added debug section

README.md

@@ -10,6 +10,7 @@ This plugin is an open source module for TinyTinyRSS which simulates the Fever A
 * <a href="#download">Downloads</a>
 * <a href="#supported">Supported/Tested Clients</a>
 * <a href="#installation">Installation</a>
+* <a href="#debug">Debugging</a>
 * <a href="#license">License</a>
 * <a href="#changelog">Changelog</a>
 
@@ -40,6 +41,13 @@ Upload the ```fever``` folder in the ```plugins``` folder of your TinyTinyRSS in
 
 See [here](http://tt-rss.org/forum/viewtopic.php?f=22&t=1981) for more detailed informations.
 
+## <a name="debug">Debugging</a>
+
+In the file ```fever_api.php``` there are two flags for debugging at the beginning of the file.
+
+* ```DEBUG``` - set this to true to get a fever_debug.txt file in your root folder of the Tiny Tiny RSS installation.
+* ```DEBUG_USER``` - set this to the id (from ttrss_users) of your user you would like to always authenticate on your Tiny Tiny RSS installation. The authentication process is then skipped and the api gets always authentication.
+
 ## <a name="license">License</a>
 
 Licensed under GNU GPL version 2 (<- I think this is okay for this plugin…)
@@ -61,3 +69,11 @@ v1.4 - 2013/6/28
 
 * fixed authentication with Mr.Reader 2.0
 * fixed debugging options
+
+v1.4.1 - 2013/6/28
+
+* removed password from debug log file
+
+v1.4.2 - 2013/6/28
+
+* changed the DEBUG_USER evaluation a little bit for disabling authentication without DEBUG = true

fever/fever_api.php

@@ -1,5 +1,7 @@
 <?php
 
+// v1.4.2
+
 class FeverAPI extends Handler {
 
 	const API_LEVEL  = 3;
@@ -131,7 +133,7 @@ class FeverAPI extends Handler {
 				// debug output
 				$output = array();
 				$output['email'] = $username;
-				$output['password'] = $password;
+				$output['password'] = '***not displayed***';
 				$output['apikey'] = $apikey;
 				file_put_contents('./debug_fever.txt','auth POST: '.json_encode($output)."\n",FILE_APPEND);
 			}
@@ -150,7 +152,7 @@ class FeverAPI extends Handler {
 				$_SESSION["uid"] = $this->dbh->fetch_result($result, 0, "owner_uid");
 			}
 
-			if (self::DEBUG&&self::DEBUG_USER>0) {
+			if (self::DEBUG_USER>0) {
 				$_SESSION["uid"] = self::DEBUG_USER; // always authenticate and set debug user
 			}
 		}