"; print ""; if (get_pref($link, 'ENABLE_FEED_ICONS')) { print ""; } print " "; } $lnum = 0; $cur_cat_id = -1; while ($line = db_fetch_assoc($result)) { $feed_id = $line["id"]; $cat_id = $line["cat_id"]; $edit_title = htmlspecialchars(db_unescape_string($line["title"])); $edit_link = htmlspecialchars(db_unescape_string($line["feed_url"])); $edit_cat = htmlspecialchars(db_unescape_string($line["category"])); $hidden = sql_bool_to_bool($line["hidden"]); if (!$edit_cat) $edit_cat = "Uncategorized"; $last_updated = $line["last_updated"]; if (get_pref($link, 'HEADLINES_SMART_DATE')) { $last_updated = smart_date_time(strtotime($last_updated)); } else { $short_date = get_pref($link, 'SHORT_DATE_FORMAT'); $last_updated = date($short_date, strtotime($last_updated)); } if (get_pref($link, 'ENABLE_FEED_CATS') && $cur_cat_id != $cat_id) { $lnum = 0; print ""; print ""; if (get_pref($link, 'ENABLE_FEED_ICONS')) { print ""; } print ""; $cur_cat_id = $cat_id; } $class = ($lnum % 2) ? "even" : "odd"; $this_row_id = "id=\"FEEDR-$feed_id\""; print ""; $icon_file = ICONS_DIR . "/$feed_id.ico"; if (file_exists($icon_file) && filesize($icon_file) > 0) { $feed_icon = "

"; } else { $feed_icon = "

"; } print ""; if (get_pref($link, 'ENABLE_FEED_ICONS')) { print ""; } $edit_title = truncate_string($edit_title, 40); $edit_link = truncate_string($edit_link, 60); if ($hidden) { $edit_title = "$edit_title (Hidden)"; $edit_link = "$edit_link"; $last_updated = "$last_updated"; } $parent_title = $line["parent_title"]; if ($parent_title) { $parent_title = "(linked to $parent_title)"; } print ""; print ""; print ""; print ""; ++$lnum; } print "

Select: All, None "; if (!get_pref($link, 'ENABLE_FEED_CATS')) { print "
		Title	Feed	Updated
$edit_cat
		Title	Feed	Updated
	$feed_icon	" . "$edit_title $parent_title" . "	" . $edit_link . "	" . "$last_updated

"; print "

"; if ($subop == "edit") { print "Edit feed: "; } else { print " Selection: "; if (get_pref($link, 'ENABLE_FEED_CATS')) { print " | "; print_feed_cat_select($link, "sfeed_set_fcat", "", "disabled"); print " "; } print " All feeds: "; } } else { print "

Edit Categories

"; if ($subop == "editCat") { print "Edit category: "; } else { print " Selection: "; } } else { print "

Import OPML

"; print "

"; print ""; print ""; print ""; // print "

Note: filter will only apply to new articles.

Match:	"; print "	"; print_select_hash("filter_type", $filter_type, $filter_types, "class=\"iedit\""); print "
Feed:	"; print_feed_select($link, "feed_id", $feed_id); print "
Action:	"; print "

"; print "

"; print " "; print ""; print "

"; return; } if ($subop == "editSave") { $reg_exp = db_escape_string(trim($_GET["reg_exp"])); $filter_type = db_escape_string(trim($_GET["filter_type"])); $filter_id = db_escape_string($_GET["id"]); $feed_id = db_escape_string($_GET["feed_id"]); $action_id = db_escape_string($_GET["action_id"]); if (!$feed_id) { $feed_id = 'NULL'; } else { $feed_id = sprintf("'%s'", db_escape_string($feed_id)); } $result = db_query($link, "UPDATE ttrss_filters SET reg_exp = '$reg_exp', feed_id = $feed_id, action_id = '$action_id', filter_type = '$filter_type' WHERE id = '$filter_id' AND owner_uid = " . $_SESSION["uid"]); } if ($subop == "remove") { if (!WEB_DEMO_MODE) { $ids = split(",", db_escape_string($_GET["ids"])); foreach ($ids as $id) { db_query($link, "DELETE FROM ttrss_filters WHERE id = '$id' AND owner_uid = ". $_SESSION["uid"]); } } } if ($subop == "add") { if (!WEB_DEMO_MODE) { $regexp = db_escape_string(trim($_GET["reg_exp"])); $filter_type = db_escape_string(trim($_GET["filter_type"])); $feed_id = db_escape_string($_GET["feed_id"]); $action_id = db_escape_string($_GET["action_id"]); if (!$feed_id) { $feed_id = 'NULL'; } else { $feed_id = sprintf("'%s'", db_escape_string($feed_id)); } $result = db_query($link, "INSERT INTO ttrss_filters (reg_exp,filter_type,owner_uid,feed_id, action_id) VALUES ('$regexp', '$filter_type','".$_SESSION["uid"]."', $feed_id, '$action_id')"); } } if ($quiet) return; // print "

PLACEHOLDER

"; $result = db_query($link, "SELECT id,description FROM ttrss_filter_types ORDER BY description"); $filter_types = array(); while ($line = db_fetch_assoc($result)) { //array_push($filter_types, $line["description"]); $filter_types[$line["id"]] = $line["description"]; } print ""; $result = db_query($link, "SELECT ttrss_filters.id AS id,reg_exp, ttrss_filter_types.name AS filter_type_name, ttrss_filter_types.description AS filter_type_descr, feed_id, ttrss_filter_actions.description AS action_description, ttrss_feeds.title AS feed_title FROM ttrss_filter_types,ttrss_filter_actions,ttrss_filters LEFT JOIN ttrss_feeds ON (ttrss_filters.feed_id = ttrss_feeds.id) WHERE filter_type = ttrss_filter_types.id AND ttrss_filter_actions.id = action_id AND ttrss_filters.owner_uid = ".$_SESSION["uid"]." ORDER by reg_exp"); if (db_num_rows($result) != 0) { print "

"; print "

"; print ""; $lnum = 0; while ($line = db_fetch_assoc($result)) { $class = ($lnum % 2) ? "even" : "odd"; $filter_id = $line["id"]; $edit_filter_id = $_GET["id"]; if ($subop == "edit" && $filter_id != $edit_filter_id) { $class .= "Grayed"; $this_row_id = ""; } else { $this_row_id = "id=\"FILRR-$filter_id\""; } print ""; $line["reg_exp"] = htmlspecialchars(db_unescape_string($line["reg_exp"])); if (!$line["feed_title"]) $line["feed_title"] = "All feeds"; $line["feed_title"] = htmlspecialchars(db_unescape_string($line["feed_title"])); print ""; print ""; print ""; print ""; print ""; print ""; ++$lnum; } if ($lnum == 0) { print ""; } print "
Select: All, None "; print "
Filter expression Feed Match Action
" . $line["reg_exp"] . " " . $line["feed_title"] . " " . $line["filter_type_descr"] . " " . $line["action_description"] . "
No filters defined.
"; print "

"; print "

"; print " Selection: "; print "

"; } else { print "

No filters defined.

"; } } // We need to accept raw SQL data in label queries, so not everything is escaped // here, this is by design. If you don't like the whole idea, disable labels // altogether with GLOBAL_ENABLE_LABELS = false if ($op == "pref-labels") { if (!GLOBAL_ENABLE_LABELS) { return; } $subop = $_GET["subop"]; if ($subop == "edit") { $label_id = db_escape_string($_GET["id"]); $result = db_query($link, "SELECT sql_exp,description FROM ttrss_labels WHERE owner_uid = ".$_SESSION["uid"]." AND id = '$label_id' ORDER by description"); $line = db_fetch_assoc($result); $sql_exp = htmlspecialchars(db_unescape_string($line["sql_exp"])); $description = htmlspecialchars(db_unescape_string($line["description"])); print "

Label editor

"; print "

"; print ""; print "

"; print "

"; print " "; print " "; print ""; print "

"; return; } if ($subop == "test") { $expr = db_unescape_string(trim($_GET["expr"])); $descr = db_unescape_string(trim($_GET["descr"])); print "

"; error_reporting(0); $result = db_query($link, "SELECT count(ttrss_entries.id) AS num_matches FROM ttrss_entries,ttrss_user_entries,ttrss_feeds WHERE ($expr) AND ttrss_user_entries.ref_id = ttrss_entries.id AND ttrss_user_entries.feed_id = ttrss_feeds.id AND ttrss_user_entries.owner_uid = " . $_SESSION["uid"], false); error_reporting (DEFAULT_ERROR_LEVEL); if (!$result) { print "

" . db_last_error($link) . "

"; print "

"; return; } $num_matches = db_fetch_result($result, 0, "num_matches");; if ($num_matches > 0) { if ($num_matches > 10) { $showing_msg = ", showing first 10"; } print "

Query returned $num_matches matches$showing_msg:

"; $result = db_query($link, "SELECT ttrss_entries.title, (SELECT title FROM ttrss_feeds WHERE id = feed_id) AS feed_title FROM ttrss_entries,ttrss_user_entries,ttrss_feeds WHERE ($expr) AND ttrss_user_entries.ref_id = ttrss_entries.id AND ttrss_user_entries.feed_id = ttrss_feeds.id AND ttrss_user_entries.owner_uid = " . $_SESSION["uid"] . " ORDER BY date_entered DESC LIMIT 10", false); print "

".$line["title"]. " (".$line["feed_title"].")

"; } else { print "

Query didn't return any matches.

"; } print "

"; return; } if ($subop == "editSave") { $sql_exp = trim($_GET["sql_exp"]); $descr = db_escape_string(trim($_GET["description"])); $label_id = db_escape_string($_GET["id"]); $result = db_query($link, "UPDATE ttrss_labels SET sql_exp = '$sql_exp', description = '$descr' WHERE id = '$label_id'"); } if ($subop == "remove") { if (!WEB_DEMO_MODE) { $ids = split(",", db_escape_string($_GET["ids"])); foreach ($ids as $id) { db_query($link, "DELETE FROM ttrss_labels WHERE id = '$id'"); } } } if ($subop == "add") { if (!WEB_DEMO_MODE) { // no escaping is done here on purpose $exp = trim($_GET["exp"]); $result = db_query($link, "INSERT INTO ttrss_labels (sql_exp,description,owner_uid) VALUES ('$exp', '$exp', '".$_SESSION["uid"]."')"); } } print "

"; print"

"; $result = db_query($link, "SELECT id,sql_exp,description FROM ttrss_labels WHERE owner_uid = ".$_SESSION["uid"]." ORDER by description"); // print "

PLACEHOLDER

"; if (db_num_rows($result) != 0) { print "

"; print "

"; print ""; $lnum = 0; while ($line = db_fetch_assoc($result)) { $class = ($lnum % 2) ? "even" : "odd"; $label_id = $line["id"]; $edit_label_id = $_GET["id"]; if ($subop == "edit" && $label_id != $edit_label_id) { $class .= "Grayed"; $this_row_id = ""; } else { $this_row_id = "id=\"LILRR-$label_id\""; } print ""; $line["sql_exp"] = htmlspecialchars(db_unescape_string($line["sql_exp"])); $line["description"] = htmlspecialchars( db_unescape_string($line["description"])); if (!$line["description"]) $line["description"] = "[No caption]"; print ""; print ""; print ""; print ""; ++$lnum; } if ($lnum == 0) { print ""; } print "
Select: All, None "; print "
Caption SQL Expression (?)
" . $line["description"] . " " . $line["sql_exp"] . "
No labels defined.
"; print "

"; print "

"; print " Selection: "; } else { print "

No labels defined.

"; } } if ($op == "error") { print "

"; $msg = $_GET["msg"]; print $msg; print "

"; } if ($op == "help") { if (!$_GET["noheaders"]) { print " Tiny Tiny RSS : Help "; } $tid = sprintf("%d", $_GET["tid"]); print "

Help

"; print "

"; if (file_exists("help/$tid.php")) { include("help/$tid.php"); } else { print "

Help topic not found.

"; } print "

"; print "

"; if (!$_GET["noheaders"]) { print ""; } } if ($op == "dlg") { $id = $_GET["id"]; $param = $_GET["param"]; if ($id == "quickAddFeed") { print "

Subscribe to feed

"; print "

"; print ""; print "

"; } if ($id == "search") { print "

"; print "

"; print ""; print "

"; print "

"; } if ($id == "quickAddFilter") { $active_feed_id = db_escape_string($_GET["param"]); print "

Create filter

"; print "

"; print ""; print ""; print ""; // print "

Note: filter will only apply to new articles.

Match:	"; print "	"; print_select_hash("filter_type", 1, $filter_types, "class=\"iedit\""); print "
Feed:	"; print_feed_select($link, "feed_id", $active_feed_id); print "
Action:	"; print "

"; print "

"; print " "; print ""; print "

"; // print ""; } print "

"; } // update feeds of all users, may be used anonymously if ($op == "globalUpdateFeeds") { $result = db_query($link, "SELECT id FROM ttrss_users"); while ($line = db_fetch_assoc($result)) { $user_id = $line["id"]; // print ""; update_all_feeds($link, false, $user_id); } print " "; } if ($op == "pref-prefs") { $subop = $_REQUEST["subop"]; if ($subop == "Save configuration") { if (WEB_DEMO_MODE) { header("Location: prefs.php"); return; } $_SESSION["prefs_op_result"] = "save-config"; $_SESSION["prefs_cache"] = false; foreach (array_keys($_POST) as $pref_name) { $pref_name = db_escape_string($pref_name); $value = db_escape_string($_POST[$pref_name]); $result = db_query($link, "SELECT type_name FROM ttrss_prefs,ttrss_prefs_types WHERE pref_name = '$pref_name' AND type_id = ttrss_prefs_types.id"); if (db_num_rows($result) > 0) { $type_name = db_fetch_result($result, 0, "type_name"); // print "$pref_name : $type_name : $value
"; if ($type_name == "bool") { if ($value == "1") { $value = "true"; } else { $value = "false"; } } else if ($type_name == "integer") { $value = sprintf("%d", $value); } // print "$pref_name : $type_name : $value
"; db_query($link, "UPDATE ttrss_user_prefs SET value = '$value' WHERE pref_name = '$pref_name' AND owner_uid = ".$_SESSION["uid"]); } header("Location: prefs.php"); } } else if ($subop == "getHelp") { $pref_name = db_escape_string($_GET["pn"]); $result = db_query($link, "SELECT help_text FROM ttrss_prefs WHERE pref_name = '$pref_name'"); if (db_num_rows($result) > 0) { $help_text = db_fetch_result($result, 0, "help_text"); print $help_text; } else { print "Unknown option: $pref_name"; } } else if ($subop == "Change e-mail") { if (WEB_DEMO_MODE) { header("Location: prefs.php"); return; } $email = db_escape_string($_GET["email"]); $active_uid = $_SESSION["uid"]; if ($email) { db_query($link, "UPDATE ttrss_users SET email = '$email' WHERE id = '$active_uid'"); } header("Location: prefs.php"); } else if ($subop == "Change password") { if (WEB_DEMO_MODE) { header("Location: prefs.php"); return; } $old_pw = $_POST["OLD_PASSWORD"]; $new_pw = $_POST["OLD_PASSWORD"]; $old_pw_hash = 'SHA1:' . sha1($_POST["OLD_PASSWORD"]); $new_pw_hash = 'SHA1:' . sha1($_POST["NEW_PASSWORD"]); $active_uid = $_SESSION["uid"]; if ($old_pw && $new_pw) { $login = db_escape_string($_SERVER['PHP_AUTH_USER']); $result = db_query($link, "SELECT id FROM ttrss_users WHERE id = '$active_uid' AND (pwd_hash = '$old_pw' OR pwd_hash = '$old_pw_hash')"); if (db_num_rows($result) == 1) { db_query($link, "UPDATE ttrss_users SET pwd_hash = '$new_pw_hash' WHERE id = '$active_uid'"); $_SESSION["pwd_change_result"] = "ok"; } else { $_SESSION["pwd_change_result"] = "failed"; } } header("Location: prefs.php"); } else if ($subop == "Reset to defaults") { if (WEB_DEMO_MODE) { header("Location: prefs.php"); return; } $_SESSION["prefs_op_result"] = "reset-to-defaults"; if (DB_TYPE == "pgsql") { db_query($link,"UPDATE ttrss_user_prefs SET value = ttrss_prefs.def_value WHERE owner_uid = '".$_SESSION["uid"]."' AND ttrss_prefs.pref_name = ttrss_user_prefs.pref_name"); } else { db_query($link, "DELETE FROM ttrss_user_prefs WHERE owner_uid = ".$_SESSION["uid"]); initialize_user_prefs($link, $_SESSION["uid"]); } header("Location: prefs.php"); } else if ($subop == "Change theme") { $theme = db_escape_string($_POST["theme"]); if ($theme == "Default") { $theme_qpart = 'NULL'; } else { $theme_qpart = "'$theme'"; } $result = db_query($link, "SELECT id,theme_path FROM ttrss_themes WHERE theme_name = '$theme'"); if (db_num_rows($result) == 1) { $theme_id = db_fetch_result($result, 0, "id"); $theme_path = db_fetch_result($result, 0, "theme_path"); } else { $theme_id = "NULL"; $theme_path = ""; } db_query($link, "UPDATE ttrss_users SET theme_id = $theme_id WHERE id = " . $_SESSION["uid"]); $_SESSION["theme"] = $theme_path; header("Location: prefs.php"); } else { if (!SINGLE_USER_MODE) { $result = db_query($link, "SELECT id,email FROM ttrss_users WHERE id = ".$_SESSION["uid"]." AND (pwd_hash = 'password' OR pwd_hash = 'SHA1:".sha1("password")."')"); if (db_num_rows($result) != 0) { print "

Your password is at default value, please change it.

"; } if ($_SESSION["pwd_change_result"] == "failed") { print "

There was an error while changing your password.

"; } if ($_SESSION["pwd_change_result"] == "ok") { print "

Password changed successfully.

"; } $_SESSION["pwd_change_result"] = ""; if ($_SESSION["prefs_op_result"] == "reset-to-defaults") { print "

Your configuration was reset to defaults.

"; } if ($_SESSION["prefs_op_result"] == "save-config") { print "

Your configuration was saved successfully.

"; } $_SESSION["prefs_op_result"] = ""; print ""; print ""; } $result = db_query($link, "SELECT theme_id FROM ttrss_users WHERE id = " . $_SESSION["uid"]); $user_theme_id = db_fetch_result($result, 0, "theme_id"); $result = db_query($link, "SELECT id,theme_name FROM ttrss_themes ORDER BY theme_name"); if (db_num_rows($result) > 0) { print ""; } $result = db_query($link, "SELECT ttrss_user_prefs.pref_name,short_desc,help_text,value,type_name, section_name,def_value FROM ttrss_prefs,ttrss_prefs_types,ttrss_prefs_sections,ttrss_user_prefs WHERE type_id = ttrss_prefs_types.id AND section_id = ttrss_prefs_sections.id AND ttrss_user_prefs.pref_name = ttrss_prefs.pref_name AND owner_uid = ".$_SESSION["uid"]." ORDER BY section_id,short_desc"); print "

"; $lnum = 0; $active_section = ""; while ($line = db_fetch_assoc($result)) { if ($active_section != $line["section_name"]) { if ($active_section != "") { print ""; } print "

"; $active_section = $line["section_name"]; print ""; // print " // "; $lnum = 0; } // $class = ($lnum % 2) ? "even" : "odd"; print ""; $type_name = $line["type_name"]; $pref_name = $line["pref_name"]; $value = $line["value"]; $def_value = $line["def_value"]; $help_text = $line["help_text"]; print ""; print ""; print ""; $lnum++; } print "
$active_section
Option Value
" . $line["short_desc"]; if ($help_text) print "
$help_text
"; print " "; if ($type_name == "bool") { // print_select($pref_name, $value, array("true", "false")); if ($value == "true") { $value = "Yes"; } else { $value = "No"; } print_radio($pref_name, $value, array("Yes", "No")); } else { print ""; } print "
"; print ""; print "

"; print "

"; } } if ($op == "pref-users") { $subop = $_GET["subop"]; if ($subop == "edit") { $id = db_escape_string($_GET["id"]); print "

User editor

"; print "

"; print ""; print "

"; print "

"; return; } if ($subop == "editSave") { if (!WEB_DEMO_MODE && $_SESSION["access_level"] >= 10) { $login = db_escape_string(trim($_GET["login"])); $uid = db_escape_string($_GET["id"]); $access_level = sprintf("%d", $_GET["access_level"]); $email = db_escape_string(trim($_GET["email"])); $password = db_escape_string(trim($_GET["password"])); if ($password) { $pwd_hash = 'SHA1:' . sha1($password); $pass_query_part = "pwd_hash = '$pwd_hash', "; print "

Changed password for user $login.

"; } else { $pass_query_part = ""; } db_query($link, "UPDATE ttrss_users SET $pass_query_part login = '$login', access_level = '$access_level', email = '$email' WHERE id = '$uid'"); } } else if ($subop == "remove") { if (!WEB_DEMO_MODE && $_SESSION["access_level"] >= 10) { $ids = split(",", db_escape_string($_GET["ids"])); foreach ($ids as $id) { db_query($link, "DELETE FROM ttrss_users WHERE id = '$id' AND id != " . $_SESSION["uid"]); } } } else if ($subop == "add") { if (!WEB_DEMO_MODE && $_SESSION["access_level"] >= 10) { $login = db_escape_string(trim($_GET["login"])); $tmp_user_pwd = make_password(8); $pwd_hash = 'SHA1:' . sha1($tmp_user_pwd); $result = db_query($link, "SELECT id FROM ttrss_users WHERE login = '$login'"); if (db_num_rows($result) == 0) { db_query($link, "INSERT INTO ttrss_users (login,pwd_hash,access_level,last_login) VALUES ('$login', '$pwd_hash', 0, NOW())"); $result = db_query($link, "SELECT id FROM ttrss_users WHERE login = '$login' AND pwd_hash = '$pwd_hash'"); if (db_num_rows($result) == 1) { $new_uid = db_fetch_result($result, 0, "id"); print "

Added user ".$_GET["login"]. " with password $tmp_user_pwd.

"; initialize_user($link, $new_uid); } else { print "

Could not create user ". $_GET["login"]."

"; } } else { print "

User ". $_GET["login"]." already exists.

"; } } } else if ($subop == "resetPass") { if (!WEB_DEMO_MODE && $_SESSION["access_level"] >= 10) { $uid = db_escape_string($_GET["id"]); $result = db_query($link, "SELECT login,email FROM ttrss_users WHERE id = '$uid'"); $login = db_fetch_result($result, 0, "login"); $email = db_fetch_result($result, 0, "email"); $tmp_user_pwd = make_password(8); $pwd_hash = 'SHA1:' . sha1($tmp_user_pwd); db_query($link, "UPDATE ttrss_users SET pwd_hash = '$pwd_hash' WHERE id = '$uid'"); print "

Changed password of user $login to $tmp_user_pwd."; if (MAIL_RESET_PASS && $email) { print " Notifying $email."; mail("$login <$email>", "Password reset notification", "Hi, $login.\n". "\n". "Your password for this TT-RSS installation was reset by". " an administrator.\n". "\n". "Your new password is $tmp_user_pwd, please remember". " it for later reference.\n". "\n". "Sincerely, TT-RSS Mail Daemon.", "From: " . MAIL_FROM); } print "

"; } } print "

"; print"

"; $result = db_query($link, "SELECT id,login,access_level,email, SUBSTRING(last_login,1,16) as last_login FROM ttrss_users ORDER by login"); // print "

PLACEHOLDER

"; print "

"; print ""; $lnum = 0; while ($line = db_fetch_assoc($result)) { $class = ($lnum % 2) ? "even" : "odd"; $uid = $line["id"]; $edit_uid = $_GET["id"]; if ($subop == "edit" && $uid != $edit_uid) { $class .= "Grayed"; $this_row_id = ""; } else { $this_row_id = "id=\"UMRR-$uid\""; } print ""; $line["login"] = htmlspecialchars($line["login"]); $line["last_login"] = date(get_pref($link, 'SHORT_DATE_FORMAT'), strtotime($line["last_login"])); $access_level_names = array(0 => "User", 10 => "Administrator"); // if (!$edit_uid || $subop != "edit") { print ""; print ""; if (!$line["email"]) $line["email"] = " "; print ""; /* } else if ($uid != $edit_uid) { if (!$line["email"]) $line["email"] = " "; print ""; print ""; print ""; print ""; } else { print ""; print ""; print ""; print ""; } */ print ""; print ""; ++$lnum; } print "
Select: All, None "; print "
Login Access Level Last login
" . $line["login"] . " " . $access_level_names[$line["access_level"]] . " ".$line["login"]." ".$line["email"]." ".$access_level_names[$line["access_level"]]." "; print ""; print " ".$line["last_login"]."
"; print "

"; /* if ($subop == "edit") { print "Edit user: "; } else { */ print " Selection: "; // } } if ($op == "user-details") { if (WEB_DEMO_MODE || $_SESSION["access_level"] < 10) { return; } /* print " Tiny Tiny RSS : User Details "; */ $uid = sprintf("%d", $_GET["id"]); print "

User details

"; print "

"; $result = db_query($link, "SELECT login, SUBSTRING(last_login,1,16) AS last_login, access_level, (SELECT COUNT(int_id) FROM ttrss_user_entries WHERE owner_uid = id) AS stored_articles FROM ttrss_users WHERE id = '$uid'"); if (db_num_rows($result) == 0) { print "

User not found

"; return; } # print "

User Details

"; $login = db_fetch_result($result, 0, "login"); # print "

$login

"; print ""; $last_login = date(get_pref($link, 'LONG_DATE_FORMAT'), strtotime(db_fetch_result($result, 0, "last_login"))); $access_level = db_fetch_result($result, 0, "access_level"); $stored_articles = db_fetch_result($result, 0, "stored_articles"); # print ""; # print ""; print ""; print ""; $result = db_query($link, "SELECT COUNT(id) as num_feeds FROM ttrss_feeds WHERE owner_uid = '$uid'"); $num_feeds = db_fetch_result($result, 0, "num_feeds"); print ""; /* $result = db_query($link, "SELECT SUM(LENGTH(content)+LENGTH(title)+LENGTH(link)+LENGTH(guid)) AS db_size FROM ttrss_user_entries,ttrss_entries WHERE owner_uid = '$uid' AND ref_id = id"); $db_size = round(db_fetch_result($result, 0, "db_size") / 1024); print ""; */ print "

Username	$login
Access level	$access_level
Last logged in	$last_login
Stored articles	$stored_articles
Subscribed feeds count	$num_feeds
Approx. used DB size	$db_size KBytes

"; print "

Subscribed feeds

"; $result = db_query($link, "SELECT id,title,site_url FROM ttrss_feeds WHERE owner_uid = '$uid' ORDER BY title"); print "

$feed_icon ".$line["title"]."
...

"; print "

"; // print ""; } if ($op == "pref-feed-browser") { if (!ENABLE_FEED_BROWSER) { print "Feed browser is administratively disabled."; return; } $subop = $_REQUEST["subop"]; if ($subop == "details") { $id = db_escape_string($_GET["id"]); print "

"; print "Feed information:"; print "

"; $result = db_query($link, "SELECT feed_url,site_url, SUBSTRING(last_updated,1,19) AS last_updated FROM ttrss_feeds WHERE id = '$id'"); $feed_url = db_fetch_result($result, 0, "feed_url"); $site_url = db_fetch_result($result, 0, "site_url"); $last_updated = db_fetch_result($result, 0, "last_updated"); if (get_pref($link, 'HEADLINES_SMART_DATE')) { $last_updated = smart_date_time(strtotime($last_updated)); } else { $short_date = get_pref($link, 'SHORT_DATE_FORMAT'); $last_updated = date($short_date, strtotime($last_updated)); } print "Site: $site_url ". "(feed), ". "Last updated: $last_updated"; print "

"; $result = db_query($link, "SELECT ttrss_entries.title, content, substring(date_entered,1,19) as date_entered, substring(updated,1,19) as updated FROM ttrss_entries,ttrss_user_entries WHERE ttrss_entries.id = ref_id AND feed_id = '$id' ORDER BY updated DESC LIMIT 5"); if (db_num_rows($result) > 0) { print "Last headlines:
"; print "

"; print "

" . $line["title"] . " ($entry_dt)

"; } print "

"; return; } print "

This panel shows feeds subscribed by other users of this system, just in case you are interested in some of them too.

"; $limit = db_escape_string($_GET["limit"]); if (!$limit) $limit = 25; $owner_uid = $_SESSION["uid"]; $result = db_query($link, "SELECT feed_url,COUNT(id) AS subscribers FROM ttrss_feeds WHERE (SELECT COUNT(id) = 0 FROM ttrss_feeds AS tf WHERE tf.feed_url = ttrss_feeds.feed_url AND owner_uid = '$owner_uid') GROUP BY feed_url ORDER BY subscribers DESC LIMIT $limit"); print "

Top

"; print "

Selection: "; print "

$check_box". "$feed_icon "; print "" . $details["title"] ." " . "($subscribers)"; print "
"; print "
"; print "
No feeds found to subscribe.

"; print "

"; } if ($op == "rss") { $feed = db_escape_string($_GET["id"]); $user = db_escape_string($_GET["user"]); $pass = db_escape_string($_GET["pass"]); $is_cat = $_GET["is_cat"] != false; $search = db_escape_string($_GET["q"]); $match_on = db_escape_string($_GET["m"]); $search_mode = db_escape_string($_GET["smode"]); if (!$_SESSION["uid"] && $user && $pass) { authenticate_user($link, $user, $pass); } if ($_SESSION["uid"] || http_authenticate_user($link)) { generate_syndicated_feed($link, $feed, $is_cat, $search, $search_mode, $match_on); } } function check_configuration_variables() { if (!defined('SESSION_EXPIRE_TIME')) { return "config: SESSION_EXPIRE_TIME is undefined"; } if (SESSION_EXPIRE_TIME < 60) { return "config: SESSION_EXPIRE_TIME is too low (less than 60)"; } if (SESSION_EXPIRE_TIME < SESSION_COOKIE_LIFETIME_REMEMBER) { return "config: SESSION_EXPIRE_TIME should be greater or equal to" . "SESSION_COOKIE_LIFETIME_REMEMBER"; } if (defined('DISABLE_SESSIONS')) { return "config: you have enabled DISABLE_SESSIONS. Please disable this option."; } if (DATABASE_BACKED_SESSIONS && SINGLE_USER_MODE) { return "config: DATABASE_BACKED_SESSIONS is incompatible with SINGLE_USER_MODE"; } return false; } if ($op == "labelFromSearch") { $search = db_escape_string($_GET["search"]); $search_mode = db_escape_string($_GET["smode"]); $match_on = db_escape_string($_GET["match"]); $is_cat = db_escape_string($_GET["is_cat"]); $title = db_escape_string($_GET["title"]); $feed = sprintf("%d", $_GET["feed"]); $label_qparts = array(); $search_expr = getSearchSql($search, $match_on); if ($is_cat) { if ($feed != 0) { $search_expr .= " AND ttrss_feeds.cat_id = $feed "; } else { $search_expr .= " AND ttrss_feeds.cat_id IS NULL "; } } else { if ($search_mode == "all_feeds") { // NOOP } else if ($search_mode == "this_cat") { $tmp_result = db_query($link, "SELECT cat_id FROM ttrss_feeds WHERE id = '$feed'"); $cat_id = db_fetch_result($tmp_result, 0, "cat_id"); if ($cat_id > 0) { $search_expr .= " AND ttrss_feeds.cat_id = $cat_id "; } else { $search_expr .= " AND ttrss_feeds.cat_id IS NULL "; } } else { $search_expr .= " AND ttrss_feeds.id = $feed "; } } $search_expr = db_escape_string($search_expr); print $search_expr; if ($title) { $result = db_query($link, "INSERT INTO ttrss_labels (sql_exp,description,owner_uid) VALUES ('$search_expr', '$title', '".$_SESSION["uid"]."')"); } } db_close($link); ?>

" . $line["title"] . "$entry_author	$parsed_updated
$entry_comments	$tags_str

Title:
Feed URL:
Category:	"; print_feed_cat_select($link, "cat_id", $cat_id, "class=\"iedit\""); print "
Update Interval:	"; print_select_hash("update_interval", $update_interval, $update_intervals, "class=\"iedit\""); print "
Link to:	"; $tmp_result = db_query($link, "SELECT COUNT(id) AS count FROM ttrss_feeds WHERE parent_feed = '$feed_id'"); $linked_count = db_fetch_result($tmp_result, 0, "count"); $parent_feed = db_fetch_result($result, 0, "parent_feed"); if ($linked_count > 0) { $disabled = "disabled"; } print ""; print "
Article purging:	"; print_select_hash("purge_interval", $purge_interval, $purge_intervals, "class=\"iedit\""); print "
Login:
Password:
Options:	Hide from feed browser"; $rtl_content = sql_bool_to_bool(db_fetch_result($result, 0, "rtl_content")); if ($rtl_content) { $checked = "checked"; } else { $checked = ""; } print " Right-to-left content"; $hidden = sql_bool_to_bool(db_fetch_result($result, 0, "hidden")); if ($hidden) { $checked = "checked"; } else { $checked = ""; } print " Hide from feedlist"; print "

Search:	"; print "
Where:	"; print "
Match on:	"; $search_fields = array( "title" => "Title", "content" => "Content", "both" => "Title or content"); print_select_hash("match_on", 3, $search_fields); print "

Login:
Change password:
E-mail:
Access level:	"; print_select_hash("access_level", $access_level, $access_level_names, $sel_disabled); print "

Edit Feeds

Edit Categories

Import OPML

Personal data

Authentication

Themes

$active_section

User not found

User Details

$login

Subscribed feeds

Select: All, None "; print "
	Title
	" . $edit_title . "	$edit_title	"; print ""; print ""; print ""; print "

Select: All, None "; print "
	Filter expression	Feed	Match	Action
	" . $line["reg_exp"] . "	" . $line["feed_title"] . "	" . $line["filter_type_descr"] . "	" . $line["action_description"] . "
No filters defined.

Caption:	"; print "
SQL Expression: "; print "$sql_exp"; print "

Select: All, None "; print "
	Caption	SQL Expression (?)
	" . $line["description"] . "	" . $line["sql_exp"] . "
No labels defined.

$active_section
Option	Value
" . $line["short_desc"]; if ($help_text) print " $help_text "; print "	"; if ($type_name == "bool") { // print_select($pref_name, $value, array("true", "false")); if ($value == "true") { $value = "Yes"; } else { $value = "No"; } print_radio($pref_name, $value, array("Yes", "No")); } else { print ""; } print "

Select: All, None "; print "
	Login	Access Level	Last login
	" . $line["login"] . "	" . $access_level_names[$line["access_level"]] . "		".$line["login"]."	".$line["email"]."	".$access_level_names[$line["access_level"]]."	"; print ""; print "	".$line["last_login"]."

Themes
Select theme