From ef8be8ea8da90596d321bc25e88c48121715ed18 Mon Sep 17 00:00:00 2001 From: Andrew Dolgov Date: Sun, 1 Oct 2006 11:05:20 +0100 Subject: [PATCH] split backend.php into modules, backend cleanups --- backend.php | 2583 +------------------------------------- modules/help.php | 36 + modules/popup-dialog.php | 245 ++++ modules/pref-feeds.php | 944 ++++++++++++++ modules/pref-filters.php | 314 +++++ modules/pref-labels.php | 289 +++++ modules/pref-prefs.php | 387 ++++++ modules/pref-users.php | 325 +++++ sanity_check.php | 27 + 9 files changed, 2583 insertions(+), 2567 deletions(-) create mode 100644 modules/help.php create mode 100644 modules/popup-dialog.php create mode 100644 modules/pref-feeds.php create mode 100644 modules/pref-filters.php create mode 100644 modules/pref-labels.php create mode 100644 modules/pref-prefs.php create mode 100644 modules/pref-users.php diff --git a/backend.php b/backend.php index 49ca35c3..ac984705 100644 --- a/backend.php +++ b/backend.php @@ -1,6 +1,5 @@ "User", 10 => "Administrator"); + require_once "modules/popup-dialog.php"; + require_once "modules/help.php"; + require_once "modules/pref-feeds.php"; + require_once "modules/pref-filters.php"; + require_once "modules/pref-labels.php"; + require_once "modules/pref-users.php"; + require_once "modules/pref-prefs.php"; + require_once "modules/backend-rpc.php"; + $script_started = getmicrotime(); $link = db_connect(DB_HOST, DB_USER, DB_PASS, DB_NAME); @@ -104,22 +105,6 @@ pg_query("set client_encoding = 'utf-8'"); } - if ($_SESSION["uid"]) { - -// setcookie('ttrss_vf_refresh', FEEDS_FRAME_REFRESH); -// setcookie('ttrss_vf_daemon', ENABLE_UPDATE_DAEMON); - -/* if (get_pref($link, "ON_CATCHUP_SHOW_NEXT_FEED")) { - setcookie('ttrss_vf_catchupnext', 1); - } else { - setcookie('ttrss_vf_catchupnext', 0); - } */ - } - - $fetch = $_GET["fetch"]; - -// setcookie("ttrss_icons_url", ICONS_URL); - if (!sanity_check($link)) { return; } if ($op == "rpc") { @@ -583,1550 +568,15 @@ } if ($op == "pref-feeds") { - - $subop = $_REQUEST["subop"]; - $quiet = $_REQUEST["quiet"]; - - if ($subop == "massSubscribe") { - $ids = split(",", db_escape_string($_GET["ids"])); - - $subscribed = array(); - - foreach ($ids as $id) { - $result = db_query($link, "SELECT feed_url,title FROM ttrss_feeds - WHERE id = '$id'"); - - $feed_url = db_escape_string(db_fetch_result($result, 0, "feed_url")); - $title = db_escape_string(db_fetch_result($result, 0, "title")); - - $title_orig = db_fetch_result($result, 0, "title"); - - $result = db_query($link, "SELECT id FROM ttrss_feeds WHERE - feed_url = '$feed_url' AND owner_uid = " . $_SESSION["uid"]); - - if (db_num_rows($result) == 0) { - $result = db_query($link, - "INSERT INTO ttrss_feeds (owner_uid,feed_url,title,cat_id) - VALUES ('".$_SESSION["uid"]."', '$feed_url', '$title', NULL)"); - - array_push($subscribed, $title_orig); - } - } - - if (count($subscribed) > 0) { - print "
"; - print "Subscribed to feeds:"; - print ""; - print "
"; - } - } - - if ($subop == "browse") { - - if (!ENABLE_FEED_BROWSER) { - print "Feed browser is administratively disabled."; - return; - } - - print "
Other feeds: Top 25
"; - - print "
"; - - print "

Showing top 25 registered feeds, sorted by popularity:

"; - -# $result = db_query($link, "SELECT feed_url,count(id) AS subscribers -# FROM ttrss_feeds -# WHERE auth_login = '' AND auth_pass = '' AND private = false -# GROUP BY feed_url ORDER BY subscribers DESC LIMIT 25"); - - $owner_uid = $_SESSION["uid"]; - - $result = db_query($link, "SELECT feed_url,COUNT(id) AS subscribers - FROM ttrss_feeds WHERE (SELECT COUNT(id) = 0 FROM ttrss_feeds AS tf - WHERE tf.feed_url = ttrss_feeds.feed_url - AND owner_uid = '$owner_uid') GROUP BY feed_url - ORDER BY subscribers DESC LIMIT 25"); - - print ""; - - print "
- -
"; - - print "
"; - return; - } - - if ($subop == "editfeed") { - $feed_id = db_escape_string($_REQUEST["id"]); - - $result = db_query($link, - "SELECT * FROM ttrss_feeds WHERE id = '$feed_id' AND - owner_uid = " . $_SESSION["uid"]); - - $title = htmlspecialchars(db_unescape_string(db_fetch_result($result, - 0, "title"))); - - $icon_file = ICONS_DIR . "/$feed_id.ico"; - - if (file_exists($icon_file) && filesize($icon_file) > 0) { - $feed_icon = ""; - } else { - $feed_icon = ""; - } - - print "
Feed editor
"; - - print "
"; - - print "
"; - - print ""; - print ""; - print ""; - - print ""; - - print ""; - print ""; - - $feed_url = db_fetch_result($result, 0, "feed_url"); - $feed_url = htmlspecialchars(db_unescape_string(db_fetch_result($result, - 0, "feed_url"))); - - print ""; - print ""; - - if (get_pref($link, 'ENABLE_FEED_CATS')) { - - $cat_id = db_fetch_result($result, 0, "cat_id"); - - print ""; - print ""; - print ""; - - } - - $update_interval = db_fetch_result($result, 0, "update_interval"); - - print ""; - - print ""; - - print ""; - - $purge_interval = db_fetch_result($result, 0, "purge_interval"); - - print ""; - - print ""; - - $auth_login = escape_for_form(db_fetch_result($result, 0, "auth_login")); - - print ""; - print ""; - - $auth_pass = escape_for_form(db_fetch_result($result, 0, "auth_pass")); - - print ""; - print ""; - - $private = sql_bool_to_bool(db_fetch_result($result, 0, "private")); - - if ($private) { - $checked = "checked"; - } else { - $checked = ""; - } - - print ""; - print ""; - - print "
Title:
Feed URL:
Category:"; - - $parent_feed = db_fetch_result($result, 0, "parent_feed"); - - if (sprintf("%d", $parent_feed) > 0) { - $disabled = "disabled"; - } else { - $disabled = ""; - } - - print_feed_cat_select($link, "cat_id", $cat_id, "class=\"iedit\" $disabled"); - - print "
Update Interval:"; - - print_select_hash("update_interval", $update_interval, $update_intervals, - "class=\"iedit\""); - - print "
Link to:"; - - $tmp_result = db_query($link, "SELECT COUNT(id) AS count - FROM ttrss_feeds WHERE parent_feed = '$feed_id'"); - - $linked_count = db_fetch_result($tmp_result, 0, "count"); - - $parent_feed = db_fetch_result($result, 0, "parent_feed"); - - if ($linked_count > 0) { - $disabled = "disabled"; - } else { - $disabled = ""; - } - - print ""; - print "
Article purging:"; - - print_select_hash("purge_interval", $purge_interval, $purge_intervals, - "class=\"iedit\""); - - print "
Login:
Password:
Options:"; - - $rtl_content = sql_bool_to_bool(db_fetch_result($result, 0, "rtl_content")); - - if ($rtl_content) { - $checked = "checked"; - } else { - $checked = ""; - } - - print "
"; - - $hidden = sql_bool_to_bool(db_fetch_result($result, 0, "hidden")); - - if ($hidden) { - $checked = "checked"; - } else { - $checked = ""; - } - - print "
"; - - $include_in_digest = sql_bool_to_bool(db_fetch_result($result, 0, "include_in_digest")); - - if ($include_in_digest) { - $checked = "checked"; - } else { - $checked = ""; - } - - print "
"; - - print "
"; - - print "
"; - - print "
- -
"; - - print "
"; - - return; - } - - if ($subop == "editSave") { - - $feed_title = db_escape_string(trim($_POST["title"])); - $feed_link = db_escape_string(trim($_POST["feed_url"])); - $upd_intl = db_escape_string($_POST["update_interval"]); - $purge_intl = db_escape_string($_POST["purge_interval"]); - $feed_id = db_escape_string($_POST["id"]); - $cat_id = db_escape_string($_POST["cat_id"]); - $auth_login = db_escape_string(trim($_POST["auth_login"])); - $auth_pass = db_escape_string(trim($_POST["auth_pass"])); - $parent_feed = db_escape_string($_POST["parent_feed"]); - $private = checkbox_to_sql_bool(db_escape_string($_POST["private"])); - $rtl_content = checkbox_to_sql_bool(db_escape_string($_POST["rtl_content"])); - $hidden = checkbox_to_sql_bool(db_escape_string($_POST["hidden"])); - $include_in_digest = checkbox_to_sql_bool( - db_escape_string($_POST["include_in_digest"])); - - if (get_pref($link, 'ENABLE_FEED_CATS')) { - if ($cat_id && $cat_id != 0) { - $category_qpart = "cat_id = '$cat_id',"; - $category_qpart_nocomma = "cat_id = '$cat_id'"; - } else { - $category_qpart = 'cat_id = NULL,'; - $category_qpart_nocomma = 'cat_id = NULL'; - } - } else { - $category_qpart = ""; - $category_qpart_nocomma = ""; - } - - if ($parent_feed && $parent_feed != 0) { - $parent_qpart = "parent_feed = '$parent_feed'"; - } else { - $parent_qpart = 'parent_feed = NULL'; - } - - $result = db_query($link, "UPDATE ttrss_feeds SET - $category_qpart $parent_qpart, - title = '$feed_title', feed_url = '$feed_link', - update_interval = '$upd_intl', - purge_interval = '$purge_intl', - auth_login = '$auth_login', - auth_pass = '$auth_pass', - private = $private, - rtl_content = $rtl_content, - hidden = $hidden, - include_in_digest = $include_in_digest - WHERE id = '$feed_id' AND owner_uid = " . $_SESSION["uid"]); - - if (get_pref($link, 'ENABLE_FEED_CATS')) { - # update linked feed categories - $result = db_query($link, "UPDATE ttrss_feeds SET - $category_qpart_nocomma WHERE parent_feed = '$feed_id' AND - owner_uid = " . $_SESSION["uid"]); - } - } - - if ($subop == "saveCat") { - $cat_title = db_escape_string(trim($_GET["title"])); - $cat_id = db_escape_string($_GET["id"]); - - $result = db_query($link, "UPDATE ttrss_feed_categories SET - title = '$cat_title' WHERE id = '$cat_id' AND owner_uid = ".$_SESSION["uid"]); - - } - - if ($subop == "remove") { - - if (!WEB_DEMO_MODE) { - - $ids = split(",", db_escape_string($_GET["ids"])); - - foreach ($ids as $id) { - - if ($id > 0) { - - db_query($link, "DELETE FROM ttrss_feeds - WHERE id = '$id' AND owner_uid = " . $_SESSION["uid"]); - - $icons_dir = ICONS_DIR; - - if (file_exists($icons_dir . "/$id.ico")) { - unlink($icons_dir . "/$id.ico"); - } - } else if ($id < -10) { - - $label_id = -$id - 11; - - db_query($link, "DELETE FROM ttrss_labels - WHERE id = '$label_id' AND owner_uid = " . $_SESSION["uid"]); - } - } - } - } - - if ($subop == "add") { - - if (!WEB_DEMO_MODE) { - - $feed_url = db_escape_string(trim($_GET["feed_url"])); - $cat_id = db_escape_string($_GET["cat_id"]); - - if (subscribe_to_feed($link, $feed_url, $cat_id)) { - print "Added feed."; - } else { - print "
- Feed $feed_url already exists in the database. -
"; - } - } - } - - if ($subop == "addCat") { - - if (!WEB_DEMO_MODE) { - - $feed_cat = db_escape_string(trim($_GET["cat"])); - - $result = db_query($link, - "SELECT id FROM ttrss_feed_categories - WHERE title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]); - - if (db_num_rows($result) == 0) { - - $result = db_query($link, - "INSERT INTO ttrss_feed_categories (owner_uid,title) - VALUES ('".$_SESSION["uid"]."', '$feed_cat')"); - - } else { - - print "
- Category $feed_cat already exists in the database. -
"; - } - - - } - } - - if ($subop == "removeCats") { - - if (!WEB_DEMO_MODE) { - - $ids = split(",", db_escape_string($_GET["ids"])); - - foreach ($ids as $id) { - - db_query($link, "BEGIN"); - - $result = db_query($link, - "SELECT count(id) as num_feeds FROM ttrss_feeds - WHERE cat_id = '$id'"); - - $num_feeds = db_fetch_result($result, 0, "num_feeds"); - - if ($num_feeds == 0) { - db_query($link, "DELETE FROM ttrss_feed_categories - WHERE id = '$id' AND owner_uid = " . $_SESSION["uid"]); - } else { - - print "
- Unable to delete non empty feed categories.
"; - - } - - db_query($link, "COMMIT"); - } - } - } - - if ($subop == "categorize") { - - if (!WEB_DEMO_MODE) { - - $ids = split(",", db_escape_string($_GET["ids"])); - - $cat_id = db_escape_string($_GET["cat_id"]); - - if ($cat_id == 0) { - $cat_id_qpart = 'NULL'; - } else { - $cat_id_qpart = "'$cat_id'"; - } - - db_query($link, "BEGIN"); - - foreach ($ids as $id) { - - db_query($link, "UPDATE ttrss_feeds SET cat_id = $cat_id_qpart - WHERE id = '$id' AND parent_feed IS NULL - AND owner_uid = " . $_SESSION["uid"]); - - # update linked feed categories - db_query($link, "UPDATE ttrss_feeds SET - cat_id = $cat_id_qpart WHERE parent_feed = '$id' AND - owner_uid = " . $_SESSION["uid"]); - - } - - db_query($link, "COMMIT"); - } - - } - - if ($quiet) return; - -// print "

Edit Feeds

"; - - $result = db_query($link, "SELECT id,title,feed_url,last_error - FROM ttrss_feeds WHERE last_error != '' AND owner_uid = ".$_SESSION["uid"]); - - if (db_num_rows($result) > 0) { - - print "
"; - -// print""; - - print " - Some feeds have update errors (click for details)"; - - print ""; - print "
"; - - } - - $feed_search = db_escape_string($_GET["search"]); - - if (array_key_exists("search", $_GET)) { - $_SESSION["prefs_feed_search"] = $feed_search; - } else { - $feed_search = $_SESSION["prefs_feed_search"]; - } - - print "
- - -
"; - - print "
- - "; - - if (ENABLE_FEED_BROWSER && !SINGLE_USER_MODE) { - print " "; - } - - print "
"; - - $feeds_sort = db_escape_string($_GET["sort"]); - - if (!$feeds_sort || $feeds_sort == "undefined") { - $feeds_sort = $_SESSION["pref_sort_feeds"]; - if (!$feeds_sort) $feeds_sort = "title"; - } - - $_SESSION["pref_sort_feeds"] = $feeds_sort; - - if ($feed_search) { - $search_qpart = "(UPPER(F1.title) LIKE UPPER('%$feed_search%') OR - UPPER(F1.feed_url) LIKE UPPER('%$feed_search%')) AND"; - } else { - $search_qpart = ""; - } - - if (get_pref($link, 'ENABLE_FEED_CATS')) { - $order_by_qpart = "category,$feeds_sort,title"; - } else { - $order_by_qpart = "$feeds_sort,title"; - } - - $result = db_query($link, "SELECT - F1.id, - F1.title, - F1.feed_url, - substring(F1.last_updated,1,16) AS last_updated, - F1.parent_feed, - F1.update_interval, - F1.purge_interval, - F1.cat_id, - F2.title AS parent_title, - C1.title AS category, - F1.hidden, - F1.include_in_digest, - (SELECT SUBSTRING(MAX(updated),1,16) FROM ttrss_user_entries, - ttrss_entries WHERE ref_id = ttrss_entries.id - AND feed_id = F1.id) AS last_article - FROM - ttrss_feeds AS F1 - LEFT JOIN ttrss_feeds AS F2 - ON (F1.parent_feed = F2.id) - LEFT JOIN ttrss_feed_categories AS C1 - ON (F1.cat_id = C1.id) - WHERE - $search_qpart F1.owner_uid = '".$_SESSION["uid"]."' - ORDER by $order_by_qpart"); - - if (db_num_rows($result) != 0) { - -// print "
PLACEHOLDER
"; - - print "

"; - print " - "; - - if (get_pref($link, 'ENABLE_FEED_ICONS')) { - print ""; - } - - print " - - - - "; - } - - $lnum = 0; - - $cur_cat_id = -1; - - while ($line = db_fetch_assoc($result)) { - - $feed_id = $line["id"]; - $cat_id = $line["cat_id"]; - - $edit_title = htmlspecialchars(db_unescape_string($line["title"])); - $edit_link = htmlspecialchars(db_unescape_string($line["feed_url"])); - $edit_cat = htmlspecialchars(db_unescape_string($line["category"])); - - $hidden = sql_bool_to_bool($line["hidden"]); - - if (!$edit_cat) $edit_cat = "Uncategorized"; - - $last_updated = $line["last_updated"]; - - if (get_pref($link, 'HEADLINES_SMART_DATE')) { - $last_updated = smart_date_time(strtotime($last_updated)); - } else { - $short_date = get_pref($link, 'SHORT_DATE_FORMAT'); - $last_updated = date($short_date, strtotime($last_updated)); - } - - $last_article = $line["last_article"]; - - if (get_pref($link, 'HEADLINES_SMART_DATE')) { - $last_article = smart_date_time(strtotime($last_article)); - } else { - $short_date = get_pref($link, 'SHORT_DATE_FORMAT'); - $last_article = date($short_date, strtotime($last_article)); - } - - if (get_pref($link, 'ENABLE_FEED_CATS') && $cur_cat_id != $cat_id) { - $lnum = 0; - - print ""; - - print " - "; - - if (get_pref($link, 'ENABLE_FEED_ICONS')) { - print ""; - } - - print " - - - "; - - $cur_cat_id = $cat_id; - } - - $class = ($lnum % 2) ? "even" : "odd"; - $this_row_id = "id=\"FEEDR-$feed_id\""; - - print ""; - - $icon_file = ICONS_DIR . "/$feed_id.ico"; - - if (file_exists($icon_file) && filesize($icon_file) > 0) { - $feed_icon = ""; - } else { - $feed_icon = ""; - } - - print ""; - - if (get_pref($link, 'ENABLE_FEED_ICONS')) { - print ""; - } - - $edit_title = truncate_string($edit_title, 40); - $edit_link = truncate_string($edit_link, 60); - - if ($hidden) { - $edit_title = "$edit_title (Hidden)"; - $edit_link = "$edit_link"; - $last_updated = "$last_updated"; - $last_article = "$last_article"; - } - - $parent_title = $line["parent_title"]; - if ($parent_title) { - $parent_title = "(linked to - $parent_title)"; - } - - print ""; - - print ""; - - print ""; - - print ""; - - print ""; - - ++$lnum; - } - - print "
- Select: - All, - None - "; - - if (!get_pref($link, 'ENABLE_FEED_CATS')) { - print "
  TitleFeedLast ArticleUpdated
$edit_cat
  TitleFeedLast ArticleUpdated
$feed_icon" . - "$edit_title $parent_title" . "" . - $edit_link . "" . - "$last_article" . - "$last_updated
"; - - print "

"; - - if ($subop == "edit") { - print "Edit feed:  - - "; - } else { - - print " - Selection:  - - "; - - if (get_pref($link, 'ENABLE_FEED_CATS')) { - - print " | "; - - print_feed_cat_select($link, "sfeed_set_fcat", "", "disabled"); - - print " "; - - } - - print " -  All feeds: "; - } - } else { - - print "

No feeds defined.

"; - - } - - if (get_pref($link, 'ENABLE_FEED_CATS')) { - - print "

Edit Categories

"; - - print "
-   -
"; - - $result = db_query($link, "SELECT title,id FROM ttrss_feed_categories - WHERE owner_uid = ".$_SESSION["uid"]." - ORDER BY title"); - - if (db_num_rows($result) != 0) { - - print "
"; - - print "

"; - - print " - - "; - - $lnum = 0; - - while ($line = db_fetch_assoc($result)) { - - $class = ($lnum % 2) ? "even" : "odd"; - - $cat_id = $line["id"]; - - $edit_cat_id = $_GET["id"]; - - if ($subop == "editCat" && $cat_id != $edit_cat_id) { - $class .= "Grayed"; - $this_row_id = ""; - } else { - $this_row_id = "id=\"FCATR-$cat_id\""; - } - - print ""; - - $edit_title = htmlspecialchars(db_unescape_string($line["title"])); - - if (!$edit_cat_id || $subop != "editCat") { - - print ""; - - print ""; - - } else if ($cat_id != $edit_cat_id) { - - print ""; - - print ""; - - } else { - - print ""; - - print ""; - - } - - print ""; - - ++$lnum; - } - - print "
- Select: - All, - None - "; - - print "
 Title
" . - $edit_title . "$edit_title"; - - print ""; - print ""; - print ""; - - print "
"; - - print "

"; - - print "

"; - - if ($subop == "editCat") { - print "Edit category:  - - "; - } else { - - print " - Selection:  - - "; - - } - - } else { - print "

No feed categories defined.

"; - } - } - - print "

Import OPML

-
- File:   - -
"; - + module_pref_feeds($link); } if ($op == "pref-filters") { - - $subop = $_GET["subop"]; - $quiet = $_GET["quiet"]; - - if ($subop == "edit") { - - $filter_id = db_escape_string($_GET["id"]); - - $result = db_query($link, - "SELECT * FROM ttrss_filters WHERE id = '$filter_id' AND owner_uid = " . $_SESSION["uid"]); - - $reg_exp = htmlspecialchars(db_unescape_string(db_fetch_result($result, 0, "reg_exp"))); - $filter_type = db_fetch_result($result, 0, "filter_type"); - $feed_id = db_fetch_result($result, 0, "feed_id"); - $action_id = db_fetch_result($result, 0, "action_id"); - - $enabled = sql_bool_to_bool(db_fetch_result($result, 0, "enabled")); - - print "
Filter editor
"; - print "
"; - - print "
"; - - print ""; - print ""; - print ""; - -// print "
Note: filter will only apply to new articles.
"; - - $result = db_query($link, "SELECT id,description - FROM ttrss_filter_types ORDER BY description"); - - $filter_types = array(); - - while ($line = db_fetch_assoc($result)) { - //array_push($filter_types, $line["description"]); - $filter_types[$line["id"]] = $line["description"]; - } - - print ""; - - print " - "; - print ""; - - print ""; - - print ""; - - if ($enabled) { - $checked = "checked"; - } else { - $checked = ""; - } - - print "
Match:"; - - print ""; - - print_select_hash("filter_type", $filter_type, $filter_types, "class=\"iedit\""); - - print "
Feed:"; - - print_feed_select($link, "feed_id", $feed_id); - - print "
Action:"; - - print "
Options: - - "; - - print "
"; - - print "
"; - - print "
"; - - print " "; - - print ""; - - print "
"; - - return; - } - - - if ($subop == "editSave") { - - $reg_exp = db_escape_string(trim($_GET["reg_exp"])); - $filter_type = db_escape_string(trim($_GET["filter_type"])); - $filter_id = db_escape_string($_GET["id"]); - $feed_id = db_escape_string($_GET["feed_id"]); - $action_id = db_escape_string($_GET["action_id"]); - $enabled = checkbox_to_sql_bool(db_escape_string($_GET["enabled"])); - - if (!$feed_id) { - $feed_id = 'NULL'; - } else { - $feed_id = sprintf("'%s'", db_escape_string($feed_id)); - } - - $result = db_query($link, "UPDATE ttrss_filters SET - reg_exp = '$reg_exp', - feed_id = $feed_id, - action_id = '$action_id', - filter_type = '$filter_type', - enabled = $enabled - WHERE id = '$filter_id' AND owner_uid = " . $_SESSION["uid"]); - } - - if ($subop == "remove") { - - if (!WEB_DEMO_MODE) { - - $ids = split(",", db_escape_string($_GET["ids"])); - - foreach ($ids as $id) { - db_query($link, "DELETE FROM ttrss_filters WHERE id = '$id' AND owner_uid = ". $_SESSION["uid"]); - - } - } - } - - if ($subop == "add") { - - if (!WEB_DEMO_MODE) { - - $regexp = db_escape_string(trim($_GET["reg_exp"])); - $filter_type = db_escape_string(trim($_GET["filter_type"])); - $feed_id = db_escape_string($_GET["feed_id"]); - $action_id = db_escape_string($_GET["action_id"]); - - if (!$regexp) return; - - if (!$feed_id) { - $feed_id = 'NULL'; - } else { - $feed_id = sprintf("'%s'", db_escape_string($feed_id)); - } - - $result = db_query($link, - "INSERT INTO ttrss_filters (reg_exp,filter_type,owner_uid,feed_id, - action_id) - VALUES - ('$regexp', '$filter_type','".$_SESSION["uid"]."', - $feed_id, '$action_id')"); - } - } - - if ($quiet) return; - - $sort = db_escape_string($_GET["sort"]); - - if (!$sort || $sort == "undefined") { - $sort = "reg_exp"; - } - -// print "
PLACEHOLDER
"; - - $result = db_query($link, "SELECT id,description - FROM ttrss_filter_types ORDER BY description"); - - $filter_types = array(); - - while ($line = db_fetch_assoc($result)) { - //array_push($filter_types, $line["description"]); - $filter_types[$line["id"]] = $line["description"]; - } - - print ""; - - $result = db_query($link, "SELECT - ttrss_filters.id AS id,reg_exp, - ttrss_filter_types.name AS filter_type_name, - ttrss_filter_types.description AS filter_type_descr, - enabled, - feed_id, - ttrss_filter_actions.description AS action_description, - ttrss_feeds.title AS feed_title - FROM - ttrss_filter_types,ttrss_filter_actions,ttrss_filters LEFT JOIN - ttrss_feeds ON (ttrss_filters.feed_id = ttrss_feeds.id) - WHERE - filter_type = ttrss_filter_types.id AND - ttrss_filter_actions.id = action_id AND - ttrss_filters.owner_uid = ".$_SESSION["uid"]." - ORDER by $sort"); - - if (db_num_rows($result) != 0) { - - print "
"; - - print "

"; - - print " - - - - - "; - - $lnum = 0; - - while ($line = db_fetch_assoc($result)) { - - $class = ($lnum % 2) ? "even" : "odd"; - - $filter_id = $line["id"]; - $edit_filter_id = $_GET["id"]; - - $enabled = sql_bool_to_bool($line["enabled"]); - - if ($subop == "edit" && $filter_id != $edit_filter_id) { - $class .= "Grayed"; - $this_row_id = ""; - } else { - $this_row_id = "id=\"FILRR-$filter_id\""; - } - - print ""; - - $line["reg_exp"] = htmlspecialchars(db_unescape_string($line["reg_exp"])); - - if (!$line["feed_title"]) $line["feed_title"] = "All feeds"; - - $line["feed_title"] = htmlspecialchars(db_unescape_string($line["feed_title"])); - - print ""; - - if (!$enabled) { - $line["reg_exp"] = "" . - $line["reg_exp"] . " (Disabled)"; - $line["feed_title"] = "" . - $line["feed_title"] . ""; - $line["filter_type_descr"] = "" . - $line["filter_type_descr"] . ""; - $line["action_description"] = "" . - $line["action_description"] . ""; - } - - print ""; - - print ""; - - print ""; - - print ""; - - print ""; - - ++$lnum; - } - - if ($lnum == 0) { - print ""; - } - - print "
- Select: - All, - None - "; - - print "
 Filter expressionFeedMatchAction
" . - $line["reg_exp"] . "" . - $line["feed_title"] . "" . - $line["filter_type_descr"] . "" . - $line["action_description"] . "
No filters defined.
"; - - print "

"; - - print "

"; - - print " - Selection: - - "; - - print "

"; - - } else { - - print "

No filters defined.

"; - - } + module_pref_filters($link); } - // We need to accept raw SQL data in label queries, so not everything is escaped - // here, this is by design. If you don't like the whole idea, disable labels - // altogether with GLOBAL_ENABLE_LABELS = false - if ($op == "pref-labels") { - - if (!GLOBAL_ENABLE_LABELS) { - - print "

Sorry, labels have been administratively disabled for this installation. Please contact instance owner or edit configuration file to enable this functionality.

"; - return; - } - - $subop = $_GET["subop"]; - - if ($subop == "edit") { - - $label_id = db_escape_string($_GET["id"]); - - $result = db_query($link, "SELECT sql_exp,description FROM ttrss_labels WHERE - owner_uid = ".$_SESSION["uid"]." AND id = '$label_id' ORDER by description"); - - $line = db_fetch_assoc($result); - - $sql_exp = htmlspecialchars(db_unescape_string($line["sql_exp"])); - $description = htmlspecialchars(db_unescape_string($line["description"])); - - print "
Label editor
"; - print "
"; - - print "
"; - - print ""; - print ""; - print ""; - - print ""; - - print " - "; - - print "
Caption:"; - - print "
-

SQL Expression:

"; - - print ""; - - print "
"; - - print "
"; - - print "
"; - - print "
"; - - $is_disabled = (strpos($_SERVER['HTTP_USER_AGENT'], 'Opera') !== FALSE) ? "disabled" : ""; - - print " - "; - - print " "; - - print ""; - - print "
"; - - return; - } - - if ($subop == "test") { - - $expr = db_unescape_string(trim($_GET["expr"])); - $descr = db_unescape_string(trim($_GET["descr"])); - - print "
"; - - error_reporting(0); - - - $result = db_query($link, - "SELECT count(ttrss_entries.id) AS num_matches - FROM ttrss_entries,ttrss_user_entries,ttrss_feeds - WHERE ($expr) AND - ttrss_user_entries.ref_id = ttrss_entries.id AND - ttrss_user_entries.feed_id = ttrss_feeds.id AND - ttrss_user_entries.owner_uid = " . $_SESSION["uid"], false); - - error_reporting (DEFAULT_ERROR_LEVEL); - - if (!$result) { - print "

" . db_last_error($link) . "

"; - print "
"; - return; - } - - $num_matches = db_fetch_result($result, 0, "num_matches");; - - if ($num_matches > 0) { - - if ($num_matches > 10) { - $showing_msg = ", showing first 10"; - } - - print "

Query returned $num_matches matches$showing_msg:

"; - - $result = db_query($link, - "SELECT ttrss_entries.title, - (SELECT title FROM ttrss_feeds WHERE id = feed_id) AS feed_title - FROM ttrss_entries,ttrss_user_entries,ttrss_feeds - WHERE ($expr) AND - ttrss_user_entries.ref_id = ttrss_entries.id - AND ttrss_user_entries.feed_id = ttrss_feeds.id - AND ttrss_user_entries.owner_uid = " . $_SESSION["uid"] . " - ORDER BY date_entered DESC LIMIT 10", false); - - print "
    "; - - $row_class = "even"; - - while ($line = db_fetch_assoc($result)) { - $row_class = toggleEvenOdd($row_class); - - print "
  • ".$line["title"]. - " (".$line["feed_title"].")
    • "; - } - print "
"; - - } else { - print "

Query didn't return any matches.

"; - } - - print "
"; - - return; - } - - if ($subop == "editSave") { - - $sql_exp = trim($_GET["sql_exp"]); - $descr = db_escape_string(trim($_GET["description"])); - $label_id = db_escape_string($_GET["id"]); - - $result = db_query($link, "UPDATE ttrss_labels SET - sql_exp = '$sql_exp', - description = '$descr' - WHERE id = '$label_id'"); - } - - if ($subop == "remove") { - - if (!WEB_DEMO_MODE) { - - $ids = split(",", db_escape_string($_GET["ids"])); - - foreach ($ids as $id) { - db_query($link, "DELETE FROM ttrss_labels WHERE id = '$id'"); - - } - } - } - - if ($subop == "add") { - - if (!WEB_DEMO_MODE) { - - // no escaping is done here on purpose - $sql_exp = trim($_GET["sql_exp"]); - $description = db_escape_string($_GET["description"]); - - if (!$sql_exp || !$description) return; - - $result = db_query($link, - "INSERT INTO ttrss_labels (sql_exp,description,owner_uid) - VALUES ('$sql_exp', '$description', '".$_SESSION["uid"]."')"); - } - } - - $sort = db_escape_string($_GET["sort"]); - - if (!$sort || $sort == "undefined") { - $sort = "description"; - } - - print "
"; - - print"
"; - - $result = db_query($link, "SELECT - id,sql_exp,description - FROM - ttrss_labels - WHERE - owner_uid = ".$_SESSION["uid"]." - ORDER BY $sort"); - -// print "
PLACEHOLDER
"; - - if (db_num_rows($result) != 0) { - - print "
"; - - print "

"; - - print " - - - - "; - - $lnum = 0; - - while ($line = db_fetch_assoc($result)) { - - $class = ($lnum % 2) ? "even" : "odd"; - - $label_id = $line["id"]; - $edit_label_id = $_GET["id"]; - - if ($subop == "edit" && $label_id != $edit_label_id) { - $class .= "Grayed"; - $this_row_id = ""; - } else { - $this_row_id = "id=\"LILRR-$label_id\""; - } - - print ""; - - $line["sql_exp"] = htmlspecialchars(db_unescape_string($line["sql_exp"])); - $line["description"] = htmlspecialchars( - db_unescape_string($line["description"])); - - if (!$line["description"]) $line["description"] = "[No caption]"; - - print ""; - - print ""; - - print ""; - - print ""; - - ++$lnum; - } - - if ($lnum == 0) { - print ""; - } - - print "
- Select: - All, - None - "; - - print "
 CaptionSQL Expression - (?) -
" . - $line["description"] . "" . - $line["sql_exp"] . "
No labels defined.
"; - - print "

"; - - print "

"; - - print " - Selection: - - "; - - } else { - print "

No labels defined.

"; - } + module_pref_labels($link); } if ($op == "error") { @@ -2137,283 +587,11 @@ } if ($op == "help") { - if (!$_GET["noheaders"]) { - print " - Tiny Tiny RSS : Help - - - - - "; - } - - $tid = sprintf("%d", $_GET["tid"]); - - print "
Help
"; - - print "
"; - - if (file_exists("help/$tid.php")) { - include("help/$tid.php"); - } else { - print "

Help topic not found.

"; - } - - print "
"; - - print "
-
"; - - if (!$_GET["noheaders"]) { - print ""; - } - + module_help($link); } if ($op == "dlg") { - $id = $_GET["id"]; - $param = $_GET["param"]; - - if ($id == "quickAddFeed") { - - print "
Subscribe to feed
"; - print "
"; - - print "
"; - - print ""; - print ""; - print ""; - - print " - "; - - if (get_pref($link, 'ENABLE_FEED_CATS')) { - print ""; - } - - print "
Feed URL: -
Category:"; - print_feed_cat_select($link, "cat_id"); - print "
"; - print "
"; - - print "
- -
"; - } - - if ($id == "search") { - - print "
Search
"; - print "
"; - - print "
"; - - #$active_feed_id = db_escape_string($_GET["param"]); - - $params = split(":", db_escape_string($_GET["param"])); - - $active_feed_id = sprintf("%d", $params[0]); - $is_cat = $params[1] == "true"; - - print ""; - - print ""; - - print "
Search:"; - - print " -
Where:"; - - print "
Match on:"; - - $search_fields = array( - "title" => "Title", - "content" => "Content", - "both" => "Title or content"); - - print_select_hash("match_on", 3, $search_fields); - - print "
"; - - print "
"; - - print "
- -
"; - - print "
"; - - } - - if ($id == "quickAddLabel") { - print "
Create label
"; - print "
"; - - print "
"; - - print ""; - print ""; - - print ""; - - print " - "; - - print "
Caption:"; - - print "
-

SQL Expression:

"; - - print ""; - - print "
"; - - print "
"; - - print "
"; - - print "
"; - - print " - "; - - print " "; - - print ""; - } - - if ($id == "quickAddFilter") { - - $active_feed_id = db_escape_string($_GET["param"]); - - print "
Create filter
"; - print "
"; - - print "
"; - - print ""; - print ""; - print ""; - -// print "
Note: filter will only apply to new articles.
"; - - $result = db_query($link, "SELECT id,description - FROM ttrss_filter_types ORDER BY description"); - - $filter_types = array(); - - while ($line = db_fetch_assoc($result)) { - //array_push($filter_types, $line["description"]); - $filter_types[$line["id"]] = $line["description"]; - } - - print ""; - - print " - "; - print ""; - - print ""; - - print "
Match:"; - print ""; - - print_select_hash("filter_type", 1, $filter_types, "class=\"iedit\""); - - print "
Feed:"; - - print_feed_select($link, "feed_id", $active_feed_id); - - print "
Action:"; - - print "
"; - - print "
"; - - print "
"; - - print " "; - - print ""; - - print "
"; - -// print ""; - - } - - print "
"; - + module_popup_dialog($link); } // update feeds of all users, may be used anonymously @@ -2434,715 +612,11 @@ } if ($op == "pref-prefs") { - - $subop = $_REQUEST["subop"]; - - if ($subop == "Save configuration") { - - if (WEB_DEMO_MODE) { - header("Location: prefs.php"); - return; - } - - $_SESSION["prefs_op_result"] = "save-config"; - - $_SESSION["prefs_cache"] = false; - - foreach (array_keys($_POST) as $pref_name) { - - $pref_name = db_escape_string($pref_name); - $value = db_escape_string($_POST[$pref_name]); - - $result = db_query($link, "SELECT type_name - FROM ttrss_prefs,ttrss_prefs_types - WHERE pref_name = '$pref_name' AND type_id = ttrss_prefs_types.id"); - - if (db_num_rows($result) > 0) { - - $type_name = db_fetch_result($result, 0, "type_name"); - -// print "$pref_name : $type_name : $value
"; - - if ($type_name == "bool") { - if ($value == "1") { - $value = "true"; - } else { - $value = "false"; - } - } else if ($type_name == "integer") { - $value = sprintf("%d", $value); - } - -// print "$pref_name : $type_name : $value
"; - - db_query($link, "UPDATE ttrss_user_prefs SET value = '$value' - WHERE pref_name = '$pref_name' AND owner_uid = ".$_SESSION["uid"]); - - } - - header("Location: prefs.php"); - - } - - } else if ($subop == "getHelp") { - - $pref_name = db_escape_string($_GET["pn"]); - - $result = db_query($link, "SELECT help_text FROM ttrss_prefs - WHERE pref_name = '$pref_name'"); - - if (db_num_rows($result) > 0) { - $help_text = db_fetch_result($result, 0, "help_text"); - print $help_text; - } else { - print "Unknown option: $pref_name"; - } - - } else if ($subop == "Change e-mail") { - - if (WEB_DEMO_MODE) { - header("Location: prefs.php"); - return; - } - - $email = db_escape_string($_GET["email"]); - $active_uid = $_SESSION["uid"]; - - if ($email) { - db_query($link, "UPDATE ttrss_users SET email = '$email' - WHERE id = '$active_uid'"); - } - - header("Location: prefs.php"); - - } else if ($subop == "Change password") { - - if (WEB_DEMO_MODE) { - header("Location: prefs.php"); - return; - } - - $old_pw = $_POST["OLD_PASSWORD"]; - $new_pw = $_POST["OLD_PASSWORD"]; - - $old_pw_hash = 'SHA1:' . sha1($_POST["OLD_PASSWORD"]); - $new_pw_hash = 'SHA1:' . sha1($_POST["NEW_PASSWORD"]); - - $active_uid = $_SESSION["uid"]; - - if ($old_pw && $new_pw) { - - $login = db_escape_string($_SERVER['PHP_AUTH_USER']); - - $result = db_query($link, "SELECT id FROM ttrss_users WHERE - id = '$active_uid' AND (pwd_hash = '$old_pw' OR - pwd_hash = '$old_pw_hash')"); - - if (db_num_rows($result) == 1) { - db_query($link, "UPDATE ttrss_users SET pwd_hash = '$new_pw_hash' - WHERE id = '$active_uid'"); - - $_SESSION["pwd_change_result"] = "ok"; - } else { - $_SESSION["pwd_change_result"] = "failed"; - } - } - - header("Location: prefs.php"); - - } else if ($subop == "Reset to defaults") { - - if (WEB_DEMO_MODE) { - header("Location: prefs.php"); - return; - } - - $_SESSION["prefs_op_result"] = "reset-to-defaults"; - - if (DB_TYPE == "pgsql") { - db_query($link,"UPDATE ttrss_user_prefs - SET value = ttrss_prefs.def_value - WHERE owner_uid = '".$_SESSION["uid"]."' AND - ttrss_prefs.pref_name = ttrss_user_prefs.pref_name"); - } else { - db_query($link, "DELETE FROM ttrss_user_prefs - WHERE owner_uid = ".$_SESSION["uid"]); - initialize_user_prefs($link, $_SESSION["uid"]); - } - - header("Location: prefs.php"); - - } else if ($subop == "Change theme") { - - $theme = db_escape_string($_POST["theme"]); - - if ($theme == "Default") { - $theme_qpart = 'NULL'; - } else { - $theme_qpart = "'$theme'"; - } - - $result = db_query($link, "SELECT id,theme_path FROM ttrss_themes - WHERE theme_name = '$theme'"); - - if (db_num_rows($result) == 1) { - $theme_id = db_fetch_result($result, 0, "id"); - $theme_path = db_fetch_result($result, 0, "theme_path"); - } else { - $theme_id = "NULL"; - $theme_path = ""; - } - - db_query($link, "UPDATE ttrss_users SET - theme_id = $theme_id WHERE id = " . $_SESSION["uid"]); - - $_SESSION["theme"] = $theme_path; - - header("Location: prefs.php"); - - } else { - - print check_for_update($link); - - if (!SINGLE_USER_MODE) { - - $result = db_query($link, "SELECT id,email FROM ttrss_users - WHERE id = ".$_SESSION["uid"]." AND (pwd_hash = 'password' OR - pwd_hash = 'SHA1:".sha1("password")."')"); - - if (db_num_rows($result) != 0) { - print "
- Your password is at default value, please change it. -
"; - } - - if ($_SESSION["pwd_change_result"] == "failed") { - print "
- There was an error while changing your password. -
"; - } - - if ($_SESSION["pwd_change_result"] == "ok") { - print "
- Password changed successfully. -
"; - } - - $_SESSION["pwd_change_result"] = ""; - - if ($_SESSION["prefs_op_result"] == "reset-to-defaults") { - print "
- Your configuration was reset to defaults. -
"; - } - - if ($_SESSION["prefs_op_result"] == "save-config") { - print "
- Your configuration was saved successfully. -
"; - } - - $_SESSION["prefs_op_result"] = ""; - - print "
"; - - print ""; - print ""; - - $result = db_query($link, "SELECT email FROM ttrss_users - WHERE id = ".$_SESSION["uid"]); - - $email = db_fetch_result($result, 0, "email"); - - print ""; - print ""; - - print "

Personal data

E-mail
"; - - print ""; - - print "

"; - - print "

"; - - print "
"; - - print ""; - print ""; - - print ""; - print ""; - - print ""; - - print ""; - - print "

Authentication

Old password
New password
"; - - print ""; - - print "

"; - - print "

"; - - } - - $result = db_query($link, "SELECT - theme_id FROM ttrss_users WHERE id = " . $_SESSION["uid"]); - - $user_theme_id = db_fetch_result($result, 0, "theme_id"); - - $result = db_query($link, "SELECT - id,theme_name FROM ttrss_themes ORDER BY theme_name"); - - if (db_num_rows($result) > 0) { - - print "
"; - print ""; - print ""; - print ""; - print ""; - print "

Themes

Select theme
"; - print ""; - print "

"; - print "

"; - } - - initialize_user_prefs($link, $_SESSION["uid"]); - - $result = db_query($link, "SELECT - ttrss_user_prefs.pref_name,short_desc,help_text,value,type_name, - section_name,def_value - FROM ttrss_prefs,ttrss_prefs_types,ttrss_prefs_sections,ttrss_user_prefs - WHERE type_id = ttrss_prefs_types.id AND - section_id = ttrss_prefs_sections.id AND - ttrss_user_prefs.pref_name = ttrss_prefs.pref_name AND - owner_uid = ".$_SESSION["uid"]." - ORDER BY section_id,short_desc"); - - print "
"; - - $lnum = 0; - - $active_section = ""; - - while ($line = db_fetch_assoc($result)) { - - if ($active_section != $line["section_name"]) { - - if ($active_section != "") { - print ""; - } - - print "

"; - - $active_section = $line["section_name"]; - - print ""; -// print " -// "; - - $lnum = 0; - } - -// $class = ($lnum % 2) ? "even" : "odd"; - - print ""; - - $type_name = $line["type_name"]; - $pref_name = $line["pref_name"]; - $value = $line["value"]; - $def_value = $line["def_value"]; - $help_text = $line["help_text"]; - - print ""; - - print ""; - - print ""; - - $lnum++; - } - - print "

$active_section

OptionValue
" . $line["short_desc"]; - - if ($help_text) print "
$help_text
"; - - print "		"; - - if ($type_name == "bool") { -// print_select($pref_name, $value, array("true", "false")); - - if ($value == "true") { - $value = "Yes"; - } else { - $value = "No"; - } - - print_radio($pref_name, $value, array("Yes", "No")); - - } else { - print ""; - } - - print "
"; - - print ""; - - print "

"; - - print " 

"; - - print "
"; - - } - + module_pref_prefs($link); } if ($op == "pref-users") { - - $subop = $_GET["subop"]; - - if ($subop == "edit") { - - $id = db_escape_string($_GET["id"]); - - print "
User editor
"; - - print "
"; - - print "
"; - - print ""; - print ""; - print ""; - - $result = db_query($link, "SELECT * FROM ttrss_users WHERE id = '$id'"); - - $login = db_fetch_result($result, 0, "login"); - $access_level = db_fetch_result($result, 0, "access_level"); - $email = db_fetch_result($result, 0, "email"); - - print ""; - print ""; - - print ""; - - print ""; - - $sel_disabled = ($id == $_SESSION["uid"]) ? "disabled" : ""; - - print ""; - - print "
Login: -
Change password: -
E-mail: -
Access level:"; - print_select_hash("access_level", $access_level, $access_level_names, - $sel_disabled); - print "
"; - - print "
"; - - print "
- -
"; - - print "
"; - - return; - } - - if ($subop == "editSave") { - - if (!WEB_DEMO_MODE && $_SESSION["access_level"] >= 10) { - - $login = db_escape_string(trim($_GET["login"])); - $uid = db_escape_string($_GET["id"]); - $access_level = sprintf("%d", $_GET["access_level"]); - $email = db_escape_string(trim($_GET["email"])); - $password = db_escape_string(trim($_GET["password"])); - - if ($password) { - $pwd_hash = 'SHA1:' . sha1($password); - $pass_query_part = "pwd_hash = '$pwd_hash', "; - print "
Changed password for user $login.
"; - } else { - $pass_query_part = ""; - } - - db_query($link, "UPDATE ttrss_users SET $pass_query_part login = '$login', - access_level = '$access_level', email = '$email' WHERE id = '$uid'"); - - } - } else if ($subop == "remove") { - - if (!WEB_DEMO_MODE && $_SESSION["access_level"] >= 10) { - - $ids = split(",", db_escape_string($_GET["ids"])); - - foreach ($ids as $id) { - db_query($link, "DELETE FROM ttrss_users WHERE id = '$id' AND id != " . $_SESSION["uid"]); - - } - } - } else if ($subop == "add") { - - if (!WEB_DEMO_MODE && $_SESSION["access_level"] >= 10) { - - $login = db_escape_string(trim($_GET["login"])); - $tmp_user_pwd = make_password(8); - $pwd_hash = 'SHA1:' . sha1($tmp_user_pwd); - - $result = db_query($link, "SELECT id FROM ttrss_users WHERE - login = '$login'"); - - if (db_num_rows($result) == 0) { - - db_query($link, "INSERT INTO ttrss_users - (login,pwd_hash,access_level,last_login) - VALUES ('$login', '$pwd_hash', 0, NOW())"); - - - $result = db_query($link, "SELECT id FROM ttrss_users WHERE - login = '$login' AND pwd_hash = '$pwd_hash'"); - - if (db_num_rows($result) == 1) { - - $new_uid = db_fetch_result($result, 0, "id"); - - print "
Added user ".$_GET["login"]. - " with password $tmp_user_pwd.
"; - - initialize_user($link, $new_uid); - - } else { - - print "
Could not create user ". - $_GET["login"]."
"; - - } - } else { - print "
User ". - $_GET["login"]." already exists.
"; - } - } - } else if ($subop == "resetPass") { - - if (!WEB_DEMO_MODE && $_SESSION["access_level"] >= 10) { - - $uid = db_escape_string($_GET["id"]); - - $result = db_query($link, "SELECT login,email - FROM ttrss_users WHERE id = '$uid'"); - - $login = db_fetch_result($result, 0, "login"); - $email = db_fetch_result($result, 0, "email"); - $tmp_user_pwd = make_password(8); - $pwd_hash = 'SHA1:' . sha1($tmp_user_pwd); - - db_query($link, "UPDATE ttrss_users SET pwd_hash = '$pwd_hash' - WHERE id = '$uid'"); - - print "
Changed password of - user $login to $tmp_user_pwd."; - - if (MAIL_RESET_PASS && $email) { - print " Notifying $email."; - - mail("$login <$email>", "Password reset notification", - "Hi, $login.\n". - "\n". - "Your password for this TT-RSS installation was reset by". - " an administrator.\n". - "\n". - "Your new password is $tmp_user_pwd, please remember". - " it for later reference.\n". - "\n". - "Sincerely, TT-RSS Mail Daemon.", "From: " . MAIL_FROM); - } - - print "
"; - - } - } - - $sort = db_escape_string($_GET["sort"]); - - if (!$sort || $sort == "undefined") { - $sort = "login"; - } - - print "
-  "; - - print "
"; - - $result = db_query($link, "SELECT - id,login,access_level,email, - SUBSTRING(last_login,1,16) as last_login - FROM - ttrss_users - ORDER BY $sort"); - -// print "
PLACEHOLDER
"; - - print "

"; - - print " - - - - "; - - $lnum = 0; - - while ($line = db_fetch_assoc($result)) { - - $class = ($lnum % 2) ? "even" : "odd"; - - $uid = $line["id"]; - $edit_uid = $_GET["id"]; - - if ($subop == "edit" && $uid != $edit_uid) { - $class .= "Grayed"; - $this_row_id = ""; - } else { - $this_row_id = "id=\"UMRR-$uid\""; - } - - print ""; - - $line["login"] = htmlspecialchars($line["login"]); - - $line["last_login"] = date(get_pref($link, 'SHORT_DATE_FORMAT'), - strtotime($line["last_login"])); - - $access_level_names = array(0 => "User", 10 => "Administrator"); - -// if (!$edit_uid || $subop != "edit") { - - print ""; - - print ""; - - if (!$line["email"]) $line["email"] = " "; - - print ""; - -/* } else if ($uid != $edit_uid) { - - if (!$line["email"]) $line["email"] = " "; - - print ""; - - print ""; - print ""; - print ""; - - } else { - - print ""; - - print ""; - - print ""; - - print ""; - - } */ - - print ""; - - print ""; - - ++$lnum; - } - - print "
- Select: - All, - None - "; - - print "
 LoginAccess LevelLast login
" . - $line["login"] . "" . - $access_level_names[$line["access_level"]] . "".$line["login"]."".$line["email"]."".$access_level_names[$line["access_level"]]." - "; - print ""; - print "".$line["last_login"]."
"; - - print "

"; - -/* if ($subop == "edit") { - print "Edit user: - - "; - - } else { */ - - print " - Selection: - - - - "; - -// } + module_pref_users($link); } if ($op == "user-details") { @@ -3434,31 +908,6 @@ } } - function check_configuration_variables() { - if (!defined('SESSION_EXPIRE_TIME')) { - return "config: SESSION_EXPIRE_TIME is undefined"; - } - - if (SESSION_EXPIRE_TIME < 60) { - return "config: SESSION_EXPIRE_TIME is too low (less than 60)"; - } - - if (SESSION_EXPIRE_TIME < SESSION_COOKIE_LIFETIME_REMEMBER) { - return "config: SESSION_EXPIRE_TIME should be greater or equal to" . - "SESSION_COOKIE_LIFETIME_REMEMBER"; - } - - if (defined('DISABLE_SESSIONS')) { - return "config: you have enabled DISABLE_SESSIONS. Please disable this option."; - } - - if (DATABASE_BACKED_SESSIONS && SINGLE_USER_MODE) { - return "config: DATABASE_BACKED_SESSIONS is incompatible with SINGLE_USER_MODE"; - } - - return false; - } - if ($op == "labelFromSearch") { $search = db_escape_string($_GET["search"]); $search_mode = db_escape_string($_GET["smode"]); diff --git a/modules/help.php b/modules/help.php new file mode 100644 index 00000000..90c63cfb --- /dev/null +++ b/modules/help.php @@ -0,0 +1,36 @@ + + Tiny Tiny RSS : Help + + + + + "; + } + + $tid = sprintf("%d", $_GET["tid"]); + + print "

Help
"; + + print "
"; + + if (file_exists("help/$tid.php")) { + include("help/$tid.php"); + } else { + print "

Help topic not found.

"; + } + + print "
"; + + print "
+
"; + + if (!$_GET["noheaders"]) { + print ""; + } + } +?> diff --git a/modules/popup-dialog.php b/modules/popup-dialog.php new file mode 100644 index 00000000..02282f46 --- /dev/null +++ b/modules/popup-dialog.php @@ -0,0 +1,245 @@ +Subscribe to feed
"; + print "
"; + + print "
"; + + print ""; + print ""; + print ""; + + print " + "; + + if (get_pref($link, 'ENABLE_FEED_CATS')) { + print ""; + } + + print "
Feed URL: +
Category:"; + print_feed_cat_select($link, "cat_id"); + print "
"; + print "
"; + + print "
+ +
"; + } + + if ($id == "search") { + + print "
Search
"; + print "
"; + + print "
"; + + #$active_feed_id = db_escape_string($_GET["param"]); + + $params = split(":", db_escape_string($_GET["param"])); + + $active_feed_id = sprintf("%d", $params[0]); + $is_cat = $params[1] == "true"; + + print ""; + + print ""; + + print "
Search:"; + + print " +
Where:"; + + print "
Match on:"; + + $search_fields = array( + "title" => "Title", + "content" => "Content", + "both" => "Title or content"); + + print_select_hash("match_on", 3, $search_fields); + + print "
"; + + print "
"; + + print "
+ +
"; + + print "
"; + + } + + if ($id == "quickAddLabel") { + print "
Create label
"; + print "
"; + + print "
"; + + print ""; + print ""; + + print ""; + + print " + "; + + print "
Caption:"; + + print "
+

SQL Expression:

"; + + print ""; + + print "
"; + + print "
"; + + print "
"; + + print "
"; + + print " + "; + + print " "; + + print ""; + } + + if ($id == "quickAddFilter") { + + $active_feed_id = db_escape_string($_GET["param"]); + + print "
Create filter
"; + print "
"; + + print "
"; + + print ""; + print ""; + print ""; + +// print "
Note: filter will only apply to new articles.
"; + + $result = db_query($link, "SELECT id,description + FROM ttrss_filter_types ORDER BY description"); + + $filter_types = array(); + + while ($line = db_fetch_assoc($result)) { + //array_push($filter_types, $line["description"]); + $filter_types[$line["id"]] = $line["description"]; + } + + print ""; + + print " + "; + print ""; + + print ""; + + print "
Match:"; + print ""; + + print_select_hash("filter_type", 1, $filter_types, "class=\"iedit\""); + + print "
Feed:"; + + print_feed_select($link, "feed_id", $active_feed_id); + + print "
Action:"; + + print "
"; + + print "
"; + + print "
"; + + print " "; + + print ""; + + print "
"; + +// print ""; + + } + + print "
"; + } +?> diff --git a/modules/pref-feeds.php b/modules/pref-feeds.php new file mode 100644 index 00000000..454dd178 --- /dev/null +++ b/modules/pref-feeds.php @@ -0,0 +1,944 @@ + 0) { + print "
"; + print "Subscribed to feeds:"; + print "
    "; + foreach ($subscribed as $title) { + print "
  • $title
    • "; + } + print "
"; + print "
"; + } + } + + if ($subop == "browse") { + + if (!ENABLE_FEED_BROWSER) { + print "Feed browser is administratively disabled."; + return; + } + + print "
Other feeds: Top 25
"; + + print "
"; + + print "

Showing top 25 registered feeds, sorted by popularity:

"; + +# $result = db_query($link, "SELECT feed_url,count(id) AS subscribers +# FROM ttrss_feeds +# WHERE auth_login = '' AND auth_pass = '' AND private = false +# GROUP BY feed_url ORDER BY subscribers DESC LIMIT 25"); + + $owner_uid = $_SESSION["uid"]; + + $result = db_query($link, "SELECT feed_url,COUNT(id) AS subscribers + FROM ttrss_feeds WHERE (SELECT COUNT(id) = 0 FROM ttrss_feeds AS tf + WHERE tf.feed_url = ttrss_feeds.feed_url + AND owner_uid = '$owner_uid') GROUP BY feed_url + ORDER BY subscribers DESC LIMIT 25"); + + print "
    "; + + $feedctr = 0; + + while ($line = db_fetch_assoc($result)) { + $feed_url = $line["feed_url"]; + $subscribers = $line["subscribers"]; + + $det_result = db_query($link, "SELECT site_url,title,id + FROM ttrss_feeds WHERE feed_url = '$feed_url' LIMIT 1"); + + $details = db_fetch_assoc($det_result); + + $icon_file = ICONS_DIR . "/" . $details["id"] . ".ico"; + + if (file_exists($icon_file) && filesize($icon_file) > 0) { + $feed_icon = ""; + } else { + $feed_icon = ""; + } + + $check_box = ""; + + $class = ($feedctr % 2) ? "even" : "odd"; + + print "
  • $check_box". + "$feed_icon " . db_unescape_string($details["title"]) . + " ($subscribers)
    • "; + + ++$feedctr; + } + + if ($feedctr == 0) { + print "
  • No feeds found to subscribe.
    • "; + } + + print "
"; + + print "
+ +
"; + + print "
"; + return; + } + + if ($subop == "editfeed") { + $feed_id = db_escape_string($_REQUEST["id"]); + + $result = db_query($link, + "SELECT * FROM ttrss_feeds WHERE id = '$feed_id' AND + owner_uid = " . $_SESSION["uid"]); + + $title = htmlspecialchars(db_unescape_string(db_fetch_result($result, + 0, "title"))); + + $icon_file = ICONS_DIR . "/$feed_id.ico"; + + if (file_exists($icon_file) && filesize($icon_file) > 0) { + $feed_icon = ""; + } else { + $feed_icon = ""; + } + + print "
Feed editor
"; + + print "
"; + + print "
"; + + print ""; + print ""; + print ""; + + print ""; + + print ""; + print ""; + + $feed_url = db_fetch_result($result, 0, "feed_url"); + $feed_url = htmlspecialchars(db_unescape_string(db_fetch_result($result, + 0, "feed_url"))); + + print ""; + print ""; + + if (get_pref($link, 'ENABLE_FEED_CATS')) { + + $cat_id = db_fetch_result($result, 0, "cat_id"); + + print ""; + print ""; + print ""; + + } + + $update_interval = db_fetch_result($result, 0, "update_interval"); + + print ""; + + print ""; + + print ""; + + $purge_interval = db_fetch_result($result, 0, "purge_interval"); + + print ""; + + print ""; + + $auth_login = escape_for_form(db_fetch_result($result, 0, "auth_login")); + + print ""; + print ""; + + $auth_pass = escape_for_form(db_fetch_result($result, 0, "auth_pass")); + + print ""; + print ""; + + $private = sql_bool_to_bool(db_fetch_result($result, 0, "private")); + + if ($private) { + $checked = "checked"; + } else { + $checked = ""; + } + + print ""; + print ""; + + print "
Title:
Feed URL:
Category:"; + + $parent_feed = db_fetch_result($result, 0, "parent_feed"); + + if (sprintf("%d", $parent_feed) > 0) { + $disabled = "disabled"; + } else { + $disabled = ""; + } + + print_feed_cat_select($link, "cat_id", $cat_id, "class=\"iedit\" $disabled"); + + print "
Update Interval:"; + + print_select_hash("update_interval", $update_interval, $update_intervals, + "class=\"iedit\""); + + print "
Link to:"; + + $tmp_result = db_query($link, "SELECT COUNT(id) AS count + FROM ttrss_feeds WHERE parent_feed = '$feed_id'"); + + $linked_count = db_fetch_result($tmp_result, 0, "count"); + + $parent_feed = db_fetch_result($result, 0, "parent_feed"); + + if ($linked_count > 0) { + $disabled = "disabled"; + } else { + $disabled = ""; + } + + print ""; + print "
Article purging:"; + + print_select_hash("purge_interval", $purge_interval, $purge_intervals, + "class=\"iedit\""); + + print "
Login:
Password:
Options:"; + + $rtl_content = sql_bool_to_bool(db_fetch_result($result, 0, "rtl_content")); + + if ($rtl_content) { + $checked = "checked"; + } else { + $checked = ""; + } + + print "
"; + + $hidden = sql_bool_to_bool(db_fetch_result($result, 0, "hidden")); + + if ($hidden) { + $checked = "checked"; + } else { + $checked = ""; + } + + print "
"; + + $include_in_digest = sql_bool_to_bool(db_fetch_result($result, 0, "include_in_digest")); + + if ($include_in_digest) { + $checked = "checked"; + } else { + $checked = ""; + } + + print "
"; + + print "
"; + + print "
"; + + print "
+ +
"; + + print "
"; + + return; + } + + if ($subop == "editSave") { + + $feed_title = db_escape_string(trim($_POST["title"])); + $feed_link = db_escape_string(trim($_POST["feed_url"])); + $upd_intl = db_escape_string($_POST["update_interval"]); + $purge_intl = db_escape_string($_POST["purge_interval"]); + $feed_id = db_escape_string($_POST["id"]); + $cat_id = db_escape_string($_POST["cat_id"]); + $auth_login = db_escape_string(trim($_POST["auth_login"])); + $auth_pass = db_escape_string(trim($_POST["auth_pass"])); + $parent_feed = db_escape_string($_POST["parent_feed"]); + $private = checkbox_to_sql_bool(db_escape_string($_POST["private"])); + $rtl_content = checkbox_to_sql_bool(db_escape_string($_POST["rtl_content"])); + $hidden = checkbox_to_sql_bool(db_escape_string($_POST["hidden"])); + $include_in_digest = checkbox_to_sql_bool( + db_escape_string($_POST["include_in_digest"])); + + if (get_pref($link, 'ENABLE_FEED_CATS')) { + if ($cat_id && $cat_id != 0) { + $category_qpart = "cat_id = '$cat_id',"; + $category_qpart_nocomma = "cat_id = '$cat_id'"; + } else { + $category_qpart = 'cat_id = NULL,'; + $category_qpart_nocomma = 'cat_id = NULL'; + } + } else { + $category_qpart = ""; + $category_qpart_nocomma = ""; + } + + if ($parent_feed && $parent_feed != 0) { + $parent_qpart = "parent_feed = '$parent_feed'"; + } else { + $parent_qpart = 'parent_feed = NULL'; + } + + $result = db_query($link, "UPDATE ttrss_feeds SET + $category_qpart $parent_qpart, + title = '$feed_title', feed_url = '$feed_link', + update_interval = '$upd_intl', + purge_interval = '$purge_intl', + auth_login = '$auth_login', + auth_pass = '$auth_pass', + private = $private, + rtl_content = $rtl_content, + hidden = $hidden, + include_in_digest = $include_in_digest + WHERE id = '$feed_id' AND owner_uid = " . $_SESSION["uid"]); + + if (get_pref($link, 'ENABLE_FEED_CATS')) { + # update linked feed categories + $result = db_query($link, "UPDATE ttrss_feeds SET + $category_qpart_nocomma WHERE parent_feed = '$feed_id' AND + owner_uid = " . $_SESSION["uid"]); + } + } + + if ($subop == "saveCat") { + $cat_title = db_escape_string(trim($_GET["title"])); + $cat_id = db_escape_string($_GET["id"]); + + $result = db_query($link, "UPDATE ttrss_feed_categories SET + title = '$cat_title' WHERE id = '$cat_id' AND owner_uid = ".$_SESSION["uid"]); + + } + + if ($subop == "remove") { + + if (!WEB_DEMO_MODE) { + + $ids = split(",", db_escape_string($_GET["ids"])); + + foreach ($ids as $id) { + + if ($id > 0) { + + db_query($link, "DELETE FROM ttrss_feeds + WHERE id = '$id' AND owner_uid = " . $_SESSION["uid"]); + + $icons_dir = ICONS_DIR; + + if (file_exists($icons_dir . "/$id.ico")) { + unlink($icons_dir . "/$id.ico"); + } + } else if ($id < -10) { + + $label_id = -$id - 11; + + db_query($link, "DELETE FROM ttrss_labels + WHERE id = '$label_id' AND owner_uid = " . $_SESSION["uid"]); + } + } + } + } + + if ($subop == "add") { + + if (!WEB_DEMO_MODE) { + + $feed_url = db_escape_string(trim($_GET["feed_url"])); + $cat_id = db_escape_string($_GET["cat_id"]); + + if (subscribe_to_feed($link, $feed_url, $cat_id)) { + print "Added feed."; + } else { + print "
+ Feed $feed_url already exists in the database. +
"; + } + } + } + + if ($subop == "addCat") { + + if (!WEB_DEMO_MODE) { + + $feed_cat = db_escape_string(trim($_GET["cat"])); + + $result = db_query($link, + "SELECT id FROM ttrss_feed_categories + WHERE title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]); + + if (db_num_rows($result) == 0) { + + $result = db_query($link, + "INSERT INTO ttrss_feed_categories (owner_uid,title) + VALUES ('".$_SESSION["uid"]."', '$feed_cat')"); + + } else { + + print "
+ Category $feed_cat already exists in the database. +
"; + } + + + } + } + + if ($subop == "removeCats") { + + if (!WEB_DEMO_MODE) { + + $ids = split(",", db_escape_string($_GET["ids"])); + + foreach ($ids as $id) { + + db_query($link, "BEGIN"); + + $result = db_query($link, + "SELECT count(id) as num_feeds FROM ttrss_feeds + WHERE cat_id = '$id'"); + + $num_feeds = db_fetch_result($result, 0, "num_feeds"); + + if ($num_feeds == 0) { + db_query($link, "DELETE FROM ttrss_feed_categories + WHERE id = '$id' AND owner_uid = " . $_SESSION["uid"]); + } else { + + print "
+ Unable to delete non empty feed categories.
"; + + } + + db_query($link, "COMMIT"); + } + } + } + + if ($subop == "categorize") { + + if (!WEB_DEMO_MODE) { + + $ids = split(",", db_escape_string($_GET["ids"])); + + $cat_id = db_escape_string($_GET["cat_id"]); + + if ($cat_id == 0) { + $cat_id_qpart = 'NULL'; + } else { + $cat_id_qpart = "'$cat_id'"; + } + + db_query($link, "BEGIN"); + + foreach ($ids as $id) { + + db_query($link, "UPDATE ttrss_feeds SET cat_id = $cat_id_qpart + WHERE id = '$id' AND parent_feed IS NULL + AND owner_uid = " . $_SESSION["uid"]); + + # update linked feed categories + db_query($link, "UPDATE ttrss_feeds SET + cat_id = $cat_id_qpart WHERE parent_feed = '$id' AND + owner_uid = " . $_SESSION["uid"]); + + } + + db_query($link, "COMMIT"); + } + + } + + if ($quiet) return; + +// print "

Edit Feeds

"; + + $result = db_query($link, "SELECT id,title,feed_url,last_error + FROM ttrss_feeds WHERE last_error != '' AND owner_uid = ".$_SESSION["uid"]); + + if (db_num_rows($result) > 0) { + + print "
"; + +// print""; + + print " + Some feeds have update errors (click for details)"; + + print "
    "; + + while ($line = db_fetch_assoc($result)) { + print "
  • " . $line["title"] . " (" . $line["feed_url"] . "): " . + $line["last_error"]; + } + + print "
"; + print "
"; + + } + + $feed_search = db_escape_string($_GET["search"]); + + if (array_key_exists("search", $_GET)) { + $_SESSION["prefs_feed_search"] = $feed_search; + } else { + $feed_search = $_SESSION["prefs_feed_search"]; + } + + print "
+ + +
"; + + print "
+ + "; + + if (ENABLE_FEED_BROWSER && !SINGLE_USER_MODE) { + print " "; + } + + print "
"; + + $feeds_sort = db_escape_string($_GET["sort"]); + + if (!$feeds_sort || $feeds_sort == "undefined") { + $feeds_sort = $_SESSION["pref_sort_feeds"]; + if (!$feeds_sort) $feeds_sort = "title"; + } + + $_SESSION["pref_sort_feeds"] = $feeds_sort; + + if ($feed_search) { + $search_qpart = "(UPPER(F1.title) LIKE UPPER('%$feed_search%') OR + UPPER(F1.feed_url) LIKE UPPER('%$feed_search%')) AND"; + } else { + $search_qpart = ""; + } + + if (get_pref($link, 'ENABLE_FEED_CATS')) { + $order_by_qpart = "category,$feeds_sort,title"; + } else { + $order_by_qpart = "$feeds_sort,title"; + } + + $result = db_query($link, "SELECT + F1.id, + F1.title, + F1.feed_url, + substring(F1.last_updated,1,16) AS last_updated, + F1.parent_feed, + F1.update_interval, + F1.purge_interval, + F1.cat_id, + F2.title AS parent_title, + C1.title AS category, + F1.hidden, + F1.include_in_digest, + (SELECT SUBSTRING(MAX(updated),1,16) FROM ttrss_user_entries, + ttrss_entries WHERE ref_id = ttrss_entries.id + AND feed_id = F1.id) AS last_article + FROM + ttrss_feeds AS F1 + LEFT JOIN ttrss_feeds AS F2 + ON (F1.parent_feed = F2.id) + LEFT JOIN ttrss_feed_categories AS C1 + ON (F1.cat_id = C1.id) + WHERE + $search_qpart F1.owner_uid = '".$_SESSION["uid"]."' + ORDER by $order_by_qpart"); + + if (db_num_rows($result) != 0) { + +// print "
PLACEHOLDER
"; + + print "

"; + print " + "; + + if (get_pref($link, 'ENABLE_FEED_ICONS')) { + print ""; + } + + print " + + + + "; + } + + $lnum = 0; + + $cur_cat_id = -1; + + while ($line = db_fetch_assoc($result)) { + + $feed_id = $line["id"]; + $cat_id = $line["cat_id"]; + + $edit_title = htmlspecialchars(db_unescape_string($line["title"])); + $edit_link = htmlspecialchars(db_unescape_string($line["feed_url"])); + $edit_cat = htmlspecialchars(db_unescape_string($line["category"])); + + $hidden = sql_bool_to_bool($line["hidden"]); + + if (!$edit_cat) $edit_cat = "Uncategorized"; + + $last_updated = $line["last_updated"]; + + if (get_pref($link, 'HEADLINES_SMART_DATE')) { + $last_updated = smart_date_time(strtotime($last_updated)); + } else { + $short_date = get_pref($link, 'SHORT_DATE_FORMAT'); + $last_updated = date($short_date, strtotime($last_updated)); + } + + $last_article = $line["last_article"]; + + if (get_pref($link, 'HEADLINES_SMART_DATE')) { + $last_article = smart_date_time(strtotime($last_article)); + } else { + $short_date = get_pref($link, 'SHORT_DATE_FORMAT'); + $last_article = date($short_date, strtotime($last_article)); + } + + if (get_pref($link, 'ENABLE_FEED_CATS') && $cur_cat_id != $cat_id) { + $lnum = 0; + + print ""; + + print " + "; + + if (get_pref($link, 'ENABLE_FEED_ICONS')) { + print ""; + } + + print " + + + "; + + $cur_cat_id = $cat_id; + } + + $class = ($lnum % 2) ? "even" : "odd"; + $this_row_id = "id=\"FEEDR-$feed_id\""; + + print ""; + + $icon_file = ICONS_DIR . "/$feed_id.ico"; + + if (file_exists($icon_file) && filesize($icon_file) > 0) { + $feed_icon = ""; + } else { + $feed_icon = ""; + } + + print ""; + + if (get_pref($link, 'ENABLE_FEED_ICONS')) { + print ""; + } + + $edit_title = truncate_string($edit_title, 40); + $edit_link = truncate_string($edit_link, 60); + + if ($hidden) { + $edit_title = "$edit_title (Hidden)"; + $edit_link = "$edit_link"; + $last_updated = "$last_updated"; + $last_article = "$last_article"; + } + + $parent_title = $line["parent_title"]; + if ($parent_title) { + $parent_title = "(linked to + $parent_title)"; + } + + print ""; + + print ""; + + print ""; + + print ""; + + print ""; + + ++$lnum; + } + + print "
+ Select: + All, + None + "; + + if (!get_pref($link, 'ENABLE_FEED_CATS')) { + print "
  TitleFeedLast ArticleUpdated
$edit_cat
  TitleFeedLast ArticleUpdated
$feed_icon" . + "$edit_title $parent_title" . "" . + $edit_link . "" . + "$last_article" . + "$last_updated
"; + + print "

"; + + if ($subop == "edit") { + print "Edit feed:  + + "; + } else { + + print " + Selection:  + + "; + + if (get_pref($link, 'ENABLE_FEED_CATS')) { + + print " | "; + + print_feed_cat_select($link, "sfeed_set_fcat", "", "disabled"); + + print " "; + + } + + print " +  All feeds: "; + } + } else { + + print "

No feeds defined.

"; + + } + + if (get_pref($link, 'ENABLE_FEED_CATS')) { + + print "

Edit Categories

"; + + print "
+   +
"; + + $result = db_query($link, "SELECT title,id FROM ttrss_feed_categories + WHERE owner_uid = ".$_SESSION["uid"]." + ORDER BY title"); + + if (db_num_rows($result) != 0) { + + print "
"; + + print "

"; + + print " + + "; + + $lnum = 0; + + while ($line = db_fetch_assoc($result)) { + + $class = ($lnum % 2) ? "even" : "odd"; + + $cat_id = $line["id"]; + + $edit_cat_id = $_GET["id"]; + + if ($subop == "editCat" && $cat_id != $edit_cat_id) { + $class .= "Grayed"; + $this_row_id = ""; + } else { + $this_row_id = "id=\"FCATR-$cat_id\""; + } + + print ""; + + $edit_title = htmlspecialchars(db_unescape_string($line["title"])); + + if (!$edit_cat_id || $subop != "editCat") { + + print ""; + + print ""; + + } else if ($cat_id != $edit_cat_id) { + + print ""; + + print ""; + + } else { + + print ""; + + print ""; + + } + + print ""; + + ++$lnum; + } + + print "
+ Select: + All, + None + "; + + print "
 Title
" . + $edit_title . "$edit_title"; + + print ""; + print ""; + print ""; + + print "
"; + + print "

"; + + print "

"; + + if ($subop == "editCat") { + print "Edit category:  + + "; + } else { + + print " + Selection:  + + "; + + } + + } else { + print "

No feed categories defined.

"; + } + } + + print "

Import OPML

+
+ File:   + +
"; + } +?> diff --git a/modules/pref-filters.php b/modules/pref-filters.php new file mode 100644 index 00000000..0570b7ac --- /dev/null +++ b/modules/pref-filters.php @@ -0,0 +1,314 @@ +Filter editor
"; + print "
"; + + print "
"; + + print ""; + print ""; + print ""; + +// print "
Note: filter will only apply to new articles.
"; + + $result = db_query($link, "SELECT id,description + FROM ttrss_filter_types ORDER BY description"); + + $filter_types = array(); + + while ($line = db_fetch_assoc($result)) { + //array_push($filter_types, $line["description"]); + $filter_types[$line["id"]] = $line["description"]; + } + + print ""; + + print " + "; + print ""; + + print ""; + + print ""; + + if ($enabled) { + $checked = "checked"; + } else { + $checked = ""; + } + + print "
Match:"; + + print ""; + + print_select_hash("filter_type", $filter_type, $filter_types, "class=\"iedit\""); + + print "
Feed:"; + + print_feed_select($link, "feed_id", $feed_id); + + print "
Action:"; + + print "
Options: + + "; + + print "
"; + + print "
"; + + print "
"; + + print " "; + + print ""; + + print "
"; + + return; + } + + + if ($subop == "editSave") { + + $reg_exp = db_escape_string(trim($_GET["reg_exp"])); + $filter_type = db_escape_string(trim($_GET["filter_type"])); + $filter_id = db_escape_string($_GET["id"]); + $feed_id = db_escape_string($_GET["feed_id"]); + $action_id = db_escape_string($_GET["action_id"]); + $enabled = checkbox_to_sql_bool(db_escape_string($_GET["enabled"])); + + if (!$feed_id) { + $feed_id = 'NULL'; + } else { + $feed_id = sprintf("'%s'", db_escape_string($feed_id)); + } + + $result = db_query($link, "UPDATE ttrss_filters SET + reg_exp = '$reg_exp', + feed_id = $feed_id, + action_id = '$action_id', + filter_type = '$filter_type', + enabled = $enabled + WHERE id = '$filter_id' AND owner_uid = " . $_SESSION["uid"]); + } + + if ($subop == "remove") { + + if (!WEB_DEMO_MODE) { + + $ids = split(",", db_escape_string($_GET["ids"])); + + foreach ($ids as $id) { + db_query($link, "DELETE FROM ttrss_filters WHERE id = '$id' AND owner_uid = ". $_SESSION["uid"]); + + } + } + } + + if ($subop == "add") { + + if (!WEB_DEMO_MODE) { + + $regexp = db_escape_string(trim($_GET["reg_exp"])); + $filter_type = db_escape_string(trim($_GET["filter_type"])); + $feed_id = db_escape_string($_GET["feed_id"]); + $action_id = db_escape_string($_GET["action_id"]); + + if (!$regexp) return; + + if (!$feed_id) { + $feed_id = 'NULL'; + } else { + $feed_id = sprintf("'%s'", db_escape_string($feed_id)); + } + + $result = db_query($link, + "INSERT INTO ttrss_filters (reg_exp,filter_type,owner_uid,feed_id, + action_id) + VALUES + ('$regexp', '$filter_type','".$_SESSION["uid"]."', + $feed_id, '$action_id')"); + } + } + + if ($quiet) return; + + $sort = db_escape_string($_GET["sort"]); + + if (!$sort || $sort == "undefined") { + $sort = "reg_exp"; + } + +// print "
PLACEHOLDER
"; + + $result = db_query($link, "SELECT id,description + FROM ttrss_filter_types ORDER BY description"); + + $filter_types = array(); + + while ($line = db_fetch_assoc($result)) { + //array_push($filter_types, $line["description"]); + $filter_types[$line["id"]] = $line["description"]; + } + + print ""; + + $result = db_query($link, "SELECT + ttrss_filters.id AS id,reg_exp, + ttrss_filter_types.name AS filter_type_name, + ttrss_filter_types.description AS filter_type_descr, + enabled, + feed_id, + ttrss_filter_actions.description AS action_description, + ttrss_feeds.title AS feed_title + FROM + ttrss_filter_types,ttrss_filter_actions,ttrss_filters LEFT JOIN + ttrss_feeds ON (ttrss_filters.feed_id = ttrss_feeds.id) + WHERE + filter_type = ttrss_filter_types.id AND + ttrss_filter_actions.id = action_id AND + ttrss_filters.owner_uid = ".$_SESSION["uid"]." + ORDER by $sort"); + + if (db_num_rows($result) != 0) { + + print "
"; + + print "

"; + + print " + + + + + "; + + $lnum = 0; + + while ($line = db_fetch_assoc($result)) { + + $class = ($lnum % 2) ? "even" : "odd"; + + $filter_id = $line["id"]; + $edit_filter_id = $_GET["id"]; + + $enabled = sql_bool_to_bool($line["enabled"]); + + if ($subop == "edit" && $filter_id != $edit_filter_id) { + $class .= "Grayed"; + $this_row_id = ""; + } else { + $this_row_id = "id=\"FILRR-$filter_id\""; + } + + print ""; + + $line["reg_exp"] = htmlspecialchars(db_unescape_string($line["reg_exp"])); + + if (!$line["feed_title"]) $line["feed_title"] = "All feeds"; + + $line["feed_title"] = htmlspecialchars(db_unescape_string($line["feed_title"])); + + print ""; + + if (!$enabled) { + $line["reg_exp"] = "" . + $line["reg_exp"] . " (Disabled)"; + $line["feed_title"] = "" . + $line["feed_title"] . ""; + $line["filter_type_descr"] = "" . + $line["filter_type_descr"] . ""; + $line["action_description"] = "" . + $line["action_description"] . ""; + } + + print ""; + + print ""; + + print ""; + + print ""; + + print ""; + + ++$lnum; + } + + if ($lnum == 0) { + print ""; + } + + print "
+ Select: + All, + None + "; + + print "
 Filter expressionFeedMatchAction
" . + $line["reg_exp"] . "" . + $line["feed_title"] . "" . + $line["filter_type_descr"] . "" . + $line["action_description"] . "
No filters defined.
"; + + print "

"; + + print "

"; + + print " + Selection: + + "; + + print "

"; + + } else { + + print "

No filters defined.

"; + + } + } +?> diff --git a/modules/pref-labels.php b/modules/pref-labels.php new file mode 100644 index 00000000..8f1bab7a --- /dev/null +++ b/modules/pref-labels.php @@ -0,0 +1,289 @@ +Sorry, labels have been administratively disabled for this installation. Please contact instance owner or edit configuration file to enable this functionality.

"; + return; + } + + $subop = $_GET["subop"]; + + if ($subop == "edit") { + + $label_id = db_escape_string($_GET["id"]); + + $result = db_query($link, "SELECT sql_exp,description FROM ttrss_labels WHERE + owner_uid = ".$_SESSION["uid"]." AND id = '$label_id' ORDER by description"); + + $line = db_fetch_assoc($result); + + $sql_exp = htmlspecialchars(db_unescape_string($line["sql_exp"])); + $description = htmlspecialchars(db_unescape_string($line["description"])); + + print "
Label editor
"; + print "
"; + + print "
"; + + print ""; + print ""; + print ""; + + print ""; + + print " + "; + + print "
Caption:"; + + print "
+

SQL Expression:

"; + + print ""; + + print "
"; + + print "
"; + + print "
"; + + print "
"; + + $is_disabled = (strpos($_SERVER['HTTP_USER_AGENT'], 'Opera') !== FALSE) ? "disabled" : ""; + + print " + "; + + print " "; + + print ""; + + print "
"; + + return; + } + + if ($subop == "test") { + + $expr = db_unescape_string(trim($_GET["expr"])); + $descr = db_unescape_string(trim($_GET["descr"])); + + print "
"; + + error_reporting(0); + + + $result = db_query($link, + "SELECT count(ttrss_entries.id) AS num_matches + FROM ttrss_entries,ttrss_user_entries,ttrss_feeds + WHERE ($expr) AND + ttrss_user_entries.ref_id = ttrss_entries.id AND + ttrss_user_entries.feed_id = ttrss_feeds.id AND + ttrss_user_entries.owner_uid = " . $_SESSION["uid"], false); + + error_reporting (DEFAULT_ERROR_LEVEL); + + if (!$result) { + print "

" . db_last_error($link) . "

"; + print "
"; + return; + } + + $num_matches = db_fetch_result($result, 0, "num_matches");; + + if ($num_matches > 0) { + + if ($num_matches > 10) { + $showing_msg = ", showing first 10"; + } + + print "

Query returned $num_matches matches$showing_msg:

"; + + $result = db_query($link, + "SELECT ttrss_entries.title, + (SELECT title FROM ttrss_feeds WHERE id = feed_id) AS feed_title + FROM ttrss_entries,ttrss_user_entries,ttrss_feeds + WHERE ($expr) AND + ttrss_user_entries.ref_id = ttrss_entries.id + AND ttrss_user_entries.feed_id = ttrss_feeds.id + AND ttrss_user_entries.owner_uid = " . $_SESSION["uid"] . " + ORDER BY date_entered DESC LIMIT 10", false); + + print "
    "; + + $row_class = "even"; + + while ($line = db_fetch_assoc($result)) { + $row_class = toggleEvenOdd($row_class); + + print "
  • ".$line["title"]. + " (".$line["feed_title"].")
    • "; + } + print "
"; + + } else { + print "

Query didn't return any matches.

"; + } + + print "
"; + + return; + } + + if ($subop == "editSave") { + + $sql_exp = trim($_GET["sql_exp"]); + $descr = db_escape_string(trim($_GET["description"])); + $label_id = db_escape_string($_GET["id"]); + + $result = db_query($link, "UPDATE ttrss_labels SET + sql_exp = '$sql_exp', + description = '$descr' + WHERE id = '$label_id'"); + } + + if ($subop == "remove") { + + if (!WEB_DEMO_MODE) { + + $ids = split(",", db_escape_string($_GET["ids"])); + + foreach ($ids as $id) { + db_query($link, "DELETE FROM ttrss_labels WHERE id = '$id'"); + + } + } + } + + if ($subop == "add") { + + if (!WEB_DEMO_MODE) { + + // no escaping is done here on purpose + $sql_exp = trim($_GET["sql_exp"]); + $description = db_escape_string($_GET["description"]); + + if (!$sql_exp || !$description) return; + + $result = db_query($link, + "INSERT INTO ttrss_labels (sql_exp,description,owner_uid) + VALUES ('$sql_exp', '$description', '".$_SESSION["uid"]."')"); + } + } + + $sort = db_escape_string($_GET["sort"]); + + if (!$sort || $sort == "undefined") { + $sort = "description"; + } + + print "
"; + + print"
"; + + $result = db_query($link, "SELECT + id,sql_exp,description + FROM + ttrss_labels + WHERE + owner_uid = ".$_SESSION["uid"]." + ORDER BY $sort"); + +// print "
PLACEHOLDER
"; + + if (db_num_rows($result) != 0) { + + print "
"; + + print "

"; + + print " + + + + "; + + $lnum = 0; + + while ($line = db_fetch_assoc($result)) { + + $class = ($lnum % 2) ? "even" : "odd"; + + $label_id = $line["id"]; + $edit_label_id = $_GET["id"]; + + if ($subop == "edit" && $label_id != $edit_label_id) { + $class .= "Grayed"; + $this_row_id = ""; + } else { + $this_row_id = "id=\"LILRR-$label_id\""; + } + + print ""; + + $line["sql_exp"] = htmlspecialchars(db_unescape_string($line["sql_exp"])); + $line["description"] = htmlspecialchars( + db_unescape_string($line["description"])); + + if (!$line["description"]) $line["description"] = "[No caption]"; + + print ""; + + print ""; + + print ""; + + print ""; + + ++$lnum; + } + + if ($lnum == 0) { + print ""; + } + + print "
+ Select: + All, + None + "; + + print "
 CaptionSQL Expression + (?) +
" . + $line["description"] . "" . + $line["sql_exp"] . "
No labels defined.
"; + + print "

"; + + print "

"; + + print " + Selection: + + "; + + } else { + print "

No labels defined.

"; + } + } +?> diff --git a/modules/pref-prefs.php b/modules/pref-prefs.php new file mode 100644 index 00000000..8573b4c1 --- /dev/null +++ b/modules/pref-prefs.php @@ -0,0 +1,387 @@ + 0) { + + $type_name = db_fetch_result($result, 0, "type_name"); + +// print "$pref_name : $type_name : $value
"; + + if ($type_name == "bool") { + if ($value == "1") { + $value = "true"; + } else { + $value = "false"; + } + } else if ($type_name == "integer") { + $value = sprintf("%d", $value); + } + +// print "$pref_name : $type_name : $value
"; + + db_query($link, "UPDATE ttrss_user_prefs SET value = '$value' + WHERE pref_name = '$pref_name' AND owner_uid = ".$_SESSION["uid"]); + + } + + header("Location: prefs.php"); + + } + + } else if ($subop == "getHelp") { + + $pref_name = db_escape_string($_GET["pn"]); + + $result = db_query($link, "SELECT help_text FROM ttrss_prefs + WHERE pref_name = '$pref_name'"); + + if (db_num_rows($result) > 0) { + $help_text = db_fetch_result($result, 0, "help_text"); + print $help_text; + } else { + print "Unknown option: $pref_name"; + } + + } else if ($subop == "Change e-mail") { + + if (WEB_DEMO_MODE) { + header("Location: prefs.php"); + return; + } + + $email = db_escape_string($_GET["email"]); + $active_uid = $_SESSION["uid"]; + + if ($email) { + db_query($link, "UPDATE ttrss_users SET email = '$email' + WHERE id = '$active_uid'"); + } + + header("Location: prefs.php"); + + } else if ($subop == "Change password") { + + if (WEB_DEMO_MODE) { + header("Location: prefs.php"); + return; + } + + $old_pw = $_POST["OLD_PASSWORD"]; + $new_pw = $_POST["OLD_PASSWORD"]; + + $old_pw_hash = 'SHA1:' . sha1($_POST["OLD_PASSWORD"]); + $new_pw_hash = 'SHA1:' . sha1($_POST["NEW_PASSWORD"]); + + $active_uid = $_SESSION["uid"]; + + if ($old_pw && $new_pw) { + + $login = db_escape_string($_SERVER['PHP_AUTH_USER']); + + $result = db_query($link, "SELECT id FROM ttrss_users WHERE + id = '$active_uid' AND (pwd_hash = '$old_pw' OR + pwd_hash = '$old_pw_hash')"); + + if (db_num_rows($result) == 1) { + db_query($link, "UPDATE ttrss_users SET pwd_hash = '$new_pw_hash' + WHERE id = '$active_uid'"); + + $_SESSION["pwd_change_result"] = "ok"; + } else { + $_SESSION["pwd_change_result"] = "failed"; + } + } + + header("Location: prefs.php"); + + } else if ($subop == "Reset to defaults") { + + if (WEB_DEMO_MODE) { + header("Location: prefs.php"); + return; + } + + $_SESSION["prefs_op_result"] = "reset-to-defaults"; + + if (DB_TYPE == "pgsql") { + db_query($link,"UPDATE ttrss_user_prefs + SET value = ttrss_prefs.def_value + WHERE owner_uid = '".$_SESSION["uid"]."' AND + ttrss_prefs.pref_name = ttrss_user_prefs.pref_name"); + } else { + db_query($link, "DELETE FROM ttrss_user_prefs + WHERE owner_uid = ".$_SESSION["uid"]); + initialize_user_prefs($link, $_SESSION["uid"]); + } + + header("Location: prefs.php"); + + } else if ($subop == "Change theme") { + + $theme = db_escape_string($_POST["theme"]); + + if ($theme == "Default") { + $theme_qpart = 'NULL'; + } else { + $theme_qpart = "'$theme'"; + } + + $result = db_query($link, "SELECT id,theme_path FROM ttrss_themes + WHERE theme_name = '$theme'"); + + if (db_num_rows($result) == 1) { + $theme_id = db_fetch_result($result, 0, "id"); + $theme_path = db_fetch_result($result, 0, "theme_path"); + } else { + $theme_id = "NULL"; + $theme_path = ""; + } + + db_query($link, "UPDATE ttrss_users SET + theme_id = $theme_id WHERE id = " . $_SESSION["uid"]); + + $_SESSION["theme"] = $theme_path; + + header("Location: prefs.php"); + + } else { + + print check_for_update($link); + + if (!SINGLE_USER_MODE) { + + $result = db_query($link, "SELECT id,email FROM ttrss_users + WHERE id = ".$_SESSION["uid"]." AND (pwd_hash = 'password' OR + pwd_hash = 'SHA1:".sha1("password")."')"); + + if (db_num_rows($result) != 0) { + print "
+ Your password is at default value, please change it. +
"; + } + + if ($_SESSION["pwd_change_result"] == "failed") { + print "
+ There was an error while changing your password. +
"; + } + + if ($_SESSION["pwd_change_result"] == "ok") { + print "
+ Password changed successfully. +
"; + } + + $_SESSION["pwd_change_result"] = ""; + + if ($_SESSION["prefs_op_result"] == "reset-to-defaults") { + print "
+ Your configuration was reset to defaults. +
"; + } + + if ($_SESSION["prefs_op_result"] == "save-config") { + print "
+ Your configuration was saved successfully. +
"; + } + + $_SESSION["prefs_op_result"] = ""; + + print "
"; + + print ""; + print ""; + + $result = db_query($link, "SELECT email FROM ttrss_users + WHERE id = ".$_SESSION["uid"]); + + $email = db_fetch_result($result, 0, "email"); + + print ""; + print ""; + + print "

Personal data

E-mail
"; + + print ""; + + print "

"; + + print "

"; + + print "
"; + + print ""; + print ""; + + print ""; + print ""; + + print ""; + + print ""; + + print "

Authentication

Old password
New password
"; + + print ""; + + print "

"; + + print "

"; + + } + + $result = db_query($link, "SELECT + theme_id FROM ttrss_users WHERE id = " . $_SESSION["uid"]); + + $user_theme_id = db_fetch_result($result, 0, "theme_id"); + + $result = db_query($link, "SELECT + id,theme_name FROM ttrss_themes ORDER BY theme_name"); + + if (db_num_rows($result) > 0) { + + print "
"; + print ""; + print ""; + print ""; + print ""; + print "

Themes

Select theme
"; + print ""; + print "

"; + print "

"; + } + + initialize_user_prefs($link, $_SESSION["uid"]); + + $result = db_query($link, "SELECT + ttrss_user_prefs.pref_name,short_desc,help_text,value,type_name, + section_name,def_value + FROM ttrss_prefs,ttrss_prefs_types,ttrss_prefs_sections,ttrss_user_prefs + WHERE type_id = ttrss_prefs_types.id AND + section_id = ttrss_prefs_sections.id AND + ttrss_user_prefs.pref_name = ttrss_prefs.pref_name AND + owner_uid = ".$_SESSION["uid"]." + ORDER BY section_id,short_desc"); + + print "
"; + + $lnum = 0; + + $active_section = ""; + + while ($line = db_fetch_assoc($result)) { + + if ($active_section != $line["section_name"]) { + + if ($active_section != "") { + print ""; + } + + print "

"; + + $active_section = $line["section_name"]; + + print ""; +// print " +// "; + + $lnum = 0; + } + +// $class = ($lnum % 2) ? "even" : "odd"; + + print ""; + + $type_name = $line["type_name"]; + $pref_name = $line["pref_name"]; + $value = $line["value"]; + $def_value = $line["def_value"]; + $help_text = $line["help_text"]; + + print ""; + + print ""; + + print ""; + + $lnum++; + } + + print "

$active_section

OptionValue
" . $line["short_desc"]; + + if ($help_text) print "
$help_text
"; + + print "		"; + + if ($type_name == "bool") { +// print_select($pref_name, $value, array("true", "false")); + + if ($value == "true") { + $value = "Yes"; + } else { + $value = "No"; + } + + print_radio($pref_name, $value, array("Yes", "No")); + + } else { + print ""; + } + + print "
"; + + print ""; + + print "

"; + + print " 

"; + + print "
"; + + } + } +?> diff --git a/modules/pref-users.php b/modules/pref-users.php new file mode 100644 index 00000000..6779bc03 --- /dev/null +++ b/modules/pref-users.php @@ -0,0 +1,325 @@ +User editor
"; + + print "
"; + + print "
"; + + print ""; + print ""; + print ""; + + $result = db_query($link, "SELECT * FROM ttrss_users WHERE id = '$id'"); + + $login = db_fetch_result($result, 0, "login"); + $access_level = db_fetch_result($result, 0, "access_level"); + $email = db_fetch_result($result, 0, "email"); + + print ""; + print ""; + + print ""; + + print ""; + + $sel_disabled = ($id == $_SESSION["uid"]) ? "disabled" : ""; + + print ""; + + print "
Login: +
Change password: +
E-mail: +
Access level:"; + print_select_hash("access_level", $access_level, $access_level_names, + $sel_disabled); + print "
"; + + print "
"; + + print "
+ +
"; + + print "
"; + + return; + } + + if ($subop == "editSave") { + + if (!WEB_DEMO_MODE && $_SESSION["access_level"] >= 10) { + + $login = db_escape_string(trim($_GET["login"])); + $uid = db_escape_string($_GET["id"]); + $access_level = sprintf("%d", $_GET["access_level"]); + $email = db_escape_string(trim($_GET["email"])); + $password = db_escape_string(trim($_GET["password"])); + + if ($password) { + $pwd_hash = 'SHA1:' . sha1($password); + $pass_query_part = "pwd_hash = '$pwd_hash', "; + print "
Changed password for user $login.
"; + } else { + $pass_query_part = ""; + } + + db_query($link, "UPDATE ttrss_users SET $pass_query_part login = '$login', + access_level = '$access_level', email = '$email' WHERE id = '$uid'"); + + } + } else if ($subop == "remove") { + + if (!WEB_DEMO_MODE && $_SESSION["access_level"] >= 10) { + + $ids = split(",", db_escape_string($_GET["ids"])); + + foreach ($ids as $id) { + db_query($link, "DELETE FROM ttrss_users WHERE id = '$id' AND id != " . $_SESSION["uid"]); + + } + } + } else if ($subop == "add") { + + if (!WEB_DEMO_MODE && $_SESSION["access_level"] >= 10) { + + $login = db_escape_string(trim($_GET["login"])); + $tmp_user_pwd = make_password(8); + $pwd_hash = 'SHA1:' . sha1($tmp_user_pwd); + + $result = db_query($link, "SELECT id FROM ttrss_users WHERE + login = '$login'"); + + if (db_num_rows($result) == 0) { + + db_query($link, "INSERT INTO ttrss_users + (login,pwd_hash,access_level,last_login) + VALUES ('$login', '$pwd_hash', 0, NOW())"); + + + $result = db_query($link, "SELECT id FROM ttrss_users WHERE + login = '$login' AND pwd_hash = '$pwd_hash'"); + + if (db_num_rows($result) == 1) { + + $new_uid = db_fetch_result($result, 0, "id"); + + print "
Added user ".$_GET["login"]. + " with password $tmp_user_pwd.
"; + + initialize_user($link, $new_uid); + + } else { + + print "
Could not create user ". + $_GET["login"]."
"; + + } + } else { + print "
User ". + $_GET["login"]." already exists.
"; + } + } + } else if ($subop == "resetPass") { + + if (!WEB_DEMO_MODE && $_SESSION["access_level"] >= 10) { + + $uid = db_escape_string($_GET["id"]); + + $result = db_query($link, "SELECT login,email + FROM ttrss_users WHERE id = '$uid'"); + + $login = db_fetch_result($result, 0, "login"); + $email = db_fetch_result($result, 0, "email"); + $tmp_user_pwd = make_password(8); + $pwd_hash = 'SHA1:' . sha1($tmp_user_pwd); + + db_query($link, "UPDATE ttrss_users SET pwd_hash = '$pwd_hash' + WHERE id = '$uid'"); + + print "
Changed password of + user $login to $tmp_user_pwd."; + + if (MAIL_RESET_PASS && $email) { + print " Notifying $email."; + + mail("$login <$email>", "Password reset notification", + "Hi, $login.\n". + "\n". + "Your password for this TT-RSS installation was reset by". + " an administrator.\n". + "\n". + "Your new password is $tmp_user_pwd, please remember". + " it for later reference.\n". + "\n". + "Sincerely, TT-RSS Mail Daemon.", "From: " . MAIL_FROM); + } + + print "
"; + + } + } + + $sort = db_escape_string($_GET["sort"]); + + if (!$sort || $sort == "undefined") { + $sort = "login"; + } + + print "
+  "; + + print "
"; + + $result = db_query($link, "SELECT + id,login,access_level,email, + SUBSTRING(last_login,1,16) as last_login + FROM + ttrss_users + ORDER BY $sort"); + +// print "
PLACEHOLDER
"; + + print "

"; + + print " + + + + "; + + $lnum = 0; + + while ($line = db_fetch_assoc($result)) { + + $class = ($lnum % 2) ? "even" : "odd"; + + $uid = $line["id"]; + $edit_uid = $_GET["id"]; + + if ($subop == "edit" && $uid != $edit_uid) { + $class .= "Grayed"; + $this_row_id = ""; + } else { + $this_row_id = "id=\"UMRR-$uid\""; + } + + print ""; + + $line["login"] = htmlspecialchars($line["login"]); + + $line["last_login"] = date(get_pref($link, 'SHORT_DATE_FORMAT'), + strtotime($line["last_login"])); + + $access_level_names = array(0 => "User", 10 => "Administrator"); + +// if (!$edit_uid || $subop != "edit") { + + print ""; + + print ""; + + if (!$line["email"]) $line["email"] = " "; + + print ""; + +/* } else if ($uid != $edit_uid) { + + if (!$line["email"]) $line["email"] = " "; + + print ""; + + print ""; + print ""; + print ""; + + } else { + + print ""; + + print ""; + + print ""; + + print ""; + + } */ + + print ""; + + print ""; + + ++$lnum; + } + + print "
+ Select: + All, + None + "; + + print "
 LoginAccess LevelLast login
" . + $line["login"] . "" . + $access_level_names[$line["access_level"]] . "".$line["login"]."".$line["email"]."".$access_level_names[$line["access_level"]]." + "; + print ""; + print "".$line["last_login"]."
"; + + print "

"; + +/* if ($subop == "edit") { + print "Edit user: + + "; + + } else { */ + + print " + Selection: + + + + "; + +// } + } +?> diff --git a/sanity_check.php b/sanity_check.php index f1205352..638ba1e0 100644 --- a/sanity_check.php +++ b/sanity_check.php @@ -72,4 +72,31 @@ doesn't seem to support CURL functions."; exit; } + + if (!defined('SESSION_EXPIRE_TIME')) { + $err_msg = "config: SESSION_EXPIRE_TIME is undefined"; + } + + if (SESSION_EXPIRE_TIME < 60) { + $err_msg = "config: SESSION_EXPIRE_TIME is too low (less than 60)"; + } + + if (SESSION_EXPIRE_TIME < SESSION_COOKIE_LIFETIME_REMEMBER) { + $err_msg = "config: SESSION_EXPIRE_TIME should be greater or equal to" . + "SESSION_COOKIE_LIFETIME_REMEMBER"; + } + + if (defined('DISABLE_SESSIONS')) { + $err_msg = "config: you have enabled DISABLE_SESSIONS. Please disable this option."; + } + + if (DATABASE_BACKED_SESSIONS && SINGLE_USER_MODE) { + $err_msg = "config: DATABASE_BACKED_SESSIONS is incompatible with SINGLE_USER_MODE"; + } + + if ($err_msg) { + print "Fatal Error: $err_msg"; + exit; + } + ?>