mod/admin.php

   1 <?php
   2
   3  /**
   4   * Friendica admin
   5   */
   6 require_once("include/remoteupdate.php");
   7 require_once("include/enotify.php");
   8 require_once("include/text.php");
   9
  10
  11 /**
  12  * @param App $a
  13  */
  14 function admin_post(&$a){
  15
  16
  17         if(!is_site_admin()) {
  18                 return;
  19         }
  20
  21         // do not allow a page manager to access the admin panel at all.
  22
  23         if(x($_SESSION,'submanage') && intval($_SESSION['submanage']))
  24                 return;
  25
  26
  27
  28         // urls
  29         if ($a->argc > 1){
  30                 switch ($a->argv[1]){
  31                         case 'site':
  32                                 admin_page_site_post($a);
  33                                 break;
  34                         case 'users':
  35                                 admin_page_users_post($a);
  36                                 break;
  37                         case 'plugins':
  38                                 if ($a->argc > 2 &&
  39                                         is_file("addon/".$a->argv[2]."/".$a->argv[2].".php")){
  40                                                 @include_once("addon/".$a->argv[2]."/".$a->argv[2].".php");
  41                                                 if(function_exists($a->argv[2].'_plugin_admin_post')) {
  42                                                         $func = $a->argv[2].'_plugin_admin_post';
  43                                                         $func($a);
  44                                                 }
  45                                 }
  46                                 goaway($a->get_baseurl(true) . '/admin/plugins/' . $a->argv[2] );
  47                                 return; // NOTREACHED
  48                                 break;
  49                         case 'themes':
  50                                 $theme = $a->argv[2];
  51                                 if (is_file("view/theme/$theme/config.php")){
  52                                         require_once("view/theme/$theme/config.php");
  53                                         if (function_exists("theme_admin_post")){
  54                                                 theme_admin_post($a);
  55                                         }
  56                                 }
  57                                 info(t('Theme settings updated.'));
  58                                 if(is_ajax()) return;
  59
  60                                 goaway($a->get_baseurl(true) . '/admin/themes/' . $theme );
  61                                 return;
  62                                 break;
  63                         case 'logs':
  64                                 admin_page_logs_post($a);
  65                                 break;
  66                         case 'dbsync':
  67                                 admin_page_dbsync_post($a);
  68                                 break;
  69                         case 'update':
  70                                 admin_page_remoteupdate_post($a);
  71                                 break;
  72                 }
  73         }
  74
  75         goaway($a->get_baseurl(true) . '/admin' );
  76         return; // NOTREACHED
  77 }
  78
  79 /**
  80  * @param App $a
  81  * @return string
  82  */
  83 function admin_content(&$a) {
  84
  85         if(!is_site_admin()) {
  86                 return login(false);
  87         }
  88
  89         if(x($_SESSION,'submanage') && intval($_SESSION['submanage']))
  90                 return "";
  91
  92         // APC deactivated, since there are problems with PHP 5.5
  93         //if (function_exists("apc_delete")) {
  94         //      $toDelete = new APCIterator('user', APC_ITER_VALUE);
  95         //      apc_delete($toDelete);
  96         //}
  97
  98         /**
  99          * Side bar links
 100          */
 101
 102         // array( url, name, extra css classes )
 103         $aside = Array(
 104                 'site'   =>     Array($a->get_baseurl(true)."/admin/site/", t("Site") , "site"),
 105                 'users'  =>     Array($a->get_baseurl(true)."/admin/users/", t("Users") , "users"),
 106                 'plugins'=>     Array($a->get_baseurl(true)."/admin/plugins/", t("Plugins") , "plugins"),
 107                 'themes' =>     Array($a->get_baseurl(true)."/admin/themes/", t("Themes") , "themes"),
 108                 'dbsync' => Array($a->get_baseurl(true)."/admin/dbsync/", t('DB updates'), "dbsync"),
 109                 //'update' =>   Array($a->get_baseurl(true)."/admin/update/", t("Software Update") , "update")
 110         );
 111
 112         /* get plugins admin page */
 113
 114         $r = q("SELECT name FROM `addon` WHERE `plugin_admin`=1");
 115         $aside['plugins_admin']=Array();
 116         foreach ($r as $h){
 117                 $plugin =$h['name'];
 118                 $aside['plugins_admin'][] = Array($a->get_baseurl(true)."/admin/plugins/".$plugin, $plugin, "plugin");
 119                 // temp plugins with admin
 120                 $a->plugins_admin[] = $plugin;
 121         }
 122
 123         $aside['logs'] = Array($a->get_baseurl(true)."/admin/logs/", t("Logs"), "logs");
 124         $aside['diagnostics_probe'] = Array($a->get_baseurl(true).'/probe/', t('probe address'), 'probe');
 125         $aside['diagnostics_webfinger'] = Array($a->get_baseurl(true).'/webfinger/', t('check webfinger'), 'webfinger');
 126
 127         $t = get_markup_template("admin_aside.tpl");
 128         $a->page['aside'] .= replace_macros( $t, array(
 129                         '$admin' => $aside,
 130                         '$admtxt' => t('Admin'),
 131                         '$plugadmtxt' => t('Plugin Features'),
 132                         '$logtxt' => t('Logs'),
 133                         '$diagnosticstxt' => t('diagnostics'),
 134                         '$h_pending' => t('User registrations waiting for confirmation'),
 135                         '$admurl'=> $a->get_baseurl(true)."/admin/"
 136         ));
 137
 138
 139
 140         /**
 141          * Page content
 142          */
 143         $o = '';
 144         // urls
 145         if ($a->argc > 1){
 146                 switch ($a->argv[1]){
 147                         case 'site':
 148                                 $o = admin_page_site($a);
 149                                 break;
 150                         case 'users':
 151                                 $o = admin_page_users($a);
 152                                 break;
 153                         case 'plugins':
 154                                 $o = admin_page_plugins($a);
 155                                 break;
 156                         case 'themes':
 157                                 $o = admin_page_themes($a);
 158                                 break;
 159                         case 'logs':
 160                                 $o = admin_page_logs($a);
 161                                 break;
 162                         case 'dbsync':
 163                                 $o = admin_page_dbsync($a);
 164                                 break;
 165                         case 'update':
 166                                 $o = admin_page_remoteupdate($a);
 167                                 break;
 168                         default:
 169                                 notice( t("Item not found.") );
 170                 }
 171         } else {
 172                 $o = admin_page_summary($a);
 173         }
 174
 175         if(is_ajax()) {
 176                 echo $o;
 177                 killme();
 178                 return '';
 179         } else {
 180                 return $o;
 181         }
 182 }
 183
 184
 185 /**
 186  * Admin Summary Page
 187  * @param App $a
 188  * @return string
 189  */
 190 function admin_page_summary(&$a) {
 191         $r = q("SELECT `page-flags`, COUNT(uid) as `count` FROM `user` GROUP BY `page-flags`");
 192         $accounts = Array(
 193                 Array( t('Normal Account'), 0),
 194                 Array( t('Soapbox Account'), 0),
 195                 Array( t('Community/Celebrity Account'), 0),
 196                 Array( t('Automatic Friend Account'), 0),
 197                 Array( t('Blog Account'), 0),
 198                 Array( t('Private Forum'), 0)
 199         );
 200
 201         $users=0;
 202         foreach ($r as $u){ $accounts[$u['page-flags']][1] = $u['count']; $users+= $u['count']; }
 203
 204         logger('accounts: ' . print_r($accounts,true),LOGGER_DATA);
 205
 206         $r = q("SELECT COUNT(id) as `count` FROM `register`");
 207         $pending = $r[0]['count'];
 208
 209         $r = q("select count(*) as total from deliverq where 1");
 210         $deliverq = (($r) ? $r[0]['total'] : 0);
 211
 212         $r = q("select count(*) as total from queue where 1");
 213         $queue = (($r) ? $r[0]['total'] : 0);
 214
 215         // We can do better, but this is a quick queue status
 216
 217         $queues = array( 'label' => t('Message queues'), 'deliverq' => $deliverq, 'queue' => $queue );
 218
 219
 220         $t = get_markup_template("admin_summary.tpl");
 221         return replace_macros($t, array(
 222                 '$title' => t('Administration'),
 223                 '$page' => t('Summary'),
 224                 '$queues' => $queues,
 225                 '$users' => Array( t('Registered users'), $users),
 226                 '$accounts' => $accounts,
 227                 '$pending' => Array( t('Pending registrations'), $pending),
 228                 '$version' => Array( t('Version'), FRIENDICA_VERSION),
 229                 '$platform' => FRIENDICA_PLATFORM,
 230                 '$codename' => FRIENDICA_CODENAME,
 231                 '$build' =>  get_config('system','build'),
 232                 '$plugins' => Array( t('Active plugins'), $a->plugins )
 233         ));
 234 }
 235
 236
 237 /**
 238  * Admin Site Page
 239  *  @param App $a
 240  */
 241 function admin_page_site_post(&$a){
 242         if (!x($_POST,"page_site")){
 243                 return;
 244         }
 245
 246         check_form_security_token_redirectOnErr('/admin/site', 'admin_site');
 247
 248         // relocate
 249         if (x($_POST,'relocate') && x($_POST,'relocate_url') && $_POST['relocate_url']!=""){
 250                 $new_url = $_POST['relocate_url'];
 251                 $new_url = rtrim($new_url,"/");
 252
 253                 $parsed = @parse_url($new_url);
 254                 if (!$parsed || (!x($parsed,'host') || !x($parsed,'scheme'))) {
 255                         notice(t("Can not parse base url. Must have at least <scheme>://<domain>"));
 256                         goaway($a->get_baseurl(true) . '/admin/site' );
 257                 }
 258
 259                 /* steps:
 260                  * replace all "baseurl" to "new_url" in config, profile, term, items and contacts
 261                  * send relocate for every local user
 262                  * */
 263
 264                 $old_url = $a->get_baseurl(true);
 265
 266                 function update_table($table_name, $fields, $old_url, $new_url) {
 267                         global $db, $a;
 268
 269                         $dbold = dbesc($old_url);
 270                         $dbnew = dbesc($new_url);
 271
 272                         $upd = array();
 273                         foreach ($fields as $f) {
 274                                 $upd[] = "`$f` = REPLACE(`$f`, '$dbold', '$dbnew')";
 275                         }
 276
 277                         $upds = implode(", ", $upd);
 278
 279
 280
 281                         $q = sprintf("UPDATE %s SET %s;", $table_name, $upds);
 282                         $r = q($q);
 283                         if (!$r) {
 284                                 notice( "Failed updating '$table_name': " . $db->error );
 285                                 goaway($a->get_baseurl(true) . '/admin/site' );
 286                         }
 287                 }
 288
 289                 // update tables
 290                 update_table("profile", array('photo', 'thumb'), $old_url, $new_url);
 291                 update_table("term", array('url'), $old_url, $new_url);
 292                 update_table("contact", array('photo','thumb','micro','url','nurl','request','notify','poll','confirm','poco'), $old_url, $new_url);
 293                 update_table("unique_contacts", array('url'), $old_url, $new_url);
 294                 update_table("item", array('owner-link','owner-avatar','author-name','author-link','author-avatar','body','plink','tag'), $old_url, $new_url);
 295
 296                 // update config
 297                 $a->set_baseurl($new_url);
 298                 set_config('system','url',$new_url);
 299
 300                 // send relocate
 301                 $users = q("SELECT uid FROM user WHERE account_removed = 0 AND account_expired = 0");
 302
 303                 foreach ($users as $user) {
 304                         proc_run('php', 'include/notifier.php', 'relocate', $user['uid']);
 305                 }
 306
 307                 info("Relocation started. Could take a while to complete.");
 308
 309                 goaway($a->get_baseurl(true) . '/admin/site' );
 310         }
 311         // end relocate
 312
 313         $sitename               =       ((x($_POST,'sitename'))                 ? notags(trim($_POST['sitename']))              : '');
 314         $hostname               =       ((x($_POST,'hostname'))                 ? notags(trim($_POST['hostname']))              : '');
 315         $sender_email   =       ((x($_POST,'sender_email'))             ? notags(trim($_POST['sender_email']))          : '');
 316         $banner                 =       ((x($_POST,'banner'))                   ? trim($_POST['banner'])                        : false);
 317         $info                   =       ((x($_POST,'info'))                     ? trim($_POST['info'])                  : false);
 318         $language               =       ((x($_POST,'language'))                 ? notags(trim($_POST['language']))              : '');
 319         $theme                  =       ((x($_POST,'theme'))                    ? notags(trim($_POST['theme']))                 : '');
 320         $theme_mobile           =       ((x($_POST,'theme_mobile'))             ? notags(trim($_POST['theme_mobile']))          : '');
 321         $maximagesize           =       ((x($_POST,'maximagesize'))             ? intval(trim($_POST['maximagesize']))          :  0);
 322         $maximagelength         =       ((x($_POST,'maximagelength'))           ? intval(trim($_POST['maximagelength']))        :  MAX_IMAGE_LENGTH);
 323         $jpegimagequality       =       ((x($_POST,'jpegimagequality'))         ? intval(trim($_POST['jpegimagequality']))      :  JPEG_QUALITY);
 324
 325
 326         $register_policy        =       ((x($_POST,'register_policy'))          ? intval(trim($_POST['register_policy']))       :  0);
 327         $daily_registrations    =       ((x($_POST,'max_daily_registrations'))  ? intval(trim($_POST['max_daily_registrations']))       :0);
 328         $abandon_days           =       ((x($_POST,'abandon_days'))             ? intval(trim($_POST['abandon_days']))          :  0);
 329
 330         $register_text          =       ((x($_POST,'register_text'))            ? notags(trim($_POST['register_text']))         : '');
 331
 332         $allowed_sites          =       ((x($_POST,'allowed_sites'))            ? notags(trim($_POST['allowed_sites']))         : '');
 333         $allowed_email          =       ((x($_POST,'allowed_email'))            ? notags(trim($_POST['allowed_email']))         : '');
 334         $block_public           =       ((x($_POST,'block_public'))             ? True                                          : False);
 335         $force_publish          =       ((x($_POST,'publish_all'))              ? True                                          : False);
 336         $global_directory       =       ((x($_POST,'directory_submit_url'))     ? notags(trim($_POST['directory_submit_url']))  : '');
 337         $thread_allow           =       ((x($_POST,'thread_allow'))             ? True                                          : False);
 338         $newuser_private                =       ((x($_POST,'newuser_private'))          ? True                                          : False);
 339         $enotify_no_content             =       ((x($_POST,'enotify_no_content'))       ? True                                          : False);
 340         $private_addons                 =       ((x($_POST,'private_addons'))           ? True                                          : False);
 341         $disable_embedded               =       ((x($_POST,'disable_embedded'))         ? True                                          : False);
 342         $allow_users_remote_self        =       ((x($_POST,'allow_users_remote_self'))          ? True                                          : False);
 343
 344         $no_multi_reg           =       ((x($_POST,'no_multi_reg'))             ? True                                          : False);
 345         $no_openid              =       !((x($_POST,'no_openid'))               ? True                                          : False);
 346         $no_regfullname         =       !((x($_POST,'no_regfullname'))          ? True                                          : False);
 347         $no_utf                 =       !((x($_POST,'no_utf'))                  ? True                                          : False);
 348         $no_community_page      =       !((x($_POST,'no_community_page'))       ? True                                          : False);
 349
 350         $verifyssl              =       ((x($_POST,'verifyssl'))                ? True                                          : False);
 351         $proxyuser              =       ((x($_POST,'proxyuser'))                ? notags(trim($_POST['proxyuser']))             : '');
 352         $proxy                  =       ((x($_POST,'proxy'))                    ? notags(trim($_POST['proxy']))                 : '');
 353         $timeout                =       ((x($_POST,'timeout'))                  ? intval(trim($_POST['timeout']))               : 60);
 354         $delivery_interval      =       ((x($_POST,'delivery_interval'))        ? intval(trim($_POST['delivery_interval']))     : 0);
 355         $poll_interval          =       ((x($_POST,'poll_interval'))            ? intval(trim($_POST['poll_interval']))         : 0);
 356         $maxloadavg             =       ((x($_POST,'maxloadavg'))               ? intval(trim($_POST['maxloadavg']))            : 50);
 357         $dfrn_only              =       ((x($_POST,'dfrn_only'))                ? True                                          : False);
 358         $ostatus_disabled       =       !((x($_POST,'ostatus_disabled'))        ? True                                          : False);
 359         $ostatus_poll_interval  =       ((x($_POST,'ostatus_poll_interval'))    ? intval(trim($_POST['ostatus_poll_interval']))         :  0);
 360         $diaspora_enabled       =       ((x($_POST,'diaspora_enabled'))         ? True                                          : False);
 361         $ssl_policy             =       ((x($_POST,'ssl_policy'))               ? intval($_POST['ssl_policy'])                  : 0);
 362         $force_ssl              =       ((x($_POST,'force_ssl'))                ? True                                          : False);
 363         $old_share              =       ((x($_POST,'old_share'))                ? True                                          : False);
 364         $hide_help              =       ((x($_POST,'hide_help'))                ? True                                          : False);
 365         $suppress_language      =       ((x($_POST,'suppress_language'))        ? True                                          : False);
 366         $use_fulltext_engine    =       ((x($_POST,'use_fulltext_engine'))      ? True                                          : False);
 367         $itemcache              =       ((x($_POST,'itemcache'))                ? notags(trim($_POST['itemcache']))             : '');
 368         $itemcache_duration     =       ((x($_POST,'itemcache_duration'))       ? intval($_POST['itemcache_duration'])          : 0);
 369         $max_comments           =       ((x($_POST,'max_comments'))             ? intval($_POST['max_comments'])                : 0);
 370         $lockpath               =       ((x($_POST,'lockpath'))                 ? notags(trim($_POST['lockpath']))              : '');
 371         $temppath               =       ((x($_POST,'temppath'))                 ? notags(trim($_POST['temppath']))              : '');
 372         $basepath               =       ((x($_POST,'basepath'))                 ? notags(trim($_POST['basepath']))              : '');
 373         $singleuser             =       ((x($_POST,'singleuser'))               ? notags(trim($_POST['singleuser']))            : '');
 374         $proxy_disabled         =       ((x($_POST,'proxy_disabled'))           ? True                                          : False);
 375         if($ssl_policy != intval(get_config('system','ssl_policy'))) {
 376                 if($ssl_policy == SSL_POLICY_FULL) {
 377                         q("update `contact` set
 378                                 `url`     = replace(`url`    , 'http:' , 'https:'),
 379                                 `photo`   = replace(`photo`  , 'http:' , 'https:'),
 380                                 `thumb`   = replace(`thumb`  , 'http:' , 'https:'),
 381                                 `micro`   = replace(`micro`  , 'http:' , 'https:'),
 382                                 `request` = replace(`request`, 'http:' , 'https:'),
 383                                 `notify`  = replace(`notify` , 'http:' , 'https:'),
 384                                 `poll`    = replace(`poll`   , 'http:' , 'https:'),
 385                                 `confirm` = replace(`confirm`, 'http:' , 'https:'),
 386                                 `poco`    = replace(`poco`   , 'http:' , 'https:')
 387                                 where `self` = 1"
 388                         );
 389                         q("update `profile` set
 390                                 `photo`   = replace(`photo`  , 'http:' , 'https:'),
 391                                 `thumb`   = replace(`thumb`  , 'http:' , 'https:')
 392                                 where 1 "
 393                         );
 394                 }
 395                 elseif($ssl_policy == SSL_POLICY_SELFSIGN) {
 396                         q("update `contact` set
 397                                 `url`     = replace(`url`    , 'https:' , 'http:'),
 398                                 `photo`   = replace(`photo`  , 'https:' , 'http:'),
 399                                 `thumb`   = replace(`thumb`  , 'https:' , 'http:'),
 400                                 `micro`   = replace(`micro`  , 'https:' , 'http:'),
 401                                 `request` = replace(`request`, 'https:' , 'http:'),
 402                                 `notify`  = replace(`notify` , 'https:' , 'http:'),
 403                                 `poll`    = replace(`poll`   , 'https:' , 'http:'),
 404                                 `confirm` = replace(`confirm`, 'https:' , 'http:'),
 405                                 `poco`    = replace(`poco`   , 'https:' , 'http:')
 406                                 where `self` = 1"
 407                         );
 408                         q("update `profile` set
 409                                 `photo`   = replace(`photo`  , 'https:' , 'http:'),
 410                                 `thumb`   = replace(`thumb`  , 'https:' , 'http:')
 411                                 where 1 "
 412                         );
 413                 }
 414         }
 415         set_config('system','ssl_policy',$ssl_policy);
 416         set_config('system','delivery_interval',$delivery_interval);
 417         set_config('system','poll_interval',$poll_interval);
 418         set_config('system','maxloadavg',$maxloadavg);
 419         set_config('config','sitename',$sitename);
 420         set_config('config','hostname',$hostname);
 421         set_config('config','sender_email', $sender_email);
 422         set_config('system','suppress_language',$suppress_language);
 423         if ($banner==""){
 424                 // don't know why, but del_config doesn't work...
 425                 q("DELETE FROM `config` WHERE `cat` = '%s' AND `k` = '%s' LIMIT 1",
 426                         dbesc("system"),
 427                         dbesc("banner")
 428                 );
 429         } else {
 430                 set_config('system','banner', $banner);
 431         }
 432         if ($info=="") {
 433                 del_config('config','info');
 434         } else {
 435                 set_config('config','info',$info);
 436         }
 437         set_config('system','language', $language);
 438         set_config('system','theme', $theme);
 439         if ( $theme_mobile === '---' ) {
 440                 del_config('system','mobile-theme');
 441         } else {
 442                 set_config('system','mobile-theme', $theme_mobile);
 443                 }
 444                 if ( $singleuser === '---' ) {
 445                         del_config('system','singleuser');
 446                 } else {
 447                         set_config('system','singleuser', $singleuser);
 448                 }
 449         set_config('system','maximagesize', $maximagesize);
 450         set_config('system','max_image_length', $maximagelength);
 451         set_config('system','jpeg_quality', $jpegimagequality);
 452
 453         set_config('config','register_policy', $register_policy);
 454         set_config('system','max_daily_registrations', $daily_registrations);
 455         set_config('system','account_abandon_days', $abandon_days);
 456         set_config('config','register_text', $register_text);
 457         set_config('system','allowed_sites', $allowed_sites);
 458         set_config('system','allowed_email', $allowed_email);
 459         set_config('system','block_public', $block_public);
 460         set_config('system','publish_all', $force_publish);
 461         if ($global_directory==""){
 462                 // don't know why, but del_config doesn't work...
 463                 q("DELETE FROM `config` WHERE `cat` = '%s' AND `k` = '%s' LIMIT 1",
 464                         dbesc("system"),
 465                         dbesc("directory_submit_url")
 466                 );
 467         } else {
 468                 set_config('system','directory_submit_url', $global_directory);
 469         }
 470         set_config('system','thread_allow', $thread_allow);
 471         set_config('system','newuser_private', $newuser_private);
 472         set_config('system','enotify_no_content', $enotify_no_content);
 473         set_config('system','disable_embedded', $disable_embedded);
 474         set_config('system','allow_users_remote_self', $allow_users_remote_self);
 475
 476         set_config('system','block_extended_register', $no_multi_reg);
 477         set_config('system','no_openid', $no_openid);
 478         set_config('system','no_regfullname', $no_regfullname);
 479         set_config('system','no_community_page', $no_community_page);
 480         set_config('system','no_utf', $no_utf);
 481         set_config('system','verifyssl', $verifyssl);
 482         set_config('system','proxyuser', $proxyuser);
 483         set_config('system','proxy', $proxy);
 484         set_config('system','curl_timeout', $timeout);
 485         set_config('system','dfrn_only', $dfrn_only);
 486         set_config('system','ostatus_disabled', $ostatus_disabled);
 487                 set_config('system','ostatus_poll_interval', $ostatus_poll_interval);
 488         set_config('system','diaspora_enabled', $diaspora_enabled);
 489         set_config('config','private_addons', $private_addons);
 490
 491         set_config('system','force_ssl', $force_ssl);
 492         set_config('system','old_share', $old_share);
 493         set_config('system','hide_help', $hide_help);
 494         set_config('system','use_fulltext_engine', $use_fulltext_engine);
 495         set_config('system','itemcache', $itemcache);
 496         set_config('system','itemcache_duration', $itemcache_duration);
 497         set_config('system','max_comments', $max_comments);
 498         set_config('system','lockpath', $lockpath);
 499         set_config('system','temppath', $temppath);
 500         set_config('system','basepath', $basepath);
 501         set_config('system','proxy_disabled', $proxy_disabled);
 502
 503         info( t('Site settings updated.') . EOL);
 504         goaway($a->get_baseurl(true) . '/admin/site' );
 505         return; // NOTREACHED
 506
 507 }
 508
 509 /**
 510  * @param  App $a
 511  * @return string
 512  */
 513 function admin_page_site(&$a) {
 514
 515         /* Installed langs */
 516         $lang_choices = array();
 517         $langs = glob('view/*/strings.php');
 518
 519         if(is_array($langs) && count($langs)) {
 520                 if(! in_array('view/en/strings.php',$langs))
 521                         $langs[] = 'view/en/';
 522                 asort($langs);
 523                 foreach($langs as $l) {
 524                         $t = explode("/",$l);
 525                         $lang_choices[$t[1]] = $t[1];
 526                 }
 527         }
 528
 529         /* Installed themes */
 530         $theme_choices = array();
 531         $theme_choices_mobile = array();
 532         $theme_choices_mobile["---"] = t("No special theme for mobile devices");
 533         $files = glob('view/theme/*');
 534         if($files) {
 535                 foreach($files as $file) {
 536                         $f = basename($file);
 537                         $theme_name = ((file_exists($file . '/experimental')) ?  sprintf("%s - \x28Experimental\x29", $f) : $f);
 538                         if (file_exists($file . '/mobile')) {
 539                                 $theme_choices_mobile[$f] = $theme_name;
 540                         }
 541                 else {
 542                                 $theme_choices[$f] = $theme_name;
 543                         }
 544                 }
 545                 }
 546
 547                 /* OStatus conversation poll choices */
 548                 $ostatus_poll_choices = array(
 549                 "-2" => t("Never"),
 550                 "-1" => t("At post arrival"),
 551                 "0" => t("Frequently"),
 552                 "60" => t("Hourly"),
 553                 "720" => t("Twice daily"),
 554                 "1440" => t("Daily")
 555                         );
 556
 557                 /* get user names to make the install a personal install of X */
 558                 $user_names = array();
 559                 $user_names['---'] = t('Multi user instance');
 560                 $users = q("SELECT username, nickname FROM `user`");
 561                 foreach ($users as $user) {
 562                         $user_names[$user['nickname']] = $user['username'];
 563                 }
 564
 565         /* Banner */
 566         $banner = get_config('system','banner');
 567         if($banner == false)
 568                 $banner = '<a href="http://friendica.com"><img id="logo-img" src="images/friendica-32.png" alt="logo" /></a><span id="logo-text"><a href="http://friendica.com">Friendica</a></span>';
 569         $banner = htmlspecialchars($banner);
 570         $info = get_config('config','info');
 571         $info = htmlspecialchars($info);
 572
 573         // Automatically create temporary paths
 574         get_temppath();
 575         get_lockpath();
 576         get_itemcachepath();
 577
 578         //echo "<pre>"; var_dump($lang_choices); die("</pre>");
 579
 580         /* Register policy */
 581         $register_choices = Array(
 582                 REGISTER_CLOSED => t("Closed"),
 583                 REGISTER_APPROVE => t("Requires approval"),
 584                 REGISTER_OPEN => t("Open")
 585         );
 586
 587         $ssl_choices = array(
 588                 SSL_POLICY_NONE => t("No SSL policy, links will track page SSL state"),
 589                 SSL_POLICY_FULL => t("Force all links to use SSL"),
 590                 SSL_POLICY_SELFSIGN => t("Self-signed certificate, use SSL for local links only (discouraged)")
 591         );
 592
 593         if ($a->config['hostname'] == "")
 594                 $a->config['hostname'] = $a->get_hostname();
 595
 596         $t = get_markup_template("admin_site.tpl");
 597         return replace_macros($t, array(
 598                 '$title' => t('Administration'),
 599                 '$page' => t('Site'),
 600                 '$submit' => t('Save Settings'),
 601                 '$registration' => t('Registration'),
 602                 '$upload' => t('File upload'),
 603                 '$corporate' => t('Policies'),
 604                 '$advanced' => t('Advanced'),
 605                 '$performance' => t('Performance'),
 606                 '$relocate'=> t('Relocate - WARNING: advanced function. Could make this server unreachable.'),
 607                 '$baseurl' => $a->get_baseurl(true),
 608                 // name, label, value, help string, extra data...
 609                 '$sitename'             => array('sitename', t("Site name"), htmlentities($a->config['sitename'], ENT_QUOTES), 'UTF-8'),
 610                 '$hostname'             => array('hostname', t("Host name"), $a->config['hostname'], ""),
 611                 '$sender_email'         => array('sender_email', t("Sender Email"), $a->config['sender_email'], "The email address your server shall use to send notification emails from.", "", "", "email"),
 612                 '$banner'               => array('banner', t("Banner/Logo"), $banner, ""),
 613                 '$info' => array('info',t('Additional Info'), $info, t('For public servers: you can add additional information here that will be listed at dir.friendica.com/siteinfo.')),
 614                 '$language'             => array('language', t("System language"), get_config('system','language'), "", $lang_choices),
 615                 '$theme'                => array('theme', t("System theme"), get_config('system','theme'), t("Default system theme - may be over-ridden by user profiles - <a href='#' id='cnftheme'>change theme settings</a>"), $theme_choices),
 616                 '$theme_mobile'         => array('theme_mobile', t("Mobile system theme"), get_config('system','mobile-theme'), t("Theme for mobile devices"), $theme_choices_mobile),
 617                 '$ssl_policy'           => array('ssl_policy', t("SSL link policy"), (string) intval(get_config('system','ssl_policy')), t("Determines whether generated links should be forced to use SSL"), $ssl_choices),
 618                 '$force_ssl'            => array('force_ssl', t("Force SSL"), get_config('system','force_ssl'), t("Force all Non-SSL requests to SSL - Attention: on some systems it could lead to endless loops.")),
 619                 '$old_share'            => array('old_share', t("Old style 'Share'"), get_config('system','old_share'), t("Deactivates the bbcode element 'share' for repeating items.")),
 620                 '$hide_help'            => array('hide_help', t("Hide help entry from navigation menu"), get_config('system','hide_help'), t("Hides the menu entry for the Help pages from the navigation menu. You can still access it calling /help directly.")),
 621                 '$singleuser'           => array('singleuser', t("Single user instance"), get_config('system','singleuser'), t("Make this instance multi-user or single-user for the named user"), $user_names),
 622                 '$maximagesize'         => array('maximagesize', t("Maximum image size"), get_config('system','maximagesize'), t("Maximum size in bytes of uploaded images. Default is 0, which means no limits.")),
 623                 '$maximagelength'               => array('maximagelength', t("Maximum image length"), get_config('system','max_image_length'), t("Maximum length in pixels of the longest side of uploaded images. Default is -1, which means no limits.")),
 624                 '$jpegimagequality'             => array('jpegimagequality', t("JPEG image quality"), get_config('system','jpeg_quality'), t("Uploaded JPEGS will be saved at this quality setting [0-100]. Default is 100, which is full quality.")),
 625
 626                 '$register_policy'      => array('register_policy', t("Register policy"), $a->config['register_policy'], "", $register_choices),
 627                 '$daily_registrations'  => array('max_daily_registrations', t("Maximum Daily Registrations"), get_config('system', 'max_daily_registrations'), t("If registration is permitted above, this sets the maximum number of new user registrations to accept per day.  If register is set to closed, this setting has no effect.")),
 628                 '$register_text'        => array('register_text', t("Register text"), htmlentities($a->config['register_text'], ENT_QUOTES, 'UTF-8'), t("Will be displayed prominently on the registration page.")),
 629                 '$abandon_days'         => array('abandon_days', t('Accounts abandoned after x days'), get_config('system','account_abandon_days'), t('Will not waste system resources polling external sites for abandonded accounts. Enter 0 for no time limit.')),
 630                 '$allowed_sites'        => array('allowed_sites', t("Allowed friend domains"), get_config('system','allowed_sites'), t("Comma separated list of domains which are allowed to establish friendships with this site. Wildcards are accepted. Empty to allow any domains")),
 631                 '$allowed_email'        => array('allowed_email', t("Allowed email domains"), get_config('system','allowed_email'), t("Comma separated list of domains which are allowed in email addresses for registrations to this site. Wildcards are accepted. Empty to allow any domains")),
 632                 '$block_public'         => array('block_public', t("Block public"), get_config('system','block_public'), t("Check to block public access to all otherwise public personal pages on this site unless you are currently logged in.")),
 633                 '$force_publish'        => array('publish_all', t("Force publish"), get_config('system','publish_all'), t("Check to force all profiles on this site to be listed in the site directory.")),
 634                 '$global_directory'     => array('directory_submit_url', t("Global directory update URL"), get_config('system','directory_submit_url'), t("URL to update the global directory. If this is not set, the global directory is completely unavailable to the application.")),
 635                 '$thread_allow'         => array('thread_allow', t("Allow threaded items"), get_config('system','thread_allow'), t("Allow infinite level threading for items on this site.")),
 636                 '$newuser_private'      => array('newuser_private', t("Private posts by default for new users"), get_config('system','newuser_private'), t("Set default post permissions for all new members to the default privacy group rather than public.")),
 637                 '$enotify_no_content'   => array('enotify_no_content', t("Don't include post content in email notifications"), get_config('system','enotify_no_content'), t("Don't include the content of a post/comment/private message/etc. in the email notifications that are sent out from this site, as a privacy measure.")),
 638                 '$private_addons'       => array('private_addons', t("Disallow public access to addons listed in the apps menu."), get_config('config','private_addons'), t("Checking this box will restrict addons listed in the apps menu to members only.")),
 639                 '$disable_embedded'     => array('disable_embedded', t("Don't embed private images in posts"), get_config('system','disable_embedded'), t("Don't replace locally-hosted private photos in posts with an embedded copy of the image. This means that contacts who receive posts containing private photos will have to authenticate and load each image, which may take a while.")),
 640                 '$allow_users_remote_self'      => array('allow_users_remote_self', t('Allow Users to set remote_self'), get_config('system','allow_users_remote_self'), t('With checking this, every user is allowed to mark every contact as a remote_self in the repair contact dialog. Setting this flag on a contact causes mirroring every posting of that contact in the users stream.')),
 641                 '$no_multi_reg'         => array('no_multi_reg', t("Block multiple registrations"),  get_config('system','block_extended_register'), t("Disallow users to register additional accounts for use as pages.")),
 642                 '$no_openid'            => array('no_openid', t("OpenID support"), !get_config('system','no_openid'), t("OpenID support for registration and logins.")),
 643                 '$no_regfullname'       => array('no_regfullname', t("Fullname check"), !get_config('system','no_regfullname'), t("Force users to register with a space between firstname and lastname in Full name, as an antispam measure")),
 644                 '$no_utf'               => array('no_utf', t("UTF-8 Regular expressions"), !get_config('system','no_utf'), t("Use PHP UTF8 regular expressions")),
 645                 '$no_community_page'    => array('no_community_page', t("Show Community Page"), !get_config('system','no_community_page'), t("Display a Community page showing all recent public postings on this site.")),
 646                 '$ostatus_disabled'     => array('ostatus_disabled', t("Enable OStatus support"), !get_config('system','ostatus_disabled'), t("Provide built-in OStatus \x28StatusNet, GNU Social etc.\x29 compatibility. All communications in OStatus are public, so privacy warnings will be occasionally displayed.")),
 647                 '$ostatus_poll_interval'        => array('ostatus_poll_interval', t("OStatus conversation completion interval"), (string) intval(get_config('system','ostatus_poll_interval')), t("How often shall the poller check for new entries in OStatus conversations? This can be a very ressource task."), $ostatus_poll_choices),
 648                 '$diaspora_enabled'     => array('diaspora_enabled', t("Enable Diaspora support"), get_config('system','diaspora_enabled'), t("Provide built-in Diaspora network compatibility.")),
 649                 '$dfrn_only'            => array('dfrn_only', t('Only allow Friendica contacts'), get_config('system','dfrn_only'), t("All contacts must use Friendica protocols. All other built-in communication protocols disabled.")),
 650                 '$verifyssl'            => array('verifyssl', t("Verify SSL"), get_config('system','verifyssl'), t("If you wish, you can turn on strict certificate checking. This will mean you cannot connect (at all) to self-signed SSL sites.")),
 651                 '$proxyuser'            => array('proxyuser', t("Proxy user"), get_config('system','proxyuser'), ""),
 652                 '$proxy'                => array('proxy', t("Proxy URL"), get_config('system','proxy'), ""),
 653                 '$timeout'              => array('timeout', t("Network timeout"), (x(get_config('system','curl_timeout'))?get_config('system','curl_timeout'):60), t("Value is in seconds. Set to 0 for unlimited (not recommended).")),
 654                 '$delivery_interval'    => array('delivery_interval', t("Delivery interval"), (x(get_config('system','delivery_interval'))?get_config('system','delivery_interval'):2), t("Delay background delivery processes by this many seconds to reduce system load. Recommend: 4-5 for shared hosts, 2-3 for virtual private servers. 0-1 for large dedicated servers.")),
 655                 '$poll_interval'        => array('poll_interval', t("Poll interval"), (x(get_config('system','poll_interval'))?get_config('system','poll_interval'):2), t("Delay background polling processes by this many seconds to reduce system load. If 0, use delivery interval.")),
 656                 '$maxloadavg'           => array('maxloadavg', t("Maximum Load Average"), ((intval(get_config('system','maxloadavg')) > 0)?get_config('system','maxloadavg'):50), t("Maximum system load before delivery and poll processes are deferred - default 50.")),
 657
 658                 '$use_fulltext_engine'  => array('use_fulltext_engine', t("Use MySQL full text engine"), get_config('system','use_fulltext_engine'), t("Activates the full text engine. Speeds up search - but can only search for four and more characters.")),
 659                 '$suppress_language'    => array('suppress_language', t("Suppress Language"), get_config('system','suppress_language'), t("Suppress language information in meta information about a posting.")),
 660                 '$itemcache'            => array('itemcache', t("Path to item cache"), get_config('system','itemcache'), "The item caches buffers generated bbcode and external images."),
 661                 '$itemcache_duration'   => array('itemcache_duration', t("Cache duration in seconds"), get_config('system','itemcache_duration'), t("How long should the cache files be hold? Default value is 86400 seconds (One day). To disable the item cache, set the value to -1.")),
 662                 '$max_comments'         => array('max_comments', t("Maximum numbers of comments per post"), get_config('system','max_comments'), t("How much comments should be shown for each post? Default value is 100.")),
 663                 '$lockpath'             => array('lockpath', t("Path for lock file"), get_config('system','lockpath'), "The lock file is used to avoid multiple pollers at one time. Only define a folder here."),
 664                 '$temppath'             => array('temppath', t("Temp path"), get_config('system','temppath'), "If you have a restricted system where the webserver can't access the system temp path, enter another path here."),
 665                 '$basepath'             => array('basepath', t("Base path to installation"), get_config('system','basepath'), "If the system cannot detect the correct path to your installation, enter the correct path here. This setting should only be set if you are using a restricted system and symbolic links to your webroot."),
 666                 '$proxy_disabled'       => array('proxy_disabled', t("Disable picture proxy"), get_config('system','proxy_disabled'), t("The picture proxy increases performance and privacy. It shouldn't be used on systems with very low bandwith.")),
 667
 668                 '$relocate_url'     => array('relocate_url', t("New base url"), $a->get_baseurl(), "Change base url for this server. Sends relocate message to all DFRN contacts of all users."),
 669         '$form_security_token' => get_form_security_token("admin_site")
 670
 671         ));
 672
 673 }
 674
 675
 676 function admin_page_dbsync(&$a) {
 677
 678         $o = '';
 679
 680         if($a->argc > 3 && intval($a->argv[3]) && $a->argv[2] === 'mark') {
 681                 set_config('database', 'update_' . intval($a->argv[3]), 'success');
 682                 $curr = get_config('system','build');
 683                 if(intval($curr) == intval($a->argv[3]))
 684                         set_config('system','build',intval($curr) + 1);
 685                 info( t('Update has been marked successful') . EOL);
 686                 goaway($a->get_baseurl(true) . '/admin/dbsync');
 687         }
 688
 689         if(($a->argc > 2) AND (intval($a->argv[2]) OR ($a->argv[2] === 'check'))) {
 690                 require_once("include/dbstructure.php");
 691                 $retval = update_structure(false, true);
 692                 if (!$retval) {
 693                         $o .= sprintf(t("Database structure update %s was successfully applied."), DB_UPDATE_VERSION)."<br />";
 694                         set_config('database', 'dbupdate_'.DB_UPDATE_VERSION, 'success');
 695                 } else
 696                         $o .= sprintf(t("Executing of database structure update %s failed with error: %s"),
 697                                         DB_UPDATE_VERSION, $retval)."<br />";
 698                 if ($a->argv[2] === 'check')
 699                         return $o;
 700         }
 701
 702         if ($a->argc > 2 && intval($a->argv[2])) {
 703                 require_once('update.php');
 704                 $func = 'update_' . intval($a->argv[2]);
 705                 if(function_exists($func)) {
 706                         $retval = $func();
 707                         if($retval === UPDATE_FAILED) {
 708                                 $o .= sprintf(t("Executing %s failed with error: %s"), $func, $retval);
 709                         }
 710                         elseif($retval === UPDATE_SUCCESS) {
 711                                 $o .= sprintf(t('Update %s was successfully applied.', $func));
 712                                 set_config('database',$func, 'success');
 713                         }
 714                         else
 715                                 $o .= sprintf(t('Update %s did not return a status. Unknown if it succeeded.'), $func);
 716                 } else {
 717                         $o .= sprintf(t('There was no additional update function %s that needed to be called.'), $func)."<br />";
 718                         set_config('database',$func, 'success');
 719                 }
 720                 return $o;
 721         }
 722
 723         $failed = array();
 724         $r = q("select k, v from config where `cat` = 'database' ");
 725         if(count($r)) {
 726                 foreach($r as $rr) {
 727                         $upd = intval(substr($rr['k'],7));
 728                         if($upd < 1139 || $rr['v'] === 'success')
 729                                 continue;
 730                         $failed[] = $upd;
 731                 }
 732         }
 733         if(! count($failed)) {
 734                 $o = replace_macros(get_markup_template('structure_check.tpl'),array(
 735                         '$base' => $a->get_baseurl(true),
 736                         '$banner' => t('No failed updates.'),
 737                         '$check' => t('Check database structure'),
 738                 ));
 739         } else {
 740                 $o = replace_macros(get_markup_template('failed_updates.tpl'),array(
 741                         '$base' => $a->get_baseurl(true),
 742                         '$banner' => t('Failed Updates'),
 743                         '$desc' => t('This does not include updates prior to 1139, which did not return a status.'),
 744                         '$mark' => t('Mark success (if update was manually applied)'),
 745                         '$apply' => t('Attempt to execute this update step automatically'),
 746                         '$failed' => $failed
 747                 ));
 748         }
 749
 750         return $o;
 751
 752 }
 753
 754 /**
 755  * Users admin page
 756  *
 757  * @param App $a
 758  */
 759 function admin_page_users_post(&$a){
 760         $pending = ( x($_POST, 'pending') ? $_POST['pending'] : Array() );
 761         $users = ( x($_POST, 'user') ? $_POST['user'] : Array() );
 762         $nu_name = ( x($_POST, 'new_user_name') ? $_POST['new_user_name'] : '');
 763         $nu_nickname = ( x($_POST, 'new_user_nickname') ? $_POST['new_user_nickname'] : '');
 764         $nu_email = ( x($_POST, 'new_user_email') ? $_POST['new_user_email'] : '');
 765
 766         check_form_security_token_redirectOnErr('/admin/users', 'admin_users');
 767
 768         if (!($nu_name==="") && !($nu_email==="") && !($nu_nickname==="")) {
 769                 require_once('include/user.php');
 770
 771                 $result = create_user( array('username'=>$nu_name, 'email'=>$nu_email, 'nickname'=>$nu_nickname, 'verified'=>1)  );
 772                 if(! $result['success']) {
 773                         notice($result['message']);
 774                         return;
 775                 }
 776                 $nu = $result['user'];
 777                 $preamble = deindent(t('
 778                         Dear %1$s,
 779                                 the administrator of %2$s has set up an account for you.'));
 780                 $body = deindent(t('
 781                         The login details are as follows:
 782
 783                         Site Location:  %1$s
 784                         Login Name:             %2$s
 785                         Password:               %3$s
 786
 787                         You may change your password from your account "Settings" page after logging
 788                         in.
 789
 790                         Please take a few moments to review the other account settings on that page.
 791
 792                         You may also wish to add some basic information to your default profile
 793                         (on the "Profiles" page) so that other people can easily find you.
 794
 795                         We recommend setting your full name, adding a profile photo,
 796                         adding some profile "keywords" (very useful in making new friends) - and
 797                         perhaps what country you live in; if you do not wish to be more specific
 798                         than that.
 799
 800                         We fully respect your right to privacy, and none of these items are necessary.
 801                         If you are new and do not know anybody here, they may help
 802                         you to make some new and interesting friends.
 803
 804                         Thank you and welcome to %4$s.'));
 805
 806                 $preamble = sprintf($preamble, $nu['username'], $a->config['sitename']);
 807                 $body = sprintf($body, $a->get_baseurl(), $nu['email'], $result['password'], $a->config['sitename']);
 808
 809                 notification(array(
 810                         'type' => "SYSTEM_EMAIL",
 811                         'to_email' => $nu['email'],
 812                         'subject'=> sprintf( t('Registration details for %s'), $a->config['sitename']),
 813                         'preamble'=> $preamble,
 814                         'body' => $body));
 815
 816         }
 817
 818         if (x($_POST,'page_users_block')){
 819                 foreach($users as $uid){
 820                         q("UPDATE `user` SET `blocked`=1-`blocked` WHERE `uid`=%s",
 821                                 intval( $uid )
 822                         );
 823                 }
 824                 notice( sprintf( tt("%s user blocked/unblocked", "%s users blocked/unblocked", count($users)), count($users)) );
 825         }
 826         if (x($_POST,'page_users_delete')){
 827                 require_once("include/Contact.php");
 828                 foreach($users as $uid){
 829                         user_remove($uid);
 830                 }
 831                 notice( sprintf( tt("%s user deleted", "%s users deleted", count($users)), count($users)) );
 832         }
 833
 834         if (x($_POST,'page_users_approve')){
 835                 require_once("mod/regmod.php");
 836                 foreach($pending as $hash){
 837                         user_allow($hash);
 838                 }
 839         }
 840         if (x($_POST,'page_users_deny')){
 841                 require_once("mod/regmod.php");
 842                 foreach($pending as $hash){
 843                         user_deny($hash);
 844                 }
 845         }
 846         goaway($a->get_baseurl(true) . '/admin/users' );
 847         return; // NOTREACHED
 848 }
 849
 850 /**
 851  * @param App $a
 852  * @return string
 853  */
 854 function admin_page_users(&$a){
 855         if ($a->argc>2) {
 856                 $uid = $a->argv[3];
 857                 $user = q("SELECT username, blocked FROM `user` WHERE `uid`=%d", intval($uid));
 858                 if (count($user)==0){
 859                         notice( 'User not found' . EOL);
 860                         goaway($a->get_baseurl(true) . '/admin/users' );
 861                         return ''; // NOTREACHED
 862                 }
 863                 switch($a->argv[2]){
 864                         case "delete":{
 865                                 check_form_security_token_redirectOnErr('/admin/users', 'admin_users', 't');
 866                                 // delete user
 867                                 require_once("include/Contact.php");
 868                                 user_remove($uid);
 869
 870                                 notice( sprintf(t("User '%s' deleted"), $user[0]['username']) . EOL);
 871                         }; break;
 872                         case "block":{
 873                                 check_form_security_token_redirectOnErr('/admin/users', 'admin_users', 't');
 874                                 q("UPDATE `user` SET `blocked`=%d WHERE `uid`=%s",
 875                                         intval( 1-$user[0]['blocked'] ),
 876                                         intval( $uid )
 877                                 );
 878                                 notice( sprintf( ($user[0]['blocked']?t("User '%s' unblocked"):t("User '%s' blocked")) , $user[0]['username']) . EOL);
 879                         }; break;
 880                 }
 881                 goaway($a->get_baseurl(true) . '/admin/users' );
 882                 return ''; // NOTREACHED
 883
 884         }
 885
 886         /* get pending */
 887         $pending = q("SELECT `register`.*, `contact`.`name`, `user`.`email`
 888                                  FROM `register`
 889                                  LEFT JOIN `contact` ON `register`.`uid` = `contact`.`uid`
 890                                  LEFT JOIN `user` ON `register`.`uid` = `user`.`uid`;");
 891
 892
 893         /* get users */
 894
 895         $total = q("SELECT count(*) as total FROM `user` where 1");
 896         if(count($total)) {
 897                 $a->set_pager_total($total[0]['total']);
 898                 $a->set_pager_itemspage(100);
 899         }
 900
 901
 902         $users = q("SELECT `user` . * , `contact`.`name` , `contact`.`url` , `contact`.`micro`, `lastitem`.`lastitem_date`, `user`.`account_expired`
 903                                 FROM
 904                                         (SELECT MAX(`item`.`changed`) as `lastitem_date`, `item`.`uid`
 905                                         FROM `item`
 906                                         WHERE `item`.`type` = 'wall'
 907                                         GROUP BY `item`.`uid`) AS `lastitem`
 908                                                  RIGHT OUTER JOIN `user` ON `user`.`uid` = `lastitem`.`uid`,
 909                                            `contact`
 910                                 WHERE
 911                                            `user`.`uid` = `contact`.`uid`
 912                                                 AND `user`.`verified` =1
 913                                         AND `contact`.`self` =1
 914                                 ORDER BY `contact`.`name` LIMIT %d, %d
 915                                 ",
 916                                 intval($a->pager['start']),
 917                                 intval($a->pager['itemspage'])
 918                                 );
 919
 920         function _setup_users($e){
 921                 $a = get_app();
 922
 923                 $adminlist = explode(",", str_replace(" ", "", $a->config['admin_email']));
 924
 925                 $accounts = Array(
 926                         t('Normal Account'),
 927                         t('Soapbox Account'),
 928                         t('Community/Celebrity Account'),
 929                                                 t('Automatic Friend Account')
 930                 );
 931                 $e['page-flags'] = $accounts[$e['page-flags']];
 932                 $e['register_date'] = relative_date($e['register_date']);
 933                 $e['login_date'] = relative_date($e['login_date']);
 934                 $e['lastitem_date'] = relative_date($e['lastitem_date']);
 935                 //$e['is_admin'] = ($e['email'] === $a->config['admin_email']);
 936                 $e['is_admin'] = in_array($e['email'], $adminlist);
 937                 $e['deleted'] = ($e['account_removed']?relative_date($e['account_expires_on']):False);
 938                 return $e;
 939         }
 940         $users = array_map("_setup_users", $users);
 941
 942
 943         // Get rid of dashes in key names, Smarty3 can't handle them
 944         // and extracting deleted users
 945
 946         $tmp_users = Array();
 947         $deleted = Array();
 948
 949         while(count($users)) {
 950                 $new_user = Array();
 951                 foreach( array_pop($users) as $k => $v) {
 952                         $k = str_replace('-','_',$k);
 953                         $new_user[$k] = $v;
 954                 }
 955                 if($new_user['deleted']) {
 956                         array_push($deleted, $new_user);
 957                 }
 958                 else {
 959                         array_push($tmp_users, $new_user);
 960                 }
 961         }
 962         //Reversing the two array, and moving $tmp_users to $users
 963         array_reverse($deleted);
 964         while(count($tmp_users)) {
 965                 array_push($users, array_pop($tmp_users));
 966         }
 967
 968         $t = get_markup_template("admin_users.tpl");
 969         $o = replace_macros($t, array(
 970                 // strings //
 971                 '$title' => t('Administration'),
 972                 '$page' => t('Users'),
 973                 '$submit' => t('Add User'),
 974                 '$select_all' => t('select all'),
 975                 '$h_pending' => t('User registrations waiting for confirm'),
 976                 '$h_deleted' => t('User waiting for permanent deletion'),
 977                 '$th_pending' => array( t('Request date'), t('Name'), t('Email') ),
 978                 '$no_pending' =>  t('No registrations.'),
 979                 '$approve' => t('Approve'),
 980                 '$deny' => t('Deny'),
 981                 '$delete' => t('Delete'),
 982                 '$block' => t('Block'),
 983                 '$unblock' => t('Unblock'),
 984                 '$siteadmin' => t('Site admin'),
 985                 '$accountexpired' => t('Account expired'),
 986
 987                 '$h_users' => t('Users'),
 988                 '$h_newuser' => t('New User'),
 989                 '$th_deleted' => array( t('Name'), t('Email'), t('Register date'), t('Last login'), t('Last item'), t('Deleted since') ),
 990                 '$th_users' => array( t('Name'), t('Email'), t('Register date'), t('Last login'), t('Last item'),  t('Account') ),
 991
 992                 '$confirm_delete_multi' => t('Selected users will be deleted!\n\nEverything these users had posted on this site will be permanently deleted!\n\nAre you sure?'),
 993                 '$confirm_delete' => t('The user {0} will be deleted!\n\nEverything this user has posted on this site will be permanently deleted!\n\nAre you sure?'),
 994
 995                 '$form_security_token' => get_form_security_token("admin_users"),
 996
 997                 // values //
 998                 '$baseurl' => $a->get_baseurl(true),
 999
1000                 '$pending' => $pending,
1001                 'deleted' => $deleted,
1002                 '$users' => $users,
1003                 '$newusername'  => array('new_user_name', t("Name"), '', t("Name of the new user.")),
1004                 '$newusernickname'  => array('new_user_nickname', t("Nickname"), '', t("Nickname of the new user.")),
1005                 '$newuseremail'  => array('new_user_email', t("Email"), '', t("Email address of the new user."), '', '', 'email'),
1006         ));
1007         $o .= paginate($a);
1008         return $o;
1009 }
1010
1011
1012 /**
1013  * Plugins admin page
1014  *
1015  * @param App $a
1016  * @return string
1017  */
1018 function admin_page_plugins(&$a){
1019
1020         /**
1021          * Single plugin
1022          */
1023         if ($a->argc == 3){
1024                 $plugin = $a->argv[2];
1025                 if (!is_file("addon/$plugin/$plugin.php")){
1026                         notice( t("Item not found.") );
1027                         return '';
1028                 }
1029
1030                 if (x($_GET,"a") && $_GET['a']=="t"){
1031                         check_form_security_token_redirectOnErr('/admin/plugins', 'admin_themes', 't');
1032
1033                         // Toggle plugin status
1034                         $idx = array_search($plugin, $a->plugins);
1035                         if ($idx !== false){
1036                                 unset($a->plugins[$idx]);
1037                                 uninstall_plugin($plugin);
1038                                 info( sprintf( t("Plugin %s disabled."), $plugin ) );
1039                         } else {
1040                                 $a->plugins[] = $plugin;
1041                                 install_plugin($plugin);
1042                                 info( sprintf( t("Plugin %s enabled."), $plugin ) );
1043                         }
1044                         set_config("system","addon", implode(", ",$a->plugins));
1045                         goaway($a->get_baseurl(true) . '/admin/plugins' );
1046                         return ''; // NOTREACHED
1047                 }
1048                 // display plugin details
1049                 require_once('library/markdown.php');
1050
1051                 if (in_array($plugin, $a->plugins)){
1052                         $status="on"; $action= t("Disable");
1053                 } else {
1054                         $status="off"; $action= t("Enable");
1055                 }
1056
1057                 $readme=Null;
1058                 if (is_file("addon/$plugin/README.md")){
1059                         $readme = file_get_contents("addon/$plugin/README.md");
1060                         $readme = Markdown($readme);
1061                 } else if (is_file("addon/$plugin/README")){
1062                         $readme = "<pre>". file_get_contents("addon/$plugin/README") ."</pre>";
1063                 }
1064
1065                 $admin_form="";
1066                 if (is_array($a->plugins_admin) && in_array($plugin, $a->plugins_admin)){
1067                         @require_once("addon/$plugin/$plugin.php");
1068                         $func = $plugin.'_plugin_admin';
1069                         $func($a, $admin_form);
1070                 }
1071
1072                 $t = get_markup_template("admin_plugins_details.tpl");
1073
1074                 return replace_macros($t, array(
1075                         '$title' => t('Administration'),
1076                         '$page' => t('Plugins'),
1077                         '$toggle' => t('Toggle'),
1078                         '$settings' => t('Settings'),
1079                         '$baseurl' => $a->get_baseurl(true),
1080
1081                         '$plugin' => $plugin,
1082                         '$status' => $status,
1083                         '$action' => $action,
1084                         '$info' => get_plugin_info($plugin),
1085                         '$str_author' => t('Author: '),
1086                         '$str_maintainer' => t('Maintainer: '),
1087
1088                         '$admin_form' => $admin_form,
1089                         '$function' => 'plugins',
1090                         '$screenshot' => '',
1091                         '$readme' => $readme,
1092
1093                         '$form_security_token' => get_form_security_token("admin_themes"),
1094                 ));
1095         }
1096
1097
1098
1099         /**
1100          * List plugins
1101          */
1102
1103         $plugins = array();
1104         $files = glob("addon/*/"); /* */
1105         if($files) {
1106                 foreach($files as $file) {
1107                         if (is_dir($file)){
1108                                 list($tmp, $id)=array_map("trim", explode("/",$file));
1109                                 $info = get_plugin_info($id);
1110                                 $show_plugin = true;
1111
1112                                 // If the addon is unsupported, then only show it, when it is enabled
1113                                 if ((strtolower($info["status"]) == "unsupported") AND !in_array($id,  $a->plugins))
1114                                         $show_plugin = false;
1115
1116                                 // Override the above szenario, when the admin really wants to see outdated stuff
1117                                 if (get_config("system", "show_unsupported_addons"))
1118                                         $show_plugin = true;
1119
1120                                 if ($show_plugin)
1121                                         $plugins[] = array($id, (in_array($id,  $a->plugins)?"on":"off") , $info);
1122                         }
1123                 }
1124         }
1125
1126         $t = get_markup_template("admin_plugins.tpl");
1127         return replace_macros($t, array(
1128                 '$title' => t('Administration'),
1129                 '$page' => t('Plugins'),
1130                 '$submit' => t('Save Settings'),
1131                 '$baseurl' => $a->get_baseurl(true),
1132                 '$function' => 'plugins',
1133                 '$plugins' => $plugins,
1134                 '$form_security_token' => get_form_security_token("admin_themes"),
1135         ));
1136 }
1137
1138 /**
1139  * @param array $themes
1140  * @param string $th
1141  * @param int $result
1142  */
1143 function toggle_theme(&$themes,$th,&$result) {
1144         for($x = 0; $x < count($themes); $x ++) {
1145                 if($themes[$x]['name'] === $th) {
1146                         if($themes[$x]['allowed']) {
1147                                 $themes[$x]['allowed'] = 0;
1148                                 $result = 0;
1149                         }
1150                         else {
1151                                 $themes[$x]['allowed'] = 1;
1152                                 $result = 1;
1153                         }
1154                 }
1155         }
1156 }
1157
1158 /**
1159  * @param array $themes
1160  * @param string $th
1161  * @return int
1162  */
1163 function theme_status($themes,$th) {
1164         for($x = 0; $x < count($themes); $x ++) {
1165                 if($themes[$x]['name'] === $th) {
1166                         if($themes[$x]['allowed']) {
1167                                 return 1;
1168                         }
1169                         else {
1170                                 return 0;
1171                         }
1172                 }
1173         }
1174         return 0;
1175 }
1176
1177
1178 /**
1179  * @param array $themes
1180  * @return string
1181  */
1182 function rebuild_theme_table($themes) {
1183         $o = '';
1184         if(count($themes)) {
1185                 foreach($themes as $th) {
1186                         if($th['allowed']) {
1187                                 if(strlen($o))
1188                                         $o .= ',';
1189                                 $o .= $th['name'];
1190                         }
1191                 }
1192         }
1193         return $o;
1194 }
1195
1196
1197 /**
1198  * Themes admin page
1199  *
1200  * @param App $a
1201  * @return string
1202  */
1203 function admin_page_themes(&$a){
1204
1205         $allowed_themes_str = get_config('system','allowed_themes');
1206         $allowed_themes_raw = explode(',',$allowed_themes_str);
1207         $allowed_themes = array();
1208         if(count($allowed_themes_raw))
1209                 foreach($allowed_themes_raw as $x)
1210                         if(strlen(trim($x)))
1211                                 $allowed_themes[] = trim($x);
1212
1213         $themes = array();
1214         $files = glob('view/theme/*'); /* */
1215         if($files) {
1216                 foreach($files as $file) {
1217                         $f = basename($file);
1218                         $is_experimental = intval(file_exists($file . '/experimental'));
1219                         $is_supported = 1-(intval(file_exists($file . '/unsupported')));
1220                         $is_allowed = intval(in_array($f,$allowed_themes));
1221
1222                         if ($is_allowed OR $is_supported OR get_config("system", "show_unsupported_themes"))
1223                                 $themes[] = array('name' => $f, 'experimental' => $is_experimental, 'supported' => $is_supported, 'allowed' => $is_allowed);
1224                 }
1225         }
1226
1227         if(! count($themes)) {
1228                 notice( t('No themes found.'));
1229                 return '';
1230         }
1231
1232         /**
1233          * Single theme
1234          */
1235
1236         if ($a->argc == 3){
1237                 $theme = $a->argv[2];
1238                 if(! is_dir("view/theme/$theme")){
1239                         notice( t("Item not found.") );
1240                         return '';
1241                 }
1242
1243                 if (x($_GET,"a") && $_GET['a']=="t"){
1244                         check_form_security_token_redirectOnErr('/admin/themes', 'admin_themes', 't');
1245
1246                         // Toggle theme status
1247
1248                         toggle_theme($themes,$theme,$result);
1249                         $s = rebuild_theme_table($themes);
1250                         if($result) {
1251                                 install_theme($theme);
1252                                 info( sprintf('Theme %s enabled.',$theme));
1253                         }
1254                         else {
1255                                 uninstall_theme($theme);
1256                                 info( sprintf('Theme %s disabled.',$theme));
1257                         }
1258
1259                         set_config('system','allowed_themes',$s);
1260                         goaway($a->get_baseurl(true) . '/admin/themes' );
1261                         return ''; // NOTREACHED
1262                 }
1263
1264                 // display theme details
1265                 require_once('library/markdown.php');
1266
1267                 if (theme_status($themes,$theme)) {
1268                         $status="on"; $action= t("Disable");
1269                 } else {
1270                         $status="off"; $action= t("Enable");
1271                 }
1272
1273                 $readme=Null;
1274                 if (is_file("view/theme/$theme/README.md")){
1275                         $readme = file_get_contents("view/theme/$theme/README.md");
1276                         $readme = Markdown($readme);
1277                 } else if (is_file("view/theme/$theme/README")){
1278                         $readme = "<pre>". file_get_contents("view/theme/$theme/README") ."</pre>";
1279                 }
1280
1281                 $admin_form="";
1282                 if (is_file("view/theme/$theme/config.php")){
1283                         require_once("view/theme/$theme/config.php");
1284                         if(function_exists("theme_admin")){
1285                                 $admin_form = theme_admin($a);
1286                         }
1287
1288                 }
1289
1290                 $screenshot = array( get_theme_screenshot($theme), t('Screenshot'));
1291                 if(! stristr($screenshot[0],$theme))
1292                         $screenshot = null;
1293
1294                 $t = get_markup_template("admin_plugins_details.tpl");
1295                 return replace_macros($t, array(
1296                         '$title' => t('Administration'),
1297                         '$page' => t('Themes'),
1298                         '$toggle' => t('Toggle'),
1299                         '$settings' => t('Settings'),
1300                         '$baseurl' => $a->get_baseurl(true),
1301
1302                         '$plugin' => $theme,
1303                         '$status' => $status,
1304                         '$action' => $action,
1305                         '$info' => get_theme_info($theme),
1306                         '$function' => 'themes',
1307                         '$admin_form' => $admin_form,
1308                         '$str_author' => t('Author: '),
1309                         '$str_maintainer' => t('Maintainer: '),
1310                         '$screenshot' => $screenshot,
1311                         '$readme' => $readme,
1312
1313                         '$form_security_token' => get_form_security_token("admin_themes"),
1314                 ));
1315         }
1316
1317         /**
1318          * List themes
1319          */
1320
1321         $xthemes = array();
1322         if($themes) {
1323                 foreach($themes as $th) {
1324                         $xthemes[] = array($th['name'],(($th['allowed']) ? "on" : "off"), get_theme_info($th['name']));
1325                 }
1326         }
1327
1328         $t = get_markup_template("admin_plugins.tpl");
1329         return replace_macros($t, array(
1330                 '$title' => t('Administration'),
1331                 '$page' => t('Themes'),
1332                 '$submit' => t('Save Settings'),
1333                 '$baseurl' => $a->get_baseurl(true),
1334                 '$function' => 'themes',
1335                 '$plugins' => $xthemes,
1336                 '$experimental' => t('[Experimental]'),
1337                 '$unsupported' => t('[Unsupported]'),
1338                 '$form_security_token' => get_form_security_token("admin_themes"),
1339         ));
1340 }
1341
1342
1343 /**
1344  * Logs admin page
1345  *
1346  * @param App $a
1347  */
1348
1349 function admin_page_logs_post(&$a) {
1350         if (x($_POST,"page_logs")) {
1351                 check_form_security_token_redirectOnErr('/admin/logs', 'admin_logs');
1352
1353                 $logfile                =       ((x($_POST,'logfile'))          ? notags(trim($_POST['logfile']))       : '');
1354                 $debugging              =       ((x($_POST,'debugging'))        ? true                                                          : false);
1355                 $loglevel               =       ((x($_POST,'loglevel'))         ? intval(trim($_POST['loglevel']))      : 0);
1356
1357                 set_config('system','logfile', $logfile);
1358                 set_config('system','debugging',  $debugging);
1359                 set_config('system','loglevel', $loglevel);
1360
1361
1362         }
1363
1364         info( t("Log settings updated.") );
1365         goaway($a->get_baseurl(true) . '/admin/logs' );
1366         return; // NOTREACHED
1367 }
1368
1369 /**
1370  * @param App $a
1371  * @return string
1372  */
1373 function admin_page_logs(&$a){
1374
1375         $log_choices = Array(
1376                 LOGGER_NORMAL => 'Normal',
1377                 LOGGER_TRACE => 'Trace',
1378                 LOGGER_DEBUG => 'Debug',
1379                 LOGGER_DATA => 'Data',
1380                 LOGGER_ALL => 'All'
1381         );
1382
1383         $t = get_markup_template("admin_logs.tpl");
1384
1385         $f = get_config('system','logfile');
1386
1387         $data = '';
1388
1389         if(!file_exists($f)) {
1390                 $data = t("Error trying to open <strong>$f</strong> log file.\r\n<br/>Check to see if file $f exist and is
1391 readable.");
1392         }
1393         else {
1394                 $fp = fopen($f, 'r');
1395                 if(!$fp) {
1396                         $data = t("Couldn't open <strong>$f</strong> log file.\r\n<br/>Check to see if file $f is readable.");
1397                 }
1398                 else {
1399                         $fstat = fstat($fp);
1400                         $size = $fstat['size'];
1401                         if($size != 0)
1402                         {
1403                                 if($size > 5000000 || $size < 0)
1404                                         $size = 5000000;
1405                                 $seek = fseek($fp,0-$size,SEEK_END);
1406                                 if($seek === 0) {
1407                                         $data = escape_tags(fread($fp,$size));
1408                                         while(! feof($fp))
1409                                                 $data .= escape_tags(fread($fp,4096));
1410                                 }
1411                         }
1412                         fclose($fp);
1413                 }
1414         }
1415
1416         return replace_macros($t, array(
1417                 '$title' => t('Administration'),
1418                 '$page' => t('Logs'),
1419                 '$submit' => t('Save Settings'),
1420                 '$clear' => t('Clear'),
1421                 '$data' => $data,
1422                 '$baseurl' => $a->get_baseurl(true),
1423                 '$logname' =>  get_config('system','logfile'),
1424
1425                                                                         // name, label, value, help string, extra data...
1426                 '$debugging'            => array('debugging', t("Enable Debugging"),get_config('system','debugging'), ""),
1427                 '$logfile'                      => array('logfile', t("Log file"), get_config('system','logfile'), t("Must be writable by web server. Relative to your Friendica top-level directory.")),
1428                 '$loglevel'             => array('loglevel', t("Log level"), get_config('system','loglevel'), "", $log_choices),
1429
1430                 '$form_security_token' => get_form_security_token("admin_logs"),
1431         ));
1432 }
1433
1434 /**
1435  * @param App $a
1436  */
1437 function admin_page_remoteupdate_post(&$a) {
1438         // this function should be called via ajax post
1439         if(!is_site_admin()) {
1440                 return;
1441         }
1442
1443
1444         if (x($_POST,'remotefile') && $_POST['remotefile']!=""){
1445                 $remotefile = $_POST['remotefile'];
1446                 $ftpdata = (x($_POST['ftphost'])?$_POST:false);
1447                 doUpdate($remotefile, $ftpdata);
1448         } else {
1449                 echo "No remote file to download. Abort!";
1450         }
1451
1452         killme();
1453 }
1454
1455 /**
1456  * @param App $a
1457  * @return string
1458  */
1459 function admin_page_remoteupdate(&$a) {
1460         if(!is_site_admin()) {
1461                 return login(false);
1462         }
1463
1464         $canwrite = canWeWrite();
1465         $canftp = function_exists('ftp_connect');
1466
1467         $needupdate = true;
1468         $u = checkUpdate();
1469         if (!is_array($u)){
1470                 $needupdate = false;
1471                 $u = array('','','');
1472         }
1473
1474         $tpl = get_markup_template("admin_remoteupdate.tpl");
1475         return replace_macros($tpl, array(
1476                 '$baseurl' => $a->get_baseurl(true),
1477                 '$submit' => t("Update now"),
1478                 '$close' => t("Close"),
1479                 '$localversion' => FRIENDICA_VERSION,
1480                 '$remoteversion' => $u[1],
1481                 '$needupdate' => $needupdate,
1482                 '$canwrite' => $canwrite,
1483                 '$canftp'       => $canftp,
1484                 '$ftphost'      => array('ftphost', t("FTP Host"), '',''),
1485                 '$ftppath'      => array('ftppath', t("FTP Path"), '/',''),
1486                 '$ftpuser'      => array('ftpuser', t("FTP User"), '',''),
1487                 '$ftppwd'       => array('ftppwd', t("FTP Password"), '',''),
1488                 '$remotefile'=>array('remotefile','', $u['2'],''),
1489         ));
1490
1491 }