]> git.wh0rd.org - tt-rss.git/blame - backend.php
disable magic quotes if needed
[tt-rss.git] / backend.php
CommitLineData
1d3a17c7 1<?php
d65981e2
AD
2 error_reporting(E_ERROR | E_WARNING | E_PARSE);
3
ce885e21
AD
4 /* remove ill effects of magic quotes */
5
6 if (get_magic_quotes_gpc()) {
7 $_GET = array_map('stripslashes', $_GET);
8 $_POST = array_map('stripslashes', $_POST);
9 $_REQUEST = array_map('stripslashes', $_REQUEST);
10 $_COOKIE = array_map('stripslashes', $_COOKIE);
11 }
12
36bfab86 13 require_once "sessions.php";
c339343b 14 require_once "modules/backend-rpc.php";
dc56b3b7 15
894ebcf5 16/* if ($_GET["debug"]) {
cce28758
AD
17 define('DEFAULT_ERROR_LEVEL', E_ALL);
18 } else {
19 define('DEFAULT_ERROR_LEVEL', E_ERROR | E_WARNING | E_PARSE);
20 }
894ebcf5
AD
21
22 error_reporting(DEFAULT_ERROR_LEVEL); */
cce28758 23
657770a0
AD
24 require_once "sanity_check.php";
25 require_once "config.php";
af106b0e
AD
26
27 require_once "db.php";
28 require_once "db-prefs.php";
29 require_once "functions.php";
657770a0 30
dc56b3b7 31 no_cache_incantation();
8d039718
AD
32
33 if (ENABLE_TRANSLATIONS == true) {
34 startup_gettext();
35 }
dc56b3b7 36
7f0acba7
AD
37 $script_started = getmicrotime();
38
39 $link = db_connect(DB_HOST, DB_USER, DB_PASS, DB_NAME);
40
41 if (!$link) {
42 if (DB_TYPE == "mysql") {
43 print mysql_error();
44 }
45 // PG seems to display its own errors just fine by default.
46 return;
47 }
48
49 if (DB_TYPE == "pgsql") {
50 pg_query("set client_encoding = 'UTF-8'");
51 pg_set_client_encoding("UNICODE");
52 }
53
54 $op = $_REQUEST["op"];
55
c339343b 56 $print_exec_time = false;
7e3634d9 57
3de0261a
AD
58 if ((!$op || $op == "rpc" || $op == "rss" || $op == "view" ||
59 $op == "digestSend" || $op == "viewfeed" ||
18664970 60 $op == "globalUpdateFeeds") && !$_REQUEST["noxml"]) {
6002818b
AD
61 header("Content-Type: application/xml; charset=utf-8");
62 } else {
63 header("Content-Type: text/html; charset=utf-8");
262bd8ea
AD
64 }
65
f3acc32e
AD
66 if (!$op) {
67 header("Content-Type: application/xml");
68 print_error_xml(7); exit;
69 }
42c32916 70
7f0acba7
AD
71 if (!($_SESSION["uid"] && validate_session($link)) && $op != "globalUpdateFeeds"
72 && $op != "rss" && $op != "getUnread") {
262bd8ea 73
a2770077 74 if ($op == "rpc") {
af106b0e 75 print_error_xml(6); die;
04269460
AD
76 } else {
77 print "
78 <html><body>
79 <p>Error: Not logged in.</p>
80 <script type=\"text/javascript\">
81 if (parent.window != 'undefined') {
01a87dff 82 parent.window.location = \"tt-rss.php\";
04269460 83 } else {
01a87dff 84 window.location = \"tt-rss.php\";
04269460
AD
85 }
86 </script>
87 </body></html>
88 ";
262bd8ea
AD
89 }
90 exit;
91 }
1c7f75ed 92
ad815c71 93 $purge_intervals = array(
d1db26aa
AD
94 0 => __("Use default"),
95 -1 => __("Never purge"),
96 5 => __("1 week old"),
97 14 => __("2 weeks old"),
98 31 => __("1 month old"),
99 60 => __("2 months old"),
100 90 => __("3 months old"));
ad815c71
AD
101
102 $update_intervals = array(
d1db26aa
AD
103 0 => __("Use default"),
104 -1 => __("Disable updates"),
105 30 => __("Each 30 minutes"),
106 60 => __("Hourly"),
107 240 => __("Each 4 hours"),
108 720 => __("Each 12 hours"),
109 1440 => __("Daily"),
110 10080 => __("Weekly"));
ad815c71 111
d20f3544 112
3c5783b7 113 $access_level_names = array(
d1db26aa
AD
114 0 => __("User"),
115 10 => __("Administrator"));
3c5783b7 116
f27d955a 117 require_once "modules/pref-prefs.php";
ef8be8ea
AD
118 require_once "modules/popup-dialog.php";
119 require_once "modules/help.php";
120 require_once "modules/pref-feeds.php";
121 require_once "modules/pref-filters.php";
122 require_once "modules/pref-labels.php";
123 require_once "modules/pref-users.php";
c339343b 124 require_once "modules/pref-feed-browser.php";
ef8be8ea 125
7ec2a838 126
b2804af7 127 if (!sanity_check($link)) { return; }
023fe037 128
c3b81db0 129 if ($op == "rpc") {
01b3e191 130 handle_rpc_request($link);
c3b81db0
AD
131 }
132
133 if ($op == "feeds") {
134
8143ae1f
AD
135 $tags = $_GET["tags"];
136
c3b81db0
AD
137 $subop = $_GET["subop"];
138
139 if ($subop == "catchupAll") {
b018b49b 140 db_query($link, "UPDATE ttrss_user_entries SET
6d15e1ef 141 last_read = NOW(),unread = false WHERE owner_uid = " . $_SESSION["uid"]);
c3b81db0
AD
142 }
143
fe14aeb8
AD
144 if ($subop == "collapse") {
145 $cat_id = db_escape_string($_GET["cid"]);
280ee9a3 146
fe14aeb8
AD
147 db_query($link, "UPDATE ttrss_feed_categories SET
148 collapsed = NOT collapsed WHERE id = '$cat_id' AND owner_uid = " .
149 $_SESSION["uid"]);
150 return;
151 }
152
8143ae1f 153 outputFeedList($link, $tags);
c3b81db0 154
1cd17194
AD
155 }
156
e097e8be
AD
157 if ($op == "view") {
158
159 $id = db_escape_string($_GET["id"]);
160 $feed_id = db_escape_string($_GET["feed"]);
161 $cids = split(",", db_escape_string($_GET["cids"]));
162 $mode = db_escape_string($_GET["mode"]);
5a94a953 163 $omode = db_escape_string($_GET["omode"]);
e097e8be
AD
164
165 print "<reply>";
166
167 // in prefetch mode we only output requested cids, main article
168 // just gets marked as read (it already exists in client cache)
169
addb5836 170 if ($mode == "") {
e097e8be 171 outputArticleXML($link, $id, $feed_id);
53761dda 172 } else {
e097e8be
AD
173 catchupArticleById($link, $id, 0);
174 }
175
176 foreach ($cids as $cid) {
177 if ($cid) {
178 outputArticleXML($link, $cid, $feed_id, false);
179 }
180 }
181
addb5836
AD
182 if ($mode != "prefetch_old") {
183 print "<counters>";
184 getAllCounters($link, $omode);
185 print "</counters>";
186 }
5a94a953 187
e097e8be 188 print "</reply>";
1cd17194
AD
189 }
190
191 if ($op == "viewfeed") {
192
46921916
AD
193 $print_exec_time = true;
194 $timing_info = getmicrotime();
195
3de0261a
AD
196 print "<reply>";
197
46921916
AD
198 if ($_GET["debug"]) $timing_info = print_checkpoint("0", $timing_info);
199
3de0261a
AD
200 $omode = db_escape_string($_GET["omode"]);
201
3c81ae1a 202 $feed = db_escape_string($_GET["feed"]);
3c81ae1a 203 $subop = db_escape_string($_GET["subop"]);
86b682ce 204 $view_mode = db_escape_string($_GET["view_mode"]);
3c81ae1a
AD
205 $limit = db_escape_string($_GET["limit"]);
206 $cat_view = db_escape_string($_GET["cat"]);
e0998414 207 $next_unread_feed = db_escape_string($_GET["nuf"]);
203de776
AD
208 $offset = db_escape_string($_GET["skip"]);
209
40496720
AD
210 set_pref($link, "_DEFAULT_VIEW_MODE", $view_mode);
211 set_pref($link, "_DEFAULT_VIEW_LIMIT", $limit);
212
3de0261a 213 print "<headlines id=\"$feed\"><![CDATA[";
c50e2b30 214
961f4c73
AD
215 $topmost_article_ids = outputHeadlinesList($link, $feed, $subop,
216 $view_mode, $limit, $cat_view, $next_unread_feed, $offset);
d76a3b03 217
3de0261a 218 print "]]></headlines>";
98bea1b1 219
46921916
AD
220 if ($_GET["debug"]) $timing_info = print_checkpoint("10", $timing_info);
221
a8f8e30f 222 if (is_array($topmost_article_ids) && !get_pref($link, 'COMBINED_DISPLAY_MODE')) {
961f4c73
AD
223 print "<articles>";
224 foreach ($topmost_article_ids as $id) {
225 outputArticleXML($link, $id, $feed, false);
226 }
227 print "</articles>";
228 }
229
46921916
AD
230 if ($_GET["debug"]) $timing_info = print_checkpoint("20", $timing_info);
231
3de0261a
AD
232 print "<counters>";
233 getAllCounters($link, $omode);
234 print "</counters>";
98bea1b1 235
46921916
AD
236 if ($_GET["debug"]) $timing_info = print_checkpoint("30", $timing_info);
237
3de0261a 238 print "</reply>";
1cd17194
AD
239 }
240
0e091d38 241 if ($op == "pref-feeds") {
ef8be8ea
AD
242 module_pref_feeds($link);
243 }
a7f22b70 244
ef8be8ea
AD
245 if ($op == "pref-filters") {
246 module_pref_filters($link);
247 }
a0476535 248
ef8be8ea
AD
249 if ($op == "pref-labels") {
250 module_pref_labels($link);
251 }
d0000401 252
f27d955a
AD
253 if ($op == "pref-prefs") {
254 module_pref_prefs($link);
255 }
256
257 if ($op == "pref-users") {
258 module_pref_users($link);
ef8be8ea 259 }
a0476535 260
ef8be8ea
AD
261 if ($op == "help") {
262 module_help($link);
263 }
a0476535 264
ef8be8ea
AD
265 if ($op == "dlg") {
266 module_popup_dialog($link);
267 }
a7f22b70 268
ef8be8ea
AD
269 // update feeds of all users, may be used anonymously
270 if ($op == "globalUpdateFeeds") {
a7f22b70 271
ef8be8ea 272 $result = db_query($link, "SELECT id FROM ttrss_users");
a0476535 273
ef8be8ea
AD
274 while ($line = db_fetch_assoc($result)) {
275 $user_id = $line["id"];
276// print "<!-- updating feeds of uid $user_id -->";
277 update_all_feeds($link, false, $user_id);
278 }
e2f728be 279
ef8be8ea
AD
280 print "<rpc-reply>
281 <message msg=\"All feeds updated\"/>
282 </rpc-reply>";
e5d758e3 283
ef8be8ea 284 }
f9cb39ac 285
ef8be8ea 286 if ($op == "user-details") {
0af33e87 287
ef8be8ea
AD
288 if (WEB_DEMO_MODE || $_SESSION["access_level"] < 10) {
289 return;
290 }
291
292/* print "<html><head>
293 <title>Tiny Tiny RSS : User Details</title>
294 <link rel=\"stylesheet\" href=\"tt-rss.css\" type=\"text/css\">
295 <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\">
296 </head><body>"; */
0af33e87 297
ef8be8ea 298 $uid = sprintf("%d", $_GET["id"]);
dc932d0a 299
ef8be8ea 300 print "<div id=\"infoBoxTitle\">User details</div>";
dc932d0a 301
ef8be8ea 302 print "<div class='infoBoxContents'>";
f9cb39ac 303
ef8be8ea
AD
304 $result = db_query($link, "SELECT login,
305 SUBSTRING(last_login,1,16) AS last_login,
306 access_level,
307 (SELECT COUNT(int_id) FROM ttrss_user_entries
308 WHERE owner_uid = id) AS stored_articles
309 FROM ttrss_users
310 WHERE id = '$uid'");
f9cb39ac 311
ef8be8ea
AD
312 if (db_num_rows($result) == 0) {
313 print "<h1>User not found</h1>";
314 return;
315 }
316
317# print "<h1>User Details</h1>";
f9cb39ac 318
ef8be8ea 319 $login = db_fetch_result($result, 0, "login");
b92e6209 320
ef8be8ea 321# print "<h1>$login</h1>";
dc932d0a 322
ef8be8ea 323 print "<table width='100%'>";
dc932d0a 324
ef8be8ea
AD
325 $last_login = date(get_pref($link, 'LONG_DATE_FORMAT'),
326 strtotime(db_fetch_result($result, 0, "last_login")));
327 $access_level = db_fetch_result($result, 0, "access_level");
328 $stored_articles = db_fetch_result($result, 0, "stored_articles");
f9cb39ac 329
ef8be8ea
AD
330# print "<tr><td>Username</td><td>$login</td></tr>";
331# print "<tr><td>Access level</td><td>$access_level</td></tr>";
332 print "<tr><td>Last logged in</td><td>$last_login</td></tr>";
333 print "<tr><td>Stored articles</td><td>$stored_articles</td></tr>";
f9cb39ac 334
ef8be8ea
AD
335 $result = db_query($link, "SELECT COUNT(id) as num_feeds FROM ttrss_feeds
336 WHERE owner_uid = '$uid'");
f9cb39ac 337
ef8be8ea 338 $num_feeds = db_fetch_result($result, 0, "num_feeds");
f9cb39ac 339
ef8be8ea 340 print "<tr><td>Subscribed feeds count</td><td>$num_feeds</td></tr>";
0ea4fb50 341
ef8be8ea
AD
342/* $result = db_query($link, "SELECT
343 SUM(LENGTH(content)+LENGTH(title)+LENGTH(link)+LENGTH(guid)) AS db_size
344 FROM ttrss_user_entries,ttrss_entries
345 WHERE owner_uid = '$uid' AND ref_id = id");
0ea4fb50 346
ef8be8ea 347 $db_size = round(db_fetch_result($result, 0, "db_size") / 1024);
0ea4fb50 348
ef8be8ea 349 print "<tr><td>Approx. used DB size</td><td>$db_size KBytes</td></tr>"; */
e5d758e3 350
ef8be8ea 351 print "</table>";
e5d758e3 352
ef8be8ea 353 print "<h1>Subscribed feeds</h1>";
e5d758e3 354
ef8be8ea
AD
355 $result = db_query($link, "SELECT id,title,site_url FROM ttrss_feeds
356 WHERE owner_uid = '$uid' ORDER BY title");
0ea4fb50 357
ef8be8ea 358 print "<ul class=\"userFeedList\">";
0ea4fb50 359
ef8be8ea 360 $row_class = "odd";
0ea4fb50 361
ef8be8ea 362 while ($line = db_fetch_assoc($result)) {
0ea4fb50 363
ef8be8ea 364 $icon_file = ICONS_URL."/".$line["id"].".ico";
ad815c71 365
ef8be8ea
AD
366 if (file_exists($icon_file) && filesize($icon_file) > 0) {
367 $feed_icon = "<img class=\"tinyFeedIcon\" src=\"$icon_file\">";
368 } else {
369 $feed_icon = "<img class=\"tinyFeedIcon\" src=\"images/blank_icon.gif\">";
370 }
0ea4fb50 371
ef8be8ea 372 print "<li class=\"$row_class\">$feed_icon&nbsp;<a href=\"".$line["site_url"]."\">".$line["title"]."</a></li>";
0ea4fb50 373
ef8be8ea 374 $row_class = toggleEvenOdd($row_class);
0ea4fb50 375
ef8be8ea 376 }
a283b8d1 377
ef8be8ea
AD
378 if (db_num_rows($result) < $num_feeds) {
379 // FIXME - add link to show ALL subscribed feeds here somewhere
380 print "<li><img
381 class=\"tinyFeedIcon\" src=\"images/blank_icon.gif\">&nbsp;...</li>";
382 }
383
384 print "</ul>";
a283b8d1 385
ef8be8ea 386 print "</div>";
0ea4fb50 387
ef8be8ea
AD
388 print "<div align='center'>
389 <input type='submit' class='button'
390 onclick=\"closeInfoBox()\" value=\"Close this window\"></div>";
0ea4fb50 391
ef8be8ea 392// print "</body></html>";
0ea4fb50 393
ef8be8ea 394 }
ad815c71 395
ef8be8ea 396 if ($op == "pref-feed-browser") {
f27d955a 397 module_pref_feed_browser($link);
c6232e43
AD
398 }
399
18664970
AD
400 if ($op == "rss") {
401 $feed = db_escape_string($_GET["id"]);
402 $user = db_escape_string($_GET["user"]);
403 $pass = db_escape_string($_GET["pass"]);
404 $is_cat = $_GET["is_cat"] != false;
405
e1eb2147
AD
406 $search = db_escape_string($_GET["q"]);
407 $match_on = db_escape_string($_GET["m"]);
408 $search_mode = db_escape_string($_GET["smode"]);
409
18664970
AD
410 if (!$_SESSION["uid"] && $user && $pass) {
411 authenticate_user($link, $user, $pass);
412 }
413
414 if ($_SESSION["uid"] ||
415 http_authenticate_user($link)) {
416
e1eb2147
AD
417 generate_syndicated_feed($link, $feed, $is_cat,
418 $search, $search_mode, $match_on);
18664970
AD
419 }
420 }
421
88040f57
AD
422 if ($op == "labelFromSearch") {
423 $search = db_escape_string($_GET["search"]);
424 $search_mode = db_escape_string($_GET["smode"]);
425 $match_on = db_escape_string($_GET["match"]);
426 $is_cat = db_escape_string($_GET["is_cat"]);
427 $title = db_escape_string($_GET["title"]);
428 $feed = sprintf("%d", $_GET["feed"]);
429
430 $label_qparts = array();
431
432 $search_expr = getSearchSql($search, $match_on);
433
434 if ($is_cat) {
435 if ($feed != 0) {
436 $search_expr .= " AND ttrss_feeds.cat_id = $feed ";
437 } else {
438 $search_expr .= " AND ttrss_feeds.cat_id IS NULL ";
439 }
440 } else {
441 if ($search_mode == "all_feeds") {
442 // NOOP
443 } else if ($search_mode == "this_cat") {
444
445 $tmp_result = db_query($link, "SELECT cat_id
446 FROM ttrss_feeds WHERE id = '$feed'");
447
448 $cat_id = db_fetch_result($tmp_result, 0, "cat_id");
449
450 if ($cat_id > 0) {
451 $search_expr .= " AND ttrss_feeds.cat_id = $cat_id ";
452 } else {
453 $search_expr .= " AND ttrss_feeds.cat_id IS NULL ";
454 }
455 } else {
456 $search_expr .= " AND ttrss_feeds.id = $feed ";
457 }
458
459 }
460
461 $search_expr = db_escape_string($search_expr);
462
463 print $search_expr;
464
465 if ($title) {
466 $result = db_query($link,
467 "INSERT INTO ttrss_labels (sql_exp,description,owner_uid)
468 VALUES ('$search_expr', '$title', '".$_SESSION["uid"]."')");
469 }
470 }
471
f3acc32e
AD
472 if ($op == "getUnread") {
473 $login = db_escape_string($_GET["login"]);
474
7e3634d9 475 header("Content-Type: text/plain; charset=utf-8");
f3acc32e
AD
476
477 $result = db_query($link, "SELECT id FROM ttrss_users WHERE login = '$login'");
478
479 if (db_num_rows($result) == 1) {
480 $uid = db_fetch_result($result, 0, "id");
481 print getGlobalUnread($link, $uid);
482 } else {
0599d09e 483 print "-1;User not found";
f3acc32e 484 }
7e3634d9
AD
485
486 $print_exec_time = false;
487 }
488
489 if ($op == "digestTest") {
490 header("Content-Type: text/plain");
9cd7c995
AD
491 print_r(prepare_headlines_digest($link, $_SESSION["uid"]));
492 $print_exec_time = false;
493
494 }
448b0abd 495
9cd7c995
AD
496 if ($op == "digestSend") {
497 header("Content-Type: text/plain");
498 send_headlines_digests($link);
7e3634d9
AD
499 $print_exec_time = false;
500
f3acc32e
AD
501 }
502
4b3dff6e 503 db_close($link);
1cd17194 504?>
406d9489 505
7e3634d9 506<?php if ($print_exec_time) { ?>
1d3a17c7 507<!-- <?php echo sprintf("Backend execution time: %.4f seconds", getmicrotime() - $script_started) ?> -->
f3acc32e 508<?php } ?>