/**
  * This action handles the feed configuration page.
  *
  * It displays the feed configuration page.
  * If this action is reached through a POST request, it stores all new
  * configuraiton values then sends a notification to the user.
  *
  * The options available on the page are:
  *   - name
  *   - description
  *   - website URL
  *   - feed URL
  *   - category id (default: default category id)
  *   - CSS path to article on website
  *   - display in main stream (default: 0)
  *   - HTTP authentication
  *   - number of article to retain (default: -2)
  *   - refresh frequency (default: -2)
  * Default values are empty strings unless specified.
  */
 public function feedAction()
 {
     if (Minz_Request::param('ajax')) {
         $this->view->_useLayout(false);
     }
     $feedDAO = FreshRSS_Factory::createFeedDao();
     $this->view->feeds = $feedDAO->listFeeds();
     $id = Minz_Request::param('id');
     if ($id === false || !isset($this->view->feeds[$id])) {
         Minz_Error::error(404);
         return;
     }
     $this->view->feed = $this->view->feeds[$id];
     Minz_View::prependTitle(_t('sub.title.feed_management') . ' · ' . $this->view->feed->name() . ' · ');
     if (Minz_Request::isPost()) {
         $user = Minz_Request::param('http_user', '');
         $pass = Minz_Request::param('http_pass', '');
         $httpAuth = '';
         if ($user != '' || $pass != '') {
             $httpAuth = $user . ':' . $pass;
         }
         $cat = intval(Minz_Request::param('category', 0));
         $values = array('name' => Minz_Request::param('name', ''), 'description' => sanitizeHTML(Minz_Request::param('description', '', true)), 'website' => Minz_Request::param('website', ''), 'url' => Minz_Request::param('url', ''), 'category' => $cat, 'pathEntries' => Minz_Request::param('path_entries', ''), 'priority' => intval(Minz_Request::param('priority', 0)), 'httpAuth' => $httpAuth, 'keep_history' => intval(Minz_Request::param('keep_history', -2)), 'ttl' => intval(Minz_Request::param('ttl', -2)));
         invalidateHttpCache();
         $url_redirect = array('c' => 'subscription', 'params' => array('id' => $id));
         if ($feedDAO->updateFeed($id, $values) !== false) {
             $this->view->feed->_category($cat);
             $this->view->feed->faviconPrepare();
             Minz_Request::good(_t('feedback.sub.feed.updated'), $url_redirect);
         } else {
             Minz_Request::bad(_t('feedback.sub.feed.error'), $url_redirect);
         }
     }
 }
Example #2
0
 private function initAuth()
 {
     FreshRSS_Auth::init();
     if (Minz_Request::isPost() && !is_referer_from_same_domain()) {
         // Basic protection against XSRF attacks
         FreshRSS_Auth::removeAccess();
         $http_referer = empty($_SERVER['HTTP_REFERER']) ? '' : $_SERVER['HTTP_REFERER'];
         Minz_Error::error(403, array('error' => array(_t('access_denied'), ' [HTTP_REFERER=' . htmlspecialchars($http_referer) . ']')));
     }
 }
Example #3
0
 private function initAuth()
 {
     FreshRSS_Auth::init();
     if (Minz_Request::isPost() && !is_referer_from_same_domain()) {
         // Basic protection against XSRF attacks
         FreshRSS_Auth::removeAccess();
         $http_referer = empty($_SERVER['HTTP_REFERER']) ? '' : $_SERVER['HTTP_REFERER'];
         Minz_Translate::init('en');
         //TODO: Better choice of fallback language
         Minz_Error::error(403, array('error' => array(_t('feedback.access.denied'), ' [HTTP_REFERER=' . htmlspecialchars($http_referer) . ']')));
     }
 }
Example #4
0
 public function handleConfigureAction()
 {
     $this->registerTranslates();
     $current_user = Minz_Session::param('currentUser');
     $filename = 'style.' . $current_user . '.css';
     $filepath = join_path($this->getPath(), 'static', $filename);
     if (Minz_Request::isPost()) {
         $css_rules = Minz_Request::param('css-rules', '');
         file_put_contents($filepath, $css_rules);
     }
     $this->css_rules = '';
     if (file_exists($filepath)) {
         $this->css_rules = file_get_contents($filepath);
     }
 }
Example #5
0
 public function optimizeAction()
 {
     if (Minz_Request::isPost()) {
         @set_time_limit(300);
         // La table des entrées a tendance à grossir énormément
         // Cette action permet d'optimiser cette table permettant de grapiller un peu de place
         // Cette fonctionnalité n'est à appeler qu'occasionnellement
         $entryDAO = new FreshRSS_EntryDAO();
         $entryDAO->optimizeTable();
         invalidateHttpCache();
         $notif = array('type' => 'good', 'content' => Minz_Translate::t('optimization_complete'));
         Minz_Session::_param('notification', $notif);
     }
     Minz_Request::forward(array('c' => 'configure', 'a' => 'archiving'), true);
 }
Example #6
0
 /**
  * This action delete an existing user.
  *
  * Request parameter is:
  *   - username
  *
  * @todo clean up this method. Idea: create a User->clean() method.
  */
 public function deleteAction()
 {
     $username = Minz_Request::param('username');
     $redirect_url = urldecode(Minz_Request::param('r', false, true));
     if (!$redirect_url) {
         $redirect_url = array('c' => 'user', 'a' => 'manage');
     }
     $self_deletion = Minz_Session::param('currentUser', '_') === $username;
     if (Minz_Request::isPost() && (FreshRSS_Auth::hasAccess('admin') || $self_deletion)) {
         $db = FreshRSS_Context::$system_conf->db;
         require_once APP_PATH . '/SQL/install.sql.' . $db['type'] . '.php';
         $ok = ctype_alnum($username);
         $user_data = join_path(DATA_PATH, 'users', $username);
         if ($ok) {
             $default_user = FreshRSS_Context::$system_conf->default_user;
             $ok &= strcasecmp($username, $default_user) !== 0;
             //It is forbidden to delete the default user
         }
         if ($ok && $self_deletion) {
             // We check the password if it's a self-destruction
             $nonce = Minz_Session::param('nonce');
             $challenge = Minz_Request::param('challenge', '');
             $ok &= FreshRSS_FormAuth::checkCredentials($username, FreshRSS_Context::$user_conf->passwordHash, $nonce, $challenge);
         }
         if ($ok) {
             $ok &= is_dir($user_data);
         }
         if ($ok) {
             $userDAO = new FreshRSS_UserDAO();
             $ok &= $userDAO->deleteUser($username);
             $ok &= recursive_unlink($user_data);
             //TODO: delete Persona file
         }
         if ($ok && $self_deletion) {
             FreshRSS_Auth::removeAccess();
             $redirect_url = array('c' => 'index', 'a' => 'index');
         }
         invalidateHttpCache();
         $notif = array('type' => $ok ? 'good' : 'bad', 'content' => _t('feedback.user.deleted' . (!$ok ? '.error' : ''), $username));
         Minz_Session::_param('notification', $notif);
     }
     Minz_Request::forward($redirect_url, true);
 }
Example #7
0
 /**
  * This action deletes a feed.
  *
  * This page must be reached by a POST request.
  * If there are related queries, they are deleted too.
  *
  * Parameters are:
  *   - id (default: false)
  *   - r (default: false)
  * r permits to redirect to a given page at the end of this action.
  *
  * @todo handle "r" redirection in Minz_Request::forward()?
  */
 public function deleteAction()
 {
     $redirect_url = Minz_Request::param('r', false, true);
     if (!$redirect_url) {
         $redirect_url = array('c' => 'subscription', 'a' => 'index');
     }
     if (!Minz_Request::isPost()) {
         Minz_Request::forward($redirect_url, true);
     }
     $id = Minz_Request::param('id');
     $feedDAO = FreshRSS_Factory::createFeedDao();
     if ($feedDAO->deleteFeed($id)) {
         // TODO: Delete old favicon
         // Remove related queries
         FreshRSS_Context::$user_conf->queries = remove_query_by_get('f_' . $id, FreshRSS_Context::$user_conf->queries);
         FreshRSS_Context::$user_conf->save();
         Minz_Request::good(_t('feedback.sub.feed.deleted'), $redirect_url);
     } else {
         Minz_Request::bad(_t('feedback.sub.feed.error'), $redirect_url);
     }
 }
Example #8
0
 /**
  * This action resets the authentication system.
  *
  * After reseting, form auth is set by default.
  */
 public function resetAction()
 {
     Minz_View::prependTitle(_t('admin.auth.title_reset') . ' · ');
     Minz_View::appendScript(Minz_Url::display('/scripts/bcrypt.min.js?' . @filemtime(PUBLIC_PATH . '/scripts/bcrypt.min.js')));
     $this->view->no_form = false;
     // Enable changement of auth only if Persona!
     if (FreshRSS_Context::$system_conf->auth_type != 'persona') {
         $this->view->message = array('status' => 'bad', 'title' => _t('gen.short.damn'), 'body' => _t('feedback.auth.not_persona'));
         $this->view->no_form = true;
         return;
     }
     $conf = get_user_configuration(FreshRSS_Context::$system_conf->default_user);
     if (is_null($conf)) {
         return;
     }
     // Admin user must have set its master password.
     if (!$conf->passwordHash) {
         $this->view->message = array('status' => 'bad', 'title' => _t('gen.short.damn'), 'body' => _t('feedback.auth.no_password_set'));
         $this->view->no_form = true;
         return;
     }
     invalidateHttpCache();
     if (Minz_Request::isPost()) {
         $nonce = Minz_Session::param('nonce');
         $username = Minz_Request::param('username', '');
         $challenge = Minz_Request::param('challenge', '');
         $ok = FreshRSS_FormAuth::checkCredentials($username, $conf->passwordHash, $nonce, $challenge);
         if ($ok) {
             FreshRSS_Context::$system_conf->auth_type = 'form';
             $ok = FreshRSS_Context::$system_conf->save();
             if ($ok) {
                 Minz_Request::good(_t('feedback.auth.form.set'));
             } else {
                 Minz_Request::bad(_t('feedback.auth.form.not_set'), array('c' => 'auth', 'a' => 'reset'));
             }
         } else {
             Minz_Log::warning('Password mismatch for' . ' user='******', nonce=' . $nonce . ', c=' . $challenge);
             Minz_Request::bad(_t('feedback.auth.login.invalid'), array('c' => 'auth', 'a' => 'reset'));
         }
     }
 }
Example #9
0
 /**
  * This action displays logs of FreshRSS for the current user.
  */
 public function logsAction()
 {
     if (!FreshRSS_Auth::hasAccess()) {
         Minz_Error::error(403);
     }
     Minz_View::prependTitle(_t('index.log.title') . ' · ');
     if (Minz_Request::isPost()) {
         FreshRSS_LogDAO::truncate();
     }
     $logs = FreshRSS_LogDAO::lines();
     //TODO: ask only the necessary lines
     //gestion pagination
     $page = Minz_Request::param('page', 1);
     $this->view->logsPaginator = new Minz_Paginator($logs);
     $this->view->logsPaginator->_nbItemsPerPage(50);
     $this->view->logsPaginator->_currentPage($page);
 }
Example #10
0
 public function deleteAction()
 {
     if (Minz_Request::isPost() && FreshRSS_Auth::hasAccess('admin')) {
         $db = FreshRSS_Context::$system_conf->db;
         require_once APP_PATH . '/SQL/install.sql.' . $db['type'] . '.php';
         $username = Minz_Request::param('username');
         $ok = ctype_alnum($username);
         $user_data = join_path(DATA_PATH, 'users', $username);
         if ($ok) {
             $default_user = FreshRSS_Context::$system_conf->default_user;
             $ok &= strcasecmp($username, $default_user) !== 0;
             //It is forbidden to delete the default user
         }
         if ($ok) {
             $ok &= is_dir($user_data);
         }
         if ($ok) {
             $userDAO = new FreshRSS_UserDAO();
             $ok &= $userDAO->deleteUser($username);
             $ok &= recursive_unlink($user_data);
             //TODO: delete Persona file
         }
         invalidateHttpCache();
         $notif = array('type' => $ok ? 'good' : 'bad', 'content' => _t('feedback.user.deleted' . (!$ok ? '.error' : ''), $username));
         Minz_Session::_param('notification', $notif);
     }
     Minz_Request::forward(array('c' => 'user', 'a' => 'manage'), true);
 }
Example #11
0
 public function applyAction()
 {
     if (!file_exists(UPDATE_FILENAME) || !is_writable(FRESHRSS_PATH)) {
         Minz_Request::forward(array('c' => 'update'), true);
     }
     require UPDATE_FILENAME;
     if (Minz_Request::param('post_conf', false)) {
         $res = do_post_update();
         Minz_ExtensionManager::callHook('post_update');
         if ($res === true) {
             @unlink(UPDATE_FILENAME);
             @file_put_contents(join_path(DATA_PATH, 'last_update.txt'), '');
             Minz_Request::good(_t('feedback.update.finished'));
         } else {
             Minz_Request::bad(_t('feedback.update.error', $res), array('c' => 'update', 'a' => 'index'));
         }
     }
     if (Minz_Request::isPost()) {
         save_info_update();
     }
     if (!need_info_update()) {
         $res = apply_update();
         if ($res === true) {
             Minz_Request::forward(array('c' => 'update', 'a' => 'apply', 'params' => array('post_conf' => true)), true);
         } else {
             Minz_Request::bad(_t('feedback.update.error', $res), array('c' => 'update', 'a' => 'index'));
         }
     }
 }
 public function archivingAction()
 {
     if (Minz_Request::isPost()) {
         $old = Minz_Request::param('old_entries', 3);
         $keepHistoryDefault = Minz_Request::param('keep_history_default', 0);
         $this->view->conf->_old_entries($old);
         $this->view->conf->_keep_history_default($keepHistoryDefault);
         $this->view->conf->save();
         invalidateHttpCache();
         $notif = array('type' => 'good', 'content' => Minz_Translate::t('configuration_updated'));
         Minz_Session::_param('notification', $notif);
         Minz_Request::forward(array('c' => 'configure', 'a' => 'archiving'), true);
     }
     Minz_View::prependTitle(Minz_Translate::t('archiving_configuration') . ' · ');
     $entryDAO = new FreshRSS_EntryDAO();
     $this->view->nb_total = $entryDAO->count();
     $this->view->size_user = $entryDAO->size();
     if (Minz_Configuration::isAdmin(Minz_Session::param('currentUser', '_'))) {
         $this->view->size_total = $entryDAO->size(true);
     }
 }
Example #13
0
 public function deleteAction()
 {
     if (Minz_Request::isPost() && Minz_Configuration::isAdmin(Minz_Session::param('currentUser', '_'))) {
         require_once APP_PATH . '/sql.php';
         $username = Minz_Request::param('username');
         $ok = ctype_alnum($username);
         if ($ok) {
             $ok &= strcasecmp($username, Minz_Configuration::defaultUser()) !== 0;
             //It is forbidden to delete the default user
         }
         if ($ok) {
             $configPath = DATA_PATH . '/' . $username . '_user.php';
             $ok &= file_exists($configPath);
         }
         if ($ok) {
             $userDAO = new FreshRSS_UserDAO();
             $ok &= $userDAO->deleteUser($username);
             $ok &= unlink($configPath);
             //TODO: delete Persona file
         }
         invalidateHttpCache();
         $notif = array('type' => $ok ? 'good' : 'bad', 'content' => Minz_Translate::t($ok ? 'user_deleted' : 'error_occurred', $username));
         Minz_Session::_param('notification', $notif);
     }
     Minz_Request::forward(array('c' => 'configure', 'a' => 'users'), true);
 }
Example #14
0
 public function deleteAction()
 {
     if (Minz_Request::isPost()) {
         $type = Minz_Request::param('type', 'feed');
         $id = Minz_Request::param('id');
         $feedDAO = new FreshRSS_FeedDAO();
         if ($type == 'category') {
             if ($feedDAO->deleteFeedByCategory($id)) {
                 $notif = array('type' => 'good', 'content' => Minz_Translate::t('category_emptied'));
                 //TODO: Delete old favicons
             } else {
                 $notif = array('type' => 'bad', 'content' => Minz_Translate::t('error_occured'));
             }
         } else {
             if ($feedDAO->deleteFeed($id)) {
                 $notif = array('type' => 'good', 'content' => Minz_Translate::t('feed_deleted'));
                 //TODO: Delete old favicon
             } else {
                 $notif = array('type' => 'bad', 'content' => Minz_Translate::t('error_occured'));
             }
         }
         Minz_Session::_param('notification', $notif);
         if ($type == 'category') {
             Minz_Request::forward(array('c' => 'configure', 'a' => 'categorize'), true);
         } else {
             Minz_Request::forward(array('c' => 'configure', 'a' => 'feed'), true);
         }
     }
 }
 /**
  * This action handles the user queries configuration page.
  *
  * If this action is reached through a POST request, it stores all new
  * configuration values then sends a notification to the user then
  * redirect to the same page.
  * If this action is not reached through a POST request, it displays the
  * configuration page and verifies that every user query is runable by
  * checking if categories and feeds are still in use.
  */
 public function queriesAction()
 {
     if (Minz_Request::isPost()) {
         $queries = Minz_Request::param('queries', array());
         foreach ($queries as $key => $query) {
             if (!$query['name']) {
                 $query['name'] = _t('conf.query.number', $key + 1);
             }
         }
         FreshRSS_Context::$user_conf->queries = $queries;
         FreshRSS_Context::$user_conf->save();
         Minz_Request::good(_t('feedback.conf.updated'), array('c' => 'configure', 'a' => 'queries'));
     } else {
         $this->view->query_get = array();
         $cat_dao = new FreshRSS_CategoryDAO();
         $feed_dao = FreshRSS_Factory::createFeedDao();
         foreach (FreshRSS_Context::$user_conf->queries as $key => $query) {
             if (!isset($query['get'])) {
                 continue;
             }
             switch ($query['get'][0]) {
                 case 'c':
                     $category = $cat_dao->searchById(substr($query['get'], 2));
                     $deprecated = true;
                     $cat_name = '';
                     if ($category) {
                         $cat_name = $category->name();
                         $deprecated = false;
                     }
                     $this->view->query_get[$key] = array('type' => 'category', 'name' => $cat_name, 'deprecated' => $deprecated);
                     break;
                 case 'f':
                     $feed = $feed_dao->searchById(substr($query['get'], 2));
                     $deprecated = true;
                     $feed_name = '';
                     if ($feed) {
                         $feed_name = $feed->name();
                         $deprecated = false;
                     }
                     $this->view->query_get[$key] = array('type' => 'feed', 'name' => $feed_name, 'deprecated' => $deprecated);
                     break;
                 case 's':
                     $this->view->query_get[$key] = array('type' => 'favorite', 'name' => 'favorite', 'deprecated' => false);
                     break;
                 case 'a':
                     $this->view->query_get[$key] = array('type' => 'all', 'name' => 'all', 'deprecated' => false);
                     break;
             }
         }
     }
     Minz_View::prependTitle(_t('conf.query.title') . ' · ');
 }
 /**
  * This action handles export action.
  *
  * This action must be reached by a POST request.
  *
  * Parameters are:
  *   - export_opml (default: false)
  *   - export_starred (default: false)
  *   - export_feeds (default: array()) a list of feed ids
  */
 public function exportAction()
 {
     if (!Minz_Request::isPost()) {
         Minz_Request::forward(array('c' => 'importExport', 'a' => 'index'), true);
     }
     $this->view->_useLayout(false);
     $export_opml = Minz_Request::param('export_opml', false);
     $export_starred = Minz_Request::param('export_starred', false);
     $export_feeds = Minz_Request::param('export_feeds', array());
     $export_files = array();
     if ($export_opml) {
         $export_files['feeds.opml'] = $this->generateOpml();
     }
     if ($export_starred) {
         $export_files['starred.json'] = $this->generateEntries('starred');
     }
     foreach ($export_feeds as $feed_id) {
         $feed = $this->feedDAO->searchById($feed_id);
         if ($feed) {
             $filename = 'feed_' . $feed->category() . '_' . $feed->id() . '.json';
             $export_files[$filename] = $this->generateEntries('feed', $feed);
         }
     }
     $nb_files = count($export_files);
     if ($nb_files > 1) {
         // If there are more than 1 file to export, we need a zip archive.
         try {
             $this->exportZip($export_files);
         } catch (Exception $e) {
             # Oops, there is no Zip extension!
             Minz_Request::bad(_t('feedback.import_export.export_no_zip_extension'), array('c' => 'importExport', 'a' => 'index'));
         }
     } elseif ($nb_files === 1) {
         // Only one file? Guess its type and export it.
         $filename = key($export_files);
         $type = $this->guessFileType($filename);
         $this->exportFile('freshrss_' . $filename, $export_files[$filename], $type);
     } else {
         // Nothing to do...
         Minz_Request::forward(array('c' => 'importExport', 'a' => 'index'), true);
     }
 }
Example #17
0
 public function formLoginAction()
 {
     if (Minz_Request::isPost()) {
         $ok = false;
         $nonce = Minz_Session::param('nonce');
         $username = Minz_Request::param('username', '');
         $c = Minz_Request::param('challenge', '');
         if (ctype_alnum($username) && ctype_graph($c) && ctype_alnum($nonce)) {
             if (!function_exists('password_verify')) {
                 include_once LIB_PATH . '/password_compat.php';
             }
             try {
                 $conf = new FreshRSS_Configuration($username);
                 $s = $conf->passwordHash;
                 $ok = password_verify($nonce . $s, $c);
                 if ($ok) {
                     Minz_Session::_param('currentUser', $username);
                     Minz_Session::_param('passwordHash', $s);
                 } else {
                     Minz_Log::record('Password mismatch for user ' . $username . ', nonce=' . $nonce . ', c=' . $c, Minz_Log::WARNING);
                 }
             } catch (Minz_Exception $me) {
                 Minz_Log::record('Login failure: ' . $me->getMessage(), Minz_Log::WARNING);
             }
         } else {
             Minz_Log::record('Invalid credential parameters: user='******' challenge=' . $c . ' nonce=' . $nonce, Minz_Log::DEBUG);
         }
         if (!$ok) {
             $notif = array('type' => 'bad', 'content' => Minz_Translate::t('invalid_login'));
             Minz_Session::_param('notification', $notif);
         }
         $this->view->_useLayout(false);
         Minz_Request::forward(array('c' => 'index', 'a' => 'index'), true);
     } elseif (!Minz_Configuration::canLogIn()) {
         Minz_Error::error(403, array('error' => array(Minz_Translate::t('access_denied'))));
     }
     invalidateHttpCache();
 }
Example #18
0
 /**
  * This action handles the system configuration page.
  *
  * It displays the system configuration page.
  * If this action is reach through a POST request, it stores all new
  * configuration values then sends a notification to the user.
  *
  * The options available on the page are:
  *   - user limit (default: 1)
  *   - user category limit (default: 16384)
  *   - user feed limit (default: 16384)
  */
 public function systemAction()
 {
     if (!FreshRSS_Auth::hasAccess('admin')) {
         Minz_Error::error(403);
     }
     if (Minz_Request::isPost()) {
         $limits = FreshRSS_Context::$system_conf->limits;
         $limits['max_registrations'] = Minz_Request::param('max-registrations', 1);
         $limits['max_feeds'] = Minz_Request::param('max-feeds', 16384);
         $limits['max_categories'] = Minz_Request::param('max-categories', 16384);
         FreshRSS_Context::$system_conf->limits = $limits;
         FreshRSS_Context::$system_conf->title = Minz_Request::param('instance-name', 'FreshRSS');
         FreshRSS_Context::$system_conf->auto_update_url = Minz_Request::param('auto-update-url', false);
         FreshRSS_Context::$system_conf->save();
         invalidateHttpCache();
         Minz_Session::_param('notification', array('type' => 'good', 'content' => _t('feedback.conf.updated')));
     }
 }
Example #19
0
 /**
  * This action optimizes database to reduce its size.
  *
  * This action shouldbe reached by a POST request.
  *
  * @todo move this action in configure controller.
  * @todo call this action through web-cron when available
  */
 public function optimizeAction()
 {
     $url_redirect = array('c' => 'configure', 'a' => 'archiving');
     if (!Minz_Request::isPost()) {
         Minz_Request::forward($url_redirect, true);
     }
     @set_time_limit(300);
     $entryDAO = FreshRSS_Factory::createEntryDao();
     $entryDAO->optimizeTable();
     $feedDAO = FreshRSS_Factory::createFeedDao();
     $feedDAO->updateCachedValues();
     invalidateHttpCache();
     Minz_Request::good(_t('feedback.admin.optimization_complete'), $url_redirect);
 }
 /**
  * This action deletes all the feeds relative to a given category.
  * Feed-related queries are deleted.
  *
  * Request parameter is:
  *   - id (of a category)
  */
 public function emptyAction()
 {
     $feedDAO = FreshRSS_Factory::createFeedDao();
     $url_redirect = array('c' => 'subscription', 'a' => 'index');
     if (Minz_Request::isPost()) {
         invalidateHttpCache();
         $id = Minz_Request::param('id');
         if (!$id) {
             Minz_Request::bad(_t('feedback.sub.category.no_id'), $url_redirect);
         }
         // List feeds to remove then related user queries.
         $feeds = $feedDAO->listByCategory($id);
         if ($feedDAO->deleteFeedByCategory($id)) {
             // TODO: Delete old favicons
             // Remove related queries
             foreach ($feeds as $feed) {
                 FreshRSS_Context::$user_conf->queries = remove_query_by_get('f_' . $feed->id(), FreshRSS_Context::$user_conf->queries);
             }
             FreshRSS_Context::$user_conf->save();
             Minz_Request::good(_t('feedback.sub.category.emptied'), $url_redirect);
         } else {
             Minz_Request::bad(_t('feedback.sub.category.error'), $url_redirect);
         }
     }
     Minz_Request::forward($url_redirect, true);
 }
 /**
  * This action handles deletion of an extension.
  *
  * Only administrator can remove an extension.
  * This action must be reached by a POST request.
  *
  * Parameter is:
  * -e: extension name (urlencoded)
  */
 public function removeAction()
 {
     if (!FreshRSS_Auth::hasAccess('admin')) {
         Minz_Error::error(403);
     }
     $url_redirect = array('c' => 'extension', 'a' => 'index');
     if (Minz_Request::isPost()) {
         $ext_name = urldecode(Minz_Request::param('e'));
         $ext = Minz_ExtensionManager::findExtension($ext_name);
         if (is_null($ext)) {
             Minz_Request::bad(_t('feedback.extensions.not_found', $ext_name), $url_redirect);
         }
         $res = recursive_unlink($ext->getPath());
         if ($res) {
             Minz_Request::good(_t('feedback.extensions.removed', $ext_name), $url_redirect);
         } else {
             Minz_Request::bad(_t('feedback.extensions.cannot_delete', $ext_name), $url_redirect);
         }
     }
     Minz_Request::forward($url_redirect, true);
 }