]> git.wh0rd.org - tt-rss.git/blob - include/functions.php
git.wh0rd.org / tt-rss.git / blob
? search:


8acea8ef49e652eda2c24f0a79c7dd8a8be7e8d9
[tt-rss.git] / include / functions.php
1 <?php
2 define('EXPECTED_CONFIG_VERSION', 26);
3 define('SCHEMA_VERSION', 134);
4
5 define('LABEL_BASE_INDEX', -1024);
6 define('PLUGIN_FEED_BASE_INDEX', -128);
7
8 define('COOKIE_LIFETIME_LONG', 86400*365);
9
10 $fetch_last_error = false;
11 $fetch_last_error_code = false;
12 $fetch_last_content_type = false;
13 $fetch_last_error_content = false; // curl only for the time being
14 $fetch_effective_url = false;
15 $fetch_curl_used = false;
16 $suppress_debugging = false;
17
18 libxml_disable_entity_loader(true);
19
20 // separate test because this is included before sanity checks
21 if (function_exists("mb_internal_encoding")) mb_internal_encoding("UTF-8");
22
23 date_default_timezone_set('UTC');
24 if (defined('E_DEPRECATED')) {
25 error_reporting(E_ALL & ~E_NOTICE & ~E_DEPRECATED);
26 } else {
27 error_reporting(E_ALL & ~E_NOTICE);
28 }
29
30 require_once 'config.php';
31
32 /**
33 * Define a constant if not already defined
34 */
35 function define_default($name, $value) {
36 defined($name) or define($name, $value);
37 }
38
39 /* Some tunables you can override in config.php using define(): */
40
41 define_default('FEED_FETCH_TIMEOUT', 45);
42 // How may seconds to wait for response when requesting feed from a site
43 define_default('FEED_FETCH_NO_CACHE_TIMEOUT', 15);
44 // How may seconds to wait for response when requesting feed from a
45 // site when that feed wasn't cached before
46 define_default('FILE_FETCH_TIMEOUT', 45);
47 // Default timeout when fetching files from remote sites
48 define_default('FILE_FETCH_CONNECT_TIMEOUT', 15);
49 // How many seconds to wait for initial response from website when
50 // fetching files from remote sites
51 define_default('DAEMON_UPDATE_LOGIN_LIMIT', 30);
52 // stop updating feeds if users haven't logged in for X days
53 define_default('DAEMON_FEED_LIMIT', 500);
54 // feed limit for one update batch
55 define_default('DAEMON_SLEEP_INTERVAL', 120);
56 // default sleep interval between feed updates (sec)
57 define_default('MIN_CACHE_FILE_SIZE', 1024);
58 // do not cache files smaller than that (bytes)
59 define_default('MAX_CACHE_FILE_SIZE', 64*1024*1024);
60 // do not cache files larger than that (bytes)
61 define_default('MAX_DOWNLOAD_FILE_SIZE', 16*1024*1024);
62 // do not download general files larger than that (bytes)
63 define_default('CACHE_MAX_DAYS', 7);
64 // max age in days for various automatically cached (temporary) files
65 define_default('MAX_CONDITIONAL_INTERVAL', 3600*12);
66 // max interval between forced unconditional updates for servers
67 // not complying with http if-modified-since (seconds)
68
69 /* tunables end here */
70
71 if (DB_TYPE == "pgsql") {
72 define('SUBSTRING_FOR_DATE', 'SUBSTRING_FOR_DATE');
73 } else {
74 define('SUBSTRING_FOR_DATE', 'SUBSTRING');
75 }
76
77 /**
78 * Return available translations names.
79 *
80 * @access public
81 * @return array A array of available translations.
82 */
83 function get_translations() {
84 $tr = array(
85 "auto" => "Detect automatically",
86 "ar_SA" => "العربيّة (Arabic)",
87 "bg_BG" => "Bulgarian",
88 "da_DA" => "Dansk",
89 "ca_CA" => "Català",
90 "cs_CZ" => "Česky",
91 "en_US" => "English",
92 "el_GR" => "Ελληνικά",
93 "es_ES" => "Español (España)",
94 "es_LA" => "Español",
95 "de_DE" => "Deutsch",
96 "fr_FR" => "Français",
97 "hu_HU" => "Magyar (Hungarian)",
98 "it_IT" => "Italiano",
99 "ja_JP" => "日本語 (Japanese)",
100 "lv_LV" => "Latviešu",
101 "nb_NO" => "Norwegian bokmål",
102 "nl_NL" => "Dutch",
103 "pl_PL" => "Polski",
104 "ru_RU" => "Русский",
105 "pt_BR" => "Portuguese/Brazil",
106 "pt_PT" => "Portuguese/Portugal",
107 "zh_CN" => "Simplified Chinese",
108 "zh_TW" => "Traditional Chinese",
109 "sv_SE" => "Svenska",
110 "fi_FI" => "Suomi",
111 "tr_TR" => "Türkçe");
112
113 return $tr;
114 }
115
116 require_once "lib/accept-to-gettext.php";
117 require_once "lib/gettext/gettext.inc";
118
119 function startup_gettext() {
120
121 # Get locale from Accept-Language header
122 $lang = al2gt(array_keys(get_translations()), "text/html");
123
124 if (defined('_TRANSLATION_OVERRIDE_DEFAULT')) {
125 $lang = _TRANSLATION_OVERRIDE_DEFAULT;
126 }
127
128 if ($_SESSION["uid"] && get_schema_version() >= 120) {
129 $pref_lang = get_pref("USER_LANGUAGE", $_SESSION["uid"]);
130
131 if ($pref_lang && $pref_lang != 'auto') {
132 $lang = $pref_lang;
133 }
134 }
135
136 if ($lang) {
137 if (defined('LC_MESSAGES')) {
138 _setlocale(LC_MESSAGES, $lang);
139 } else if (defined('LC_ALL')) {
140 _setlocale(LC_ALL, $lang);
141 }
142
143 _bindtextdomain("messages", "locale");
144
145 _textdomain("messages");
146 _bind_textdomain_codeset("messages", "UTF-8");
147 }
148 }
149
150 require_once 'db-prefs.php';
151 require_once 'version.php';
152 require_once 'controls.php';
153
154 define('SELF_USER_AGENT', 'Tiny Tiny RSS/' . VERSION . ' (http://tt-rss.org/)');
155 ini_set('user_agent', SELF_USER_AGENT);
156
157 $schema_version = false;
158
159 function _debug_suppress($suppress) {
160 global $suppress_debugging;
161
162 $suppress_debugging = $suppress;
163 }
164
165 /**
166 * Print a timestamped debug message.
167 *
168 * @param string $msg The debug message.
169 * @return void
170 */
171 function _debug($msg, $show = true) {
172 global $suppress_debugging;
173
174 //echo "[$suppress_debugging] $msg $show\n";
175
176 if ($suppress_debugging) return false;
177
178 $ts = strftime("%H:%M:%S", time());
179 if (function_exists('posix_getpid')) {
180 $ts = "$ts/" . posix_getpid();
181 }
182
183 if ($show && !(defined('QUIET') && QUIET)) {
184 print "[$ts] $msg\n";
185 }
186
187 if (defined('LOGFILE')) {
188 $fp = fopen(LOGFILE, 'a+');
189
190 if ($fp) {
191 $locked = false;
192
193 if (function_exists("flock")) {
194 $tries = 0;
195
196 // try to lock logfile for writing
197 while ($tries < 5 && !$locked = flock($fp, LOCK_EX | LOCK_NB)) {
198 sleep(1);
199 ++$tries;
200 }
201
202 if (!$locked) {
203 fclose($fp);
204 return;
205 }
206 }
207
208 fputs($fp, "[$ts] $msg\n");
209
210 if (function_exists("flock")) {
211 flock($fp, LOCK_UN);
212 }
213
214 fclose($fp);
215 }
216 }
217
218 } // function _debug
219
220 /**
221 * Purge a feed old posts.
222 *
223 * @param mixed $link A database connection.
224 * @param mixed $feed_id The id of the purged feed.
225 * @param mixed $purge_interval Olderness of purged posts.
226 * @param boolean $debug Set to True to enable the debug. False by default.
227 * @access public
228 * @return void
229 */
230 function purge_feed($feed_id, $purge_interval, $debug = false) {
231
232 if (!$purge_interval) $purge_interval = feed_purge_interval($feed_id);
233
234 $pdo = Db::pdo();
235
236 $sth = $pdo->prepare("SELECT owner_uid FROM ttrss_feeds WHERE id = ?");
237 $sth->execute([$feed_id]);
238
239 $owner_uid = false;
240
241 if ($row = $sth->fetch()) {
242 $owner_uid = $row["owner_uid"];
243 }
244
245 if ($purge_interval == -1 || !$purge_interval) {
246 if ($owner_uid) {
247 CCache::update($feed_id, $owner_uid);
248 }
249 return;
250 }
251
252 if (!$owner_uid) return;
253
254 if (FORCE_ARTICLE_PURGE == 0) {
255 $purge_unread = get_pref("PURGE_UNREAD_ARTICLES",
256 $owner_uid, false);
257 } else {
258 $purge_unread = true;
259 $purge_interval = FORCE_ARTICLE_PURGE;
260 }
261
262 if (!$purge_unread)
263 $query_limit = " unread = false AND ";
264 else
265 $query_limit = "";
266
267 $purge_interval = (int) $purge_interval;
268
269 if (DB_TYPE == "pgsql") {
270 $sth = $pdo->prepare("DELETE FROM ttrss_user_entries
271 USING ttrss_entries
272 WHERE ttrss_entries.id = ref_id AND
273 marked = false AND
274 feed_id = ? AND
275 $query_limit
276 ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
277 $sth->execute([$feed_id]);
278
279 } else {
280 $sth = $pdo->prepare("DELETE FROM ttrss_user_entries
281 USING ttrss_user_entries, ttrss_entries
282 WHERE ttrss_entries.id = ref_id AND
283 marked = false AND
284 feed_id = ? AND
285 $query_limit
286 ttrss_entries.date_updated < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)");
287 $sth->execute([$feed_id]);
288
289 }
290
291 $rows = $sth->rowCount();
292
293 CCache::update($feed_id, $owner_uid);
294
295 if ($debug) {
296 _debug("Purged feed $feed_id ($purge_interval): deleted $rows articles");
297 }
298
299 return $rows;
300 } // function purge_feed
301
302 function feed_purge_interval($feed_id) {
303
304 $pdo = DB::pdo();
305
306 $sth = $pdo->prepare("SELECT purge_interval, owner_uid FROM ttrss_feeds
307 WHERE id = ?");
308 $sth->execute([$feed_id]);
309
310 if ($row = $sth->fetch()) {
311 $purge_interval = $row["purge_interval"];
312 $owner_uid = $row["owner_uid"];
313
314 if ($purge_interval == 0) $purge_interval = get_pref(
315 'PURGE_OLD_DAYS', $owner_uid);
316
317 return $purge_interval;
318
319 } else {
320 return -1;
321 }
322 }
323
324 // TODO: max_size currently only works for CURL transfers
325 // TODO: multiple-argument way is deprecated, first parameter is a hash now
326 function fetch_file_contents($options /* previously: 0: $url , 1: $type = false, 2: $login = false, 3: $pass = false,
327 4: $post_query = false, 5: $timeout = false, 6: $timestamp = 0, 7: $useragent = false*/) {
328
329 global $fetch_last_error;
330 global $fetch_last_error_code;
331 global $fetch_last_error_content;
332 global $fetch_last_content_type;
333 global $fetch_last_modified;
334 global $fetch_effective_url;
335 global $fetch_curl_used;
336
337 $fetch_last_error = false;
338 $fetch_last_error_code = -1;
339 $fetch_last_error_content = "";
340 $fetch_last_content_type = "";
341 $fetch_curl_used = false;
342 $fetch_last_modified = "";
343 $fetch_effective_url = "";
344
345 if (!is_array($options)) {
346
347 // falling back on compatibility shim
348 $option_names = [ "url", "type", "login", "pass", "post_query", "timeout", "last_modified", "useragent" ];
349 $tmp = [];
350
351 for ($i = 0; $i < func_num_args(); $i++) {
352 $tmp[$option_names[$i]] = func_get_arg($i);
353 }
354
355 $options = $tmp;
356
357 /*$options = array(
358 "url" => func_get_arg(0),
359 "type" => @func_get_arg(1),
360 "login" => @func_get_arg(2),
361 "pass" => @func_get_arg(3),
362 "post_query" => @func_get_arg(4),
363 "timeout" => @func_get_arg(5),
364 "timestamp" => @func_get_arg(6),
365 "useragent" => @func_get_arg(7)
366 ); */
367 }
368
369 $url = $options["url"];
370 $type = isset($options["type"]) ? $options["type"] : false;
371 $login = isset($options["login"]) ? $options["login"] : false;
372 $pass = isset($options["pass"]) ? $options["pass"] : false;
373 $post_query = isset($options["post_query"]) ? $options["post_query"] : false;
374 $timeout = isset($options["timeout"]) ? $options["timeout"] : false;
375 $last_modified = isset($options["last_modified"]) ? $options["last_modified"] : "";
376 $useragent = isset($options["useragent"]) ? $options["useragent"] : false;
377 $followlocation = isset($options["followlocation"]) ? $options["followlocation"] : true;
378 $max_size = isset($options["max_size"]) ? $options["max_size"] : MAX_DOWNLOAD_FILE_SIZE; // in bytes
379 $http_accept = isset($options["http_accept"]) ? $options["http_accept"] : false;
380
381 $url = ltrim($url, ' ');
382 $url = str_replace(' ', '%20', $url);
383
384 if (strpos($url, "//") === 0)
385 $url = 'http:' . $url;
386
387 if (!defined('NO_CURL') && function_exists('curl_init') && !ini_get("open_basedir")) {
388
389 $fetch_curl_used = true;
390
391 $ch = curl_init($url);
392
393 $curl_http_headers = [];
394
395 if ($last_modified && !$post_query)
396 array_push($curl_http_headers, "If-Modified-Since: $last_modified");
397
398 if ($http_accept)
399 array_push($curl_http_headers, "Accept: " . $http_accept);
400
401 if (count($curl_http_headers) > 0)
402 curl_setopt($ch, CURLOPT_HTTPHEADER, $curl_http_headers);
403
404 curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, $timeout ? $timeout : FILE_FETCH_CONNECT_TIMEOUT);
405 curl_setopt($ch, CURLOPT_TIMEOUT, $timeout ? $timeout : FILE_FETCH_TIMEOUT);
406 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, !ini_get("open_basedir") && $followlocation);
407 curl_setopt($ch, CURLOPT_MAXREDIRS, 20);
408 curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
409 curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
410 curl_setopt($ch, CURLOPT_HEADER, true);
411 curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_ANY);
412 curl_setopt($ch, CURLOPT_USERAGENT, $useragent ? $useragent :
413 SELF_USER_AGENT);
414 curl_setopt($ch, CURLOPT_ENCODING, "");
415 //curl_setopt($ch, CURLOPT_REFERER, $url);
416
417 if ($max_size) {
418 curl_setopt($ch, CURLOPT_NOPROGRESS, false);
419 curl_setopt($ch, CURLOPT_BUFFERSIZE, 16384); // needed to get 5 arguments in progress function?
420
421 // holy shit closures in php
422 // download & upload are *expected* sizes respectively, could be zero
423 curl_setopt($ch, CURLOPT_PROGRESSFUNCTION, function($curl_handle, $download_size, $downloaded, $upload_size, $uploaded) use( &$max_size) {
424 //_debug("[curl progressfunction] $downloaded $max_size");
425
426 return ($downloaded > $max_size) ? 1 : 0; // if max size is set, abort when exceeding it
427 });
428
429 }
430
431 if (!ini_get("open_basedir")) {
432 curl_setopt($ch, CURLOPT_COOKIEJAR, "/dev/null");
433 }
434
435 if (defined('_HTTP_PROXY')) {
436 curl_setopt($ch, CURLOPT_PROXY, _HTTP_PROXY);
437 }
438
439 if ($post_query) {
440 curl_setopt($ch, CURLOPT_POST, true);
441 curl_setopt($ch, CURLOPT_POSTFIELDS, $post_query);
442 }
443
444 if ($login && $pass)
445 curl_setopt($ch, CURLOPT_USERPWD, "$login:$pass");
446
447 $ret = @curl_exec($ch);
448
449 $headers_length = curl_getinfo($ch, CURLINFO_HEADER_SIZE);
450 $headers = explode("\r\n", substr($ret, 0, $headers_length));
451 $contents = substr($ret, $headers_length);
452
453 foreach ($headers as $header) {
454 if (strstr($header, ": ") !== FALSE) {
455 list ($key, $value) = explode(": ", $header);
456
457 if (strtolower($key) == "last-modified") {
458 $fetch_last_modified = $value;
459 }
460 }
461
462 if (substr(strtolower($header), 0, 7) == 'http/1.') {
463 $fetch_last_error_code = (int) substr($header, 9, 3);
464 $fetch_last_error = $header;
465 }
466 }
467
468 if (curl_errno($ch) === 23 || curl_errno($ch) === 61) {
469 curl_setopt($ch, CURLOPT_ENCODING, 'none');
470 $contents = @curl_exec($ch);
471 }
472
473 $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
474 $fetch_last_content_type = curl_getinfo($ch, CURLINFO_CONTENT_TYPE);
475
476 $fetch_effective_url = curl_getinfo($ch, CURLINFO_EFFECTIVE_URL);
477
478 $fetch_last_error_code = $http_code;
479
480 if ($http_code != 200 || $type && strpos($fetch_last_content_type, "$type") === false) {
481
482 if (curl_errno($ch) != 0) {
483 $fetch_last_error .= "; " . curl_errno($ch) . " " . curl_error($ch);
484 }
485
486 $fetch_last_error_content = $contents;
487 curl_close($ch);
488 return false;
489 }
490
491 if (!$contents) {
492 $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
493 curl_close($ch);
494 return false;
495 }
496
497 curl_close($ch);
498
499 return $contents;
500 } else {
501
502 $fetch_curl_used = false;
503
504 if ($login && $pass){
505 $url_parts = array();
506
507 preg_match("/(^[^:]*):\/\/(.*)/", $url, $url_parts);
508
509 $pass = urlencode($pass);
510
511 if ($url_parts[1] && $url_parts[2]) {
512 $url = $url_parts[1] . "://$login:$pass@" . $url_parts[2];
513 }
514 }
515
516 // TODO: should this support POST requests or not? idk
517
518 $context_options = array(
519 'http' => array(
520 'header' => array(
521 'Connection: close'
522 ),
523 'method' => 'GET',
524 'ignore_errors' => true,
525 'timeout' => $timeout ? $timeout : FILE_FETCH_TIMEOUT,
526 'protocol_version'=> 1.1)
527 );
528
529 if (!$post_query && $last_modified)
530 array_push($context_options['http']['header'], "If-Modified-Since: $last_modified");
531
532 if ($http_accept)
533 array_push($context_options['http']['header'], "Accept: $http_accept");
534
535 if (defined('_HTTP_PROXY')) {
536 $context_options['http']['request_fulluri'] = true;
537 $context_options['http']['proxy'] = _HTTP_PROXY;
538 }
539
540 $context = stream_context_create($context_options);
541
542 $old_error = error_get_last();
543
544 $fetch_effective_url = $url;
545
546 $data = @file_get_contents($url, false, $context);
547
548 if (isset($http_response_header) && is_array($http_response_header)) {
549 foreach ($http_response_header as $header) {
550 if (strstr($header, ": ") !== FALSE) {
551 list ($key, $value) = explode(": ", $header);
552
553 $key = strtolower($key);
554
555 if ($key == 'content-type') {
556 $fetch_last_content_type = $value;
557 // don't abort here b/c there might be more than one
558 // e.g. if we were being redirected -- last one is the right one
559 } else if ($key == 'last-modified') {
560 $fetch_last_modified = $value;
561 } else if ($key == 'location') {
562 $fetch_effective_url = $value;
563 }
564 }
565
566 if (substr(strtolower($header), 0, 7) == 'http/1.') {
567 $fetch_last_error_code = (int) substr($header, 9, 3);
568 $fetch_last_error = $header;
569 }
570 }
571 }
572
573 if ($fetch_last_error_code != 200) {
574 $error = error_get_last();
575
576 if ($error['message'] != $old_error['message']) {
577 $fetch_last_error .= "; " . $error["message"];
578 }
579
580 $fetch_last_error_content = $data;
581
582 return false;
583 }
584 return $data;
585 }
586
587 }
588
589 /**
590 * Try to determine the favicon URL for a feed.
591 * adapted from wordpress favicon plugin by Jeff Minard (http://thecodepro.com/)
592 * http://dev.wp-plugins.org/file/favatars/trunk/favatars.php
593 *
594 * @param string $url A feed or page URL
595 * @access public
596 * @return mixed The favicon URL, or false if none was found.
597 */
598 function get_favicon_url($url) {
599
600 $favicon_url = false;
601
602 if ($html = @fetch_file_contents($url)) {
603
604 libxml_use_internal_errors(true);
605
606 $doc = new DOMDocument();
607 $doc->loadHTML($html);
608 $xpath = new DOMXPath($doc);
609
610 $base = $xpath->query('/html/head/base[@href]');
611 foreach ($base as $b) {
612 $url = rewrite_relative_url($url, $b->getAttribute("href"));
613 break;
614 }
615
616 $entries = $xpath->query('/html/head/link[@rel="shortcut icon" or @rel="icon"]');
617 if (count($entries) > 0) {
618 foreach ($entries as $entry) {
619 $favicon_url = rewrite_relative_url($url, $entry->getAttribute("href"));
620 break;
621 }
622 }
623 }
624
625 if (!$favicon_url)
626 $favicon_url = rewrite_relative_url($url, "/favicon.ico");
627
628 return $favicon_url;
629 } // function get_favicon_url
630
631 function initialize_user_prefs($uid, $profile = false) {
632
633 if (get_schema_version() < 63) $profile_qpart = "";
634
635 $pdo = DB::pdo();
636 $in_nested_tr = false;
637
638 try {
639 $pdo->beginTransaction();
640 } catch (Exception $e) {
641 $in_nested_tr = true;
642 }
643
644 $sth = $pdo->query("SELECT pref_name,def_value FROM ttrss_prefs");
645
646 $profile = $profile ? $profile : null;
647
648 $u_sth = $pdo->prepare("SELECT pref_name
649 FROM ttrss_user_prefs WHERE owner_uid = :uid AND
650 (profile = :profile OR (:profile IS NULL AND profile IS NULL))");
651 $u_sth->execute([':uid' => $uid, ':profile' => $profile]);
652
653 $active_prefs = array();
654
655 while ($line = $u_sth->fetch()) {
656 array_push($active_prefs, $line["pref_name"]);
657 }
658
659 while ($line = $sth->fetch()) {
660 if (array_search($line["pref_name"], $active_prefs) === FALSE) {
661 // print "adding " . $line["pref_name"] . "<br>";
662
663 if (get_schema_version() < 63) {
664 $i_sth = $pdo->prepare("INSERT INTO ttrss_user_prefs
665 (owner_uid,pref_name,value) VALUES
666 (?, ?, ?)");
667 $i_sth->execute([$uid, $line["pref_name"], $line["def_value"]]);
668
669 } else {
670 $i_sth = $pdo->prepare("INSERT INTO ttrss_user_prefs
671 (owner_uid,pref_name,value, profile) VALUES
672 (?, ?, ?, ?)");
673 $i_sth->execute([$uid, $line["pref_name"], $line["def_value"], $profile]);
674 }
675
676 }
677 }
678
679 if (!$in_nested_tr) $pdo->commit();
680
681 }
682
683 function get_ssl_certificate_id() {
684 if ($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"]) {
685 return sha1($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"] .
686 $_SERVER["REDIRECT_SSL_CLIENT_V_START"] .
687 $_SERVER["REDIRECT_SSL_CLIENT_V_END"] .
688 $_SERVER["REDIRECT_SSL_CLIENT_S_DN"]);
689 }
690 if ($_SERVER["SSL_CLIENT_M_SERIAL"]) {
691 return sha1($_SERVER["SSL_CLIENT_M_SERIAL"] .
692 $_SERVER["SSL_CLIENT_V_START"] .
693 $_SERVER["SSL_CLIENT_V_END"] .
694 $_SERVER["SSL_CLIENT_S_DN"]);
695 }
696 return "";
697 }
698
699 function authenticate_user($login, $password, $check_only = false) {
700
701 if (!SINGLE_USER_MODE) {
702 $user_id = false;
703
704 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_AUTH_USER) as $plugin) {
705
706 $user_id = (int) $plugin->authenticate($login, $password);
707
708 if ($user_id) {
709 $_SESSION["auth_module"] = strtolower(get_class($plugin));
710 break;
711 }
712 }
713
714 if ($user_id && !$check_only) {
715 @session_start();
716
717 $_SESSION["uid"] = $user_id;
718 $_SESSION["version"] = VERSION_STATIC;
719
720 $pdo = DB::pdo();
721 $sth = $pdo->prepare("SELECT login,access_level,pwd_hash FROM ttrss_users
722 WHERE id = ?");
723 $sth->execute([$user_id]);
724 $row = $sth->fetch();
725
726 $_SESSION["name"] = $row["login"];
727 $_SESSION["access_level"] = $row["access_level"];
728 $_SESSION["csrf_token"] = uniqid_short();
729
730 $usth = $pdo->prepare("UPDATE ttrss_users SET last_login = NOW() WHERE id = ?");
731 $usth->execute([$user_id]);
732
733 $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
734 $_SESSION["user_agent"] = sha1($_SERVER['HTTP_USER_AGENT']);
735 $_SESSION["pwd_hash"] = $row["pwd_hash"];
736
737 $_SESSION["last_version_check"] = time();
738
739 initialize_user_prefs($_SESSION["uid"]);
740
741 return true;
742 }
743
744 return false;
745
746 } else {
747
748 $_SESSION["uid"] = 1;
749 $_SESSION["name"] = "admin";
750 $_SESSION["access_level"] = 10;
751
752 $_SESSION["hide_hello"] = true;
753 $_SESSION["hide_logout"] = true;
754
755 $_SESSION["auth_module"] = false;
756
757 if (!$_SESSION["csrf_token"]) {
758 $_SESSION["csrf_token"] = uniqid_short();
759 }
760
761 $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
762
763 initialize_user_prefs($_SESSION["uid"]);
764
765 return true;
766 }
767 }
768
769 // this is used for user http parameters unless HTML code is actually needed
770 function clean($param) {
771 if (is_array($param)) {
772 return array_map("strip_tags", $param);
773 } else if (is_string($param)) {
774 return strip_tags($param);
775 } else {
776 return $param;
777 }
778 }
779
780 function make_password($length = 8) {
781
782 $password = "";
783 $possible = "0123456789abcdfghjkmnpqrstvwxyzABCDFGHJKMNPQRSTVWXYZ";
784
785 $i = 0;
786
787 while ($i < $length) {
788 $char = substr($possible, mt_rand(0, strlen($possible)-1), 1);
789
790 if (!strstr($password, $char)) {
791 $password .= $char;
792 $i++;
793 }
794 }
795 return $password;
796 }
797
798 // this is called after user is created to initialize default feeds, labels
799 // or whatever else
800
801 // user preferences are checked on every login, not here
802
803 function initialize_user($uid) {
804
805 $pdo = DB::pdo();
806
807 $sth = $pdo->prepare("insert into ttrss_feeds (owner_uid,title,feed_url)
808 values (?, 'Tiny Tiny RSS: Forum',
809 'http://tt-rss.org/forum/rss.php')");
810 $sth->execute([$uid]);
811 }
812
813 function logout_user() {
814 session_destroy();
815 if (isset($_COOKIE[session_name()])) {
816 setcookie(session_name(), '', time()-42000, '/');
817 }
818 }
819
820 function validate_csrf($csrf_token) {
821 return $csrf_token == $_SESSION['csrf_token'];
822 }
823
824 function load_user_plugins($owner_uid, $pluginhost = false) {
825
826 if (!$pluginhost) $pluginhost = PluginHost::getInstance();
827
828 if ($owner_uid && SCHEMA_VERSION >= 100) {
829 $plugins = get_pref("_ENABLED_PLUGINS", $owner_uid);
830
831 $pluginhost->load($plugins, PluginHost::KIND_USER, $owner_uid);
832
833 if (get_schema_version() > 100) {
834 $pluginhost->load_data();
835 }
836 }
837 }
838
839 function login_sequence() {
840 $pdo = Db::pdo();
841
842 if (SINGLE_USER_MODE) {
843 @session_start();
844 authenticate_user("admin", null);
845 startup_gettext();
846 load_user_plugins($_SESSION["uid"]);
847 } else {
848 if (!validate_session()) $_SESSION["uid"] = false;
849
850 if (!$_SESSION["uid"]) {
851
852 if (AUTH_AUTO_LOGIN && authenticate_user(null, null)) {
853 $_SESSION["ref_schema_version"] = get_schema_version(true);
854 } else {
855 authenticate_user(null, null, true);
856 }
857
858 if (!$_SESSION["uid"]) {
859 @session_destroy();
860 setcookie(session_name(), '', time()-42000, '/');
861
862 render_login_form();
863 exit;
864 }
865
866 } else {
867 /* bump login timestamp */
868 $sth = $pdo->prepare("UPDATE ttrss_users SET last_login = NOW() WHERE id = ?");
869 $sth->execute([$_SESSION['uid']]);
870
871 $_SESSION["last_login_update"] = time();
872 }
873
874 if ($_SESSION["uid"]) {
875 startup_gettext();
876 load_user_plugins($_SESSION["uid"]);
877
878 /* cleanup ccache */
879
880 $sth = $pdo->prepare("DELETE FROM ttrss_counters_cache WHERE owner_uid = ?
881 AND
882 (SELECT COUNT(id) FROM ttrss_feeds WHERE
883 ttrss_feeds.id = feed_id) = 0");
884
885 $sth->execute([$_SESSION['uid']]);
886
887 $sth = $pdo->prepare("DELETE FROM ttrss_cat_counters_cache WHERE owner_uid = ?
888 AND
889 (SELECT COUNT(id) FROM ttrss_feed_categories WHERE
890 ttrss_feed_categories.id = feed_id) = 0");
891
892 $sth->execute([$_SESSION['uid']]);
893 }
894
895 }
896 }
897
898 function truncate_string($str, $max_len, $suffix = '&hellip;') {
899 if (mb_strlen($str, "utf-8") > $max_len) {
900 return mb_substr($str, 0, $max_len, "utf-8") . $suffix;
901 } else {
902 return $str;
903 }
904 }
905
906 // is not utf8 clean
907 function truncate_middle($str, $max_len, $suffix = '&hellip;') {
908 if (strlen($str) > $max_len) {
909 return substr_replace($str, $suffix, $max_len / 2, mb_strlen($str) - $max_len);
910 } else {
911 return $str;
912 }
913 }
914
915 function convert_timestamp($timestamp, $source_tz, $dest_tz) {
916
917 try {
918 $source_tz = new DateTimeZone($source_tz);
919 } catch (Exception $e) {
920 $source_tz = new DateTimeZone('UTC');
921 }
922
923 try {
924 $dest_tz = new DateTimeZone($dest_tz);
925 } catch (Exception $e) {
926 $dest_tz = new DateTimeZone('UTC');
927 }
928
929 $dt = new DateTime(date('Y-m-d H:i:s', $timestamp), $source_tz);
930 return $dt->format('U') + $dest_tz->getOffset($dt);
931 }
932
933 function make_local_datetime($timestamp, $long, $owner_uid = false,
934 $no_smart_dt = false, $eta_min = false) {
935
936 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
937 if (!$timestamp) $timestamp = '1970-01-01 0:00';
938
939 global $utc_tz;
940 global $user_tz;
941
942 if (!$utc_tz) $utc_tz = new DateTimeZone('UTC');
943
944 $timestamp = substr($timestamp, 0, 19);
945
946 # We store date in UTC internally
947 $dt = new DateTime($timestamp, $utc_tz);
948
949 $user_tz_string = get_pref('USER_TIMEZONE', $owner_uid);
950
951 if ($user_tz_string != 'Automatic') {
952
953 try {
954 if (!$user_tz) $user_tz = new DateTimeZone($user_tz_string);
955 } catch (Exception $e) {
956 $user_tz = $utc_tz;
957 }
958
959 $tz_offset = $user_tz->getOffset($dt);
960 } else {
961 $tz_offset = (int) -$_SESSION["clientTzOffset"];
962 }
963
964 $user_timestamp = $dt->format('U') + $tz_offset;
965
966 if (!$no_smart_dt) {
967 return smart_date_time($user_timestamp,
968 $tz_offset, $owner_uid, $eta_min);
969 } else {
970 if ($long)
971 $format = get_pref('LONG_DATE_FORMAT', $owner_uid);
972 else
973 $format = get_pref('SHORT_DATE_FORMAT', $owner_uid);
974
975 return date($format, $user_timestamp);
976 }
977 }
978
979 function smart_date_time($timestamp, $tz_offset = 0, $owner_uid = false, $eta_min = false) {
980 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
981
982 if ($eta_min && time() + $tz_offset - $timestamp < 3600) {
983 return T_sprintf("%d min", date("i", time() + $tz_offset - $timestamp));
984 } else if (date("Y.m.d", $timestamp) == date("Y.m.d", time() + $tz_offset)) {
985 return date("G:i", $timestamp);
986 } else if (date("Y", $timestamp) == date("Y", time() + $tz_offset)) {
987 $format = get_pref('SHORT_DATE_FORMAT', $owner_uid);
988 return date($format, $timestamp);
989 } else {
990 $format = get_pref('LONG_DATE_FORMAT', $owner_uid);
991 return date($format, $timestamp);
992 }
993 }
994
995 function sql_bool_to_bool($s) {
996 return $s && ($s !== "f" && $s !== "false"); //no-op for PDO, backwards compat for legacy layer
997 }
998
999 function bool_to_sql_bool($s) {
1000 return $s ? 1 : 0;
1001 }
1002
1003 // Session caching removed due to causing wrong redirects to upgrade
1004 // script when get_schema_version() is called on an obsolete session
1005 // created on a previous schema version.
1006 function get_schema_version($nocache = false) {
1007 global $schema_version;
1008
1009 $pdo = DB::pdo();
1010
1011 if (!$schema_version && !$nocache) {
1012 $row = $pdo->query("SELECT schema_version FROM ttrss_version")->fetch();
1013 $version = $row["schema_version"];
1014 $schema_version = $version;
1015 return $version;
1016 } else {
1017 return $schema_version;
1018 }
1019 }
1020
1021 function sanity_check() {
1022 require_once 'errors.php';
1023 global $ERRORS;
1024
1025 $error_code = 0;
1026 $schema_version = get_schema_version(true);
1027
1028 if ($schema_version != SCHEMA_VERSION) {
1029 $error_code = 5;
1030 }
1031
1032 return array("code" => $error_code, "message" => $ERRORS[$error_code]);
1033 }
1034
1035 function file_is_locked($filename) {
1036 if (file_exists(LOCK_DIRECTORY . "/$filename")) {
1037 if (function_exists('flock')) {
1038 $fp = @fopen(LOCK_DIRECTORY . "/$filename", "r");
1039 if ($fp) {
1040 if (flock($fp, LOCK_EX | LOCK_NB)) {
1041 flock($fp, LOCK_UN);
1042 fclose($fp);
1043 return false;
1044 }
1045 fclose($fp);
1046 return true;
1047 } else {
1048 return false;
1049 }
1050 }
1051 return true; // consider the file always locked and skip the test
1052 } else {
1053 return false;
1054 }
1055 }
1056
1057
1058 function make_lockfile($filename) {
1059 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
1060
1061 if ($fp && flock($fp, LOCK_EX | LOCK_NB)) {
1062 $stat_h = fstat($fp);
1063 $stat_f = stat(LOCK_DIRECTORY . "/$filename");
1064
1065 if (strtoupper(substr(PHP_OS, 0, 3)) !== 'WIN') {
1066 if ($stat_h["ino"] != $stat_f["ino"] ||
1067 $stat_h["dev"] != $stat_f["dev"]) {
1068
1069 return false;
1070 }
1071 }
1072
1073 if (function_exists('posix_getpid')) {
1074 fwrite($fp, posix_getpid() . "\n");
1075 }
1076 return $fp;
1077 } else {
1078 return false;
1079 }
1080 }
1081
1082 function make_stampfile($filename) {
1083 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
1084
1085 if (flock($fp, LOCK_EX | LOCK_NB)) {
1086 fwrite($fp, time() . "\n");
1087 flock($fp, LOCK_UN);
1088 fclose($fp);
1089 return true;
1090 } else {
1091 return false;
1092 }
1093 }
1094
1095 function sql_random_function() {
1096 if (DB_TYPE == "mysql") {
1097 return "RAND()";
1098 } else {
1099 return "RANDOM()";
1100 }
1101 }
1102
1103 function getFeedUnread($feed, $is_cat = false) {
1104 return Feeds::getFeedArticles($feed, $is_cat, true, $_SESSION["uid"]);
1105 }
1106
1107 function checkbox_to_sql_bool($val) {
1108 return ($val == "on") ? 1 : 0;
1109 }
1110
1111 function uniqid_short() {
1112 return uniqid(base_convert(rand(), 10, 36));
1113 }
1114
1115 function make_init_params() {
1116 $params = array();
1117
1118 foreach (array("ON_CATCHUP_SHOW_NEXT_FEED", "HIDE_READ_FEEDS",
1119 "ENABLE_FEED_CATS", "FEEDS_SORT_BY_UNREAD", "CONFIRM_FEED_CATCHUP",
1120 "CDM_AUTO_CATCHUP", "FRESH_ARTICLE_MAX_AGE",
1121 "HIDE_READ_SHOWS_SPECIAL", "COMBINED_DISPLAY_MODE") as $param) {
1122
1123 $params[strtolower($param)] = (int) get_pref($param);
1124 }
1125
1126 $params["icons_url"] = ICONS_URL;
1127 $params["cookie_lifetime"] = SESSION_COOKIE_LIFETIME;
1128 $params["default_view_mode"] = get_pref("_DEFAULT_VIEW_MODE");
1129 $params["default_view_limit"] = (int) get_pref("_DEFAULT_VIEW_LIMIT");
1130 $params["default_view_order_by"] = get_pref("_DEFAULT_VIEW_ORDER_BY");
1131 $params["bw_limit"] = (int) $_SESSION["bw_limit"];
1132 $params["is_default_pw"] = Pref_Prefs::isdefaultpassword();
1133 $params["label_base_index"] = (int) LABEL_BASE_INDEX;
1134
1135 $theme = get_pref( "USER_CSS_THEME", false, false);
1136 $params["theme"] = theme_valid("$theme") ? $theme : "";
1137
1138 $params["plugins"] = implode(", ", PluginHost::getInstance()->get_plugin_names());
1139
1140 $params["php_platform"] = PHP_OS;
1141 $params["php_version"] = PHP_VERSION;
1142
1143 $params["sanity_checksum"] = sha1(file_get_contents("include/sanity_check.php"));
1144
1145 $pdo = Db::pdo();
1146
1147 $sth = $pdo->prepare("SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
1148 ttrss_feeds WHERE owner_uid = ?");
1149 $sth->execute([$_SESSION['uid']]);
1150 $row = $sth->fetch();
1151
1152 $max_feed_id = $row["mid"];
1153 $num_feeds = $row["nf"];
1154
1155 $params["max_feed_id"] = (int) $max_feed_id;
1156 $params["num_feeds"] = (int) $num_feeds;
1157
1158 $params["hotkeys"] = get_hotkeys_map();
1159
1160 $params["csrf_token"] = $_SESSION["csrf_token"];
1161 $params["widescreen"] = (int) $_COOKIE["ttrss_widescreen"];
1162
1163 $params['simple_update'] = defined('SIMPLE_UPDATE_MODE') && SIMPLE_UPDATE_MODE;
1164
1165 $params["icon_alert"] = base64_img("images/alert.png");
1166 $params["icon_information"] = base64_img("images/information.png");
1167 $params["icon_cross"] = base64_img("images/cross.png");
1168 $params["icon_indicator_white"] = base64_img("images/indicator_white.gif");
1169
1170 $params["labels"] = Labels::get_all_labels($_SESSION["uid"]);
1171
1172 return $params;
1173 }
1174
1175 function get_hotkeys_info() {
1176 $hotkeys = array(
1177 __("Navigation") => array(
1178 "next_feed" => __("Open next feed"),
1179 "prev_feed" => __("Open previous feed"),
1180 "next_article" => __("Open next article"),
1181 "prev_article" => __("Open previous article"),
1182 "next_article_noscroll" => __("Open next article (don't scroll long articles)"),
1183 "prev_article_noscroll" => __("Open previous article (don't scroll long articles)"),
1184 "next_article_noexpand" => __("Move to next article (don't expand or mark read)"),
1185 "prev_article_noexpand" => __("Move to previous article (don't expand or mark read)"),
1186 "search_dialog" => __("Show search dialog")),
1187 __("Article") => array(
1188 "toggle_mark" => __("Toggle starred"),
1189 "toggle_publ" => __("Toggle published"),
1190 "toggle_unread" => __("Toggle unread"),
1191 "edit_tags" => __("Edit tags"),
1192 "open_in_new_window" => __("Open in new window"),
1193 "catchup_below" => __("Mark below as read"),
1194 "catchup_above" => __("Mark above as read"),
1195 "article_scroll_down" => __("Scroll down"),
1196 "article_scroll_up" => __("Scroll up"),
1197 "select_article_cursor" => __("Select article under cursor"),
1198 "email_article" => __("Email article"),
1199 "close_article" => __("Close/collapse article"),
1200 "toggle_expand" => __("Toggle article expansion (combined mode)"),
1201 "toggle_widescreen" => __("Toggle widescreen mode"),
1202 "toggle_embed_original" => __("Toggle embed original")),
1203 __("Article selection") => array(
1204 "select_all" => __("Select all articles"),
1205 "select_unread" => __("Select unread"),
1206 "select_marked" => __("Select starred"),
1207 "select_published" => __("Select published"),
1208 "select_invert" => __("Invert selection"),
1209 "select_none" => __("Deselect everything")),
1210 __("Feed") => array(
1211 "feed_refresh" => __("Refresh current feed"),
1212 "feed_unhide_read" => __("Un/hide read feeds"),
1213 "feed_subscribe" => __("Subscribe to feed"),
1214 "feed_edit" => __("Edit feed"),
1215 "feed_catchup" => __("Mark as read"),
1216 "feed_reverse" => __("Reverse headlines"),
1217 "feed_toggle_vgroup" => __("Toggle headline grouping"),
1218 "feed_debug_update" => __("Debug feed update"),
1219 "feed_debug_viewfeed" => __("Debug viewfeed()"),
1220 "catchup_all" => __("Mark all feeds as read"),
1221 "cat_toggle_collapse" => __("Un/collapse current category"),
1222 "toggle_combined_mode" => __("Toggle combined mode"),
1223 "toggle_cdm_expanded" => __("Toggle auto expand in combined mode")),
1224 __("Go to") => array(
1225 "goto_all" => __("All articles"),
1226 "goto_fresh" => __("Fresh"),
1227 "goto_marked" => __("Starred"),
1228 "goto_published" => __("Published"),
1229 "goto_tagcloud" => __("Tag cloud"),
1230 "goto_prefs" => __("Preferences")),
1231 __("Other") => array(
1232 "create_label" => __("Create label"),
1233 "create_filter" => __("Create filter"),
1234 "collapse_sidebar" => __("Un/collapse sidebar"),
1235 "help_dialog" => __("Show help dialog"))
1236 );
1237
1238 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_HOTKEY_INFO) as $plugin) {
1239 $hotkeys = $plugin->hook_hotkey_info($hotkeys);
1240 }
1241
1242 return $hotkeys;
1243 }
1244
1245 function get_hotkeys_map() {
1246 $hotkeys = array(
1247 // "navigation" => array(
1248 "k" => "next_feed",
1249 "j" => "prev_feed",
1250 "n" => "next_article",
1251 "p" => "prev_article",
1252 "(38)|up" => "prev_article",
1253 "(40)|down" => "next_article",
1254 // "^(38)|Ctrl-up" => "prev_article_noscroll",
1255 // "^(40)|Ctrl-down" => "next_article_noscroll",
1256 "(191)|/" => "search_dialog",
1257 // "article" => array(
1258 "s" => "toggle_mark",
1259 "*s" => "toggle_publ",
1260 "u" => "toggle_unread",
1261 "*t" => "edit_tags",
1262 "o" => "open_in_new_window",
1263 "c p" => "catchup_below",
1264 "c n" => "catchup_above",
1265 "*n" => "article_scroll_down",
1266 "*p" => "article_scroll_up",
1267 "*(38)|Shift+up" => "article_scroll_up",
1268 "*(40)|Shift+down" => "article_scroll_down",
1269 "a *w" => "toggle_widescreen",
1270 "a e" => "toggle_embed_original",
1271 "e" => "email_article",
1272 "a q" => "close_article",
1273 // "article_selection" => array(
1274 "a a" => "select_all",
1275 "a u" => "select_unread",
1276 "a *u" => "select_marked",
1277 "a p" => "select_published",
1278 "a i" => "select_invert",
1279 "a n" => "select_none",
1280 // "feed" => array(
1281 "f r" => "feed_refresh",
1282 "f a" => "feed_unhide_read",
1283 "f s" => "feed_subscribe",
1284 "f e" => "feed_edit",
1285 "f q" => "feed_catchup",
1286 "f x" => "feed_reverse",
1287 "f g" => "feed_toggle_vgroup",
1288 "f *d" => "feed_debug_update",
1289 "f *g" => "feed_debug_viewfeed",
1290 "f *c" => "toggle_combined_mode",
1291 "f c" => "toggle_cdm_expanded",
1292 "*q" => "catchup_all",
1293 "x" => "cat_toggle_collapse",
1294 // "goto" => array(
1295 "g a" => "goto_all",
1296 "g f" => "goto_fresh",
1297 "g s" => "goto_marked",
1298 "g p" => "goto_published",
1299 "g t" => "goto_tagcloud",
1300 "g *p" => "goto_prefs",
1301 // "other" => array(
1302 "(9)|Tab" => "select_article_cursor", // tab
1303 "c l" => "create_label",
1304 "c f" => "create_filter",
1305 "c s" => "collapse_sidebar",
1306 "^(191)|Ctrl+/" => "help_dialog",
1307 );
1308
1309 if (get_pref('COMBINED_DISPLAY_MODE')) {
1310 $hotkeys["^(38)|Ctrl-up"] = "prev_article_noscroll";
1311 $hotkeys["^(40)|Ctrl-down"] = "next_article_noscroll";
1312 }
1313
1314 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_HOTKEY_MAP) as $plugin) {
1315 $hotkeys = $plugin->hook_hotkey_map($hotkeys);
1316 }
1317
1318 $prefixes = array();
1319
1320 foreach (array_keys($hotkeys) as $hotkey) {
1321 $pair = explode(" ", $hotkey, 2);
1322
1323 if (count($pair) > 1 && !in_array($pair[0], $prefixes)) {
1324 array_push($prefixes, $pair[0]);
1325 }
1326 }
1327
1328 return array($prefixes, $hotkeys);
1329 }
1330
1331 function check_for_update() {
1332 if (defined("GIT_VERSION_TIMESTAMP")) {
1333 $content = @fetch_file_contents(array("url" => "http://tt-rss.org/version.json", "timeout" => 5));
1334
1335 if ($content) {
1336 $content = json_decode($content, true);
1337
1338 if ($content && isset($content["changeset"])) {
1339 if ((int)GIT_VERSION_TIMESTAMP < (int)$content["changeset"]["timestamp"] &&
1340 GIT_VERSION_HEAD != $content["changeset"]["id"]) {
1341
1342 return $content["changeset"]["id"];
1343 }
1344 }
1345 }
1346 }
1347
1348 return "";
1349 }
1350
1351 function make_runtime_info($disable_update_check = false) {
1352 $data = array();
1353
1354 $pdo = Db::pdo();
1355
1356 $sth = $pdo->prepare("SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
1357 ttrss_feeds WHERE owner_uid = ?");
1358 $sth->execute([$_SESSION['uid']]);
1359 $row = $sth->fetch();
1360
1361 $max_feed_id = $row['mid'];
1362 $num_feeds = $row['nf'];
1363
1364 $data["max_feed_id"] = (int) $max_feed_id;
1365 $data["num_feeds"] = (int) $num_feeds;
1366
1367 $data['last_article_id'] = Article::getLastArticleId();
1368 $data['cdm_expanded'] = get_pref('CDM_EXPANDED');
1369
1370 $data['dep_ts'] = calculate_dep_timestamp();
1371 $data['reload_on_ts_change'] = !defined('_NO_RELOAD_ON_TS_CHANGE');
1372
1373 $data["labels"] = Labels::get_all_labels($_SESSION["uid"]);
1374
1375 if (CHECK_FOR_UPDATES && !$disable_update_check && $_SESSION["last_version_check"] + 86400 + rand(-1000, 1000) < time()) {
1376 $update_result = @check_for_update();
1377
1378 $data["update_result"] = $update_result;
1379
1380 $_SESSION["last_version_check"] = time();
1381 }
1382
1383 if (file_exists(LOCK_DIRECTORY . "/update_daemon.lock")) {
1384
1385 $data['daemon_is_running'] = (int) file_is_locked("update_daemon.lock");
1386
1387 if (time() - $_SESSION["daemon_stamp_check"] > 30) {
1388
1389 $stamp = (int) @file_get_contents(LOCK_DIRECTORY . "/update_daemon.stamp");
1390
1391 if ($stamp) {
1392 $stamp_delta = time() - $stamp;
1393
1394 if ($stamp_delta > 1800) {
1395 $stamp_check = 0;
1396 } else {
1397 $stamp_check = 1;
1398 $_SESSION["daemon_stamp_check"] = time();
1399 }
1400
1401 $data['daemon_stamp_ok'] = $stamp_check;
1402
1403 $stamp_fmt = date("Y.m.d, G:i", $stamp);
1404
1405 $data['daemon_stamp'] = $stamp_fmt;
1406 }
1407 }
1408 }
1409
1410 return $data;
1411 }
1412
1413 function search_to_sql($search, $search_language) {
1414
1415 $keywords = str_getcsv(trim($search), " ");
1416 $query_keywords = array();
1417 $search_words = array();
1418 $search_query_leftover = array();
1419
1420 $pdo = Db::pdo();
1421
1422 if ($search_language)
1423 $search_language = $pdo->quote(mb_strtolower($search_language));
1424 else
1425 $search_language = $pdo->quote("english");
1426
1427 foreach ($keywords as $k) {
1428 if (strpos($k, "-") === 0) {
1429 $k = substr($k, 1);
1430 $not = "NOT";
1431 } else {
1432 $not = "";
1433 }
1434
1435 $commandpair = explode(":", mb_strtolower($k), 2);
1436
1437 switch ($commandpair[0]) {
1438 case "title":
1439 if ($commandpair[1]) {
1440 array_push($query_keywords, "($not (LOWER(ttrss_entries.title) LIKE ".
1441 $pdo->quote('%' . mb_strtolower($commandpair[1]) . '%') ."))");
1442 } else {
1443 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
1444 OR UPPER(ttrss_entries.content) $not LIKE UPPER(".$pdo->quote("%$k%")."))");
1445 array_push($search_words, $k);
1446 }
1447 break;
1448 case "author":
1449 if ($commandpair[1]) {
1450 array_push($query_keywords, "($not (LOWER(author) LIKE ".
1451 $pdo->quote('%' . mb_strtolower($commandpair[1]) . '%')."))");
1452 } else {
1453 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
1454 OR UPPER(ttrss_entries.content) $not LIKE UPPER(".$pdo->quote("%$k%")."))");
1455 array_push($search_words, $k);
1456 }
1457 break;
1458 case "note":
1459 if ($commandpair[1]) {
1460 if ($commandpair[1] == "true")
1461 array_push($query_keywords, "($not (note IS NOT NULL AND note != ''))");
1462 else if ($commandpair[1] == "false")
1463 array_push($query_keywords, "($not (note IS NULL OR note = ''))");
1464 else
1465 array_push($query_keywords, "($not (LOWER(note) LIKE ".
1466 $pdo->quote('%' . mb_strtolower($commandpair[1]) . '%')."))");
1467 } else {
1468 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER(".$pdo->quote("%$k%").")
1469 OR UPPER(ttrss_entries.content) $not LIKE UPPER(".$pdo->quote("%$k%")."))");
1470 if (!$not) array_push($search_words, $k);
1471 }
1472 break;
1473 case "star":
1474
1475 if ($commandpair[1]) {
1476 if ($commandpair[1] == "true")
1477 array_push($query_keywords, "($not (marked = true))");
1478 else
1479 array_push($query_keywords, "($not (marked = false))");
1480 } else {
1481 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER(".$pdo->quote("%$k%").")
1482 OR UPPER(ttrss_entries.content) $not LIKE UPPER(".$pdo->quote("%$k%")."))");
1483 if (!$not) array_push($search_words, $k);
1484 }
1485 break;
1486 case "pub":
1487 if ($commandpair[1]) {
1488 if ($commandpair[1] == "true")
1489 array_push($query_keywords, "($not (published = true))");
1490 else
1491 array_push($query_keywords, "($not (published = false))");
1492
1493 } else {
1494 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
1495 OR UPPER(ttrss_entries.content) $not LIKE UPPER(".$pdo->quote("%$k%")."))");
1496 if (!$not) array_push($search_words, $k);
1497 }
1498 break;
1499 case "unread":
1500 if ($commandpair[1]) {
1501 if ($commandpair[1] == "true")
1502 array_push($query_keywords, "($not (unread = true))");
1503 else
1504 array_push($query_keywords, "($not (unread = false))");
1505
1506 } else {
1507 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER(".$pdo->quote("%$k%").")
1508 OR UPPER(ttrss_entries.content) $not LIKE UPPER(".$pdo->quote("%$k%")."))");
1509 if (!$not) array_push($search_words, $k);
1510 }
1511 break;
1512 default:
1513 if (strpos($k, "@") === 0) {
1514
1515 $user_tz_string = get_pref('USER_TIMEZONE', $_SESSION['uid']);
1516 $orig_ts = strtotime(substr($k, 1));
1517 $k = date("Y-m-d", convert_timestamp($orig_ts, $user_tz_string, 'UTC'));
1518
1519 //$k = date("Y-m-d", strtotime(substr($k, 1)));
1520
1521 array_push($query_keywords, "(".SUBSTRING_FOR_DATE."(updated,1,LENGTH('$k')) $not = '$k')");
1522 } else {
1523
1524 if (DB_TYPE == "pgsql") {
1525 $k = mb_strtolower($k);
1526 array_push($search_query_leftover, $not ? "!$k" : $k);
1527 } else {
1528 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER(".$pdo->quote("%$k%").")
1529 OR UPPER(ttrss_entries.content) $not LIKE UPPER(".$pdo->quote("%$k%")."))");
1530 }
1531
1532 if (!$not) array_push($search_words, $k);
1533 }
1534 }
1535 }
1536
1537 if (count($search_query_leftover) > 0) {
1538 $search_query_leftover = $pdo->quote(implode(" & ", $search_query_leftover));
1539
1540 if (DB_TYPE == "pgsql") {
1541 array_push($query_keywords,
1542 "(tsvector_combined @@ to_tsquery($search_language, $search_query_leftover))");
1543 }
1544
1545 }
1546
1547 $search_query_part = implode("AND", $query_keywords);
1548
1549 return array($search_query_part, $search_words);
1550 }
1551
1552 function iframe_whitelisted($entry) {
1553 $whitelist = array("youtube.com", "youtu.be", "vimeo.com", "player.vimeo.com");
1554
1555 @$src = parse_url($entry->getAttribute("src"), PHP_URL_HOST);
1556
1557 if ($src) {
1558 foreach ($whitelist as $w) {
1559 if ($src == $w || $src == "www.$w")
1560 return true;
1561 }
1562 }
1563
1564 return false;
1565 }
1566
1567 // check for locally cached (media) URLs and rewrite to local versions
1568 // this is called separately after sanitize() and plugin render article hooks to allow
1569 // plugins work on original source URLs used before caching
1570
1571 function rewrite_cached_urls($str) {
1572 $charset_hack = '<head>
1573 <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
1574 </head>';
1575
1576 $res = trim($str); if (!$res) return '';
1577
1578 $doc = new DOMDocument();
1579 $doc->loadHTML($charset_hack . $res);
1580 $xpath = new DOMXPath($doc);
1581
1582 $entries = $xpath->query('(//img[@src]|//video/source[@src]|//audio/source[@src])');
1583
1584 $need_saving = false;
1585
1586 foreach ($entries as $entry) {
1587
1588 if ($entry->hasAttribute('src')) {
1589
1590 // should be already absolutized because this is called after sanitize()
1591 $src = $entry->getAttribute('src');
1592 $cached_filename = CACHE_DIR . '/images/' . sha1($src);
1593
1594 if (file_exists($cached_filename)) {
1595
1596 // this is strictly cosmetic
1597 if ($entry->tagName == 'img') {
1598 $suffix = ".png";
1599 } else if ($entry->parentNode && $entry->parentNode->tagName == "video") {
1600 $suffix = ".mp4";
1601 } else if ($entry->parentNode && $entry->parentNode->tagName == "audio") {
1602 $suffix = ".ogg";
1603 } else {
1604 $suffix = "";
1605 }
1606
1607 $src = get_self_url_prefix() . '/public.php?op=cached_url&hash=' . sha1($src) . $suffix;
1608
1609 $entry->setAttribute('src', $src);
1610 $need_saving = true;
1611 }
1612 }
1613 }
1614
1615 if ($need_saving) {
1616 $doc->removeChild($doc->firstChild); //remove doctype
1617 $res = $doc->saveHTML();
1618 }
1619
1620 return $res;
1621 }
1622
1623 function sanitize($str, $force_remove_images = false, $owner = false, $site_url = false, $highlight_words = false, $article_id = false) {
1624 if (!$owner) $owner = $_SESSION["uid"];
1625
1626 $res = trim($str); if (!$res) return '';
1627
1628 $charset_hack = '<head>
1629 <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
1630 </head>';
1631
1632 $res = trim($res); if (!$res) return '';
1633
1634 libxml_use_internal_errors(true);
1635
1636 $doc = new DOMDocument();
1637 $doc->loadHTML($charset_hack . $res);
1638 $xpath = new DOMXPath($doc);
1639
1640 $rewrite_base_url = $site_url ? $site_url : get_self_url_prefix();
1641
1642 $entries = $xpath->query('(//a[@href]|//img[@src]|//video/source[@src]|//audio/source[@src])');
1643
1644 foreach ($entries as $entry) {
1645
1646 if ($entry->hasAttribute('href')) {
1647 $entry->setAttribute('href',
1648 rewrite_relative_url($rewrite_base_url, $entry->getAttribute('href')));
1649
1650 $entry->setAttribute('rel', 'noopener noreferrer');
1651 }
1652
1653 if ($entry->hasAttribute('src')) {
1654 $src = rewrite_relative_url($rewrite_base_url, $entry->getAttribute('src'));
1655
1656 // cache stuff has gone to rewrite_cached_urls()
1657
1658 $entry->setAttribute('src', $src);
1659 }
1660
1661 if ($entry->nodeName == 'img') {
1662 $entry->setAttribute('referrerpolicy', 'no-referrer');
1663
1664 $entry->removeAttribute('width');
1665 $entry->removeAttribute('height');
1666
1667 if ($entry->hasAttribute('src')) {
1668 $is_https_url = parse_url($entry->getAttribute('src'), PHP_URL_SCHEME) === 'https';
1669
1670 if (is_prefix_https() && !$is_https_url) {
1671
1672 if ($entry->hasAttribute('srcset')) {
1673 $entry->removeAttribute('srcset');
1674 }
1675
1676 if ($entry->hasAttribute('sizes')) {
1677 $entry->removeAttribute('sizes');
1678 }
1679 }
1680 }
1681
1682 if (($owner && get_pref("STRIP_IMAGES", $owner)) ||
1683 $force_remove_images || $_SESSION["bw_limit"]) {
1684
1685 $p = $doc->createElement('p');
1686
1687 $a = $doc->createElement('a');
1688 $a->setAttribute('href', $entry->getAttribute('src'));
1689
1690 $a->appendChild(new DOMText($entry->getAttribute('src')));
1691 $a->setAttribute('target', '_blank');
1692 $a->setAttribute('rel', 'noopener noreferrer');
1693
1694 $p->appendChild($a);
1695
1696 $entry->parentNode->replaceChild($p, $entry);
1697 }
1698 }
1699
1700 if (strtolower($entry->nodeName) == "a") {
1701 $entry->setAttribute("target", "_blank");
1702 $entry->setAttribute("rel", "noopener noreferrer");
1703 }
1704 }
1705
1706 $entries = $xpath->query('//iframe');
1707 foreach ($entries as $entry) {
1708 if (!iframe_whitelisted($entry)) {
1709 $entry->setAttribute('sandbox', 'allow-scripts');
1710 } else {
1711 if (is_prefix_https()) {
1712 $entry->setAttribute("src",
1713 str_replace("http://", "https://",
1714 $entry->getAttribute("src")));
1715 }
1716 }
1717 }
1718
1719 $allowed_elements = array('a', 'abbr', 'address', 'acronym', 'audio', 'article', 'aside',
1720 'b', 'bdi', 'bdo', 'big', 'blockquote', 'body', 'br',
1721 'caption', 'cite', 'center', 'code', 'col', 'colgroup',
1722 'data', 'dd', 'del', 'details', 'description', 'dfn', 'div', 'dl', 'font',
1723 'dt', 'em', 'footer', 'figure', 'figcaption',
1724 'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'header', 'hr', 'html', 'i',
1725 'img', 'ins', 'kbd', 'li', 'main', 'mark', 'nav', 'noscript',
1726 'ol', 'p', 'pre', 'q', 'ruby', 'rp', 'rt', 's', 'samp', 'section',
1727 'small', 'source', 'span', 'strike', 'strong', 'sub', 'summary',
1728 'sup', 'table', 'tbody', 'td', 'tfoot', 'th', 'thead', 'time',
1729 'tr', 'track', 'tt', 'u', 'ul', 'var', 'wbr', 'video', 'xml:namespace' );
1730
1731 if ($_SESSION['hasSandbox']) $allowed_elements[] = 'iframe';
1732
1733 $disallowed_attributes = array('id', 'style', 'class');
1734
1735 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_SANITIZE) as $plugin) {
1736 $retval = $plugin->hook_sanitize($doc, $site_url, $allowed_elements, $disallowed_attributes, $article_id);
1737 if (is_array($retval)) {
1738 $doc = $retval[0];
1739 $allowed_elements = $retval[1];
1740 $disallowed_attributes = $retval[2];
1741 } else {
1742 $doc = $retval;
1743 }
1744 }
1745
1746 $doc->removeChild($doc->firstChild); //remove doctype
1747 $doc = strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes);
1748
1749 if ($highlight_words) {
1750 foreach ($highlight_words as $word) {
1751
1752 // http://stackoverflow.com/questions/4081372/highlight-keywords-in-a-paragraph
1753
1754 $elements = $xpath->query("//*/text()");
1755
1756 foreach ($elements as $child) {
1757
1758 $fragment = $doc->createDocumentFragment();
1759 $text = $child->textContent;
1760
1761 while (($pos = mb_stripos($text, $word)) !== false) {
1762 $fragment->appendChild(new DomText(mb_substr($text, 0, $pos)));
1763 $word = mb_substr($text, $pos, mb_strlen($word));
1764 $highlight = $doc->createElement('span');
1765 $highlight->appendChild(new DomText($word));
1766 $highlight->setAttribute('class', 'highlight');
1767 $fragment->appendChild($highlight);
1768 $text = mb_substr($text, $pos + mb_strlen($word));
1769 }
1770
1771 if (!empty($text)) $fragment->appendChild(new DomText($text));
1772
1773 $child->parentNode->replaceChild($fragment, $child);
1774 }
1775 }
1776 }
1777
1778 $res = $doc->saveHTML();
1779
1780 /* strip everything outside of <body>...</body> */
1781
1782 $res_frag = array();
1783 if (preg_match('/<body>(.*)<\/body>/is', $res, $res_frag)) {
1784 return $res_frag[1];
1785 } else {
1786 return $res;
1787 }
1788 }
1789
1790 function strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes) {
1791 $xpath = new DOMXPath($doc);
1792 $entries = $xpath->query('//*');
1793
1794 foreach ($entries as $entry) {
1795 if (!in_array($entry->nodeName, $allowed_elements)) {
1796 $entry->parentNode->removeChild($entry);
1797 }
1798
1799 if ($entry->hasAttributes()) {
1800 $attrs_to_remove = array();
1801
1802 foreach ($entry->attributes as $attr) {
1803
1804 if (strpos($attr->nodeName, 'on') === 0) {
1805 array_push($attrs_to_remove, $attr);
1806 }
1807
1808 if ($attr->nodeName == 'href' && stripos($attr->value, 'javascript:') === 0) {
1809 array_push($attrs_to_remove, $attr);
1810 }
1811
1812 if (in_array($attr->nodeName, $disallowed_attributes)) {
1813 array_push($attrs_to_remove, $attr);
1814 }
1815 }
1816
1817 foreach ($attrs_to_remove as $attr) {
1818 $entry->removeAttributeNode($attr);
1819 }
1820 }
1821 }
1822
1823 return $doc;
1824 }
1825
1826 function trim_array($array) {
1827 $tmp = $array;
1828 array_walk($tmp, 'trim');
1829 return $tmp;
1830 }
1831
1832 function tag_is_valid($tag) {
1833 if (!$tag || is_numeric($tag) || mb_strlen($tag) > 250)
1834 return false;
1835
1836 return true;
1837 }
1838
1839 function render_login_form() {
1840 header('Cache-Control: public');
1841
1842 require_once "login_form.php";
1843 exit;
1844 }
1845
1846 function T_sprintf() {
1847 $args = func_get_args();
1848 return vsprintf(__(array_shift($args)), $args);
1849 }
1850
1851 function print_checkpoint($n, $s) {
1852 $ts = microtime(true);
1853 echo sprintf("<!-- CP[$n] %.4f seconds -->\n", $ts - $s);
1854 return $ts;
1855 }
1856
1857 function sanitize_tag($tag) {
1858 $tag = trim($tag);
1859
1860 $tag = mb_strtolower($tag, 'utf-8');
1861
1862 $tag = preg_replace('/[,\'\"\+\>\<]/', "", $tag);
1863
1864 if (DB_TYPE == "mysql") {
1865 $tag = preg_replace('/[\x{10000}-\x{10FFFF}]/u', "\xEF\xBF\xBD", $tag);
1866 }
1867
1868 return $tag;
1869 }
1870
1871 function is_server_https() {
1872 return (!empty($_SERVER['HTTPS']) && ($_SERVER['HTTPS'] != 'off')) || $_SERVER['HTTP_X_FORWARDED_PROTO'] == 'https';
1873 }
1874
1875 function is_prefix_https() {
1876 return parse_url(SELF_URL_PATH, PHP_URL_SCHEME) == 'https';
1877 }
1878
1879 // this returns SELF_URL_PATH sans ending slash
1880 function get_self_url_prefix() {
1881 if (strrpos(SELF_URL_PATH, "/") === strlen(SELF_URL_PATH)-1) {
1882 return substr(SELF_URL_PATH, 0, strlen(SELF_URL_PATH)-1);
1883 } else {
1884 return SELF_URL_PATH;
1885 }
1886 }
1887
1888 function encrypt_password($pass, $salt = '', $mode2 = false) {
1889 if ($salt && $mode2) {
1890 return "MODE2:" . hash('sha256', $salt . $pass);
1891 } else if ($salt) {
1892 return "SHA1X:" . sha1("$salt:$pass");
1893 } else {
1894 return "SHA1:" . sha1($pass);
1895 }
1896 } // function encrypt_password
1897
1898 function load_filters($feed_id, $owner_uid) {
1899 $filters = array();
1900
1901 $feed_id = (int) $feed_id;
1902 $cat_id = (int)Feeds::getFeedCategory($feed_id);
1903
1904 if ($cat_id == 0)
1905 $null_cat_qpart = "cat_id IS NULL OR";
1906 else
1907 $null_cat_qpart = "";
1908
1909 $pdo = Db::pdo();
1910
1911 $sth = $pdo->prepare("SELECT * FROM ttrss_filters2 WHERE
1912 owner_uid = ? AND enabled = true ORDER BY order_id, title");
1913 $sth->execute([$owner_uid]);
1914
1915 $check_cats = array_merge(
1916 Feeds::getParentCategories($cat_id, $owner_uid),
1917 [$cat_id]);
1918
1919 $check_cats_str = join(",", $check_cats);
1920 $check_cats_fullids = array_map(function($a) { return "CAT:$a"; }, $check_cats);
1921
1922 while ($line = $sth->fetch()) {
1923 $filter_id = $line["id"];
1924
1925 $match_any_rule = sql_bool_to_bool($line["match_any_rule"]);
1926
1927 $sth2 = $pdo->prepare("SELECT
1928 r.reg_exp, r.inverse, r.feed_id, r.cat_id, r.cat_filter, r.match_on, t.name AS type_name
1929 FROM ttrss_filters2_rules AS r,
1930 ttrss_filter_types AS t
1931 WHERE
1932 (match_on IS NOT NULL OR
1933 (($null_cat_qpart (cat_id IS NULL AND cat_filter = false) OR cat_id IN ($check_cats_str)) AND
1934 (feed_id IS NULL OR feed_id = ?))) AND
1935 filter_type = t.id AND filter_id = ?");
1936 $sth2->execute([$feed_id, $filter_id]);
1937
1938 $rules = array();
1939 $actions = array();
1940
1941 while ($rule_line = $sth2->fetch()) {
1942 # print_r($rule_line);
1943
1944 if ($rule_line["match_on"]) {
1945 $match_on = json_decode($rule_line["match_on"], true);
1946
1947 if (in_array("0", $match_on) || in_array($feed_id, $match_on) || count(array_intersect($check_cats_fullids, $match_on)) > 0) {
1948
1949 $rule = array();
1950 $rule["reg_exp"] = $rule_line["reg_exp"];
1951 $rule["type"] = $rule_line["type_name"];
1952 $rule["inverse"] = sql_bool_to_bool($rule_line["inverse"]);
1953
1954 array_push($rules, $rule);
1955 } else if (!$match_any_rule) {
1956 // this filter contains a rule that doesn't match to this feed/category combination
1957 // thus filter has to be rejected
1958
1959 $rules = [];
1960 break;
1961 }
1962
1963 } else {
1964
1965 $rule = array();
1966 $rule["reg_exp"] = $rule_line["reg_exp"];
1967 $rule["type"] = $rule_line["type_name"];
1968 $rule["inverse"] = sql_bool_to_bool($rule_line["inverse"]);
1969
1970 array_push($rules, $rule);
1971 }
1972 }
1973
1974 if (count($rules) > 0) {
1975 $sth2 = $pdo->prepare("SELECT a.action_param,t.name AS type_name
1976 FROM ttrss_filters2_actions AS a,
1977 ttrss_filter_actions AS t
1978 WHERE
1979 action_id = t.id AND filter_id = ?");
1980 $sth2->execute([$filter_id]);
1981
1982 while ($action_line = $sth2->fetch()) {
1983 # print_r($action_line);
1984
1985 $action = array();
1986 $action["type"] = $action_line["type_name"];
1987 $action["param"] = $action_line["action_param"];
1988
1989 array_push($actions, $action);
1990 }
1991 }
1992
1993 $filter = array();
1994 $filter["match_any_rule"] = sql_bool_to_bool($line["match_any_rule"]);
1995 $filter["inverse"] = sql_bool_to_bool($line["inverse"]);
1996 $filter["rules"] = $rules;
1997 $filter["actions"] = $actions;
1998
1999 if (count($rules) > 0 && count($actions) > 0) {
2000 array_push($filters, $filter);
2001 }
2002 }
2003
2004 return $filters;
2005 }
2006
2007 function get_score_pic($score) {
2008 if ($score > 100) {
2009 return "score_high.png";
2010 } else if ($score > 0) {
2011 return "score_half_high.png";
2012 } else if ($score < -100) {
2013 return "score_low.png";
2014 } else if ($score < 0) {
2015 return "score_half_low.png";
2016 } else {
2017 return "score_neutral.png";
2018 }
2019 }
2020
2021 function init_plugins() {
2022 PluginHost::getInstance()->load(PLUGINS, PluginHost::KIND_ALL);
2023
2024 return true;
2025 }
2026
2027 function add_feed_category($feed_cat, $parent_cat_id = false) {
2028
2029 if (!$feed_cat) return false;
2030
2031 $feed_cat = mb_substr($feed_cat, 0, 250);
2032 if (!$parent_cat_id) $parent_cat_id = null;
2033
2034 $pdo = Db::pdo();
2035 $tr_in_progress = false;
2036
2037 try {
2038 $pdo->beginTransaction();
2039 } catch (Exception $e) {
2040 $tr_in_progress = true;
2041 }
2042
2043 $sth = $pdo->prepare("SELECT id FROM ttrss_feed_categories
2044 WHERE (parent_cat = :parent OR (:parent IS NULL AND parent_cat IS NULL))
2045 AND title = :title AND owner_uid = :uid");
2046 $sth->execute([':parent' => $parent_cat_id, ':title' => $feed_cat, ':uid' => $_SESSION['uid']]);
2047
2048 if (!$sth->fetch()) {
2049
2050 $sth = $pdo->prepare("INSERT INTO ttrss_feed_categories (owner_uid,title,parent_cat)
2051 VALUES (?, ?, ?)");
2052 $sth->execute([$_SESSION['uid'], $feed_cat, $parent_cat_id]);
2053
2054 if (!$tr_in_progress) $pdo->commit();
2055
2056 return true;
2057 }
2058
2059 $pdo->commit();
2060
2061 return false;
2062 }
2063
2064 /**
2065 * Fixes incomplete URLs by prepending "http://".
2066 * Also replaces feed:// with http://, and
2067 * prepends a trailing slash if the url is a domain name only.
2068 *
2069 * @param string $url Possibly incomplete URL
2070 *
2071 * @return string Fixed URL.
2072 */
2073 function fix_url($url) {
2074
2075 // support schema-less urls
2076 if (strpos($url, '//') === 0) {
2077 $url = 'https:' . $url;
2078 }
2079
2080 if (strpos($url, '://') === false) {
2081 $url = 'http://' . $url;
2082 } else if (substr($url, 0, 5) == 'feed:') {
2083 $url = 'http:' . substr($url, 5);
2084 }
2085
2086 //prepend slash if the URL has no slash in it
2087 // "http://www.example" -> "http://www.example/"
2088 if (strpos($url, '/', strpos($url, ':') + 3) === false) {
2089 $url .= '/';
2090 }
2091
2092 //convert IDNA hostname to punycode if possible
2093 if (function_exists("idn_to_ascii")) {
2094 $parts = parse_url($url);
2095 if (mb_detect_encoding($parts['host']) != 'ASCII')
2096 {
2097 $parts['host'] = idn_to_ascii($parts['host']);
2098 $url = build_url($parts);
2099 }
2100 }
2101
2102 if ($url != "http:///")
2103 return $url;
2104 else
2105 return '';
2106 }
2107
2108 function validate_feed_url($url) {
2109 $parts = parse_url($url);
2110
2111 return ($parts['scheme'] == 'http' || $parts['scheme'] == 'feed' || $parts['scheme'] == 'https');
2112
2113 }
2114
2115 /* function save_email_address($email) {
2116 // FIXME: implement persistent storage of emails
2117
2118 if (!$_SESSION['stored_emails'])
2119 $_SESSION['stored_emails'] = array();
2120
2121 if (!in_array($email, $_SESSION['stored_emails']))
2122 array_push($_SESSION['stored_emails'], $email);
2123 } */
2124
2125
2126 function get_feed_access_key($feed_id, $is_cat, $owner_uid = false) {
2127
2128 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2129
2130 $is_cat = bool_to_sql_bool($is_cat);
2131
2132 $pdo = Db::pdo();
2133
2134 $sth = $pdo->prepare("SELECT access_key FROM ttrss_access_keys
2135 WHERE feed_id = ? AND is_cat = ?
2136 AND owner_uid = ?");
2137 $sth->execute([$feed_id, (int)$is_cat, $owner_uid]);
2138
2139 if ($row = $sth->fetch()) {
2140 return $row["access_key"];
2141 } else {
2142 $key = uniqid_short();
2143
2144 $sth = $pdo->prepare("INSERT INTO ttrss_access_keys
2145 (access_key, feed_id, is_cat, owner_uid)
2146 VALUES (?, ?, ?, ?)");
2147
2148 $sth->execute([$key, $feed_id, (int)$is_cat, $owner_uid]);
2149
2150 return $key;
2151 }
2152 }
2153
2154 function get_feeds_from_html($url, $content)
2155 {
2156 $url = fix_url($url);
2157 $baseUrl = substr($url, 0, strrpos($url, '/') + 1);
2158
2159 libxml_use_internal_errors(true);
2160
2161 $doc = new DOMDocument();
2162 $doc->loadHTML($content);
2163 $xpath = new DOMXPath($doc);
2164 $entries = $xpath->query('/html/head/link[@rel="alternate" and '.
2165 '(contains(@type,"rss") or contains(@type,"atom"))]|/html/head/link[@rel="feed"]');
2166 $feedUrls = array();
2167 foreach ($entries as $entry) {
2168 if ($entry->hasAttribute('href')) {
2169 $title = $entry->getAttribute('title');
2170 if ($title == '') {
2171 $title = $entry->getAttribute('type');
2172 }
2173 $feedUrl = rewrite_relative_url(
2174 $baseUrl, $entry->getAttribute('href')
2175 );
2176 $feedUrls[$feedUrl] = $title;
2177 }
2178 }
2179 return $feedUrls;
2180 }
2181
2182 function is_html($content) {
2183 return preg_match("/<html|DOCTYPE html/i", substr($content, 0, 100)) !== 0;
2184 }
2185
2186 function url_is_html($url, $login = false, $pass = false) {
2187 return is_html(fetch_file_contents($url, false, $login, $pass));
2188 }
2189
2190 function build_url($parts) {
2191 return $parts['scheme'] . "://" . $parts['host'] . $parts['path'];
2192 }
2193
2194 function cleanup_url_path($path) {
2195 $path = str_replace("/./", "/", $path);
2196 $path = str_replace("//", "/", $path);
2197
2198 return $path;
2199 }
2200
2201 /**
2202 * Converts a (possibly) relative URL to a absolute one.
2203 *
2204 * @param string $url Base URL (i.e. from where the document is)
2205 * @param string $rel_url Possibly relative URL in the document
2206 *
2207 * @return string Absolute URL
2208 */
2209 function rewrite_relative_url($url, $rel_url) {
2210 if (strpos($rel_url, "://") !== false) {
2211 return $rel_url;
2212 } else if (strpos($rel_url, "//") === 0) {
2213 # protocol-relative URL (rare but they exist)
2214 return $rel_url;
2215 } else if (preg_match("/^[a-z]+:/i", $rel_url)) {
2216 # magnet:, feed:, etc
2217 return $rel_url;
2218 } else if (strpos($rel_url, "/") === 0) {
2219 $parts = parse_url($url);
2220 $parts['path'] = $rel_url;
2221 $parts['path'] = cleanup_url_path($parts['path']);
2222
2223 return build_url($parts);
2224
2225 } else {
2226 $parts = parse_url($url);
2227 if (!isset($parts['path'])) {
2228 $parts['path'] = '/';
2229 }
2230 $dir = $parts['path'];
2231 if (substr($dir, -1) !== '/') {
2232 $dir = dirname($parts['path']);
2233 $dir !== '/' && $dir .= '/';
2234 }
2235 $parts['path'] = $dir . $rel_url;
2236 $parts['path'] = cleanup_url_path($parts['path']);
2237
2238 return build_url($parts);
2239 }
2240 }
2241
2242 function cleanup_tags($days = 14, $limit = 1000) {
2243
2244 $days = (int) $days;
2245
2246 if (DB_TYPE == "pgsql") {
2247 $interval_query = "date_updated < NOW() - INTERVAL '$days days'";
2248 } else if (DB_TYPE == "mysql") {
2249 $interval_query = "date_updated < DATE_SUB(NOW(), INTERVAL $days DAY)";
2250 }
2251
2252 $tags_deleted = 0;
2253
2254 $pdo = Db::pdo();
2255
2256 while ($limit > 0) {
2257 $limit_part = 500;
2258
2259 $sth = $pdo->prepare("SELECT ttrss_tags.id AS id
2260 FROM ttrss_tags, ttrss_user_entries, ttrss_entries
2261 WHERE post_int_id = int_id AND $interval_query AND
2262 ref_id = ttrss_entries.id AND tag_cache != '' LIMIT ?");
2263 $sth->execute([$limit]);
2264
2265 $ids = array();
2266
2267 while ($line = $sth->fetch()) {
2268 array_push($ids, $line['id']);
2269 }
2270
2271 if (count($ids) > 0) {
2272 $ids = join(",", $ids);
2273
2274 $usth = $pdo->query("DELETE FROM ttrss_tags WHERE id IN ($ids)");
2275 $tags_deleted = $usth->rowCount();
2276 } else {
2277 break;
2278 }
2279
2280 $limit -= $limit_part;
2281 }
2282
2283 return $tags_deleted;
2284 }
2285
2286 function print_user_stylesheet() {
2287 $value = get_pref('USER_STYLESHEET');
2288
2289 if ($value) {
2290 print "<style type=\"text/css\">";
2291 print str_replace("<br/>", "\n", $value);
2292 print "</style>";
2293 }
2294
2295 }
2296
2297 function filter_to_sql($filter, $owner_uid) {
2298 $query = array();
2299
2300 $pdo = Db::pdo();
2301
2302 if (DB_TYPE == "pgsql")
2303 $reg_qpart = "~";
2304 else
2305 $reg_qpart = "REGEXP";
2306
2307 foreach ($filter["rules"] AS $rule) {
2308 $rule['reg_exp'] = str_replace('/', '\/', $rule["reg_exp"]);
2309 $regexp_valid = preg_match('/' . $rule['reg_exp'] . '/',
2310 $rule['reg_exp']) !== FALSE;
2311
2312 if ($regexp_valid) {
2313
2314 $rule['reg_exp'] = $pdo->quote($rule['reg_exp']);
2315
2316 switch ($rule["type"]) {
2317 case "title":
2318 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
2319 $rule['reg_exp'] . "')";
2320 break;
2321 case "content":
2322 $qpart = "LOWER(ttrss_entries.content) $reg_qpart LOWER('".
2323 $rule['reg_exp'] . "')";
2324 break;
2325 case "both":
2326 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
2327 $rule['reg_exp'] . "') OR LOWER(" .
2328 "ttrss_entries.content) $reg_qpart LOWER('" . $rule['reg_exp'] . "')";
2329 break;
2330 case "tag":
2331 $qpart = "LOWER(ttrss_user_entries.tag_cache) $reg_qpart LOWER('".
2332 $rule['reg_exp'] . "')";
2333 break;
2334 case "link":
2335 $qpart = "LOWER(ttrss_entries.link) $reg_qpart LOWER('".
2336 $rule['reg_exp'] . "')";
2337 break;
2338 case "author":
2339 $qpart = "LOWER(ttrss_entries.author) $reg_qpart LOWER('".
2340 $rule['reg_exp'] . "')";
2341 break;
2342 }
2343
2344 if (isset($rule['inverse'])) $qpart = "NOT ($qpart)";
2345
2346 if (isset($rule["feed_id"]) && $rule["feed_id"] > 0) {
2347 $qpart .= " AND feed_id = " . $pdo->quote($rule["feed_id"]);
2348 }
2349
2350 if (isset($rule["cat_id"])) {
2351
2352 if ($rule["cat_id"] > 0) {
2353 $children = Feeds::getChildCategories($rule["cat_id"], $owner_uid);
2354 array_push($children, $rule["cat_id"]);
2355 $children = array_map("intval", $children);
2356
2357 $children = join(",", $children);
2358
2359 $cat_qpart = "cat_id IN ($children)";
2360 } else {
2361 $cat_qpart = "cat_id IS NULL";
2362 }
2363
2364 $qpart .= " AND $cat_qpart";
2365 }
2366
2367 $qpart .= " AND feed_id IS NOT NULL";
2368
2369 array_push($query, "($qpart)");
2370
2371 }
2372 }
2373
2374 if (count($query) > 0) {
2375 $fullquery = "(" . join($filter["match_any_rule"] ? "OR" : "AND", $query) . ")";
2376 } else {
2377 $fullquery = "(false)";
2378 }
2379
2380 if ($filter['inverse']) $fullquery = "(NOT $fullquery)";
2381
2382 return $fullquery;
2383 }
2384
2385 if (!function_exists('gzdecode')) {
2386 function gzdecode($string) { // no support for 2nd argument
2387 return file_get_contents('compress.zlib://data:who/cares;base64,'.
2388 base64_encode($string));
2389 }
2390 }
2391
2392 function get_random_bytes($length) {
2393 if (function_exists('openssl_random_pseudo_bytes')) {
2394 return openssl_random_pseudo_bytes($length);
2395 } else {
2396 $output = "";
2397
2398 for ($i = 0; $i < $length; $i++)
2399 $output .= chr(mt_rand(0, 255));
2400
2401 return $output;
2402 }
2403 }
2404
2405 function read_stdin() {
2406 $fp = fopen("php://stdin", "r");
2407
2408 if ($fp) {
2409 $line = trim(fgets($fp));
2410 fclose($fp);
2411 return $line;
2412 }
2413
2414 return null;
2415 }
2416
2417 function implements_interface($class, $interface) {
2418 return in_array($interface, class_implements($class));
2419 }
2420
2421 function get_minified_js($files) {
2422
2423 $rv = '';
2424
2425 foreach ($files as $js) {
2426 if (!isset($_GET['debug'])) {
2427 $cached_file = CACHE_DIR . "/js/".basename($js);
2428
2429 if (file_exists($cached_file) && is_readable($cached_file) && filemtime($cached_file) >= filemtime("js/$js")) {
2430
2431 list($header, $contents) = explode("\n", file_get_contents($cached_file), 2);
2432
2433 if ($header && $contents) {
2434 list($htag, $hversion) = explode(":", $header);
2435
2436 if ($htag == "tt-rss" && $hversion == VERSION) {
2437 $rv .= $contents;
2438 continue;
2439 }
2440 }
2441 }
2442
2443 $minified = JShrink\Minifier::minify(file_get_contents("js/$js"));
2444 file_put_contents($cached_file, "tt-rss:" . VERSION . "\n" . $minified);
2445 $rv .= $minified;
2446
2447 } else {
2448 $rv .= file_get_contents("js/$js"); // no cache in debug mode
2449 }
2450 }
2451
2452 return $rv;
2453 }
2454
2455 function calculate_dep_timestamp() {
2456 $files = array_merge(glob("js/*.js"), glob("css/*.css"));
2457
2458 $max_ts = -1;
2459
2460 foreach ($files as $file) {
2461 if (filemtime($file) > $max_ts) $max_ts = filemtime($file);
2462 }
2463
2464 return $max_ts;
2465 }
2466
2467 function T_js_decl($s1, $s2) {
2468 if ($s1 && $s2) {
2469 $s1 = preg_replace("/\n/", "", $s1);
2470 $s2 = preg_replace("/\n/", "", $s2);
2471
2472 $s1 = preg_replace("/\"/", "\\\"", $s1);
2473 $s2 = preg_replace("/\"/", "\\\"", $s2);
2474
2475 return "T_messages[\"$s1\"] = \"$s2\";\n";
2476 }
2477 }
2478
2479 function init_js_translations() {
2480
2481 print 'var T_messages = new Object();
2482
2483 function __(msg) {
2484 if (T_messages[msg]) {
2485 return T_messages[msg];
2486 } else {
2487 return msg;
2488 }
2489 }
2490
2491 function ngettext(msg1, msg2, n) {
2492 return __((parseInt(n) > 1) ? msg2 : msg1);
2493 }';
2494
2495 $l10n = _get_reader();
2496
2497 for ($i = 0; $i < $l10n->total; $i++) {
2498 $orig = $l10n->get_original_string($i);
2499 if(strpos($orig, "\000") !== FALSE) { // Plural forms
2500 $key = explode(chr(0), $orig);
2501 print T_js_decl($key[0], _ngettext($key[0], $key[1], 1)); // Singular
2502 print T_js_decl($key[1], _ngettext($key[0], $key[1], 2)); // Plural
2503 } else {
2504 $translation = __($orig);
2505 print T_js_decl($orig, $translation);
2506 }
2507 }
2508 }
2509
2510 function get_theme_path($theme) {
2511 if ($theme == "default.php")
2512 return "css/default.css";
2513
2514 $check = "themes/$theme";
2515 if (file_exists($check)) return $check;
2516
2517 $check = "themes.local/$theme";
2518 if (file_exists($check)) return $check;
2519 }
2520
2521 function theme_valid($theme) {
2522 $bundled_themes = [ "default.php", "night.css", "compact.css" ];
2523
2524 if (in_array($theme, $bundled_themes)) return true;
2525
2526 $file = "themes/" . basename($theme);
2527
2528 if (!file_exists($file)) $file = "themes.local/" . basename($theme);
2529
2530 if (file_exists($file) && is_readable($file)) {
2531 $fh = fopen($file, "r");
2532
2533 if ($fh) {
2534 $header = fgets($fh);
2535 fclose($fh);
2536
2537 return strpos($header, "supports-version:" . VERSION_STATIC) !== FALSE;
2538 }
2539 }
2540
2541 return false;
2542 }
2543
2544 /**
2545 * @SuppressWarnings(unused)
2546 */
2547 function error_json($code) {
2548 require_once "errors.php";
2549
2550 @$message = $ERRORS[$code];
2551
2552 return json_encode(array("error" =>
2553 array("code" => $code, "message" => $message)));
2554
2555 }
2556
2557 /*function abs_to_rel_path($dir) {
2558 $tmp = str_replace(dirname(__DIR__), "", $dir);
2559
2560 if (strlen($tmp) > 0 && substr($tmp, 0, 1) == "/") $tmp = substr($tmp, 1);
2561
2562 return $tmp;
2563 }*/
2564
2565 function get_upload_error_message($code) {
2566
2567 $errors = array(
2568 0 => __('There is no error, the file uploaded with success'),
2569 1 => __('The uploaded file exceeds the upload_max_filesize directive in php.ini'),
2570 2 => __('The uploaded file exceeds the MAX_FILE_SIZE directive that was specified in the HTML form'),
2571 3 => __('The uploaded file was only partially uploaded'),
2572 4 => __('No file was uploaded'),
2573 6 => __('Missing a temporary folder'),
2574 7 => __('Failed to write file to disk.'),
2575 8 => __('A PHP extension stopped the file upload.'),
2576 );
2577
2578 return $errors[$code];
2579 }
2580
2581 function base64_img($filename) {
2582 if (file_exists($filename)) {
2583 $ext = pathinfo($filename, PATHINFO_EXTENSION);
2584
2585 return "data:image/$ext;base64," . base64_encode(file_get_contents($filename));
2586 } else {
2587 return "";
2588 }
2589 }
2590
2591 /* this is essentially a wrapper for readfile() which allows plugins to hook
2592 output with httpd-specific "fast" implementation i.e. X-Sendfile or whatever else
2593
2594 hook function should return true if request was handled (or at least attempted to)
2595
2596 note that this can be called without user context so the plugin to handle this
2597 should be loaded systemwide in config.php */
2598 function send_local_file($filename) {
2599 if (file_exists($filename)) {
2600 $tmppluginhost = new PluginHost();
2601
2602 $tmppluginhost->load(PLUGINS, PluginHost::KIND_SYSTEM);
2603 $tmppluginhost->load_data();
2604
2605 foreach ($tmppluginhost->get_hooks(PluginHost::HOOK_SEND_LOCAL_FILE) as $plugin) {
2606 if ($plugin->hook_send_local_file($filename)) return true;
2607 }
2608
2609 $mimetype = mime_content_type($filename);
2610
2611 // this is hardly ideal but 1) only media is cached in images/ and 2) seemingly only mp4
2612 // video files are detected as octet-stream by mime_content_type()
2613
2614 if ($mimetype == "application/octet-stream")
2615 $mimetype = "video/mp4";
2616
2617 header("Content-type: $mimetype");
2618
2619 $stamp = gmdate("D, d M Y H:i:s", filemtime($filename)) . " GMT";
2620 header("Last-Modified: $stamp", true);
2621
2622 if (defined('_NGINX_XACCEL_PREFIX') && _NGINX_XACCEL_PREFIX) {
2623 header("X-Accel-Redirect: " . _NGINX_XACCEL_PREFIX . "/" . $filename);
2624
2625 return false;
2626 } else {
2627 return readfile($filename);
2628 }
2629 } else {
2630 return false;
2631 }
2632 }
2633
2634 function check_mysql_tables() {
2635 $pdo = Db::pdo();
2636
2637 $sth = $pdo->prepare("SELECT engine, table_name FROM information_schema.tables WHERE
2638 table_schema = ? AND table_name LIKE 'ttrss_%' AND engine != 'InnoDB'");
2639 $sth->execute([DB_NAME]);
2640
2641 $bad_tables = [];
2642
2643 while ($line = $sth->fetch()) {
2644 array_push($bad_tables, $line);
2645 }
2646
2647 return $bad_tables;
2648 }
2649
2650 function validate_field($string, $allowed, $default = "") {
2651 if (in_array($string, $allowed))
2652 return $string;
2653 else
2654 return $default;
2655 }
2656
2657 function arr_qmarks($arr) {
2658 return str_repeat('?,', count($arr) - 1) . '?';
2659 }
web-based news feed (RSS/Atom) reader and aggregator; see https://tt-rss.org/