]> git.wh0rd.org - tt-rss.git/blame - include/functions.php
prefs: reload after OPML import
[tt-rss.git] / include / functions.php
CommitLineData
1d3a17c7 1<?php
6e658547 2 define('EXPECTED_CONFIG_VERSION', 26);
6497fb65 3 define('SCHEMA_VERSION', 130);
545ca067 4
f822a8e5 5 define('LABEL_BASE_INDEX', -1024);
a413f53e 6 define('PLUGIN_FEED_BASE_INDEX', -128);
f822a8e5 7
e57a1507
AD
8 define('COOKIE_LIFETIME_LONG', 86400*365);
9
23d2471c 10 $fetch_last_error = false;
7a01dc77 11 $fetch_last_error_code = false;
ef39be2b 12 $fetch_last_content_type = false;
cf0231f9 13 $fetch_last_error_content = false; // curl only for the time being
3f6f0857 14 $fetch_curl_used = false;
4f71d743 15 $suppress_debugging = false;
23d2471c 16
584411fe
AD
17 libxml_disable_entity_loader(true);
18
e6905f7f
AD
19 // separate test because this is included before sanity checks
20 if (function_exists("mb_internal_encoding")) mb_internal_encoding("UTF-8");
21
324944f3 22 date_default_timezone_set('UTC');
8a7f5767
CW
23 if (defined('E_DEPRECATED')) {
24 error_reporting(E_ALL & ~E_NOTICE & ~E_DEPRECATED);
25 } else {
26 error_reporting(E_ALL & ~E_NOTICE);
27 }
cce28758 28
40d13c28 29 require_once 'config.php';
cc17c205 30
046ec657
BK
31 /**
32 * Define a constant if not already defined
046ec657
BK
33 */
34 function define_default($name, $value) {
046ec657
BK
35 defined($name) or define($name, $value);
36 }
37
6fd03996 38 /* Some tunables you can override in config.php using define(): */
9ef8798b
BK
39
40 define_default('FEED_FETCH_TIMEOUT', 45);
41 // How may seconds to wait for response when requesting feed from a site
42 define_default('FEED_FETCH_NO_CACHE_TIMEOUT', 15);
43 // How may seconds to wait for response when requesting feed from a
44 // site when that feed wasn't cached before
45 define_default('FILE_FETCH_TIMEOUT', 45);
46 // Default timeout when fetching files from remote sites
47 define_default('FILE_FETCH_CONNECT_TIMEOUT', 15);
48 // How many seconds to wait for initial response from website when
49 // fetching files from remote sites
4fd07908 50 define_default('DAEMON_UPDATE_LOGIN_LIMIT', 30);
6fd03996 51 // stop updating feeds if users haven't logged in for X days
4fd07908 52 define_default('DAEMON_FEED_LIMIT', 500);
6fd03996 53 // feed limit for one update batch
4fd07908 54 define_default('DAEMON_SLEEP_INTERVAL', 120);
6fd03996
AD
55 // default sleep interval between feed updates (sec)
56 define_default('MIN_CACHE_FILE_SIZE', 1024);
57 // do not cache files smaller than that (bytes)
58 define_default('CACHE_MAX_DAYS', 7);
59 // max age in days for various automatically cached (temporary) files
60
61 /* tunables end here */
4fd07908 62
fc2b26a6
AD
63 if (DB_TYPE == "pgsql") {
64 define('SUBSTRING_FOR_DATE', 'SUBSTRING_FOR_DATE');
65 } else {
66 define('SUBSTRING_FOR_DATE', 'SUBSTRING');
67 }
68
9632f884
AD
69 /**
70 * Return available translations names.
8d505d78 71 *
9632f884
AD
72 * @access public
73 * @return array A array of available translations.
74 */
f8c612d4 75 function get_translations() {
6a214f92 76 $tr = array(
8d505d78 77 "auto" => "Detect automatically",
ca6ef932 78 "ar_SA" => "العربيّة (Arabic)",
51faa115 79 "bg_BG" => "Bulgarian",
c2aa0593 80 "da_DA" => "Dansk",
a3162add 81 "ca_CA" => "Català",
a06b79c4 82 "cs_CZ" => "Česky",
6a214f92 83 "en_US" => "English",
c2aa0593 84 "el_GR" => "Ελληνικά",
1f16ede0 85 "es_ES" => "Español (España)",
c2aa0593 86 "es_LA" => "Español",
a927fe7b 87 "de_DE" => "Deutsch",
6a214f92 88 "fr_FR" => "Français",
e78fd196 89 "hu_HU" => "Magyar (Hungarian)",
bb5d3960 90 "it_IT" => "Italiano",
1d004f12 91 "ja_JP" => "日本語 (Japanese)",
7b6c1ca7 92 "lv_LV" => "Latviešu",
592535d7 93 "nb_NO" => "Norwegian bokmål",
9e7f1f12 94 "nl_NL" => "Dutch",
ea45791a 95 "pl_PL" => "Polski",
d3b923c9 96 "ru_RU" => "Русский",
9a063469 97 "pt_BR" => "Portuguese/Brazil",
1c776ade 98 "pt_PT" => "Portuguese/Portugal",
5d608138 99 "zh_CN" => "Simplified Chinese",
8dc5e7f0 100 "zh_TW" => "Traditional Chinese",
2324f153 101 "sv_SE" => "Svenska",
76d78eb2 102 "fi_FI" => "Suomi",
42a5abdc 103 "tr_TR" => "Türkçe");
f8c612d4
AD
104
105 return $tr;
106 }
107
7b26a148
AD
108 require_once "lib/accept-to-gettext.php";
109 require_once "lib/gettext/gettext.inc";
aba609e0 110
7b26a148 111 function startup_gettext() {
8d505d78 112
7b26a148
AD
113 # Get locale from Accept-Language header
114 $lang = al2gt(array_keys(get_translations()), "text/html");
89cb787e 115
7b26a148
AD
116 if (defined('_TRANSLATION_OVERRIDE_DEFAULT')) {
117 $lang = _TRANSLATION_OVERRIDE_DEFAULT;
118 }
89cb787e 119
b18d109f
AD
120 if ($_SESSION["uid"] && get_schema_version() >= 120) {
121 $pref_lang = get_pref("USER_LANGUAGE", $_SESSION["uid"]);
1ee4900a 122
c4db796f 123 if ($pref_lang && $pref_lang != 'auto') {
7b149552
AD
124 $lang = $pref_lang;
125 }
7b26a148 126 }
7c33dbd4 127
7b26a148
AD
128 if ($lang) {
129 if (defined('LC_MESSAGES')) {
130 _setlocale(LC_MESSAGES, $lang);
131 } else if (defined('LC_ALL')) {
132 _setlocale(LC_ALL, $lang);
8d039718 133 }
aba609e0 134
d98e76d9 135 _bindtextdomain("messages", "locale");
865220a4 136
7b26a148
AD
137 _textdomain("messages");
138 _bind_textdomain_codeset("messages", "UTF-8");
865220a4 139 }
7b26a148
AD
140 }
141
b619ff15 142 require_once 'db-prefs.php';
8911ac8b 143 require_once 'version.php';
9549e33c 144 require_once 'controls.php';
40d13c28 145
fb850eec 146 define('SELF_USER_AGENT', 'Tiny Tiny RSS/' . VERSION . ' (http://tt-rss.org/)');
500943a4
AD
147 ini_set('user_agent', SELF_USER_AGENT);
148
7d96bfcd
AD
149 $schema_version = false;
150
4f71d743
AD
151 function _debug_suppress($suppress) {
152 global $suppress_debugging;
153
154 $suppress_debugging = $suppress;
155 }
156
45004d43
AD
157 /**
158 * Print a timestamped debug message.
8d505d78 159 *
45004d43
AD
160 * @param string $msg The debug message.
161 * @return void
162 */
68cccafc 163 function _debug($msg, $show = true) {
4f71d743
AD
164 global $suppress_debugging;
165
166 //echo "[$suppress_debugging] $msg $show\n";
167
168 if ($suppress_debugging) return false;
9ec10352 169
6f9e33e4 170 $ts = strftime("%H:%M:%S", time());
2a6a9395
AD
171 if (function_exists('posix_getpid')) {
172 $ts = "$ts/" . posix_getpid();
173 }
2191eb7a 174
68cccafc 175 if ($show && !(defined('QUIET') && QUIET)) {
2191eb7a
AD
176 print "[$ts] $msg\n";
177 }
178
179 if (defined('LOGFILE')) {
180 $fp = fopen(LOGFILE, 'a+');
181
182 if ($fp) {
a33558a6
AD
183 $locked = false;
184
185 if (function_exists("flock")) {
186 $tries = 0;
187
188 // try to lock logfile for writing
189 while ($tries < 5 && !$locked = flock($fp, LOCK_EX | LOCK_NB)) {
190 sleep(1);
191 ++$tries;
192 }
193
194 if (!$locked) {
195 fclose($fp);
196 return;
197 }
198 }
199
2191eb7a 200 fputs($fp, "[$ts] $msg\n");
a33558a6
AD
201
202 if (function_exists("flock")) {
203 flock($fp, LOCK_UN);
204 }
205
2191eb7a
AD
206 fclose($fp);
207 }
208 }
209
45004d43 210 } // function _debug
6f9e33e4 211
9632f884
AD
212 /**
213 * Purge a feed old posts.
8d505d78 214 *
9632f884
AD
215 * @param mixed $link A database connection.
216 * @param mixed $feed_id The id of the purged feed.
217 * @param mixed $purge_interval Olderness of purged posts.
218 * @param boolean $debug Set to True to enable the debug. False by default.
219 * @access public
220 * @return void
221 */
a42c55f0 222 function purge_feed($feed_id, $purge_interval, $debug = false) {
ad507f85 223
a42c55f0 224 if (!$purge_interval) $purge_interval = feed_purge_interval($feed_id);
8d505d78 225
ad507f85 226 $rows = -1;
4c193675 227
6322ac79 228 $result = db_query(
07d0efe9
AD
229 "SELECT owner_uid FROM ttrss_feeds WHERE id = '$feed_id'");
230
231 $owner_uid = false;
232
233 if (db_num_rows($result) == 1) {
234 $owner_uid = db_fetch_result($result, 0, "owner_uid");
235 }
236
ab954dff
AD
237 if ($purge_interval == -1 || !$purge_interval) {
238 if ($owner_uid) {
2ed0d6c4 239 CCache::update($feed_id, $owner_uid);
ab954dff
AD
240 }
241 return;
242 }
243
07d0efe9
AD
244 if (!$owner_uid) return;
245
3907ef71 246 if (FORCE_ARTICLE_PURGE == 0) {
a42c55f0 247 $purge_unread = get_pref("PURGE_UNREAD_ARTICLES",
3907ef71
AD
248 $owner_uid, false);
249 } else {
250 $purge_unread = true;
251 $purge_interval = FORCE_ARTICLE_PURGE;
252 }
07d0efe9
AD
253
254 if (!$purge_unread) $query_limit = " unread = false AND ";
255
fefa6ca3 256 if (DB_TYPE == "pgsql") {
6b3160cf
AD
257 $result = db_query("DELETE FROM ttrss_user_entries
258 USING ttrss_entries
259 WHERE ttrss_entries.id = ref_id AND
260 marked = false AND
261 feed_id = '$feed_id' AND
262 $query_limit
263 ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
ad507f85 264
fefa6ca3 265 } else {
8d505d78 266
a42c55f0 267/* $result = db_query("DELETE FROM ttrss_user_entries WHERE
fefa6ca3 268 marked = false AND feed_id = '$feed_id' AND
8d505d78 269 (SELECT date_updated FROM ttrss_entries WHERE
30f1746f
AD
270 id = ref_id) < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)"); */
271
a42c55f0 272 $result = db_query("DELETE FROM ttrss_user_entries
8d505d78
AD
273 USING ttrss_user_entries, ttrss_entries
274 WHERE ttrss_entries.id = ref_id AND
275 marked = false AND
276 feed_id = '$feed_id' AND
07d0efe9 277 $query_limit
25ea2805 278 ttrss_entries.date_updated < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)");
ad507f85
AD
279 }
280
a08f94bd 281 $rows = db_affected_rows($result);
3f6f0857 282
2ed0d6c4 283 CCache::update($feed_id, $owner_uid);
ced46404 284
ad507f85 285 if ($debug) {
6f9e33e4 286 _debug("Purged feed $feed_id ($purge_interval): deleted $rows articles");
fefa6ca3 287 }
2ea09bde
AD
288
289 return $rows;
9632f884 290 } // function purge_feed
fefa6ca3 291
a42c55f0 292 function feed_purge_interval($feed_id) {
07d0efe9 293
a42c55f0 294 $result = db_query("SELECT purge_interval, owner_uid FROM ttrss_feeds
07d0efe9
AD
295 WHERE id = '$feed_id'");
296
297 if (db_num_rows($result) == 1) {
298 $purge_interval = db_fetch_result($result, 0, "purge_interval");
299 $owner_uid = db_fetch_result($result, 0, "owner_uid");
300
6322ac79 301 if ($purge_interval == 0) $purge_interval = get_pref(
863be6ca 302 'PURGE_OLD_DAYS', $owner_uid);
07d0efe9
AD
303
304 return $purge_interval;
305
306 } else {
307 return -1;
308 }
309 }
310
a230bf88 311 /*function get_feed_update_interval($feed_id) {
a42c55f0 312 $result = db_query("SELECT owner_uid, update_interval FROM
c7d57b66
AD
313 ttrss_feeds WHERE id = '$feed_id'");
314
315 if (db_num_rows($result) == 1) {
316 $update_interval = db_fetch_result($result, 0, "update_interval");
317 $owner_uid = db_fetch_result($result, 0, "owner_uid");
318
319 if ($update_interval != 0) {
320 return $update_interval;
321 } else {
a42c55f0 322 return get_pref('DEFAULT_UPDATE_INTERVAL', $owner_uid, false);
c7d57b66
AD
323 }
324
325 } else {
326 return -1;
327 }
a230bf88 328 }*/
c7d57b66 329
465fb16d
AD
330 // TODO: multiple-argument way is deprecated, first parameter is a hash now
331 function fetch_file_contents($options /* previously: 0: $url , 1: $type = false, 2: $login = false, 3: $pass = false,
332 4: $post_query = false, 5: $timeout = false, 6: $timestamp = 0, 7: $useragent = false*/) {
8d505d78 333
23d2471c 334 global $fetch_last_error;
7a01dc77 335 global $fetch_last_error_code;
cf0231f9 336 global $fetch_last_error_content;
ef39be2b 337 global $fetch_last_content_type;
3f6f0857 338 global $fetch_curl_used;
33373eca 339
24c7e413
AD
340 $fetch_last_error = false;
341 $fetch_last_error_code = -1;
342 $fetch_last_error_content = "";
343 $fetch_last_content_type = "";
344 $fetch_curl_used = false;
345
c71add38 346 if (!is_array($options)) {
465fb16d
AD
347
348 // falling back on compatibility shim
e934d63e
AD
349 $option_names = [ "url", "type", "login", "pass", "post_query", "timeout", "timestamp", "useragent" ];
350 $tmp = [];
351
352 for ($i = 0; $i < func_num_args(); $i++) {
353 $tmp[$option_names[$i]] = func_get_arg($i);
354 }
355
356 $options = $tmp;
357
358 /*$options = array(
465fb16d
AD
359 "url" => func_get_arg(0),
360 "type" => @func_get_arg(1),
361 "login" => @func_get_arg(2),
362 "pass" => @func_get_arg(3),
363 "post_query" => @func_get_arg(4),
364 "timeout" => @func_get_arg(5),
365 "timestamp" => @func_get_arg(6),
366 "useragent" => @func_get_arg(7)
e934d63e 367 ); */
465fb16d
AD
368 }
369
e3bc4591
AD
370 $url = $options["url"];
371 $type = isset($options["type"]) ? $options["type"] : false;
372 $login = isset($options["login"]) ? $options["login"] : false;
465fb16d 373 $pass = isset($options["pass"]) ? $options["pass"] : false;
e3bc4591
AD
374 $post_query = isset($options["post_query"]) ? $options["post_query"] : false;
375 $timeout = isset($options["timeout"]) ? $options["timeout"] : false;
376 $timestamp = isset($options["timestamp"]) ? $options["timestamp"] : 0;
377 $useragent = isset($options["useragent"]) ? $options["useragent"] : false;
fabfb9fc 378 $followlocation = isset($options["followlocation"]) ? $options["followlocation"] : true;
465fb16d 379
32703cc6 380 $url = ltrim($url, ' ');
2375b6b6 381 $url = str_replace(' ', '%20', $url);
23d2471c 382
9fd58133
AD
383 if (strpos($url, "//") === 0)
384 $url = 'http:' . $url;
385
312742db 386 if (!defined('NO_CURL') && function_exists('curl_init') && !ini_get("open_basedir")) {
3f6f0857
AD
387
388 $fetch_curl_used = true;
b799dc8b 389
4c467026 390 $ch = curl_init($url);
a1af1574 391
81c20663 392 if ($timestamp && !$post_query) {
7a01dc77
AD
393 curl_setopt($ch, CURLOPT_HTTPHEADER,
394 array("If-Modified-Since: ".gmdate('D, d M Y H:i:s \G\M\T', $timestamp)));
395 }
396
8401101d
BK
397 curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, $timeout ? $timeout : FILE_FETCH_CONNECT_TIMEOUT);
398 curl_setopt($ch, CURLOPT_TIMEOUT, $timeout ? $timeout : FILE_FETCH_TIMEOUT);
fabfb9fc 399 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, !ini_get("open_basedir") && $followlocation);
a1af1574
AD
400 curl_setopt($ch, CURLOPT_MAXREDIRS, 20);
401 curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
402 curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
5f6804bc 403 curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_ANY);
f826070c
AD
404 curl_setopt($ch, CURLOPT_USERAGENT, $useragent ? $useragent :
405 SELF_USER_AGENT);
3f6f0857 406 curl_setopt($ch, CURLOPT_ENCODING, "");
1fd733c8 407 //curl_setopt($ch, CURLOPT_REFERER, $url);
0f6b9263 408
4c467026 409 if (!ini_get("open_basedir")) {
0f6b9263
AD
410 curl_setopt($ch, CURLOPT_COOKIEJAR, "/dev/null");
411 }
8d505d78 412
05f14a7d
AD
413 if (defined('_CURL_HTTP_PROXY')) {
414 curl_setopt($ch, CURLOPT_PROXY, _CURL_HTTP_PROXY);
415 }
416
ae5f7bb1
AD
417 if ($post_query) {
418 curl_setopt($ch, CURLOPT_POST, true);
419 curl_setopt($ch, CURLOPT_POSTFIELDS, $post_query);
420 }
421
8d505d78
AD
422 if ($login && $pass)
423 curl_setopt($ch, CURLOPT_USERPWD, "$login:$pass");
a1af1574 424
fb074239 425 $contents = @curl_exec($ch);
268a06dc 426
48b657fc
AD
427 if (curl_errno($ch) === 23 || curl_errno($ch) === 61) {
428 curl_setopt($ch, CURLOPT_ENCODING, 'none');
429 $contents = @curl_exec($ch);
fb850eec
AD
430 }
431
a1af1574 432 if ($contents === false) {
fb850eec 433 $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
a1af1574
AD
434 curl_close($ch);
435 return false;
4065b60b
AD
436 }
437
8d505d78 438 $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
ef39be2b 439 $fetch_last_content_type = curl_getinfo($ch, CURLINFO_CONTENT_TYPE);
4065b60b 440
7a01dc77
AD
441 $fetch_last_error_code = $http_code;
442
ef39be2b 443 if ($http_code != 200 || $type && strpos($fetch_last_content_type, "$type") === false) {
fb850eec
AD
444 if (curl_errno($ch) != 0) {
445 $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
446 } else {
447 $fetch_last_error = "HTTP Code: $http_code";
448 }
cf0231f9 449 $fetch_last_error_content = $contents;
fb850eec 450 curl_close($ch);
a1af1574
AD
451 return false;
452 }
4065b60b 453
fb850eec
AD
454 curl_close($ch);
455
a1af1574 456 return $contents;
4065b60b 457 } else {
3f6f0857
AD
458
459 $fetch_curl_used = false;
460
d3911f80 461 if ($login && $pass){
8d505d78
AD
462 $url_parts = array();
463
464 preg_match("/(^[^:]*):\/\/(.*)/", $url, $url_parts);
465
d3911f80
AD
466 $pass = urlencode($pass);
467
8d505d78
AD
468 if ($url_parts[1] && $url_parts[2]) {
469 $url = $url_parts[1] . "://$login:$pass@" . $url_parts[2];
470 }
471 }
472
3bba9c39
AD
473 // TODO: should this support POST requests or not? idk
474
01311d86 475 if (!$post_query && $timestamp) {
45913edd
AD
476 $context = stream_context_create(array(
477 'http' => array(
478 'method' => 'GET',
24c7e413 479 'ignore_errors' => true,
3bba9c39 480 'timeout' => $timeout ? $timeout : FILE_FETCH_TIMEOUT,
45913edd
AD
481 'protocol_version'=> 1.1,
482 'header' => "If-Modified-Since: ".gmdate("D, d M Y H:i:s \\G\\M\\T\r\n", $timestamp)
483 )));
01311d86 484 } else {
45913edd
AD
485 $context = stream_context_create(array(
486 'http' => array(
487 'method' => 'GET',
24c7e413 488 'ignore_errors' => true,
3bba9c39 489 'timeout' => $timeout ? $timeout : FILE_FETCH_TIMEOUT,
45913edd
AD
490 'protocol_version'=> 1.1
491 )));
7475580b 492 }
01311d86 493
6122c449
AD
494 $old_error = error_get_last();
495
01311d86 496 $data = @file_get_contents($url, false, $context);
23d2471c 497
37ddf5b7 498 if (isset($http_response_header) && is_array($http_response_header)) {
df25e4d2
AD
499 foreach ($http_response_header as $h) {
500 if (substr(strtolower($h), 0, 13) == 'content-type:') {
501 $fetch_last_content_type = substr($h, 14);
502 // don't abort here b/c there might be more than one
503 // e.g. if we were being redirected -- last one is the right one
504 }
01311d86
AD
505
506 if (substr(strtolower($h), 0, 7) == 'http/1.') {
507 $fetch_last_error_code = (int) substr($h, 9, 3);
508 }
ef39be2b
MB
509 }
510 }
511
24c7e413 512 if ($fetch_last_error_code != 200) {
23d2471c 513 $error = error_get_last();
6122c449
AD
514
515 if ($error['message'] != $old_error['message']) {
516 $fetch_last_error = $error["message"];
517 } else {
518 $fetch_last_error = "HTTP Code: $fetch_last_error_code";
519 }
24c7e413
AD
520
521 $fetch_last_error_content = $data;
522
523 return false;
23d2471c
AD
524 }
525 return $data;
4065b60b
AD
526 }
527
528 }
78800912 529
9632f884
AD
530 /**
531 * Try to determine the favicon URL for a feed.
532 * adapted from wordpress favicon plugin by Jeff Minard (http://thecodepro.com/)
533 * http://dev.wp-plugins.org/file/favatars/trunk/favatars.php
8d505d78 534 *
9632f884
AD
535 * @param string $url A feed or page URL
536 * @access public
537 * @return mixed The favicon URL, or false if none was found.
538 */
1bd11fdf 539 function get_favicon_url($url) {
99331724 540
1bd11fdf 541 $favicon_url = false;
ed214298 542
4065b60b 543 if ($html = @fetch_file_contents($url)) {
78800912 544
ed214298 545 libxml_use_internal_errors(true);
c798704b 546
ed214298
AD
547 $doc = new DOMDocument();
548 $doc->loadHTML($html);
549 $xpath = new DOMXPath($doc);
717f5e64 550
a712429e
AD
551 $base = $xpath->query('/html/head/base');
552 foreach ($base as $b) {
553 $url = $b->getAttribute("href");
554 break;
555 }
556
1bd11fdf 557 $entries = $xpath->query('/html/head/link[@rel="shortcut icon" or @rel="icon"]');
ed214298
AD
558 if (count($entries) > 0) {
559 foreach ($entries as $entry) {
1bd11fdf
AD
560 $favicon_url = rewrite_relative_url($url, $entry->getAttribute("href"));
561 break;
ed214298 562 }
8d505d78 563 }
4065b60b 564 }
c798704b 565
1bd11fdf
AD
566 if (!$favicon_url)
567 $favicon_url = rewrite_relative_url($url, "/favicon.ico");
568
569 return $favicon_url;
570 } // function get_favicon_url
571
a42c55f0 572 function initialize_user_prefs($uid, $profile = false) {
ff485f1d 573
a42c55f0 574 $uid = db_escape_string($uid);
ff485f1d 575
d9084cf2
AD
576 if (!$profile) {
577 $profile = "NULL";
f9aa6a89 578 $profile_qpart = "AND profile IS NULL";
d9084cf2 579 } else {
f9aa6a89 580 $profile_qpart = "AND profile = '$profile'";
d9084cf2
AD
581 }
582
6322ac79 583 if (get_schema_version() < 63) $profile_qpart = "";
f9aa6a89 584
a42c55f0 585 db_query("BEGIN");
ff485f1d 586
a42c55f0 587 $result = db_query("SELECT pref_name,def_value FROM ttrss_prefs");
8d505d78 588
a42c55f0 589 $u_result = db_query("SELECT pref_name
f9aa6a89 590 FROM ttrss_user_prefs WHERE owner_uid = '$uid' $profile_qpart");
ff485f1d
AD
591
592 $active_prefs = array();
593
594 while ($line = db_fetch_assoc($u_result)) {
8d505d78 595 array_push($active_prefs, $line["pref_name"]);
ff485f1d
AD
596 }
597
598 while ($line = db_fetch_assoc($result)) {
599 if (array_search($line["pref_name"], $active_prefs) === FALSE) {
600// print "adding " . $line["pref_name"] . "<br>";
601
a42c55f0
AD
602 $line["def_value"] = db_escape_string($line["def_value"]);
603 $line["pref_name"] = db_escape_string($line["pref_name"]);
d296ba50 604
6322ac79 605 if (get_schema_version() < 63) {
a42c55f0 606 db_query("INSERT INTO ttrss_user_prefs
8d505d78 607 (owner_uid,pref_name,value) VALUES
f9aa6a89
AD
608 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."')");
609
610 } else {
a42c55f0 611 db_query("INSERT INTO ttrss_user_prefs
8d505d78 612 (owner_uid,pref_name,value, profile) VALUES
f9aa6a89
AD
613 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."', $profile)");
614 }
ff485f1d
AD
615
616 }
617 }
618
a42c55f0 619 db_query("COMMIT");
ff485f1d
AD
620
621 }
956c7629 622
8de8bfb8
AD
623 function get_ssl_certificate_id() {
624 if ($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"]) {
625 return sha1($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"] .
626 $_SERVER["REDIRECT_SSL_CLIENT_V_START"] .
627 $_SERVER["REDIRECT_SSL_CLIENT_V_END"] .
628 $_SERVER["REDIRECT_SSL_CLIENT_S_DN"]);
629 }
ac617ebc
GG
630 if ($_SERVER["SSL_CLIENT_M_SERIAL"]) {
631 return sha1($_SERVER["SSL_CLIENT_M_SERIAL"] .
632 $_SERVER["SSL_CLIENT_V_START"] .
633 $_SERVER["SSL_CLIENT_V_END"] .
634 $_SERVER["SSL_CLIENT_S_DN"]);
635 }
8de8bfb8
AD
636 return "";
637 }
638
a42c55f0 639 function authenticate_user($login, $password, $check_only = false) {
c8437f35 640
131b01b3 641 if (!SINGLE_USER_MODE) {
0d421af8 642 $user_id = false;
0f28f81f 643
1ffe3391 644 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_AUTH_USER) as $plugin) {
0f28f81f
AD
645
646 $user_id = (int) $plugin->authenticate($login, $password);
647
648 if ($user_id) {
649 $_SESSION["auth_module"] = strtolower(get_class($plugin));
650 break;
651 }
461766f3
AD
652 }
653
0d421af8 654 if ($user_id && !$check_only) {
70400171
AD
655 @session_start();
656
0d421af8 657 $_SESSION["uid"] = $user_id;
3472c4c5 658 $_SESSION["version"] = VERSION_STATIC;
0d421af8 659
a42c55f0 660 $result = db_query("SELECT login,access_level,pwd_hash FROM ttrss_users
0d421af8 661 WHERE id = '$user_id'");
8d505d78 662
131b01b3
AD
663 $_SESSION["name"] = db_fetch_result($result, 0, "login");
664 $_SESSION["access_level"] = db_fetch_result($result, 0, "access_level");
3ceb893f 665 $_SESSION["csrf_token"] = uniqid_short();
8d505d78 666
a42c55f0 667 db_query("UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
131b01b3 668 $_SESSION["uid"]);
8d505d78 669
131b01b3 670 $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
837ec70e 671 $_SESSION["user_agent"] = sha1($_SERVER['HTTP_USER_AGENT']);
1a9f4d3c 672 $_SESSION["pwd_hash"] = db_fetch_result($result, 0, "pwd_hash");
91c5f229
AD
673
674 $_SESSION["last_version_check"] = time();
8d505d78 675
a42c55f0 676 initialize_user_prefs($_SESSION["uid"]);
8d505d78 677
131b01b3
AD
678 return true;
679 }
8d505d78 680
131b01b3 681 return false;
503eb349 682
131b01b3 683 } else {
503eb349 684
131b01b3
AD
685 $_SESSION["uid"] = 1;
686 $_SESSION["name"] = "admin";
787e5ebc 687 $_SESSION["access_level"] = 10;
21e42e5f 688
0d421af8
AD
689 $_SESSION["hide_hello"] = true;
690 $_SESSION["hide_logout"] = true;
691
d5fd183d
AD
692 $_SESSION["auth_module"] = false;
693
21e42e5f 694 if (!$_SESSION["csrf_token"]) {
3ceb893f 695 $_SESSION["csrf_token"] = uniqid_short();
21e42e5f 696 }
f557cd78 697
0bbba72d 698 $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
8d505d78 699
a42c55f0 700 initialize_user_prefs($_SESSION["uid"]);
8d505d78 701
c8437f35
AD
702 return true;
703 }
c8437f35
AD
704 }
705
e6cb77a0
AD
706 function make_password($length = 8) {
707
85db6213
AD
708 $password = "";
709 $possible = "0123456789abcdfghjkmnpqrstvwxyzABCDFGHJKMNPQRSTVWXYZ";
710
711 $i = 0;
712
713 while ($i < $length) {
714 $char = substr($possible, mt_rand(0, strlen($possible)-1), 1);
715
716 if (!strstr($password, $char)) {
717 $password .= $char;
718 $i++;
719 }
720 }
721 return $password;
e6cb77a0
AD
722 }
723
724 // this is called after user is created to initialize default feeds, labels
725 // or whatever else
8d505d78 726
e6cb77a0
AD
727 // user preferences are checked on every login, not here
728
a42c55f0 729 function initialize_user($uid) {
e6cb77a0 730
a42c55f0 731 db_query("insert into ttrss_feeds (owner_uid,title,feed_url)
cd2cd415 732 values ('$uid', 'Tiny Tiny RSS: Forum',
f0855b88 733 'http://tt-rss.org/forum/rss.php')");
3b0feb9b 734 }
e6cb77a0 735
b8aa49bc 736 function logout_user() {
5ccc1cf5
AD
737 session_destroy();
738 if (isset($_COOKIE[session_name()])) {
739 setcookie(session_name(), '', time()-42000, '/');
740 }
b8aa49bc
AD
741 }
742
8484ce22
AD
743 function validate_csrf($csrf_token) {
744 return $csrf_token == $_SESSION['csrf_token'];
745 }
746
5cbd1fe8
AD
747 function load_user_plugins($owner_uid, $pluginhost = false) {
748
749 if (!$pluginhost) $pluginhost = PluginHost::getInstance();
750
6d45a152 751 if ($owner_uid && SCHEMA_VERSION >= 100) {
a42c55f0 752 $plugins = get_pref("_ENABLED_PLUGINS", $owner_uid);
de612e7a 753
5cbd1fe8 754 $pluginhost->load($plugins, PluginHost::KIND_USER, $owner_uid);
e9c04fd4 755
6322ac79 756 if (get_schema_version() > 100) {
5cbd1fe8 757 $pluginhost->load_data();
e9c04fd4 758 }
de612e7a
AD
759 }
760 }
761
6322ac79 762 function login_sequence() {
97acbaf1 763 if (SINGLE_USER_MODE) {
25db6c51 764 @session_start();
a42c55f0 765 authenticate_user("admin", null);
68349f55 766 startup_gettext();
a42c55f0 767 load_user_plugins($_SESSION["uid"]);
97acbaf1 768 } else {
6322ac79 769 if (!validate_session()) $_SESSION["uid"] = false;
d0eef2a3
AD
770
771 if (!$_SESSION["uid"]) {
97acbaf1 772
a42c55f0
AD
773 if (AUTH_AUTO_LOGIN && authenticate_user(null, null)) {
774 $_SESSION["ref_schema_version"] = get_schema_version(true);
97acbaf1 775 } else {
a42c55f0 776 authenticate_user(null, null, true);
97acbaf1
AD
777 }
778
d0eef2a3 779 if (!$_SESSION["uid"]) {
d0eef2a3
AD
780 @session_destroy();
781 setcookie(session_name(), '', time()-42000, '/');
9ce7a554 782
6322ac79 783 render_login_form();
d0eef2a3
AD
784 exit;
785 }
4ad99f23 786
97acbaf1
AD
787 } else {
788 /* bump login timestamp */
a42c55f0 789 db_query("UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
97acbaf1 790 $_SESSION["uid"]);
06b0777f 791 $_SESSION["last_login_update"] = time();
01a87dff
AD
792 }
793
de612e7a 794 if ($_SESSION["uid"]) {
7b149552 795 startup_gettext();
a42c55f0 796 load_user_plugins($_SESSION["uid"]);
b1b1d25f
AD
797
798 /* cleanup ccache */
799
a42c55f0 800 db_query("DELETE FROM ttrss_counters_cache WHERE owner_uid = ".
b1b1d25f
AD
801 $_SESSION["uid"] . " AND
802 (SELECT COUNT(id) FROM ttrss_feeds WHERE
803 ttrss_feeds.id = feed_id) = 0");
804
a42c55f0 805 db_query("DELETE FROM ttrss_cat_counters_cache WHERE owner_uid = ".
b1b1d25f
AD
806 $_SESSION["uid"] . " AND
807 (SELECT COUNT(id) FROM ttrss_feed_categories WHERE
808 ttrss_feed_categories.id = feed_id) = 0");
809
de612e7a 810 }
b1b1d25f 811
b8aa49bc 812 }
afc3cf55 813 }
3547842a 814
411fe209 815 function truncate_string($str, $max_len, $suffix = '&hellip;') {
878a0083 816 if (mb_strlen($str, "utf-8") > $max_len) {
411fe209 817 return mb_substr($str, 0, $max_len, "utf-8") . $suffix;
3547842a
AD
818 } else {
819 return $str;
820 }
821 }
54a60e1a 822
cc43e19b
AD
823 // is not utf8 clean
824 function truncate_middle($str, $max_len, $suffix = '&hellip;') {
825 if (strlen($str) > $max_len) {
826 return substr_replace($str, $suffix, $max_len / 2, mb_strlen($str) - $max_len);
827 } else {
828 return $str;
829 }
830 }
831
ab4b768f
AD
832 function convert_timestamp($timestamp, $source_tz, $dest_tz) {
833
834 try {
835 $source_tz = new DateTimeZone($source_tz);
836 } catch (Exception $e) {
837 $source_tz = new DateTimeZone('UTC');
838 }
839
840 try {
841 $dest_tz = new DateTimeZone($dest_tz);
842 } catch (Exception $e) {
843 $dest_tz = new DateTimeZone('UTC');
844 }
845
846 $dt = new DateTime(date('Y-m-d H:i:s', $timestamp), $source_tz);
847 return $dt->format('U') + $dest_tz->getOffset($dt);
848 }
849
a42c55f0 850 function make_local_datetime($timestamp, $long, $owner_uid = false,
b6714c77 851 $no_smart_dt = false, $eta_min = false) {
324944f3
AD
852
853 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
854 if (!$timestamp) $timestamp = '1970-01-01 0:00';
855
7d96bfcd 856 global $utc_tz;
5ddef5ba
AD
857 global $user_tz;
858
859 if (!$utc_tz) $utc_tz = new DateTimeZone('UTC');
324944f3 860
90e5f4f1
AD
861 $timestamp = substr($timestamp, 0, 19);
862
7d96bfcd
AD
863 # We store date in UTC internally
864 $dt = new DateTime($timestamp, $utc_tz);
865
5ddef5ba 866 $user_tz_string = get_pref('USER_TIMEZONE', $owner_uid);
7d96bfcd 867
6bfc97da 868 if ($user_tz_string != 'Automatic') {
324944f3 869
6bfc97da
AD
870 try {
871 if (!$user_tz) $user_tz = new DateTimeZone($user_tz_string);
872 } catch (Exception $e) {
873 $user_tz = $utc_tz;
874 }
875
876 $tz_offset = $user_tz->getOffset($dt);
877 } else {
96f0cbe3 878 $tz_offset = (int) -$_SESSION["clientTzOffset"];
6bfc97da 879 }
5ddef5ba 880
7d96bfcd 881 $user_timestamp = $dt->format('U') + $tz_offset;
324944f3 882
1dc52ae7 883 if (!$no_smart_dt) {
a42c55f0 884 return smart_date_time($user_timestamp,
b6714c77 885 $tz_offset, $owner_uid, $eta_min);
324944f3
AD
886 } else {
887 if ($long)
a42c55f0 888 $format = get_pref('LONG_DATE_FORMAT', $owner_uid);
324944f3 889 else
a42c55f0 890 $format = get_pref('SHORT_DATE_FORMAT', $owner_uid);
324944f3
AD
891
892 return date($format, $user_timestamp);
893 }
894 }
895
b6714c77 896 function smart_date_time($timestamp, $tz_offset = 0, $owner_uid = false, $eta_min = false) {
2a5c136e
AD
897 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
898
97aa917c 899 if ($eta_min && time() + $tz_offset - $timestamp < 3600) {
46973af5
AD
900 return T_sprintf("%d min", date("i", time() + $tz_offset - $timestamp));
901 } else if (date("Y.m.d", $timestamp) == date("Y.m.d", time() + $tz_offset)) {
be773442 902 return date("G:i", $timestamp);
2a5c136e 903 } else if (date("Y", $timestamp) == date("Y", time() + $tz_offset)) {
a42c55f0 904 $format = get_pref('SHORT_DATE_FORMAT', $owner_uid);
2a5c136e 905 return date($format, $timestamp);
be773442 906 } else {
a42c55f0 907 $format = get_pref('LONG_DATE_FORMAT', $owner_uid);
2a5c136e 908 return date($format, $timestamp);
be773442
AD
909 }
910 }
911
e3c99f3b 912 function sql_bool_to_bool($s) {
9955a134 913 if ($s == "t" || $s == "1" || strtolower($s) == "true") {
e3c99f3b
AD
914 return true;
915 } else {
916 return false;
917 }
918 }
8d505d78 919
badac687
AD
920 function bool_to_sql_bool($s) {
921 if ($s) {
922 return "true";
923 } else {
924 return "false";
925 }
926 }
e3c99f3b 927
fcfa9ef1
AD
928 // Session caching removed due to causing wrong redirects to upgrade
929 // script when get_schema_version() is called on an obsolete session
930 // created on a previous schema version.
a42c55f0 931 function get_schema_version($nocache = false) {
7d96bfcd
AD
932 global $schema_version;
933
e2cf81e2 934 if (!$schema_version && !$nocache) {
a42c55f0 935 $result = db_query("SELECT schema_version FROM ttrss_version");
199db684 936 $version = db_fetch_result($result, 0, "schema_version");
7d96bfcd 937 $schema_version = $version;
199db684 938 return $version;
7d96bfcd
AD
939 } else {
940 return $schema_version;
941 }
e4c51a6c
AD
942 }
943
6322ac79 944 function sanity_check() {
31303c6b 945 require_once 'errors.php';
cacc1877 946 global $ERRORS;
ebb948c2 947
6043fb7e 948 $error_code = 0;
a42c55f0 949 $schema_version = get_schema_version(true);
6043fb7e
AD
950
951 if ($schema_version != SCHEMA_VERSION) {
952 $error_code = 5;
953 }
954
aec3ce39 955 if (DB_TYPE == "mysql") {
a42c55f0 956 $result = db_query("SELECT true", false);
aec3ce39
AD
957 if (db_num_rows($result) != 1) {
958 $error_code = 10;
959 }
960 }
961
a42c55f0 962 if (db_escape_string("testTEST") != "testTEST") {
f29ba148
AD
963 $error_code = 12;
964 }
965
ebb948c2 966 return array("code" => $error_code, "message" => $ERRORS[$error_code]);
6043fb7e
AD
967 }
968
27981ca3 969 function file_is_locked($filename) {
8ff2a86c
AD
970 if (file_exists(LOCK_DIRECTORY . "/$filename")) {
971 if (function_exists('flock')) {
972 $fp = @fopen(LOCK_DIRECTORY . "/$filename", "r");
973 if ($fp) {
974 if (flock($fp, LOCK_EX | LOCK_NB)) {
975 flock($fp, LOCK_UN);
976 fclose($fp);
977 return false;
978 }
31a6d42d 979 fclose($fp);
8ff2a86c
AD
980 return true;
981 } else {
31a6d42d
AD
982 return false;
983 }
27981ca3 984 }
8ff2a86c
AD
985 return true; // consider the file always locked and skip the test
986 } else {
987 return false;
27981ca3 988 }
27981ca3
AD
989 }
990
8ff2a86c 991
fcb4c0c9 992 function make_lockfile($filename) {
cfa43e02 993 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
fcb4c0c9 994
a44bfcfd 995 if ($fp && flock($fp, LOCK_EX | LOCK_NB)) {
58fc7095
AD
996 $stat_h = fstat($fp);
997 $stat_f = stat(LOCK_DIRECTORY . "/$filename");
998
1fcebfb3
AD
999 if (strtoupper(substr(PHP_OS, 0, 3)) !== 'WIN') {
1000 if ($stat_h["ino"] != $stat_f["ino"] ||
1001 $stat_h["dev"] != $stat_f["dev"]) {
1002
1003 return false;
1004 }
58fc7095
AD
1005 }
1006
4c59adb1
AD
1007 if (function_exists('posix_getpid')) {
1008 fwrite($fp, posix_getpid() . "\n");
1009 }
fcb4c0c9
AD
1010 return $fp;
1011 } else {
1012 return false;
1013 }
1014 }
1015
bf7fcde8 1016 function make_stampfile($filename) {
cfa43e02 1017 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
bf7fcde8 1018
8e00ae9b 1019 if (flock($fp, LOCK_EX | LOCK_NB)) {
bf7fcde8 1020 fwrite($fp, time() . "\n");
8e00ae9b 1021 flock($fp, LOCK_UN);
bf7fcde8
AD
1022 fclose($fp);
1023 return true;
1024 } else {
1025 return false;
1026 }
1027 }
1028
894ebcf5 1029 function sql_random_function() {
8c0496f7 1030 if (DB_TYPE == "mysql") {
894ebcf5
AD
1031 return "RAND()";
1032 } else {
1033 return "RANDOM()";
1034 }
1035 }
1036
ff5cc7d7 1037 function getFeedUnread($feed, $is_cat = false) {
86a8351c 1038 return Feeds::getFeedArticles($feed, $is_cat, true, $_SESSION["uid"]);
ff5cc7d7
AD
1039 }
1040
ff5cc7d7 1041
86a8351c 1042 /*function get_pgsql_version() {
ff5cc7d7
AD
1043 $result = db_query("SELECT version() AS version");
1044 $version = explode(" ", db_fetch_result($result, 0, "version"));
1045 return $version[1];
86a8351c 1046 }*/
ff5cc7d7 1047
ff5cc7d7
AD
1048 function checkbox_to_sql_bool($val) {
1049 return ($val == "on") ? "true" : "false";
1050 }
1051
86a8351c 1052 /*function getFeedCatTitle($id) {
ff5cc7d7
AD
1053 if ($id == -1) {
1054 return __("Special");
1055 } else if ($id < LABEL_BASE_INDEX) {
1056 return __("Labels");
1057 } else if ($id > 0) {
1058 $result = db_query("SELECT ttrss_feed_categories.title
1059 FROM ttrss_feeds, ttrss_feed_categories WHERE ttrss_feeds.id = '$id' AND
1060 cat_id = ttrss_feed_categories.id");
1061 if (db_num_rows($result) == 1) {
1062 return db_fetch_result($result, 0, "title");
1063 } else {
1064 return __("Uncategorized");
1065 }
1066 } else {
1067 return "getFeedCatTitle($id) failed";
1068 }
1069
86a8351c 1070 }*/
ff5cc7d7 1071
3ceb893f
AD
1072 function uniqid_short() {
1073 return uniqid(base_convert(rand(), 10, 36));
1074 }
1075
aeb1abed
AD
1076 function make_init_params() {
1077 $params = array();
1078
1079 foreach (array("ON_CATCHUP_SHOW_NEXT_FEED", "HIDE_READ_FEEDS",
1080 "ENABLE_FEED_CATS", "FEEDS_SORT_BY_UNREAD", "CONFIRM_FEED_CATCHUP",
1081 "CDM_AUTO_CATCHUP", "FRESH_ARTICLE_MAX_AGE",
1082 "HIDE_READ_SHOWS_SPECIAL", "COMBINED_DISPLAY_MODE") as $param) {
1083
1084 $params[strtolower($param)] = (int) get_pref($param);
1085 }
1086
1087 $params["icons_url"] = ICONS_URL;
1088 $params["cookie_lifetime"] = SESSION_COOKIE_LIFETIME;
1089 $params["default_view_mode"] = get_pref("_DEFAULT_VIEW_MODE");
1090 $params["default_view_limit"] = (int) get_pref("_DEFAULT_VIEW_LIMIT");
1091 $params["default_view_order_by"] = get_pref("_DEFAULT_VIEW_ORDER_BY");
1092 $params["bw_limit"] = (int) $_SESSION["bw_limit"];
1093 $params["label_base_index"] = (int) LABEL_BASE_INDEX;
1094
1095 $theme = get_pref( "USER_CSS_THEME", false, false);
1096 $params["theme"] = theme_valid("$theme") ? $theme : "";
1097
1098 $params["plugins"] = implode(", ", PluginHost::getInstance()->get_plugin_names());
1099
1100 $params["php_platform"] = PHP_OS;
1101 $params["php_version"] = PHP_VERSION;
1102
1103 $params["sanity_checksum"] = sha1(file_get_contents("include/sanity_check.php"));
1104
1105 $result = db_query("SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
1106 ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1107
1108 $max_feed_id = db_fetch_result($result, 0, "mid");
1109 $num_feeds = db_fetch_result($result, 0, "nf");
1110
1111 $params["max_feed_id"] = (int) $max_feed_id;
1112 $params["num_feeds"] = (int) $num_feeds;
1113
1114 $params["hotkeys"] = get_hotkeys_map();
1115
1116 $params["csrf_token"] = $_SESSION["csrf_token"];
1117 $params["widescreen"] = (int) $_COOKIE["ttrss_widescreen"];
1118
1119 $params['simple_update'] = defined('SIMPLE_UPDATE_MODE') && SIMPLE_UPDATE_MODE;
1120
1121 $params["icon_alert"] = base64_img("images/alert.png");
1122 $params["icon_information"] = base64_img("images/information.png");
1123 $params["icon_cross"] = base64_img("images/cross.png");
1124 $params["icon_indicator_white"] = base64_img("images/indicator_white.gif");
1125
1126 return $params;
1127 }
1128
1129 function get_hotkeys_info() {
1130 $hotkeys = array(
1131 __("Navigation") => array(
1132 "next_feed" => __("Open next feed"),
1133 "prev_feed" => __("Open previous feed"),
1134 "next_article" => __("Open next article"),
1135 "prev_article" => __("Open previous article"),
1136 "next_article_noscroll" => __("Open next article (don't scroll long articles)"),
1137 "prev_article_noscroll" => __("Open previous article (don't scroll long articles)"),
1138 "next_article_noexpand" => __("Move to next article (don't expand or mark read)"),
1139 "prev_article_noexpand" => __("Move to previous article (don't expand or mark read)"),
1140 "search_dialog" => __("Show search dialog")),
1141 __("Article") => array(
1142 "toggle_mark" => __("Toggle starred"),
1143 "toggle_publ" => __("Toggle published"),
1144 "toggle_unread" => __("Toggle unread"),
1145 "edit_tags" => __("Edit tags"),
1146 "open_in_new_window" => __("Open in new window"),
1147 "catchup_below" => __("Mark below as read"),
1148 "catchup_above" => __("Mark above as read"),
1149 "article_scroll_down" => __("Scroll down"),
1150 "article_scroll_up" => __("Scroll up"),
1151 "select_article_cursor" => __("Select article under cursor"),
1152 "email_article" => __("Email article"),
1153 "close_article" => __("Close/collapse article"),
1154 "toggle_expand" => __("Toggle article expansion (combined mode)"),
1155 "toggle_widescreen" => __("Toggle widescreen mode"),
1156 "toggle_embed_original" => __("Toggle embed original")),
1157 __("Article selection") => array(
1158 "select_all" => __("Select all articles"),
1159 "select_unread" => __("Select unread"),
1160 "select_marked" => __("Select starred"),
1161 "select_published" => __("Select published"),
1162 "select_invert" => __("Invert selection"),
1163 "select_none" => __("Deselect everything")),
1164 __("Feed") => array(
1165 "feed_refresh" => __("Refresh current feed"),
1166 "feed_unhide_read" => __("Un/hide read feeds"),
1167 "feed_subscribe" => __("Subscribe to feed"),
1168 "feed_edit" => __("Edit feed"),
1169 "feed_catchup" => __("Mark as read"),
1170 "feed_reverse" => __("Reverse headlines"),
1171 "feed_toggle_vgroup" => __("Toggle headline grouping"),
1172 "feed_debug_update" => __("Debug feed update"),
1173 "feed_debug_viewfeed" => __("Debug viewfeed()"),
1174 "catchup_all" => __("Mark all feeds as read"),
1175 "cat_toggle_collapse" => __("Un/collapse current category"),
1176 "toggle_combined_mode" => __("Toggle combined mode"),
1177 "toggle_cdm_expanded" => __("Toggle auto expand in combined mode")),
1178 __("Go to") => array(
1179 "goto_all" => __("All articles"),
1180 "goto_fresh" => __("Fresh"),
1181 "goto_marked" => __("Starred"),
1182 "goto_published" => __("Published"),
1183 "goto_tagcloud" => __("Tag cloud"),
1184 "goto_prefs" => __("Preferences")),
1185 __("Other") => array(
1186 "create_label" => __("Create label"),
1187 "create_filter" => __("Create filter"),
1188 "collapse_sidebar" => __("Un/collapse sidebar"),
1189 "help_dialog" => __("Show help dialog"))
1190 );
1191
1192 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_HOTKEY_INFO) as $plugin) {
1193 $hotkeys = $plugin->hook_hotkey_info($hotkeys);
1194 }
1195
1196 return $hotkeys;
1197 }
1198
1199 function get_hotkeys_map() {
1200 $hotkeys = array(
1201 // "navigation" => array(
1202 "k" => "next_feed",
1203 "j" => "prev_feed",
1204 "n" => "next_article",
1205 "p" => "prev_article",
1206 "(38)|up" => "prev_article",
1207 "(40)|down" => "next_article",
1208 // "^(38)|Ctrl-up" => "prev_article_noscroll",
1209 // "^(40)|Ctrl-down" => "next_article_noscroll",
1210 "(191)|/" => "search_dialog",
1211 // "article" => array(
1212 "s" => "toggle_mark",
1213 "*s" => "toggle_publ",
1214 "u" => "toggle_unread",
1215 "*t" => "edit_tags",
1216 "o" => "open_in_new_window",
1217 "c p" => "catchup_below",
1218 "c n" => "catchup_above",
1219 "*n" => "article_scroll_down",
1220 "*p" => "article_scroll_up",
1221 "*(38)|Shift+up" => "article_scroll_up",
1222 "*(40)|Shift+down" => "article_scroll_down",
1223 "a *w" => "toggle_widescreen",
1224 "a e" => "toggle_embed_original",
1225 "e" => "email_article",
1226 "a q" => "close_article",
1227 // "article_selection" => array(
1228 "a a" => "select_all",
1229 "a u" => "select_unread",
1230 "a *u" => "select_marked",
1231 "a p" => "select_published",
1232 "a i" => "select_invert",
1233 "a n" => "select_none",
1234 // "feed" => array(
1235 "f r" => "feed_refresh",
1236 "f a" => "feed_unhide_read",
1237 "f s" => "feed_subscribe",
1238 "f e" => "feed_edit",
1239 "f q" => "feed_catchup",
1240 "f x" => "feed_reverse",
1241 "f g" => "feed_toggle_vgroup",
1242 "f *d" => "feed_debug_update",
1243 "f *g" => "feed_debug_viewfeed",
1244 "f *c" => "toggle_combined_mode",
1245 "f c" => "toggle_cdm_expanded",
1246 "*q" => "catchup_all",
1247 "x" => "cat_toggle_collapse",
1248 // "goto" => array(
1249 "g a" => "goto_all",
1250 "g f" => "goto_fresh",
1251 "g s" => "goto_marked",
1252 "g p" => "goto_published",
1253 "g t" => "goto_tagcloud",
1254 "g *p" => "goto_prefs",
1255 // "other" => array(
1256 "(9)|Tab" => "select_article_cursor", // tab
1257 "c l" => "create_label",
1258 "c f" => "create_filter",
1259 "c s" => "collapse_sidebar",
1260 "^(191)|Ctrl+/" => "help_dialog",
1261 );
1262
1263 if (get_pref('COMBINED_DISPLAY_MODE')) {
1264 $hotkeys["^(38)|Ctrl-up"] = "prev_article_noscroll";
1265 $hotkeys["^(40)|Ctrl-down"] = "next_article_noscroll";
1266 }
1267
1268 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_HOTKEY_MAP) as $plugin) {
1269 $hotkeys = $plugin->hook_hotkey_map($hotkeys);
1270 }
1271
1272 $prefixes = array();
1273
1274 foreach (array_keys($hotkeys) as $hotkey) {
1275 $pair = explode(" ", $hotkey, 2);
1276
1277 if (count($pair) > 1 && !in_array($pair[0], $prefixes)) {
1278 array_push($prefixes, $pair[0]);
1279 }
1280 }
1281
1282 return array($prefixes, $hotkeys);
1283 }
1284
1285 function check_for_update() {
1286 if (defined("GIT_VERSION_TIMESTAMP")) {
1287 $content = @fetch_file_contents(array("url" => "http://tt-rss.org/version.json", "timeout" => 5));
1288
1289 if ($content) {
1290 $content = json_decode($content, true);
1291
1292 if ($content && isset($content["changeset"])) {
1293 if ((int)GIT_VERSION_TIMESTAMP < (int)$content["changeset"]["timestamp"] &&
1294 GIT_VERSION_HEAD != $content["changeset"]["id"]) {
1295
1296 return $content["changeset"]["id"];
1297 }
1298 }
1299 }
1300 }
1301
1302 return "";
1303 }
1304
1305 function make_runtime_info($disable_update_check = false) {
1306 $data = array();
1307
1308 $result = db_query("SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
1309 ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1310
1311 $max_feed_id = db_fetch_result($result, 0, "mid");
1312 $num_feeds = db_fetch_result($result, 0, "nf");
1313
1314 $data["max_feed_id"] = (int) $max_feed_id;
1315 $data["num_feeds"] = (int) $num_feeds;
1316
1317 $data['last_article_id'] = Article::getLastArticleId();
1318 $data['cdm_expanded'] = get_pref('CDM_EXPANDED');
1319
1320 $data['dep_ts'] = calculate_dep_timestamp();
1321 $data['reload_on_ts_change'] = !defined('_NO_RELOAD_ON_TS_CHANGE');
1322
1323
1324 if (CHECK_FOR_UPDATES && !$disable_update_check && $_SESSION["last_version_check"] + 86400 + rand(-1000, 1000) < time()) {
1325 $update_result = @check_for_update();
1326
1327 $data["update_result"] = $update_result;
1328
1329 $_SESSION["last_version_check"] = time();
1330 }
1331
1332 if (file_exists(LOCK_DIRECTORY . "/update_daemon.lock")) {
1333
1334 $data['daemon_is_running'] = (int) file_is_locked("update_daemon.lock");
1335
1336 if (time() - $_SESSION["daemon_stamp_check"] > 30) {
1337
1338 $stamp = (int) @file_get_contents(LOCK_DIRECTORY . "/update_daemon.stamp");
1339
1340 if ($stamp) {
1341 $stamp_delta = time() - $stamp;
1342
1343 if ($stamp_delta > 1800) {
1344 $stamp_check = 0;
1345 } else {
1346 $stamp_check = 1;
1347 $_SESSION["daemon_stamp_check"] = time();
1348 }
1349
1350 $data['daemon_stamp_ok'] = $stamp_check;
1351
1352 $stamp_fmt = date("Y.m.d, G:i", $stamp);
1353
1354 $data['daemon_stamp'] = $stamp_fmt;
1355 }
1356 }
1357 }
1358
1359 return $data;
1360 }
1361
1362 function search_to_sql($search, $search_language) {
1363
1364 $keywords = str_getcsv(trim($search), " ");
1365 $query_keywords = array();
1366 $search_words = array();
1367 $search_query_leftover = array();
1368
1369 if ($search_language)
1370 $search_language = db_escape_string(mb_strtolower($search_language));
1371 else
1372 $search_language = "english";
1373
1374 foreach ($keywords as $k) {
1375 if (strpos($k, "-") === 0) {
1376 $k = substr($k, 1);
1377 $not = "NOT";
1378 } else {
1379 $not = "";
1380 }
1381
1382 $commandpair = explode(":", mb_strtolower($k), 2);
1383
1384 switch ($commandpair[0]) {
1385 case "title":
1386 if ($commandpair[1]) {
1387 array_push($query_keywords, "($not (LOWER(ttrss_entries.title) LIKE '%".
1388 db_escape_string(mb_strtolower($commandpair[1]))."%'))");
1389 } else {
1390 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
1391 OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
1392 array_push($search_words, $k);
1393 }
1394 break;
1395 case "author":
1396 if ($commandpair[1]) {
1397 array_push($query_keywords, "($not (LOWER(author) LIKE '%".
1398 db_escape_string(mb_strtolower($commandpair[1]))."%'))");
1399 } else {
1400 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
1401 OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
1402 array_push($search_words, $k);
1403 }
1404 break;
1405 case "note":
1406 if ($commandpair[1]) {
1407 if ($commandpair[1] == "true")
1408 array_push($query_keywords, "($not (note IS NOT NULL AND note != ''))");
1409 else if ($commandpair[1] == "false")
1410 array_push($query_keywords, "($not (note IS NULL OR note = ''))");
1411 else
1412 array_push($query_keywords, "($not (LOWER(note) LIKE '%".
1413 db_escape_string(mb_strtolower($commandpair[1]))."%'))");
1414 } else {
1415 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
1416 OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
1417 if (!$not) array_push($search_words, $k);
1418 }
1419 break;
1420 case "star":
1421
1422 if ($commandpair[1]) {
1423 if ($commandpair[1] == "true")
1424 array_push($query_keywords, "($not (marked = true))");
1425 else
1426 array_push($query_keywords, "($not (marked = false))");
1427 } else {
1428 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
1429 OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
1430 if (!$not) array_push($search_words, $k);
1431 }
1432 break;
1433 case "pub":
1434 if ($commandpair[1]) {
1435 if ($commandpair[1] == "true")
1436 array_push($query_keywords, "($not (published = true))");
1437 else
1438 array_push($query_keywords, "($not (published = false))");
1439
1440 } else {
1441 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
1442 OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
1443 if (!$not) array_push($search_words, $k);
1444 }
1445 break;
1446 case "unread":
1447 if ($commandpair[1]) {
1448 if ($commandpair[1] == "true")
1449 array_push($query_keywords, "($not (unread = true))");
1450 else
1451 array_push($query_keywords, "($not (unread = false))");
1452
1453 } else {
1454 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
1455 OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
1456 if (!$not) array_push($search_words, $k);
1457 }
1458 break;
1459 default:
1460 if (strpos($k, "@") === 0) {
1461
1462 $user_tz_string = get_pref('USER_TIMEZONE', $_SESSION['uid']);
1463 $orig_ts = strtotime(substr($k, 1));
1464 $k = date("Y-m-d", convert_timestamp($orig_ts, $user_tz_string, 'UTC'));
1465
1466 //$k = date("Y-m-d", strtotime(substr($k, 1)));
1467
1468 array_push($query_keywords, "(".SUBSTRING_FOR_DATE."(updated,1,LENGTH('$k')) $not = '$k')");
1469 } else {
1470
1471 if (DB_TYPE == "pgsql") {
1472 $k = mb_strtolower($k);
1473 array_push($search_query_leftover, $not ? "!$k" : $k);
1474 } else {
1475 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
1476 OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
1477 }
1478
1479 if (!$not) array_push($search_words, $k);
1480 }
1481 }
1482 }
1483
1484 if (count($search_query_leftover) > 0) {
1485 $search_query_leftover = db_escape_string(implode(" & ", $search_query_leftover));
1486
1487 if (DB_TYPE == "pgsql") {
1488 array_push($query_keywords,
1489 "(tsvector_combined @@ to_tsquery('$search_language', '$search_query_leftover'))");
1490 }
1491
1492 }
1493
1494 $search_query_part = implode("AND", $query_keywords);
1495
1496 return array($search_query_part, $search_words);
1497 }
1498
1499 function iframe_whitelisted($entry) {
1500 $whitelist = array("youtube.com", "youtu.be", "vimeo.com", "player.vimeo.com");
1501
1502 @$src = parse_url($entry->getAttribute("src"), PHP_URL_HOST);
1503
1504 if ($src) {
1505 foreach ($whitelist as $w) {
1506 if ($src == $w || $src == "www.$w")
1507 return true;
1508 }
1509 }
1510
1511 return false;
1512 }
1513
1514 function sanitize($str, $force_remove_images = false, $owner = false, $site_url = false, $highlight_words = false, $article_id = false) {
1515 if (!$owner) $owner = $_SESSION["uid"];
1516
1517 $res = trim($str); if (!$res) return '';
1518
1519 $charset_hack = '<head>
1520 <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
1521 </head>';
1522
1523 $res = trim($res); if (!$res) return '';
1524
1525 libxml_use_internal_errors(true);
1526
1527 $doc = new DOMDocument();
1528 $doc->loadHTML($charset_hack . $res);
1529 $xpath = new DOMXPath($doc);
1530
1531 $ttrss_uses_https = parse_url(get_self_url_prefix(), PHP_URL_SCHEME) === 'https';
1532 $rewrite_base_url = $site_url ? $site_url : SELF_URL_PATH;
1533
1534 $entries = $xpath->query('(//a[@href]|//img[@src]|//video/source[@src]|//audio/source[@src])');
1535
1536 foreach ($entries as $entry) {
1537
1538 if ($entry->hasAttribute('href')) {
1539 $entry->setAttribute('href',
1540 rewrite_relative_url($rewrite_base_url, $entry->getAttribute('href')));
1541
1542 $entry->setAttribute('rel', 'noopener noreferrer');
1543 }
1544
1545 if ($entry->hasAttribute('src')) {
1546 $src = rewrite_relative_url($rewrite_base_url, $entry->getAttribute('src'));
1547 $cached_filename = CACHE_DIR . '/images/' . sha1($src);
1548
1549 if (file_exists($cached_filename)) {
1550
1551 // this is strictly cosmetic
1552 if ($entry->tagName == 'img') {
1553 $suffix = ".png";
1554 } else if ($entry->parentNode && $entry->parentNode->tagName == "video") {
1555 $suffix = ".mp4";
1556 } else if ($entry->parentNode && $entry->parentNode->tagName == "audio") {
1557 $suffix = ".ogg";
1558 } else {
1559 $suffix = "";
1560 }
1561
1562 $src = get_self_url_prefix() . '/public.php?op=cached_url&hash=' . sha1($src) . $suffix;
1563
1564 if ($entry->hasAttribute('srcset')) {
1565 $entry->removeAttribute('srcset');
1566 }
1567
1568 if ($entry->hasAttribute('sizes')) {
1569 $entry->removeAttribute('sizes');
1570 }
1571 }
1572
1573 $entry->setAttribute('src', $src);
1574 }
1575
1576 if ($entry->nodeName == 'img') {
1577
1578 if ($entry->hasAttribute('src')) {
1579 $is_https_url = parse_url($entry->getAttribute('src'), PHP_URL_SCHEME) === 'https';
1580
1581 if ($ttrss_uses_https && !$is_https_url) {
1582
1583 if ($entry->hasAttribute('srcset')) {
1584 $entry->removeAttribute('srcset');
1585 }
1586
1587 if ($entry->hasAttribute('sizes')) {
1588 $entry->removeAttribute('sizes');
1589 }
1590 }
1591 }
1592
1593 if (($owner && get_pref("STRIP_IMAGES", $owner)) ||
1594 $force_remove_images || $_SESSION["bw_limit"]) {
1595
1596 $p = $doc->createElement('p');
1597
1598 $a = $doc->createElement('a');
1599 $a->setAttribute('href', $entry->getAttribute('src'));
1600
1601 $a->appendChild(new DOMText($entry->getAttribute('src')));
1602 $a->setAttribute('target', '_blank');
1603 $a->setAttribute('rel', 'noopener noreferrer');
1604
1605 $p->appendChild($a);
1606
1607 $entry->parentNode->replaceChild($p, $entry);
1608 }
1609 }
1610
1611 if (strtolower($entry->nodeName) == "a") {
1612 $entry->setAttribute("target", "_blank");
1613 $entry->setAttribute("rel", "noopener noreferrer");
1614 }
1615 }
1616
1617 $entries = $xpath->query('//iframe');
1618 foreach ($entries as $entry) {
1619 if (!iframe_whitelisted($entry)) {
1620 $entry->setAttribute('sandbox', 'allow-scripts');
1621 } else {
1622 if ($_SERVER['HTTPS'] == "on") {
1623 $entry->setAttribute("src",
1624 str_replace("http://", "https://",
1625 $entry->getAttribute("src")));
1626 }
1627 }
1628 }
1629
1630 $allowed_elements = array('a', 'address', 'acronym', 'audio', 'article', 'aside',
1631 'b', 'bdi', 'bdo', 'big', 'blockquote', 'body', 'br',
1632 'caption', 'cite', 'center', 'code', 'col', 'colgroup',
1633 'data', 'dd', 'del', 'details', 'description', 'dfn', 'div', 'dl', 'font',
1634 'dt', 'em', 'footer', 'figure', 'figcaption',
1635 'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'header', 'html', 'i',
1636 'img', 'ins', 'kbd', 'li', 'main', 'mark', 'nav', 'noscript',
1637 'ol', 'p', 'pre', 'q', 'ruby', 'rp', 'rt', 's', 'samp', 'section',
1638 'small', 'source', 'span', 'strike', 'strong', 'sub', 'summary',
1639 'sup', 'table', 'tbody', 'td', 'tfoot', 'th', 'thead', 'time',
1640 'tr', 'track', 'tt', 'u', 'ul', 'var', 'wbr', 'video', 'xml:namespace' );
1641
1642 if ($_SESSION['hasSandbox']) $allowed_elements[] = 'iframe';
1643
1644 $disallowed_attributes = array('id', 'style', 'class');
1645
1646 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_SANITIZE) as $plugin) {
1647 $retval = $plugin->hook_sanitize($doc, $site_url, $allowed_elements, $disallowed_attributes, $article_id);
1648 if (is_array($retval)) {
1649 $doc = $retval[0];
1650 $allowed_elements = $retval[1];
1651 $disallowed_attributes = $retval[2];
1652 } else {
1653 $doc = $retval;
1654 }
1655 }
1656
1657 $doc->removeChild($doc->firstChild); //remove doctype
1658 $doc = strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes);
1659
1660 if ($highlight_words) {
1661 foreach ($highlight_words as $word) {
1662
1663 // http://stackoverflow.com/questions/4081372/highlight-keywords-in-a-paragraph
1664
1665 $elements = $xpath->query("//*/text()");
1666
1667 foreach ($elements as $child) {
1668
1669 $fragment = $doc->createDocumentFragment();
1670 $text = $child->textContent;
1671
1672 while (($pos = mb_stripos($text, $word)) !== false) {
1673 $fragment->appendChild(new DomText(mb_substr($text, 0, $pos)));
1674 $word = mb_substr($text, $pos, mb_strlen($word));
1675 $highlight = $doc->createElement('span');
1676 $highlight->appendChild(new DomText($word));
1677 $highlight->setAttribute('class', 'highlight');
1678 $fragment->appendChild($highlight);
1679 $text = mb_substr($text, $pos + mb_strlen($word));
1680 }
1681
1682 if (!empty($text)) $fragment->appendChild(new DomText($text));
1683
1684 $child->parentNode->replaceChild($fragment, $child);
1685 }
1686 }
1687 }
1688
1689 $res = $doc->saveHTML();
1690
1691 /* strip everything outside of <body>...</body> */
1692
1693 $res_frag = array();
1694 if (preg_match('/<body>(.*)<\/body>/is', $res, $res_frag)) {
1695 return $res_frag[1];
1696 } else {
1697 return $res;
1698 }
1699 }
1700
1701 function strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes) {
1702 $xpath = new DOMXPath($doc);
1703 $entries = $xpath->query('//*');
1704
1705 foreach ($entries as $entry) {
1706 if (!in_array($entry->nodeName, $allowed_elements)) {
1707 $entry->parentNode->removeChild($entry);
1708 }
1709
1710 if ($entry->hasAttributes()) {
1711 $attrs_to_remove = array();
1712
1713 foreach ($entry->attributes as $attr) {
1714
1715 if (strpos($attr->nodeName, 'on') === 0) {
1716 array_push($attrs_to_remove, $attr);
1717 }
1718
1719 if ($attr->nodeName == 'href' && stripos($attr->value, 'javascript:') === 0) {
1720 array_push($attrs_to_remove, $attr);
1721 }
1722
1723 if (in_array($attr->nodeName, $disallowed_attributes)) {
1724 array_push($attrs_to_remove, $attr);
1725 }
1726 }
1727
1728 foreach ($attrs_to_remove as $attr) {
1729 $entry->removeAttributeNode($attr);
1730 }
1731 }
1732 }
1733
1734 return $doc;
1735 }
1736
1737 function trim_array($array) {
1738 $tmp = $array;
1739 array_walk($tmp, 'trim');
1740 return $tmp;
1741 }
1742
1743 function tag_is_valid($tag) {
1744 if ($tag == '') return false;
1745 if (is_numeric($tag)) return false;
1746 if (mb_strlen($tag) > 250) return false;
1747
1748 if (!$tag) return false;
1749
1750 return true;
1751 }
1752
1753 function render_login_form() {
1754 header('Cache-Control: public');
1755
1756 require_once "login_form.php";
1757 exit;
1758 }
1759
1760 function T_sprintf() {
1761 $args = func_get_args();
1762 return vsprintf(__(array_shift($args)), $args);
1763 }
1764
1765 function print_checkpoint($n, $s) {
1766 $ts = microtime(true);
1767 echo sprintf("<!-- CP[$n] %.4f seconds -->\n", $ts - $s);
1768 return $ts;
1769 }
1770
1771 function sanitize_tag($tag) {
1772 $tag = trim($tag);
1773
1774 $tag = mb_strtolower($tag, 'utf-8');
1775
1776 $tag = preg_replace('/[,\'\"\+\>\<]/', "", $tag);
1777
1778 if (DB_TYPE == "mysql") {
1779 $tag = preg_replace('/[\x{10000}-\x{10FFFF}]/u', "\xEF\xBF\xBD", $tag);
1780 }
1781
1782 return $tag;
1783 }
1784
1785 function get_self_url_prefix() {
1786 if (strrpos(SELF_URL_PATH, "/") === strlen(SELF_URL_PATH)-1) {
1787 return substr(SELF_URL_PATH, 0, strlen(SELF_URL_PATH)-1);
1788 } else {
1789 return SELF_URL_PATH;
1790 }
1791 }
1792
aeb1abed
AD
1793 function encrypt_password($pass, $salt = '', $mode2 = false) {
1794 if ($salt && $mode2) {
1795 return "MODE2:" . hash('sha256', $salt . $pass);
1796 } else if ($salt) {
1797 return "SHA1X:" . sha1("$salt:$pass");
1798 } else {
1799 return "SHA1:" . sha1($pass);
1800 }
1801 } // function encrypt_password
1802
1803 function load_filters($feed_id, $owner_uid) {
1804 $filters = array();
1805
0086a897 1806 $cat_id = (int)Feeds::getFeedCategory($feed_id);
aeb1abed
AD
1807
1808 if ($cat_id == 0)
1809 $null_cat_qpart = "cat_id IS NULL OR";
1810 else
1811 $null_cat_qpart = "";
1812
1813 $result = db_query("SELECT * FROM ttrss_filters2 WHERE
1814 owner_uid = $owner_uid AND enabled = true ORDER BY order_id, title");
1815
1816 $check_cats = join(",", array_merge(
1817 Feeds::getParentCategories($cat_id, $owner_uid),
1818 array($cat_id)));
1819
1820 while ($line = db_fetch_assoc($result)) {
1821 $filter_id = $line["id"];
1822
1823 $result2 = db_query("SELECT
1824 r.reg_exp, r.inverse, r.feed_id, r.cat_id, r.cat_filter, t.name AS type_name
1825 FROM ttrss_filters2_rules AS r,
1826 ttrss_filter_types AS t
1827 WHERE
1828 ($null_cat_qpart (cat_id IS NULL AND cat_filter = false) OR cat_id IN ($check_cats)) AND
1829 (feed_id IS NULL OR feed_id = '$feed_id') AND
1830 filter_type = t.id AND filter_id = '$filter_id'");
1831
1832 $rules = array();
1833 $actions = array();
1834
1835 while ($rule_line = db_fetch_assoc($result2)) {
1836 # print_r($rule_line);
1837
1838 $rule = array();
1839 $rule["reg_exp"] = $rule_line["reg_exp"];
1840 $rule["type"] = $rule_line["type_name"];
1841 $rule["inverse"] = sql_bool_to_bool($rule_line["inverse"]);
1842
1843 array_push($rules, $rule);
1844 }
1845
1846 $result2 = db_query("SELECT a.action_param,t.name AS type_name
1847 FROM ttrss_filters2_actions AS a,
1848 ttrss_filter_actions AS t
1849 WHERE
1850 action_id = t.id AND filter_id = '$filter_id'");
1851
1852 while ($action_line = db_fetch_assoc($result2)) {
1853 # print_r($action_line);
1854
1855 $action = array();
1856 $action["type"] = $action_line["type_name"];
1857 $action["param"] = $action_line["action_param"];
1858
1859 array_push($actions, $action);
1860 }
1861
1862
1863 $filter = array();
1864 $filter["match_any_rule"] = sql_bool_to_bool($line["match_any_rule"]);
1865 $filter["inverse"] = sql_bool_to_bool($line["inverse"]);
1866 $filter["rules"] = $rules;
1867 $filter["actions"] = $actions;
1868
1869 if (count($rules) > 0 && count($actions) > 0) {
1870 array_push($filters, $filter);
1871 }
1872 }
1873
1874 return $filters;
1875 }
1876
1877 function get_score_pic($score) {
1878 if ($score > 100) {
1879 return "score_high.png";
1880 } else if ($score > 0) {
1881 return "score_half_high.png";
1882 } else if ($score < -100) {
1883 return "score_low.png";
1884 } else if ($score < 0) {
1885 return "score_half_low.png";
1886 } else {
1887 return "score_neutral.png";
1888 }
1889 }
1890
1891 function feed_has_icon($id) {
1892 return is_file(ICONS_DIR . "/$id.ico") && filesize(ICONS_DIR . "/$id.ico") > 0;
1893 }
1894
1895 function init_plugins() {
1896 PluginHost::getInstance()->load(PLUGINS, PluginHost::KIND_ALL);
1897
1898 return true;
1899 }
1900
1901 function add_feed_category($feed_cat, $parent_cat_id = false) {
1902
1903 if (!$feed_cat) return false;
1904
1905 db_query("BEGIN");
1906
1907 if ($parent_cat_id) {
1908 $parent_qpart = "parent_cat = '$parent_cat_id'";
1909 $parent_insert = "'$parent_cat_id'";
1910 } else {
1911 $parent_qpart = "parent_cat IS NULL";
1912 $parent_insert = "NULL";
1913 }
1914
1915 $feed_cat = mb_substr($feed_cat, 0, 250);
1916
1917 $result = db_query(
1918 "SELECT id FROM ttrss_feed_categories
1919 WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
1920
1921 if (db_num_rows($result) == 0) {
1922
1923 $result = db_query(
1924 "INSERT INTO ttrss_feed_categories (owner_uid,title,parent_cat)
1925 VALUES ('".$_SESSION["uid"]."', '$feed_cat', $parent_insert)");
1926
1927 db_query("COMMIT");
1928
1929 return true;
1930 }
1931
1932 return false;
1933 }
1934
1935 /**
1936 * Fixes incomplete URLs by prepending "http://".
1937 * Also replaces feed:// with http://, and
1938 * prepends a trailing slash if the url is a domain name only.
1939 *
1940 * @param string $url Possibly incomplete URL
1941 *
1942 * @return string Fixed URL.
1943 */
1944 function fix_url($url) {
1945
1946 // support schema-less urls
1947 if (strpos($url, '//') === 0) {
1948 $url = 'https:' . $url;
1949 }
1950
1951 if (strpos($url, '://') === false) {
1952 $url = 'http://' . $url;
1953 } else if (substr($url, 0, 5) == 'feed:') {
1954 $url = 'http:' . substr($url, 5);
1955 }
1956
1957 //prepend slash if the URL has no slash in it
1958 // "http://www.example" -> "http://www.example/"
1959 if (strpos($url, '/', strpos($url, ':') + 3) === false) {
1960 $url .= '/';
1961 }
1962
1963 //convert IDNA hostname to punycode if possible
1964 if (function_exists("idn_to_ascii")) {
1965 $parts = parse_url($url);
1966 if (mb_detect_encoding($parts['host']) != 'ASCII')
1967 {
1968 $parts['host'] = idn_to_ascii($parts['host']);
1969 $url = build_url($parts);
1970 }
1971 }
1972
1973 if ($url != "http:///")
1974 return $url;
1975 else
1976 return '';
1977 }
1978
1979 function validate_feed_url($url) {
1980 $parts = parse_url($url);
1981
1982 return ($parts['scheme'] == 'http' || $parts['scheme'] == 'feed' || $parts['scheme'] == 'https');
1983
1984 }
1985
1986 /* function save_email_address($email) {
1987 // FIXME: implement persistent storage of emails
1988
1989 if (!$_SESSION['stored_emails'])
1990 $_SESSION['stored_emails'] = array();
1991
1992 if (!in_array($email, $_SESSION['stored_emails']))
1993 array_push($_SESSION['stored_emails'], $email);
1994 } */
1995
1996
1997 function get_feed_access_key($feed_id, $is_cat, $owner_uid = false) {
1998
1999 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2000
2001 $sql_is_cat = bool_to_sql_bool($is_cat);
2002
2003 $result = db_query("SELECT access_key FROM ttrss_access_keys
2004 WHERE feed_id = '$feed_id' AND is_cat = $sql_is_cat
2005 AND owner_uid = " . $owner_uid);
2006
2007 if (db_num_rows($result) == 1) {
2008 return db_fetch_result($result, 0, "access_key");
2009 } else {
2010 $key = db_escape_string(uniqid_short());
2011
2012 $result = db_query("INSERT INTO ttrss_access_keys
2013 (access_key, feed_id, is_cat, owner_uid)
2014 VALUES ('$key', '$feed_id', $sql_is_cat, '$owner_uid')");
2015
2016 return $key;
2017 }
2018 return false;
2019 }
2020
2021 function get_feeds_from_html($url, $content)
2022 {
2023 $url = fix_url($url);
2024 $baseUrl = substr($url, 0, strrpos($url, '/') + 1);
2025
2026 libxml_use_internal_errors(true);
2027
2028 $doc = new DOMDocument();
2029 $doc->loadHTML($content);
2030 $xpath = new DOMXPath($doc);
2031 $entries = $xpath->query('/html/head/link[@rel="alternate" and '.
2032 '(contains(@type,"rss") or contains(@type,"atom"))]|/html/head/link[@rel="feed"]');
2033 $feedUrls = array();
2034 foreach ($entries as $entry) {
2035 if ($entry->hasAttribute('href')) {
2036 $title = $entry->getAttribute('title');
2037 if ($title == '') {
2038 $title = $entry->getAttribute('type');
2039 }
2040 $feedUrl = rewrite_relative_url(
2041 $baseUrl, $entry->getAttribute('href')
2042 );
2043 $feedUrls[$feedUrl] = $title;
2044 }
2045 }
2046 return $feedUrls;
2047 }
2048
2049 function is_html($content) {
2050 return preg_match("/<html|DOCTYPE html/i", substr($content, 0, 100)) !== 0;
2051 }
2052
2053 function url_is_html($url, $login = false, $pass = false) {
2054 return is_html(fetch_file_contents($url, false, $login, $pass));
2055 }
2056
2057 function build_url($parts) {
2058 return $parts['scheme'] . "://" . $parts['host'] . $parts['path'];
2059 }
2060
2061 function cleanup_url_path($path) {
2062 $path = str_replace("/./", "/", $path);
2063 $path = str_replace("//", "/", $path);
2064
2065 return $path;
2066 }
2067
2068 /**
2069 * Converts a (possibly) relative URL to a absolute one.
2070 *
2071 * @param string $url Base URL (i.e. from where the document is)
2072 * @param string $rel_url Possibly relative URL in the document
2073 *
2074 * @return string Absolute URL
2075 */
2076 function rewrite_relative_url($url, $rel_url) {
2077 if (strpos($rel_url, "://") !== false) {
2078 return $rel_url;
2079 } else if (strpos($rel_url, "//") === 0) {
2080 # protocol-relative URL (rare but they exist)
2081 return $rel_url;
2082 } else if (preg_match("/^[a-z]+:/i", $rel_url)) {
2083 # magnet:, feed:, etc
2084 return $rel_url;
2085 } else if (strpos($rel_url, "/") === 0) {
2086 $parts = parse_url($url);
2087 $parts['path'] = $rel_url;
2088 $parts['path'] = cleanup_url_path($parts['path']);
2089
2090 return build_url($parts);
2091
2092 } else {
2093 $parts = parse_url($url);
2094 if (!isset($parts['path'])) {
2095 $parts['path'] = '/';
2096 }
2097 $dir = $parts['path'];
2098 if (substr($dir, -1) !== '/') {
2099 $dir = dirname($parts['path']);
2100 $dir !== '/' && $dir .= '/';
2101 }
2102 $parts['path'] = $dir . $rel_url;
2103 $parts['path'] = cleanup_url_path($parts['path']);
2104
2105 return build_url($parts);
2106 }
2107 }
2108
2109 function cleanup_tags($days = 14, $limit = 1000) {
2110
2111 if (DB_TYPE == "pgsql") {
2112 $interval_query = "date_updated < NOW() - INTERVAL '$days days'";
2113 } else if (DB_TYPE == "mysql") {
2114 $interval_query = "date_updated < DATE_SUB(NOW(), INTERVAL $days DAY)";
2115 }
2116
2117 $tags_deleted = 0;
2118
2119 while ($limit > 0) {
2120 $limit_part = 500;
2121
2122 $query = "SELECT ttrss_tags.id AS id
2123 FROM ttrss_tags, ttrss_user_entries, ttrss_entries
2124 WHERE post_int_id = int_id AND $interval_query AND
2125 ref_id = ttrss_entries.id AND tag_cache != '' LIMIT $limit_part";
2126
2127 $result = db_query($query);
2128
2129 $ids = array();
2130
2131 while ($line = db_fetch_assoc($result)) {
2132 array_push($ids, $line['id']);
2133 }
2134
2135 if (count($ids) > 0) {
2136 $ids = join(",", $ids);
2137
2138 $tmp_result = db_query("DELETE FROM ttrss_tags WHERE id IN ($ids)");
2139 $tags_deleted += db_affected_rows($tmp_result);
2140 } else {
2141 break;
2142 }
2143
2144 $limit -= $limit_part;
2145 }
2146
2147 return $tags_deleted;
2148 }
2149
2150 function print_user_stylesheet() {
2151 $value = get_pref('USER_STYLESHEET');
2152
2153 if ($value) {
2154 print "<style type=\"text/css\">";
2155 print str_replace("<br/>", "\n", $value);
2156 print "</style>";
2157 }
2158
2159 }
2160
2161 function filter_to_sql($filter, $owner_uid) {
2162 $query = array();
2163
2164 if (DB_TYPE == "pgsql")
2165 $reg_qpart = "~";
2166 else
2167 $reg_qpart = "REGEXP";
2168
2169 foreach ($filter["rules"] AS $rule) {
2170 $rule['reg_exp'] = str_replace('/', '\/', $rule["reg_exp"]);
2171 $regexp_valid = preg_match('/' . $rule['reg_exp'] . '/',
2172 $rule['reg_exp']) !== FALSE;
2173
2174 if ($regexp_valid) {
2175
2176 $rule['reg_exp'] = db_escape_string($rule['reg_exp']);
2177
2178 switch ($rule["type"]) {
2179 case "title":
2180 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
2181 $rule['reg_exp'] . "')";
2182 break;
2183 case "content":
2184 $qpart = "LOWER(ttrss_entries.content) $reg_qpart LOWER('".
2185 $rule['reg_exp'] . "')";
2186 break;
2187 case "both":
2188 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
2189 $rule['reg_exp'] . "') OR LOWER(" .
2190 "ttrss_entries.content) $reg_qpart LOWER('" . $rule['reg_exp'] . "')";
2191 break;
2192 case "tag":
2193 $qpart = "LOWER(ttrss_user_entries.tag_cache) $reg_qpart LOWER('".
2194 $rule['reg_exp'] . "')";
2195 break;
2196 case "link":
2197 $qpart = "LOWER(ttrss_entries.link) $reg_qpart LOWER('".
2198 $rule['reg_exp'] . "')";
2199 break;
2200 case "author":
2201 $qpart = "LOWER(ttrss_entries.author) $reg_qpart LOWER('".
2202 $rule['reg_exp'] . "')";
2203 break;
2204 }
2205
2206 if (isset($rule['inverse'])) $qpart = "NOT ($qpart)";
2207
2208 if (isset($rule["feed_id"]) && $rule["feed_id"] > 0) {
2209 $qpart .= " AND feed_id = " . db_escape_string($rule["feed_id"]);
2210 }
2211
2212 if (isset($rule["cat_id"])) {
2213
2214 if ($rule["cat_id"] > 0) {
2215 $children = Feeds::getChildCategories($rule["cat_id"], $owner_uid);
2216 array_push($children, $rule["cat_id"]);
2217
2218 $children = join(",", $children);
2219
2220 $cat_qpart = "cat_id IN ($children)";
2221 } else {
2222 $cat_qpart = "cat_id IS NULL";
2223 }
2224
2225 $qpart .= " AND $cat_qpart";
2226 }
2227
2228 $qpart .= " AND feed_id IS NOT NULL";
2229
2230 array_push($query, "($qpart)");
2231
2232 }
2233 }
2234
2235 if (count($query) > 0) {
2236 $fullquery = "(" . join($filter["match_any_rule"] ? "OR" : "AND", $query) . ")";
2237 } else {
2238 $fullquery = "(false)";
2239 }
2240
2241 if ($filter['inverse']) $fullquery = "(NOT $fullquery)";
2242
2243 return $fullquery;
2244 }
2245
2246 if (!function_exists('gzdecode')) {
2247 function gzdecode($string) { // no support for 2nd argument
2248 return file_get_contents('compress.zlib://data:who/cares;base64,'.
2249 base64_encode($string));
2250 }
2251 }
2252
2253 function get_random_bytes($length) {
2254 if (function_exists('openssl_random_pseudo_bytes')) {
2255 return openssl_random_pseudo_bytes($length);
2256 } else {
2257 $output = "";
2258
2259 for ($i = 0; $i < $length; $i++)
2260 $output .= chr(mt_rand(0, 255));
2261
2262 return $output;
2263 }
2264 }
2265
2266 function read_stdin() {
2267 $fp = fopen("php://stdin", "r");
2268
2269 if ($fp) {
2270 $line = trim(fgets($fp));
2271 fclose($fp);
2272 return $line;
2273 }
2274
2275 return null;
2276 }
2277
aeb1abed
AD
2278 function implements_interface($class, $interface) {
2279 return in_array($interface, class_implements($class));
2280 }
2281
2282 function get_minified_js($files) {
2283 require_once 'lib/jshrink/Minifier.php';
2284
2285 $rv = '';
2286
2287 foreach ($files as $js) {
2288 if (!isset($_GET['debug'])) {
2289 $cached_file = CACHE_DIR . "/js/".basename($js).".js";
2290
2291 if (file_exists($cached_file) && is_readable($cached_file) && filemtime($cached_file) >= filemtime("js/$js.js")) {
2292
2293 list($header, $contents) = explode("\n", file_get_contents($cached_file), 2);
2294
2295 if ($header && $contents) {
2296 list($htag, $hversion) = explode(":", $header);
2297
2298 if ($htag == "tt-rss" && $hversion == VERSION) {
2299 $rv .= $contents;
2300 continue;
2301 }
2302 }
2303 }
2304
2305 $minified = JShrink\Minifier::minify(file_get_contents("js/$js.js"));
2306 file_put_contents($cached_file, "tt-rss:" . VERSION . "\n" . $minified);
2307 $rv .= $minified;
2308
2309 } else {
2310 $rv .= file_get_contents("js/$js.js"); // no cache in debug mode
2311 }
2312 }
2313
2314 return $rv;
2315 }
2316
2317 function calculate_dep_timestamp() {
2318 $files = array_merge(glob("js/*.js"), glob("css/*.css"));
2319
2320 $max_ts = -1;
2321
2322 foreach ($files as $file) {
2323 if (filemtime($file) > $max_ts) $max_ts = filemtime($file);
2324 }
2325
2326 return $max_ts;
2327 }
2328
2329 function T_js_decl($s1, $s2) {
2330 if ($s1 && $s2) {
2331 $s1 = preg_replace("/\n/", "", $s1);
2332 $s2 = preg_replace("/\n/", "", $s2);
2333
2334 $s1 = preg_replace("/\"/", "\\\"", $s1);
2335 $s2 = preg_replace("/\"/", "\\\"", $s2);
2336
2337 return "T_messages[\"$s1\"] = \"$s2\";\n";
2338 }
2339 }
2340
2341 function init_js_translations() {
2342
2343 print 'var T_messages = new Object();
2344
2345 function __(msg) {
2346 if (T_messages[msg]) {
2347 return T_messages[msg];
2348 } else {
2349 return msg;
2350 }
2351 }
2352
2353 function ngettext(msg1, msg2, n) {
2354 return __((parseInt(n) > 1) ? msg2 : msg1);
2355 }';
2356
2357 $l10n = _get_reader();
2358
2359 for ($i = 0; $i < $l10n->total; $i++) {
2360 $orig = $l10n->get_original_string($i);
2361 if(strpos($orig, "\000") !== FALSE) { // Plural forms
2362 $key = explode(chr(0), $orig);
2363 print T_js_decl($key[0], _ngettext($key[0], $key[1], 1)); // Singular
2364 print T_js_decl($key[1], _ngettext($key[0], $key[1], 2)); // Plural
2365 } else {
2366 $translation = __($orig);
2367 print T_js_decl($orig, $translation);
2368 }
2369 }
2370 }
2371
aeb1abed
AD
2372 function get_theme_path($theme) {
2373 $check = "themes/$theme";
2374 if (file_exists($check)) return $check;
2375
2376 $check = "themes.local/$theme";
2377 if (file_exists($check)) return $check;
2378 }
2379
2380 function theme_valid($theme) {
2381 $bundled_themes = [ "default.php", "night.css", "compact.css" ];
2382
2383 if (in_array($theme, $bundled_themes)) return true;
2384
2385 $file = "themes/" . basename($theme);
2386
2387 if (!file_exists($file)) $file = "themes.local/" . basename($theme);
2388
2389 if (file_exists($file) && is_readable($file)) {
2390 $fh = fopen($file, "r");
2391
2392 if ($fh) {
2393 $header = fgets($fh);
2394 fclose($fh);
2395
2396 return strpos($header, "supports-version:" . VERSION_STATIC) !== FALSE;
2397 }
2398 }
2399
2400 return false;
2401 }
2402
2403 /**
2404 * @SuppressWarnings(unused)
2405 */
2406 function error_json($code) {
2407 require_once "errors.php";
2408
2409 @$message = $ERRORS[$code];
2410
2411 return json_encode(array("error" =>
2412 array("code" => $code, "message" => $message)));
2413
2414 }
2415
904aff76 2416 /*function abs_to_rel_path($dir) {
aeb1abed
AD
2417 $tmp = str_replace(dirname(__DIR__), "", $dir);
2418
2419 if (strlen($tmp) > 0 && substr($tmp, 0, 1) == "/") $tmp = substr($tmp, 1);
2420
2421 return $tmp;
904aff76 2422 }*/
aeb1abed
AD
2423
2424 function get_upload_error_message($code) {
2425
2426 $errors = array(
2427 0 => __('There is no error, the file uploaded with success'),
2428 1 => __('The uploaded file exceeds the upload_max_filesize directive in php.ini'),
2429 2 => __('The uploaded file exceeds the MAX_FILE_SIZE directive that was specified in the HTML form'),
2430 3 => __('The uploaded file was only partially uploaded'),
2431 4 => __('No file was uploaded'),
2432 6 => __('Missing a temporary folder'),
2433 7 => __('Failed to write file to disk.'),
2434 8 => __('A PHP extension stopped the file upload.'),
2435 );
2436
2437 return $errors[$code];
2438 }
2439
2440 function base64_img($filename) {
2441 if (file_exists($filename)) {
2442 $ext = pathinfo($filename, PATHINFO_EXTENSION);
2443
2444 return "data:image/$ext;base64," . base64_encode(file_get_contents($filename));
2445 } else {
2446 return "";
2447 }
2448 }
2449