($result) != 1) {
+                                               return;
                                        }
 
-//                                     if (!$no_orig_date && $orig_timestamp < $entry_timestamp) {
-//                                             $last_read_qpart = 'last_read = null,';
-//                                     }
+                                       $entry_id = db_fetch_result($result, 0, "id");
+                               
+                                       foreach ($entry_tags as $tag) {
+                                               $tag = db_escape_string(strtolower($tag));
+
+                                               $result = db_query($link, "SELECT id FROM ttrss_tags            
+                                                       WHERE tag_name = '$tag' AND post_id = '$entry_id' AND owner_uid = ".$_SESSION["uid"]." LIMIT 1");
 
-                                       $entry_comments = pg_escape_string($entry_comments);
-                                       $entry_content = pg_escape_string($entry_content);
-                                       $entry_title = pg_escape_string($entry_title);                                  
-                                       $entry_link = pg_escape_string($entry_link);
-                       
-                                       $query = "UPDATE ttrss_entries 
-                                               SET 
-                                                       $last_read_qpart 
-                                                       title = '$entry_title',
-                                                       link = '$entry_link', 
-                                                       updated = '$entry_timestamp_fmt',
-                                                       content = '$entry_content',
-                                                       comments = '$entry_comments',
-                                                       content_hash = '$content_hash'
-                                               WHERE
-                                                       id = '$orig_entry_id'";
-
-                                       $result = pg_query($link, $query);
+                                               if ($result && db_num_rows($result) == 0) {
+                                                       
+//                                                     print "tagging $entry_id as $tag<br>";
 
+                                                       db_query($link, "INSERT INTO ttrss_tags (owner_uid,tag_name,post_id)
+                                                               VALUES ('".$_SESSION["uid"]."','$tag', '$entry_id')");
+                                               }                                                       
+                                       }
                                }
                        }
 
-                       if ($result) {
-                               $result = pg_query($link, "UPDATE ttrss_feeds SET last_updated = NOW()");
+                       db_query($link, "UPDATE ttrss_feeds 
+                               SET last_updated = NOW(), last_error = '' WHERE id = '$feed'");
+
+               } else {
+                       $error_msg = db_escape_string(magpie_error());
+                       db_query($link, 
+                               "UPDATE ttrss_feeds SET last_error = '$error_msg', 
+                                       last_updated = NOW() WHERE id = '$feed'");
+               }
+
+               db_query($link, "COMMIT");
+
+       }
+
+       function print_select($id, $default, $values, $attributes = "") {
+               print "<select id=\"$id\" $attributes>";
+               foreach ($values as $v) {
+                       if ($v == $default)
+                               $sel = " selected";
+                        else
+                               $sel = "";
+                       
+                       print "<option$sel>$v</option>";
+               }
+               print "</select>";
+       }
+
+       function is_filtered($title, $content, $filters) {
+
+               if ($filters["title"]) {
+                       foreach ($filters["title"] as $title_filter) {                  
+                               if (preg_match("/$title_filter/i", $title)) 
+                                       return true;
+                       }
+               }
+
+               if ($filters["content"]) {
+                       foreach ($filters["content"] as $content_filter) {                      
+                               if (preg_match("/$content_filter/i", $content)) 
+                                       return true;
                        }
+               }
 
+               if ($filters["both"]) {
+                       foreach ($filters["both"] as $filter) {                 
+                               if (preg_match("/$filter/i", $title) || preg_match("/$filter/i", $content)) 
+                                       return true;
+                       }
                }
 
-               pg_query("COMMIT");
+               return false;
+       }
+
+       function printFeedEntry($feed_id, $class, $feed_title, $unread, $icon_file, $link) {
 
+               if (file_exists($icon_file) && filesize($icon_file) > 0) {
+                               $feed_icon = "<img src=\"$icon_file\">";
+               } else {
+                       $feed_icon = "<img src=\"images/blank_icon.gif\">";
+               }
+
+               $feed = "<a href=\"javascript:viewfeed('$feed_id', 0);\">$feed_title</a>";
+
+               print "<li id=\"FEEDR-$feed_id\" class=\"$class\">";
+               if (get_pref($link, 'ENABLE_FEED_ICONS')) {
+                       print "$feed_icon";
+               }
+
+               print "<span id=\"FEEDN-$feed_id\">$feed</span>";
+
+               if ($unread != 0) {
+                       $fctr_class = "";
+               } else {
+                       $fctr_class = "class=\"invisible\"";
+               }
+
+               print "<span $fctr_class id=\"FEEDCTR-$feed_id\">
+                        (<span id=\"FEEDU-$feed_id\">$unread</span>)</span>";
+               
+               print "</li>";
+
+       }
+
+       function getmicrotime() {
+               list($usec, $sec) = explode(" ",microtime());
+               return ((float)$usec + (float)$sec);
        }
 
+       function print_radio($id, $default, $values, $attributes = "") {
+               foreach ($values as $v) {
+               
+                       if ($v == $default)
+                               $sel = "checked";
+                        else
+                               $sel = "";
+
+                       if ($v == "Yes") {
+                               $sel .= " value=\"1\"";
+                       } else {
+                               $sel .= " value=\"0\"";
+                       }
+                       
+                       print "<input type=\"radio\" $sel $attributes name=\"$id\">&nbsp;$v&nbsp;";
+
+               }
+       }
+
+       function initialize_user_prefs($link, $uid) {
+
+               $uid = db_escape_string($uid);
+
+               db_query($link, "BEGIN");
+
+               $result = db_query($link, "SELECT pref_name,def_value FROM ttrss_prefs");
+               
+               $u_result = db_query($link, "SELECT pref_name 
+                       FROM ttrss_user_prefs WHERE owner_uid = '$uid'");
+
+               $active_prefs = array();
+
+               while ($line = db_fetch_assoc($u_result)) {
+                       array_push($active_prefs, $line["pref_name"]);                  
+               }
+
+               while ($line = db_fetch_assoc($result)) {
+                       if (array_search($line["pref_name"], $active_prefs) === FALSE) {
+//                             print "adding " . $line["pref_name"] . "<br>";
+
+                               db_query($link, "INSERT INTO ttrss_user_prefs
+                                       (owner_uid,pref_name,value) VALUES 
+                                       ('$uid', '".$line["pref_name"]."','".$line["def_value"]."')");
+
+                       }
+               }
+
+               db_query($link, "COMMIT");
+
+       }
+       
+       function authenticate_user($link, $login, $password) {
+
+               $pwd_hash = 'SHA1:' . sha1($password);
+
+               $result = db_query($link, "SELECT id,login FROM ttrss_users WHERE 
+                       login = '$login' AND (pwd_hash = '$password' OR pwd_hash = '$pwd_hash')");
+
+               if (db_num_rows($result) == 1) {
+                       $_SESSION["uid"] = db_fetch_result($result, 0, "id");
+                       $_SESSION["name"] = db_fetch_result($result, 0, "login");
+
+                       return true;
+               }
+
+               return false;
+
+       }
+
+       function http_authenticate_user($link) {
+
+               if (!$_SERVER['PHP_AUTH_USER']) {
+
+                       header('WWW-Authenticate: Basic realm="Tiny Tiny RSS"');
+                       header('HTTP/1.0 401 Unauthorized');
+                       print "<h1>401 Unathorized</h1>";
+                       exit;
+                       
+               } else {
+
+                       $login = db_escape_string($_SERVER['PHP_AUTH_USER']);
+                       $password = db_escape_string($_SERVER['PHP_AUTH_PW']);
+
+                       return authenticate_user($link, $login, $password);
+               }               
+       }
 
 ?>