bring back SELF_USER_AGENT (refs #540)

[tt-rss.git] / classes / article.php

<?php\r
class Article extends Handler_Protected {\r
\r
	function csrf_ignore($method) {\r
		$csrf_ignored = array("redirect");\r
\r
		return array_search($method, $csrf_ignored) !== false;\r
	}\r
\r
	function redirect() {\r
		$id = db_escape_string($_REQUEST['id']);\r
\r
		$result = db_query($this->link, "SELECT link FROM ttrss_entries, ttrss_user_entries\r
						WHERE id = '$id' AND id = ref_id AND owner_uid = '".$_SESSION['uid']."'\r
						LIMIT 1");\r
\r
		if (db_num_rows($result) == 1) {\r
			$article_url = db_fetch_result($result, 0, 'link');\r
			$article_url = str_replace("\n", "", $article_url);\r
\r
			header("Location: $article_url");\r
			return;\r
\r
		} else {\r
			print_error(__("Article not found."));\r
		}\r
	}\r
\r
	function view() {\r
		$id = db_escape_string($_REQUEST["id"]);\r
		$cids = explode(",", db_escape_string($_REQUEST["cids"]));\r
		$mode = db_escape_string($_REQUEST["mode"]);\r
		$omode = db_escape_string($_REQUEST["omode"]);\r
\r
		// in prefetch mode we only output requested cids, main article\r
		// just gets marked as read (it already exists in client cache)\r
\r
		$articles = array();\r
\r
		if ($mode == "") {\r
			array_push($articles, format_article($this->link, $id, false));\r
		} else if ($mode == "zoom") {\r
			array_push($articles, format_article($this->link, $id, true, true));\r
		} else if ($mode == "raw") {\r
			if ($_REQUEST['html']) {\r
				header("Content-Type: text/html");\r
				print '<link rel="stylesheet" type="text/css" href="tt-rss.css"/>';\r
			}\r
\r
			$article = format_article($this->link, $id, false);\r
			print $article['content'];\r
			return;\r
		}\r
\r
		$this->catchupArticleById($this->link, $id, 0);\r
\r
		if (!$_SESSION["bw_limit"]) {\r
			foreach ($cids as $cid) {\r
				if ($cid) {\r
					array_push($articles, format_article($this->link, $cid, false, false));\r
				}\r
			}\r
		}\r
\r
		print json_encode($articles);\r
	}\r
\r
	private function catchupArticleById($link, $id, $cmode) {\r
\r
		if ($cmode == 0) {\r
			db_query($link, "UPDATE ttrss_user_entries SET\r
			unread = false,last_read = NOW()\r
			WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);\r
		} else if ($cmode == 1) {\r
			db_query($link, "UPDATE ttrss_user_entries SET\r
			unread = true\r
			WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);\r
		} else {\r
			db_query($link, "UPDATE ttrss_user_entries SET\r
			unread = NOT unread,last_read = NOW()\r
			WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);\r
		}\r
\r
		$feed_id = getArticleFeed($link, $id);\r
		ccache_update($link, $feed_id, $_SESSION["uid"]);\r
	}\r
\r
	static function create_published_article($link, $title, $url, $content, $labels_str,\r
			$owner_uid) {\r
\r
		$guid = sha1($url . $owner_uid); // include owner_uid to prevent global GUID clash\r
		$content_hash = sha1($content);\r
\r
		if ($labels_str != "") {\r
			$labels = explode(",", $labels_str);\r
		} else {\r
			$labels = array();\r
		}\r
\r
		$rc = false;\r
\r
		if (!$title) $title = $url;\r
		if (!$title && !$url) return false;\r
\r
		if (filter_var($url, FILTER_VALIDATE_URL) === FALSE) return false;\r
\r
		db_query($link, "BEGIN");\r
\r
		// only check for our user data here, others might have shared this with different content etc\r
		$result = db_query($link, "SELECT id FROM ttrss_entries, ttrss_user_entries WHERE\r
			link = '$url' AND ref_id = id AND owner_uid = '$owner_uid' LIMIT 1");\r
\r
		if (db_num_rows($result) != 0) {\r
			$ref_id = db_fetch_result($result, 0, "id");\r
\r
			$result = db_query($link, "SELECT int_id FROM ttrss_user_entries WHERE\r
				ref_id = '$ref_id' AND owner_uid = '$owner_uid' LIMIT 1");\r
\r
			if (db_num_rows($result) != 0) {\r
				$int_id = db_fetch_result($result, 0, "int_id");\r
\r
				db_query($link, "UPDATE ttrss_entries SET\r
					content = '$content', content_hash = '$content_hash' WHERE id = '$ref_id'");\r
\r
				db_query($link, "UPDATE ttrss_user_entries SET published = true WHERE\r
						int_id = '$int_id' AND owner_uid = '$owner_uid'");\r
			} else {\r
\r
				db_query($link, "INSERT INTO ttrss_user_entries\r
					(ref_id, uuid, feed_id, orig_feed_id, owner_uid, published, tag_cache, label_cache, last_read, note, unread)\r
					VALUES\r
					('$ref_id', '', NULL, NULL, $owner_uid, true, '', '', NOW(), '', false)");\r
			}\r
\r
			if (count($labels) != 0) {\r
				foreach ($labels as $label) {\r
					label_add_article($link, $ref_id, trim($label), $owner_uid);\r
				}\r
			}\r
\r
			$rc = true;\r
\r
		} else {\r
			$result = db_query($link, "INSERT INTO ttrss_entries\r
				(title, guid, link, updated, content, content_hash, date_entered, date_updated)\r
				VALUES\r
				('$title', '$guid', '$url', NOW(), '$content', '$content_hash', NOW(), NOW())");\r
\r
			$result = db_query($link, "SELECT id FROM ttrss_entries WHERE guid = '$guid'");\r
\r
			if (db_num_rows($result) != 0) {\r
				$ref_id = db_fetch_result($result, 0, "id");\r
\r
				db_query($link, "INSERT INTO ttrss_user_entries\r
					(ref_id, uuid, feed_id, orig_feed_id, owner_uid, published, tag_cache, label_cache, last_read, note, unread)\r
					VALUES\r
					('$ref_id', '', NULL, NULL, $owner_uid, true, '', '', NOW(), '', false)");\r
\r
				if (count($labels) != 0) {\r
					foreach ($labels as $label) {\r
						label_add_article($link, $ref_id, trim($label), $owner_uid);\r
					}\r
				}\r
\r
				$rc = true;\r
			}\r
		}\r
\r
		db_query($link, "COMMIT");\r
\r
		return $rc;\r
	}\r
\r
\r
\r
}\r