include/functions.php

   1 <?php
   2         define('EXPECTED_CONFIG_VERSION', 26);
   3         define('SCHEMA_VERSION', 102);
   4
   5         $fetch_last_error = false;
   6         $pluginhost = false;
   7
   8         function __autoload($class) {
   9                 $class_file = str_replace("_", "/", strtolower(basename($class)));
  10
  11                 $file = dirname(__FILE__)."/../classes/$class_file.php";
  12
  13                 if (file_exists($file)) {
  14                         require $file;
  15                 }
  16
  17         }
  18
  19         mb_internal_encoding("UTF-8");
  20         date_default_timezone_set('UTC');
  21         if (defined('E_DEPRECATED')) {
  22                 error_reporting(E_ALL & ~E_NOTICE & ~E_DEPRECATED);
  23         } else {
  24                 error_reporting(E_ALL & ~E_NOTICE);
  25         }
  26
  27         require_once 'config.php';
  28
  29         if (DB_TYPE == "pgsql") {
  30                 define('SUBSTRING_FOR_DATE', 'SUBSTRING_FOR_DATE');
  31         } else {
  32                 define('SUBSTRING_FOR_DATE', 'SUBSTRING');
  33         }
  34
  35         define('THEME_VERSION_REQUIRED', 1.1);
  36
  37         /**
  38          * Return available translations names.
  39          *
  40          * @access public
  41          * @return array A array of available translations.
  42          */
  43         function get_translations() {
  44                 $tr = array(
  45                                         "auto"  => "Detect automatically",
  46                                         "ca_CA" => "Català",
  47                                         "en_US" => "English",
  48                                         "es_ES" => "Español",
  49                                         "de_DE" => "Deutsch",
  50                                         "fr_FR" => "Français",
  51                                         "hu_HU" => "Magyar (Hungarian)",
  52                                         "it_IT" => "Italiano",
  53                                         "ja_JP" => "日本語 (Japanese)",
  54                                         "nb_NO" => "Norwegian bokmål",
  55                                         "pl_PL" => "Polski",
  56                                         "ru_RU" => "Русский",
  57                                         "pt_BR" => "Portuguese/Brazil",
  58                                         "zh_CN" => "Simplified Chinese");
  59
  60                 return $tr;
  61         }
  62
  63         require_once "lib/accept-to-gettext.php";
  64         require_once "lib/gettext/gettext.inc";
  65
  66
  67         function startup_gettext() {
  68
  69                 # Get locale from Accept-Language header
  70                 $lang = al2gt(array_keys(get_translations()), "text/html");
  71
  72                 if (defined('_TRANSLATION_OVERRIDE_DEFAULT')) {
  73                         $lang = _TRANSLATION_OVERRIDE_DEFAULT;
  74                 }
  75
  76                 /* In login action of mobile version */
  77                 if ($_POST["language"] && defined('MOBILE_VERSION')) {
  78                         $lang = $_POST["language"];
  79                 } else if ($_SESSION["language"] && $_SESSION["language"] != "auto") {
  80                         $lang = $_SESSION["language"];
  81                 }
  82
  83                 if ($lang) {
  84                         if (defined('LC_MESSAGES')) {
  85                                 _setlocale(LC_MESSAGES, $lang);
  86                         } else if (defined('LC_ALL')) {
  87                                 _setlocale(LC_ALL, $lang);
  88                         }
  89
  90                         if (defined('MOBILE_VERSION')) {
  91                                 _bindtextdomain("messages", "../locale");
  92                         } else {
  93                                 _bindtextdomain("messages", "locale");
  94                         }
  95
  96                         _textdomain("messages");
  97                         _bind_textdomain_codeset("messages", "UTF-8");
  98                 }
  99         }
 100
 101         startup_gettext();
 102
 103         require_once 'db-prefs.php';
 104         require_once 'version.php';
 105         require_once 'ccache.php';
 106         require_once 'labels.php';
 107
 108         ini_set('user_agent', SELF_USER_AGENT);
 109
 110         require_once 'lib/pubsubhubbub/publisher.php';
 111         require_once 'lib/htmLawed.php';
 112
 113         $tz_offset = -1;
 114         $utc_tz = new DateTimeZone('UTC');
 115         $schema_version = false;
 116
 117         /**
 118          * Print a timestamped debug message.
 119          *
 120          * @param string $msg The debug message.
 121          * @return void
 122          */
 123         function _debug($msg) {
 124                 if (defined('QUIET') && QUIET) {
 125                         return;
 126                 }
 127                 $ts = strftime("%H:%M:%S", time());
 128                 if (function_exists('posix_getpid')) {
 129                         $ts = "$ts/" . posix_getpid();
 130                 }
 131                 print "[$ts] $msg\n";
 132         } // function _debug
 133
 134         /**
 135          * Purge a feed old posts.
 136          *
 137          * @param mixed $link A database connection.
 138          * @param mixed $feed_id The id of the purged feed.
 139          * @param mixed $purge_interval Olderness of purged posts.
 140          * @param boolean $debug Set to True to enable the debug. False by default.
 141          * @access public
 142          * @return void
 143          */
 144         function purge_feed($link, $feed_id, $purge_interval, $debug = false) {
 145
 146                 if (!$purge_interval) $purge_interval = feed_purge_interval($link, $feed_id);
 147
 148                 $rows = -1;
 149
 150                 $result = db_query($link,
 151                         "SELECT owner_uid FROM ttrss_feeds WHERE id = '$feed_id'");
 152
 153                 $owner_uid = false;
 154
 155                 if (db_num_rows($result) == 1) {
 156                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 157                 }
 158
 159                 if ($purge_interval == -1 || !$purge_interval) {
 160                         if ($owner_uid) {
 161                                 ccache_update($link, $feed_id, $owner_uid);
 162                         }
 163                         return;
 164                 }
 165
 166                 if (!$owner_uid) return;
 167
 168                 if (FORCE_ARTICLE_PURGE == 0) {
 169                         $purge_unread = get_pref($link, "PURGE_UNREAD_ARTICLES",
 170                                 $owner_uid, false);
 171                 } else {
 172                         $purge_unread = true;
 173                         $purge_interval = FORCE_ARTICLE_PURGE;
 174                 }
 175
 176                 if (!$purge_unread) $query_limit = " unread = false AND ";
 177
 178                 if (DB_TYPE == "pgsql") {
 179                         $pg_version = get_pgsql_version($link);
 180
 181                         if (preg_match("/^7\./", $pg_version) || preg_match("/^8\.0/", $pg_version)) {
 182
 183                                 $result = db_query($link, "DELETE FROM ttrss_user_entries WHERE
 184                                         ttrss_entries.id = ref_id AND
 185                                         marked = false AND
 186                                         feed_id = '$feed_id' AND
 187                                         $query_limit
 188                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 189
 190                         } else {
 191
 192                                 $result = db_query($link, "DELETE FROM ttrss_user_entries
 193                                         USING ttrss_entries
 194                                         WHERE ttrss_entries.id = ref_id AND
 195                                         marked = false AND
 196                                         feed_id = '$feed_id' AND
 197                                         $query_limit
 198                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 199                         }
 200
 201                         $rows = pg_affected_rows($result);
 202
 203                 } else {
 204
 205 /*                      $result = db_query($link, "DELETE FROM ttrss_user_entries WHERE
 206                                 marked = false AND feed_id = '$feed_id' AND
 207                                 (SELECT date_updated FROM ttrss_entries WHERE
 208                                         id = ref_id) < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)"); */
 209
 210                         $result = db_query($link, "DELETE FROM ttrss_user_entries
 211                                 USING ttrss_user_entries, ttrss_entries
 212                                 WHERE ttrss_entries.id = ref_id AND
 213                                 marked = false AND
 214                                 feed_id = '$feed_id' AND
 215                                 $query_limit
 216                                 ttrss_entries.date_updated < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)");
 217
 218                         $rows = mysql_affected_rows($link);
 219
 220                 }
 221
 222                 ccache_update($link, $feed_id, $owner_uid);
 223
 224                 if ($debug) {
 225                         _debug("Purged feed $feed_id ($purge_interval): deleted $rows articles");
 226                 }
 227         } // function purge_feed
 228
 229         function feed_purge_interval($link, $feed_id) {
 230
 231                 $result = db_query($link, "SELECT purge_interval, owner_uid FROM ttrss_feeds
 232                         WHERE id = '$feed_id'");
 233
 234                 if (db_num_rows($result) == 1) {
 235                         $purge_interval = db_fetch_result($result, 0, "purge_interval");
 236                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 237
 238                         if ($purge_interval == 0) $purge_interval = get_pref($link,
 239                                 'PURGE_OLD_DAYS', $owner_uid);
 240
 241                         return $purge_interval;
 242
 243                 } else {
 244                         return -1;
 245                 }
 246         }
 247
 248         function purge_orphans($link, $do_output = false) {
 249
 250                 // purge orphaned posts in main content table
 251                 $result = db_query($link, "DELETE FROM ttrss_entries WHERE
 252                         (SELECT COUNT(int_id) FROM ttrss_user_entries WHERE ref_id = id) = 0");
 253
 254                 if ($do_output) {
 255                         $rows = db_affected_rows($link, $result);
 256                         _debug("Purged $rows orphaned posts.");
 257                 }
 258         }
 259
 260         function get_feed_update_interval($link, $feed_id) {
 261                 $result = db_query($link, "SELECT owner_uid, update_interval FROM
 262                         ttrss_feeds WHERE id = '$feed_id'");
 263
 264                 if (db_num_rows($result) == 1) {
 265                         $update_interval = db_fetch_result($result, 0, "update_interval");
 266                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 267
 268                         if ($update_interval != 0) {
 269                                 return $update_interval;
 270                         } else {
 271                                 return get_pref($link, 'DEFAULT_UPDATE_INTERVAL', $owner_uid, false);
 272                         }
 273
 274                 } else {
 275                         return -1;
 276                 }
 277         }
 278
 279         function fetch_file_contents($url, $type = false, $login = false, $pass = false, $post_query = false) {
 280                 $login = urlencode($login);
 281                 $pass = urlencode($pass);
 282
 283                 global $fetch_last_error;
 284
 285                 if (function_exists('curl_init') && !ini_get("open_basedir")) {
 286                         $ch = curl_init($url);
 287
 288                         curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 15);
 289                         curl_setopt($ch, CURLOPT_TIMEOUT, 45);
 290                         curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
 291                         curl_setopt($ch, CURLOPT_MAXREDIRS, 20);
 292                         curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
 293                         curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
 294                         curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
 295                         curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_ANY);
 296                         curl_setopt($ch, CURLOPT_USERAGENT, SELF_USER_AGENT);
 297                         curl_setopt($ch, CURLOPT_ENCODING , "gzip");
 298
 299                         if ($post_query) {
 300                                 curl_setopt($ch, CURLOPT_POST, true);
 301                                 curl_setopt($ch, CURLOPT_POSTFIELDS, $post_query);
 302                         }
 303
 304                         if ($login && $pass)
 305                                 curl_setopt($ch, CURLOPT_USERPWD, "$login:$pass");
 306
 307                         $contents = @curl_exec($ch);
 308
 309                         if ($contents === false) {
 310                                 $fetch_last_error = curl_error($ch);
 311                                 curl_close($ch);
 312                                 return false;
 313                         }
 314
 315                         $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
 316                         $content_type = curl_getinfo($ch, CURLINFO_CONTENT_TYPE);
 317                         curl_close($ch);
 318
 319                         if ($http_code != 200 || $type && strpos($content_type, "$type") === false) {
 320                                 return false;
 321                         }
 322
 323                         return $contents;
 324                 } else {
 325                         if ($login && $pass ){
 326                                 $url_parts = array();
 327
 328                                 preg_match("/(^[^:]*):\/\/(.*)/", $url, $url_parts);
 329
 330                                 if ($url_parts[1] && $url_parts[2]) {
 331                                         $url = $url_parts[1] . "://$login:$pass@" . $url_parts[2];
 332                                 }
 333                         }
 334
 335                         $data = @file_get_contents($url);
 336
 337                         if (!$data && function_exists('error_get_last')) {
 338                                 $error = error_get_last();
 339                                 $fetch_last_error = $error["message"];
 340                         }
 341                         return $data;
 342                 }
 343
 344         }
 345
 346         /**
 347          * Try to determine the favicon URL for a feed.
 348          * adapted from wordpress favicon plugin by Jeff Minard (http://thecodepro.com/)
 349          * http://dev.wp-plugins.org/file/favatars/trunk/favatars.php
 350          *
 351          * @param string $url A feed or page URL
 352          * @access public
 353          * @return mixed The favicon URL, or false if none was found.
 354          */
 355         function get_favicon_url($url) {
 356
 357                 $favicon_url = false;
 358
 359                 if ($html = @fetch_file_contents($url)) {
 360
 361                         libxml_use_internal_errors(true);
 362
 363                         $doc = new DOMDocument();
 364                         $doc->loadHTML($html);
 365                         $xpath = new DOMXPath($doc);
 366
 367                         $base = $xpath->query('/html/head/base');
 368                         foreach ($base as $b) {
 369                                 $url = $b->getAttribute("href");
 370                                 break;
 371                         }
 372
 373                         $entries = $xpath->query('/html/head/link[@rel="shortcut icon" or @rel="icon"]');
 374                         if (count($entries) > 0) {
 375                                 foreach ($entries as $entry) {
 376                                         $favicon_url = rewrite_relative_url($url, $entry->getAttribute("href"));
 377                                         break;
 378                                 }
 379                         }
 380                 }
 381
 382                 if (!$favicon_url)
 383                         $favicon_url = rewrite_relative_url($url, "/favicon.ico");
 384
 385                 return $favicon_url;
 386         } // function get_favicon_url
 387
 388         function check_feed_favicon($site_url, $feed, $link) {
 389 #               print "FAVICON [$site_url]: $favicon_url\n";
 390
 391                 $icon_file = ICONS_DIR . "/$feed.ico";
 392
 393                 if (!file_exists($icon_file)) {
 394                         $favicon_url = get_favicon_url($site_url);
 395
 396                         if ($favicon_url) {
 397                                 // Limiting to "image" type misses those served with text/plain
 398                                 $contents = fetch_file_contents($favicon_url); // , "image");
 399
 400                                 if ($contents) {
 401                                         // Crude image type matching.
 402                                         // Patterns gleaned from the file(1) source code.
 403                                         if (preg_match('/^\x00\x00\x01\x00/', $contents)) {
 404                                                 // 0       string  \000\000\001\000        MS Windows icon resource
 405                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa MS Windows icon resource");
 406                                         }
 407                                         elseif (preg_match('/^GIF8/', $contents)) {
 408                                                 // 0       string          GIF8            GIF image data
 409                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa GIF image");
 410                                         }
 411                                         elseif (preg_match('/^\x89PNG\x0d\x0a\x1a\x0a/', $contents)) {
 412                                                 // 0       string          \x89PNG\x0d\x0a\x1a\x0a         PNG image data
 413                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa PNG image");
 414                                         }
 415                                         elseif (preg_match('/^\xff\xd8/', $contents)) {
 416                                                 // 0       beshort         0xffd8          JPEG image data
 417                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa JPG image");
 418                                         }
 419                                         else {
 420                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa UNKNOWN type");
 421                                                 $contents = "";
 422                                         }
 423                                 }
 424
 425                                 if ($contents) {
 426                                         $fp = @fopen($icon_file, "w");
 427
 428                                         if ($fp) {
 429                                                 fwrite($fp, $contents);
 430                                                 fclose($fp);
 431                                                 chmod($icon_file, 0644);
 432                                         }
 433                                 }
 434                         }
 435                 }
 436         }
 437
 438         function print_select($id, $default, $values, $attributes = "") {
 439                 print "<select name=\"$id\" id=\"$id\" $attributes>";
 440                 foreach ($values as $v) {
 441                         if ($v == $default)
 442                                 $sel = "selected=\"1\"";
 443                          else
 444                                 $sel = "";
 445
 446                         print "<option value=\"$v\" $sel>$v</option>";
 447                 }
 448                 print "</select>";
 449         }
 450
 451         function print_select_hash($id, $default, $values, $attributes = "") {
 452                 print "<select name=\"$id\" id='$id' $attributes>";
 453                 foreach (array_keys($values) as $v) {
 454                         if ($v == $default)
 455                                 $sel = 'selected="selected"';
 456                          else
 457                                 $sel = "";
 458
 459                         print "<option $sel value=\"$v\">".$values[$v]."</option>";
 460                 }
 461
 462                 print "</select>";
 463         }
 464
 465         function getmicrotime() {
 466                 list($usec, $sec) = explode(" ",microtime());
 467                 return ((float)$usec + (float)$sec);
 468         }
 469
 470         function print_radio($id, $default, $true_is, $values, $attributes = "") {
 471                 foreach ($values as $v) {
 472
 473                         if ($v == $default)
 474                                 $sel = "checked";
 475                          else
 476                                 $sel = "";
 477
 478                         if ($v == $true_is) {
 479                                 $sel .= " value=\"1\"";
 480                         } else {
 481                                 $sel .= " value=\"0\"";
 482                         }
 483
 484                         print "<input class=\"noborder\" dojoType=\"dijit.form.RadioButton\"
 485                                 type=\"radio\" $sel $attributes name=\"$id\">&nbsp;$v&nbsp;";
 486
 487                 }
 488         }
 489
 490         function initialize_user_prefs($link, $uid, $profile = false) {
 491
 492                 $uid = db_escape_string($uid);
 493
 494                 if (!$profile) {
 495                         $profile = "NULL";
 496                         $profile_qpart = "AND profile IS NULL";
 497                 } else {
 498                         $profile_qpart = "AND profile = '$profile'";
 499                 }
 500
 501                 if (get_schema_version($link) < 63) $profile_qpart = "";
 502
 503                 db_query($link, "BEGIN");
 504
 505                 $result = db_query($link, "SELECT pref_name,def_value FROM ttrss_prefs");
 506
 507                 $u_result = db_query($link, "SELECT pref_name
 508                         FROM ttrss_user_prefs WHERE owner_uid = '$uid' $profile_qpart");
 509
 510                 $active_prefs = array();
 511
 512                 while ($line = db_fetch_assoc($u_result)) {
 513                         array_push($active_prefs, $line["pref_name"]);
 514                 }
 515
 516                 while ($line = db_fetch_assoc($result)) {
 517                         if (array_search($line["pref_name"], $active_prefs) === FALSE) {
 518 //                              print "adding " . $line["pref_name"] . "<br>";
 519
 520                                 if (get_schema_version($link) < 63) {
 521                                         db_query($link, "INSERT INTO ttrss_user_prefs
 522                                                 (owner_uid,pref_name,value) VALUES
 523                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."')");
 524
 525                                 } else {
 526                                         db_query($link, "INSERT INTO ttrss_user_prefs
 527                                                 (owner_uid,pref_name,value, profile) VALUES
 528                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."', $profile)");
 529                                 }
 530
 531                         }
 532                 }
 533
 534                 db_query($link, "COMMIT");
 535
 536         }
 537
 538         function get_ssl_certificate_id() {
 539                 if ($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"]) {
 540                         return sha1($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"] .
 541                                 $_SERVER["REDIRECT_SSL_CLIENT_V_START"] .
 542                                 $_SERVER["REDIRECT_SSL_CLIENT_V_END"] .
 543                                 $_SERVER["REDIRECT_SSL_CLIENT_S_DN"]);
 544                 }
 545                 return "";
 546         }
 547
 548         function authenticate_user($link, $login, $password, $check_only = false) {
 549
 550                 if (!SINGLE_USER_MODE) {
 551
 552                         $user_id = false;
 553
 554                         global $pluginhost;
 555                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_AUTH_USER) as $plugin) {
 556
 557                                 $user_id = (int) $plugin->authenticate($login, $password);
 558
 559                                 if ($user_id) {
 560                                         $_SESSION["auth_module"] = strtolower(get_class($plugin));
 561                                         break;
 562                                 }
 563                         }
 564
 565                         if ($user_id && !$check_only) {
 566                                 $_SESSION["uid"] = $user_id;
 567
 568                                 $result = db_query($link, "SELECT login,access_level,pwd_hash FROM ttrss_users
 569                                         WHERE id = '$user_id'");
 570
 571                                 $_SESSION["name"] = db_fetch_result($result, 0, "login");
 572                                 $_SESSION["access_level"] = db_fetch_result($result, 0, "access_level");
 573                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 574
 575                                 db_query($link, "UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 576                                         $_SESSION["uid"]);
 577
 578                                 $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 579                                 $_SESSION["pwd_hash"] = db_fetch_result($result, 0, "pwd_hash");
 580
 581                                 $_SESSION["last_version_check"] = time();
 582
 583                                 initialize_user_prefs($link, $_SESSION["uid"]);
 584
 585                                 return true;
 586                         }
 587
 588                         return false;
 589
 590                 } else {
 591
 592                         $_SESSION["uid"] = 1;
 593                         $_SESSION["name"] = "admin";
 594                         $_SESSION["access_level"] = 10;
 595
 596                         $_SESSION["hide_hello"] = true;
 597                         $_SESSION["hide_logout"] = true;
 598
 599                         $_SESSION["auth_module"] = false;
 600
 601                         if (!$_SESSION["csrf_token"]) {
 602                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 603                         }
 604
 605                         $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 606
 607                         initialize_user_prefs($link, $_SESSION["uid"]);
 608
 609                         return true;
 610                 }
 611         }
 612
 613         function make_password($length = 8) {
 614
 615                 $password = "";
 616                 $possible = "0123456789abcdfghjkmnpqrstvwxyzABCDFGHJKMNPQRSTVWXYZ";
 617
 618         $i = 0;
 619
 620                 while ($i < $length) {
 621                         $char = substr($possible, mt_rand(0, strlen($possible)-1), 1);
 622
 623                         if (!strstr($password, $char)) {
 624                                 $password .= $char;
 625                                 $i++;
 626                         }
 627                 }
 628                 return $password;
 629         }
 630
 631         // this is called after user is created to initialize default feeds, labels
 632         // or whatever else
 633
 634         // user preferences are checked on every login, not here
 635
 636         function initialize_user($link, $uid) {
 637
 638                 db_query($link, "insert into ttrss_feeds (owner_uid,title,feed_url)
 639                         values ('$uid', 'Tiny Tiny RSS: New Releases',
 640                         'http://tt-rss.org/releases.rss')");
 641
 642                 db_query($link, "insert into ttrss_feeds (owner_uid,title,feed_url)
 643                         values ('$uid', 'Tiny Tiny RSS: Forum',
 644                                 'http://tt-rss.org/forum/rss.php')");
 645         }
 646
 647         function logout_user() {
 648                 session_destroy();
 649                 if (isset($_COOKIE[session_name()])) {
 650                    setcookie(session_name(), '', time()-42000, '/');
 651                 }
 652         }
 653
 654         function validate_csrf($csrf_token) {
 655                 return $csrf_token == $_SESSION['csrf_token'];
 656         }
 657
 658         function validate_session($link) {
 659                 if (SINGLE_USER_MODE) return true;
 660
 661                 $check_ip = $_SESSION['ip_address'];
 662
 663                 switch (SESSION_CHECK_ADDRESS) {
 664                 case 0:
 665                         $check_ip = '';
 666                         break;
 667                 case 1:
 668                         $check_ip = substr($check_ip, 0, strrpos($check_ip, '.')+1);
 669                         break;
 670                 case 2:
 671                         $check_ip = substr($check_ip, 0, strrpos($check_ip, '.'));
 672                         $check_ip = substr($check_ip, 0, strrpos($check_ip, '.')+1);
 673                         break;
 674                 };
 675
 676                 if ($check_ip && strpos($_SERVER['REMOTE_ADDR'], $check_ip) !== 0) {
 677                         $_SESSION["login_error_msg"] =
 678                                 __("Session failed to validate (incorrect IP)");
 679                         return false;
 680                 }
 681
 682                 if ($_SESSION["ref_schema_version"] != get_schema_version($link, true))
 683                         return false;
 684
 685                 if ($_SESSION["uid"]) {
 686
 687                         $result = db_query($link,
 688                                 "SELECT pwd_hash FROM ttrss_users WHERE id = '".$_SESSION["uid"]."'");
 689
 690                         $pwd_hash = db_fetch_result($result, 0, "pwd_hash");
 691
 692                         if ($pwd_hash != $_SESSION["pwd_hash"]) {
 693                                 return false;
 694                         }
 695                 }
 696
 697 /*              if ($_SESSION["cookie_lifetime"] && $_SESSION["uid"]) {
 698
 699                         //print_r($_SESSION);
 700
 701                         if (time() > $_SESSION["cookie_lifetime"]) {
 702                                 return false;
 703                         }
 704                 } */
 705
 706                 return true;
 707         }
 708
 709         function load_user_plugins($link, $owner_uid) {
 710                 if ($owner_uid) {
 711                         $plugins = get_pref($link, "_ENABLED_PLUGINS", $owner_uid);
 712
 713                         global $pluginhost;
 714                         $pluginhost->load($plugins, $pluginhost::KIND_USER, $owner_uid);
 715
 716                         if (get_schema_version($link) > 100) {
 717                                 $pluginhost->load_data();
 718                         }
 719                 }
 720         }
 721
 722         function login_sequence($link, $login_form = 0) {
 723                 $_SESSION["prefs_cache"] = false;
 724
 725                 if (SINGLE_USER_MODE) {
 726                         authenticate_user($link, "admin", null);
 727                         load_user_plugins($link, $_SESSION["uid"]);
 728                 } else {
 729                         if (!$_SESSION["uid"] || !validate_session($link)) {
 730
 731                                 if (AUTH_AUTO_LOGIN && authenticate_user($link, null, null)) {
 732                                     $_SESSION["ref_schema_version"] = get_schema_version($link, true);
 733                                 } else {
 734                                          authenticate_user($link, null, null, true);
 735                                 }
 736
 737                                 if (!$_SESSION["uid"]) render_login_form($link, $login_form);
 738
 739                         } else {
 740                                 /* bump login timestamp */
 741                                 db_query($link, "UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 742                                         $_SESSION["uid"]);
 743                         }
 744
 745                         if ($_SESSION["uid"] && $_SESSION["language"] && SESSION_COOKIE_LIFETIME > 0) {
 746                                 setcookie("ttrss_lang", $_SESSION["language"],
 747                                         time() + SESSION_COOKIE_LIFETIME);
 748                         }
 749
 750                         if ($_SESSION["uid"]) {
 751                                 load_user_plugins($link, $_SESSION["uid"]);
 752                         }
 753                 }
 754         }
 755
 756         function truncate_string($str, $max_len, $suffix = '&hellip;') {
 757                 if (mb_strlen($str, "utf-8") > $max_len - 3) {
 758                         return mb_substr($str, 0, $max_len, "utf-8") . $suffix;
 759                 } else {
 760                         return $str;
 761                 }
 762         }
 763
 764         // Deprecated, TODO: remove
 765         function theme_image($link, $filename) {
 766                 return $filename;
 767         }
 768
 769         function convert_timestamp($timestamp, $source_tz, $dest_tz) {
 770
 771                 try {
 772                         $source_tz = new DateTimeZone($source_tz);
 773                 } catch (Exception $e) {
 774                         $source_tz = new DateTimeZone('UTC');
 775                 }
 776
 777                 try {
 778                         $dest_tz = new DateTimeZone($dest_tz);
 779                 } catch (Exception $e) {
 780                         $dest_tz = new DateTimeZone('UTC');
 781                 }
 782
 783                 $dt = new DateTime(date('Y-m-d H:i:s', $timestamp), $source_tz);
 784                 return $dt->format('U') + $dest_tz->getOffset($dt);
 785         }
 786
 787         function make_local_datetime($link, $timestamp, $long, $owner_uid = false,
 788                                         $no_smart_dt = false) {
 789
 790                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 791                 if (!$timestamp) $timestamp = '1970-01-01 0:00';
 792
 793                 global $utc_tz;
 794                 global $tz_offset;
 795
 796                 # We store date in UTC internally
 797                 $dt = new DateTime($timestamp, $utc_tz);
 798
 799                 if ($tz_offset == -1) {
 800
 801                         $user_tz_string = get_pref($link, 'USER_TIMEZONE', $owner_uid);
 802
 803                         try {
 804                                 $user_tz = new DateTimeZone($user_tz_string);
 805                         } catch (Exception $e) {
 806                                 $user_tz = $utc_tz;
 807                         }
 808
 809                         $tz_offset = $user_tz->getOffset($dt);
 810                 }
 811
 812                 $user_timestamp = $dt->format('U') + $tz_offset;
 813
 814                 if (!$no_smart_dt) {
 815                         return smart_date_time($link, $user_timestamp,
 816                                 $tz_offset, $owner_uid);
 817                 } else {
 818                         if ($long)
 819                                 $format = get_pref($link, 'LONG_DATE_FORMAT', $owner_uid);
 820                         else
 821                                 $format = get_pref($link, 'SHORT_DATE_FORMAT', $owner_uid);
 822
 823                         return date($format, $user_timestamp);
 824                 }
 825         }
 826
 827         function smart_date_time($link, $timestamp, $tz_offset = 0, $owner_uid = false) {
 828                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 829
 830                 if (date("Y.m.d", $timestamp) == date("Y.m.d", time() + $tz_offset)) {
 831                         return date("G:i", $timestamp);
 832                 } else if (date("Y", $timestamp) == date("Y", time() + $tz_offset)) {
 833                         $format = get_pref($link, 'SHORT_DATE_FORMAT', $owner_uid);
 834                         return date($format, $timestamp);
 835                 } else {
 836                         $format = get_pref($link, 'LONG_DATE_FORMAT', $owner_uid);
 837                         return date($format, $timestamp);
 838                 }
 839         }
 840
 841         function sql_bool_to_bool($s) {
 842                 if ($s == "t" || $s == "1" || $s == "true") {
 843                         return true;
 844                 } else {
 845                         return false;
 846                 }
 847         }
 848
 849         function bool_to_sql_bool($s) {
 850                 if ($s) {
 851                         return "true";
 852                 } else {
 853                         return "false";
 854                 }
 855         }
 856
 857         // Session caching removed due to causing wrong redirects to upgrade
 858         // script when get_schema_version() is called on an obsolete session
 859         // created on a previous schema version.
 860         function get_schema_version($link, $nocache = false) {
 861                 global $schema_version;
 862
 863                 if (!$schema_version) {
 864                         $result = db_query($link, "SELECT schema_version FROM ttrss_version");
 865                         $version = db_fetch_result($result, 0, "schema_version");
 866                         $schema_version = $version;
 867                         return $version;
 868                 } else {
 869                         return $schema_version;
 870                 }
 871         }
 872
 873         function sanity_check($link) {
 874                 require_once 'errors.php';
 875
 876                 $error_code = 0;
 877                 $schema_version = get_schema_version($link, true);
 878
 879                 if ($schema_version != SCHEMA_VERSION) {
 880                         $error_code = 5;
 881                 }
 882
 883                 if (DB_TYPE == "mysql") {
 884                         $result = db_query($link, "SELECT true", false);
 885                         if (db_num_rows($result) != 1) {
 886                                 $error_code = 10;
 887                         }
 888                 }
 889
 890                 if (db_escape_string("testTEST") != "testTEST") {
 891                         $error_code = 12;
 892                 }
 893
 894                 return array("code" => $error_code, "message" => $ERRORS[$error_code]);
 895         }
 896
 897         function file_is_locked($filename) {
 898                 if (function_exists('flock')) {
 899                         $fp = @fopen(LOCK_DIRECTORY . "/$filename", "r");
 900                         if ($fp) {
 901                                 if (flock($fp, LOCK_EX | LOCK_NB)) {
 902                                         flock($fp, LOCK_UN);
 903                                         fclose($fp);
 904                                         return false;
 905                                 }
 906                                 fclose($fp);
 907                                 return true;
 908                         } else {
 909                                 return false;
 910                         }
 911                 }
 912                 return true; // consider the file always locked and skip the test
 913         }
 914
 915         function make_lockfile($filename) {
 916                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
 917
 918                 if (flock($fp, LOCK_EX | LOCK_NB)) {
 919                         if (function_exists('posix_getpid')) {
 920                                 fwrite($fp, posix_getpid() . "\n");
 921                         }
 922                         return $fp;
 923                 } else {
 924                         return false;
 925                 }
 926         }
 927
 928         function make_stampfile($filename) {
 929                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
 930
 931                 if (flock($fp, LOCK_EX | LOCK_NB)) {
 932                         fwrite($fp, time() . "\n");
 933                         flock($fp, LOCK_UN);
 934                         fclose($fp);
 935                         return true;
 936                 } else {
 937                         return false;
 938                 }
 939         }
 940
 941         function sql_random_function() {
 942                 if (DB_TYPE == "mysql") {
 943                         return "RAND()";
 944                 } else {
 945                         return "RANDOM()";
 946                 }
 947         }
 948
 949         function catchup_feed($link, $feed, $cat_view, $owner_uid = false, $max_id = false) {
 950
 951                         if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 952
 953                         //if (preg_match("/^-?[0-9][0-9]*$/", $feed) != false) {
 954
 955                         $ref_check_qpart = ($max_id &&
 956                                 !get_pref($link, 'REVERSE_HEADLINES')) ? "ref_id <= '$max_id'" : "true";
 957
 958                         if (is_numeric($feed)) {
 959                                 if ($cat_view) {
 960
 961                                         if ($feed >= 0) {
 962
 963                                                 if ($feed > 0) {
 964                                                         $children = getChildCategories($link, $feed, $owner_uid);
 965                                                         array_push($children, $feed);
 966
 967                                                         $children = join(",", $children);
 968
 969                                                         $cat_qpart = "cat_id IN ($children)";
 970                                                 } else {
 971                                                         $cat_qpart = "cat_id IS NULL";
 972                                                 }
 973
 974                                                 db_query($link, "UPDATE ttrss_user_entries
 975                                                         SET unread = false,last_read = NOW()
 976                                                         WHERE feed_id IN (SELECT id FROM ttrss_feeds WHERE $cat_qpart)
 977                                                         AND $ref_check_qpart
 978                                                         AND owner_uid = $owner_uid");
 979
 980                                         } else if ($feed == -2) {
 981
 982                                                 db_query($link, "UPDATE ttrss_user_entries
 983                                                         SET unread = false,last_read = NOW() WHERE (SELECT COUNT(*)
 984                                                                 FROM ttrss_user_labels2 WHERE article_id = ref_id) > 0
 985                                                                 AND $ref_check_qpart
 986                                                                 AND unread = true AND owner_uid = $owner_uid");
 987                                         }
 988
 989                                 } else if ($feed > 0) {
 990
 991                                         db_query($link, "UPDATE ttrss_user_entries
 992                                                         SET unread = false,last_read = NOW()
 993                                                         WHERE feed_id = '$feed'
 994                                                         AND $ref_check_qpart
 995                                                         AND owner_uid = $owner_uid");
 996
 997                                 } else if ($feed < 0 && $feed > -10) { // special, like starred
 998
 999                                         if ($feed == -1) {
1000                                                 db_query($link, "UPDATE ttrss_user_entries
1001                                                         SET unread = false,last_read = NOW()
1002                                                         WHERE marked = true
1003                                                         AND $ref_check_qpart
1004                                                         AND owner_uid = $owner_uid");
1005                                         }
1006
1007                                         if ($feed == -2) {
1008                                                 db_query($link, "UPDATE ttrss_user_entries
1009                                                         SET unread = false,last_read = NOW()
1010                                                         WHERE published = true
1011                                                         AND $ref_check_qpart
1012                                                         AND owner_uid = $owner_uid");
1013                                         }
1014
1015                                         if ($feed == -3) {
1016
1017                                                 $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE");
1018
1019                                                 if (DB_TYPE == "pgsql") {
1020                                                         $match_part = "updated > NOW() - INTERVAL '$intl hour' ";
1021                                                 } else {
1022                                                         $match_part = "updated > DATE_SUB(NOW(),
1023                                                                 INTERVAL $intl HOUR) ";
1024                                                 }
1025
1026                                                 $result = db_query($link, "SELECT id FROM ttrss_entries,
1027                                                         ttrss_user_entries WHERE $match_part AND
1028                                                         unread = true AND
1029                                                         ttrss_user_entries.ref_id = ttrss_entries.id AND
1030                                                         owner_uid = $owner_uid");
1031
1032                                                 $affected_ids = array();
1033
1034                                                 while ($line = db_fetch_assoc($result)) {
1035                                                         array_push($affected_ids, $line["id"]);
1036                                                 }
1037
1038                                                 catchupArticlesById($link, $affected_ids, 0);
1039                                         }
1040
1041                                         if ($feed == -4) {
1042                                                 db_query($link, "UPDATE ttrss_user_entries
1043                                                         SET unread = false,last_read = NOW()
1044                                                         WHERE $ref_check_qpart AND owner_uid = $owner_uid");
1045                                         }
1046
1047                                 } else if ($feed < -10) { // label
1048
1049                                         $label_id = -$feed - 11;
1050
1051                                         db_query($link, "UPDATE ttrss_user_entries, ttrss_user_labels2
1052                                                 SET unread = false, last_read = NOW()
1053                                                         WHERE label_id = '$label_id' AND unread = true
1054                                                         AND $ref_check_qpart
1055                                                         AND owner_uid = '$owner_uid' AND ref_id = article_id");
1056
1057                                 }
1058
1059                                 ccache_update($link, $feed, $owner_uid, $cat_view);
1060
1061                         } else { // tag
1062                                 db_query($link, "BEGIN");
1063
1064                                 $tag_name = db_escape_string($feed);
1065
1066                                 $result = db_query($link, "SELECT post_int_id FROM ttrss_tags
1067                                         WHERE tag_name = '$tag_name' AND owner_uid = $owner_uid");
1068
1069                                 while ($line = db_fetch_assoc($result)) {
1070                                         db_query($link, "UPDATE ttrss_user_entries SET
1071                                                 unread = false, last_read = NOW()
1072                                                 WHERE $ref_check_qpart AND int_id = " . $line["post_int_id"]);
1073                                 }
1074                                 db_query($link, "COMMIT");
1075                         }
1076         }
1077
1078         function getAllCounters($link) {
1079                 $data = getGlobalCounters($link);
1080
1081                 $data = array_merge($data, getVirtCounters($link));
1082                 $data = array_merge($data, getLabelCounters($link));
1083                 $data = array_merge($data, getFeedCounters($link, $active_feed));
1084                 $data = array_merge($data, getCategoryCounters($link));
1085
1086                 return $data;
1087         }
1088
1089         function getCategoryTitle($link, $cat_id) {
1090
1091                 if ($cat_id == -1) {
1092                         return __("Special");
1093                 } else if ($cat_id == -2) {
1094                         return __("Labels");
1095                 } else {
1096
1097                         $result = db_query($link, "SELECT title FROM ttrss_feed_categories WHERE
1098                                 id = '$cat_id'");
1099
1100                         if (db_num_rows($result) == 1) {
1101                                 return db_fetch_result($result, 0, "title");
1102                         } else {
1103                                 return __("Uncategorized");
1104                         }
1105                 }
1106         }
1107
1108
1109         function getCategoryCounters($link) {
1110                 $ret_arr = array();
1111
1112                 /* Labels category */
1113
1114                 $cv = array("id" => -2, "kind" => "cat",
1115                         "counter" => getCategoryUnread($link, -2));
1116
1117                 array_push($ret_arr, $cv);
1118
1119                 $result = db_query($link, "SELECT id AS cat_id, value AS unread,
1120                         (SELECT COUNT(id) FROM ttrss_feed_categories AS c2
1121                                 WHERE c2.parent_cat = ttrss_feed_categories.id) AS num_children
1122                         FROM ttrss_feed_categories, ttrss_cat_counters_cache
1123                         WHERE ttrss_cat_counters_cache.feed_id = id AND
1124                         ttrss_cat_counters_cache.owner_uid = ttrss_feed_categories.owner_uid AND
1125                         ttrss_feed_categories.owner_uid = " . $_SESSION["uid"]);
1126
1127                 while ($line = db_fetch_assoc($result)) {
1128                         $line["cat_id"] = (int) $line["cat_id"];
1129
1130                         if ($line["num_children"] > 0) {
1131                                 $child_counter = getCategoryChildrenUnread($link, $line["cat_id"], $_SESSION["uid"]);
1132                         } else {
1133                                 $child_counter = 0;
1134                         }
1135
1136                         $cv = array("id" => $line["cat_id"], "kind" => "cat",
1137                                 "counter" => $line["unread"] + $child_counter);
1138
1139                         array_push($ret_arr, $cv);
1140                 }
1141
1142                 /* Special case: NULL category doesn't actually exist in the DB */
1143
1144                 $cv = array("id" => 0, "kind" => "cat",
1145                         "counter" => (int) ccache_find($link, 0, $_SESSION["uid"], true));
1146
1147                 array_push($ret_arr, $cv);
1148
1149                 return $ret_arr;
1150         }
1151
1152         // only accepts real cats (>= 0)
1153         function getCategoryChildrenUnread($link, $cat, $owner_uid = false) {
1154                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1155
1156                 $result = db_query($link, "SELECT id FROM ttrss_feed_categories WHERE parent_cat = '$cat'
1157                                 AND owner_uid = $owner_uid");
1158
1159                 $unread = 0;
1160
1161                 while ($line = db_fetch_assoc($result)) {
1162                         $unread += getCategoryUnread($link, $line["id"], $owner_uid);
1163                         $unread += getCategoryChildrenUnread($link, $line["id"], $owner_uid);
1164                 }
1165
1166                 return $unread;
1167         }
1168
1169         function getCategoryUnread($link, $cat, $owner_uid = false) {
1170
1171                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1172
1173                 if ($cat >= 0) {
1174
1175                         if ($cat != 0) {
1176                                 $cat_query = "cat_id = '$cat'";
1177                         } else {
1178                                 $cat_query = "cat_id IS NULL";
1179                         }
1180
1181                         $result = db_query($link, "SELECT id FROM ttrss_feeds WHERE $cat_query
1182                                         AND owner_uid = " . $owner_uid);
1183
1184                         $cat_feeds = array();
1185                         while ($line = db_fetch_assoc($result)) {
1186                                 array_push($cat_feeds, "feed_id = " . $line["id"]);
1187                         }
1188
1189                         if (count($cat_feeds) == 0) return 0;
1190
1191                         $match_part = implode(" OR ", $cat_feeds);
1192
1193                         $result = db_query($link, "SELECT COUNT(int_id) AS unread
1194                                 FROM ttrss_user_entries
1195                                 WHERE   unread = true AND ($match_part)
1196                                 AND owner_uid = " . $owner_uid);
1197
1198                         $unread = 0;
1199
1200                         # this needs to be rewritten
1201                         while ($line = db_fetch_assoc($result)) {
1202                                 $unread += $line["unread"];
1203                         }
1204
1205                         return $unread;
1206                 } else if ($cat == -1) {
1207                         return getFeedUnread($link, -1) + getFeedUnread($link, -2) + getFeedUnread($link, -3) + getFeedUnread($link, 0);
1208                 } else if ($cat == -2) {
1209
1210                         $result = db_query($link, "
1211                                 SELECT COUNT(unread) AS unread FROM
1212                                         ttrss_user_entries, ttrss_user_labels2
1213                                 WHERE article_id = ref_id AND unread = true
1214                                         AND ttrss_user_entries.owner_uid = '$owner_uid'");
1215
1216                         $unread = db_fetch_result($result, 0, "unread");
1217
1218                         return $unread;
1219
1220                 }
1221         }
1222
1223         function getFeedUnread($link, $feed, $is_cat = false) {
1224                 return getFeedArticles($link, $feed, $is_cat, true, $_SESSION["uid"]);
1225         }
1226
1227         function getLabelUnread($link, $label_id, $owner_uid = false) {
1228                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1229
1230                 $result = db_query($link, "SELECT COUNT(ref_id) AS unread FROM ttrss_user_entries, ttrss_user_labels2
1231                         WHERE owner_uid = '$owner_uid' AND unread = true AND label_id = '$label_id' AND article_id = ref_id");
1232
1233                 if (db_num_rows($result) != 0) {
1234                         return db_fetch_result($result, 0, "unread");
1235                 } else {
1236                         return 0;
1237                 }
1238         }
1239
1240         function getFeedArticles($link, $feed, $is_cat = false, $unread_only = false,
1241                 $owner_uid = false) {
1242
1243                 $n_feed = (int) $feed;
1244                 $need_entries = false;
1245
1246                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1247
1248                 if ($unread_only) {
1249                         $unread_qpart = "unread = true";
1250                 } else {
1251                         $unread_qpart = "true";
1252                 }
1253
1254                 if ($is_cat) {
1255                         return getCategoryUnread($link, $n_feed, $owner_uid);
1256                 } else if ($n_feed == -6) {
1257                         return 0;
1258                 } else if ($feed != "0" && $n_feed == 0) {
1259
1260                         $feed = db_escape_string($feed);
1261
1262                         $result = db_query($link, "SELECT SUM((SELECT COUNT(int_id)
1263                                 FROM ttrss_user_entries,ttrss_entries WHERE int_id = post_int_id
1264                                         AND ref_id = id AND $unread_qpart)) AS count FROM ttrss_tags
1265                                 WHERE owner_uid = $owner_uid AND tag_name = '$feed'");
1266                         return db_fetch_result($result, 0, "count");
1267
1268                 } else if ($n_feed == -1) {
1269                         $match_part = "marked = true";
1270                 } else if ($n_feed == -2) {
1271                         $match_part = "published = true";
1272                 } else if ($n_feed == -3) {
1273                         $match_part = "unread = true AND score >= 0";
1274
1275                         $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE", $owner_uid);
1276
1277                         if (DB_TYPE == "pgsql") {
1278                                 $match_part .= " AND updated > NOW() - INTERVAL '$intl hour' ";
1279                         } else {
1280                                 $match_part .= " AND updated > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
1281                         }
1282
1283                         $need_entries = true;
1284
1285                 } else if ($n_feed == -4) {
1286                         $match_part = "true";
1287                 } else if ($n_feed >= 0) {
1288
1289                         if ($n_feed != 0) {
1290                                 $match_part = "feed_id = '$n_feed'";
1291                         } else {
1292                                 $match_part = "feed_id IS NULL";
1293                         }
1294
1295                 } else if ($feed < -10) {
1296
1297                         $label_id = -$feed - 11;
1298
1299                         return getLabelUnread($link, $label_id, $owner_uid);
1300
1301                 }
1302
1303                 if ($match_part) {
1304
1305                         if ($need_entries) {
1306                                 $from_qpart = "ttrss_user_entries,ttrss_entries";
1307                                 $from_where = "ttrss_entries.id = ttrss_user_entries.ref_id AND";
1308                         } else {
1309                                 $from_qpart = "ttrss_user_entries";
1310                         }
1311
1312                         $query = "SELECT count(int_id) AS unread
1313                                 FROM $from_qpart WHERE
1314                                 $unread_qpart AND $from_where ($match_part) AND ttrss_user_entries.owner_uid = $owner_uid";
1315
1316                         //echo "[$feed/$query]\n";
1317
1318                         $result = db_query($link, $query);
1319
1320                 } else {
1321
1322                         $result = db_query($link, "SELECT COUNT(post_int_id) AS unread
1323                                 FROM ttrss_tags,ttrss_user_entries,ttrss_entries
1324                                 WHERE tag_name = '$feed' AND post_int_id = int_id AND ref_id = ttrss_entries.id
1325                                 AND $unread_qpart AND ttrss_tags.owner_uid = " . $owner_uid);
1326                 }
1327
1328                 $unread = db_fetch_result($result, 0, "unread");
1329
1330                 return $unread;
1331         }
1332
1333         function getGlobalUnread($link, $user_id = false) {
1334
1335                 if (!$user_id) {
1336                         $user_id = $_SESSION["uid"];
1337                 }
1338
1339                 $result = db_query($link, "SELECT SUM(value) AS c_id FROM ttrss_counters_cache
1340                         WHERE owner_uid = '$user_id' AND feed_id > 0");
1341
1342                 $c_id = db_fetch_result($result, 0, "c_id");
1343
1344                 return $c_id;
1345         }
1346
1347         function getGlobalCounters($link, $global_unread = -1) {
1348                 $ret_arr = array();
1349
1350                 if ($global_unread == -1) {
1351                         $global_unread = getGlobalUnread($link);
1352                 }
1353
1354                 $cv = array("id" => "global-unread",
1355                         "counter" => (int) $global_unread);
1356
1357                 array_push($ret_arr, $cv);
1358
1359                 $result = db_query($link, "SELECT COUNT(id) AS fn FROM
1360                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1361
1362                 $subscribed_feeds = db_fetch_result($result, 0, "fn");
1363
1364                 $cv = array("id" => "subscribed-feeds",
1365                         "counter" => (int) $subscribed_feeds);
1366
1367                 array_push($ret_arr, $cv);
1368
1369                 return $ret_arr;
1370         }
1371
1372         function getVirtCounters($link) {
1373
1374                 $ret_arr = array();
1375
1376                 for ($i = 0; $i >= -4; $i--) {
1377
1378                         $count = getFeedUnread($link, $i);
1379
1380                         $cv = array("id" => $i,
1381                                 "counter" => (int) $count);
1382
1383 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1384 //                              $cv["xmsg"] = getFeedArticles($link, $i)." ".__("total");
1385
1386                         array_push($ret_arr, $cv);
1387                 }
1388
1389                 return $ret_arr;
1390         }
1391
1392         function getLabelCounters($link, $descriptions = false) {
1393
1394                 $ret_arr = array();
1395
1396                 $owner_uid = $_SESSION["uid"];
1397
1398                 $result = db_query($link, "SELECT id, caption FROM ttrss_labels2
1399                         WHERE owner_uid = '$owner_uid'");
1400
1401                 while ($line = db_fetch_assoc($result)) {
1402
1403                         $id = -$line["id"] - 11;
1404
1405                         $label_name = $line["caption"];
1406                         $count = getFeedUnread($link, $id);
1407
1408                         $cv = array("id" => $id,
1409                                 "counter" => (int) $count);
1410
1411                         if ($descriptions)
1412                                 $cv["description"] = $label_name;
1413
1414 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1415 //                              $cv["xmsg"] = getFeedArticles($link, $id)." ".__("total");
1416
1417                         array_push($ret_arr, $cv);
1418                 }
1419
1420                 return $ret_arr;
1421         }
1422
1423         function getFeedCounters($link, $active_feed = false) {
1424
1425                 $ret_arr = array();
1426
1427                 $query = "SELECT ttrss_feeds.id,
1428                                 ttrss_feeds.title,
1429                                 ".SUBSTRING_FOR_DATE."(ttrss_feeds.last_updated,1,19) AS last_updated,
1430                                 last_error, value AS count
1431                         FROM ttrss_feeds, ttrss_counters_cache
1432                         WHERE ttrss_feeds.owner_uid = ".$_SESSION["uid"]."
1433                                 AND ttrss_counters_cache.owner_uid = ttrss_feeds.owner_uid
1434                                 AND ttrss_counters_cache.feed_id = id";
1435
1436                 $result = db_query($link, $query);
1437                 $fctrs_modified = false;
1438
1439                 while ($line = db_fetch_assoc($result)) {
1440
1441                         $id = $line["id"];
1442                         $count = $line["count"];
1443                         $last_error = htmlspecialchars($line["last_error"]);
1444
1445                         $last_updated = make_local_datetime($link, $line['last_updated'], false);
1446
1447                         $has_img = feed_has_icon($id);
1448
1449                         if (date('Y') - date('Y', strtotime($line['last_updated'])) > 2)
1450                                 $last_updated = '';
1451
1452                         $cv = array("id" => $id,
1453                                 "updated" => $last_updated,
1454                                 "counter" => (int) $count,
1455                                 "has_img" => (int) $has_img);
1456
1457                         if ($last_error)
1458                                 $cv["error"] = $last_error;
1459
1460 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1461 //                              $cv["xmsg"] = getFeedArticles($link, $id)." ".__("total");
1462
1463                         if ($active_feed && $id == $active_feed)
1464                                 $cv["title"] = truncate_string($line["title"], 30);
1465
1466                         array_push($ret_arr, $cv);
1467
1468                 }
1469
1470                 return $ret_arr;
1471         }
1472
1473         function get_pgsql_version($link) {
1474                 $result = db_query($link, "SELECT version() AS version");
1475                 $version = explode(" ", db_fetch_result($result, 0, "version"));
1476                 return $version[1];
1477         }
1478
1479         /**
1480          * @return array (code => Status code, message => error message if available)
1481          *
1482          *                 0 - OK, Feed already exists
1483          *                 1 - OK, Feed added
1484          *                 2 - Invalid URL
1485          *                 3 - URL content is HTML, no feeds available
1486          *                 4 - URL content is HTML which contains multiple feeds.
1487          *                     Here you should call extractfeedurls in rpc-backend
1488          *                     to get all possible feeds.
1489          *                 5 - Couldn't download the URL content.
1490          */
1491         function subscribe_to_feed($link, $url, $cat_id = 0,
1492                         $auth_login = '', $auth_pass = '', $need_auth = false) {
1493
1494                 global $fetch_last_error;
1495
1496                 require_once "include/rssfuncs.php";
1497
1498                 $url = fix_url($url);
1499
1500                 if (!$url || !validate_feed_url($url)) return array("code" => 2);
1501
1502                 $contents = @fetch_file_contents($url, false, $auth_login, $auth_pass);
1503
1504                 if (!$contents) {
1505                         return array("code" => 5, "message" => $fetch_last_error);
1506                 }
1507
1508                 if (is_html($contents)) {
1509                         $feedUrls = get_feeds_from_html($url, $contents);
1510
1511                         if (count($feedUrls) == 0) {
1512                                 return array("code" => 3);
1513                         } else if (count($feedUrls) > 1) {
1514                                 return array("code" => 4, "feeds" => $feedUrls);
1515                         }
1516                         //use feed url as new URL
1517                         $url = key($feedUrls);
1518                 }
1519
1520                 if ($cat_id == "0" || !$cat_id) {
1521                         $cat_qpart = "NULL";
1522                 } else {
1523                         $cat_qpart = "'$cat_id'";
1524                 }
1525
1526                 $result = db_query($link,
1527                         "SELECT id FROM ttrss_feeds
1528                         WHERE feed_url = '$url' AND owner_uid = ".$_SESSION["uid"]);
1529
1530                 if (db_num_rows($result) == 0) {
1531                         $result = db_query($link,
1532                                 "INSERT INTO ttrss_feeds
1533                                         (owner_uid,feed_url,title,cat_id, auth_login,auth_pass,update_method)
1534                                 VALUES ('".$_SESSION["uid"]."', '$url',
1535                                 '[Unknown]', $cat_qpart, '$auth_login', '$auth_pass', 0)");
1536
1537                         $result = db_query($link,
1538                                 "SELECT id FROM ttrss_feeds WHERE feed_url = '$url'
1539                                         AND owner_uid = " . $_SESSION["uid"]);
1540
1541                         $feed_id = db_fetch_result($result, 0, "id");
1542
1543                         if ($feed_id) {
1544                                 update_rss_feed($link, $feed_id, true);
1545                         }
1546
1547                         return array("code" => 1);
1548                 } else {
1549                         return array("code" => 0);
1550                 }
1551         }
1552
1553         function print_feed_select($link, $id, $default_id = "",
1554                 $attributes = "", $include_all_feeds = true,
1555                 $root_id = false, $nest_level = 0) {
1556
1557                 if (!$root_id) {
1558                         print "<select id=\"$id\" name=\"$id\" $attributes>";
1559                         if ($include_all_feeds) {
1560                                 $is_selected = ("0" == $default_id) ? "selected=\"1\"" : "";
1561                                 print "<option $is_selected value=\"0\">".__('All feeds')."</option>";
1562                         }
1563                 }
1564
1565                 if (get_pref($link, 'ENABLE_FEED_CATS')) {
1566
1567                         if ($root_id)
1568                                 $parent_qpart = "parent_cat = '$root_id'";
1569                         else
1570                                 $parent_qpart = "parent_cat IS NULL";
1571
1572                         $result = db_query($link, "SELECT id,title,
1573                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1574                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1575                                 FROM ttrss_feed_categories
1576                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1577
1578                         while ($line = db_fetch_assoc($result)) {
1579
1580                                 for ($i = 0; $i < $nest_level; $i++)
1581                                         $line["title"] = " - " . $line["title"];
1582
1583                                 $is_selected = ("CAT:".$line["id"] == $default_id) ? "selected=\"1\"" : "";
1584
1585                                 printf("<option $is_selected value='CAT:%d'>%s</option>",
1586                                         $line["id"], htmlspecialchars($line["title"]));
1587
1588                                 if ($line["num_children"] > 0)
1589                                         print_feed_select($link, $id, $default_id, $attributes,
1590                                                 $include_all_feeds, $line["id"], $nest_level+1);
1591
1592                                 $feed_result = db_query($link, "SELECT id,title FROM ttrss_feeds
1593                                         WHERE cat_id = '".$line["id"]."' AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1594
1595                                 while ($fline = db_fetch_assoc($feed_result)) {
1596                                         $is_selected = ($fline["id"] == $default_id) ? "selected=\"1\"" : "";
1597
1598                                         $fline["title"] = " + " . $fline["title"];
1599
1600                                         for ($i = 0; $i < $nest_level; $i++)
1601                                                 $fline["title"] = " - " . $fline["title"];
1602
1603                                         printf("<option $is_selected value='%d'>%s</option>",
1604                                                 $fline["id"], htmlspecialchars($fline["title"]));
1605                                 }
1606                         }
1607
1608                         if (!$root_id) {
1609                                 $is_selected = ($default_id == "CAT:0") ? "selected=\"1\"" : "";
1610
1611                                 printf("<option $is_selected value='CAT:0'>%s</option>",
1612                                         __("Uncategorized"));
1613
1614                                 $feed_result = db_query($link, "SELECT id,title FROM ttrss_feeds
1615                                         WHERE cat_id IS NULL AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1616
1617                                 while ($fline = db_fetch_assoc($feed_result)) {
1618                                         $is_selected = ($fline["id"] == $default_id && !$default_is_cat) ? "selected=\"1\"" : "";
1619
1620                                         $fline["title"] = " + " . $fline["title"];
1621
1622                                         for ($i = 0; $i < $nest_level; $i++)
1623                                                 $fline["title"] = " - " . $fline["title"];
1624
1625                                         printf("<option $is_selected value='%d'>%s</option>",
1626                                                 $fline["id"], htmlspecialchars($fline["title"]));
1627                                 }
1628                         }
1629
1630                 } else {
1631                         $result = db_query($link, "SELECT id,title FROM ttrss_feeds
1632                                 WHERE owner_uid = ".$_SESSION["uid"]." ORDER BY title");
1633
1634                         while ($line = db_fetch_assoc($result)) {
1635
1636                                 $is_selected = ($line["id"] == $default_id) ? "selected=\"1\"" : "";
1637
1638                                 printf("<option $is_selected value='%d'>%s</option>",
1639                                         $line["id"], htmlspecialchars($line["title"]));
1640                         }
1641                 }
1642
1643                 if (!$root_id) {
1644                         print "</select>";
1645                 }
1646         }
1647
1648         function print_feed_cat_select($link, $id, $default_id,
1649                 $attributes, $include_all_cats = true, $root_id = false, $nest_level = 0) {
1650
1651                         if (!$root_id) {
1652                                         print "<select id=\"$id\" name=\"$id\" default=\"$default_id\" onchange=\"catSelectOnChange(this)\" $attributes>";
1653                         }
1654
1655                         if ($root_id)
1656                                 $parent_qpart = "parent_cat = '$root_id'";
1657                         else
1658                                 $parent_qpart = "parent_cat IS NULL";
1659
1660                         $result = db_query($link, "SELECT id,title,
1661                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1662                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1663                                 FROM ttrss_feed_categories
1664                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1665
1666                         while ($line = db_fetch_assoc($result)) {
1667                                 if ($line["id"] == $default_id) {
1668                                         $is_selected = "selected=\"1\"";
1669                                 } else {
1670                                         $is_selected = "";
1671                                 }
1672
1673                                 for ($i = 0; $i < $nest_level; $i++)
1674                                         $line["title"] = " - " . $line["title"];
1675
1676                                 if ($line["title"])
1677                                         printf("<option $is_selected value='%d'>%s</option>",
1678                                                 $line["id"], htmlspecialchars($line["title"]));
1679
1680                                 if ($line["num_children"] > 0)
1681                                         print_feed_cat_select($link, $id, $default_id, $attributes,
1682                                                 $include_all_cats, $line["id"], $nest_level+1);
1683                         }
1684
1685                         if (!$root_id) {
1686                                 if ($include_all_cats) {
1687                                         if (db_num_rows($result) > 0) {
1688                                                 print "<option disabled=\"1\">--------</option>";
1689                                         }
1690
1691                                         if ($default_id == 0) {
1692                                                 $is_selected = "selected=\"1\"";
1693                                         } else {
1694                                                 $is_selected = "";
1695                                         }
1696
1697                                         print "<option $is_selected value=\"0\">".__('Uncategorized')."</option>";
1698                                 }
1699                                 print "</select>";
1700                         }
1701                 }
1702
1703         function checkbox_to_sql_bool($val) {
1704                 return ($val == "on") ? "true" : "false";
1705         }
1706
1707         function getFeedCatTitle($link, $id) {
1708                 if ($id == -1) {
1709                         return __("Special");
1710                 } else if ($id < -10) {
1711                         return __("Labels");
1712                 } else if ($id > 0) {
1713                         $result = db_query($link, "SELECT ttrss_feed_categories.title
1714                                 FROM ttrss_feeds, ttrss_feed_categories WHERE ttrss_feeds.id = '$id' AND
1715                                         cat_id = ttrss_feed_categories.id");
1716                         if (db_num_rows($result) == 1) {
1717                                 return db_fetch_result($result, 0, "title");
1718                         } else {
1719                                 return __("Uncategorized");
1720                         }
1721                 } else {
1722                         return "getFeedCatTitle($id) failed";
1723                 }
1724
1725         }
1726
1727         function getFeedIcon($id) {
1728                 switch ($id) {
1729                 case 0:
1730                         return "images/archive.png";
1731                         break;
1732                 case -1:
1733                         return "images/mark_set.svg";
1734                         break;
1735                 case -2:
1736                         return "images/pub_set.svg";
1737                         break;
1738                 case -3:
1739                         return "images/fresh.png";
1740                         break;
1741                 case -4:
1742                         return "images/tag.png";
1743                         break;
1744                 case -6:
1745                         return "images/recently_read.png";
1746                         break;
1747                 default:
1748                         if ($id < -10) {
1749                                 return "images/label.png";
1750                         } else {
1751                                 if (file_exists(ICONS_DIR . "/$id.ico"))
1752                                         return ICONS_URL . "/$id.ico";
1753                         }
1754                         break;
1755                 }
1756         }
1757
1758         function getFeedTitle($link, $id, $cat = false) {
1759                 if ($cat) {
1760                         return getCategoryTitle($link, $id);
1761                 } else if ($id == -1) {
1762                         return __("Starred articles");
1763                 } else if ($id == -2) {
1764                         return __("Published articles");
1765                 } else if ($id == -3) {
1766                         return __("Fresh articles");
1767                 } else if ($id == -4) {
1768                         return __("All articles");
1769                 } else if ($id === 0 || $id === "0") {
1770                         return __("Archived articles");
1771                 } else if ($id == -6) {
1772                         return __("Recently read");
1773                 } else if ($id < -10) {
1774                         $label_id = -$id - 11;
1775                         $result = db_query($link, "SELECT caption FROM ttrss_labels2 WHERE id = '$label_id'");
1776                         if (db_num_rows($result) == 1) {
1777                                 return db_fetch_result($result, 0, "caption");
1778                         } else {
1779                                 return "Unknown label ($label_id)";
1780                         }
1781
1782                 } else if (is_numeric($id) && $id > 0) {
1783                         $result = db_query($link, "SELECT title FROM ttrss_feeds WHERE id = '$id'");
1784                         if (db_num_rows($result) == 1) {
1785                                 return db_fetch_result($result, 0, "title");
1786                         } else {
1787                                 return "Unknown feed ($id)";
1788                         }
1789                 } else {
1790                         return $id;
1791                 }
1792         }
1793
1794         function make_init_params($link) {
1795                 $params = array();
1796
1797                 $params["sign_progress"] = theme_image($link, "images/indicator_white.gif");
1798                 $params["sign_progress_tiny"] = theme_image($link, "images/indicator_tiny.gif");
1799                 $params["sign_excl"] = theme_image($link, "images/sign_excl.svg");
1800                 $params["sign_info"] = theme_image($link, "images/sign_info.svg");
1801
1802                 foreach (array("ON_CATCHUP_SHOW_NEXT_FEED", "HIDE_READ_FEEDS",
1803                         "ENABLE_FEED_CATS", "FEEDS_SORT_BY_UNREAD", "CONFIRM_FEED_CATCHUP",
1804                         "CDM_AUTO_CATCHUP", "FRESH_ARTICLE_MAX_AGE", "DEFAULT_ARTICLE_LIMIT",
1805                         "HIDE_READ_SHOWS_SPECIAL", "COMBINED_DISPLAY_MODE") as $param) {
1806
1807                                  $params[strtolower($param)] = (int) get_pref($link, $param);
1808                  }
1809
1810                 $params["icons_url"] = ICONS_URL;
1811                 $params["cookie_lifetime"] = SESSION_COOKIE_LIFETIME;
1812                 $params["default_view_mode"] = get_pref($link, "_DEFAULT_VIEW_MODE");
1813                 $params["default_view_limit"] = (int) get_pref($link, "_DEFAULT_VIEW_LIMIT");
1814                 $params["default_view_order_by"] = get_pref($link, "_DEFAULT_VIEW_ORDER_BY");
1815                 $params["bw_limit"] = (int) $_SESSION["bw_limit"];
1816
1817                 $result = db_query($link, "SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
1818                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1819
1820                 $max_feed_id = db_fetch_result($result, 0, "mid");
1821                 $num_feeds = db_fetch_result($result, 0, "nf");
1822
1823                 $params["max_feed_id"] = (int) $max_feed_id;
1824                 $params["num_feeds"] = (int) $num_feeds;
1825
1826                 $params["collapsed_feedlist"] = (int) get_pref($link, "_COLLAPSED_FEEDLIST");
1827                 $params["hotkeys"] = get_hotkeys_map($link);
1828
1829                 $params["csrf_token"] = $_SESSION["csrf_token"];
1830                 $params["widescreen"] = (int) $_SESSION["widescreen"];
1831
1832                 $params['simple_update'] = defined('SIMPLE_UPDATE_MODE') && SIMPLE_UPDATE_MODE;
1833
1834                 return $params;
1835         }
1836
1837         function get_hotkeys_info($link) {
1838                 $hotkeys = array(
1839                         __("Navigation") => array(
1840                                 "next_feed" => __("Open next feed"),
1841                                 "prev_feed" => __("Open previous feed"),
1842                                 "next_article" => __("Open next article"),
1843                                 "prev_article" => __("Open previous article"),
1844                                 "search_dialog" => __("Show search dialog")),
1845                         __("Article") => array(
1846                                 "toggle_mark" => __("Toggle starred"),
1847                                 "toggle_publ" => __("Toggle published"),
1848                                 "toggle_unread" => __("Toggle unread"),
1849                                 "edit_tags" => __("Edit tags"),
1850                                 "dismiss_selected" => __("Dismiss selected"),
1851                                 "dismiss_read" => __("Dismiss read"),
1852                                 "open_in_new_window" => __("Open in new window"),
1853                                 "catchup_below" => __("Mark below as read"),
1854                                 "catchup_above" => __("Mark above as read"),
1855                                 "article_scroll_down" => __("Scroll down"),
1856                                 "article_scroll_up" => __("Scroll up"),
1857                                 "select_article_cursor" => __("Select article under cursor"),
1858                                 "email_article" => __("Email article"),
1859                                 "close_article" => __("Close article"),
1860                                 "toggle_widescreen" => __("Toggle widescreen mode")),
1861                         __("Article selection") => array(
1862                                 "select_all" => __("Select all articles"),
1863                                 "select_unread" => __("Select unread"),
1864                                 "select_marked" => __("Select starred"),
1865                                 "select_published" => __("Select published"),
1866                                 "select_invert" => __("Invert selection"),
1867                                 "select_none" => __("Deselect everything")),
1868                         __("Feed") => array(
1869                                 "feed_refresh" => __("Refresh current feed"),
1870                                 "feed_unhide_read" => __("Un/hide read feeds"),
1871                                 "feed_subscribe" => __("Subscribe to feed"),
1872                                 "feed_edit" => __("Edit feed"),
1873                                 "feed_catchup" => __("Mark as read"),
1874                                 "feed_reverse" => __("Reverse headlines"),
1875                                 "feed_debug_update" => __("Debug feed update"),
1876                                 "catchup_all" => __("Mark all feeds as read"),
1877                                 "cat_toggle_collapse" => __("Un/collapse current category")),
1878                         __("Go to") => array(
1879                                 "goto_all" => __("All articles"),
1880                                 "goto_fresh" => __("Fresh"),
1881                                 "goto_marked" => __("Starred"),
1882                                 "goto_published" => __("Published"),
1883                                 "goto_tagcloud" => __("Tag cloud"),
1884                                 "goto_prefs" => __("Preferences")),
1885                         __("Other") => array(
1886                                 "create_label" => __("Create label"),
1887                                 "create_filter" => __("Create filter"),
1888                                 "collapse_sidebar" => __("Un/collapse sidebar"),
1889                                 "help_dialog" => __("Show help dialog"))
1890                         );
1891
1892                 return $hotkeys;
1893         }
1894
1895         function get_hotkeys_map($link) {
1896                 $hotkeys = array(
1897 //                      "navigation" => array(
1898                                 "k" => "next_feed",
1899                                 "j" => "prev_feed",
1900                                 "n" => "next_article",
1901                                 "p" => "prev_article",
1902                                 "(38)|up" => "prev_article",
1903                                 "(40)|down" => "next_article",
1904                                 "(191)|/" => "search_dialog",
1905 //                      "article" => array(
1906                                 "s" => "toggle_mark",
1907                                 "S" => "toggle_publ",
1908                                 "u" => "toggle_unread",
1909                                 "T" => "edit_tags",
1910                                 "D" => "dismiss_selected",
1911                                 "X" => "dismiss_read",
1912                                 "o" => "open_in_new_window",
1913                                 "c p" => "catchup_below",
1914                                 "c n" => "catchup_above",
1915                                 "N" => "article_scroll_down",
1916                                 "P" => "article_scroll_up",
1917                                 "a W" => "toggle_widescreen",
1918                                 "e" => "email_article",
1919                                 "a q" => "close_article",
1920 //                      "article_selection" => array(
1921                                 "a a" => "select_all",
1922                                 "a u" => "select_unread",
1923                                 "a U" => "select_marked",
1924                                 "a p" => "select_published",
1925                                 "a i" => "select_invert",
1926                                 "a n" => "select_none",
1927 //                      "feed" => array(
1928                                 "f r" => "feed_refresh",
1929                                 "f a" => "feed_unhide_read",
1930                                 "f s" => "feed_subscribe",
1931                                 "f e" => "feed_edit",
1932                                 "f q" => "feed_catchup",
1933                                 "f x" => "feed_reverse",
1934                                 "f D" => "feed_debug_update",
1935                                 "Q" => "catchup_all",
1936                                 "x" => "cat_toggle_collapse",
1937 //                      "goto" => array(
1938                                 "g a" => "goto_all",
1939                                 "g f" => "goto_fresh",
1940                                 "g s" => "goto_marked",
1941                                 "g p" => "goto_published",
1942                                 "g t" => "goto_tagcloud",
1943                                 "g P" => "goto_prefs",
1944 //                      "other" => array(
1945                                 "(9)|Tab" => "select_article_cursor", // tab
1946                                 "c l" => "create_label",
1947                                 "c f" => "create_filter",
1948                                 "c s" => "collapse_sidebar",
1949                                 "^(191)|Ctrl+/" => "help_dialog",
1950                         );
1951
1952                 global $pluginhost;
1953                 foreach ($pluginhost->get_hooks($pluginhost::HOOK_HOTKEY_MAP) as $plugin) {
1954                         $hotkeys = $plugin->hook_hotkey_map($hotkeys);
1955                 }
1956
1957                 $prefixes = array();
1958
1959                 foreach (array_keys($hotkeys) as $hotkey) {
1960                         $pair = explode(" ", $hotkey, 2);
1961
1962                         if (count($pair) > 1 && !in_array($pair[0], $prefixes)) {
1963                                 array_push($prefixes, $pair[0]);
1964                         }
1965                 }
1966
1967                 return array($prefixes, $hotkeys);
1968         }
1969
1970         function make_runtime_info($link) {
1971                 $data = array();
1972
1973                 $result = db_query($link, "SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
1974                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1975
1976                 $max_feed_id = db_fetch_result($result, 0, "mid");
1977                 $num_feeds = db_fetch_result($result, 0, "nf");
1978
1979                 $data["max_feed_id"] = (int) $max_feed_id;
1980                 $data["num_feeds"] = (int) $num_feeds;
1981
1982                 $data['last_article_id'] = getLastArticleId($link);
1983                 $data['cdm_expanded'] = get_pref($link, 'CDM_EXPANDED');
1984
1985                 if (file_exists(LOCK_DIRECTORY . "/update_daemon.lock")) {
1986
1987                         $data['daemon_is_running'] = (int) file_is_locked("update_daemon.lock");
1988
1989                         if (time() - $_SESSION["daemon_stamp_check"] > 30) {
1990
1991                                 $stamp = (int) @file_get_contents(LOCK_DIRECTORY . "/update_daemon.stamp");
1992
1993                                 if ($stamp) {
1994                                         $stamp_delta = time() - $stamp;
1995
1996                                         if ($stamp_delta > 1800) {
1997                                                 $stamp_check = 0;
1998                                         } else {
1999                                                 $stamp_check = 1;
2000                                                 $_SESSION["daemon_stamp_check"] = time();
2001                                         }
2002
2003                                         $data['daemon_stamp_ok'] = $stamp_check;
2004
2005                                         $stamp_fmt = date("Y.m.d, G:i", $stamp);
2006
2007                                         $data['daemon_stamp'] = $stamp_fmt;
2008                                 }
2009                         }
2010                 }
2011
2012                 if ($_SESSION["last_version_check"] + 86400 + rand(-1000, 1000) < time()) {
2013                                 $new_version_details = @check_for_update($link);
2014
2015                                 $data['new_version_available'] = (int) ($new_version_details != false);
2016
2017                                 $_SESSION["last_version_check"] = time();
2018                                 $_SESSION["version_data"] = $new_version_details;
2019                 }
2020
2021                 return $data;
2022         }
2023
2024         function search_to_sql($link, $search, $match_on) {
2025
2026                 $search_query_part = "";
2027
2028                 $keywords = explode(" ", $search);
2029                 $query_keywords = array();
2030
2031                 foreach ($keywords as $k) {
2032                         if (strpos($k, "-") === 0) {
2033                                 $k = substr($k, 1);
2034                                 $not = "NOT";
2035                         } else {
2036                                 $not = "";
2037                         }
2038
2039                         $commandpair = explode(":", mb_strtolower($k), 2);
2040
2041                         if ($commandpair[0] == "note" && $commandpair[1]) {
2042
2043                                 if ($commandpair[1] == "true")
2044                                         array_push($query_keywords, "($not (note IS NOT NULL AND note != ''))");
2045                                 else
2046                                         array_push($query_keywords, "($not (note IS NULL OR note = ''))");
2047
2048                         } else if ($commandpair[0] == "star" && $commandpair[1]) {
2049
2050                                 if ($commandpair[1] == "true")
2051                                         array_push($query_keywords, "($not (marked = true))");
2052                                 else
2053                                         array_push($query_keywords, "($not (marked = false))");
2054
2055                         } else if ($commandpair[0] == "pub" && $commandpair[1]) {
2056
2057                                 if ($commandpair[1] == "true")
2058                                         array_push($query_keywords, "($not (published = true))");
2059                                 else
2060                                         array_push($query_keywords, "($not (published = false))");
2061
2062                         } else if (strpos($k, "@") === 0) {
2063
2064                                 $user_tz_string = get_pref($link, 'USER_TIMEZONE', $_SESSION['uid']);
2065                                 $orig_ts = strtotime(substr($k, 1));
2066                                 $k = date("Y-m-d", convert_timestamp($orig_ts, $user_tz_string, 'UTC'));
2067
2068                                 //$k = date("Y-m-d", strtotime(substr($k, 1)));
2069
2070                                 array_push($query_keywords, "(".SUBSTRING_FOR_DATE."(updated,1,LENGTH('$k')) $not = '$k')");
2071                         } else if ($match_on == "both") {
2072                                 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2073                                                 OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2074                         } else if ($match_on == "title") {
2075                                 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%'))");
2076                         } else if ($match_on == "content") {
2077                                 array_push($query_keywords, "(UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2078                         }
2079                 }
2080
2081                 $search_query_part = implode("AND", $query_keywords);
2082
2083                 return $search_query_part;
2084         }
2085
2086         function getParentCategories($link, $cat, $owner_uid) {
2087                 $rv = array();
2088
2089                 $result = db_query($link, "SELECT parent_cat FROM ttrss_feed_categories
2090                         WHERE id = '$cat' AND parent_cat IS NOT NULL AND owner_uid = $owner_uid");
2091
2092                 while ($line = db_fetch_assoc($result)) {
2093                         array_push($rv, $line["parent_cat"]);
2094                         $rv = array_merge($rv, getParentCategories($link, $line["parent_cat"], $owner_uid));
2095                 }
2096
2097                 return $rv;
2098         }
2099
2100         function getChildCategories($link, $cat, $owner_uid) {
2101                 $rv = array();
2102
2103                 $result = db_query($link, "SELECT id FROM ttrss_feed_categories
2104                         WHERE parent_cat = '$cat' AND owner_uid = $owner_uid");
2105
2106                 while ($line = db_fetch_assoc($result)) {
2107                         array_push($rv, $line["id"]);
2108                         $rv = array_merge($rv, getChildCategories($link, $line["id"], $owner_uid));
2109                 }
2110
2111                 return $rv;
2112         }
2113
2114         function queryFeedHeadlines($link, $feed, $limit, $view_mode, $cat_view, $search, $search_mode, $match_on, $override_order = false, $offset = 0, $owner_uid = 0, $filter = false, $since_id = 0, $include_children = false, $ignore_vfeed_group = false) {
2115
2116                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2117
2118                 $ext_tables_part = "";
2119
2120                         if ($search) {
2121
2122                                 if (SPHINX_ENABLED) {
2123                                         $ids = join(",", @sphinx_search($search, 0, 500));
2124
2125                                         if ($ids)
2126                                                 $search_query_part = "ref_id IN ($ids) AND ";
2127                                         else
2128                                                 $search_query_part = "ref_id = -1 AND ";
2129
2130                                 } else {
2131                                         $search_query_part = search_to_sql($link, $search, $match_on);
2132                                         $search_query_part .= " AND ";
2133                                 }
2134
2135                         } else {
2136                                 $search_query_part = "";
2137                         }
2138
2139                         if ($filter) {
2140
2141                                 if (DB_TYPE == "pgsql") {
2142                                         $query_strategy_part .= " AND updated > NOW() - INTERVAL '14 days' ";
2143                                 } else {
2144                                         $query_strategy_part .= " AND updated > DATE_SUB(NOW(), INTERVAL 14 DAY) ";
2145                                 }
2146
2147                                 $override_order = "updated DESC";
2148
2149                                 $filter_query_part = filter_to_sql($link, $filter, $owner_uid);
2150
2151                                 // Try to check if SQL regexp implementation chokes on a valid regexp
2152                                 $result = db_query($link, "SELECT true AS true_val FROM ttrss_entries,
2153                                         ttrss_user_entries, ttrss_feeds, ttrss_feed_categories
2154                                         WHERE $filter_query_part LIMIT 1", false);
2155
2156                                 $test = db_fetch_result($result, 0, "true_val");
2157
2158                                 if (!$test) {
2159                                         $filter_query_part = "false AND";
2160                                 } else {
2161                                         $filter_query_part .= " AND";
2162                                 }
2163
2164                         } else {
2165                                 $filter_query_part = "";
2166                         }
2167
2168                         if ($since_id) {
2169                                 $since_id_part = "ttrss_entries.id > $since_id AND ";
2170                         } else {
2171                                 $since_id_part = "";
2172                         }
2173
2174                         $view_query_part = "";
2175
2176                         if ($view_mode == "adaptive" || $view_query_part == "noscores") {
2177                                 if ($search) {
2178                                         $view_query_part = " ";
2179                                 } else if ($feed != -1) {
2180                                         $unread = getFeedUnread($link, $feed, $cat_view);
2181
2182                                         if ($cat_view && $feed > 0 && $include_children)
2183                                                 $unread += getCategoryChildrenUnread($link, $feed);
2184
2185                                         if ($unread > 0) {
2186                                                 $view_query_part = " unread = true AND ";
2187                                         }
2188                                 }
2189                         }
2190
2191                         if ($view_mode == "marked") {
2192                                 $view_query_part = " marked = true AND ";
2193                         }
2194
2195                         if ($view_mode == "published") {
2196                                 $view_query_part = " published = true AND ";
2197                         }
2198
2199                         if ($view_mode == "unread") {
2200                                 $view_query_part = " unread = true AND ";
2201                         }
2202
2203                         if ($view_mode == "updated") {
2204                                 $view_query_part = " (last_read is null and unread = false) AND ";
2205                         }
2206
2207                         if ($limit > 0) {
2208                                 $limit_query_part = "LIMIT " . $limit;
2209                         }
2210
2211                         $allow_archived = false;
2212
2213                         $vfeed_query_part = "";
2214
2215                         // override query strategy and enable feed display when searching globally
2216                         if ($search && $search_mode == "all_feeds") {
2217                                 $query_strategy_part = "true";
2218                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2219                         /* tags */
2220                         } else if (!is_numeric($feed)) {
2221                                 $query_strategy_part = "true";
2222                                 $vfeed_query_part = "(SELECT title FROM ttrss_feeds WHERE
2223                                         id = feed_id) as feed_title,";
2224                         } else if ($search && $search_mode == "this_cat") {
2225                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2226
2227                                 if ($feed > 0) {
2228                                         if ($include_children) {
2229                                                 $subcats = getChildCategories($link, $feed, $owner_uid);
2230                                                 array_push($subcats, $feed);
2231                                                 $cats_qpart = join(",", $subcats);
2232                                         } else {
2233                                                 $cats_qpart = $feed;
2234                                         }
2235
2236                                         $query_strategy_part = "ttrss_feeds.cat_id IN ($cats_qpart)";
2237
2238                                 } else {
2239                                         $query_strategy_part = "ttrss_feeds.cat_id IS NULL";
2240                                 }
2241
2242                         } else if ($feed > 0) {
2243
2244                                 if ($cat_view) {
2245
2246                                         if ($feed > 0) {
2247                                                 if ($include_children) {
2248                                                         # sub-cats
2249                                                         $subcats = getChildCategories($link, $feed, $owner_uid);
2250
2251                                                         array_push($subcats, $feed);
2252                                                         $query_strategy_part = "cat_id IN (".
2253                                                                         implode(",", $subcats).")";
2254
2255                                                 } else {
2256                                                         $query_strategy_part = "cat_id = '$feed'";
2257                                                 }
2258
2259                                         } else {
2260                                                 $query_strategy_part = "cat_id IS NULL";
2261                                         }
2262
2263                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2264
2265                                 } else {
2266                                         $query_strategy_part = "feed_id = '$feed'";
2267                                 }
2268                         } else if ($feed == 0 && !$cat_view) { // archive virtual feed
2269                                 $query_strategy_part = "feed_id IS NULL";
2270                                 $allow_archived = true;
2271                         } else if ($feed == 0 && $cat_view) { // uncategorized
2272                                 $query_strategy_part = "cat_id IS NULL AND feed_id IS NOT NULL";
2273                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2274                         } else if ($feed == -1) { // starred virtual feed
2275                                 $query_strategy_part = "marked = true";
2276                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2277                                 $allow_archived = true;
2278
2279                         } else if ($feed == -2) { // published virtual feed OR labels category
2280
2281                                 if (!$cat_view) {
2282                                         $query_strategy_part = "published = true";
2283                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2284                                         $allow_archived = true;
2285
2286                                         if (!$override_order) $override_order = "last_read DESC, updated DESC";
2287                                 } else {
2288                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2289
2290                                         $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2291
2292                                         $query_strategy_part = "ttrss_labels2.id = ttrss_user_labels2.label_id AND
2293                                                 ttrss_user_labels2.article_id = ref_id";
2294
2295                                 }
2296                         } else if ($feed == -6) { // recently read
2297                                 $query_strategy_part = "unread = false AND last_read IS NOT NULL";
2298                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2299                                 $allow_archived = true;
2300
2301                                 if (!$override_order) $override_order = "last_read DESC";
2302                         } else if ($feed == -3) { // fresh virtual feed
2303                                 $query_strategy_part = "unread = true AND score >= 0";
2304
2305                                 $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE", $owner_uid);
2306
2307                                 if (DB_TYPE == "pgsql") {
2308                                         $query_strategy_part .= " AND updated > NOW() - INTERVAL '$intl hour' ";
2309                                 } else {
2310                                         $query_strategy_part .= " AND updated > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
2311                                 }
2312
2313                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2314                         } else if ($feed == -4) { // all articles virtual feed
2315                                 $query_strategy_part = "true";
2316                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2317                         } else if ($feed <= -10) { // labels
2318                                 $label_id = -$feed - 11;
2319
2320                                 $query_strategy_part = "label_id = '$label_id' AND
2321                                         ttrss_labels2.id = ttrss_user_labels2.label_id AND
2322                                         ttrss_user_labels2.article_id = ref_id";
2323
2324                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2325                                 $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2326                                 $allow_archived = true;
2327
2328                         } else {
2329                                 $query_strategy_part = "true";
2330                         }
2331
2332                         if (get_pref($link, "SORT_HEADLINES_BY_FEED_DATE", $owner_uid)) {
2333                                 $date_sort_field = "updated";
2334                         } else {
2335                                 $date_sort_field = "date_entered";
2336                         }
2337
2338                         if (get_pref($link, 'REVERSE_HEADLINES', $owner_uid)) {
2339                                 $order_by = "$date_sort_field";
2340                         } else {
2341                                 $order_by = "$date_sort_field DESC";
2342                         }
2343
2344                         if ($view_mode != "noscores") {
2345                                 $order_by = "score DESC, $order_by";
2346                         }
2347
2348                         if ($override_order) {
2349                                 $order_by = $override_order;
2350                         }
2351
2352                         $feed_title = "";
2353
2354                         if ($search) {
2355                                 $feed_title = T_sprintf("Search results: %s", $search);
2356                         } else {
2357                                 if ($cat_view) {
2358                                         $feed_title = getCategoryTitle($link, $feed);
2359                                 } else {
2360                                         if (is_numeric($feed) && $feed > 0) {
2361                                                 $result = db_query($link, "SELECT title,site_url,last_error
2362                                                         FROM ttrss_feeds WHERE id = '$feed' AND owner_uid = $owner_uid");
2363
2364                                                 $feed_title = db_fetch_result($result, 0, "title");
2365                                                 $feed_site_url = db_fetch_result($result, 0, "site_url");
2366                                                 $last_error = db_fetch_result($result, 0, "last_error");
2367                                         } else {
2368                                                 $feed_title = getFeedTitle($link, $feed);
2369                                         }
2370                                 }
2371                         }
2372
2373                         $content_query_part = "content as content_preview, cached_content, ";
2374
2375                         if (is_numeric($feed)) {
2376
2377                                 if ($feed >= 0) {
2378                                         $feed_kind = "Feeds";
2379                                 } else {
2380                                         $feed_kind = "Labels";
2381                                 }
2382
2383                                 if ($limit_query_part) {
2384                                         $offset_query_part = "OFFSET $offset";
2385                                 }
2386
2387                                 // proper override_order applied above
2388                                 if ($vfeed_query_part && !$ignore_vfeed_group && get_pref($link, 'VFEED_GROUP_BY_FEED', $owner_uid)) {
2389                                         if (!$override_order) {
2390                                                 $order_by = "ttrss_feeds.title, $order_by";
2391                                         } else {
2392                                                 $order_by = "ttrss_feeds.title, $override_order";
2393                                         }
2394                                 }
2395
2396                                 if (!$allow_archived) {
2397                                         $from_qpart = "ttrss_entries,ttrss_user_entries,ttrss_feeds$ext_tables_part";
2398                                         $feed_check_qpart = "ttrss_user_entries.feed_id = ttrss_feeds.id AND";
2399
2400                                 } else {
2401                                         $from_qpart = "ttrss_entries$ext_tables_part,ttrss_user_entries
2402                                                 LEFT JOIN ttrss_feeds ON (feed_id = ttrss_feeds.id)";
2403                                 }
2404
2405                                 $query = "SELECT DISTINCT
2406                                                 date_entered,
2407                                                 guid,
2408                                                 ttrss_entries.id,ttrss_entries.title,
2409                                                 updated,
2410                                                 label_cache,
2411                                                 tag_cache,
2412                                                 always_display_enclosures,
2413                                                 site_url,
2414                                                 note,
2415                                                 num_comments,
2416                                                 comments,
2417                                                 int_id,
2418                                                 unread,feed_id,marked,published,link,last_read,orig_feed_id,
2419                                                 ".SUBSTRING_FOR_DATE."(last_read,1,19) as last_read_noms,
2420                                                 $vfeed_query_part
2421                                                 $content_query_part
2422                                                 ".SUBSTRING_FOR_DATE."(updated,1,19) as updated_noms,
2423                                                 author,score
2424                                         FROM
2425                                                 $from_qpart
2426                                         WHERE
2427                                         $feed_check_qpart
2428                                         ttrss_user_entries.ref_id = ttrss_entries.id AND
2429                                         ttrss_user_entries.owner_uid = '$owner_uid' AND
2430                                         $search_query_part
2431                                         $filter_query_part
2432                                         $view_query_part
2433                                         $since_id_part
2434                                         $query_strategy_part ORDER BY $order_by
2435                                         $limit_query_part $offset_query_part";
2436
2437                                 if ($_REQUEST["debug"]) print $query;
2438
2439                                 $result = db_query($link, $query);
2440
2441                         } else {
2442                                 // browsing by tag
2443
2444                                 $select_qpart = "SELECT DISTINCT " .
2445                                                                 "date_entered," .
2446                                                                 "guid," .
2447                                                                 "note," .
2448                                                                 "ttrss_entries.id as id," .
2449                                                                 "title," .
2450                                                                 "updated," .
2451                                                                 "unread," .
2452                                                                 "feed_id," .
2453                                                                 "orig_feed_id," .
2454                                                                 "marked," .
2455                                                                 "num_comments, " .
2456                                                                 "comments, " .
2457                                                                 "tag_cache," .
2458                                                                 "label_cache," .
2459                                                                 "link," .
2460                                                                 "last_read," .
2461                                                                 SUBSTRING_FOR_DATE . "(last_read,1,19) as last_read_noms," .
2462                                                                 $since_id_part .
2463                                                                 $vfeed_query_part .
2464                                                                 $content_query_part .
2465                                                                 SUBSTRING_FOR_DATE . "(updated,1,19) as updated_noms," .
2466                                                                 "score ";
2467
2468                                 $feed_kind = "Tags";
2469                                 $all_tags = explode(",", $feed);
2470                                 if ($search_mode == 'any') {
2471                                         $tag_sql = "tag_name in (" . implode(", ", array_map("db_quote", $all_tags)) . ")";
2472                                         $from_qpart = " FROM ttrss_entries,ttrss_user_entries,ttrss_tags ";
2473                                         $where_qpart = " WHERE " .
2474                                                                    "ref_id = ttrss_entries.id AND " .
2475                                                                    "ttrss_user_entries.owner_uid = $owner_uid AND " .
2476                                                                    "post_int_id = int_id AND $tag_sql AND " .
2477                                                                    $view_query_part .
2478                                                                    $search_query_part .
2479                                                                    $query_strategy_part . " ORDER BY $order_by " .
2480                                                                    $limit_query_part;
2481
2482                                 } else {
2483                                         $i = 1;
2484                                         $sub_selects = array();
2485                                         $sub_ands = array();
2486                                         foreach ($all_tags as $term) {
2487                                                 array_push($sub_selects, "(SELECT post_int_id from ttrss_tags WHERE tag_name = " . db_quote($term) . " AND owner_uid = $owner_uid) as A$i");
2488                                                 $i++;
2489                                         }
2490                                         if ($i > 2) {
2491                                                 $x = 1;
2492                                                 $y = 2;
2493                                                 do {
2494                                                         array_push($sub_ands, "A$x.post_int_id = A$y.post_int_id");
2495                                                         $x++;
2496                                                         $y++;
2497                                                 } while ($y < $i);
2498                                         }
2499                                         array_push($sub_ands, "A1.post_int_id = ttrss_user_entries.int_id and ttrss_user_entries.owner_uid = $owner_uid");
2500                                         array_push($sub_ands, "ttrss_user_entries.ref_id = ttrss_entries.id");
2501                                         $from_qpart = " FROM " . implode(", ", $sub_selects) . ", ttrss_user_entries, ttrss_entries";
2502                                         $where_qpart = " WHERE " . implode(" AND ", $sub_ands);
2503                                 }
2504                                 //                              error_log("TAG SQL: " . $tag_sql);
2505                                 // $tag_sql = "tag_name = '$feed'";   DEFAULT way
2506
2507                                 //                              error_log("[". $select_qpart . "][" . $from_qpart . "][" .$where_qpart . "]");
2508                                 $result = db_query($link, $select_qpart . $from_qpart . $where_qpart);
2509                         }
2510
2511                         return array($result, $feed_title, $feed_site_url, $last_error);
2512
2513         }
2514
2515         function sanitize($link, $str, $force_strip_tags = false, $owner = false, $site_url = false) {
2516                 if (!$owner) $owner = $_SESSION["uid"];
2517
2518                 $res = trim($str); if (!$res) return '';
2519
2520                 $config = array('safe' => 1, 'deny_attribute' => 'style, width, height, class, id', 'comment' => 1, 'cdata' => 1, 'balance' => 0);
2521                 $res = htmLawed($res, $config);
2522
2523                 if (get_pref($link, "STRIP_IMAGES", $owner)) {
2524                         $res = preg_replace('/<img[^>]+>/is', '', $res);
2525                 }
2526
2527                 if (strpos($res, "href=") === false)
2528                         $res = rewrite_urls($res);
2529
2530                 $charset_hack = '<head>
2531                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
2532                 </head>';
2533
2534                 $res = trim($res); if (!$res) return '';
2535
2536                 libxml_use_internal_errors(true);
2537
2538                 $doc = new DOMDocument();
2539                 $doc->loadHTML($charset_hack . $res);
2540                 $xpath = new DOMXPath($doc);
2541
2542                 $entries = $xpath->query('(//a[@href]|//img[@src])');
2543                 $br_inserted = 0;
2544
2545                 foreach ($entries as $entry) {
2546
2547                         if ($site_url) {
2548
2549                                 if ($entry->hasAttribute('href'))
2550                                         $entry->setAttribute('href',
2551                                                 rewrite_relative_url($site_url, $entry->getAttribute('href')));
2552
2553                                 if ($entry->hasAttribute('src'))
2554                                         if (preg_match('/^image.php\?i=[a-z0-9]+$/', $entry->getAttribute('src')) == 0)
2555                                                 $entry->setAttribute('src',
2556                                                         rewrite_relative_url($site_url, $entry->getAttribute('src')));
2557                         }
2558
2559                         if (strtolower($entry->nodeName) == "a") {
2560                                 $entry->setAttribute("target", "_blank");
2561                         }
2562
2563                         if (strtolower($entry->nodeName) == "img" && !$br_inserted) {
2564                                 $br = $doc->createElement("br");
2565
2566                                 if ($entry->parentNode->nextSibling) {
2567                                         $entry->parentNode->insertBefore($br, $entry->nextSibling);
2568                                         $br_inserted = 1;
2569                                 }
2570
2571                         }
2572                 }
2573
2574                 $node = $doc->getElementsByTagName('body')->item(0);
2575
2576                 // http://tt-rss.org/redmine/issues/357
2577                 return $doc->saveXML($node, LIBXML_NOEMPTYTAG);
2578         }
2579
2580         function check_for_update($link) {
2581                 if (CHECK_FOR_NEW_VERSION && $_SESSION['access_level'] >= 10) {
2582                         $version_url = "http://tt-rss.org/version.php?ver=" . VERSION;
2583
2584                         $version_data = @fetch_file_contents($version_url);
2585
2586                         if ($version_data) {
2587                                 $version_data = json_decode($version_data, true);
2588                                 if ($version_data && $version_data['version']) {
2589
2590                                         if (version_compare(VERSION, $version_data['version']) == -1) {
2591                                                 return $version_data;
2592                                         }
2593                                 }
2594                         }
2595                 }
2596                 return false;
2597         }
2598
2599         function catchupArticlesById($link, $ids, $cmode, $owner_uid = false) {
2600
2601                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2602                 if (count($ids) == 0) return;
2603
2604                 $tmp_ids = array();
2605
2606                 foreach ($ids as $id) {
2607                         array_push($tmp_ids, "ref_id = '$id'");
2608                 }
2609
2610                 $ids_qpart = join(" OR ", $tmp_ids);
2611
2612                 if ($cmode == 0) {
2613                         db_query($link, "UPDATE ttrss_user_entries SET
2614                         unread = false,last_read = NOW()
2615                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2616                 } else if ($cmode == 1) {
2617                         db_query($link, "UPDATE ttrss_user_entries SET
2618                         unread = true
2619                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2620                 } else {
2621                         db_query($link, "UPDATE ttrss_user_entries SET
2622                         unread = NOT unread,last_read = NOW()
2623                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2624                 }
2625
2626                 /* update ccache */
2627
2628                 $result = db_query($link, "SELECT DISTINCT feed_id FROM ttrss_user_entries
2629                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2630
2631                 while ($line = db_fetch_assoc($result)) {
2632                         ccache_update($link, $line["feed_id"], $owner_uid);
2633                 }
2634         }
2635
2636         function get_article_tags($link, $id, $owner_uid = 0, $tag_cache = false) {
2637
2638                 $a_id = db_escape_string($id);
2639
2640                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2641
2642                 $query = "SELECT DISTINCT tag_name,
2643                         owner_uid as owner FROM
2644                         ttrss_tags WHERE post_int_id = (SELECT int_id FROM ttrss_user_entries WHERE
2645                         ref_id = '$a_id' AND owner_uid = '$owner_uid' LIMIT 1) ORDER BY tag_name";
2646
2647                 $obj_id = md5("TAGS:$owner_uid:$id");
2648                 $tags = array();
2649
2650                 /* check cache first */
2651
2652                 if ($tag_cache === false) {
2653                         $result = db_query($link, "SELECT tag_cache FROM ttrss_user_entries
2654                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
2655
2656                         $tag_cache = db_fetch_result($result, 0, "tag_cache");
2657                 }
2658
2659                 if ($tag_cache) {
2660                         $tags = explode(",", $tag_cache);
2661                 } else {
2662
2663                         /* do it the hard way */
2664
2665                         $tmp_result = db_query($link, $query);
2666
2667                         while ($tmp_line = db_fetch_assoc($tmp_result)) {
2668                                 array_push($tags, $tmp_line["tag_name"]);
2669                         }
2670
2671                         /* update the cache */
2672
2673                         $tags_str = db_escape_string(join(",", $tags));
2674
2675                         db_query($link, "UPDATE ttrss_user_entries
2676                                 SET tag_cache = '$tags_str' WHERE ref_id = '$id'
2677                                 AND owner_uid = $owner_uid");
2678                 }
2679
2680                 return $tags;
2681         }
2682
2683         function trim_array($array) {
2684                 $tmp = $array;
2685                 array_walk($tmp, 'trim');
2686                 return $tmp;
2687         }
2688
2689         function tag_is_valid($tag) {
2690                 if ($tag == '') return false;
2691                 if (preg_match("/^[0-9]*$/", $tag)) return false;
2692                 if (mb_strlen($tag) > 250) return false;
2693
2694                 if (function_exists('iconv')) {
2695                         $tag = iconv("utf-8", "utf-8", $tag);
2696                 }
2697
2698                 if (!$tag) return false;
2699
2700                 return true;
2701         }
2702
2703         function render_login_form($link, $form_id = 0) {
2704                 switch ($form_id) {
2705                 case 0:
2706                         require_once "login_form.php";
2707                         break;
2708                 case 1:
2709                         require_once "mobile/login_form.php";
2710                         break;
2711                 }
2712                 exit;
2713         }
2714
2715         // from http://developer.apple.com/internet/safari/faq.html
2716         function no_cache_incantation() {
2717                 header("Expires: Mon, 22 Dec 1980 00:00:00 GMT"); // Happy birthday to me :)
2718                 header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT"); // always modified
2719                 header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0"); // HTTP/1.1
2720                 header("Cache-Control: post-check=0, pre-check=0", false);
2721                 header("Pragma: no-cache"); // HTTP/1.0
2722         }
2723
2724         function format_warning($msg, $id = "") {
2725                 global $link;
2726                 return "<div class=\"warning\" id=\"$id\">
2727                         <img src=\"".theme_image($link, "images/sign_excl.svg")."\">$msg</div>";
2728         }
2729
2730         function format_notice($msg, $id = "") {
2731                 global $link;
2732                 return "<div class=\"notice\" id=\"$id\">
2733                         <img src=\"".theme_image($link, "images/sign_info.svg")."\">$msg</div>";
2734         }
2735
2736         function format_error($msg, $id = "") {
2737                 global $link;
2738                 return "<div class=\"error\" id=\"$id\">
2739                         <img src=\"".theme_image($link, "images/sign_excl.svg")."\">$msg</div>";
2740         }
2741
2742         function print_notice($msg) {
2743                 return print format_notice($msg);
2744         }
2745
2746         function print_warning($msg) {
2747                 return print format_warning($msg);
2748         }
2749
2750         function print_error($msg) {
2751                 return print format_error($msg);
2752         }
2753
2754
2755         function T_sprintf() {
2756                 $args = func_get_args();
2757                 return vsprintf(__(array_shift($args)), $args);
2758         }
2759
2760         function format_inline_player($link, $url, $ctype) {
2761
2762                 $entry = "";
2763
2764                 if (strpos($ctype, "audio/") === 0) {
2765
2766                         if ($_SESSION["hasAudio"] && (strpos($ctype, "ogg") !== false ||
2767                                 strpos($_SERVER['HTTP_USER_AGENT'], "Chrome") !== false ||
2768                                 strpos($_SERVER['HTTP_USER_AGENT'], "Safari") !== false )) {
2769
2770                                 $id = 'AUDIO-' . uniqid();
2771
2772                                 $entry .= "<audio id=\"$id\"\" controls>
2773                                         <source type=\"$ctype\" src=\"$url\"></source>
2774                                         </audio>";
2775
2776                                 $entry .= "<span onclick=\"player(this)\"
2777                                         title=\"".__("Click to play")."\" status=\"0\"
2778                                         class=\"player\" audio-id=\"$id\">".__("Play")."</span>";
2779
2780                         } else {
2781
2782                                 $entry .= "<object type=\"application/x-shockwave-flash\"
2783                                         data=\"lib/button/musicplayer.swf?song_url=$url\"
2784                                         width=\"17\" height=\"17\" style='float : left; margin-right : 5px;'>
2785                                         <param name=\"movie\"
2786                                                 value=\"lib/button/musicplayer.swf?song_url=$url\" />
2787                                         </object>";
2788                         }
2789
2790                         if ($entry) $entry .= "&nbsp;" . basename($url);
2791
2792                         return $entry;
2793
2794                 }
2795
2796                 return "";
2797
2798 /*              $filename = substr($url, strrpos($url, "/")+1);
2799
2800                 $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
2801                         $filename . " (" . $ctype . ")" . "</a>"; */
2802
2803         }
2804
2805         function format_article($link, $id, $mark_as_read = true, $zoom_mode = false, $owner_uid = false) {
2806                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2807
2808                 $rv = array();
2809
2810                 $rv['id'] = $id;
2811
2812                 /* we can figure out feed_id from article id anyway, why do we
2813                  * pass feed_id here? let's ignore the argument :( */
2814
2815                 $result = db_query($link, "SELECT feed_id FROM ttrss_user_entries
2816                         WHERE ref_id = '$id'");
2817
2818                 $feed_id = (int) db_fetch_result($result, 0, "feed_id");
2819
2820                 $rv['feed_id'] = $feed_id;
2821
2822                 //if (!$zoom_mode) { print "<article id='$id'><![CDATA["; };
2823
2824                 $result = db_query($link, "SELECT rtl_content, always_display_enclosures, cache_content FROM ttrss_feeds
2825                         WHERE id = '$feed_id' AND owner_uid = $owner_uid");
2826
2827                 if (db_num_rows($result) == 1) {
2828                         $rtl_content = sql_bool_to_bool(db_fetch_result($result, 0, "rtl_content"));
2829                         $always_display_enclosures = sql_bool_to_bool(db_fetch_result($result, 0, "always_display_enclosures"));
2830                         $cache_content = sql_bool_to_bool(db_fetch_result($result, 0, "cache_content"));
2831                 } else {
2832                         $rtl_content = false;
2833                         $always_display_enclosures = false;
2834                         $cache_content = false;
2835                 }
2836
2837                 if ($rtl_content) {
2838                         $rtl_tag = "dir=\"RTL\"";
2839                         $rtl_class = "RTL";
2840                 } else {
2841                         $rtl_tag = "";
2842                         $rtl_class = "";
2843                 }
2844
2845                 if ($mark_as_read) {
2846                         $result = db_query($link, "UPDATE ttrss_user_entries
2847                                 SET unread = false,last_read = NOW()
2848                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
2849
2850                         ccache_update($link, $feed_id, $owner_uid);
2851                 }
2852
2853                 $result = db_query($link, "SELECT id,title,link,content,feed_id,comments,int_id,
2854                         ".SUBSTRING_FOR_DATE."(updated,1,16) as updated,
2855                         (SELECT site_url FROM ttrss_feeds WHERE id = feed_id) as site_url,
2856                         num_comments,
2857                         tag_cache,
2858                         author,
2859                         orig_feed_id,
2860                         note,
2861                         cached_content
2862                         FROM ttrss_entries,ttrss_user_entries
2863                         WHERE   id = '$id' AND ref_id = id AND owner_uid = $owner_uid");
2864
2865                 if ($result) {
2866
2867                         $line = db_fetch_assoc($result);
2868
2869                         $feed_site_url = $line['site_url'];
2870
2871                         $num_comments = $line["num_comments"];
2872                         $entry_comments = "";
2873
2874                         if ($num_comments > 0) {
2875                                 if ($line["comments"]) {
2876                                         $comments_url = htmlspecialchars($line["comments"]);
2877                                 } else {
2878                                         $comments_url = htmlspecialchars($line["link"]);
2879                                 }
2880                                 $entry_comments = "<a target='_blank' href=\"$comments_url\">$num_comments comments</a>";
2881                         } else {
2882                                 if ($line["comments"] && $line["link"] != $line["comments"]) {
2883                                         $entry_comments = "<a target='_blank' href=\"".htmlspecialchars($line["comments"])."\">comments</a>";
2884                                 }
2885                         }
2886
2887                         if ($zoom_mode) {
2888                                 header("Content-Type: text/html");
2889                                 $rv['content'] .= "<html><head>
2890                                                 <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"/>
2891                                                 <title>Tiny Tiny RSS - ".$line["title"]."</title>
2892                                                 <link rel=\"stylesheet\" type=\"text/css\" href=\"tt-rss.css\">
2893                                         </head><body>";
2894                         }
2895
2896                         $title_escaped = htmlspecialchars($line['title']);
2897
2898                         $rv['content'] .= "<div id=\"PTITLE-FULL-$id\" style=\"display : none\">" .
2899                                 strip_tags($line['title']) . "</div>";
2900
2901                         $rv['content'] .= "<div class=\"postReply\" id=\"POST-$id\">";
2902
2903                         $rv['content'] .= "<div class=\"postHeader\" id=\"POSTHDR-$id\">";
2904
2905                         $entry_author = $line["author"];
2906
2907                         if ($entry_author) {
2908                                 $entry_author = __(" - ") . $entry_author;
2909                         }
2910
2911                         $parsed_updated = make_local_datetime($link, $line["updated"], true,
2912                                 $owner_uid, true);
2913
2914                         $rv['content'] .= "<div class=\"postDate$rtl_class\">$parsed_updated</div>";
2915
2916                         if ($line["link"]) {
2917                                 $rv['content'] .= "<div class='postTitle'><a target='_blank'
2918                                         title=\"".htmlspecialchars($line['title'])."\"
2919                                         href=\"" .
2920                                         htmlspecialchars($line["link"]) . "\">" .
2921                                         $line["title"] .
2922                                         "<span class='author'>$entry_author</span></a></div>";
2923                         } else {
2924                                 $rv['content'] .= "<div class='postTitle'>" . $line["title"] . "$entry_author</div>";
2925                         }
2926
2927                         $tag_cache = $line["tag_cache"];
2928
2929                         if (!$tag_cache)
2930                                 $tags = get_article_tags($link, $id, $owner_uid);
2931                         else
2932                                 $tags = explode(",", $tag_cache);
2933
2934                         $tags_str = format_tags_string($tags, $id);
2935                         $tags_str_full = join(", ", $tags);
2936
2937                         if (!$tags_str_full) $tags_str_full = __("no tags");
2938
2939                         if (!$entry_comments) $entry_comments = "&nbsp;"; # placeholder
2940
2941                         $rv['content'] .= "<div class='postTags' style='float : right'>
2942                                 <img src='".theme_image($link, 'images/tag.png')."'
2943                                 class='tagsPic' alt='Tags' title='Tags'>&nbsp;";
2944
2945                         if (!$zoom_mode) {
2946                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>
2947                                         <a title=\"".__('Edit tags for this article')."\"
2948                                         href=\"#\" onclick=\"editArticleTags($id, $feed_id)\">(+)</a>";
2949
2950                                 $rv['content'] .= "<div dojoType=\"dijit.Tooltip\"
2951                                         id=\"ATSTRTIP-$id\" connectId=\"ATSTR-$id\"
2952                                         position=\"below\">$tags_str_full</div>";
2953
2954                                 global $pluginhost;
2955
2956                                 foreach ($pluginhost->get_hooks($pluginhost::HOOK_ARTICLE_BUTTON) as $p) {
2957                                         $rv['content'] .= $p->hook_article_button($line);
2958                                 }
2959
2960
2961                         } else {
2962                                 $tags_str = strip_tags($tags_str);
2963                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>";
2964                         }
2965                         $rv['content'] .= "</div>";
2966                         $rv['content'] .= "<div clear='both'>$entry_comments</div>";
2967
2968                         if ($line["orig_feed_id"]) {
2969
2970                                 $tmp_result = db_query($link, "SELECT * FROM ttrss_archived_feeds
2971                                         WHERE id = ".$line["orig_feed_id"]);
2972
2973                                 if (db_num_rows($tmp_result) != 0) {
2974
2975                                         $rv['content'] .= "<div clear='both'>";
2976                                         $rv['content'] .= __("Originally from:");
2977
2978                                         $rv['content'] .= "&nbsp;";
2979
2980                                         $tmp_line = db_fetch_assoc($tmp_result);
2981
2982                                         $rv['content'] .= "<a target='_blank'
2983                                                 href=' " . htmlspecialchars($tmp_line['site_url']) . "'>" .
2984                                                 $tmp_line['title'] . "</a>";
2985
2986                                         $rv['content'] .= "&nbsp;";
2987
2988                                         $rv['content'] .= "<a target='_blank' href='" . htmlspecialchars($tmp_line['feed_url']) . "'>";
2989                                         $rv['content'] .= "<img title='".__('Feed URL')."'class='tinyFeedIcon' src='images/pub_set.svg'></a>";
2990
2991                                         $rv['content'] .= "</div>";
2992                                 }
2993                         }
2994
2995                         $rv['content'] .= "</div>";
2996
2997                         $rv['content'] .= "<div id=\"POSTNOTE-$id\">";
2998                                 if ($line['note']) {
2999                                         $rv['content'] .= format_article_note($id, $line['note'], !$zoom_mode);
3000                                 }
3001                         $rv['content'] .= "</div>";
3002
3003                         $rv['content'] .= "<div class=\"postContent\">";
3004
3005                         // N-grams
3006
3007                         if (DB_TYPE == "pgsql" and defined('_NGRAM_TITLE_RELATED_THRESHOLD')) {
3008
3009                                 $ngram_result = db_query($link, "SELECT id,title FROM
3010                                                 ttrss_entries,ttrss_user_entries
3011                                         WHERE ref_id = id AND updated >= NOW() - INTERVAL '7 day'
3012                                                 AND similarity(title, '$title_escaped') >= "._NGRAM_TITLE_RELATED_THRESHOLD."
3013                                                 AND title != '$title_escaped'
3014                                                 AND owner_uid = $owner_uid");
3015
3016                                 if (db_num_rows($ngram_result) > 0) {
3017                                         $rv['content'] .= "<div dojoType=\"dijit.form.DropDownButton\">".
3018                                                 "<span>" . __('Related')."</span>";
3019                                         $rv['content'] .= "<div dojoType=\"dijit.Menu\" style=\"display: none;\">";
3020
3021                                         while ($nline = db_fetch_assoc($ngram_result)) {
3022                                                 $rv['content'] .= "<div onclick=\"hlOpenInNewTab(null,".$nline['id'].")\"
3023                                                         dojoType=\"dijit.MenuItem\">".$nline['title']."</div>";
3024
3025                                         }
3026                                         $rv['content'] .= "</div></div><br/";
3027                                 }
3028                         }
3029
3030                         if ($cache_content && $line["cached_content"] != "") {
3031                                 $line["content"] =& $line["cached_content"];
3032                         }
3033
3034                         $article_content = sanitize($link, $line["content"], false, $owner_uid,
3035                                 $feed_site_url);
3036
3037                         $rv['content'] .= $article_content;
3038
3039                         $rv['content'] .= format_article_enclosures($link, $id,
3040                                 $always_display_enclosures, $article_content);
3041
3042                         $rv['content'] .= "</div>";
3043
3044                         $rv['content'] .= "</div>";
3045
3046                 }
3047
3048                 if ($zoom_mode) {
3049                         $rv['content'] .= "
3050                                 <div style=\"text-align : center\">
3051                                 <button onclick=\"return window.close()\">".
3052                                         __("Close this window")."</button></div>";
3053                         $rv['content'] .= "</body></html>";
3054                 }
3055
3056                 return $rv;
3057
3058         }
3059
3060         function print_checkpoint($n, $s) {
3061                 $ts = getmicrotime();
3062                 echo sprintf("<!-- CP[$n] %.4f seconds -->", $ts - $s);
3063                 return $ts;
3064         }
3065
3066         function sanitize_tag($tag) {
3067                 $tag = trim($tag);
3068
3069                 $tag = mb_strtolower($tag, 'utf-8');
3070
3071                 $tag = preg_replace('/[\'\"\+\>\<]/', "", $tag);
3072
3073 //              $tag = str_replace('"', "", $tag);
3074 //              $tag = str_replace("+", " ", $tag);
3075                 $tag = str_replace("technorati tag: ", "", $tag);
3076
3077                 return $tag;
3078         }
3079
3080         function get_self_url_prefix() {
3081                 if (strrpos(SELF_URL_PATH, "/") === strlen(SELF_URL_PATH)-1) {
3082                         return substr(SELF_URL_PATH, 0, strlen(SELF_URL_PATH)-1);
3083                 } else {
3084                         return SELF_URL_PATH;
3085                 }
3086         }
3087
3088         /**
3089          * Compute the Mozilla Firefox feed adding URL from server HOST and REQUEST_URI.
3090          *
3091          * @return string The Mozilla Firefox feed adding URL.
3092          */
3093         function add_feed_url() {
3094                 //$url_path = ($_SERVER['HTTPS'] != "on" ? 'http://' :  'https://') . $_SERVER["HTTP_HOST"] . parse_url($_SERVER["REQUEST_URI"], PHP_URL_PATH);
3095
3096                 $url_path = get_self_url_prefix() .
3097                         "/public.php?op=subscribe&feed_url=%s";
3098                 return $url_path;
3099         } // function add_feed_url
3100
3101         function encrypt_password($pass, $salt = '', $mode2 = false) {
3102                 if ($salt && $mode2) {
3103                         return "MODE2:" . hash('sha256', $salt . $pass);
3104                 } else if ($salt) {
3105                         return "SHA1X:" . sha1("$salt:$pass");
3106                 } else {
3107                         return "SHA1:" . sha1($pass);
3108                 }
3109         } // function encrypt_password
3110
3111         function load_filters($link, $feed_id, $owner_uid, $action_id = false) {
3112                 $filters = array();
3113
3114                 $cat_id = (int)getFeedCategory($link, $feed_id);
3115
3116                 $result = db_query($link, "SELECT * FROM ttrss_filters2 WHERE
3117                         owner_uid = $owner_uid AND enabled = true");
3118
3119                 $check_cats = join(",", array_merge(
3120                         getParentCategories($link, $cat_id, $owner_uid),
3121                         array($cat_id)));
3122
3123                 while ($line = db_fetch_assoc($result)) {
3124                         $filter_id = $line["id"];
3125
3126                         $result2 = db_query($link, "SELECT
3127                                 r.reg_exp, r.feed_id, r.cat_id, r.cat_filter, t.name AS type_name
3128                                 FROM ttrss_filters2_rules AS r,
3129                                 ttrss_filter_types AS t
3130                                 WHERE
3131                                         (cat_id IS NULL OR cat_id IN ($check_cats)) AND
3132                                         (feed_id IS NULL OR feed_id = '$feed_id') AND
3133                                         filter_type = t.id AND filter_id = '$filter_id'");
3134
3135                         $rules = array();
3136                         $actions = array();
3137
3138                         while ($rule_line = db_fetch_assoc($result2)) {
3139 #                               print_r($rule_line);
3140
3141                                 $rule = array();
3142                                 $rule["reg_exp"] = $rule_line["reg_exp"];
3143                                 $rule["type"] = $rule_line["type_name"];
3144
3145                                 array_push($rules, $rule);
3146                         }
3147
3148                         $result2 = db_query($link, "SELECT a.action_param,t.name AS type_name
3149                                 FROM ttrss_filters2_actions AS a,
3150                                 ttrss_filter_actions AS t
3151                                 WHERE
3152                                         action_id = t.id AND filter_id = '$filter_id'");
3153
3154                         while ($action_line = db_fetch_assoc($result2)) {
3155 #                               print_r($action_line);
3156
3157                                 $action = array();
3158                                 $action["type"] = $action_line["type_name"];
3159                                 $action["param"] = $action_line["action_param"];
3160
3161                                 array_push($actions, $action);
3162                         }
3163
3164
3165                         $filter = array();
3166                         $filter["match_any_rule"] = sql_bool_to_bool($line["match_any_rule"]);
3167                         $filter["rules"] = $rules;
3168                         $filter["actions"] = $actions;
3169
3170                         if (count($rules) > 0 && count($actions) > 0) {
3171                                 array_push($filters, $filter);
3172                         }
3173                 }
3174
3175                 return $filters;
3176         }
3177
3178         function get_score_pic($score) {
3179                 if ($score > 100) {
3180                         return "score_high.png";
3181                 } else if ($score > 0) {
3182                         return "score_half_high.png";
3183                 } else if ($score < -100) {
3184                         return "score_low.png";
3185                 } else if ($score < 0) {
3186                         return "score_half_low.png";
3187                 } else {
3188                         return "score_neutral.png";
3189                 }
3190         }
3191
3192         function feed_has_icon($id) {
3193                 return is_file(ICONS_DIR . "/$id.ico") && filesize(ICONS_DIR . "/$id.ico") > 0;
3194         }
3195
3196         function init_connection($link) {
3197                 if ($link) {
3198
3199                         if (DB_TYPE == "pgsql") {
3200                                 pg_query($link, "set client_encoding = 'UTF-8'");
3201                                 pg_set_client_encoding("UNICODE");
3202                                 pg_query($link, "set datestyle = 'ISO, european'");
3203                                 pg_query($link, "set TIME ZONE 0");
3204                         } else {
3205                                 db_query($link, "SET time_zone = '+0:0'");
3206
3207                                 if (defined('MYSQL_CHARSET') && MYSQL_CHARSET) {
3208                                         db_query($link, "SET NAMES " . MYSQL_CHARSET);
3209                                 }
3210                         }
3211
3212                         global $pluginhost;
3213
3214                         $pluginhost = new PluginHost($link);
3215                         $pluginhost->load(PLUGINS, $pluginhost::KIND_ALL);
3216
3217                         return true;
3218                 } else {
3219                         print "Unable to connect to database:" . db_last_error();
3220                         return false;
3221                 }
3222         }
3223
3224         function format_tags_string($tags, $id) {
3225
3226                 $tags_str = "";
3227                 $tags_nolinks_str = "";
3228
3229                 $num_tags = 0;
3230
3231                 $tag_limit = 6;
3232
3233                 $formatted_tags = array();
3234
3235                 foreach ($tags as $tag) {
3236                         $num_tags++;
3237                         $tag_escaped = str_replace("'", "\\'", $tag);
3238
3239                         if (mb_strlen($tag) > 30) {
3240                                 $tag = truncate_string($tag, 30);
3241                         }
3242
3243                         $tag_str = "<a href=\"javascript:viewfeed('$tag_escaped')\">$tag</a>";
3244
3245                         array_push($formatted_tags, $tag_str);
3246
3247                         $tmp_tags_str = implode(", ", $formatted_tags);
3248
3249                         if ($num_tags == $tag_limit || mb_strlen($tmp_tags_str) > 150) {
3250                                 break;
3251                         }
3252                 }
3253
3254                 $tags_str = implode(", ", $formatted_tags);
3255
3256                 if ($num_tags < count($tags)) {
3257                         $tags_str .= ", &hellip;";
3258                 }
3259
3260                 if ($num_tags == 0) {
3261                         $tags_str = __("no tags");
3262                 }
3263
3264                 return $tags_str;
3265
3266         }
3267
3268         function format_article_labels($labels, $id) {
3269
3270                 $labels_str = "";
3271
3272                 foreach ($labels as $l) {
3273                         $labels_str .= sprintf("<span class='hlLabelRef'
3274                                 style='color : %s; background-color : %s'>%s</span>",
3275                                         $l[2], $l[3], $l[1]);
3276                         }
3277
3278                 return $labels_str;
3279
3280         }
3281
3282         function format_article_note($id, $note, $allow_edit = true) {
3283
3284                 $str = "<div class='articleNote'        onclick=\"editArticleNote($id)\">
3285                         <div class='noteEdit' onclick=\"editArticleNote($id)\">".
3286                         ($allow_edit ? __('(edit note)') : "")."</div>$note</div>";
3287
3288                 return $str;
3289         }
3290
3291         function toggle_collapse_cat($link, $cat_id, $mode) {
3292                 if ($cat_id > 0) {
3293                         $mode = bool_to_sql_bool($mode);
3294
3295                         db_query($link, "UPDATE ttrss_feed_categories SET
3296                                 collapsed = $mode WHERE id = '$cat_id' AND owner_uid = " .
3297                                 $_SESSION["uid"]);
3298                 } else {
3299                         $pref_name = '';
3300
3301                         switch ($cat_id) {
3302                         case -1:
3303                                 $pref_name = '_COLLAPSED_SPECIAL';
3304                                 break;
3305                         case -2:
3306                                 $pref_name = '_COLLAPSED_LABELS';
3307                                 break;
3308                         case 0:
3309                                 $pref_name = '_COLLAPSED_UNCAT';
3310                                 break;
3311                         }
3312
3313                         if ($pref_name) {
3314                                 if ($mode) {
3315                                         set_pref($link, $pref_name, 'true');
3316                                 } else {
3317                                         set_pref($link, $pref_name, 'false');
3318                                 }
3319                         }
3320                 }
3321         }
3322
3323
3324         function get_feed_category($link, $feed_cat, $parent_cat_id = false) {
3325                 if ($parent_cat_id) {
3326                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3327                         $parent_insert = "'$parent_cat_id'";
3328                 } else {
3329                         $parent_qpart = "parent_cat IS NULL";
3330                         $parent_insert = "NULL";
3331                 }
3332
3333                 $result = db_query($link,
3334                         "SELECT id FROM ttrss_feed_categories
3335                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3336
3337                 if (db_num_rows($result) == 0) {
3338                         return false;
3339                 } else {
3340                         return db_fetch_result($result, 0, "id");
3341                 }
3342         }
3343
3344         function add_feed_category($link, $feed_cat, $parent_cat_id = false) {
3345
3346                 if (!$feed_cat) return false;
3347
3348                 db_query($link, "BEGIN");
3349
3350                 if ($parent_cat_id) {
3351                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3352                         $parent_insert = "'$parent_cat_id'";
3353                 } else {
3354                         $parent_qpart = "parent_cat IS NULL";
3355                         $parent_insert = "NULL";
3356                 }
3357
3358                 $result = db_query($link,
3359                         "SELECT id FROM ttrss_feed_categories
3360                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3361
3362                 if (db_num_rows($result) == 0) {
3363
3364                         $result = db_query($link,
3365                                 "INSERT INTO ttrss_feed_categories (owner_uid,title,parent_cat)
3366                                 VALUES ('".$_SESSION["uid"]."', '$feed_cat', $parent_insert)");
3367
3368                         db_query($link, "COMMIT");
3369
3370                         return true;
3371                 }
3372
3373                 return false;
3374         }
3375
3376         function getArticleFeed($link, $id) {
3377                 $result = db_query($link, "SELECT feed_id FROM ttrss_user_entries
3378                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
3379
3380                 if (db_num_rows($result) != 0) {
3381                         return db_fetch_result($result, 0, "feed_id");
3382                 } else {
3383                         return 0;
3384                 }
3385         }
3386
3387         /**
3388          * Fixes incomplete URLs by prepending "http://".
3389          * Also replaces feed:// with http://, and
3390          * prepends a trailing slash if the url is a domain name only.
3391          *
3392          * @param string $url Possibly incomplete URL
3393          *
3394          * @return string Fixed URL.
3395          */
3396         function fix_url($url) {
3397                 if (strpos($url, '://') === false) {
3398                         $url = 'http://' . $url;
3399                 } else if (substr($url, 0, 5) == 'feed:') {
3400                         $url = 'http:' . substr($url, 5);
3401                 }
3402
3403                 //prepend slash if the URL has no slash in it
3404                 // "http://www.example" -> "http://www.example/"
3405                 if (strpos($url, '/', strpos($url, ':') + 3) === false) {
3406                         $url .= '/';
3407                 }
3408
3409                 if ($url != "http:///")
3410                         return $url;
3411                 else
3412                         return '';
3413         }
3414
3415         function validate_feed_url($url) {
3416                 $parts = parse_url($url);
3417
3418                 return ($parts['scheme'] == 'http' || $parts['scheme'] == 'feed' || $parts['scheme'] == 'https');
3419
3420         }
3421
3422         function get_article_enclosures($link, $id) {
3423
3424                 $query = "SELECT * FROM ttrss_enclosures
3425                         WHERE post_id = '$id' AND content_url != ''";
3426
3427                 $rv = array();
3428
3429                 $result = db_query($link, $query);
3430
3431                 if (db_num_rows($result) > 0) {
3432                         while ($line = db_fetch_assoc($result)) {
3433                                 array_push($rv, $line);
3434                         }
3435                 }
3436
3437                 return $rv;
3438         }
3439
3440         function save_email_address($link, $email) {
3441                 // FIXME: implement persistent storage of emails
3442
3443                 if (!$_SESSION['stored_emails'])
3444                         $_SESSION['stored_emails'] = array();
3445
3446                 if (!in_array($email, $_SESSION['stored_emails']))
3447                         array_push($_SESSION['stored_emails'], $email);
3448         }
3449
3450
3451         function get_feed_access_key($link, $feed_id, $is_cat, $owner_uid = false) {
3452
3453                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3454
3455                 $sql_is_cat = bool_to_sql_bool($is_cat);
3456
3457                 $result = db_query($link, "SELECT access_key FROM ttrss_access_keys
3458                         WHERE feed_id = '$feed_id'      AND is_cat = $sql_is_cat
3459                         AND owner_uid = " . $owner_uid);
3460
3461                 if (db_num_rows($result) == 1) {
3462                         return db_fetch_result($result, 0, "access_key");
3463                 } else {
3464                         $key = db_escape_string(sha1(uniqid(rand(), true)));
3465
3466                         $result = db_query($link, "INSERT INTO ttrss_access_keys
3467                                 (access_key, feed_id, is_cat, owner_uid)
3468                                 VALUES ('$key', '$feed_id', $sql_is_cat, '$owner_uid')");
3469
3470                         return $key;
3471                 }
3472                 return false;
3473         }
3474
3475         function get_feeds_from_html($url, $content)
3476         {
3477                 $url     = fix_url($url);
3478                 $baseUrl = substr($url, 0, strrpos($url, '/') + 1);
3479
3480                 libxml_use_internal_errors(true);
3481
3482                 $doc = new DOMDocument();
3483                 $doc->loadHTML($content);
3484                 $xpath = new DOMXPath($doc);
3485                 $entries = $xpath->query('/html/head/link[@rel="alternate"]');
3486                 $feedUrls = array();
3487                 foreach ($entries as $entry) {
3488                         if ($entry->hasAttribute('href')) {
3489                                 $title = $entry->getAttribute('title');
3490                                 if ($title == '') {
3491                                         $title = $entry->getAttribute('type');
3492                                 }
3493                                 $feedUrl = rewrite_relative_url(
3494                                         $baseUrl, $entry->getAttribute('href')
3495                                 );
3496                                 $feedUrls[$feedUrl] = $title;
3497                         }
3498                 }
3499                 return $feedUrls;
3500         }
3501
3502         function is_html($content) {
3503                 return preg_match("/<html|DOCTYPE html/i", substr($content, 0, 20)) !== 0;
3504         }
3505
3506         function url_is_html($url, $login = false, $pass = false) {
3507                 return is_html(fetch_file_contents($url, false, $login, $pass));
3508         }
3509
3510         function print_label_select($link, $name, $value, $attributes = "") {
3511
3512                 $result = db_query($link, "SELECT caption FROM ttrss_labels2
3513                         WHERE owner_uid = '".$_SESSION["uid"]."' ORDER BY caption");
3514
3515                 print "<select default=\"$value\" name=\"" . htmlspecialchars($name) .
3516                         "\" $attributes onchange=\"labelSelectOnChange(this)\" >";
3517
3518                 while ($line = db_fetch_assoc($result)) {
3519
3520                         $issel = ($line["caption"] == $value) ? "selected=\"1\"" : "";
3521
3522                         print "<option value=\"".htmlspecialchars($line["caption"])."\"
3523                                 $issel>" . htmlspecialchars($line["caption"]) . "</option>";
3524
3525                 }
3526
3527 #               print "<option value=\"ADD_LABEL\">" .__("Add label...") . "</option>";
3528
3529                 print "</select>";
3530
3531
3532         }
3533
3534         function format_article_enclosures($link, $id, $always_display_enclosures,
3535                                         $article_content) {
3536
3537                 $result = get_article_enclosures($link, $id);
3538                 $rv = '';
3539
3540                 if (count($result) > 0) {
3541
3542                         $entries_html = array();
3543                         $entries = array();
3544                         $entries_inline = array();
3545
3546                         foreach ($result as $line) {
3547
3548                                 $url = $line["content_url"];
3549                                 $ctype = $line["content_type"];
3550
3551                                 if (!$ctype) $ctype = __("unknown type");
3552
3553                                 $filename = substr($url, strrpos($url, "/")+1);
3554
3555                                 $player = format_inline_player($link, $url, $ctype);
3556
3557                                 if ($player) array_push($entries_inline, $player);
3558
3559 #                               $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
3560 #                                       $filename . " (" . $ctype . ")" . "</a>";
3561
3562                                 $entry = "<div onclick=\"window.open('".htmlspecialchars($url)."')\"
3563                                         dojoType=\"dijit.MenuItem\">$filename ($ctype)</div>";
3564
3565                                 array_push($entries_html, $entry);
3566
3567                                 $entry = array();
3568
3569                                 $entry["type"] = $ctype;
3570                                 $entry["filename"] = $filename;
3571                                 $entry["url"] = $url;
3572
3573                                 array_push($entries, $entry);
3574                         }
3575
3576                         if (!get_pref($link, "STRIP_IMAGES")) {
3577                                 if ($always_display_enclosures ||
3578                                                         !preg_match("/<img/i", $article_content)) {
3579
3580                                         foreach ($entries as $entry) {
3581
3582                                                 if (preg_match("/image/", $entry["type"]) ||
3583                                                                 preg_match("/\.(jpg|png|gif|bmp)/i", $entry["filename"])) {
3584
3585                                                                 $rv .= "<p><img
3586                                                                 alt=\"".htmlspecialchars($entry["filename"])."\"
3587                                                                 src=\"" .htmlspecialchars($entry["url"]) . "\"/></p>";
3588
3589                                                 }
3590                                         }
3591                                 }
3592                         }
3593
3594                         if (count($entries_inline) > 0) {
3595                                 $rv .= "<hr clear='both'/>";
3596                                 foreach ($entries_inline as $entry) { $rv .= $entry; };
3597                                 $rv .= "<hr clear='both'/>";
3598                         }
3599
3600                         $rv .= "<br/><div dojoType=\"dijit.form.DropDownButton\">".
3601                                 "<span>" . __('Attachments')."</span>";
3602                         $rv .= "<div dojoType=\"dijit.Menu\" style=\"display: none;\">";
3603
3604                         foreach ($entries_html as $entry) { $rv .= $entry; };
3605
3606                         $rv .= "</div></div>";
3607                 }
3608
3609                 return $rv;
3610         }
3611
3612         function getLastArticleId($link) {
3613                 $result = db_query($link, "SELECT MAX(ref_id) AS id FROM ttrss_user_entries
3614                         WHERE owner_uid = " . $_SESSION["uid"]);
3615
3616                 if (db_num_rows($result) == 1) {
3617                         return db_fetch_result($result, 0, "id");
3618                 } else {
3619                         return -1;
3620                 }
3621         }
3622
3623         function build_url($parts) {
3624                 return $parts['scheme'] . "://" . $parts['host'] . $parts['path'];
3625         }
3626
3627         /**
3628          * Converts a (possibly) relative URL to a absolute one.
3629          *
3630          * @param string $url     Base URL (i.e. from where the document is)
3631          * @param string $rel_url Possibly relative URL in the document
3632          *
3633          * @return string Absolute URL
3634          */
3635         function rewrite_relative_url($url, $rel_url) {
3636                 if (strpos($rel_url, "magnet:") === 0) {
3637                         return $rel_url;
3638                 } else if (strpos($rel_url, "://") !== false) {
3639                         return $rel_url;
3640                 } else if (strpos($rel_url, "//") === 0) {
3641                         # protocol-relative URL (rare but they exist)
3642                         return $rel_url;
3643                 } else if (strpos($rel_url, "/") === 0)
3644                 {
3645                         $parts = parse_url($url);
3646                         $parts['path'] = $rel_url;
3647
3648                         return build_url($parts);
3649
3650                 } else {
3651                         $parts = parse_url($url);
3652                         if (!isset($parts['path'])) {
3653                                 $parts['path'] = '/';
3654                         }
3655                         $dir = $parts['path'];
3656                         if (substr($dir, -1) !== '/') {
3657                                 $dir = dirname($parts['path']);
3658                                 $dir !== '/' && $dir .= '/';
3659                         }
3660                         $parts['path'] = $dir . $rel_url;
3661
3662                         return build_url($parts);
3663                 }
3664         }
3665
3666         function sphinx_search($query, $offset = 0, $limit = 30) {
3667                 require_once 'lib/sphinxapi.php';
3668
3669                 $sphinxClient = new SphinxClient();
3670
3671                 $sphinxClient->SetServer('localhost', 9312);
3672                 $sphinxClient->SetConnectTimeout(1);
3673
3674                 $sphinxClient->SetFieldWeights(array('title' => 70, 'content' => 30,
3675                         'feed_title' => 20));
3676
3677                 $sphinxClient->SetMatchMode(SPH_MATCH_EXTENDED2);
3678                 $sphinxClient->SetRankingMode(SPH_RANK_PROXIMITY_BM25);
3679                 $sphinxClient->SetLimits($offset, $limit, 1000);
3680                 $sphinxClient->SetArrayResult(false);
3681                 $sphinxClient->SetFilter('owner_uid', array($_SESSION['uid']));
3682
3683                 $result = $sphinxClient->Query($query, SPHINX_INDEX);
3684
3685                 $ids = array();
3686
3687                 if (is_array($result['matches'])) {
3688                         foreach (array_keys($result['matches']) as $int_id) {
3689                                 $ref_id = $result['matches'][$int_id]['attrs']['ref_id'];
3690                                 array_push($ids, $ref_id);
3691                         }
3692                 }
3693
3694                 return $ids;
3695         }
3696
3697         function cleanup_tags($link, $days = 14, $limit = 1000) {
3698
3699                 if (DB_TYPE == "pgsql") {
3700                         $interval_query = "date_updated < NOW() - INTERVAL '$days days'";
3701                 } else if (DB_TYPE == "mysql") {
3702                         $interval_query = "date_updated < DATE_SUB(NOW(), INTERVAL $days DAY)";
3703                 }
3704
3705                 $tags_deleted = 0;
3706
3707                 while ($limit > 0) {
3708                         $limit_part = 500;
3709
3710                         $query = "SELECT ttrss_tags.id AS id
3711                                 FROM ttrss_tags, ttrss_user_entries, ttrss_entries
3712                                 WHERE post_int_id = int_id AND $interval_query AND
3713                                 ref_id = ttrss_entries.id AND tag_cache != '' LIMIT $limit_part";
3714
3715                         $result = db_query($link, $query);
3716
3717                         $ids = array();
3718
3719                         while ($line = db_fetch_assoc($result)) {
3720                                 array_push($ids, $line['id']);
3721                         }
3722
3723                         if (count($ids) > 0) {
3724                                 $ids = join(",", $ids);
3725                                 print ".";
3726
3727                                 $tmp_result = db_query($link, "DELETE FROM ttrss_tags WHERE id IN ($ids)");
3728                                 $tags_deleted += db_affected_rows($link, $tmp_result);
3729                         } else {
3730                                 break;
3731                         }
3732
3733                         $limit -= $limit_part;
3734                 }
3735
3736                 print "\n";
3737
3738                 return $tags_deleted;
3739         }
3740
3741         function print_user_stylesheet($link) {
3742                 $value = get_pref($link, 'USER_STYLESHEET');
3743
3744                 if ($value) {
3745                         print "<style type=\"text/css\">";
3746                         print str_replace("<br/>", "\n", $value);
3747                         print "</style>";
3748                 }
3749
3750         }
3751
3752         function rewrite_urls($html) {
3753                 libxml_use_internal_errors(true);
3754
3755                 $charset_hack = '<head>
3756                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
3757                 </head>';
3758
3759                 $doc = new DOMDocument();
3760                 $doc->loadHTML($charset_hack . $html);
3761                 $xpath = new DOMXPath($doc);
3762
3763                 $entries = $xpath->query('//*/text()');
3764
3765                 foreach ($entries as $entry) {
3766                         if (strstr($entry->wholeText, "://") !== false) {
3767                                 $text = preg_replace("/((?<!=.)((http|https|ftp)+):\/\/[^ ,!]+)/i",
3768                                         "<a target=\"_blank\" href=\"\\1\">\\1</a>", $entry->wholeText);
3769
3770                                 if ($text != $entry->wholeText) {
3771                                         $cdoc = new DOMDocument();
3772                                         $cdoc->loadHTML($charset_hack . $text);
3773
3774
3775                                         foreach ($cdoc->childNodes as $cnode) {
3776                                                 $cnode = $doc->importNode($cnode, true);
3777
3778                                                 if ($cnode) {
3779                                                         $entry->parentNode->insertBefore($cnode);
3780                                                 }
3781                                         }
3782
3783                                         $entry->parentNode->removeChild($entry);
3784
3785                                 }
3786                         }
3787                 }
3788
3789                 $node = $doc->getElementsByTagName('body')->item(0);
3790
3791                 // http://tt-rss.org/forum/viewtopic.php?f=1&t=970
3792                 if ($node)
3793                         return $doc->saveXML($node, LIBXML_NOEMPTYTAG);
3794                 else
3795                         return $html;
3796         }
3797
3798         function filter_to_sql($link, $filter, $owner_uid) {
3799                 $query = array();
3800
3801                 if (DB_TYPE == "pgsql")
3802                         $reg_qpart = "~";
3803                 else
3804                         $reg_qpart = "REGEXP";
3805
3806                 foreach ($filter["rules"] AS $rule) {
3807                         $regexp_valid = preg_match('/' . $rule['reg_exp'] . '/',
3808                                 $rule['reg_exp']) !== FALSE;
3809
3810                         if ($regexp_valid) {
3811
3812                                 $rule['reg_exp'] = db_escape_string($rule['reg_exp']);
3813
3814                                 switch ($rule["type"]) {
3815                                         case "title":
3816                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
3817                                                         $rule['reg_exp'] . "')";
3818                                                 break;
3819                                         case "content":
3820                                                 $qpart = "LOWER(ttrss_entries.content) $reg_qpart LOWER('".
3821                                                         $rule['reg_exp'] . "')";
3822                                                 break;
3823                                         case "both":
3824                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
3825                                                         $rule['reg_exp'] . "') OR LOWER(" .
3826                                                         "ttrss_entries.content) $reg_qpart LOWER('" . $rule['reg_exp'] . "')";
3827                                                 break;
3828                                         case "tag":
3829                                                 $qpart = "LOWER(ttrss_user_entries.tag_cache) $reg_qpart LOWER('".
3830                                                         $rule['reg_exp'] . "')";
3831                                                 break;
3832                                         case "link":
3833                                                 $qpart = "LOWER(ttrss_entries.link) $reg_qpart LOWER('".
3834                                                         $rule['reg_exp'] . "')";
3835                                                 break;
3836                                         case "author":
3837                                                 $qpart = "LOWER(ttrss_entries.author) $reg_qpart LOWER('".
3838                                                         $rule['reg_exp'] . "')";
3839                                                 break;
3840                                 }
3841
3842                                 if (isset($rule["feed_id"]) && $rule["feed_id"] > 0) {
3843                                         $qpart .= " AND feed_id = " . db_escape_string($rule["feed_id"]);
3844                                 }
3845
3846                                 if (isset($rule["cat_id"])) {
3847
3848                                         if ($rule["cat_id"] > 0) {
3849                                                 $children = getChildCategories($link, $rule["cat_id"], $owner_uid);
3850                                                 array_push($children, $rule["cat_id"]);
3851
3852                                                 $children = join(",", $children);
3853
3854                                                 $cat_qpart = "cat_id IN ($children)";
3855                                         } else {
3856                                                 $cat_qpart = "cat_id IS NULL";
3857                                         }
3858
3859                                         $qpart .= " AND $cat_qpart";
3860                                 }
3861
3862                                 array_push($query, "($qpart)");
3863
3864                         }
3865                 }
3866
3867                 if (count($query) > 0) {
3868                         return "(" . join($filter["match_any_rule"] ? "OR" : "AND", $query) . ")";
3869                 } else {
3870                         return "(false)";
3871                 }
3872         }
3873
3874         if (!function_exists('gzdecode')) {
3875                 function gzdecode($string) { // no support for 2nd argument
3876                         return file_get_contents('compress.zlib://data:who/cares;base64,'.
3877                                 base64_encode($string));
3878                 }
3879         }
3880
3881         function get_random_bytes($length) {
3882                 if (function_exists('openssl_random_pseudo_bytes')) {
3883                         return openssl_random_pseudo_bytes($length);
3884                 } else {
3885                         $output = "";
3886
3887                         for ($i = 0; $i < $length; $i++)
3888                                 $output .= chr(mt_rand(0, 255));
3889
3890                         return $output;
3891                 }
3892         }
3893
3894         function read_stdin() {
3895                 $fp = fopen("php://stdin", "r");
3896
3897                 if ($fp) {
3898                         $line = trim(fgets($fp));
3899                         fclose($fp);
3900                         return $line;
3901                 }
3902
3903                 return null;
3904         }
3905
3906         function tmpdirname($path, $prefix) {
3907                 // Use PHP's tmpfile function to create a temporary
3908                 // directory name. Delete the file and keep the name.
3909                 $tempname = tempnam($path,$prefix);
3910                 if (!$tempname)
3911                         return false;
3912
3913                 if (!unlink($tempname))
3914                         return false;
3915
3916        return $tempname;
3917         }
3918
3919         function getFeedCategory($link, $feed) {
3920                 $result = db_query($link, "SELECT cat_id FROM ttrss_feeds
3921                         WHERE id = '$feed'");
3922
3923                 if (db_num_rows($result) > 0) {
3924                         return db_fetch_result($result, 0, "cat_id");
3925                 } else {
3926                         return false;
3927                 }
3928
3929         }
3930
3931         function implements_interface($class, $interface) {
3932                 return in_array($interface, class_implements($class));
3933         }
3934
3935 ?>