]> git.wh0rd.org - tt-rss.git/blame - backend.php
add catchup button to main toolbar
[tt-rss.git] / backend.php
CommitLineData
1d3a17c7 1<?php
d65981e2
AD
2 error_reporting(E_ERROR | E_WARNING | E_PARSE);
3
ce885e21
AD
4 /* remove ill effects of magic quotes */
5
6 if (get_magic_quotes_gpc()) {
b4e75b2a 7 $_REQUEST = array_map('stripslashes', $_REQUEST);
ce885e21
AD
8 $_POST = array_map('stripslashes', $_POST);
9 $_REQUEST = array_map('stripslashes', $_REQUEST);
10 $_COOKIE = array_map('stripslashes', $_COOKIE);
11 }
12
36bfab86 13 require_once "sessions.php";
c339343b 14 require_once "modules/backend-rpc.php";
dc56b3b7 15
b4e75b2a 16/* if ($_REQUEST["debug"]) {
cce28758
AD
17 define('DEFAULT_ERROR_LEVEL', E_ALL);
18 } else {
19 define('DEFAULT_ERROR_LEVEL', E_ERROR | E_WARNING | E_PARSE);
20 }
894ebcf5
AD
21
22 error_reporting(DEFAULT_ERROR_LEVEL); */
cce28758 23
657770a0
AD
24 require_once "sanity_check.php";
25 require_once "config.php";
af106b0e
AD
26
27 require_once "db.php";
28 require_once "db-prefs.php";
29 require_once "functions.php";
657770a0 30
dc56b3b7 31 no_cache_incantation();
8d039718
AD
32
33 if (ENABLE_TRANSLATIONS == true) {
34 startup_gettext();
35 }
dc56b3b7 36
7f0acba7
AD
37 $script_started = getmicrotime();
38
39 $link = db_connect(DB_HOST, DB_USER, DB_PASS, DB_NAME);
40
41 if (!$link) {
42 if (DB_TYPE == "mysql") {
43 print mysql_error();
44 }
45 // PG seems to display its own errors just fine by default.
46 return;
47 }
48
f29ba148 49 init_connection($link);
7f0acba7
AD
50
51 $op = $_REQUEST["op"];
fac5e7d1 52 $mode = $_REQUEST["mode"];
7f0acba7 53
c339343b 54 $print_exec_time = false;
7e3634d9 55
fac5e7d1
AD
56 if ((!$op || $op == "rpc" || $op == "rss" ||
57 ($op == "view" && $mode != "zoom") ||
945c243e 58 $op == "digestSend" || $op == "viewfeed" || $op == "publish" ||
18664970 59 $op == "globalUpdateFeeds") && !$_REQUEST["noxml"]) {
04fedbf5
AD
60 header("Content-Type: application/xml; charset=utf-8");
61
62 if (ENABLE_GZIP_OUTPUT) {
63 ob_start("ob_gzhandler");
64 }
65
9fdf7824
AD
66 } else {
67 if (!$_REQUEST["noxml"]) {
68 header("Content-Type: text/html; charset=utf-8");
69 } else {
70 header("Content-Type: text/plain; charset=utf-8");
71 }
262bd8ea
AD
72 }
73
f3acc32e
AD
74 if (!$op) {
75 header("Content-Type: application/xml");
76 print_error_xml(7); exit;
77 }
9c883208
AD
78
79 if (SINGLE_USER_MODE) {
80 authenticate_user($link, "admin", null);
81 }
82
7f0acba7 83 if (!($_SESSION["uid"] && validate_session($link)) && $op != "globalUpdateFeeds"
945c243e 84 && $op != "rss" && $op != "getUnread" && $op != "publish") {
262bd8ea 85
2e918d9d 86 if ($op == "rpc" || $op == "viewfeed" || $op == "view") {
af106b0e 87 print_error_xml(6); die;
04269460
AD
88 } else {
89 print "
90 <html><body>
91 <p>Error: Not logged in.</p>
92 <script type=\"text/javascript\">
93 if (parent.window != 'undefined') {
01a87dff 94 parent.window.location = \"tt-rss.php\";
04269460 95 } else {
01a87dff 96 window.location = \"tt-rss.php\";
04269460
AD
97 }
98 </script>
99 </body></html>
100 ";
262bd8ea
AD
101 }
102 exit;
103 }
1c7f75ed 104
ad815c71 105 $purge_intervals = array(
d1db26aa
AD
106 0 => __("Use default"),
107 -1 => __("Never purge"),
108 5 => __("1 week old"),
109 14 => __("2 weeks old"),
110 31 => __("1 month old"),
111 60 => __("2 months old"),
112 90 => __("3 months old"));
ad815c71
AD
113
114 $update_intervals = array(
ecace165 115 0 => __("Default interval"),
d1db26aa 116 -1 => __("Disable updates"),
1e7cbe16 117 15 => __("Each 15 minutes"),
d1db26aa
AD
118 30 => __("Each 30 minutes"),
119 60 => __("Hourly"),
120 240 => __("Each 4 hours"),
121 720 => __("Each 12 hours"),
122 1440 => __("Daily"),
123 10080 => __("Weekly"));
ad815c71 124
16211ddb 125 $update_methods = array(
ecace165 126 0 => __("Default"),
0dd9c0cf
AD
127 1 => __("Magpie"),
128 2 => __("SimplePie"));
16211ddb
AD
129
130 if (ENABLE_SIMPLEPIE) {
131 $update_methods[0] .= ' (SimplePie)';
132 } else {
133 $update_methods[0] .= ' (Magpie)';
134 }
135
3c5783b7 136 $access_level_names = array(
d1db26aa 137 0 => __("User"),
a88d37e5 138 5 => __("Power User"),
d1db26aa 139 10 => __("Administrator"));
3c5783b7 140
f27d955a 141 require_once "modules/pref-prefs.php";
ef8be8ea
AD
142 require_once "modules/popup-dialog.php";
143 require_once "modules/help.php";
144 require_once "modules/pref-feeds.php";
145 require_once "modules/pref-filters.php";
146 require_once "modules/pref-labels.php";
147 require_once "modules/pref-users.php";
ef8be8ea 148
b2804af7 149 if (!sanity_check($link)) { return; }
023fe037 150
45004d43
AD
151 switch($op) { // Select action according to $op value.
152 case "rpc":
153 // Handle remote procedure calls.
154 handle_rpc_request($link);
155 break; // rpc
156
157 case "feeds":
877be781
AD
158 if (ENABLE_GZIP_OUTPUT) {
159 ob_start("ob_gzhandler");
160 }
161
b4e75b2a 162 $tags = $_REQUEST["tags"];
45004d43 163
b4e75b2a 164 $subop = $_REQUEST["subop"];
45004d43
AD
165
166 switch($subop) {
167 case "catchupAll":
168 db_query($link, "UPDATE ttrss_user_entries SET
169 last_read = NOW(),unread = false WHERE owner_uid = " . $_SESSION["uid"]);
ad0056a8
AD
170 ccache_zero_all($link, $_SESSION["uid"]);
171
45004d43
AD
172 break;
173
174 case "collapse":
b4e75b2a 175 $cat_id = db_escape_string($_REQUEST["cid"]);
7f969260 176 toggle_collapse_cat($link, $cat_id);
45004d43
AD
177 return;
178 break;
9d393c84
AD
179
180 case "catsortreset":
181 db_query($link, "UPDATE ttrss_feed_categories
182 SET order_id = 0 WHERE owner_uid = " . $_SESSION["uid"]);
183 return;
184 break;
185
186 case "catsort":
b4e75b2a 187 $corder = db_escape_string($_REQUEST["corder"]);
9d393c84
AD
188
189 $cats = split(",", $corder);
190
191 for ($i = 0; $i < count($cats); $i++) {
192 $cat_id = $cats[$i];
193
194 if ($cat_id > 0) {
195 db_query($link, "UPDATE ttrss_feed_categories
196 SET order_id = '$i' WHERE id = '$cat_id' AND
197 owner_uid = " . $_SESSION["uid"]);
198 }
199 }
200
201 return;
202 break;
203
45004d43 204 }
c3b81db0 205
45a15f78
AD
206 $_SESSION["viewfeed:counters_stamp"] = time();
207
45004d43
AD
208 outputFeedList($link, $tags);
209 break; // feeds
1cd17194 210
45004d43 211 case "view":
e097e8be 212
b4e75b2a
AD
213 $id = db_escape_string($_REQUEST["id"]);
214 $cids = split(",", db_escape_string($_REQUEST["cids"]));
215 $mode = db_escape_string($_REQUEST["mode"]);
216 $omode = db_escape_string($_REQUEST["omode"]);
e097e8be 217
b4e75b2a 218 $csync = $_REQUEST["csync"];
6cc1fab3 219
45004d43 220 print "<reply>";
e097e8be 221
45004d43
AD
222 // in prefetch mode we only output requested cids, main article
223 // just gets marked as read (it already exists in client cache)
e097e8be 224
45004d43 225 if ($mode == "") {
e04c18a2 226 outputArticleXML($link, $id, false);
eedfb635 227 } else if ($mode == "zoom") {
e04c18a2 228 outputArticleXML($link, $id, false, true, true);
45004d43
AD
229 } else {
230 catchupArticleById($link, $id, 0);
231 }
e097e8be 232
a598370d
AD
233 if (!$_SESSION["bw_limit"]) {
234 foreach ($cids as $cid) {
235 if ($cid) {
e04c18a2 236 outputArticleXML($link, $cid, false, false);
a598370d 237 }
45004d43 238 }
e097e8be 239 }
e097e8be 240
bd090ab4 241// if (get_pref($link, "SYNC_COUNTERS") || ($mode == "prefetch" && $csync)) {
3c204a8e 242
ab197ae1 243 if (time() - $_SESSION["view:counters_stamp"] > 5 && $mode == "prefetch") {
45004d43
AD
244 print "<counters>";
245 getAllCounters($link, $omode);
246 print "</counters>";
3c204a8e
AD
247 $_SESSION["view:counters_stamp"] = time();
248 }
5a94a953 249
45004d43
AD
250 print "</reply>";
251 break; // view
1cd17194 252
45004d43 253 case "viewfeed":
1cd17194 254
45004d43
AD
255 $print_exec_time = true;
256 $timing_info = getmicrotime();
46921916 257
45004d43 258 print "<reply>";
3de0261a 259
b4e75b2a 260 if ($_REQUEST["debug"]) $timing_info = print_checkpoint("0", $timing_info);
46921916 261
b4e75b2a 262 $omode = db_escape_string($_REQUEST["omode"]);
3de0261a 263
b4e75b2a
AD
264 $feed = db_escape_string($_REQUEST["feed"]);
265 $subop = db_escape_string($_REQUEST["subop"]);
266 $view_mode = db_escape_string($_REQUEST["view_mode"]);
267 $limit = db_escape_string($_REQUEST["limit"]);
268 $cat_view = db_escape_string($_REQUEST["cat"]);
269 $next_unread_feed = db_escape_string($_REQUEST["nuf"]);
270 $offset = db_escape_string($_REQUEST["skip"]);
271 $vgroup_last_feed = db_escape_string($_REQUEST["vgrlf"]);
272 $csync = $_REQUEST["csync"];
273 $order_by = db_escape_string($_REQUEST["order_by"]);
203de776 274
51e196de
AD
275 /* Updating a label ccache means recalculating all of the caches
276 * so for performance reasons we don't do that here */
277
5c432ba4 278// if (time() - $_SESSION["viewfeed:ccache_update_stamp"] > 120) {
34c30ac1
AD
279 if ($feed >= 0) {
280 ccache_update($link, $feed, $_SESSION["uid"], $cat_view);
281 }
282 $_SESSION["viewfeed:ccache_update_stamp"] = time();
5c432ba4 283// }
0737b95a 284
45004d43
AD
285 set_pref($link, "_DEFAULT_VIEW_MODE", $view_mode);
286 set_pref($link, "_DEFAULT_VIEW_LIMIT", $limit);
7b4d02a8 287 set_pref($link, "_DEFAULT_VIEW_ORDER_BY", $order_by);
40496720 288
45004d43
AD
289 if (!$cat_view && preg_match("/^[0-9][0-9]*$/", $feed)) {
290 db_query($link, "UPDATE ttrss_feeds SET last_viewed = NOW()
291 WHERE id = '$feed' AND owner_uid = ".$_SESSION["uid"]);
292 }
7466dc6a 293
1098687a
AD
294 if (!$next_unread_feed) {
295 print "<headlines id=\"$feed\" is_cat=\"$cat_view\"><![CDATA[";
296 } else {
297 print "<headlines id=\"$next_unread_feed\" is_cat=\"$cat_view\"><![CDATA[";
298 }
a5c815d3
AD
299
300 $override_order = false;
301
302 switch ($order_by) {
303 case "date":
304 if (get_pref($link, 'REVERSE_HEADLINES', $owner_uid)) {
305 $override_order = "updated";
306 } else {
307 $override_order = "updated DESC";
308 }
309 break;
c50e2b30 310
a5c815d3
AD
311 case "title":
312 $override_order = "updated DESC";
313 break;
d76a3b03 314
a5c815d3
AD
315 case "score":
316 $override_order = "score DESC";
317 break;
318 }
e19c1824 319
a5c815d3
AD
320 $ret = outputHeadlinesList($link, $feed, $subop,
321 $view_mode, $limit, $cat_view, $next_unread_feed, $offset,
322 $vgroup_last_feed, $override_order);
7b4d02a8 323
a5c815d3
AD
324 $topmost_article_ids = $ret[0];
325 $headlines_count = $ret[1];
326 $returned_feed = $ret[2];
327 $disable_cache = $ret[3];
328 $vgroup_last_feed = $ret[4];
7b4d02a8 329
a5c815d3 330 print "]]></headlines>";
46921916 331
a5c815d3
AD
332 print "<headlines-count value=\"$headlines_count\"/>";
333 print "<vgroup-last-feed value=\"$vgroup_last_feed\"/>";
081e527d 334
cfcb7d42 335 $headlines_unread = ccache_find($link, $returned_feed, $_SESSION["uid"],
696a6850
AD
336 $cat_view, true);
337
338 if ($headlines_unread == -1) {
339 $headlines_unread = getFeedUnread($link, $returned_feed, $cat_view);
340
341 }
a5c815d3
AD
342
343 print "<headlines-unread value=\"$headlines_unread\"/>";
344 printf("<disable-cache value=\"%d\"/>", $disable_cache);
345
b4e75b2a 346 if ($_REQUEST["debug"]) $timing_info = print_checkpoint("10", $timing_info);
a5c815d3
AD
347
348 if (is_array($topmost_article_ids) && !get_pref($link, 'COMBINED_DISPLAY_MODE') && !$_SESSION["bw_limit"]) {
349 print "<articles>";
350 foreach ($topmost_article_ids as $id) {
351 outputArticleXML($link, $id, $feed, false);
45004d43 352 }
a5c815d3 353 print "</articles>";
961f4c73 354 }
961f4c73 355
b4e75b2a 356 if ($_REQUEST["debug"]) $timing_info = print_checkpoint("20", $timing_info);
46921916 357
6cc1fab3 358
bd090ab4
AD
359// if (get_pref($link, "SYNC_COUNTERS") ||
360// time() - $_SESSION["get_all_counters_stamp"] > $viewfeed_ctr_interval) {
0bdec456
AD
361// print "<counters>";
362// getAllCounters($link, $omode, $feed);
363// print "</counters>";
364// }
365
a06d0e5a 366 if (get_pref($link, 'COMBINED_DISPLAY_MODE') || $subop ||
ab197ae1 367 time() - $_SESSION["viewfeed:counters_stamp"] > 5) {
b1676464
AD
368 if (!$offset) {
369 print "<counters>";
370 getAllCounters($link, $omode, $feed);
371 print "</counters>";
a06d0e5a 372 $_SESSION["viewfeed:counters_stamp"] = time();
b1676464 373 }
0bdec456 374 }
98bea1b1 375
b4e75b2a 376 if ($_REQUEST["debug"]) $timing_info = print_checkpoint("30", $timing_info);
46921916 377
45004d43 378 print_runtime_info($link);
03c88bdd 379
45004d43
AD
380 print "</reply>";
381 break; // viewfeed
1cd17194 382
45004d43
AD
383 case "pref-feeds":
384 module_pref_feeds($link);
385 break; // pref-feeds
a7f22b70 386
45004d43
AD
387 case "pref-filters":
388 module_pref_filters($link);
389 break; // pref-filters
a0476535 390
45004d43
AD
391 case "pref-labels":
392 module_pref_labels($link);
393 break; // pref-labels
d0000401 394
45004d43
AD
395 case "pref-prefs":
396 module_pref_prefs($link);
397 break; // pref-prefs
f27d955a 398
45004d43
AD
399 case "pref-users":
400 module_pref_users($link);
401 break; // prefs-users
a0476535 402
45004d43
AD
403 case "help":
404 module_help($link);
405 break; // help
a0476535 406
45004d43
AD
407 case "dlg":
408 module_popup_dialog($link);
409 break; // dlg
a7f22b70 410
45004d43
AD
411 case "pref-pub-items":
412 module_pref_pub_items($link);
413 break; // pref-pub-items
e4f4b46f 414
45004d43
AD
415 case "globalUpdateFeeds":
416 // update feeds of all users, may be used anonymously
e4f4b46f 417
5cbaf873 418 print "<!--";
45004d43 419 // Update all feeds needing a update.
5cbaf873
AD
420 update_daemon_common($link, 0, true, true);
421 print " -->";
a7f22b70 422
45004d43
AD
423 print "<rpc-reply>
424 <message msg=\"All feeds updated\"/>
425 </rpc-reply>";
426 break; // globalUpdateFeeds
e5d758e3 427
45004d43
AD
428 case "pref-feed-browser":
429 module_pref_feed_browser($link);
430 break; // pref-feed-browser
c6232e43 431
45004d43 432 case "publish":
b4e75b2a
AD
433 $key = db_escape_string($_REQUEST["key"]);
434 $limit = (int)db_escape_string($_REQUEST["limit"]);
945c243e 435
45004d43
AD
436 $result = db_query($link, "SELECT login, owner_uid
437 FROM ttrss_user_prefs, ttrss_users WHERE
438 pref_name = '_PREFS_PUBLISH_KEY' AND
439 value = '$key' AND
440 ttrss_users.id = owner_uid");
945c243e 441
45004d43
AD
442 if (db_num_rows($result) == 1) {
443 $owner = db_fetch_result($result, 0, "owner_uid");
444 $login = db_fetch_result($result, 0, "login");
945c243e 445
ead2715d 446 generate_syndicated_feed($link, $owner, -2, false, $limit);
945c243e 447
45004d43
AD
448 } else {
449 print "<error>User not found</error>";
450 }
451 break; // publish
18664970 452
45004d43 453 case "rss":
b4e75b2a
AD
454 $feed = db_escape_string($_REQUEST["id"]);
455 $user = db_escape_string($_REQUEST["user"]);
456 $pass = db_escape_string($_REQUEST["pass"]);
457 $is_cat = $_REQUEST["is_cat"] != false;
458 $limit = (int)db_escape_string($_REQUEST["limit"]);
e1eb2147 459
b4e75b2a
AD
460 $search = db_escape_string($_REQUEST["q"]);
461 $match_on = db_escape_string($_REQUEST["m"]);
462 $search_mode = db_escape_string($_REQUEST["smode"]);
18664970 463
b4798282
AD
464 if (SINGLE_USER_MODE) {
465 authenticate_user($link, "admin", null);
466 }
467
45004d43
AD
468 if (!$_SESSION["uid"] && $user && $pass) {
469 authenticate_user($link, $user, $pass);
470 }
18664970 471
45004d43
AD
472 if ($_SESSION["uid"] ||
473 http_authenticate_user($link)) {
945c243e 474
ead2715d 475 generate_syndicated_feed($link, 0, $feed, $is_cat, $limit,
45004d43
AD
476 $search, $search_mode, $match_on);
477 }
478 break; // rss
18664970 479
45004d43 480 case "getUnread":
b4e75b2a 481 $login = db_escape_string($_REQUEST["login"]);
f3acc32e 482
45004d43 483 header("Content-Type: text/plain; charset=utf-8");
f3acc32e 484
45004d43 485 $result = db_query($link, "SELECT id FROM ttrss_users WHERE login = '$login'");
7e3634d9 486
45004d43
AD
487 if (db_num_rows($result) == 1) {
488 $uid = db_fetch_result($result, 0, "id");
489 print getGlobalUnread($link, $uid);
490 } else {
491 print "-1;User not found";
492 }
7e3634d9 493
45004d43
AD
494 $print_exec_time = false;
495 break; // getUnread
9cd7c995 496
45004d43
AD
497 case "digestTest":
498 header("Content-Type: text/plain");
499 print_r(prepare_headlines_digest($link, $_SESSION["uid"]));
500 $print_exec_time = false;
501 break; // digestTest
448b0abd 502
45004d43
AD
503 case "digestSend":
504 header("Content-Type: text/plain");
505 send_headlines_digests($link);
506 $print_exec_time = false;
507 break; // digestSend
7e3634d9 508
45004d43 509 } // Select action according to $op value.
f3acc32e 510
45004d43 511 // We close the connection to database.
4b3dff6e 512 db_close($link);
1cd17194 513?>
406d9489 514
7e3634d9 515<?php if ($print_exec_time) { ?>
1d3a17c7 516<!-- <?php echo sprintf("Backend execution time: %.4f seconds", getmicrotime() - $script_started) ?> -->
f3acc32e 517<?php } ?>