X-Git-Url: https://git.wh0rd.org/?a=blobdiff_plain;f=classes%2Fpref%2Ffeeds.php;h=ab280a98e9a8eb67fd8c0d5e4d1659b5c0337a50;hb=fbff72e081e812926f89e608cf7af1b7d8c841cb;hp=e9b09829de40cd1e21d8ee8b70621e9808576bea;hpb=87d7e8507a4a41c4e0d7a4f2d54fe48f3a6f72cb;p=tt-rss.git

diff --git a/classes/pref/feeds.php b/classes/pref/feeds.php
old mode 100644
new mode 100755
index e9b09829..d6abe232
--- a/classes/pref/feeds.php
+++ b/classes/pref/feeds.php
@@ -1,9 +1,12 @@
 <?php
 class Pref_Feeds extends Handler_Protected {
+	public static $feed_languages = array("English", "Danish", "Dutch", "Finnish", "French", "German", "Hungarian", "Italian", "Norwegian",
+		"Portuguese", "Russian", "Spanish", "Swedish", "Turkish", "Simple");
 
 	function csrf_ignore($method) {
 		$csrf_ignored = array("index", "getfeedtree", "add", "editcats", "editfeed",
-			"savefeedorder", "uploadicon", "feedswitherrors", "inactivefeeds");
+			"savefeedorder", "uploadicon", "feedswitherrors", "inactivefeeds",
+			"batchsubscribe");
 
 		return array_search($method, $csrf_ignored) !== false;
 	}
@@ -14,34 +17,34 @@ class Pref_Feeds extends Handler_Protected {
 	}
 
 	function renamecat() {
-		$title = db_escape_string($_REQUEST['title']);
-		$id = db_escape_string($_REQUEST['id']);
+		$title = clean($_REQUEST['title']);
+		$id = clean($_REQUEST['id']);
 
 		if ($title) {
-			db_query($this->link, "UPDATE ttrss_feed_categories SET
-				title = '$title' WHERE id = '$id' AND owner_uid = " . $_SESSION["uid"]);
+			$sth = $this->pdo->prepare("UPDATE ttrss_feed_categories SET
+				title = ? WHERE id = ? AND owner_uid = ?");
+			$sth->execute([$title, $id, $_SESSION['uid']]);
 		}
-		return;
 	}
 
 	private function get_category_items($cat_id) {
 
-		if ($_REQUEST['mode'] != 2)
+		if (clean($_REQUEST['mode']) != 2)
 			$search = $_SESSION["prefs_feed_search"];
 		else
 			$search = "";
 
-		if ($search) $search_qpart = " AND LOWER(title) LIKE LOWER('%$search%')";
-
-		$show_empty_cats = $_REQUEST['mode'] != 2 && !$search &&
-			get_pref($this->link, '_PREFS_SHOW_EMPTY_CATS');
+		// first one is set by API
+		$show_empty_cats = clean($_REQUEST['force_show_empty']) ||
+			(clean($_REQUEST['mode']) != 2 && !$search);
 
 		$items = array();
 
-		$result = db_query($this->link, "SELECT id, title, collapsed FROM ttrss_feed_categories
-				WHERE owner_uid = " . $_SESSION["uid"] . " AND parent_cat = '$cat_id' ORDER BY order_id, title");
+		$sth = $this->pdo->prepare("SELECT id, title FROM ttrss_feed_categories
+				WHERE owner_uid = ? AND parent_cat = ? ORDER BY order_id, title");
+		$sth->execute([$_SESSION['uid'], $cat_id]);
 
-		while ($line = db_fetch_assoc($result)) {
+		while ($line = $sth->fetch()) {
 
 			$cat = array();
 			$cat['id'] = 'CAT:' . $line['id'];
@@ -49,37 +52,45 @@ class Pref_Feeds extends Handler_Protected {
 			$cat['name'] = $line['title'];
 			$cat['items'] = array();
 			$cat['checkbox'] = false;
-			$cat['hidden'] = sql_bool_to_bool($line['collapsed']);
 			$cat['type'] = 'category';
 			$cat['unread'] = 0;
 			$cat['child_unread'] = 0;
+			$cat['auxcounter'] = 0;
+			$cat['parent_id'] = $cat_id;
 
 			$cat['items'] = $this->get_category_items($line['id']);
 
-			$cat['param'] = T_sprintf('(%d feeds)', count($cat['items']));
+			$num_children = $this->calculate_children_count($cat);
+			$cat['param'] = vsprintf(_ngettext('(%d feed)', '(%d feeds)', (int) $num_children), $num_children);
 
-			if (count($cat['items']) > 0 || $show_empty_cats)
+			if ($num_children > 0 || $show_empty_cats)
 				array_push($items, $cat);
 
 		}
 
-		$feed_result = db_query($this->link, "SELECT id, title, last_error,
-			".SUBSTRING_FOR_DATE."(last_updated,1,19) AS last_updated
+		$fsth = $this->pdo->prepare("SELECT id, title, last_error,
+			".SUBSTRING_FOR_DATE."(last_updated,1,19) AS last_updated, update_interval
 			FROM ttrss_feeds
-			WHERE cat_id = '$cat_id' AND owner_uid = ".$_SESSION["uid"].
-			"$search_qpart ORDER BY order_id, title");
+			WHERE cat_id = :cat AND
+			owner_uid = :uid AND
+			(:search = '' OR (LOWER(title) LIKE :search OR LOWER(feed_url) LIKE :search))
+			ORDER BY order_id, title");
+
+		$fsth->execute([":cat" => $cat_id, ":uid" => $_SESSION['uid'], ":search" => $search ? "%$search%" : ""]);
 
-		while ($feed_line = db_fetch_assoc($feed_result)) {
+		while ($feed_line = $fsth->fetch()) {
 			$feed = array();
 			$feed['id'] = 'FEED:' . $feed_line['id'];
 			$feed['bare_id'] = (int)$feed_line['id'];
+			$feed['auxcounter'] = 0;
 			$feed['name'] = $feed_line['title'];
 			$feed['checkbox'] = false;
 			$feed['unread'] = 0;
 			$feed['error'] = $feed_line['last_error'];
-			$feed['icon'] = getFeedIcon($feed_line['id']);
-			$feed['param'] = make_local_datetime($this->link,
+			$feed['icon'] = Feeds::getFeedIcon($feed_line['id']);
+			$feed['param'] = make_local_datetime(
 				$feed_line['last_updated'], true);
+			$feed['updates_disabled'] = (int)($feed_line['update_interval'] < 0);
 
 			array_push($items, $feed);
 		}
@@ -88,27 +99,28 @@ class Pref_Feeds extends Handler_Protected {
 	}
 
 	function getfeedtree() {
+		print json_encode($this->makefeedtree());
+	}
+
+	function makefeedtree() {
 
-		if ($_REQUEST['mode'] != 2)
+		if (clean($_REQUEST['mode']) != 2)
 			$search = $_SESSION["prefs_feed_search"];
 		else
 			$search = "";
 
-		if ($search) $search_qpart = " AND LOWER(title) LIKE LOWER('%$search%')";
-
 		$root = array();
 		$root['id'] = 'root';
 		$root['name'] = __('Feeds');
 		$root['items'] = array();
 		$root['type'] = 'category';
 
-		$enable_cats = get_pref($this->link, 'ENABLE_FEED_CATS');
+		$enable_cats = get_pref('ENABLE_FEED_CATS');
 
-		if ($_REQUEST['mode'] == 2) {
+		if (clean($_REQUEST['mode']) == 2) {
 
 			if ($enable_cats) {
-				$cat_hidden = get_pref($this->link, "_COLLAPSED_SPECIAL");
-				$cat = $this->feedlist_init_cat(-1, $cat_hidden);
+				$cat = $this->feedlist_init_cat(-1);
 			} else {
 				$cat['items'] = array();
 			}
@@ -117,37 +129,62 @@ class Pref_Feeds extends Handler_Protected {
 				array_push($cat['items'], $this->feedlist_init_feed($i));
 			}
 
+			/* Plugin feeds for -1 */
+
+			$feeds = PluginHost::getInstance()->get_feeds(-1);
+
+			if ($feeds) {
+				foreach ($feeds as $feed) {
+					$feed_id = PluginHost::pfeed_to_feed_id($feed['id']);
+
+					$item = array();
+					$item['id'] = 'FEED:' . $feed_id;
+					$item['bare_id'] = (int)$feed_id;
+					$item['auxcounter'] = 0;
+					$item['name'] = $feed['title'];
+					$item['checkbox'] = false;
+					$item['error'] = '';
+					$item['icon'] = $feed['icon'];
+
+					$item['param'] = '';
+					$item['unread'] = 0; //$feed['sender']->get_unread($feed['id']);
+					$item['type'] = 'feed';
+
+					array_push($cat['items'], $item);
+				}
+			}
+
 			if ($enable_cats) {
 				array_push($root['items'], $cat);
 			} else {
 				$root['items'] = array_merge($root['items'], $cat['items']);
 			}
 
-			$result = db_query($this->link, "SELECT * FROM
-				ttrss_labels2 WHERE owner_uid = ".$_SESSION['uid']." ORDER by caption");
-
-			if (db_num_rows($result) > 0) {
+			$sth = $this->pdo->prepare("SELECT * FROM
+				ttrss_labels2 WHERE owner_uid = ? ORDER by caption");
+			$sth->execute([$_SESSION['uid']]);
 
-				if (get_pref($this->link, 'ENABLE_FEED_CATS')) {
-					$cat_hidden = get_pref($this->link, "_COLLAPSED_LABELS");
-					$cat = $this->feedlist_init_cat(-2, $cat_hidden);
-				} else {
-					$cat['items'] = array();
-				}
+			if (get_pref('ENABLE_FEED_CATS')) {
+				$cat = $this->feedlist_init_cat(-2);
+			} else {
+				$cat['items'] = array();
+			}
 
-				while ($line = db_fetch_assoc($result)) {
+			$num_labels = 0;
+			while ($line = $sth->fetch()) {
+				++$num_labels;
 
-					$label_id = -$line['id'] - 11;
-					$count = getFeedUnread($this->link, $label_id);
+				$label_id = Labels::label_to_feed_id($line['id']);
 
-					$feed = $this->feedlist_init_feed($label_id, false, $count);
+				$feed = $this->feedlist_init_feed($label_id, false, 0);
 
-					$feed['fg_color'] = $line['fg_color'];
-					$feed['bg_color'] = $line['bg_color'];
+				$feed['fg_color'] = $line['fg_color'];
+				$feed['bg_color'] = $line['bg_color'];
 
-					array_push($cat['items'], $feed);
-				}
+				array_push($cat['items'], $feed);
+			}
 
+			if ($num_labels) {
 				if ($enable_cats) {
 					array_push($root['items'], $cat);
 				} else {
@@ -157,29 +194,31 @@ class Pref_Feeds extends Handler_Protected {
 		}
 
 		if ($enable_cats) {
-			$show_empty_cats = $_REQUEST['mode'] != 2 && !$search &&
-				get_pref($this->link, '_PREFS_SHOW_EMPTY_CATS');
+			$show_empty_cats = clean($_REQUEST['force_show_empty']) ||
+				(clean($_REQUEST['mode']) != 2 && !$search);
 
-			$result = db_query($this->link, "SELECT id, title, collapsed FROM ttrss_feed_categories
-				WHERE owner_uid = " . $_SESSION["uid"] . " AND parent_cat IS NULL ORDER BY order_id, title");
+			$sth = $this->pdo->prepare("SELECT id, title FROM ttrss_feed_categories
+				WHERE owner_uid = ? AND parent_cat IS NULL ORDER BY order_id, title");
+			$sth->execute([$_SESSION['uid']]);
 
-			while ($line = db_fetch_assoc($result)) {
+			while ($line = $sth->fetch()) {
 				$cat = array();
 				$cat['id'] = 'CAT:' . $line['id'];
 				$cat['bare_id'] = (int)$line['id'];
+				$cat['auxcounter'] = 0;
 				$cat['name'] = $line['title'];
 				$cat['items'] = array();
 				$cat['checkbox'] = false;
-				$cat['hidden'] = sql_bool_to_bool($line['collapsed']);
 				$cat['type'] = 'category';
 				$cat['unread'] = 0;
 				$cat['child_unread'] = 0;
 
 				$cat['items'] = $this->get_category_items($line['id']);
 
-				$cat['param'] = T_sprintf('(%d feeds)', count($cat['items']));
+				$num_children = $this->calculate_children_count($cat);
+				$cat['param'] = vsprintf(_ngettext('(%d feed)', '(%d feeds)', (int) $num_children), $num_children);
 
-				if (count($cat['items']) > 0 || $show_empty_cats)
+				if ($num_children > 0 || $show_empty_cats)
 					array_push($root['items'], $cat);
 
 				$root['param'] += count($cat['items']);
@@ -190,126 +229,129 @@ class Pref_Feeds extends Handler_Protected {
 			$cat = array();
 			$cat['id'] = 'CAT:0';
 			$cat['bare_id'] = 0;
+			$cat['auxcounter'] = 0;
 			$cat['name'] = __("Uncategorized");
 			$cat['items'] = array();
-			$cat['hidden'] = get_pref($this->link, "_COLLAPSED_UNCAT");
 			$cat['type'] = 'category';
 			$cat['checkbox'] = false;
 			$cat['unread'] = 0;
 			$cat['child_unread'] = 0;
 
-			$feed_result = db_query($this->link, "SELECT id, title,last_error,
-				".SUBSTRING_FOR_DATE."(last_updated,1,19) AS last_updated
+			$fsth = $this->pdo->prepare("SELECT id, title,last_error,
+				".SUBSTRING_FOR_DATE."(last_updated,1,19) AS last_updated, update_interval
 				FROM ttrss_feeds
-				WHERE cat_id IS NULL AND owner_uid = ".$_SESSION["uid"].
-				"$search_qpart ORDER BY order_id, title");
+				WHERE cat_id IS NULL AND
+				owner_uid = :uid AND
+				(:search = '' OR (LOWER(title) LIKE :search OR LOWER(feed_url) LIKE :search))
+				ORDER BY order_id, title");
+			$fsth->execute([":uid" => $_SESSION['uid'], ":search" => $search ? "%$search%" : ""]);
 
-			while ($feed_line = db_fetch_assoc($feed_result)) {
+			while ($feed_line = $fsth->fetch()) {
 				$feed = array();
 				$feed['id'] = 'FEED:' . $feed_line['id'];
 				$feed['bare_id'] = (int)$feed_line['id'];
+				$feed['auxcounter'] = 0;
 				$feed['name'] = $feed_line['title'];
 				$feed['checkbox'] = false;
 				$feed['error'] = $feed_line['last_error'];
-				$feed['icon'] = getFeedIcon($feed_line['id']);
-				$feed['param'] = make_local_datetime($this->link,
+				$feed['icon'] = Feeds::getFeedIcon($feed_line['id']);
+				$feed['param'] = make_local_datetime(
 					$feed_line['last_updated'], true);
 				$feed['unread'] = 0;
 				$feed['type'] = 'feed';
+				$feed['updates_disabled'] = (int)($feed_line['update_interval'] < 0);
 
 				array_push($cat['items'], $feed);
 			}
 
-			$cat['param'] = T_sprintf('(%d feeds)', count($cat['items']));
+			$cat['param'] = vsprintf(_ngettext('(%d feed)', '(%d feeds)', count($cat['items'])), count($cat['items']));
 
 			if (count($cat['items']) > 0 || $show_empty_cats)
 				array_push($root['items'], $cat);
 
-			$root['param'] += count($cat['items']);
-			$root['param'] = T_sprintf('(%d feeds)', $root['param']);
+			$num_children = $this->calculate_children_count($root);
+			$root['param'] = vsprintf(_ngettext('(%d feed)', '(%d feeds)', (int) $num_children), $num_children);
 
 		} else {
-			$feed_result = db_query($this->link, "SELECT id, title, last_error,
-				".SUBSTRING_FOR_DATE."(last_updated,1,19) AS last_updated
+			$fsth = $this->pdo->prepare("SELECT id, title, last_error,
+				".SUBSTRING_FOR_DATE."(last_updated,1,19) AS last_updated, update_interval
 				FROM ttrss_feeds
-				WHERE owner_uid = ".$_SESSION["uid"].
-				"$search_qpart ORDER BY order_id, title");
+				WHERE owner_uid = :uid AND
+				(:search = '' OR (LOWER(title) LIKE :search OR LOWER(feed_url) LIKE :search))
+				ORDER BY order_id, title");
+			$fsth->execute([":uid" => $_SESSION['uid'], ":search" => $search ? "%$search%" : ""]);
 
-			while ($feed_line = db_fetch_assoc($feed_result)) {
+			while ($feed_line = $fsth->fetch()) {
 				$feed = array();
 				$feed['id'] = 'FEED:' . $feed_line['id'];
 				$feed['bare_id'] = (int)$feed_line['id'];
+				$feed['auxcounter'] = 0;
 				$feed['name'] = $feed_line['title'];
 				$feed['checkbox'] = false;
 				$feed['error'] = $feed_line['last_error'];
-				$feed['icon'] = getFeedIcon($feed_line['id']);
-				$feed['param'] = make_local_datetime($this->link,
+				$feed['icon'] = Feeds::getFeedIcon($feed_line['id']);
+				$feed['param'] = make_local_datetime(
 					$feed_line['last_updated'], true);
 				$feed['unread'] = 0;
 				$feed['type'] = 'feed';
+				$feed['updates_disabled'] = (int)($feed_line['update_interval'] < 0);
 
 				array_push($root['items'], $feed);
 			}
 
-			$root['param'] = T_sprintf('(%d feeds)', count($root['items']));
+			$root['param'] = vsprintf(_ngettext('(%d feed)', '(%d feeds)', count($cat['items'])), count($cat['items']));
 		}
 
 		$fl = array();
 		$fl['identifier'] = 'id';
 		$fl['label'] = 'name';
 
-		if ($_REQUEST['mode'] != 2) {
+		if (clean($_REQUEST['mode']) != 2) {
 			$fl['items'] = array($root);
 		} else {
-			$fl['items'] =& $root['items'];
+			$fl['items'] = $root['items'];
 		}
 
-		print json_encode($fl);
-		return;
+		return $fl;
 	}
 
 	function catsortreset() {
-		db_query($this->link, "UPDATE ttrss_feed_categories
-				SET order_id = 0 WHERE owner_uid = " . $_SESSION["uid"]);
-		return;
+		$sth = $this->pdo->prepare("UPDATE ttrss_feed_categories
+				SET order_id = 0 WHERE owner_uid = ?");
+		$sth->execute([$_SESSION['uid']]);
 	}
 
 	function feedsortreset() {
-		db_query($this->link, "UPDATE ttrss_feeds
-				SET order_id = 0 WHERE owner_uid = " . $_SESSION["uid"]);
-		return;
-	}
-
-	function togglehiddenfeedcats() {
-		set_pref($this->link, '_PREFS_SHOW_EMPTY_CATS',
-			(get_pref($this->link, '_PREFS_SHOW_EMPTY_CATS') ? 'false' : 'true'));
+		$sth = $this->pdo->prepare("UPDATE ttrss_feeds
+				SET order_id = 0 WHERE owner_uid = ?");
+		$sth->execute([$_SESSION['uid']]);
 	}
 
 	private function process_category_order(&$data_map, $item_id, $parent_id = false, $nest_level = 0) {
-		$debug = isset($_REQUEST["debug"]);
 
 		$prefix = "";
 		for ($i = 0; $i < $nest_level; $i++)
 			$prefix .= "   ";
 
-		if ($debug) _debug("$prefix C: $item_id P: $parent_id");
+		Debug::log("$prefix C: $item_id P: $parent_id");
 
 		$bare_item_id = substr($item_id, strpos($item_id, ':')+1);
 
 		if ($item_id != 'root') {
 			if ($parent_id && $parent_id != 'root') {
 				$parent_bare_id = substr($parent_id, strpos($parent_id, ':')+1);
-				$parent_qpart = db_escape_string($parent_bare_id);
+				$parent_qpart = $parent_bare_id;
 			} else {
-				$parent_qpart = 'NULL';
+				$parent_qpart = null;
 			}
 
-			db_query($this->link, "UPDATE ttrss_feed_categories
-				SET parent_cat = $parent_qpart WHERE id = '$bare_item_id' AND
-				owner_uid = " . $_SESSION["uid"]);
+			$sth = $this->pdo->prepare("UPDATE ttrss_feed_categories
+				SET parent_cat = ? WHERE id = ? AND
+				owner_uid = ?");
+			$sth->execute([$parent_qpart, $bare_item_id, $_SESSION['uid']]);
 		}
 
-		$order_id = 0;
+		$order_id = 1;
 
 		$cat = $data_map[$item_id];
 
@@ -318,36 +360,28 @@ class Pref_Feeds extends Handler_Protected {
 				$id = $item['_reference'];
 				$bare_id = substr($id, strpos($id, ':')+1);
 
-				if ($debug) _debug("$prefix [$order_id] $id/$bare_id");
+				Debug::log("$prefix [$order_id] $id/$bare_id");
 
 				if ($item['_reference']) {
 
 					if (strpos($id, "FEED") === 0) {
 
-						$cat_id = ($item_id != "root") ?
-							db_escape_string($bare_item_id) : "NULL";
+						$cat_id = ($item_id != "root") ? $bare_item_id : null;
 
-						$cat_qpart = ($cat_id != 0) ? "cat_id = '$cat_id'" :
-							"cat_id = NULL";
+						$sth = $this->pdo->prepare("UPDATE ttrss_feeds
+							SET order_id = ?, cat_id = ?
+							WHERE id = ? AND owner_uid = ?");
 
-						db_query($this->link, "UPDATE ttrss_feeds
-							SET order_id = $order_id, $cat_qpart
-							WHERE id = '$bare_id' AND
-								owner_uid = " . $_SESSION["uid"]);
+						$sth->execute([$order_id, $cat_id ? $cat_id : null, $bare_id, $_SESSION['uid']]);
 
 					} else if (strpos($id, "CAT:") === 0) {
 						$this->process_category_order($data_map, $item['_reference'], $item_id,
 							$nest_level+1);
 
-						if ($item_id != 'root') {
-							$parent_qpart = db_escape_string($bare_id);
-						} else {
-							$parent_qpart = 'NULL';
-						}
-
-						db_query($this->link, "UPDATE ttrss_feed_categories
-								SET order_id = '$order_id' WHERE id = '$bare_id' AND
-								owner_uid = " . $_SESSION["uid"]);
+						$sth = $this->pdo->prepare("UPDATE ttrss_feed_categories
+								SET order_id = ? WHERE id = ? AND
+								owner_uid = ?");
+						$sth->execute([$order_id, $bare_id, $_SESSION['uid']]);
 					}
 				}
 
@@ -359,7 +393,7 @@ class Pref_Feeds extends Handler_Protected {
 	function savefeedorder() {
 		$data = json_decode($_POST['payload'], true);
 
-		#file_put_contents("/tmp/saveorder.json", $_POST['payload']);
+		#file_put_contents("/tmp/saveorder.json", clean($_POST['payload']));
 		#$data = json_decode(file_get_contents("/tmp/saveorder.json"), true);
 
 		if (!is_array($data['items']))
@@ -368,7 +402,7 @@ class Pref_Feeds extends Handler_Protected {
 #		print_r($data['items']);
 
 		if (is_array($data) && is_array($data['items'])) {
-			$cat_order_id = 0;
+#			$cat_order_id = 0;
 
 			$data_map = array();
 			$root_item = false;
@@ -380,7 +414,7 @@ class Pref_Feeds extends Handler_Protected {
 						if (isset($item['items']['_reference'])) {
 							$data_map[$item['id']] = array($item['items']);
 						} else {
-							$data_map[$item['id']] =& $item['items'];
+							$data_map[$item['id']] = $item['items'];
 						}
 					}
 				if ($item['id'] == 'root') {
@@ -389,73 +423,62 @@ class Pref_Feeds extends Handler_Protected {
 			}
 
 			$this->process_category_order($data_map, $root_item);
+		}
+	}
 
-			/* foreach ($data['items'][0]['items'] as $item) {
-				$id = $item['_reference'];
-				$bare_id = substr($id, strpos($id, ':')+1);
-
-				++$cat_order_id;
-
-				if ($bare_id > 0) {
-					db_query($this->link, "UPDATE ttrss_feed_categories
-						SET order_id = '$cat_order_id' WHERE id = '$bare_id' AND
-						owner_uid = " . $_SESSION["uid"]);
-				}
-
-				$feed_order_id = 0;
-
-				if (is_array($data_map[$id])) {
-					foreach ($data_map[$id] as $feed) {
-						$id = $feed['_reference'];
-						$feed_id = substr($id, strpos($id, ':')+1);
+	function removeicon() {
+		$feed_id = clean($_REQUEST["feed_id"]);
 
-						if ($bare_id != 0)
-							$cat_query = "cat_id = '$bare_id'";
-						else
-							$cat_query = "cat_id = NULL";
+		$sth = $this->pdo->prepare("SELECT id FROM ttrss_feeds
+			WHERE id = ? AND owner_uid = ?");
+		$sth->execute([$feed_id, $_SESSION['uid']]);
 
-						db_query($this->link, "UPDATE ttrss_feeds
-							SET order_id = '$feed_order_id',
-							$cat_query
-							WHERE id = '$feed_id' AND
-								owner_uid = " . $_SESSION["uid"]);
+		if ($row = $sth->fetch()) {
+			@unlink(ICONS_DIR . "/$feed_id.ico");
 
-						++$feed_order_id;
-					}
-				}
-			} */
+			$sth = $this->pdo->prepare("UPDATE ttrss_feeds SET favicon_avg_color = NULL
+				where id = ?");
+			$sth->execute([$feed_id]);
 		}
-
-		return;
 	}
 
-	function removeicon() {
-		$feed_id = db_escape_string($_REQUEST["feed_id"]);
+	function uploadicon() {
+		header("Content-type: text/html");
 
-		$result = db_query($this->link, "SELECT id FROM ttrss_feeds
-			WHERE id = '$feed_id' AND owner_uid = ". $_SESSION["uid"]);
+		if (is_uploaded_file($_FILES['icon_file']['tmp_name'])) {
+			$tmp_file = tempnam(CACHE_DIR . '/upload', 'icon');
 
-		if (db_num_rows($result) != 0) {
-			unlink(ICONS_DIR . "/$feed_id.ico");
-		}
+			$result = move_uploaded_file($_FILES['icon_file']['tmp_name'],
+				$tmp_file);
 
-		return;
-	}
+			if (!$result) {
+				return;
+			}
+		} else {
+			return;
+		}
 
-	function uploadicon() {
-		$icon_file = $_FILES['icon_file']['tmp_name'];
-		$feed_id = db_escape_string($_REQUEST["feed_id"]);
+		$icon_file = $tmp_file;
+		$feed_id = clean($_REQUEST["feed_id"]);
 
 		if (is_file($icon_file) && $feed_id) {
-			if (filesize($icon_file) < 20000) {
+			if (filesize($icon_file) < 65535) {
 
-				$result = db_query($this->link, "SELECT id FROM ttrss_feeds
-					WHERE id = '$feed_id' AND owner_uid = ". $_SESSION["uid"]);
+				$sth = $this->pdo->prepare("SELECT id FROM ttrss_feeds
+					WHERE id = ? AND owner_uid = ?");
+				$sth->execute([$feed_id, $_SESSION['uid']]);
 
-				if (db_num_rows($result) != 0) {
-					unlink(ICONS_DIR . "/$feed_id.ico");
-					move_uploaded_file($icon_file, ICONS_DIR . "/$feed_id.ico");
-					$rc = 0;
+				if ($row = $sth->fetch()) {
+					@unlink(ICONS_DIR . "/$feed_id.ico");
+					if (rename($icon_file, ICONS_DIR . "/$feed_id.ico")) {
+
+						$sth = $this->pdo->prepare("UPDATE ttrss_feeds SET
+							favicon_avg_color = ''
+							WHERE id = ?");
+						$sth->execute([$feed_id]);
+
+						$rc = 0;
+					}
 				} else {
 					$rc = 2;
 				}
@@ -466,6 +489,8 @@ class Pref_Feeds extends Handler_Protected {
 			$rc = 2;
 		}
 
+		@unlink($icon_file);
+
 		print "<script type=\"text/javascript\">";
 		print "parent.uploadIconHandler($rc);";
 		print "</script>";
@@ -476,313 +501,325 @@ class Pref_Feeds extends Handler_Protected {
 		global $purge_intervals;
 		global $update_intervals;
 
-		$feed_id = db_escape_string($_REQUEST["id"]);
 
-		$result = db_query($this->link,
-			"SELECT * FROM ttrss_feeds WHERE id = '$feed_id' AND
-				owner_uid = " . $_SESSION["uid"]);
+		$feed_id = clean($_REQUEST["id"]);
 
-		$title = htmlspecialchars(db_fetch_result($result,
-			0, "title"));
+		$sth = $this->pdo->prepare("SELECT * FROM ttrss_feeds WHERE id = ? AND
+				owner_uid = ?");
+		$sth->execute([$feed_id, $_SESSION['uid']]);
 
-		print "<input dojoType=\"dijit.form.TextBox\" style=\"display : none\" name=\"id\" value=\"$feed_id\">";
-		print "<input dojoType=\"dijit.form.TextBox\" style=\"display : none\" name=\"op\" value=\"pref-feeds\">";
-		print "<input dojoType=\"dijit.form.TextBox\" style=\"display : none\" name=\"method\" value=\"editSave\">";
+		if ($row = $sth->fetch()) {
+			print '<div dojoType="dijit.layout.TabContainer" style="height : 450px">
+        		<div dojoType="dijit.layout.ContentPane" title="'.__('General').'">';
 
-		print "<div class=\"dlgSec\">".__("Feed")."</div>";
-		print "<div class=\"dlgSecCont\">";
+			$title = htmlspecialchars($row["title"]);
 
-		/* Title */
+			print_hidden("id", "$feed_id");
+			print_hidden("op", "pref-feeds");
+			print_hidden("method", "editSave");
 
-		print "<input dojoType=\"dijit.form.ValidationTextBox\" required=\"1\"
+			print "<div class=\"dlgSec\">".__("Feed")."</div>";
+			print "<div class=\"dlgSecCont\">";
+
+			/* Title */
+
+			print "<input dojoType=\"dijit.form.ValidationTextBox\" required=\"1\"
 			placeHolder=\"".__("Feed Title")."\"
 			style=\"font-size : 16px; width: 20em\" name=\"title\" value=\"$title\">";
 
-		/* Feed URL */
+			/* Feed URL */
 
-		$feed_url = db_fetch_result($result, 0, "feed_url");
-		$feed_url = htmlspecialchars(db_fetch_result($result,
-			0, "feed_url"));
+			$feed_url = htmlspecialchars($row["feed_url"]);
 
-		print "<hr/>";
+			print "<hr/>";
 
-		print __('URL:') . " ";
-		print "<input dojoType=\"dijit.form.ValidationTextBox\" required=\"1\"
+			print __('URL:') . " ";
+			print "<input dojoType=\"dijit.form.ValidationTextBox\" required=\"1\"
 			placeHolder=\"".__("Feed URL")."\"
 			regExp='^(http|https)://.*' style=\"width : 20em\"
 			name=\"feed_url\" value=\"$feed_url\">";
 
-		$last_error = db_fetch_result($result, 0, "last_error");
+			$last_error = $row["last_error"];
 
-		if ($last_error) {
-			print "&nbsp;<span title=\"".htmlspecialchars($last_error)."\"
-				class=\"feed_error\">(error)</span>";
+			if ($last_error) {
+				print "&nbsp;<img src=\"images/error.png\" alt=\"(error)\"
+				style=\"vertical-align : middle\"
+				title=\"".htmlspecialchars($last_error)."\">";
 
-		}
+			}
 
-		/* Category */
+			/* Category */
+
+			if (get_pref('ENABLE_FEED_CATS')) {
+
+				$cat_id = $row["cat_id"];
+
+				print "<hr/>";
+
+				print __('Place in category:') . " ";
+
+				print_feed_cat_select("cat_id", $cat_id,
+					'dojoType="dijit.form.Select"');
+			}
 
-		if (get_pref($this->link, 'ENABLE_FEED_CATS')) {
+			/* Site URL  */
 
-			$cat_id = db_fetch_result($result, 0, "cat_id");
+			$site_url = htmlspecialchars($row["site_url"]);
 
 			print "<hr/>";
 
-			print __('Place in category:') . " ";
+			print __('Site URL:') . " ";
+			print "<input dojoType=\"dijit.form.ValidationTextBox\" required=\"1\"
+			placeHolder=\"".__("Site URL")."\"
+			regExp='^(http|https)://.*' style=\"width : 15em\"
+			name=\"site_url\" value=\"$site_url\">";
 
-			print_feed_cat_select($this->link, "cat_id", $cat_id,
-				'dojoType="dijit.form.Select"');
-		}
+			/* FTS Stemming Language */
 
-		print "</div>";
+			if (DB_TYPE == "pgsql") {
+				$feed_language = $row["feed_language"];
 
-		print "<div class=\"dlgSec\">".__("Update")."</div>";
-		print "<div class=\"dlgSecCont\">";
+				print "<hr/>";
 
-		/* Update Interval */
+				print __('Language:') . " ";
+				print_select("feed_language", $feed_language, $this::$feed_languages,
+					'dojoType="dijit.form.Select"');
+			}
 
-		$update_interval = db_fetch_result($result, 0, "update_interval");
+			print "</div>";
 
-		print_select_hash("update_interval", $update_interval, $update_intervals,
-			'dojoType="dijit.form.Select"');
+			print "<div class=\"dlgSec\">".__("Update")."</div>";
+			print "<div class=\"dlgSecCont\">";
 
-		/* Purge intl */
+			/* Update Interval */
+
+			$update_interval = $row["update_interval"];
+
+			print_select_hash("update_interval", $update_interval, $update_intervals,
+				'dojoType="dijit.form.Select"');
 
-		$purge_interval = db_fetch_result($result, 0, "purge_interval");
+			/* Purge intl */
 
-		print "<hr/>";
-		print __('Article purging:') . " ";
+		if (FORCE_ARTICLE_PURGE == 0) {
+			$purge_interval = $row["purge_interval"];
+
+			print "<hr/>";
+			print __('Article purging:') . " ";
 
-		print_select_hash("purge_interval", $purge_interval, $purge_intervals,
-			'dojoType="dijit.form.Select" ' .
+			print_select_hash("purge_interval", $purge_interval, $purge_intervals,
+				'dojoType="dijit.form.Select" ' .
 				((FORCE_ARTICLE_PURGE == 0) ? "" : 'disabled="1"'));
+		}
 
-		print "</div>";
-		print "<div class=\"dlgSec\">".__("Authentication")."</div>";
-		print "<div class=\"dlgSecCont\">";
+			print "</div>";
 
-		$auth_login = htmlspecialchars(db_fetch_result($result, 0, "auth_login"));
+			$auth_login = htmlspecialchars($row["auth_login"]);
+			$auth_pass = htmlspecialchars($row["auth_pass"]);
 
-		print "<input dojoType=\"dijit.form.TextBox\" id=\"feedEditDlg_login\"
+			$auth_enabled = $auth_login !== '' || $auth_pass !== '';
+
+			$auth_style = $auth_enabled ? '' : 'display: none';
+			print "<div id='feedEditDlg_loginContainer' style='$auth_style'>";
+			print "<div class=\"dlgSec\">".__("Authentication")."</div>";
+			print "<div class=\"dlgSecCont\">";
+
+			print "<input dojoType=\"dijit.form.TextBox\" id=\"feedEditDlg_login\"
 			placeHolder=\"".__("Login")."\"
+			autocomplete=\"new-password\"
 			name=\"auth_login\" value=\"$auth_login\"><hr/>";
 
-		$auth_pass = htmlspecialchars(db_fetch_result($result, 0, "auth_pass"));
-
-		print "<input dojoType=\"dijit.form.TextBox\" type=\"password\" name=\"auth_pass\"
+			print "<input dojoType=\"dijit.form.TextBox\" type=\"password\" name=\"auth_pass\"
+			autocomplete=\"new-password\"
 			placeHolder=\"".__("Password")."\"
 			value=\"$auth_pass\">";
 
-		print "<div dojoType=\"dijit.Tooltip\" connectId=\"feedEditDlg_login\" position=\"below\">
+			print "<div dojoType=\"dijit.Tooltip\" connectId=\"feedEditDlg_login\" position=\"below\">
 			".__('<b>Hint:</b> you need to fill in your login information if your feed requires authentication, except for Twitter feeds.')."
 			</div>";
 
-		print "</div>";
-		print "<div class=\"dlgSec\">".__("Options")."</div>";
-		print "<div class=\"dlgSecCont\">";
+			print "</div></div>";
 
-		$private = sql_bool_to_bool(db_fetch_result($result, 0, "private"));
+			$auth_checked = $auth_enabled ? 'checked' : '';
+			print "<div style=\"clear : both\">
+				<input type=\"checkbox\" $auth_checked name=\"need_auth\" dojoType=\"dijit.form.CheckBox\" id=\"feedEditDlg_loginCheck\"
+						onclick='checkboxToggleElement(this, \"feedEditDlg_loginContainer\")'>
+					<label for=\"feedEditDlg_loginCheck\">".
+				__('This feed requires authentication.')."</div>";
 
-		if ($private) {
-			$checked = "checked=\"1\"";
-		} else {
-			$checked = "";
-		}
+			print '</div><div dojoType="dijit.layout.ContentPane" title="'.__('Options').'">';
 
-		print "<input dojoType=\"dijit.form.CheckBox\" type=\"checkbox\" name=\"private\" id=\"private\"
-			$checked>&nbsp;<label for=\"private\">".__('Hide from Popular feeds')."</label>";
+			//print "<div class=\"dlgSec\">".__("Options")."</div>";
+			print "<div class=\"dlgSecSimple\">";
 
-		$rtl_content = sql_bool_to_bool(db_fetch_result($result, 0, "rtl_content"));
+			$private = $row["private"];
 
-		if ($rtl_content) {
-			$checked = "checked=\"1\"";
-		} else {
-			$checked = "";
-		}
+			if ($private) {
+				$checked = "checked=\"1\"";
+			} else {
+				$checked = "";
+			}
 
-		print "<hr/><input dojoType=\"dijit.form.CheckBox\" type=\"checkbox\" id=\"rtl_content\" name=\"rtl_content\"
-			$checked>&nbsp;<label for=\"rtl_content\">".__('Right-to-left content')."</label>";
+			print "<input dojoType=\"dijit.form.CheckBox\" type=\"checkbox\" name=\"private\" id=\"private\"
+			$checked>&nbsp;<label for=\"private\">".__('Hide from Popular feeds')."</label>";
 
-		$include_in_digest = sql_bool_to_bool(db_fetch_result($result, 0, "include_in_digest"));
+		if (DIGEST_SUBJECT !== false) {
+			$include_in_digest = $row["include_in_digest"];
 
-		if ($include_in_digest) {
-			$checked = "checked=\"1\"";
-		} else {
-			$checked = "";
-		}
+			if ($include_in_digest) {
+				$checked = "checked=\"1\"";
+			} else {
+				$checked = "";
+			}
 
-		print "<hr/><input dojoType=\"dijit.form.CheckBox\" type=\"checkbox\" id=\"include_in_digest\"
+			print "<hr/><input dojoType=\"dijit.form.CheckBox\" type=\"checkbox\" id=\"include_in_digest\"
 			name=\"include_in_digest\"
 			$checked>&nbsp;<label for=\"include_in_digest\">".__('Include in e-mail digest')."</label>";
+		}
 
 
-		$always_display_enclosures = sql_bool_to_bool(db_fetch_result($result, 0, "always_display_enclosures"));
+			$always_display_enclosures = $row["always_display_enclosures"];
 
-		if ($always_display_enclosures) {
-			$checked = "checked";
-		} else {
-			$checked = "";
-		}
+			if ($always_display_enclosures) {
+				$checked = "checked";
+			} else {
+				$checked = "";
+			}
 
-		print "<hr/><input dojoType=\"dijit.form.CheckBox\" type=\"checkbox\" id=\"always_display_enclosures\"
+			print "<hr/><input dojoType=\"dijit.form.CheckBox\" type=\"checkbox\" id=\"always_display_enclosures\"
 			name=\"always_display_enclosures\"
 			$checked>&nbsp;<label for=\"always_display_enclosures\">".__('Always display image attachments')."</label>";
 
+			$hide_images = $row["hide_images"];
 
-		$cache_images = sql_bool_to_bool(db_fetch_result($result, 0, "cache_images"));
-
-		if ($cache_images) {
-			$checked = "checked=\"1\"";
-		} else {
-			$checked = "";
-		}
-
-		print "<hr/><input dojoType=\"dijit.form.CheckBox\" type=\"checkbox\" id=\"cache_images\"
-		name=\"cache_images\"
-			$checked>&nbsp;<label for=\"cache_images\">".
-		__('Cache images locally')."</label>";
+			if ($hide_images) {
+				$checked = "checked=\"1\"";
+			} else {
+				$checked = "";
+			}
 
+			print "<hr/><input dojoType=\"dijit.form.CheckBox\" type=\"checkbox\" id=\"hide_images\"
+		name=\"hide_images\"
+			$checked>&nbsp;<label for=\"hide_images\">".
+				__('Do not embed media')."</label>";
 
-		if (defined('_FEEDS_CONTENT_CACHE') && _FEEDS_CONTENT_CACHE) {
-			$cache_content = sql_bool_to_bool(db_fetch_result($result, 0, "cache_content"));
+			$cache_images = $row["cache_images"];
 
-			if ($cache_content) {
+			if ($cache_images) {
 				$checked = "checked=\"1\"";
 			} else {
 				$checked = "";
 			}
 
-			print "<hr/><input dojoType=\"dijit.form.CheckBox\" type=\"checkbox\" id=\"cache_content\"
-		name=\"cache_content\"
-				$checked>&nbsp;<label for=\"cache_content\">".
-			__('Cache content locally')."</label>";
-
-		}
+			print "<hr/><input dojoType=\"dijit.form.CheckBox\" type=\"checkbox\" id=\"cache_images\"
+		name=\"cache_images\"
+			$checked>&nbsp;<label for=\"cache_images\">".
+				__('Cache media')."</label>";
 
-		$mark_unread_on_update = sql_bool_to_bool(db_fetch_result($result, 0, "mark_unread_on_update"));
+			$mark_unread_on_update = $row["mark_unread_on_update"];
 
-		if ($mark_unread_on_update) {
-			$checked = "checked";
-		} else {
-			$checked = "";
-		}
+			if ($mark_unread_on_update) {
+				$checked = "checked";
+			} else {
+				$checked = "";
+			}
 
-		print "<hr/><input dojoType=\"dijit.form.CheckBox\" type=\"checkbox\" id=\"mark_unread_on_update\"
+			print "<hr/><input dojoType=\"dijit.form.CheckBox\" type=\"checkbox\" id=\"mark_unread_on_update\"
 			name=\"mark_unread_on_update\"
 			$checked>&nbsp;<label for=\"mark_unread_on_update\">".__('Mark updated articles as unread')."</label>";
 
-		$update_on_checksum_change = sql_bool_to_bool(db_fetch_result($result, 0, "update_on_checksum_change"));
+			print "</div>";
 
-		if ($update_on_checksum_change) {
-			$checked = "checked";
-		} else {
-			$checked = "";
-		}
+			print '</div><div dojoType="dijit.layout.ContentPane" title="'.__('Icon').'">';
 
-		print "<hr/><input dojoType=\"dijit.form.CheckBox\" type=\"checkbox\" id=\"update_on_checksum_change\"
-			name=\"update_on_checksum_change\"
-			$checked>&nbsp;<label for=\"update_on_checksum_change\">".__('Mark posts as updated on content change')."</label>";
+			/* Icon */
 
-		print "</div>";
+			print "<div class=\"dlgSecSimple\">";
 
-		/* Icon */
+			print "<img class=\"feedIcon\" src=\"".Feeds::getFeedIcon($feed_id)."\">";
 
-		print "<div class=\"dlgSec\">".__("Icon")."</div>";
-		print "<div class=\"dlgSecCont\">";
+			print "<iframe name=\"icon_upload_iframe\"
+				style=\"width: 400px; height: 100px; display: none;\"></iframe>";
 
-		print "<iframe name=\"icon_upload_iframe\"
-			style=\"width: 400px; height: 100px; display: none;\"></iframe>";
-
-		print "<form style='display : block' target=\"icon_upload_iframe\"
+			print "<form style='display : block' target=\"icon_upload_iframe\"
 			enctype=\"multipart/form-data\" method=\"POST\"
 			action=\"backend.php\">
-			<input id=\"icon_file\" size=\"10\" name=\"icon_file\" type=\"file\">
+			<label class=\"dijitButton\">".__("Choose file...")."
+				<input style=\"display: none\" id=\"icon_file\" size=\"10\" name=\"icon_file\" type=\"file\">
+			</label>
 			<input type=\"hidden\" name=\"op\" value=\"pref-feeds\">
 			<input type=\"hidden\" name=\"feed_id\" value=\"$feed_id\">
 			<input type=\"hidden\" name=\"method\" value=\"uploadicon\">
-			<button dojoType=\"dijit.form.Button\" onclick=\"return uploadFeedIcon();\"
+			<button class=\"\" dojoType=\"dijit.form.Button\" onclick=\"return uploadFeedIcon();\"
 				type=\"submit\">".__('Replace')."</button>
-			<button dojoType=\"dijit.form.Button\" onclick=\"return removeFeedIcon($feed_id);\"
+			<button class=\"btn-danger\" dojoType=\"dijit.form.Button\" onclick=\"return removeFeedIcon($feed_id);\"
 				type=\"submit\">".__('Remove')."</button>
 			</form>";
 
-		print "</div>";
+			print "</div>";
 
-		$title = htmlspecialchars($title, ENT_QUOTES);
+			print '</div><div dojoType="dijit.layout.ContentPane" title="'.__('Plugins').'">';
 
-		print "<div class='dlgButtons'>
-			<div style=\"float : left\">
-			<button dojoType=\"dijit.form.Button\" onclick='return unsubscribeFeed($feed_id, \"$title\")'>".
-				__('Unsubscribe')."</button>";
+			PluginHost::getInstance()->run_hooks(PluginHost::HOOK_PREFS_EDIT_FEED,
+				"hook_prefs_edit_feed", $feed_id);
 
-		if (PUBSUBHUBBUB_ENABLED) {
-			$pubsub_state = db_fetch_result($result, 0, "pubsub_state");
-			$pubsub_btn_disabled = ($pubsub_state == 2) ? "" : "disabled=\"1\"";
 
-			print "<button dojoType=\"dijit.form.Button\" id=\"pubsubReset_Btn\" $pubsub_btn_disabled
-					onclick='return resetPubSub($feed_id, \"$title\")'>".__('Resubscribe to push updates').
-					"</button>";
-		}
+			print "</div></div>";
 
-		print "</div>";
+			$title = htmlspecialchars($title, ENT_QUOTES);
 
-		print "<div dojoType=\"dijit.Tooltip\" connectId=\"pubsubReset_Btn\" position=\"below\">".
-			__('Resets PubSubHubbub subscription status for push-enabled feeds.')."</div>";
+			print "<div class='dlgButtons'>
+			<div style=\"float : left\">
+			<button class=\"btn-danger\" dojoType=\"dijit.form.Button\" onclick='return unsubscribeFeed($feed_id, \"$title\")'>".
+				__('Unsubscribe')."</button>";
 
-		print "<button dojoType=\"dijit.form.Button\" onclick=\"return dijit.byId('feedEditDlg').execute()\">".__('Save')."</button>
-			<button dojoType=\"dijit.form.Button\" onclick=\"return dijit.byId('feedEditDlg').hide()\">".__('Cancel')."</button>
-		</div>";
+			print "</div>";
 
-		return;
+			print "<button dojoType=\"dijit.form.Button\" onclick=\"return dijit.byId('feedEditDlg').execute()\">".__('Save')."</button>
+				<button dojoType=\"dijit.form.Button\" onclick=\"return dijit.byId('feedEditDlg').hide()\">".__('Cancel')."</button>
+				</div>";
+		}
 	}
 
 	function editfeeds() {
 		global $purge_intervals;
 		global $update_intervals;
 
-		$feed_ids = db_escape_string($_REQUEST["ids"]);
+		$feed_ids = clean($_REQUEST["ids"]);
+
+		print_notice("Enable the options you wish to apply using checkboxes on the right:");
 
-		print "<div class=\"dialogNotice\">" . __("Enable the options you wish to apply using checkboxes on the right:") . "</div>";
+		print "<p>";
 
-		print "<input dojoType=\"dijit.form.TextBox\" style=\"display : none\" name=\"ids\" value=\"$feed_ids\">";
-		print "<input dojoType=\"dijit.form.TextBox\" style=\"display : none\" name=\"op\" value=\"pref-feeds\">";
-		print "<input dojoType=\"dijit.form.TextBox\" style=\"display : none\" name=\"method\" value=\"batchEditSave\">";
+		print_hidden("ids", "$feed_ids");
+		print_hidden("op", "pref-feeds");
+		print_hidden("method", "batchEditSave");
 
 		print "<div class=\"dlgSec\">".__("Feed")."</div>";
 		print "<div class=\"dlgSecCont\">";
 
-		/* Title */
-
-		print "<input dojoType=\"dijit.form.ValidationTextBox\"
-			disabled=\"1\" style=\"font-size : 16px; width : 20em;\" required=\"1\"
-			name=\"title\" value=\"$title\">";
-
-		$this->batch_edit_cbox("title");
-
-		/* Feed URL */
+		/* Category */
 
-		print "<br/>";
+		if (get_pref('ENABLE_FEED_CATS')) {
 
-		print __('URL:') . " ";
-		print "<input dojoType=\"dijit.form.ValidationTextBox\" disabled=\"1\"
-			required=\"1\" regExp='^(http|https)://.*' style=\"width : 20em\"
-			name=\"feed_url\" value=\"$feed_url\">";
+			print __('Place in category:') . " ";
 
-		$this->batch_edit_cbox("feed_url");
+			print_feed_cat_select("cat_id", false,
+				'disabled="1" dojoType="dijit.form.Select"');
 
-		/* Category */
+			$this->batch_edit_cbox("cat_id");
 
-		if (get_pref($this->link, 'ENABLE_FEED_CATS')) {
+		}
 
-			print "<br/>";
+		/* FTS Stemming Language */
 
-			print __('Place in category:') . " ";
+		if (DB_TYPE == "pgsql") {
+			print "<hr/>";
 
-			print_feed_cat_select($this->link, "cat_id", $cat_id,
+			print __('Language:') . " ";
+			print_select("feed_language", "", $this::$feed_languages,
 				'disabled="1" dojoType="dijit.form.Select"');
 
-			$this->batch_edit_cbox("cat_id");
-
+			$this->batch_edit_cbox("feed_language");
 		}
 
 		print "</div>";
@@ -792,7 +829,7 @@ class Pref_Feeds extends Handler_Protected {
 
 		/* Update Interval */
 
-		print_select_hash("update_interval", $update_interval, $update_intervals,
+		print_select_hash("update_interval", "", $update_intervals,
 			'disabled="1" dojoType="dijit.form.Select"');
 
 		$this->batch_edit_cbox("update_interval");
@@ -805,7 +842,7 @@ class Pref_Feeds extends Handler_Protected {
 
 			print __('Article purging:') . " ";
 
-			print_select_hash("purge_interval", $purge_interval, $purge_intervals,
+			print_select_hash("purge_interval", "", $purge_intervals,
 				'disabled="1" dojoType="dijit.form.Select"');
 
 			$this->batch_edit_cbox("purge_interval");
@@ -817,13 +854,15 @@ class Pref_Feeds extends Handler_Protected {
 
 		print "<input dojoType=\"dijit.form.TextBox\"
 			placeHolder=\"".__("Login")."\" disabled=\"1\"
-			name=\"auth_login\" value=\"$auth_login\">";
+			autocomplete=\"new-password\"
+			name=\"auth_login\" value=\"\">";
 
 		$this->batch_edit_cbox("auth_login");
 
-		print "<br/><input dojoType=\"dijit.form.TextBox\" type=\"password\" name=\"auth_pass\"
+		print "<hr/> <input dojoType=\"dijit.form.TextBox\" type=\"password\" name=\"auth_pass\"
+			autocomplete=\"new-password\"
 			placeHolder=\"".__("Password")."\" disabled=\"1\"
-			value=\"$auth_pass\">";
+			value=\"\">";
 
 		$this->batch_edit_cbox("auth_pass");
 
@@ -836,11 +875,6 @@ class Pref_Feeds extends Handler_Protected {
 
 		print "&nbsp;"; $this->batch_edit_cbox("private", "private_l");
 
-		print "<br/><input disabled=\"1\" type=\"checkbox\" id=\"rtl_content\" name=\"rtl_content\"
-			dojoType=\"dijit.form.CheckBox\">&nbsp;<label class='insensitive' id=\"rtl_content_l\" for=\"rtl_content\">".__('Right-to-left content')."</label>";
-
-		print "&nbsp;"; $this->batch_edit_cbox("rtl_content", "rtl_content_l");
-
 		print "<br/><input disabled=\"1\" type=\"checkbox\" id=\"include_in_digest\"
 			name=\"include_in_digest\"
 			dojoType=\"dijit.form.CheckBox\">&nbsp;<label id=\"include_in_digest_l\" class='insensitive' for=\"include_in_digest\">".__('Include in e-mail digest')."</label>";
@@ -853,11 +887,19 @@ class Pref_Feeds extends Handler_Protected {
 
 		print "&nbsp;"; $this->batch_edit_cbox("always_display_enclosures", "always_display_enclosures_l");
 
+		print "<br/><input disabled=\"1\" type=\"checkbox\" id=\"hide_images\"
+			name=\"hide_images\"
+			dojoType=\"dijit.form.CheckBox\">&nbsp;<label class='insensitive' id=\"hide_images_l\"
+			for=\"hide_images\">".
+		__('Do not embed media')."</label>";
+
+		print "&nbsp;"; $this->batch_edit_cbox("hide_images", "hide_images_l");
+
 		print "<br/><input disabled=\"1\" type=\"checkbox\" id=\"cache_images\"
 			name=\"cache_images\"
 			dojoType=\"dijit.form.CheckBox\">&nbsp;<label class='insensitive' id=\"cache_images_l\"
 			for=\"cache_images\">".
-		__('Cache images locally')."</label>";
+		__('Cache media')."</label>";
 
 		print "&nbsp;"; $this->batch_edit_cbox("cache_images", "cache_images_l");
 
@@ -867,12 +909,6 @@ class Pref_Feeds extends Handler_Protected {
 
 		print "&nbsp;"; $this->batch_edit_cbox("mark_unread_on_update", "mark_unread_on_update_l");
 
-		print "<br/><input disabled=\"1\" type=\"checkbox\" id=\"update_on_checksum_change\"
-			name=\"update_on_checksum_change\"
-			dojoType=\"dijit.form.CheckBox\">&nbsp;<label id=\"update_on_checksum_change_l\" class='insensitive' for=\"update_on_checksum_change\">".__('Mark posts as updated on content change')."</label>";
-
-		print "&nbsp;"; $this->batch_edit_cbox("update_on_checksum_change", "update_on_checksum_change_l");
-
 		print "</div>";
 
 		print "<div class='dlgButtons'>
@@ -897,75 +933,99 @@ class Pref_Feeds extends Handler_Protected {
 
 	function editsaveops($batch) {
 
-		$feed_title = db_escape_string(trim($_POST["title"]));
-		$feed_link = db_escape_string(trim($_POST["feed_url"]));
-		$upd_intl = (int) db_escape_string($_POST["update_interval"]);
-		$purge_intl = (int) db_escape_string($_POST["purge_interval"]);
-		$feed_id = (int) db_escape_string($_POST["id"]); /* editSave */
-		$feed_ids = db_escape_string($_POST["ids"]); /* batchEditSave */
-		$cat_id = (int) db_escape_string($_POST["cat_id"]);
-		$auth_login = db_escape_string(trim($_POST["auth_login"]));
-		$auth_pass = db_escape_string(trim($_POST["auth_pass"]));
-		$private = checkbox_to_sql_bool(db_escape_string($_POST["private"]));
-		$rtl_content = checkbox_to_sql_bool(db_escape_string($_POST["rtl_content"]));
+		$feed_title = trim(clean($_POST["title"]));
+		$feed_url = trim(clean($_POST["feed_url"]));
+		$site_url = trim(clean($_POST["site_url"]));
+		$upd_intl = (int) clean($_POST["update_interval"]);
+		$purge_intl = (int) clean($_POST["purge_interval"]);
+		$feed_id = (int) clean($_POST["id"]); /* editSave */
+		$feed_ids = explode(",", clean($_POST["ids"])); /* batchEditSave */
+		$cat_id = (int) clean($_POST["cat_id"]);
+		$auth_login = trim(clean($_POST["auth_login"]));
+		$auth_pass = trim(clean($_POST["auth_pass"]));
+		$private = checkbox_to_sql_bool(clean($_POST["private"]));
 		$include_in_digest = checkbox_to_sql_bool(
-			db_escape_string($_POST["include_in_digest"]));
+			clean($_POST["include_in_digest"]));
 		$cache_images = checkbox_to_sql_bool(
-			db_escape_string($_POST["cache_images"]));
-		$cache_content = checkbox_to_sql_bool(
-			db_escape_string($_POST["cache_content"]));
-
+			clean($_POST["cache_images"]));
+		$hide_images = checkbox_to_sql_bool(
+			clean($_POST["hide_images"]));
 		$always_display_enclosures = checkbox_to_sql_bool(
-			db_escape_string($_POST["always_display_enclosures"]));
+			clean($_POST["always_display_enclosures"]));
 
 		$mark_unread_on_update = checkbox_to_sql_bool(
-			db_escape_string($_POST["mark_unread_on_update"]));
+			clean($_POST["mark_unread_on_update"]));
 
-		$update_on_checksum_change = checkbox_to_sql_bool(
-			db_escape_string($_POST["update_on_checksum_change"]));
+		$feed_language = trim(clean($_POST["feed_language"]));
 
-		if (get_pref($this->link, 'ENABLE_FEED_CATS')) {
-			if ($cat_id && $cat_id != 0) {
-				$category_qpart = "cat_id = '$cat_id',";
-				$category_qpart_nocomma = "cat_id = '$cat_id'";
-			} else {
-				$category_qpart = 'cat_id = NULL,';
-				$category_qpart_nocomma = 'cat_id = NULL';
+		if (!$batch) {
+			if (clean($_POST["need_auth"]) !== 'on') {
+				$auth_login = '';
+				$auth_pass = '';
 			}
-		} else {
-			$category_qpart = "";
-			$category_qpart_nocomma = "";
-		}
 
-		if (!$batch) {
+			/* $sth = $this->pdo->prepare("SELECT feed_url FROM ttrss_feeds WHERE id = ?");
+			$sth->execute([$feed_id]);
+			$row = $sth->fetch();$orig_feed_url = $row["feed_url"];
+
+			$reset_basic_info = $orig_feed_url != $feed_url; */
+
+			$sth = $this->pdo->prepare("UPDATE ttrss_feeds SET
+				cat_id = :cat_id,
+				title = :title,
+				feed_url = :feed_url,
+				site_url = :site_url,
+				update_interval = :upd_intl,
+				purge_interval = :purge_intl,
+				auth_login = :auth_login,
+				auth_pass = :auth_pass,
+				auth_pass_encrypted = false,
+				private = :private,
+				cache_images = :cache_images,
+				hide_images = :hide_images,
+				include_in_digest = :include_in_digest,
+				always_display_enclosures = :always_display_enclosures,
+				mark_unread_on_update = :mark_unread_on_update,
+				feed_language = :feed_language
+			WHERE id = :id AND owner_uid = :uid");
+
+			$sth->execute([":title" => $feed_title,
+					":cat_id" => $cat_id ? $cat_id : null,
+					":feed_url" => $feed_url,
+					":site_url" => $site_url,
+					":upd_intl" => $upd_intl,
+					":purge_intl" => $purge_intl,
+					":auth_login" => $auth_login,
+					":auth_pass" => $auth_pass,
+					":private" => (int)$private,
+					":cache_images" => (int)$cache_images,
+					":hide_images" => (int)$hide_images,
+					":include_in_digest" => (int)$include_in_digest,
+					":always_display_enclosures" => (int)$always_display_enclosures,
+					":mark_unread_on_update" => (int)$mark_unread_on_update,
+					":feed_language" => $feed_language,
+					":id" => $feed_id,
+					":uid" => $_SESSION['uid']]);
+
+/*			if ($reset_basic_info) {
+				RSSUtils::set_basic_feed_info($feed_id);
+			} */
 
-			$result = db_query($this->link, "UPDATE ttrss_feeds SET
-				$category_qpart
-				title = '$feed_title', feed_url = '$feed_link',
-				update_interval = '$upd_intl',
-				purge_interval = '$purge_intl',
-				auth_login = '$auth_login',
-				auth_pass = '$auth_pass',
-				private = $private,
-				rtl_content = $rtl_content,
-				cache_images = $cache_images,
-				cache_content = $cache_content,
-				include_in_digest = $include_in_digest,
-				always_display_enclosures = $always_display_enclosures,
-				mark_unread_on_update = $mark_unread_on_update,
-				update_on_checksum_change = $update_on_checksum_change
-			WHERE id = '$feed_id' AND owner_uid = " . $_SESSION["uid"]);
+			PluginHost::getInstance()->run_hooks(PluginHost::HOOK_PREFS_SAVE_FEED,
+				"hook_prefs_save_feed", $feed_id);
 
 		} else {
 			$feed_data = array();
 
 			foreach (array_keys($_POST) as $k) {
 				if ($k != "op" && $k != "method" && $k != "ids") {
-					$feed_data[$k] = $_POST[$k];
+					$feed_data[$k] = clean($_POST[$k]);
 				}
 			}
 
-			db_query($this->link, "BEGIN");
+			$this->pdo->beginTransaction();
+
+			$feed_ids_qmarks = arr_qmarks($feed_ids);
 
 			foreach (array_keys($feed_data) as $k) {
 
@@ -973,249 +1033,106 @@ class Pref_Feeds extends Handler_Protected {
 
 				switch ($k) {
 					case "title":
-						$qpart = "title = '$feed_title'";
+						$qpart = "title = " . $this->pdo->quote($feed_title);
 						break;
 
 					case "feed_url":
-						$qpart = "feed_url = '$feed_link'";
+						$qpart = "feed_url = " . $this->pdo->quote($feed_url);
 						break;
 
 					case "update_interval":
-						$qpart = "update_interval = '$upd_intl'";
+						$qpart = "update_interval = " . $this->pdo->quote($upd_intl);
 						break;
 
 					case "purge_interval":
-						$qpart = "purge_interval = '$purge_intl'";
+						$qpart = "purge_interval =" . $this->pdo->quote($purge_intl);
 						break;
 
 					case "auth_login":
-						$qpart = "auth_login = '$auth_login'";
+						$qpart = "auth_login = " . $this->pdo->quote($auth_login);
 						break;
 
 					case "auth_pass":
-						$qpart = "auth_pass = '$auth_pass'";
+						$qpart = "auth_pass =" . $this->pdo->quote($auth_pass). ", auth_pass_encrypted = false";
 						break;
 
 					case "private":
-						$qpart = "private = $private";
+						$qpart = "private = " . $this->pdo->quote($private);
 						break;
 
 					case "include_in_digest":
-						$qpart = "include_in_digest = $include_in_digest";
+						$qpart = "include_in_digest = " . $this->pdo->quote($include_in_digest);
 						break;
 
 					case "always_display_enclosures":
-						$qpart = "always_display_enclosures = $always_display_enclosures";
+						$qpart = "always_display_enclosures = " . $this->pdo->quote($always_display_enclosures);
 						break;
 
 					case "mark_unread_on_update":
-						$qpart = "mark_unread_on_update = $mark_unread_on_update";
-						break;
-
-					case "update_on_checksum_change":
-						$qpart = "update_on_checksum_change = $update_on_checksum_change";
+						$qpart = "mark_unread_on_update = " . $this->pdo->quote($mark_unread_on_update);
 						break;
 
 					case "cache_images":
-						$qpart = "cache_images = $cache_images";
+						$qpart = "cache_images = " . $this->pdo->quote($cache_images);
 						break;
 
-					case "cache_content":
-						$qpart = "cache_content = $cache_content";
+					case "hide_images":
+						$qpart = "hide_images = " . $this->pdo->quote($hide_images);
 						break;
 
-					case "rtl_content":
-						$qpart = "rtl_content = $rtl_content";
+					case "cat_id":
+						if (get_pref('ENABLE_FEED_CATS')) {
+							if ($cat_id) {
+								$qpart = "cat_id = " . $this->pdo->quote($cat_id);
+							} else {
+								$qpart = 'cat_id = NULL';
+							}
+						} else {
+							$qpart = "";
+						}
+
 						break;
 
-					case "cat_id":
-						$qpart = $category_qpart_nocomma;
+					case "feed_language":
+						$qpart = "feed_language = " . $this->pdo->quote($feed_language);
 						break;
 
 				}
 
 				if ($qpart) {
-					db_query($this->link,
-						"UPDATE ttrss_feeds SET $qpart WHERE id IN ($feed_ids)
-						AND owner_uid = " . $_SESSION["uid"]);
-					print "<br/>";
+					$sth = $this->pdo->prepare("UPDATE ttrss_feeds SET $qpart WHERE id IN ($feed_ids_qmarks)
+						AND owner_uid = ?");
+					$sth->execute(array_merge($feed_ids, [$_SESSION['uid']]));
 				}
 			}
 
-			db_query($this->link, "COMMIT");
+			$this->pdo->commit();
 		}
 		return;
 	}
 
-	function resetPubSub() {
-
-		$ids = db_escape_string($_REQUEST["ids"]);
-
-		db_query($this->link, "UPDATE ttrss_feeds SET pubsub_state = 0 WHERE id IN ($ids)
-			AND owner_uid = " . $_SESSION["uid"]);
-
-		return;
-	}
-
 	function remove() {
 
-		$ids = split(",", db_escape_string($_REQUEST["ids"]));
+		$ids = explode(",", clean($_REQUEST["ids"]));
 
 		foreach ($ids as $id) {
-			remove_feed($this->link, $id, $_SESSION["uid"]);
+			Pref_Feeds::remove_feed($id, $_SESSION["uid"]);
 		}
 
 		return;
 	}
 
-	function clear() {
-		$id = db_escape_string($_REQUEST["id"]);
-		$this->clear_feed_articles($this->link, $id);
-	}
-
-	function rescore() {
-		require_once "rssfuncs.php";
-
-		$ids = split(",", db_escape_string($_REQUEST["ids"]));
-
-		foreach ($ids as $id) {
-
-			$filters = load_filters($this->link, $id, $_SESSION["uid"], 6);
-
-			$result = db_query($this->link, "SELECT
-				title, content, link, ref_id, author,".
-				SUBSTRING_FOR_DATE."(updated, 1, 19) AS updated
-			  	FROM
-					ttrss_user_entries, ttrss_entries
-					WHERE ref_id = id AND feed_id = '$id' AND
-						owner_uid = " .$_SESSION['uid']."
-					");
-
-			$scores = array();
-
-			while ($line = db_fetch_assoc($result)) {
-
-				$tags = get_article_tags($this->link, $line["ref_id"]);
-
-				$article_filters = get_article_filters($filters, $line['title'],
-					$line['content'], $line['link'], strtotime($line['updated']),
-					$line['author'], $tags);
-
-				$new_score = calculate_article_score($article_filters);
-
-				if (!$scores[$new_score]) $scores[$new_score] = array();
-
-				array_push($scores[$new_score], $line['ref_id']);
-			}
-
-			foreach (array_keys($scores) as $s) {
-				if ($s > 1000) {
-					db_query($this->link, "UPDATE ttrss_user_entries SET score = '$s',
-						marked = true WHERE
-						ref_id IN (" . join(',', $scores[$s]) . ")");
-				} else if ($s < -500) {
-					db_query($this->link, "UPDATE ttrss_user_entries SET score = '$s',
-						unread = false WHERE
-						ref_id IN (" . join(',', $scores[$s]) . ")");
-				} else {
-					db_query($this->link, "UPDATE ttrss_user_entries SET score = '$s' WHERE
-						ref_id IN (" . join(',', $scores[$s]) . ")");
-				}
-			}
-		}
-
-		print __("All done.");
-
-	}
-
-	function rescoreAll() {
-
-		$result = db_query($this->link,
-			"SELECT id FROM ttrss_feeds WHERE owner_uid = " . $_SESSION['uid']);
-
-		while ($feed_line = db_fetch_assoc($result)) {
-
-			$id = $feed_line["id"];
-
-			$filters = load_filters($this->link, $id, $_SESSION["uid"], 6);
-
-			$tmp_result = db_query($this->link, "SELECT
-				title, content, link, ref_id, author,".
-				  	SUBSTRING_FOR_DATE."(updated, 1, 19) AS updated
-					FROM
-					ttrss_user_entries, ttrss_entries
-					WHERE ref_id = id AND feed_id = '$id' AND
-						owner_uid = " .$_SESSION['uid']."
-					");
-
-			$scores = array();
-
-			while ($line = db_fetch_assoc($tmp_result)) {
-
-				$tags = get_article_tags($this->link, $line["ref_id"]);
-
-				$article_filters = get_article_filters($filters, $line['title'],
-					$line['content'], $line['link'], strtotime($line['updated']),
-					$line['author'], $tags);
-
-				$new_score = calculate_article_score($article_filters);
-
-				if (!$scores[$new_score]) $scores[$new_score] = array();
-
-				array_push($scores[$new_score], $line['ref_id']);
-			}
-
-			foreach (array_keys($scores) as $s) {
-				if ($s > 1000) {
-					db_query($this->link, "UPDATE ttrss_user_entries SET score = '$s',
-						marked = true WHERE
-						ref_id IN (" . join(',', $scores[$s]) . ")");
-				} else {
-					db_query($this->link, "UPDATE ttrss_user_entries SET score = '$s' WHERE
-						ref_id IN (" . join(',', $scores[$s]) . ")");
-				}
-			}
-		}
-
-		print __("All done.");
-
-	}
-
-	function categorize() {
-		$ids = split(",", db_escape_string($_REQUEST["ids"]));
-
-		$cat_id = db_escape_string($_REQUEST["cat_id"]);
-
-		if ($cat_id == 0) {
-			$cat_id_qpart = 'NULL';
-		} else {
-			$cat_id_qpart = "'$cat_id'";
-		}
-
-		db_query($this->link, "BEGIN");
-
-		foreach ($ids as $id) {
-
-			db_query($this->link, "UPDATE ttrss_feeds SET cat_id = $cat_id_qpart
-				WHERE id = '$id'
-			  	AND owner_uid = " . $_SESSION["uid"]);
-
-		}
-
-		db_query($this->link, "COMMIT");
-	}
-
 	function removeCat() {
-		$ids = split(",", db_escape_string($_REQUEST["ids"]));
+		$ids = explode(",", clean($_REQUEST["ids"]));
 		foreach ($ids as $id) {
-			remove_feed_category($this->link, $id, $_SESSION["uid"]);
+			$this->remove_feed_category($id, $_SESSION["uid"]);
 		}
 	}
 
 	function addCat() {
-		$feed_cat = db_escape_string(trim($_REQUEST["cat"]));
+		$feed_cat = trim(clean($_REQUEST["cat"]));
 
-		add_feed_category($this->link, $feed_cat);
+		add_feed_category($feed_cat);
 	}
 
 	function index() {
@@ -1223,10 +1140,15 @@ class Pref_Feeds extends Handler_Protected {
 		print "<div dojoType=\"dijit.layout.AccordionContainer\" region=\"center\">";
 		print "<div id=\"pref-feeds-feeds\" dojoType=\"dijit.layout.AccordionPane\" title=\"".__('Feeds')."\">";
 
-		$result = db_query($this->link, "SELECT COUNT(id) AS num_errors
-			FROM ttrss_feeds WHERE last_error != '' AND owner_uid = ".$_SESSION["uid"]);
+		$sth = $this->pdo->prepare("SELECT COUNT(id) AS num_errors
+			FROM ttrss_feeds WHERE last_error != '' AND owner_uid = ?");
+		$sth->execute([$_SESSION['uid']]);
 
-		$num_errors = db_fetch_result($result, 0, "num_errors");
+		if ($row = $sth->fetch()) {
+			$num_errors = $row["num_errors"];
+		} else {
+			$num_errors = 0;
+		}
 
 		if ($num_errors > 0) {
 
@@ -1235,27 +1157,13 @@ class Pref_Feeds extends Handler_Protected {
 				__("Feeds with errors") . "</button>";
 		}
 
-		if (DB_TYPE == "pgsql") {
-			$interval_qpart = "NOW() - INTERVAL '3 months'";
-		} else {
-			$interval_qpart = "DATE_SUB(NOW(), INTERVAL 3 MONTH)";
-		}
-
-		$result = db_query($this->link, "SELECT COUNT(*) AS num_inactive FROM ttrss_feeds WHERE
-					(SELECT MAX(updated) FROM ttrss_entries, ttrss_user_entries WHERE
-						ttrss_entries.id = ref_id AND
-							ttrss_user_entries.feed_id = ttrss_feeds.id) < $interval_qpart AND
-			ttrss_feeds.owner_uid = ".$_SESSION["uid"]);
+		$inactive_button = "<button dojoType=\"dijit.form.Button\"
+				id=\"pref_feeds_inactive_btn\"
+				style=\"display : none\"
+				onclick=\"showInactiveFeeds()\">" .
+				__("Inactive feeds") . "</button>";
 
-		$num_inactive = db_fetch_result($result, 0, "num_inactive");
-
-		if ($num_inactive > 0) {
-			$inactive_button = "<button dojoType=\"dijit.form.Button\"
-			  		onclick=\"showInactiveFeeds()\">" .
-					__("Inactive feeds") . "</button>";
-		}
-
-		$feed_search = db_escape_string($_REQUEST["search"]);
+		$feed_search = clean($_REQUEST["search"]);
 
 		if (array_key_exists("search", $_REQUEST)) {
 			$_SESSION["prefs_feed_search"] = $feed_search;
@@ -1294,16 +1202,16 @@ class Pref_Feeds extends Handler_Protected {
 			dojoType=\"dijit.MenuItem\">".__('Reset sort order')."</div>";
 		print "<div onclick=\"batchSubscribe()\"
 			dojoType=\"dijit.MenuItem\">".__('Batch subscribe')."</div>";
+		print "<div dojoType=\"dijit.MenuItem\" onclick=\"removeSelectedFeeds()\">"
+			.__('Unsubscribe')."</div> ";
 		print "</div></div>";
 
-		if (get_pref($this->link, 'ENABLE_FEED_CATS')) {
+		if (get_pref('ENABLE_FEED_CATS')) {
 			print "<div dojoType=\"dijit.form.DropDownButton\">".
 					"<span>" . __('Categories')."</span>";
 			print "<div dojoType=\"dijit.Menu\" style=\"display: none;\">";
 			print "<div onclick=\"createCategory()\"
 				dojoType=\"dijit.MenuItem\">".__('Add category')."</div>";
-			print "<div onclick=\"toggleHiddenFeedCats()\"
-				dojoType=\"dijit.MenuItem\">".__('(Un)hide empty categories')."</div>";
 			print "<div onclick=\"resetCatOrder()\"
 				dojoType=\"dijit.MenuItem\">".__('Reset sort order')."</div>";
 			print "<div onclick=\"removeSelectedCategories()\"
@@ -1315,27 +1223,6 @@ class Pref_Feeds extends Handler_Protected {
 		print $error_button;
 		print $inactive_button;
 
-		print "<button dojoType=\"dijit.form.Button\" onclick=\"removeSelectedFeeds()\">"
-			.__('Unsubscribe')."</button dojoType=\"dijit.form.Button\"> ";
-
-		if (defined('_ENABLE_FEED_DEBUGGING')) {
-
-			print "<select id=\"feedActionChooser\" onchange=\"feedActionChange()\">
-				<option value=\"facDefault\" selected>".__('More actions...')."</option>";
-
-			if (FORCE_ARTICLE_PURGE == 0) {
-				print
-					"<option value=\"facPurge\">".__('Manual purge')."</option>";
-			}
-
-			print "
-				<option value=\"facClear\">".__('Clear feed data')."</option>
-				<option value=\"facRescore\">".__('Rescore articles')."</option>";
-
-			print "</select>";
-
-		}
-
 		print "</div>"; # toolbar
 
 		//print '</div>';
@@ -1345,6 +1232,8 @@ class Pref_Feeds extends Handler_Protected {
 		<img src='images/indicator_tiny.gif'>".
 		 __("Loading, please wait...")."</div>";
 
+		$auto_expand = $feed_search != "" ? "true" : "false";
+
 		print "<div dojoType=\"fox.PrefFeedStore\" jsId=\"feedStore\"
 			url=\"backend.php?op=pref-feeds&method=getfeedtree\">
 		</div>
@@ -1355,6 +1244,7 @@ class Pref_Feeds extends Handler_Protected {
 		<div dojoType=\"fox.PrefFeedTree\" id=\"feedTree\"
 			dndController=\"dijit.tree.dndSource\"
 			betweenThreshold=\"5\"
+			autoExpand='$auto_expand'
 			model=\"feedModel\" openOnClick=\"false\">
 		<script type=\"dojo/method\" event=\"onClick\" args=\"item\">
 			var id = String(item.id);
@@ -1368,6 +1258,8 @@ class Pref_Feeds extends Handler_Protected {
 		</script>
 		<script type=\"dojo/method\" event=\"onLoad\" args=\"item\">
 			Element.hide(\"feedlistLoading\");
+
+			checkInactiveFeeds();
 		</script>
 		</div>";
 
@@ -1382,9 +1274,8 @@ class Pref_Feeds extends Handler_Protected {
 
 		print "<div dojoType=\"dijit.layout.AccordionPane\" title=\"".__('OPML')."\">";
 
-		print "<p>" . __("Using OPML you can export and import your feeds, filters, labels and Tiny Tiny RSS settings.") . " ";
-
-		print __("Only main settings profile can be migrated using OPML.") . "</p>";
+		print "<p>" . __("Using OPML you can export and import your feeds, filters, labels and Tiny Tiny RSS settings.") .
+			__("Only main settings profile can be migrated using OPML.") . "</p>";
 
 		print "<iframe id=\"upload_iframe\"
 			name=\"upload_iframe\" onload=\"opmlImportComplete(this)\"
@@ -1393,7 +1284,9 @@ class Pref_Feeds extends Handler_Protected {
 		print "<form  name=\"opml_form\" style='display : block' target=\"upload_iframe\"
 			enctype=\"multipart/form-data\" method=\"POST\"
 			action=\"backend.php\">
-			<input id=\"opml_file\" name=\"opml_file\" type=\"file\">&nbsp;
+			<label class=\"dijitButton\">".__("Choose file...")."
+				<input style=\"display : none\" id=\"opml_file\" name=\"opml_file\" type=\"file\">&nbsp;
+			</label>
 			<input type=\"hidden\" name=\"op\" value=\"dlg\">
 			<input type=\"hidden\" name=\"method\" value=\"importOpml\">
 			<button dojoType=\"dijit.form.Button\" onclick=\"return opmlImport();\" type=\"submit\">" .
@@ -1401,8 +1294,10 @@ class Pref_Feeds extends Handler_Protected {
 
 		print "<hr>";
 
+		$opml_export_filename = "TinyTinyRSS_".date("Y-m-d").".opml";
+
 		print "<p>" . __('Filename:') .
-            " <input type=\"text\" id=\"filename\" value=\"TinyTinyRSS.opml\" />&nbsp;" .
+            " <input class=\"input input-text\" type=\"text\" id=\"filename\" value=\"$opml_export_filename\" />&nbsp;" .
 				__('Include settings') . "<input type=\"checkbox\" id=\"settings\" checked=\"1\"/>";
 
 		print "</p><button dojoType=\"dijit.form.Button\"
@@ -1411,90 +1306,61 @@ class Pref_Feeds extends Handler_Protected {
 
 		print "<hr>";
 
-		print "<p>".__('Your OPML can be published publicly and can be subscribed by anyone who knows the URL below.') . " ";
+		print "<p>" . __('Your OPML can be published publicly and can be subscribed by anyone who knows the URL below.') . "</p>";
 
-		print __("Published OPML does not include your Tiny Tiny RSS settings, feeds that require authentication or feeds hidden from Popular feeds.") . "</p>";
+		print_warning("Published OPML does not include your Tiny Tiny RSS settings, feeds that require authentication or feeds hidden from Popular feeds.");
 
-		print "<button dojoType=\"dijit.form.Button\" onclick=\"return displayDlg('pubOPMLUrl')\">".
+		print "<button dojoType=\"dijit.form.Button\" onclick=\"return displayDlg('".__("Public OPML URL")."','pubOPMLUrl')\">".
 			__('Display published OPML URL')."</button> ";
 
-		global $pluginhost;
-		$pluginhost->run_hooks($pluginhost::HOOK_PREFS_TAB_SECTION,
+		PluginHost::getInstance()->run_hooks(PluginHost::HOOK_PREFS_TAB_SECTION,
 			"hook_prefs_tab_section", "prefFeedsOPML");
 
 		print "</div>"; # pane
 
-		if (strpos($_SERVER['HTTP_USER_AGENT'], "Firefox") !== false) {
-
-			print "<div dojoType=\"dijit.layout.AccordionPane\" title=\"".__('Firefox integration')."\">";
-
-			print "<p>" . __('This Tiny Tiny RSS site can be used as a Firefox Feed Reader by clicking the link below.') . "</p>";
-
-			print "<p>";
-
-			print "<button onclick='window.navigator.registerContentHandler(" .
-                      "\"application/vnd.mozilla.maybe.feed\", " .
-                      "\"" . add_feed_url() . "\", " . " \"Tiny Tiny RSS\")'>" .
-							 __('Click here to register this site as a feed reader.') .
-				"</button>";
-
-			print "</p>";
-
-			print "</div>"; # pane
-		}
-
 		print "<div dojoType=\"dijit.layout.AccordionPane\" title=\"".__('Published & shared articles / Generated feeds')."\">";
 
-		print "<h3>" . __("Published articles and generated feeds") . "</h3>";
-
-		print "<p>".__('Published articles are exported as a public RSS feed and can be subscribed by anyone who knows the URL specified below.')."</p>";
+		print "<p>" . __('Published articles are exported as a public RSS feed and can be subscribed by anyone who knows the URL specified below.') . "</p>";
 
 		$rss_url = '-2::' . htmlspecialchars(get_self_url_prefix() .
 				"/public.php?op=rss&id=-2&view-mode=all_articles");;
 
-		print "<button dojoType=\"dijit.form.Button\" onclick=\"return displayDlg('generatedFeed', '$rss_url')\">".
+		print "<p>";
+
+		print "<button dojoType=\"dijit.form.Button\" onclick=\"return displayDlg('".__("View as RSS")."','generatedFeed', '$rss_url')\">".
 			__('Display URL')."</button> ";
 
-		print "<button dojoType=\"dijit.form.Button\" onclick=\"return clearFeedAccessKeys()\">".
+		print "<button class=\"warning\" dojoType=\"dijit.form.Button\" onclick=\"return clearFeedAccessKeys()\">".
 			__('Clear all generated URLs')."</button> ";
 
-		print "<h3>" . __("Articles shared by URL") . "</h3>";
-
-		print "<p>" . __("You can disable all articles shared by unique URLs here.") . "</p>";
-
-		print "<button dojoType=\"dijit.form.Button\" onclick=\"return clearArticleAccessKeys()\">".
-			__('Unshare all articles')."</button> ";
+		print "</p>";
 
-		global $pluginhost;
-		$pluginhost->run_hooks($pluginhost::HOOK_PREFS_TAB_SECTION,
+		PluginHost::getInstance()->run_hooks(PluginHost::HOOK_PREFS_TAB_SECTION,
 			"hook_prefs_tab_section", "prefFeedsPublishedGenerated");
 
 		print "</div>"; #pane
 
-		global $pluginhost;
-
-		$pluginhost->run_hooks($pluginhost::HOOK_PREFS_TAB,
+		PluginHost::getInstance()->run_hooks(PluginHost::HOOK_PREFS_TAB,
 			"hook_prefs_tab", "prefFeeds");
 
 		print "</div>"; #container
 	}
 
-	private function feedlist_init_cat($cat_id, $hidden = false) {
+	private function feedlist_init_cat($cat_id) {
 		$obj = array();
 		$cat_id = (int) $cat_id;
 
 		if ($cat_id > 0) {
-			$cat_unread = ccache_find($this->link, $cat_id, $_SESSION["uid"], true);
+			$cat_unread = CCache::find($cat_id, $_SESSION["uid"], true);
 		} else if ($cat_id == 0 || $cat_id == -2) {
-			$cat_unread = getCategoryUnread($this->link, $cat_id);
+			$cat_unread = Feeds::getCategoryUnread($cat_id);
 		}
 
 		$obj['id'] = 'CAT:' . $cat_id;
 		$obj['items'] = array();
-		$obj['name'] = getCategoryTitle($this->link, $cat_id);
+		$obj['name'] = Feeds::getCategoryTitle($cat_id);
 		$obj['type'] = 'category';
 		$obj['unread'] = (int) $cat_unread;
-		$obj['hidden'] = $hidden;
 		$obj['bare_id'] = $cat_id;
 
 		return $obj;
@@ -1505,10 +1371,10 @@ class Pref_Feeds extends Handler_Protected {
 		$feed_id = (int) $feed_id;
 
 		if (!$title)
-			$title = getFeedTitle($this->link, $feed_id, false);
+			$title = Feeds::getFeedTitle($feed_id, false);
 
 		if ($unread === false)
-			$unread = getFeedUnread($this->link, $feed_id, false);
+			$unread = getFeedUnread($feed_id, false);
 
 		$obj['id'] = 'FEED:' . $feed_id;
 		$obj['name'] = $title;
@@ -1516,8 +1382,9 @@ class Pref_Feeds extends Handler_Protected {
 		$obj['type'] = 'feed';
 		$obj['error'] = $error;
 		$obj['updated'] = $updated;
-		$obj['icon'] = getFeedIcon($feed_id);
+		$obj['icon'] = Feeds::getFeedIcon($feed_id);
 		$obj['bare_id'] = $feed_id;
+		$obj['auxcounter'] = 0;
 
 		return $obj;
 	}
@@ -1530,19 +1397,20 @@ class Pref_Feeds extends Handler_Protected {
 			$interval_qpart = "DATE_SUB(NOW(), INTERVAL 3 MONTH)";
 		}
 
-		$result = db_query($this->link, "SELECT ttrss_feeds.title, ttrss_feeds.site_url,
+		$sth = $this->pdo->prepare("SELECT ttrss_feeds.title, ttrss_feeds.site_url,
 		  		ttrss_feeds.feed_url, ttrss_feeds.id, MAX(updated) AS last_article
 			FROM ttrss_feeds, ttrss_entries, ttrss_user_entries WHERE
 				(SELECT MAX(updated) FROM ttrss_entries, ttrss_user_entries WHERE
 					ttrss_entries.id = ref_id AND
 						ttrss_user_entries.feed_id = ttrss_feeds.id) < $interval_qpart
-			AND ttrss_feeds.owner_uid = ".$_SESSION["uid"]." AND
+			AND ttrss_feeds.owner_uid = ? AND
 				ttrss_user_entries.feed_id = ttrss_feeds.id AND
 				ttrss_entries.id = ref_id
 			GROUP BY ttrss_feeds.title, ttrss_feeds.id, ttrss_feeds.site_url, ttrss_feeds.feed_url
 			ORDER BY last_article");
+		$sth->execute([$_SESSION['uid']]);
 
-		print "<div class=\"dialogNotice\">" . __("These feeds have not been updated with new content for 3 months (oldest first):") . "</div>";
+		print "<p" .__("These feeds have not been updated with new content for 3 months (oldest first):") . "</p>";
 
 		print "<div dojoType=\"dijit.Toolbar\">";
 		print "<div dojoType=\"dijit.form.DropDownButton\">".
@@ -1561,17 +1429,14 @@ class Pref_Feeds extends Handler_Protected {
 
 		$lnum = 1;
 
-		while ($line = db_fetch_assoc($result)) {
+		while ($line = $sth->fetch()) {
 
-			$class = ($lnum % 2) ? "even" : "odd";
 			$feed_id = $line["id"];
 			$this_row_id = "id=\"FUPDD-$feed_id\"";
 
 			# class needed for selectTableRows()
 			print "<tr class=\"placeholder\" $this_row_id>";
 
-			$edit_title = htmlspecialchars($line["title"]);
-
 			# id needed for selectTableRows()
 			print "<td width='5%' align='center'><input
 				onclick='toggleSelectRow2(this);' dojoType=\"dijit.form.CheckBox\"
@@ -1584,7 +1449,7 @@ class Pref_Feeds extends Handler_Protected {
 				htmlspecialchars($line["title"])."</a>";
 
 			print "</td><td class=\"insensitive\" align='right'>";
-			print make_local_datetime($this->link, $line['last_article'], false);
+			print make_local_datetime($line['last_article'], false);
 			print "</td>";
 			print "</tr>";
 
@@ -1596,7 +1461,7 @@ class Pref_Feeds extends Handler_Protected {
 
 		print "<div class='dlgButtons'>";
 		print "<div style='float : left'>";
-		print "<button dojoType=\"dijit.form.Button\" onclick=\"dijit.byId('inactiveFeedsDlg').removeSelected()\">"
+		print "<button class=\"btn-danger\" dojoType=\"dijit.form.Button\" onclick=\"dijit.byId('inactiveFeedsDlg').removeSelected()\">"
 			.__('Unsubscribe from selected feeds')."</button> ";
 		print "</div>";
 
@@ -1608,10 +1473,9 @@ class Pref_Feeds extends Handler_Protected {
 	}
 
 	function feedsWithErrors() {
-		print "<div class=\"dialogNotice\">" . __("These feeds have not been updated because of errors:") . "</div>";
-
-		$result = db_query($this->link, "SELECT id,title,feed_url,last_error,site_url
-		FROM ttrss_feeds WHERE last_error != '' AND owner_uid = ".$_SESSION["uid"]);
+		$sth = $this->pdo->prepare("SELECT id,title,feed_url,last_error,site_url
+			FROM ttrss_feeds WHERE last_error != '' AND owner_uid = ?");
+		$sth->execute([$_SESSION['uid']]);
 
 		print "<div dojoType=\"dijit.Toolbar\">";
 		print "<div dojoType=\"dijit.form.DropDownButton\">".
@@ -1630,17 +1494,14 @@ class Pref_Feeds extends Handler_Protected {
 
 		$lnum = 1;
 
-		while ($line = db_fetch_assoc($result)) {
+		while ($line = $sth->fetch()) {
 
-			$class = ($lnum % 2) ? "even" : "odd";
 			$feed_id = $line["id"];
 			$this_row_id = "id=\"FERDD-$feed_id\"";
 
 			# class needed for selectTableRows()
 			print "<tr class=\"placeholder\" $this_row_id>";
 
-			$edit_title = htmlspecialchars($line["title"]);
-
 			# id needed for selectTableRows()
 			print "<td width='5%' align='center'><input
 				onclick='toggleSelectRow2(this);' dojoType=\"dijit.form.CheckBox\"
@@ -1667,7 +1528,7 @@ class Pref_Feeds extends Handler_Protected {
 
 		print "<div class='dlgButtons'>";
 		print "<div style='float : left'>";
-		print "<button dojoType=\"dijit.form.Button\" onclick=\"dijit.byId('errorFeedsDlg').removeSelected()\">"
+		print "<button class=\"btn-danger\" dojoType=\"dijit.form.Button\" onclick=\"dijit.byId('errorFeedsDlg').removeSelected()\">"
 			.__('Unsubscribe from selected feeds')."</button> ";
 		print "</div>";
 
@@ -1677,29 +1538,246 @@ class Pref_Feeds extends Handler_Protected {
 		print "</div>";
 	}
 
-	/**
-	 * Purge a feed contents, marked articles excepted.
-	 *
-	 * @param mixed $link The database connection.
-	 * @param integer $id The id of the feed to purge.
-	 * @return void
-	 */
-	private function clear_feed_articles($link, $id) {
-
-		if ($id != 0) {
-			$result = db_query($link, "DELETE FROM ttrss_user_entries
-			WHERE feed_id = '$id' AND marked = false AND owner_uid = " . $_SESSION["uid"]);
+	private function remove_feed_category($id, $owner_uid) {
+
+		$sth = $this->pdo->prepare("DELETE FROM ttrss_feed_categories
+			WHERE id = ? AND owner_uid = ?");
+		$sth->execute([$id, $owner_uid]);
+
+		CCache::remove($id, $owner_uid, true);
+	}
+
+	static function remove_feed($id, $owner_uid) {
+		foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_UNSUBSCRIBE_FEED) as $p) {
+			if (! $p->hook_unsubscribe_feed($id, $owner_uid)) {
+                user_error("Feed $id (owner: $owner_uid) not removed due to plugin error (HOOK_UNSUBSCRIBE_FEED).", E_USER_WARNING);
+                return;
+			}
+		}
+
+		$pdo = Db::pdo();
+
+		if ($id > 0) {
+			$pdo->beginTransaction();
+
+			/* save starred articles in Archived feed */
+
+			/* prepare feed if necessary */
+
+			$sth = $pdo->prepare("SELECT feed_url FROM ttrss_feeds WHERE id = ?
+				AND owner_uid = ?");
+			$sth->execute([$id, $owner_uid]);
+
+			if ($row = $sth->fetch()) {
+				$feed_url = $row["feed_url"];
+
+				$sth = $pdo->prepare("SELECT id FROM ttrss_archived_feeds
+					WHERE feed_url = ? AND owner_uid = ?");
+				$sth->execute([$feed_url, $owner_uid]);
+
+				if ($row = $sth->fetch()) {
+					$archive_id = $row["id"];
+				} else {
+					$res = $pdo->query("SELECT MAX(id) AS id FROM ttrss_archived_feeds");
+					$row = $res->fetch();
+
+					$new_feed_id = (int)$row['id'] + 1;
+
+					$sth = $pdo->prepare("INSERT INTO ttrss_archived_feeds
+						(id, owner_uid, title, feed_url, site_url)
+							SELECT ?, owner_uid, title, feed_url, site_url from ttrss_feeds
+							WHERE id = ?");
+					$sth->execute([$new_feed_id, $id]);
+
+					$archive_id = $new_feed_id;
+				}
+
+				$sth = $pdo->prepare("UPDATE ttrss_user_entries SET feed_id = NULL,
+					orig_feed_id = ? WHERE feed_id = ? AND
+						marked = true AND owner_uid = ?");
+
+				$sth->execute([$archive_id, $id, $owner_uid]);
+
+				/* Remove access key for the feed */
+
+				$sth = $pdo->prepare("DELETE FROM ttrss_access_keys WHERE
+					feed_id = ? AND owner_uid = ?");
+				$sth->execute([$id, $owner_uid]);
+
+				/* remove the feed */
+
+				$sth = $pdo->prepare("DELETE FROM ttrss_feeds
+					WHERE id = ? AND owner_uid = ?");
+				$sth->execute([$id, $owner_uid]);
+			}
+
+			$pdo->commit();
+
+			if (file_exists(ICONS_DIR . "/$id.ico")) {
+				unlink(ICONS_DIR . "/$id.ico");
+			}
+
+			CCache::remove($id, $owner_uid);
+
 		} else {
-			$result = db_query($link, "DELETE FROM ttrss_user_entries
-			WHERE feed_id IS NULL AND marked = false AND owner_uid = " . $_SESSION["uid"]);
+			Labels::remove(Labels::feed_to_label_id($id), $owner_uid);
+			//CCache::remove($id, $owner_uid); don't think labels are cached
 		}
+	}
 
-		$result = db_query($link, "DELETE FROM ttrss_entries WHERE
-			(SELECT COUNT(int_id) FROM ttrss_user_entries WHERE ref_id = id) = 0");
+	function batchSubscribe() {
+		print_hidden("op", "pref-feeds");
+		print_hidden("method", "batchaddfeeds");
 
-		ccache_update($link, $id, $_SESSION['uid']);
-	} // function clear_feed_articles
+		print "<table width='100%'><tr><td>
+			".__("Add one valid RSS feed per line (no feed detection is done)")."
+		</td><td align='right'>";
+		if (get_pref('ENABLE_FEED_CATS')) {
+			print __('Place in category:') . " ";
+			print_feed_cat_select("cat", false, 'dojoType="dijit.form.Select"');
+		}
+		print "</td></tr><tr><td colspan='2'>";
+		print "<textarea
+			style='font-size : 12px; width : 98%; height: 200px;'
+			placeHolder=\"".__("Feeds to subscribe, One per line")."\"
+			dojoType=\"dijit.form.SimpleTextarea\" required=\"1\" name=\"feeds\"></textarea>";
+
+		print "</td></tr><tr><td colspan='2'>";
+
+		print "<div id='feedDlg_loginContainer' style='display : none'>
+				" .
+				" <input dojoType=\"dijit.form.TextBox\" name='login'\"
+					placeHolder=\"".__("Login")."\"
+					style=\"width : 10em;\"> ".
+				" <input
+					placeHolder=\"".__("Password")."\"
+					dojoType=\"dijit.form.TextBox\" type='password'
+					autocomplete=\"new-password\"
+					style=\"width : 10em;\" name='pass'\">".
+				"</div>";
+
+		print "</td></tr><tr><td colspan='2'>";
+
+		print "<div style=\"clear : both\">
+			<input type=\"checkbox\" name=\"need_auth\" dojoType=\"dijit.form.CheckBox\" id=\"feedDlg_loginCheck\"
+					onclick='checkboxToggleElement(this, \"feedDlg_loginContainer\")'>
+				<label for=\"feedDlg_loginCheck\">".
+				__('Feeds require authentication.')."</div>";
+
+		print "</form>";
+
+		print "</td></tr></table>";
+
+		print "<div class=\"dlgButtons\">
+			<button dojoType=\"dijit.form.Button\" onclick=\"return dijit.byId('batchSubDlg').execute()\">".__('Subscribe')."</button>
+			<button dojoType=\"dijit.form.Button\" onclick=\"return dijit.byId('batchSubDlg').hide()\">".__('Cancel')."</button>
+			</div>";
+	}
+
+	function batchAddFeeds() {
+		$cat_id = clean($_REQUEST['cat']);
+		$feeds = explode("\n", clean($_REQUEST['feeds']));
+		$login = clean($_REQUEST['login']);
+		$pass = trim(clean($_REQUEST['pass']));
+
+		foreach ($feeds as $feed) {
+			$feed = trim($feed);
+
+			if (validate_feed_url($feed)) {
+
+				$this->pdo->beginTransaction();
+
+				$sth = $this->pdo->prepare("SELECT id FROM ttrss_feeds
+						WHERE feed_url = ? AND owner_uid = ?");
+				$sth->execute([$feed, $_SESSION['uid']]);
+
+				if (!$sth->fetch()) {
+					$sth = $this->pdo->prepare("INSERT INTO ttrss_feeds
+							(owner_uid,feed_url,title,cat_id,auth_login,auth_pass,update_method,auth_pass_encrypted)
+						VALUES (?, ?, '[Unknown]', ?, ?, ?, 0, false)");
+
+					$sth->execute([$_SESSION['uid'], $feed, $cat_id ? $cat_id : null, $login, $pass]);
+				}
+
+				$this->pdo->commit();
+			}
+		}
+	}
+
+	function regenOPMLKey() {
+		$this->update_feed_access_key('OPML:Publish',
+		false, $_SESSION["uid"]);
+
+		$new_link = Opml::opml_publish_url();
+
+		print json_encode(array("link" => $new_link));
+	}
+
+	function regenFeedKey() {
+		$feed_id = clean($_REQUEST['id']);
+		$is_cat = clean($_REQUEST['is_cat']);
+
+		$new_key = $this->update_feed_access_key($feed_id, $is_cat);
+
+		print json_encode(["link" => $new_key]);
+	}
+
+
+	private function update_feed_access_key($feed_id, $is_cat, $owner_uid = false) {
+		if (!$owner_uid) $owner_uid = $_SESSION["uid"];
+
+		// clear old value and generate new one
+		$sth = $this->pdo->prepare("DELETE FROM ttrss_access_keys
+			WHERE feed_id = ? AND is_cat = ? AND owner_uid = ?");
+		$sth->execute([$feed_id, bool_to_sql_bool($is_cat), $owner_uid]);
 
+		return get_feed_access_key($feed_id, $is_cat, $owner_uid);
+	}
+
+	// Silent
+	function clearKeys() {
+		$sth = $this->pdo->prepare("DELETE FROM ttrss_access_keys WHERE
+			owner_uid = ?");
+		$sth->execute([$_SESSION['uid']]);
+	}
+
+	private function calculate_children_count($cat) {
+		$c = 0;
+
+		foreach ($cat['items'] as $child) {
+			if ($child['type'] == 'category') {
+				$c += $this->calculate_children_count($child);
+			} else {
+				$c += 1;
+			}
+		}
+
+		return $c;
+	}
+
+	function getinactivefeeds() {
+		if (DB_TYPE == "pgsql") {
+			$interval_qpart = "NOW() - INTERVAL '3 months'";
+		} else {
+			$interval_qpart = "DATE_SUB(NOW(), INTERVAL 3 MONTH)";
+		}
+
+		$sth = $this->pdo->prepare("SELECT COUNT(id) AS num_inactive FROM ttrss_feeds WHERE
+				(SELECT MAX(updated) FROM ttrss_entries, ttrss_user_entries WHERE
+					ttrss_entries.id = ref_id AND
+						ttrss_user_entries.feed_id = ttrss_feeds.id) < $interval_qpart AND
+			  ttrss_feeds.owner_uid = ?");
+		$sth->execute([$_SESSION['uid']]);
+
+		if ($row = $sth->fetch()) {
+			print (int)$row["num_inactive"];
+		}
+	}
+
+	static function subscribe_to_feed_url() {
+		$url_path = get_self_url_prefix() .
+			"/public.php?op=subscribe&feed_url=%s";
+		return $url_path;
+	}
 
 }
-?>