X-Git-Url: https://git.wh0rd.org/?p=tt-rss.git;a=blobdiff_plain;f=opml.php;h=bdee88e081694a516cc711290023b3a7d0e09854;hp=8ddc9dcaff8cfb3705d91c4c1e618e4e73d5ee7d;hb=HEAD;hpb=3a9d5c6e88420336f698ab5239072fc50ae0c1fc

diff --git a/opml.php b/opml.php
index 8ddc9dca..bdee88e0 100644
--- a/opml.php
+++ b/opml.php
@@ -1,7 +1,8 @@
 <?php
-	set_include_path(get_include_path() . PATH_SEPARATOR .
-		dirname(__FILE__) . "/include");
+	set_include_path(dirname(__FILE__) ."/include" . PATH_SEPARATOR .
+		get_include_path());
 
+	require_once "autoload.php";
 	require_once "functions.php";
 	require_once "sessions.php";
 	require_once "sanity_check.php";
@@ -9,539 +10,28 @@
 	require_once "db.php";
 	require_once "db-prefs.php";
 
-	$link = db_connect(DB_HOST, DB_USER, DB_PASS, DB_NAME);
+	if (!init_plugins()) return;
 
-	if (!init_connection($link)) return;
-
-	function opml_import_domdoc($link, $owner_uid) {
-
-		if (is_file($_FILES['opml_file']['tmp_name'])) {
-			$doc = DOMDocument::load($_FILES['opml_file']['tmp_name']);
-
-			$result = db_query($link, "SELECT id FROM
-				ttrss_feed_categories WHERE title = 'Imported feeds' AND
-				owner_uid = '$owner_uid' LIMIT 1");
-
-			if (db_num_rows($result) == 1) {
-				$default_cat_id = db_fetch_result($result, 0, "id");
-			} else {
-				$default_cat_id = 0;
-			}
-
-			// Keep imported categories in order, after any pre-existing ones.
-			$new_cat_order_id = 0;
-			// Get the highest category order_id in use.
-			$result = db_query($link, "SELECT order_id FROM
-				ttrss_feed_categories WHERE owner_uid = '$owner_uid'
-				ORDER BY order_id DESC LIMIT 1");
-			if (db_num_rows($result) == 1) {
-				$new_cat_order_id = db_fetch_result($result, 0, "order_id");
-			}
-
-			if ($doc) {
-				$body = $doc->getElementsByTagName('body');
-
-				$xpath = new DOMXpath($doc);
-				$query = "/opml/body//outline";
-
-				$outlines = $xpath->query($query);
-
-				foreach ($outlines as $outline) {
-
-					$attributes = $outline->attributes;
-
-					$feed_title = db_escape_string($attributes->getNamedItem('text')->nodeValue);
-					if (!$feed_title) $feed_title = db_escape_string($attributes->getNamedItem('title')->nodeValue);
-
-					$cat_title = db_escape_string($attributes->getNamedItem('title')->nodeValue);
-					if (!$cat_title) $cat_title = db_escape_string($attributes->getNamedItem('text')->nodeValue);
-
-					$feed_url = db_escape_string($attributes->getNamedItem('xmlUrl')->nodeValue);
-					if (!$feed_url) $feed_url = db_escape_string($attributes->getNamedItem('xmlURL')->nodeValue);
-
-					$site_url = db_escape_string($attributes->getNamedItem('htmlUrl')->nodeValue);
-
-					$pref_name = db_escape_string($attributes->getNamedItem('pref-name')->nodeValue);
-					$label_name = db_escape_string($attributes->getNamedItem('label-name')->nodeValue);
-					$filter_name = db_escape_string($attributes->getNamedItem('filter-name')->nodeValue);
-
-					if ($cat_title && !$feed_url) {
-
-						if ($cat_title != "tt-rss-prefs" && $cat_title != 'tt-rss-labels' && $cat_title != 'tt-rss-filters') {
-
-							db_query($link, "BEGIN");
-
-							$result = db_query($link, "SELECT id FROM
-									ttrss_feed_categories WHERE title = '$cat_title' AND
-									owner_uid = '$owner_uid' LIMIT 1");
-
-							if (db_num_rows($result) == 0) {
-								$cat_order_id = ++$new_cat_order_id;
-
-								printf(__("<li>Adding category <b>%s</b>.</li>"), $cat_title);
-
-								db_query($link, "INSERT INTO ttrss_feed_categories
-										(title,owner_uid,order_id)
-										VALUES ('$cat_title', '$owner_uid', '$cat_order_id')");
-							}
-
-							db_query($link, "COMMIT");
-						}
-					}
-
-					//						print "$active_category : $feed_title : $feed_url<br>";
-
-					if ($pref_name) {
-						$parent_node = $outline->parentNode;
-
-						if ($parent_node && $parent_node->nodeName == "outline") {
-							$cat_check = $parent_node->attributes->getNamedItem('title')->nodeValue;
-							if ($cat_check == "tt-rss-prefs") {
-								$pref_value = db_escape_string($outline->attributes->getNamedItem('value')->nodeValue);
-
-								printf("<li>".
-									__("Setting preference key %s to %s")."</li>",
-										$pref_name, $pref_value);
-
-								set_pref($link, $pref_name, $pref_value);
-
-							}
-						}
-					}
-
-					if ($label_name) {
-						$parent_node = $outline->parentNode;
-
-						if ($parent_node && $parent_node->nodeName == "outline") {
-							$cat_check = $parent_node->attributes->getNamedItem('title')->nodeValue;
-							if ($cat_check == "tt-rss-labels") {
-
-								$fg_color = db_escape_string($attributes->getNamedItem('label-fg-color')->nodeValue);
-								$bg_color = db_escape_string($attributes->getNamedItem('label-bg-color')->nodeValue);
-
-								if (!label_find_id($link, $label_name, $_SESSION['uid'])) {
-									printf("<li>".__("Adding label %s")."</li>", htmlspecialchars($label_name));
-									label_create($link, $label_name, $fg_color, $bg_color);
-								} else {
-									printf("<li>".__("Duplicate label: %s")."</li>",
-										htmlspecialchars($label_name));
-								}
-							}
-						}
-					}
-
-					if ($filter_name) {
-						$parent_node = $outline->parentNode;
-
-						if ($parent_node && $parent_node->nodeName == "outline") {
-							$cat_check = $parent_node->attributes->getNamedItem('title')->nodeValue;
-							if ($cat_check == "tt-rss-filters") {
-								$filter = json_decode($outline->nodeValue, true);
-
-								if ($filter) {
-									$reg_exp = db_escape_string($filter['reg_exp']);
-									$filter_type = (int)$filter['filter_type'];
-									$action_id = (int)$filter['action_id'];
-
-									$result = db_query($link, "SELECT id FROM ttrss_filters WHERE
-										reg_exp = '$reg_exp' AND
-										filter_type = '$filter_type' AND
-										action_id = '$action_id' AND
-										owner_uid = " .$_SESSION['uid']);
-
-									if (db_num_rows($result) == 0) {
-										$enabled = bool_to_sql_bool($filter['enabled']);
-										$action_param = db_escape_string($filter['action_param']);
-										$inverse = bool_to_sql_bool($filter['inverse']);
-										$filter_param = db_escape_string($filter['filter_param']);
-										$cat_filter = bool_to_sql_bool($filter['cat_filter']);
-
-										$feed_url = db_escape_string($filter['feed_url']);
-										$cat_title = db_escape_string($filter['cat_title']);
-
-										$result = db_query($link, "SELECT id FROM ttrss_feeds WHERE
-											feed_url = '$feed_url' AND owner_uid = ".$_SESSION['uid']);
-
-										if (db_num_rows($result) != 0) {
-											$feed_id = db_fetch_result($result, 0, "id");
-										} else {
-											$feed_id = "NULL";
-										}
-
-										$result = db_query($link, "SELECT id FROM ttrss_feed_categories WHERE
-											title = '$cat_title' AND  owner_uid = ".$_SESSION['uid']);
-
-										if (db_num_rows($result) != 0) {
-											$cat_id = db_fetch_result($result, 0, "id");
-										} else {
-											$cat_id = "NULL";
-										}
-
-										printf("<li>".__("Adding filter %s")."</li>", htmlspecialchars($reg_exp));
-
-										$query = "INSERT INTO ttrss_filters (filter_type, action_id,
-												enabled, inverse, action_param, filter_param,
-												cat_filter, feed_id,
-												cat_id, reg_exp,
-												owner_uid)
-											VALUES ($filter_type, $action_id,
-												$enabled, $inverse, '$action_param', '$filter_param',
-												$cat_filter, $feed_id,
-												$cat_id, '$reg_exp', ".
-												$_SESSION['uid'].")";
-
-										db_query($link, $query);
-
-									} else {
-										printf("<li>".__("Duplicate filter %s")."</li>", htmlspecialchars($reg_exp));
-
-									}
-								}
-							}
-						}
-					}
-
-					if (!$feed_title || !$feed_url) continue;
-
-					db_query($link, "BEGIN");
-
-					$cat_id = null;
-
-					$parent_node = $outline->parentNode;
-
-					if ($parent_node && $parent_node->nodeName == "outline") {
-						$element_category = $parent_node->attributes->getNamedItem('title')->nodeValue;
-						if (!$element_category) $element_category = $parent_node->attributes->getNamedItem('text')->nodeValue;
-
-					} else {
-						$element_category = '';
-					}
-
-					if ($element_category) {
-
-						$element_category = db_escape_string($element_category);
-
-						$result = db_query($link, "SELECT id FROM
-								ttrss_feed_categories WHERE title = '$element_category' AND
-								owner_uid = '$owner_uid' LIMIT 1");
-
-							if (db_num_rows($result) == 1) {
-								$cat_id = db_fetch_result($result, 0, "id");
-							}
-					}
-
-					$result = db_query($link, "SELECT id FROM ttrss_feeds WHERE
-							feed_url = '$feed_url'
-							AND owner_uid = '$owner_uid'");
-
-					print "<li><a target='_blank' href='$site_url'><b>$feed_title</b></a></b>
-						(<a target='_blank' href=\"$feed_url\">rss</a>)&nbsp;";
-
-					if (db_num_rows($result) > 0) {
-						print __('is already imported.');
-					} else {
-						// Get max order_id already in use. Increment.
-						$new_feed_order_id = 0;	// these start at zero
-						$cat_id_qpart = $cat_id ? "cat_id = '$cat_id'" : "cat_id = '$default_cat_id'";
-						$result = db_query($link, "SELECT order_id FROM
-							ttrss_feeds WHERE owner_uid = '$owner_uid' AND $cat_id_qpart
-							ORDER BY order_id DESC LIMIT 1");
-						if (db_num_rows($result) == 1) {
-							$new_feed_order_id = db_fetch_result($result, 0, "order_id");
-							$new_feed_order_id++;
-						}
-
-						if ($cat_id) {
-							$add_query = "INSERT INTO ttrss_feeds
-								(title, feed_url, owner_uid, cat_id, site_url, order_id) VALUES
-								('$feed_title', '$feed_url', '$owner_uid',
-								 '$cat_id', '$site_url', '$new_feed_order_id')";
-
-						} else {
-							$add_query = "INSERT INTO ttrss_feeds
-								(title, feed_url, owner_uid, cat_id, site_url, order_id) VALUES
-								('$feed_title', '$feed_url', '$owner_uid', '$default_cat_id',
-									'$site_url', '$new_feed_order_id')";
-
-						}
-
-						//print $add_query;
-						db_query($link, $add_query);
-
-						print __('OK');
-					}
-
-					print "</li>";
-
-					db_query($link, "COMMIT");
-				}
-
-			} else {
-				print_error(__('Error while parsing document.'));
-			}
-
-		} else {
-			print_error(__('Error: please upload OPML file.'));
-		}
-
-
-	}
-
-	function opml_export_category($link, $owner_uid, $cat_id, $hide_private_feeds=false) {
-
-		if ($cat_id)
-			$cat_qpart = "parent_cat = '$cat_id'";
-		else
-			$cat_qpart = "parent_cat IS NULL";
-
-		if ($hide_private_feeds)
-			$hide_qpart = "(private IS false AND auth_login = '' AND auth_pass = '')";
-		else
-			$hide_qpart = "true";
-
-		$out = "";
-
-		$query = "SELECT
-			ttrss_feeds.title, feed_url, site_url, ttrss_feeds.order_id,
-				ttrss_feed_categories.id AS cat_id,
-				ttrss_feed_categories.title AS cat_title,
-				ttrss_feed_categories.order_id AS cat_order_id
-			FROM ttrss_feeds LEFT JOIN ttrss_feed_categories ON (ttrss_feed_categories.id = ttrss_feeds.cat_id)
-			WHERE ttrss_feeds.owner_uid = '$owner_uid' AND $hide_qpart AND $cat_qpart
-			ORDER BY cat_order_id, cat_title, ttrss_feeds.order_id, title";
-
-		#$out .= "<!-- $query -->";
-
-		$result = db_query($link, $query);
-
-		$old_cat_title = "";
-
-		while ($line = db_fetch_assoc($result)) {
-			$title = htmlspecialchars($line["title"]);
-			$url = htmlspecialchars($line["feed_url"]);
-			$site_url = htmlspecialchars($line["site_url"]);
-
-			$cat_title = htmlspecialchars($line["cat_title"]);
-
-			if ($old_cat_title != $cat_title) {
-				if ($old_cat_title) {
-					$out .= "</outline>\n";
-				}
-
-				if ($cat_title) {
-					$out .= "<outline title=\"$cat_title\" text=\"$cat_title\" >\n";
-				}
-				$old_cat_title = $cat_title;
-
-				$cat_id = (int) $line["cat_id"];
-
-				if ($cat_id > 0)
-					$out .= opml_export_category($link, $owner_uid, $cat_id, $hide_private_feeds);
-			}
-
-			if ($site_url) {
-				$html_url_qpart = "htmlUrl=\"$site_url\"";
-			} else {
-				$html_url_qpart = "";
-			}
-
-			$out .= "<outline text=\"$title\" xmlUrl=\"$url\" $html_url_qpart/>\n";
-
-		}
-
-		if ($old_cat_title) {
-			$out .= "</outline>\n";
-		}
-
-		return $out;
-	}
-
-	function opml_export($link, $name, $owner_uid, $hide_private_feeds=false, $include_settings=true) {
-		if (!isset($_REQUEST["debug"])) {
-			header("Content-type: application/xml+opml");
-			header("Content-Disposition: attachment; filename=" . $name );
-		} else {
-			header("Content-type: text/xml");
-		}
-
-		$out = "<?xml version=\"1.0\" encoding=\"utf-8\"?".">";
-
-		$out .= "<opml version=\"1.0\">";
-		$out .= "<head>
-			<dateCreated>" . date("r", time()) . "</dateCreated>
-			<title>Tiny Tiny RSS Feed Export</title>
-		</head>";
-		$out .= "<body>";
-
-		$out .= opml_export_category($link, $owner_uid, false, $hide_private_feeds);
-
-		# export tt-rss settings
-
-		if ($include_settings) {
-			$out .= "<outline title=\"tt-rss-prefs\" schema-version=\"".SCHEMA_VERSION."\">";
-
-			$result = db_query($link, "SELECT pref_name, value FROM ttrss_user_prefs WHERE
-			   profile IS NULL AND owner_uid = " . $_SESSION["uid"] . " ORDER BY pref_name");
-
-			while ($line = db_fetch_assoc($result)) {
-
-				$name = $line["pref_name"];
-				$value = htmlspecialchars($line["value"]);
-
-				$out .= "<outline pref-name=\"$name\" value=\"$value\">";
-
-				$out .= "</outline>";
-
-			}
-
-			$out .= "</outline>";
-
-			$out .= "<outline title=\"tt-rss-labels\" schema-version=\"".SCHEMA_VERSION."\">";
-
-			$result = db_query($link, "SELECT * FROM ttrss_labels2 WHERE
-				owner_uid = " . $_SESSION['uid']);
-
-			while ($line = db_fetch_assoc($result)) {
-				$name = htmlspecialchars($line['caption']);
-				$fg_color = htmlspecialchars($line['fg_color']);
-				$bg_color = htmlspecialchars($line['bg_color']);
-
-				$out .= "<outline label-name=\"$name\" label-fg-color=\"$fg_color\" label-bg-color=\"$bg_color\"/>";
-
-			}
-
-			$out .= "</outline>";
-
-			$out .= "<outline title=\"tt-rss-filters\" schema-version=\"".SCHEMA_VERSION."\">";
-
-			$result = db_query($link, "SELECT filter_type,
-					reg_exp,
-					action_id,
-					enabled,
-					action_param,
-					inverse,
-					filter_param,
-					cat_filter,
-					ttrss_feeds.feed_url AS feed_url,
-					ttrss_feed_categories.title AS cat_title
-					FROM ttrss_filters
-						LEFT JOIN ttrss_feeds ON (feed_id = ttrss_feeds.id)
-						LEFT JOIN ttrss_feed_categories ON (ttrss_filters.cat_id = ttrss_feed_categories.id)
-					WHERE
-						ttrss_filters.owner_uid = " . $_SESSION['uid']);
-
-			while ($line = db_fetch_assoc($result)) {
-				$name = htmlspecialchars($line['reg_exp']);
-
-				foreach (array('enabled', 'inverse', 'cat_filter') as $b) {
-					$line[$b] = sql_bool_to_bool($line[$b]);
-				}
-
-				$filter = json_encode($line);
-
-				$out .= "<outline filter-name=\"$name\">$filter</outline>";
-
-			}
-
-
-			$out .= "</outline>";
-		}
-
-		$out .= "</body></opml>";
-
-		// Format output.
-		$doc = new DOMDocument();
-		$doc->formatOutput = true;
-		$doc->preserveWhiteSpace = false;
-		$doc->loadXML($out);
-		$res = $doc->saveXML();
-
-		// saveXML uses a two-space indent.  Change to tabs.
-		$res = preg_replace_callback('/^(?:  )+/mu',
-			create_function(
-				'$matches',
-				'return str_repeat("\t", intval(strlen($matches[0])/2));'),
-			$res);
-
-		print $res;
-	}
-
-	// FIXME there are some brackets issues here
-
-	$op = $_REQUEST["op"];
-	if (!$op) $op = "Export";
-
-	$output_name = $_REQUEST["filename"];
-	if (!$output_name) $output_name = "TinyTinyRSS.opml";
-
-	$show_settings = $_REQUEST["settings"];
-
-	if ($op == "Export") {
-
-		login_sequence($link);
-		$owner_uid = $_SESSION["uid"];
-		return opml_export($link, $output_name, $owner_uid, false, ($show_settings == 1));
-	}
+	$op = $_REQUEST['op'];
 
 	if ($op == "publish"){
-		$key = db_escape_string($_REQUEST["key"]);
+		$key = $_REQUEST["key"];
+		$pdo = Db::pdo();
 
-		$result = db_query($link, "SELECT owner_uid
+		$sth = $pdo->prepare( "SELECT owner_uid
 				FROM ttrss_access_keys WHERE
-				access_key = '$key' AND feed_id = 'OPML:Publish'");
-
-		if (db_num_rows($result) == 1) {
-			$owner_uid = db_fetch_result($result, 0, "owner_uid");
-			return opml_export($link, "", $owner_uid, true, false);
-		} else {
-			print "<error>User not found</error>";
-		}
-	}
-
-	if ($op == "Import") {
-
-		login_sequence($link);
-		$owner_uid = $_SESSION["uid"];
-
-		header('Content-Type: text/html; charset=utf-8');
-
-		print "<html>
-			<head>
-				<link rel=\"stylesheet\" href=\"utility.css\" type=\"text/css\">
-				<title>".__("OPML Utility")."</title>
-				<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"/>
-			</head>
-			<body>
-			<div class=\"floatingLogo\"><img src=\"images/logo_wide.png\"></div>
-			<h1>".__('OPML Utility')."</h1>";
+				access_key = ? AND feed_id = 'OPML:Publish'");
+		$sth->execute([$key]);
 
-		db_query($link, "BEGIN");
+		if ($row = $sth->fetch()) {
+			$owner_uid = $row['owner_uid'];
 
-		/* create Imported feeds category just in case */
+			$opml = new Opml($_REQUEST);
+			$opml->opml_export("", $owner_uid, true, false);
 
-		$result = db_query($link, "SELECT id FROM
-			ttrss_feed_categories WHERE title = 'Imported feeds' AND
-			owner_uid = '$owner_uid' LIMIT 1");
-
-		if (db_num_rows($result) == 0) {
-				db_query($link, "INSERT INTO ttrss_feed_categories
-					(title,owner_uid)
-						VALUES ('Imported feeds', '$owner_uid')");
+		} else {
+			print "<error>User not found</error>";
 		}
-
-		db_query($link, "COMMIT");
-
-		print "<p>".__("Importing OPML...")."</p>";
-		opml_import_domdoc($link, $owner_uid);
-
-		print "<br><form method=\"GET\" action=\"prefs.php\">
-			<input type=\"submit\" value=\"".__("Return to preferences")."\">
-			</form>";
-
-		print "</body></html>";
-
 	}
 
-//	if ($link) db_close($link);
-
 ?>