]> git.wh0rd.org - tt-rss.git/blob - backend.php
main toolbar: add dropbox to select headlines sort mode
[tt-rss.git] / backend.php
1 <?php
2 error_reporting(E_ERROR | E_WARNING | E_PARSE);
3
4 /* remove ill effects of magic quotes */
5
6 if (get_magic_quotes_gpc()) {
7 $_GET = array_map('stripslashes', $_GET);
8 $_POST = array_map('stripslashes', $_POST);
9 $_REQUEST = array_map('stripslashes', $_REQUEST);
10 $_COOKIE = array_map('stripslashes', $_COOKIE);
11 }
12
13 require_once "sessions.php";
14 require_once "modules/backend-rpc.php";
15
16 /* if ($_GET["debug"]) {
17 define('DEFAULT_ERROR_LEVEL', E_ALL);
18 } else {
19 define('DEFAULT_ERROR_LEVEL', E_ERROR | E_WARNING | E_PARSE);
20 }
21
22 error_reporting(DEFAULT_ERROR_LEVEL); */
23
24 require_once "sanity_check.php";
25 require_once "config.php";
26
27 require_once "db.php";
28 require_once "db-prefs.php";
29 require_once "functions.php";
30
31 no_cache_incantation();
32
33 if (ENABLE_TRANSLATIONS == true) {
34 startup_gettext();
35 }
36
37 $script_started = getmicrotime();
38
39 $link = db_connect(DB_HOST, DB_USER, DB_PASS, DB_NAME);
40
41 if (!$link) {
42 if (DB_TYPE == "mysql") {
43 print mysql_error();
44 }
45 // PG seems to display its own errors just fine by default.
46 return;
47 }
48
49 if (DB_TYPE == "pgsql") {
50 pg_query("set client_encoding = 'UTF-8'");
51 pg_set_client_encoding("UNICODE");
52 } else {
53 if (defined('MYSQL_CHARSET') && MYSQL_CHARSET) {
54 db_query($link, "SET NAMES " . MYSQL_CHARSET);
55 // db_query($link, "SET CHARACTER SET " . MYSQL_CHARSET);
56 }
57 }
58
59 $op = $_REQUEST["op"];
60
61 $print_exec_time = false;
62
63 if ((!$op || $op == "rpc" || $op == "rss" || $op == "view" ||
64 $op == "digestSend" || $op == "viewfeed" || $op == "publish" ||
65 $op == "globalUpdateFeeds") && !$_REQUEST["noxml"]) {
66 header("Content-Type: application/xml; charset=utf-8");
67
68 if (ENABLE_GZIP_OUTPUT) {
69 ob_start("ob_gzhandler");
70 }
71
72 } else {
73 if (!$_REQUEST["noxml"]) {
74 header("Content-Type: text/html; charset=utf-8");
75 } else {
76 header("Content-Type: text/plain; charset=utf-8");
77 }
78 }
79
80 if (!$op) {
81 header("Content-Type: application/xml");
82 print_error_xml(7); exit;
83 }
84
85 if (!($_SESSION["uid"] && validate_session($link)) && $op != "globalUpdateFeeds"
86 && $op != "rss" && $op != "getUnread" && $op != "publish") {
87
88 if ($op == "rpc" || $op == "viewfeed" || $op == "view") {
89 print_error_xml(6); die;
90 } else {
91 print "
92 <html><body>
93 <p>Error: Not logged in.</p>
94 <script type=\"text/javascript\">
95 if (parent.window != 'undefined') {
96 parent.window.location = \"tt-rss.php\";
97 } else {
98 window.location = \"tt-rss.php\";
99 }
100 </script>
101 </body></html>
102 ";
103 }
104 exit;
105 }
106
107 $purge_intervals = array(
108 0 => __("Use default"),
109 -1 => __("Never purge"),
110 5 => __("1 week old"),
111 14 => __("2 weeks old"),
112 31 => __("1 month old"),
113 60 => __("2 months old"),
114 90 => __("3 months old"));
115
116 $update_intervals = array(
117 0 => __("Default interval"),
118 -1 => __("Disable updates"),
119 15 => __("Each 15 minutes"),
120 30 => __("Each 30 minutes"),
121 60 => __("Hourly"),
122 240 => __("Each 4 hours"),
123 720 => __("Each 12 hours"),
124 1440 => __("Daily"),
125 10080 => __("Weekly"));
126
127 $update_methods = array(
128 0 => __("Default"),
129 1 => __("Magpie"),
130 2 => __("SimplePie"));
131
132 if (ENABLE_SIMPLEPIE) {
133 $update_methods[0] .= ' (SimplePie)';
134 } else {
135 $update_methods[0] .= ' (Magpie)';
136 }
137
138 $access_level_names = array(
139 0 => __("User"),
140 5 => __("Power User"),
141 10 => __("Administrator"));
142
143 require_once "modules/pref-prefs.php";
144 require_once "modules/popup-dialog.php";
145 require_once "modules/help.php";
146 require_once "modules/pref-feeds.php";
147 require_once "modules/pref-filters.php";
148 require_once "modules/pref-labels.php";
149 require_once "modules/pref-users.php";
150 require_once "modules/pref-feed-browser.php";
151
152 if (!sanity_check($link)) { return; }
153
154 switch($op) { // Select action according to $op value.
155 case "rpc":
156 // Handle remote procedure calls.
157 handle_rpc_request($link);
158 break; // rpc
159
160 case "feeds":
161 if (ENABLE_GZIP_OUTPUT) {
162 ob_start("ob_gzhandler");
163 }
164
165 $tags = $_GET["tags"];
166
167 $subop = $_GET["subop"];
168
169 switch($subop) {
170 case "catchupAll":
171 db_query($link, "UPDATE ttrss_user_entries SET
172 last_read = NOW(),unread = false WHERE owner_uid = " . $_SESSION["uid"]);
173 break;
174
175 case "collapse":
176 $cat_id = db_escape_string($_GET["cid"]);
177
178 db_query($link, "UPDATE ttrss_feed_categories SET
179 collapsed = NOT collapsed WHERE id = '$cat_id' AND owner_uid = " .
180 $_SESSION["uid"]);
181 return;
182 break;
183
184 case "catsortreset":
185 db_query($link, "UPDATE ttrss_feed_categories
186 SET order_id = 0 WHERE owner_uid = " . $_SESSION["uid"]);
187 return;
188 break;
189
190 case "catsort":
191 $corder = db_escape_string($_GET["corder"]);
192
193 $cats = split(",", $corder);
194
195 for ($i = 0; $i < count($cats); $i++) {
196 $cat_id = $cats[$i];
197
198 if ($cat_id > 0) {
199 db_query($link, "UPDATE ttrss_feed_categories
200 SET order_id = '$i' WHERE id = '$cat_id' AND
201 owner_uid = " . $_SESSION["uid"]);
202 }
203 }
204
205 return;
206 break;
207
208 }
209
210 outputFeedList($link, $tags);
211 break; // feeds
212
213 case "view":
214
215 $id = db_escape_string($_GET["id"]);
216 $feed_id = db_escape_string($_GET["feed"]);
217 $cids = split(",", db_escape_string($_GET["cids"]));
218 $mode = db_escape_string($_GET["mode"]);
219 $omode = db_escape_string($_GET["omode"]);
220
221 $csync = $_GET["csync"];
222
223 print "<reply>";
224
225 // in prefetch mode we only output requested cids, main article
226 // just gets marked as read (it already exists in client cache)
227
228 if ($mode == "") {
229 outputArticleXML($link, $id, $feed_id);
230 } else if ($mode == "zoom") {
231 outputArticleXML($link, $id, $feed_id, true, true);
232 } else {
233 catchupArticleById($link, $id, 0);
234 }
235
236 if (!$_SESSION["bw_limit"]) {
237 foreach ($cids as $cid) {
238 if ($cid) {
239 outputArticleXML($link, $cid, $feed_id, false);
240 }
241 }
242 }
243
244
245 if (get_pref($link, "SYNC_COUNTERS") || ($mode == "prefetch" && $csync)) {
246 print "<counters>";
247 getAllCounters($link, $omode);
248 print "</counters>";
249 }
250
251 print "</reply>";
252 break; // view
253
254 case "viewfeed":
255
256 $print_exec_time = true;
257 $timing_info = getmicrotime();
258
259 print "<reply>";
260
261 if ($_GET["debug"]) $timing_info = print_checkpoint("0", $timing_info);
262
263 $omode = db_escape_string($_GET["omode"]);
264
265 $feed = db_escape_string($_GET["feed"]);
266 $subop = db_escape_string($_GET["subop"]);
267 $view_mode = db_escape_string($_GET["view_mode"]);
268 $limit = db_escape_string($_GET["limit"]);
269 $cat_view = db_escape_string($_GET["cat"]);
270 $next_unread_feed = db_escape_string($_GET["nuf"]);
271 $offset = db_escape_string($_GET["skip"]);
272 $vgroup_last_feed = db_escape_string($_GET["vgrlf"]);
273 $csync = $_GET["csync"];
274 $order_by = db_escape_string($_GET["order_by"]);
275
276 set_pref($link, "_DEFAULT_VIEW_MODE", $view_mode);
277 set_pref($link, "_DEFAULT_VIEW_LIMIT", $limit);
278 set_pref($link, "_DEFAULT_VIEW_ORDER_BY", $order_by);
279
280 if (!$cat_view && preg_match("/^[0-9][0-9]*$/", $feed)) {
281 db_query($link, "UPDATE ttrss_feeds SET last_viewed = NOW()
282 WHERE id = '$feed' AND owner_uid = ".$_SESSION["uid"]);
283 }
284
285 print "<headlines id=\"$feed\"><![CDATA[";
286
287 if ($feed == -4) {
288
289 generate_dashboard_feed($link);
290
291 } else {
292
293 $override_order = false;
294
295 switch ($order_by) {
296 case "date":
297 if (get_pref($link, 'REVERSE_HEADLINES', $owner_uid)) {
298 $override_order = "updated";
299 } else {
300 $override_order = "updated DESC";
301 }
302 break;
303
304 case "title":
305 $override_order = "updated DESC";
306 break;
307
308 case "score":
309 $override_order = "score DESC";
310 break;
311 }
312
313 $ret = outputHeadlinesList($link, $feed, $subop,
314 $view_mode, $limit, $cat_view, $next_unread_feed, $offset,
315 $vgroup_last_feed, $override_order);
316
317 $topmost_article_ids = $ret[0];
318 $headlines_count = $ret[1];
319 $returned_feed = $ret[2];
320 $disable_cache = $ret[3];
321 $vgroup_last_feed = $ret[4];
322
323 print "]]></headlines>";
324
325 print "<headlines-count value=\"$headlines_count\"/>";
326 print "<vgroup-last-feed value=\"$vgroup_last_feed\"/>";
327
328 $headlines_unread = getFeedUnread($link, $returned_feed);
329
330 print "<headlines-unread value=\"$headlines_unread\"/>";
331 printf("<disable-cache value=\"%d\"/>", $disable_cache);
332
333 if ($_GET["debug"]) $timing_info = print_checkpoint("10", $timing_info);
334
335 if (is_array($topmost_article_ids) && !get_pref($link, 'COMBINED_DISPLAY_MODE') && !$_SESSION["bw_limit"]) {
336 print "<articles>";
337 foreach ($topmost_article_ids as $id) {
338 outputArticleXML($link, $id, $feed, false);
339 }
340 print "</articles>";
341 }
342 }
343
344 if ($_GET["debug"]) $timing_info = print_checkpoint("20", $timing_info);
345
346 $viewfeed_ctr_interval = 300;
347
348 if ($csync || $_SESSION["bw_limit"]) {
349 $viewfeed_ctr_interval = 60;
350 }
351
352 if (get_pref($link, "SYNC_COUNTERS") ||
353 time() - $_SESSION["get_all_counters_stamp"] > $viewfeed_ctr_interval) {
354 print "<counters>";
355 getAllCounters($link, $omode, $feed);
356 print "</counters>";
357 }
358
359 if ($_GET["debug"]) $timing_info = print_checkpoint("30", $timing_info);
360
361 print_runtime_info($link);
362
363 print "</reply>";
364 break; // viewfeed
365
366 case "pref-feeds":
367 module_pref_feeds($link);
368 break; // pref-feeds
369
370 case "pref-filters":
371 module_pref_filters($link);
372 break; // pref-filters
373
374 case "pref-labels":
375 module_pref_labels($link);
376 break; // pref-labels
377
378 case "pref-prefs":
379 module_pref_prefs($link);
380 break; // pref-prefs
381
382 case "pref-users":
383 module_pref_users($link);
384 break; // prefs-users
385
386 case "help":
387 module_help($link);
388 break; // help
389
390 case "dlg":
391 module_popup_dialog($link);
392 break; // dlg
393
394 case "pref-pub-items":
395 module_pref_pub_items($link);
396 break; // pref-pub-items
397
398 case "globalUpdateFeeds":
399 // update feeds of all users, may be used anonymously
400
401 print "<!--";
402 // Update all feeds needing a update.
403 update_daemon_common($link, 0, true, true);
404 print " -->";
405
406 // FIXME : old feed update way. To be removed.
407 //$result = db_query($link, "SELECT id FROM ttrss_users");
408
409 //while ($line = db_fetch_assoc($result)) {
410 // $user_id = $line["id"];
411 // print "<!-- updating feeds of uid $user_id -->";
412 // update_all_feeds($link, false, $user_id);
413 //}
414
415 print "<rpc-reply>
416 <message msg=\"All feeds updated\"/>
417 </rpc-reply>";
418 break; // globalUpdateFeeds
419
420 case "user-details":
421
422 if (WEB_DEMO_MODE || $_SESSION["access_level"] < 10) {
423 return;
424 }
425
426 /*
427 print "<html><head>
428 <title>Tiny Tiny RSS : User Details</title>
429 <link rel=\"stylesheet\" href=\"tt-rss.css\" type=\"text/css\">
430 <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\">
431 </head><body>";
432 */
433
434 $uid = sprintf("%d", $_GET["id"]);
435
436 print "<div id=\"infoBoxTitle\">User details</div>";
437
438 print "<div class='infoBoxContents'>";
439
440 $result = db_query($link, "SELECT login,
441 ".SUBSTRING_FOR_DATE."(last_login,1,16) AS last_login,
442 access_level,
443 (SELECT COUNT(int_id) FROM ttrss_user_entries
444 WHERE owner_uid = id) AS stored_articles,
445 ".SUBSTRING_FOR_DATE."(created,1,16) AS created
446 FROM ttrss_users
447 WHERE id = '$uid'");
448
449 if (db_num_rows($result) == 0) {
450 print "<h1>User not found</h1>";
451 return;
452 }
453
454 // print "<h1>User Details</h1>";
455
456 $login = db_fetch_result($result, 0, "login");
457
458 // print "<h1>$login</h1>";
459
460 print "<table width='100%'>";
461
462 $last_login = date(get_pref($link, 'LONG_DATE_FORMAT'),
463 strtotime(db_fetch_result($result, 0, "last_login")));
464
465 $created = date(get_pref($link, 'LONG_DATE_FORMAT'),
466 strtotime(db_fetch_result($result, 0, "created")));
467
468 $access_level = db_fetch_result($result, 0, "access_level");
469 $stored_articles = db_fetch_result($result, 0, "stored_articles");
470
471 // print "<tr><td>Username</td><td>$login</td></tr>";
472 // print "<tr><td>Access level</td><td>$access_level</td></tr>";
473 print "<tr><td>".__('Registered')."</td><td>$created</td></tr>";
474 print "<tr><td>".__('Last logged in')."</td><td>$last_login</td></tr>";
475 print "<tr><td>".__('Stored articles')."</td><td>$stored_articles</td></tr>";
476
477 $result = db_query($link, "SELECT COUNT(id) as num_feeds FROM ttrss_feeds
478 WHERE owner_uid = '$uid'");
479
480 $num_feeds = db_fetch_result($result, 0, "num_feeds");
481
482 print "<tr><td>".__('Subscribed feeds count')."</td><td>$num_feeds</td></tr>";
483
484 /*
485 $result = db_query($link, "SELECT
486 SUM(LENGTH(content)+LENGTH(title)+LENGTH(link)+LENGTH(guid)) AS db_size
487 FROM ttrss_user_entries,ttrss_entries
488 WHERE owner_uid = '$uid' AND ref_id = id");
489
490 $db_size = round(db_fetch_result($result, 0, "db_size") / 1024);
491
492 print "<tr><td>Approx. used DB size</td><td>$db_size KBytes</td></tr>";
493 */
494
495 print "</table>";
496
497 print "<h1>".__('Subscribed feeds')."</h1>";
498
499 $result = db_query($link, "SELECT id,title,site_url FROM ttrss_feeds
500 WHERE owner_uid = '$uid' ORDER BY title");
501
502 print "<ul class=\"userFeedList\">";
503
504 $row_class = "odd";
505
506 while ($line = db_fetch_assoc($result)) {
507
508 $icon_file = ICONS_URL."/".$line["id"].".ico";
509
510 if (file_exists($icon_file) && filesize($icon_file) > 0) {
511 $feed_icon = "<img class=\"tinyFeedIcon\" src=\"$icon_file\">";
512 } else {
513 $feed_icon = "<img class=\"tinyFeedIcon\" src=\"images/blank_icon.gif\">";
514 }
515
516 print "<li class=\"$row_class\">$feed_icon&nbsp;<a href=\"".$line["site_url"]."\">".$line["title"]."</a></li>";
517
518 $row_class = toggleEvenOdd($row_class);
519
520 }
521
522 if (db_num_rows($result) < $num_feeds) {
523 // FIXME - add link to show ALL subscribed feeds here somewhere
524 print "<li><img
525 class=\"tinyFeedIcon\" src=\"images/blank_icon.gif\">&nbsp;...</li>";
526 }
527
528 print "</ul>";
529
530 print "</div>";
531
532 print "<div align='center'>
533 <input type='submit' class='button'
534 onclick=\"closeInfoBox()\" value=\"Close this window\"></div>";
535
536 // print "</body></html>";
537
538 break; // user-details
539
540 case "pref-feed-browser":
541 module_pref_feed_browser($link);
542 break; // pref-feed-browser
543
544 case "publish":
545 $key = db_escape_string($_GET["key"]);
546
547 $result = db_query($link, "SELECT login, owner_uid
548 FROM ttrss_user_prefs, ttrss_users WHERE
549 pref_name = '_PREFS_PUBLISH_KEY' AND
550 value = '$key' AND
551 ttrss_users.id = owner_uid");
552
553 if (db_num_rows($result) == 1) {
554 $owner = db_fetch_result($result, 0, "owner_uid");
555 $login = db_fetch_result($result, 0, "login");
556
557 generate_syndicated_feed($link, $owner, -2, false);
558
559 } else {
560 print "<error>User not found</error>";
561 }
562 break; // publish
563
564 case "rss":
565 $feed = db_escape_string($_GET["id"]);
566 $user = db_escape_string($_GET["user"]);
567 $pass = db_escape_string($_GET["pass"]);
568 $is_cat = $_GET["is_cat"] != false;
569
570 $search = db_escape_string($_GET["q"]);
571 $match_on = db_escape_string($_GET["m"]);
572 $search_mode = db_escape_string($_GET["smode"]);
573
574 if (!$_SESSION["uid"] && $user && $pass) {
575 authenticate_user($link, $user, $pass);
576 }
577
578 if ($_SESSION["uid"] ||
579 http_authenticate_user($link)) {
580
581 generate_syndicated_feed($link, 0, $feed, $is_cat,
582 $search, $search_mode, $match_on);
583 }
584 break; // rss
585
586 case "labelFromSearch":
587 $search = db_escape_string($_GET["search"]);
588 $search_mode = db_escape_string($_GET["smode"]);
589 $match_on = db_escape_string($_GET["match"]);
590 $is_cat = db_escape_string($_GET["is_cat"]);
591 $title = db_escape_string($_GET["title"]);
592 $feed = sprintf("%d", $_GET["feed"]);
593
594 $label_qparts = array();
595
596 $search_expr = getSearchSql($search, $match_on);
597
598 if ($is_cat) {
599 if ($feed != 0) {
600 $search_expr .= " AND ttrss_feeds.cat_id = $feed ";
601 } else {
602 $search_expr .= " AND ttrss_feeds.cat_id IS NULL ";
603 }
604 } else {
605 if ($search_mode == "all_feeds") {
606 // NOOP
607 } else if ($search_mode == "this_cat") {
608
609 $tmp_result = db_query($link, "SELECT cat_id
610 FROM ttrss_feeds WHERE id = '$feed'");
611
612 $cat_id = db_fetch_result($tmp_result, 0, "cat_id");
613
614 if ($cat_id > 0) {
615 $search_expr .= " AND ttrss_feeds.cat_id = $cat_id ";
616 } else {
617 $search_expr .= " AND ttrss_feeds.cat_id IS NULL ";
618 }
619 } else {
620 $search_expr .= " AND ttrss_feeds.id = $feed ";
621 }
622
623 }
624
625 $search_expr = db_escape_string($search_expr);
626
627 print $search_expr;
628
629 if ($title) {
630 $result = db_query($link,
631 "INSERT INTO ttrss_labels (sql_exp,description,owner_uid)
632 VALUES ('$search_expr', '$title', '".$_SESSION["uid"]."')");
633 }
634 break; // labelFromSearch
635
636 case "getUnread":
637 $login = db_escape_string($_GET["login"]);
638
639 header("Content-Type: text/plain; charset=utf-8");
640
641 $result = db_query($link, "SELECT id FROM ttrss_users WHERE login = '$login'");
642
643 if (db_num_rows($result) == 1) {
644 $uid = db_fetch_result($result, 0, "id");
645 print getGlobalUnread($link, $uid);
646 } else {
647 print "-1;User not found";
648 }
649
650 $print_exec_time = false;
651 break; // getUnread
652
653 case "digestTest":
654 header("Content-Type: text/plain");
655 print_r(prepare_headlines_digest($link, $_SESSION["uid"]));
656 $print_exec_time = false;
657 break; // digestTest
658
659 case "digestSend":
660 header("Content-Type: text/plain");
661 send_headlines_digests($link);
662 $print_exec_time = false;
663 break; // digestSend
664
665 } // Select action according to $op value.
666
667 // We close the connection to database.
668 db_close($link);
669 ?>
670
671 <?php if ($print_exec_time) { ?>
672 <!-- <?php echo sprintf("Backend execution time: %.4f seconds", getmicrotime() - $script_started) ?> -->
673 <?php } ?>