path: root/opml.php

<?php
	set_include_path(get_include_path() . PATH_SEPARATOR .
		dirname(__FILE__) . "/include");

	require_once "functions.php";
	require_once "sessions.php";
	require_once "sanity_check.php";
	require_once "config.php";
	require_once "db.php";
	require_once "db-prefs.php";

	$link = db_connect(DB_HOST, DB_USER, DB_PASS, DB_NAME);

	if (!init_connection($link)) return;

	function opml_import_domdoc($link, $owner_uid) {

		if (is_file($_FILES['opml_file']['tmp_name'])) {
			$doc = DOMDocument::load($_FILES['opml_file']['tmp_name']);

			$result = db_query($link, "SELECT id FROM
				ttrss_feed_categories WHERE title = 'Imported feeds' AND
				owner_uid = '$owner_uid' LIMIT 1");

			if (db_num_rows($result) == 1) {
				$default_cat_id = db_fetch_result($result, 0, "id");
			} else {
				$default_cat_id = 0;
			}

			// Keep imported categories in order, after any pre-existing ones.
			$new_cat_order_id = 0;
			// Get the highest category order_id in use.
			$result = db_query($link, "SELECT order_id FROM
				ttrss_feed_categories WHERE owner_uid = '$owner_uid'
				ORDER BY order_id DESC LIMIT 1");
			if (db_num_rows($result) == 1) {
				$new_cat_order_id = db_fetch_result($result, 0, "order_id");
			}

			if ($doc) {
				$body = $doc->getElementsByTagName('body');

				$xpath = new DOMXpath($doc);
				$query = "/opml/body//outline";

				$outlines = $xpath->query($query);

				foreach ($outlines as $outline) {

					$attributes = $outline->attributes;

					$feed_title = db_escape_string($attributes->getNamedItem('text')->nodeValue);
					if (!$feed_title) $feed_title = db_escape_string($attributes->getNamedItem('title')->nodeValue);

					$cat_title = db_escape_string($attributes->getNamedItem('title')->nodeValue);
					if (!$cat_title) $cat_title = db_escape_string($attributes->getNamedItem('text')->nodeValue);

					$feed_url = db_escape_string($attributes->getNamedItem('xmlUrl')->nodeValue);
					if (!$feed_url) $feed_url = db_escape_string($attributes->getNamedItem('xmlURL')->nodeValue);

					$site_url = db_escape_string($attributes->getNamedItem('htmlUrl')->nodeValue);

					$pref_name = db_escape_string($attributes->getNamedItem('pref-name')->nodeValue);
					$label_name = db_escape_string($attributes->getNamedItem('label-name')->nodeValue);
					$filter_name = db_escape_string($attributes->getNamedItem('filter-name')->nodeValue);

					if ($cat_title && !$feed_url) {

						if ($cat_title != "tt-rss-prefs" && $cat_title != 'tt-rss-labels' && $cat_title != 'tt-rss-filters') {

							db_query($link, "BEGIN");

							$result = db_query($link, "SELECT id FROM
									ttrss_feed_categories WHERE title = '$cat_title' AND
									owner_uid = '$owner_uid' LIMIT 1");

							if (db_num_rows($result) == 0) {
								$cat_order_id = ++$new_cat_order_id;

								printf(__("<li>Adding category <b>%s</b>.</li>"), $cat_title);

								db_query($link, "INSERT INTO ttrss_feed_categories
										(title,owner_uid,order_id)
										VALUES ('$cat_title', '$owner_uid', '$cat_order_id')");
							}

							db_query($link, "COMMIT");
						}
					}

					//						print "$active_category : $feed_title : $feed_url<br>";

					if ($pref_name) {
						$parent_node = $outline->parentNode;

						if ($parent_node && $parent_node->nodeName == "outline") {
							$cat_check = $parent_node->attributes->getNamedItem('title')->nodeValue;
							if ($cat_check == "tt-rss-prefs") {
								$pref_value = db_escape_string($outline->attributes->getNamedItem('value')->nodeValue);

								printf("<li>".
									__("Setting preference key %s to %s")."</li>",
										$pref_name, $pref_value);

								set_pref($link, $pref_name, $pref_value);

							}
						}
					}

					if ($label_name) {
						$parent_node = $outline->parentNode;

						if ($parent_node && $parent_node->nodeName == "outline") {
							$cat_check = $parent_node->attributes->getNamedItem('title')->nodeValue;
							if ($cat_check == "tt-rss-labels") {

								$fg_color = db_escape_string($attributes->getNamedItem('label-fg-color')->nodeValue);
								$bg_color = db_escape_string($attributes->getNamedItem('label-bg-color')->nodeValue);

								if (!label_find_id($link, $label_name, $_SESSION['uid'])) {
									printf("<li>".__("Adding label %s")."</li>", htmlspecialchars($label_name));
									label_create($link, $label_name, $fg_color, $bg_color);
								} else {
									printf("<li>".__("Duplicate label: %s")."</li>",
										htmlspecialchars($label_name));
								}
							}
						}
					}

					if ($filter_name) {
						$parent_node = $outline->parentNode;

						if ($parent_node && $parent_node->nodeName == "outline") {
							$cat_check = $parent_node->attributes->getNamedItem('title')->nodeValue;
							if ($cat_check == "tt-rss-filters") {
								$filter = json_decode($outline->nodeValue, true);

								if ($filter) {
									$reg_exp = db_escape_string($filter['reg_exp']);
									$filter_type = (int)$filter['filter_type'];
									$action_id = (int)$filter['action_id'];

									$result = db_query($link, "SELECT id FROM ttrss_filters WHERE
										reg_exp = '$reg_exp' AND
										filter_type = '$filter_type' AND
										action_id = '$action_id' AND
										owner_uid = " .$_SESSION['uid']);

									if (db_num_rows($result) == 0) {
										$enabled = bool_to_sql_bool($filter['enabled']);
										$action_param = db_escape_string($filter['action_param']);
										$inverse = bool_to_sql_bool($filter['inverse']);
										$filter_param = db_escape_string($filter['filter_param']);
										$cat_filter = bool_to_sql_bool($filter['cat_filter']);

										$feed_url = db_escape_string($filter['feed_url']);
										$cat_title = db_escape_string($filter['cat_title']);

										$result = db_query($link, "SELECT id FROM ttrss_feeds WHERE
											feed_url = '$feed_url' AND owner_uid = ".$_SESSION['uid']);

										if (db_num_rows($result) != 0) {
											$feed_id = db_fetch_result($result, 0, "id");
										} else {
											$feed_id = "NULL";
										}

										$result = db_query($link, "SELECT id FROM ttrss_feed_categories WHERE
											title = '$cat_title' AND  owner_uid = ".$_SESSION['uid']);

										if (db_num_rows($result) != 0) {
											$cat_id = db_fetch_result($result, 0, "id");
										} else {
											$cat_id = "NULL";
										}

										printf("<li>".__("Adding filter %s")."</li>", htmlspecialchars($reg_exp));

										$query = "INSERT INTO ttrss_filters (filter_type, action_id,
												enabled, inverse, action_param, filter_param,
												cat_filter, feed_id,
												cat_id, reg_exp,
												owner_uid)
											VALUES ($filter_type, $action_id,
												$enabled, $inverse, '$action_param', '$filter_param',
												$cat_filter, $feed_id,
												$cat_id, '$reg_exp', ".
												$_SESSION['uid'].")";

										db_query($link, $query);

									} else {
										printf("<li>".__("Duplicate filter %s")."</li>", htmlspecialchars($reg_exp));

									}
								}
							}
						}
					}

					if (!$feed_title || !$feed_url) continue;

					db_query($link, "BEGIN");

					$cat_id = null;

					$parent_node = $outline->parentNode;

					if ($parent_node && $parent_node->nodeName == "outline") {
						$element_category = $parent_node->attributes->getNamedItem('title')->nodeValue;
						if (!$element_category) $element_category = $parent_node->attributes->getNamedItem('text')->nodeValue;

					} else {
						$element_category = '';
					}

					if ($element_category) {

						$element_category = db_escape_string($element_category);

						$result = db_query($link, "SELECT id FROM
								ttrss_feed_categories WHERE title = '$element_category' AND
								owner_uid = '$owner_uid' LIMIT 1");

							if (db_num_rows($result) == 1) {
								$cat_id = db_fetch_result($result, 0, "id");
							}
					}

					$result = db_query($link, "SELECT id FROM ttrss_feeds WHERE
							feed_url = '$feed_url'
							AND owner_uid = '$owner_uid'");

					print "<li><a target='_blank' href='$site_url'><b>$feed_title</b></a></b>
						(<a target='_blank' href=\"$feed_url\">rss</a>)&nbsp;";

					if (db_num_rows($result) > 0) {
						print __('is already imported.');
					} else {
						// Get max order_id already in use. Increment.
						$new_feed_order_id = 0;	// these start at zero
						$cat_id_qpart = $cat_id ? "cat_id = '$cat_id'" : "cat_id = '$default_cat_id'";
						$result = db_query($link, "SELECT order_id FROM
							ttrss_feeds WHERE owner_uid = '$owner_uid' AND $cat_id_qpart
							ORDER BY order_id DESC LIMIT 1");
						if (db_num_rows($result) == 1) {
							$new_feed_order_id = db_fetch_result($result, 0, "order_id");
							$new_feed_order_id++;
						}

						if ($cat_id) {
							$add_query = "INSERT INTO ttrss_feeds
								(title, feed_url, owner_uid, cat_id, site_url, order_id) VALUES
								('$feed_title', '$feed_url', '$owner_uid',
								 '$cat_id', '$site_url', '$new_feed_order_id')";

						} else {
							$add_query = "INSERT INTO ttrss_feeds
								(title, feed_url, owner_uid, cat_id, site_url, order_id) VALUES
								('$feed_title', '$feed_url', '$owner_uid', '$default_cat_id',
									'$site_url', '$new_feed_order_id')";

						}

						//print $add_query;
						db_query($link, $add_query);

						print __('OK');
					}

					print "</li>";

					db_query($link, "COMMIT");
				}

			} else {
				print_error(__('Error while parsing document.'));
			}

		} else {
			print_error(__('Error: please upload OPML file.'));
		}


	}

	function opml_export($link, $name, $owner_uid, $hide_private_feeds=false, $include_settings=true) {
		if (!$_REQUEST["debug"]) {
			header("Content-type: application/xml+opml");
			header("Content-Disposition: attachment; filename=" . $name );
		} else {
			header("Content-type: text/xml");
		}

		$out = "<?xml version=\"1.0\" encoding=\"utf-8\"?".">";

		$out .= "<opml version=\"1.0\">";
		$out .= "<head>
			<dateCreated>" . date("r", time()) . "</dateCreated>
			<title>Tiny Tiny RSS Feed Export</title>
		</head>";
		$out .= "<body>";

		$cat_mode = false;

		$select = "SELECT * ";
		$where = "WHERE owner_uid = '$owner_uid'";
		$orderby = "ORDER BY order_id, title";
		if ($hide_private_feeds){
			$where = "WHERE owner_uid = '$owner_uid' AND private IS false AND
				auth_login = '' AND auth_pass = ''";
		}



		if (get_pref($link, 'ENABLE_FEED_CATS', $owner_uid) == true) {
			$cat_mode = true;
			$select = "SELECT
				title, feed_url, site_url, order_id,
				(SELECT order_id FROM ttrss_feed_categories WHERE id = cat_id) AS cat_order_id,
				(SELECT title FROM ttrss_feed_categories WHERE id = cat_id) as cat_title";
			$orderby = "ORDER BY cat_order_id, cat_title, order_id, title";

		}
		else{
			$cat_feed = get_pref($link, 'ENABLE_FEED_CATS');
			$out .= "<!-- feeding cats is not enabled -->";
			$out .= "<!-- $cat_feed -->";

		}


		$result = db_query($link, $select." FROM ttrss_feeds ".$where." ".$orderby);

		$old_cat_title = "";

		while ($line = db_fetch_assoc($result)) {
			$title = htmlspecialchars($line["title"]);
			$url = htmlspecialchars($line["feed_url"]);
			$site_url = htmlspecialchars($line["site_url"]);

			if ($cat_mode) {
				$cat_title = htmlspecialchars($line["cat_title"]);

				if ($old_cat_title != $cat_title) {
					if ($old_cat_title) {
						$out .= "</outline>\n";
					}

					if ($cat_title) {
						$out .= "<outline title=\"$cat_title\" text=\"$cat_title\" >\n";
					}

					$old_cat_title = $cat_title;
				}
			}

			if ($site_url) {
				$html_url_qpart = "htmlUrl=\"$site_url\"";
			} else {
				$html_url_qpart = "";
			}

			$out .= "<outline text=\"$title\" xmlUrl=\"$url\" $html_url_qpart/>\n";
		}

		if ($cat_mode && $old_cat_title) {
			$out .= "</outline>\n";
		}

		# export tt-rss settings

		if ($include_settings) {
			$out .= "<outline title=\"tt-rss-prefs\" schema-version=\"".SCHEMA_VERSION."\">";

			$result = db_query($link, "SELECT pref_name, value FROM ttrss_user_prefs WHERE
			   profile IS NULL AND owner_uid = " . $_SESSION["uid"] . " ORDER BY pref_name");

			while ($line = db_fetch_assoc($result)) {

				$name = $line["pref_name"];
				$value = htmlspecialchars($line["value"]);

				$out .= "<outline pref-name=\"$name\" value=\"$value\">";

				$out .= "</outline>";

			}

			$out .= "</outline>";

			$out .= "<outline title=\"tt-rss-labels\" schema-version=\"".SCHEMA_VERSION."\">";

			$result = db_query($link, "SELECT * FROM ttrss_labels2 WHERE
				owner_uid = " . $_SESSION['uid']);

			while ($line = db_fetch_assoc($result)) {
				$name = htmlspecialchars($line['caption']);
				$fg_color = htmlspecialchars($line['fg_color']);
				$bg_color = htmlspecialchars($line['bg_color']);

				$out .= "<outline label-name=\"$name\" label-fg-color=\"$fg_color\" label-bg-color=\"$bg_color\"/>";

			}

			$out .= "</outline>";

			$out .= "<outline title=\"tt-rss-filters\" schema-version=\"".SCHEMA_VERSION."\">";

			$result = db_query($link, "SELECT filter_type,
					reg_exp,
					action_id,
					enabled,
					action_param,
					inverse,
					filter_param,
					cat_filter,
					ttrss_feeds.feed_url AS feed_url,
					ttrss_feed_categories.title AS cat_title
					FROM ttrss_filters
						LEFT JOIN ttrss_feeds ON (feed_id = ttrss_feeds.id)
						LEFT JOIN ttrss_feed_categories ON (ttrss_filters.cat_id = ttrss_feed_categories.id)
					WHERE
						ttrss_filters.owner_uid = " . $_SESSION['uid']);

			while ($line = db_fetch_assoc($result)) {
				$name = htmlspecialchars($line['reg_exp']);

				foreach (array('enabled', 'inverse', 'cat_filter') as $b) {
					$line[$b] = sql_bool_to_bool($line[$b]);
				}

				$filter = json_encode($line);

				$out .= "<outline filter-name=\"$name\">$filter</outline>";

			}


			$out .= "</outline>";
		}

		$out .= "</body></opml>";

		// Format output.
		$doc = new DOMDocument();
		$doc->formatOutput = true;
		$doc->preserveWhiteSpace = false;
		$doc->loadXML($out);
		$res = $doc->saveXML();

		// saveXML uses a two-space indent.  Change to tabs.
		$res = preg_replace_callback('/^(?:  )+/mu',
			create_function(
				'$matches',
				'return str_repeat("\t", intval(strlen($matches[0])/2));'),
			$res);

		print $res;
	}

	// FIXME there are some brackets issues here

	$op = $_REQUEST["op"];
	if (!$op) $op = "Export";

	$output_name = $_REQUEST["filename"];
	if (!$output_name) $output_name = "TinyTinyRSS.opml";

	$show_settings = $_REQUEST["settings"];

	if ($op == "Export") {

		login_sequence($link);
		$owner_uid = $_SESSION["uid"];
		return opml_export($link, $output_name, $owner_uid, false, ($show_settings == 1));
	}

	if ($op == "publish"){
		$key = db_escape_string($_REQUEST["key"]);

		$result = db_query($link, "SELECT owner_uid
				FROM ttrss_access_keys WHERE
				access_key = '$key' AND feed_id = 'OPML:Publish'");

		if (db_num_rows($result) == 1) {
			$owner_uid = db_fetch_result($result, 0, "owner_uid");
			return opml_export($link, "", $owner_uid, true, false);
		} else {
			print "<error>User not found</error>";
		}
	}

	if ($op == "Import") {

		login_sequence($link);
		$owner_uid = $_SESSION["uid"];

		header('Content-Type: text/html; charset=utf-8');

		print "<html>
			<head>
				<link rel=\"stylesheet\" href=\"utility.css\" type=\"text/css\">
				<title>".__("OPML Utility")."</title>
				<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"/>
			</head>
			<body>
			<div class=\"floatingLogo\"><img src=\"images/logo_wide.png\"></div>
			<h1>".__('OPML Utility')."</h1>";

		db_query($link, "BEGIN");

		/* create Imported feeds category just in case */

		$result = db_query($link, "SELECT id FROM
			ttrss_feed_categories WHERE title = 'Imported feeds' AND
			owner_uid = '$owner_uid' LIMIT 1");

		if (db_num_rows($result) == 0) {
				db_query($link, "INSERT INTO ttrss_feed_categories
					(title,owner_uid)
						VALUES ('Imported feeds', '$owner_uid')");
		}

		db_query($link, "COMMIT");

		print "<p>".__("Importing OPML...")."</p>";
		opml_import_domdoc($link, $owner_uid);

		print "<br><form method=\"GET\" action=\"prefs.php\">
			<input type=\"submit\" value=\"".__("Return to preferences")."\">
			</form>";

		print "</body></html>";

	}

//	if ($link) db_close($link);

?>