]> git.wh0rd.org - tt-rss.git/blobdiff - classes/rssutils.php
support disabling of e-mail digests entirely
[tt-rss.git] / classes / rssutils.php
old mode 100644 (file)
new mode 100755 (executable)
index 30d35df..b469c47
@@ -7,8 +7,6 @@ class RSSUtils {
                        if ($k != "feed" && isset($v)) {
                                $x = strip_tags(is_array($v) ? implode(",", $v) : $v);
 
-                               //_debug("$k:" . sha1($x) . ":" . htmlspecialchars($x), true);
-
                                $tmp .= sha1("$k:" . sha1($x));
                        }
                }
@@ -16,33 +14,45 @@ class RSSUtils {
                return sha1(implode(",", $pluginhost->get_plugin_names()) . $tmp);
        }
 
+       // Strips utf8mb4 characters (i.e. emoji) for mysql
+       static function strip_utf8mb4($str) {
+               return preg_replace('/[\x{10000}-\x{10FFFF}]/u', "\xEF\xBF\xBD", $str);
+       }
+
        static function update_feedbrowser_cache() {
 
-               $result = db_query("SELECT feed_url, site_url, title, COUNT(id) AS subscribers
+               $pdo = Db::pdo();
+
+               $sth = $pdo->query("SELECT feed_url, site_url, title, COUNT(id) AS subscribers
                        FROM ttrss_feeds WHERE feed_url NOT IN (SELECT feed_url FROM ttrss_feeds
                                WHERE private IS true OR auth_login != '' OR auth_pass != '' OR feed_url LIKE '%:%@%/%')
                                GROUP BY feed_url, site_url, title ORDER BY subscribers DESC LIMIT 1000");
 
-               db_query("BEGIN");
+               $pdo->beginTransaction();
 
-               db_query("DELETE FROM ttrss_feedbrowser_cache");
+               $pdo->query("DELETE FROM ttrss_feedbrowser_cache");
 
                $count = 0;
 
-               while ($line = db_fetch_assoc($result)) {
-                       $subscribers = db_escape_string($line["subscribers"]);
-                       $feed_url = db_escape_string($line["feed_url"]);
-                       $title = db_escape_string($line["title"]);
-                       $site_url = db_escape_string($line["site_url"]);
+               while ($line = $sth->fetch()) {
 
-                       $tmp_result = db_query("SELECT subscribers FROM
-                               ttrss_feedbrowser_cache WHERE feed_url = '$feed_url'");
+                       $subscribers = $line["subscribers"];
+                       $feed_url = $line["feed_url"];
+                       $title = $line["title"];
+                       $site_url = $line["site_url"];
 
-                       if (db_num_rows($tmp_result) == 0) {
+                       $tmph = $pdo->prepare("SELECT subscribers FROM
+                               ttrss_feedbrowser_cache WHERE feed_url = ?");
+                       $tmph->execute([$feed_url]);
 
-                               db_query("INSERT INTO ttrss_feedbrowser_cache
-                                       (feed_url, site_url, title, subscribers) VALUES ('$feed_url',
-                                               '$site_url', '$title', '$subscribers')");
+                       if (!$tmph->fetch()) {
+
+                               $tmph = $pdo->prepare("INSERT INTO ttrss_feedbrowser_cache
+                                       (feed_url, site_url, title, subscribers)
+                                       VALUES
+                                       (?, ?, ?, ?)");
+
+                               $tmph->execute([$feed_url, $site_url, $title, $subscribers]);
 
                                ++$count;
 
@@ -50,19 +60,21 @@ class RSSUtils {
 
                }
 
-               db_query("COMMIT");
+               $pdo->commit();
 
                return $count;
 
        }
 
-       static function update_daemon_common($limit = DAEMON_FEED_LIMIT, $debug = true) {
+       static function update_daemon_common($limit = DAEMON_FEED_LIMIT) {
                $schema_version = get_schema_version();
 
                if ($schema_version != SCHEMA_VERSION) {
                        die("Schema version is wrong, please upgrade the database.\n");
                }
 
+               $pdo = Db::pdo();
+
                if (!SINGLE_USER_MODE && DAEMON_UPDATE_LOGIN_LIMIT > 0) {
                        if (DB_TYPE == "pgsql") {
                                $login_thresh_qpart = "AND ttrss_users.last_login >= NOW() - INTERVAL '".DAEMON_UPDATE_LOGIN_LIMIT." days'";
@@ -124,22 +136,23 @@ class RSSUtils {
                                $updstart_thresh_qpart
                                $query_order $query_limit";
 
-               $result = db_query($query);
-
-               if ($debug) _debug(sprintf("Scheduled %d feeds to update...", db_num_rows($result)));
+               $res = $pdo->query($query);
 
                $feeds_to_update = array();
-               while ($line = db_fetch_assoc($result)) {
+               while ($line = $res->fetch()) {
                        array_push($feeds_to_update, $line['feed_url']);
                }
 
+               Debug::log(sprintf("Scheduled %d feeds to update...", count($feeds_to_update)));
+
                // Update last_update_started before actually starting the batch
                // in order to minimize collision risk for parallel daemon tasks
                if (count($feeds_to_update) > 0) {
-                       $feeds_quoted = array_map(function ($s) { return "'" . db_escape_string($s) . "'"; }, $feeds_to_update);
+                       $feeds_qmarks = arr_qmarks($feeds_to_update);
 
-                       db_query(sprintf("UPDATE ttrss_feeds SET last_update_started = NOW()
-                               WHERE feed_url IN (%s)", implode(',', $feeds_quoted)));
+                       $tmph = $pdo->prepare("UPDATE ttrss_feeds SET last_update_started = NOW()
+                               WHERE feed_url IN ($feeds_qmarks)");
+                       $tmph->execute($feeds_to_update);
                }
 
                $nf = 0;
@@ -147,135 +160,147 @@ class RSSUtils {
 
                $batch_owners = array();
 
-               foreach ($feeds_to_update as $feed) {
-                       if($debug) _debug("Base feed: $feed");
-
-                       //update_rss_feed($line["id"], true);
-
-                       // since we have the data cached, we can deal with other feeds with the same url
-                       $tmp_result = db_query("SELECT DISTINCT ttrss_feeds.id,last_updated,ttrss_feeds.owner_uid
+               // since we have the data cached, we can deal with other feeds with the same url
+               $usth = $pdo->prepare("SELECT DISTINCT ttrss_feeds.id,last_updated,ttrss_feeds.owner_uid
                        FROM ttrss_feeds, ttrss_users, ttrss_user_prefs WHERE
                                ttrss_user_prefs.owner_uid = ttrss_feeds.owner_uid AND
                                ttrss_users.id = ttrss_user_prefs.owner_uid AND
                                ttrss_user_prefs.pref_name = 'DEFAULT_UPDATE_INTERVAL' AND
                                ttrss_user_prefs.profile IS NULL AND
-                               feed_url = '".db_escape_string($feed)."'
+                               feed_url = ?
                                $update_limit_qpart
                                $login_thresh_qpart
                        ORDER BY ttrss_feeds.id $query_limit");
 
-                       if (db_num_rows($tmp_result) > 0) {
-                               while ($tline = db_fetch_assoc($tmp_result)) {
-                                       if ($debug) _debug(" => " . $tline["last_updated"] . ", " . $tline["id"] . " " . $tline["owner_uid"]);
+               foreach ($feeds_to_update as $feed) {
+                       Debug::log("Base feed: $feed");
+
+                       $usth->execute([$feed]);
+                       //update_rss_feed($line["id"], true);
 
-                                       if (array_search($tline["owner_uid"], $batch_owners) === FALSE)
-                                               array_push($batch_owners, $tline["owner_uid"]);
+                       if ($tline = $usth->fetch()) {
+                               Debug::log(" => " . $tline["last_updated"] . ", " . $tline["id"] . " " . $tline["owner_uid"]);
 
-                                       $fstarted = microtime(true);
-                                       RSSUtils::update_rss_feed($tline["id"], true, false);
-                                       _debug_suppress(false);
+                               if (array_search($tline["owner_uid"], $batch_owners) === FALSE)
+                                       array_push($batch_owners, $tline["owner_uid"]);
 
-                                       _debug(sprintf("    %.4f (sec)", microtime(true) - $fstarted));
+                               $fstarted = microtime(true);
 
-                                       ++$nf;
+                               try {
+                                       RSSUtils::update_rss_feed($tline["id"], true, false);
+                               } catch (PDOException $e) {
+                                       Logger::get()->log_error(E_USER_NOTICE, $e->getMessage(), $e->getFile(), $e->getLine(), $e->getTraceAsString());
+
+                                       try {
+                                               $pdo->rollback();
+                                       } catch (PDOException $e) {
+                                               // it doesn't matter if there wasn't actually anything to rollback, PDO Exception can be
+                                               // thrown outside of an active transaction during feed update
+                                       }
                                }
+
+                               Debug::log(sprintf("    %.4f (sec)", microtime(true) - $fstarted));
+
+                               ++$nf;
                        }
                }
 
                if ($nf > 0) {
-                       _debug(sprintf("Processed %d feeds in %.4f (sec), %.4f (sec/feed avg)", $nf,
+                       Debug::log(sprintf("Processed %d feeds in %.4f (sec), %.4f (sec/feed avg)", $nf,
                                microtime(true) - $bstarted, (microtime(true) - $bstarted) / $nf));
                }
 
                foreach ($batch_owners as $owner_uid) {
-                       _debug("Running housekeeping tasks for user $owner_uid...");
+                       Debug::log("Running housekeeping tasks for user $owner_uid...");
 
                        RSSUtils::housekeeping_user($owner_uid);
                }
 
                // Send feed digests by email if needed.
-               Digest::send_headlines_digests($debug);
+               if (DIGEST_SUBJECT !== false)
+               Digest::send_headlines_digests();
 
                return $nf;
-
        }
 
        // this is used when subscribing
        static function set_basic_feed_info($feed) {
 
-               $feed = db_escape_string($feed);
+               $pdo = Db::pdo();
 
-               $result = db_query("SELECT owner_uid,feed_url,auth_pass,auth_login,auth_pass_encrypted
-                                       FROM ttrss_feeds WHERE id = '$feed'");
+               $sth = $pdo->prepare("SELECT owner_uid,feed_url,auth_pass,auth_login
+                               FROM ttrss_feeds WHERE id = ?");
+               $sth->execute([$feed]);
 
-               $owner_uid = db_fetch_result($result, 0, "owner_uid");
+               if ($row = $sth->fetch()) {
 
-               $auth_pass_encrypted = sql_bool_to_bool(db_fetch_result($result,
-                       0, "auth_pass_encrypted"));
+                       $owner_uid = $row["owner_uid"];
+                       $auth_login = $row["auth_login"];
+                       $auth_pass = $row["auth_pass"];
+                       $fetch_url = $row["feed_url"];
 
-               $auth_login = db_fetch_result($result, 0, "auth_login");
-               $auth_pass = db_fetch_result($result, 0, "auth_pass");
+                       $pluginhost = new PluginHost();
+                       $user_plugins = get_pref("_ENABLED_PLUGINS", $owner_uid);
 
-               if ($auth_pass_encrypted && function_exists("mcrypt_decrypt")) {
-                       require_once "crypt.php";
-                       $auth_pass = decrypt_string($auth_pass);
-               }
+                       $pluginhost->load(PLUGINS, PluginHost::KIND_ALL);
+                       $pluginhost->load($user_plugins, PluginHost::KIND_USER, $owner_uid);
+                       $pluginhost->load_data();
 
-               $fetch_url = db_fetch_result($result, 0, "feed_url");
+                       $basic_info = array();
+                       foreach ($pluginhost->get_hooks(PluginHost::HOOK_FEED_BASIC_INFO) as $plugin) {
+                               $basic_info = $plugin->hook_feed_basic_info($basic_info, $fetch_url, $owner_uid, $feed, $auth_login, $auth_pass);
+                       }
 
-               $pluginhost = new PluginHost();
-               $user_plugins = get_pref("_ENABLED_PLUGINS", $owner_uid);
+                       if (!$basic_info) {
+                               $feed_data = fetch_file_contents($fetch_url, false,
+                                       $auth_login, $auth_pass, false,
+                                       FEED_FETCH_TIMEOUT,
+                                       0);
 
-               $pluginhost->load(PLUGINS, PluginHost::KIND_ALL);
-               $pluginhost->load($user_plugins, PluginHost::KIND_USER, $owner_uid);
-               $pluginhost->load_data();
+                               global $fetch_curl_used;
 
-               $basic_info = array();
-               foreach ($pluginhost->get_hooks(PluginHost::HOOK_FEED_BASIC_INFO) as $plugin) {
-                       $basic_info = $plugin->hook_feed_basic_info($basic_info, $fetch_url, $owner_uid, $feed, $auth_login, $auth_pass);
-               }
+                               if (!$fetch_curl_used) {
+                                       $tmp = @gzdecode($feed_data);
 
-               if (!$basic_info) {
-                       $feed_data = fetch_file_contents($fetch_url, false,
-                               $auth_login, $auth_pass, false,
-                               FEED_FETCH_TIMEOUT,
-                               0);
+                                       if ($tmp) $feed_data = $tmp;
+                               }
 
-                       global $fetch_curl_used;
+                               $feed_data = trim($feed_data);
 
-                       if (!$fetch_curl_used) {
-                               $tmp = @gzdecode($feed_data);
+                               $rss = new FeedParser($feed_data);
+                               $rss->init();
 
-                               if ($tmp) $feed_data = $tmp;
+                               if (!$rss->error()) {
+                                       $basic_info = array(
+                                               'title' => mb_substr($rss->get_title(), 0, 199),
+                                               'site_url' => mb_substr(rewrite_relative_url($fetch_url, $rss->get_link()), 0, 245)
+                                       );
+                               }
                        }
 
-                       $feed_data = trim($feed_data);
+                       if ($basic_info && is_array($basic_info)) {
+                               $sth = $pdo->prepare("SELECT title, site_url FROM ttrss_feeds WHERE id = ?");
+                               $sth->execute([$feed]);
 
-                       $rss = new FeedParser($feed_data);
-                       $rss->init();
+                               if ($row = $sth->fetch()) {
 
-                       if (!$rss->error()) {
-                               $basic_info = array(
-                                       'title' => db_escape_string(mb_substr($rss->get_title(), 0, 199)),
-                                       'site_url' => db_escape_string(mb_substr(rewrite_relative_url($fetch_url, $rss->get_link()), 0, 245))
-                               );
-                       }
-               }
+                                       $registered_title = $row["title"];
+                                       $orig_site_url = $row["site_url"];
 
-               if ($basic_info && is_array($basic_info)) {
-                       $result = db_query("SELECT title, site_url FROM ttrss_feeds WHERE id = '$feed'");
+                                       if ($basic_info['title'] && (!$registered_title || $registered_title == "[Unknown]")) {
 
-                       $registered_title = db_fetch_result($result, 0, "title");
-                       $orig_site_url = db_fetch_result($result, 0, "site_url");
+                                               $sth = $pdo->prepare("UPDATE ttrss_feeds SET
+                                                       title = ? WHERE id = ?");
+                                               $sth->execute([$basic_info['title'], $feed]);
+                                       }
 
-                       if ($basic_info['title'] && (!$registered_title || $registered_title == "[Unknown]")) {
-                               db_query("UPDATE ttrss_feeds SET
-                                       title = '${basic_info['title']}' WHERE id = '$feed'");
-                       }
+                                       if ($basic_info['site_url'] && $orig_site_url != $basic_info['site_url']) {
+                                               $sth = $pdo->prepare("UPDATE ttrss_feeds SET
+                                                       site_url = ? WHERE id = ?");
+                                               $sth->execute([$basic_info['site_url'], $feed]);
+                                       }
 
-                       if ($basic_info['site_url'] && $orig_site_url != $basic_info['site_url']) {
-                               db_query("UPDATE ttrss_feeds SET
-                                                       site_url = '${basic_info['site_url']}' WHERE id = '$feed'");
+                               }
                        }
                }
        }
@@ -285,67 +310,65 @@ class RSSUtils {
         */
        static function update_rss_feed($feed, $no_cache = false) {
 
-               $debug_enabled = defined('DAEMON_EXTENDED_DEBUG') || $_REQUEST['xdebug'];
+               Debug::log("start", Debug::$LOG_VERBOSE);
 
-               _debug_suppress(!$debug_enabled);
-               _debug("start", $debug_enabled);
+               $pdo = Db::pdo();
 
-               $result = db_query("SELECT title FROM ttrss_feeds
-                       WHERE id = '$feed'");
+               $sth = $pdo->prepare("SELECT title FROM ttrss_feeds WHERE id = ?");
+               $sth->execute([$feed]);
 
-               if (db_num_rows($result) == 0) {
-                       _debug("feed $feed NOT FOUND/SKIPPED", $debug_enabled);
+               if (!$row = $sth->fetch()) {
+                       Debug::log("feed $feed not found, skipping.");
                        user_error("Attempt to update unknown/invalid feed $feed", E_USER_WARNING);
                        return false;
                }
 
-               $title = db_fetch_result($result, 0, "title");
+               $title = $row["title"];
 
                // feed was batch-subscribed or something, we need to get basic info
                // this is not optimal currently as it fetches stuff separately TODO: optimize
                if ($title == "[Unknown]") {
-                       _debug("setting basic feed info for $feed...");
+                       Debug::log("setting basic feed info for $feed...");
                        RSSUtils::set_basic_feed_info($feed);
                }
 
-               $result = db_query("SELECT id,update_interval,auth_login,
+               $sth = $pdo->prepare("SELECT id,update_interval,auth_login,
                        feed_url,auth_pass,cache_images,
                        mark_unread_on_update, owner_uid,
-                       auth_pass_encrypted, feed_language, 
-                       last_modified                   
-                       FROM ttrss_feeds WHERE id = '$feed'");
+                       auth_pass_encrypted, feed_language,
+                       last_modified,
+                       ".SUBSTRING_FOR_DATE."(last_unconditional, 1, 19) AS last_unconditional
+                       FROM ttrss_feeds WHERE id = ?");
+               $sth->execute([$feed]);
 
-               $owner_uid = db_fetch_result($result, 0, "owner_uid");
-               $mark_unread_on_update = sql_bool_to_bool(db_fetch_result($result,
-                       0, "mark_unread_on_update"));
-               $auth_pass_encrypted = sql_bool_to_bool(db_fetch_result($result,
-                       0, "auth_pass_encrypted"));
+               if ($row = $sth->fetch()) {
 
-               db_query("UPDATE ttrss_feeds SET last_update_started = NOW()
-                       WHERE id = '$feed'");
+                       $owner_uid = $row["owner_uid"];
+                       $mark_unread_on_update = $row["mark_unread_on_update"];
 
-               $auth_login = db_fetch_result($result, 0, "auth_login");
-               $auth_pass = db_fetch_result($result, 0, "auth_pass");
+                       $sth = $pdo->prepare("UPDATE ttrss_feeds SET last_update_started = NOW()
+                               WHERE id = ?");
+                       $sth->execute([$feed]);
 
-               if ($auth_pass_encrypted && function_exists("mcrypt_decrypt")) {
-                       require_once "crypt.php";
-                       $auth_pass = decrypt_string($auth_pass);
-               }
+                       $auth_login = $row["auth_login"];
+                       $auth_pass = $row["auth_pass"];
+                       $stored_last_modified = $row["last_modified"];
+                       $last_unconditional = $row["last_unconditional"];
+                       $cache_images = $row["cache_images"];
+                       $fetch_url = $row["feed_url"];
 
-               $stored_last_modified = db_fetch_result($result, 0, "last_modified");
-               $cache_images = sql_bool_to_bool(db_fetch_result($result, 0, "cache_images"));
-               $fetch_url = db_fetch_result($result, 0, "feed_url");
-               $feed_language = db_escape_string(mb_strtolower(db_fetch_result($result, 0, "feed_language")));
-               if (!$feed_language) $feed_language = 'english';
+                       $feed_language = mb_strtolower($row["feed_language"]);
+                       if (!$feed_language) $feed_language = 'english';
 
-               $feed = db_escape_string($feed);
+               } else {
+                       return false;
+               }
 
                $date_feed_processed = date('Y-m-d H:i');
 
-               $cache_filename = CACHE_DIR . "/simplepie/" . sha1($fetch_url) . ".xml";
+               $cache_filename = CACHE_DIR . "/feeds/" . sha1($fetch_url) . ".xml";
 
                $pluginhost = new PluginHost();
-               $pluginhost->set_debug($debug_enabled);
                $user_plugins = get_pref("_ENABLED_PLUGINS", $owner_uid);
 
                $pluginhost->load(PLUGINS, PluginHost::KIND_ALL);
@@ -368,7 +391,7 @@ class RSSUtils {
                        !$auth_login && !$auth_pass &&
                        filemtime($cache_filename) > time() - 30) {
 
-                       _debug("using local cache [$cache_filename].", $debug_enabled);
+                       Debug::log("using local cache [$cache_filename].", Debug::$LOG_VERBOSE);
 
                        @$feed_data = file_get_contents($cache_filename);
 
@@ -377,28 +400,28 @@ class RSSUtils {
                        }
 
                } else {
-                       _debug("local cache will not be used for this feed", $debug_enabled);
+                       Debug::log("local cache will not be used for this feed", Debug::$LOG_VERBOSE);
                }
 
                global $fetch_last_modified;
 
                // fetch feed from source
                if (!$feed_data) {
-                       _debug("stored last modified: $stored_last_modified", $debug_enabled);
-                       _debug("fetching [$fetch_url]...", $debug_enabled);
+                       Debug::log("last unconditional update request: $last_unconditional", Debug::$LOG_VERBOSE);
 
                        if (ini_get("open_basedir") && function_exists("curl_init")) {
-                               _debug("not using CURL due to open_basedir restrictions");
+                               Debug::log("not using CURL due to open_basedir restrictions", Debug::$LOG_VERBOSE);
                        }
 
-                       /*$feed_data = fetch_file_contents($fetch_url, false,
-                               $auth_login, $auth_pass, false,
-                               $no_cache ? FEED_FETCH_NO_CACHE_TIMEOUT : FEED_FETCH_TIMEOUT,
-                               0);*/
+                       if (time() - strtotime($last_unconditional) > MAX_CONDITIONAL_INTERVAL) {
+                               Debug::log("maximum allowed interval for conditional requests exceeded, forcing refetch", Debug::$LOG_VERBOSE);
 
-                       // TODO: last_modified should be limited, if the feed has not been updated for a while
-                       // we probably should force one update without the header
-                       // unfortunately last_updated gets bumped on http 304 so that daemon would work properly
+                               $force_refetch = true;
+                       } else {
+                               Debug::log("stored last modified for conditional request: $stored_last_modified", Debug::$LOG_VERBOSE);
+                       }
+
+                       Debug::log("fetching [$fetch_url] (force_refetch: $force_refetch)...", Debug::$LOG_VERBOSE);
 
                        $feed_data = fetch_file_contents([
                                "url" => $fetch_url,
@@ -418,22 +441,20 @@ class RSSUtils {
 
                        $feed_data = trim($feed_data);
 
-                       _debug("fetch done.", $debug_enabled);
-                       _debug("source last modified: " . $fetch_last_modified);
+                       Debug::log("fetch done.", Debug::$LOG_VERBOSE);
+                       Debug::log("source last modified: " . $fetch_last_modified, Debug::$LOG_VERBOSE);
 
                        if ($feed_data && $fetch_last_modified != $stored_last_modified) {
-                               $last_modified_escaped = db_escape_string(substr($fetch_last_modified, 0, 245));
-
-                               db_query("UPDATE ttrss_feeds SET last_modified = '$last_modified_escaped' WHERE id = '$feed'");
-
+                               $sth = $pdo->prepare("UPDATE ttrss_feeds SET last_modified = ? WHERE id = ?");
+                               $sth->execute([substr($fetch_last_modified, 0, 245), $feed]);
                        }
 
                        // cache vanilla feed data for re-use
-                       if ($feed_data && !$auth_pass && !$auth_login && is_writable(CACHE_DIR . "/simplepie")) {
+                       if ($feed_data && !$auth_pass && !$auth_login && is_writable(CACHE_DIR . "/feeds")) {
                                $new_rss_hash = sha1($feed_data);
 
                                if ($new_rss_hash != $rss_hash) {
-                                       _debug("saving $cache_filename", $debug_enabled);
+                                       Debug::log("saving $cache_filename", Debug::$LOG_VERBOSE);
                                        @file_put_contents($cache_filename, $feed_data);
                                }
                        }
@@ -443,20 +464,19 @@ class RSSUtils {
                        global $fetch_last_error;
                        global $fetch_last_error_code;
 
-                       _debug("unable to fetch: $fetch_last_error [$fetch_last_error_code]", $debug_enabled);
-
-                       $error_escaped = '';
+                       Debug::log("unable to fetch: $fetch_last_error [$fetch_last_error_code]", Debug::$LOG_VERBOSE);
 
                        // If-Modified-Since
                        if ($fetch_last_error_code != 304) {
-                               $error_escaped = db_escape_string($fetch_last_error);
+                               $error_message = $fetch_last_error;
                        } else {
-                               _debug("source claims data not modified, nothing to do.", $debug_enabled);
+                               Debug::log("source claims data not modified, nothing to do.", Debug::$LOG_VERBOSE);
+                               $error_message = "";
                        }
 
-                       db_query(
-                               "UPDATE ttrss_feeds SET last_error = '$error_escaped',
-                                       last_updated = NOW() WHERE id = '$feed'");
+                       $sth = $pdo->prepare("UPDATE ttrss_feeds SET last_error = ?,
+                                       last_updated = NOW() WHERE id = ?");
+                       $sth->execute([$error_message, $feed]);
 
                        return;
                }
@@ -468,17 +488,13 @@ class RSSUtils {
                $rss = new FeedParser($feed_data);
                $rss->init();
 
-               $feed = db_escape_string($feed);
-
                if (!$rss->error()) {
 
                        // We use local pluginhost here because we need to load different per-user feed plugins
                        $pluginhost->run_hooks(PluginHost::HOOK_FEED_PARSED, "hook_feed_parsed", $rss);
 
-                       _debug("language: $feed_language", $debug_enabled);
-                       _debug("processing feed data...", $debug_enabled);
-
-//                     db_query("BEGIN");
+                       Debug::log("language: $feed_language", Debug::$LOG_VERBOSE);
+                       Debug::log("processing feed data...", Debug::$LOG_VERBOSE);
 
                        if (DB_TYPE == "pgsql") {
                                $favicon_interval_qpart = "favicon_last_checked < NOW() - INTERVAL '12 hour'";
@@ -486,21 +502,24 @@ class RSSUtils {
                                $favicon_interval_qpart = "favicon_last_checked < DATE_SUB(NOW(), INTERVAL 12 HOUR)";
                        }
 
-                       $result = db_query("SELECT owner_uid,favicon_avg_color,
+                       $sth = $pdo->prepare("SELECT owner_uid,favicon_avg_color,
                                (favicon_last_checked IS NULL OR $favicon_interval_qpart) AS
                                                favicon_needs_check
-                               FROM ttrss_feeds WHERE id = '$feed'");
+                               FROM ttrss_feeds WHERE id = ?");
+                       $sth->execute([$feed]);
 
-                       $favicon_needs_check = sql_bool_to_bool(db_fetch_result($result, 0,
-                               "favicon_needs_check"));
-                       $favicon_avg_color = db_fetch_result($result, 0, "favicon_avg_color");
-
-                       $owner_uid = db_fetch_result($result, 0, "owner_uid");
+                       if ($row = $sth->fetch()) {
+                               $favicon_needs_check = $row["favicon_needs_check"];
+                               $favicon_avg_color = $row["favicon_avg_color"];
+                               $owner_uid = $row["owner_uid"];
+                       } else {
+                               return false;
+                       }
 
-                       $site_url = db_escape_string(mb_substr(rewrite_relative_url($fetch_url, $rss->get_link()), 0, 245));
+                       $site_url = mb_substr(rewrite_relative_url($fetch_url, $rss->get_link()), 0, 245);
 
-                       _debug("site_url: $site_url", $debug_enabled);
-                       _debug("feed_title: " . $rss->get_title(), $debug_enabled);
+                       Debug::log("site_url: $site_url", Debug::$LOG_VERBOSE);
+                       Debug::log("feed_title: " . $rss->get_title(), Debug::$LOG_VERBOSE);
 
                        if ($favicon_needs_check || $force_refetch) {
 
@@ -510,7 +529,7 @@ class RSSUtils {
                                $favicon_file = ICONS_DIR . "/$feed.ico";
                                $favicon_modified = @filemtime($favicon_file);
 
-                               _debug("checking favicon...", $debug_enabled);
+                               Debug::log("checking favicon...", Debug::$LOG_VERBOSE);
 
                                RSSUtils::check_feed_favicon($site_url, $feed);
                                $favicon_modified_new = @filemtime($favicon_file);
@@ -518,76 +537,84 @@ class RSSUtils {
                                if ($favicon_modified_new > $favicon_modified)
                                        $favicon_avg_color = '';
 
+                               $favicon_colorstring = "";
                                if (file_exists($favicon_file) && function_exists("imagecreatefromstring") && $favicon_avg_color == '') {
                                        require_once "colors.php";
 
-                                       db_query("UPDATE ttrss_feeds SET favicon_avg_color = 'fail' WHERE
-                                                       id = '$feed'");
+                                       $sth = $pdo->prepare("UPDATE ttrss_feeds SET favicon_avg_color = 'fail' WHERE
+                                                       id = ?");
+                                       $sth->execute([$feed]);
 
-                                       $favicon_color = db_escape_string(
-                                               calculate_avg_color($favicon_file));
+                                       $favicon_color = calculate_avg_color($favicon_file);
+
+                                       $favicon_colorstring = ",favicon_avg_color = " . $pdo->quote($favicon_color);
 
-                                       $favicon_colorstring = ",favicon_avg_color = '".$favicon_color."'";
                                } else if ($favicon_avg_color == 'fail') {
-                                       _debug("floicon failed on this file, not trying to recalculate avg color", $debug_enabled);
+                                       Debug::log("floicon failed on this file, not trying to recalculate avg color", Debug::$LOG_VERBOSE);
                                }
 
-                               db_query("UPDATE ttrss_feeds SET favicon_last_checked = NOW()
-                                       $favicon_colorstring
-                                       WHERE id = '$feed'");
+                               $sth = $pdo->prepare("UPDATE ttrss_feeds SET favicon_last_checked = NOW()
+                                       $favicon_colorstring WHERE id = ?");
+                               $sth->execute([$feed]);
                        }
 
-                       _debug("loading filters & labels...", $debug_enabled);
+                       Debug::log("loading filters & labels...", Debug::$LOG_VERBOSE);
 
                        $filters = load_filters($feed, $owner_uid);
 
-                       if ($debug_enabled) {
-                           print_r($filters);
-            }
+                       if (Debug::get_loglevel() >= Debug::$LOG_EXTENDED) {
+                               print_r($filters);
+                       }
 
-                       _debug("" . count($filters) . " filters loaded.", $debug_enabled);
+                       Debug::log("" . count($filters) . " filters loaded.", Debug::$LOG_VERBOSE);
 
                        $items = $rss->get_items();
 
                        if (!is_array($items)) {
-                               _debug("no articles found.", $debug_enabled);
+                               Debug::log("no articles found.", Debug::$LOG_VERBOSE);
 
-                               db_query("UPDATE ttrss_feeds
-                                       SET last_updated = NOW(), last_error = '' WHERE id = '$feed'");
+                               $sth = $pdo->prepare("UPDATE ttrss_feeds
+                                       SET last_updated = NOW(), last_unconditional = NOW(), last_error = '' WHERE id = ?");
+                               $sth->execute([$feed]);
 
-                               return; // no articles
+                               return true; // no articles
                        }
 
-                       _debug("processing articles...", $debug_enabled);
+                       Debug::log("processing articles...", Debug::$LOG_VERBOSE);
 
                        $tstart = time();
 
                        foreach ($items as $item) {
-                               if ($_REQUEST['xdebug'] == 3) {
+                               $pdo->beginTransaction();
+
+                               if (Debug::get_loglevel() >= 3) {
                                        print_r($item);
                                }
 
                                if (ini_get("max_execution_time") > 0 && time() - $tstart >= ini_get("max_execution_time") * 0.7) {
-                                       _debug("looks like there's too many articles to process at once, breaking out", $debug_enabled);
+                                       Debug::log("looks like there's too many articles to process at once, breaking out", Debug::$LOG_VERBOSE);
+                                       $pdo->commit();
                                        break;
                                }
 
-                               $entry_guid = $item->get_id();
-                               if (!$entry_guid) $entry_guid = $item->get_link();
+                               $entry_guid = strip_tags($item->get_id());
+                               if (!$entry_guid) $entry_guid = strip_tags($item->get_link());
                                if (!$entry_guid) $entry_guid = RSSUtils::make_guid_from_title($item->get_title());
-                               if (!$entry_guid) continue;
 
-                               $entry_guid = "$owner_uid,$entry_guid";
+                               if (!$entry_guid) {
+                                       $pdo->commit();
+                                       continue;
+                               }
 
-                               $entry_guid_hashed = db_escape_string('SHA1:' . sha1($entry_guid));
+                               $entry_guid = "$owner_uid,$entry_guid";
 
-                               _debug("guid $entry_guid / $entry_guid_hashed", $debug_enabled);
+                               $entry_guid_hashed = 'SHA1:' . sha1($entry_guid);
 
-                               $entry_timestamp = "";
+                               Debug::log("guid $entry_guid / $entry_guid_hashed", Debug::$LOG_VERBOSE);
 
-                               $entry_timestamp = $item->get_date();
+                               $entry_timestamp = strip_tags($item->get_date());
 
-                               _debug("orig date: " . $item->get_date(), $debug_enabled);
+                               Debug::log("orig date: " . $item->get_date(), Debug::$LOG_VERBOSE);
 
                                if ($entry_timestamp == -1 || !$entry_timestamp || $entry_timestamp > time()) {
                                        $entry_timestamp = time();
@@ -595,37 +622,38 @@ class RSSUtils {
 
                                $entry_timestamp_fmt = strftime("%Y/%m/%d %H:%M:%S", $entry_timestamp);
 
-                               _debug("date $entry_timestamp [$entry_timestamp_fmt]", $debug_enabled);
+                               Debug::log("date $entry_timestamp [$entry_timestamp_fmt]", Debug::$LOG_VERBOSE);
 
-//                             $entry_title = html_entity_decode($item->get_title(), ENT_COMPAT, 'UTF-8');
-//                             $entry_title = decode_numeric_entities($entry_title);
-                               $entry_title = $item->get_title();
+                               $entry_title = strip_tags($item->get_title());
 
                                $entry_link = rewrite_relative_url($site_url, $item->get_link());
 
-                               _debug("title $entry_title", $debug_enabled);
-                               _debug("link $entry_link", $debug_enabled);
+                               $entry_language = mb_substr(trim($item->get_language()), 0, 2);
+
+                               Debug::log("title $entry_title", Debug::$LOG_VERBOSE);
+                               Debug::log("link $entry_link", Debug::$LOG_VERBOSE);
+                               Debug::log("language $entry_language", Debug::$LOG_VERBOSE);
 
                                if (!$entry_title) $entry_title = date("Y-m-d H:i:s", $entry_timestamp);;
 
                                $entry_content = $item->get_content();
                                if (!$entry_content) $entry_content = $item->get_description();
 
-                               if ($_REQUEST["xdebug"] == 2) {
+                               if (Debug::get_loglevel() >= 3) {
                                        print "content: ";
                                        print htmlspecialchars($entry_content);
                                        print "\n";
                                }
 
-                               $entry_comments = db_escape_string(mb_substr($item->get_comments_url(), 0, 245));
+                               $entry_comments = mb_substr(strip_tags($item->get_comments_url()), 0, 245);
                                $num_comments = (int) $item->get_comments_count();
 
-                               $entry_author = $item->get_author(); // escaped later
-                               $entry_guid = db_escape_string(mb_substr($entry_guid, 0, 245));
+                               $entry_author = strip_tags($item->get_author());
+                               $entry_guid = mb_substr($entry_guid, 0, 245);
 
-                               _debug("author $entry_author", $debug_enabled);
-                               _debug("num_comments: $num_comments", $debug_enabled);
-                               _debug("looking for tags...", $debug_enabled);
+                               Debug::log("author $entry_author", Debug::$LOG_VERBOSE);
+                               Debug::log("num_comments: $num_comments", Debug::$LOG_VERBOSE);
+                               Debug::log("looking for tags...", Debug::$LOG_VERBOSE);
 
                                // parse <category> entries into tags
 
@@ -641,30 +669,32 @@ class RSSUtils {
 
                                $entry_tags = array_unique($additional_tags);
 
-                               for ($i = 0; $i < count($entry_tags); $i++)
+                               for ($i = 0; $i < count($entry_tags); $i++) {
                                        $entry_tags[$i] = mb_strtolower($entry_tags[$i], 'utf-8');
 
-                               _debug("tags found: " . join(",", $entry_tags), $debug_enabled);
+                                       // we don't support numeric tags, let's prefix them
+                                       if (is_numeric($entry_tags[$i])) $entry_tags[$i] = 't:' . $entry_tags[$i];
+                               }
+
+                               Debug::log("tags found: " . join(",", $entry_tags), Debug::$LOG_VERBOSE);
 
-                               _debug("done collecting data.", $debug_enabled);
+                               Debug::log("done collecting data.", Debug::$LOG_VERBOSE);
 
-                               $result = db_query("SELECT id, content_hash, lang FROM ttrss_entries
-                                       WHERE guid = '".db_escape_string($entry_guid)."' OR guid = '$entry_guid_hashed'");
+                               $sth = $pdo->prepare("SELECT id, content_hash, lang FROM ttrss_entries
+                                       WHERE guid = ? OR guid = ?");
+                               $sth->execute([$entry_guid, $entry_guid_hashed]);
 
-                               if (db_num_rows($result) != 0) {
-                                       $base_entry_id = db_fetch_result($result, 0, "id");
-                                       $entry_stored_hash = db_fetch_result($result, 0, "content_hash");
+                               if ($row = $sth->fetch()) {
+                                       $base_entry_id = $row["id"];
+                                       $entry_stored_hash = $row["content_hash"];
                                        $article_labels = Article::get_article_labels($base_entry_id, $owner_uid);
-                                       $entry_language = db_fetch_result($result, 0, "lang");
 
                                        $existing_tags = Article::get_article_tags($base_entry_id, $owner_uid);
                                        $entry_tags = array_unique(array_merge($entry_tags, $existing_tags));
-
                                } else {
                                        $base_entry_id = false;
                                        $entry_stored_hash = "";
                                        $article_labels = array();
-                                       $entry_language = "";
                                }
 
                                $article = array("owner_uid" => $owner_uid, // read only
@@ -689,54 +719,51 @@ class RSSUtils {
                                $entry_plugin_data = "";
                                $entry_current_hash = RSSUtils::calculate_article_hash($article, $pluginhost);
 
-                               _debug("article hash: $entry_current_hash [stored=$entry_stored_hash]", $debug_enabled);
+                               Debug::log("article hash: $entry_current_hash [stored=$entry_stored_hash]", Debug::$LOG_VERBOSE);
 
                                if ($entry_current_hash == $entry_stored_hash && !isset($_REQUEST["force_rehash"])) {
-                                       _debug("stored article seems up to date [IID: $base_entry_id], updating timestamp only", $debug_enabled);
+                                       Debug::log("stored article seems up to date [IID: $base_entry_id], updating timestamp only", Debug::$LOG_VERBOSE);
 
                                        // we keep encountering the entry in feeds, so we need to
                                        // update date_updated column so that we don't get horrible
                                        // dupes when the entry gets purged and reinserted again e.g.
                                        // in the case of SLOW SLOW OMG SLOW updating feeds
 
-                                       $base_entry_id = db_fetch_result($result, 0, "id");
-
-                                       db_query("UPDATE ttrss_entries SET date_updated = NOW()
-                                               WHERE id = '$base_entry_id'");
+                                       $sth = $pdo->prepare("UPDATE ttrss_entries SET date_updated = NOW()
+                                               WHERE id = ?");
+                                       $sth->execute([$base_entry_id]);
 
+                                       $pdo->commit();
                                        continue;
                                }
 
-                               _debug("hash differs, applying plugin filters:", $debug_enabled);
+                               Debug::log("hash differs, applying plugin filters:", Debug::$LOG_VERBOSE);
 
                                foreach ($pluginhost->get_hooks(PluginHost::HOOK_ARTICLE_FILTER) as $plugin) {
-                                       _debug("... " . get_class($plugin), $debug_enabled);
+                                       Debug::log("... " . get_class($plugin), Debug::$LOG_VERBOSE);
 
                                        $start = microtime(true);
                                        $article = $plugin->hook_article_filter($article);
 
-                                       _debug("=== " . sprintf("%.4f (sec)", microtime(true) - $start), $debug_enabled);
+                                       Debug::log(sprintf("=== %.4f (sec)", microtime(true) - $start), Debug::$LOG_VERBOSE);
 
                                        $entry_plugin_data .= mb_strtolower(get_class($plugin)) . ",";
                                }
 
-                               if ($_REQUEST["xdebug"] == 2) {
+                if (Debug::get_loglevel() >= 3) {
                                        print "processed content: ";
                                        print htmlspecialchars($article["content"]);
                                        print "\n";
                                }
 
-                               $entry_plugin_data = db_escape_string($entry_plugin_data);
-
-                               _debug("plugin data: $entry_plugin_data", $debug_enabled);
+                               Debug::log("plugin data: $entry_plugin_data", Debug::$LOG_VERBOSE);
 
                                // Workaround: 4-byte unicode requires utf8mb4 in MySQL. See https://tt-rss.org/forum/viewtopic.php?f=1&t=3377&p=20077#p20077
-                               if (DB_TYPE == "mysql") {
+                               if (DB_TYPE == "mysql" && MYSQL_CHARSET != "UTF8MB4") {
                                        foreach ($article as $k => $v) {
-
                                                // i guess we'll have to take the risk of 4byte unicode labels & tags here
                                                if (is_string($article[$k])) {
-                                                       $article[$k] = preg_replace('/[\x{10000}-\x{10FFFF}]/u', "\xEF\xBF\xBD", $v);
+                                                       $article[$k] = RSSUtils::strip_utf8mb4($v);
                                                }
                                        }
                                }
@@ -749,14 +776,14 @@ class RSSUtils {
                                        $article["content"], $article["link"], $article["author"],
                                        $article["tags"], $matched_rules);
 
-                               if ($debug_enabled) {
-                                       _debug("matched filter rules: ", $debug_enabled);
+                               if (Debug::get_loglevel() >= Debug::$LOG_EXTENDED) {
+                                       Debug::log("matched filter rules: ", Debug::$LOG_VERBOSE);
 
                                        if (count($matched_rules) != 0) {
                                                print_r($matched_rules);
                                        }
 
-                                       _debug("filter actions: ", $debug_enabled);
+                                       Debug::log("filter actions: ", Debug::$LOG_VERBOSE);
 
                                        if (count($article_filters) != 0) {
                                                print_r($article_filters);
@@ -767,7 +794,7 @@ class RSSUtils {
                                $plugin_filter_actions = $pluginhost->get_filter_actions();
 
                                if (count($plugin_filter_names) > 0) {
-                                       _debug("applying plugin filter actions...", $debug_enabled);
+                                       Debug::log("applying plugin filter actions...", Debug::$LOG_VERBOSE);
 
                                        foreach ($plugin_filter_names as $pfn) {
                                                list($pfclass,$pfaction) = explode(":", $pfn["param"]);
@@ -775,60 +802,56 @@ class RSSUtils {
                                                if (isset($plugin_filter_actions[$pfclass])) {
                                                        $plugin = $pluginhost->get_plugin($pfclass);
 
-                                                       _debug("... $pfclass: $pfaction", $debug_enabled);
+                                                       Debug::log("... $pfclass: $pfaction", Debug::$LOG_VERBOSE);
 
                                                        if ($plugin) {
                                                                $start = microtime(true);
                                                                $article = $plugin->hook_article_filter_action($article, $pfaction);
 
-                                                               _debug("=== " . sprintf("%.4f (sec)", microtime(true) - $start), $debug_enabled);
+                                                               Debug::log(sprintf("=== %.4f (sec)"), Debug::$LOG_VERBOSE);
                                                        } else {
-                                                               _debug("??? $pfclass: plugin object not found.");
+                                                               Debug::log("??? $pfclass: plugin object not found.", Debug::$LOG_VERBOSE);
                                                        }
                                                } else {
-                                                       _debug("??? $pfclass: filter plugin not registered.");
+                                                       Debug::log("??? $pfclass: filter plugin not registered.", Debug::$LOG_VERBOSE);
                                                }
                                        }
                                }
 
                                $entry_tags = $article["tags"];
-                               $entry_guid = db_escape_string($entry_guid);
-                               $entry_title = db_escape_string($article["title"]);
-                               $entry_author = db_escape_string(mb_substr($article["author"], 0, 245));
-                               $entry_link = db_escape_string($article["link"]);
+                               $entry_title = strip_tags($article["title"]);
+                               $entry_author = mb_substr(strip_tags($article["author"]), 0, 245);
+                               $entry_link = strip_tags($article["link"]);
                                $entry_content = $article["content"]; // escaped below
                                $entry_force_catchup = $article["force_catchup"];
                                $article_labels = $article["labels"];
                                $entry_score_modifier = (int) $article["score_modifier"];
-                               $entry_language = db_escape_string($article["language"]);
+                               $entry_language = $article["language"];
 
-                               if ($debug_enabled) {
-                                       _debug("article labels:", $debug_enabled);
+                               if (Debug::get_loglevel() >= Debug::$LOG_EXTENDED) {
+                                       Debug::log("article labels:", Debug::$LOG_VERBOSE);
 
                                        if (count($article_labels) != 0) {
                                                print_r($article_labels);
                                        }
                                }
 
-                               _debug("force catchup: $entry_force_catchup");
+                               Debug::log("force catchup: $entry_force_catchup", Debug::$LOG_VERBOSE);
 
                                if ($cache_images && is_writable(CACHE_DIR . '/images'))
-                                       RSSUtils::cache_media($entry_content, $site_url, $debug_enabled);
-
-                               $entry_content = db_escape_string($entry_content, false);
+                                       RSSUtils::cache_media($entry_content, $site_url);
 
-                               //db_query("BEGIN");
+                               $csth = $pdo->prepare("SELECT id FROM ttrss_entries
+                                       WHERE guid = ? OR guid = ?");
+                               $csth->execute([$entry_guid, $entry_guid_hashed]);
 
-                               $result = db_query("SELECT id FROM      ttrss_entries
-                                       WHERE (guid = '$entry_guid' OR guid = '$entry_guid_hashed')");
+                               if (!$row = $csth->fetch()) {
 
-                               if (db_num_rows($result) == 0) {
-
-                                       _debug("base guid [$entry_guid or $entry_guid_hashed] not found, creating...", $debug_enabled);
+                                       Debug::log("base guid [$entry_guid or $entry_guid_hashed] not found, creating...", Debug::$LOG_VERBOSE);
 
                                        // base post entry does not exist, create it
 
-                                       db_query(
+                                       $usth = $pdo->prepare(
                                                "INSERT INTO ttrss_entries
                                                        (title,
                                                        guid,
@@ -845,166 +868,169 @@ class RSSUtils {
                                                        lang,
                                                        author)
                                                VALUES
-                                                       ('$entry_title',
-                                                       '$entry_guid_hashed',
-                                                       '$entry_link',
-                                                       '$entry_timestamp_fmt',
-                                                       '$entry_content',
-                                                       '$entry_current_hash',
+                                                       (?, ?, ?, ?, ?, ?,
                                                        false,
                                                        NOW(),
-                                                       '$date_feed_processed',
-                                                       '$entry_comments',
-                                                       '$num_comments',
-                                                       '$entry_plugin_data',
-                                                       '$entry_language',
-                                                       '$entry_author')");
+                                                       ?, ?, ?, ?,     ?, ?)");
+
+                                               $usth->execute([$entry_title,
+                                                       $entry_guid_hashed,
+                                                       $entry_link,
+                                                       $entry_timestamp_fmt,
+                                                       "$entry_content",
+                                                       $entry_current_hash,
+                                                       $date_feed_processed,
+                                                       $entry_comments,
+                                                       (int)$num_comments,
+                                                       $entry_plugin_data,
+                                                       "$entry_language",
+                                                       "$entry_author"]);
 
                                }
 
-                               // now it should exist, if not - bad luck then
-
-                               $result = db_query("SELECT id FROM ttrss_entries
-                                       WHERE guid = '$entry_guid' OR guid = '$entry_guid_hashed'");
+                               $csth->execute([$entry_guid, $entry_guid_hashed]);
 
                                $entry_ref_id = 0;
                                $entry_int_id = 0;
 
-                               if (db_num_rows($result) == 1) {
+                               if ($row = $csth->fetch()) {
 
-                                       _debug("base guid found, checking for user record", $debug_enabled);
+                                       Debug::log("base guid found, checking for user record", Debug::$LOG_VERBOSE);
 
-                                       $ref_id = db_fetch_result($result, 0, "id");
+                                       $ref_id = $row['id'];
                                        $entry_ref_id = $ref_id;
 
-                                       /* $stored_guid = db_fetch_result($result, 0, "guid");
-                                       if ($stored_guid != $entry_guid_hashed) {
-                                               if ($debug_enabled) _debug("upgrading compat guid to hashed one", $debug_enabled);
-
-                                               db_query("UPDATE ttrss_entries SET guid = '$entry_guid_hashed' WHERE
-                                                       id = '$ref_id'");
-                                       } */
-
                                        if (RSSUtils::find_article_filter($article_filters, "filter")) {
-                                               //db_query("COMMIT"); // close transaction in progress
+                                               $pdo->commit();
                                                continue;
                                        }
 
                                        $score = RSSUtils::calculate_article_score($article_filters) + $entry_score_modifier;
 
-                                       _debug("initial score: $score [including plugin modifier: $entry_score_modifier]", $debug_enabled);
+                                       Debug::log("initial score: $score [including plugin modifier: $entry_score_modifier]", Debug::$LOG_VERBOSE);
 
                                        // check for user post link to main table
 
-                                       $query = "SELECT ref_id, int_id FROM ttrss_user_entries WHERE
-                                                       ref_id = '$ref_id' AND owner_uid = '$owner_uid'";
-
-//                                     if ($_REQUEST["xdebug"]) print "$query\n";
-
-                                       $result = db_query($query);
+                                       $sth = $pdo->prepare("SELECT ref_id, int_id FROM ttrss_user_entries WHERE
+                                                       ref_id = ? AND owner_uid = ?");
+                                       $sth->execute([$ref_id, $owner_uid]);
 
                                        // okay it doesn't exist - create user entry
-                                       if (db_num_rows($result) == 0) {
+                                       if ($row = $sth->fetch()) {
+                                               $entry_ref_id = $row["ref_id"];
+                                               $entry_int_id = $row["int_id"];
+
+                                               Debug::log("user record FOUND: RID: $entry_ref_id, IID: $entry_int_id", Debug::$LOG_VERBOSE);
+                                       } else {
 
-                                               _debug("user record not found, creating...", $debug_enabled);
+                                               Debug::log("user record not found, creating...", Debug::$LOG_VERBOSE);
 
                                                if ($score >= -500 && !RSSUtils::find_article_filter($article_filters, 'catchup') && !$entry_force_catchup) {
-                                                       $unread = 'true';
-                                                       $last_read_qpart = 'NULL';
+                                                       $unread = 1;
+                                                       $last_read_qpart = null;
                                                } else {
-                                                       $unread = 'false';
-                                                       $last_read_qpart = 'NOW()';
+                                                       $unread = 0;
+                                                       $last_read_qpart = date("Y-m-d H:i"); // we can't use NOW() here because it gets quoted
                                                }
 
                                                if (RSSUtils::find_article_filter($article_filters, 'mark') || $score > 1000) {
-                                                       $marked = 'true';
+                                                       $marked = 1;
                                                } else {
-                                                       $marked = 'false';
+                                                       $marked = 0;
                                                }
 
                                                if (RSSUtils::find_article_filter($article_filters, 'publish')) {
-                                                       $published = 'true';
+                                                       $published = 1;
                                                } else {
-                                                       $published = 'false';
+                                                       $published = 0;
                                                }
 
-                                               $last_marked = ($marked == 'true') ? 'NOW()' : 'NULL';
-                                               $last_published = ($published == 'true') ? 'NOW()' : 'NULL';
+                                               $last_marked = ($marked == 1) ? 'NOW()' : 'NULL';
+                                               $last_published = ($published == 1) ? 'NOW()' : 'NULL';
 
-                                               $result = db_query(
+                                               $sth = $pdo->prepare(
                                                        "INSERT INTO ttrss_user_entries
                                                                (ref_id, owner_uid, feed_id, unread, last_read, marked,
                                                                published, score, tag_cache, label_cache, uuid,
                                                                last_marked, last_published)
-                                                       VALUES ('$ref_id', '$owner_uid', '$feed', $unread,
-                                                               $last_read_qpart, $marked, $published, '$score', '', '',
-                                                               '', $last_marked, $last_published)");
+                                                       VALUES (?, ?, ?, ?, ?, ?, ?, ?, '', '', '', ".$last_marked.", ".$last_published.")");
 
-                                               $result = db_query(
-                                                       "SELECT int_id FROM ttrss_user_entries WHERE
-                                                               ref_id = '$ref_id' AND owner_uid = '$owner_uid' AND
-                                                               feed_id = '$feed' LIMIT 1");
+                                               $sth->execute([$ref_id, $owner_uid, $feed, $unread, $last_read_qpart, $marked,
+                                                       $published, $score]);
 
-                                               if (db_num_rows($result) == 1) {
-                                                       $entry_int_id = db_fetch_result($result, 0, "int_id");
-                                               }
-                                       } else {
-                                               _debug("user record FOUND", $debug_enabled);
+                                               $sth = $pdo->prepare("SELECT int_id FROM ttrss_user_entries WHERE
+                                                               ref_id = ? AND owner_uid = ? AND
+                                                               feed_id = ? LIMIT 1");
 
-                                               $entry_ref_id = db_fetch_result($result, 0, "ref_id");
-                                               $entry_int_id = db_fetch_result($result, 0, "int_id");
+                                               $sth->execute([$ref_id, $owner_uid, $feed]);
+
+                                               if ($row = $sth->fetch())
+                                                       $entry_int_id = $row['int_id'];
                                        }
 
-                                       _debug("RID: $entry_ref_id, IID: $entry_int_id", $debug_enabled);
+                                       Debug::log("resulting RID: $entry_ref_id, IID: $entry_int_id", Debug::$LOG_VERBOSE);
 
-                                       if (DB_TYPE == "pgsql") {
-                                               $tsvector_combined = db_escape_string(mb_substr($entry_title . ' ' . strip_tags(str_replace('<', ' <', $entry_content)),
-                                                       0, 1000000));
+                                       if (DB_TYPE == "pgsql")
+                                               $tsvector_qpart = "tsvector_combined = to_tsvector(:ts_lang, :ts_content),";
+                                       else
+                                               $tsvector_qpart = "";
 
-                                               $tsvector_qpart = "tsvector_combined = to_tsvector('$feed_language', '$tsvector_combined'),";
+                                       $sth = $pdo->prepare("UPDATE ttrss_entries
+                                               SET title = :title,
+                                                       $tsvector_qpart
+                                                       content = :content,
+                                                       content_hash = :content_hash,
+                                                       updated = :updated,
+                                                       date_updated = NOW(),
+                                                       num_comments = :num_comments,
+                                                       plugin_data = :plugin_data,
+                                                       author = :author,
+                                                       lang = :lang
+                                               WHERE id = :id");
+
+                                       $params = [":title" => $entry_title,
+                                               ":content" => "$entry_content",
+                                               ":content_hash" => $entry_current_hash,
+                                               ":updated" => $entry_timestamp_fmt,
+                                               ":num_comments" => (int)$num_comments,
+                                               ":plugin_data" => $entry_plugin_data,
+                                               ":author" => "$entry_author",
+                                               ":lang" => $entry_language,
+                                               ":id" => $ref_id];
 
-                                       } else {
-                                               $tsvector_qpart = "";
+                                       if (DB_TYPE == "pgsql") {
+                                               $params[":ts_lang"] = $feed_language;
+                                               $params[":ts_content"] = mb_substr(strip_tags($entry_title . " " . $entry_content), 0, 900000);
                                        }
 
-                                       db_query("UPDATE ttrss_entries
-                                               SET title = '$entry_title',
-                                                       content = '$entry_content',
-                                                       content_hash = '$entry_current_hash',
-                                                       updated = '$entry_timestamp_fmt',
-                                                       $tsvector_qpart
-                                                       num_comments = '$num_comments',
-                                                       plugin_data = '$entry_plugin_data',
-                                                       author = '$entry_author',
-                                                       lang = '$entry_language'
-                                               WHERE id = '$ref_id'");
+                                       $sth->execute($params);
 
                                        // update aux data
-                                       db_query("UPDATE ttrss_user_entries
-                                                       SET score = '$score' WHERE ref_id = '$ref_id'");
+                                       $sth = $pdo->prepare("UPDATE ttrss_user_entries
+                                                       SET score = ? WHERE ref_id = ?");
+                                       $sth->execute([$score, $ref_id]);
 
                                        if ($mark_unread_on_update) {
-                                               _debug("article updated, marking unread as requested.", $debug_enabled);
+                                               Debug::log("article updated, marking unread as requested.", Debug::$LOG_VERBOSE);
 
-                                               db_query("UPDATE ttrss_user_entries
-                                                       SET last_read = null, unread = true WHERE ref_id = '$ref_id'");
+                                               $sth = $pdo->prepare("UPDATE ttrss_user_entries
+                                                       SET last_read = null, unread = true WHERE ref_id = ?");
+                                               $sth->execute([$ref_id]);
                                        }
                                }
 
-                               //db_query("COMMIT");
-
-                               _debug("assigning labels [other]...", $debug_enabled);
+                               Debug::log("assigning labels [other]...", Debug::$LOG_VERBOSE);
 
                                foreach ($article_labels as $label) {
                                        Labels::add_article($entry_ref_id, $label[1], $owner_uid);
                                }
 
-                               _debug("assigning labels [filters]...", $debug_enabled);
+                               Debug::log("assigning labels [filters]...", Debug::$LOG_VERBOSE);
 
                                RSSUtils::assign_article_to_label_filters($entry_ref_id, $article_filters,
                                        $owner_uid, $article_labels);
 
-                               _debug("looking for enclosures...", $debug_enabled);
+                               Debug::log("looking for enclosures...", Debug::$LOG_VERBOSE);
 
                                // enclosures
 
@@ -1017,43 +1043,50 @@ class RSSUtils {
                                                $e_item = array(
                                                        rewrite_relative_url($site_url, $e->link),
                                                        $e->type, $e->length, $e->title, $e->width, $e->height);
+
+                                               // Yet another episode of "mysql utf8_general_ci is gimped"
+                                               if (DB_TYPE == "mysql" && MYSQL_CHARSET != "UTF8MB4") {
+                                                       for ($i = 0; $i < count($e_item); $i++) {
+                                                               if (is_string($e_item[$i])) {
+                                                                       $e_item[$i] = RSSUtils::strip_utf8mb4($e_item[$i]);
+                                                               }
+                                                       }
+                                               }
+
                                                array_push($enclosures, $e_item);
                                        }
                                }
 
                                if ($cache_images && is_writable(CACHE_DIR . '/images'))
-                                       RSSUtils::cache_enclosures($enclosures, $site_url, $debug_enabled);
+                                       RSSUtils::cache_enclosures($enclosures, $site_url);
 
-                               if ($debug_enabled) {
-                                       _debug("article enclosures:", $debug_enabled);
+                               if (Debug::get_loglevel() >= Debug::$LOG_EXTENDED) {
+                                       Debug::log("article enclosures:", Debug::$LOG_VERBOSE);
                                        print_r($enclosures);
                                }
 
-                               //db_query("BEGIN");
+                               $esth = $pdo->prepare("SELECT id FROM ttrss_enclosures
+                                               WHERE content_url = ? AND content_type = ? AND post_id = ?");
 
-//                             debugging
-//                             db_query("DELETE FROM ttrss_enclosures WHERE post_id = '$entry_ref_id'");
+                               $usth = $pdo->prepare("INSERT INTO ttrss_enclosures
+                                                       (content_url, content_type, title, duration, post_id, width, height) VALUES
+                                                       (?, ?, ?, ?, ?, ?, ?)");
 
                                foreach ($enclosures as $enc) {
-                                       $enc_url = db_escape_string($enc[0]);
-                                       $enc_type = db_escape_string($enc[1]);
-                                       $enc_dur = db_escape_string($enc[2]);
-                                       $enc_title = db_escape_string($enc[3]);
+                                       $enc_url = $enc[0];
+                                       $enc_type = $enc[1];
+                                       $enc_dur = (int)$enc[2];
+                                       $enc_title = $enc[3];
                                        $enc_width = intval($enc[4]);
                                        $enc_height = intval($enc[5]);
 
-                                       $result = db_query("SELECT id FROM ttrss_enclosures
-                                               WHERE content_url = '$enc_url' AND post_id = '$entry_ref_id'");
+                                       $esth->execute([$enc_url, $enc_type, $entry_ref_id]);
 
-                                       if (db_num_rows($result) == 0) {
-                                               db_query("INSERT INTO ttrss_enclosures
-                                                       (content_url, content_type, title, duration, post_id, width, height) VALUES
-                                                       ('$enc_url', '$enc_type', '$enc_title', '$enc_dur', '$entry_ref_id', $enc_width, $enc_height)");
+                                       if (!$esth->fetch()) {
+                                               $usth->execute([$enc_url, $enc_type, (string)$enc_title, $enc_dur, $entry_ref_id, $enc_width, $enc_height]);
                                        }
                                }
 
-                               //db_query("COMMIT");
-
                                // check for manual tags (we have to do it here since they're loaded from filters)
 
                                foreach ($article_filters as $f) {
@@ -1087,8 +1120,8 @@ class RSSUtils {
 
                                $filtered_tags = array_unique($filtered_tags);
 
-                               if ($debug_enabled) {
-                                       _debug("filtered article tags:", $debug_enabled);
+                               if (Debug::get_loglevel() >= Debug::$LOG_EXTENDED) {
+                                       Debug::log("filtered article tags:", Debug::$LOG_VERBOSE);
                                        print_r($filtered_tags);
                                }
 
@@ -1096,24 +1129,24 @@ class RSSUtils {
 
                                if (count($filtered_tags) > 0) {
 
-                                       //db_query("BEGIN");
+                                       $tsth = $pdo->prepare("SELECT id FROM ttrss_tags
+                                                       WHERE tag_name = ? AND post_int_id = ? AND
+                                                       owner_uid = ? LIMIT 1");
+
+                                       $usth = $pdo->prepare("INSERT INTO ttrss_tags
+                                                                       (owner_uid,tag_name,post_int_id)
+                                                                       VALUES (?, ?, ?)");
 
                                        foreach ($filtered_tags as $tag) {
 
                                                $tag = sanitize_tag($tag);
-                                               $tag = db_escape_string($tag);
 
                                                if (!tag_is_valid($tag)) continue;
 
-                                               $result = db_query("SELECT id FROM ttrss_tags
-                                                       WHERE tag_name = '$tag' AND post_int_id = '$entry_int_id' AND
-                                                       owner_uid = '$owner_uid' LIMIT 1");
-
-                                               if ($result && db_num_rows($result) == 0) {
+                                               $tsth->execute([$tag, $entry_int_id, $owner_uid]);
 
-                                                       db_query("INSERT INTO ttrss_tags
-                                                                       (owner_uid,tag_name,post_int_id)
-                                                                       VALUES ('$owner_uid','$tag', '$entry_int_id')");
+                                               if (!$tsth->fetch()) {
+                                                       $usth->execute([$owner_uid, $tag, $entry_int_id]);
                                                }
 
                                                array_push($tags_to_cache, $tag);
@@ -1123,53 +1156,53 @@ class RSSUtils {
 
                                        $tags_to_cache = array_unique($tags_to_cache);
 
-                                       $tags_str = db_escape_string(join(",", $tags_to_cache));
+                                       $tags_str = join(",", $tags_to_cache);
 
-                                       db_query("UPDATE ttrss_user_entries
-                                               SET tag_cache = '$tags_str' WHERE ref_id = '$entry_ref_id'
-                                               AND owner_uid = $owner_uid");
-
-                                       //db_query("COMMIT");
+                                       $tsth = $pdo->prepare("UPDATE ttrss_user_entries
+                                               SET tag_cache = ? WHERE ref_id = ?
+                                               AND owner_uid = ?");
+                                       $tsth->execute([$tags_str, $entry_ref_id, $owner_uid]);
                                }
 
-                               _debug("article processed", $debug_enabled);
-                       }
+                               Debug::log("article processed", Debug::$LOG_VERBOSE);
 
-                       _debug("purging feed...", $debug_enabled);
+                               $pdo->commit();
+                       }
 
-                       purge_feed($feed, 0, $debug_enabled);
+                       Debug::log("purging feed...", Debug::$LOG_VERBOSE);
 
-                       db_query("UPDATE ttrss_feeds
-                               SET last_updated = NOW(), last_error = '' WHERE id = '$feed'");
+                       purge_feed($feed, 0);
 
-//                     db_query("COMMIT");
+                       $sth = $pdo->prepare("UPDATE ttrss_feeds
+                               SET last_updated = NOW(), last_unconditional = NOW(), last_error = '' WHERE id = ?");
+                       $sth->execute([$feed]);
 
                } else {
 
-                       $error_msg = db_escape_string(mb_substr($rss->error(), 0, 245));
+                       $error_msg = mb_substr($rss->error(), 0, 245);
 
-                       _debug("fetch error: $error_msg", $debug_enabled);
+                       Debug::log("fetch error: $error_msg", Debug::$LOG_VERBOSE);
 
                        if (count($rss->errors()) > 1) {
                                foreach ($rss->errors() as $error) {
-                                       _debug("+ $error");
+                                       Debug::log("+ $error", Debug::$LOG_VERBOSE);
                                }
                        }
 
-                       db_query(
-                               "UPDATE ttrss_feeds SET last_error = '$error_msg',
-                               last_updated = NOW() WHERE id = '$feed'");
+                       $sth = $pdo->prepare("UPDATE ttrss_feeds SET last_error = ?,
+                               last_updated = NOW(), last_unconditional = NOW() WHERE id = ?");
+                       $sth->execute([$error_msg, $feed]);
 
                        unset($rss);
-                       return;
+                       return false;
                }
 
-               _debug("done", $debug_enabled);
+               Debug::log("done", Debug::$LOG_VERBOSE);
 
                return true;
        }
 
-       static function cache_enclosures($enclosures, $site_url, $debug) {
+       static function cache_enclosures($enclosures, $site_url) {
                foreach ($enclosures as $enc) {
 
                        if (preg_match("/(image|audio|video)/", $enc[1])) {
@@ -1178,7 +1211,7 @@ class RSSUtils {
 
                                $local_filename = CACHE_DIR . "/images/" . sha1($src);
 
-                               if ($debug) _debug("cache_enclosures: downloading: $src to $local_filename");
+                               Debug::log("cache_enclosures: downloading: $src to $local_filename", Debug::$LOG_VERBOSE);
 
                                if (!file_exists($local_filename)) {
                                        $file_content = fetch_file_contents($src);
@@ -1186,14 +1219,14 @@ class RSSUtils {
                                        if ($file_content && strlen($file_content) > MIN_CACHE_FILE_SIZE) {
                                                file_put_contents($local_filename, $file_content);
                                        }
-                               } else {
+                               } else if (is_writable($local_filename)) {
                                        touch($local_filename);
                                }
                        }
                }
        }
 
-       static function cache_media($html, $site_url, $debug) {
+       static function cache_media($html, $site_url) {
                libxml_use_internal_errors(true);
 
                $charset_hack = '<head>
@@ -1212,36 +1245,39 @@ class RSSUtils {
 
                                $local_filename = CACHE_DIR . "/images/" . sha1($src);
 
-                               if ($debug) _debug("cache_media: downloading: $src to $local_filename");
+                               Debug::log("cache_media: checking $src", Debug::$LOG_VERBOSE);
 
                                if (!file_exists($local_filename)) {
+                                       Debug::log("cache_media: downloading: $src to $local_filename", Debug::$LOG_VERBOSE);
+
                                        $file_content = fetch_file_contents($src);
 
                                        if ($file_content && strlen($file_content) > MIN_CACHE_FILE_SIZE) {
                                                file_put_contents($local_filename, $file_content);
                                        }
-                               } else {
+                               } else if (is_writable($local_filename)) {
                                        touch($local_filename);
                                }
                        }
                }
        }
 
-       static function expire_error_log($debug) {
-               if ($debug) _debug("Removing old error log entries...");
+       static function expire_error_log() {
+               Debug::log("Removing old error log entries...");
+
+               $pdo = Db::pdo();
 
                if (DB_TYPE == "pgsql") {
-                       db_query("DELETE FROM ttrss_error_log
+                       $pdo->query("DELETE FROM ttrss_error_log
                                WHERE created_at < NOW() - INTERVAL '7 days'");
                } else {
-                       db_query("DELETE FROM ttrss_error_log
+                       $pdo->query("DELETE FROM ttrss_error_log
                                WHERE created_at < DATE_SUB(NOW(), INTERVAL 7 DAY)");
                }
-
        }
 
-       static function expire_lock_files($debug) {
-               //if ($debug) _debug("Removing old lock files...");
+       static function expire_lock_files() {
+               Debug::log("Removing old lock files...", Debug::$LOG_VERBOSE);
 
                $num_deleted = 0;
 
@@ -1258,14 +1294,14 @@ class RSSUtils {
                        }
                }
 
-               if ($debug) _debug("Removed $num_deleted old lock files.");
+               Debug::log("Removed $num_deleted old lock files.");
        }
 
-       static function expire_cached_files($debug) {
-               foreach (array("simplepie", "images", "export", "upload") as $dir) {
+       static function expire_cached_files() {
+               foreach (array("feeds", "images", "export", "upload") as $dir) {
                        $cache_dir = CACHE_DIR . "/$dir";
 
-//                     if ($debug) _debug("Expiring $cache_dir");
+                       Debug::log("Expiring $cache_dir", Debug::$LOG_VERBOSE);
 
                        $num_deleted = 0;
 
@@ -1283,7 +1319,7 @@ class RSSUtils {
                                }
                        }
 
-                       if ($debug) _debug("$cache_dir: removed $num_deleted files.");
+                       Debug::log("$cache_dir: removed $num_deleted files.");
                }
        }
 
@@ -1443,22 +1479,26 @@ class RSSUtils {
                        mb_strtolower(strip_tags($title), 'utf-8'));
        }
 
-       static function cleanup_counters_cache($debug) {
-               $result = db_query("DELETE FROM ttrss_counters_cache
+       static function cleanup_counters_cache() {
+               $pdo = Db::pdo();
+
+               $res = $pdo->query("DELETE FROM ttrss_counters_cache
                        WHERE feed_id > 0 AND
                        (SELECT COUNT(id) FROM ttrss_feeds WHERE
                                id = feed_id AND
                                ttrss_counters_cache.owner_uid = ttrss_feeds.owner_uid) = 0");
-               $frows = db_affected_rows($result);
 
-               $result = db_query("DELETE FROM ttrss_cat_counters_cache
+               $frows = $res->rowCount();
+
+               $res = $pdo->query("DELETE FROM ttrss_cat_counters_cache
                        WHERE feed_id > 0 AND
                        (SELECT COUNT(id) FROM ttrss_feed_categories WHERE
                                id = feed_id AND
                                ttrss_cat_counters_cache.owner_uid = ttrss_feed_categories.owner_uid) = 0");
-               $crows = db_affected_rows($result);
 
-               if ($debug) _debug("Removed $frows (feeds) $crows (cats) orphaned counter cache entries.");
+               $crows = $res->rowCount();
+
+               Debug::log("Removed $frows (feeds) $crows (cats) orphaned counter cache entries.");
        }
 
        static function housekeeping_user($owner_uid) {
@@ -1469,19 +1509,16 @@ class RSSUtils {
                $tmph->run_hooks(PluginHost::HOOK_HOUSE_KEEPING, "hook_house_keeping", "");
        }
 
-       static function housekeeping_common($debug) {
-               RSSUtils::expire_cached_files($debug);
-               RSSUtils::expire_lock_files($debug);
-               RSSUtils::expire_error_log($debug);
+       static function housekeeping_common() {
+               RSSUtils::expire_cached_files();
+               RSSUtils::expire_lock_files();
+               RSSUtils::expire_error_log();
 
                $count = RSSUtils::update_feedbrowser_cache();
-               _debug("Feedbrowser updated, $count feeds processed.");
-
-               Article::purge_orphans( true);
-               RSSUtils::cleanup_counters_cache($debug);
+               Debug::log("Feedbrowser updated, $count feeds processed.");
 
-               //$rc = cleanup_tags( 14, 50000);
-               //_debug("Cleaned $rc cached tags.");
+               Article::purge_orphans();
+               RSSUtils::cleanup_counters_cache();
 
                PluginHost::getInstance()->run_hooks(PluginHost::HOOK_HOUSE_KEEPING, "hook_house_keeping", "");
        }