include/functions.php

   1 <?php
   2         define('EXPECTED_CONFIG_VERSION', 26);
   3         define('SCHEMA_VERSION', 106);
   4
   5         $fetch_last_error = false;
   6         $pluginhost = false;
   7
   8         function __autoload($class) {
   9                 $class_file = str_replace("_", "/", strtolower(basename($class)));
  10
  11                 $file = dirname(__FILE__)."/../classes/$class_file.php";
  12
  13                 if (file_exists($file)) {
  14                         require $file;
  15                 }
  16
  17         }
  18
  19         mb_internal_encoding("UTF-8");
  20         date_default_timezone_set('UTC');
  21         if (defined('E_DEPRECATED')) {
  22                 error_reporting(E_ALL & ~E_NOTICE & ~E_DEPRECATED);
  23         } else {
  24                 error_reporting(E_ALL & ~E_NOTICE);
  25         }
  26
  27         require_once 'config.php';
  28
  29         if (DB_TYPE == "pgsql") {
  30                 define('SUBSTRING_FOR_DATE', 'SUBSTRING_FOR_DATE');
  31         } else {
  32                 define('SUBSTRING_FOR_DATE', 'SUBSTRING');
  33         }
  34
  35         define('THEME_VERSION_REQUIRED', 1.1);
  36
  37         /**
  38          * Return available translations names.
  39          *
  40          * @access public
  41          * @return array A array of available translations.
  42          */
  43         function get_translations() {
  44                 $tr = array(
  45                                         "auto"  => "Detect automatically",
  46                                         "ca_CA" => "Català",
  47                                         "cs_CZ" => "Česky",
  48                                         "en_US" => "English",
  49                                         "es_ES" => "Español",
  50                                         "de_DE" => "Deutsch",
  51                                         "fr_FR" => "Français",
  52                                         "hu_HU" => "Magyar (Hungarian)",
  53                                         "it_IT" => "Italiano",
  54                                         "ja_JP" => "日本語 (Japanese)",
  55                                         "lv_LV" => "Latviešu",
  56                                         "nb_NO" => "Norwegian bokmål",
  57                                         "nl_NL" => "Dutch",
  58                                         "pl_PL" => "Polski",
  59                                         "ru_RU" => "Русский",
  60                                         "pt_BR" => "Portuguese/Brazil",
  61                                         "zh_CN" => "Simplified Chinese");
  62
  63                 return $tr;
  64         }
  65
  66         require_once "lib/accept-to-gettext.php";
  67         require_once "lib/gettext/gettext.inc";
  68
  69
  70         function startup_gettext() {
  71
  72                 # Get locale from Accept-Language header
  73                 $lang = al2gt(array_keys(get_translations()), "text/html");
  74
  75                 if (defined('_TRANSLATION_OVERRIDE_DEFAULT')) {
  76                         $lang = _TRANSLATION_OVERRIDE_DEFAULT;
  77                 }
  78
  79                 if ($_SESSION["language"] && $_SESSION["language"] != "auto") {
  80                         $lang = $_SESSION["language"];
  81                 }
  82
  83                 if ($lang) {
  84                         if (defined('LC_MESSAGES')) {
  85                                 _setlocale(LC_MESSAGES, $lang);
  86                         } else if (defined('LC_ALL')) {
  87                                 _setlocale(LC_ALL, $lang);
  88                         }
  89
  90                         _bindtextdomain("messages", "locale");
  91
  92                         _textdomain("messages");
  93                         _bind_textdomain_codeset("messages", "UTF-8");
  94                 }
  95         }
  96
  97         startup_gettext();
  98
  99         require_once 'db-prefs.php';
 100         require_once 'version.php';
 101         require_once 'ccache.php';
 102         require_once 'labels.php';
 103
 104         define('SELF_USER_AGENT', 'Tiny Tiny RSS/' . VERSION . ' (http://tt-rss.org/)');
 105         ini_set('user_agent', SELF_USER_AGENT);
 106
 107         require_once 'lib/pubsubhubbub/publisher.php';
 108
 109         $tz_offset = -1;
 110         $utc_tz = new DateTimeZone('UTC');
 111         $schema_version = false;
 112
 113         /**
 114          * Print a timestamped debug message.
 115          *
 116          * @param string $msg The debug message.
 117          * @return void
 118          */
 119         function _debug($msg) {
 120                 $ts = strftime("%H:%M:%S", time());
 121                 if (function_exists('posix_getpid')) {
 122                         $ts = "$ts/" . posix_getpid();
 123                 }
 124
 125                 if (!(defined('QUIET') && QUIET)) {
 126                         print "[$ts] $msg\n";
 127                 }
 128
 129                 if (defined('LOGFILE'))  {
 130                         $fp = fopen(LOGFILE, 'a+');
 131
 132                         if ($fp) {
 133                                 fputs($fp, "[$ts] $msg\n");
 134                                 fclose($fp);
 135                         }
 136                 }
 137
 138         } // function _debug
 139
 140         /**
 141          * Purge a feed old posts.
 142          *
 143          * @param mixed $link A database connection.
 144          * @param mixed $feed_id The id of the purged feed.
 145          * @param mixed $purge_interval Olderness of purged posts.
 146          * @param boolean $debug Set to True to enable the debug. False by default.
 147          * @access public
 148          * @return void
 149          */
 150         function purge_feed($link, $feed_id, $purge_interval, $debug = false) {
 151
 152                 if (!$purge_interval) $purge_interval = feed_purge_interval($link, $feed_id);
 153
 154                 $rows = -1;
 155
 156                 $result = db_query($link,
 157                         "SELECT owner_uid FROM ttrss_feeds WHERE id = '$feed_id'");
 158
 159                 $owner_uid = false;
 160
 161                 if (db_num_rows($result) == 1) {
 162                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 163                 }
 164
 165                 if ($purge_interval == -1 || !$purge_interval) {
 166                         if ($owner_uid) {
 167                                 ccache_update($link, $feed_id, $owner_uid);
 168                         }
 169                         return;
 170                 }
 171
 172                 if (!$owner_uid) return;
 173
 174                 if (FORCE_ARTICLE_PURGE == 0) {
 175                         $purge_unread = get_pref($link, "PURGE_UNREAD_ARTICLES",
 176                                 $owner_uid, false);
 177                 } else {
 178                         $purge_unread = true;
 179                         $purge_interval = FORCE_ARTICLE_PURGE;
 180                 }
 181
 182                 if (!$purge_unread) $query_limit = " unread = false AND ";
 183
 184                 if (DB_TYPE == "pgsql") {
 185                         $pg_version = get_pgsql_version($link);
 186
 187                         if (preg_match("/^7\./", $pg_version) || preg_match("/^8\.0/", $pg_version)) {
 188
 189                                 $result = db_query($link, "DELETE FROM ttrss_user_entries WHERE
 190                                         ttrss_entries.id = ref_id AND
 191                                         marked = false AND
 192                                         feed_id = '$feed_id' AND
 193                                         $query_limit
 194                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 195
 196                         } else {
 197
 198                                 $result = db_query($link, "DELETE FROM ttrss_user_entries
 199                                         USING ttrss_entries
 200                                         WHERE ttrss_entries.id = ref_id AND
 201                                         marked = false AND
 202                                         feed_id = '$feed_id' AND
 203                                         $query_limit
 204                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 205                         }
 206
 207                         $rows = pg_affected_rows($result);
 208
 209                 } else {
 210
 211 /*                      $result = db_query($link, "DELETE FROM ttrss_user_entries WHERE
 212                                 marked = false AND feed_id = '$feed_id' AND
 213                                 (SELECT date_updated FROM ttrss_entries WHERE
 214                                         id = ref_id) < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)"); */
 215
 216                         $result = db_query($link, "DELETE FROM ttrss_user_entries
 217                                 USING ttrss_user_entries, ttrss_entries
 218                                 WHERE ttrss_entries.id = ref_id AND
 219                                 marked = false AND
 220                                 feed_id = '$feed_id' AND
 221                                 $query_limit
 222                                 ttrss_entries.date_updated < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)");
 223
 224                         $rows = mysql_affected_rows($link);
 225
 226                 }
 227
 228                 ccache_update($link, $feed_id, $owner_uid);
 229
 230                 if ($debug) {
 231                         _debug("Purged feed $feed_id ($purge_interval): deleted $rows articles");
 232                 }
 233
 234                 return $rows;
 235         } // function purge_feed
 236
 237         function feed_purge_interval($link, $feed_id) {
 238
 239                 $result = db_query($link, "SELECT purge_interval, owner_uid FROM ttrss_feeds
 240                         WHERE id = '$feed_id'");
 241
 242                 if (db_num_rows($result) == 1) {
 243                         $purge_interval = db_fetch_result($result, 0, "purge_interval");
 244                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 245
 246                         if ($purge_interval == 0) $purge_interval = get_pref($link,
 247                                 'PURGE_OLD_DAYS', $owner_uid);
 248
 249                         return $purge_interval;
 250
 251                 } else {
 252                         return -1;
 253                 }
 254         }
 255
 256         function purge_orphans($link, $do_output = false) {
 257
 258                 // purge orphaned posts in main content table
 259                 $result = db_query($link, "DELETE FROM ttrss_entries WHERE
 260                         (SELECT COUNT(int_id) FROM ttrss_user_entries WHERE ref_id = id) = 0");
 261
 262                 if ($do_output) {
 263                         $rows = db_affected_rows($link, $result);
 264                         _debug("Purged $rows orphaned posts.");
 265                 }
 266         }
 267
 268         function get_feed_update_interval($link, $feed_id) {
 269                 $result = db_query($link, "SELECT owner_uid, update_interval FROM
 270                         ttrss_feeds WHERE id = '$feed_id'");
 271
 272                 if (db_num_rows($result) == 1) {
 273                         $update_interval = db_fetch_result($result, 0, "update_interval");
 274                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 275
 276                         if ($update_interval != 0) {
 277                                 return $update_interval;
 278                         } else {
 279                                 return get_pref($link, 'DEFAULT_UPDATE_INTERVAL', $owner_uid, false);
 280                         }
 281
 282                 } else {
 283                         return -1;
 284                 }
 285         }
 286
 287         function fetch_file_contents($url, $type = false, $login = false, $pass = false, $post_query = false, $timeout = false) {
 288                 $login = urlencode($login);
 289                 $pass = urlencode($pass);
 290
 291                 global $fetch_last_error;
 292
 293                 if (function_exists('curl_init') && !ini_get("open_basedir")) {
 294
 295                         if (ini_get("safe_mode")) {
 296                                 $ch = curl_init(geturl($url));
 297                         } else {
 298                                 $ch = curl_init($url);
 299                         }
 300
 301                         curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, $timeout ? $timeout : 15);
 302                         curl_setopt($ch, CURLOPT_TIMEOUT, $timeout ? $timeout : 45);
 303                         curl_setopt($ch, CURLOPT_FOLLOWLOCATION, !ini_get("safe_mode"));
 304                         curl_setopt($ch, CURLOPT_MAXREDIRS, 20);
 305                         curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
 306                         curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
 307                         curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
 308                         curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_ANY);
 309                         curl_setopt($ch, CURLOPT_USERAGENT, SELF_USER_AGENT);
 310                         curl_setopt($ch, CURLOPT_ENCODING , "gzip");
 311                         curl_setopt($ch, CURLOPT_REFERER, $url);
 312
 313                         if ($post_query) {
 314                                 curl_setopt($ch, CURLOPT_POST, true);
 315                                 curl_setopt($ch, CURLOPT_POSTFIELDS, $post_query);
 316                         }
 317
 318                         if ($login && $pass)
 319                                 curl_setopt($ch, CURLOPT_USERPWD, "$login:$pass");
 320
 321                         $contents = @curl_exec($ch);
 322
 323                         if (curl_errno($ch) === 23 || curl_errno($ch) === 61) {
 324                                 curl_setopt($ch, CURLOPT_ENCODING, 'none');
 325                                 $contents = @curl_exec($ch);
 326                         }
 327
 328                         if ($contents === false) {
 329                                 $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
 330                                 curl_close($ch);
 331                                 return false;
 332                         }
 333
 334                         $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
 335                         $content_type = curl_getinfo($ch, CURLINFO_CONTENT_TYPE);
 336
 337                         if ($http_code != 200 || $type && strpos($content_type, "$type") === false) {
 338                                 if (curl_errno($ch) != 0) {
 339                                         $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
 340                                 } else {
 341                                         $fetch_last_error = "HTTP Code: $http_code";
 342                                 }
 343                                 curl_close($ch);
 344                                 return false;
 345                         }
 346
 347                         curl_close($ch);
 348
 349                         return $contents;
 350                 } else {
 351                         if ($login && $pass ){
 352                                 $url_parts = array();
 353
 354                                 preg_match("/(^[^:]*):\/\/(.*)/", $url, $url_parts);
 355
 356                                 if ($url_parts[1] && $url_parts[2]) {
 357                                         $url = $url_parts[1] . "://$login:$pass@" . $url_parts[2];
 358                                 }
 359                         }
 360
 361                         $data = @file_get_contents($url);
 362
 363                         @$gzdecoded = gzdecode($data);
 364                         if ($gzdecoded) $data = $gzdecoded;
 365
 366                         if (!$data && function_exists('error_get_last')) {
 367                                 $error = error_get_last();
 368                                 $fetch_last_error = $error["message"];
 369                         }
 370                         return $data;
 371                 }
 372
 373         }
 374
 375         /**
 376          * Try to determine the favicon URL for a feed.
 377          * adapted from wordpress favicon plugin by Jeff Minard (http://thecodepro.com/)
 378          * http://dev.wp-plugins.org/file/favatars/trunk/favatars.php
 379          *
 380          * @param string $url A feed or page URL
 381          * @access public
 382          * @return mixed The favicon URL, or false if none was found.
 383          */
 384         function get_favicon_url($url) {
 385
 386                 $favicon_url = false;
 387
 388                 if ($html = @fetch_file_contents($url)) {
 389
 390                         libxml_use_internal_errors(true);
 391
 392                         $doc = new DOMDocument();
 393                         $doc->loadHTML($html);
 394                         $xpath = new DOMXPath($doc);
 395
 396                         $base = $xpath->query('/html/head/base');
 397                         foreach ($base as $b) {
 398                                 $url = $b->getAttribute("href");
 399                                 break;
 400                         }
 401
 402                         $entries = $xpath->query('/html/head/link[@rel="shortcut icon" or @rel="icon"]');
 403                         if (count($entries) > 0) {
 404                                 foreach ($entries as $entry) {
 405                                         $favicon_url = rewrite_relative_url($url, $entry->getAttribute("href"));
 406                                         break;
 407                                 }
 408                         }
 409                 }
 410
 411                 if (!$favicon_url)
 412                         $favicon_url = rewrite_relative_url($url, "/favicon.ico");
 413
 414                 return $favicon_url;
 415         } // function get_favicon_url
 416
 417         function check_feed_favicon($site_url, $feed, $link) {
 418 #               print "FAVICON [$site_url]: $favicon_url\n";
 419
 420                 $icon_file = ICONS_DIR . "/$feed.ico";
 421
 422                 if (!file_exists($icon_file)) {
 423                         $favicon_url = get_favicon_url($site_url);
 424
 425                         if ($favicon_url) {
 426                                 // Limiting to "image" type misses those served with text/plain
 427                                 $contents = fetch_file_contents($favicon_url); // , "image");
 428
 429                                 if ($contents) {
 430                                         // Crude image type matching.
 431                                         // Patterns gleaned from the file(1) source code.
 432                                         if (preg_match('/^\x00\x00\x01\x00/', $contents)) {
 433                                                 // 0       string  \000\000\001\000        MS Windows icon resource
 434                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa MS Windows icon resource");
 435                                         }
 436                                         elseif (preg_match('/^GIF8/', $contents)) {
 437                                                 // 0       string          GIF8            GIF image data
 438                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa GIF image");
 439                                         }
 440                                         elseif (preg_match('/^\x89PNG\x0d\x0a\x1a\x0a/', $contents)) {
 441                                                 // 0       string          \x89PNG\x0d\x0a\x1a\x0a         PNG image data
 442                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa PNG image");
 443                                         }
 444                                         elseif (preg_match('/^\xff\xd8/', $contents)) {
 445                                                 // 0       beshort         0xffd8          JPEG image data
 446                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa JPG image");
 447                                         }
 448                                         else {
 449                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa UNKNOWN type");
 450                                                 $contents = "";
 451                                         }
 452                                 }
 453
 454                                 if ($contents) {
 455                                         $fp = @fopen($icon_file, "w");
 456
 457                                         if ($fp) {
 458                                                 fwrite($fp, $contents);
 459                                                 fclose($fp);
 460                                                 chmod($icon_file, 0644);
 461                                         }
 462                                 }
 463                         }
 464                 }
 465         }
 466
 467         function print_select($id, $default, $values, $attributes = "") {
 468                 print "<select name=\"$id\" id=\"$id\" $attributes>";
 469                 foreach ($values as $v) {
 470                         if ($v == $default)
 471                                 $sel = "selected=\"1\"";
 472                          else
 473                                 $sel = "";
 474
 475                         $v = trim($v);
 476
 477                         print "<option value=\"$v\" $sel>$v</option>";
 478                 }
 479                 print "</select>";
 480         }
 481
 482         function print_select_hash($id, $default, $values, $attributes = "") {
 483                 print "<select name=\"$id\" id='$id' $attributes>";
 484                 foreach (array_keys($values) as $v) {
 485                         if ($v == $default)
 486                                 $sel = 'selected="selected"';
 487                          else
 488                                 $sel = "";
 489
 490                         $v = trim($v);
 491
 492                         print "<option $sel value=\"$v\">".$values[$v]."</option>";
 493                 }
 494
 495                 print "</select>";
 496         }
 497
 498         function print_radio($id, $default, $true_is, $values, $attributes = "") {
 499                 foreach ($values as $v) {
 500
 501                         if ($v == $default)
 502                                 $sel = "checked";
 503                          else
 504                                 $sel = "";
 505
 506                         if ($v == $true_is) {
 507                                 $sel .= " value=\"1\"";
 508                         } else {
 509                                 $sel .= " value=\"0\"";
 510                         }
 511
 512                         print "<input class=\"noborder\" dojoType=\"dijit.form.RadioButton\"
 513                                 type=\"radio\" $sel $attributes name=\"$id\">&nbsp;$v&nbsp;";
 514
 515                 }
 516         }
 517
 518         function initialize_user_prefs($link, $uid, $profile = false) {
 519
 520                 $uid = db_escape_string($link, $uid);
 521
 522                 if (!$profile) {
 523                         $profile = "NULL";
 524                         $profile_qpart = "AND profile IS NULL";
 525                 } else {
 526                         $profile_qpart = "AND profile = '$profile'";
 527                 }
 528
 529                 if (get_schema_version($link) < 63) $profile_qpart = "";
 530
 531                 db_query($link, "BEGIN");
 532
 533                 $result = db_query($link, "SELECT pref_name,def_value FROM ttrss_prefs");
 534
 535                 $u_result = db_query($link, "SELECT pref_name
 536                         FROM ttrss_user_prefs WHERE owner_uid = '$uid' $profile_qpart");
 537
 538                 $active_prefs = array();
 539
 540                 while ($line = db_fetch_assoc($u_result)) {
 541                         array_push($active_prefs, $line["pref_name"]);
 542                 }
 543
 544                 while ($line = db_fetch_assoc($result)) {
 545                         if (array_search($line["pref_name"], $active_prefs) === FALSE) {
 546 //                              print "adding " . $line["pref_name"] . "<br>";
 547
 548                                 if (get_schema_version($link) < 63) {
 549                                         db_query($link, "INSERT INTO ttrss_user_prefs
 550                                                 (owner_uid,pref_name,value) VALUES
 551                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."')");
 552
 553                                 } else {
 554                                         db_query($link, "INSERT INTO ttrss_user_prefs
 555                                                 (owner_uid,pref_name,value, profile) VALUES
 556                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."', $profile)");
 557                                 }
 558
 559                         }
 560                 }
 561
 562                 db_query($link, "COMMIT");
 563
 564         }
 565
 566         function get_ssl_certificate_id() {
 567                 if ($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"]) {
 568                         return sha1($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"] .
 569                                 $_SERVER["REDIRECT_SSL_CLIENT_V_START"] .
 570                                 $_SERVER["REDIRECT_SSL_CLIENT_V_END"] .
 571                                 $_SERVER["REDIRECT_SSL_CLIENT_S_DN"]);
 572                 }
 573                 return "";
 574         }
 575
 576         function authenticate_user($link, $login, $password, $check_only = false) {
 577
 578                 if (!SINGLE_USER_MODE) {
 579
 580                         $user_id = false;
 581
 582                         global $pluginhost;
 583                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_AUTH_USER) as $plugin) {
 584
 585                                 $user_id = (int) $plugin->authenticate($login, $password);
 586
 587                                 if ($user_id) {
 588                                         $_SESSION["auth_module"] = strtolower(get_class($plugin));
 589                                         break;
 590                                 }
 591                         }
 592
 593                         if ($user_id && !$check_only) {
 594                                 $_SESSION["uid"] = $user_id;
 595
 596                                 $result = db_query($link, "SELECT login,access_level,pwd_hash FROM ttrss_users
 597                                         WHERE id = '$user_id'");
 598
 599                                 $_SESSION["name"] = db_fetch_result($result, 0, "login");
 600                                 $_SESSION["access_level"] = db_fetch_result($result, 0, "access_level");
 601                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 602
 603                                 db_query($link, "UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 604                                         $_SESSION["uid"]);
 605
 606                                 $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 607                                 $_SESSION["pwd_hash"] = db_fetch_result($result, 0, "pwd_hash");
 608
 609                                 $_SESSION["last_version_check"] = time();
 610
 611                                 initialize_user_prefs($link, $_SESSION["uid"]);
 612
 613                                 return true;
 614                         }
 615
 616                         return false;
 617
 618                 } else {
 619
 620                         $_SESSION["uid"] = 1;
 621                         $_SESSION["name"] = "admin";
 622                         $_SESSION["access_level"] = 10;
 623
 624                         $_SESSION["hide_hello"] = true;
 625                         $_SESSION["hide_logout"] = true;
 626
 627                         $_SESSION["auth_module"] = false;
 628
 629                         if (!$_SESSION["csrf_token"]) {
 630                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 631                         }
 632
 633                         $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 634
 635                         initialize_user_prefs($link, $_SESSION["uid"]);
 636
 637                         return true;
 638                 }
 639         }
 640
 641         function make_password($length = 8) {
 642
 643                 $password = "";
 644                 $possible = "0123456789abcdfghjkmnpqrstvwxyzABCDFGHJKMNPQRSTVWXYZ";
 645
 646         $i = 0;
 647
 648                 while ($i < $length) {
 649                         $char = substr($possible, mt_rand(0, strlen($possible)-1), 1);
 650
 651                         if (!strstr($password, $char)) {
 652                                 $password .= $char;
 653                                 $i++;
 654                         }
 655                 }
 656                 return $password;
 657         }
 658
 659         // this is called after user is created to initialize default feeds, labels
 660         // or whatever else
 661
 662         // user preferences are checked on every login, not here
 663
 664         function initialize_user($link, $uid) {
 665
 666                 db_query($link, "insert into ttrss_feeds (owner_uid,title,feed_url)
 667                         values ('$uid', 'Tiny Tiny RSS: New Releases',
 668                         'http://tt-rss.org/releases.rss')");
 669
 670                 db_query($link, "insert into ttrss_feeds (owner_uid,title,feed_url)
 671                         values ('$uid', 'Tiny Tiny RSS: Forum',
 672                                 'http://tt-rss.org/forum/rss.php')");
 673         }
 674
 675         function logout_user() {
 676                 session_destroy();
 677                 if (isset($_COOKIE[session_name()])) {
 678                    setcookie(session_name(), '', time()-42000, '/');
 679                 }
 680         }
 681
 682         function validate_csrf($csrf_token) {
 683                 return $csrf_token == $_SESSION['csrf_token'];
 684         }
 685
 686         function validate_session($link) {
 687                 if (SINGLE_USER_MODE) return true;
 688
 689                 $check_ip = $_SESSION['ip_address'];
 690
 691                 switch (SESSION_CHECK_ADDRESS) {
 692                 case 0:
 693                         $check_ip = '';
 694                         break;
 695                 case 1:
 696                         $check_ip = substr($check_ip, 0, strrpos($check_ip, '.')+1);
 697                         break;
 698                 case 2:
 699                         $check_ip = substr($check_ip, 0, strrpos($check_ip, '.'));
 700                         $check_ip = substr($check_ip, 0, strrpos($check_ip, '.')+1);
 701                         break;
 702                 };
 703
 704                 if ($check_ip && strpos($_SERVER['REMOTE_ADDR'], $check_ip) !== 0) {
 705                         $_SESSION["login_error_msg"] =
 706                                 __("Session failed to validate (incorrect IP)");
 707                         return false;
 708                 }
 709
 710                 if ($_SESSION["ref_schema_version"] != get_schema_version($link, true))
 711                         return false;
 712
 713                 if ($_SESSION["uid"]) {
 714
 715                         $result = db_query($link,
 716                                 "SELECT pwd_hash FROM ttrss_users WHERE id = '".$_SESSION["uid"]."'");
 717
 718                         $pwd_hash = db_fetch_result($result, 0, "pwd_hash");
 719
 720                         if ($pwd_hash != $_SESSION["pwd_hash"]) {
 721                                 return false;
 722                         }
 723                 }
 724
 725 /*              if ($_SESSION["cookie_lifetime"] && $_SESSION["uid"]) {
 726
 727                         //print_r($_SESSION);
 728
 729                         if (time() > $_SESSION["cookie_lifetime"]) {
 730                                 return false;
 731                         }
 732                 } */
 733
 734                 return true;
 735         }
 736
 737         function load_user_plugins($link, $owner_uid) {
 738                 if ($owner_uid) {
 739                         $plugins = get_pref($link, "_ENABLED_PLUGINS", $owner_uid);
 740
 741                         global $pluginhost;
 742                         $pluginhost->load($plugins, $pluginhost::KIND_USER, $owner_uid);
 743
 744                         if (get_schema_version($link) > 100) {
 745                                 $pluginhost->load_data();
 746                         }
 747                 }
 748         }
 749
 750         function login_sequence($link) {
 751                 $_SESSION["prefs_cache"] = false;
 752
 753                 if (SINGLE_USER_MODE) {
 754                         authenticate_user($link, "admin", null);
 755                         cache_prefs($link);
 756                         load_user_plugins($link, $_SESSION["uid"]);
 757                 } else {
 758                         if (!$_SESSION["uid"] || !validate_session($link)) {
 759
 760                                 if (AUTH_AUTO_LOGIN && authenticate_user($link, null, null)) {
 761                                     $_SESSION["ref_schema_version"] = get_schema_version($link, true);
 762                                 } else {
 763                                          authenticate_user($link, null, null, true);
 764                                 }
 765
 766                                 if (!$_SESSION["uid"]) render_login_form($link);
 767
 768                         } else {
 769                                 /* bump login timestamp */
 770                                 db_query($link, "UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 771                                         $_SESSION["uid"]);
 772                                 $_SESSION["last_login_update"] = time();
 773                         }
 774
 775                         if ($_SESSION["uid"] && $_SESSION["language"] && SESSION_COOKIE_LIFETIME > 0) {
 776                                 setcookie("ttrss_lang", $_SESSION["language"],
 777                                         time() + SESSION_COOKIE_LIFETIME);
 778                         }
 779
 780                         if ($_SESSION["uid"]) {
 781                                 cache_prefs($link);
 782                                 load_user_plugins($link, $_SESSION["uid"]);
 783
 784                                 /* cleanup ccache */
 785
 786                                 db_query($link, "DELETE FROM ttrss_counters_cache WHERE owner_uid = ".
 787                                         $_SESSION["uid"] . " AND
 788                                                 (SELECT COUNT(id) FROM ttrss_feeds WHERE
 789                                                         ttrss_feeds.id = feed_id) = 0");
 790
 791                                 db_query($link, "DELETE FROM ttrss_cat_counters_cache WHERE owner_uid = ".
 792                                         $_SESSION["uid"] . " AND
 793                                                 (SELECT COUNT(id) FROM ttrss_feed_categories WHERE
 794                                                         ttrss_feed_categories.id = feed_id) = 0");
 795
 796                         }
 797
 798                 }
 799         }
 800
 801         function truncate_string($str, $max_len, $suffix = '&hellip;') {
 802                 if (mb_strlen($str, "utf-8") > $max_len - 3) {
 803                         return mb_substr($str, 0, $max_len, "utf-8") . $suffix;
 804                 } else {
 805                         return $str;
 806                 }
 807         }
 808
 809         function convert_timestamp($timestamp, $source_tz, $dest_tz) {
 810
 811                 try {
 812                         $source_tz = new DateTimeZone($source_tz);
 813                 } catch (Exception $e) {
 814                         $source_tz = new DateTimeZone('UTC');
 815                 }
 816
 817                 try {
 818                         $dest_tz = new DateTimeZone($dest_tz);
 819                 } catch (Exception $e) {
 820                         $dest_tz = new DateTimeZone('UTC');
 821                 }
 822
 823                 $dt = new DateTime(date('Y-m-d H:i:s', $timestamp), $source_tz);
 824                 return $dt->format('U') + $dest_tz->getOffset($dt);
 825         }
 826
 827         function make_local_datetime($link, $timestamp, $long, $owner_uid = false,
 828                                         $no_smart_dt = false) {
 829
 830                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 831                 if (!$timestamp) $timestamp = '1970-01-01 0:00';
 832
 833                 global $utc_tz;
 834                 global $tz_offset;
 835
 836                 # We store date in UTC internally
 837                 $dt = new DateTime($timestamp, $utc_tz);
 838
 839                 if ($tz_offset == -1) {
 840
 841                         $user_tz_string = get_pref($link, 'USER_TIMEZONE', $owner_uid);
 842
 843                         try {
 844                                 $user_tz = new DateTimeZone($user_tz_string);
 845                         } catch (Exception $e) {
 846                                 $user_tz = $utc_tz;
 847                         }
 848
 849                         $tz_offset = $user_tz->getOffset($dt);
 850                 }
 851
 852                 $user_timestamp = $dt->format('U') + $tz_offset;
 853
 854                 if (!$no_smart_dt) {
 855                         return smart_date_time($link, $user_timestamp,
 856                                 $tz_offset, $owner_uid);
 857                 } else {
 858                         if ($long)
 859                                 $format = get_pref($link, 'LONG_DATE_FORMAT', $owner_uid);
 860                         else
 861                                 $format = get_pref($link, 'SHORT_DATE_FORMAT', $owner_uid);
 862
 863                         return date($format, $user_timestamp);
 864                 }
 865         }
 866
 867         function smart_date_time($link, $timestamp, $tz_offset = 0, $owner_uid = false) {
 868                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 869
 870                 if (date("Y.m.d", $timestamp) == date("Y.m.d", time() + $tz_offset)) {
 871                         return date("G:i", $timestamp);
 872                 } else if (date("Y", $timestamp) == date("Y", time() + $tz_offset)) {
 873                         $format = get_pref($link, 'SHORT_DATE_FORMAT', $owner_uid);
 874                         return date($format, $timestamp);
 875                 } else {
 876                         $format = get_pref($link, 'LONG_DATE_FORMAT', $owner_uid);
 877                         return date($format, $timestamp);
 878                 }
 879         }
 880
 881         function sql_bool_to_bool($s) {
 882                 if ($s == "t" || $s == "1" || strtolower($s) == "true") {
 883                         return true;
 884                 } else {
 885                         return false;
 886                 }
 887         }
 888
 889         function bool_to_sql_bool($s) {
 890                 if ($s) {
 891                         return "true";
 892                 } else {
 893                         return "false";
 894                 }
 895         }
 896
 897         // Session caching removed due to causing wrong redirects to upgrade
 898         // script when get_schema_version() is called on an obsolete session
 899         // created on a previous schema version.
 900         function get_schema_version($link, $nocache = false) {
 901                 global $schema_version;
 902
 903                 if (!$schema_version) {
 904                         $result = db_query($link, "SELECT schema_version FROM ttrss_version");
 905                         $version = db_fetch_result($result, 0, "schema_version");
 906                         $schema_version = $version;
 907                         return $version;
 908                 } else {
 909                         return $schema_version;
 910                 }
 911         }
 912
 913         function sanity_check($link) {
 914                 require_once 'errors.php';
 915
 916                 $error_code = 0;
 917                 $schema_version = get_schema_version($link, true);
 918
 919                 if ($schema_version != SCHEMA_VERSION) {
 920                         $error_code = 5;
 921                 }
 922
 923                 if (DB_TYPE == "mysql") {
 924                         $result = db_query($link, "SELECT true", false);
 925                         if (db_num_rows($result) != 1) {
 926                                 $error_code = 10;
 927                         }
 928                 }
 929
 930                 if (db_escape_string($link, "testTEST") != "testTEST") {
 931                         $error_code = 12;
 932                 }
 933
 934                 return array("code" => $error_code, "message" => $ERRORS[$error_code]);
 935         }
 936
 937         function file_is_locked($filename) {
 938                 if (function_exists('flock')) {
 939                         $fp = @fopen(LOCK_DIRECTORY . "/$filename", "r");
 940                         if ($fp) {
 941                                 if (flock($fp, LOCK_EX | LOCK_NB)) {
 942                                         flock($fp, LOCK_UN);
 943                                         fclose($fp);
 944                                         return false;
 945                                 }
 946                                 fclose($fp);
 947                                 return true;
 948                         } else {
 949                                 return false;
 950                         }
 951                 }
 952                 return true; // consider the file always locked and skip the test
 953         }
 954
 955         function make_lockfile($filename) {
 956                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
 957
 958                 if ($fp && flock($fp, LOCK_EX | LOCK_NB)) {
 959                         if (function_exists('posix_getpid')) {
 960                                 fwrite($fp, posix_getpid() . "\n");
 961                         }
 962                         return $fp;
 963                 } else {
 964                         return false;
 965                 }
 966         }
 967
 968         function make_stampfile($filename) {
 969                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
 970
 971                 if (flock($fp, LOCK_EX | LOCK_NB)) {
 972                         fwrite($fp, time() . "\n");
 973                         flock($fp, LOCK_UN);
 974                         fclose($fp);
 975                         return true;
 976                 } else {
 977                         return false;
 978                 }
 979         }
 980
 981         function sql_random_function() {
 982                 if (DB_TYPE == "mysql") {
 983                         return "RAND()";
 984                 } else {
 985                         return "RANDOM()";
 986                 }
 987         }
 988
 989         function catchup_feed($link, $feed, $cat_view, $owner_uid = false, $max_id = false) {
 990
 991                         if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 992
 993                         //if (preg_match("/^-?[0-9][0-9]*$/", $feed) != false) {
 994
 995                         $ref_check_qpart = ($max_id &&
 996                                 !get_pref($link, 'REVERSE_HEADLINES')) ? "ref_id <= '$max_id'" : "true";
 997
 998                         if (is_numeric($feed)) {
 999                                 if ($cat_view) {
1000
1001                                         if ($feed >= 0) {
1002
1003                                                 if ($feed > 0) {
1004                                                         $children = getChildCategories($link, $feed, $owner_uid);
1005                                                         array_push($children, $feed);
1006
1007                                                         $children = join(",", $children);
1008
1009                                                         $cat_qpart = "cat_id IN ($children)";
1010                                                 } else {
1011                                                         $cat_qpart = "cat_id IS NULL";
1012                                                 }
1013
1014                                                 db_query($link, "UPDATE ttrss_user_entries
1015                                                         SET unread = false,last_read = NOW()
1016                                                         WHERE feed_id IN (SELECT id FROM ttrss_feeds WHERE $cat_qpart)
1017                                                         AND $ref_check_qpart AND unread = true
1018                                                         AND owner_uid = $owner_uid");
1019
1020                                         } else if ($feed == -2) {
1021
1022                                                 db_query($link, "UPDATE ttrss_user_entries
1023                                                         SET unread = false,last_read = NOW() WHERE (SELECT COUNT(*)
1024                                                                 FROM ttrss_user_labels2 WHERE article_id = ref_id) > 0
1025                                                                 AND $ref_check_qpart
1026                                                                 AND unread = true AND owner_uid = $owner_uid");
1027                                         }
1028
1029                                 } else if ($feed > 0) {
1030
1031                                         db_query($link, "UPDATE ttrss_user_entries
1032                                                         SET unread = false,last_read = NOW()
1033                                                         WHERE feed_id = '$feed'
1034                                                         AND $ref_check_qpart AND unread = true
1035                                                         AND owner_uid = $owner_uid");
1036
1037                                 } else if ($feed < 0 && $feed > -10) { // special, like starred
1038
1039                                         if ($feed == -1) {
1040                                                 db_query($link, "UPDATE ttrss_user_entries
1041                                                         SET unread = false,last_read = NOW()
1042                                                         WHERE marked = true
1043                                                         AND $ref_check_qpart AND unread = true
1044                                                         AND owner_uid = $owner_uid");
1045                                         }
1046
1047                                         if ($feed == -2) {
1048                                                 db_query($link, "UPDATE ttrss_user_entries
1049                                                         SET unread = false,last_read = NOW()
1050                                                         WHERE published = true
1051                                                         AND $ref_check_qpart AND unread = true
1052                                                         AND owner_uid = $owner_uid");
1053                                         }
1054
1055                                         if ($feed == -3) {
1056
1057                                                 $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE");
1058
1059                                                 if (DB_TYPE == "pgsql") {
1060                                                         $match_part = "updated > NOW() - INTERVAL '$intl hour' ";
1061                                                 } else {
1062                                                         $match_part = "updated > DATE_SUB(NOW(),
1063                                                                 INTERVAL $intl HOUR) ";
1064                                                 }
1065
1066                                                 $result = db_query($link, "SELECT id FROM ttrss_entries,
1067                                                         ttrss_user_entries WHERE $match_part AND
1068                                                         unread = true AND
1069                                                         ttrss_user_entries.ref_id = ttrss_entries.id AND
1070                                                         owner_uid = $owner_uid");
1071
1072                                                 $affected_ids = array();
1073
1074                                                 while ($line = db_fetch_assoc($result)) {
1075                                                         array_push($affected_ids, $line["id"]);
1076                                                 }
1077
1078                                                 catchupArticlesById($link, $affected_ids, 0);
1079                                         }
1080
1081                                         if ($feed == -4) {
1082                                                 db_query($link, "UPDATE ttrss_user_entries
1083                                                         SET unread = false,last_read = NOW()
1084                                                         WHERE $ref_check_qpart AND unread = true AND
1085                                                         owner_uid = $owner_uid");
1086                                         }
1087
1088                                 } else if ($feed < -10) { // label
1089
1090                                         $label_id = -$feed - 11;
1091
1092                                         db_query($link, "UPDATE ttrss_user_entries, ttrss_user_labels2
1093                                                 SET unread = false, last_read = NOW()
1094                                                         WHERE label_id = '$label_id' AND unread = true
1095                                                         AND $ref_check_qpart
1096                                                         AND owner_uid = '$owner_uid' AND ref_id = article_id");
1097
1098                                 }
1099
1100                                 ccache_update($link, $feed, $owner_uid, $cat_view);
1101
1102                         } else { // tag
1103                                 db_query($link, "BEGIN");
1104
1105                                 $tag_name = db_escape_string($link, $feed);
1106
1107                                 $result = db_query($link, "SELECT post_int_id FROM ttrss_tags
1108                                         WHERE tag_name = '$tag_name' AND owner_uid = $owner_uid");
1109
1110                                 while ($line = db_fetch_assoc($result)) {
1111                                         db_query($link, "UPDATE ttrss_user_entries SET
1112                                                 unread = false, last_read = NOW()
1113                                                 WHERE $ref_check_qpart AND unread = true
1114                                                 AND int_id = " . $line["post_int_id"]);
1115                                 }
1116                                 db_query($link, "COMMIT");
1117                         }
1118         }
1119
1120         function getAllCounters($link) {
1121                 $data = getGlobalCounters($link);
1122
1123                 $data = array_merge($data, getVirtCounters($link));
1124                 $data = array_merge($data, getLabelCounters($link));
1125                 $data = array_merge($data, getFeedCounters($link, $active_feed));
1126                 $data = array_merge($data, getCategoryCounters($link));
1127
1128                 return $data;
1129         }
1130
1131         function getCategoryTitle($link, $cat_id) {
1132
1133                 if ($cat_id == -1) {
1134                         return __("Special");
1135                 } else if ($cat_id == -2) {
1136                         return __("Labels");
1137                 } else {
1138
1139                         $result = db_query($link, "SELECT title FROM ttrss_feed_categories WHERE
1140                                 id = '$cat_id'");
1141
1142                         if (db_num_rows($result) == 1) {
1143                                 return db_fetch_result($result, 0, "title");
1144                         } else {
1145                                 return __("Uncategorized");
1146                         }
1147                 }
1148         }
1149
1150
1151         function getCategoryCounters($link) {
1152                 $ret_arr = array();
1153
1154                 /* Labels category */
1155
1156                 $cv = array("id" => -2, "kind" => "cat",
1157                         "counter" => getCategoryUnread($link, -2));
1158
1159                 array_push($ret_arr, $cv);
1160
1161                 $result = db_query($link, "SELECT id AS cat_id, value AS unread,
1162                         (SELECT COUNT(id) FROM ttrss_feed_categories AS c2
1163                                 WHERE c2.parent_cat = ttrss_feed_categories.id) AS num_children
1164                         FROM ttrss_feed_categories, ttrss_cat_counters_cache
1165                         WHERE ttrss_cat_counters_cache.feed_id = id AND
1166                         ttrss_cat_counters_cache.owner_uid = ttrss_feed_categories.owner_uid AND
1167                         ttrss_feed_categories.owner_uid = " . $_SESSION["uid"]);
1168
1169                 while ($line = db_fetch_assoc($result)) {
1170                         $line["cat_id"] = (int) $line["cat_id"];
1171
1172                         if ($line["num_children"] > 0) {
1173                                 $child_counter = getCategoryChildrenUnread($link, $line["cat_id"], $_SESSION["uid"]);
1174                         } else {
1175                                 $child_counter = 0;
1176                         }
1177
1178                         $cv = array("id" => $line["cat_id"], "kind" => "cat",
1179                                 "counter" => $line["unread"] + $child_counter);
1180
1181                         array_push($ret_arr, $cv);
1182                 }
1183
1184                 /* Special case: NULL category doesn't actually exist in the DB */
1185
1186                 $cv = array("id" => 0, "kind" => "cat",
1187                         "counter" => (int) ccache_find($link, 0, $_SESSION["uid"], true));
1188
1189                 array_push($ret_arr, $cv);
1190
1191                 return $ret_arr;
1192         }
1193
1194         // only accepts real cats (>= 0)
1195         function getCategoryChildrenUnread($link, $cat, $owner_uid = false) {
1196                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1197
1198                 $result = db_query($link, "SELECT id FROM ttrss_feed_categories WHERE parent_cat = '$cat'
1199                                 AND owner_uid = $owner_uid");
1200
1201                 $unread = 0;
1202
1203                 while ($line = db_fetch_assoc($result)) {
1204                         $unread += getCategoryUnread($link, $line["id"], $owner_uid);
1205                         $unread += getCategoryChildrenUnread($link, $line["id"], $owner_uid);
1206                 }
1207
1208                 return $unread;
1209         }
1210
1211         function getCategoryUnread($link, $cat, $owner_uid = false) {
1212
1213                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1214
1215                 if ($cat >= 0) {
1216
1217                         if ($cat != 0) {
1218                                 $cat_query = "cat_id = '$cat'";
1219                         } else {
1220                                 $cat_query = "cat_id IS NULL";
1221                         }
1222
1223                         $result = db_query($link, "SELECT id FROM ttrss_feeds WHERE $cat_query
1224                                         AND owner_uid = " . $owner_uid);
1225
1226                         $cat_feeds = array();
1227                         while ($line = db_fetch_assoc($result)) {
1228                                 array_push($cat_feeds, "feed_id = " . $line["id"]);
1229                         }
1230
1231                         if (count($cat_feeds) == 0) return 0;
1232
1233                         $match_part = implode(" OR ", $cat_feeds);
1234
1235                         $result = db_query($link, "SELECT COUNT(int_id) AS unread
1236                                 FROM ttrss_user_entries
1237                                 WHERE   unread = true AND ($match_part)
1238                                 AND owner_uid = " . $owner_uid);
1239
1240                         $unread = 0;
1241
1242                         # this needs to be rewritten
1243                         while ($line = db_fetch_assoc($result)) {
1244                                 $unread += $line["unread"];
1245                         }
1246
1247                         return $unread;
1248                 } else if ($cat == -1) {
1249                         return getFeedUnread($link, -1) + getFeedUnread($link, -2) + getFeedUnread($link, -3) + getFeedUnread($link, 0);
1250                 } else if ($cat == -2) {
1251
1252                         $result = db_query($link, "
1253                                 SELECT COUNT(unread) AS unread FROM
1254                                         ttrss_user_entries, ttrss_user_labels2
1255                                 WHERE article_id = ref_id AND unread = true
1256                                         AND ttrss_user_entries.owner_uid = '$owner_uid'");
1257
1258                         $unread = db_fetch_result($result, 0, "unread");
1259
1260                         return $unread;
1261
1262                 }
1263         }
1264
1265         function getFeedUnread($link, $feed, $is_cat = false) {
1266                 return getFeedArticles($link, $feed, $is_cat, true, $_SESSION["uid"]);
1267         }
1268
1269         function getLabelUnread($link, $label_id, $owner_uid = false) {
1270                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1271
1272                 $result = db_query($link, "SELECT COUNT(ref_id) AS unread FROM ttrss_user_entries, ttrss_user_labels2
1273                         WHERE owner_uid = '$owner_uid' AND unread = true AND label_id = '$label_id' AND article_id = ref_id");
1274
1275                 if (db_num_rows($result) != 0) {
1276                         return db_fetch_result($result, 0, "unread");
1277                 } else {
1278                         return 0;
1279                 }
1280         }
1281
1282         function getFeedArticles($link, $feed, $is_cat = false, $unread_only = false,
1283                 $owner_uid = false) {
1284
1285                 $n_feed = (int) $feed;
1286                 $need_entries = false;
1287
1288                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1289
1290                 if ($unread_only) {
1291                         $unread_qpart = "unread = true";
1292                 } else {
1293                         $unread_qpart = "true";
1294                 }
1295
1296                 if ($is_cat) {
1297                         return getCategoryUnread($link, $n_feed, $owner_uid);
1298                 } else if ($n_feed == -6) {
1299                         return 0;
1300                 } else if ($feed != "0" && $n_feed == 0) {
1301
1302                         $feed = db_escape_string($link, $feed);
1303
1304                         $result = db_query($link, "SELECT SUM((SELECT COUNT(int_id)
1305                                 FROM ttrss_user_entries,ttrss_entries WHERE int_id = post_int_id
1306                                         AND ref_id = id AND $unread_qpart)) AS count FROM ttrss_tags
1307                                 WHERE owner_uid = $owner_uid AND tag_name = '$feed'");
1308                         return db_fetch_result($result, 0, "count");
1309
1310                 } else if ($n_feed == -1) {
1311                         $match_part = "marked = true";
1312                 } else if ($n_feed == -2) {
1313                         $match_part = "published = true";
1314                 } else if ($n_feed == -3) {
1315                         $match_part = "unread = true AND score >= 0";
1316
1317                         $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE", $owner_uid);
1318
1319                         if (DB_TYPE == "pgsql") {
1320                                 $match_part .= " AND updated > NOW() - INTERVAL '$intl hour' ";
1321                         } else {
1322                                 $match_part .= " AND updated > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
1323                         }
1324
1325                         $need_entries = true;
1326
1327                 } else if ($n_feed == -4) {
1328                         $match_part = "true";
1329                 } else if ($n_feed >= 0) {
1330
1331                         if ($n_feed != 0) {
1332                                 $match_part = "feed_id = '$n_feed'";
1333                         } else {
1334                                 $match_part = "feed_id IS NULL";
1335                         }
1336
1337                 } else if ($feed < -10) {
1338
1339                         $label_id = -$feed - 11;
1340
1341                         return getLabelUnread($link, $label_id, $owner_uid);
1342
1343                 }
1344
1345                 if ($match_part) {
1346
1347                         if ($need_entries) {
1348                                 $from_qpart = "ttrss_user_entries,ttrss_entries";
1349                                 $from_where = "ttrss_entries.id = ttrss_user_entries.ref_id AND";
1350                         } else {
1351                                 $from_qpart = "ttrss_user_entries";
1352                         }
1353
1354                         $query = "SELECT count(int_id) AS unread
1355                                 FROM $from_qpart WHERE
1356                                 $unread_qpart AND $from_where ($match_part) AND ttrss_user_entries.owner_uid = $owner_uid";
1357
1358                         //echo "[$feed/$query]\n";
1359
1360                         $result = db_query($link, $query);
1361
1362                 } else {
1363
1364                         $result = db_query($link, "SELECT COUNT(post_int_id) AS unread
1365                                 FROM ttrss_tags,ttrss_user_entries,ttrss_entries
1366                                 WHERE tag_name = '$feed' AND post_int_id = int_id AND ref_id = ttrss_entries.id
1367                                 AND $unread_qpart AND ttrss_tags.owner_uid = " . $owner_uid);
1368                 }
1369
1370                 $unread = db_fetch_result($result, 0, "unread");
1371
1372                 return $unread;
1373         }
1374
1375         function getGlobalUnread($link, $user_id = false) {
1376
1377                 if (!$user_id) {
1378                         $user_id = $_SESSION["uid"];
1379                 }
1380
1381                 $result = db_query($link, "SELECT SUM(value) AS c_id FROM ttrss_counters_cache
1382                         WHERE owner_uid = '$user_id' AND feed_id > 0");
1383
1384                 $c_id = db_fetch_result($result, 0, "c_id");
1385
1386                 return $c_id;
1387         }
1388
1389         function getGlobalCounters($link, $global_unread = -1) {
1390                 $ret_arr = array();
1391
1392                 if ($global_unread == -1) {
1393                         $global_unread = getGlobalUnread($link);
1394                 }
1395
1396                 $cv = array("id" => "global-unread",
1397                         "counter" => (int) $global_unread);
1398
1399                 array_push($ret_arr, $cv);
1400
1401                 $result = db_query($link, "SELECT COUNT(id) AS fn FROM
1402                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1403
1404                 $subscribed_feeds = db_fetch_result($result, 0, "fn");
1405
1406                 $cv = array("id" => "subscribed-feeds",
1407                         "counter" => (int) $subscribed_feeds);
1408
1409                 array_push($ret_arr, $cv);
1410
1411                 return $ret_arr;
1412         }
1413
1414         function getVirtCounters($link) {
1415
1416                 $ret_arr = array();
1417
1418                 for ($i = 0; $i >= -4; $i--) {
1419
1420                         $count = getFeedUnread($link, $i);
1421
1422                         $cv = array("id" => $i,
1423                                 "counter" => (int) $count);
1424
1425 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1426 //                              $cv["xmsg"] = getFeedArticles($link, $i)." ".__("total");
1427
1428                         array_push($ret_arr, $cv);
1429                 }
1430
1431                 return $ret_arr;
1432         }
1433
1434         function getLabelCounters($link, $descriptions = false) {
1435
1436                 $ret_arr = array();
1437
1438                 $owner_uid = $_SESSION["uid"];
1439
1440                 $result = db_query($link, "SELECT id,caption,COUNT(unread) AS unread
1441                         FROM ttrss_labels2 LEFT JOIN ttrss_user_labels2 ON
1442                                 (ttrss_labels2.id = label_id)
1443                                         LEFT JOIN ttrss_user_entries ON (ref_id = article_id AND unread = true)
1444                                 WHERE ttrss_labels2.owner_uid = $owner_uid GROUP BY ttrss_labels2.id,
1445                                         ttrss_labels2.caption");
1446
1447                 while ($line = db_fetch_assoc($result)) {
1448
1449                         $id = -$line["id"] - 11;
1450
1451                         $label_name = $line["caption"];
1452                         $count = $line["unread"];
1453
1454                         $cv = array("id" => $id,
1455                                 "counter" => (int) $count);
1456
1457                         if ($descriptions)
1458                                 $cv["description"] = $label_name;
1459
1460 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1461 //                              $cv["xmsg"] = getFeedArticles($link, $id)." ".__("total");
1462
1463                         array_push($ret_arr, $cv);
1464                 }
1465
1466                 return $ret_arr;
1467         }
1468
1469         function getFeedCounters($link, $active_feed = false) {
1470
1471                 $ret_arr = array();
1472
1473                 $query = "SELECT ttrss_feeds.id,
1474                                 ttrss_feeds.title,
1475                                 ".SUBSTRING_FOR_DATE."(ttrss_feeds.last_updated,1,19) AS last_updated,
1476                                 last_error, value AS count
1477                         FROM ttrss_feeds, ttrss_counters_cache
1478                         WHERE ttrss_feeds.owner_uid = ".$_SESSION["uid"]."
1479                                 AND ttrss_counters_cache.owner_uid = ttrss_feeds.owner_uid
1480                                 AND ttrss_counters_cache.feed_id = id";
1481
1482                 $result = db_query($link, $query);
1483                 $fctrs_modified = false;
1484
1485                 while ($line = db_fetch_assoc($result)) {
1486
1487                         $id = $line["id"];
1488                         $count = $line["count"];
1489                         $last_error = htmlspecialchars($line["last_error"]);
1490
1491                         $last_updated = make_local_datetime($link, $line['last_updated'], false);
1492
1493                         $has_img = feed_has_icon($id);
1494
1495                         if (date('Y') - date('Y', strtotime($line['last_updated'])) > 2)
1496                                 $last_updated = '';
1497
1498                         $cv = array("id" => $id,
1499                                 "updated" => $last_updated,
1500                                 "counter" => (int) $count,
1501                                 "has_img" => (int) $has_img);
1502
1503                         if ($last_error)
1504                                 $cv["error"] = $last_error;
1505
1506 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1507 //                              $cv["xmsg"] = getFeedArticles($link, $id)." ".__("total");
1508
1509                         if ($active_feed && $id == $active_feed)
1510                                 $cv["title"] = truncate_string($line["title"], 30);
1511
1512                         array_push($ret_arr, $cv);
1513
1514                 }
1515
1516                 return $ret_arr;
1517         }
1518
1519         function get_pgsql_version($link) {
1520                 $result = db_query($link, "SELECT version() AS version");
1521                 $version = explode(" ", db_fetch_result($result, 0, "version"));
1522                 return $version[1];
1523         }
1524
1525         /**
1526          * @return array (code => Status code, message => error message if available)
1527          *
1528          *                 0 - OK, Feed already exists
1529          *                 1 - OK, Feed added
1530          *                 2 - Invalid URL
1531          *                 3 - URL content is HTML, no feeds available
1532          *                 4 - URL content is HTML which contains multiple feeds.
1533          *                     Here you should call extractfeedurls in rpc-backend
1534          *                     to get all possible feeds.
1535          *                 5 - Couldn't download the URL content.
1536          */
1537         function subscribe_to_feed($link, $url, $cat_id = 0,
1538                         $auth_login = '', $auth_pass = '') {
1539
1540                 global $fetch_last_error;
1541
1542                 require_once "include/rssfuncs.php";
1543
1544                 $url = fix_url($url);
1545
1546                 if (!$url || !validate_feed_url($url)) return array("code" => 2);
1547
1548                 $contents = @fetch_file_contents($url, false, $auth_login, $auth_pass);
1549
1550                 if (!$contents) {
1551                         return array("code" => 5, "message" => $fetch_last_error);
1552                 }
1553
1554                 if (is_html($contents)) {
1555                         $feedUrls = get_feeds_from_html($url, $contents);
1556
1557                         if (count($feedUrls) == 0) {
1558                                 return array("code" => 3);
1559                         } else if (count($feedUrls) > 1) {
1560                                 return array("code" => 4, "feeds" => $feedUrls);
1561                         }
1562                         //use feed url as new URL
1563                         $url = key($feedUrls);
1564                 }
1565
1566                 if ($cat_id == "0" || !$cat_id) {
1567                         $cat_qpart = "NULL";
1568                 } else {
1569                         $cat_qpart = "'$cat_id'";
1570                 }
1571
1572                 $result = db_query($link,
1573                         "SELECT id FROM ttrss_feeds
1574                         WHERE feed_url = '$url' AND owner_uid = ".$_SESSION["uid"]);
1575
1576                 if (db_num_rows($result) == 0) {
1577                         $result = db_query($link,
1578                                 "INSERT INTO ttrss_feeds
1579                                         (owner_uid,feed_url,title,cat_id, auth_login,auth_pass,update_method)
1580                                 VALUES ('".$_SESSION["uid"]."', '$url',
1581                                 '[Unknown]', $cat_qpart, '$auth_login', '$auth_pass', 0)");
1582
1583                         $result = db_query($link,
1584                                 "SELECT id FROM ttrss_feeds WHERE feed_url = '$url'
1585                                         AND owner_uid = " . $_SESSION["uid"]);
1586
1587                         $feed_id = db_fetch_result($result, 0, "id");
1588
1589                         if ($feed_id) {
1590                                 update_rss_feed($link, $feed_id, true);
1591                         }
1592
1593                         return array("code" => 1);
1594                 } else {
1595                         return array("code" => 0);
1596                 }
1597         }
1598
1599         function print_feed_select($link, $id, $default_id = "",
1600                 $attributes = "", $include_all_feeds = true,
1601                 $root_id = false, $nest_level = 0) {
1602
1603                 if (!$root_id) {
1604                         print "<select id=\"$id\" name=\"$id\" $attributes>";
1605                         if ($include_all_feeds) {
1606                                 $is_selected = ("0" == $default_id) ? "selected=\"1\"" : "";
1607                                 print "<option $is_selected value=\"0\">".__('All feeds')."</option>";
1608                         }
1609                 }
1610
1611                 if (get_pref($link, 'ENABLE_FEED_CATS')) {
1612
1613                         if ($root_id)
1614                                 $parent_qpart = "parent_cat = '$root_id'";
1615                         else
1616                                 $parent_qpart = "parent_cat IS NULL";
1617
1618                         $result = db_query($link, "SELECT id,title,
1619                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1620                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1621                                 FROM ttrss_feed_categories
1622                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1623
1624                         while ($line = db_fetch_assoc($result)) {
1625
1626                                 for ($i = 0; $i < $nest_level; $i++)
1627                                         $line["title"] = " - " . $line["title"];
1628
1629                                 $is_selected = ("CAT:".$line["id"] == $default_id) ? "selected=\"1\"" : "";
1630
1631                                 printf("<option $is_selected value='CAT:%d'>%s</option>",
1632                                         $line["id"], htmlspecialchars($line["title"]));
1633
1634                                 if ($line["num_children"] > 0)
1635                                         print_feed_select($link, $id, $default_id, $attributes,
1636                                                 $include_all_feeds, $line["id"], $nest_level+1);
1637
1638                                 $feed_result = db_query($link, "SELECT id,title FROM ttrss_feeds
1639                                         WHERE cat_id = '".$line["id"]."' AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1640
1641                                 while ($fline = db_fetch_assoc($feed_result)) {
1642                                         $is_selected = ($fline["id"] == $default_id) ? "selected=\"1\"" : "";
1643
1644                                         $fline["title"] = " + " . $fline["title"];
1645
1646                                         for ($i = 0; $i < $nest_level; $i++)
1647                                                 $fline["title"] = " - " . $fline["title"];
1648
1649                                         printf("<option $is_selected value='%d'>%s</option>",
1650                                                 $fline["id"], htmlspecialchars($fline["title"]));
1651                                 }
1652                         }
1653
1654                         if (!$root_id) {
1655                                 $is_selected = ($default_id == "CAT:0") ? "selected=\"1\"" : "";
1656
1657                                 printf("<option $is_selected value='CAT:0'>%s</option>",
1658                                         __("Uncategorized"));
1659
1660                                 $feed_result = db_query($link, "SELECT id,title FROM ttrss_feeds
1661                                         WHERE cat_id IS NULL AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1662
1663                                 while ($fline = db_fetch_assoc($feed_result)) {
1664                                         $is_selected = ($fline["id"] == $default_id && !$default_is_cat) ? "selected=\"1\"" : "";
1665
1666                                         $fline["title"] = " + " . $fline["title"];
1667
1668                                         for ($i = 0; $i < $nest_level; $i++)
1669                                                 $fline["title"] = " - " . $fline["title"];
1670
1671                                         printf("<option $is_selected value='%d'>%s</option>",
1672                                                 $fline["id"], htmlspecialchars($fline["title"]));
1673                                 }
1674                         }
1675
1676                 } else {
1677                         $result = db_query($link, "SELECT id,title FROM ttrss_feeds
1678                                 WHERE owner_uid = ".$_SESSION["uid"]." ORDER BY title");
1679
1680                         while ($line = db_fetch_assoc($result)) {
1681
1682                                 $is_selected = ($line["id"] == $default_id) ? "selected=\"1\"" : "";
1683
1684                                 printf("<option $is_selected value='%d'>%s</option>",
1685                                         $line["id"], htmlspecialchars($line["title"]));
1686                         }
1687                 }
1688
1689                 if (!$root_id) {
1690                         print "</select>";
1691                 }
1692         }
1693
1694         function print_feed_cat_select($link, $id, $default_id,
1695                 $attributes, $include_all_cats = true, $root_id = false, $nest_level = 0) {
1696
1697                         if (!$root_id) {
1698                                         print "<select id=\"$id\" name=\"$id\" default=\"$default_id\" onchange=\"catSelectOnChange(this)\" $attributes>";
1699                         }
1700
1701                         if ($root_id)
1702                                 $parent_qpart = "parent_cat = '$root_id'";
1703                         else
1704                                 $parent_qpart = "parent_cat IS NULL";
1705
1706                         $result = db_query($link, "SELECT id,title,
1707                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1708                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1709                                 FROM ttrss_feed_categories
1710                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1711
1712                         while ($line = db_fetch_assoc($result)) {
1713                                 if ($line["id"] == $default_id) {
1714                                         $is_selected = "selected=\"1\"";
1715                                 } else {
1716                                         $is_selected = "";
1717                                 }
1718
1719                                 for ($i = 0; $i < $nest_level; $i++)
1720                                         $line["title"] = " - " . $line["title"];
1721
1722                                 if ($line["title"])
1723                                         printf("<option $is_selected value='%d'>%s</option>",
1724                                                 $line["id"], htmlspecialchars($line["title"]));
1725
1726                                 if ($line["num_children"] > 0)
1727                                         print_feed_cat_select($link, $id, $default_id, $attributes,
1728                                                 $include_all_cats, $line["id"], $nest_level+1);
1729                         }
1730
1731                         if (!$root_id) {
1732                                 if ($include_all_cats) {
1733                                         if (db_num_rows($result) > 0) {
1734                                                 print "<option disabled=\"1\">--------</option>";
1735                                         }
1736
1737                                         if ($default_id == 0) {
1738                                                 $is_selected = "selected=\"1\"";
1739                                         } else {
1740                                                 $is_selected = "";
1741                                         }
1742
1743                                         print "<option $is_selected value=\"0\">".__('Uncategorized')."</option>";
1744                                 }
1745                                 print "</select>";
1746                         }
1747                 }
1748
1749         function checkbox_to_sql_bool($val) {
1750                 return ($val == "on") ? "true" : "false";
1751         }
1752
1753         function getFeedCatTitle($link, $id) {
1754                 if ($id == -1) {
1755                         return __("Special");
1756                 } else if ($id < -10) {
1757                         return __("Labels");
1758                 } else if ($id > 0) {
1759                         $result = db_query($link, "SELECT ttrss_feed_categories.title
1760                                 FROM ttrss_feeds, ttrss_feed_categories WHERE ttrss_feeds.id = '$id' AND
1761                                         cat_id = ttrss_feed_categories.id");
1762                         if (db_num_rows($result) == 1) {
1763                                 return db_fetch_result($result, 0, "title");
1764                         } else {
1765                                 return __("Uncategorized");
1766                         }
1767                 } else {
1768                         return "getFeedCatTitle($id) failed";
1769                 }
1770
1771         }
1772
1773         function getFeedIcon($id) {
1774                 switch ($id) {
1775                 case 0:
1776                         return "images/archive.png";
1777                         break;
1778                 case -1:
1779                         return "images/mark_set.svg";
1780                         break;
1781                 case -2:
1782                         return "images/pub_set.svg";
1783                         break;
1784                 case -3:
1785                         return "images/fresh.png";
1786                         break;
1787                 case -4:
1788                         return "images/tag.png";
1789                         break;
1790                 case -6:
1791                         return "images/recently_read.png";
1792                         break;
1793                 default:
1794                         if ($id < -10) {
1795                                 return "images/label.png";
1796                         } else {
1797                                 if (file_exists(ICONS_DIR . "/$id.ico"))
1798                                         return ICONS_URL . "/$id.ico";
1799                         }
1800                         break;
1801                 }
1802         }
1803
1804         function getFeedTitle($link, $id, $cat = false) {
1805                 if ($cat) {
1806                         return getCategoryTitle($link, $id);
1807                 } else if ($id == -1) {
1808                         return __("Starred articles");
1809                 } else if ($id == -2) {
1810                         return __("Published articles");
1811                 } else if ($id == -3) {
1812                         return __("Fresh articles");
1813                 } else if ($id == -4) {
1814                         return __("All articles");
1815                 } else if ($id === 0 || $id === "0") {
1816                         return __("Archived articles");
1817                 } else if ($id == -6) {
1818                         return __("Recently read");
1819                 } else if ($id < -10) {
1820                         $label_id = -$id - 11;
1821                         $result = db_query($link, "SELECT caption FROM ttrss_labels2 WHERE id = '$label_id'");
1822                         if (db_num_rows($result) == 1) {
1823                                 return db_fetch_result($result, 0, "caption");
1824                         } else {
1825                                 return "Unknown label ($label_id)";
1826                         }
1827
1828                 } else if (is_numeric($id) && $id > 0) {
1829                         $result = db_query($link, "SELECT title FROM ttrss_feeds WHERE id = '$id'");
1830                         if (db_num_rows($result) == 1) {
1831                                 return db_fetch_result($result, 0, "title");
1832                         } else {
1833                                 return "Unknown feed ($id)";
1834                         }
1835                 } else {
1836                         return $id;
1837                 }
1838         }
1839
1840         function make_init_params($link) {
1841                 $params = array();
1842
1843                 foreach (array("ON_CATCHUP_SHOW_NEXT_FEED", "HIDE_READ_FEEDS",
1844                         "ENABLE_FEED_CATS", "FEEDS_SORT_BY_UNREAD", "CONFIRM_FEED_CATCHUP",
1845                         "CDM_AUTO_CATCHUP", "FRESH_ARTICLE_MAX_AGE", "DEFAULT_ARTICLE_LIMIT",
1846                         "HIDE_READ_SHOWS_SPECIAL", "COMBINED_DISPLAY_MODE") as $param) {
1847
1848                                  $params[strtolower($param)] = (int) get_pref($link, $param);
1849                  }
1850
1851                 $params["icons_url"] = ICONS_URL;
1852                 $params["cookie_lifetime"] = SESSION_COOKIE_LIFETIME;
1853                 $params["default_view_mode"] = get_pref($link, "_DEFAULT_VIEW_MODE");
1854                 $params["default_view_limit"] = (int) get_pref($link, "_DEFAULT_VIEW_LIMIT");
1855                 $params["default_view_order_by"] = get_pref($link, "_DEFAULT_VIEW_ORDER_BY");
1856                 $params["bw_limit"] = (int) $_SESSION["bw_limit"];
1857
1858                 $result = db_query($link, "SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
1859                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1860
1861                 $max_feed_id = db_fetch_result($result, 0, "mid");
1862                 $num_feeds = db_fetch_result($result, 0, "nf");
1863
1864                 $params["max_feed_id"] = (int) $max_feed_id;
1865                 $params["num_feeds"] = (int) $num_feeds;
1866
1867                 $params["collapsed_feedlist"] = (int) get_pref($link, "_COLLAPSED_FEEDLIST");
1868                 $params["hotkeys"] = get_hotkeys_map($link);
1869
1870                 $params["csrf_token"] = $_SESSION["csrf_token"];
1871                 $params["widescreen"] = (int) $_COOKIE["ttrss_widescreen"];
1872
1873                 $params['simple_update'] = defined('SIMPLE_UPDATE_MODE') && SIMPLE_UPDATE_MODE;
1874
1875                 return $params;
1876         }
1877
1878         function get_hotkeys_info($link) {
1879                 $hotkeys = array(
1880                         __("Navigation") => array(
1881                                 "next_feed" => __("Open next feed"),
1882                                 "prev_feed" => __("Open previous feed"),
1883                                 "next_article" => __("Open next article"),
1884                                 "prev_article" => __("Open previous article"),
1885                                 "next_article_noscroll" => __("Open next article (don't scroll long articles)"),
1886                                 "prev_article_noscroll" => __("Open previous article (don't scroll long articles)"),
1887                                 "search_dialog" => __("Show search dialog")),
1888                         __("Article") => array(
1889                                 "toggle_mark" => __("Toggle starred"),
1890                                 "toggle_publ" => __("Toggle published"),
1891                                 "toggle_unread" => __("Toggle unread"),
1892                                 "edit_tags" => __("Edit tags"),
1893                                 "dismiss_selected" => __("Dismiss selected"),
1894                                 "dismiss_read" => __("Dismiss read"),
1895                                 "open_in_new_window" => __("Open in new window"),
1896                                 "catchup_below" => __("Mark below as read"),
1897                                 "catchup_above" => __("Mark above as read"),
1898                                 "article_scroll_down" => __("Scroll down"),
1899                                 "article_scroll_up" => __("Scroll up"),
1900                                 "select_article_cursor" => __("Select article under cursor"),
1901                                 "email_article" => __("Email article"),
1902                                 "close_article" => __("Close/collapse article"),
1903                                 "toggle_widescreen" => __("Toggle widescreen mode"),
1904                                 "toggle_embed_original" => __("Toggle embed original")),
1905                         __("Article selection") => array(
1906                                 "select_all" => __("Select all articles"),
1907                                 "select_unread" => __("Select unread"),
1908                                 "select_marked" => __("Select starred"),
1909                                 "select_published" => __("Select published"),
1910                                 "select_invert" => __("Invert selection"),
1911                                 "select_none" => __("Deselect everything")),
1912                         __("Feed") => array(
1913                                 "feed_refresh" => __("Refresh current feed"),
1914                                 "feed_unhide_read" => __("Un/hide read feeds"),
1915                                 "feed_subscribe" => __("Subscribe to feed"),
1916                                 "feed_edit" => __("Edit feed"),
1917                                 "feed_catchup" => __("Mark as read"),
1918                                 "feed_reverse" => __("Reverse headlines"),
1919                                 "feed_debug_update" => __("Debug feed update"),
1920                                 "catchup_all" => __("Mark all feeds as read"),
1921                                 "cat_toggle_collapse" => __("Un/collapse current category"),
1922                                 "toggle_combined_mode" => __("Toggle combined mode")),
1923                         __("Go to") => array(
1924                                 "goto_all" => __("All articles"),
1925                                 "goto_fresh" => __("Fresh"),
1926                                 "goto_marked" => __("Starred"),
1927                                 "goto_published" => __("Published"),
1928                                 "goto_tagcloud" => __("Tag cloud"),
1929                                 "goto_prefs" => __("Preferences")),
1930                         __("Other") => array(
1931                                 "create_label" => __("Create label"),
1932                                 "create_filter" => __("Create filter"),
1933                                 "collapse_sidebar" => __("Un/collapse sidebar"),
1934                                 "help_dialog" => __("Show help dialog"))
1935                         );
1936
1937                 return $hotkeys;
1938         }
1939
1940         function get_hotkeys_map($link) {
1941                 $hotkeys = array(
1942 //                      "navigation" => array(
1943                                 "k" => "next_feed",
1944                                 "j" => "prev_feed",
1945                                 "n" => "next_article",
1946                                 "p" => "prev_article",
1947                                 "(38)|up" => "prev_article",
1948                                 "(40)|down" => "next_article",
1949 //                              "^(38)|Ctrl-up" => "prev_article_noscroll",
1950 //                              "^(40)|Ctrl-down" => "next_article_noscroll",
1951                                 "(191)|/" => "search_dialog",
1952 //                      "article" => array(
1953                                 "s" => "toggle_mark",
1954                                 "*s" => "toggle_publ",
1955                                 "u" => "toggle_unread",
1956                                 "*t" => "edit_tags",
1957                                 "*d" => "dismiss_selected",
1958                                 "*x" => "dismiss_read",
1959                                 "o" => "open_in_new_window",
1960                                 "c p" => "catchup_below",
1961                                 "c n" => "catchup_above",
1962                                 "*n" => "article_scroll_down",
1963                                 "*p" => "article_scroll_up",
1964                                 "*(38)|Shift+up" => "article_scroll_up",
1965                                 "*(40)|Shift+down" => "article_scroll_down",
1966                                 "a *w" => "toggle_widescreen",
1967                                 "a e" => "toggle_embed_original",
1968                                 "e" => "email_article",
1969                                 "a q" => "close_article",
1970 //                      "article_selection" => array(
1971                                 "a a" => "select_all",
1972                                 "a u" => "select_unread",
1973                                 "a *u" => "select_marked",
1974                                 "a p" => "select_published",
1975                                 "a i" => "select_invert",
1976                                 "a n" => "select_none",
1977 //                      "feed" => array(
1978                                 "f r" => "feed_refresh",
1979                                 "f a" => "feed_unhide_read",
1980                                 "f s" => "feed_subscribe",
1981                                 "f e" => "feed_edit",
1982                                 "f q" => "feed_catchup",
1983                                 "f x" => "feed_reverse",
1984                                 "f *d" => "feed_debug_update",
1985                                 "f *c" => "toggle_combined_mode",
1986                                 "*q" => "catchup_all",
1987                                 "x" => "cat_toggle_collapse",
1988 //                      "goto" => array(
1989                                 "g a" => "goto_all",
1990                                 "g f" => "goto_fresh",
1991                                 "g s" => "goto_marked",
1992                                 "g p" => "goto_published",
1993                                 "g t" => "goto_tagcloud",
1994                                 "g *p" => "goto_prefs",
1995 //                      "other" => array(
1996                                 "(9)|Tab" => "select_article_cursor", // tab
1997                                 "c l" => "create_label",
1998                                 "c f" => "create_filter",
1999                                 "c s" => "collapse_sidebar",
2000                                 "^(191)|Ctrl+/" => "help_dialog",
2001                         );
2002
2003                 if (get_pref($link, 'COMBINED_DISPLAY_MODE')) {
2004                         $hotkeys["^(38)|Ctrl-up"] = "prev_article_noscroll";
2005                         $hotkeys["^(40)|Ctrl-down"] = "next_article_noscroll";
2006                 }
2007
2008                 global $pluginhost;
2009                 foreach ($pluginhost->get_hooks($pluginhost::HOOK_HOTKEY_MAP) as $plugin) {
2010                         $hotkeys = $plugin->hook_hotkey_map($hotkeys);
2011                 }
2012
2013                 $prefixes = array();
2014
2015                 foreach (array_keys($hotkeys) as $hotkey) {
2016                         $pair = explode(" ", $hotkey, 2);
2017
2018                         if (count($pair) > 1 && !in_array($pair[0], $prefixes)) {
2019                                 array_push($prefixes, $pair[0]);
2020                         }
2021                 }
2022
2023                 return array($prefixes, $hotkeys);
2024         }
2025
2026         function make_runtime_info($link) {
2027                 $data = array();
2028
2029                 $result = db_query($link, "SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
2030                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
2031
2032                 $max_feed_id = db_fetch_result($result, 0, "mid");
2033                 $num_feeds = db_fetch_result($result, 0, "nf");
2034
2035                 $data["max_feed_id"] = (int) $max_feed_id;
2036                 $data["num_feeds"] = (int) $num_feeds;
2037
2038                 $data['last_article_id'] = getLastArticleId($link);
2039                 $data['cdm_expanded'] = get_pref($link, 'CDM_EXPANDED');
2040
2041                 $data['dep_ts'] = calculate_dep_timestamp();
2042                 $data['reload_on_ts_change'] = !defined('_NO_RELOAD_ON_TS_CHANGE');
2043
2044                 if (file_exists(LOCK_DIRECTORY . "/update_daemon.lock")) {
2045
2046                         $data['daemon_is_running'] = (int) file_is_locked("update_daemon.lock");
2047
2048                         if (time() - $_SESSION["daemon_stamp_check"] > 30) {
2049
2050                                 $stamp = (int) @file_get_contents(LOCK_DIRECTORY . "/update_daemon.stamp");
2051
2052                                 if ($stamp) {
2053                                         $stamp_delta = time() - $stamp;
2054
2055                                         if ($stamp_delta > 1800) {
2056                                                 $stamp_check = 0;
2057                                         } else {
2058                                                 $stamp_check = 1;
2059                                                 $_SESSION["daemon_stamp_check"] = time();
2060                                         }
2061
2062                                         $data['daemon_stamp_ok'] = $stamp_check;
2063
2064                                         $stamp_fmt = date("Y.m.d, G:i", $stamp);
2065
2066                                         $data['daemon_stamp'] = $stamp_fmt;
2067                                 }
2068                         }
2069                 }
2070
2071                 if ($_SESSION["last_version_check"] + 86400 + rand(-1000, 1000) < time()) {
2072                                 $new_version_details = @check_for_update($link);
2073
2074                                 $data['new_version_available'] = (int) ($new_version_details != false);
2075
2076                                 $_SESSION["last_version_check"] = time();
2077                                 $_SESSION["version_data"] = $new_version_details;
2078                 }
2079
2080                 return $data;
2081         }
2082
2083         function search_to_sql($link, $search) {
2084
2085                 $search_query_part = "";
2086
2087                 $keywords = explode(" ", $search);
2088                 $query_keywords = array();
2089
2090                 foreach ($keywords as $k) {
2091                         if (strpos($k, "-") === 0) {
2092                                 $k = substr($k, 1);
2093                                 $not = "NOT";
2094                         } else {
2095                                 $not = "";
2096                         }
2097
2098                         $commandpair = explode(":", mb_strtolower($k), 2);
2099
2100                         if ($commandpair[0] == "note" && $commandpair[1]) {
2101
2102                                 if ($commandpair[1] == "true")
2103                                         array_push($query_keywords, "($not (note IS NOT NULL AND note != ''))");
2104                                 else
2105                                         array_push($query_keywords, "($not (note IS NULL OR note = ''))");
2106
2107                         } else if ($commandpair[0] == "star" && $commandpair[1]) {
2108
2109                                 if ($commandpair[1] == "true")
2110                                         array_push($query_keywords, "($not (marked = true))");
2111                                 else
2112                                         array_push($query_keywords, "($not (marked = false))");
2113
2114                         } else if ($commandpair[0] == "pub" && $commandpair[1]) {
2115
2116                                 if ($commandpair[1] == "true")
2117                                         array_push($query_keywords, "($not (published = true))");
2118                                 else
2119                                         array_push($query_keywords, "($not (published = false))");
2120
2121                         } else if (strpos($k, "@") === 0) {
2122
2123                                 $user_tz_string = get_pref($link, 'USER_TIMEZONE', $_SESSION['uid']);
2124                                 $orig_ts = strtotime(substr($k, 1));
2125                                 $k = date("Y-m-d", convert_timestamp($orig_ts, $user_tz_string, 'UTC'));
2126
2127                                 //$k = date("Y-m-d", strtotime(substr($k, 1)));
2128
2129                                 array_push($query_keywords, "(".SUBSTRING_FOR_DATE."(updated,1,LENGTH('$k')) $not = '$k')");
2130                         } else {
2131                                 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2132                                                 OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2133                         }
2134                 }
2135
2136                 $search_query_part = implode("AND", $query_keywords);
2137
2138                 return $search_query_part;
2139         }
2140
2141         function getParentCategories($link, $cat, $owner_uid) {
2142                 $rv = array();
2143
2144                 $result = db_query($link, "SELECT parent_cat FROM ttrss_feed_categories
2145                         WHERE id = '$cat' AND parent_cat IS NOT NULL AND owner_uid = $owner_uid");
2146
2147                 while ($line = db_fetch_assoc($result)) {
2148                         array_push($rv, $line["parent_cat"]);
2149                         $rv = array_merge($rv, getParentCategories($link, $line["parent_cat"], $owner_uid));
2150                 }
2151
2152                 return $rv;
2153         }
2154
2155         function getChildCategories($link, $cat, $owner_uid) {
2156                 $rv = array();
2157
2158                 $result = db_query($link, "SELECT id FROM ttrss_feed_categories
2159                         WHERE parent_cat = '$cat' AND owner_uid = $owner_uid");
2160
2161                 while ($line = db_fetch_assoc($result)) {
2162                         array_push($rv, $line["id"]);
2163                         $rv = array_merge($rv, getChildCategories($link, $line["id"], $owner_uid));
2164                 }
2165
2166                 return $rv;
2167         }
2168
2169         function queryFeedHeadlines($link, $feed, $limit, $view_mode, $cat_view, $search, $search_mode, $override_order = false, $offset = 0, $owner_uid = 0, $filter = false, $since_id = 0, $include_children = false, $ignore_vfeed_group = false) {
2170
2171                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2172
2173                 $ext_tables_part = "";
2174
2175                         if ($search) {
2176
2177                                 if (SPHINX_ENABLED) {
2178                                         $ids = join(",", @sphinx_search($search, 0, 500));
2179
2180                                         if ($ids)
2181                                                 $search_query_part = "ref_id IN ($ids) AND ";
2182                                         else
2183                                                 $search_query_part = "ref_id = -1 AND ";
2184
2185                                 } else {
2186                                         $search_query_part = search_to_sql($link, $search);
2187                                         $search_query_part .= " AND ";
2188                                 }
2189
2190                         } else {
2191                                 $search_query_part = "";
2192                         }
2193
2194                         if ($filter) {
2195
2196                                 if (DB_TYPE == "pgsql") {
2197                                         $query_strategy_part .= " AND updated > NOW() - INTERVAL '14 days' ";
2198                                 } else {
2199                                         $query_strategy_part .= " AND updated > DATE_SUB(NOW(), INTERVAL 14 DAY) ";
2200                                 }
2201
2202                                 $override_order = "updated DESC";
2203
2204                                 $filter_query_part = filter_to_sql($link, $filter, $owner_uid);
2205
2206                                 // Try to check if SQL regexp implementation chokes on a valid regexp
2207                                 $result = db_query($link, "SELECT true AS true_val FROM ttrss_entries,
2208                                         ttrss_user_entries, ttrss_feeds, ttrss_feed_categories
2209                                         WHERE $filter_query_part LIMIT 1", false);
2210
2211                                 if ($result) {
2212                                         $test = db_fetch_result($result, 0, "true_val");
2213
2214                                         if (!$test) {
2215                                                 $filter_query_part = "false AND";
2216                                         } else {
2217                                                 $filter_query_part .= " AND";
2218                                         }
2219                                 } else {
2220                                         $filter_query_part = "false AND";
2221                                 }
2222
2223                         } else {
2224                                 $filter_query_part = "";
2225                         }
2226
2227                         if ($since_id) {
2228                                 $since_id_part = "ttrss_entries.id > $since_id AND ";
2229                         } else {
2230                                 $since_id_part = "";
2231                         }
2232
2233                         $view_query_part = "";
2234
2235                         if ($view_mode == "adaptive" || $view_query_part == "noscores") {
2236                                 if ($search) {
2237                                         $view_query_part = " ";
2238                                 } else if ($feed != -1) {
2239
2240                                         if (get_pref($link, "SORT_HEADLINES_BY_FEED_DATE", $owner_uid)) {
2241                                                 $a_date_sort_field = "updated";
2242                                         } else {
2243                                                 $a_date_sort_field = "date_entered";
2244                                         }
2245
2246                                         if (get_pref($link, 'REVERSE_HEADLINES', $owner_uid)) {
2247                                                 $a_order_by = "$a_date_sort_field";
2248                                         } else {
2249                                                 $a_order_by = "$a_date_sort_field DESC";
2250                                         }
2251
2252                                         if (!$override_order) {
2253                                                 $override_order = "unread DESC, $a_order_by";
2254                                         }
2255
2256                                         if (!$ignore_vfeed_group && ($is_cat || $feed_id < 0) &&
2257                                                         get_pref($link, 'VFEED_GROUP_BY_FEED', $owner_uid)) {
2258
2259                                                 $override_order = "ttrss_feeds.title, $override_order";
2260                                         }
2261
2262                                 }
2263                         }
2264
2265                         if ($view_mode == "marked") {
2266                                 $view_query_part = " marked = true AND ";
2267                         }
2268
2269                         if ($view_mode == "published") {
2270                                 $view_query_part = " published = true AND ";
2271                         }
2272
2273                         if ($view_mode == "unread") {
2274                                 $view_query_part = " unread = true AND ";
2275                         }
2276
2277                         if ($view_mode == "updated") {
2278                                 $view_query_part = " (last_read is null and unread = false) AND ";
2279                         }
2280
2281                         if ($limit > 0) {
2282                                 $limit_query_part = "LIMIT " . $limit;
2283                         }
2284
2285                         $allow_archived = false;
2286
2287                         $vfeed_query_part = "";
2288
2289                         // override query strategy and enable feed display when searching globally
2290                         if ($search && $search_mode == "all_feeds") {
2291                                 $query_strategy_part = "true";
2292                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2293                         /* tags */
2294                         } else if (!is_numeric($feed)) {
2295                                 $query_strategy_part = "true";
2296                                 $vfeed_query_part = "(SELECT title FROM ttrss_feeds WHERE
2297                                         id = feed_id) as feed_title,";
2298                         } else if ($search && $search_mode == "this_cat") {
2299                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2300
2301                                 if ($feed > 0) {
2302                                         if ($include_children) {
2303                                                 $subcats = getChildCategories($link, $feed, $owner_uid);
2304                                                 array_push($subcats, $feed);
2305                                                 $cats_qpart = join(",", $subcats);
2306                                         } else {
2307                                                 $cats_qpart = $feed;
2308                                         }
2309
2310                                         $query_strategy_part = "ttrss_feeds.cat_id IN ($cats_qpart)";
2311
2312                                 } else {
2313                                         $query_strategy_part = "ttrss_feeds.cat_id IS NULL";
2314                                 }
2315
2316                         } else if ($feed > 0) {
2317
2318                                 if ($cat_view) {
2319
2320                                         if ($feed > 0) {
2321                                                 if ($include_children) {
2322                                                         # sub-cats
2323                                                         $subcats = getChildCategories($link, $feed, $owner_uid);
2324
2325                                                         array_push($subcats, $feed);
2326                                                         $query_strategy_part = "cat_id IN (".
2327                                                                         implode(",", $subcats).")";
2328
2329                                                 } else {
2330                                                         $query_strategy_part = "cat_id = '$feed'";
2331                                                 }
2332
2333                                         } else {
2334                                                 $query_strategy_part = "cat_id IS NULL";
2335                                         }
2336
2337                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2338
2339                                 } else {
2340                                         $query_strategy_part = "feed_id = '$feed'";
2341                                 }
2342                         } else if ($feed == 0 && !$cat_view) { // archive virtual feed
2343                                 $query_strategy_part = "feed_id IS NULL";
2344                                 $allow_archived = true;
2345                         } else if ($feed == 0 && $cat_view) { // uncategorized
2346                                 $query_strategy_part = "cat_id IS NULL AND feed_id IS NOT NULL";
2347                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2348                         } else if ($feed == -1) { // starred virtual feed
2349                                 $query_strategy_part = "marked = true";
2350                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2351                                 $allow_archived = true;
2352
2353                                 if (!$override_order) $override_order = "last_marked DESC, updated DESC";
2354
2355                         } else if ($feed == -2) { // published virtual feed OR labels category
2356
2357                                 if (!$cat_view) {
2358                                         $query_strategy_part = "published = true";
2359                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2360                                         $allow_archived = true;
2361
2362                                         if (!$override_order) $override_order = "last_published DESC, updated DESC";
2363                                 } else {
2364                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2365
2366                                         $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2367
2368                                         $query_strategy_part = "ttrss_labels2.id = ttrss_user_labels2.label_id AND
2369                                                 ttrss_user_labels2.article_id = ref_id";
2370
2371                                 }
2372                         } else if ($feed == -6) { // recently read
2373                                 $query_strategy_part = "unread = false AND last_read IS NOT NULL";
2374                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2375                                 $allow_archived = true;
2376
2377                                 if (!$override_order) $override_order = "last_read DESC";
2378                         } else if ($feed == -3) { // fresh virtual feed
2379                                 $query_strategy_part = "unread = true AND score >= 0";
2380
2381                                 $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE", $owner_uid);
2382
2383                                 if (DB_TYPE == "pgsql") {
2384                                         $query_strategy_part .= " AND updated > NOW() - INTERVAL '$intl hour' ";
2385                                 } else {
2386                                         $query_strategy_part .= " AND updated > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
2387                                 }
2388
2389                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2390                         } else if ($feed == -4) { // all articles virtual feed
2391                                 $query_strategy_part = "true";
2392                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2393                         } else if ($feed <= -10) { // labels
2394                                 $label_id = -$feed - 11;
2395
2396                                 $query_strategy_part = "label_id = '$label_id' AND
2397                                         ttrss_labels2.id = ttrss_user_labels2.label_id AND
2398                                         ttrss_user_labels2.article_id = ref_id";
2399
2400                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2401                                 $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2402                                 $allow_archived = true;
2403
2404                         } else {
2405                                 $query_strategy_part = "true";
2406                         }
2407
2408                         if (get_pref($link, "SORT_HEADLINES_BY_FEED_DATE", $owner_uid)) {
2409                                 $date_sort_field = "updated";
2410                         } else {
2411                                 $date_sort_field = "date_entered";
2412                         }
2413
2414                         if (get_pref($link, 'REVERSE_HEADLINES', $owner_uid)) {
2415                                 $order_by = "$date_sort_field";
2416                         } else {
2417                                 $order_by = "$date_sort_field DESC";
2418                         }
2419
2420                         if ($view_mode != "noscores") {
2421                                 $order_by = "score DESC, $order_by";
2422                         }
2423
2424                         if ($override_order) {
2425                                 $order_by = $override_order;
2426                         }
2427
2428                         $feed_title = "";
2429
2430                         if ($search) {
2431                                 $feed_title = T_sprintf("Search results: %s", $search);
2432                         } else {
2433                                 if ($cat_view) {
2434                                         $feed_title = getCategoryTitle($link, $feed);
2435                                 } else {
2436                                         if (is_numeric($feed) && $feed > 0) {
2437                                                 $result = db_query($link, "SELECT title,site_url,last_error
2438                                                         FROM ttrss_feeds WHERE id = '$feed' AND owner_uid = $owner_uid");
2439
2440                                                 $feed_title = db_fetch_result($result, 0, "title");
2441                                                 $feed_site_url = db_fetch_result($result, 0, "site_url");
2442                                                 $last_error = db_fetch_result($result, 0, "last_error");
2443                                         } else {
2444                                                 $feed_title = getFeedTitle($link, $feed);
2445                                         }
2446                                 }
2447                         }
2448
2449                         $content_query_part = "content as content_preview, cached_content, ";
2450
2451                         if (is_numeric($feed)) {
2452
2453                                 if ($feed >= 0) {
2454                                         $feed_kind = "Feeds";
2455                                 } else {
2456                                         $feed_kind = "Labels";
2457                                 }
2458
2459                                 if ($limit_query_part) {
2460                                         $offset_query_part = "OFFSET $offset";
2461                                 }
2462
2463                                 // proper override_order applied above
2464                                 if ($vfeed_query_part && !$ignore_vfeed_group && get_pref($link, 'VFEED_GROUP_BY_FEED', $owner_uid)) {
2465                                         if (!$override_order) {
2466                                                 $order_by = "ttrss_feeds.title, $order_by";
2467                                         } else {
2468                                                 $order_by = "ttrss_feeds.title, $override_order";
2469                                         }
2470                                 }
2471
2472                                 if (!$allow_archived) {
2473                                         $from_qpart = "ttrss_entries,ttrss_user_entries,ttrss_feeds$ext_tables_part";
2474                                         $feed_check_qpart = "ttrss_user_entries.feed_id = ttrss_feeds.id AND";
2475
2476                                 } else {
2477                                         $from_qpart = "ttrss_entries$ext_tables_part,ttrss_user_entries
2478                                                 LEFT JOIN ttrss_feeds ON (feed_id = ttrss_feeds.id)";
2479                                 }
2480
2481                                 $query = "SELECT DISTINCT
2482                                                 date_entered,
2483                                                 guid,
2484                                                 ttrss_entries.id,ttrss_entries.title,
2485                                                 updated,
2486                                                 label_cache,
2487                                                 tag_cache,
2488                                                 always_display_enclosures,
2489                                                 site_url,
2490                                                 note,
2491                                                 num_comments,
2492                                                 comments,
2493                                                 int_id,
2494                                                 hide_images,
2495                                                 unread,feed_id,marked,published,link,last_read,orig_feed_id,
2496                                                 last_marked, last_published,
2497                                                 ".SUBSTRING_FOR_DATE."(last_read,1,19) as last_read_noms,
2498                                                 $vfeed_query_part
2499                                                 $content_query_part
2500                                                 ".SUBSTRING_FOR_DATE."(updated,1,19) as updated_noms,
2501                                                 author,score
2502                                         FROM
2503                                                 $from_qpart
2504                                         WHERE
2505                                         $feed_check_qpart
2506                                         ttrss_user_entries.ref_id = ttrss_entries.id AND
2507                                         ttrss_user_entries.owner_uid = '$owner_uid' AND
2508                                         $search_query_part
2509                                         $filter_query_part
2510                                         $view_query_part
2511                                         $since_id_part
2512                                         $query_strategy_part ORDER BY $order_by
2513                                         $limit_query_part $offset_query_part";
2514
2515                                 if ($_REQUEST["debug"]) print $query;
2516
2517                                 $result = db_query($link, $query);
2518
2519                         } else {
2520                                 // browsing by tag
2521
2522                                 $select_qpart = "SELECT DISTINCT " .
2523                                                                 "date_entered," .
2524                                                                 "guid," .
2525                                                                 "note," .
2526                                                                 "ttrss_entries.id as id," .
2527                                                                 "title," .
2528                                                                 "updated," .
2529                                                                 "unread," .
2530                                                                 "feed_id," .
2531                                                                 "orig_feed_id," .
2532                                                                 "marked," .
2533                                                                 "num_comments, " .
2534                                                                 "comments, " .
2535                                                                 "tag_cache," .
2536                                                                 "label_cache," .
2537                                                                 "link," .
2538                                                                 "last_read," .
2539                                                                 "(SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) AS hide_images," .
2540                                                                 "last_marked, last_published, " .
2541                                                                 SUBSTRING_FOR_DATE . "(last_read,1,19) as last_read_noms," .
2542                                                                 $since_id_part .
2543                                                                 $vfeed_query_part .
2544                                                                 $content_query_part .
2545                                                                 SUBSTRING_FOR_DATE . "(updated,1,19) as updated_noms," .
2546                                                                 "score ";
2547
2548                                 $feed_kind = "Tags";
2549                                 $all_tags = explode(",", $feed);
2550                                 if ($search_mode == 'any') {
2551                                         $tag_sql = "tag_name in (" . implode(", ", array_map("db_quote", $all_tags)) . ")";
2552                                         $from_qpart = " FROM ttrss_entries,ttrss_user_entries,ttrss_tags ";
2553                                         $where_qpart = " WHERE " .
2554                                                                    "ref_id = ttrss_entries.id AND " .
2555                                                                    "ttrss_user_entries.owner_uid = $owner_uid AND " .
2556                                                                    "post_int_id = int_id AND $tag_sql AND " .
2557                                                                    $view_query_part .
2558                                                                    $search_query_part .
2559                                                                    $query_strategy_part . " ORDER BY $order_by " .
2560                                                                    $limit_query_part;
2561
2562                                 } else {
2563                                         $i = 1;
2564                                         $sub_selects = array();
2565                                         $sub_ands = array();
2566                                         foreach ($all_tags as $term) {
2567                                                 array_push($sub_selects, "(SELECT post_int_id from ttrss_tags WHERE tag_name = " . db_quote($term) . " AND owner_uid = $owner_uid) as A$i");
2568                                                 $i++;
2569                                         }
2570                                         if ($i > 2) {
2571                                                 $x = 1;
2572                                                 $y = 2;
2573                                                 do {
2574                                                         array_push($sub_ands, "A$x.post_int_id = A$y.post_int_id");
2575                                                         $x++;
2576                                                         $y++;
2577                                                 } while ($y < $i);
2578                                         }
2579                                         array_push($sub_ands, "A1.post_int_id = ttrss_user_entries.int_id and ttrss_user_entries.owner_uid = $owner_uid");
2580                                         array_push($sub_ands, "ttrss_user_entries.ref_id = ttrss_entries.id");
2581                                         $from_qpart = " FROM " . implode(", ", $sub_selects) . ", ttrss_user_entries, ttrss_entries";
2582                                         $where_qpart = " WHERE " . implode(" AND ", $sub_ands);
2583                                 }
2584                                 //                              error_log("TAG SQL: " . $tag_sql);
2585                                 // $tag_sql = "tag_name = '$feed'";   DEFAULT way
2586
2587                                 //                              error_log("[". $select_qpart . "][" . $from_qpart . "][" .$where_qpart . "]");
2588                                 $result = db_query($link, $select_qpart . $from_qpart . $where_qpart);
2589                         }
2590
2591                         return array($result, $feed_title, $feed_site_url, $last_error);
2592
2593         }
2594
2595         function sanitize($link, $str, $force_remove_images = false, $owner = false, $site_url = false) {
2596                 if (!$owner) $owner = $_SESSION["uid"];
2597
2598                 $res = trim($str); if (!$res) return '';
2599
2600                 if (strpos($res, "href=") === false)
2601                         $res = rewrite_urls($res);
2602
2603                 $charset_hack = '<head>
2604                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
2605                 </head>';
2606
2607                 $res = trim($res); if (!$res) return '';
2608
2609                 libxml_use_internal_errors(true);
2610
2611                 $doc = new DOMDocument();
2612                 $doc->loadHTML($charset_hack . $res);
2613                 $xpath = new DOMXPath($doc);
2614
2615                 $entries = $xpath->query('(//a[@href]|//img[@src])');
2616
2617                 foreach ($entries as $entry) {
2618
2619                         if ($site_url) {
2620
2621                                 if ($entry->hasAttribute('href'))
2622                                         $entry->setAttribute('href',
2623                                                 rewrite_relative_url($site_url, $entry->getAttribute('href')));
2624
2625                                 if ($entry->hasAttribute('src')) {
2626                                         $src = rewrite_relative_url($site_url, $entry->getAttribute('src'));
2627
2628                                         $cached_filename = CACHE_DIR . '/images/' . sha1($src) . '.png';
2629
2630                                         if (file_exists($cached_filename)) {
2631                                                 $src = SELF_URL_PATH . '/image.php?hash=' . sha1($src);
2632                                         }
2633
2634                                         $entry->setAttribute('src', $src);
2635                                 }
2636
2637                                 if ($entry->nodeName == 'img') {
2638                                         if (($owner && get_pref($link, "STRIP_IMAGES", $owner)) ||
2639                                                         $force_remove_images) {
2640
2641                                                 $p = $doc->createElement('p');
2642
2643                                                 $a = $doc->createElement('a');
2644                                                 $a->setAttribute('href', $entry->getAttribute('src'));
2645
2646                                                 $a->appendChild(new DOMText($entry->getAttribute('src')));
2647                                                 $a->setAttribute('target', '_blank');
2648
2649                                                 $p->appendChild($a);
2650
2651                                                 $entry->parentNode->replaceChild($p, $entry);
2652                                         }
2653                                 }
2654                         }
2655
2656                         if (strtolower($entry->nodeName) == "a") {
2657                                 $entry->setAttribute("target", "_blank");
2658                         }
2659                 }
2660
2661                 $entries = $xpath->query('//iframe');
2662                 foreach ($entries as $entry) {
2663                         $entry->setAttribute('sandbox', 'allow-scripts');
2664
2665                 }
2666
2667                 global $pluginhost;
2668
2669                 if (isset($pluginhost)) {
2670                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_SANITIZE) as $plugin) {
2671                                 $doc = $plugin->hook_sanitize($doc, $site_url);
2672                         }
2673                 }
2674
2675                 $doc->removeChild($doc->firstChild); //remove doctype
2676                 $doc = strip_harmful_tags($doc);
2677                 $res = $doc->saveHTML();
2678                 return $res;
2679         }
2680
2681         function strip_harmful_tags($doc) {
2682                 $entries = $doc->getElementsByTagName("*");
2683
2684                 $allowed_elements = array('a', 'address', 'audio', 'article',
2685                         'b', 'big', 'blockquote', 'body', 'br', 'cite', 'center',
2686                         'code', 'dd', 'del', 'details', 'div', 'dl', 'font',
2687                         'dt', 'em', 'footer', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6',
2688                         'header', 'html', 'i', 'img', 'ins', 'kbd',
2689                         'li', 'nav', 'ol', 'p', 'pre', 'q', 's','small',
2690                         'source', 'span', 'strike', 'strong', 'sub', 'summary',
2691                         'sup', 'table', 'tbody', 'td', 'tfoot', 'th', 'thead',
2692                         'tr', 'track', 'tt', 'u', 'ul', 'var', 'wbr', 'video' );
2693
2694                 if ($_SESSION['hasSandbox']) array_push($allowed_elements, 'iframe');
2695
2696                 $disallowed_attributes = array('id', 'style', 'class');
2697
2698                 foreach ($entries as $entry) {
2699                         if (!in_array($entry->nodeName, $allowed_elements)) {
2700                                 $entry->parentNode->removeChild($entry);
2701                         }
2702
2703                         if ($entry->hasAttributes()) {
2704                                 $attrs_to_remove = array();
2705
2706                                 foreach ($entry->attributes as $attr) {
2707
2708                                         if (strpos($attr->nodeName, 'on') === 0) {
2709                                                 array_push($attrs_to_remove, $attr);
2710                                         }
2711
2712                                         if (in_array($attr->nodeName, $disallowed_attributes)) {
2713                                                 array_push($attrs_to_remove, $attr);
2714                                         }
2715                                 }
2716
2717                                 foreach ($attrs_to_remove as $attr) {
2718                                         $entry->removeAttributeNode($attr);
2719                                 }
2720                         }
2721                 }
2722
2723                 return $doc;
2724         }
2725
2726         function check_for_update($link) {
2727                 if (CHECK_FOR_NEW_VERSION && $_SESSION['access_level'] >= 10) {
2728                         $version_url = "http://tt-rss.org/version.php?ver=" . VERSION .
2729                                 "&iid=" . sha1(SELF_URL_PATH);
2730
2731                         $version_data = @fetch_file_contents($version_url);
2732
2733                         if ($version_data) {
2734                                 $version_data = json_decode($version_data, true);
2735                                 if ($version_data && $version_data['version']) {
2736
2737                                         if (version_compare(VERSION, $version_data['version']) == -1) {
2738                                                 return $version_data;
2739                                         }
2740                                 }
2741                         }
2742                 }
2743                 return false;
2744         }
2745
2746         function catchupArticlesById($link, $ids, $cmode, $owner_uid = false) {
2747
2748                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2749                 if (count($ids) == 0) return;
2750
2751                 $tmp_ids = array();
2752
2753                 foreach ($ids as $id) {
2754                         array_push($tmp_ids, "ref_id = '$id'");
2755                 }
2756
2757                 $ids_qpart = join(" OR ", $tmp_ids);
2758
2759                 if ($cmode == 0) {
2760                         db_query($link, "UPDATE ttrss_user_entries SET
2761                         unread = false,last_read = NOW()
2762                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2763                 } else if ($cmode == 1) {
2764                         db_query($link, "UPDATE ttrss_user_entries SET
2765                         unread = true
2766                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2767                 } else {
2768                         db_query($link, "UPDATE ttrss_user_entries SET
2769                         unread = NOT unread,last_read = NOW()
2770                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2771                 }
2772
2773                 /* update ccache */
2774
2775                 $result = db_query($link, "SELECT DISTINCT feed_id FROM ttrss_user_entries
2776                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2777
2778                 while ($line = db_fetch_assoc($result)) {
2779                         ccache_update($link, $line["feed_id"], $owner_uid);
2780                 }
2781         }
2782
2783         function get_article_tags($link, $id, $owner_uid = 0, $tag_cache = false) {
2784
2785                 $a_id = db_escape_string($link, $id);
2786
2787                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2788
2789                 $query = "SELECT DISTINCT tag_name,
2790                         owner_uid as owner FROM
2791                         ttrss_tags WHERE post_int_id = (SELECT int_id FROM ttrss_user_entries WHERE
2792                         ref_id = '$a_id' AND owner_uid = '$owner_uid' LIMIT 1) ORDER BY tag_name";
2793
2794                 $obj_id = md5("TAGS:$owner_uid:$id");
2795                 $tags = array();
2796
2797                 /* check cache first */
2798
2799                 if ($tag_cache === false) {
2800                         $result = db_query($link, "SELECT tag_cache FROM ttrss_user_entries
2801                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
2802
2803                         $tag_cache = db_fetch_result($result, 0, "tag_cache");
2804                 }
2805
2806                 if ($tag_cache) {
2807                         $tags = explode(",", $tag_cache);
2808                 } else {
2809
2810                         /* do it the hard way */
2811
2812                         $tmp_result = db_query($link, $query);
2813
2814                         while ($tmp_line = db_fetch_assoc($tmp_result)) {
2815                                 array_push($tags, $tmp_line["tag_name"]);
2816                         }
2817
2818                         /* update the cache */
2819
2820                         $tags_str = db_escape_string($link, join(",", $tags));
2821
2822                         db_query($link, "UPDATE ttrss_user_entries
2823                                 SET tag_cache = '$tags_str' WHERE ref_id = '$id'
2824                                 AND owner_uid = $owner_uid");
2825                 }
2826
2827                 return $tags;
2828         }
2829
2830         function trim_array($array) {
2831                 $tmp = $array;
2832                 array_walk($tmp, 'trim');
2833                 return $tmp;
2834         }
2835
2836         function tag_is_valid($tag) {
2837                 if ($tag == '') return false;
2838                 if (preg_match("/^[0-9]*$/", $tag)) return false;
2839                 if (mb_strlen($tag) > 250) return false;
2840
2841                 if (function_exists('iconv')) {
2842                         $tag = iconv("utf-8", "utf-8", $tag);
2843                 }
2844
2845                 if (!$tag) return false;
2846
2847                 return true;
2848         }
2849
2850         function render_login_form($link) {
2851                 require_once "login_form.php";
2852                 exit;
2853         }
2854
2855         // from http://developer.apple.com/internet/safari/faq.html
2856         function no_cache_incantation() {
2857                 header("Expires: Mon, 22 Dec 1980 00:00:00 GMT"); // Happy birthday to me :)
2858                 header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT"); // always modified
2859                 header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0"); // HTTP/1.1
2860                 header("Cache-Control: post-check=0, pre-check=0", false);
2861                 header("Pragma: no-cache"); // HTTP/1.0
2862         }
2863
2864         function format_warning($msg, $id = "") {
2865                 global $link;
2866                 return "<div class=\"warning\" id=\"$id\">
2867                         <img src=\"images/sign_excl.svg\">$msg</div>";
2868         }
2869
2870         function format_notice($msg, $id = "") {
2871                 global $link;
2872                 return "<div class=\"notice\" id=\"$id\">
2873                         <img src=\"images/sign_info.svg\">$msg</div>";
2874         }
2875
2876         function format_error($msg, $id = "") {
2877                 global $link;
2878                 return "<div class=\"error\" id=\"$id\">
2879                         <img src=\"images/sign_excl.svg\">$msg</div>";
2880         }
2881
2882         function print_notice($msg) {
2883                 return print format_notice($msg);
2884         }
2885
2886         function print_warning($msg) {
2887                 return print format_warning($msg);
2888         }
2889
2890         function print_error($msg) {
2891                 return print format_error($msg);
2892         }
2893
2894
2895         function T_sprintf() {
2896                 $args = func_get_args();
2897                 return vsprintf(__(array_shift($args)), $args);
2898         }
2899
2900         function format_inline_player($link, $url, $ctype) {
2901
2902                 $entry = "";
2903
2904                 $url = htmlspecialchars($url);
2905
2906                 if (strpos($ctype, "audio/") === 0) {
2907
2908                         if ($_SESSION["hasAudio"] && (strpos($ctype, "ogg") !== false ||
2909                                 strpos($_SERVER['HTTP_USER_AGENT'], "Chrome") !== false ||
2910                                 strpos($_SERVER['HTTP_USER_AGENT'], "Safari") !== false )) {
2911
2912                                 $id = 'AUDIO-' . uniqid();
2913
2914                                 $entry .= "<audio id=\"$id\"\" controls style='display : none'>
2915                                         <source type=\"$ctype\" src=\"$url\"></source>
2916                                         </audio>";
2917
2918                                 $entry .= "<span onclick=\"player(this)\"
2919                                         title=\"".__("Click to play")."\" status=\"0\"
2920                                         class=\"player\" audio-id=\"$id\">".__("Play")."</span>";
2921
2922                         } else {
2923
2924                                 $entry .= "<object type=\"application/x-shockwave-flash\"
2925                                         data=\"lib/button/musicplayer.swf?song_url=$url\"
2926                                         width=\"17\" height=\"17\" style='float : left; margin-right : 5px;'>
2927                                         <param name=\"movie\"
2928                                                 value=\"lib/button/musicplayer.swf?song_url=$url\" />
2929                                         </object>";
2930                         }
2931
2932                         if ($entry) $entry .= "&nbsp; <a target=\"_blank\"
2933                                 href=\"$url\">" . basename($url) . "</a>";
2934
2935                         return $entry;
2936
2937                 }
2938
2939                 return "";
2940
2941 /*              $filename = substr($url, strrpos($url, "/")+1);
2942
2943                 $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
2944                         $filename . " (" . $ctype . ")" . "</a>"; */
2945
2946         }
2947
2948         function format_article($link, $id, $mark_as_read = true, $zoom_mode = false, $owner_uid = false) {
2949                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2950
2951                 $rv = array();
2952
2953                 $rv['id'] = $id;
2954
2955                 /* we can figure out feed_id from article id anyway, why do we
2956                  * pass feed_id here? let's ignore the argument :( */
2957
2958                 $result = db_query($link, "SELECT feed_id FROM ttrss_user_entries
2959                         WHERE ref_id = '$id'");
2960
2961                 $feed_id = (int) db_fetch_result($result, 0, "feed_id");
2962
2963                 $rv['feed_id'] = $feed_id;
2964
2965                 //if (!$zoom_mode) { print "<article id='$id'><![CDATA["; };
2966
2967                 if ($mark_as_read) {
2968                         $result = db_query($link, "UPDATE ttrss_user_entries
2969                                 SET unread = false,last_read = NOW()
2970                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
2971
2972                         ccache_update($link, $feed_id, $owner_uid);
2973                 }
2974
2975                 $result = db_query($link, "SELECT id,title,link,content,feed_id,comments,int_id,
2976                         ".SUBSTRING_FOR_DATE."(updated,1,16) as updated,
2977                         (SELECT site_url FROM ttrss_feeds WHERE id = feed_id) as site_url,
2978                         (SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) as hide_images,
2979                         num_comments,
2980                         tag_cache,
2981                         author,
2982                         orig_feed_id,
2983                         note,
2984                         cached_content
2985                         FROM ttrss_entries,ttrss_user_entries
2986                         WHERE   id = '$id' AND ref_id = id AND owner_uid = $owner_uid");
2987
2988                 if ($result) {
2989
2990                         $line = db_fetch_assoc($result);
2991
2992                         $tag_cache = $line["tag_cache"];
2993
2994                         $line["tags"] = get_article_tags($link, $id, $owner_uid, $line["tag_cache"]);
2995                         unset($line["tag_cache"]);
2996
2997                         $line["content"] = sanitize($link, $line["content"], false, $owner_uid, $line["site_url"]);
2998
2999                         global $pluginhost;
3000
3001                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_RENDER_ARTICLE) as $p) {
3002                                 $line = $p->hook_render_article($line);
3003                         }
3004
3005                         $num_comments = $line["num_comments"];
3006                         $entry_comments = "";
3007
3008                         if ($num_comments > 0) {
3009                                 if ($line["comments"]) {
3010                                         $comments_url = htmlspecialchars($line["comments"]);
3011                                 } else {
3012                                         $comments_url = htmlspecialchars($line["link"]);
3013                                 }
3014                                 $entry_comments = "<a target='_blank' href=\"$comments_url\">$num_comments comments</a>";
3015                         } else {
3016                                 if ($line["comments"] && $line["link"] != $line["comments"]) {
3017                                         $entry_comments = "<a target='_blank' href=\"".htmlspecialchars($line["comments"])."\">comments</a>";
3018                                 }
3019                         }
3020
3021                         if ($zoom_mode) {
3022                                 header("Content-Type: text/html");
3023                                 $rv['content'] .= "<html><head>
3024                                                 <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"/>
3025                                                 <title>Tiny Tiny RSS - ".$line["title"]."</title>
3026                                                 <link rel=\"stylesheet\" type=\"text/css\" href=\"tt-rss.css\">
3027                                         </head><body id=\"ttrssZoom\">";
3028                         }
3029
3030                         $rv['content'] .= "<div class=\"postReply\" id=\"POST-$id\">";
3031
3032                         $rv['content'] .= "<div class=\"postHeader\" id=\"POSTHDR-$id\">";
3033
3034                         $entry_author = $line["author"];
3035
3036                         if ($entry_author) {
3037                                 $entry_author = __(" - ") . $entry_author;
3038                         }
3039
3040                         $parsed_updated = make_local_datetime($link, $line["updated"], true,
3041                                 $owner_uid, true);
3042
3043                         $rv['content'] .= "<div class=\"postDate\">$parsed_updated</div>";
3044
3045                         if ($line["link"]) {
3046                                 $rv['content'] .= "<div class='postTitle'><a target='_blank'
3047                                         title=\"".htmlspecialchars($line['title'])."\"
3048                                         href=\"" .
3049                                         htmlspecialchars($line["link"]) . "\">" .
3050                                         $line["title"] . "</a>" .
3051                                         "<span class='author'>$entry_author</span></div>";
3052                         } else {
3053                                 $rv['content'] .= "<div class='postTitle'>" . $line["title"] . "$entry_author</div>";
3054                         }
3055
3056                         $tags_str = format_tags_string($line["tags"], $id);
3057                         $tags_str_full = join(", ", $line["tags"]);
3058
3059                         if (!$tags_str_full) $tags_str_full = __("no tags");
3060
3061                         if (!$entry_comments) $entry_comments = "&nbsp;"; # placeholder
3062
3063                         $rv['content'] .= "<div class='postTags' style='float : right'>
3064                                 <img src='images/tag.png'
3065                                 class='tagsPic' alt='Tags' title='Tags'>&nbsp;";
3066
3067                         if (!$zoom_mode) {
3068                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>
3069                                         <a title=\"".__('Edit tags for this article')."\"
3070                                         href=\"#\" onclick=\"editArticleTags($id, $feed_id)\">(+)</a>";
3071
3072                                 $rv['content'] .= "<div dojoType=\"dijit.Tooltip\"
3073                                         id=\"ATSTRTIP-$id\" connectId=\"ATSTR-$id\"
3074                                         position=\"below\">$tags_str_full</div>";
3075
3076                                 global $pluginhost;
3077
3078                                 foreach ($pluginhost->get_hooks($pluginhost::HOOK_ARTICLE_BUTTON) as $p) {
3079                                         $rv['content'] .= $p->hook_article_button($line);
3080                                 }
3081
3082
3083                         } else {
3084                                 $tags_str = strip_tags($tags_str);
3085                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>";
3086                         }
3087                         $rv['content'] .= "</div>";
3088                         $rv['content'] .= "<div clear='both'>$entry_comments</div>";
3089
3090                         if ($line["orig_feed_id"]) {
3091
3092                                 $tmp_result = db_query($link, "SELECT * FROM ttrss_archived_feeds
3093                                         WHERE id = ".$line["orig_feed_id"]);
3094
3095                                 if (db_num_rows($tmp_result) != 0) {
3096
3097                                         $rv['content'] .= "<div clear='both'>";
3098                                         $rv['content'] .= __("Originally from:");
3099
3100                                         $rv['content'] .= "&nbsp;";
3101
3102                                         $tmp_line = db_fetch_assoc($tmp_result);
3103
3104                                         $rv['content'] .= "<a target='_blank'
3105                                                 href=' " . htmlspecialchars($tmp_line['site_url']) . "'>" .
3106                                                 $tmp_line['title'] . "</a>";
3107
3108                                         $rv['content'] .= "&nbsp;";
3109
3110                                         $rv['content'] .= "<a target='_blank' href='" . htmlspecialchars($tmp_line['feed_url']) . "'>";
3111                                         $rv['content'] .= "<img title='".__('Feed URL')."'class='tinyFeedIcon' src='images/pub_set.svg'></a>";
3112
3113                                         $rv['content'] .= "</div>";
3114                                 }
3115                         }
3116
3117                         $rv['content'] .= "</div>";
3118
3119                         $rv['content'] .= "<div id=\"POSTNOTE-$id\">";
3120                                 if ($line['note']) {
3121                                         $rv['content'] .= format_article_note($id, $line['note'], !$zoom_mode);
3122                                 }
3123                         $rv['content'] .= "</div>";
3124
3125                         $rv['content'] .= "<div class=\"postContent\">";
3126
3127                         $rv['content'] .= $line["content"];
3128
3129                         $rv['content'] .= format_article_enclosures($link, $id,
3130                                 $always_display_enclosures, $line["content"], $line["hide_images"]);
3131
3132                         $rv['content'] .= "</div>";
3133
3134                         $rv['content'] .= "</div>";
3135
3136                 }
3137
3138                 if ($zoom_mode) {
3139                         $rv['content'] .= "
3140                                 <div class='footer'>
3141                                 <button onclick=\"return window.close()\">".
3142                                         __("Close this window")."</button></div>";
3143                         $rv['content'] .= "</body></html>";
3144                 }
3145
3146                 return $rv;
3147
3148         }
3149
3150         function print_checkpoint($n, $s) {
3151                 $ts = microtime(true);
3152                 echo sprintf("<!-- CP[$n] %.4f seconds -->", $ts - $s);
3153                 return $ts;
3154         }
3155
3156         function sanitize_tag($tag) {
3157                 $tag = trim($tag);
3158
3159                 $tag = mb_strtolower($tag, 'utf-8');
3160
3161                 $tag = preg_replace('/[\'\"\+\>\<]/', "", $tag);
3162
3163 //              $tag = str_replace('"', "", $tag);
3164 //              $tag = str_replace("+", " ", $tag);
3165                 $tag = str_replace("technorati tag: ", "", $tag);
3166
3167                 return $tag;
3168         }
3169
3170         function get_self_url_prefix() {
3171                 if (strrpos(SELF_URL_PATH, "/") === strlen(SELF_URL_PATH)-1) {
3172                         return substr(SELF_URL_PATH, 0, strlen(SELF_URL_PATH)-1);
3173                 } else {
3174                         return SELF_URL_PATH;
3175                 }
3176         }
3177
3178         /**
3179          * Compute the Mozilla Firefox feed adding URL from server HOST and REQUEST_URI.
3180          *
3181          * @return string The Mozilla Firefox feed adding URL.
3182          */
3183         function add_feed_url() {
3184                 //$url_path = ($_SERVER['HTTPS'] != "on" ? 'http://' :  'https://') . $_SERVER["HTTP_HOST"] . parse_url($_SERVER["REQUEST_URI"], PHP_URL_PATH);
3185
3186                 $url_path = get_self_url_prefix() .
3187                         "/public.php?op=subscribe&feed_url=%s";
3188                 return $url_path;
3189         } // function add_feed_url
3190
3191         function encrypt_password($pass, $salt = '', $mode2 = false) {
3192                 if ($salt && $mode2) {
3193                         return "MODE2:" . hash('sha256', $salt . $pass);
3194                 } else if ($salt) {
3195                         return "SHA1X:" . sha1("$salt:$pass");
3196                 } else {
3197                         return "SHA1:" . sha1($pass);
3198                 }
3199         } // function encrypt_password
3200
3201         function load_filters($link, $feed_id, $owner_uid, $action_id = false) {
3202                 $filters = array();
3203
3204                 $cat_id = (int)getFeedCategory($link, $feed_id);
3205
3206                 $result = db_query($link, "SELECT * FROM ttrss_filters2 WHERE
3207                         owner_uid = $owner_uid AND enabled = true");
3208
3209                 $check_cats = join(",", array_merge(
3210                         getParentCategories($link, $cat_id, $owner_uid),
3211                         array($cat_id)));
3212
3213                 while ($line = db_fetch_assoc($result)) {
3214                         $filter_id = $line["id"];
3215
3216                         $result2 = db_query($link, "SELECT
3217                                 r.reg_exp, r.feed_id, r.cat_id, r.cat_filter, t.name AS type_name
3218                                 FROM ttrss_filters2_rules AS r,
3219                                 ttrss_filter_types AS t
3220                                 WHERE
3221                                         (cat_id IS NULL OR cat_id IN ($check_cats)) AND
3222                                         (feed_id IS NULL OR feed_id = '$feed_id') AND
3223                                         filter_type = t.id AND filter_id = '$filter_id'");
3224
3225                         $rules = array();
3226                         $actions = array();
3227
3228                         while ($rule_line = db_fetch_assoc($result2)) {
3229 #                               print_r($rule_line);
3230
3231                                 $rule = array();
3232                                 $rule["reg_exp"] = $rule_line["reg_exp"];
3233                                 $rule["type"] = $rule_line["type_name"];
3234
3235                                 array_push($rules, $rule);
3236                         }
3237
3238                         $result2 = db_query($link, "SELECT a.action_param,t.name AS type_name
3239                                 FROM ttrss_filters2_actions AS a,
3240                                 ttrss_filter_actions AS t
3241                                 WHERE
3242                                         action_id = t.id AND filter_id = '$filter_id'");
3243
3244                         while ($action_line = db_fetch_assoc($result2)) {
3245 #                               print_r($action_line);
3246
3247                                 $action = array();
3248                                 $action["type"] = $action_line["type_name"];
3249                                 $action["param"] = $action_line["action_param"];
3250
3251                                 array_push($actions, $action);
3252                         }
3253
3254
3255                         $filter = array();
3256                         $filter["match_any_rule"] = sql_bool_to_bool($line["match_any_rule"]);
3257                         $filter["rules"] = $rules;
3258                         $filter["actions"] = $actions;
3259
3260                         if (count($rules) > 0 && count($actions) > 0) {
3261                                 array_push($filters, $filter);
3262                         }
3263                 }
3264
3265                 return $filters;
3266         }
3267
3268         function get_score_pic($score) {
3269                 if ($score > 100) {
3270                         return "score_high.png";
3271                 } else if ($score > 0) {
3272                         return "score_half_high.png";
3273                 } else if ($score < -100) {
3274                         return "score_low.png";
3275                 } else if ($score < 0) {
3276                         return "score_half_low.png";
3277                 } else {
3278                         return "score_neutral.png";
3279                 }
3280         }
3281
3282         function feed_has_icon($id) {
3283                 return is_file(ICONS_DIR . "/$id.ico") && filesize(ICONS_DIR . "/$id.ico") > 0;
3284         }
3285
3286         function init_connection($link) {
3287                 if ($link) {
3288
3289                         if (DB_TYPE == "pgsql") {
3290                                 pg_query($link, "set client_encoding = 'UTF-8'");
3291                                 pg_set_client_encoding("UNICODE");
3292                                 pg_query($link, "set datestyle = 'ISO, european'");
3293                                 pg_query($link, "set TIME ZONE 0");
3294                         } else {
3295                                 db_query($link, "SET time_zone = '+0:0'");
3296
3297                                 if (defined('MYSQL_CHARSET') && MYSQL_CHARSET) {
3298                                         db_query($link, "SET NAMES " . MYSQL_CHARSET);
3299                                 }
3300                         }
3301
3302                         global $pluginhost;
3303
3304                         $pluginhost = new PluginHost($link);
3305                         $pluginhost->load(PLUGINS, $pluginhost::KIND_ALL);
3306
3307                         return true;
3308                 } else {
3309                         print "Unable to connect to database:" . db_last_error();
3310                         return false;
3311                 }
3312         }
3313
3314         function format_tags_string($tags, $id) {
3315
3316                 $tags_str = "";
3317                 $tags_nolinks_str = "";
3318
3319                 $num_tags = 0;
3320
3321                 $tag_limit = 6;
3322
3323                 $formatted_tags = array();
3324
3325                 foreach ($tags as $tag) {
3326                         $num_tags++;
3327                         $tag_escaped = str_replace("'", "\\'", $tag);
3328
3329                         if (mb_strlen($tag) > 30) {
3330                                 $tag = truncate_string($tag, 30);
3331                         }
3332
3333                         $tag_str = "<a href=\"javascript:viewfeed('$tag_escaped')\">$tag</a>";
3334
3335                         array_push($formatted_tags, $tag_str);
3336
3337                         $tmp_tags_str = implode(", ", $formatted_tags);
3338
3339                         if ($num_tags == $tag_limit || mb_strlen($tmp_tags_str) > 150) {
3340                                 break;
3341                         }
3342                 }
3343
3344                 $tags_str = implode(", ", $formatted_tags);
3345
3346                 if ($num_tags < count($tags)) {
3347                         $tags_str .= ", &hellip;";
3348                 }
3349
3350                 if ($num_tags == 0) {
3351                         $tags_str = __("no tags");
3352                 }
3353
3354                 return $tags_str;
3355
3356         }
3357
3358         function format_article_labels($labels, $id) {
3359
3360                 $labels_str = "";
3361
3362                 foreach ($labels as $l) {
3363                         $labels_str .= sprintf("<span class='hlLabelRef'
3364                                 style='color : %s; background-color : %s'>%s</span>",
3365                                         $l[2], $l[3], $l[1]);
3366                         }
3367
3368                 return $labels_str;
3369
3370         }
3371
3372         function format_article_note($id, $note, $allow_edit = true) {
3373
3374                 $str = "<div class='articleNote'        onclick=\"editArticleNote($id)\">
3375                         <div class='noteEdit' onclick=\"editArticleNote($id)\">".
3376                         ($allow_edit ? __('(edit note)') : "")."</div>$note</div>";
3377
3378                 return $str;
3379         }
3380
3381
3382         function get_feed_category($link, $feed_cat, $parent_cat_id = false) {
3383                 if ($parent_cat_id) {
3384                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3385                         $parent_insert = "'$parent_cat_id'";
3386                 } else {
3387                         $parent_qpart = "parent_cat IS NULL";
3388                         $parent_insert = "NULL";
3389                 }
3390
3391                 $result = db_query($link,
3392                         "SELECT id FROM ttrss_feed_categories
3393                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3394
3395                 if (db_num_rows($result) == 0) {
3396                         return false;
3397                 } else {
3398                         return db_fetch_result($result, 0, "id");
3399                 }
3400         }
3401
3402         function add_feed_category($link, $feed_cat, $parent_cat_id = false) {
3403
3404                 if (!$feed_cat) return false;
3405
3406                 db_query($link, "BEGIN");
3407
3408                 if ($parent_cat_id) {
3409                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3410                         $parent_insert = "'$parent_cat_id'";
3411                 } else {
3412                         $parent_qpart = "parent_cat IS NULL";
3413                         $parent_insert = "NULL";
3414                 }
3415
3416                 $result = db_query($link,
3417                         "SELECT id FROM ttrss_feed_categories
3418                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3419
3420                 if (db_num_rows($result) == 0) {
3421
3422                         $result = db_query($link,
3423                                 "INSERT INTO ttrss_feed_categories (owner_uid,title,parent_cat)
3424                                 VALUES ('".$_SESSION["uid"]."', '$feed_cat', $parent_insert)");
3425
3426                         db_query($link, "COMMIT");
3427
3428                         return true;
3429                 }
3430
3431                 return false;
3432         }
3433
3434         function getArticleFeed($link, $id) {
3435                 $result = db_query($link, "SELECT feed_id FROM ttrss_user_entries
3436                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
3437
3438                 if (db_num_rows($result) != 0) {
3439                         return db_fetch_result($result, 0, "feed_id");
3440                 } else {
3441                         return 0;
3442                 }
3443         }
3444
3445         /**
3446          * Fixes incomplete URLs by prepending "http://".
3447          * Also replaces feed:// with http://, and
3448          * prepends a trailing slash if the url is a domain name only.
3449          *
3450          * @param string $url Possibly incomplete URL
3451          *
3452          * @return string Fixed URL.
3453          */
3454         function fix_url($url) {
3455                 if (strpos($url, '://') === false) {
3456                         $url = 'http://' . $url;
3457                 } else if (substr($url, 0, 5) == 'feed:') {
3458                         $url = 'http:' . substr($url, 5);
3459                 }
3460
3461                 //prepend slash if the URL has no slash in it
3462                 // "http://www.example" -> "http://www.example/"
3463                 if (strpos($url, '/', strpos($url, ':') + 3) === false) {
3464                         $url .= '/';
3465                 }
3466
3467                 if ($url != "http:///")
3468                         return $url;
3469                 else
3470                         return '';
3471         }
3472
3473         function validate_feed_url($url) {
3474                 $parts = parse_url($url);
3475
3476                 return ($parts['scheme'] == 'http' || $parts['scheme'] == 'feed' || $parts['scheme'] == 'https');
3477
3478         }
3479
3480         function get_article_enclosures($link, $id) {
3481
3482                 $query = "SELECT * FROM ttrss_enclosures
3483                         WHERE post_id = '$id' AND content_url != ''";
3484
3485                 $rv = array();
3486
3487                 $result = db_query($link, $query);
3488
3489                 if (db_num_rows($result) > 0) {
3490                         while ($line = db_fetch_assoc($result)) {
3491                                 array_push($rv, $line);
3492                         }
3493                 }
3494
3495                 return $rv;
3496         }
3497
3498         function save_email_address($link, $email) {
3499                 // FIXME: implement persistent storage of emails
3500
3501                 if (!$_SESSION['stored_emails'])
3502                         $_SESSION['stored_emails'] = array();
3503
3504                 if (!in_array($email, $_SESSION['stored_emails']))
3505                         array_push($_SESSION['stored_emails'], $email);
3506         }
3507
3508
3509         function get_feed_access_key($link, $feed_id, $is_cat, $owner_uid = false) {
3510
3511                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3512
3513                 $sql_is_cat = bool_to_sql_bool($is_cat);
3514
3515                 $result = db_query($link, "SELECT access_key FROM ttrss_access_keys
3516                         WHERE feed_id = '$feed_id'      AND is_cat = $sql_is_cat
3517                         AND owner_uid = " . $owner_uid);
3518
3519                 if (db_num_rows($result) == 1) {
3520                         return db_fetch_result($result, 0, "access_key");
3521                 } else {
3522                         $key = db_escape_string($link, sha1(uniqid(rand(), true)));
3523
3524                         $result = db_query($link, "INSERT INTO ttrss_access_keys
3525                                 (access_key, feed_id, is_cat, owner_uid)
3526                                 VALUES ('$key', '$feed_id', $sql_is_cat, '$owner_uid')");
3527
3528                         return $key;
3529                 }
3530                 return false;
3531         }
3532
3533         function get_feeds_from_html($url, $content)
3534         {
3535                 $url     = fix_url($url);
3536                 $baseUrl = substr($url, 0, strrpos($url, '/') + 1);
3537
3538                 libxml_use_internal_errors(true);
3539
3540                 $doc = new DOMDocument();
3541                 $doc->loadHTML($content);
3542                 $xpath = new DOMXPath($doc);
3543                 $entries = $xpath->query('/html/head/link[@rel="alternate"]');
3544                 $feedUrls = array();
3545                 foreach ($entries as $entry) {
3546                         if ($entry->hasAttribute('href')) {
3547                                 $title = $entry->getAttribute('title');
3548                                 if ($title == '') {
3549                                         $title = $entry->getAttribute('type');
3550                                 }
3551                                 $feedUrl = rewrite_relative_url(
3552                                         $baseUrl, $entry->getAttribute('href')
3553                                 );
3554                                 $feedUrls[$feedUrl] = $title;
3555                         }
3556                 }
3557                 return $feedUrls;
3558         }
3559
3560         function is_html($content) {
3561                 return preg_match("/<html|DOCTYPE html/i", substr($content, 0, 20)) !== 0;
3562         }
3563
3564         function url_is_html($url, $login = false, $pass = false) {
3565                 return is_html(fetch_file_contents($url, false, $login, $pass));
3566         }
3567
3568         function print_label_select($link, $name, $value, $attributes = "") {
3569
3570                 $result = db_query($link, "SELECT caption FROM ttrss_labels2
3571                         WHERE owner_uid = '".$_SESSION["uid"]."' ORDER BY caption");
3572
3573                 print "<select default=\"$value\" name=\"" . htmlspecialchars($name) .
3574                         "\" $attributes onchange=\"labelSelectOnChange(this)\" >";
3575
3576                 while ($line = db_fetch_assoc($result)) {
3577
3578                         $issel = ($line["caption"] == $value) ? "selected=\"1\"" : "";
3579
3580                         print "<option value=\"".htmlspecialchars($line["caption"])."\"
3581                                 $issel>" . htmlspecialchars($line["caption"]) . "</option>";
3582
3583                 }
3584
3585 #               print "<option value=\"ADD_LABEL\">" .__("Add label...") . "</option>";
3586
3587                 print "</select>";
3588
3589
3590         }
3591
3592         function format_article_enclosures($link, $id, $always_display_enclosures,
3593                                         $article_content, $hide_images = false) {
3594
3595                 $result = get_article_enclosures($link, $id);
3596                 $rv = '';
3597
3598                 if (count($result) > 0) {
3599
3600                         $entries_html = array();
3601                         $entries = array();
3602                         $entries_inline = array();
3603
3604                         foreach ($result as $line) {
3605
3606                                 $url = $line["content_url"];
3607                                 $ctype = $line["content_type"];
3608
3609                                 if (!$ctype) $ctype = __("unknown type");
3610
3611                                 $filename = substr($url, strrpos($url, "/")+1);
3612
3613                                 $player = format_inline_player($link, $url, $ctype);
3614
3615                                 if ($player) array_push($entries_inline, $player);
3616
3617 #                               $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
3618 #                                       $filename . " (" . $ctype . ")" . "</a>";
3619
3620                                 $entry = "<div onclick=\"window.open('".htmlspecialchars($url)."')\"
3621                                         dojoType=\"dijit.MenuItem\">$filename ($ctype)</div>";
3622
3623                                 array_push($entries_html, $entry);
3624
3625                                 $entry = array();
3626
3627                                 $entry["type"] = $ctype;
3628                                 $entry["filename"] = $filename;
3629                                 $entry["url"] = $url;
3630
3631                                 array_push($entries, $entry);
3632                         }
3633
3634                         if ($_SESSION['uid'] && !get_pref($link, "STRIP_IMAGES")) {
3635                                 if ($always_display_enclosures ||
3636                                                         !preg_match("/<img/i", $article_content)) {
3637
3638                                         foreach ($entries as $entry) {
3639
3640                                                 if (preg_match("/image/", $entry["type"]) ||
3641                                                                 preg_match("/\.(jpg|png|gif|bmp)/i", $entry["filename"])) {
3642
3643                                                                 if (!$hide_images) {
3644                                                                         $rv .= "<p><img
3645                                                                         alt=\"".htmlspecialchars($entry["filename"])."\"
3646                                                                         src=\"" .htmlspecialchars($entry["url"]) . "\"/></p>";
3647                                                                 } else {
3648                                                                         $rv .= "<p><a target=\"_blank\"
3649                                                                         href=\"".htmlspecialchars($entry["url"])."\"
3650                                                                         >" .htmlspecialchars($entry["url"]) . "</a></p>";
3651
3652                                                                 }
3653                                                 }
3654                                         }
3655                                 }
3656                         }
3657
3658                         if (count($entries_inline) > 0) {
3659                                 $rv .= "<hr clear='both'/>";
3660                                 foreach ($entries_inline as $entry) { $rv .= $entry; };
3661                                 $rv .= "<hr clear='both'/>";
3662                         }
3663
3664                         $rv .= "<br/><div dojoType=\"dijit.form.DropDownButton\">".
3665                                 "<span>" . __('Attachments')."</span>";
3666                         $rv .= "<div dojoType=\"dijit.Menu\" style=\"display: none;\">";
3667
3668                         foreach ($entries_html as $entry) { $rv .= $entry; };
3669
3670                         $rv .= "</div></div>";
3671                 }
3672
3673                 return $rv;
3674         }
3675
3676         function getLastArticleId($link) {
3677                 $result = db_query($link, "SELECT MAX(ref_id) AS id FROM ttrss_user_entries
3678                         WHERE owner_uid = " . $_SESSION["uid"]);
3679
3680                 if (db_num_rows($result) == 1) {
3681                         return db_fetch_result($result, 0, "id");
3682                 } else {
3683                         return -1;
3684                 }
3685         }
3686
3687         function build_url($parts) {
3688                 return $parts['scheme'] . "://" . $parts['host'] . $parts['path'];
3689         }
3690
3691         /**
3692          * Converts a (possibly) relative URL to a absolute one.
3693          *
3694          * @param string $url     Base URL (i.e. from where the document is)
3695          * @param string $rel_url Possibly relative URL in the document
3696          *
3697          * @return string Absolute URL
3698          */
3699         function rewrite_relative_url($url, $rel_url) {
3700                 if (strpos($rel_url, "magnet:") === 0) {
3701                         return $rel_url;
3702                 } else if (strpos($rel_url, "://") !== false) {
3703                         return $rel_url;
3704                 } else if (strpos($rel_url, "//") === 0) {
3705                         # protocol-relative URL (rare but they exist)
3706                         return $rel_url;
3707                 } else if (strpos($rel_url, "/") === 0)
3708                 {
3709                         $parts = parse_url($url);
3710                         $parts['path'] = $rel_url;
3711
3712                         return build_url($parts);
3713
3714                 } else {
3715                         $parts = parse_url($url);
3716                         if (!isset($parts['path'])) {
3717                                 $parts['path'] = '/';
3718                         }
3719                         $dir = $parts['path'];
3720                         if (substr($dir, -1) !== '/') {
3721                                 $dir = dirname($parts['path']);
3722                                 $dir !== '/' && $dir .= '/';
3723                         }
3724                         $parts['path'] = $dir . $rel_url;
3725
3726                         return build_url($parts);
3727                 }
3728         }
3729
3730         function sphinx_search($query, $offset = 0, $limit = 30) {
3731                 require_once 'lib/sphinxapi.php';
3732
3733                 $sphinxClient = new SphinxClient();
3734
3735                 $sphinxClient->SetServer('localhost', 9312);
3736                 $sphinxClient->SetConnectTimeout(1);
3737
3738                 $sphinxClient->SetFieldWeights(array('title' => 70, 'content' => 30,
3739                         'feed_title' => 20));
3740
3741                 $sphinxClient->SetMatchMode(SPH_MATCH_EXTENDED2);
3742                 $sphinxClient->SetRankingMode(SPH_RANK_PROXIMITY_BM25);
3743                 $sphinxClient->SetLimits($offset, $limit, 1000);
3744                 $sphinxClient->SetArrayResult(false);
3745                 $sphinxClient->SetFilter('owner_uid', array($_SESSION['uid']));
3746
3747                 $result = $sphinxClient->Query($query, SPHINX_INDEX);
3748
3749                 $ids = array();
3750
3751                 if (is_array($result['matches'])) {
3752                         foreach (array_keys($result['matches']) as $int_id) {
3753                                 $ref_id = $result['matches'][$int_id]['attrs']['ref_id'];
3754                                 array_push($ids, $ref_id);
3755                         }
3756                 }
3757
3758                 return $ids;
3759         }
3760
3761         function cleanup_tags($link, $days = 14, $limit = 1000) {
3762
3763                 if (DB_TYPE == "pgsql") {
3764                         $interval_query = "date_updated < NOW() - INTERVAL '$days days'";
3765                 } else if (DB_TYPE == "mysql") {
3766                         $interval_query = "date_updated < DATE_SUB(NOW(), INTERVAL $days DAY)";
3767                 }
3768
3769                 $tags_deleted = 0;
3770
3771                 while ($limit > 0) {
3772                         $limit_part = 500;
3773
3774                         $query = "SELECT ttrss_tags.id AS id
3775                                 FROM ttrss_tags, ttrss_user_entries, ttrss_entries
3776                                 WHERE post_int_id = int_id AND $interval_query AND
3777                                 ref_id = ttrss_entries.id AND tag_cache != '' LIMIT $limit_part";
3778
3779                         $result = db_query($link, $query);
3780
3781                         $ids = array();
3782
3783                         while ($line = db_fetch_assoc($result)) {
3784                                 array_push($ids, $line['id']);
3785                         }
3786
3787                         if (count($ids) > 0) {
3788                                 $ids = join(",", $ids);
3789                                 print ".";
3790
3791                                 $tmp_result = db_query($link, "DELETE FROM ttrss_tags WHERE id IN ($ids)");
3792                                 $tags_deleted += db_affected_rows($link, $tmp_result);
3793                         } else {
3794                                 break;
3795                         }
3796
3797                         $limit -= $limit_part;
3798                 }
3799
3800                 print "\n";
3801
3802                 return $tags_deleted;
3803         }
3804
3805         function print_user_stylesheet($link) {
3806                 $value = get_pref($link, 'USER_STYLESHEET');
3807
3808                 if ($value) {
3809                         print "<style type=\"text/css\">";
3810                         print str_replace("<br/>", "\n", $value);
3811                         print "</style>";
3812                 }
3813
3814         }
3815
3816         function rewrite_urls($html) {
3817                 libxml_use_internal_errors(true);
3818
3819                 $charset_hack = '<head>
3820                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
3821                 </head>';
3822
3823                 $doc = new DOMDocument();
3824                 $doc->loadHTML($charset_hack . $html);
3825                 $xpath = new DOMXPath($doc);
3826
3827                 $entries = $xpath->query('//*/text()');
3828
3829                 foreach ($entries as $entry) {
3830                         if (strstr($entry->wholeText, "://") !== false) {
3831                                 $text = preg_replace("/((?<!=.)((http|https|ftp)+):\/\/[^ ,!]+)/i",
3832                                         "<a target=\"_blank\" href=\"\\1\">\\1</a>", $entry->wholeText);
3833
3834                                 if ($text != $entry->wholeText) {
3835                                         $cdoc = new DOMDocument();
3836                                         $cdoc->loadHTML($charset_hack . $text);
3837
3838
3839                                         foreach ($cdoc->childNodes as $cnode) {
3840                                                 $cnode = $doc->importNode($cnode, true);
3841
3842                                                 if ($cnode) {
3843                                                         $entry->parentNode->insertBefore($cnode);
3844                                                 }
3845                                         }
3846
3847                                         $entry->parentNode->removeChild($entry);
3848
3849                                 }
3850                         }
3851                 }
3852
3853                 $node = $doc->getElementsByTagName('body')->item(0);
3854
3855                 // http://tt-rss.org/forum/viewtopic.php?f=1&t=970
3856                 if ($node)
3857                         return $doc->saveXML($node);
3858                 else
3859                         return $html;
3860         }
3861
3862         function filter_to_sql($link, $filter, $owner_uid) {
3863                 $query = array();
3864
3865                 if (DB_TYPE == "pgsql")
3866                         $reg_qpart = "~";
3867                 else
3868                         $reg_qpart = "REGEXP";
3869
3870                 foreach ($filter["rules"] AS $rule) {
3871                         $regexp_valid = preg_match('/' . $rule['reg_exp'] . '/',
3872                                 $rule['reg_exp']) !== FALSE;
3873
3874                         if ($regexp_valid) {
3875
3876                                 $rule['reg_exp'] = db_escape_string($link, $rule['reg_exp']);
3877
3878                                 switch ($rule["type"]) {
3879                                         case "title":
3880                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
3881                                                         $rule['reg_exp'] . "')";
3882                                                 break;
3883                                         case "content":
3884                                                 $qpart = "LOWER(ttrss_entries.content) $reg_qpart LOWER('".
3885                                                         $rule['reg_exp'] . "')";
3886                                                 break;
3887                                         case "both":
3888                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
3889                                                         $rule['reg_exp'] . "') OR LOWER(" .
3890                                                         "ttrss_entries.content) $reg_qpart LOWER('" . $rule['reg_exp'] . "')";
3891                                                 break;
3892                                         case "tag":
3893                                                 $qpart = "LOWER(ttrss_user_entries.tag_cache) $reg_qpart LOWER('".
3894                                                         $rule['reg_exp'] . "')";
3895                                                 break;
3896                                         case "link":
3897                                                 $qpart = "LOWER(ttrss_entries.link) $reg_qpart LOWER('".
3898                                                         $rule['reg_exp'] . "')";
3899                                                 break;
3900                                         case "author":
3901                                                 $qpart = "LOWER(ttrss_entries.author) $reg_qpart LOWER('".
3902                                                         $rule['reg_exp'] . "')";
3903                                                 break;
3904                                 }
3905
3906                                 if (isset($rule["feed_id"]) && $rule["feed_id"] > 0) {
3907                                         $qpart .= " AND feed_id = " . db_escape_string($link, $rule["feed_id"]);
3908                                 }
3909
3910                                 if (isset($rule["cat_id"])) {
3911
3912                                         if ($rule["cat_id"] > 0) {
3913                                                 $children = getChildCategories($link, $rule["cat_id"], $owner_uid);
3914                                                 array_push($children, $rule["cat_id"]);
3915
3916                                                 $children = join(",", $children);
3917
3918                                                 $cat_qpart = "cat_id IN ($children)";
3919                                         } else {
3920                                                 $cat_qpart = "cat_id IS NULL";
3921                                         }
3922
3923                                         $qpart .= " AND $cat_qpart";
3924                                 }
3925
3926                                 array_push($query, "($qpart)");
3927
3928                         }
3929                 }
3930
3931                 if (count($query) > 0) {
3932                         return "(" . join($filter["match_any_rule"] ? "OR" : "AND", $query) . ")";
3933                 } else {
3934                         return "(false)";
3935                 }
3936         }
3937
3938         if (!function_exists('gzdecode')) {
3939                 function gzdecode($string) { // no support for 2nd argument
3940                         return file_get_contents('compress.zlib://data:who/cares;base64,'.
3941                                 base64_encode($string));
3942                 }
3943         }
3944
3945         function get_random_bytes($length) {
3946                 if (function_exists('openssl_random_pseudo_bytes')) {
3947                         return openssl_random_pseudo_bytes($length);
3948                 } else {
3949                         $output = "";
3950
3951                         for ($i = 0; $i < $length; $i++)
3952                                 $output .= chr(mt_rand(0, 255));
3953
3954                         return $output;
3955                 }
3956         }
3957
3958         function read_stdin() {
3959                 $fp = fopen("php://stdin", "r");
3960
3961                 if ($fp) {
3962                         $line = trim(fgets($fp));
3963                         fclose($fp);
3964                         return $line;
3965                 }
3966
3967                 return null;
3968         }
3969
3970         function tmpdirname($path, $prefix) {
3971                 // Use PHP's tmpfile function to create a temporary
3972                 // directory name. Delete the file and keep the name.
3973                 $tempname = tempnam($path,$prefix);
3974                 if (!$tempname)
3975                         return false;
3976
3977                 if (!unlink($tempname))
3978                         return false;
3979
3980        return $tempname;
3981         }
3982
3983         function getFeedCategory($link, $feed) {
3984                 $result = db_query($link, "SELECT cat_id FROM ttrss_feeds
3985                         WHERE id = '$feed'");
3986
3987                 if (db_num_rows($result) > 0) {
3988                         return db_fetch_result($result, 0, "cat_id");
3989                 } else {
3990                         return false;
3991                 }
3992
3993         }
3994
3995         function implements_interface($class, $interface) {
3996                 return in_array($interface, class_implements($class));
3997         }
3998
3999         function geturl($url){
4000
4001                 (function_exists('curl_init')) ? '' : die('cURL Must be installed for geturl function to work. Ask your host to enable it or uncomment extension=php_curl.dll in php.ini');
4002
4003                 $curl = curl_init();
4004                 $header[0] = "Accept: text/xml,application/xml,application/xhtml+xml,";
4005                 $header[0] .= "text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5";
4006                 $header[] = "Cache-Control: max-age=0";
4007                 $header[] = "Connection: keep-alive";
4008                 $header[] = "Keep-Alive: 300";
4009                 $header[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
4010                 $header[] = "Accept-Language: en-us,en;q=0.5";
4011                 $header[] = "Pragma: ";
4012
4013                 curl_setopt($curl, CURLOPT_URL, $url);
4014                 curl_setopt($curl, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 5.1; rv:5.0) Gecko/20100101 Firefox/5.0 Firefox/5.0');
4015                 curl_setopt($curl, CURLOPT_HTTPHEADER, $header);
4016                 curl_setopt($curl, CURLOPT_HEADER, true);
4017                 curl_setopt($curl, CURLOPT_REFERER, $url);
4018                 curl_setopt($curl, CURLOPT_ENCODING, 'gzip,deflate');
4019                 curl_setopt($curl, CURLOPT_AUTOREFERER, true);
4020                 curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
4021                 //curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true); //CURLOPT_FOLLOWLOCATION Disabled...
4022                 curl_setopt($curl, CURLOPT_TIMEOUT, 60);
4023
4024                 $html = curl_exec($curl);
4025
4026                 $status = curl_getinfo($curl);
4027                 curl_close($curl);
4028
4029                 if($status['http_code']!=200){
4030                         if($status['http_code'] == 301 || $status['http_code'] == 302) {
4031                                 list($header) = explode("\r\n\r\n", $html, 2);
4032                                 $matches = array();
4033                                 preg_match("/(Location:|URI:)[^(\n)]*/", $header, $matches);
4034                                 $url = trim(str_replace($matches[1],"",$matches[0]));
4035                                 $url_parsed = parse_url($url);
4036                                 return (isset($url_parsed))? geturl($url, $referer):'';
4037                         }
4038                         $oline='';
4039                         foreach($status as $key=>$eline){$oline.='['.$key.']'.$eline.' ';}
4040                         $line =$oline." \r\n ".$url."\r\n-----------------\r\n";
4041 #                       $handle = @fopen('./curl.error.log', 'a');
4042 #                       fwrite($handle, $line);
4043                         return FALSE;
4044                 }
4045                 return $url;
4046         }
4047
4048         function get_minified_js($files) {
4049                 require_once 'lib/jshrink/Minifier.php';
4050
4051                 $rv = '';
4052
4053                 foreach ($files as $js) {
4054                         if (!isset($_GET['debug'])) {
4055                                 $cached_file = CACHE_DIR . "/js/$js.js";
4056
4057                                 if (file_exists($cached_file) &&
4058                                                 is_readable($cached_file) &&
4059                                                 filemtime($cached_file) >= filemtime("js/$js.js")) {
4060
4061                                         $rv .= file_get_contents($cached_file);
4062
4063                                 } else {
4064                                         $minified = JShrink\Minifier::minify(file_get_contents("js/$js.js"));
4065                                         file_put_contents($cached_file, $minified);
4066                                         $rv .= $minified;
4067                                 }
4068                         } else {
4069                                 $rv .= file_get_contents("js/$js.js");
4070                         }
4071                 }
4072
4073                 return $rv;
4074         }
4075
4076         function stylesheet_tag($filename) {
4077                 $timestamp = filemtime($filename);
4078
4079                 echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"$filename?$timestamp\"/>\n";
4080         }
4081
4082         function javascript_tag($filename) {
4083                 $query = "";
4084
4085                 if (!(strpos($filename, "?") === FALSE)) {
4086                         $query = substr($filename, strpos($filename, "?")+1);
4087                         $filename = substr($filename, 0, strpos($filename, "?"));
4088                 }
4089
4090                 $timestamp = filemtime($filename);
4091
4092                 if ($query) $timestamp .= "&$query";
4093
4094                 echo "<script type=\"text/javascript\" charset=\"utf-8\" src=\"$filename?$timestamp\"></script>\n";
4095         }
4096
4097         function calculate_dep_timestamp() {
4098                 $files = array_merge(glob("js/*.js"), glob("*.css"));
4099
4100                 $max_ts = -1;
4101
4102                 foreach ($files as $file) {
4103                         if (filemtime($file) > $max_ts) $max_ts = filemtime($file);
4104                 }
4105
4106                 return $max_ts;
4107         }
4108
4109         function T_js_decl($s1, $s2) {
4110                 if ($s1 && $s2) {
4111                         $s1 = preg_replace("/\n/", "", $s1);
4112                         $s2 = preg_replace("/\n/", "", $s2);
4113
4114                         $s1 = preg_replace("/\"/", "\\\"", $s1);
4115                         $s2 = preg_replace("/\"/", "\\\"", $s2);
4116
4117                         return "T_messages[\"$s1\"] = \"$s2\";\n";
4118                 }
4119         }
4120
4121         function init_js_translations() {
4122
4123         print 'var T_messages = new Object();
4124
4125                 function __(msg) {
4126                         if (T_messages[msg]) {
4127                                 return T_messages[msg];
4128                         } else {
4129                                 return msg;
4130                         }
4131                 }
4132
4133                 function ngettext(msg1, msg2, n) {
4134                         return (parseInt(n) > 1) ? msg2 : msg1;
4135                 }';
4136
4137                 $l10n = _get_reader();
4138
4139                 for ($i = 0; $i < $l10n->total; $i++) {
4140                         $orig = $l10n->get_original_string($i);
4141                         $translation = __($orig);
4142
4143                         print T_js_decl($orig, $translation);
4144                 }
4145         }
4146
4147 ?>