<?php
class Import_Export extends Plugin implements IHandler {
-
- private $link;
private $host;
function init($host) {
- $this->link = $host->get_link();
$this->host = $host;
$host->add_hook($host::HOOK_PREFS_TAB, $this);
- $host->add_command("xml-import", "USER FILE: import articles from XML", $this);
+ $host->add_command("xml-import", "import articles from XML", $this, ":", "FILE");
}
function about() {
}
function xml_import($args) {
- array_shift($args);
-
- $username = $args[count($args) - 2];
- $filename = $args[count($args) - 1];
- if (!$username) {
- print "error: please specify username.\n";
- return;
- }
+ $filename = $args['xml_import'];
if (!is_file($filename)) {
print "error: input filename ($filename) doesn't exist.\n";
return;
}
+ _debug("please enter your username:");
+
+ $username = trim(read_stdin());
+
_debug("importing $filename for user $username...\n");
- $result = db_query($this->link, "SELECT id FROM ttrss_users WHERE login = '$username'");
+ $sth = $this->pdo->prepare("SELECT id FROM ttrss_users WHERE login = ?");
+ $sth->execute($username);
+
+ if ($row = $sth->fetch()) {
+ $owner_uid = $row['id'];
- if (db_num_rows($result) == 0) {
+ $this->perform_data_import($filename, $owner_uid);
+ } else {
print "error: could not find user $username.\n";
return;
}
-
- $owner_uid = db_fetch_result($result, 0, "id");
-
- $this->perform_data_import($this->link, $filename, $owner_uid);
- }
-
- function save() {
- $example_value = db_escape_string($this->link, $_POST["example_value"]);
-
- echo "Value set to $example_value (not really)";
}
function get_prefs_js() {
print "<div dojoType=\"dijit.layout.AccordionPane\" title=\"".__('Import and export')."\">";
- print "<h3>" . __("Article archive") . "</h3>";
+ print_notice(__("You can export and import your Starred and Archived articles for safekeeping or when migrating between tt-rss instances of same version."));
- print "<p>" . __("You can export and import your Starred and Archived articles for safekeeping or when migrating between tt-rss instances.") . "</p>";
+ print "<p>";
print "<button dojoType=\"dijit.form.Button\" onclick=\"return exportData()\">".
__('Export my data')."</button> ";
print "<form name=\"import_form\" style='display : block' target=\"data_upload_iframe\"
enctype=\"multipart/form-data\" method=\"POST\"
action=\"backend.php\">
- <input id=\"export_file\" name=\"export_file\" type=\"file\">
+ <label class=\"dijitButton\">".__("Choose file...")."
+ <input style=\"display : none\" id=\"export_file\" name=\"export_file\" type=\"file\">
+ </label>
<input type=\"hidden\" name=\"op\" value=\"pluginhandler\">
<input type=\"hidden\" name=\"plugin\" value=\"import_export\">
<input type=\"hidden\" name=\"method\" value=\"dataimport\">
<button dojoType=\"dijit.form.Button\" onclick=\"return importData();\" type=\"submit\">" .
__('Import') . "</button>";
+ print "</form>";
+
+ print "</p>";
print "</div>"; # pane
}
return in_array($method, array("exportget"));
}
+ /**
+ * @SuppressWarnings(PHPMD.UnusedFormalParameter)
+ */
function before($method) {
return $_SESSION["uid"] != false;
}
return true;
}
+ /**
+ * @SuppressWarnings(unused)
+ */
function exportget() {
$exportname = CACHE_DIR . "/export/" .
sha1($_SESSION['uid'] . $_SESSION['login']) . ".xml";
if (file_exists($exportname)) {
header("Content-type: text/xml");
+ $timestamp_suffix = date("Y-m-d", filemtime($exportname));
+
if (function_exists('gzencode')) {
- header("Content-Disposition: attachment; filename=TinyTinyRSS_exported.xml.gz");
+ header("Content-Disposition: attachment; filename=TinyTinyRSS_exported_${timestamp_suffix}.xml.gz");
echo gzencode(file_get_contents($exportname));
} else {
- header("Content-Disposition: attachment; filename=TinyTinyRSS_exported.xml");
+ header("Content-Disposition: attachment; filename=TinyTinyRSS_exported_${timestamp_suffix}.xml");
echo file_get_contents($exportname);
}
} else {
}
function exportrun() {
- $offset = (int) db_escape_string($this->link, $_REQUEST['offset']);
+ $offset = (int) $_REQUEST['offset'];
$exported = 0;
$limit = 250;
if ($offset < 10000 && is_writable(CACHE_DIR . "/export")) {
- $result = db_query($this->link, "SELECT
+
+ $sth = $this->pdo->prepare("SELECT
ttrss_entries.guid,
ttrss_entries.title,
content,
WHERE
(marked = true OR feed_id IS NULL) AND
ref_id = ttrss_entries.id AND
- ttrss_user_entries.owner_uid = " . $_SESSION['uid'] . "
+ ttrss_user_entries.owner_uid = ?
ORDER BY ttrss_entries.id LIMIT $limit OFFSET $offset");
+ $sth->execute([$_SESSION['uid']]);
+
$exportname = sha1($_SESSION['uid'] . $_SESSION['login']);
if ($offset == 0) {
if ($fp) {
- while ($line = db_fetch_assoc($result)) {
- fputs($fp, "<article>");
+ $exported = 0;
+ while ($line = $sth->fetch(PDO::FETCH_ASSOC)) {
+ ++$exported;
+
+ fputs($fp, "<article>\n");
foreach ($line as $k => $v) {
- fputs($fp, "<$k><![CDATA[$v]]></$k>");
+
+ fputs($fp, " ");
+
+ if (is_bool($v))
+ $v = (int) $v;
+
+ if (!$v || is_numeric($v)) {
+ fputs($fp, "<$k>$v</$k>\n");
+ } else {
+ $v = str_replace("]]>", "]]]]><![CDATA[>", $v);
+ fputs($fp, "<$k><![CDATA[$v]]></$k>\n");
+ }
}
- fputs($fp, "</article>");
+ fputs($fp, "</article>\n");
}
- $exported = db_num_rows($result);
-
if ($exported < $limit && $exported > 0) {
fputs($fp, "</articles>");
}
print json_encode(array("exported" => $exported));
}
- function perform_data_import($link, $filename, $owner_uid) {
+ function perform_data_import($filename, $owner_uid) {
$num_imported = 0;
$num_processed = 0;
$num_feeds_created = 0;
- $doc = @DOMDocument::load($filename);
+ libxml_disable_entity_loader(false);
+
+ $doc = new DOMDocument();
- if (!$doc) {
+ if (!$doc_loaded = @$doc->load($filename)) {
$contents = file_get_contents($filename);
if ($contents) {
}
if ($data)
- $doc = DOMDocument::loadXML($data);
+ $doc_loaded = $doc->loadXML($data);
}
- if ($doc) {
+ libxml_disable_entity_loader(true);
+
+ if ($doc_loaded) {
$xpath = new DOMXpath($doc);
$article = array();
foreach ($article_node->childNodes as $child) {
- if ($child->nodeName != 'label_cache')
- $article[$child->nodeName] = db_escape_string($this->link, $child->nodeValue);
- else
+ if ($child->nodeName == 'content' || $child->nodeName == 'label_cache') {
$article[$child->nodeName] = $child->nodeValue;
+ } else {
+ $article[$child->nodeName] = clean($child->nodeValue);
+ }
}
//print_r($article);
++$num_processed;
- //db_query($link, "BEGIN");
+ $this->pdo->beginTransaction();
//print 'GUID:' . $article['guid'] . "\n";
- $result = db_query($link, "SELECT id FROM ttrss_entries
- WHERE guid = '".$article['guid']."'");
+ $sth = $this->pdo->prepare("SELECT id FROM ttrss_entries
+ WHERE guid = ?");
+ $sth->execute([$article['guid']]);
- if (db_num_rows($result) == 0) {
-
- $result = db_query($link,
+ if ($row = $sth->fetch()) {
+ $ref_id = $row['id'];
+ } else {
+ $sth = $this->pdo->prepare(
"INSERT INTO ttrss_entries
(title,
guid,
num_comments,
author)
VALUES
- ('".$article['title']."',
- '".$article['guid']."',
- '".$article['link']."',
- '".$article['updated']."',
- '".$article['content']."',
- '".sha1($article['content'])."',
+ (?, ?, ?, ?, ?, ?,
false,
NOW(),
NOW(),
'0',
'')");
- $result = db_query($link, "SELECT id FROM ttrss_entries
- WHERE guid = '".$article['guid']."'");
-
- if (db_num_rows($result) != 0) {
- $ref_id = db_fetch_result($result, 0, "id");
+ $sth->execute([
+ $article['title'],
+ $article['guid'],
+ $article['link'],
+ $article['updated'],
+ $article['content'],
+ sha1($article['content'])
+ ]);
+
+ $sth = $this->pdo->prepare("SELECT id FROM ttrss_entries
+ WHERE guid = ?");
+ $sth->execute([$article['guid']]);
+
+ if ($row = $sth->fetch()) {
+ $ref_id = $row['id'];
}
-
- } else {
- $ref_id = db_fetch_result($result, 0, "id");
}
//print "Got ref ID: $ref_id\n";
if ($ref_id) {
- $feed_url = $article['feed_url'];
- $feed_title = $article['feed_title'];
+ $feed = NULL;
- $feed = 'NULL';
+ if ($article['feed_url'] && $article['feed_title']) {
- if ($feed_url && $feed_title) {
- $result = db_query($link, "SELECT id FROM ttrss_feeds
- WHERE feed_url = '$feed_url' AND owner_uid = '$owner_uid'");
+ $sth = $this->pdo->prepare("SELECT id FROM ttrss_feeds
+ WHERE feed_url = ? AND owner_uid = ?");
+ $sth->execute([$article['feed_url'], $owner_uid]);
- if (db_num_rows($result) != 0) {
- $feed = db_fetch_result($result, 0, "id");
+ if ($row = $sth->fetch()) {
+ $feed = $row['id'];
} else {
// try autocreating feed in Uncategorized...
- $result = db_query($link, "INSERT INTO ttrss_feeds (owner_uid,
- feed_url, title) VALUES ($owner_uid, '$feed_url', '$feed_title')");
+ $sth = $this->pdo->prepare("INSERT INTO ttrss_feeds (owner_uid,
+ feed_url, title) VALUES (?, ?, ?)");
+ $res = $sth->execute([$owner_uid, $article['feed_url'], $article['feed_title']]);
- $result = db_query($link, "SELECT id FROM ttrss_feeds
- WHERE feed_url = '$feed_url' AND owner_uid = '$owner_uid'");
+ if ($res) {
+ $sth = $this->pdo->prepare("SELECT id FROM ttrss_feeds
+ WHERE feed_url = ? AND owner_uid = ?");
+ $sth->execute([$article['feed_url'], $owner_uid]);
- if (db_num_rows($result) != 0) {
- ++$num_feeds_created;
+ if ($row = $sth->fetch()) {
+ ++$num_feeds_created;
- $feed = db_fetch_result($result, 0, "id");
+ $feed = $row['id'];
+ }
}
}
}
- if ($feed != 'NULL')
- $feed_qpart = "feed_id = $feed";
+ if ($feed)
+ $feed_qpart = "feed_id = " . (int) $feed;
else
$feed_qpart = "feed_id IS NULL";
//print "$ref_id / $feed / " . $article['title'] . "\n";
- $result = db_query($link, "SELECT int_id FROM ttrss_user_entries
- WHERE ref_id = '$ref_id' AND owner_uid = '$owner_uid' AND $feed_qpart");
+ $sth = $this->pdo->prepare("SELECT int_id FROM ttrss_user_entries
+ WHERE ref_id = ? AND owner_uid = ? AND $feed_qpart");
+ $sth->execute([$ref_id, $owner_uid]);
- if (db_num_rows($result) == 0) {
+ if (!$sth->fetch()) {
- $marked = bool_to_sql_bool(sql_bool_to_bool($article['marked']));
- $published = bool_to_sql_bool(sql_bool_to_bool($article['published']));
$score = (int) $article['score'];
$tag_cache = $article['tag_cache'];
- $label_cache = db_escape_string($this->link, $article['label_cache']);
$note = $article['note'];
//print "Importing " . $article['title'] . "<br/>";
++$num_imported;
- $result = db_query($link,
+ $sth = $this->pdo->prepare(
"INSERT INTO ttrss_user_entries
(ref_id, owner_uid, feed_id, unread, last_read, marked,
published, score, tag_cache, label_cache, uuid, note)
- VALUES ($ref_id, $owner_uid, $feed, false,
- NULL, $marked, $published, $score, '$tag_cache',
- '$label_cache', '', '$note')");
-
- $label_cache = json_decode($label_cache, true);
-
- if (is_array($label_cache) && $label_cache["no-labels"] != 1) {
- foreach ($label_cache as $label) {
-
- label_create($link, $label[1],
- $label[2], $label[3], $owner_uid);
-
- label_add_article($link, $ref_id, $label[1], $owner_uid);
-
+ VALUES (?, ?, ?, false,
+ NULL, ?, ?, ?, ?, '', '', ?)");
+
+ $res = $sth->execute([
+ $ref_id,
+ $owner_uid,
+ $feed,
+ (int)sql_bool_to_bool($article['marked']),
+ (int)sql_bool_to_bool($article['published']),
+ $score,
+ $tag_cache,
+ $note]);
+
+ if ($res) {
+
+ $label_cache = json_decode($article['label_cache'], true);
+
+ if (is_array($label_cache) && $label_cache["no-labels"] != 1) {
+ foreach ($label_cache as $label) {
+ Labels::create($label[1],
+ $label[2], $label[3], $owner_uid);
+
+ Labels::add_article($ref_id, $label[1], $owner_uid);
+ }
}
}
-
- //db_query($link, "COMMIT");
}
}
+
+ $this->pdo->commit();
}
}
}
print "<p>" .
- T_sprintf("Finished: %d articles processed, %d imported, %d feeds created.",
- $num_processed, $num_imported, $num_feeds_created) .
+ __("Finished: ").
+ vsprintf(_ngettext("%d article processed, ", "%d articles processed, ", $num_processed), $num_processed).
+ vsprintf(_ngettext("%d imported, ", "%d imported, ", $num_imported), $num_imported).
+ vsprintf(_ngettext("%d feed created.", "%d feeds created.", $num_feeds_created), $num_feeds_created).
"</p>";
} else {
print "<div style='text-align : center'>";
- if (is_file($_FILES['export_file']['tmp_name'])) {
+ if ($_FILES['export_file']['error'] != 0) {
+ print_error(T_sprintf("Upload failed with error code %d (%s)",
+ $_FILES['export_file']['error'],
+ get_upload_error_message($_FILES['export_file']['error'])));
+ } else {
- $this->perform_data_import($this->link, $_FILES['export_file']['tmp_name'], $_SESSION['uid']);
+ if (is_uploaded_file($_FILES['export_file']['tmp_name'])) {
+ $tmp_file = tempnam(CACHE_DIR . '/upload', 'export');
- } else {
- print "<p>" . T_sprintf("Could not upload file. You might need to adjust upload_max_filesize
- in PHP.ini (current value = %s)", ini_get("upload_max_filesize")) . " or use CLI import tool.</p>";
+ $result = move_uploaded_file($_FILES['export_file']['tmp_name'],
+ $tmp_file);
+ if (!$result) {
+ print_error(__("Unable to move uploaded file."));
+ return;
+ }
+ } else {
+ print_error(__('Error: please upload OPML file.'));
+ return;
+ }
+
+ if (is_file($tmp_file)) {
+ $this->perform_data_import($tmp_file, $_SESSION['uid']);
+ unlink($tmp_file);
+ } else {
+ print_error(__('No file uploaded.'));
+ return;
+ }
}
print "<button dojoType=\"dijit.form.Button\"
}
+ function api_version() {
+ return 2;
+ }
}
-?>