mod/admin.php

   1 <?php
   2
   3  /**
   4   * Friendica admin
   5   */
   6 require_once("include/remoteupdate.php");
   7 require_once("include/enotify.php");
   8 require_once("include/text.php");
   9
  10
  11 /**
  12  * @param App $a
  13  */
  14 function admin_post(&$a){
  15
  16
  17         if(!is_site_admin()) {
  18                 return;
  19         }
  20
  21         // do not allow a page manager to access the admin panel at all.
  22
  23         if(x($_SESSION,'submanage') && intval($_SESSION['submanage']))
  24                 return;
  25
  26
  27
  28         // urls
  29         if ($a->argc > 1){
  30                 switch ($a->argv[1]){
  31                         case 'site':
  32                                 admin_page_site_post($a);
  33                                 break;
  34                         case 'users':
  35                                 admin_page_users_post($a);
  36                                 break;
  37                         case 'plugins':
  38                                 if ($a->argc > 2 &&
  39                                         is_file("addon/".$a->argv[2]."/".$a->argv[2].".php")){
  40                                                 @include_once("addon/".$a->argv[2]."/".$a->argv[2].".php");
  41                                                 if(function_exists($a->argv[2].'_plugin_admin_post')) {
  42                                                         $func = $a->argv[2].'_plugin_admin_post';
  43                                                         $func($a);
  44                                                 }
  45                                 }
  46                                 goaway($a->get_baseurl(true) . '/admin/plugins/' . $a->argv[2] );
  47                                 return; // NOTREACHED
  48                                 break;
  49                         case 'themes':
  50                                 $theme = $a->argv[2];
  51                                 if (is_file("view/theme/$theme/config.php")){
  52                                         require_once("view/theme/$theme/config.php");
  53                                         if (function_exists("theme_admin_post")){
  54                                                 theme_admin_post($a);
  55                                         }
  56                                 }
  57                                 info(t('Theme settings updated.'));
  58                                 if(is_ajax()) return;
  59
  60                                 goaway($a->get_baseurl(true) . '/admin/themes/' . $theme );
  61                                 return;
  62                                 break;
  63                         case 'logs':
  64                                 admin_page_logs_post($a);
  65                                 break;
  66                         case 'dbsync':
  67                                 admin_page_dbsync_post($a);
  68                                 break;
  69                         case 'update':
  70                                 admin_page_remoteupdate_post($a);
  71                                 break;
  72                 }
  73         }
  74
  75         goaway($a->get_baseurl(true) . '/admin' );
  76         return; // NOTREACHED
  77 }
  78
  79 /**
  80  * @param App $a
  81  * @return string
  82  */
  83 function admin_content(&$a) {
  84
  85         if(!is_site_admin()) {
  86                 return login(false);
  87         }
  88
  89         if(x($_SESSION,'submanage') && intval($_SESSION['submanage']))
  90                 return "";
  91
  92         // APC deactivated, since there are problems with PHP 5.5
  93         //if (function_exists("apc_delete")) {
  94         //      $toDelete = new APCIterator('user', APC_ITER_VALUE);
  95         //      apc_delete($toDelete);
  96         //}
  97
  98         /**
  99          * Side bar links
 100          */
 101
 102         // array( url, name, extra css classes )
 103         $aside = Array(
 104                 'site'   =>     Array($a->get_baseurl(true)."/admin/site/", t("Site") , "site"),
 105                 'users'  =>     Array($a->get_baseurl(true)."/admin/users/", t("Users") , "users"),
 106                 'plugins'=>     Array($a->get_baseurl(true)."/admin/plugins/", t("Plugins") , "plugins"),
 107                 'themes' =>     Array($a->get_baseurl(true)."/admin/themes/", t("Themes") , "themes"),
 108                 'dbsync' => Array($a->get_baseurl(true)."/admin/dbsync/", t('DB updates'), "dbsync"),
 109                 //'update' =>   Array($a->get_baseurl(true)."/admin/update/", t("Software Update") , "update")
 110         );
 111
 112         /* get plugins admin page */
 113
 114         $r = q("SELECT name FROM `addon` WHERE `plugin_admin`=1");
 115         $aside['plugins_admin']=Array();
 116         foreach ($r as $h){
 117                 $plugin =$h['name'];
 118                 $aside['plugins_admin'][] = Array($a->get_baseurl(true)."/admin/plugins/".$plugin, $plugin, "plugin");
 119                 // temp plugins with admin
 120                 $a->plugins_admin[] = $plugin;
 121         }
 122
 123         $aside['logs'] = Array($a->get_baseurl(true)."/admin/logs/", t("Logs"), "logs");
 124         $aside['diagnostics_probe'] = Array($a->get_baseurl(true).'/probe/', t('probe address'), 'probe');
 125         $aside['diagnostics_webfinger'] = Array($a->get_baseurl(true).'/webfinger/', t('check webfinger'), 'webfinger');
 126
 127         $t = get_markup_template("admin_aside.tpl");
 128         $a->page['aside'] .= replace_macros( $t, array(
 129                         '$admin' => $aside,
 130                         '$admtxt' => t('Admin'),
 131                         '$plugadmtxt' => t('Plugin Features'),
 132                         '$logtxt' => t('Logs'),
 133                         '$diagnosticstxt' => t('diagnostics'),
 134                         '$h_pending' => t('User registrations waiting for confirmation'),
 135                         '$admurl'=> $a->get_baseurl(true)."/admin/"
 136         ));
 137
 138
 139
 140         /**
 141          * Page content
 142          */
 143         $o = '';
 144         // urls
 145         if ($a->argc > 1){
 146                 switch ($a->argv[1]){
 147                         case 'site':
 148                                 $o = admin_page_site($a);
 149                                 break;
 150                         case 'users':
 151                                 $o = admin_page_users($a);
 152                                 break;
 153                         case 'plugins':
 154                                 $o = admin_page_plugins($a);
 155                                 break;
 156                         case 'themes':
 157                                 $o = admin_page_themes($a);
 158                                 break;
 159                         case 'logs':
 160                                 $o = admin_page_logs($a);
 161                                 break;
 162                         case 'dbsync':
 163                                 $o = admin_page_dbsync($a);
 164                                 break;
 165                         case 'update':
 166                                 $o = admin_page_remoteupdate($a);
 167                                 break;
 168                         default:
 169                                 notice( t("Item not found.") );
 170                 }
 171         } else {
 172                 $o = admin_page_summary($a);
 173         }
 174
 175         if(is_ajax()) {
 176                 echo $o;
 177                 killme();
 178                 return '';
 179         } else {
 180                 return $o;
 181         }
 182 }
 183
 184
 185 /**
 186  * Admin Summary Page
 187  * @param App $a
 188  * @return string
 189  */
 190 function admin_page_summary(&$a) {
 191         $r = q("SELECT `page-flags`, COUNT(uid) as `count` FROM `user` GROUP BY `page-flags`");
 192         $accounts = Array(
 193                 Array( t('Normal Account'), 0),
 194                 Array( t('Soapbox Account'), 0),
 195                 Array( t('Community/Celebrity Account'), 0),
 196                 Array( t('Automatic Friend Account'), 0),
 197                 Array( t('Blog Account'), 0),
 198                 Array( t('Private Forum'), 0)
 199         );
 200
 201         $users=0;
 202         foreach ($r as $u){ $accounts[$u['page-flags']][1] = $u['count']; $users+= $u['count']; }
 203
 204         logger('accounts: ' . print_r($accounts,true),LOGGER_DATA);
 205
 206         $r = q("SELECT COUNT(id) as `count` FROM `register`");
 207         $pending = $r[0]['count'];
 208
 209         $r = q("select count(*) as total from deliverq where 1");
 210         $deliverq = (($r) ? $r[0]['total'] : 0);
 211
 212         $r = q("select count(*) as total from queue where 1");
 213         $queue = (($r) ? $r[0]['total'] : 0);
 214
 215         // We can do better, but this is a quick queue status
 216
 217         $queues = array( 'label' => t('Message queues'), 'deliverq' => $deliverq, 'queue' => $queue );
 218
 219
 220         $t = get_markup_template("admin_summary.tpl");
 221         return replace_macros($t, array(
 222                 '$title' => t('Administration'),
 223                 '$page' => t('Summary'),
 224                 '$queues' => $queues,
 225                 '$users' => Array( t('Registered users'), $users),
 226                 '$accounts' => $accounts,
 227                 '$pending' => Array( t('Pending registrations'), $pending),
 228                 '$version' => Array( t('Version'), FRIENDICA_VERSION),
 229                 '$platform' => FRIENDICA_PLATFORM,
 230                 '$codename' => FRIENDICA_CODENAME,
 231                 '$build' =>  get_config('system','build'),
 232                 '$plugins' => Array( t('Active plugins'), $a->plugins )
 233         ));
 234 }
 235
 236
 237 /**
 238  * Admin Site Page
 239  *  @param App $a
 240  */
 241 function admin_page_site_post(&$a){
 242         if (!x($_POST,"page_site")){
 243                 return;
 244         }
 245
 246         check_form_security_token_redirectOnErr('/admin/site', 'admin_site');
 247
 248         // relocate
 249         if (x($_POST,'relocate') && x($_POST,'relocate_url') && $_POST['relocate_url']!=""){
 250                 $new_url = $_POST['relocate_url'];
 251                 $new_url = rtrim($new_url,"/");
 252
 253                 $parsed = @parse_url($new_url);
 254                 if (!$parsed || (!x($parsed,'host') || !x($parsed,'scheme'))) {
 255                         notice(t("Can not parse base url. Must have at least <scheme>://<domain>"));
 256                         goaway($a->get_baseurl(true) . '/admin/site' );
 257                 }
 258
 259                 /* steps:
 260                  * replace all "baseurl" to "new_url" in config, profile, term, items and contacts
 261                  * send relocate for every local user
 262                  * */
 263
 264                 $old_url = $a->get_baseurl(true);
 265
 266                 function update_table($table_name, $fields, $old_url, $new_url) {
 267                         global $db, $a;
 268
 269                         $dbold = dbesc($old_url);
 270                         $dbnew = dbesc($new_url);
 271
 272                         $upd = array();
 273                         foreach ($fields as $f) {
 274                                 $upd[] = "`$f` = REPLACE(`$f`, '$dbold', '$dbnew')";
 275                         }
 276
 277                         $upds = implode(", ", $upd);
 278
 279
 280
 281                         $q = sprintf("UPDATE %s SET %s;", $table_name, $upds);
 282                         $r = q($q);
 283                         if (!$r) {
 284                                 notice( "Failed updating '$table_name': " . $db->error );
 285                                 goaway($a->get_baseurl(true) . '/admin/site' );
 286                         }
 287                 }
 288
 289                 // update tables
 290                 update_table("profile", array('photo', 'thumb'), $old_url, $new_url);
 291                 update_table("term", array('url'), $old_url, $new_url);
 292                 update_table("contact", array('photo','thumb','micro','url','nurl','request','notify','poll','confirm','poco'), $old_url, $new_url);
 293                 update_table("unique_contacts", array('url'), $old_url, $new_url);
 294                 update_table("item", array('owner-link','owner-avatar','author-name','author-link','author-avatar','body','plink','tag'), $old_url, $new_url);
 295
 296                 // update config
 297                 $a->set_baseurl($new_url);
 298                 set_config('system','url',$new_url);
 299
 300                 // send relocate
 301                 $users = q("SELECT uid FROM user WHERE account_removed = 0 AND account_expired = 0");
 302
 303                 foreach ($users as $user) {
 304                         proc_run('php', 'include/notifier.php', 'relocate', $user['uid']);
 305                 }
 306
 307                 info("Relocation started. Could take a while to complete.");
 308
 309                 goaway($a->get_baseurl(true) . '/admin/site' );
 310         }
 311         // end relocate
 312
 313         $sitename               =       ((x($_POST,'sitename'))                 ? notags(trim($_POST['sitename']))              : '');
 314         $hostname               =       ((x($_POST,'hostname'))                 ? notags(trim($_POST['hostname']))              : '');
 315         $sender_email   =       ((x($_POST,'sender_email'))             ? notags(trim($_POST['sender_email']))          : '');
 316         $banner                 =       ((x($_POST,'banner'))                   ? trim($_POST['banner'])                        : false);
 317         $info                   =       ((x($_POST,'info'))                     ? trim($_POST['info'])                  : false);
 318         $language               =       ((x($_POST,'language'))                 ? notags(trim($_POST['language']))              : '');
 319         $theme                  =       ((x($_POST,'theme'))                    ? notags(trim($_POST['theme']))                 : '');
 320         $theme_mobile           =       ((x($_POST,'theme_mobile'))             ? notags(trim($_POST['theme_mobile']))          : '');
 321         $maximagesize           =       ((x($_POST,'maximagesize'))             ? intval(trim($_POST['maximagesize']))          :  0);
 322         $maximagelength         =       ((x($_POST,'maximagelength'))           ? intval(trim($_POST['maximagelength']))        :  MAX_IMAGE_LENGTH);
 323         $jpegimagequality       =       ((x($_POST,'jpegimagequality'))         ? intval(trim($_POST['jpegimagequality']))      :  JPEG_QUALITY);
 324
 325
 326         $register_policy        =       ((x($_POST,'register_policy'))          ? intval(trim($_POST['register_policy']))       :  0);
 327         $daily_registrations    =       ((x($_POST,'max_daily_registrations'))  ? intval(trim($_POST['max_daily_registrations']))       :0);
 328         $abandon_days           =       ((x($_POST,'abandon_days'))             ? intval(trim($_POST['abandon_days']))          :  0);
 329
 330         $register_text          =       ((x($_POST,'register_text'))            ? notags(trim($_POST['register_text']))         : '');
 331
 332         $allowed_sites          =       ((x($_POST,'allowed_sites'))            ? notags(trim($_POST['allowed_sites']))         : '');
 333         $allowed_email          =       ((x($_POST,'allowed_email'))            ? notags(trim($_POST['allowed_email']))         : '');
 334         $block_public           =       ((x($_POST,'block_public'))             ? True                                          : False);
 335         $force_publish          =       ((x($_POST,'publish_all'))              ? True                                          : False);
 336         $global_directory       =       ((x($_POST,'directory_submit_url'))     ? notags(trim($_POST['directory_submit_url']))  : '');
 337         $thread_allow           =       ((x($_POST,'thread_allow'))             ? True                                          : False);
 338         $newuser_private                =       ((x($_POST,'newuser_private'))          ? True                                          : False);
 339         $enotify_no_content             =       ((x($_POST,'enotify_no_content'))       ? True                                          : False);
 340         $private_addons                 =       ((x($_POST,'private_addons'))           ? True                                          : False);
 341         $disable_embedded               =       ((x($_POST,'disable_embedded'))         ? True                                          : False);
 342         $allow_users_remote_self        =       ((x($_POST,'allow_users_remote_self'))          ? True                                          : False);
 343
 344         $no_multi_reg           =       ((x($_POST,'no_multi_reg'))             ? True                                          : False);
 345         $no_openid              =       !((x($_POST,'no_openid'))               ? True                                          : False);
 346         $no_regfullname         =       !((x($_POST,'no_regfullname'))          ? True                                          : False);
 347         $no_utf                 =       !((x($_POST,'no_utf'))                  ? True                                          : False);
 348         $no_community_page      =       !((x($_POST,'no_community_page'))       ? True                                          : False);
 349
 350         $verifyssl              =       ((x($_POST,'verifyssl'))                ? True                                          : False);
 351         $proxyuser              =       ((x($_POST,'proxyuser'))                ? notags(trim($_POST['proxyuser']))             : '');
 352         $proxy                  =       ((x($_POST,'proxy'))                    ? notags(trim($_POST['proxy']))                 : '');
 353         $timeout                =       ((x($_POST,'timeout'))                  ? intval(trim($_POST['timeout']))               : 60);
 354         $delivery_interval      =       ((x($_POST,'delivery_interval'))        ? intval(trim($_POST['delivery_interval']))     : 0);
 355         $poll_interval          =       ((x($_POST,'poll_interval'))            ? intval(trim($_POST['poll_interval']))         : 0);
 356         $maxloadavg             =       ((x($_POST,'maxloadavg'))               ? intval(trim($_POST['maxloadavg']))            : 50);
 357         $dfrn_only              =       ((x($_POST,'dfrn_only'))                ? True                                          : False);
 358         $ostatus_disabled       =       !((x($_POST,'ostatus_disabled'))        ? True                                          : False);
 359         $ostatus_poll_interval  =       ((x($_POST,'ostatus_poll_interval'))    ? intval(trim($_POST['ostatus_poll_interval']))         :  0);
 360         $diaspora_enabled       =       ((x($_POST,'diaspora_enabled'))         ? True                                          : False);
 361         $ssl_policy             =       ((x($_POST,'ssl_policy'))               ? intval($_POST['ssl_policy'])                  : 0);
 362         $force_ssl              =       ((x($_POST,'force_ssl'))                ? True                                          : False);
 363         $old_share              =       ((x($_POST,'old_share'))                ? True                                          : False);
 364         $hide_help              =       ((x($_POST,'hide_help'))                ? True                                          : False);
 365         $suppress_language      =       ((x($_POST,'suppress_language'))        ? True                                          : False);
 366         $use_fulltext_engine    =       ((x($_POST,'use_fulltext_engine'))      ? True                                          : False);
 367         $itemcache              =       ((x($_POST,'itemcache'))                ? notags(trim($_POST['itemcache']))             : '');
 368         $itemcache_duration     =       ((x($_POST,'itemcache_duration'))       ? intval($_POST['itemcache_duration'])          : 0);
 369         $max_comments           =       ((x($_POST,'max_comments'))             ? intval($_POST['max_comments'])                : 0);
 370         $lockpath               =       ((x($_POST,'lockpath'))                 ? notags(trim($_POST['lockpath']))              : '');
 371         $temppath               =       ((x($_POST,'temppath'))                 ? notags(trim($_POST['temppath']))              : '');
 372         $basepath               =       ((x($_POST,'basepath'))                 ? notags(trim($_POST['basepath']))              : '');
 373         $singleuser             =       ((x($_POST,'singleuser'))               ? notags(trim($_POST['singleuser']))            : '');
 374         $proxy_disabled         =       ((x($_POST,'proxy_disabled'))           ? True                                          : False);
 375         $old_pager              =       ((x($_POST,'old_pager'))                ? True                                          : False);
 376
 377         if($ssl_policy != intval(get_config('system','ssl_policy'))) {
 378                 if($ssl_policy == SSL_POLICY_FULL) {
 379                         q("update `contact` set
 380                                 `url`     = replace(`url`    , 'http:' , 'https:'),
 381                                 `photo`   = replace(`photo`  , 'http:' , 'https:'),
 382                                 `thumb`   = replace(`thumb`  , 'http:' , 'https:'),
 383                                 `micro`   = replace(`micro`  , 'http:' , 'https:'),
 384                                 `request` = replace(`request`, 'http:' , 'https:'),
 385                                 `notify`  = replace(`notify` , 'http:' , 'https:'),
 386                                 `poll`    = replace(`poll`   , 'http:' , 'https:'),
 387                                 `confirm` = replace(`confirm`, 'http:' , 'https:'),
 388                                 `poco`    = replace(`poco`   , 'http:' , 'https:')
 389                                 where `self` = 1"
 390                         );
 391                         q("update `profile` set
 392                                 `photo`   = replace(`photo`  , 'http:' , 'https:'),
 393                                 `thumb`   = replace(`thumb`  , 'http:' , 'https:')
 394                                 where 1 "
 395                         );
 396                 }
 397                 elseif($ssl_policy == SSL_POLICY_SELFSIGN) {
 398                         q("update `contact` set
 399                                 `url`     = replace(`url`    , 'https:' , 'http:'),
 400                                 `photo`   = replace(`photo`  , 'https:' , 'http:'),
 401                                 `thumb`   = replace(`thumb`  , 'https:' , 'http:'),
 402                                 `micro`   = replace(`micro`  , 'https:' , 'http:'),
 403                                 `request` = replace(`request`, 'https:' , 'http:'),
 404                                 `notify`  = replace(`notify` , 'https:' , 'http:'),
 405                                 `poll`    = replace(`poll`   , 'https:' , 'http:'),
 406                                 `confirm` = replace(`confirm`, 'https:' , 'http:'),
 407                                 `poco`    = replace(`poco`   , 'https:' , 'http:')
 408                                 where `self` = 1"
 409                         );
 410                         q("update `profile` set
 411                                 `photo`   = replace(`photo`  , 'https:' , 'http:'),
 412                                 `thumb`   = replace(`thumb`  , 'https:' , 'http:')
 413                                 where 1 "
 414                         );
 415                 }
 416         }
 417         set_config('system','ssl_policy',$ssl_policy);
 418         set_config('system','delivery_interval',$delivery_interval);
 419         set_config('system','poll_interval',$poll_interval);
 420         set_config('system','maxloadavg',$maxloadavg);
 421         set_config('config','sitename',$sitename);
 422         set_config('config','hostname',$hostname);
 423         set_config('config','sender_email', $sender_email);
 424         set_config('system','suppress_language',$suppress_language);
 425         if ($banner==""){
 426                 // don't know why, but del_config doesn't work...
 427                 q("DELETE FROM `config` WHERE `cat` = '%s' AND `k` = '%s' LIMIT 1",
 428                         dbesc("system"),
 429                         dbesc("banner")
 430                 );
 431         } else {
 432                 set_config('system','banner', $banner);
 433         }
 434         if ($info=="") {
 435                 del_config('config','info');
 436         } else {
 437                 set_config('config','info',$info);
 438         }
 439         set_config('system','language', $language);
 440         set_config('system','theme', $theme);
 441         if ( $theme_mobile === '---' ) {
 442                 del_config('system','mobile-theme');
 443         } else {
 444                 set_config('system','mobile-theme', $theme_mobile);
 445                 }
 446                 if ( $singleuser === '---' ) {
 447                         del_config('system','singleuser');
 448                 } else {
 449                         set_config('system','singleuser', $singleuser);
 450                 }
 451         set_config('system','maximagesize', $maximagesize);
 452         set_config('system','max_image_length', $maximagelength);
 453         set_config('system','jpeg_quality', $jpegimagequality);
 454
 455         set_config('config','register_policy', $register_policy);
 456         set_config('system','max_daily_registrations', $daily_registrations);
 457         set_config('system','account_abandon_days', $abandon_days);
 458         set_config('config','register_text', $register_text);
 459         set_config('system','allowed_sites', $allowed_sites);
 460         set_config('system','allowed_email', $allowed_email);
 461         set_config('system','block_public', $block_public);
 462         set_config('system','publish_all', $force_publish);
 463         if ($global_directory==""){
 464                 // don't know why, but del_config doesn't work...
 465                 q("DELETE FROM `config` WHERE `cat` = '%s' AND `k` = '%s' LIMIT 1",
 466                         dbesc("system"),
 467                         dbesc("directory_submit_url")
 468                 );
 469         } else {
 470                 set_config('system','directory_submit_url', $global_directory);
 471         }
 472         set_config('system','thread_allow', $thread_allow);
 473         set_config('system','newuser_private', $newuser_private);
 474         set_config('system','enotify_no_content', $enotify_no_content);
 475         set_config('system','disable_embedded', $disable_embedded);
 476         set_config('system','allow_users_remote_self', $allow_users_remote_self);
 477
 478         set_config('system','block_extended_register', $no_multi_reg);
 479         set_config('system','no_openid', $no_openid);
 480         set_config('system','no_regfullname', $no_regfullname);
 481         set_config('system','no_community_page', $no_community_page);
 482         set_config('system','no_utf', $no_utf);
 483         set_config('system','verifyssl', $verifyssl);
 484         set_config('system','proxyuser', $proxyuser);
 485         set_config('system','proxy', $proxy);
 486         set_config('system','curl_timeout', $timeout);
 487         set_config('system','dfrn_only', $dfrn_only);
 488         set_config('system','ostatus_disabled', $ostatus_disabled);
 489                 set_config('system','ostatus_poll_interval', $ostatus_poll_interval);
 490         set_config('system','diaspora_enabled', $diaspora_enabled);
 491         set_config('config','private_addons', $private_addons);
 492
 493         set_config('system','force_ssl', $force_ssl);
 494         set_config('system','old_share', $old_share);
 495         set_config('system','hide_help', $hide_help);
 496         set_config('system','use_fulltext_engine', $use_fulltext_engine);
 497         set_config('system','itemcache', $itemcache);
 498         set_config('system','itemcache_duration', $itemcache_duration);
 499         set_config('system','max_comments', $max_comments);
 500         set_config('system','lockpath', $lockpath);
 501         set_config('system','temppath', $temppath);
 502         set_config('system','basepath', $basepath);
 503         set_config('system','proxy_disabled', $proxy_disabled);
 504         set_config('system','old_pager', $old_pager);
 505
 506         info( t('Site settings updated.') . EOL);
 507         goaway($a->get_baseurl(true) . '/admin/site' );
 508         return; // NOTREACHED
 509
 510 }
 511
 512 /**
 513  * @param  App $a
 514  * @return string
 515  */
 516 function admin_page_site(&$a) {
 517
 518         /* Installed langs */
 519         $lang_choices = array();
 520         $langs = glob('view/*/strings.php');
 521
 522         if(is_array($langs) && count($langs)) {
 523                 if(! in_array('view/en/strings.php',$langs))
 524                         $langs[] = 'view/en/';
 525                 asort($langs);
 526                 foreach($langs as $l) {
 527                         $t = explode("/",$l);
 528                         $lang_choices[$t[1]] = $t[1];
 529                 }
 530         }
 531
 532         /* Installed themes */
 533         $theme_choices = array();
 534         $theme_choices_mobile = array();
 535         $theme_choices_mobile["---"] = t("No special theme for mobile devices");
 536         $files = glob('view/theme/*');
 537         if($files) {
 538                 foreach($files as $file) {
 539                         $f = basename($file);
 540                         $theme_name = ((file_exists($file . '/experimental')) ?  sprintf("%s - \x28Experimental\x29", $f) : $f);
 541                         if (file_exists($file . '/mobile')) {
 542                                 $theme_choices_mobile[$f] = $theme_name;
 543                         }
 544                 else {
 545                                 $theme_choices[$f] = $theme_name;
 546                         }
 547                 }
 548                 }
 549
 550                 /* OStatus conversation poll choices */
 551                 $ostatus_poll_choices = array(
 552                 "-2" => t("Never"),
 553                 "-1" => t("At post arrival"),
 554                 "0" => t("Frequently"),
 555                 "60" => t("Hourly"),
 556                 "720" => t("Twice daily"),
 557                 "1440" => t("Daily")
 558                         );
 559
 560                 /* get user names to make the install a personal install of X */
 561                 $user_names = array();
 562                 $user_names['---'] = t('Multi user instance');
 563                 $users = q("SELECT username, nickname FROM `user`");
 564                 foreach ($users as $user) {
 565                         $user_names[$user['nickname']] = $user['username'];
 566                 }
 567
 568         /* Banner */
 569         $banner = get_config('system','banner');
 570         if($banner == false)
 571                 $banner = '<a href="http://friendica.com"><img id="logo-img" src="images/friendica-32.png" alt="logo" /></a><span id="logo-text"><a href="http://friendica.com">Friendica</a></span>';
 572         $banner = htmlspecialchars($banner);
 573         $info = get_config('config','info');
 574         $info = htmlspecialchars($info);
 575
 576         // Automatically create temporary paths
 577         get_temppath();
 578         get_lockpath();
 579         get_itemcachepath();
 580
 581         //echo "<pre>"; var_dump($lang_choices); die("</pre>");
 582
 583         /* Register policy */
 584         $register_choices = Array(
 585                 REGISTER_CLOSED => t("Closed"),
 586                 REGISTER_APPROVE => t("Requires approval"),
 587                 REGISTER_OPEN => t("Open")
 588         );
 589
 590         $ssl_choices = array(
 591                 SSL_POLICY_NONE => t("No SSL policy, links will track page SSL state"),
 592                 SSL_POLICY_FULL => t("Force all links to use SSL"),
 593                 SSL_POLICY_SELFSIGN => t("Self-signed certificate, use SSL for local links only (discouraged)")
 594         );
 595
 596         if ($a->config['hostname'] == "")
 597                 $a->config['hostname'] = $a->get_hostname();
 598
 599         $t = get_markup_template("admin_site.tpl");
 600         return replace_macros($t, array(
 601                 '$title' => t('Administration'),
 602                 '$page' => t('Site'),
 603                 '$submit' => t('Save Settings'),
 604                 '$registration' => t('Registration'),
 605                 '$upload' => t('File upload'),
 606                 '$corporate' => t('Policies'),
 607                 '$advanced' => t('Advanced'),
 608                 '$performance' => t('Performance'),
 609                 '$relocate'=> t('Relocate - WARNING: advanced function. Could make this server unreachable.'),
 610                 '$baseurl' => $a->get_baseurl(true),
 611                 // name, label, value, help string, extra data...
 612                 '$sitename'             => array('sitename', t("Site name"), htmlentities($a->config['sitename'], ENT_QUOTES), 'UTF-8'),
 613                 '$hostname'             => array('hostname', t("Host name"), $a->config['hostname'], ""),
 614                 '$sender_email'         => array('sender_email', t("Sender Email"), $a->config['sender_email'], "The email address your server shall use to send notification emails from.", "", "", "email"),
 615                 '$banner'               => array('banner', t("Banner/Logo"), $banner, ""),
 616                 '$info' => array('info',t('Additional Info'), $info, t('For public servers: you can add additional information here that will be listed at dir.friendica.com/siteinfo.')),
 617                 '$language'             => array('language', t("System language"), get_config('system','language'), "", $lang_choices),
 618                 '$theme'                => array('theme', t("System theme"), get_config('system','theme'), t("Default system theme - may be over-ridden by user profiles - <a href='#' id='cnftheme'>change theme settings</a>"), $theme_choices),
 619                 '$theme_mobile'         => array('theme_mobile', t("Mobile system theme"), get_config('system','mobile-theme'), t("Theme for mobile devices"), $theme_choices_mobile),
 620                 '$ssl_policy'           => array('ssl_policy', t("SSL link policy"), (string) intval(get_config('system','ssl_policy')), t("Determines whether generated links should be forced to use SSL"), $ssl_choices),
 621                 '$force_ssl'            => array('force_ssl', t("Force SSL"), get_config('system','force_ssl'), t("Force all Non-SSL requests to SSL - Attention: on some systems it could lead to endless loops.")),
 622                 '$old_share'            => array('old_share', t("Old style 'Share'"), get_config('system','old_share'), t("Deactivates the bbcode element 'share' for repeating items.")),
 623                 '$hide_help'            => array('hide_help', t("Hide help entry from navigation menu"), get_config('system','hide_help'), t("Hides the menu entry for the Help pages from the navigation menu. You can still access it calling /help directly.")),
 624                 '$singleuser'           => array('singleuser', t("Single user instance"), get_config('system','singleuser'), t("Make this instance multi-user or single-user for the named user"), $user_names),
 625                 '$maximagesize'         => array('maximagesize', t("Maximum image size"), get_config('system','maximagesize'), t("Maximum size in bytes of uploaded images. Default is 0, which means no limits.")),
 626                 '$maximagelength'               => array('maximagelength', t("Maximum image length"), get_config('system','max_image_length'), t("Maximum length in pixels of the longest side of uploaded images. Default is -1, which means no limits.")),
 627                 '$jpegimagequality'             => array('jpegimagequality', t("JPEG image quality"), get_config('system','jpeg_quality'), t("Uploaded JPEGS will be saved at this quality setting [0-100]. Default is 100, which is full quality.")),
 628
 629                 '$register_policy'      => array('register_policy', t("Register policy"), $a->config['register_policy'], "", $register_choices),
 630                 '$daily_registrations'  => array('max_daily_registrations', t("Maximum Daily Registrations"), get_config('system', 'max_daily_registrations'), t("If registration is permitted above, this sets the maximum number of new user registrations to accept per day.  If register is set to closed, this setting has no effect.")),
 631                 '$register_text'        => array('register_text', t("Register text"), htmlentities($a->config['register_text'], ENT_QUOTES, 'UTF-8'), t("Will be displayed prominently on the registration page.")),
 632                 '$abandon_days'         => array('abandon_days', t('Accounts abandoned after x days'), get_config('system','account_abandon_days'), t('Will not waste system resources polling external sites for abandonded accounts. Enter 0 for no time limit.')),
 633                 '$allowed_sites'        => array('allowed_sites', t("Allowed friend domains"), get_config('system','allowed_sites'), t("Comma separated list of domains which are allowed to establish friendships with this site. Wildcards are accepted. Empty to allow any domains")),
 634                 '$allowed_email'        => array('allowed_email', t("Allowed email domains"), get_config('system','allowed_email'), t("Comma separated list of domains which are allowed in email addresses for registrations to this site. Wildcards are accepted. Empty to allow any domains")),
 635                 '$block_public'         => array('block_public', t("Block public"), get_config('system','block_public'), t("Check to block public access to all otherwise public personal pages on this site unless you are currently logged in.")),
 636                 '$force_publish'        => array('publish_all', t("Force publish"), get_config('system','publish_all'), t("Check to force all profiles on this site to be listed in the site directory.")),
 637                 '$global_directory'     => array('directory_submit_url', t("Global directory update URL"), get_config('system','directory_submit_url'), t("URL to update the global directory. If this is not set, the global directory is completely unavailable to the application.")),
 638                 '$thread_allow'         => array('thread_allow', t("Allow threaded items"), get_config('system','thread_allow'), t("Allow infinite level threading for items on this site.")),
 639                 '$newuser_private'      => array('newuser_private', t("Private posts by default for new users"), get_config('system','newuser_private'), t("Set default post permissions for all new members to the default privacy group rather than public.")),
 640                 '$enotify_no_content'   => array('enotify_no_content', t("Don't include post content in email notifications"), get_config('system','enotify_no_content'), t("Don't include the content of a post/comment/private message/etc. in the email notifications that are sent out from this site, as a privacy measure.")),
 641                 '$private_addons'       => array('private_addons', t("Disallow public access to addons listed in the apps menu."), get_config('config','private_addons'), t("Checking this box will restrict addons listed in the apps menu to members only.")),
 642                 '$disable_embedded'     => array('disable_embedded', t("Don't embed private images in posts"), get_config('system','disable_embedded'), t("Don't replace locally-hosted private photos in posts with an embedded copy of the image. This means that contacts who receive posts containing private photos will have to authenticate and load each image, which may take a while.")),
 643                 '$allow_users_remote_self'      => array('allow_users_remote_self', t('Allow Users to set remote_self'), get_config('system','allow_users_remote_self'), t('With checking this, every user is allowed to mark every contact as a remote_self in the repair contact dialog. Setting this flag on a contact causes mirroring every posting of that contact in the users stream.')),
 644                 '$no_multi_reg'         => array('no_multi_reg', t("Block multiple registrations"),  get_config('system','block_extended_register'), t("Disallow users to register additional accounts for use as pages.")),
 645                 '$no_openid'            => array('no_openid', t("OpenID support"), !get_config('system','no_openid'), t("OpenID support for registration and logins.")),
 646                 '$no_regfullname'       => array('no_regfullname', t("Fullname check"), !get_config('system','no_regfullname'), t("Force users to register with a space between firstname and lastname in Full name, as an antispam measure")),
 647                 '$no_utf'               => array('no_utf', t("UTF-8 Regular expressions"), !get_config('system','no_utf'), t("Use PHP UTF8 regular expressions")),
 648                 '$no_community_page'    => array('no_community_page', t("Show Community Page"), !get_config('system','no_community_page'), t("Display a Community page showing all recent public postings on this site.")),
 649                 '$ostatus_disabled'     => array('ostatus_disabled', t("Enable OStatus support"), !get_config('system','ostatus_disabled'), t("Provide built-in OStatus \x28StatusNet, GNU Social etc.\x29 compatibility. All communications in OStatus are public, so privacy warnings will be occasionally displayed.")),
 650                 '$ostatus_poll_interval'        => array('ostatus_poll_interval', t("OStatus conversation completion interval"), (string) intval(get_config('system','ostatus_poll_interval')), t("How often shall the poller check for new entries in OStatus conversations? This can be a very ressource task."), $ostatus_poll_choices),
 651                 '$diaspora_enabled'     => array('diaspora_enabled', t("Enable Diaspora support"), get_config('system','diaspora_enabled'), t("Provide built-in Diaspora network compatibility.")),
 652                 '$dfrn_only'            => array('dfrn_only', t('Only allow Friendica contacts'), get_config('system','dfrn_only'), t("All contacts must use Friendica protocols. All other built-in communication protocols disabled.")),
 653                 '$verifyssl'            => array('verifyssl', t("Verify SSL"), get_config('system','verifyssl'), t("If you wish, you can turn on strict certificate checking. This will mean you cannot connect (at all) to self-signed SSL sites.")),
 654                 '$proxyuser'            => array('proxyuser', t("Proxy user"), get_config('system','proxyuser'), ""),
 655                 '$proxy'                => array('proxy', t("Proxy URL"), get_config('system','proxy'), ""),
 656                 '$timeout'              => array('timeout', t("Network timeout"), (x(get_config('system','curl_timeout'))?get_config('system','curl_timeout'):60), t("Value is in seconds. Set to 0 for unlimited (not recommended).")),
 657                 '$delivery_interval'    => array('delivery_interval', t("Delivery interval"), (x(get_config('system','delivery_interval'))?get_config('system','delivery_interval'):2), t("Delay background delivery processes by this many seconds to reduce system load. Recommend: 4-5 for shared hosts, 2-3 for virtual private servers. 0-1 for large dedicated servers.")),
 658                 '$poll_interval'        => array('poll_interval', t("Poll interval"), (x(get_config('system','poll_interval'))?get_config('system','poll_interval'):2), t("Delay background polling processes by this many seconds to reduce system load. If 0, use delivery interval.")),
 659                 '$maxloadavg'           => array('maxloadavg', t("Maximum Load Average"), ((intval(get_config('system','maxloadavg')) > 0)?get_config('system','maxloadavg'):50), t("Maximum system load before delivery and poll processes are deferred - default 50.")),
 660
 661                 '$use_fulltext_engine'  => array('use_fulltext_engine', t("Use MySQL full text engine"), get_config('system','use_fulltext_engine'), t("Activates the full text engine. Speeds up search - but can only search for four and more characters.")),
 662                 '$suppress_language'    => array('suppress_language', t("Suppress Language"), get_config('system','suppress_language'), t("Suppress language information in meta information about a posting.")),
 663                 '$itemcache'            => array('itemcache', t("Path to item cache"), get_config('system','itemcache'), "The item caches buffers generated bbcode and external images."),
 664                 '$itemcache_duration'   => array('itemcache_duration', t("Cache duration in seconds"), get_config('system','itemcache_duration'), t("How long should the cache files be hold? Default value is 86400 seconds (One day). To disable the item cache, set the value to -1.")),
 665                 '$max_comments'         => array('max_comments', t("Maximum numbers of comments per post"), get_config('system','max_comments'), t("How much comments should be shown for each post? Default value is 100.")),
 666                 '$lockpath'             => array('lockpath', t("Path for lock file"), get_config('system','lockpath'), "The lock file is used to avoid multiple pollers at one time. Only define a folder here."),
 667                 '$temppath'             => array('temppath', t("Temp path"), get_config('system','temppath'), "If you have a restricted system where the webserver can't access the system temp path, enter another path here."),
 668                 '$basepath'             => array('basepath', t("Base path to installation"), get_config('system','basepath'), "If the system cannot detect the correct path to your installation, enter the correct path here. This setting should only be set if you are using a restricted system and symbolic links to your webroot."),
 669                 '$proxy_disabled'       => array('proxy_disabled', t("Disable picture proxy"), get_config('system','proxy_disabled'), t("The picture proxy increases performance and privacy. It shouldn't be used on systems with very low bandwith.")),
 670                 '$old_pager'            => array('old_pager', t("Enable old style pager"), get_config('system','old_pager'), t("The old style pager has page numbers but slows down massively the page speed.")),
 671
 672                 '$relocate_url'     => array('relocate_url', t("New base url"), $a->get_baseurl(), "Change base url for this server. Sends relocate message to all DFRN contacts of all users."),
 673         '$form_security_token' => get_form_security_token("admin_site")
 674
 675         ));
 676
 677 }
 678
 679
 680 function admin_page_dbsync(&$a) {
 681
 682         $o = '';
 683
 684         if($a->argc > 3 && intval($a->argv[3]) && $a->argv[2] === 'mark') {
 685                 set_config('database', 'update_' . intval($a->argv[3]), 'success');
 686                 $curr = get_config('system','build');
 687                 if(intval($curr) == intval($a->argv[3]))
 688                         set_config('system','build',intval($curr) + 1);
 689                 info( t('Update has been marked successful') . EOL);
 690                 goaway($a->get_baseurl(true) . '/admin/dbsync');
 691         }
 692
 693         if(($a->argc > 2) AND (intval($a->argv[2]) OR ($a->argv[2] === 'check'))) {
 694                 require_once("include/dbstructure.php");
 695                 $retval = update_structure(false, true);
 696                 if (!$retval) {
 697                         $o .= sprintf(t("Database structure update %s was successfully applied."), DB_UPDATE_VERSION)."<br />";
 698                         set_config('database', 'dbupdate_'.DB_UPDATE_VERSION, 'success');
 699                 } else
 700                         $o .= sprintf(t("Executing of database structure update %s failed with error: %s"),
 701                                         DB_UPDATE_VERSION, $retval)."<br />";
 702                 if ($a->argv[2] === 'check')
 703                         return $o;
 704         }
 705
 706         if ($a->argc > 2 && intval($a->argv[2])) {
 707                 require_once('update.php');
 708                 $func = 'update_' . intval($a->argv[2]);
 709                 if(function_exists($func)) {
 710                         $retval = $func();
 711                         if($retval === UPDATE_FAILED) {
 712                                 $o .= sprintf(t("Executing %s failed with error: %s"), $func, $retval);
 713                         }
 714                         elseif($retval === UPDATE_SUCCESS) {
 715                                 $o .= sprintf(t('Update %s was successfully applied.', $func));
 716                                 set_config('database',$func, 'success');
 717                         }
 718                         else
 719                                 $o .= sprintf(t('Update %s did not return a status. Unknown if it succeeded.'), $func);
 720                 } else {
 721                         $o .= sprintf(t('There was no additional update function %s that needed to be called.'), $func)."<br />";
 722                         set_config('database',$func, 'success');
 723                 }
 724                 return $o;
 725         }
 726
 727         $failed = array();
 728         $r = q("select k, v from config where `cat` = 'database' ");
 729         if(count($r)) {
 730                 foreach($r as $rr) {
 731                         $upd = intval(substr($rr['k'],7));
 732                         if($upd < 1139 || $rr['v'] === 'success')
 733                                 continue;
 734                         $failed[] = $upd;
 735                 }
 736         }
 737         if(! count($failed)) {
 738                 $o = replace_macros(get_markup_template('structure_check.tpl'),array(
 739                         '$base' => $a->get_baseurl(true),
 740                         '$banner' => t('No failed updates.'),
 741                         '$check' => t('Check database structure'),
 742                 ));
 743         } else {
 744                 $o = replace_macros(get_markup_template('failed_updates.tpl'),array(
 745                         '$base' => $a->get_baseurl(true),
 746                         '$banner' => t('Failed Updates'),
 747                         '$desc' => t('This does not include updates prior to 1139, which did not return a status.'),
 748                         '$mark' => t('Mark success (if update was manually applied)'),
 749                         '$apply' => t('Attempt to execute this update step automatically'),
 750                         '$failed' => $failed
 751                 ));
 752         }
 753
 754         return $o;
 755
 756 }
 757
 758 /**
 759  * Users admin page
 760  *
 761  * @param App $a
 762  */
 763 function admin_page_users_post(&$a){
 764         $pending = ( x($_POST, 'pending') ? $_POST['pending'] : Array() );
 765         $users = ( x($_POST, 'user') ? $_POST['user'] : Array() );
 766         $nu_name = ( x($_POST, 'new_user_name') ? $_POST['new_user_name'] : '');
 767         $nu_nickname = ( x($_POST, 'new_user_nickname') ? $_POST['new_user_nickname'] : '');
 768         $nu_email = ( x($_POST, 'new_user_email') ? $_POST['new_user_email'] : '');
 769
 770         check_form_security_token_redirectOnErr('/admin/users', 'admin_users');
 771
 772         if (!($nu_name==="") && !($nu_email==="") && !($nu_nickname==="")) {
 773                 require_once('include/user.php');
 774
 775                 $result = create_user( array('username'=>$nu_name, 'email'=>$nu_email, 'nickname'=>$nu_nickname, 'verified'=>1)  );
 776                 if(! $result['success']) {
 777                         notice($result['message']);
 778                         return;
 779                 }
 780                 $nu = $result['user'];
 781                 $preamble = deindent(t('
 782                         Dear %1$s,
 783                                 the administrator of %2$s has set up an account for you.'));
 784                 $body = deindent(t('
 785                         The login details are as follows:
 786
 787                         Site Location:  %1$s
 788                         Login Name:             %2$s
 789                         Password:               %3$s
 790
 791                         You may change your password from your account "Settings" page after logging
 792                         in.
 793
 794                         Please take a few moments to review the other account settings on that page.
 795
 796                         You may also wish to add some basic information to your default profile
 797                         (on the "Profiles" page) so that other people can easily find you.
 798
 799                         We recommend setting your full name, adding a profile photo,
 800                         adding some profile "keywords" (very useful in making new friends) - and
 801                         perhaps what country you live in; if you do not wish to be more specific
 802                         than that.
 803
 804                         We fully respect your right to privacy, and none of these items are necessary.
 805                         If you are new and do not know anybody here, they may help
 806                         you to make some new and interesting friends.
 807
 808                         Thank you and welcome to %4$s.'));
 809
 810                 $preamble = sprintf($preamble, $nu['username'], $a->config['sitename']);
 811                 $body = sprintf($body, $a->get_baseurl(), $nu['email'], $result['password'], $a->config['sitename']);
 812
 813                 notification(array(
 814                         'type' => "SYSTEM_EMAIL",
 815                         'to_email' => $nu['email'],
 816                         'subject'=> sprintf( t('Registration details for %s'), $a->config['sitename']),
 817                         'preamble'=> $preamble,
 818                         'body' => $body));
 819
 820         }
 821
 822         if (x($_POST,'page_users_block')){
 823                 foreach($users as $uid){
 824                         q("UPDATE `user` SET `blocked`=1-`blocked` WHERE `uid`=%s",
 825                                 intval( $uid )
 826                         );
 827                 }
 828                 notice( sprintf( tt("%s user blocked/unblocked", "%s users blocked/unblocked", count($users)), count($users)) );
 829         }
 830         if (x($_POST,'page_users_delete')){
 831                 require_once("include/Contact.php");
 832                 foreach($users as $uid){
 833                         user_remove($uid);
 834                 }
 835                 notice( sprintf( tt("%s user deleted", "%s users deleted", count($users)), count($users)) );
 836         }
 837
 838         if (x($_POST,'page_users_approve')){
 839                 require_once("mod/regmod.php");
 840                 foreach($pending as $hash){
 841                         user_allow($hash);
 842                 }
 843         }
 844         if (x($_POST,'page_users_deny')){
 845                 require_once("mod/regmod.php");
 846                 foreach($pending as $hash){
 847                         user_deny($hash);
 848                 }
 849         }
 850         goaway($a->get_baseurl(true) . '/admin/users' );
 851         return; // NOTREACHED
 852 }
 853
 854 /**
 855  * @param App $a
 856  * @return string
 857  */
 858 function admin_page_users(&$a){
 859         if ($a->argc>2) {
 860                 $uid = $a->argv[3];
 861                 $user = q("SELECT username, blocked FROM `user` WHERE `uid`=%d", intval($uid));
 862                 if (count($user)==0){
 863                         notice( 'User not found' . EOL);
 864                         goaway($a->get_baseurl(true) . '/admin/users' );
 865                         return ''; // NOTREACHED
 866                 }
 867                 switch($a->argv[2]){
 868                         case "delete":{
 869                                 check_form_security_token_redirectOnErr('/admin/users', 'admin_users', 't');
 870                                 // delete user
 871                                 require_once("include/Contact.php");
 872                                 user_remove($uid);
 873
 874                                 notice( sprintf(t("User '%s' deleted"), $user[0]['username']) . EOL);
 875                         }; break;
 876                         case "block":{
 877                                 check_form_security_token_redirectOnErr('/admin/users', 'admin_users', 't');
 878                                 q("UPDATE `user` SET `blocked`=%d WHERE `uid`=%s",
 879                                         intval( 1-$user[0]['blocked'] ),
 880                                         intval( $uid )
 881                                 );
 882                                 notice( sprintf( ($user[0]['blocked']?t("User '%s' unblocked"):t("User '%s' blocked")) , $user[0]['username']) . EOL);
 883                         }; break;
 884                 }
 885                 goaway($a->get_baseurl(true) . '/admin/users' );
 886                 return ''; // NOTREACHED
 887
 888         }
 889
 890         /* get pending */
 891         $pending = q("SELECT `register`.*, `contact`.`name`, `user`.`email`
 892                                  FROM `register`
 893                                  LEFT JOIN `contact` ON `register`.`uid` = `contact`.`uid`
 894                                  LEFT JOIN `user` ON `register`.`uid` = `user`.`uid`;");
 895
 896
 897         /* get users */
 898
 899         $total = q("SELECT count(*) as total FROM `user` where 1");
 900         if(count($total)) {
 901                 $a->set_pager_total($total[0]['total']);
 902                 $a->set_pager_itemspage(100);
 903         }
 904
 905
 906         $users = q("SELECT `user` . * , `contact`.`name` , `contact`.`url` , `contact`.`micro`, `lastitem`.`lastitem_date`, `user`.`account_expired`
 907                                 FROM
 908                                         (SELECT MAX(`item`.`changed`) as `lastitem_date`, `item`.`uid`
 909                                         FROM `item`
 910                                         WHERE `item`.`type` = 'wall'
 911                                         GROUP BY `item`.`uid`) AS `lastitem`
 912                                                  RIGHT OUTER JOIN `user` ON `user`.`uid` = `lastitem`.`uid`,
 913                                            `contact`
 914                                 WHERE
 915                                            `user`.`uid` = `contact`.`uid`
 916                                                 AND `user`.`verified` =1
 917                                         AND `contact`.`self` =1
 918                                 ORDER BY `contact`.`name` LIMIT %d, %d
 919                                 ",
 920                                 intval($a->pager['start']),
 921                                 intval($a->pager['itemspage'])
 922                                 );
 923
 924         function _setup_users($e){
 925                 $a = get_app();
 926
 927                 $adminlist = explode(",", str_replace(" ", "", $a->config['admin_email']));
 928
 929                 $accounts = Array(
 930                         t('Normal Account'),
 931                         t('Soapbox Account'),
 932                         t('Community/Celebrity Account'),
 933                                                 t('Automatic Friend Account')
 934                 );
 935                 $e['page-flags'] = $accounts[$e['page-flags']];
 936                 $e['register_date'] = relative_date($e['register_date']);
 937                 $e['login_date'] = relative_date($e['login_date']);
 938                 $e['lastitem_date'] = relative_date($e['lastitem_date']);
 939                 //$e['is_admin'] = ($e['email'] === $a->config['admin_email']);
 940                 $e['is_admin'] = in_array($e['email'], $adminlist);
 941                 $e['deleted'] = ($e['account_removed']?relative_date($e['account_expires_on']):False);
 942                 return $e;
 943         }
 944         $users = array_map("_setup_users", $users);
 945
 946
 947         // Get rid of dashes in key names, Smarty3 can't handle them
 948         // and extracting deleted users
 949
 950         $tmp_users = Array();
 951         $deleted = Array();
 952
 953         while(count($users)) {
 954                 $new_user = Array();
 955                 foreach( array_pop($users) as $k => $v) {
 956                         $k = str_replace('-','_',$k);
 957                         $new_user[$k] = $v;
 958                 }
 959                 if($new_user['deleted']) {
 960                         array_push($deleted, $new_user);
 961                 }
 962                 else {
 963                         array_push($tmp_users, $new_user);
 964                 }
 965         }
 966         //Reversing the two array, and moving $tmp_users to $users
 967         array_reverse($deleted);
 968         while(count($tmp_users)) {
 969                 array_push($users, array_pop($tmp_users));
 970         }
 971
 972         $t = get_markup_template("admin_users.tpl");
 973         $o = replace_macros($t, array(
 974                 // strings //
 975                 '$title' => t('Administration'),
 976                 '$page' => t('Users'),
 977                 '$submit' => t('Add User'),
 978                 '$select_all' => t('select all'),
 979                 '$h_pending' => t('User registrations waiting for confirm'),
 980                 '$h_deleted' => t('User waiting for permanent deletion'),
 981                 '$th_pending' => array( t('Request date'), t('Name'), t('Email') ),
 982                 '$no_pending' =>  t('No registrations.'),
 983                 '$approve' => t('Approve'),
 984                 '$deny' => t('Deny'),
 985                 '$delete' => t('Delete'),
 986                 '$block' => t('Block'),
 987                 '$unblock' => t('Unblock'),
 988                 '$siteadmin' => t('Site admin'),
 989                 '$accountexpired' => t('Account expired'),
 990
 991                 '$h_users' => t('Users'),
 992                 '$h_newuser' => t('New User'),
 993                 '$th_deleted' => array( t('Name'), t('Email'), t('Register date'), t('Last login'), t('Last item'), t('Deleted since') ),
 994                 '$th_users' => array( t('Name'), t('Email'), t('Register date'), t('Last login'), t('Last item'),  t('Account') ),
 995
 996                 '$confirm_delete_multi' => t('Selected users will be deleted!\n\nEverything these users had posted on this site will be permanently deleted!\n\nAre you sure?'),
 997                 '$confirm_delete' => t('The user {0} will be deleted!\n\nEverything this user has posted on this site will be permanently deleted!\n\nAre you sure?'),
 998
 999                 '$form_security_token' => get_form_security_token("admin_users"),
1000
1001                 // values //
1002                 '$baseurl' => $a->get_baseurl(true),
1003
1004                 '$pending' => $pending,
1005                 'deleted' => $deleted,
1006                 '$users' => $users,
1007                 '$newusername'  => array('new_user_name', t("Name"), '', t("Name of the new user.")),
1008                 '$newusernickname'  => array('new_user_nickname', t("Nickname"), '', t("Nickname of the new user.")),
1009                 '$newuseremail'  => array('new_user_email', t("Email"), '', t("Email address of the new user."), '', '', 'email'),
1010         ));
1011         $o .= paginate($a);
1012         return $o;
1013 }
1014
1015
1016 /**
1017  * Plugins admin page
1018  *
1019  * @param App $a
1020  * @return string
1021  */
1022 function admin_page_plugins(&$a){
1023
1024         /**
1025          * Single plugin
1026          */
1027         if ($a->argc == 3){
1028                 $plugin = $a->argv[2];
1029                 if (!is_file("addon/$plugin/$plugin.php")){
1030                         notice( t("Item not found.") );
1031                         return '';
1032                 }
1033
1034                 if (x($_GET,"a") && $_GET['a']=="t"){
1035                         check_form_security_token_redirectOnErr('/admin/plugins', 'admin_themes', 't');
1036
1037                         // Toggle plugin status
1038                         $idx = array_search($plugin, $a->plugins);
1039                         if ($idx !== false){
1040                                 unset($a->plugins[$idx]);
1041                                 uninstall_plugin($plugin);
1042                                 info( sprintf( t("Plugin %s disabled."), $plugin ) );
1043                         } else {
1044                                 $a->plugins[] = $plugin;
1045                                 install_plugin($plugin);
1046                                 info( sprintf( t("Plugin %s enabled."), $plugin ) );
1047                         }
1048                         set_config("system","addon", implode(", ",$a->plugins));
1049                         goaway($a->get_baseurl(true) . '/admin/plugins' );
1050                         return ''; // NOTREACHED
1051                 }
1052                 // display plugin details
1053                 require_once('library/markdown.php');
1054
1055                 if (in_array($plugin, $a->plugins)){
1056                         $status="on"; $action= t("Disable");
1057                 } else {
1058                         $status="off"; $action= t("Enable");
1059                 }
1060
1061                 $readme=Null;
1062                 if (is_file("addon/$plugin/README.md")){
1063                         $readme = file_get_contents("addon/$plugin/README.md");
1064                         $readme = Markdown($readme);
1065                 } else if (is_file("addon/$plugin/README")){
1066                         $readme = "<pre>". file_get_contents("addon/$plugin/README") ."</pre>";
1067                 }
1068
1069                 $admin_form="";
1070                 if (is_array($a->plugins_admin) && in_array($plugin, $a->plugins_admin)){
1071                         @require_once("addon/$plugin/$plugin.php");
1072                         $func = $plugin.'_plugin_admin';
1073                         $func($a, $admin_form);
1074                 }
1075
1076                 $t = get_markup_template("admin_plugins_details.tpl");
1077
1078                 return replace_macros($t, array(
1079                         '$title' => t('Administration'),
1080                         '$page' => t('Plugins'),
1081                         '$toggle' => t('Toggle'),
1082                         '$settings' => t('Settings'),
1083                         '$baseurl' => $a->get_baseurl(true),
1084
1085                         '$plugin' => $plugin,
1086                         '$status' => $status,
1087                         '$action' => $action,
1088                         '$info' => get_plugin_info($plugin),
1089                         '$str_author' => t('Author: '),
1090                         '$str_maintainer' => t('Maintainer: '),
1091
1092                         '$admin_form' => $admin_form,
1093                         '$function' => 'plugins',
1094                         '$screenshot' => '',
1095                         '$readme' => $readme,
1096
1097                         '$form_security_token' => get_form_security_token("admin_themes"),
1098                 ));
1099         }
1100
1101
1102
1103         /**
1104          * List plugins
1105          */
1106
1107         $plugins = array();
1108         $files = glob("addon/*/"); /* */
1109         if($files) {
1110                 foreach($files as $file) {
1111                         if (is_dir($file)){
1112                                 list($tmp, $id)=array_map("trim", explode("/",$file));
1113                                 $info = get_plugin_info($id);
1114                                 $show_plugin = true;
1115
1116                                 // If the addon is unsupported, then only show it, when it is enabled
1117                                 if ((strtolower($info["status"]) == "unsupported") AND !in_array($id,  $a->plugins))
1118                                         $show_plugin = false;
1119
1120                                 // Override the above szenario, when the admin really wants to see outdated stuff
1121                                 if (get_config("system", "show_unsupported_addons"))
1122                                         $show_plugin = true;
1123
1124                                 if ($show_plugin)
1125                                         $plugins[] = array($id, (in_array($id,  $a->plugins)?"on":"off") , $info);
1126                         }
1127                 }
1128         }
1129
1130         $t = get_markup_template("admin_plugins.tpl");
1131         return replace_macros($t, array(
1132                 '$title' => t('Administration'),
1133                 '$page' => t('Plugins'),
1134                 '$submit' => t('Save Settings'),
1135                 '$baseurl' => $a->get_baseurl(true),
1136                 '$function' => 'plugins',
1137                 '$plugins' => $plugins,
1138                 '$form_security_token' => get_form_security_token("admin_themes"),
1139         ));
1140 }
1141
1142 /**
1143  * @param array $themes
1144  * @param string $th
1145  * @param int $result
1146  */
1147 function toggle_theme(&$themes,$th,&$result) {
1148         for($x = 0; $x < count($themes); $x ++) {
1149                 if($themes[$x]['name'] === $th) {
1150                         if($themes[$x]['allowed']) {
1151                                 $themes[$x]['allowed'] = 0;
1152                                 $result = 0;
1153                         }
1154                         else {
1155                                 $themes[$x]['allowed'] = 1;
1156                                 $result = 1;
1157                         }
1158                 }
1159         }
1160 }
1161
1162 /**
1163  * @param array $themes
1164  * @param string $th
1165  * @return int
1166  */
1167 function theme_status($themes,$th) {
1168         for($x = 0; $x < count($themes); $x ++) {
1169                 if($themes[$x]['name'] === $th) {
1170                         if($themes[$x]['allowed']) {
1171                                 return 1;
1172                         }
1173                         else {
1174                                 return 0;
1175                         }
1176                 }
1177         }
1178         return 0;
1179 }
1180
1181
1182 /**
1183  * @param array $themes
1184  * @return string
1185  */
1186 function rebuild_theme_table($themes) {
1187         $o = '';
1188         if(count($themes)) {
1189                 foreach($themes as $th) {
1190                         if($th['allowed']) {
1191                                 if(strlen($o))
1192                                         $o .= ',';
1193                                 $o .= $th['name'];
1194                         }
1195                 }
1196         }
1197         return $o;
1198 }
1199
1200
1201 /**
1202  * Themes admin page
1203  *
1204  * @param App $a
1205  * @return string
1206  */
1207 function admin_page_themes(&$a){
1208
1209         $allowed_themes_str = get_config('system','allowed_themes');
1210         $allowed_themes_raw = explode(',',$allowed_themes_str);
1211         $allowed_themes = array();
1212         if(count($allowed_themes_raw))
1213                 foreach($allowed_themes_raw as $x)
1214                         if(strlen(trim($x)))
1215                                 $allowed_themes[] = trim($x);
1216
1217         $themes = array();
1218         $files = glob('view/theme/*'); /* */
1219         if($files) {
1220                 foreach($files as $file) {
1221                         $f = basename($file);
1222                         $is_experimental = intval(file_exists($file . '/experimental'));
1223                         $is_supported = 1-(intval(file_exists($file . '/unsupported')));
1224                         $is_allowed = intval(in_array($f,$allowed_themes));
1225
1226                         if ($is_allowed OR $is_supported OR get_config("system", "show_unsupported_themes"))
1227                                 $themes[] = array('name' => $f, 'experimental' => $is_experimental, 'supported' => $is_supported, 'allowed' => $is_allowed);
1228                 }
1229         }
1230
1231         if(! count($themes)) {
1232                 notice( t('No themes found.'));
1233                 return '';
1234         }
1235
1236         /**
1237          * Single theme
1238          */
1239
1240         if ($a->argc == 3){
1241                 $theme = $a->argv[2];
1242                 if(! is_dir("view/theme/$theme")){
1243                         notice( t("Item not found.") );
1244                         return '';
1245                 }
1246
1247                 if (x($_GET,"a") && $_GET['a']=="t"){
1248                         check_form_security_token_redirectOnErr('/admin/themes', 'admin_themes', 't');
1249
1250                         // Toggle theme status
1251
1252                         toggle_theme($themes,$theme,$result);
1253                         $s = rebuild_theme_table($themes);
1254                         if($result) {
1255                                 install_theme($theme);
1256                                 info( sprintf('Theme %s enabled.',$theme));
1257                         }
1258                         else {
1259                                 uninstall_theme($theme);
1260                                 info( sprintf('Theme %s disabled.',$theme));
1261                         }
1262
1263                         set_config('system','allowed_themes',$s);
1264                         goaway($a->get_baseurl(true) . '/admin/themes' );
1265                         return ''; // NOTREACHED
1266                 }
1267
1268                 // display theme details
1269                 require_once('library/markdown.php');
1270
1271                 if (theme_status($themes,$theme)) {
1272                         $status="on"; $action= t("Disable");
1273                 } else {
1274                         $status="off"; $action= t("Enable");
1275                 }
1276
1277                 $readme=Null;
1278                 if (is_file("view/theme/$theme/README.md")){
1279                         $readme = file_get_contents("view/theme/$theme/README.md");
1280                         $readme = Markdown($readme);
1281                 } else if (is_file("view/theme/$theme/README")){
1282                         $readme = "<pre>". file_get_contents("view/theme/$theme/README") ."</pre>";
1283                 }
1284
1285                 $admin_form="";
1286                 if (is_file("view/theme/$theme/config.php")){
1287                         require_once("view/theme/$theme/config.php");
1288                         if(function_exists("theme_admin")){
1289                                 $admin_form = theme_admin($a);
1290                         }
1291
1292                 }
1293
1294                 $screenshot = array( get_theme_screenshot($theme), t('Screenshot'));
1295                 if(! stristr($screenshot[0],$theme))
1296                         $screenshot = null;
1297
1298                 $t = get_markup_template("admin_plugins_details.tpl");
1299                 return replace_macros($t, array(
1300                         '$title' => t('Administration'),
1301                         '$page' => t('Themes'),
1302                         '$toggle' => t('Toggle'),
1303                         '$settings' => t('Settings'),
1304                         '$baseurl' => $a->get_baseurl(true),
1305
1306                         '$plugin' => $theme,
1307                         '$status' => $status,
1308                         '$action' => $action,
1309                         '$info' => get_theme_info($theme),
1310                         '$function' => 'themes',
1311                         '$admin_form' => $admin_form,
1312                         '$str_author' => t('Author: '),
1313                         '$str_maintainer' => t('Maintainer: '),
1314                         '$screenshot' => $screenshot,
1315                         '$readme' => $readme,
1316
1317                         '$form_security_token' => get_form_security_token("admin_themes"),
1318                 ));
1319         }
1320
1321         /**
1322          * List themes
1323          */
1324
1325         $xthemes = array();
1326         if($themes) {
1327                 foreach($themes as $th) {
1328                         $xthemes[] = array($th['name'],(($th['allowed']) ? "on" : "off"), get_theme_info($th['name']));
1329                 }
1330         }
1331
1332         $t = get_markup_template("admin_plugins.tpl");
1333         return replace_macros($t, array(
1334                 '$title' => t('Administration'),
1335                 '$page' => t('Themes'),
1336                 '$submit' => t('Save Settings'),
1337                 '$baseurl' => $a->get_baseurl(true),
1338                 '$function' => 'themes',
1339                 '$plugins' => $xthemes,
1340                 '$experimental' => t('[Experimental]'),
1341                 '$unsupported' => t('[Unsupported]'),
1342                 '$form_security_token' => get_form_security_token("admin_themes"),
1343         ));
1344 }
1345
1346
1347 /**
1348  * Logs admin page
1349  *
1350  * @param App $a
1351  */
1352
1353 function admin_page_logs_post(&$a) {
1354         if (x($_POST,"page_logs")) {
1355                 check_form_security_token_redirectOnErr('/admin/logs', 'admin_logs');
1356
1357                 $logfile                =       ((x($_POST,'logfile'))          ? notags(trim($_POST['logfile']))       : '');
1358                 $debugging              =       ((x($_POST,'debugging'))        ? true                                                          : false);
1359                 $loglevel               =       ((x($_POST,'loglevel'))         ? intval(trim($_POST['loglevel']))      : 0);
1360
1361                 set_config('system','logfile', $logfile);
1362                 set_config('system','debugging',  $debugging);
1363                 set_config('system','loglevel', $loglevel);
1364
1365
1366         }
1367
1368         info( t("Log settings updated.") );
1369         goaway($a->get_baseurl(true) . '/admin/logs' );
1370         return; // NOTREACHED
1371 }
1372
1373 /**
1374  * @param App $a
1375  * @return string
1376  */
1377 function admin_page_logs(&$a){
1378
1379         $log_choices = Array(
1380                 LOGGER_NORMAL => 'Normal',
1381                 LOGGER_TRACE => 'Trace',
1382                 LOGGER_DEBUG => 'Debug',
1383                 LOGGER_DATA => 'Data',
1384                 LOGGER_ALL => 'All'
1385         );
1386
1387         $t = get_markup_template("admin_logs.tpl");
1388
1389         $f = get_config('system','logfile');
1390
1391         $data = '';
1392
1393         if(!file_exists($f)) {
1394                 $data = t("Error trying to open <strong>$f</strong> log file.\r\n<br/>Check to see if file $f exist and is
1395 readable.");
1396         }
1397         else {
1398                 $fp = fopen($f, 'r');
1399                 if(!$fp) {
1400                         $data = t("Couldn't open <strong>$f</strong> log file.\r\n<br/>Check to see if file $f is readable.");
1401                 }
1402                 else {
1403                         $fstat = fstat($fp);
1404                         $size = $fstat['size'];
1405                         if($size != 0)
1406                         {
1407                                 if($size > 5000000 || $size < 0)
1408                                         $size = 5000000;
1409                                 $seek = fseek($fp,0-$size,SEEK_END);
1410                                 if($seek === 0) {
1411                                         $data = escape_tags(fread($fp,$size));
1412                                         while(! feof($fp))
1413                                                 $data .= escape_tags(fread($fp,4096));
1414                                 }
1415                         }
1416                         fclose($fp);
1417                 }
1418         }
1419
1420         return replace_macros($t, array(
1421                 '$title' => t('Administration'),
1422                 '$page' => t('Logs'),
1423                 '$submit' => t('Save Settings'),
1424                 '$clear' => t('Clear'),
1425                 '$data' => $data,
1426                 '$baseurl' => $a->get_baseurl(true),
1427                 '$logname' =>  get_config('system','logfile'),
1428
1429                                                                         // name, label, value, help string, extra data...
1430                 '$debugging'            => array('debugging', t("Enable Debugging"),get_config('system','debugging'), ""),
1431                 '$logfile'                      => array('logfile', t("Log file"), get_config('system','logfile'), t("Must be writable by web server. Relative to your Friendica top-level directory.")),
1432                 '$loglevel'             => array('loglevel', t("Log level"), get_config('system','loglevel'), "", $log_choices),
1433
1434                 '$form_security_token' => get_form_security_token("admin_logs"),
1435         ));
1436 }
1437
1438 /**
1439  * @param App $a
1440  */
1441 function admin_page_remoteupdate_post(&$a) {
1442         // this function should be called via ajax post
1443         if(!is_site_admin()) {
1444                 return;
1445         }
1446
1447
1448         if (x($_POST,'remotefile') && $_POST['remotefile']!=""){
1449                 $remotefile = $_POST['remotefile'];
1450                 $ftpdata = (x($_POST['ftphost'])?$_POST:false);
1451                 doUpdate($remotefile, $ftpdata);
1452         } else {
1453                 echo "No remote file to download. Abort!";
1454         }
1455
1456         killme();
1457 }
1458
1459 /**
1460  * @param App $a
1461  * @return string
1462  */
1463 function admin_page_remoteupdate(&$a) {
1464         if(!is_site_admin()) {
1465                 return login(false);
1466         }
1467
1468         $canwrite = canWeWrite();
1469         $canftp = function_exists('ftp_connect');
1470
1471         $needupdate = true;
1472         $u = checkUpdate();
1473         if (!is_array($u)){
1474                 $needupdate = false;
1475                 $u = array('','','');
1476         }
1477
1478         $tpl = get_markup_template("admin_remoteupdate.tpl");
1479         return replace_macros($tpl, array(
1480                 '$baseurl' => $a->get_baseurl(true),
1481                 '$submit' => t("Update now"),
1482                 '$close' => t("Close"),
1483                 '$localversion' => FRIENDICA_VERSION,
1484                 '$remoteversion' => $u[1],
1485                 '$needupdate' => $needupdate,
1486                 '$canwrite' => $canwrite,
1487                 '$canftp'       => $canftp,
1488                 '$ftphost'      => array('ftphost', t("FTP Host"), '',''),
1489                 '$ftppath'      => array('ftppath', t("FTP Path"), '/',''),
1490                 '$ftpuser'      => array('ftpuser', t("FTP User"), '',''),
1491                 '$ftppwd'       => array('ftppwd', t("FTP Password"), '',''),
1492                 '$remotefile'=>array('remotefile','', $u['2'],''),
1493         ));
1494
1495 }