modules/backend-rpc.php

   1 <?php
   2         function handle_rpc_request($link) {
   3
   4                 $subop = $_REQUEST["subop"];
   5                 $seq = (int) $_REQUEST["seq"];
   6
   7                 // Silent
   8                 if ($subop == "setprofile") {
   9                         $id = db_escape_string($_REQUEST["id"]);
  10
  11                         $_SESSION["profile"] = $id;
  12                         $_SESSION["prefs_cache"] = array();
  13                         return;
  14                 }
  15
  16                 // Silent
  17                 if ($subop == "remprofiles") {
  18                         $ids = split(",", db_escape_string(trim($_REQUEST["ids"])));
  19
  20                         foreach ($ids as $id) {
  21                                 if ($_SESSION["profile"] != $id) {
  22                                         db_query($link, "DELETE FROM ttrss_settings_profiles WHERE id = '$id' AND
  23                                                 owner_uid = " . $_SESSION["uid"]);
  24                                 }
  25                         }
  26                         return;
  27                 }
  28
  29                 // Silent
  30                 if ($subop == "addprofile") {
  31                         $title = db_escape_string(trim($_REQUEST["title"]));
  32                         if ($title) {
  33                                 db_query($link, "BEGIN");
  34
  35                                 $result = db_query($link, "SELECT id FROM ttrss_settings_profiles
  36                                         WHERE title = '$title' AND owner_uid = " . $_SESSION["uid"]);
  37
  38                                 if (db_num_rows($result) == 0) {
  39
  40                                         db_query($link, "INSERT INTO ttrss_settings_profiles (title, owner_uid)
  41                                                 VALUES ('$title', ".$_SESSION["uid"] .")");
  42
  43                                         $result = db_query($link, "SELECT id FROM ttrss_settings_profiles WHERE
  44                                                 title = '$title'");
  45
  46                                         if (db_num_rows($result) != 0) {
  47                                                 $profile_id = db_fetch_result($result, 0, "id");
  48
  49                                                 if ($profile_id) {
  50                                                         initialize_user_prefs($link, $_SESSION["uid"], $profile_id);
  51                                                 }
  52                                         }
  53                                 }
  54
  55                                 db_query($link, "COMMIT");
  56                         }
  57                         return;
  58                 }
  59
  60                 // Silent
  61                 if ($subop == "saveprofile") {
  62                         $id = db_escape_string($_REQUEST["id"]);
  63                         $title = db_escape_string(trim($_REQUEST["value"]));
  64
  65                         if ($id == 0) {
  66                                 print __("Default profile");
  67                                 return;
  68                         }
  69
  70                         if ($title) {
  71                                 db_query($link, "BEGIN");
  72
  73                                 $result = db_query($link, "SELECT id FROM ttrss_settings_profiles
  74                                         WHERE title = '$title' AND owner_uid =" . $_SESSION["uid"]);
  75
  76                                 if (db_num_rows($result) == 0) {
  77                                         db_query($link, "UPDATE ttrss_settings_profiles
  78                                                 SET title = '$title' WHERE id = '$id' AND
  79                                                 owner_uid = " . $_SESSION["uid"]);
  80                                         print $title;
  81                                 } else {
  82                                         $result = db_query($link, "SELECT title FROM ttrss_settings_profiles
  83                                                 WHERE id = '$id' AND owner_uid =" . $_SESSION["uid"]);
  84                                         print db_fetch_result($result, 0, "title");
  85                                 }
  86
  87                                 db_query($link, "COMMIT");
  88                         }
  89                         return;
  90                 }
  91
  92                 // Silent
  93                 if ($subop == "remarchive") {
  94                         $ids = split(",", db_escape_string($_REQUEST["ids"]));
  95
  96                         foreach ($ids as $id) {
  97                                 $result = db_query($link, "DELETE FROM ttrss_archived_feeds WHERE
  98                                         (SELECT COUNT(*) FROM ttrss_user_entries
  99                                                 WHERE orig_feed_id = '$id') = 0 AND
 100                                                 id = '$id' AND owner_uid = ".$_SESSION["uid"]);
 101
 102                                 $rc = db_affected_rows($link, $result);
 103                         }
 104                         return;
 105                 }
 106
 107                 if ($subop == "addfeed") {
 108                         $feed = db_escape_string($_REQUEST['feed']);
 109                         $cat = db_escape_string($_REQUEST['cat']);
 110                         $login = db_escape_string($_REQUEST['login']);
 111                         $pass = db_escape_string($_REQUEST['pass']);
 112
 113                         $rc = subscribe_to_feed($link, $feed, $cat, $login, $pass);
 114
 115                         print json_encode(array("result" => $rc));
 116
 117                         return;
 118
 119                 }
 120
 121                 if ($subop == "extractfeedurls") {
 122
 123                         $urls = get_feeds_from_html($_REQUEST['url']);
 124
 125                         print json_encode(array("urls" => $urls));
 126                         return;
 127                 }
 128
 129                 if ($subop == "togglepref") {
 130                         $key = db_escape_string($_REQUEST["key"]);
 131                         set_pref($link, $key, !get_pref($link, $key));
 132                         $value = get_pref($link, $key);
 133
 134                         print json_encode(array("param" =>$key, "value" => $value));
 135                         return;
 136                 }
 137
 138                 if ($subop == "setpref") {
 139                         $value = str_replace("\n", "<br/>", $_REQUEST['value']);
 140
 141                         $key = db_escape_string($_REQUEST["key"]);
 142                         $value = db_escape_string($value);
 143
 144                         set_pref($link, $key, $value);
 145
 146                         print json_encode(array("param" =>$key, "value" => $value));
 147                         return;
 148                 }
 149
 150                 if ($subop == "mark") {
 151                         $mark = $_REQUEST["mark"];
 152                         $id = db_escape_string($_REQUEST["id"]);
 153
 154                         if ($mark == "1") {
 155                                 $mark = "true";
 156                         } else {
 157                                 $mark = "false";
 158                         }
 159
 160                         $result = db_query($link, "UPDATE ttrss_user_entries SET marked = $mark
 161                                 WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
 162
 163                         print json_encode(array("message" => "UPDATE_COUNTERS"));
 164                         return;
 165                 }
 166
 167                 if ($subop == "delete") {
 168                         $ids = db_escape_string($_REQUEST["ids"]);
 169
 170                         $result = db_query($link, "DELETE FROM ttrss_user_entries
 171                                 WHERE ref_id IN ($ids) AND owner_uid = " . $_SESSION["uid"]);
 172
 173                         print json_encode(array("message" => "UPDATE_COUNTERS"));
 174                         return;
 175                 }
 176
 177                 if ($subop == "unarchive") {
 178                         $ids = db_escape_string($_REQUEST["ids"]);
 179
 180                         $result = db_query($link, "UPDATE ttrss_user_entries
 181                                 SET feed_id = orig_feed_id, orig_feed_id = NULL
 182                                 WHERE ref_id IN ($ids) AND owner_uid = " . $_SESSION["uid"]);
 183
 184                         print json_encode(array("message" => "UPDATE_COUNTERS"));
 185                         return;
 186                 }
 187
 188                 if ($subop == "archive") {
 189                         $ids = split(",", db_escape_string($_REQUEST["ids"]));
 190
 191                         foreach ($ids as $id) {
 192                                 archive_article($link, $id, $_SESSION["uid"]);
 193                         }
 194
 195                         print json_encode(array("message" => "UPDATE_COUNTERS"));
 196                         return;
 197                 }
 198
 199                 if ($subop == "publ") {
 200                         $pub = $_REQUEST["pub"];
 201                         $id = db_escape_string($_REQUEST["id"]);
 202                         $note = trim(strip_tags(db_escape_string($_REQUEST["note"])));
 203
 204                         if ($pub == "1") {
 205                                 $pub = "true";
 206                         } else {
 207                                 $pub = "false";
 208                         }
 209
 210                         $result = db_query($link, "UPDATE ttrss_user_entries SET
 211                                 published = $pub
 212                                 WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
 213
 214                         $pubsub_result = false;
 215
 216                         if (PUBSUBHUBBUB_HUB) {
 217                                 $rss_link = get_self_url_prefix() .
 218                                         "/backend.php?op=rss&id=-2&key=" .
 219                                         get_feed_access_key($link, -2, false);
 220
 221                                 $p = new Publisher(PUBSUBHUBBUB_HUB);
 222
 223                                 $pubsub_result = $p->publish_update($rss_link);
 224                         }
 225
 226                         print json_encode(array("message" => "UPDATE_COUNTERS",
 227                                 "pubsub_result" => $pubsub_result));
 228                         return;
 229                 }
 230
 231                 // Silent
 232                 /* if ($subop == "update") {
 233                         $feed_id = db_escape_string($_REQUEST["feed"]);
 234                         update_rss_feed($link, $feed_id);
 235                         return;
 236                 } */
 237
 238                 if ($subop == "updateAllFeeds" || $subop == "getAllCounters") {
 239                         $last_article_id = (int) $_REQUEST["last_article_id"];
 240
 241                         $reply = array();
 242
 243                         if ($seq) $reply['seq'] = $seq;
 244
 245                         if ($last_article_id != getLastArticleId($link)) {
 246                                 $omode = $_REQUEST["omode"];
 247
 248                                 if ($omode != "T")
 249                                         $reply['counters'] = getAllCounters($link, $omode);
 250                                 else
 251                                         $reply['counters'] = getGlobalCounters($link);
 252                         }
 253
 254                         $reply['runtime-info'] = make_runtime_info($link);
 255
 256
 257                         print json_encode($reply);
 258                         return;
 259                 }
 260
 261                 /* GET["cmode"] = 0 - mark as read, 1 - as unread, 2 - toggle */
 262                 if ($subop == "catchupSelected") {
 263                         $ids = split(",", db_escape_string($_REQUEST["ids"]));
 264                         $cmode = sprintf("%d", $_REQUEST["cmode"]);
 265
 266                         catchupArticlesById($link, $ids, $cmode);
 267
 268                         print json_encode(array("message" => "UPDATE_COUNTERS"));
 269                         return;
 270                 }
 271
 272                 if ($subop == "markSelected") {
 273                         $ids = split(",", db_escape_string($_REQUEST["ids"]));
 274                         $cmode = sprintf("%d", $_REQUEST["cmode"]);
 275
 276                         markArticlesById($link, $ids, $cmode);
 277
 278                         print json_encode(array("message" => "UPDATE_COUNTERS"));
 279                         return;
 280                 }
 281
 282                 if ($subop == "publishSelected") {
 283                         $ids = split(",", db_escape_string($_REQUEST["ids"]));
 284                         $cmode = sprintf("%d", $_REQUEST["cmode"]);
 285
 286                         publishArticlesById($link, $ids, $cmode);
 287
 288                         print json_encode(array("message" => "UPDATE_COUNTERS"));
 289                         return;
 290                 }
 291
 292                 if ($subop == "sanityCheck") {
 293                         $_SESSION["hasAudio"] = $_REQUEST["hasAudio"] === "true";
 294
 295                         $reply = array();
 296
 297                         $reply['error'] = sanity_check($link);
 298
 299                         if ($reply['error']['code'] == 0) {
 300                                 $reply['init-params'] = make_init_params($link);
 301                                 $reply['runtime-info'] = make_runtime_info($link);
 302                         }
 303
 304                         print json_encode($reply);
 305                         return;
 306                 }
 307
 308 /*              if ($subop == "globalPurge") {
 309
 310                         print "<rpc-reply>";
 311                         global_purge_old_posts($link, true);
 312                         print "</rpc-reply>";
 313
 314                         return;
 315                 } */
 316
 317                 if ($subop == "setArticleTags") {
 318                         global $memcache;
 319
 320                         $id = db_escape_string($_REQUEST["id"]);
 321
 322                         $tags_str = db_escape_string($_REQUEST["tags_str"]);
 323                         $tags = array_unique(trim_array(split(",", $tags_str)));
 324
 325                         db_query($link, "BEGIN");
 326
 327                         $result = db_query($link, "SELECT int_id FROM ttrss_user_entries WHERE
 328                                 ref_id = '$id' AND owner_uid = '".$_SESSION["uid"]."' LIMIT 1");
 329
 330                         if (db_num_rows($result) == 1) {
 331
 332                                 $tags_to_cache = array();
 333
 334                                 $int_id = db_fetch_result($result, 0, "int_id");
 335
 336                                 db_query($link, "DELETE FROM ttrss_tags WHERE
 337                                         post_int_id = $int_id AND owner_uid = '".$_SESSION["uid"]."'");
 338
 339                                 foreach ($tags as $tag) {
 340                                         $tag = sanitize_tag($tag);
 341
 342                                         if (!tag_is_valid($tag)) {
 343                                                 continue;
 344                                         }
 345
 346                                         if (preg_match("/^[0-9]*$/", $tag)) {
 347                                                 continue;
 348                                         }
 349
 350 //                                      print "<!-- $id : $int_id : $tag -->";
 351
 352                                         if ($tag != '') {
 353                                                 db_query($link, "INSERT INTO ttrss_tags
 354                                                         (post_int_id, owner_uid, tag_name) VALUES ('$int_id', '".$_SESSION["uid"]."', '$tag')");
 355                                         }
 356
 357                                         array_push($tags_to_cache, $tag);
 358                                 }
 359
 360                                 /* update tag cache */
 361
 362                                 $tags_str = asort(join(",", $tags_to_cache));
 363
 364                                 db_query($link, "UPDATE ttrss_user_entries
 365                                         SET tag_cache = '$tags_str' WHERE ref_id = '$id'
 366                                         AND owner_uid = " . $_SESSION["uid"]);
 367                         }
 368
 369                         db_query($link, "COMMIT");
 370
 371                         if ($memcache) {
 372                                 $obj_id = md5("TAGS:".$_SESSION["uid"].":$id");
 373                                 $memcache->delete($obj_id);
 374                         }
 375
 376                         $tags = get_article_tags($link, $id);
 377                         $tags_str = format_tags_string($tags, $id);
 378                         $tags_str_full = join(", ", $tags);
 379
 380                         if (!$tags_str_full) $tags_str_full = __("no tags");
 381
 382                         print json_encode(array("tags_str" => array("id" => $id,
 383                                 "content" => $tags_str, "content_full" => $tags_str_full)));
 384
 385                         return;
 386                 }
 387
 388                 if ($subop == "regenOPMLKey") {
 389                         update_feed_access_key($link, 'OPML:Publish',
 390                                 false, $_SESSION["uid"]);
 391
 392                         $new_link = opml_publish_url($link);
 393
 394                         print json_encode(array("link" => $new_link));
 395                         return;
 396                 }
 397
 398                 if ($subop == "completeTags") {
 399                         $search = db_escape_string($_REQUEST["search"]);
 400
 401                         $result = db_query($link, "SELECT DISTINCT tag_name FROM ttrss_tags
 402                                 WHERE owner_uid = '".$_SESSION["uid"]."' AND
 403                                 tag_name LIKE '$search%' ORDER BY tag_name
 404                                 LIMIT 10");
 405
 406                         print "<ul>";
 407                         while ($line = db_fetch_assoc($result)) {
 408                                 print "<li>" . $line["tag_name"] . "</li>";
 409                         }
 410                         print "</ul>";
 411
 412                         return;
 413                 }
 414
 415                 if ($subop == "purge") {
 416                         $ids = split(",", db_escape_string($_REQUEST["ids"]));
 417                         $days = sprintf("%d", $_REQUEST["days"]);
 418
 419                         foreach ($ids as $id) {
 420
 421                                 $result = db_query($link, "SELECT id FROM ttrss_feeds WHERE
 422                                         id = '$id' AND owner_uid = ".$_SESSION["uid"]);
 423
 424                                 if (db_num_rows($result) == 1) {
 425                                         purge_feed($link, $id, $days);
 426                                 }
 427                         }
 428
 429                         return;
 430                 }
 431
 432 /*              if ($subop == "setScore") {
 433                         $id = db_escape_string($_REQUEST["id"]);
 434                         $score = sprintf("%d", $_REQUEST["score"]);
 435
 436                         $result = db_query($link, "UPDATE ttrss_user_entries SET score = '$score'
 437                                 WHERE ref_id = '$id' AND owner_uid = ".$_SESSION["uid"]);
 438
 439                         print "<rpc-reply><message>Acknowledged.</message></rpc-reply>";
 440
 441                         return;
 442
 443                 } */
 444
 445                 if ($subop == "getArticles") {
 446                         $ids = split(",", db_escape_string($_REQUEST["ids"]));
 447                         $articles = array();
 448
 449                         foreach ($ids as $id) {
 450                                 if ($id) {
 451                                         array_push($articles, format_article($link, $id, 0, false));
 452                                 }
 453                         }
 454
 455                         print json_encode($articles);
 456                         return;
 457                 }
 458
 459                 if ($subop == "checkDate") {
 460                         $date = db_escape_string($_REQUEST["date"]);
 461                         $date_parsed = strtotime($date);
 462
 463                         print json_encode(array("result" => (bool)$date_parsed,
 464                                 "date" => date("c", $date_parsed)));
 465                         return;
 466                 }
 467
 468                 if ($subop == "assignToLabel" || $subop == "removeFromLabel") {
 469                         $reply = array();
 470
 471                         $ids = split(",", db_escape_string($_REQUEST["ids"]));
 472                         $label_id = db_escape_string($_REQUEST["lid"]);
 473
 474                         $label = db_escape_string(label_find_caption($link, $label_id,
 475                                 $_SESSION["uid"]));
 476
 477                         $reply["info-for-headlines"] = array();
 478
 479                         if ($label) {
 480
 481                                 foreach ($ids as $id) {
 482
 483                                         if ($subop == "assignToLabel")
 484                                                 label_add_article($link, $id, $label, $_SESSION["uid"]);
 485                                         else
 486                                                 label_remove_article($link, $id, $label, $_SESSION["uid"]);
 487
 488                                         $labels = get_article_labels($link, $id, $_SESSION["uid"]);
 489
 490                                         array_push($reply["info-for-headlines"],
 491                                           array("id" => $id, "labels" => format_article_labels($labels, $id)));
 492
 493                                 }
 494                         }
 495
 496                         $reply["message"] = "UPDATE_COUNTERS";
 497
 498                         print json_encode($reply);
 499
 500                         return;
 501                 }
 502
 503                 if ($subop == "updateFeedBrowser") {
 504                         $search = db_escape_string($_REQUEST["search"]);
 505                         $limit = db_escape_string($_REQUEST["limit"]);
 506                         $mode = (int) db_escape_string($_REQUEST["mode"]);
 507
 508                         print json_encode(array("content" =>
 509                                 make_feed_browser($link, $search, $limit, $mode),
 510                                 "mode" => $mode));
 511                         return;
 512                 }
 513
 514                 // Silent
 515                 if ($subop == "massSubscribe") {
 516
 517                         $payload = json_decode($_REQUEST["payload"], false);
 518                         $mode = $_REQUEST["mode"];
 519
 520                         if (!$payload || !is_array($payload)) return;
 521
 522                         if ($mode == 1) {
 523                                 foreach ($payload as $feed) {
 524
 525                                         $title = db_escape_string($feed[0]);
 526                                         $feed_url = db_escape_string($feed[1]);
 527
 528                                         $result = db_query($link, "SELECT id FROM ttrss_feeds WHERE
 529                                                 feed_url = '$feed_url' AND owner_uid = " . $_SESSION["uid"]);
 530
 531                                         if (db_num_rows($result) == 0) {
 532                                                 $result = db_query($link, "INSERT INTO ttrss_feeds
 533                                                                 (owner_uid,feed_url,title,cat_id,site_url)
 534                                                         VALUES ('".$_SESSION["uid"]."',
 535                                                                 '$feed_url', '$title', NULL, '')");
 536                                         }
 537                                 }
 538                         } else if ($mode == 2) {
 539                                 // feed archive
 540                                 foreach ($payload as $id) {
 541                                         $result = db_query($link, "SELECT * FROM ttrss_archived_feeds
 542                                                 WHERE id = '$id' AND owner_uid = " . $_SESSION["uid"]);
 543
 544                                         if (db_num_rows($result) != 0) {
 545                                                 $site_url = db_escape_string(db_fetch_result($result, 0, "site_url"));
 546                                                 $feed_url = db_escape_string(db_fetch_result($result, 0, "feed_url"));
 547                                                 $title = db_escape_string(db_fetch_result($result, 0, "title"));
 548
 549                                                 $result = db_query($link, "SELECT id FROM ttrss_feeds WHERE
 550                                                         feed_url = '$feed_url' AND owner_uid = " . $_SESSION["uid"]);
 551
 552                                                 if (db_num_rows($result) == 0) {
 553                                                         $result = db_query($link, "INSERT INTO ttrss_feeds
 554                                                                         (owner_uid,feed_url,title,cat_id,site_url)
 555                                                                 VALUES ('$id','".$_SESSION["uid"]."',
 556                                                                         '$feed_url', '$title', NULL, '$site_url')");
 557                                                 }
 558                                         }
 559                                 }
 560                         }
 561
 562 /*                      $ids = split(",", db_escape_string($_REQUEST["ids"]));
 563
 564                         $subscribed = array();
 565
 566                         foreach ($ids as $id) {
 567
 568                                 if ($mode == 1) {
 569                                         $result = db_query($link, "SELECT feed_url,title FROM ttrss_feeds
 570                                                 WHERE id = '$id'");
 571                                 } else if ($mode == 2) {
 572                                         $result = db_query($link, "SELECT * FROM ttrss_archived_feeds
 573                                                 WHERE id = '$id' AND owner_uid = " . $_SESSION["uid"]);
 574                                         $orig_id = db_escape_string(db_fetch_result($result, 0, "id"));
 575                                         $site_url = db_escape_string(db_fetch_result($result, 0, "site_url"));
 576                                 }
 577
 578                                 $feed_url = db_escape_string(db_fetch_result($result, 0, "feed_url"));
 579                                 $title = db_escape_string(db_fetch_result($result, 0, "title"));
 580
 581                                 $title_orig = db_fetch_result($result, 0, "title");
 582
 583                                 $result = db_query($link, "SELECT id FROM ttrss_feeds WHERE
 584                                                 feed_url = '$feed_url' AND owner_uid = " . $_SESSION["uid"]);
 585
 586                                 if (db_num_rows($result) == 0) {
 587                                         if ($mode == 1) {
 588                                                 $result = db_query($link,
 589                                                         "INSERT INTO ttrss_feeds (owner_uid,feed_url,title,cat_id)
 590                                                         VALUES ('".$_SESSION["uid"]."', '$feed_url', '$title', NULL)");
 591                                         } else if ($mode == 2) {
 592                                                 $result = db_query($link,
 593                                                         "INSERT INTO ttrss_feeds (id,owner_uid,feed_url,title,cat_id,site_url)
 594                                                         VALUES ('$orig_id','".$_SESSION["uid"]."', '$feed_url', '$title', NULL, '$site_url')");
 595                                         }
 596                                         array_push($subscribed, $title_orig);
 597                                 }
 598                         } */
 599
 600                         return;
 601                 }
 602
 603                 if ($subop == "digest-get-contents") {
 604                         $article_id = db_escape_string($_REQUEST['article_id']);
 605
 606                         $result = db_query($link, "SELECT content
 607                                 FROM ttrss_entries, ttrss_user_entries
 608                                 WHERE id = '$article_id' AND ref_id = id AND owner_uid = ".$_SESSION['uid']);
 609
 610                         $content = sanitize_rss($link, db_fetch_result($result, 0, "content"));
 611
 612                         print json_encode(array("article" =>
 613                                 array("id" => $id, "content" => $content)));
 614                         return;
 615                 }
 616
 617                 if ($subop == "digest-update") {
 618                         $feed_id = db_escape_string($_REQUEST['feed_id']);
 619                         $offset = db_escape_string($_REQUEST['offset']);
 620                         $seq = db_escape_string($_REQUEST['seq']);
 621
 622                         if (!$feed_id) $feed_id = -4;
 623                         if (!$offset) $offset = 0;
 624
 625                         $reply = array();
 626
 627                         $reply['seq'] = $seq;
 628
 629                         $headlines = api_get_headlines($link, $feed_id, 10, $offset,
 630                                 '', ($feed_id == -4), true, false, "unread", "updated DESC");
 631
 632                         //function api_get_headlines($link, $feed_id, $limit, $offset,
 633                         //              $filter, $is_cat, $show_excerpt, $show_content, $view_mode) {
 634
 635                         $reply['headlines'] = array();
 636                         $reply['headlines']['title'] = getFeedTitle($link, $feed_id);
 637                         $reply['headlines']['content'] = $headlines;
 638
 639                         print json_encode($reply);
 640                         return;
 641                 }
 642
 643                 if ($subop == "digest-init") {
 644                         $tmp_feeds = api_get_feeds($link, -3, true, false, 0);
 645
 646                         $feeds = array();
 647
 648                         foreach ($tmp_feeds as $f) {
 649                                 if ($f['id'] > 0 || $f['id'] == -4) array_push($feeds, $f);
 650                         }
 651
 652                         print json_encode(array("feeds" => $feeds));
 653
 654                         return;
 655                 }
 656
 657                 if ($subop == "catchupFeed") {
 658                         $feed_id = db_escape_string($_REQUEST['feed_id']);
 659                         $is_cat = db_escape_string($_REQUEST['is_cat']);
 660
 661                         catchup_feed($link, $feed_id, $is_cat);
 662
 663                         return;
 664                 }
 665
 666                 if ($subop == "sendEmail") {
 667                         $secretkey = $_REQUEST['secretkey'];
 668
 669                         $reply = array();
 670
 671                         if (DIGEST_ENABLE && $_SESSION['email_secretkey'] &&
 672                                                 $secretkey == $_SESSION['email_secretkey']) {
 673
 674                                 $_SESSION['email_secretkey'] = '';
 675
 676                                 $destination = $_REQUEST['destination'];
 677                                 $subject = $_REQUEST['subject'];
 678                                 $content = $_REQUEST['content'];
 679
 680                                 $replyto = strip_tags($_SESSION['email_replyto']);
 681                                 $fromname = strip_tags($_SESSION['email_fromname']);
 682
 683                                 $mail = new PHPMailer();
 684
 685                                 $mail->PluginDir = "lib/phpmailer/";
 686                                 $mail->SetLanguage("en", "lib/phpmailer/language/");
 687
 688                                 $mail->CharSet = "UTF-8";
 689
 690                                 $mail->From = $replyto;
 691                                 $mail->FromName = $fromname;
 692                                 $mail->AddAddress($destination);
 693
 694                                 if (DIGEST_SMTP_HOST) {
 695                                         $mail->Host = DIGEST_SMTP_HOST;
 696                                         $mail->Mailer = "smtp";
 697                                         $mail->SMTPAuth = DIGEST_SMTP_LOGIN != '';
 698                                         $mail->Username = DIGEST_SMTP_LOGIN;
 699                                         $mail->Password = DIGEST_SMTP_PASSWORD;
 700                                 }
 701
 702                                 $mail->IsHTML(false);
 703                                 $mail->Subject = $subject;
 704                                 $mail->Body = $content;
 705
 706                                 $rc = $mail->Send();
 707
 708                                 if (!$rc) {
 709                                         $reply['error'] =  $mail->ErrorInfo;
 710                                 } else {
 711                                         save_email_address($link, db_escape_string($destination));
 712                                         $reply['message'] = "UPDATE_COUNTERS";
 713                                 }
 714
 715                         } else {
 716                                 $reply['error'] = "Not authorized.";
 717                         }
 718
 719                         print json_encode($reply);
 720                         return;
 721                 }
 722
 723                 if ($subop == "completeEmails") {
 724                         $search = db_escape_string($_REQUEST["search"]);
 725
 726                         print "<ul>";
 727
 728                         foreach ($_SESSION['stored_emails'] as $email) {
 729                                 if (strpos($email, $search) !== false) {
 730                                         print "<li>$email</li>";
 731                                 }
 732                         }
 733
 734                         print "</ul>";
 735
 736                         return;
 737                 }
 738
 739                 if ($subop == "quickAddCat") {
 740                         $cat = db_escape_string($_REQUEST["cat"]);
 741
 742                         add_feed_category($link, $cat);
 743
 744                         $result = db_query($link, "SELECT id FROM ttrss_feed_categories WHERE
 745                                 title = '$cat' AND owner_uid = " . $_SESSION["uid"]);
 746
 747                         if (db_num_rows($result) == 1) {
 748                                 $id = db_fetch_result($result, 0, "id");
 749                         } else {
 750                                 $id = 0;
 751                         }
 752
 753                         print_feed_cat_select($link, "cat_id", $id);
 754
 755                         return;
 756                 }
 757
 758                 if ($subop == "regenFeedKey") {
 759                         $feed_id = db_escape_string($_REQUEST['id']);
 760                         $is_cat = (bool) db_escape_string($_REQUEST['is_cat']);
 761
 762                         $new_key = update_feed_access_key($link, $feed_id, $is_cat);
 763
 764                         print json_encode(array("link" => $new_key));
 765                         return;
 766                 }
 767
 768                 // Silent
 769                 if ($subop == "clearKeys") {
 770                         db_query($link, "DELETE FROM ttrss_access_keys WHERE
 771                                 owner_uid = " . $_SESSION["uid"]);
 772
 773                         return;
 774                 }
 775
 776                 if ($subop == "verifyRegexp") {
 777                         $reg_exp = $_REQUEST["reg_exp"];
 778
 779                         $status = @preg_match("/$reg_exp/i", "TEST") !== false;
 780
 781                         print json_encode(array("status" => $status));
 782                         return;
 783                 }
 784
 785                 // TODO: unify with digest-get-contents?
 786                 if ($subop == "cdmGetArticle") {
 787                         $id = db_escape_string($_REQUEST["id"]);
 788
 789                         $result = db_query($link, "SELECT content,
 790                                 ttrss_feeds.site_url AS site_url FROM ttrss_user_entries, ttrss_feeds,
 791                                 ttrss_entries
 792                                 WHERE feed_id = ttrss_feeds.id AND ref_id = '$id' AND
 793                                 ttrss_entries.id = ref_id AND
 794                                 ttrss_user_entries.owner_uid = ".$_SESSION["uid"]);
 795
 796                         if (db_num_rows($result) != 0) {
 797                                 $line = db_fetch_assoc($result);
 798
 799                                 $article_content = sanitize_rss($link, $line["content"],
 800                                         false, false, $line['site_url']);
 801
 802                         } else {
 803                                 $article_content = '';
 804                         }
 805
 806                         print json_encode(array("article" =>
 807                                 array("id" => $id, "content" => $article_content)));
 808
 809                         return;
 810                 }
 811
 812                 if ($subop == "scheduleFeedUpdate") {
 813                         $feed_id = db_escape_string($_REQUEST["id"]);
 814                         $is_cat =  db_escape_string($_REQUEST['is_cat']) == 'true';
 815
 816                         $message = __("Your request could not be completed.");
 817
 818                         if ($feed_id >= 0) {
 819                                 if (!$is_cat) {
 820                                         $message = __("Feed update has been scheduled.");
 821
 822                                         db_query($link, "UPDATE ttrss_feeds SET
 823                                                 last_update_started = '1970-01-01',
 824                                                 last_updated = '1970-01-01' WHERE id = '$feed_id' AND
 825                                                 owner_uid = ".$_SESSION["uid"]);
 826
 827                                 } else {
 828                                         $message = __("Category update has been scheduled.");
 829
 830                                         if ($feed_id)
 831                                                 $cat_query = "cat_id = '$feed_id'";
 832                                         else
 833                                                 $cat_query = "cat_id IS NULL";
 834
 835                                         db_query($link, "UPDATE ttrss_feeds SET
 836                                                 last_update_started = '1970-01-01',
 837                                                 last_updated = '1970-01-01' WHERE $cat_query AND
 838                                                 owner_uid = ".$_SESSION["uid"]);
 839                                 }
 840                         } else {
 841                                 $message = __("Can't update this kind of feed.");
 842                         }
 843
 844                         print json_encode(array("message" => $message));
 845                         return;
 846                 }
 847
 848                 if ($subop == "getTweetInfo") {
 849                         $id = db_escape_string($_REQUEST['id']);
 850
 851                         $result = db_query($link, "SELECT title, link
 852                                 FROM ttrss_entries, ttrss_user_entries
 853                                 WHERE id = '$id' AND ref_id = id AND owner_uid = " .$_SESSION['uid']);
 854
 855                         if (db_num_rows($result) != 0) {
 856                                 $title = truncate_string(strip_tags(db_fetch_result($result, 0, 'title')),
 857                                         100, '...');
 858                                 $article_link = db_fetch_result($result, 0, 'link');
 859                         }
 860
 861                         print json_encode(array("title" => $title, "link" => $article_link,
 862                                 "id" => $id));
 863
 864                         return;
 865                 }
 866
 867                 if ($subop == "setNote") {
 868                         $id = db_escape_string($_REQUEST["id"]);
 869                         $note = trim(strip_tags(db_escape_string($_REQUEST["note"])));
 870
 871                         db_query($link, "UPDATE ttrss_user_entries SET note = '$note'
 872                                 WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
 873
 874                         $formatted_note = format_article_note($id, $note);
 875
 876                         print json_encode(array("note" => $formatted_note,
 877                                 "raw_length" => mb_strlen($note)));
 878                         return;
 879                 }
 880
 881                 if ($subop == "genHash") {
 882                         $hash = sha1(uniqid(rand(), true));
 883
 884                         print json_encode(array("hash" => $hash));
 885                         return;
 886                 }
 887
 888                 print json_encode(array("error" => array("code" => 7,
 889                         "message" => "Unknown method: $subop")));
 890         }
 891 ?>