include/functions.php

   1 <?php
   2         define('EXPECTED_CONFIG_VERSION', 26);
   3         define('SCHEMA_VERSION', 111);
   4
   5         define('LABEL_BASE_INDEX', -1024);
   6         define('PLUGIN_FEED_BASE_INDEX', -128);
   7
   8         $fetch_last_error = false;
   9         $fetch_last_error_code = false;
  10         $pluginhost = false;
  11
  12         function __autoload($class) {
  13                 $class_file = str_replace("_", "/", strtolower(basename($class)));
  14
  15                 $file = dirname(__FILE__)."/../classes/$class_file.php";
  16
  17                 if (file_exists($file)) {
  18                         require $file;
  19                 }
  20
  21         }
  22
  23         mb_internal_encoding("UTF-8");
  24         date_default_timezone_set('UTC');
  25         if (defined('E_DEPRECATED')) {
  26                 error_reporting(E_ALL & ~E_NOTICE & ~E_DEPRECATED);
  27         } else {
  28                 error_reporting(E_ALL & ~E_NOTICE);
  29         }
  30
  31         require_once 'config.php';
  32
  33         /**
  34          * Define a constant if not already defined
  35          *
  36          * @param string $name The constant name.
  37          * @param mixed $value The constant value.
  38          * @access public
  39          * @return boolean True if defined successfully or not.
  40          */
  41         function define_default($name, $value) {
  42                 // Note: performence freaks should define everything in
  43                 // tunables.php in config.php becasue if will make defined()
  44                 // run much faster, see 'tris+php at tfconsulting dot com dot
  45                 // au' comment here:
  46                 // http://www.php.net/manual/en/function.defined.php#89886
  47                 defined($name) or define($name, $value);
  48         }
  49
  50         // Require tunables.php to define tunable constants (That may have
  51         // already been denied in config.php)
  52         require_once 'tunables.php';
  53
  54         if (DB_TYPE == "pgsql") {
  55                 define('SUBSTRING_FOR_DATE', 'SUBSTRING_FOR_DATE');
  56         } else {
  57                 define('SUBSTRING_FOR_DATE', 'SUBSTRING');
  58         }
  59
  60         define('THEME_VERSION_REQUIRED', 1.1);
  61
  62         /**
  63          * Return available translations names.
  64          *
  65          * @access public
  66          * @return array A array of available translations.
  67          */
  68         function get_translations() {
  69                 $tr = array(
  70                                         "auto"  => "Detect automatically",
  71                                         "ca_CA" => "Català",
  72                                         "cs_CZ" => "Česky",
  73                                         "en_US" => "English",
  74                                         "es_ES" => "Español",
  75                                         "de_DE" => "Deutsch",
  76                                         "fr_FR" => "Français",
  77                                         "hu_HU" => "Magyar (Hungarian)",
  78                                         "it_IT" => "Italiano",
  79                                         "ja_JP" => "日本語 (Japanese)",
  80                                         "lv_LV" => "Latviešu",
  81                                         "nb_NO" => "Norwegian bokmål",
  82                                         "nl_NL" => "Dutch",
  83                                         "pl_PL" => "Polski",
  84                                         "ru_RU" => "Русский",
  85                                         "pt_BR" => "Portuguese/Brazil",
  86                                         "zh_CN" => "Simplified Chinese");
  87
  88                 return $tr;
  89         }
  90
  91         require_once "lib/accept-to-gettext.php";
  92         require_once "lib/gettext/gettext.inc";
  93
  94
  95         function startup_gettext() {
  96
  97                 # Get locale from Accept-Language header
  98                 $lang = al2gt(array_keys(get_translations()), "text/html");
  99
 100                 if (defined('_TRANSLATION_OVERRIDE_DEFAULT')) {
 101                         $lang = _TRANSLATION_OVERRIDE_DEFAULT;
 102                 }
 103
 104                 if ($_SESSION["language"] && $_SESSION["language"] != "auto") {
 105                         $lang = $_SESSION["language"];
 106                 }
 107
 108                 if ($lang) {
 109                         if (defined('LC_MESSAGES')) {
 110                                 _setlocale(LC_MESSAGES, $lang);
 111                         } else if (defined('LC_ALL')) {
 112                                 _setlocale(LC_ALL, $lang);
 113                         }
 114
 115                         _bindtextdomain("messages", "locale");
 116
 117                         _textdomain("messages");
 118                         _bind_textdomain_codeset("messages", "UTF-8");
 119                 }
 120         }
 121
 122         startup_gettext();
 123
 124         require_once 'db-prefs.php';
 125         require_once 'version.php';
 126         require_once 'ccache.php';
 127         require_once 'labels.php';
 128
 129         define('SELF_USER_AGENT', 'Tiny Tiny RSS/' . VERSION . ' (http://tt-rss.org/)');
 130         ini_set('user_agent', SELF_USER_AGENT);
 131
 132         require_once 'lib/pubsubhubbub/publisher.php';
 133
 134         $tz_offset = -1;
 135         $utc_tz = new DateTimeZone('UTC');
 136         $schema_version = false;
 137
 138         /**
 139          * Print a timestamped debug message.
 140          *
 141          * @param string $msg The debug message.
 142          * @return void
 143          */
 144         function _debug($msg) {
 145                 $ts = strftime("%H:%M:%S", time());
 146                 if (function_exists('posix_getpid')) {
 147                         $ts = "$ts/" . posix_getpid();
 148                 }
 149
 150                 if (!(defined('QUIET') && QUIET)) {
 151                         print "[$ts] $msg\n";
 152                 }
 153
 154                 if (defined('LOGFILE'))  {
 155                         $fp = fopen(LOGFILE, 'a+');
 156
 157                         if ($fp) {
 158                                 fputs($fp, "[$ts] $msg\n");
 159                                 fclose($fp);
 160                         }
 161                 }
 162
 163         } // function _debug
 164
 165         /**
 166          * Purge a feed old posts.
 167          *
 168          * @param mixed $link A database connection.
 169          * @param mixed $feed_id The id of the purged feed.
 170          * @param mixed $purge_interval Olderness of purged posts.
 171          * @param boolean $debug Set to True to enable the debug. False by default.
 172          * @access public
 173          * @return void
 174          */
 175         function purge_feed($link, $feed_id, $purge_interval, $debug = false) {
 176
 177                 if (!$purge_interval) $purge_interval = feed_purge_interval($link, $feed_id);
 178
 179                 $rows = -1;
 180
 181                 $result = db_query($link,
 182                         "SELECT owner_uid FROM ttrss_feeds WHERE id = '$feed_id'");
 183
 184                 $owner_uid = false;
 185
 186                 if (db_num_rows($result) == 1) {
 187                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 188                 }
 189
 190                 if ($purge_interval == -1 || !$purge_interval) {
 191                         if ($owner_uid) {
 192                                 ccache_update($link, $feed_id, $owner_uid);
 193                         }
 194                         return;
 195                 }
 196
 197                 if (!$owner_uid) return;
 198
 199                 if (FORCE_ARTICLE_PURGE == 0) {
 200                         $purge_unread = get_pref($link, "PURGE_UNREAD_ARTICLES",
 201                                 $owner_uid, false);
 202                 } else {
 203                         $purge_unread = true;
 204                         $purge_interval = FORCE_ARTICLE_PURGE;
 205                 }
 206
 207                 if (!$purge_unread) $query_limit = " unread = false AND ";
 208
 209                 if (DB_TYPE == "pgsql") {
 210                         $pg_version = get_pgsql_version($link);
 211
 212                         if (preg_match("/^7\./", $pg_version) || preg_match("/^8\.0/", $pg_version)) {
 213
 214                                 $result = db_query($link, "DELETE FROM ttrss_user_entries WHERE
 215                                         ttrss_entries.id = ref_id AND
 216                                         marked = false AND
 217                                         feed_id = '$feed_id' AND
 218                                         $query_limit
 219                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 220
 221                         } else {
 222
 223                                 $result = db_query($link, "DELETE FROM ttrss_user_entries
 224                                         USING ttrss_entries
 225                                         WHERE ttrss_entries.id = ref_id AND
 226                                         marked = false AND
 227                                         feed_id = '$feed_id' AND
 228                                         $query_limit
 229                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 230                         }
 231
 232                         $rows = pg_affected_rows($result);
 233
 234                 } else {
 235
 236 /*                      $result = db_query($link, "DELETE FROM ttrss_user_entries WHERE
 237                                 marked = false AND feed_id = '$feed_id' AND
 238                                 (SELECT date_updated FROM ttrss_entries WHERE
 239                                         id = ref_id) < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)"); */
 240
 241                         $result = db_query($link, "DELETE FROM ttrss_user_entries
 242                                 USING ttrss_user_entries, ttrss_entries
 243                                 WHERE ttrss_entries.id = ref_id AND
 244                                 marked = false AND
 245                                 feed_id = '$feed_id' AND
 246                                 $query_limit
 247                                 ttrss_entries.date_updated < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)");
 248
 249                         $rows = mysql_affected_rows($link);
 250
 251                 }
 252
 253                 ccache_update($link, $feed_id, $owner_uid);
 254
 255                 if ($debug) {
 256                         _debug("Purged feed $feed_id ($purge_interval): deleted $rows articles");
 257                 }
 258
 259                 return $rows;
 260         } // function purge_feed
 261
 262         function feed_purge_interval($link, $feed_id) {
 263
 264                 $result = db_query($link, "SELECT purge_interval, owner_uid FROM ttrss_feeds
 265                         WHERE id = '$feed_id'");
 266
 267                 if (db_num_rows($result) == 1) {
 268                         $purge_interval = db_fetch_result($result, 0, "purge_interval");
 269                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 270
 271                         if ($purge_interval == 0) $purge_interval = get_pref($link,
 272                                 'PURGE_OLD_DAYS', $owner_uid);
 273
 274                         return $purge_interval;
 275
 276                 } else {
 277                         return -1;
 278                 }
 279         }
 280
 281         function purge_orphans($link, $do_output = false) {
 282
 283                 // purge orphaned posts in main content table
 284                 $result = db_query($link, "DELETE FROM ttrss_entries WHERE
 285                         (SELECT COUNT(int_id) FROM ttrss_user_entries WHERE ref_id = id) = 0");
 286
 287                 if ($do_output) {
 288                         $rows = db_affected_rows($link, $result);
 289                         _debug("Purged $rows orphaned posts.");
 290                 }
 291         }
 292
 293         function get_feed_update_interval($link, $feed_id) {
 294                 $result = db_query($link, "SELECT owner_uid, update_interval FROM
 295                         ttrss_feeds WHERE id = '$feed_id'");
 296
 297                 if (db_num_rows($result) == 1) {
 298                         $update_interval = db_fetch_result($result, 0, "update_interval");
 299                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 300
 301                         if ($update_interval != 0) {
 302                                 return $update_interval;
 303                         } else {
 304                                 return get_pref($link, 'DEFAULT_UPDATE_INTERVAL', $owner_uid, false);
 305                         }
 306
 307                 } else {
 308                         return -1;
 309                 }
 310         }
 311
 312         function fetch_file_contents($url, $type = false, $login = false, $pass = false, $post_query = false, $timeout = false, $timestamp = 0) {
 313
 314                 global $fetch_last_error;
 315                 global $fetch_last_error_code;
 316
 317                 if (function_exists('curl_init') && !ini_get("open_basedir")) {
 318
 319                         if (ini_get("safe_mode")) {
 320                                 $ch = curl_init(geturl($url));
 321                         } else {
 322                                 $ch = curl_init($url);
 323                         }
 324
 325                         if ($timestamp) {
 326                                 curl_setopt($ch, CURLOPT_HTTPHEADER,
 327                                         array("If-Modified-Since: ".gmdate('D, d M Y H:i:s \G\M\T', $timestamp)));
 328                         }
 329
 330                         curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, $timeout ? $timeout : FILE_FETCH_CONNECT_TIMEOUT);
 331                         curl_setopt($ch, CURLOPT_TIMEOUT, $timeout ? $timeout : FILE_FETCH_TIMEOUT);
 332                         curl_setopt($ch, CURLOPT_FOLLOWLOCATION, !ini_get("safe_mode"));
 333                         curl_setopt($ch, CURLOPT_MAXREDIRS, 20);
 334                         curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
 335                         curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
 336                         curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
 337                         curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_ANY);
 338                         curl_setopt($ch, CURLOPT_USERAGENT, SELF_USER_AGENT);
 339                         curl_setopt($ch, CURLOPT_ENCODING , "gzip");
 340                         curl_setopt($ch, CURLOPT_REFERER, $url);
 341
 342                         if ($post_query) {
 343                                 curl_setopt($ch, CURLOPT_POST, true);
 344                                 curl_setopt($ch, CURLOPT_POSTFIELDS, $post_query);
 345                         }
 346
 347                         if ($login && $pass)
 348                                 curl_setopt($ch, CURLOPT_USERPWD, "$login:$pass");
 349
 350                         $contents = @curl_exec($ch);
 351
 352                         if (curl_errno($ch) === 23 || curl_errno($ch) === 61) {
 353                                 curl_setopt($ch, CURLOPT_ENCODING, 'none');
 354                                 $contents = @curl_exec($ch);
 355                         }
 356
 357                         if ($contents === false) {
 358                                 $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
 359                                 curl_close($ch);
 360                                 return false;
 361                         }
 362
 363                         $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
 364                         $content_type = curl_getinfo($ch, CURLINFO_CONTENT_TYPE);
 365
 366                         $fetch_last_error_code = $http_code;
 367
 368                         if ($http_code != 200 || $type && strpos($content_type, "$type") === false) {
 369                                 if (curl_errno($ch) != 0) {
 370                                         $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
 371                                 } else {
 372                                         $fetch_last_error = "HTTP Code: $http_code";
 373                                 }
 374                                 curl_close($ch);
 375                                 return false;
 376                         }
 377
 378                         curl_close($ch);
 379
 380                         return $contents;
 381                 } else {
 382                         if ($login && $pass){
 383                                 $url_parts = array();
 384
 385                                 preg_match("/(^[^:]*):\/\/(.*)/", $url, $url_parts);
 386
 387                                 $pass = urlencode($pass);
 388
 389                                 if ($url_parts[1] && $url_parts[2]) {
 390                                         $url = $url_parts[1] . "://$login:$pass@" . $url_parts[2];
 391                                 }
 392                         }
 393
 394                         $data = @file_get_contents($url);
 395
 396                         @$gzdecoded = gzdecode($data);
 397                         if ($gzdecoded) $data = $gzdecoded;
 398
 399                         if (!$data && function_exists('error_get_last')) {
 400                                 $error = error_get_last();
 401                                 $fetch_last_error = $error["message"];
 402                         }
 403                         return $data;
 404                 }
 405
 406         }
 407
 408         /**
 409          * Try to determine the favicon URL for a feed.
 410          * adapted from wordpress favicon plugin by Jeff Minard (http://thecodepro.com/)
 411          * http://dev.wp-plugins.org/file/favatars/trunk/favatars.php
 412          *
 413          * @param string $url A feed or page URL
 414          * @access public
 415          * @return mixed The favicon URL, or false if none was found.
 416          */
 417         function get_favicon_url($url) {
 418
 419                 $favicon_url = false;
 420
 421                 if ($html = @fetch_file_contents($url)) {
 422
 423                         libxml_use_internal_errors(true);
 424
 425                         $doc = new DOMDocument();
 426                         $doc->loadHTML($html);
 427                         $xpath = new DOMXPath($doc);
 428
 429                         $base = $xpath->query('/html/head/base');
 430                         foreach ($base as $b) {
 431                                 $url = $b->getAttribute("href");
 432                                 break;
 433                         }
 434
 435                         $entries = $xpath->query('/html/head/link[@rel="shortcut icon" or @rel="icon"]');
 436                         if (count($entries) > 0) {
 437                                 foreach ($entries as $entry) {
 438                                         $favicon_url = rewrite_relative_url($url, $entry->getAttribute("href"));
 439                                         break;
 440                                 }
 441                         }
 442                 }
 443
 444                 if (!$favicon_url)
 445                         $favicon_url = rewrite_relative_url($url, "/favicon.ico");
 446
 447                 return $favicon_url;
 448         } // function get_favicon_url
 449
 450         function check_feed_favicon($site_url, $feed, $link) {
 451 #               print "FAVICON [$site_url]: $favicon_url\n";
 452
 453                 $icon_file = ICONS_DIR . "/$feed.ico";
 454
 455                 if (!file_exists($icon_file)) {
 456                         $favicon_url = get_favicon_url($site_url);
 457
 458                         if ($favicon_url) {
 459                                 // Limiting to "image" type misses those served with text/plain
 460                                 $contents = fetch_file_contents($favicon_url); // , "image");
 461
 462                                 if ($contents) {
 463                                         // Crude image type matching.
 464                                         // Patterns gleaned from the file(1) source code.
 465                                         if (preg_match('/^\x00\x00\x01\x00/', $contents)) {
 466                                                 // 0       string  \000\000\001\000        MS Windows icon resource
 467                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa MS Windows icon resource");
 468                                         }
 469                                         elseif (preg_match('/^GIF8/', $contents)) {
 470                                                 // 0       string          GIF8            GIF image data
 471                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa GIF image");
 472                                         }
 473                                         elseif (preg_match('/^\x89PNG\x0d\x0a\x1a\x0a/', $contents)) {
 474                                                 // 0       string          \x89PNG\x0d\x0a\x1a\x0a         PNG image data
 475                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa PNG image");
 476                                         }
 477                                         elseif (preg_match('/^\xff\xd8/', $contents)) {
 478                                                 // 0       beshort         0xffd8          JPEG image data
 479                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa JPG image");
 480                                         }
 481                                         else {
 482                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa UNKNOWN type");
 483                                                 $contents = "";
 484                                         }
 485                                 }
 486
 487                                 if ($contents) {
 488                                         $fp = @fopen($icon_file, "w");
 489
 490                                         if ($fp) {
 491                                                 fwrite($fp, $contents);
 492                                                 fclose($fp);
 493                                                 chmod($icon_file, 0644);
 494                                         }
 495                                 }
 496                         }
 497                 }
 498         }
 499
 500         function print_select($id, $default, $values, $attributes = "") {
 501                 print "<select name=\"$id\" id=\"$id\" $attributes>";
 502                 foreach ($values as $v) {
 503                         if ($v == $default)
 504                                 $sel = "selected=\"1\"";
 505                          else
 506                                 $sel = "";
 507
 508                         $v = trim($v);
 509
 510                         print "<option value=\"$v\" $sel>$v</option>";
 511                 }
 512                 print "</select>";
 513         }
 514
 515         function print_select_hash($id, $default, $values, $attributes = "") {
 516                 print "<select name=\"$id\" id='$id' $attributes>";
 517                 foreach (array_keys($values) as $v) {
 518                         if ($v == $default)
 519                                 $sel = 'selected="selected"';
 520                          else
 521                                 $sel = "";
 522
 523                         $v = trim($v);
 524
 525                         print "<option $sel value=\"$v\">".$values[$v]."</option>";
 526                 }
 527
 528                 print "</select>";
 529         }
 530
 531         function print_radio($id, $default, $true_is, $values, $attributes = "") {
 532                 foreach ($values as $v) {
 533
 534                         if ($v == $default)
 535                                 $sel = "checked";
 536                          else
 537                                 $sel = "";
 538
 539                         if ($v == $true_is) {
 540                                 $sel .= " value=\"1\"";
 541                         } else {
 542                                 $sel .= " value=\"0\"";
 543                         }
 544
 545                         print "<input class=\"noborder\" dojoType=\"dijit.form.RadioButton\"
 546                                 type=\"radio\" $sel $attributes name=\"$id\">&nbsp;$v&nbsp;";
 547
 548                 }
 549         }
 550
 551         function initialize_user_prefs($link, $uid, $profile = false) {
 552
 553                 $uid = db_escape_string($link, $uid);
 554
 555                 if (!$profile) {
 556                         $profile = "NULL";
 557                         $profile_qpart = "AND profile IS NULL";
 558                 } else {
 559                         $profile_qpart = "AND profile = '$profile'";
 560                 }
 561
 562                 if (get_schema_version($link) < 63) $profile_qpart = "";
 563
 564                 db_query($link, "BEGIN");
 565
 566                 $result = db_query($link, "SELECT pref_name,def_value FROM ttrss_prefs");
 567
 568                 $u_result = db_query($link, "SELECT pref_name
 569                         FROM ttrss_user_prefs WHERE owner_uid = '$uid' $profile_qpart");
 570
 571                 $active_prefs = array();
 572
 573                 while ($line = db_fetch_assoc($u_result)) {
 574                         array_push($active_prefs, $line["pref_name"]);
 575                 }
 576
 577                 while ($line = db_fetch_assoc($result)) {
 578                         if (array_search($line["pref_name"], $active_prefs) === FALSE) {
 579 //                              print "adding " . $line["pref_name"] . "<br>";
 580
 581                                 $line["def_value"] = db_escape_string($link, $line["def_value"]);
 582                                 $line["pref_name"] = db_escape_string($link, $line["pref_name"]);
 583
 584                                 if (get_schema_version($link) < 63) {
 585                                         db_query($link, "INSERT INTO ttrss_user_prefs
 586                                                 (owner_uid,pref_name,value) VALUES
 587                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."')");
 588
 589                                 } else {
 590                                         db_query($link, "INSERT INTO ttrss_user_prefs
 591                                                 (owner_uid,pref_name,value, profile) VALUES
 592                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."', $profile)");
 593                                 }
 594
 595                         }
 596                 }
 597
 598                 db_query($link, "COMMIT");
 599
 600         }
 601
 602         function get_ssl_certificate_id() {
 603                 if ($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"]) {
 604                         return sha1($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"] .
 605                                 $_SERVER["REDIRECT_SSL_CLIENT_V_START"] .
 606                                 $_SERVER["REDIRECT_SSL_CLIENT_V_END"] .
 607                                 $_SERVER["REDIRECT_SSL_CLIENT_S_DN"]);
 608                 }
 609                 return "";
 610         }
 611
 612         function authenticate_user($link, $login, $password, $check_only = false) {
 613
 614                 if (!SINGLE_USER_MODE) {
 615                         $user_id = false;
 616
 617                         global $pluginhost;
 618                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_AUTH_USER) as $plugin) {
 619
 620                                 $user_id = (int) $plugin->authenticate($login, $password);
 621
 622                                 if ($user_id) {
 623                                         $_SESSION["auth_module"] = strtolower(get_class($plugin));
 624                                         break;
 625                                 }
 626                         }
 627
 628                         if ($user_id && !$check_only) {
 629                                 @session_start();
 630
 631                                 $_SESSION["uid"] = $user_id;
 632
 633                                 $result = db_query($link, "SELECT login,access_level,pwd_hash FROM ttrss_users
 634                                         WHERE id = '$user_id'");
 635
 636                                 $_SESSION["name"] = db_fetch_result($result, 0, "login");
 637                                 $_SESSION["access_level"] = db_fetch_result($result, 0, "access_level");
 638                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 639
 640                                 db_query($link, "UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 641                                         $_SESSION["uid"]);
 642
 643                                 $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 644                                 $_SESSION["pwd_hash"] = db_fetch_result($result, 0, "pwd_hash");
 645
 646                                 $_SESSION["last_version_check"] = time();
 647
 648                                 initialize_user_prefs($link, $_SESSION["uid"]);
 649
 650                                 return true;
 651                         }
 652
 653                         return false;
 654
 655                 } else {
 656
 657                         $_SESSION["uid"] = 1;
 658                         $_SESSION["name"] = "admin";
 659                         $_SESSION["access_level"] = 10;
 660
 661                         $_SESSION["hide_hello"] = true;
 662                         $_SESSION["hide_logout"] = true;
 663
 664                         $_SESSION["auth_module"] = false;
 665
 666                         if (!$_SESSION["csrf_token"]) {
 667                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 668                         }
 669
 670                         $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 671
 672                         initialize_user_prefs($link, $_SESSION["uid"]);
 673
 674                         return true;
 675                 }
 676         }
 677
 678         function make_password($length = 8) {
 679
 680                 $password = "";
 681                 $possible = "0123456789abcdfghjkmnpqrstvwxyzABCDFGHJKMNPQRSTVWXYZ";
 682
 683         $i = 0;
 684
 685                 while ($i < $length) {
 686                         $char = substr($possible, mt_rand(0, strlen($possible)-1), 1);
 687
 688                         if (!strstr($password, $char)) {
 689                                 $password .= $char;
 690                                 $i++;
 691                         }
 692                 }
 693                 return $password;
 694         }
 695
 696         // this is called after user is created to initialize default feeds, labels
 697         // or whatever else
 698
 699         // user preferences are checked on every login, not here
 700
 701         function initialize_user($link, $uid) {
 702
 703                 db_query($link, "insert into ttrss_feeds (owner_uid,title,feed_url)
 704                         values ('$uid', 'Tiny Tiny RSS: New Releases',
 705                         'http://tt-rss.org/releases.rss')");
 706
 707                 db_query($link, "insert into ttrss_feeds (owner_uid,title,feed_url)
 708                         values ('$uid', 'Tiny Tiny RSS: Forum',
 709                                 'http://tt-rss.org/forum/rss.php')");
 710         }
 711
 712         function logout_user() {
 713                 session_destroy();
 714                 if (isset($_COOKIE[session_name()])) {
 715                    setcookie(session_name(), '', time()-42000, '/');
 716                 }
 717         }
 718
 719         function validate_csrf($csrf_token) {
 720                 return $csrf_token == $_SESSION['csrf_token'];
 721         }
 722
 723         function load_user_plugins($link, $owner_uid) {
 724                 if ($owner_uid) {
 725                         $plugins = get_pref($link, "_ENABLED_PLUGINS", $owner_uid);
 726
 727                         global $pluginhost;
 728                         $pluginhost->load($plugins, $pluginhost::KIND_USER, $owner_uid);
 729
 730                         if (get_schema_version($link) > 100) {
 731                                 $pluginhost->load_data();
 732                         }
 733                 }
 734         }
 735
 736         function login_sequence($link) {
 737                 $_SESSION["prefs_cache"] = false;
 738
 739                 if (SINGLE_USER_MODE) {
 740                         @session_start();
 741                         authenticate_user($link, "admin", null);
 742                         cache_prefs($link);
 743                         load_user_plugins($link, $_SESSION["uid"]);
 744                 } else {
 745                         if (!$_SESSION["uid"] || !validate_session($link)) {
 746
 747                                 if (AUTH_AUTO_LOGIN && authenticate_user($link, null, null)) {
 748                                     $_SESSION["ref_schema_version"] = get_schema_version($link, true);
 749                                 } else {
 750                                          authenticate_user($link, null, null, true);
 751                                 }
 752
 753                                 if (!$_SESSION["uid"]) render_login_form($link);
 754
 755                         } else {
 756                                 /* bump login timestamp */
 757                                 db_query($link, "UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 758                                         $_SESSION["uid"]);
 759                                 $_SESSION["last_login_update"] = time();
 760                         }
 761
 762                         if ($_SESSION["uid"] && $_SESSION["language"] && SESSION_COOKIE_LIFETIME > 0) {
 763                                 setcookie("ttrss_lang", $_SESSION["language"],
 764                                         time() + SESSION_COOKIE_LIFETIME);
 765                         }
 766
 767                         if ($_SESSION["uid"]) {
 768                                 cache_prefs($link);
 769                                 load_user_plugins($link, $_SESSION["uid"]);
 770
 771                                 /* cleanup ccache */
 772
 773                                 db_query($link, "DELETE FROM ttrss_counters_cache WHERE owner_uid = ".
 774                                         $_SESSION["uid"] . " AND
 775                                                 (SELECT COUNT(id) FROM ttrss_feeds WHERE
 776                                                         ttrss_feeds.id = feed_id) = 0");
 777
 778                                 db_query($link, "DELETE FROM ttrss_cat_counters_cache WHERE owner_uid = ".
 779                                         $_SESSION["uid"] . " AND
 780                                                 (SELECT COUNT(id) FROM ttrss_feed_categories WHERE
 781                                                         ttrss_feed_categories.id = feed_id) = 0");
 782
 783                         }
 784
 785                 }
 786         }
 787
 788         function truncate_string($str, $max_len, $suffix = '&hellip;') {
 789                 if (mb_strlen($str, "utf-8") > $max_len - 3) {
 790                         return mb_substr($str, 0, $max_len, "utf-8") . $suffix;
 791                 } else {
 792                         return $str;
 793                 }
 794         }
 795
 796         function convert_timestamp($timestamp, $source_tz, $dest_tz) {
 797
 798                 try {
 799                         $source_tz = new DateTimeZone($source_tz);
 800                 } catch (Exception $e) {
 801                         $source_tz = new DateTimeZone('UTC');
 802                 }
 803
 804                 try {
 805                         $dest_tz = new DateTimeZone($dest_tz);
 806                 } catch (Exception $e) {
 807                         $dest_tz = new DateTimeZone('UTC');
 808                 }
 809
 810                 $dt = new DateTime(date('Y-m-d H:i:s', $timestamp), $source_tz);
 811                 return $dt->format('U') + $dest_tz->getOffset($dt);
 812         }
 813
 814         function make_local_datetime($link, $timestamp, $long, $owner_uid = false,
 815                                         $no_smart_dt = false) {
 816
 817                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 818                 if (!$timestamp) $timestamp = '1970-01-01 0:00';
 819
 820                 global $utc_tz;
 821                 global $tz_offset;
 822
 823                 # We store date in UTC internally
 824                 $dt = new DateTime($timestamp, $utc_tz);
 825
 826                 if ($tz_offset == -1) {
 827
 828                         $user_tz_string = get_pref($link, 'USER_TIMEZONE', $owner_uid);
 829
 830                         try {
 831                                 $user_tz = new DateTimeZone($user_tz_string);
 832                         } catch (Exception $e) {
 833                                 $user_tz = $utc_tz;
 834                         }
 835
 836                         $tz_offset = $user_tz->getOffset($dt);
 837                 }
 838
 839                 $user_timestamp = $dt->format('U') + $tz_offset;
 840
 841                 if (!$no_smart_dt) {
 842                         return smart_date_time($link, $user_timestamp,
 843                                 $tz_offset, $owner_uid);
 844                 } else {
 845                         if ($long)
 846                                 $format = get_pref($link, 'LONG_DATE_FORMAT', $owner_uid);
 847                         else
 848                                 $format = get_pref($link, 'SHORT_DATE_FORMAT', $owner_uid);
 849
 850                         return date($format, $user_timestamp);
 851                 }
 852         }
 853
 854         function smart_date_time($link, $timestamp, $tz_offset = 0, $owner_uid = false) {
 855                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 856
 857                 if (date("Y.m.d", $timestamp) == date("Y.m.d", time() + $tz_offset)) {
 858                         return date("G:i", $timestamp);
 859                 } else if (date("Y", $timestamp) == date("Y", time() + $tz_offset)) {
 860                         $format = get_pref($link, 'SHORT_DATE_FORMAT', $owner_uid);
 861                         return date($format, $timestamp);
 862                 } else {
 863                         $format = get_pref($link, 'LONG_DATE_FORMAT', $owner_uid);
 864                         return date($format, $timestamp);
 865                 }
 866         }
 867
 868         function sql_bool_to_bool($s) {
 869                 if ($s == "t" || $s == "1" || strtolower($s) == "true") {
 870                         return true;
 871                 } else {
 872                         return false;
 873                 }
 874         }
 875
 876         function bool_to_sql_bool($s) {
 877                 if ($s) {
 878                         return "true";
 879                 } else {
 880                         return "false";
 881                 }
 882         }
 883
 884         // Session caching removed due to causing wrong redirects to upgrade
 885         // script when get_schema_version() is called on an obsolete session
 886         // created on a previous schema version.
 887         function get_schema_version($link, $nocache = false) {
 888                 global $schema_version;
 889
 890                 if (!$schema_version) {
 891                         $result = db_query($link, "SELECT schema_version FROM ttrss_version");
 892                         $version = db_fetch_result($result, 0, "schema_version");
 893                         $schema_version = $version;
 894                         return $version;
 895                 } else {
 896                         return $schema_version;
 897                 }
 898         }
 899
 900         function sanity_check($link) {
 901                 require_once 'errors.php';
 902
 903                 $error_code = 0;
 904                 $schema_version = get_schema_version($link, true);
 905
 906                 if ($schema_version != SCHEMA_VERSION) {
 907                         $error_code = 5;
 908                 }
 909
 910                 if (DB_TYPE == "mysql") {
 911                         $result = db_query($link, "SELECT true", false);
 912                         if (db_num_rows($result) != 1) {
 913                                 $error_code = 10;
 914                         }
 915                 }
 916
 917                 if (db_escape_string($link, "testTEST") != "testTEST") {
 918                         $error_code = 12;
 919                 }
 920
 921                 return array("code" => $error_code, "message" => $ERRORS[$error_code]);
 922         }
 923
 924         function file_is_locked($filename) {
 925                 if (function_exists('flock')) {
 926                         $fp = @fopen(LOCK_DIRECTORY . "/$filename", "r");
 927                         if ($fp) {
 928                                 if (flock($fp, LOCK_EX | LOCK_NB)) {
 929                                         flock($fp, LOCK_UN);
 930                                         fclose($fp);
 931                                         return false;
 932                                 }
 933                                 fclose($fp);
 934                                 return true;
 935                         } else {
 936                                 return false;
 937                         }
 938                 }
 939                 return true; // consider the file always locked and skip the test
 940         }
 941
 942         function make_lockfile($filename) {
 943                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
 944
 945                 if ($fp && flock($fp, LOCK_EX | LOCK_NB)) {
 946                         if (function_exists('posix_getpid')) {
 947                                 fwrite($fp, posix_getpid() . "\n");
 948                         }
 949                         return $fp;
 950                 } else {
 951                         return false;
 952                 }
 953         }
 954
 955         function make_stampfile($filename) {
 956                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
 957
 958                 if (flock($fp, LOCK_EX | LOCK_NB)) {
 959                         fwrite($fp, time() . "\n");
 960                         flock($fp, LOCK_UN);
 961                         fclose($fp);
 962                         return true;
 963                 } else {
 964                         return false;
 965                 }
 966         }
 967
 968         function sql_random_function() {
 969                 if (DB_TYPE == "mysql") {
 970                         return "RAND()";
 971                 } else {
 972                         return "RANDOM()";
 973                 }
 974         }
 975
 976         function catchup_feed($link, $feed, $cat_view, $owner_uid = false, $max_id = false, $mode = 'all') {
 977
 978                         if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 979
 980                         //if (preg_match("/^-?[0-9][0-9]*$/", $feed) != false) {
 981
 982                         // Todo: all this interval stuff needs some generic generator function
 983
 984                         $date_qpart = "false";
 985
 986                         switch ($mode) {
 987                         case "1day":
 988                                 if (DB_TYPE == "pgsql") {
 989                                         $date_qpart = "date_entered < NOW() - INTERVAL '1 day' ";
 990                                 } else {
 991                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 1 DAY) ";
 992                                 }
 993                                 break;
 994                         case "1week":
 995                                 if (DB_TYPE == "pgsql") {
 996                                         $date_qpart = "date_entered < NOW() - INTERVAL '1 week' ";
 997                                 } else {
 998                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 1 WEEK) ";
 999                                 }
1000                                 break;
1001                         case "2weeks":
1002                                 if (DB_TYPE == "pgsql") {
1003                                         $date_qpart = "date_entered < NOW() - INTERVAL '2 week' ";
1004                                 } else {
1005                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 2 WEEK) ";
1006                                 }
1007                                 break;
1008                         default:
1009                                 $date_qpart = "true";
1010                         }
1011
1012                         if (is_numeric($feed)) {
1013                                 if ($cat_view) {
1014
1015                                         if ($feed >= 0) {
1016
1017                                                 if ($feed > 0) {
1018                                                         $children = getChildCategories($link, $feed, $owner_uid);
1019                                                         array_push($children, $feed);
1020
1021                                                         $children = join(",", $children);
1022
1023                                                         $cat_qpart = "cat_id IN ($children)";
1024                                                 } else {
1025                                                         $cat_qpart = "cat_id IS NULL";
1026                                                 }
1027
1028                                                 db_query($link, "UPDATE ttrss_user_entries
1029                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1030                                                                 (SELECT id FROM
1031                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1032                                                                                 AND owner_uid = $owner_uid AND unread = true AND feed_id IN
1033                                                                                         (SELECT id FROM ttrss_feeds WHERE $cat_qpart) AND $date_qpart) as tmp)");
1034
1035                                         } else if ($feed == -2) {
1036
1037                                                 db_query($link, "UPDATE ttrss_user_entries
1038                                                         SET unread = false,last_read = NOW() WHERE (SELECT COUNT(*)
1039                                                                 FROM ttrss_user_labels2 WHERE article_id = ref_id) > 0
1040                                                                 AND unread = true AND $date_qpart AND owner_uid = $owner_uid");
1041                                         }
1042
1043                                 } else if ($feed > 0) {
1044
1045                                         db_query($link, "UPDATE ttrss_user_entries
1046                                                 SET unread = false, last_read = NOW() WHERE ref_id IN
1047                                                         (SELECT id FROM
1048                                                                 (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1049                                                                         AND owner_uid = $owner_uid AND unread = true AND feed_id = $feed AND $date_qpart) as tmp)");
1050
1051                                 } else if ($feed < 0 && $feed > LABEL_BASE_INDEX) { // special, like starred
1052
1053                                         if ($feed == -1) {
1054                                                 db_query($link, "UPDATE ttrss_user_entries
1055                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1056                                                                 (SELECT id FROM
1057                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1058                                                                                 AND owner_uid = $owner_uid AND unread = true AND marked = true AND $date_qpart) as tmp)");
1059                                         }
1060
1061                                         if ($feed == -2) {
1062                                                 db_query($link, "UPDATE ttrss_user_entries
1063                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1064                                                                 (SELECT id FROM
1065                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1066                                                                                 AND owner_uid = $owner_uid AND unread = true AND published = true AND $date_qpart) as tmp)");
1067                                         }
1068
1069                                         if ($feed == -3) {
1070
1071                                                 $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE");
1072
1073                                                 if (DB_TYPE == "pgsql") {
1074                                                         $match_part = "updated > NOW() - INTERVAL '$intl hour' ";
1075                                                 } else {
1076                                                         $match_part = "updated > DATE_SUB(NOW(),
1077                                                                 INTERVAL $intl HOUR) ";
1078                                                 }
1079
1080                                                 db_query($link, "UPDATE ttrss_user_entries
1081                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1082                                                                 (SELECT id FROM
1083                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1084                                                                                 AND owner_uid = $owner_uid AND unread = true AND feed_id = $feed AND $date_qpart AND $match_part) as tmp)");
1085                                         }
1086
1087                                         if ($feed == -4) {
1088                                                 db_query($link, "UPDATE ttrss_user_entries
1089                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1090                                                                 (SELECT id FROM
1091                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1092                                                                                 AND owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1093                                         }
1094
1095                                 } else if ($feed < LABEL_BASE_INDEX) { // label
1096
1097                                         $label_id = feed_to_label_id($feed);
1098
1099                                         db_query($link, "UPDATE ttrss_user_entries
1100                                                 SET unread = false, last_read = NOW() WHERE ref_id IN
1101                                                         (SELECT id FROM
1102                                                                 (SELECT ttrss_entries.id FROM ttrss_entries, ttrss_user_entries, ttrss_user_labels2 WHERE ref_id = id
1103                                                                         AND label_id = '$label_id' AND ref_id = article_id
1104                                                                         AND owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1105
1106                                 }
1107
1108                                 ccache_update($link, $feed, $owner_uid, $cat_view);
1109
1110                         } else { // tag
1111                                 db_query($link, "UPDATE ttrss_user_entries
1112                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1113                                                 (SELECT id FROM
1114                                                         (SELECT ttrss_entries.id FROM ttrss_entries, ttrss_user_entries, ttrss_tags WHERE ref_id = ttrss_entries.id
1115                                                                 AND post_int_id = int_id AND tag_name = '$feed'
1116                                                                 AND ttrss_user_entries.owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1117
1118                         }
1119         }
1120
1121         function getAllCounters($link) {
1122                 $data = getGlobalCounters($link);
1123
1124                 $data = array_merge($data, getVirtCounters($link));
1125                 $data = array_merge($data, getLabelCounters($link));
1126                 $data = array_merge($data, getFeedCounters($link, $active_feed));
1127                 $data = array_merge($data, getCategoryCounters($link));
1128
1129                 return $data;
1130         }
1131
1132         function getCategoryTitle($link, $cat_id) {
1133
1134                 if ($cat_id == -1) {
1135                         return __("Special");
1136                 } else if ($cat_id == -2) {
1137                         return __("Labels");
1138                 } else {
1139
1140                         $result = db_query($link, "SELECT title FROM ttrss_feed_categories WHERE
1141                                 id = '$cat_id'");
1142
1143                         if (db_num_rows($result) == 1) {
1144                                 return db_fetch_result($result, 0, "title");
1145                         } else {
1146                                 return __("Uncategorized");
1147                         }
1148                 }
1149         }
1150
1151
1152         function getCategoryCounters($link) {
1153                 $ret_arr = array();
1154
1155                 /* Labels category */
1156
1157                 $cv = array("id" => -2, "kind" => "cat",
1158                         "counter" => getCategoryUnread($link, -2));
1159
1160                 array_push($ret_arr, $cv);
1161
1162                 $result = db_query($link, "SELECT id AS cat_id, value AS unread,
1163                         (SELECT COUNT(id) FROM ttrss_feed_categories AS c2
1164                                 WHERE c2.parent_cat = ttrss_feed_categories.id) AS num_children
1165                         FROM ttrss_feed_categories, ttrss_cat_counters_cache
1166                         WHERE ttrss_cat_counters_cache.feed_id = id AND
1167                         ttrss_cat_counters_cache.owner_uid = ttrss_feed_categories.owner_uid AND
1168                         ttrss_feed_categories.owner_uid = " . $_SESSION["uid"]);
1169
1170                 while ($line = db_fetch_assoc($result)) {
1171                         $line["cat_id"] = (int) $line["cat_id"];
1172
1173                         if ($line["num_children"] > 0) {
1174                                 $child_counter = getCategoryChildrenUnread($link, $line["cat_id"], $_SESSION["uid"]);
1175                         } else {
1176                                 $child_counter = 0;
1177                         }
1178
1179                         $cv = array("id" => $line["cat_id"], "kind" => "cat",
1180                                 "counter" => $line["unread"] + $child_counter);
1181
1182                         array_push($ret_arr, $cv);
1183                 }
1184
1185                 /* Special case: NULL category doesn't actually exist in the DB */
1186
1187                 $cv = array("id" => 0, "kind" => "cat",
1188                         "counter" => (int) ccache_find($link, 0, $_SESSION["uid"], true));
1189
1190                 array_push($ret_arr, $cv);
1191
1192                 return $ret_arr;
1193         }
1194
1195         // only accepts real cats (>= 0)
1196         function getCategoryChildrenUnread($link, $cat, $owner_uid = false) {
1197                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1198
1199                 $result = db_query($link, "SELECT id FROM ttrss_feed_categories WHERE parent_cat = '$cat'
1200                                 AND owner_uid = $owner_uid");
1201
1202                 $unread = 0;
1203
1204                 while ($line = db_fetch_assoc($result)) {
1205                         $unread += getCategoryUnread($link, $line["id"], $owner_uid);
1206                         $unread += getCategoryChildrenUnread($link, $line["id"], $owner_uid);
1207                 }
1208
1209                 return $unread;
1210         }
1211
1212         function getCategoryUnread($link, $cat, $owner_uid = false) {
1213
1214                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1215
1216                 if ($cat >= 0) {
1217
1218                         if ($cat != 0) {
1219                                 $cat_query = "cat_id = '$cat'";
1220                         } else {
1221                                 $cat_query = "cat_id IS NULL";
1222                         }
1223
1224                         $result = db_query($link, "SELECT id FROM ttrss_feeds WHERE $cat_query
1225                                         AND owner_uid = " . $owner_uid);
1226
1227                         $cat_feeds = array();
1228                         while ($line = db_fetch_assoc($result)) {
1229                                 array_push($cat_feeds, "feed_id = " . $line["id"]);
1230                         }
1231
1232                         if (count($cat_feeds) == 0) return 0;
1233
1234                         $match_part = implode(" OR ", $cat_feeds);
1235
1236                         $result = db_query($link, "SELECT COUNT(int_id) AS unread
1237                                 FROM ttrss_user_entries
1238                                 WHERE   unread = true AND ($match_part)
1239                                 AND owner_uid = " . $owner_uid);
1240
1241                         $unread = 0;
1242
1243                         # this needs to be rewritten
1244                         while ($line = db_fetch_assoc($result)) {
1245                                 $unread += $line["unread"];
1246                         }
1247
1248                         return $unread;
1249                 } else if ($cat == -1) {
1250                         return getFeedUnread($link, -1) + getFeedUnread($link, -2) + getFeedUnread($link, -3) + getFeedUnread($link, 0);
1251                 } else if ($cat == -2) {
1252
1253                         $result = db_query($link, "
1254                                 SELECT COUNT(unread) AS unread FROM
1255                                         ttrss_user_entries, ttrss_user_labels2
1256                                 WHERE article_id = ref_id AND unread = true
1257                                         AND ttrss_user_entries.owner_uid = '$owner_uid'");
1258
1259                         $unread = db_fetch_result($result, 0, "unread");
1260
1261                         return $unread;
1262
1263                 }
1264         }
1265
1266         function getFeedUnread($link, $feed, $is_cat = false) {
1267                 return getFeedArticles($link, $feed, $is_cat, true, $_SESSION["uid"]);
1268         }
1269
1270         function getLabelUnread($link, $label_id, $owner_uid = false) {
1271                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1272
1273                 $result = db_query($link, "SELECT COUNT(ref_id) AS unread FROM ttrss_user_entries, ttrss_user_labels2
1274                         WHERE owner_uid = '$owner_uid' AND unread = true AND label_id = '$label_id' AND article_id = ref_id");
1275
1276                 if (db_num_rows($result) != 0) {
1277                         return db_fetch_result($result, 0, "unread");
1278                 } else {
1279                         return 0;
1280                 }
1281         }
1282
1283         function getFeedArticles($link, $feed, $is_cat = false, $unread_only = false,
1284                 $owner_uid = false) {
1285
1286                 $n_feed = (int) $feed;
1287                 $need_entries = false;
1288
1289                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1290
1291                 if ($unread_only) {
1292                         $unread_qpart = "unread = true";
1293                 } else {
1294                         $unread_qpart = "true";
1295                 }
1296
1297                 if ($is_cat) {
1298                         return getCategoryUnread($link, $n_feed, $owner_uid);
1299                 } else if ($n_feed == -6) {
1300                         return 0;
1301                 } else if ($feed != "0" && $n_feed == 0) {
1302
1303                         $feed = db_escape_string($link, $feed);
1304
1305                         $result = db_query($link, "SELECT SUM((SELECT COUNT(int_id)
1306                                 FROM ttrss_user_entries,ttrss_entries WHERE int_id = post_int_id
1307                                         AND ref_id = id AND $unread_qpart)) AS count FROM ttrss_tags
1308                                 WHERE owner_uid = $owner_uid AND tag_name = '$feed'");
1309                         return db_fetch_result($result, 0, "count");
1310
1311                 } else if ($n_feed == -1) {
1312                         $match_part = "marked = true";
1313                 } else if ($n_feed == -2) {
1314                         $match_part = "published = true";
1315                 } else if ($n_feed == -3) {
1316                         $match_part = "unread = true AND score >= 0";
1317
1318                         $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE", $owner_uid);
1319
1320                         if (DB_TYPE == "pgsql") {
1321                                 $match_part .= " AND updated > NOW() - INTERVAL '$intl hour' ";
1322                         } else {
1323                                 $match_part .= " AND updated > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
1324                         }
1325
1326                         $need_entries = true;
1327
1328                 } else if ($n_feed == -4) {
1329                         $match_part = "true";
1330                 } else if ($n_feed >= 0) {
1331
1332                         if ($n_feed != 0) {
1333                                 $match_part = "feed_id = '$n_feed'";
1334                         } else {
1335                                 $match_part = "feed_id IS NULL";
1336                         }
1337
1338                 } else if ($feed < LABEL_BASE_INDEX) {
1339
1340                         $label_id = feed_to_label_id($feed);
1341
1342                         return getLabelUnread($link, $label_id, $owner_uid);
1343
1344                 }
1345
1346                 if ($match_part) {
1347
1348                         if ($need_entries) {
1349                                 $from_qpart = "ttrss_user_entries,ttrss_entries";
1350                                 $from_where = "ttrss_entries.id = ttrss_user_entries.ref_id AND";
1351                         } else {
1352                                 $from_qpart = "ttrss_user_entries";
1353                         }
1354
1355                         $query = "SELECT count(int_id) AS unread
1356                                 FROM $from_qpart WHERE
1357                                 $unread_qpart AND $from_where ($match_part) AND ttrss_user_entries.owner_uid = $owner_uid";
1358
1359                         //echo "[$feed/$query]\n";
1360
1361                         $result = db_query($link, $query);
1362
1363                 } else {
1364
1365                         $result = db_query($link, "SELECT COUNT(post_int_id) AS unread
1366                                 FROM ttrss_tags,ttrss_user_entries,ttrss_entries
1367                                 WHERE tag_name = '$feed' AND post_int_id = int_id AND ref_id = ttrss_entries.id
1368                                 AND $unread_qpart AND ttrss_tags.owner_uid = " . $owner_uid);
1369                 }
1370
1371                 $unread = db_fetch_result($result, 0, "unread");
1372
1373                 return $unread;
1374         }
1375
1376         function getGlobalUnread($link, $user_id = false) {
1377
1378                 if (!$user_id) {
1379                         $user_id = $_SESSION["uid"];
1380                 }
1381
1382                 $result = db_query($link, "SELECT SUM(value) AS c_id FROM ttrss_counters_cache
1383                         WHERE owner_uid = '$user_id' AND feed_id > 0");
1384
1385                 $c_id = db_fetch_result($result, 0, "c_id");
1386
1387                 return $c_id;
1388         }
1389
1390         function getGlobalCounters($link, $global_unread = -1) {
1391                 $ret_arr = array();
1392
1393                 if ($global_unread == -1) {
1394                         $global_unread = getGlobalUnread($link);
1395                 }
1396
1397                 $cv = array("id" => "global-unread",
1398                         "counter" => (int) $global_unread);
1399
1400                 array_push($ret_arr, $cv);
1401
1402                 $result = db_query($link, "SELECT COUNT(id) AS fn FROM
1403                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1404
1405                 $subscribed_feeds = db_fetch_result($result, 0, "fn");
1406
1407                 $cv = array("id" => "subscribed-feeds",
1408                         "counter" => (int) $subscribed_feeds);
1409
1410                 array_push($ret_arr, $cv);
1411
1412                 return $ret_arr;
1413         }
1414
1415         function getVirtCounters($link) {
1416
1417                 $ret_arr = array();
1418
1419                 for ($i = 0; $i >= -4; $i--) {
1420
1421                         $count = getFeedUnread($link, $i);
1422
1423                         $cv = array("id" => $i,
1424                                 "counter" => (int) $count);
1425
1426 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1427 //                              $cv["xmsg"] = getFeedArticles($link, $i)." ".__("total");
1428
1429                         array_push($ret_arr, $cv);
1430                 }
1431
1432                 global $pluginhost;
1433
1434                 if ($pluginhost) {
1435                         $feeds = $pluginhost->get_feeds(-1);
1436
1437                         if (is_array($feeds)) {
1438                                 foreach ($feeds as $feed) {
1439                                         $cv = array("id" => PluginHost::pfeed_to_feed_id($feed['id']),
1440                                                 "counter" => $feed['sender']->get_unread($feed['id']));
1441
1442                                         array_push($ret_arr, $cv);
1443                                 }
1444                         }
1445                 }
1446
1447                 return $ret_arr;
1448         }
1449
1450         function getLabelCounters($link, $descriptions = false) {
1451
1452                 $ret_arr = array();
1453
1454                 $owner_uid = $_SESSION["uid"];
1455
1456                 $result = db_query($link, "SELECT id,caption,COUNT(unread) AS unread
1457                         FROM ttrss_labels2 LEFT JOIN ttrss_user_labels2 ON
1458                                 (ttrss_labels2.id = label_id)
1459                                         LEFT JOIN ttrss_user_entries ON (ref_id = article_id AND unread = true)
1460                                 WHERE ttrss_labels2.owner_uid = $owner_uid GROUP BY ttrss_labels2.id,
1461                                         ttrss_labels2.caption");
1462
1463                 while ($line = db_fetch_assoc($result)) {
1464
1465                         $id = label_to_feed_id($line["id"]);
1466
1467                         $label_name = $line["caption"];
1468                         $count = $line["unread"];
1469
1470                         $cv = array("id" => $id,
1471                                 "counter" => (int) $count);
1472
1473                         if ($descriptions)
1474                                 $cv["description"] = $label_name;
1475
1476 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1477 //                              $cv["xmsg"] = getFeedArticles($link, $id)." ".__("total");
1478
1479                         array_push($ret_arr, $cv);
1480                 }
1481
1482                 return $ret_arr;
1483         }
1484
1485         function getFeedCounters($link, $active_feed = false) {
1486
1487                 $ret_arr = array();
1488
1489                 $query = "SELECT ttrss_feeds.id,
1490                                 ttrss_feeds.title,
1491                                 ".SUBSTRING_FOR_DATE."(ttrss_feeds.last_updated,1,19) AS last_updated,
1492                                 last_error, value AS count
1493                         FROM ttrss_feeds, ttrss_counters_cache
1494                         WHERE ttrss_feeds.owner_uid = ".$_SESSION["uid"]."
1495                                 AND ttrss_counters_cache.owner_uid = ttrss_feeds.owner_uid
1496                                 AND ttrss_counters_cache.feed_id = id";
1497
1498                 $result = db_query($link, $query);
1499                 $fctrs_modified = false;
1500
1501                 while ($line = db_fetch_assoc($result)) {
1502
1503                         $id = $line["id"];
1504                         $count = $line["count"];
1505                         $last_error = htmlspecialchars($line["last_error"]);
1506
1507                         $last_updated = make_local_datetime($link, $line['last_updated'], false);
1508
1509                         $has_img = feed_has_icon($id);
1510
1511                         if (date('Y') - date('Y', strtotime($line['last_updated'])) > 2)
1512                                 $last_updated = '';
1513
1514                         $cv = array("id" => $id,
1515                                 "updated" => $last_updated,
1516                                 "counter" => (int) $count,
1517                                 "has_img" => (int) $has_img);
1518
1519                         if ($last_error)
1520                                 $cv["error"] = $last_error;
1521
1522 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1523 //                              $cv["xmsg"] = getFeedArticles($link, $id)." ".__("total");
1524
1525                         if ($active_feed && $id == $active_feed)
1526                                 $cv["title"] = truncate_string($line["title"], 30);
1527
1528                         array_push($ret_arr, $cv);
1529
1530                 }
1531
1532                 return $ret_arr;
1533         }
1534
1535         function get_pgsql_version($link) {
1536                 $result = db_query($link, "SELECT version() AS version");
1537                 $version = explode(" ", db_fetch_result($result, 0, "version"));
1538                 return $version[1];
1539         }
1540
1541         /**
1542          * @return array (code => Status code, message => error message if available)
1543          *
1544          *                 0 - OK, Feed already exists
1545          *                 1 - OK, Feed added
1546          *                 2 - Invalid URL
1547          *                 3 - URL content is HTML, no feeds available
1548          *                 4 - URL content is HTML which contains multiple feeds.
1549          *                     Here you should call extractfeedurls in rpc-backend
1550          *                     to get all possible feeds.
1551          *                 5 - Couldn't download the URL content.
1552          */
1553         function subscribe_to_feed($link, $url, $cat_id = 0,
1554                         $auth_login = '', $auth_pass = '') {
1555
1556                 global $fetch_last_error;
1557
1558                 require_once "include/rssfuncs.php";
1559
1560                 $url = fix_url($url);
1561
1562                 if (!$url || !validate_feed_url($url)) return array("code" => 2);
1563
1564                 $contents = @fetch_file_contents($url, false, $auth_login, $auth_pass);
1565
1566                 if (!$contents) {
1567                         return array("code" => 5, "message" => $fetch_last_error);
1568                 }
1569
1570                 if (is_html($contents)) {
1571                         $feedUrls = get_feeds_from_html($url, $contents);
1572
1573                         if (count($feedUrls) == 0) {
1574                                 return array("code" => 3);
1575                         } else if (count($feedUrls) > 1) {
1576                                 return array("code" => 4, "feeds" => $feedUrls);
1577                         }
1578                         //use feed url as new URL
1579                         $url = key($feedUrls);
1580                 }
1581
1582                 if ($cat_id == "0" || !$cat_id) {
1583                         $cat_qpart = "NULL";
1584                 } else {
1585                         $cat_qpart = "'$cat_id'";
1586                 }
1587
1588                 $result = db_query($link,
1589                         "SELECT id FROM ttrss_feeds
1590                         WHERE feed_url = '$url' AND owner_uid = ".$_SESSION["uid"]);
1591
1592                 if (db_num_rows($result) == 0) {
1593                         $result = db_query($link,
1594                                 "INSERT INTO ttrss_feeds
1595                                         (owner_uid,feed_url,title,cat_id, auth_login,auth_pass,update_method)
1596                                 VALUES ('".$_SESSION["uid"]."', '$url',
1597                                 '[Unknown]', $cat_qpart, '$auth_login', '$auth_pass', 0)");
1598
1599                         $result = db_query($link,
1600                                 "SELECT id FROM ttrss_feeds WHERE feed_url = '$url'
1601                                         AND owner_uid = " . $_SESSION["uid"]);
1602
1603                         $feed_id = db_fetch_result($result, 0, "id");
1604
1605                         if ($feed_id) {
1606                                 update_rss_feed($link, $feed_id, true);
1607                         }
1608
1609                         return array("code" => 1);
1610                 } else {
1611                         return array("code" => 0);
1612                 }
1613         }
1614
1615         function print_feed_select($link, $id, $default_id = "",
1616                 $attributes = "", $include_all_feeds = true,
1617                 $root_id = false, $nest_level = 0) {
1618
1619                 if (!$root_id) {
1620                         print "<select id=\"$id\" name=\"$id\" $attributes>";
1621                         if ($include_all_feeds) {
1622                                 $is_selected = ("0" == $default_id) ? "selected=\"1\"" : "";
1623                                 print "<option $is_selected value=\"0\">".__('All feeds')."</option>";
1624                         }
1625                 }
1626
1627                 if (get_pref($link, 'ENABLE_FEED_CATS')) {
1628
1629                         if ($root_id)
1630                                 $parent_qpart = "parent_cat = '$root_id'";
1631                         else
1632                                 $parent_qpart = "parent_cat IS NULL";
1633
1634                         $result = db_query($link, "SELECT id,title,
1635                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1636                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1637                                 FROM ttrss_feed_categories
1638                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1639
1640                         while ($line = db_fetch_assoc($result)) {
1641
1642                                 for ($i = 0; $i < $nest_level; $i++)
1643                                         $line["title"] = " - " . $line["title"];
1644
1645                                 $is_selected = ("CAT:".$line["id"] == $default_id) ? "selected=\"1\"" : "";
1646
1647                                 printf("<option $is_selected value='CAT:%d'>%s</option>",
1648                                         $line["id"], htmlspecialchars($line["title"]));
1649
1650                                 if ($line["num_children"] > 0)
1651                                         print_feed_select($link, $id, $default_id, $attributes,
1652                                                 $include_all_feeds, $line["id"], $nest_level+1);
1653
1654                                 $feed_result = db_query($link, "SELECT id,title FROM ttrss_feeds
1655                                         WHERE cat_id = '".$line["id"]."' AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1656
1657                                 while ($fline = db_fetch_assoc($feed_result)) {
1658                                         $is_selected = ($fline["id"] == $default_id) ? "selected=\"1\"" : "";
1659
1660                                         $fline["title"] = " + " . $fline["title"];
1661
1662                                         for ($i = 0; $i < $nest_level; $i++)
1663                                                 $fline["title"] = " - " . $fline["title"];
1664
1665                                         printf("<option $is_selected value='%d'>%s</option>",
1666                                                 $fline["id"], htmlspecialchars($fline["title"]));
1667                                 }
1668                         }
1669
1670                         if (!$root_id) {
1671                                 $is_selected = ($default_id == "CAT:0") ? "selected=\"1\"" : "";
1672
1673                                 printf("<option $is_selected value='CAT:0'>%s</option>",
1674                                         __("Uncategorized"));
1675
1676                                 $feed_result = db_query($link, "SELECT id,title FROM ttrss_feeds
1677                                         WHERE cat_id IS NULL AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1678
1679                                 while ($fline = db_fetch_assoc($feed_result)) {
1680                                         $is_selected = ($fline["id"] == $default_id && !$default_is_cat) ? "selected=\"1\"" : "";
1681
1682                                         $fline["title"] = " + " . $fline["title"];
1683
1684                                         for ($i = 0; $i < $nest_level; $i++)
1685                                                 $fline["title"] = " - " . $fline["title"];
1686
1687                                         printf("<option $is_selected value='%d'>%s</option>",
1688                                                 $fline["id"], htmlspecialchars($fline["title"]));
1689                                 }
1690                         }
1691
1692                 } else {
1693                         $result = db_query($link, "SELECT id,title FROM ttrss_feeds
1694                                 WHERE owner_uid = ".$_SESSION["uid"]." ORDER BY title");
1695
1696                         while ($line = db_fetch_assoc($result)) {
1697
1698                                 $is_selected = ($line["id"] == $default_id) ? "selected=\"1\"" : "";
1699
1700                                 printf("<option $is_selected value='%d'>%s</option>",
1701                                         $line["id"], htmlspecialchars($line["title"]));
1702                         }
1703                 }
1704
1705                 if (!$root_id) {
1706                         print "</select>";
1707                 }
1708         }
1709
1710         function print_feed_cat_select($link, $id, $default_id,
1711                 $attributes, $include_all_cats = true, $root_id = false, $nest_level = 0) {
1712
1713                         if (!$root_id) {
1714                                         print "<select id=\"$id\" name=\"$id\" default=\"$default_id\" onchange=\"catSelectOnChange(this)\" $attributes>";
1715                         }
1716
1717                         if ($root_id)
1718                                 $parent_qpart = "parent_cat = '$root_id'";
1719                         else
1720                                 $parent_qpart = "parent_cat IS NULL";
1721
1722                         $result = db_query($link, "SELECT id,title,
1723                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1724                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1725                                 FROM ttrss_feed_categories
1726                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1727
1728                         while ($line = db_fetch_assoc($result)) {
1729                                 if ($line["id"] == $default_id) {
1730                                         $is_selected = "selected=\"1\"";
1731                                 } else {
1732                                         $is_selected = "";
1733                                 }
1734
1735                                 for ($i = 0; $i < $nest_level; $i++)
1736                                         $line["title"] = " - " . $line["title"];
1737
1738                                 if ($line["title"])
1739                                         printf("<option $is_selected value='%d'>%s</option>",
1740                                                 $line["id"], htmlspecialchars($line["title"]));
1741
1742                                 if ($line["num_children"] > 0)
1743                                         print_feed_cat_select($link, $id, $default_id, $attributes,
1744                                                 $include_all_cats, $line["id"], $nest_level+1);
1745                         }
1746
1747                         if (!$root_id) {
1748                                 if ($include_all_cats) {
1749                                         if (db_num_rows($result) > 0) {
1750                                                 print "<option disabled=\"1\">--------</option>";
1751                                         }
1752
1753                                         if ($default_id == 0) {
1754                                                 $is_selected = "selected=\"1\"";
1755                                         } else {
1756                                                 $is_selected = "";
1757                                         }
1758
1759                                         print "<option $is_selected value=\"0\">".__('Uncategorized')."</option>";
1760                                 }
1761                                 print "</select>";
1762                         }
1763                 }
1764
1765         function checkbox_to_sql_bool($val) {
1766                 return ($val == "on") ? "true" : "false";
1767         }
1768
1769         function getFeedCatTitle($link, $id) {
1770                 if ($id == -1) {
1771                         return __("Special");
1772                 } else if ($id < LABEL_BASE_INDEX) {
1773                         return __("Labels");
1774                 } else if ($id > 0) {
1775                         $result = db_query($link, "SELECT ttrss_feed_categories.title
1776                                 FROM ttrss_feeds, ttrss_feed_categories WHERE ttrss_feeds.id = '$id' AND
1777                                         cat_id = ttrss_feed_categories.id");
1778                         if (db_num_rows($result) == 1) {
1779                                 return db_fetch_result($result, 0, "title");
1780                         } else {
1781                                 return __("Uncategorized");
1782                         }
1783                 } else {
1784                         return "getFeedCatTitle($id) failed";
1785                 }
1786
1787         }
1788
1789         function getFeedIcon($id) {
1790                 switch ($id) {
1791                 case 0:
1792                         return "images/archive.png";
1793                         break;
1794                 case -1:
1795                         return "images/mark_set.svg";
1796                         break;
1797                 case -2:
1798                         return "images/pub_set.svg";
1799                         break;
1800                 case -3:
1801                         return "images/fresh.png";
1802                         break;
1803                 case -4:
1804                         return "images/tag.png";
1805                         break;
1806                 case -6:
1807                         return "images/recently_read.png";
1808                         break;
1809                 default:
1810                         if ($id < LABEL_BASE_INDEX) {
1811                                 return "images/label.png";
1812                         } else {
1813                                 if (file_exists(ICONS_DIR . "/$id.ico"))
1814                                         return ICONS_URL . "/$id.ico";
1815                         }
1816                         break;
1817                 }
1818         }
1819
1820         function getFeedTitle($link, $id, $cat = false) {
1821                 if ($cat) {
1822                         return getCategoryTitle($link, $id);
1823                 } else if ($id == -1) {
1824                         return __("Starred articles");
1825                 } else if ($id == -2) {
1826                         return __("Published articles");
1827                 } else if ($id == -3) {
1828                         return __("Fresh articles");
1829                 } else if ($id == -4) {
1830                         return __("All articles");
1831                 } else if ($id === 0 || $id === "0") {
1832                         return __("Archived articles");
1833                 } else if ($id == -6) {
1834                         return __("Recently read");
1835                 } else if ($id < LABEL_BASE_INDEX) {
1836                         $label_id = feed_to_label_id($id);
1837                         $result = db_query($link, "SELECT caption FROM ttrss_labels2 WHERE id = '$label_id'");
1838                         if (db_num_rows($result) == 1) {
1839                                 return db_fetch_result($result, 0, "caption");
1840                         } else {
1841                                 return "Unknown label ($label_id)";
1842                         }
1843
1844                 } else if (is_numeric($id) && $id > 0) {
1845                         $result = db_query($link, "SELECT title FROM ttrss_feeds WHERE id = '$id'");
1846                         if (db_num_rows($result) == 1) {
1847                                 return db_fetch_result($result, 0, "title");
1848                         } else {
1849                                 return "Unknown feed ($id)";
1850                         }
1851                 } else {
1852                         return $id;
1853                 }
1854         }
1855
1856         function make_init_params($link) {
1857                 $params = array();
1858
1859                 foreach (array("ON_CATCHUP_SHOW_NEXT_FEED", "HIDE_READ_FEEDS",
1860                         "ENABLE_FEED_CATS", "FEEDS_SORT_BY_UNREAD", "CONFIRM_FEED_CATCHUP",
1861                         "CDM_AUTO_CATCHUP", "FRESH_ARTICLE_MAX_AGE", "DEFAULT_ARTICLE_LIMIT",
1862                         "HIDE_READ_SHOWS_SPECIAL", "COMBINED_DISPLAY_MODE") as $param) {
1863
1864                                  $params[strtolower($param)] = (int) get_pref($link, $param);
1865                  }
1866
1867                 $params["icons_url"] = ICONS_URL;
1868                 $params["cookie_lifetime"] = SESSION_COOKIE_LIFETIME;
1869                 $params["default_view_mode"] = get_pref($link, "_DEFAULT_VIEW_MODE");
1870                 $params["default_view_limit"] = (int) get_pref($link, "_DEFAULT_VIEW_LIMIT");
1871                 $params["default_view_order_by"] = get_pref($link, "_DEFAULT_VIEW_ORDER_BY");
1872                 $params["bw_limit"] = (int) $_SESSION["bw_limit"];
1873                 $params["label_base_index"] = (int) LABEL_BASE_INDEX;
1874
1875                 $result = db_query($link, "SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
1876                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1877
1878                 $max_feed_id = db_fetch_result($result, 0, "mid");
1879                 $num_feeds = db_fetch_result($result, 0, "nf");
1880
1881                 $params["max_feed_id"] = (int) $max_feed_id;
1882                 $params["num_feeds"] = (int) $num_feeds;
1883
1884                 $params["collapsed_feedlist"] = (int) get_pref($link, "_COLLAPSED_FEEDLIST");
1885                 $params["hotkeys"] = get_hotkeys_map($link);
1886
1887                 $params["csrf_token"] = $_SESSION["csrf_token"];
1888                 $params["widescreen"] = (int) $_COOKIE["ttrss_widescreen"];
1889
1890                 $params['simple_update'] = defined('SIMPLE_UPDATE_MODE') && SIMPLE_UPDATE_MODE;
1891
1892                 return $params;
1893         }
1894
1895         function get_hotkeys_info($link) {
1896                 $hotkeys = array(
1897                         __("Navigation") => array(
1898                                 "next_feed" => __("Open next feed"),
1899                                 "prev_feed" => __("Open previous feed"),
1900                                 "next_article" => __("Open next article"),
1901                                 "prev_article" => __("Open previous article"),
1902                                 "next_article_noscroll" => __("Open next article (don't scroll long articles)"),
1903                                 "prev_article_noscroll" => __("Open previous article (don't scroll long articles)"),
1904                                 "search_dialog" => __("Show search dialog")),
1905                         __("Article") => array(
1906                                 "toggle_mark" => __("Toggle starred"),
1907                                 "toggle_publ" => __("Toggle published"),
1908                                 "toggle_unread" => __("Toggle unread"),
1909                                 "edit_tags" => __("Edit tags"),
1910                                 "dismiss_selected" => __("Dismiss selected"),
1911                                 "dismiss_read" => __("Dismiss read"),
1912                                 "open_in_new_window" => __("Open in new window"),
1913                                 "catchup_below" => __("Mark below as read"),
1914                                 "catchup_above" => __("Mark above as read"),
1915                                 "article_scroll_down" => __("Scroll down"),
1916                                 "article_scroll_up" => __("Scroll up"),
1917                                 "select_article_cursor" => __("Select article under cursor"),
1918                                 "email_article" => __("Email article"),
1919                                 "close_article" => __("Close/collapse article"),
1920                                 "toggle_widescreen" => __("Toggle widescreen mode"),
1921                                 "toggle_embed_original" => __("Toggle embed original")),
1922                         __("Article selection") => array(
1923                                 "select_all" => __("Select all articles"),
1924                                 "select_unread" => __("Select unread"),
1925                                 "select_marked" => __("Select starred"),
1926                                 "select_published" => __("Select published"),
1927                                 "select_invert" => __("Invert selection"),
1928                                 "select_none" => __("Deselect everything")),
1929                         __("Feed") => array(
1930                                 "feed_refresh" => __("Refresh current feed"),
1931                                 "feed_unhide_read" => __("Un/hide read feeds"),
1932                                 "feed_subscribe" => __("Subscribe to feed"),
1933                                 "feed_edit" => __("Edit feed"),
1934                                 "feed_catchup" => __("Mark as read"),
1935                                 "feed_reverse" => __("Reverse headlines"),
1936                                 "feed_debug_update" => __("Debug feed update"),
1937                                 "catchup_all" => __("Mark all feeds as read"),
1938                                 "cat_toggle_collapse" => __("Un/collapse current category"),
1939                                 "toggle_combined_mode" => __("Toggle combined mode"),
1940                                 "toggle_cdm_expanded" => __("Toggle auto expand in combined mode")),
1941                         __("Go to") => array(
1942                                 "goto_all" => __("All articles"),
1943                                 "goto_fresh" => __("Fresh"),
1944                                 "goto_marked" => __("Starred"),
1945                                 "goto_published" => __("Published"),
1946                                 "goto_tagcloud" => __("Tag cloud"),
1947                                 "goto_prefs" => __("Preferences")),
1948                         __("Other") => array(
1949                                 "create_label" => __("Create label"),
1950                                 "create_filter" => __("Create filter"),
1951                                 "collapse_sidebar" => __("Un/collapse sidebar"),
1952                                 "help_dialog" => __("Show help dialog"))
1953                         );
1954
1955                 return $hotkeys;
1956         }
1957
1958         function get_hotkeys_map($link) {
1959                 $hotkeys = array(
1960 //                      "navigation" => array(
1961                                 "k" => "next_feed",
1962                                 "j" => "prev_feed",
1963                                 "n" => "next_article",
1964                                 "p" => "prev_article",
1965                                 "(38)|up" => "prev_article",
1966                                 "(40)|down" => "next_article",
1967 //                              "^(38)|Ctrl-up" => "prev_article_noscroll",
1968 //                              "^(40)|Ctrl-down" => "next_article_noscroll",
1969                                 "(191)|/" => "search_dialog",
1970 //                      "article" => array(
1971                                 "s" => "toggle_mark",
1972                                 "*s" => "toggle_publ",
1973                                 "u" => "toggle_unread",
1974                                 "*t" => "edit_tags",
1975                                 "*d" => "dismiss_selected",
1976                                 "*x" => "dismiss_read",
1977                                 "o" => "open_in_new_window",
1978                                 "c p" => "catchup_below",
1979                                 "c n" => "catchup_above",
1980                                 "*n" => "article_scroll_down",
1981                                 "*p" => "article_scroll_up",
1982                                 "*(38)|Shift+up" => "article_scroll_up",
1983                                 "*(40)|Shift+down" => "article_scroll_down",
1984                                 "a *w" => "toggle_widescreen",
1985                                 "a e" => "toggle_embed_original",
1986                                 "e" => "email_article",
1987                                 "a q" => "close_article",
1988 //                      "article_selection" => array(
1989                                 "a a" => "select_all",
1990                                 "a u" => "select_unread",
1991                                 "a *u" => "select_marked",
1992                                 "a p" => "select_published",
1993                                 "a i" => "select_invert",
1994                                 "a n" => "select_none",
1995 //                      "feed" => array(
1996                                 "f r" => "feed_refresh",
1997                                 "f a" => "feed_unhide_read",
1998                                 "f s" => "feed_subscribe",
1999                                 "f e" => "feed_edit",
2000                                 "f q" => "feed_catchup",
2001                                 "f x" => "feed_reverse",
2002                                 "f *d" => "feed_debug_update",
2003                                 "f *c" => "toggle_combined_mode",
2004                                 "f c" => "toggle_cdm_expanded",
2005                                 "*q" => "catchup_all",
2006                                 "x" => "cat_toggle_collapse",
2007 //                      "goto" => array(
2008                                 "g a" => "goto_all",
2009                                 "g f" => "goto_fresh",
2010                                 "g s" => "goto_marked",
2011                                 "g p" => "goto_published",
2012                                 "g t" => "goto_tagcloud",
2013                                 "g *p" => "goto_prefs",
2014 //                      "other" => array(
2015                                 "(9)|Tab" => "select_article_cursor", // tab
2016                                 "c l" => "create_label",
2017                                 "c f" => "create_filter",
2018                                 "c s" => "collapse_sidebar",
2019                                 "^(191)|Ctrl+/" => "help_dialog",
2020                         );
2021
2022                 if (get_pref($link, 'COMBINED_DISPLAY_MODE')) {
2023                         $hotkeys["^(38)|Ctrl-up"] = "prev_article_noscroll";
2024                         $hotkeys["^(40)|Ctrl-down"] = "next_article_noscroll";
2025                 }
2026
2027                 global $pluginhost;
2028                 foreach ($pluginhost->get_hooks($pluginhost::HOOK_HOTKEY_MAP) as $plugin) {
2029                         $hotkeys = $plugin->hook_hotkey_map($hotkeys);
2030                 }
2031
2032                 $prefixes = array();
2033
2034                 foreach (array_keys($hotkeys) as $hotkey) {
2035                         $pair = explode(" ", $hotkey, 2);
2036
2037                         if (count($pair) > 1 && !in_array($pair[0], $prefixes)) {
2038                                 array_push($prefixes, $pair[0]);
2039                         }
2040                 }
2041
2042                 return array($prefixes, $hotkeys);
2043         }
2044
2045         function make_runtime_info($link) {
2046                 $data = array();
2047
2048                 $result = db_query($link, "SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
2049                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
2050
2051                 $max_feed_id = db_fetch_result($result, 0, "mid");
2052                 $num_feeds = db_fetch_result($result, 0, "nf");
2053
2054                 $data["max_feed_id"] = (int) $max_feed_id;
2055                 $data["num_feeds"] = (int) $num_feeds;
2056
2057                 $data['last_article_id'] = getLastArticleId($link);
2058                 $data['cdm_expanded'] = get_pref($link, 'CDM_EXPANDED');
2059
2060                 $data['dep_ts'] = calculate_dep_timestamp();
2061                 $data['reload_on_ts_change'] = !defined('_NO_RELOAD_ON_TS_CHANGE');
2062
2063                 if (file_exists(LOCK_DIRECTORY . "/update_daemon.lock")) {
2064
2065                         $data['daemon_is_running'] = (int) file_is_locked("update_daemon.lock");
2066
2067                         if (time() - $_SESSION["daemon_stamp_check"] > 30) {
2068
2069                                 $stamp = (int) @file_get_contents(LOCK_DIRECTORY . "/update_daemon.stamp");
2070
2071                                 if ($stamp) {
2072                                         $stamp_delta = time() - $stamp;
2073
2074                                         if ($stamp_delta > 1800) {
2075                                                 $stamp_check = 0;
2076                                         } else {
2077                                                 $stamp_check = 1;
2078                                                 $_SESSION["daemon_stamp_check"] = time();
2079                                         }
2080
2081                                         $data['daemon_stamp_ok'] = $stamp_check;
2082
2083                                         $stamp_fmt = date("Y.m.d, G:i", $stamp);
2084
2085                                         $data['daemon_stamp'] = $stamp_fmt;
2086                                 }
2087                         }
2088                 }
2089
2090                 if ($_SESSION["last_version_check"] + 86400 + rand(-1000, 1000) < time()) {
2091                                 $new_version_details = @check_for_update($link);
2092
2093                                 $data['new_version_available'] = (int) ($new_version_details != false);
2094
2095                                 $_SESSION["last_version_check"] = time();
2096                                 $_SESSION["version_data"] = $new_version_details;
2097                 }
2098
2099                 return $data;
2100         }
2101
2102         function search_to_sql($link, $search) {
2103
2104                 $search_query_part = "";
2105
2106                 $keywords = explode(" ", $search);
2107                 $query_keywords = array();
2108
2109                 foreach ($keywords as $k) {
2110                         if (strpos($k, "-") === 0) {
2111                                 $k = substr($k, 1);
2112                                 $not = "NOT";
2113                         } else {
2114                                 $not = "";
2115                         }
2116
2117                         $commandpair = explode(":", mb_strtolower($k), 2);
2118
2119                         if ($commandpair[0] == "note" && $commandpair[1]) {
2120
2121                                 if ($commandpair[1] == "true")
2122                                         array_push($query_keywords, "($not (note IS NOT NULL AND note != ''))");
2123                                 else
2124                                         array_push($query_keywords, "($not (note IS NULL OR note = ''))");
2125
2126                         } else if ($commandpair[0] == "star" && $commandpair[1]) {
2127
2128                                 if ($commandpair[1] == "true")
2129                                         array_push($query_keywords, "($not (marked = true))");
2130                                 else
2131                                         array_push($query_keywords, "($not (marked = false))");
2132
2133                         } else if ($commandpair[0] == "pub" && $commandpair[1]) {
2134
2135                                 if ($commandpair[1] == "true")
2136                                         array_push($query_keywords, "($not (published = true))");
2137                                 else
2138                                         array_push($query_keywords, "($not (published = false))");
2139
2140                         } else if (strpos($k, "@") === 0) {
2141
2142                                 $user_tz_string = get_pref($link, 'USER_TIMEZONE', $_SESSION['uid']);
2143                                 $orig_ts = strtotime(substr($k, 1));
2144                                 $k = date("Y-m-d", convert_timestamp($orig_ts, $user_tz_string, 'UTC'));
2145
2146                                 //$k = date("Y-m-d", strtotime(substr($k, 1)));
2147
2148                                 array_push($query_keywords, "(".SUBSTRING_FOR_DATE."(updated,1,LENGTH('$k')) $not = '$k')");
2149                         } else {
2150                                 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2151                                                 OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2152                         }
2153                 }
2154
2155                 $search_query_part = implode("AND", $query_keywords);
2156
2157                 return $search_query_part;
2158         }
2159
2160         function getParentCategories($link, $cat, $owner_uid) {
2161                 $rv = array();
2162
2163                 $result = db_query($link, "SELECT parent_cat FROM ttrss_feed_categories
2164                         WHERE id = '$cat' AND parent_cat IS NOT NULL AND owner_uid = $owner_uid");
2165
2166                 while ($line = db_fetch_assoc($result)) {
2167                         array_push($rv, $line["parent_cat"]);
2168                         $rv = array_merge($rv, getParentCategories($link, $line["parent_cat"], $owner_uid));
2169                 }
2170
2171                 return $rv;
2172         }
2173
2174         function getChildCategories($link, $cat, $owner_uid) {
2175                 $rv = array();
2176
2177                 $result = db_query($link, "SELECT id FROM ttrss_feed_categories
2178                         WHERE parent_cat = '$cat' AND owner_uid = $owner_uid");
2179
2180                 while ($line = db_fetch_assoc($result)) {
2181                         array_push($rv, $line["id"]);
2182                         $rv = array_merge($rv, getChildCategories($link, $line["id"], $owner_uid));
2183                 }
2184
2185                 return $rv;
2186         }
2187
2188         function queryFeedHeadlines($link, $feed, $limit, $view_mode, $cat_view, $search, $search_mode, $override_order = false, $offset = 0, $owner_uid = 0, $filter = false, $since_id = 0, $include_children = false, $ignore_vfeed_group = false) {
2189
2190                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2191
2192                 $ext_tables_part = "";
2193
2194                         if ($search) {
2195
2196                                 if (SPHINX_ENABLED) {
2197                                         $ids = join(",", @sphinx_search($search, 0, 500));
2198
2199                                         if ($ids)
2200                                                 $search_query_part = "ref_id IN ($ids) AND ";
2201                                         else
2202                                                 $search_query_part = "ref_id = -1 AND ";
2203
2204                                 } else {
2205                                         $search_query_part = search_to_sql($link, $search);
2206                                         $search_query_part .= " AND ";
2207                                 }
2208
2209                         } else {
2210                                 $search_query_part = "";
2211                         }
2212
2213                         if ($filter) {
2214
2215                                 if (DB_TYPE == "pgsql") {
2216                                         $query_strategy_part .= " AND updated > NOW() - INTERVAL '14 days' ";
2217                                 } else {
2218                                         $query_strategy_part .= " AND updated > DATE_SUB(NOW(), INTERVAL 14 DAY) ";
2219                                 }
2220
2221                                 $override_order = "updated DESC";
2222
2223                                 $filter_query_part = filter_to_sql($link, $filter, $owner_uid);
2224
2225                                 // Try to check if SQL regexp implementation chokes on a valid regexp
2226                                 $result = db_query($link, "SELECT true AS true_val FROM ttrss_entries,
2227                                         ttrss_user_entries, ttrss_feeds, ttrss_feed_categories
2228                                         WHERE $filter_query_part LIMIT 1", false);
2229
2230                                 if ($result) {
2231                                         $test = db_fetch_result($result, 0, "true_val");
2232
2233                                         if (!$test) {
2234                                                 $filter_query_part = "false AND";
2235                                         } else {
2236                                                 $filter_query_part .= " AND";
2237                                         }
2238                                 } else {
2239                                         $filter_query_part = "false AND";
2240                                 }
2241
2242                         } else {
2243                                 $filter_query_part = "";
2244                         }
2245
2246                         if ($since_id) {
2247                                 $since_id_part = "ttrss_entries.id > $since_id AND ";
2248                         } else {
2249                                 $since_id_part = "";
2250                         }
2251
2252                         $view_query_part = "";
2253
2254                         if ($view_mode == "adaptive") {
2255                                 if ($search) {
2256                                         $view_query_part = " ";
2257                                 } else if ($feed != -1) {
2258
2259                                         $unread = getFeedUnread($link, $feed, $cat_view);
2260
2261                                         if ($cat_view && $feed > 0 && $include_children)
2262                                                 $unread += getCategoryChildrenUnread($link, $feed);
2263
2264                                         if ($unread > 0)
2265                                 $view_query_part = " unread = true AND ";
2266
2267                                 }
2268                         }
2269
2270                         if ($view_mode == "marked") {
2271                                 $view_query_part = " marked = true AND ";
2272                         }
2273
2274                         if ($view_mode == "has_note") {
2275                                 $view_query_part = " (note IS NOT NULL AND note != '') AND ";
2276                         }
2277
2278                         if ($view_mode == "published") {
2279                                 $view_query_part = " published = true AND ";
2280                         }
2281
2282                         if ($view_mode == "unread" && $feed != -6) {
2283                                 $view_query_part = " unread = true AND ";
2284                         }
2285
2286                         if ($limit > 0) {
2287                                 $limit_query_part = "LIMIT " . $limit;
2288                         }
2289
2290                         $allow_archived = false;
2291
2292                         $vfeed_query_part = "";
2293
2294                         // override query strategy and enable feed display when searching globally
2295                         if ($search && $search_mode == "all_feeds") {
2296                                 $query_strategy_part = "true";
2297                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2298                         /* tags */
2299                         } else if (!is_numeric($feed)) {
2300                                 $query_strategy_part = "true";
2301                                 $vfeed_query_part = "(SELECT title FROM ttrss_feeds WHERE
2302                                         id = feed_id) as feed_title,";
2303                         } else if ($search && $search_mode == "this_cat") {
2304                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2305
2306                                 if ($feed > 0) {
2307                                         if ($include_children) {
2308                                                 $subcats = getChildCategories($link, $feed, $owner_uid);
2309                                                 array_push($subcats, $feed);
2310                                                 $cats_qpart = join(",", $subcats);
2311                                         } else {
2312                                                 $cats_qpart = $feed;
2313                                         }
2314
2315                                         $query_strategy_part = "ttrss_feeds.cat_id IN ($cats_qpart)";
2316
2317                                 } else {
2318                                         $query_strategy_part = "ttrss_feeds.cat_id IS NULL";
2319                                 }
2320
2321                         } else if ($feed > 0) {
2322
2323                                 if ($cat_view) {
2324
2325                                         if ($feed > 0) {
2326                                                 if ($include_children) {
2327                                                         # sub-cats
2328                                                         $subcats = getChildCategories($link, $feed, $owner_uid);
2329
2330                                                         array_push($subcats, $feed);
2331                                                         $query_strategy_part = "cat_id IN (".
2332                                                                         implode(",", $subcats).")";
2333
2334                                                 } else {
2335                                                         $query_strategy_part = "cat_id = '$feed'";
2336                                                 }
2337
2338                                         } else {
2339                                                 $query_strategy_part = "cat_id IS NULL";
2340                                         }
2341
2342                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2343
2344                                 } else {
2345                                         $query_strategy_part = "feed_id = '$feed'";
2346                                 }
2347                         } else if ($feed == 0 && !$cat_view) { // archive virtual feed
2348                                 $query_strategy_part = "feed_id IS NULL";
2349                                 $allow_archived = true;
2350                         } else if ($feed == 0 && $cat_view) { // uncategorized
2351                                 $query_strategy_part = "cat_id IS NULL AND feed_id IS NOT NULL";
2352                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2353                         } else if ($feed == -1) { // starred virtual feed
2354                                 $query_strategy_part = "marked = true";
2355                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2356                                 $allow_archived = true;
2357
2358                                 if (!$override_order) {
2359                                         $override_order = "last_marked DESC, date_entered DESC, updated DESC";
2360                                 }
2361
2362                         } else if ($feed == -2) { // published virtual feed OR labels category
2363
2364                                 if (!$cat_view) {
2365                                         $query_strategy_part = "published = true";
2366                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2367                                         $allow_archived = true;
2368
2369                                         if (!$override_order) {
2370                                                 $override_order = "last_published DESC, date_entered DESC, updated DESC";
2371                                         }
2372
2373                                 } else {
2374                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2375
2376                                         $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2377
2378                                         $query_strategy_part = "ttrss_labels2.id = ttrss_user_labels2.label_id AND
2379                                                 ttrss_user_labels2.article_id = ref_id";
2380
2381                                 }
2382                         } else if ($feed == -6) { // recently read
2383                                 $query_strategy_part = "unread = false AND last_read IS NOT NULL";
2384                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2385                                 $allow_archived = true;
2386
2387                                 if (!$override_order) $override_order = "last_read DESC";
2388                         } else if ($feed == -3) { // fresh virtual feed
2389                                 $query_strategy_part = "unread = true AND score >= 0";
2390
2391                                 $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE", $owner_uid);
2392
2393                                 if (DB_TYPE == "pgsql") {
2394                                         $query_strategy_part .= " AND date_entered > NOW() - INTERVAL '$intl hour' ";
2395                                 } else {
2396                                         $query_strategy_part .= " AND date_entered > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
2397                                 }
2398
2399                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2400                         } else if ($feed == -4) { // all articles virtual feed
2401                                 $query_strategy_part = "true";
2402                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2403                         } else if ($feed <= LABEL_BASE_INDEX) { // labels
2404                                 $label_id = feed_to_label_id($feed);
2405
2406                                 $query_strategy_part = "label_id = '$label_id' AND
2407                                         ttrss_labels2.id = ttrss_user_labels2.label_id AND
2408                                         ttrss_user_labels2.article_id = ref_id";
2409
2410                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2411                                 $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2412                                 $allow_archived = true;
2413
2414                         } else {
2415                                 $query_strategy_part = "true";
2416                         }
2417
2418                         if (get_pref($link, "SORT_HEADLINES_BY_FEED_DATE", $owner_uid)) {
2419                                 $date_sort_field = "updated";
2420                         } else {
2421                                 $date_sort_field = "date_entered";
2422                         }
2423
2424                         $order_by = "$date_sort_field DESC, updated DESC";
2425
2426                         if ($view_mode == "unread_first") {
2427                                 $order_by = "unread DESC, $order_by";
2428                         }
2429
2430                         if ($override_order) {
2431                                 $order_by = $override_order;
2432                         }
2433
2434                         $feed_title = "";
2435
2436                         if ($search) {
2437                                 $feed_title = T_sprintf("Search results: %s", $search);
2438                         } else {
2439                                 if ($cat_view) {
2440                                         $feed_title = getCategoryTitle($link, $feed);
2441                                 } else {
2442                                         if (is_numeric($feed) && $feed > 0) {
2443                                                 $result = db_query($link, "SELECT title,site_url,last_error
2444                                                         FROM ttrss_feeds WHERE id = '$feed' AND owner_uid = $owner_uid");
2445
2446                                                 $feed_title = db_fetch_result($result, 0, "title");
2447                                                 $feed_site_url = db_fetch_result($result, 0, "site_url");
2448                                                 $last_error = db_fetch_result($result, 0, "last_error");
2449                                         } else {
2450                                                 $feed_title = getFeedTitle($link, $feed);
2451                                         }
2452                                 }
2453                         }
2454
2455                         $content_query_part = "content as content_preview, cached_content, ";
2456
2457                         if (is_numeric($feed)) {
2458
2459                                 if ($feed >= 0) {
2460                                         $feed_kind = "Feeds";
2461                                 } else {
2462                                         $feed_kind = "Labels";
2463                                 }
2464
2465                                 if ($limit_query_part) {
2466                                         $offset_query_part = "OFFSET $offset";
2467                                 }
2468
2469                                 // proper override_order applied above
2470                                 if ($vfeed_query_part && !$ignore_vfeed_group && get_pref($link, 'VFEED_GROUP_BY_FEED', $owner_uid)) {
2471                                         if (!$override_order) {
2472                                                 $order_by = "ttrss_feeds.title, $order_by";
2473                                         } else {
2474                                                 $order_by = "ttrss_feeds.title, $override_order";
2475                                         }
2476                                 }
2477
2478                                 if (!$allow_archived) {
2479                                         $from_qpart = "ttrss_entries,ttrss_user_entries,ttrss_feeds$ext_tables_part";
2480                                         $feed_check_qpart = "ttrss_user_entries.feed_id = ttrss_feeds.id AND";
2481
2482                                 } else {
2483                                         $from_qpart = "ttrss_entries$ext_tables_part,ttrss_user_entries
2484                                                 LEFT JOIN ttrss_feeds ON (feed_id = ttrss_feeds.id)";
2485                                 }
2486
2487                                 $query = "SELECT DISTINCT
2488                                                 date_entered,
2489                                                 guid,
2490                                                 ttrss_entries.id,ttrss_entries.title,
2491                                                 updated,
2492                                                 label_cache,
2493                                                 tag_cache,
2494                                                 always_display_enclosures,
2495                                                 site_url,
2496                                                 note,
2497                                                 num_comments,
2498                                                 comments,
2499                                                 int_id,
2500                                                 hide_images,
2501                                                 unread,feed_id,marked,published,link,last_read,orig_feed_id,
2502                                                 last_marked, last_published,
2503                                                 $vfeed_query_part
2504                                                 $content_query_part
2505                                                 author,score
2506                                         FROM
2507                                                 $from_qpart
2508                                         WHERE
2509                                         $feed_check_qpart
2510                                         ttrss_user_entries.ref_id = ttrss_entries.id AND
2511                                         ttrss_user_entries.owner_uid = '$owner_uid' AND
2512                                         $search_query_part
2513                                         $filter_query_part
2514                                         $view_query_part
2515                                         $since_id_part
2516                                         $query_strategy_part ORDER BY $order_by
2517                                         $limit_query_part $offset_query_part";
2518
2519                                 if ($_REQUEST["debug"]) print $query;
2520
2521                                 $result = db_query($link, $query);
2522
2523                         } else {
2524                                 // browsing by tag
2525
2526                                 $select_qpart = "SELECT DISTINCT " .
2527                                                                 "date_entered," .
2528                                                                 "guid," .
2529                                                                 "note," .
2530                                                                 "ttrss_entries.id as id," .
2531                                                                 "title," .
2532                                                                 "updated," .
2533                                                                 "unread," .
2534                                                                 "feed_id," .
2535                                                                 "orig_feed_id," .
2536                                                                 "marked," .
2537                                                                 "num_comments, " .
2538                                                                 "comments, " .
2539                                                                 "tag_cache," .
2540                                                                 "label_cache," .
2541                                                                 "link," .
2542                                                                 "last_read," .
2543                                                                 "(SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) AS hide_images," .
2544                                                                 "last_marked, last_published, " .
2545                                                                 $since_id_part .
2546                                                                 $vfeed_query_part .
2547                                                                 $content_query_part .
2548                                                                 "score ";
2549
2550                                 $feed_kind = "Tags";
2551                                 $all_tags = explode(",", $feed);
2552                                 if ($search_mode == 'any') {
2553                                         $tag_sql = "tag_name in (" . implode(", ", array_map("db_quote", $all_tags)) . ")";
2554                                         $from_qpart = " FROM ttrss_entries,ttrss_user_entries,ttrss_tags ";
2555                                         $where_qpart = " WHERE " .
2556                                                                    "ref_id = ttrss_entries.id AND " .
2557                                                                    "ttrss_user_entries.owner_uid = $owner_uid AND " .
2558                                                                    "post_int_id = int_id AND $tag_sql AND " .
2559                                                                    $view_query_part .
2560                                                                    $search_query_part .
2561                                                                    $query_strategy_part . " ORDER BY $order_by " .
2562                                                                    $limit_query_part;
2563
2564                                 } else {
2565                                         $i = 1;
2566                                         $sub_selects = array();
2567                                         $sub_ands = array();
2568                                         foreach ($all_tags as $term) {
2569                                                 array_push($sub_selects, "(SELECT post_int_id from ttrss_tags WHERE tag_name = " . db_quote($term) . " AND owner_uid = $owner_uid) as A$i");
2570                                                 $i++;
2571                                         }
2572                                         if ($i > 2) {
2573                                                 $x = 1;
2574                                                 $y = 2;
2575                                                 do {
2576                                                         array_push($sub_ands, "A$x.post_int_id = A$y.post_int_id");
2577                                                         $x++;
2578                                                         $y++;
2579                                                 } while ($y < $i);
2580                                         }
2581                                         array_push($sub_ands, "A1.post_int_id = ttrss_user_entries.int_id and ttrss_user_entries.owner_uid = $owner_uid");
2582                                         array_push($sub_ands, "ttrss_user_entries.ref_id = ttrss_entries.id");
2583                                         $from_qpart = " FROM " . implode(", ", $sub_selects) . ", ttrss_user_entries, ttrss_entries";
2584                                         $where_qpart = " WHERE " . implode(" AND ", $sub_ands);
2585                                 }
2586                                 //                              error_log("TAG SQL: " . $tag_sql);
2587                                 // $tag_sql = "tag_name = '$feed'";   DEFAULT way
2588
2589                                 //                              error_log("[". $select_qpart . "][" . $from_qpart . "][" .$where_qpart . "]");
2590                                 $result = db_query($link, $select_qpart . $from_qpart . $where_qpart);
2591                         }
2592
2593                         return array($result, $feed_title, $feed_site_url, $last_error);
2594
2595         }
2596
2597         function sanitize($link, $str, $force_remove_images = false, $owner = false, $site_url = false) {
2598                 if (!$owner) $owner = $_SESSION["uid"];
2599
2600                 $res = trim($str); if (!$res) return '';
2601
2602                 if (strpos($res, "href=") === false)
2603                         $res = rewrite_urls($res);
2604
2605                 $charset_hack = '<head>
2606                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
2607                 </head>';
2608
2609                 $res = trim($res); if (!$res) return '';
2610
2611                 libxml_use_internal_errors(true);
2612
2613                 $doc = new DOMDocument();
2614                 $doc->loadHTML($charset_hack . $res);
2615                 $xpath = new DOMXPath($doc);
2616
2617                 $entries = $xpath->query('(//a[@href]|//img[@src])');
2618
2619                 foreach ($entries as $entry) {
2620
2621                         if ($site_url) {
2622
2623                                 if ($entry->hasAttribute('href'))
2624                                         $entry->setAttribute('href',
2625                                                 rewrite_relative_url($site_url, $entry->getAttribute('href')));
2626
2627                                 if ($entry->hasAttribute('src')) {
2628                                         $src = rewrite_relative_url($site_url, $entry->getAttribute('src'));
2629
2630                                         $cached_filename = CACHE_DIR . '/images/' . sha1($src) . '.png';
2631
2632                                         if (file_exists($cached_filename)) {
2633                                                 $src = SELF_URL_PATH . '/image.php?hash=' . sha1($src);
2634                                         }
2635
2636                                         $entry->setAttribute('src', $src);
2637                                 }
2638
2639                                 if ($entry->nodeName == 'img') {
2640                                         if (($owner && get_pref($link, "STRIP_IMAGES", $owner)) ||
2641                                                         $force_remove_images || $_SESSION["bw_limit"]) {
2642
2643                                                 $p = $doc->createElement('p');
2644
2645                                                 $a = $doc->createElement('a');
2646                                                 $a->setAttribute('href', $entry->getAttribute('src'));
2647
2648                                                 $a->appendChild(new DOMText($entry->getAttribute('src')));
2649                                                 $a->setAttribute('target', '_blank');
2650
2651                                                 $p->appendChild($a);
2652
2653                                                 $entry->parentNode->replaceChild($p, $entry);
2654                                         }
2655                                 }
2656                         }
2657
2658                         if (strtolower($entry->nodeName) == "a") {
2659                                 $entry->setAttribute("target", "_blank");
2660                         }
2661                 }
2662
2663                 $entries = $xpath->query('//iframe');
2664                 foreach ($entries as $entry) {
2665                         $entry->setAttribute('sandbox', 'allow-scripts');
2666
2667                 }
2668
2669                 $allowed_elements = array('a', 'address', 'audio', 'article',
2670                         'b', 'big', 'blockquote', 'body', 'br', 'cite', 'center',
2671                         'code', 'dd', 'del', 'details', 'div', 'dl', 'font',
2672                         'dt', 'em', 'footer', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6',
2673                         'header', 'html', 'i', 'img', 'ins', 'kbd',
2674                         'li', 'nav', 'noscript', 'ol', 'p', 'pre', 'q', 's','small',
2675                         'source', 'span', 'strike', 'strong', 'sub', 'summary',
2676                         'sup', 'table', 'tbody', 'td', 'tfoot', 'th', 'thead',
2677                         'tr', 'track', 'tt', 'u', 'ul', 'var', 'wbr', 'video' );
2678
2679                 if ($_SESSION['hasSandbox']) $allowed_elements[] = 'iframe';
2680
2681                 $disallowed_attributes = array('id', 'style', 'class');
2682
2683                 global $pluginhost;
2684
2685                 if (isset($pluginhost)) {
2686                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_SANITIZE) as $plugin) {
2687                                 $retval = $plugin->hook_sanitize($doc, $site_url, $allowed_elements, $disallowed_attributes);
2688                                 if (is_array($retval)) {
2689                                         $doc = $retval[0];
2690                                         $allowed_elements = $retval[1];
2691                                         $disallowed_attributes = $retval[2];
2692                                 } else {
2693                                         $doc = $retval;
2694                                 }
2695                         }
2696                 }
2697
2698                 $doc->removeChild($doc->firstChild); //remove doctype
2699                 $doc = strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes);
2700                 $res = $doc->saveHTML();
2701                 return $res;
2702         }
2703
2704         function strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes) {
2705                 $entries = $doc->getElementsByTagName("*");
2706
2707                 foreach ($entries as $entry) {
2708                         if (!in_array($entry->nodeName, $allowed_elements)) {
2709                                 $entry->parentNode->removeChild($entry);
2710                         }
2711
2712                         if ($entry->hasAttributes()) {
2713                                 $attrs_to_remove = array();
2714
2715                                 foreach ($entry->attributes as $attr) {
2716
2717                                         if (strpos($attr->nodeName, 'on') === 0) {
2718                                                 array_push($attrs_to_remove, $attr);
2719                                         }
2720
2721                                         if (in_array($attr->nodeName, $disallowed_attributes)) {
2722                                                 array_push($attrs_to_remove, $attr);
2723                                         }
2724                                 }
2725
2726                                 foreach ($attrs_to_remove as $attr) {
2727                                         $entry->removeAttributeNode($attr);
2728                                 }
2729                         }
2730                 }
2731
2732                 return $doc;
2733         }
2734
2735         function check_for_update($link) {
2736                 if (CHECK_FOR_NEW_VERSION && $_SESSION['access_level'] >= 10) {
2737                         $version_url = "http://tt-rss.org/version.php?ver=" . VERSION .
2738                                 "&iid=" . sha1(SELF_URL_PATH);
2739
2740                         $version_data = @fetch_file_contents($version_url);
2741
2742                         if ($version_data) {
2743                                 $version_data = json_decode($version_data, true);
2744                                 if ($version_data && $version_data['version']) {
2745
2746                                         if (version_compare(VERSION, $version_data['version']) == -1) {
2747                                                 return $version_data;
2748                                         }
2749                                 }
2750                         }
2751                 }
2752                 return false;
2753         }
2754
2755         function catchupArticlesById($link, $ids, $cmode, $owner_uid = false) {
2756
2757                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2758                 if (count($ids) == 0) return;
2759
2760                 $tmp_ids = array();
2761
2762                 foreach ($ids as $id) {
2763                         array_push($tmp_ids, "ref_id = '$id'");
2764                 }
2765
2766                 $ids_qpart = join(" OR ", $tmp_ids);
2767
2768                 if ($cmode == 0) {
2769                         db_query($link, "UPDATE ttrss_user_entries SET
2770                         unread = false,last_read = NOW()
2771                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2772                 } else if ($cmode == 1) {
2773                         db_query($link, "UPDATE ttrss_user_entries SET
2774                         unread = true
2775                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2776                 } else {
2777                         db_query($link, "UPDATE ttrss_user_entries SET
2778                         unread = NOT unread,last_read = NOW()
2779                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2780                 }
2781
2782                 /* update ccache */
2783
2784                 $result = db_query($link, "SELECT DISTINCT feed_id FROM ttrss_user_entries
2785                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2786
2787                 while ($line = db_fetch_assoc($result)) {
2788                         ccache_update($link, $line["feed_id"], $owner_uid);
2789                 }
2790         }
2791
2792         function get_article_tags($link, $id, $owner_uid = 0, $tag_cache = false) {
2793
2794                 $a_id = db_escape_string($link, $id);
2795
2796                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2797
2798                 $query = "SELECT DISTINCT tag_name,
2799                         owner_uid as owner FROM
2800                         ttrss_tags WHERE post_int_id = (SELECT int_id FROM ttrss_user_entries WHERE
2801                         ref_id = '$a_id' AND owner_uid = '$owner_uid' LIMIT 1) ORDER BY tag_name";
2802
2803                 $obj_id = md5("TAGS:$owner_uid:$id");
2804                 $tags = array();
2805
2806                 /* check cache first */
2807
2808                 if ($tag_cache === false) {
2809                         $result = db_query($link, "SELECT tag_cache FROM ttrss_user_entries
2810                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
2811
2812                         $tag_cache = db_fetch_result($result, 0, "tag_cache");
2813                 }
2814
2815                 if ($tag_cache) {
2816                         $tags = explode(",", $tag_cache);
2817                 } else {
2818
2819                         /* do it the hard way */
2820
2821                         $tmp_result = db_query($link, $query);
2822
2823                         while ($tmp_line = db_fetch_assoc($tmp_result)) {
2824                                 array_push($tags, $tmp_line["tag_name"]);
2825                         }
2826
2827                         /* update the cache */
2828
2829                         $tags_str = db_escape_string($link, join(",", $tags));
2830
2831                         db_query($link, "UPDATE ttrss_user_entries
2832                                 SET tag_cache = '$tags_str' WHERE ref_id = '$id'
2833                                 AND owner_uid = $owner_uid");
2834                 }
2835
2836                 return $tags;
2837         }
2838
2839         function trim_array($array) {
2840                 $tmp = $array;
2841                 array_walk($tmp, 'trim');
2842                 return $tmp;
2843         }
2844
2845         function tag_is_valid($tag) {
2846                 if ($tag == '') return false;
2847                 if (preg_match("/^[0-9]*$/", $tag)) return false;
2848                 if (mb_strlen($tag) > 250) return false;
2849
2850                 if (function_exists('iconv')) {
2851                         $tag = iconv("utf-8", "utf-8", $tag);
2852                 }
2853
2854                 if (!$tag) return false;
2855
2856                 return true;
2857         }
2858
2859         function render_login_form($link) {
2860                 require_once "login_form.php";
2861                 exit;
2862         }
2863
2864         // from http://developer.apple.com/internet/safari/faq.html
2865         function no_cache_incantation() {
2866                 header("Expires: Mon, 22 Dec 1980 00:00:00 GMT"); // Happy birthday to me :)
2867                 header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT"); // always modified
2868                 header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0"); // HTTP/1.1
2869                 header("Cache-Control: post-check=0, pre-check=0", false);
2870                 header("Pragma: no-cache"); // HTTP/1.0
2871         }
2872
2873         function format_warning($msg, $id = "") {
2874                 global $link;
2875                 return "<div class=\"warning\" id=\"$id\">
2876                         <img src=\"images/sign_excl.svg\"><div class='inner'>$msg</div></div>";
2877         }
2878
2879         function format_notice($msg, $id = "") {
2880                 global $link;
2881                 return "<div class=\"notice\" id=\"$id\">
2882                         <img src=\"images/sign_info.svg\"><div class='inner'>$msg</div></div>";
2883         }
2884
2885         function format_error($msg, $id = "") {
2886                 global $link;
2887                 return "<div class=\"error\" id=\"$id\">
2888                         <img src=\"images/sign_excl.svg\"><div class='inner'>$msg</div></div>";
2889         }
2890
2891         function print_notice($msg) {
2892                 return print format_notice($msg);
2893         }
2894
2895         function print_warning($msg) {
2896                 return print format_warning($msg);
2897         }
2898
2899         function print_error($msg) {
2900                 return print format_error($msg);
2901         }
2902
2903
2904         function T_sprintf() {
2905                 $args = func_get_args();
2906                 return vsprintf(__(array_shift($args)), $args);
2907         }
2908
2909         function format_inline_player($link, $url, $ctype) {
2910
2911                 $entry = "";
2912
2913                 $url = htmlspecialchars($url);
2914
2915                 if (strpos($ctype, "audio/") === 0) {
2916
2917                         if ($_SESSION["hasAudio"] && (strpos($ctype, "ogg") !== false ||
2918                                 strpos($_SERVER['HTTP_USER_AGENT'], "Chrome") !== false ||
2919                                 strpos($_SERVER['HTTP_USER_AGENT'], "Safari") !== false )) {
2920
2921                                 $id = 'AUDIO-' . uniqid();
2922
2923                                 $entry .= "<audio id=\"$id\"\" controls style='display : none'>
2924                                         <source type=\"$ctype\" src=\"$url\"></source>
2925                                         </audio>";
2926
2927                                 $entry .= "<span onclick=\"player(this)\"
2928                                         title=\"".__("Click to play")."\" status=\"0\"
2929                                         class=\"player\" audio-id=\"$id\">".__("Play")."</span>";
2930
2931                         } else {
2932
2933                                 $entry .= "<object type=\"application/x-shockwave-flash\"
2934                                         data=\"lib/button/musicplayer.swf?song_url=$url\"
2935                                         width=\"17\" height=\"17\" style='float : left; margin-right : 5px;'>
2936                                         <param name=\"movie\"
2937                                                 value=\"lib/button/musicplayer.swf?song_url=$url\" />
2938                                         </object>";
2939                         }
2940
2941                         if ($entry) $entry .= "&nbsp; <a target=\"_blank\"
2942                                 href=\"$url\">" . basename($url) . "</a>";
2943
2944                         return $entry;
2945
2946                 }
2947
2948                 return "";
2949
2950 /*              $filename = substr($url, strrpos($url, "/")+1);
2951
2952                 $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
2953                         $filename . " (" . $ctype . ")" . "</a>"; */
2954
2955         }
2956
2957         function format_article($link, $id, $mark_as_read = true, $zoom_mode = false, $owner_uid = false) {
2958                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2959
2960                 $rv = array();
2961
2962                 $rv['id'] = $id;
2963
2964                 /* we can figure out feed_id from article id anyway, why do we
2965                  * pass feed_id here? let's ignore the argument :( */
2966
2967                 $result = db_query($link, "SELECT feed_id FROM ttrss_user_entries
2968                         WHERE ref_id = '$id'");
2969
2970                 $feed_id = (int) db_fetch_result($result, 0, "feed_id");
2971
2972                 $rv['feed_id'] = $feed_id;
2973
2974                 //if (!$zoom_mode) { print "<article id='$id'><![CDATA["; };
2975
2976                 if ($mark_as_read) {
2977                         $result = db_query($link, "UPDATE ttrss_user_entries
2978                                 SET unread = false,last_read = NOW()
2979                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
2980
2981                         ccache_update($link, $feed_id, $owner_uid);
2982                 }
2983
2984                 $result = db_query($link, "SELECT id,title,link,content,feed_id,comments,int_id,
2985                         ".SUBSTRING_FOR_DATE."(updated,1,16) as updated,
2986                         (SELECT site_url FROM ttrss_feeds WHERE id = feed_id) as site_url,
2987                         (SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) as hide_images,
2988                         num_comments,
2989                         tag_cache,
2990                         author,
2991                         orig_feed_id,
2992                         note,
2993                         cached_content
2994                         FROM ttrss_entries,ttrss_user_entries
2995                         WHERE   id = '$id' AND ref_id = id AND owner_uid = $owner_uid");
2996
2997                 if ($result) {
2998
2999                         $line = db_fetch_assoc($result);
3000
3001                         $tag_cache = $line["tag_cache"];
3002
3003                         $line["tags"] = get_article_tags($link, $id, $owner_uid, $line["tag_cache"]);
3004                         unset($line["tag_cache"]);
3005
3006                         $line["content"] = sanitize($link, $line["content"], false, $owner_uid, $line["site_url"]);
3007
3008                         global $pluginhost;
3009
3010                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_RENDER_ARTICLE) as $p) {
3011                                 $line = $p->hook_render_article($line);
3012                         }
3013
3014                         $num_comments = $line["num_comments"];
3015                         $entry_comments = "";
3016
3017                         if ($num_comments > 0) {
3018                                 if ($line["comments"]) {
3019                                         $comments_url = htmlspecialchars($line["comments"]);
3020                                 } else {
3021                                         $comments_url = htmlspecialchars($line["link"]);
3022                                 }
3023                                 $entry_comments = "<a target='_blank' href=\"$comments_url\">$num_comments comments</a>";
3024                         } else {
3025                                 if ($line["comments"] && $line["link"] != $line["comments"]) {
3026                                         $entry_comments = "<a target='_blank' href=\"".htmlspecialchars($line["comments"])."\">comments</a>";
3027                                 }
3028                         }
3029
3030                         if ($zoom_mode) {
3031                                 header("Content-Type: text/html");
3032                                 $rv['content'] .= "<html><head>
3033                                                 <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"/>
3034                                                 <title>Tiny Tiny RSS - ".$line["title"]."</title>
3035                                                 <link rel=\"stylesheet\" type=\"text/css\" href=\"tt-rss.css\">
3036                                         </head><body id=\"ttrssZoom\">";
3037                         }
3038
3039                         $rv['content'] .= "<div class=\"postReply\" id=\"POST-$id\">";
3040
3041                         $rv['content'] .= "<div class=\"postHeader\" id=\"POSTHDR-$id\">";
3042
3043                         $entry_author = $line["author"];
3044
3045                         if ($entry_author) {
3046                                 $entry_author = __(" - ") . $entry_author;
3047                         }
3048
3049                         $parsed_updated = make_local_datetime($link, $line["updated"], true,
3050                                 $owner_uid, true);
3051
3052                         $rv['content'] .= "<div class=\"postDate\">$parsed_updated</div>";
3053
3054                         if ($line["link"]) {
3055                                 $rv['content'] .= "<div class='postTitle'><a target='_blank'
3056                                         title=\"".htmlspecialchars($line['title'])."\"
3057                                         href=\"" .
3058                                         htmlspecialchars($line["link"]) . "\">" .
3059                                         $line["title"] . "</a>" .
3060                                         "<span class='author'>$entry_author</span></div>";
3061                         } else {
3062                                 $rv['content'] .= "<div class='postTitle'>" . $line["title"] . "$entry_author</div>";
3063                         }
3064
3065                         $tags_str = format_tags_string($line["tags"], $id);
3066                         $tags_str_full = join(", ", $line["tags"]);
3067
3068                         if (!$tags_str_full) $tags_str_full = __("no tags");
3069
3070                         if (!$entry_comments) $entry_comments = "&nbsp;"; # placeholder
3071
3072                         $rv['content'] .= "<div class='postTags' style='float : right'>
3073                                 <img src='images/tag.png'
3074                                 class='tagsPic' alt='Tags' title='Tags'>&nbsp;";
3075
3076                         if (!$zoom_mode) {
3077                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>
3078                                         <a title=\"".__('Edit tags for this article')."\"
3079                                         href=\"#\" onclick=\"editArticleTags($id, $feed_id)\">(+)</a>";
3080
3081                                 $rv['content'] .= "<div dojoType=\"dijit.Tooltip\"
3082                                         id=\"ATSTRTIP-$id\" connectId=\"ATSTR-$id\"
3083                                         position=\"below\">$tags_str_full</div>";
3084
3085                                 global $pluginhost;
3086
3087                                 foreach ($pluginhost->get_hooks($pluginhost::HOOK_ARTICLE_BUTTON) as $p) {
3088                                         $rv['content'] .= $p->hook_article_button($line);
3089                                 }
3090
3091
3092                         } else {
3093                                 $tags_str = strip_tags($tags_str);
3094                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>";
3095                         }
3096                         $rv['content'] .= "</div>";
3097                         $rv['content'] .= "<div clear='both'>$entry_comments</div>";
3098
3099                         if ($line["orig_feed_id"]) {
3100
3101                                 $tmp_result = db_query($link, "SELECT * FROM ttrss_archived_feeds
3102                                         WHERE id = ".$line["orig_feed_id"]);
3103
3104                                 if (db_num_rows($tmp_result) != 0) {
3105
3106                                         $rv['content'] .= "<div clear='both'>";
3107                                         $rv['content'] .= __("Originally from:");
3108
3109                                         $rv['content'] .= "&nbsp;";
3110
3111                                         $tmp_line = db_fetch_assoc($tmp_result);
3112
3113                                         $rv['content'] .= "<a target='_blank'
3114                                                 href=' " . htmlspecialchars($tmp_line['site_url']) . "'>" .
3115                                                 $tmp_line['title'] . "</a>";
3116
3117                                         $rv['content'] .= "&nbsp;";
3118
3119                                         $rv['content'] .= "<a target='_blank' href='" . htmlspecialchars($tmp_line['feed_url']) . "'>";
3120                                         $rv['content'] .= "<img title='".__('Feed URL')."'class='tinyFeedIcon' src='images/pub_set.svg'></a>";
3121
3122                                         $rv['content'] .= "</div>";
3123                                 }
3124                         }
3125
3126                         $rv['content'] .= "</div>";
3127
3128                         $rv['content'] .= "<div id=\"POSTNOTE-$id\">";
3129                                 if ($line['note']) {
3130                                         $rv['content'] .= format_article_note($id, $line['note'], !$zoom_mode);
3131                                 }
3132                         $rv['content'] .= "</div>";
3133
3134                         $rv['content'] .= "<div class=\"postContent\">";
3135
3136                         $rv['content'] .= $line["content"];
3137
3138                         $rv['content'] .= format_article_enclosures($link, $id,
3139                                 $always_display_enclosures, $line["content"], $line["hide_images"]);
3140
3141                         $rv['content'] .= "</div>";
3142
3143                         $rv['content'] .= "</div>";
3144
3145                 }
3146
3147                 if ($zoom_mode) {
3148                         $rv['content'] .= "
3149                                 <div class='footer'>
3150                                 <button onclick=\"return window.close()\">".
3151                                         __("Close this window")."</button></div>";
3152                         $rv['content'] .= "</body></html>";
3153                 }
3154
3155                 return $rv;
3156
3157         }
3158
3159         function print_checkpoint($n, $s) {
3160                 $ts = microtime(true);
3161                 echo sprintf("<!-- CP[$n] %.4f seconds -->", $ts - $s);
3162                 return $ts;
3163         }
3164
3165         function sanitize_tag($tag) {
3166                 $tag = trim($tag);
3167
3168                 $tag = mb_strtolower($tag, 'utf-8');
3169
3170                 $tag = preg_replace('/[\'\"\+\>\<]/', "", $tag);
3171
3172 //              $tag = str_replace('"', "", $tag);
3173 //              $tag = str_replace("+", " ", $tag);
3174                 $tag = str_replace("technorati tag: ", "", $tag);
3175
3176                 return $tag;
3177         }
3178
3179         function get_self_url_prefix() {
3180                 if (strrpos(SELF_URL_PATH, "/") === strlen(SELF_URL_PATH)-1) {
3181                         return substr(SELF_URL_PATH, 0, strlen(SELF_URL_PATH)-1);
3182                 } else {
3183                         return SELF_URL_PATH;
3184                 }
3185         }
3186
3187         /**
3188          * Compute the Mozilla Firefox feed adding URL from server HOST and REQUEST_URI.
3189          *
3190          * @return string The Mozilla Firefox feed adding URL.
3191          */
3192         function add_feed_url() {
3193                 //$url_path = ($_SERVER['HTTPS'] != "on" ? 'http://' :  'https://') . $_SERVER["HTTP_HOST"] . parse_url($_SERVER["REQUEST_URI"], PHP_URL_PATH);
3194
3195                 $url_path = get_self_url_prefix() .
3196                         "/public.php?op=subscribe&feed_url=%s";
3197                 return $url_path;
3198         } // function add_feed_url
3199
3200         function encrypt_password($pass, $salt = '', $mode2 = false) {
3201                 if ($salt && $mode2) {
3202                         return "MODE2:" . hash('sha256', $salt . $pass);
3203                 } else if ($salt) {
3204                         return "SHA1X:" . sha1("$salt:$pass");
3205                 } else {
3206                         return "SHA1:" . sha1($pass);
3207                 }
3208         } // function encrypt_password
3209
3210         function load_filters($link, $feed_id, $owner_uid, $action_id = false) {
3211                 $filters = array();
3212
3213                 $cat_id = (int)getFeedCategory($link, $feed_id);
3214
3215                 $result = db_query($link, "SELECT * FROM ttrss_filters2 WHERE
3216                         owner_uid = $owner_uid AND enabled = true");
3217
3218                 $check_cats = join(",", array_merge(
3219                         getParentCategories($link, $cat_id, $owner_uid),
3220                         array($cat_id)));
3221
3222                 while ($line = db_fetch_assoc($result)) {
3223                         $filter_id = $line["id"];
3224
3225                         $result2 = db_query($link, "SELECT
3226                                 r.reg_exp, r.inverse, r.feed_id, r.cat_id, r.cat_filter, t.name AS type_name
3227                                 FROM ttrss_filters2_rules AS r,
3228                                 ttrss_filter_types AS t
3229                                 WHERE
3230                                         (cat_id IS NULL OR cat_id IN ($check_cats)) AND
3231                                         (feed_id IS NULL OR feed_id = '$feed_id') AND
3232                                         filter_type = t.id AND filter_id = '$filter_id'");
3233
3234                         $rules = array();
3235                         $actions = array();
3236
3237                         while ($rule_line = db_fetch_assoc($result2)) {
3238 #                               print_r($rule_line);
3239
3240                                 $rule = array();
3241                                 $rule["reg_exp"] = $rule_line["reg_exp"];
3242                                 $rule["type"] = $rule_line["type_name"];
3243                                 $rule["inverse"] = sql_bool_to_bool($rule_line["inverse"]);
3244
3245                                 array_push($rules, $rule);
3246                         }
3247
3248                         $result2 = db_query($link, "SELECT a.action_param,t.name AS type_name
3249                                 FROM ttrss_filters2_actions AS a,
3250                                 ttrss_filter_actions AS t
3251                                 WHERE
3252                                         action_id = t.id AND filter_id = '$filter_id'");
3253
3254                         while ($action_line = db_fetch_assoc($result2)) {
3255 #                               print_r($action_line);
3256
3257                                 $action = array();
3258                                 $action["type"] = $action_line["type_name"];
3259                                 $action["param"] = $action_line["action_param"];
3260
3261                                 array_push($actions, $action);
3262                         }
3263
3264
3265                         $filter = array();
3266                         $filter["match_any_rule"] = sql_bool_to_bool($line["match_any_rule"]);
3267                         $filter["inverse"] = sql_bool_to_bool($line["inverse"]);
3268                         $filter["rules"] = $rules;
3269                         $filter["actions"] = $actions;
3270
3271                         if (count($rules) > 0 && count($actions) > 0) {
3272                                 array_push($filters, $filter);
3273                         }
3274                 }
3275
3276                 return $filters;
3277         }
3278
3279         function get_score_pic($score) {
3280                 if ($score > 100) {
3281                         return "score_high.png";
3282                 } else if ($score > 0) {
3283                         return "score_half_high.png";
3284                 } else if ($score < -100) {
3285                         return "score_low.png";
3286                 } else if ($score < 0) {
3287                         return "score_half_low.png";
3288                 } else {
3289                         return "score_neutral.png";
3290                 }
3291         }
3292
3293         function feed_has_icon($id) {
3294                 return is_file(ICONS_DIR . "/$id.ico") && filesize(ICONS_DIR . "/$id.ico") > 0;
3295         }
3296
3297         function init_connection($link) {
3298                 if ($link) {
3299
3300                         if (DB_TYPE == "pgsql") {
3301                                 pg_query($link, "set client_encoding = 'UTF-8'");
3302                                 pg_set_client_encoding("UNICODE");
3303                                 pg_query($link, "set datestyle = 'ISO, european'");
3304                                 pg_query($link, "set TIME ZONE 0");
3305                         } else {
3306                                 db_query($link, "SET time_zone = '+0:0'");
3307
3308                                 if (defined('MYSQL_CHARSET') && MYSQL_CHARSET) {
3309                                         db_query($link, "SET NAMES " . MYSQL_CHARSET);
3310                                 }
3311                         }
3312
3313                         global $pluginhost;
3314
3315                         $pluginhost = new PluginHost($link);
3316                         $pluginhost->load(PLUGINS, $pluginhost::KIND_ALL);
3317
3318                         return true;
3319                 } else {
3320                         print "Unable to connect to database:" . db_last_error();
3321                         return false;
3322                 }
3323         }
3324
3325         function format_tags_string($tags, $id) {
3326
3327                 $tags_str = "";
3328                 $tags_nolinks_str = "";
3329
3330                 $num_tags = 0;
3331
3332                 $tag_limit = 6;
3333
3334                 $formatted_tags = array();
3335
3336                 foreach ($tags as $tag) {
3337                         $num_tags++;
3338                         $tag_escaped = str_replace("'", "\\'", $tag);
3339
3340                         if (mb_strlen($tag) > 30) {
3341                                 $tag = truncate_string($tag, 30);
3342                         }
3343
3344                         $tag_str = "<a href=\"javascript:viewfeed('$tag_escaped')\">$tag</a>";
3345
3346                         array_push($formatted_tags, $tag_str);
3347
3348                         $tmp_tags_str = implode(", ", $formatted_tags);
3349
3350                         if ($num_tags == $tag_limit || mb_strlen($tmp_tags_str) > 150) {
3351                                 break;
3352                         }
3353                 }
3354
3355                 $tags_str = implode(", ", $formatted_tags);
3356
3357                 if ($num_tags < count($tags)) {
3358                         $tags_str .= ", &hellip;";
3359                 }
3360
3361                 if ($num_tags == 0) {
3362                         $tags_str = __("no tags");
3363                 }
3364
3365                 return $tags_str;
3366
3367         }
3368
3369         function format_article_labels($labels, $id) {
3370
3371                 $labels_str = "";
3372
3373                 foreach ($labels as $l) {
3374                         $labels_str .= sprintf("<span class='hlLabelRef'
3375                                 style='color : %s; background-color : %s'>%s</span>",
3376                                         $l[2], $l[3], $l[1]);
3377                         }
3378
3379                 return $labels_str;
3380
3381         }
3382
3383         function format_article_note($id, $note, $allow_edit = true) {
3384
3385                 $str = "<div class='articleNote'        onclick=\"editArticleNote($id)\">
3386                         <div class='noteEdit' onclick=\"editArticleNote($id)\">".
3387                         ($allow_edit ? __('(edit note)') : "")."</div>$note</div>";
3388
3389                 return $str;
3390         }
3391
3392
3393         function get_feed_category($link, $feed_cat, $parent_cat_id = false) {
3394                 if ($parent_cat_id) {
3395                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3396                         $parent_insert = "'$parent_cat_id'";
3397                 } else {
3398                         $parent_qpart = "parent_cat IS NULL";
3399                         $parent_insert = "NULL";
3400                 }
3401
3402                 $result = db_query($link,
3403                         "SELECT id FROM ttrss_feed_categories
3404                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3405
3406                 if (db_num_rows($result) == 0) {
3407                         return false;
3408                 } else {
3409                         return db_fetch_result($result, 0, "id");
3410                 }
3411         }
3412
3413         function add_feed_category($link, $feed_cat, $parent_cat_id = false) {
3414
3415                 if (!$feed_cat) return false;
3416
3417                 db_query($link, "BEGIN");
3418
3419                 if ($parent_cat_id) {
3420                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3421                         $parent_insert = "'$parent_cat_id'";
3422                 } else {
3423                         $parent_qpart = "parent_cat IS NULL";
3424                         $parent_insert = "NULL";
3425                 }
3426
3427                 $result = db_query($link,
3428                         "SELECT id FROM ttrss_feed_categories
3429                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3430
3431                 if (db_num_rows($result) == 0) {
3432
3433                         $result = db_query($link,
3434                                 "INSERT INTO ttrss_feed_categories (owner_uid,title,parent_cat)
3435                                 VALUES ('".$_SESSION["uid"]."', '$feed_cat', $parent_insert)");
3436
3437                         db_query($link, "COMMIT");
3438
3439                         return true;
3440                 }
3441
3442                 return false;
3443         }
3444
3445         function getArticleFeed($link, $id) {
3446                 $result = db_query($link, "SELECT feed_id FROM ttrss_user_entries
3447                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
3448
3449                 if (db_num_rows($result) != 0) {
3450                         return db_fetch_result($result, 0, "feed_id");
3451                 } else {
3452                         return 0;
3453                 }
3454         }
3455
3456         /**
3457          * Fixes incomplete URLs by prepending "http://".
3458          * Also replaces feed:// with http://, and
3459          * prepends a trailing slash if the url is a domain name only.
3460          *
3461          * @param string $url Possibly incomplete URL
3462          *
3463          * @return string Fixed URL.
3464          */
3465         function fix_url($url) {
3466                 if (strpos($url, '://') === false) {
3467                         $url = 'http://' . $url;
3468                 } else if (substr($url, 0, 5) == 'feed:') {
3469                         $url = 'http:' . substr($url, 5);
3470                 }
3471
3472                 //prepend slash if the URL has no slash in it
3473                 // "http://www.example" -> "http://www.example/"
3474                 if (strpos($url, '/', strpos($url, ':') + 3) === false) {
3475                         $url .= '/';
3476                 }
3477
3478                 if ($url != "http:///")
3479                         return $url;
3480                 else
3481                         return '';
3482         }
3483
3484         function validate_feed_url($url) {
3485                 $parts = parse_url($url);
3486
3487                 return ($parts['scheme'] == 'http' || $parts['scheme'] == 'feed' || $parts['scheme'] == 'https');
3488
3489         }
3490
3491         function get_article_enclosures($link, $id) {
3492
3493                 $query = "SELECT * FROM ttrss_enclosures
3494                         WHERE post_id = '$id' AND content_url != ''";
3495
3496                 $rv = array();
3497
3498                 $result = db_query($link, $query);
3499
3500                 if (db_num_rows($result) > 0) {
3501                         while ($line = db_fetch_assoc($result)) {
3502                                 array_push($rv, $line);
3503                         }
3504                 }
3505
3506                 return $rv;
3507         }
3508
3509         function save_email_address($link, $email) {
3510                 // FIXME: implement persistent storage of emails
3511
3512                 if (!$_SESSION['stored_emails'])
3513                         $_SESSION['stored_emails'] = array();
3514
3515                 if (!in_array($email, $_SESSION['stored_emails']))
3516                         array_push($_SESSION['stored_emails'], $email);
3517         }
3518
3519
3520         function get_feed_access_key($link, $feed_id, $is_cat, $owner_uid = false) {
3521
3522                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3523
3524                 $sql_is_cat = bool_to_sql_bool($is_cat);
3525
3526                 $result = db_query($link, "SELECT access_key FROM ttrss_access_keys
3527                         WHERE feed_id = '$feed_id'      AND is_cat = $sql_is_cat
3528                         AND owner_uid = " . $owner_uid);
3529
3530                 if (db_num_rows($result) == 1) {
3531                         return db_fetch_result($result, 0, "access_key");
3532                 } else {
3533                         $key = db_escape_string($link, sha1(uniqid(rand(), true)));
3534
3535                         $result = db_query($link, "INSERT INTO ttrss_access_keys
3536                                 (access_key, feed_id, is_cat, owner_uid)
3537                                 VALUES ('$key', '$feed_id', $sql_is_cat, '$owner_uid')");
3538
3539                         return $key;
3540                 }
3541                 return false;
3542         }
3543
3544         function get_feeds_from_html($url, $content)
3545         {
3546                 $url     = fix_url($url);
3547                 $baseUrl = substr($url, 0, strrpos($url, '/') + 1);
3548
3549                 libxml_use_internal_errors(true);
3550
3551                 $doc = new DOMDocument();
3552                 $doc->loadHTML($content);
3553                 $xpath = new DOMXPath($doc);
3554                 $entries = $xpath->query('/html/head/link[@rel="alternate"]');
3555                 $feedUrls = array();
3556                 foreach ($entries as $entry) {
3557                         if ($entry->hasAttribute('href')) {
3558                                 $title = $entry->getAttribute('title');
3559                                 if ($title == '') {
3560                                         $title = $entry->getAttribute('type');
3561                                 }
3562                                 $feedUrl = rewrite_relative_url(
3563                                         $baseUrl, $entry->getAttribute('href')
3564                                 );
3565                                 $feedUrls[$feedUrl] = $title;
3566                         }
3567                 }
3568                 return $feedUrls;
3569         }
3570
3571         function is_html($content) {
3572                 return preg_match("/<html|DOCTYPE html/i", substr($content, 0, 20)) !== 0;
3573         }
3574
3575         function url_is_html($url, $login = false, $pass = false) {
3576                 return is_html(fetch_file_contents($url, false, $login, $pass));
3577         }
3578
3579         function print_label_select($link, $name, $value, $attributes = "") {
3580
3581                 $result = db_query($link, "SELECT caption FROM ttrss_labels2
3582                         WHERE owner_uid = '".$_SESSION["uid"]."' ORDER BY caption");
3583
3584                 print "<select default=\"$value\" name=\"" . htmlspecialchars($name) .
3585                         "\" $attributes onchange=\"labelSelectOnChange(this)\" >";
3586
3587                 while ($line = db_fetch_assoc($result)) {
3588
3589                         $issel = ($line["caption"] == $value) ? "selected=\"1\"" : "";
3590
3591                         print "<option value=\"".htmlspecialchars($line["caption"])."\"
3592                                 $issel>" . htmlspecialchars($line["caption"]) . "</option>";
3593
3594                 }
3595
3596 #               print "<option value=\"ADD_LABEL\">" .__("Add label...") . "</option>";
3597
3598                 print "</select>";
3599
3600
3601         }
3602
3603         function format_article_enclosures($link, $id, $always_display_enclosures,
3604                                         $article_content, $hide_images = false) {
3605
3606                 $result = get_article_enclosures($link, $id);
3607                 $rv = '';
3608
3609                 if (count($result) > 0) {
3610
3611                         $entries_html = array();
3612                         $entries = array();
3613                         $entries_inline = array();
3614
3615                         foreach ($result as $line) {
3616
3617                                 $url = $line["content_url"];
3618                                 $ctype = $line["content_type"];
3619
3620                                 if (!$ctype) $ctype = __("unknown type");
3621
3622                                 $filename = substr($url, strrpos($url, "/")+1);
3623
3624                                 $player = format_inline_player($link, $url, $ctype);
3625
3626                                 if ($player) array_push($entries_inline, $player);
3627
3628 #                               $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
3629 #                                       $filename . " (" . $ctype . ")" . "</a>";
3630
3631                                 $entry = "<div onclick=\"window.open('".htmlspecialchars($url)."')\"
3632                                         dojoType=\"dijit.MenuItem\">$filename ($ctype)</div>";
3633
3634                                 array_push($entries_html, $entry);
3635
3636                                 $entry = array();
3637
3638                                 $entry["type"] = $ctype;
3639                                 $entry["filename"] = $filename;
3640                                 $entry["url"] = $url;
3641
3642                                 array_push($entries, $entry);
3643                         }
3644
3645                         if ($_SESSION['uid'] && !get_pref($link, "STRIP_IMAGES") && !$_SESSION["bw_limit"]) {
3646                                 if ($always_display_enclosures ||
3647                                                         !preg_match("/<img/i", $article_content)) {
3648
3649                                         foreach ($entries as $entry) {
3650
3651                                                 if (preg_match("/image/", $entry["type"]) ||
3652                                                                 preg_match("/\.(jpg|png|gif|bmp)/i", $entry["filename"])) {
3653
3654                                                                 if (!$hide_images) {
3655                                                                         $rv .= "<p><img
3656                                                                         alt=\"".htmlspecialchars($entry["filename"])."\"
3657                                                                         src=\"" .htmlspecialchars($entry["url"]) . "\"/></p>";
3658                                                                 } else {
3659                                                                         $rv .= "<p><a target=\"_blank\"
3660                                                                         href=\"".htmlspecialchars($entry["url"])."\"
3661                                                                         >" .htmlspecialchars($entry["url"]) . "</a></p>";
3662
3663                                                                 }
3664                                                 }
3665                                         }
3666                                 }
3667                         }
3668
3669                         if (count($entries_inline) > 0) {
3670                                 $rv .= "<hr clear='both'/>";
3671                                 foreach ($entries_inline as $entry) { $rv .= $entry; };
3672                                 $rv .= "<hr clear='both'/>";
3673                         }
3674
3675                         $rv .= "<select class=\"attachments\" onchange=\"openSelectedAttachment(this)\">".
3676                                 "<option value=''>" . __('Attachments')."</option>";
3677
3678                         foreach ($entries as $entry) {
3679                                 $rv .= "<option value=\"".htmlspecialchars($entry["url"])."\">" . htmlspecialchars($entry["filename"]) . "</option>";
3680
3681                         };
3682
3683                         $rv .= "</select>";
3684                 }
3685
3686                 return $rv;
3687         }
3688
3689         function getLastArticleId($link) {
3690                 $result = db_query($link, "SELECT MAX(ref_id) AS id FROM ttrss_user_entries
3691                         WHERE owner_uid = " . $_SESSION["uid"]);
3692
3693                 if (db_num_rows($result) == 1) {
3694                         return db_fetch_result($result, 0, "id");
3695                 } else {
3696                         return -1;
3697                 }
3698         }
3699
3700         function build_url($parts) {
3701                 return $parts['scheme'] . "://" . $parts['host'] . $parts['path'];
3702         }
3703
3704         /**
3705          * Converts a (possibly) relative URL to a absolute one.
3706          *
3707          * @param string $url     Base URL (i.e. from where the document is)
3708          * @param string $rel_url Possibly relative URL in the document
3709          *
3710          * @return string Absolute URL
3711          */
3712         function rewrite_relative_url($url, $rel_url) {
3713                 if (strpos($rel_url, "magnet:") === 0) {
3714                         return $rel_url;
3715                 } else if (strpos($rel_url, "://") !== false) {
3716                         return $rel_url;
3717                 } else if (strpos($rel_url, "//") === 0) {
3718                         # protocol-relative URL (rare but they exist)
3719                         return $rel_url;
3720                 } else if (strpos($rel_url, "/") === 0)
3721                 {
3722                         $parts = parse_url($url);
3723                         $parts['path'] = $rel_url;
3724
3725                         return build_url($parts);
3726
3727                 } else {
3728                         $parts = parse_url($url);
3729                         if (!isset($parts['path'])) {
3730                                 $parts['path'] = '/';
3731                         }
3732                         $dir = $parts['path'];
3733                         if (substr($dir, -1) !== '/') {
3734                                 $dir = dirname($parts['path']);
3735                                 $dir !== '/' && $dir .= '/';
3736                         }
3737                         $parts['path'] = $dir . $rel_url;
3738
3739                         return build_url($parts);
3740                 }
3741         }
3742
3743         function sphinx_search($query, $offset = 0, $limit = 30) {
3744                 require_once 'lib/sphinxapi.php';
3745
3746                 $sphinxClient = new SphinxClient();
3747
3748                 $sphinxClient->SetServer('localhost', 9312);
3749                 $sphinxClient->SetConnectTimeout(1);
3750
3751                 $sphinxClient->SetFieldWeights(array('title' => 70, 'content' => 30,
3752                         'feed_title' => 20));
3753
3754                 $sphinxClient->SetMatchMode(SPH_MATCH_EXTENDED2);
3755                 $sphinxClient->SetRankingMode(SPH_RANK_PROXIMITY_BM25);
3756                 $sphinxClient->SetLimits($offset, $limit, 1000);
3757                 $sphinxClient->SetArrayResult(false);
3758                 $sphinxClient->SetFilter('owner_uid', array($_SESSION['uid']));
3759
3760                 $result = $sphinxClient->Query($query, SPHINX_INDEX);
3761
3762                 $ids = array();
3763
3764                 if (is_array($result['matches'])) {
3765                         foreach (array_keys($result['matches']) as $int_id) {
3766                                 $ref_id = $result['matches'][$int_id]['attrs']['ref_id'];
3767                                 array_push($ids, $ref_id);
3768                         }
3769                 }
3770
3771                 return $ids;
3772         }
3773
3774         function cleanup_tags($link, $days = 14, $limit = 1000) {
3775
3776                 if (DB_TYPE == "pgsql") {
3777                         $interval_query = "date_updated < NOW() - INTERVAL '$days days'";
3778                 } else if (DB_TYPE == "mysql") {
3779                         $interval_query = "date_updated < DATE_SUB(NOW(), INTERVAL $days DAY)";
3780                 }
3781
3782                 $tags_deleted = 0;
3783
3784                 while ($limit > 0) {
3785                         $limit_part = 500;
3786
3787                         $query = "SELECT ttrss_tags.id AS id
3788                                 FROM ttrss_tags, ttrss_user_entries, ttrss_entries
3789                                 WHERE post_int_id = int_id AND $interval_query AND
3790                                 ref_id = ttrss_entries.id AND tag_cache != '' LIMIT $limit_part";
3791
3792                         $result = db_query($link, $query);
3793
3794                         $ids = array();
3795
3796                         while ($line = db_fetch_assoc($result)) {
3797                                 array_push($ids, $line['id']);
3798                         }
3799
3800                         if (count($ids) > 0) {
3801                                 $ids = join(",", $ids);
3802
3803                                 $tmp_result = db_query($link, "DELETE FROM ttrss_tags WHERE id IN ($ids)");
3804                                 $tags_deleted += db_affected_rows($link, $tmp_result);
3805                         } else {
3806                                 break;
3807                         }
3808
3809                         $limit -= $limit_part;
3810                 }
3811
3812                 return $tags_deleted;
3813         }
3814
3815         function print_user_stylesheet($link) {
3816                 $value = get_pref($link, 'USER_STYLESHEET');
3817
3818                 if ($value) {
3819                         print "<style type=\"text/css\">";
3820                         print str_replace("<br/>", "\n", $value);
3821                         print "</style>";
3822                 }
3823
3824         }
3825
3826         function rewrite_urls($html) {
3827                 libxml_use_internal_errors(true);
3828
3829                 $charset_hack = '<head>
3830                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
3831                 </head>';
3832
3833                 $doc = new DOMDocument();
3834                 $doc->loadHTML($charset_hack . $html);
3835                 $xpath = new DOMXPath($doc);
3836
3837                 $entries = $xpath->query('//*/text()');
3838
3839                 foreach ($entries as $entry) {
3840                         if (strstr($entry->wholeText, "://") !== false) {
3841                                 $text = preg_replace("/((?<!=.)((http|https|ftp)+):\/\/[^ ,!]+)/i",
3842                                         "<a target=\"_blank\" href=\"\\1\">\\1</a>", $entry->wholeText);
3843
3844                                 if ($text != $entry->wholeText) {
3845                                         $cdoc = new DOMDocument();
3846                                         $cdoc->loadHTML($charset_hack . $text);
3847
3848
3849                                         foreach ($cdoc->childNodes as $cnode) {
3850                                                 $cnode = $doc->importNode($cnode, true);
3851
3852                                                 if ($cnode) {
3853                                                         $entry->parentNode->insertBefore($cnode);
3854                                                 }
3855                                         }
3856
3857                                         $entry->parentNode->removeChild($entry);
3858
3859                                 }
3860                         }
3861                 }
3862
3863                 $node = $doc->getElementsByTagName('body')->item(0);
3864
3865                 // http://tt-rss.org/forum/viewtopic.php?f=1&t=970
3866                 if ($node)
3867                         return $doc->saveXML($node);
3868                 else
3869                         return $html;
3870         }
3871
3872         function filter_to_sql($link, $filter, $owner_uid) {
3873                 $query = array();
3874
3875                 if (DB_TYPE == "pgsql")
3876                         $reg_qpart = "~";
3877                 else
3878                         $reg_qpart = "REGEXP";
3879
3880                 foreach ($filter["rules"] AS $rule) {
3881                         $regexp_valid = preg_match('/' . $rule['reg_exp'] . '/',
3882                                 $rule['reg_exp']) !== FALSE;
3883
3884                         if ($regexp_valid) {
3885
3886                                 $rule['reg_exp'] = db_escape_string($link, $rule['reg_exp']);
3887
3888                                         switch ($rule["type"]) {
3889                                         case "title":
3890                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
3891                                                         $rule['reg_exp'] . "')";
3892                                                 break;
3893                                         case "content":
3894                                                 $qpart = "LOWER(ttrss_entries.content) $reg_qpart LOWER('".
3895                                                         $rule['reg_exp'] . "')";
3896                                                 break;
3897                                         case "both":
3898                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
3899                                                         $rule['reg_exp'] . "') OR LOWER(" .
3900                                                         "ttrss_entries.content) $reg_qpart LOWER('" . $rule['reg_exp'] . "')";
3901                                                 break;
3902                                         case "tag":
3903                                                 $qpart = "LOWER(ttrss_user_entries.tag_cache) $reg_qpart LOWER('".
3904                                                         $rule['reg_exp'] . "')";
3905                                                 break;
3906                                         case "link":
3907                                                 $qpart = "LOWER(ttrss_entries.link) $reg_qpart LOWER('".
3908                                                         $rule['reg_exp'] . "')";
3909                                                 break;
3910                                         case "author":
3911                                                 $qpart = "LOWER(ttrss_entries.author) $reg_qpart LOWER('".
3912                                                         $rule['reg_exp'] . "')";
3913                                                 break;
3914                                 }
3915
3916                                 if (isset($rule['inverse'])) $qpart = "NOT ($qpart)";
3917
3918                                 if (isset($rule["feed_id"]) && $rule["feed_id"] > 0) {
3919                                         $qpart .= " AND feed_id = " . db_escape_string($link, $rule["feed_id"]);
3920                                 }
3921
3922                                 if (isset($rule["cat_id"])) {
3923
3924                                         if ($rule["cat_id"] > 0) {
3925                                                 $children = getChildCategories($link, $rule["cat_id"], $owner_uid);
3926                                                 array_push($children, $rule["cat_id"]);
3927
3928                                                 $children = join(",", $children);
3929
3930                                                 $cat_qpart = "cat_id IN ($children)";
3931                                         } else {
3932                                                 $cat_qpart = "cat_id IS NULL";
3933                                         }
3934
3935                                         $qpart .= " AND $cat_qpart";
3936                                 }
3937
3938                                 array_push($query, "($qpart)");
3939
3940                         }
3941                 }
3942
3943                 if (count($query) > 0) {
3944                         $fullquery = "(" . join($filter["match_any_rule"] ? "OR" : "AND", $query) . ")";
3945                 } else {
3946                         $fullquery = "(false)";
3947                 }
3948
3949                 if ($filter['inverse']) $fullquery = "(NOT $fullquery)";
3950
3951                 return $fullquery;
3952         }
3953
3954         if (!function_exists('gzdecode')) {
3955                 function gzdecode($string) { // no support for 2nd argument
3956                         return file_get_contents('compress.zlib://data:who/cares;base64,'.
3957                                 base64_encode($string));
3958                 }
3959         }
3960
3961         function get_random_bytes($length) {
3962                 if (function_exists('openssl_random_pseudo_bytes')) {
3963                         return openssl_random_pseudo_bytes($length);
3964                 } else {
3965                         $output = "";
3966
3967                         for ($i = 0; $i < $length; $i++)
3968                                 $output .= chr(mt_rand(0, 255));
3969
3970                         return $output;
3971                 }
3972         }
3973
3974         function read_stdin() {
3975                 $fp = fopen("php://stdin", "r");
3976
3977                 if ($fp) {
3978                         $line = trim(fgets($fp));
3979                         fclose($fp);
3980                         return $line;
3981                 }
3982
3983                 return null;
3984         }
3985
3986         function tmpdirname($path, $prefix) {
3987                 // Use PHP's tmpfile function to create a temporary
3988                 // directory name. Delete the file and keep the name.
3989                 $tempname = tempnam($path,$prefix);
3990                 if (!$tempname)
3991                         return false;
3992
3993                 if (!unlink($tempname))
3994                         return false;
3995
3996        return $tempname;
3997         }
3998
3999         function getFeedCategory($link, $feed) {
4000                 $result = db_query($link, "SELECT cat_id FROM ttrss_feeds
4001                         WHERE id = '$feed'");
4002
4003                 if (db_num_rows($result) > 0) {
4004                         return db_fetch_result($result, 0, "cat_id");
4005                 } else {
4006                         return false;
4007                 }
4008
4009         }
4010
4011         function implements_interface($class, $interface) {
4012                 return in_array($interface, class_implements($class));
4013         }
4014
4015         function geturl($url){
4016
4017                 (function_exists('curl_init')) ? '' : die('cURL Must be installed for geturl function to work. Ask your host to enable it or uncomment extension=php_curl.dll in php.ini');
4018
4019                 $curl = curl_init();
4020                 $header[0] = "Accept: text/xml,application/xml,application/xhtml+xml,";
4021                 $header[0] .= "text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5";
4022                 $header[] = "Cache-Control: max-age=0";
4023                 $header[] = "Connection: keep-alive";
4024                 $header[] = "Keep-Alive: 300";
4025                 $header[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
4026                 $header[] = "Accept-Language: en-us,en;q=0.5";
4027                 $header[] = "Pragma: ";
4028
4029                 curl_setopt($curl, CURLOPT_URL, $url);
4030                 curl_setopt($curl, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 5.1; rv:5.0) Gecko/20100101 Firefox/5.0 Firefox/5.0');
4031                 curl_setopt($curl, CURLOPT_HTTPHEADER, $header);
4032                 curl_setopt($curl, CURLOPT_HEADER, true);
4033                 curl_setopt($curl, CURLOPT_REFERER, $url);
4034                 curl_setopt($curl, CURLOPT_ENCODING, 'gzip,deflate');
4035                 curl_setopt($curl, CURLOPT_AUTOREFERER, true);
4036                 curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
4037                 //curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true); //CURLOPT_FOLLOWLOCATION Disabled...
4038                 curl_setopt($curl, CURLOPT_TIMEOUT, 60);
4039
4040                 $html = curl_exec($curl);
4041
4042                 $status = curl_getinfo($curl);
4043                 curl_close($curl);
4044
4045                 if($status['http_code']!=200){
4046                         if($status['http_code'] == 301 || $status['http_code'] == 302) {
4047                                 list($header) = explode("\r\n\r\n", $html, 2);
4048                                 $matches = array();
4049                                 preg_match("/(Location:|URI:)[^(\n)]*/", $header, $matches);
4050                                 $url = trim(str_replace($matches[1],"",$matches[0]));
4051                                 $url_parsed = parse_url($url);
4052                                 return (isset($url_parsed))? geturl($url, $referer):'';
4053                         }
4054                         $oline='';
4055                         foreach($status as $key=>$eline){$oline.='['.$key.']'.$eline.' ';}
4056                         $line =$oline." \r\n ".$url."\r\n-----------------\r\n";
4057 #                       $handle = @fopen('./curl.error.log', 'a');
4058 #                       fwrite($handle, $line);
4059                         return FALSE;
4060                 }
4061                 return $url;
4062         }
4063
4064         function get_minified_js($files) {
4065                 require_once 'lib/jshrink/Minifier.php';
4066
4067                 $rv = '';
4068
4069                 foreach ($files as $js) {
4070                         if (!isset($_GET['debug'])) {
4071                                 $cached_file = CACHE_DIR . "/js/$js.js";
4072
4073                                 if (file_exists($cached_file) &&
4074                                                 is_readable($cached_file) &&
4075                                                 filemtime($cached_file) >= filemtime("js/$js.js")) {
4076
4077                                         $rv .= file_get_contents($cached_file);
4078
4079                                 } else {
4080                                         $minified = JShrink\Minifier::minify(file_get_contents("js/$js.js"));
4081                                         file_put_contents($cached_file, $minified);
4082                                         $rv .= $minified;
4083                                 }
4084                         } else {
4085                                 $rv .= file_get_contents("js/$js.js");
4086                         }
4087                 }
4088
4089                 return $rv;
4090         }
4091
4092         function stylesheet_tag($filename) {
4093                 $timestamp = filemtime($filename);
4094
4095                 echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"$filename?$timestamp\"/>\n";
4096         }
4097
4098         function javascript_tag($filename) {
4099                 $query = "";
4100
4101                 if (!(strpos($filename, "?") === FALSE)) {
4102                         $query = substr($filename, strpos($filename, "?")+1);
4103                         $filename = substr($filename, 0, strpos($filename, "?"));
4104                 }
4105
4106                 $timestamp = filemtime($filename);
4107
4108                 if ($query) $timestamp .= "&$query";
4109
4110                 echo "<script type=\"text/javascript\" charset=\"utf-8\" src=\"$filename?$timestamp\"></script>\n";
4111         }
4112
4113         function calculate_dep_timestamp() {
4114                 $files = array_merge(glob("js/*.js"), glob("*.css"));
4115
4116                 $max_ts = -1;
4117
4118                 foreach ($files as $file) {
4119                         if (filemtime($file) > $max_ts) $max_ts = filemtime($file);
4120                 }
4121
4122                 return $max_ts;
4123         }
4124
4125         function T_js_decl($s1, $s2) {
4126                 if ($s1 && $s2) {
4127                         $s1 = preg_replace("/\n/", "", $s1);
4128                         $s2 = preg_replace("/\n/", "", $s2);
4129
4130                         $s1 = preg_replace("/\"/", "\\\"", $s1);
4131                         $s2 = preg_replace("/\"/", "\\\"", $s2);
4132
4133                         return "T_messages[\"$s1\"] = \"$s2\";\n";
4134                 }
4135         }
4136
4137         function init_js_translations() {
4138
4139         print 'var T_messages = new Object();
4140
4141                 function __(msg) {
4142                         if (T_messages[msg]) {
4143                                 return T_messages[msg];
4144                         } else {
4145                                 return msg;
4146                         }
4147                 }
4148
4149                 function ngettext(msg1, msg2, n) {
4150                         return (parseInt(n) > 1) ? msg2 : msg1;
4151                 }';
4152
4153                 $l10n = _get_reader();
4154
4155                 for ($i = 0; $i < $l10n->total; $i++) {
4156                         $orig = $l10n->get_original_string($i);
4157                         $translation = __($orig);
4158
4159                         print T_js_decl($orig, $translation);
4160                 }
4161         }
4162
4163         function label_to_feed_id($label) {
4164                 return LABEL_BASE_INDEX - 1 - abs($label);
4165         }
4166
4167         function feed_to_label_id($feed) {
4168                 return LABEL_BASE_INDEX - 1 + abs($feed);
4169         }
4170
4171 ?>