]> git.wh0rd.org Git - tt-rss.git/blob - include/functions.php
Merge branch 'master' of github.com:gothfox/Tiny-Tiny-RSS
[tt-rss.git] / include / functions.php
1 <?php
2         define('EXPECTED_CONFIG_VERSION', 26);
3         define('SCHEMA_VERSION', 123);
4
5         define('LABEL_BASE_INDEX', -1024);
6         define('PLUGIN_FEED_BASE_INDEX', -128);
7
8         define('COOKIE_LIFETIME_LONG', 86400*365);
9
10         $fetch_last_error = false;
11         $fetch_last_error_code = false;
12         $fetch_last_content_type = false;
13         $fetch_curl_used = false;
14         $suppress_debugging = false;
15
16         mb_internal_encoding("UTF-8");
17         date_default_timezone_set('UTC');
18         if (defined('E_DEPRECATED')) {
19                 error_reporting(E_ALL & ~E_NOTICE & ~E_DEPRECATED);
20         } else {
21                 error_reporting(E_ALL & ~E_NOTICE);
22         }
23
24         require_once 'config.php';
25
26         /**
27          * Define a constant if not already defined
28          *
29          * @param string $name The constant name.
30          * @param mixed $value The constant value.
31          * @access public
32          * @return boolean True if defined successfully or not.
33          */
34         function define_default($name, $value) {
35                 defined($name) or define($name, $value);
36         }
37
38         ///// Some defaults that you can override in config.php //////
39
40         define_default('FEED_FETCH_TIMEOUT', 45);
41         // How may seconds to wait for response when requesting feed from a site
42         define_default('FEED_FETCH_NO_CACHE_TIMEOUT', 15);
43         // How may seconds to wait for response when requesting feed from a
44         // site when that feed wasn't cached before
45         define_default('FILE_FETCH_TIMEOUT', 45);
46         // Default timeout when fetching files from remote sites
47         define_default('FILE_FETCH_CONNECT_TIMEOUT', 15);
48         // How many seconds to wait for initial response from website when
49         // fetching files from remote sites
50
51         if (DB_TYPE == "pgsql") {
52                 define('SUBSTRING_FOR_DATE', 'SUBSTRING_FOR_DATE');
53         } else {
54                 define('SUBSTRING_FOR_DATE', 'SUBSTRING');
55         }
56
57         /**
58          * Return available translations names.
59          *
60          * @access public
61          * @return array A array of available translations.
62          */
63         function get_translations() {
64                 $tr = array(
65                                         "auto"  => "Detect automatically",
66                                         "ca_CA" => "Català",
67                                         "cs_CZ" => "Česky",
68                                         "en_US" => "English",
69                                         "es_ES" => "Español",
70                                         "de_DE" => "Deutsch",
71                                         "fr_FR" => "Français",
72                                         "hu_HU" => "Magyar (Hungarian)",
73                                         "it_IT" => "Italiano",
74                                         "ja_JP" => "日本語 (Japanese)",
75                                         "lv_LV" => "Latviešu",
76                                         "nb_NO" => "Norwegian bokmål",
77                                         "nl_NL" => "Dutch",
78                                         "pl_PL" => "Polski",
79                                         "ru_RU" => "Русский",
80                                         "pt_BR" => "Portuguese/Brazil",
81                                         "zh_CN" => "Simplified Chinese",
82                                         "sv_SE" => "Svenska",
83                                         "fi_FI" => "Suomi");
84
85                 return $tr;
86         }
87
88         require_once "lib/accept-to-gettext.php";
89         require_once "lib/gettext/gettext.inc";
90
91         require_once "lib/languagedetect/LanguageDetect.php";
92
93         function startup_gettext() {
94
95                 # Get locale from Accept-Language header
96                 $lang = al2gt(array_keys(get_translations()), "text/html");
97
98                 if (defined('_TRANSLATION_OVERRIDE_DEFAULT')) {
99                         $lang = _TRANSLATION_OVERRIDE_DEFAULT;
100                 }
101
102                 if ($_SESSION["uid"] && get_schema_version() >= 120) {
103                         $pref_lang = get_pref("USER_LANGUAGE", $_SESSION["uid"]);
104
105                         if ($pref_lang && $pref_lang != 'auto') {
106                                 $lang = $pref_lang;
107                         }
108                 }
109
110                 if ($lang) {
111                         if (defined('LC_MESSAGES')) {
112                                 _setlocale(LC_MESSAGES, $lang);
113                         } else if (defined('LC_ALL')) {
114                                 _setlocale(LC_ALL, $lang);
115                         }
116
117                         _bindtextdomain("messages", "locale");
118
119                         _textdomain("messages");
120                         _bind_textdomain_codeset("messages", "UTF-8");
121                 }
122         }
123
124         require_once 'db-prefs.php';
125         require_once 'version.php';
126         require_once 'ccache.php';
127         require_once 'labels.php';
128
129         define('SELF_USER_AGENT', 'Tiny Tiny RSS/' . VERSION . ' (http://tt-rss.org/)');
130         ini_set('user_agent', SELF_USER_AGENT);
131
132         require_once 'lib/pubsubhubbub/publisher.php';
133
134         $schema_version = false;
135
136         function _debug_suppress($suppress) {
137                 global $suppress_debugging;
138
139                 $suppress_debugging = $suppress;
140         }
141
142         /**
143          * Print a timestamped debug message.
144          *
145          * @param string $msg The debug message.
146          * @return void
147          */
148         function _debug($msg, $show = true) {
149                 global $suppress_debugging;
150
151                 //echo "[$suppress_debugging] $msg $show\n";
152
153                 if ($suppress_debugging) return false;
154
155                 $ts = strftime("%H:%M:%S", time());
156                 if (function_exists('posix_getpid')) {
157                         $ts = "$ts/" . posix_getpid();
158                 }
159
160                 if ($show && !(defined('QUIET') && QUIET)) {
161                         print "[$ts] $msg\n";
162                 }
163
164                 if (defined('LOGFILE'))  {
165                         $fp = fopen(LOGFILE, 'a+');
166
167                         if ($fp) {
168                                 $locked = false;
169
170                                 if (function_exists("flock")) {
171                                         $tries = 0;
172
173                                         // try to lock logfile for writing
174                                         while ($tries < 5 && !$locked = flock($fp, LOCK_EX | LOCK_NB)) {
175                                                 sleep(1);
176                                                 ++$tries;
177                                         }
178
179                                         if (!$locked) {
180                                                 fclose($fp);
181                                                 return;
182                                         }
183                                 }
184
185                                 fputs($fp, "[$ts] $msg\n");
186
187                                 if (function_exists("flock")) {
188                                         flock($fp, LOCK_UN);
189                                 }
190
191                                 fclose($fp);
192                         }
193                 }
194
195         } // function _debug
196
197         /**
198          * Purge a feed old posts.
199          *
200          * @param mixed $link A database connection.
201          * @param mixed $feed_id The id of the purged feed.
202          * @param mixed $purge_interval Olderness of purged posts.
203          * @param boolean $debug Set to True to enable the debug. False by default.
204          * @access public
205          * @return void
206          */
207         function purge_feed($feed_id, $purge_interval, $debug = false) {
208
209                 if (!$purge_interval) $purge_interval = feed_purge_interval($feed_id);
210
211                 $rows = -1;
212
213                 $result = db_query(
214                         "SELECT owner_uid FROM ttrss_feeds WHERE id = '$feed_id'");
215
216                 $owner_uid = false;
217
218                 if (db_num_rows($result) == 1) {
219                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
220                 }
221
222                 if ($purge_interval == -1 || !$purge_interval) {
223                         if ($owner_uid) {
224                                 ccache_update($feed_id, $owner_uid);
225                         }
226                         return;
227                 }
228
229                 if (!$owner_uid) return;
230
231                 if (FORCE_ARTICLE_PURGE == 0) {
232                         $purge_unread = get_pref("PURGE_UNREAD_ARTICLES",
233                                 $owner_uid, false);
234                 } else {
235                         $purge_unread = true;
236                         $purge_interval = FORCE_ARTICLE_PURGE;
237                 }
238
239                 if (!$purge_unread) $query_limit = " unread = false AND ";
240
241                 if (DB_TYPE == "pgsql") {
242                         $pg_version = get_pgsql_version();
243
244                         if (preg_match("/^7\./", $pg_version) || preg_match("/^8\.0/", $pg_version)) {
245
246                                 $result = db_query("DELETE FROM ttrss_user_entries WHERE
247                                         ttrss_entries.id = ref_id AND
248                                         marked = false AND
249                                         feed_id = '$feed_id' AND
250                                         $query_limit
251                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
252
253                         } else {
254
255                                 $result = db_query("DELETE FROM ttrss_user_entries
256                                         USING ttrss_entries
257                                         WHERE ttrss_entries.id = ref_id AND
258                                         marked = false AND
259                                         feed_id = '$feed_id' AND
260                                         $query_limit
261                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
262                         }
263
264                 } else {
265
266 /*                      $result = db_query("DELETE FROM ttrss_user_entries WHERE
267                                 marked = false AND feed_id = '$feed_id' AND
268                                 (SELECT date_updated FROM ttrss_entries WHERE
269                                         id = ref_id) < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)"); */
270
271                         $result = db_query("DELETE FROM ttrss_user_entries
272                                 USING ttrss_user_entries, ttrss_entries
273                                 WHERE ttrss_entries.id = ref_id AND
274                                 marked = false AND
275                                 feed_id = '$feed_id' AND
276                                 $query_limit
277                                 ttrss_entries.date_updated < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)");
278                 }
279
280                 $rows = db_affected_rows($result);
281
282                 ccache_update($feed_id, $owner_uid);
283
284                 if ($debug) {
285                         _debug("Purged feed $feed_id ($purge_interval): deleted $rows articles");
286                 }
287
288                 return $rows;
289         } // function purge_feed
290
291         function feed_purge_interval($feed_id) {
292
293                 $result = db_query("SELECT purge_interval, owner_uid FROM ttrss_feeds
294                         WHERE id = '$feed_id'");
295
296                 if (db_num_rows($result) == 1) {
297                         $purge_interval = db_fetch_result($result, 0, "purge_interval");
298                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
299
300                         if ($purge_interval == 0) $purge_interval = get_pref(
301                                 'PURGE_OLD_DAYS', $owner_uid);
302
303                         return $purge_interval;
304
305                 } else {
306                         return -1;
307                 }
308         }
309
310         function purge_orphans($do_output = false) {
311
312                 // purge orphaned posts in main content table
313                 $result = db_query("DELETE FROM ttrss_entries WHERE
314                         (SELECT COUNT(int_id) FROM ttrss_user_entries WHERE ref_id = id) = 0");
315
316                 if ($do_output) {
317                         $rows = db_affected_rows($result);
318                         _debug("Purged $rows orphaned posts.");
319                 }
320         }
321
322         function get_feed_update_interval($feed_id) {
323                 $result = db_query("SELECT owner_uid, update_interval FROM
324                         ttrss_feeds WHERE id = '$feed_id'");
325
326                 if (db_num_rows($result) == 1) {
327                         $update_interval = db_fetch_result($result, 0, "update_interval");
328                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
329
330                         if ($update_interval != 0) {
331                                 return $update_interval;
332                         } else {
333                                 return get_pref('DEFAULT_UPDATE_INTERVAL', $owner_uid, false);
334                         }
335
336                 } else {
337                         return -1;
338                 }
339         }
340
341         function fetch_file_contents($url, $type = false, $login = false, $pass = false, $post_query = false, $timeout = false, $timestamp = 0) {
342
343                 global $fetch_last_error;
344                 global $fetch_last_error_code;
345                 global $fetch_last_content_type;
346                 global $fetch_curl_used;
347
348                 $url = str_replace(' ', '%20', $url);
349
350                 if (!defined('NO_CURL') && function_exists('curl_init')) {
351
352                         $fetch_curl_used = true;
353
354                         if (ini_get("safe_mode") || ini_get("open_basedir")) {
355                                 $new_url = geturl($url);
356                                 if (!$new_url) {
357                                     // geturl has already populated $fetch_last_error
358                                     return false;
359                                 }
360                                 $ch = curl_init($new_url);
361                         } else {
362                                 $ch = curl_init($url);
363                         }
364
365                         if ($timestamp && !$post_query) {
366                                 curl_setopt($ch, CURLOPT_HTTPHEADER,
367                                         array("If-Modified-Since: ".gmdate('D, d M Y H:i:s \G\M\T', $timestamp)));
368                         }
369
370                         curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, $timeout ? $timeout : FILE_FETCH_CONNECT_TIMEOUT);
371                         curl_setopt($ch, CURLOPT_TIMEOUT, $timeout ? $timeout : FILE_FETCH_TIMEOUT);
372                         curl_setopt($ch, CURLOPT_FOLLOWLOCATION, !ini_get("safe_mode") && !ini_get("open_basedir"));
373                         curl_setopt($ch, CURLOPT_MAXREDIRS, 20);
374                         curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
375                         curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
376                         curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
377                         curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_ANY);
378                         curl_setopt($ch, CURLOPT_USERAGENT, SELF_USER_AGENT);
379                         curl_setopt($ch, CURLOPT_ENCODING, "");
380                         curl_setopt($ch, CURLOPT_REFERER, $url);
381                         curl_setopt($ch, CURLOPT_COOKIEJAR, "/dev/null");
382
383                         if (defined('_CURL_HTTP_PROXY')) {
384                                 curl_setopt($ch, CURLOPT_PROXY, _CURL_HTTP_PROXY);
385                         }
386
387                         if ($post_query) {
388                                 curl_setopt($ch, CURLOPT_POST, true);
389                                 curl_setopt($ch, CURLOPT_POSTFIELDS, $post_query);
390                         }
391
392                         if ((OPENSSL_VERSION_NUMBER >= 0x0090808f) && (OPENSSL_VERSION_NUMBER < 0x10000000)) {
393                                 curl_setopt($ch, CURLOPT_SSLVERSION, 3);
394                         }
395
396                         if ($login && $pass)
397                                 curl_setopt($ch, CURLOPT_USERPWD, "$login:$pass");
398
399                         $contents = @curl_exec($ch);
400
401                         if (curl_errno($ch) === 23 || curl_errno($ch) === 61) {
402                                 curl_setopt($ch, CURLOPT_ENCODING, 'none');
403                                 $contents = @curl_exec($ch);
404                         }
405
406                         if ($contents === false) {
407                                 $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
408                                 curl_close($ch);
409                                 return false;
410                         }
411
412                         $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
413                         $fetch_last_content_type = curl_getinfo($ch, CURLINFO_CONTENT_TYPE);
414
415                         $fetch_last_error_code = $http_code;
416
417                         if ($http_code != 200 || $type && strpos($fetch_last_content_type, "$type") === false) {
418                                 if (curl_errno($ch) != 0) {
419                                         $fetch_last_error = curl_errno($ch) . " " . curl_error($ch);
420                                 } else {
421                                         $fetch_last_error = "HTTP Code: $http_code";
422                                 }
423                                 curl_close($ch);
424                                 return false;
425                         }
426
427                         curl_close($ch);
428
429                         return $contents;
430                 } else {
431
432                         $fetch_curl_used = false;
433
434                         if ($login && $pass){
435                                 $url_parts = array();
436
437                                 preg_match("/(^[^:]*):\/\/(.*)/", $url, $url_parts);
438
439                                 $pass = urlencode($pass);
440
441                                 if ($url_parts[1] && $url_parts[2]) {
442                                         $url = $url_parts[1] . "://$login:$pass@" . $url_parts[2];
443                                 }
444                         }
445
446                         if (!$post_query && $timestamp) {
447                                 $context = stream_context_create(array(
448                                         'http' => array(
449                                                 'method' => 'GET',
450                                                 'header' => "If-Modified-Since: ".gmdate("D, d M Y H:i:s \\G\\M\\T\r\n", $timestamp)
451                                         )));
452                         } else {
453                                 $context = NULL;
454                         }
455
456                         $old_error = error_get_last();
457
458                         $data = @file_get_contents($url, false, $context);
459
460                         $fetch_last_content_type = false;  // reset if no type was sent from server
461                         if (isset($http_response_header) && is_array($http_response_header)) {
462                                 foreach ($http_response_header as $h) {
463                                         if (substr(strtolower($h), 0, 13) == 'content-type:') {
464                                                 $fetch_last_content_type = substr($h, 14);
465                                                 // don't abort here b/c there might be more than one
466                                                 // e.g. if we were being redirected -- last one is the right one
467                                         }
468
469                                         if (substr(strtolower($h), 0, 7) == 'http/1.') {
470                                                 $fetch_last_error_code = (int) substr($h, 9, 3);
471                                         }
472                                 }
473                         }
474
475                         if (!$data) {
476                                 $error = error_get_last();
477
478                                 if ($error['message'] != $old_error['message']) {
479                                         $fetch_last_error = $error["message"];
480                                 } else {
481                                         $fetch_last_error = "HTTP Code: $fetch_last_error_code";
482                                 }
483                         }
484                         return $data;
485                 }
486
487         }
488
489         /**
490          * Try to determine the favicon URL for a feed.
491          * adapted from wordpress favicon plugin by Jeff Minard (http://thecodepro.com/)
492          * http://dev.wp-plugins.org/file/favatars/trunk/favatars.php
493          *
494          * @param string $url A feed or page URL
495          * @access public
496          * @return mixed The favicon URL, or false if none was found.
497          */
498         function get_favicon_url($url) {
499
500                 $favicon_url = false;
501
502                 if ($html = @fetch_file_contents($url)) {
503
504                         libxml_use_internal_errors(true);
505
506                         $doc = new DOMDocument();
507                         $doc->loadHTML($html);
508                         $xpath = new DOMXPath($doc);
509
510                         $base = $xpath->query('/html/head/base');
511                         foreach ($base as $b) {
512                                 $url = $b->getAttribute("href");
513                                 break;
514                         }
515
516                         $entries = $xpath->query('/html/head/link[@rel="shortcut icon" or @rel="icon"]');
517                         if (count($entries) > 0) {
518                                 foreach ($entries as $entry) {
519                                         $favicon_url = rewrite_relative_url($url, $entry->getAttribute("href"));
520                                         break;
521                                 }
522                         }
523                 }
524
525                 if (!$favicon_url)
526                         $favicon_url = rewrite_relative_url($url, "/favicon.ico");
527
528                 return $favicon_url;
529         } // function get_favicon_url
530
531         function check_feed_favicon($site_url, $feed) {
532 #               print "FAVICON [$site_url]: $favicon_url\n";
533
534                 $icon_file = ICONS_DIR . "/$feed.ico";
535
536                 if (!file_exists($icon_file)) {
537                         $favicon_url = get_favicon_url($site_url);
538
539                         if ($favicon_url) {
540                                 // Limiting to "image" type misses those served with text/plain
541                                 $contents = fetch_file_contents($favicon_url); // , "image");
542
543                                 if ($contents) {
544                                         // Crude image type matching.
545                                         // Patterns gleaned from the file(1) source code.
546                                         if (preg_match('/^\x00\x00\x01\x00/', $contents)) {
547                                                 // 0       string  \000\000\001\000        MS Windows icon resource
548                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa MS Windows icon resource");
549                                         }
550                                         elseif (preg_match('/^GIF8/', $contents)) {
551                                                 // 0       string          GIF8            GIF image data
552                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa GIF image");
553                                         }
554                                         elseif (preg_match('/^\x89PNG\x0d\x0a\x1a\x0a/', $contents)) {
555                                                 // 0       string          \x89PNG\x0d\x0a\x1a\x0a         PNG image data
556                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa PNG image");
557                                         }
558                                         elseif (preg_match('/^\xff\xd8/', $contents)) {
559                                                 // 0       beshort         0xffd8          JPEG image data
560                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa JPG image");
561                                         }
562                                         else {
563                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa UNKNOWN type");
564                                                 $contents = "";
565                                         }
566                                 }
567
568                                 if ($contents) {
569                                         $fp = @fopen($icon_file, "w");
570
571                                         if ($fp) {
572                                                 fwrite($fp, $contents);
573                                                 fclose($fp);
574                                                 chmod($icon_file, 0644);
575                                         }
576                                 }
577                         }
578             return $icon_file;
579                 }
580         }
581
582         function print_select($id, $default, $values, $attributes = "") {
583                 print "<select name=\"$id\" id=\"$id\" $attributes>";
584                 foreach ($values as $v) {
585                         if ($v == $default)
586                                 $sel = "selected=\"1\"";
587                          else
588                                 $sel = "";
589
590                         $v = trim($v);
591
592                         print "<option value=\"$v\" $sel>$v</option>";
593                 }
594                 print "</select>";
595         }
596
597         function print_select_hash($id, $default, $values, $attributes = "") {
598                 print "<select name=\"$id\" id='$id' $attributes>";
599                 foreach (array_keys($values) as $v) {
600                         if ($v == $default)
601                                 $sel = 'selected="selected"';
602                          else
603                                 $sel = "";
604
605                         $v = trim($v);
606
607                         print "<option $sel value=\"$v\">".$values[$v]."</option>";
608                 }
609
610                 print "</select>";
611         }
612
613         function print_radio($id, $default, $true_is, $values, $attributes = "") {
614                 foreach ($values as $v) {
615
616                         if ($v == $default)
617                                 $sel = "checked";
618                          else
619                                 $sel = "";
620
621                         if ($v == $true_is) {
622                                 $sel .= " value=\"1\"";
623                         } else {
624                                 $sel .= " value=\"0\"";
625                         }
626
627                         print "<input class=\"noborder\" dojoType=\"dijit.form.RadioButton\"
628                                 type=\"radio\" $sel $attributes name=\"$id\">&nbsp;$v&nbsp;";
629
630                 }
631         }
632
633         function initialize_user_prefs($uid, $profile = false) {
634
635                 $uid = db_escape_string($uid);
636
637                 if (!$profile) {
638                         $profile = "NULL";
639                         $profile_qpart = "AND profile IS NULL";
640                 } else {
641                         $profile_qpart = "AND profile = '$profile'";
642                 }
643
644                 if (get_schema_version() < 63) $profile_qpart = "";
645
646                 db_query("BEGIN");
647
648                 $result = db_query("SELECT pref_name,def_value FROM ttrss_prefs");
649
650                 $u_result = db_query("SELECT pref_name
651                         FROM ttrss_user_prefs WHERE owner_uid = '$uid' $profile_qpart");
652
653                 $active_prefs = array();
654
655                 while ($line = db_fetch_assoc($u_result)) {
656                         array_push($active_prefs, $line["pref_name"]);
657                 }
658
659                 while ($line = db_fetch_assoc($result)) {
660                         if (array_search($line["pref_name"], $active_prefs) === FALSE) {
661 //                              print "adding " . $line["pref_name"] . "<br>";
662
663                                 $line["def_value"] = db_escape_string($line["def_value"]);
664                                 $line["pref_name"] = db_escape_string($line["pref_name"]);
665
666                                 if (get_schema_version() < 63) {
667                                         db_query("INSERT INTO ttrss_user_prefs
668                                                 (owner_uid,pref_name,value) VALUES
669                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."')");
670
671                                 } else {
672                                         db_query("INSERT INTO ttrss_user_prefs
673                                                 (owner_uid,pref_name,value, profile) VALUES
674                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."', $profile)");
675                                 }
676
677                         }
678                 }
679
680                 db_query("COMMIT");
681
682         }
683
684         function get_ssl_certificate_id() {
685                 if ($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"]) {
686                         return sha1($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"] .
687                                 $_SERVER["REDIRECT_SSL_CLIENT_V_START"] .
688                                 $_SERVER["REDIRECT_SSL_CLIENT_V_END"] .
689                                 $_SERVER["REDIRECT_SSL_CLIENT_S_DN"]);
690                 }
691                 return "";
692         }
693
694         function authenticate_user($login, $password, $check_only = false) {
695
696                 if (!SINGLE_USER_MODE) {
697                         $user_id = false;
698
699                         foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_AUTH_USER) as $plugin) {
700
701                                 $user_id = (int) $plugin->authenticate($login, $password);
702
703                                 if ($user_id) {
704                                         $_SESSION["auth_module"] = strtolower(get_class($plugin));
705                                         break;
706                                 }
707                         }
708
709                         if ($user_id && !$check_only) {
710                                 @session_start();
711
712                                 $_SESSION["uid"] = $user_id;
713                                 $_SESSION["version"] = VERSION_STATIC;
714
715                                 $result = db_query("SELECT login,access_level,pwd_hash FROM ttrss_users
716                                         WHERE id = '$user_id'");
717
718                                 $_SESSION["name"] = db_fetch_result($result, 0, "login");
719                                 $_SESSION["access_level"] = db_fetch_result($result, 0, "access_level");
720                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
721
722                                 db_query("UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
723                                         $_SESSION["uid"]);
724
725                                 $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
726                                 $_SESSION["user_agent"] = sha1($_SERVER['HTTP_USER_AGENT']);
727                                 $_SESSION["pwd_hash"] = db_fetch_result($result, 0, "pwd_hash");
728
729                                 $_SESSION["last_version_check"] = time();
730
731                                 initialize_user_prefs($_SESSION["uid"]);
732
733                                 return true;
734                         }
735
736                         return false;
737
738                 } else {
739
740                         $_SESSION["uid"] = 1;
741                         $_SESSION["name"] = "admin";
742                         $_SESSION["access_level"] = 10;
743
744                         $_SESSION["hide_hello"] = true;
745                         $_SESSION["hide_logout"] = true;
746
747                         $_SESSION["auth_module"] = false;
748
749                         if (!$_SESSION["csrf_token"]) {
750                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
751                         }
752
753                         $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
754
755                         initialize_user_prefs($_SESSION["uid"]);
756
757                         return true;
758                 }
759         }
760
761         function make_password($length = 8) {
762
763                 $password = "";
764                 $possible = "0123456789abcdfghjkmnpqrstvwxyzABCDFGHJKMNPQRSTVWXYZ";
765
766         $i = 0;
767
768                 while ($i < $length) {
769                         $char = substr($possible, mt_rand(0, strlen($possible)-1), 1);
770
771                         if (!strstr($password, $char)) {
772                                 $password .= $char;
773                                 $i++;
774                         }
775                 }
776                 return $password;
777         }
778
779         // this is called after user is created to initialize default feeds, labels
780         // or whatever else
781
782         // user preferences are checked on every login, not here
783
784         function initialize_user($uid) {
785
786                 db_query("insert into ttrss_feeds (owner_uid,title,feed_url)
787                         values ('$uid', 'Tiny Tiny RSS: New Releases',
788                         'http://tt-rss.org/releases.rss')");
789
790                 db_query("insert into ttrss_feeds (owner_uid,title,feed_url)
791                         values ('$uid', 'Tiny Tiny RSS: Forum',
792                                 'http://tt-rss.org/forum/rss.php')");
793         }
794
795         function logout_user() {
796                 session_destroy();
797                 if (isset($_COOKIE[session_name()])) {
798                    setcookie(session_name(), '', time()-42000, '/');
799                 }
800         }
801
802         function validate_csrf($csrf_token) {
803                 return $csrf_token == $_SESSION['csrf_token'];
804         }
805
806         function load_user_plugins($owner_uid) {
807                 if ($owner_uid && SCHEMA_VERSION >= 100) {
808                         $plugins = get_pref("_ENABLED_PLUGINS", $owner_uid);
809
810                         PluginHost::getInstance()->load($plugins, PluginHost::KIND_USER, $owner_uid);
811
812                         if (get_schema_version() > 100) {
813                                 PluginHost::getInstance()->load_data();
814                         }
815                 }
816         }
817
818         function login_sequence() {
819                 if (SINGLE_USER_MODE) {
820                         @session_start();
821                         authenticate_user("admin", null);
822                         load_user_plugins($_SESSION["uid"]);
823                 } else {
824                         if (!validate_session()) $_SESSION["uid"] = false;
825
826                         if (!$_SESSION["uid"]) {
827
828                                 if (AUTH_AUTO_LOGIN && authenticate_user(null, null)) {
829                                     $_SESSION["ref_schema_version"] = get_schema_version(true);
830                                 } else {
831                                          authenticate_user(null, null, true);
832                                 }
833
834                                 if (!$_SESSION["uid"]) {
835                                         @session_destroy();
836                                         setcookie(session_name(), '', time()-42000, '/');
837
838                                         render_login_form();
839                                         exit;
840                                 }
841
842                         } else {
843                                 /* bump login timestamp */
844                                 db_query("UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
845                                         $_SESSION["uid"]);
846                                 $_SESSION["last_login_update"] = time();
847                         }
848
849                         if ($_SESSION["uid"]) {
850                                 startup_gettext();
851                                 load_user_plugins($_SESSION["uid"]);
852
853                                 /* cleanup ccache */
854
855                                 db_query("DELETE FROM ttrss_counters_cache WHERE owner_uid = ".
856                                         $_SESSION["uid"] . " AND
857                                                 (SELECT COUNT(id) FROM ttrss_feeds WHERE
858                                                         ttrss_feeds.id = feed_id) = 0");
859
860                                 db_query("DELETE FROM ttrss_cat_counters_cache WHERE owner_uid = ".
861                                         $_SESSION["uid"] . " AND
862                                                 (SELECT COUNT(id) FROM ttrss_feed_categories WHERE
863                                                         ttrss_feed_categories.id = feed_id) = 0");
864
865                         }
866
867                 }
868         }
869
870         function truncate_string($str, $max_len, $suffix = '&hellip;') {
871                 if (mb_strlen($str, "utf-8") > $max_len - 3) {
872                         return mb_substr($str, 0, $max_len, "utf-8") . $suffix;
873                 } else {
874                         return $str;
875                 }
876         }
877
878         function convert_timestamp($timestamp, $source_tz, $dest_tz) {
879
880                 try {
881                         $source_tz = new DateTimeZone($source_tz);
882                 } catch (Exception $e) {
883                         $source_tz = new DateTimeZone('UTC');
884                 }
885
886                 try {
887                         $dest_tz = new DateTimeZone($dest_tz);
888                 } catch (Exception $e) {
889                         $dest_tz = new DateTimeZone('UTC');
890                 }
891
892                 $dt = new DateTime(date('Y-m-d H:i:s', $timestamp), $source_tz);
893                 return $dt->format('U') + $dest_tz->getOffset($dt);
894         }
895
896         function make_local_datetime($timestamp, $long, $owner_uid = false,
897                                         $no_smart_dt = false) {
898
899                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
900                 if (!$timestamp) $timestamp = '1970-01-01 0:00';
901
902                 global $utc_tz;
903                 global $user_tz;
904
905                 if (!$utc_tz) $utc_tz = new DateTimeZone('UTC');
906
907                 $timestamp = substr($timestamp, 0, 19);
908
909                 # We store date in UTC internally
910                 $dt = new DateTime($timestamp, $utc_tz);
911
912                 $user_tz_string = get_pref('USER_TIMEZONE', $owner_uid);
913
914                 if ($user_tz_string != 'Automatic') {
915
916                         try {
917                                 if (!$user_tz) $user_tz = new DateTimeZone($user_tz_string);
918                         } catch (Exception $e) {
919                                 $user_tz = $utc_tz;
920                         }
921
922                         $tz_offset = $user_tz->getOffset($dt);
923                 } else {
924                         $tz_offset = (int) -$_SESSION["clientTzOffset"];
925                 }
926
927                 $user_timestamp = $dt->format('U') + $tz_offset;
928
929                 if (!$no_smart_dt) {
930                         return smart_date_time($user_timestamp,
931                                 $tz_offset, $owner_uid);
932                 } else {
933                         if ($long)
934                                 $format = get_pref('LONG_DATE_FORMAT', $owner_uid);
935                         else
936                                 $format = get_pref('SHORT_DATE_FORMAT', $owner_uid);
937
938                         return date($format, $user_timestamp);
939                 }
940         }
941
942         function smart_date_time($timestamp, $tz_offset = 0, $owner_uid = false) {
943                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
944
945                 if (date("Y.m.d", $timestamp) == date("Y.m.d", time() + $tz_offset)) {
946                         return date("G:i", $timestamp);
947                 } else if (date("Y", $timestamp) == date("Y", time() + $tz_offset)) {
948                         $format = get_pref('SHORT_DATE_FORMAT', $owner_uid);
949                         return date($format, $timestamp);
950                 } else {
951                         $format = get_pref('LONG_DATE_FORMAT', $owner_uid);
952                         return date($format, $timestamp);
953                 }
954         }
955
956         function sql_bool_to_bool($s) {
957                 if ($s == "t" || $s == "1" || strtolower($s) == "true") {
958                         return true;
959                 } else {
960                         return false;
961                 }
962         }
963
964         function bool_to_sql_bool($s) {
965                 if ($s) {
966                         return "true";
967                 } else {
968                         return "false";
969                 }
970         }
971
972         // Session caching removed due to causing wrong redirects to upgrade
973         // script when get_schema_version() is called on an obsolete session
974         // created on a previous schema version.
975         function get_schema_version($nocache = false) {
976                 global $schema_version;
977
978                 if (!$schema_version && !$nocache) {
979                         $result = db_query("SELECT schema_version FROM ttrss_version");
980                         $version = db_fetch_result($result, 0, "schema_version");
981                         $schema_version = $version;
982                         return $version;
983                 } else {
984                         return $schema_version;
985                 }
986         }
987
988         function sanity_check() {
989                 require_once 'errors.php';
990
991                 $error_code = 0;
992                 $schema_version = get_schema_version(true);
993
994                 if ($schema_version != SCHEMA_VERSION) {
995                         $error_code = 5;
996                 }
997
998                 if (DB_TYPE == "mysql") {
999                         $result = db_query("SELECT true", false);
1000                         if (db_num_rows($result) != 1) {
1001                                 $error_code = 10;
1002                         }
1003                 }
1004
1005                 if (db_escape_string("testTEST") != "testTEST") {
1006                         $error_code = 12;
1007                 }
1008
1009                 return array("code" => $error_code, "message" => $ERRORS[$error_code]);
1010         }
1011
1012         function file_is_locked($filename) {
1013                 if (file_exists(LOCK_DIRECTORY . "/$filename")) {
1014                         if (function_exists('flock')) {
1015                                 $fp = @fopen(LOCK_DIRECTORY . "/$filename", "r");
1016                                 if ($fp) {
1017                                         if (flock($fp, LOCK_EX | LOCK_NB)) {
1018                                                 flock($fp, LOCK_UN);
1019                                                 fclose($fp);
1020                                                 return false;
1021                                         }
1022                                         fclose($fp);
1023                                         return true;
1024                                 } else {
1025                                         return false;
1026                                 }
1027                         }
1028                         return true; // consider the file always locked and skip the test
1029                 } else {
1030                         return false;
1031                 }
1032         }
1033
1034
1035         function make_lockfile($filename) {
1036                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
1037
1038                 if ($fp && flock($fp, LOCK_EX | LOCK_NB)) {
1039                         $stat_h = fstat($fp);
1040                         $stat_f = stat(LOCK_DIRECTORY . "/$filename");
1041
1042                         if (strtoupper(substr(PHP_OS, 0, 3)) !== 'WIN') {
1043                                 if ($stat_h["ino"] != $stat_f["ino"] ||
1044                                                 $stat_h["dev"] != $stat_f["dev"]) {
1045
1046                                         return false;
1047                                 }
1048                         }
1049
1050                         if (function_exists('posix_getpid')) {
1051                                 fwrite($fp, posix_getpid() . "\n");
1052                         }
1053                         return $fp;
1054                 } else {
1055                         return false;
1056                 }
1057         }
1058
1059         function make_stampfile($filename) {
1060                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
1061
1062                 if (flock($fp, LOCK_EX | LOCK_NB)) {
1063                         fwrite($fp, time() . "\n");
1064                         flock($fp, LOCK_UN);
1065                         fclose($fp);
1066                         return true;
1067                 } else {
1068                         return false;
1069                 }
1070         }
1071
1072         function sql_random_function() {
1073                 if (DB_TYPE == "mysql") {
1074                         return "RAND()";
1075                 } else {
1076                         return "RANDOM()";
1077                 }
1078         }
1079
1080         function catchup_feed($feed, $cat_view, $owner_uid = false, $max_id = false, $mode = 'all') {
1081
1082                         if (!$owner_uid) $owner_uid = $_SESSION['uid'];
1083
1084                         //if (preg_match("/^-?[0-9][0-9]*$/", $feed) != false) {
1085
1086                         // Todo: all this interval stuff needs some generic generator function
1087
1088                         $date_qpart = "false";
1089
1090                         switch ($mode) {
1091                         case "1day":
1092                                 if (DB_TYPE == "pgsql") {
1093                                         $date_qpart = "date_entered < NOW() - INTERVAL '1 day' ";
1094                                 } else {
1095                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 1 DAY) ";
1096                                 }
1097                                 break;
1098                         case "1week":
1099                                 if (DB_TYPE == "pgsql") {
1100                                         $date_qpart = "date_entered < NOW() - INTERVAL '1 week' ";
1101                                 } else {
1102                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 1 WEEK) ";
1103                                 }
1104                                 break;
1105                         case "2week":
1106                                 if (DB_TYPE == "pgsql") {
1107                                         $date_qpart = "date_entered < NOW() - INTERVAL '2 week' ";
1108                                 } else {
1109                                         $date_qpart = "date_entered < DATE_SUB(NOW(), INTERVAL 2 WEEK) ";
1110                                 }
1111                                 break;
1112                         default:
1113                                 $date_qpart = "true";
1114                         }
1115
1116                         if (is_numeric($feed)) {
1117                                 if ($cat_view) {
1118
1119                                         if ($feed >= 0) {
1120
1121                                                 if ($feed > 0) {
1122                                                         $children = getChildCategories($feed, $owner_uid);
1123                                                         array_push($children, $feed);
1124
1125                                                         $children = join(",", $children);
1126
1127                                                         $cat_qpart = "cat_id IN ($children)";
1128                                                 } else {
1129                                                         $cat_qpart = "cat_id IS NULL";
1130                                                 }
1131
1132                                                 db_query("UPDATE ttrss_user_entries
1133                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1134                                                                 (SELECT id FROM
1135                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1136                                                                                 AND owner_uid = $owner_uid AND unread = true AND feed_id IN
1137                                                                                         (SELECT id FROM ttrss_feeds WHERE $cat_qpart) AND $date_qpart) as tmp)");
1138
1139                                         } else if ($feed == -2) {
1140
1141                                                 db_query("UPDATE ttrss_user_entries
1142                                                         SET unread = false,last_read = NOW() WHERE (SELECT COUNT(*)
1143                                                                 FROM ttrss_user_labels2 WHERE article_id = ref_id) > 0
1144                                                                 AND unread = true AND $date_qpart AND owner_uid = $owner_uid");
1145                                         }
1146
1147                                 } else if ($feed > 0) {
1148
1149                                         db_query("UPDATE ttrss_user_entries
1150                                                 SET unread = false, last_read = NOW() WHERE ref_id IN
1151                                                         (SELECT id FROM
1152                                                                 (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1153                                                                         AND owner_uid = $owner_uid AND unread = true AND feed_id = $feed AND $date_qpart) as tmp)");
1154
1155                                 } else if ($feed < 0 && $feed > LABEL_BASE_INDEX) { // special, like starred
1156
1157                                         if ($feed == -1) {
1158                                                 db_query("UPDATE ttrss_user_entries
1159                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1160                                                                 (SELECT id FROM
1161                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1162                                                                                 AND owner_uid = $owner_uid AND unread = true AND marked = true AND $date_qpart) as tmp)");
1163                                         }
1164
1165                                         if ($feed == -2) {
1166                                                 db_query("UPDATE ttrss_user_entries
1167                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1168                                                                 (SELECT id FROM
1169                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1170                                                                                 AND owner_uid = $owner_uid AND unread = true AND published = true AND $date_qpart) as tmp)");
1171                                         }
1172
1173                                         if ($feed == -3) {
1174
1175                                                 $intl = get_pref("FRESH_ARTICLE_MAX_AGE");
1176
1177                                                 if (DB_TYPE == "pgsql") {
1178                                                         $match_part = "date_entered > NOW() - INTERVAL '$intl hour' ";
1179                                                 } else {
1180                                                         $match_part = "date_entered > DATE_SUB(NOW(),
1181                                                                 INTERVAL $intl HOUR) ";
1182                                                 }
1183
1184                                                 db_query("UPDATE ttrss_user_entries
1185                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1186                                                                 (SELECT id FROM
1187                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1188                                                                                 AND owner_uid = $owner_uid AND unread = true AND $date_qpart AND $match_part) as tmp)");
1189                                         }
1190
1191                                         if ($feed == -4) {
1192                                                 db_query("UPDATE ttrss_user_entries
1193                                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1194                                                                 (SELECT id FROM
1195                                                                         (SELECT id FROM ttrss_entries, ttrss_user_entries WHERE ref_id = id
1196                                                                                 AND owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1197                                         }
1198
1199                                 } else if ($feed < LABEL_BASE_INDEX) { // label
1200
1201                                         $label_id = feed_to_label_id($feed);
1202
1203                                         db_query("UPDATE ttrss_user_entries
1204                                                 SET unread = false, last_read = NOW() WHERE ref_id IN
1205                                                         (SELECT id FROM
1206                                                                 (SELECT ttrss_entries.id FROM ttrss_entries, ttrss_user_entries, ttrss_user_labels2 WHERE ref_id = id
1207                                                                         AND label_id = '$label_id' AND ref_id = article_id
1208                                                                         AND owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1209
1210                                 }
1211
1212                                 ccache_update($feed, $owner_uid, $cat_view);
1213
1214                         } else { // tag
1215                                 db_query("UPDATE ttrss_user_entries
1216                                         SET unread = false, last_read = NOW() WHERE ref_id IN
1217                                                 (SELECT id FROM
1218                                                         (SELECT ttrss_entries.id FROM ttrss_entries, ttrss_user_entries, ttrss_tags WHERE ref_id = ttrss_entries.id
1219                                                                 AND post_int_id = int_id AND tag_name = '$feed'
1220                                                                 AND ttrss_user_entries.owner_uid = $owner_uid AND unread = true AND $date_qpart) as tmp)");
1221
1222                         }
1223         }
1224
1225         function getAllCounters() {
1226                 $data = getGlobalCounters();
1227
1228                 $data = array_merge($data, getVirtCounters());
1229                 $data = array_merge($data, getLabelCounters());
1230                 $data = array_merge($data, getFeedCounters());
1231                 $data = array_merge($data, getCategoryCounters());
1232
1233                 return $data;
1234         }
1235
1236         function getCategoryTitle($cat_id) {
1237
1238                 if ($cat_id == -1) {
1239                         return __("Special");
1240                 } else if ($cat_id == -2) {
1241                         return __("Labels");
1242                 } else {
1243
1244                         $result = db_query("SELECT title FROM ttrss_feed_categories WHERE
1245                                 id = '$cat_id'");
1246
1247                         if (db_num_rows($result) == 1) {
1248                                 return db_fetch_result($result, 0, "title");
1249                         } else {
1250                                 return __("Uncategorized");
1251                         }
1252                 }
1253         }
1254
1255
1256         function getCategoryCounters() {
1257                 $ret_arr = array();
1258
1259                 /* Labels category */
1260
1261                 $cv = array("id" => -2, "kind" => "cat",
1262                         "counter" => getCategoryUnread(-2));
1263
1264                 array_push($ret_arr, $cv);
1265
1266                 $result = db_query("SELECT id AS cat_id, value AS unread,
1267                         (SELECT COUNT(id) FROM ttrss_feed_categories AS c2
1268                                 WHERE c2.parent_cat = ttrss_feed_categories.id) AS num_children
1269                         FROM ttrss_feed_categories, ttrss_cat_counters_cache
1270                         WHERE ttrss_cat_counters_cache.feed_id = id AND
1271                         ttrss_cat_counters_cache.owner_uid = ttrss_feed_categories.owner_uid AND
1272                         ttrss_feed_categories.owner_uid = " . $_SESSION["uid"]);
1273
1274                 while ($line = db_fetch_assoc($result)) {
1275                         $line["cat_id"] = (int) $line["cat_id"];
1276
1277                         if ($line["num_children"] > 0) {
1278                                 $child_counter = getCategoryChildrenUnread($line["cat_id"], $_SESSION["uid"]);
1279                         } else {
1280                                 $child_counter = 0;
1281                         }
1282
1283                         $cv = array("id" => $line["cat_id"], "kind" => "cat",
1284                                 "counter" => $line["unread"] + $child_counter);
1285
1286                         array_push($ret_arr, $cv);
1287                 }
1288
1289                 /* Special case: NULL category doesn't actually exist in the DB */
1290
1291                 $cv = array("id" => 0, "kind" => "cat",
1292                         "counter" => (int) ccache_find(0, $_SESSION["uid"], true));
1293
1294                 array_push($ret_arr, $cv);
1295
1296                 return $ret_arr;
1297         }
1298
1299         // only accepts real cats (>= 0)
1300         function getCategoryChildrenUnread($cat, $owner_uid = false) {
1301                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1302
1303                 $result = db_query("SELECT id FROM ttrss_feed_categories WHERE parent_cat = '$cat'
1304                                 AND owner_uid = $owner_uid");
1305
1306                 $unread = 0;
1307
1308                 while ($line = db_fetch_assoc($result)) {
1309                         $unread += getCategoryUnread($line["id"], $owner_uid);
1310                         $unread += getCategoryChildrenUnread($line["id"], $owner_uid);
1311                 }
1312
1313                 return $unread;
1314         }
1315
1316         function getCategoryUnread($cat, $owner_uid = false) {
1317
1318                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1319
1320                 if ($cat >= 0) {
1321
1322                         if ($cat != 0) {
1323                                 $cat_query = "cat_id = '$cat'";
1324                         } else {
1325                                 $cat_query = "cat_id IS NULL";
1326                         }
1327
1328                         $result = db_query("SELECT id FROM ttrss_feeds WHERE $cat_query
1329                                         AND owner_uid = " . $owner_uid);
1330
1331                         $cat_feeds = array();
1332                         while ($line = db_fetch_assoc($result)) {
1333                                 array_push($cat_feeds, "feed_id = " . $line["id"]);
1334                         }
1335
1336                         if (count($cat_feeds) == 0) return 0;
1337
1338                         $match_part = implode(" OR ", $cat_feeds);
1339
1340                         $result = db_query("SELECT COUNT(int_id) AS unread
1341                                 FROM ttrss_user_entries
1342                                 WHERE   unread = true AND ($match_part)
1343                                 AND owner_uid = " . $owner_uid);
1344
1345                         $unread = 0;
1346
1347                         # this needs to be rewritten
1348                         while ($line = db_fetch_assoc($result)) {
1349                                 $unread += $line["unread"];
1350                         }
1351
1352                         return $unread;
1353                 } else if ($cat == -1) {
1354                         return getFeedUnread(-1) + getFeedUnread(-2) + getFeedUnread(-3) + getFeedUnread(0);
1355                 } else if ($cat == -2) {
1356
1357                         $result = db_query("
1358                                 SELECT COUNT(unread) AS unread FROM
1359                                         ttrss_user_entries, ttrss_user_labels2
1360                                 WHERE article_id = ref_id AND unread = true
1361                                         AND ttrss_user_entries.owner_uid = '$owner_uid'");
1362
1363                         $unread = db_fetch_result($result, 0, "unread");
1364
1365                         return $unread;
1366
1367                 }
1368         }
1369
1370         function getFeedUnread($feed, $is_cat = false) {
1371                 return getFeedArticles($feed, $is_cat, true, $_SESSION["uid"]);
1372         }
1373
1374         function getLabelUnread($label_id, $owner_uid = false) {
1375                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1376
1377                 $result = db_query("SELECT COUNT(ref_id) AS unread FROM ttrss_user_entries, ttrss_user_labels2
1378                         WHERE owner_uid = '$owner_uid' AND unread = true AND label_id = '$label_id' AND article_id = ref_id");
1379
1380                 if (db_num_rows($result) != 0) {
1381                         return db_fetch_result($result, 0, "unread");
1382                 } else {
1383                         return 0;
1384                 }
1385         }
1386
1387         function getFeedArticles($feed, $is_cat = false, $unread_only = false,
1388                 $owner_uid = false) {
1389
1390                 $n_feed = (int) $feed;
1391                 $need_entries = false;
1392
1393                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1394
1395                 if ($unread_only) {
1396                         $unread_qpart = "unread = true";
1397                 } else {
1398                         $unread_qpart = "true";
1399                 }
1400
1401                 if ($is_cat) {
1402                         return getCategoryUnread($n_feed, $owner_uid);
1403                 } else if ($n_feed == -6) {
1404                         return 0;
1405                 } else if ($feed != "0" && $n_feed == 0) {
1406
1407                         $feed = db_escape_string($feed);
1408
1409                         $result = db_query("SELECT SUM((SELECT COUNT(int_id)
1410                                 FROM ttrss_user_entries,ttrss_entries WHERE int_id = post_int_id
1411                                         AND ref_id = id AND $unread_qpart)) AS count FROM ttrss_tags
1412                                 WHERE owner_uid = $owner_uid AND tag_name = '$feed'");
1413                         return db_fetch_result($result, 0, "count");
1414
1415                 } else if ($n_feed == -1) {
1416                         $match_part = "marked = true";
1417                 } else if ($n_feed == -2) {
1418                         $match_part = "published = true";
1419                 } else if ($n_feed == -3) {
1420                         $match_part = "unread = true AND score >= 0";
1421
1422                         $intl = get_pref("FRESH_ARTICLE_MAX_AGE", $owner_uid);
1423
1424                         if (DB_TYPE == "pgsql") {
1425                                 $match_part .= " AND date_entered > NOW() - INTERVAL '$intl hour' ";
1426                         } else {
1427                                 $match_part .= " AND date_entered > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
1428                         }
1429
1430                         $need_entries = true;
1431
1432                 } else if ($n_feed == -4) {
1433                         $match_part = "true";
1434                 } else if ($n_feed >= 0) {
1435
1436                         if ($n_feed != 0) {
1437                                 $match_part = "feed_id = '$n_feed'";
1438                         } else {
1439                                 $match_part = "feed_id IS NULL";
1440                         }
1441
1442                 } else if ($feed < LABEL_BASE_INDEX) {
1443
1444                         $label_id = feed_to_label_id($feed);
1445
1446                         return getLabelUnread($label_id, $owner_uid);
1447
1448                 }
1449
1450                 if ($match_part) {
1451
1452                         if ($need_entries) {
1453                                 $from_qpart = "ttrss_user_entries,ttrss_entries";
1454                                 $from_where = "ttrss_entries.id = ttrss_user_entries.ref_id AND";
1455                         } else {
1456                                 $from_qpart = "ttrss_user_entries";
1457                         }
1458
1459                         $query = "SELECT count(int_id) AS unread
1460                                 FROM $from_qpart WHERE
1461                                 $unread_qpart AND $from_where ($match_part) AND ttrss_user_entries.owner_uid = $owner_uid";
1462
1463                         //echo "[$feed/$query]\n";
1464
1465                         $result = db_query($query);
1466
1467                 } else {
1468
1469                         $result = db_query("SELECT COUNT(post_int_id) AS unread
1470                                 FROM ttrss_tags,ttrss_user_entries,ttrss_entries
1471                                 WHERE tag_name = '$feed' AND post_int_id = int_id AND ref_id = ttrss_entries.id
1472                                 AND $unread_qpart AND ttrss_tags.owner_uid = " . $owner_uid);
1473                 }
1474
1475                 $unread = db_fetch_result($result, 0, "unread");
1476
1477                 return $unread;
1478         }
1479
1480         function getGlobalUnread($user_id = false) {
1481
1482                 if (!$user_id) {
1483                         $user_id = $_SESSION["uid"];
1484                 }
1485
1486                 $result = db_query("SELECT SUM(value) AS c_id FROM ttrss_counters_cache
1487                         WHERE owner_uid = '$user_id' AND feed_id > 0");
1488
1489                 $c_id = db_fetch_result($result, 0, "c_id");
1490
1491                 return $c_id;
1492         }
1493
1494         function getGlobalCounters($global_unread = -1) {
1495                 $ret_arr = array();
1496
1497                 if ($global_unread == -1) {
1498                         $global_unread = getGlobalUnread();
1499                 }
1500
1501                 $cv = array("id" => "global-unread",
1502                         "counter" => (int) $global_unread);
1503
1504                 array_push($ret_arr, $cv);
1505
1506                 $result = db_query("SELECT COUNT(id) AS fn FROM
1507                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1508
1509                 $subscribed_feeds = db_fetch_result($result, 0, "fn");
1510
1511                 $cv = array("id" => "subscribed-feeds",
1512                         "counter" => (int) $subscribed_feeds);
1513
1514                 array_push($ret_arr, $cv);
1515
1516                 return $ret_arr;
1517         }
1518
1519         function getVirtCounters() {
1520
1521                 $ret_arr = array();
1522
1523                 for ($i = 0; $i >= -4; $i--) {
1524
1525                         $count = getFeedUnread($i);
1526
1527                         if ($i == 0 || $i == -1 || $i == -2)
1528                                 $auxctr = getFeedArticles($i, false);
1529                         else
1530                                 $auxctr = 0;
1531
1532                         $cv = array("id" => $i,
1533                                 "counter" => (int) $count,
1534                                 "auxcounter" => $auxctr);
1535
1536 //                      if (get_pref('EXTENDED_FEEDLIST'))
1537 //                              $cv["xmsg"] = getFeedArticles($i)." ".__("total");
1538
1539                         array_push($ret_arr, $cv);
1540                 }
1541
1542                 $feeds = PluginHost::getInstance()->get_feeds(-1);
1543
1544                 if (is_array($feeds)) {
1545                         foreach ($feeds as $feed) {
1546                                 $cv = array("id" => PluginHost::pfeed_to_feed_id($feed['id']),
1547                                         "counter" => $feed['sender']->get_unread($feed['id']));
1548
1549                                 if (method_exists($feed['sender'], 'get_total'))
1550                                         $cv["auxcounter"] = $feed['sender']->get_total($feed['id']);
1551
1552                                 array_push($ret_arr, $cv);
1553                         }
1554                 }
1555
1556                 return $ret_arr;
1557         }
1558
1559         function getLabelCounters($descriptions = false) {
1560
1561                 $ret_arr = array();
1562
1563                 $owner_uid = $_SESSION["uid"];
1564
1565                 $result = db_query("SELECT id,caption,SUM(CASE WHEN u1.unread = true THEN 1 ELSE 0 END) AS unread, COUNT(u1.unread) AS total
1566                         FROM ttrss_labels2 LEFT JOIN ttrss_user_labels2 ON
1567                                 (ttrss_labels2.id = label_id)
1568                                 LEFT JOIN ttrss_user_entries AS u1 ON u1.ref_id = article_id
1569                                 WHERE ttrss_labels2.owner_uid = $owner_uid GROUP BY ttrss_labels2.id,
1570                                         ttrss_labels2.caption");
1571
1572                 while ($line = db_fetch_assoc($result)) {
1573
1574                         $id = label_to_feed_id($line["id"]);
1575
1576                         $cv = array("id" => $id,
1577                                 "counter" => (int) $line["unread"],
1578                                 "auxcounter" => (int) $line["total"]);
1579
1580                         if ($descriptions)
1581                                 $cv["description"] = $line["caption"];
1582
1583                         array_push($ret_arr, $cv);
1584                 }
1585
1586                 return $ret_arr;
1587         }
1588
1589         function getFeedCounters($active_feed = false) {
1590
1591                 $ret_arr = array();
1592
1593                 $query = "SELECT ttrss_feeds.id,
1594                                 ttrss_feeds.title,
1595                                 ".SUBSTRING_FOR_DATE."(ttrss_feeds.last_updated,1,19) AS last_updated,
1596                                 last_error, value AS count
1597                         FROM ttrss_feeds, ttrss_counters_cache
1598                         WHERE ttrss_feeds.owner_uid = ".$_SESSION["uid"]."
1599                                 AND ttrss_counters_cache.owner_uid = ttrss_feeds.owner_uid
1600                                 AND ttrss_counters_cache.feed_id = id";
1601
1602                 $result = db_query($query);
1603                 $fctrs_modified = false;
1604
1605                 while ($line = db_fetch_assoc($result)) {
1606
1607                         $id = $line["id"];
1608                         $count = $line["count"];
1609                         $last_error = htmlspecialchars($line["last_error"]);
1610
1611                         $last_updated = make_local_datetime($line['last_updated'], false);
1612
1613                         $has_img = feed_has_icon($id);
1614
1615                         if (date('Y') - date('Y', strtotime($line['last_updated'])) > 2)
1616                                 $last_updated = '';
1617
1618                         $cv = array("id" => $id,
1619                                 "updated" => $last_updated,
1620                                 "counter" => (int) $count,
1621                                 "has_img" => (int) $has_img);
1622
1623                         if ($last_error)
1624                                 $cv["error"] = $last_error;
1625
1626 //                      if (get_pref('EXTENDED_FEEDLIST'))
1627 //                              $cv["xmsg"] = getFeedArticles($id)." ".__("total");
1628
1629                         if ($active_feed && $id == $active_feed)
1630                                 $cv["title"] = truncate_string($line["title"], 30);
1631
1632                         array_push($ret_arr, $cv);
1633
1634                 }
1635
1636                 return $ret_arr;
1637         }
1638
1639         function get_pgsql_version() {
1640                 $result = db_query("SELECT version() AS version");
1641                 $version = explode(" ", db_fetch_result($result, 0, "version"));
1642                 return $version[1];
1643         }
1644
1645         /**
1646          * @return array (code => Status code, message => error message if available)
1647          *
1648          *                 0 - OK, Feed already exists
1649          *                 1 - OK, Feed added
1650          *                 2 - Invalid URL
1651          *                 3 - URL content is HTML, no feeds available
1652          *                 4 - URL content is HTML which contains multiple feeds.
1653          *                     Here you should call extractfeedurls in rpc-backend
1654          *                     to get all possible feeds.
1655          *                 5 - Couldn't download the URL content.
1656          *                 6 - Content is an invalid XML.
1657          */
1658         function subscribe_to_feed($url, $cat_id = 0,
1659                         $auth_login = '', $auth_pass = '') {
1660
1661                 global $fetch_last_error;
1662
1663                 require_once "include/rssfuncs.php";
1664
1665                 $url = fix_url($url);
1666
1667                 if (!$url || !validate_feed_url($url)) return array("code" => 2);
1668
1669                 $contents = @fetch_file_contents($url, false, $auth_login, $auth_pass);
1670
1671                 if (!$contents) {
1672                         return array("code" => 5, "message" => $fetch_last_error);
1673                 }
1674
1675                 if (is_html($contents)) {
1676                         $feedUrls = get_feeds_from_html($url, $contents);
1677
1678                         if (count($feedUrls) == 0) {
1679                                 return array("code" => 3);
1680                         } else if (count($feedUrls) > 1) {
1681                                 return array("code" => 4, "feeds" => $feedUrls);
1682                         }
1683                         //use feed url as new URL
1684                         $url = key($feedUrls);
1685                 }
1686
1687                 /* libxml_use_internal_errors(true);
1688                 $doc = new DOMDocument();
1689                 $doc->loadXML($contents);
1690                 $error = libxml_get_last_error();
1691                 libxml_clear_errors();
1692
1693                 if ($error) {
1694                         $error_message = format_libxml_error($error);
1695
1696                         return array("code" => 6, "message" => $error_message);
1697                 } */
1698
1699                 if ($cat_id == "0" || !$cat_id) {
1700                         $cat_qpart = "NULL";
1701                 } else {
1702                         $cat_qpart = "'$cat_id'";
1703                 }
1704
1705                 $result = db_query(
1706                         "SELECT id FROM ttrss_feeds
1707                         WHERE feed_url = '$url' AND owner_uid = ".$_SESSION["uid"]);
1708
1709                 if (strlen(FEED_CRYPT_KEY) > 0) {
1710                         require_once "crypt.php";
1711                         $auth_pass = substr(encrypt_string($auth_pass), 0, 250);
1712                         $auth_pass_encrypted = 'true';
1713                 } else {
1714                         $auth_pass_encrypted = 'false';
1715                 }
1716
1717                 $auth_pass = db_escape_string($auth_pass);
1718
1719                 if (db_num_rows($result) == 0) {
1720                         $result = db_query(
1721                                 "INSERT INTO ttrss_feeds
1722                                         (owner_uid,feed_url,title,cat_id, auth_login,auth_pass,update_method,auth_pass_encrypted)
1723                                 VALUES ('".$_SESSION["uid"]."', '$url',
1724                                 '[Unknown]', $cat_qpart, '$auth_login', '$auth_pass', 0, $auth_pass_encrypted)");
1725
1726                         $result = db_query(
1727                                 "SELECT id FROM ttrss_feeds WHERE feed_url = '$url'
1728                                         AND owner_uid = " . $_SESSION["uid"]);
1729
1730                         $feed_id = db_fetch_result($result, 0, "id");
1731
1732                         if ($feed_id) {
1733                                 update_rss_feed($feed_id, true);
1734                         }
1735
1736                         return array("code" => 1);
1737                 } else {
1738                         return array("code" => 0);
1739                 }
1740         }
1741
1742         function print_feed_select($id, $default_id = "",
1743                 $attributes = "", $include_all_feeds = true,
1744                 $root_id = false, $nest_level = 0) {
1745
1746                 if (!$root_id) {
1747                         print "<select id=\"$id\" name=\"$id\" $attributes>";
1748                         if ($include_all_feeds) {
1749                                 $is_selected = ("0" == $default_id) ? "selected=\"1\"" : "";
1750                                 print "<option $is_selected value=\"0\">".__('All feeds')."</option>";
1751                         }
1752                 }
1753
1754                 if (get_pref('ENABLE_FEED_CATS')) {
1755
1756                         if ($root_id)
1757                                 $parent_qpart = "parent_cat = '$root_id'";
1758                         else
1759                                 $parent_qpart = "parent_cat IS NULL";
1760
1761                         $result = db_query("SELECT id,title,
1762                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1763                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1764                                 FROM ttrss_feed_categories
1765                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1766
1767                         while ($line = db_fetch_assoc($result)) {
1768
1769                                 for ($i = 0; $i < $nest_level; $i++)
1770                                         $line["title"] = " - " . $line["title"];
1771
1772                                 $is_selected = ("CAT:".$line["id"] == $default_id) ? "selected=\"1\"" : "";
1773
1774                                 printf("<option $is_selected value='CAT:%d'>%s</option>",
1775                                         $line["id"], htmlspecialchars($line["title"]));
1776
1777                                 if ($line["num_children"] > 0)
1778                                         print_feed_select($id, $default_id, $attributes,
1779                                                 $include_all_feeds, $line["id"], $nest_level+1);
1780
1781                                 $feed_result = db_query("SELECT id,title FROM ttrss_feeds
1782                                         WHERE cat_id = '".$line["id"]."' AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1783
1784                                 while ($fline = db_fetch_assoc($feed_result)) {
1785                                         $is_selected = ($fline["id"] == $default_id) ? "selected=\"1\"" : "";
1786
1787                                         $fline["title"] = " + " . $fline["title"];
1788
1789                                         for ($i = 0; $i < $nest_level; $i++)
1790                                                 $fline["title"] = " - " . $fline["title"];
1791
1792                                         printf("<option $is_selected value='%d'>%s</option>",
1793                                                 $fline["id"], htmlspecialchars($fline["title"]));
1794                                 }
1795                         }
1796
1797                         if (!$root_id) {
1798                                 $default_is_cat = ($default_id == "CAT:0");
1799                                 $is_selected = $default_is_cat ? "selected=\"1\"" : "";
1800
1801                                 printf("<option $is_selected value='CAT:0'>%s</option>",
1802                                         __("Uncategorized"));
1803
1804                                 $feed_result = db_query("SELECT id,title FROM ttrss_feeds
1805                                         WHERE cat_id IS NULL AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1806
1807                                 while ($fline = db_fetch_assoc($feed_result)) {
1808                                         $is_selected = ($fline["id"] == $default_id && !$default_is_cat) ? "selected=\"1\"" : "";
1809
1810                                         $fline["title"] = " + " . $fline["title"];
1811
1812                                         for ($i = 0; $i < $nest_level; $i++)
1813                                                 $fline["title"] = " - " . $fline["title"];
1814
1815                                         printf("<option $is_selected value='%d'>%s</option>",
1816                                                 $fline["id"], htmlspecialchars($fline["title"]));
1817                                 }
1818                         }
1819
1820                 } else {
1821                         $result = db_query("SELECT id,title FROM ttrss_feeds
1822                                 WHERE owner_uid = ".$_SESSION["uid"]." ORDER BY title");
1823
1824                         while ($line = db_fetch_assoc($result)) {
1825
1826                                 $is_selected = ($line["id"] == $default_id) ? "selected=\"1\"" : "";
1827
1828                                 printf("<option $is_selected value='%d'>%s</option>",
1829                                         $line["id"], htmlspecialchars($line["title"]));
1830                         }
1831                 }
1832
1833                 if (!$root_id) {
1834                         print "</select>";
1835                 }
1836         }
1837
1838         function print_feed_cat_select($id, $default_id,
1839                 $attributes, $include_all_cats = true, $root_id = false, $nest_level = 0) {
1840
1841                         if (!$root_id) {
1842                                         print "<select id=\"$id\" name=\"$id\" default=\"$default_id\" onchange=\"catSelectOnChange(this)\" $attributes>";
1843                         }
1844
1845                         if ($root_id)
1846                                 $parent_qpart = "parent_cat = '$root_id'";
1847                         else
1848                                 $parent_qpart = "parent_cat IS NULL";
1849
1850                         $result = db_query("SELECT id,title,
1851                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1852                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1853                                 FROM ttrss_feed_categories
1854                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1855
1856                         while ($line = db_fetch_assoc($result)) {
1857                                 if ($line["id"] == $default_id) {
1858                                         $is_selected = "selected=\"1\"";
1859                                 } else {
1860                                         $is_selected = "";
1861                                 }
1862
1863                                 for ($i = 0; $i < $nest_level; $i++)
1864                                         $line["title"] = " - " . $line["title"];
1865
1866                                 if ($line["title"])
1867                                         printf("<option $is_selected value='%d'>%s</option>",
1868                                                 $line["id"], htmlspecialchars($line["title"]));
1869
1870                                 if ($line["num_children"] > 0)
1871                                         print_feed_cat_select($id, $default_id, $attributes,
1872                                                 $include_all_cats, $line["id"], $nest_level+1);
1873                         }
1874
1875                         if (!$root_id) {
1876                                 if ($include_all_cats) {
1877                                         if (db_num_rows($result) > 0) {
1878                                                 print "<option disabled=\"1\">--------</option>";
1879                                         }
1880
1881                                         if ($default_id == 0) {
1882                                                 $is_selected = "selected=\"1\"";
1883                                         } else {
1884                                                 $is_selected = "";
1885                                         }
1886
1887                                         print "<option $is_selected value=\"0\">".__('Uncategorized')."</option>";
1888                                 }
1889                                 print "</select>";
1890                         }
1891                 }
1892
1893         function checkbox_to_sql_bool($val) {
1894                 return ($val == "on") ? "true" : "false";
1895         }
1896
1897         function getFeedCatTitle($id) {
1898                 if ($id == -1) {
1899                         return __("Special");
1900                 } else if ($id < LABEL_BASE_INDEX) {
1901                         return __("Labels");
1902                 } else if ($id > 0) {
1903                         $result = db_query("SELECT ttrss_feed_categories.title
1904                                 FROM ttrss_feeds, ttrss_feed_categories WHERE ttrss_feeds.id = '$id' AND
1905                                         cat_id = ttrss_feed_categories.id");
1906                         if (db_num_rows($result) == 1) {
1907                                 return db_fetch_result($result, 0, "title");
1908                         } else {
1909                                 return __("Uncategorized");
1910                         }
1911                 } else {
1912                         return "getFeedCatTitle($id) failed";
1913                 }
1914
1915         }
1916
1917         function getFeedIcon($id) {
1918                 switch ($id) {
1919                 case 0:
1920                         return "images/archive.png";
1921                         break;
1922                 case -1:
1923                         return "images/star.png";
1924                         break;
1925                 case -2:
1926                         return "images/feed.png";
1927                         break;
1928                 case -3:
1929                         return "images/fresh.png";
1930                         break;
1931                 case -4:
1932                         return "images/folder.png";
1933                         break;
1934                 case -6:
1935                         return "images/time.png";
1936                         break;
1937                 default:
1938                         if ($id < LABEL_BASE_INDEX) {
1939                                 return "images/label.png";
1940                         } else {
1941                                 if (file_exists(ICONS_DIR . "/$id.ico"))
1942                                         return ICONS_URL . "/$id.ico";
1943                         }
1944                         break;
1945                 }
1946
1947                 return false;
1948         }
1949
1950         function getFeedTitle($id, $cat = false) {
1951                 if ($cat) {
1952                         return getCategoryTitle($id);
1953                 } else if ($id == -1) {
1954                         return __("Starred articles");
1955                 } else if ($id == -2) {
1956                         return __("Published articles");
1957                 } else if ($id == -3) {
1958                         return __("Fresh articles");
1959                 } else if ($id == -4) {
1960                         return __("All articles");
1961                 } else if ($id === 0 || $id === "0") {
1962                         return __("Archived articles");
1963                 } else if ($id == -6) {
1964                         return __("Recently read");
1965                 } else if ($id < LABEL_BASE_INDEX) {
1966                         $label_id = feed_to_label_id($id);
1967                         $result = db_query("SELECT caption FROM ttrss_labels2 WHERE id = '$label_id'");
1968                         if (db_num_rows($result) == 1) {
1969                                 return db_fetch_result($result, 0, "caption");
1970                         } else {
1971                                 return "Unknown label ($label_id)";
1972                         }
1973
1974                 } else if (is_numeric($id) && $id > 0) {
1975                         $result = db_query("SELECT title FROM ttrss_feeds WHERE id = '$id'");
1976                         if (db_num_rows($result) == 1) {
1977                                 return db_fetch_result($result, 0, "title");
1978                         } else {
1979                                 return "Unknown feed ($id)";
1980                         }
1981                 } else {
1982                         return $id;
1983                 }
1984         }
1985
1986         function make_init_params() {
1987                 $params = array();
1988
1989                 foreach (array("ON_CATCHUP_SHOW_NEXT_FEED", "HIDE_READ_FEEDS",
1990                         "ENABLE_FEED_CATS", "FEEDS_SORT_BY_UNREAD", "CONFIRM_FEED_CATCHUP",
1991                         "CDM_AUTO_CATCHUP", "FRESH_ARTICLE_MAX_AGE",
1992                         "HIDE_READ_SHOWS_SPECIAL", "COMBINED_DISPLAY_MODE") as $param) {
1993
1994                                  $params[strtolower($param)] = (int) get_pref($param);
1995                  }
1996
1997                 $params["icons_url"] = ICONS_URL;
1998                 $params["cookie_lifetime"] = SESSION_COOKIE_LIFETIME;
1999                 $params["default_view_mode"] = get_pref("_DEFAULT_VIEW_MODE");
2000                 $params["default_view_limit"] = (int) get_pref("_DEFAULT_VIEW_LIMIT");
2001                 $params["default_view_order_by"] = get_pref("_DEFAULT_VIEW_ORDER_BY");
2002                 $params["bw_limit"] = (int) $_SESSION["bw_limit"];
2003                 $params["label_base_index"] = (int) LABEL_BASE_INDEX;
2004
2005                 $result = db_query("SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
2006                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
2007
2008                 $max_feed_id = db_fetch_result($result, 0, "mid");
2009                 $num_feeds = db_fetch_result($result, 0, "nf");
2010
2011                 $params["max_feed_id"] = (int) $max_feed_id;
2012                 $params["num_feeds"] = (int) $num_feeds;
2013
2014                 $params["hotkeys"] = get_hotkeys_map();
2015
2016                 $params["csrf_token"] = $_SESSION["csrf_token"];
2017                 $params["widescreen"] = (int) $_COOKIE["ttrss_widescreen"];
2018
2019                 $params['simple_update'] = defined('SIMPLE_UPDATE_MODE') && SIMPLE_UPDATE_MODE;
2020
2021                 return $params;
2022         }
2023
2024         function get_hotkeys_info() {
2025                 $hotkeys = array(
2026                         __("Navigation") => array(
2027                                 "next_feed" => __("Open next feed"),
2028                                 "prev_feed" => __("Open previous feed"),
2029                                 "next_article" => __("Open next article"),
2030                                 "prev_article" => __("Open previous article"),
2031                                 "next_article_noscroll" => __("Open next article (don't scroll long articles)"),
2032                                 "prev_article_noscroll" => __("Open previous article (don't scroll long articles)"),
2033                                 "next_article_noexpand" => __("Move to next article (don't expand or mark read)"),
2034                                 "prev_article_noexpand" => __("Move to previous article (don't expand or mark read)"),
2035                                 "search_dialog" => __("Show search dialog")),
2036                         __("Article") => array(
2037                                 "toggle_mark" => __("Toggle starred"),
2038                                 "toggle_publ" => __("Toggle published"),
2039                                 "toggle_unread" => __("Toggle unread"),
2040                                 "edit_tags" => __("Edit tags"),
2041                                 "dismiss_selected" => __("Dismiss selected"),
2042                                 "dismiss_read" => __("Dismiss read"),
2043                                 "open_in_new_window" => __("Open in new window"),
2044                                 "catchup_below" => __("Mark below as read"),
2045                                 "catchup_above" => __("Mark above as read"),
2046                                 "article_scroll_down" => __("Scroll down"),
2047                                 "article_scroll_up" => __("Scroll up"),
2048                                 "select_article_cursor" => __("Select article under cursor"),
2049                                 "email_article" => __("Email article"),
2050                                 "close_article" => __("Close/collapse article"),
2051                                 "toggle_expand" => __("Toggle article expansion (combined mode)"),
2052                                 "toggle_widescreen" => __("Toggle widescreen mode"),
2053                                 "toggle_embed_original" => __("Toggle embed original")),
2054                         __("Article selection") => array(
2055                                 "select_all" => __("Select all articles"),
2056                                 "select_unread" => __("Select unread"),
2057                                 "select_marked" => __("Select starred"),
2058                                 "select_published" => __("Select published"),
2059                                 "select_invert" => __("Invert selection"),
2060                                 "select_none" => __("Deselect everything")),
2061                         __("Feed") => array(
2062                                 "feed_refresh" => __("Refresh current feed"),
2063                                 "feed_unhide_read" => __("Un/hide read feeds"),
2064                                 "feed_subscribe" => __("Subscribe to feed"),
2065                                 "feed_edit" => __("Edit feed"),
2066                                 "feed_catchup" => __("Mark as read"),
2067                                 "feed_reverse" => __("Reverse headlines"),
2068                                 "feed_debug_update" => __("Debug feed update"),
2069                                 "catchup_all" => __("Mark all feeds as read"),
2070                                 "cat_toggle_collapse" => __("Un/collapse current category"),
2071                                 "toggle_combined_mode" => __("Toggle combined mode"),
2072                                 "toggle_cdm_expanded" => __("Toggle auto expand in combined mode")),
2073                         __("Go to") => array(
2074                                 "goto_all" => __("All articles"),
2075                                 "goto_fresh" => __("Fresh"),
2076                                 "goto_marked" => __("Starred"),
2077                                 "goto_published" => __("Published"),
2078                                 "goto_tagcloud" => __("Tag cloud"),
2079                                 "goto_prefs" => __("Preferences")),
2080                         __("Other") => array(
2081                                 "create_label" => __("Create label"),
2082                                 "create_filter" => __("Create filter"),
2083                                 "collapse_sidebar" => __("Un/collapse sidebar"),
2084                                 "help_dialog" => __("Show help dialog"))
2085                         );
2086
2087                 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_HOTKEY_INFO) as $plugin) {
2088                         $hotkeys = $plugin->hook_hotkey_info($hotkeys);
2089                 }
2090
2091                 return $hotkeys;
2092         }
2093
2094         function get_hotkeys_map() {
2095                 $hotkeys = array(
2096 //                      "navigation" => array(
2097                                 "k" => "next_feed",
2098                                 "j" => "prev_feed",
2099                                 "n" => "next_article",
2100                                 "p" => "prev_article",
2101                                 "(38)|up" => "prev_article",
2102                                 "(40)|down" => "next_article",
2103 //                              "^(38)|Ctrl-up" => "prev_article_noscroll",
2104 //                              "^(40)|Ctrl-down" => "next_article_noscroll",
2105                                 "(191)|/" => "search_dialog",
2106 //                      "article" => array(
2107                                 "s" => "toggle_mark",
2108                                 "*s" => "toggle_publ",
2109                                 "u" => "toggle_unread",
2110                                 "*t" => "edit_tags",
2111                                 "*d" => "dismiss_selected",
2112                                 "*x" => "dismiss_read",
2113                                 "o" => "open_in_new_window",
2114                                 "c p" => "catchup_below",
2115                                 "c n" => "catchup_above",
2116                                 "*n" => "article_scroll_down",
2117                                 "*p" => "article_scroll_up",
2118                                 "*(38)|Shift+up" => "article_scroll_up",
2119                                 "*(40)|Shift+down" => "article_scroll_down",
2120                                 "a *w" => "toggle_widescreen",
2121                                 "a e" => "toggle_embed_original",
2122                                 "e" => "email_article",
2123                                 "a q" => "close_article",
2124 //                      "article_selection" => array(
2125                                 "a a" => "select_all",
2126                                 "a u" => "select_unread",
2127                                 "a *u" => "select_marked",
2128                                 "a p" => "select_published",
2129                                 "a i" => "select_invert",
2130                                 "a n" => "select_none",
2131 //                      "feed" => array(
2132                                 "f r" => "feed_refresh",
2133                                 "f a" => "feed_unhide_read",
2134                                 "f s" => "feed_subscribe",
2135                                 "f e" => "feed_edit",
2136                                 "f q" => "feed_catchup",
2137                                 "f x" => "feed_reverse",
2138                                 "f *d" => "feed_debug_update",
2139                                 "f *c" => "toggle_combined_mode",
2140                                 "f c" => "toggle_cdm_expanded",
2141                                 "*q" => "catchup_all",
2142                                 "x" => "cat_toggle_collapse",
2143 //                      "goto" => array(
2144                                 "g a" => "goto_all",
2145                                 "g f" => "goto_fresh",
2146                                 "g s" => "goto_marked",
2147                                 "g p" => "goto_published",
2148                                 "g t" => "goto_tagcloud",
2149                                 "g *p" => "goto_prefs",
2150 //                      "other" => array(
2151                                 "(9)|Tab" => "select_article_cursor", // tab
2152                                 "c l" => "create_label",
2153                                 "c f" => "create_filter",
2154                                 "c s" => "collapse_sidebar",
2155                                 "^(191)|Ctrl+/" => "help_dialog",
2156                         );
2157
2158                 if (get_pref('COMBINED_DISPLAY_MODE')) {
2159                         $hotkeys["^(38)|Ctrl-up"] = "prev_article_noscroll";
2160                         $hotkeys["^(40)|Ctrl-down"] = "next_article_noscroll";
2161                 }
2162
2163                 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_HOTKEY_MAP) as $plugin) {
2164                         $hotkeys = $plugin->hook_hotkey_map($hotkeys);
2165                 }
2166
2167                 $prefixes = array();
2168
2169                 foreach (array_keys($hotkeys) as $hotkey) {
2170                         $pair = explode(" ", $hotkey, 2);
2171
2172                         if (count($pair) > 1 && !in_array($pair[0], $prefixes)) {
2173                                 array_push($prefixes, $pair[0]);
2174                         }
2175                 }
2176
2177                 return array($prefixes, $hotkeys);
2178         }
2179
2180         function make_runtime_info() {
2181                 $data = array();
2182
2183                 $result = db_query("SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
2184                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
2185
2186                 $max_feed_id = db_fetch_result($result, 0, "mid");
2187                 $num_feeds = db_fetch_result($result, 0, "nf");
2188
2189                 $data["max_feed_id"] = (int) $max_feed_id;
2190                 $data["num_feeds"] = (int) $num_feeds;
2191
2192                 $data['last_article_id'] = getLastArticleId();
2193                 $data['cdm_expanded'] = get_pref('CDM_EXPANDED');
2194
2195                 $data['dep_ts'] = calculate_dep_timestamp();
2196                 $data['reload_on_ts_change'] = !defined('_NO_RELOAD_ON_TS_CHANGE');
2197
2198                 if (file_exists(LOCK_DIRECTORY . "/update_daemon.lock")) {
2199
2200                         $data['daemon_is_running'] = (int) file_is_locked("update_daemon.lock");
2201
2202                         if (time() - $_SESSION["daemon_stamp_check"] > 30) {
2203
2204                                 $stamp = (int) @file_get_contents(LOCK_DIRECTORY . "/update_daemon.stamp");
2205
2206                                 if ($stamp) {
2207                                         $stamp_delta = time() - $stamp;
2208
2209                                         if ($stamp_delta > 1800) {
2210                                                 $stamp_check = 0;
2211                                         } else {
2212                                                 $stamp_check = 1;
2213                                                 $_SESSION["daemon_stamp_check"] = time();
2214                                         }
2215
2216                                         $data['daemon_stamp_ok'] = $stamp_check;
2217
2218                                         $stamp_fmt = date("Y.m.d, G:i", $stamp);
2219
2220                                         $data['daemon_stamp'] = $stamp_fmt;
2221                                 }
2222                         }
2223                 }
2224
2225                 if ($_SESSION["last_version_check"] + 86400 + rand(-1000, 1000) < time()) {
2226                                 $new_version_details = @check_for_update();
2227
2228                                 $data['new_version_available'] = (int) ($new_version_details != false);
2229
2230                                 $_SESSION["last_version_check"] = time();
2231                                 $_SESSION["version_data"] = $new_version_details;
2232                 }
2233
2234                 return $data;
2235         }
2236
2237         function search_to_sql($search) {
2238
2239                 $search_query_part = "";
2240
2241                 $keywords = explode(" ", $search);
2242                 $query_keywords = array();
2243                 $search_words = array();
2244
2245                 foreach ($keywords as $k) {
2246                         if (strpos($k, "-") === 0) {
2247                                 $k = substr($k, 1);
2248                                 $not = "NOT";
2249                         } else {
2250                                 $not = "";
2251                         }
2252
2253                         $commandpair = explode(":", mb_strtolower($k), 2);
2254
2255                         switch ($commandpair[0]) {
2256                         case "title":
2257                                 if ($commandpair[1]) {
2258                                         array_push($query_keywords, "($not (LOWER(ttrss_entries.title) LIKE '%".
2259                                                 db_escape_string(mb_strtolower($commandpair[1]))."%'))");
2260                                 } else {
2261                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2262                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2263                                         array_push($search_words, $k);
2264                                 }
2265                                 break;
2266                         case "author":
2267                                 if ($commandpair[1]) {
2268                                         array_push($query_keywords, "($not (LOWER(author) LIKE '%".
2269                                                 db_escape_string(mb_strtolower($commandpair[1]))."%'))");
2270                                 } else {
2271                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2272                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2273                                         array_push($search_words, $k);
2274                                 }
2275                                 break;
2276                         case "note":
2277                                 if ($commandpair[1]) {
2278                                         if ($commandpair[1] == "true")
2279                                                 array_push($query_keywords, "($not (note IS NOT NULL AND note != ''))");
2280                                         else if ($commandpair[1] == "false")
2281                                                 array_push($query_keywords, "($not (note IS NULL OR note = ''))");
2282                                         else
2283                                                 array_push($query_keywords, "($not (LOWER(note) LIKE '%".
2284                                                         db_escape_string(mb_strtolower($commandpair[1]))."%'))");
2285                                 } else {
2286                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2287                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2288                                         if (!$not) array_push($search_words, $k);
2289                                 }
2290                                 break;
2291                         case "star":
2292
2293                                 if ($commandpair[1]) {
2294                                         if ($commandpair[1] == "true")
2295                                                 array_push($query_keywords, "($not (marked = true))");
2296                                         else
2297                                                 array_push($query_keywords, "($not (marked = false))");
2298                                 } else {
2299                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2300                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2301                                         if (!$not) array_push($search_words, $k);
2302                                 }
2303                                 break;
2304                         case "pub":
2305                                 if ($commandpair[1]) {
2306                                         if ($commandpair[1] == "true")
2307                                                 array_push($query_keywords, "($not (published = true))");
2308                                         else
2309                                                 array_push($query_keywords, "($not (published = false))");
2310
2311                                 } else {
2312                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2313                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2314                                         if (!$not) array_push($search_words, $k);
2315                                 }
2316                                 break;
2317                         default:
2318                                 if (strpos($k, "@") === 0) {
2319
2320                                         $user_tz_string = get_pref('USER_TIMEZONE', $_SESSION['uid']);
2321                                         $orig_ts = strtotime(substr($k, 1));
2322                                         $k = date("Y-m-d", convert_timestamp($orig_ts, $user_tz_string, 'UTC'));
2323
2324                                         //$k = date("Y-m-d", strtotime(substr($k, 1)));
2325
2326                                         array_push($query_keywords, "(".SUBSTRING_FOR_DATE."(updated,1,LENGTH('$k')) $not = '$k')");
2327                                 } else {
2328                                         array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2329                                                         OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2330
2331                                         if (!$not) array_push($search_words, $k);
2332                                 }
2333                         }
2334                 }
2335
2336                 $search_query_part = implode("AND", $query_keywords);
2337
2338                 return array($search_query_part, $search_words);
2339         }
2340
2341         function getParentCategories($cat, $owner_uid) {
2342                 $rv = array();
2343
2344                 $result = db_query("SELECT parent_cat FROM ttrss_feed_categories
2345                         WHERE id = '$cat' AND parent_cat IS NOT NULL AND owner_uid = $owner_uid");
2346
2347                 while ($line = db_fetch_assoc($result)) {
2348                         array_push($rv, $line["parent_cat"]);
2349                         $rv = array_merge($rv, getParentCategories($line["parent_cat"], $owner_uid));
2350                 }
2351
2352                 return $rv;
2353         }
2354
2355         function getChildCategories($cat, $owner_uid) {
2356                 $rv = array();
2357
2358                 $result = db_query("SELECT id FROM ttrss_feed_categories
2359                         WHERE parent_cat = '$cat' AND owner_uid = $owner_uid");
2360
2361                 while ($line = db_fetch_assoc($result)) {
2362                         array_push($rv, $line["id"]);
2363                         $rv = array_merge($rv, getChildCategories($line["id"], $owner_uid));
2364                 }
2365
2366                 return $rv;
2367         }
2368
2369         function queryFeedHeadlines($feed, $limit, $view_mode, $cat_view, $search, $search_mode, $override_order = false, $offset = 0, $owner_uid = 0, $filter = false, $since_id = 0, $include_children = false, $ignore_vfeed_group = false, $override_strategy = false, $override_vfeed = false) {
2370
2371                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2372
2373                 $ext_tables_part = "";
2374                 $search_words = array();
2375
2376                         if ($search) {
2377
2378                                 if (SPHINX_ENABLED) {
2379                                         $ids = join(",", @sphinx_search($search, 0, 500));
2380
2381                                         if ($ids)
2382                                                 $search_query_part = "ref_id IN ($ids) AND ";
2383                                         else
2384                                                 $search_query_part = "ref_id = -1 AND ";
2385
2386                                 } else {
2387                                         list($search_query_part, $search_words) = search_to_sql($search);
2388                                         $search_query_part .= " AND ";
2389                                 }
2390
2391                         } else {
2392                                 $search_query_part = "";
2393                         }
2394
2395                         if ($filter) {
2396
2397                                 if (DB_TYPE == "pgsql") {
2398                                         $query_strategy_part .= " AND updated > NOW() - INTERVAL '14 days' ";
2399                                 } else {
2400                                         $query_strategy_part .= " AND updated > DATE_SUB(NOW(), INTERVAL 14 DAY) ";
2401                                 }
2402
2403                                 $override_order = "updated DESC";
2404
2405                                 $filter_query_part = filter_to_sql($filter, $owner_uid);
2406
2407                                 // Try to check if SQL regexp implementation chokes on a valid regexp
2408
2409
2410                                 $result = db_query("SELECT true AS true_val FROM ttrss_entries,
2411                                         ttrss_user_entries, ttrss_feeds
2412                                         WHERE $filter_query_part LIMIT 1", false);
2413
2414                                 if ($result) {
2415                                         $test = db_fetch_result($result, 0, "true_val");
2416
2417                                         if (!$test) {
2418                                                 $filter_query_part = "false AND";
2419                                         } else {
2420                                                 $filter_query_part .= " AND";
2421                                         }
2422                                 } else {
2423                                         $filter_query_part = "false AND";
2424                                 }
2425
2426                         } else {
2427                                 $filter_query_part = "";
2428                         }
2429
2430                         if ($since_id) {
2431                                 $since_id_part = "ttrss_entries.id > $since_id AND ";
2432                         } else {
2433                                 $since_id_part = "";
2434                         }
2435
2436                         $view_query_part = "";
2437
2438                         if ($view_mode == "adaptive") {
2439                                 if ($search) {
2440                                         $view_query_part = " ";
2441                                 } else if ($feed != -1) {
2442
2443                                         $unread = getFeedUnread($feed, $cat_view);
2444
2445                                         if ($cat_view && $feed > 0 && $include_children)
2446                                                 $unread += getCategoryChildrenUnread($feed);
2447
2448                                         if ($unread > 0)
2449                                 $view_query_part = " unread = true AND ";
2450
2451                                 }
2452                         }
2453
2454                         if ($view_mode == "marked") {
2455                                 $view_query_part = " marked = true AND ";
2456                         }
2457
2458                         if ($view_mode == "has_note") {
2459                                 $view_query_part = " (note IS NOT NULL AND note != '') AND ";
2460                         }
2461
2462                         if ($view_mode == "published") {
2463                                 $view_query_part = " published = true AND ";
2464                         }
2465
2466                         if ($view_mode == "unread" && $feed != -6) {
2467                                 $view_query_part = " unread = true AND ";
2468                         }
2469
2470                         if ($limit > 0) {
2471                                 $limit_query_part = "LIMIT " . $limit;
2472                         }
2473
2474                         $allow_archived = false;
2475
2476                         $vfeed_query_part = "";
2477
2478                         // override query strategy and enable feed display when searching globally
2479                         if ($search && $search_mode == "all_feeds") {
2480                                 $query_strategy_part = "true";
2481                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2482                         /* tags */
2483                         } else if (!is_numeric($feed)) {
2484                                 $query_strategy_part = "true";
2485                                 $vfeed_query_part = "(SELECT title FROM ttrss_feeds WHERE
2486                                         id = feed_id) as feed_title,";
2487                         } else if ($search && $search_mode == "this_cat") {
2488                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2489
2490                                 if ($feed > 0) {
2491                                         if ($include_children) {
2492                                                 $subcats = getChildCategories($feed, $owner_uid);
2493                                                 array_push($subcats, $feed);
2494                                                 $cats_qpart = join(",", $subcats);
2495                                         } else {
2496                                                 $cats_qpart = $feed;
2497                                         }
2498
2499                                         $query_strategy_part = "ttrss_feeds.cat_id IN ($cats_qpart)";
2500
2501                                 } else {
2502                                         $query_strategy_part = "ttrss_feeds.cat_id IS NULL";
2503                                 }
2504
2505                         } else if ($feed > 0) {
2506
2507                                 if ($cat_view) {
2508
2509                                         if ($feed > 0) {
2510                                                 if ($include_children) {
2511                                                         # sub-cats
2512                                                         $subcats = getChildCategories($feed, $owner_uid);
2513
2514                                                         array_push($subcats, $feed);
2515                                                         $query_strategy_part = "cat_id IN (".
2516                                                                         implode(",", $subcats).")";
2517
2518                                                 } else {
2519                                                         $query_strategy_part = "cat_id = '$feed'";
2520                                                 }
2521
2522                                         } else {
2523                                                 $query_strategy_part = "cat_id IS NULL";
2524                                         }
2525
2526                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2527
2528                                 } else {
2529                                         $query_strategy_part = "feed_id = '$feed'";
2530                                 }
2531                         } else if ($feed == 0 && !$cat_view) { // archive virtual feed
2532                                 $query_strategy_part = "feed_id IS NULL";
2533                                 $allow_archived = true;
2534                         } else if ($feed == 0 && $cat_view) { // uncategorized
2535                                 $query_strategy_part = "cat_id IS NULL AND feed_id IS NOT NULL";
2536                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2537                         } else if ($feed == -1) { // starred virtual feed
2538                                 $query_strategy_part = "marked = true";
2539                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2540                                 $allow_archived = true;
2541
2542                                 if (!$override_order) {
2543                                         $override_order = "last_marked DESC, date_entered DESC, updated DESC";
2544                                 }
2545
2546                         } else if ($feed == -2) { // published virtual feed OR labels category
2547
2548                                 if (!$cat_view) {
2549                                         $query_strategy_part = "published = true";
2550                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2551                                         $allow_archived = true;
2552
2553                                         if (!$override_order) {
2554                                                 $override_order = "last_published DESC, date_entered DESC, updated DESC";
2555                                         }
2556
2557                                 } else {
2558                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2559
2560                                         $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2561
2562                                         $query_strategy_part = "ttrss_labels2.id = ttrss_user_labels2.label_id AND
2563                                                 ttrss_user_labels2.article_id = ref_id";
2564
2565                                 }
2566                         } else if ($feed == -6) { // recently read
2567                                 $query_strategy_part = "unread = false AND last_read IS NOT NULL";
2568                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2569                                 $allow_archived = true;
2570
2571                                 if (!$override_order) $override_order = "last_read DESC";
2572
2573 /*                      } else if ($feed == -7) { // shared
2574                                 $query_strategy_part = "uuid != ''";
2575                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2576                                 $allow_archived = true; */
2577                         } else if ($feed == -3) { // fresh virtual feed
2578                                 $query_strategy_part = "unread = true AND score >= 0";
2579
2580                                 $intl = get_pref("FRESH_ARTICLE_MAX_AGE", $owner_uid);
2581
2582                                 if (DB_TYPE == "pgsql") {
2583                                         $query_strategy_part .= " AND date_entered > NOW() - INTERVAL '$intl hour' ";
2584                                 } else {
2585                                         $query_strategy_part .= " AND date_entered > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
2586                                 }
2587
2588                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2589                         } else if ($feed == -4) { // all articles virtual feed
2590                                 $allow_archived = true;
2591                                 $query_strategy_part = "true";
2592                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2593                         } else if ($feed <= LABEL_BASE_INDEX) { // labels
2594                                 $label_id = feed_to_label_id($feed);
2595
2596                                 $query_strategy_part = "label_id = '$label_id' AND
2597                                         ttrss_labels2.id = ttrss_user_labels2.label_id AND
2598                                         ttrss_user_labels2.article_id = ref_id";
2599
2600                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2601                                 $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2602                                 $allow_archived = true;
2603
2604                         } else {
2605                                 $query_strategy_part = "true";
2606                         }
2607
2608                         $order_by = "score DESC, date_entered DESC, updated DESC";
2609
2610                         if ($view_mode == "unread_first") {
2611                                 $order_by = "unread DESC, $order_by";
2612                         }
2613
2614                         if ($override_order) {
2615                                 $order_by = $override_order;
2616                         }
2617
2618                         if ($override_strategy) {
2619                                 $query_strategy_part = $override_strategy;
2620                         }
2621
2622                         if ($override_vfeed) {
2623                                 $vfeed_query_part = $override_vfeed;
2624                         }
2625
2626                         $feed_title = "";
2627
2628                         if ($search) {
2629                                 $feed_title = T_sprintf("Search results: %s", $search);
2630                         } else {
2631                                 if ($cat_view) {
2632                                         $feed_title = getCategoryTitle($feed);
2633                                 } else {
2634                                         if (is_numeric($feed) && $feed > 0) {
2635                                                 $result = db_query("SELECT title,site_url,last_error,last_updated
2636                                                         FROM ttrss_feeds WHERE id = '$feed' AND owner_uid = $owner_uid");
2637
2638                                                 $feed_title = db_fetch_result($result, 0, "title");
2639                                                 $feed_site_url = db_fetch_result($result, 0, "site_url");
2640                                                 $last_error = db_fetch_result($result, 0, "last_error");
2641                                                 $last_updated = db_fetch_result($result, 0, "last_updated");
2642                                         } else {
2643                                                 $feed_title = getFeedTitle($feed);
2644                                         }
2645                                 }
2646                         }
2647
2648
2649                         $content_query_part = "content, content AS content_preview, ";
2650
2651
2652                         if (is_numeric($feed)) {
2653
2654                                 if ($feed >= 0) {
2655                                         $feed_kind = "Feeds";
2656                                 } else {
2657                                         $feed_kind = "Labels";
2658                                 }
2659
2660                                 if ($limit_query_part) {
2661                                         $offset_query_part = "OFFSET $offset";
2662                                 }
2663
2664                                 // proper override_order applied above
2665                                 if ($vfeed_query_part && !$ignore_vfeed_group && get_pref('VFEED_GROUP_BY_FEED', $owner_uid)) {
2666                                         if (!$override_order) {
2667                                                 $order_by = "ttrss_feeds.title, $order_by";
2668                                         } else {
2669                                                 $order_by = "ttrss_feeds.title, $override_order";
2670                                         }
2671                                 }
2672
2673                                 if (!$allow_archived) {
2674                                         $from_qpart = "ttrss_entries,ttrss_user_entries,ttrss_feeds$ext_tables_part";
2675                                         $feed_check_qpart = "ttrss_user_entries.feed_id = ttrss_feeds.id AND";
2676
2677                                 } else {
2678                                         $from_qpart = "ttrss_entries$ext_tables_part,ttrss_user_entries
2679                                                 LEFT JOIN ttrss_feeds ON (feed_id = ttrss_feeds.id)";
2680                                 }
2681
2682                                 if ($vfeed_query_part)
2683                                         $vfeed_query_part .= "favicon_avg_color,";
2684
2685                                 $query = "SELECT DISTINCT
2686                                                 date_entered,
2687                                                 guid,
2688                                                 ttrss_entries.id,ttrss_entries.title,
2689                                                 updated,
2690                                                 label_cache,
2691                                                 tag_cache,
2692                                                 always_display_enclosures,
2693                                                 site_url,
2694                                                 note,
2695                                                 num_comments,
2696                                                 comments,
2697                                                 int_id,
2698                                                 uuid,
2699                                                 lang,
2700                                                 hide_images,
2701                                                 unread,feed_id,marked,published,link,last_read,orig_feed_id,
2702                                                 last_marked, last_published,
2703                                                 $vfeed_query_part
2704                                                 $content_query_part
2705                                                 author,score
2706                                         FROM
2707                                                 $from_qpart
2708                                         WHERE
2709                                         $feed_check_qpart
2710                                         ttrss_user_entries.ref_id = ttrss_entries.id AND
2711                                         ttrss_user_entries.owner_uid = '$owner_uid' AND
2712                                         $search_query_part
2713                                         $filter_query_part
2714                                         $view_query_part
2715                                         $since_id_part
2716                                         $query_strategy_part ORDER BY $order_by
2717                                         $limit_query_part $offset_query_part";
2718
2719                                 if ($_REQUEST["debug"]) print $query;
2720
2721                                 $result = db_query($query);
2722
2723                         } else {
2724                                 // browsing by tag
2725
2726                                 $select_qpart = "SELECT DISTINCT " .
2727                                                                 "date_entered," .
2728                                                                 "guid," .
2729                                                                 "note," .
2730                                                                 "ttrss_entries.id as id," .
2731                                                                 "title," .
2732                                                                 "updated," .
2733                                                                 "unread," .
2734                                                                 "feed_id," .
2735                                                                 "orig_feed_id," .
2736                                                                 "marked," .
2737                                                                 "num_comments, " .
2738                                                                 "comments, " .
2739                                                                 "tag_cache," .
2740                                                                 "label_cache," .
2741                                                                 "link," .
2742                                                                 "lang," .
2743                                                                 "uuid," .
2744                                                                 "last_read," .
2745                                                                 "(SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) AS hide_images," .
2746                                                                 "last_marked, last_published, " .
2747                                                                 $since_id_part .
2748                                                                 $vfeed_query_part .
2749                                                                 $content_query_part .
2750                                                                 "score ";
2751
2752                                 $feed_kind = "Tags";
2753                                 $all_tags = explode(",", $feed);
2754                                 if ($search_mode == 'any') {
2755                                         $tag_sql = "tag_name in (" . implode(", ", array_map("db_quote", $all_tags)) . ")";
2756                                         $from_qpart = " FROM ttrss_entries,ttrss_user_entries,ttrss_tags ";
2757                                         $where_qpart = " WHERE " .
2758                                                                    "ref_id = ttrss_entries.id AND " .
2759                                                                    "ttrss_user_entries.owner_uid = $owner_uid AND " .
2760                                                                    "post_int_id = int_id AND $tag_sql AND " .
2761                                                                    $view_query_part .
2762                                                                    $search_query_part .
2763                                                                    $query_strategy_part . " ORDER BY $order_by " .
2764                                                                    $limit_query_part;
2765
2766                                 } else {
2767                                         $i = 1;
2768                                         $sub_selects = array();
2769                                         $sub_ands = array();
2770                                         foreach ($all_tags as $term) {
2771                                                 array_push($sub_selects, "(SELECT post_int_id from ttrss_tags WHERE tag_name = " . db_quote($term) . " AND owner_uid = $owner_uid) as A$i");
2772                                                 $i++;
2773                                         }
2774                                         if ($i > 2) {
2775                                                 $x = 1;
2776                                                 $y = 2;
2777                                                 do {
2778                                                         array_push($sub_ands, "A$x.post_int_id = A$y.post_int_id");
2779                                                         $x++;
2780                                                         $y++;
2781                                                 } while ($y < $i);
2782                                         }
2783                                         array_push($sub_ands, "A1.post_int_id = ttrss_user_entries.int_id and ttrss_user_entries.owner_uid = $owner_uid");
2784                                         array_push($sub_ands, "ttrss_user_entries.ref_id = ttrss_entries.id");
2785                                         $from_qpart = " FROM " . implode(", ", $sub_selects) . ", ttrss_user_entries, ttrss_entries";
2786                                         $where_qpart = " WHERE " . implode(" AND ", $sub_ands);
2787                                 }
2788                                 //                              error_log("TAG SQL: " . $tag_sql);
2789                                 // $tag_sql = "tag_name = '$feed'";   DEFAULT way
2790
2791                                 //                              error_log("[". $select_qpart . "][" . $from_qpart . "][" .$where_qpart . "]");
2792                                 $result = db_query($select_qpart . $from_qpart . $where_qpart);
2793                         }
2794
2795                         return array($result, $feed_title, $feed_site_url, $last_error, $last_updated, $search_words);
2796
2797         }
2798
2799         function sanitize($str, $force_remove_images = false, $owner = false, $site_url = false, $highlight_words = false, $article_id = false) {
2800                 if (!$owner) $owner = $_SESSION["uid"];
2801
2802                 $res = trim($str); if (!$res) return '';
2803
2804                 $charset_hack = '<head>
2805                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
2806                 </head>';
2807
2808                 $res = trim($res); if (!$res) return '';
2809
2810                 libxml_use_internal_errors(true);
2811
2812                 $doc = new DOMDocument();
2813                 $doc->loadHTML($charset_hack . $res);
2814                 $xpath = new DOMXPath($doc);
2815
2816                 $entries = $xpath->query('(//a[@href]|//img[@src])');
2817
2818                 foreach ($entries as $entry) {
2819
2820                         if ($site_url) {
2821
2822                                 if ($entry->hasAttribute('href'))
2823                                         $entry->setAttribute('href',
2824                                                 rewrite_relative_url($site_url, $entry->getAttribute('href')));
2825
2826                                 if ($entry->hasAttribute('src')) {
2827                                         $src = rewrite_relative_url($site_url, $entry->getAttribute('src'));
2828
2829                                         $cached_filename = CACHE_DIR . '/images/' . sha1($src) . '.png';
2830
2831                                         if (file_exists($cached_filename)) {
2832                                                 $src = SELF_URL_PATH . '/image.php?hash=' . sha1($src);
2833                                         }
2834
2835                                         $entry->setAttribute('src', $src);
2836                                 }
2837
2838                                 if ($entry->nodeName == 'img') {
2839                                         if (($owner && get_pref("STRIP_IMAGES", $owner)) ||
2840                                                         $force_remove_images || $_SESSION["bw_limit"]) {
2841
2842                                                 $p = $doc->createElement('p');
2843
2844                                                 $a = $doc->createElement('a');
2845                                                 $a->setAttribute('href', $entry->getAttribute('src'));
2846
2847                                                 $a->appendChild(new DOMText($entry->getAttribute('src')));
2848                                                 $a->setAttribute('target', '_blank');
2849
2850                                                 $p->appendChild($a);
2851
2852                                                 $entry->parentNode->replaceChild($p, $entry);
2853                                         }
2854                                 }
2855                         }
2856
2857                         if (strtolower($entry->nodeName) == "a") {
2858                                 $entry->setAttribute("target", "_blank");
2859                         }
2860                 }
2861
2862                 $entries = $xpath->query('//iframe');
2863                 foreach ($entries as $entry) {
2864                         $entry->setAttribute('sandbox', 'allow-scripts');
2865
2866                 }
2867
2868                 $allowed_elements = array('a', 'address', 'audio', 'article', 'aside',
2869                         'b', 'bdi', 'bdo', 'big', 'blockquote', 'body', 'br',
2870                         'caption', 'cite', 'center', 'code', 'col', 'colgroup',
2871                         'data', 'dd', 'del', 'details', 'div', 'dl', 'font',
2872                         'dt', 'em', 'footer', 'figure', 'figcaption',
2873                         'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'header', 'html', 'i',
2874                         'img', 'ins', 'kbd', 'li', 'main', 'mark', 'nav', 'noscript',
2875                         'ol', 'p', 'pre', 'q', 'ruby', 'rp', 'rt', 's', 'samp', 'section',
2876                         'small', 'source', 'span', 'strike', 'strong', 'sub', 'summary',
2877                         'sup', 'table', 'tbody', 'td', 'tfoot', 'th', 'thead', 'time',
2878                         'tr', 'track', 'tt', 'u', 'ul', 'var', 'wbr', 'video' );
2879
2880                 if ($_SESSION['hasSandbox']) $allowed_elements[] = 'iframe';
2881
2882                 $disallowed_attributes = array('id', 'style', 'class');
2883
2884                 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_SANITIZE) as $plugin) {
2885                         $retval = $plugin->hook_sanitize($doc, $site_url, $allowed_elements, $disallowed_attributes, $article_id);
2886                         if (is_array($retval)) {
2887                                 $doc = $retval[0];
2888                                 $allowed_elements = $retval[1];
2889                                 $disallowed_attributes = $retval[2];
2890                         } else {
2891                                 $doc = $retval;
2892                         }
2893                 }
2894
2895                 $doc->removeChild($doc->firstChild); //remove doctype
2896                 $doc = strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes);
2897
2898                 if ($highlight_words) {
2899                         foreach ($highlight_words as $word) {
2900
2901                                 // http://stackoverflow.com/questions/4081372/highlight-keywords-in-a-paragraph
2902
2903                                 $elements = $xpath->query("//*/text()");
2904
2905                                 foreach ($elements as $child) {
2906
2907                                         $fragment = $doc->createDocumentFragment();
2908                                         $text = $child->textContent;
2909                                         $stubs = array();
2910
2911                                         while (($pos = mb_stripos($text, $word)) !== false) {
2912                                                 $fragment->appendChild(new DomText(mb_substr($text, 0, $pos)));
2913                                                 $word = mb_substr($text, $pos, mb_strlen($word));
2914                                                 $highlight = $doc->createElement('span');
2915                                                 $highlight->appendChild(new DomText($word));
2916                                                 $highlight->setAttribute('class', 'highlight');
2917                                                 $fragment->appendChild($highlight);
2918                                                 $text = mb_substr($text, $pos + mb_strlen($word));
2919                                         }
2920
2921                                         if (!empty($text)) $fragment->appendChild(new DomText($text));
2922
2923                                         $child->parentNode->replaceChild($fragment, $child);
2924                                 }
2925                         }
2926                 }
2927
2928                 $res = $doc->saveHTML();
2929
2930                 return $res;
2931         }
2932
2933         function strip_harmful_tags($doc, $allowed_elements, $disallowed_attributes) {
2934                 $xpath = new DOMXPath($doc);
2935                 $entries = $xpath->query('//*');
2936
2937                 foreach ($entries as $entry) {
2938                         if (!in_array($entry->nodeName, $allowed_elements)) {
2939                                 $entry->parentNode->removeChild($entry);
2940                         }
2941
2942                         if ($entry->hasAttributes()) {
2943                                 $attrs_to_remove = array();
2944
2945                                 foreach ($entry->attributes as $attr) {
2946
2947                                         if (strpos($attr->nodeName, 'on') === 0) {
2948                                                 array_push($attrs_to_remove, $attr);
2949                                         }
2950
2951                                         if (in_array($attr->nodeName, $disallowed_attributes)) {
2952                                                 array_push($attrs_to_remove, $attr);
2953                                         }
2954                                 }
2955
2956                                 foreach ($attrs_to_remove as $attr) {
2957                                         $entry->removeAttributeNode($attr);
2958                                 }
2959                         }
2960                 }
2961
2962                 return $doc;
2963         }
2964
2965         function check_for_update() {
2966                 if (CHECK_FOR_NEW_VERSION && $_SESSION['access_level'] >= 10) {
2967                         $version_url = "http://tt-rss.org/version.php?ver=" . VERSION .
2968                                 "&iid=" . sha1(SELF_URL_PATH);
2969
2970                         $version_data = @fetch_file_contents($version_url);
2971
2972                         if ($version_data) {
2973                                 $version_data = json_decode($version_data, true);
2974                                 if ($version_data && $version_data['version']) {
2975                                         if (version_compare(VERSION_STATIC, $version_data['version']) == -1) {
2976                                                 return $version_data;
2977                                         }
2978                                 }
2979                         }
2980                 }
2981                 return false;
2982         }
2983
2984         function catchupArticlesById($ids, $cmode, $owner_uid = false) {
2985
2986                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2987                 if (count($ids) == 0) return;
2988
2989                 $tmp_ids = array();
2990
2991                 foreach ($ids as $id) {
2992                         array_push($tmp_ids, "ref_id = '$id'");
2993                 }
2994
2995                 $ids_qpart = join(" OR ", $tmp_ids);
2996
2997                 if ($cmode == 0) {
2998                         db_query("UPDATE ttrss_user_entries SET
2999                         unread = false,last_read = NOW()
3000                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
3001                 } else if ($cmode == 1) {
3002                         db_query("UPDATE ttrss_user_entries SET
3003                         unread = true
3004                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
3005                 } else {
3006                         db_query("UPDATE ttrss_user_entries SET
3007                         unread = NOT unread,last_read = NOW()
3008                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
3009                 }
3010
3011                 /* update ccache */
3012
3013                 $result = db_query("SELECT DISTINCT feed_id FROM ttrss_user_entries
3014                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
3015
3016                 while ($line = db_fetch_assoc($result)) {
3017                         ccache_update($line["feed_id"], $owner_uid);
3018                 }
3019         }
3020
3021         function get_article_tags($id, $owner_uid = 0, $tag_cache = false) {
3022
3023                 $a_id = db_escape_string($id);
3024
3025                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3026
3027                 $query = "SELECT DISTINCT tag_name,
3028                         owner_uid as owner FROM
3029                         ttrss_tags WHERE post_int_id = (SELECT int_id FROM ttrss_user_entries WHERE
3030                         ref_id = '$a_id' AND owner_uid = '$owner_uid' LIMIT 1) ORDER BY tag_name";
3031
3032                 $tags = array();
3033
3034                 /* check cache first */
3035
3036                 if ($tag_cache === false) {
3037                         $result = db_query("SELECT tag_cache FROM ttrss_user_entries
3038                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
3039
3040                         $tag_cache = db_fetch_result($result, 0, "tag_cache");
3041                 }
3042
3043                 if ($tag_cache) {
3044                         $tags = explode(",", $tag_cache);
3045                 } else {
3046
3047                         /* do it the hard way */
3048
3049                         $tmp_result = db_query($query);
3050
3051                         while ($tmp_line = db_fetch_assoc($tmp_result)) {
3052                                 array_push($tags, $tmp_line["tag_name"]);
3053                         }
3054
3055                         /* update the cache */
3056
3057                         $tags_str = db_escape_string(join(",", $tags));
3058
3059                         db_query("UPDATE ttrss_user_entries
3060                                 SET tag_cache = '$tags_str' WHERE ref_id = '$id'
3061                                 AND owner_uid = $owner_uid");
3062                 }
3063
3064                 return $tags;
3065         }
3066
3067         function trim_array($array) {
3068                 $tmp = $array;
3069                 array_walk($tmp, 'trim');
3070                 return $tmp;
3071         }
3072
3073         function tag_is_valid($tag) {
3074                 if ($tag == '') return false;
3075                 if (preg_match("/^[0-9]*$/", $tag)) return false;
3076                 if (mb_strlen($tag) > 250) return false;
3077
3078                 if (!$tag) return false;
3079
3080                 return true;
3081         }
3082
3083         function render_login_form() {
3084                 header('Cache-Control: public');
3085
3086                 require_once "login_form.php";
3087                 exit;
3088         }
3089
3090         function format_warning($msg, $id = "") {
3091                 global $link;
3092                 return "<div class=\"warning\" id=\"$id\">
3093                         <span><img src=\"images/alert.png\"></span><span>$msg</span></div>";
3094         }
3095
3096         function format_notice($msg, $id = "") {
3097                 global $link;
3098                 return "<div class=\"notice\" id=\"$id\">
3099                         <span><img src=\"images/information.png\"></span><span>$msg</span></div>";
3100         }
3101
3102         function format_error($msg, $id = "") {
3103                 global $link;
3104                 return "<div class=\"error\" id=\"$id\">
3105                         <span><img src=\"images/alert.png\"></span><span>$msg</span></div>";
3106         }
3107
3108         function print_notice($msg) {
3109                 return print format_notice($msg);
3110         }
3111
3112         function print_warning($msg) {
3113                 return print format_warning($msg);
3114         }
3115
3116         function print_error($msg) {
3117                 return print format_error($msg);
3118         }
3119
3120
3121         function T_sprintf() {
3122                 $args = func_get_args();
3123                 return vsprintf(__(array_shift($args)), $args);
3124         }
3125
3126         function format_inline_player($url, $ctype) {
3127
3128                 $entry = "";
3129
3130                 $url = htmlspecialchars($url);
3131
3132                 if (strpos($ctype, "audio/") === 0) {
3133
3134                         if ($_SESSION["hasAudio"] && (strpos($ctype, "ogg") !== false ||
3135                                 $_SESSION["hasMp3"])) {
3136
3137                                 $entry .= "<audio preload=\"none\" controls>
3138                                         <source type=\"$ctype\" src=\"$url\"></source>
3139                                         </audio>";
3140
3141                         } else {
3142
3143                                 $entry .= "<object type=\"application/x-shockwave-flash\"
3144                                         data=\"lib/button/musicplayer.swf?song_url=$url\"
3145                                         width=\"17\" height=\"17\" style='float : left; margin-right : 5px;'>
3146                                         <param name=\"movie\"
3147                                                 value=\"lib/button/musicplayer.swf?song_url=$url\" />
3148                                         </object>";
3149                         }
3150
3151                         if ($entry) $entry .= "&nbsp; <a target=\"_blank\"
3152                                 href=\"$url\">" . basename($url) . "</a>";
3153
3154                         return $entry;
3155
3156                 }
3157
3158                 return "";
3159
3160 /*              $filename = substr($url, strrpos($url, "/")+1);
3161
3162                 $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
3163                         $filename . " (" . $ctype . ")" . "</a>"; */
3164
3165         }
3166
3167         function format_article($id, $mark_as_read = true, $zoom_mode = false, $owner_uid = false) {
3168                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3169
3170                 $rv = array();
3171
3172                 $rv['id'] = $id;
3173
3174                 /* we can figure out feed_id from article id anyway, why do we
3175                  * pass feed_id here? let's ignore the argument :(*/
3176
3177                 $result = db_query("SELECT feed_id FROM ttrss_user_entries
3178                         WHERE ref_id = '$id'");
3179
3180                 $feed_id = (int) db_fetch_result($result, 0, "feed_id");
3181
3182                 $rv['feed_id'] = $feed_id;
3183
3184                 //if (!$zoom_mode) { print "<article id='$id'><![CDATA["; };
3185
3186                 if ($mark_as_read) {
3187                         $result = db_query("UPDATE ttrss_user_entries
3188                                 SET unread = false,last_read = NOW()
3189                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
3190
3191                         ccache_update($feed_id, $owner_uid);
3192                 }
3193
3194                 $result = db_query("SELECT id,title,link,content,feed_id,comments,int_id,lang,
3195                         ".SUBSTRING_FOR_DATE."(updated,1,16) as updated,
3196                         (SELECT site_url FROM ttrss_feeds WHERE id = feed_id) as site_url,
3197                         (SELECT title FROM ttrss_feeds WHERE id = feed_id) as feed_title,
3198                         (SELECT hide_images FROM ttrss_feeds WHERE id = feed_id) as hide_images,
3199                         (SELECT always_display_enclosures FROM ttrss_feeds WHERE id = feed_id) as always_display_enclosures,
3200                         num_comments,
3201                         tag_cache,
3202                         author,
3203                         orig_feed_id,
3204                         note
3205                         FROM ttrss_entries,ttrss_user_entries
3206                         WHERE   id = '$id' AND ref_id = id AND owner_uid = $owner_uid");
3207
3208                 if ($result) {
3209
3210                         $line = db_fetch_assoc($result);
3211
3212                         $tag_cache = $line["tag_cache"];
3213
3214                         $line["tags"] = get_article_tags($id, $owner_uid, $line["tag_cache"]);
3215                         unset($line["tag_cache"]);
3216
3217                         $line["content"] = sanitize($line["content"],
3218                                 sql_bool_to_bool($line['hide_images']),
3219                                 $owner_uid, $line["site_url"], false, $line["id"]);
3220
3221                         foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_RENDER_ARTICLE) as $p) {
3222                                 $line = $p->hook_render_article($line);
3223                         }
3224
3225                         $num_comments = $line["num_comments"];
3226                         $entry_comments = "";
3227
3228                         if ($num_comments > 0) {
3229                                 if ($line["comments"]) {
3230                                         $comments_url = htmlspecialchars($line["comments"]);
3231                                 } else {
3232                                         $comments_url = htmlspecialchars($line["link"]);
3233                                 }
3234                                 $entry_comments = "<a class=\"postComments\"
3235                                         target='_blank' href=\"$comments_url\">$num_comments ".
3236                                         _ngettext("comment", "comments", $num_comments)."</a>";
3237
3238                         } else {
3239                                 if ($line["comments"] && $line["link"] != $line["comments"]) {
3240                                         $entry_comments = "<a class=\"postComments\" target='_blank' href=\"".htmlspecialchars($line["comments"])."\">".__("comments")."</a>";
3241                                 }
3242                         }
3243
3244                         if ($zoom_mode) {
3245                                 header("Content-Type: text/html");
3246                                 $rv['content'] .= "<html><head>
3247                                                 <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"/>
3248                                                 <title>Tiny Tiny RSS - ".$line["title"]."</title>
3249                                                 <link rel=\"stylesheet\" type=\"text/css\" href=\"css/tt-rss.css\">
3250                                                 <link rel=\"shortcut icon\" type=\"image/png\" href=\"images/favicon.png\">
3251                                                 <link rel=\"icon\" type=\"image/png\" sizes=\"72x72\" href=\"images/favicon-72px.png\">
3252
3253                                                 <script type=\"text/javascript\">
3254                                                 function openSelectedAttachment(elem) {
3255                                                         try {
3256                                                                 var url = elem[elem.selectedIndex].value;
3257
3258                                                                 if (url) {
3259                                                                         window.open(url);
3260                                                                         elem.selectedIndex = 0;
3261                                                                 }
3262
3263                                                         } catch (e) {
3264                                                                 exception_error(\"openSelectedAttachment\", e);
3265                                                         }
3266                                                 }
3267                                         </script>
3268                                         </head><body id=\"ttrssZoom\">";
3269                         }
3270
3271                         $rv['content'] .= "<div class=\"postReply\" id=\"POST-$id\">";
3272
3273                         $rv['content'] .= "<div class=\"postHeader\" id=\"POSTHDR-$id\">";
3274
3275                         $entry_author = $line["author"];
3276
3277                         if ($entry_author) {
3278                                 $entry_author = __(" - ") . $entry_author;
3279                         }
3280
3281                         $parsed_updated = make_local_datetime($line["updated"], true,
3282                                 $owner_uid, true);
3283
3284                         if (!$zoom_mode)
3285                                 $rv['content'] .= "<div class=\"postDate\">$parsed_updated</div>";
3286
3287                         if ($line["link"]) {
3288                                 $rv['content'] .= "<div class='postTitle'><a target='_blank'
3289                                         title=\"".htmlspecialchars($line['title'])."\"
3290                                         href=\"" .
3291                                         htmlspecialchars($line["link"]) . "\">" .
3292                                         $line["title"] . "</a>" .
3293                                         "<span class='author'>$entry_author</span></div>";
3294                         } else {
3295                                 $rv['content'] .= "<div class='postTitle'>" . $line["title"] . "$entry_author</div>";
3296                         }
3297
3298                         if ($zoom_mode) {
3299                                 $feed_title = "<a href=\"".htmlspecialchars($line["site_url"]).
3300                                         "\" target=\"_blank\">".
3301                                         htmlspecialchars($line["feed_title"])."</a>";
3302
3303                                 $rv['content'] .= "<div class=\"postFeedTitle\">$feed_title</div>";
3304
3305                                 $rv['content'] .= "<div class=\"postDate\">$parsed_updated</div>";
3306                         }
3307
3308                         $tags_str = format_tags_string($line["tags"], $id);
3309                         $tags_str_full = join(", ", $line["tags"]);
3310
3311                         if (!$tags_str_full) $tags_str_full = __("no tags");
3312
3313                         if (!$entry_comments) $entry_comments = "&nbsp;"; # placeholder
3314
3315                         $rv['content'] .= "<div class='postTags' style='float : right'>
3316                                 <img src='images/tag.png'
3317                                 class='tagsPic' alt='Tags' title='Tags'>&nbsp;";
3318
3319                         if (!$zoom_mode) {
3320                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>
3321                                         <a title=\"".__('Edit tags for this article')."\"
3322                                         href=\"#\" onclick=\"editArticleTags($id, $feed_id)\">(+)</a>";
3323
3324                                 $rv['content'] .= "<div dojoType=\"dijit.Tooltip\"
3325                                         id=\"ATSTRTIP-$id\" connectId=\"ATSTR-$id\"
3326                                         position=\"below\">$tags_str_full</div>";
3327
3328                                 foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_ARTICLE_BUTTON) as $p) {
3329                                         $rv['content'] .= $p->hook_article_button($line);
3330                                 }
3331
3332                         } else {
3333                                 $tags_str = strip_tags($tags_str);
3334                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>";
3335                         }
3336                         $rv['content'] .= "</div>";
3337                         $rv['content'] .= "<div clear='both'>";
3338
3339                         foreach (PluginHost::getInstance()->get_hooks(PluginHost::HOOK_ARTICLE_LEFT_BUTTON) as $p) {
3340                                 $rv['content'] .= $p->hook_article_left_button($line);
3341                         }
3342
3343                         $rv['content'] .= "$entry_comments</div>";
3344
3345                         if ($line["orig_feed_id"]) {
3346
3347                                 $tmp_result = db_query("SELECT * FROM ttrss_archived_feeds
3348                                         WHERE id = ".$line["orig_feed_id"]);
3349
3350                                 if (db_num_rows($tmp_result) != 0) {
3351
3352                                         $rv['content'] .= "<div clear='both'>";
3353                                         $rv['content'] .= __("Originally from:");
3354
3355                                         $rv['content'] .= "&nbsp;";
3356
3357                                         $tmp_line = db_fetch_assoc($tmp_result);
3358
3359                                         $rv['content'] .= "<a target='_blank'
3360                                                 href=' " . htmlspecialchars($tmp_line['site_url']) . "'>" .
3361                                                 $tmp_line['title'] . "</a>";
3362
3363                                         $rv['content'] .= "&nbsp;";
3364
3365                                         $rv['content'] .= "<a target='_blank' href='" . htmlspecialchars($tmp_line['feed_url']) . "'>";
3366                                         $rv['content'] .= "<img title='".__('Feed URL')."'class='tinyFeedIcon' src='images/pub_set.svg'></a>";
3367
3368                                         $rv['content'] .= "</div>";
3369                                 }
3370                         }
3371
3372                         $rv['content'] .= "</div>";
3373
3374                         $rv['content'] .= "<div id=\"POSTNOTE-$id\">";
3375                                 if ($line['note']) {
3376                                         $rv['content'] .= format_article_note($id, $line['note'], !$zoom_mode);
3377                                 }
3378                         $rv['content'] .= "</div>";
3379
3380                         if (!$line['lang']) $line['lang'] = 'en';
3381
3382                         $rv['content'] .= "<div class=\"postContent\" lang=\"".$line['lang']."\">";
3383
3384                         $rv['content'] .= $line["content"];
3385                         $rv['content'] .= format_article_enclosures($id,
3386                                 sql_bool_to_bool($line["always_display_enclosures"]),
3387                                 $line["content"],
3388                                 sql_bool_to_bool($line["hide_images"]));
3389
3390                         $rv['content'] .= "</div>";
3391
3392                         $rv['content'] .= "</div>";
3393
3394                 }
3395
3396                 if ($zoom_mode) {
3397                         $rv['content'] .= "
3398                                 <div class='footer'>
3399                                 <button onclick=\"return window.close()\">".
3400                                         __("Close this window")."</button></div>";
3401                         $rv['content'] .= "</body></html>";
3402                 }
3403
3404                 return $rv;
3405
3406         }
3407
3408         function print_checkpoint($n, $s) {
3409                 $ts = microtime(true);
3410                 echo sprintf("<!-- CP[$n] %.4f seconds -->\n", $ts - $s);
3411                 return $ts;
3412         }
3413
3414         function sanitize_tag($tag) {
3415                 $tag = trim($tag);
3416
3417                 $tag = mb_strtolower($tag, 'utf-8');
3418
3419                 $tag = preg_replace('/[\'\"\+\>\<]/', "", $tag);
3420
3421 //              $tag = str_replace('"', "", $tag);
3422 //              $tag = str_replace("+", " ", $tag);
3423                 $tag = str_replace("technorati tag: ", "", $tag);
3424
3425                 return $tag;
3426         }
3427
3428         function get_self_url_prefix() {
3429                 if (strrpos(SELF_URL_PATH, "/") === strlen(SELF_URL_PATH)-1) {
3430                         return substr(SELF_URL_PATH, 0, strlen(SELF_URL_PATH)-1);
3431                 } else {
3432                         return SELF_URL_PATH;
3433                 }
3434         }
3435
3436         /**
3437          * Compute the Mozilla Firefox feed adding URL from server HOST and REQUEST_URI.
3438          *
3439          * @return string The Mozilla Firefox feed adding URL.
3440          */
3441         function add_feed_url() {
3442                 //$url_path = ($_SERVER['HTTPS'] != "on" ? 'http://' :  'https://') . $_SERVER["HTTP_HOST"] . parse_url($_SERVER["REQUEST_URI"], PHP_URL_PATH);
3443
3444                 $url_path = get_self_url_prefix() .
3445                         "/public.php?op=subscribe&feed_url=%s";
3446                 return $url_path;
3447         } // function add_feed_url
3448
3449         function encrypt_password($pass, $salt = '', $mode2 = false) {
3450                 if ($salt && $mode2) {
3451                         return "MODE2:" . hash('sha256', $salt . $pass);
3452                 } else if ($salt) {
3453                         return "SHA1X:" . sha1("$salt:$pass");
3454                 } else {
3455                         return "SHA1:" . sha1($pass);
3456                 }
3457         } // function encrypt_password
3458
3459         function load_filters($feed_id, $owner_uid, $action_id = false) {
3460                 $filters = array();
3461
3462                 $cat_id = (int)getFeedCategory($feed_id);
3463
3464                 if ($cat_id == 0)
3465                         $null_cat_qpart = "cat_id IS NULL OR";
3466                 else
3467                         $null_cat_qpart = "";
3468
3469                 $result = db_query("SELECT * FROM ttrss_filters2 WHERE
3470                         owner_uid = $owner_uid AND enabled = true ORDER BY order_id, title");
3471
3472                 $check_cats = join(",", array_merge(
3473                         getParentCategories($cat_id, $owner_uid),
3474                         array($cat_id)));
3475
3476                 while ($line = db_fetch_assoc($result)) {
3477                         $filter_id = $line["id"];
3478
3479                         $result2 = db_query("SELECT
3480                                 r.reg_exp, r.inverse, r.feed_id, r.cat_id, r.cat_filter, t.name AS type_name
3481                                 FROM ttrss_filters2_rules AS r,
3482                                 ttrss_filter_types AS t
3483                                 WHERE
3484                                         ($null_cat_qpart (cat_id IS NULL AND cat_filter = false) OR cat_id IN ($check_cats)) AND
3485                                         (feed_id IS NULL OR feed_id = '$feed_id') AND
3486                                         filter_type = t.id AND filter_id = '$filter_id'");
3487
3488                         $rules = array();
3489                         $actions = array();
3490
3491                         while ($rule_line = db_fetch_assoc($result2)) {
3492 #                               print_r($rule_line);
3493
3494                                 $rule = array();
3495                                 $rule["reg_exp"] = $rule_line["reg_exp"];
3496                                 $rule["type"] = $rule_line["type_name"];
3497                                 $rule["inverse"] = sql_bool_to_bool($rule_line["inverse"]);
3498
3499                                 array_push($rules, $rule);
3500                         }
3501
3502                         $result2 = db_query("SELECT a.action_param,t.name AS type_name
3503                                 FROM ttrss_filters2_actions AS a,
3504                                 ttrss_filter_actions AS t
3505                                 WHERE
3506                                         action_id = t.id AND filter_id = '$filter_id'");
3507
3508                         while ($action_line = db_fetch_assoc($result2)) {
3509 #                               print_r($action_line);
3510
3511                                 $action = array();
3512                                 $action["type"] = $action_line["type_name"];
3513                                 $action["param"] = $action_line["action_param"];
3514
3515                                 array_push($actions, $action);
3516                         }
3517
3518
3519                         $filter = array();
3520                         $filter["match_any_rule"] = sql_bool_to_bool($line["match_any_rule"]);
3521                         $filter["inverse"] = sql_bool_to_bool($line["inverse"]);
3522                         $filter["rules"] = $rules;
3523                         $filter["actions"] = $actions;
3524
3525                         if (count($rules) > 0 && count($actions) > 0) {
3526                                 array_push($filters, $filter);
3527                         }
3528                 }
3529
3530                 return $filters;
3531         }
3532
3533         function get_score_pic($score) {
3534                 if ($score > 100) {
3535                         return "score_high.png";
3536                 } else if ($score > 0) {
3537                         return "score_half_high.png";
3538                 } else if ($score < -100) {
3539                         return "score_low.png";
3540                 } else if ($score < 0) {
3541                         return "score_half_low.png";
3542                 } else {
3543                         return "score_neutral.png";
3544                 }
3545         }
3546
3547         function feed_has_icon($id) {
3548                 return is_file(ICONS_DIR . "/$id.ico") && filesize(ICONS_DIR . "/$id.ico") > 0;
3549         }
3550
3551         function init_plugins() {
3552                 PluginHost::getInstance()->load(PLUGINS, PluginHost::KIND_ALL);
3553
3554                 return true;
3555         }
3556
3557         function format_tags_string($tags, $id) {
3558                 if (!is_array($tags) || count($tags) == 0) {
3559                         return __("no tags");
3560                 } else {
3561                         $maxtags = min(5, count($tags));
3562
3563                         for ($i = 0; $i < $maxtags; $i++) {
3564                                 $tags_str .= "<a class=\"tag\" href=\"#\" onclick=\"viewfeed('".$tags[$i]."')\">" . $tags[$i] . "</a>, ";
3565                         }
3566
3567                         $tags_str = mb_substr($tags_str, 0, mb_strlen($tags_str)-2);
3568
3569                         if (count($tags) > $maxtags)
3570                                 $tags_str .= ", &hellip;";
3571
3572                         return $tags_str;
3573                 }
3574         }
3575
3576         function format_article_labels($labels, $id) {
3577
3578                 if (!is_array($labels)) return '';
3579
3580                 $labels_str = "";
3581
3582                 foreach ($labels as $l) {
3583                         $labels_str .= sprintf("<span class='hlLabelRef'
3584                                 style='color : %s; background-color : %s'>%s</span>",
3585                                         $l[2], $l[3], $l[1]);
3586                         }
3587
3588                 return $labels_str;
3589
3590         }
3591
3592         function format_article_note($id, $note, $allow_edit = true) {
3593
3594                 $str = "<div class='articleNote'        onclick=\"editArticleNote($id)\">
3595                         <div class='noteEdit' onclick=\"editArticleNote($id)\">".
3596                         ($allow_edit ? __('(edit note)') : "")."</div>$note</div>";
3597
3598                 return $str;
3599         }
3600
3601
3602         function get_feed_category($feed_cat, $parent_cat_id = false) {
3603                 if ($parent_cat_id) {
3604                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3605                         $parent_insert = "'$parent_cat_id'";
3606                 } else {
3607                         $parent_qpart = "parent_cat IS NULL";
3608                         $parent_insert = "NULL";
3609                 }
3610
3611                 $result = db_query(
3612                         "SELECT id FROM ttrss_feed_categories
3613                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3614
3615                 if (db_num_rows($result) == 0) {
3616                         return false;
3617                 } else {
3618                         return db_fetch_result($result, 0, "id");
3619                 }
3620         }
3621
3622         function add_feed_category($feed_cat, $parent_cat_id = false) {
3623
3624                 if (!$feed_cat) return false;
3625
3626                 db_query("BEGIN");
3627
3628                 if ($parent_cat_id) {
3629                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3630                         $parent_insert = "'$parent_cat_id'";
3631                 } else {
3632                         $parent_qpart = "parent_cat IS NULL";
3633                         $parent_insert = "NULL";
3634                 }
3635
3636                 $feed_cat = mb_substr($feed_cat, 0, 250);
3637
3638                 $result = db_query(
3639                         "SELECT id FROM ttrss_feed_categories
3640                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
3641
3642                 if (db_num_rows($result) == 0) {
3643
3644                         $result = db_query(
3645                                 "INSERT INTO ttrss_feed_categories (owner_uid,title,parent_cat)
3646                                 VALUES ('".$_SESSION["uid"]."', '$feed_cat', $parent_insert)");
3647
3648                         db_query("COMMIT");
3649
3650                         return true;
3651                 }
3652
3653                 return false;
3654         }
3655
3656         function getArticleFeed($id) {
3657                 $result = db_query("SELECT feed_id FROM ttrss_user_entries
3658                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
3659
3660                 if (db_num_rows($result) != 0) {
3661                         return db_fetch_result($result, 0, "feed_id");
3662                 } else {
3663                         return 0;
3664                 }
3665         }
3666
3667         /**
3668          * Fixes incomplete URLs by prepending "http://".
3669          * Also replaces feed:// with http://, and
3670          * prepends a trailing slash if the url is a domain name only.
3671          *
3672          * @param string $url Possibly incomplete URL
3673          *
3674          * @return string Fixed URL.
3675          */
3676         function fix_url($url) {
3677                 if (strpos($url, '://') === false) {
3678                         $url = 'http://' . $url;
3679                 } else if (substr($url, 0, 5) == 'feed:') {
3680                         $url = 'http:' . substr($url, 5);
3681                 }
3682
3683                 //prepend slash if the URL has no slash in it
3684                 // "http://www.example" -> "http://www.example/"
3685                 if (strpos($url, '/', strpos($url, ':') + 3) === false) {
3686                         $url .= '/';
3687                 }
3688
3689                 if ($url != "http:///")
3690                         return $url;
3691                 else
3692                         return '';
3693         }
3694
3695         function validate_feed_url($url) {
3696                 $parts = parse_url($url);
3697
3698                 return ($parts['scheme'] == 'http' || $parts['scheme'] == 'feed' || $parts['scheme'] == 'https');
3699
3700         }
3701
3702         function get_article_enclosures($id) {
3703
3704                 $query = "SELECT * FROM ttrss_enclosures
3705                         WHERE post_id = '$id' AND content_url != ''";
3706
3707                 $rv = array();
3708
3709                 $result = db_query($query);
3710
3711                 if (db_num_rows($result) > 0) {
3712                         while ($line = db_fetch_assoc($result)) {
3713                                 array_push($rv, $line);
3714                         }
3715                 }
3716
3717                 return $rv;
3718         }
3719
3720         function save_email_address($email) {
3721                 // FIXME: implement persistent storage of emails
3722
3723                 if (!$_SESSION['stored_emails'])
3724                         $_SESSION['stored_emails'] = array();
3725
3726                 if (!in_array($email, $_SESSION['stored_emails']))
3727                         array_push($_SESSION['stored_emails'], $email);
3728         }
3729
3730
3731         function get_feed_access_key($feed_id, $is_cat, $owner_uid = false) {
3732
3733                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3734
3735                 $sql_is_cat = bool_to_sql_bool($is_cat);
3736
3737                 $result = db_query("SELECT access_key FROM ttrss_access_keys
3738                         WHERE feed_id = '$feed_id'      AND is_cat = $sql_is_cat
3739                         AND owner_uid = " . $owner_uid);
3740
3741                 if (db_num_rows($result) == 1) {
3742                         return db_fetch_result($result, 0, "access_key");
3743                 } else {
3744                         $key = db_escape_string(sha1(uniqid(rand(), true)));
3745
3746                         $result = db_query("INSERT INTO ttrss_access_keys
3747                                 (access_key, feed_id, is_cat, owner_uid)
3748                                 VALUES ('$key', '$feed_id', $sql_is_cat, '$owner_uid')");
3749
3750                         return $key;
3751                 }
3752                 return false;
3753         }
3754
3755         function get_feeds_from_html($url, $content)
3756         {
3757                 $url     = fix_url($url);
3758                 $baseUrl = substr($url, 0, strrpos($url, '/') + 1);
3759
3760                 libxml_use_internal_errors(true);
3761
3762                 $doc = new DOMDocument();
3763                 $doc->loadHTML($content);
3764                 $xpath = new DOMXPath($doc);
3765                 $entries = $xpath->query('/html/head/link[@rel="alternate"]');
3766                 $feedUrls = array();
3767                 foreach ($entries as $entry) {
3768                         if ($entry->hasAttribute('href')) {
3769                                 $title = $entry->getAttribute('title');
3770                                 if ($title == '') {
3771                                         $title = $entry->getAttribute('type');
3772                                 }
3773                                 $feedUrl = rewrite_relative_url(
3774                                         $baseUrl, $entry->getAttribute('href')
3775                                 );
3776                                 $feedUrls[$feedUrl] = $title;
3777                         }
3778                 }
3779                 return $feedUrls;
3780         }
3781
3782         function is_html($content) {
3783                 return preg_match("/<html|DOCTYPE html/i", substr($content, 0, 20)) !== 0;
3784         }
3785
3786         function url_is_html($url, $login = false, $pass = false) {
3787                 return is_html(fetch_file_contents($url, false, $login, $pass));
3788         }
3789
3790         function print_label_select($name, $value, $attributes = "") {
3791
3792                 $result = db_query("SELECT caption FROM ttrss_labels2
3793                         WHERE owner_uid = '".$_SESSION["uid"]."' ORDER BY caption");
3794
3795                 print "<select default=\"$value\" name=\"" . htmlspecialchars($name) .
3796                         "\" $attributes onchange=\"labelSelectOnChange(this)\" >";
3797
3798                 while ($line = db_fetch_assoc($result)) {
3799
3800                         $issel = ($line["caption"] == $value) ? "selected=\"1\"" : "";
3801
3802                         print "<option value=\"".htmlspecialchars($line["caption"])."\"
3803                                 $issel>" . htmlspecialchars($line["caption"]) . "</option>";
3804
3805                 }
3806
3807 #               print "<option value=\"ADD_LABEL\">" .__("Add label...") . "</option>";
3808
3809                 print "</select>";
3810
3811
3812         }
3813
3814         function format_article_enclosures($id, $always_display_enclosures,
3815                                         $article_content, $hide_images = false) {
3816
3817                 $result = get_article_enclosures($id);
3818                 $rv = '';
3819
3820                 if (count($result) > 0) {
3821
3822                         $entries_html = array();
3823                         $entries = array();
3824                         $entries_inline = array();
3825
3826                         foreach ($result as $line) {
3827
3828                                 $url = $line["content_url"];
3829                                 $ctype = $line["content_type"];
3830                                 $title = $line["title"];
3831
3832                                 if (!$ctype) $ctype = __("unknown type");
3833
3834                                 $filename = substr($url, strrpos($url, "/")+1);
3835
3836                                 $player = format_inline_player($url, $ctype);
3837
3838                                 if ($player) array_push($entries_inline, $player);
3839
3840 #                               $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
3841 #                                       $filename . " (" . $ctype . ")" . "</a>";
3842
3843                                 $entry = "<div onclick=\"window.open('".htmlspecialchars($url)."')\"
3844                                         dojoType=\"dijit.MenuItem\">$filename ($ctype)</div>";
3845
3846                                 array_push($entries_html, $entry);
3847
3848                                 $entry = array();
3849
3850                                 $entry["type"] = $ctype;
3851                                 $entry["filename"] = $filename;
3852                                 $entry["url"] = $url;
3853                                 $entry["title"] = $title;
3854
3855                                 array_push($entries, $entry);
3856                         }
3857
3858                         if ($_SESSION['uid'] && !get_pref("STRIP_IMAGES") && !$_SESSION["bw_limit"]) {
3859                                 if ($always_display_enclosures ||
3860                                                         !preg_match("/<img/i", $article_content)) {
3861
3862                                         foreach ($entries as $entry) {
3863
3864                                                 if (preg_match("/image/", $entry["type"]) ||
3865                                                                 preg_match("/\.(jpg|png|gif|bmp)/i", $entry["filename"])) {
3866
3867                                                                 if (!$hide_images) {
3868                                                                         $rv .= "<p><img
3869                                                                         alt=\"".htmlspecialchars($entry["filename"])."\"
3870                                                                         src=\"" .htmlspecialchars($entry["url"]) . "\"/></p>";
3871                                                                 } else {
3872                                                                         $rv .= "<p><a target=\"_blank\"
3873                                                                         href=\"".htmlspecialchars($entry["url"])."\"
3874                                                                         >" .htmlspecialchars($entry["url"]) . "</a></p>";
3875                                                                 }
3876
3877                                                                 if ($entry['title']) {
3878                                                                         $rv.= "<div class=\"enclosure_title\">${entry['title']}</div>";
3879                                                                 }
3880                                                 }
3881                                         }
3882                                 }
3883                         }
3884
3885                         if (count($entries_inline) > 0) {
3886                                 $rv .= "<hr clear='both'/>";
3887                                 foreach ($entries_inline as $entry) { $rv .= $entry; };
3888                                 $rv .= "<hr clear='both'/>";
3889                         }
3890
3891                         $rv .= "<select class=\"attachments\" onchange=\"openSelectedAttachment(this)\">".
3892                                 "<option value=''>" . __('Attachments')."</option>";
3893
3894                         foreach ($entries as $entry) {
3895                                 if ($entry["title"])
3896                                         $title = "&mdash; " . truncate_string($entry["title"], 30);
3897                                 else
3898                                         $title = "";
3899
3900                                 $rv .= "<option value=\"".htmlspecialchars($entry["url"])."\">" . htmlspecialchars($entry["filename"]) . "$title</option>";
3901
3902                         };
3903
3904                         $rv .= "</select>";
3905                 }
3906
3907                 return $rv;
3908         }
3909
3910         function getLastArticleId() {
3911                 $result = db_query("SELECT MAX(ref_id) AS id FROM ttrss_user_entries
3912                         WHERE owner_uid = " . $_SESSION["uid"]);
3913
3914                 if (db_num_rows($result) == 1) {
3915                         return db_fetch_result($result, 0, "id");
3916                 } else {
3917                         return -1;
3918                 }
3919         }
3920
3921         function build_url($parts) {
3922                 return $parts['scheme'] . "://" . $parts['host'] . $parts['path'];
3923         }
3924
3925         /**
3926          * Converts a (possibly) relative URL to a absolute one.
3927          *
3928          * @param string $url     Base URL (i.e. from where the document is)
3929          * @param string $rel_url Possibly relative URL in the document
3930          *
3931          * @return string Absolute URL
3932          */
3933         function rewrite_relative_url($url, $rel_url) {
3934                 if (strpos($rel_url, ":") !== false) {
3935                         return $rel_url;
3936                 } else if (strpos($rel_url, "://") !== false) {
3937                         return $rel_url;
3938                 } else if (strpos($rel_url, "//") === 0) {
3939                         # protocol-relative URL (rare but they exist)
3940                         return $rel_url;
3941                 } else if (strpos($rel_url, "/") === 0)
3942                 {
3943                         $parts = parse_url($url);
3944                         $parts['path'] = $rel_url;
3945
3946                         return build_url($parts);
3947
3948                 } else {
3949                         $parts = parse_url($url);
3950                         if (!isset($parts['path'])) {
3951                                 $parts['path'] = '/';
3952                         }
3953                         $dir = $parts['path'];
3954                         if (substr($dir, -1) !== '/') {
3955                                 $dir = dirname($parts['path']);
3956                                 $dir !== '/' && $dir .= '/';
3957                         }
3958                         $parts['path'] = $dir . $rel_url;
3959
3960                         return build_url($parts);
3961                 }
3962         }
3963
3964         function sphinx_search($query, $offset = 0, $limit = 30) {
3965                 require_once 'lib/sphinxapi.php';
3966
3967                 $sphinxClient = new SphinxClient();
3968
3969                 $sphinxpair = explode(":", SPHINX_SERVER, 2);
3970
3971                 $sphinxClient->SetServer($sphinxpair[0], (int)$sphinxpair[1]);
3972                 $sphinxClient->SetConnectTimeout(1);
3973
3974                 $sphinxClient->SetFieldWeights(array('title' => 70, 'content' => 30,
3975                         'feed_title' => 20));
3976
3977                 $sphinxClient->SetMatchMode(SPH_MATCH_EXTENDED2);
3978                 $sphinxClient->SetRankingMode(SPH_RANK_PROXIMITY_BM25);
3979                 $sphinxClient->SetLimits($offset, $limit, 1000);
3980                 $sphinxClient->SetArrayResult(false);
3981                 $sphinxClient->SetFilter('owner_uid', array($_SESSION['uid']));
3982
3983                 $result = $sphinxClient->Query($query, SPHINX_INDEX);
3984
3985                 $ids = array();
3986
3987                 if (is_array($result['matches'])) {
3988                         foreach (array_keys($result['matches']) as $int_id) {
3989                                 $ref_id = $result['matches'][$int_id]['attrs']['ref_id'];
3990                                 array_push($ids, $ref_id);
3991                         }
3992                 }
3993
3994                 return $ids;
3995         }
3996
3997         function cleanup_tags($days = 14, $limit = 1000) {
3998
3999                 if (DB_TYPE == "pgsql") {
4000                         $interval_query = "date_updated < NOW() - INTERVAL '$days days'";
4001                 } else if (DB_TYPE == "mysql") {
4002                         $interval_query = "date_updated < DATE_SUB(NOW(), INTERVAL $days DAY)";
4003                 }
4004
4005                 $tags_deleted = 0;
4006
4007                 while ($limit > 0) {
4008                         $limit_part = 500;
4009
4010                         $query = "SELECT ttrss_tags.id AS id
4011                                 FROM ttrss_tags, ttrss_user_entries, ttrss_entries
4012                                 WHERE post_int_id = int_id AND $interval_query AND
4013                                 ref_id = ttrss_entries.id AND tag_cache != '' LIMIT $limit_part";
4014
4015                         $result = db_query($query);
4016
4017                         $ids = array();
4018
4019                         while ($line = db_fetch_assoc($result)) {
4020                                 array_push($ids, $line['id']);
4021                         }
4022
4023                         if (count($ids) > 0) {
4024                                 $ids = join(",", $ids);
4025
4026                                 $tmp_result = db_query("DELETE FROM ttrss_tags WHERE id IN ($ids)");
4027                                 $tags_deleted += db_affected_rows($tmp_result);
4028                         } else {
4029                                 break;
4030                         }
4031
4032                         $limit -= $limit_part;
4033                 }
4034
4035                 return $tags_deleted;
4036         }
4037
4038         function print_user_stylesheet() {
4039                 $value = get_pref('USER_STYLESHEET');
4040
4041                 if ($value) {
4042                         print "<style type=\"text/css\">";
4043                         print str_replace("<br/>", "\n", $value);
4044                         print "</style>";
4045                 }
4046
4047         }
4048
4049         function filter_to_sql($filter, $owner_uid) {
4050                 $query = array();
4051
4052                 if (DB_TYPE == "pgsql")
4053                         $reg_qpart = "~";
4054                 else
4055                         $reg_qpart = "REGEXP";
4056
4057                 foreach ($filter["rules"] AS $rule) {
4058                         $rule['reg_exp'] = str_replace('/', '\/', $rule["reg_exp"]);
4059                         $regexp_valid = preg_match('/' . $rule['reg_exp'] . '/',
4060                                 $rule['reg_exp']) !== FALSE;
4061
4062                         if ($regexp_valid) {
4063
4064                                 $rule['reg_exp'] = db_escape_string($rule['reg_exp']);
4065
4066                                         switch ($rule["type"]) {
4067                                         case "title":
4068                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
4069                                                         $rule['reg_exp'] . "')";
4070                                                 break;
4071                                         case "content":
4072                                                 $qpart = "LOWER(ttrss_entries.content) $reg_qpart LOWER('".
4073                                                         $rule['reg_exp'] . "')";
4074                                                 break;
4075                                         case "both":
4076                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
4077                                                         $rule['reg_exp'] . "') OR LOWER(" .
4078                                                         "ttrss_entries.content) $reg_qpart LOWER('" . $rule['reg_exp'] . "')";
4079                                                 break;
4080                                         case "tag":
4081                                                 $qpart = "LOWER(ttrss_user_entries.tag_cache) $reg_qpart LOWER('".
4082                                                         $rule['reg_exp'] . "')";
4083                                                 break;
4084                                         case "link":
4085                                                 $qpart = "LOWER(ttrss_entries.link) $reg_qpart LOWER('".
4086                                                         $rule['reg_exp'] . "')";
4087                                                 break;
4088                                         case "author":
4089                                                 $qpart = "LOWER(ttrss_entries.author) $reg_qpart LOWER('".
4090                                                         $rule['reg_exp'] . "')";
4091                                                 break;
4092                                 }
4093
4094                                 if (isset($rule['inverse'])) $qpart = "NOT ($qpart)";
4095
4096                                 if (isset($rule["feed_id"]) && $rule["feed_id"] > 0) {
4097                                         $qpart .= " AND feed_id = " . db_escape_string($rule["feed_id"]);
4098                                 }
4099
4100                                 if (isset($rule["cat_id"])) {
4101
4102                                         if ($rule["cat_id"] > 0) {
4103                                                 $children = getChildCategories($rule["cat_id"], $owner_uid);
4104                                                 array_push($children, $rule["cat_id"]);
4105
4106                                                 $children = join(",", $children);
4107
4108                                                 $cat_qpart = "cat_id IN ($children)";
4109                                         } else {
4110                                                 $cat_qpart = "cat_id IS NULL";
4111                                         }
4112
4113                                         $qpart .= " AND $cat_qpart";
4114                                 }
4115
4116                                 $qpart .= " AND feed_id IS NOT NULL";
4117
4118                                 array_push($query, "($qpart)");
4119
4120                         }
4121                 }
4122
4123                 if (count($query) > 0) {
4124                         $fullquery = "(" . join($filter["match_any_rule"] ? "OR" : "AND", $query) . ")";
4125                 } else {
4126                         $fullquery = "(false)";
4127                 }
4128
4129                 if ($filter['inverse']) $fullquery = "(NOT $fullquery)";
4130
4131                 return $fullquery;
4132         }
4133
4134         if (!function_exists('gzdecode')) {
4135                 function gzdecode($string) { // no support for 2nd argument
4136                         return file_get_contents('compress.zlib://data:who/cares;base64,'.
4137                                 base64_encode($string));
4138                 }
4139         }
4140
4141         function get_random_bytes($length) {
4142                 if (function_exists('openssl_random_pseudo_bytes')) {
4143                         return openssl_random_pseudo_bytes($length);
4144                 } else {
4145                         $output = "";
4146
4147                         for ($i = 0; $i < $length; $i++)
4148                                 $output .= chr(mt_rand(0, 255));
4149
4150                         return $output;
4151                 }
4152         }
4153
4154         function read_stdin() {
4155                 $fp = fopen("php://stdin", "r");
4156
4157                 if ($fp) {
4158                         $line = trim(fgets($fp));
4159                         fclose($fp);
4160                         return $line;
4161                 }
4162
4163                 return null;
4164         }
4165
4166         function tmpdirname($path, $prefix) {
4167                 // Use PHP's tmpfile function to create a temporary
4168                 // directory name. Delete the file and keep the name.
4169                 $tempname = tempnam($path,$prefix);
4170                 if (!$tempname)
4171                         return false;
4172
4173                 if (!unlink($tempname))
4174                         return false;
4175
4176        return $tempname;
4177         }
4178
4179         function getFeedCategory($feed) {
4180                 $result = db_query("SELECT cat_id FROM ttrss_feeds
4181                         WHERE id = '$feed'");
4182
4183                 if (db_num_rows($result) > 0) {
4184                         return db_fetch_result($result, 0, "cat_id");
4185                 } else {
4186                         return false;
4187                 }
4188
4189         }
4190
4191         function implements_interface($class, $interface) {
4192                 return in_array($interface, class_implements($class));
4193         }
4194
4195         function geturl($url, $depth = 0){
4196
4197                 if ($depth == 20) return $url;
4198
4199                 if (!function_exists('curl_init'))
4200                         return user_error('CURL Must be installed for geturl function to work. Ask your host to enable it or uncomment extension=php_curl.dll in php.ini', E_USER_ERROR);
4201
4202                 $curl = curl_init();
4203                 $header[0] = "Accept: text/xml,application/xml,application/xhtml+xml,";
4204                 $header[0] .= "text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5";
4205                 $header[] = "Cache-Control: max-age=0";
4206                 $header[] = "Connection: keep-alive";
4207                 $header[] = "Keep-Alive: 300";
4208                 $header[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
4209                 $header[] = "Accept-Language: en-us,en;q=0.5";
4210                 $header[] = "Pragma: ";
4211
4212                 curl_setopt($curl, CURLOPT_URL, $url);
4213                 curl_setopt($curl, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 5.1; rv:5.0) Gecko/20100101 Firefox/5.0 Firefox/5.0');
4214                 curl_setopt($curl, CURLOPT_HTTPHEADER, $header);
4215                 curl_setopt($curl, CURLOPT_HEADER, true);
4216                 curl_setopt($curl, CURLOPT_REFERER, $url);
4217                 curl_setopt($curl, CURLOPT_ENCODING, 'gzip,deflate');
4218                 curl_setopt($curl, CURLOPT_AUTOREFERER, true);
4219                 curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
4220                 //curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true); //CURLOPT_FOLLOWLOCATION Disabled...
4221                 curl_setopt($curl, CURLOPT_TIMEOUT, 60);
4222                 curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);
4223
4224                 if (defined('_CURL_HTTP_PROXY')) {
4225                         curl_setopt($curl, CURLOPT_PROXY, _CURL_HTTP_PROXY);
4226                 }
4227
4228                 if ((OPENSSL_VERSION_NUMBER >= 0x0090808f) && (OPENSSL_VERSION_NUMBER < 0x10000000)) {
4229                         curl_setopt($curl, CURLOPT_SSLVERSION, 3);
4230                 }
4231
4232                 $html = curl_exec($curl);
4233
4234                 $status = curl_getinfo($curl);
4235
4236                 if($status['http_code']!=200){
4237                         if($status['http_code'] == 301 || $status['http_code'] == 302) {
4238                                 curl_close($curl);
4239                                 list($header) = explode("\r\n\r\n", $html, 2);
4240                                 $matches = array();
4241                                 preg_match("/(Location:|URI:)[^(\n)]*/", $header, $matches);
4242                                 $url = trim(str_replace($matches[1],"",$matches[0]));
4243                                 $url_parsed = parse_url($url);
4244                                 return (isset($url_parsed))? geturl($url, $depth + 1):'';
4245                         }
4246
4247                         global $fetch_last_error;
4248
4249                         $fetch_last_error = curl_errno($curl) . " " . curl_error($curl);
4250                         curl_close($curl);
4251
4252                         $oline='';
4253                         foreach($status as $key=>$eline){$oline.='['.$key.']'.$eline.' ';}
4254                         $line =$oline." \r\n ".$url."\r\n-----------------\r\n";
4255 #                       $handle = @fopen('./curl.error.log', 'a');
4256 #                       fwrite($handle, $line);
4257                         return FALSE;
4258                 }
4259                 curl_close($curl);
4260                 return $url;
4261         }
4262
4263         function get_minified_js($files) {
4264                 require_once 'lib/jshrink/Minifier.php';
4265
4266                 $rv = '';
4267
4268                 foreach ($files as $js) {
4269                         if (!isset($_GET['debug'])) {
4270                                 $cached_file = CACHE_DIR . "/js/".basename($js).".js";
4271
4272                                 if (file_exists($cached_file) &&
4273                                                 is_readable($cached_file) &&
4274                                                 filemtime($cached_file) >= filemtime("js/$js.js")) {
4275
4276                                         $rv .= file_get_contents($cached_file);
4277
4278                                 } else {
4279                                         $minified = JShrink\Minifier::minify(file_get_contents("js/$js.js"));
4280                                         file_put_contents($cached_file, $minified);
4281                                         $rv .= $minified;
4282                                 }
4283                         } else {
4284                                 $rv .= file_get_contents("js/$js.js");
4285                         }
4286                 }
4287
4288                 return $rv;
4289         }
4290
4291         function stylesheet_tag($filename) {
4292                 $timestamp = filemtime($filename);
4293
4294                 echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"$filename?$timestamp\"/>\n";
4295         }
4296
4297         function javascript_tag($filename) {
4298                 $query = "";
4299
4300                 if (!(strpos($filename, "?") === FALSE)) {
4301                         $query = substr($filename, strpos($filename, "?")+1);
4302                         $filename = substr($filename, 0, strpos($filename, "?"));
4303                 }
4304
4305                 $timestamp = filemtime($filename);
4306
4307                 if ($query) $timestamp .= "&$query";
4308
4309                 echo "<script type=\"text/javascript\" charset=\"utf-8\" src=\"$filename?$timestamp\"></script>\n";
4310         }
4311
4312         function calculate_dep_timestamp() {
4313                 $files = array_merge(glob("js/*.js"), glob("css/*.css"));
4314
4315                 $max_ts = -1;
4316
4317                 foreach ($files as $file) {
4318                         if (filemtime($file) > $max_ts) $max_ts = filemtime($file);
4319                 }
4320
4321                 return $max_ts;
4322         }
4323
4324         function T_js_decl($s1, $s2) {
4325                 if ($s1 && $s2) {
4326                         $s1 = preg_replace("/\n/", "", $s1);
4327                         $s2 = preg_replace("/\n/", "", $s2);
4328
4329                         $s1 = preg_replace("/\"/", "\\\"", $s1);
4330                         $s2 = preg_replace("/\"/", "\\\"", $s2);
4331
4332                         return "T_messages[\"$s1\"] = \"$s2\";\n";
4333                 }
4334         }
4335
4336         function init_js_translations() {
4337
4338         print 'var T_messages = new Object();
4339
4340                 function __(msg) {
4341                         if (T_messages[msg]) {
4342                                 return T_messages[msg];
4343                         } else {
4344                                 return msg;
4345                         }
4346                 }
4347
4348                 function ngettext(msg1, msg2, n) {
4349                         return __((parseInt(n) > 1) ? msg2 : msg1);
4350                 }';
4351
4352                 $l10n = _get_reader();
4353
4354                 for ($i = 0; $i < $l10n->total; $i++) {
4355                         $orig = $l10n->get_original_string($i);
4356                         if(strpos($orig, "\000") !== FALSE) { // Plural forms
4357                                 $key = explode(chr(0), $orig);
4358                                 print T_js_decl($key[0], _ngettext($key[0], $key[1], 1)); // Singular
4359                                 print T_js_decl($key[1], _ngettext($key[0], $key[1], 2)); // Plural
4360                         } else {
4361                                 $translation = __($orig);
4362                                 print T_js_decl($orig, $translation);
4363                         }
4364                 }
4365         }
4366
4367         function label_to_feed_id($label) {
4368                 return LABEL_BASE_INDEX - 1 - abs($label);
4369         }
4370
4371         function feed_to_label_id($feed) {
4372                 return LABEL_BASE_INDEX - 1 + abs($feed);
4373         }
4374
4375         function format_libxml_error($error) {
4376                 return T_sprintf("LibXML error %s at line %d (column %d): %s",
4377                                 $error->code, $error->line, $error->column,
4378                                 $error->message);
4379         }
4380
4381 ?>