mod/admin.php

   1 <?php
   2
   3  /**
   4   * Friendica admin
   5   */
   6 require_once("include/remoteupdate.php");
   7 require_once("include/enotify.php");
   8 require_once("include/text.php");
   9
  10
  11 /**
  12  * @param App $a
  13  */
  14 function admin_post(&$a){
  15
  16
  17         if(!is_site_admin()) {
  18                 return;
  19         }
  20
  21         // do not allow a page manager to access the admin panel at all.
  22
  23         if(x($_SESSION,'submanage') && intval($_SESSION['submanage']))
  24                 return;
  25
  26
  27
  28         // urls
  29         if ($a->argc > 1){
  30                 switch ($a->argv[1]){
  31                         case 'site':
  32                                 admin_page_site_post($a);
  33                                 break;
  34                         case 'users':
  35                                 admin_page_users_post($a);
  36                                 break;
  37                         case 'plugins':
  38                                 if ($a->argc > 2 &&
  39                                         is_file("addon/".$a->argv[2]."/".$a->argv[2].".php")){
  40                                                 @include_once("addon/".$a->argv[2]."/".$a->argv[2].".php");
  41                                                 if(function_exists($a->argv[2].'_plugin_admin_post')) {
  42                                                         $func = $a->argv[2].'_plugin_admin_post';
  43                                                         $func($a);
  44                                                 }
  45                                 }
  46                                 goaway($a->get_baseurl(true) . '/admin/plugins/' . $a->argv[2] );
  47                                 return; // NOTREACHED
  48                                 break;
  49                         case 'themes':
  50                                 $theme = $a->argv[2];
  51                                 if (is_file("view/theme/$theme/config.php")){
  52                                         require_once("view/theme/$theme/config.php");
  53                                         if (function_exists("theme_admin_post")){
  54                                                 theme_admin_post($a);
  55                                         }
  56                                 }
  57                                 info(t('Theme settings updated.'));
  58                                 if(is_ajax()) return;
  59
  60                                 goaway($a->get_baseurl(true) . '/admin/themes/' . $theme );
  61                                 return;
  62                                 break;
  63                         case 'logs':
  64                                 admin_page_logs_post($a);
  65                                 break;
  66                         case 'dbsync':
  67                                 admin_page_dbsync_post($a);
  68                                 break;
  69                         case 'update':
  70                                 admin_page_remoteupdate_post($a);
  71                                 break;
  72                 }
  73         }
  74
  75         goaway($a->get_baseurl(true) . '/admin' );
  76         return; // NOTREACHED
  77 }
  78
  79 /**
  80  * @param App $a
  81  * @return string
  82  */
  83 function admin_content(&$a) {
  84
  85         if(!is_site_admin()) {
  86                 return login(false);
  87         }
  88
  89         if(x($_SESSION,'submanage') && intval($_SESSION['submanage']))
  90                 return "";
  91
  92         // APC deactivated, since there are problems with PHP 5.5
  93         //if (function_exists("apc_delete")) {
  94         //      $toDelete = new APCIterator('user', APC_ITER_VALUE);
  95         //      apc_delete($toDelete);
  96         //}
  97
  98         /**
  99          * Side bar links
 100          */
 101
 102         // array( url, name, extra css classes )
 103         $aside = Array(
 104                 'site'   =>     Array($a->get_baseurl(true)."/admin/site/", t("Site") , "site"),
 105                 'users'  =>     Array($a->get_baseurl(true)."/admin/users/", t("Users") , "users"),
 106                 'plugins'=>     Array($a->get_baseurl(true)."/admin/plugins/", t("Plugins") , "plugins"),
 107                 'themes' =>     Array($a->get_baseurl(true)."/admin/themes/", t("Themes") , "themes"),
 108                 'dbsync' => Array($a->get_baseurl(true)."/admin/dbsync/", t('DB updates'), "dbsync"),
 109                 //'update' =>   Array($a->get_baseurl(true)."/admin/update/", t("Software Update") , "update")
 110         );
 111
 112         /* get plugins admin page */
 113
 114         $r = q("SELECT name FROM `addon` WHERE `plugin_admin`=1");
 115         $aside['plugins_admin']=Array();
 116         foreach ($r as $h){
 117                 $plugin =$h['name'];
 118                 $aside['plugins_admin'][] = Array($a->get_baseurl(true)."/admin/plugins/".$plugin, $plugin, "plugin");
 119                 // temp plugins with admin
 120                 $a->plugins_admin[] = $plugin;
 121         }
 122
 123         $aside['logs'] = Array($a->get_baseurl(true)."/admin/logs/", t("Logs"), "logs");
 124         $aside['diagnostics_probe'] = Array($a->get_baseurl(true).'/probe/', t('probe address'), 'probe');
 125         $aside['diagnostics_webfinger'] = Array($a->get_baseurl(true).'/webfinger/', t('check webfinger'), 'webfinger');
 126
 127         $t = get_markup_template("admin_aside.tpl");
 128         $a->page['aside'] .= replace_macros( $t, array(
 129                         '$admin' => $aside,
 130                         '$admtxt' => t('Admin'),
 131                         '$plugadmtxt' => t('Plugin Features'),
 132                         '$logtxt' => t('Logs'),
 133                         '$diagnosticstxt' => t('diagnostics'),
 134                         '$h_pending' => t('User registrations waiting for confirmation'),
 135                         '$admurl'=> $a->get_baseurl(true)."/admin/"
 136         ));
 137
 138
 139
 140         /**
 141          * Page content
 142          */
 143         $o = '';
 144         // urls
 145         if ($a->argc > 1){
 146                 switch ($a->argv[1]){
 147                         case 'site':
 148                                 $o = admin_page_site($a);
 149                                 break;
 150                         case 'users':
 151                                 $o = admin_page_users($a);
 152                                 break;
 153                         case 'plugins':
 154                                 $o = admin_page_plugins($a);
 155                                 break;
 156                         case 'themes':
 157                                 $o = admin_page_themes($a);
 158                                 break;
 159                         case 'logs':
 160                                 $o = admin_page_logs($a);
 161                                 break;
 162                         case 'dbsync':
 163                                 $o = admin_page_dbsync($a);
 164                                 break;
 165                         case 'update':
 166                                 $o = admin_page_remoteupdate($a);
 167                                 break;
 168                         default:
 169                                 notice( t("Item not found.") );
 170                 }
 171         } else {
 172                 $o = admin_page_summary($a);
 173         }
 174
 175         if(is_ajax()) {
 176                 echo $o;
 177                 killme();
 178                 return '';
 179         } else {
 180                 return $o;
 181         }
 182 }
 183
 184
 185 /**
 186  * Admin Summary Page
 187  * @param App $a
 188  * @return string
 189  */
 190 function admin_page_summary(&$a) {
 191         $r = q("SELECT `page-flags`, COUNT(uid) as `count` FROM `user` GROUP BY `page-flags`");
 192         $accounts = Array(
 193                 Array( t('Normal Account'), 0),
 194                 Array( t('Soapbox Account'), 0),
 195                 Array( t('Community/Celebrity Account'), 0),
 196                 Array( t('Automatic Friend Account'), 0),
 197                 Array( t('Blog Account'), 0),
 198                 Array( t('Private Forum'), 0)
 199         );
 200
 201         $users=0;
 202         foreach ($r as $u){ $accounts[$u['page-flags']][1] = $u['count']; $users+= $u['count']; }
 203
 204         logger('accounts: ' . print_r($accounts,true),LOGGER_DATA);
 205
 206         $r = q("SELECT COUNT(id) as `count` FROM `register`");
 207         $pending = $r[0]['count'];
 208
 209         $r = q("select count(*) as total from deliverq where 1");
 210         $deliverq = (($r) ? $r[0]['total'] : 0);
 211
 212         $r = q("select count(*) as total from queue where 1");
 213         $queue = (($r) ? $r[0]['total'] : 0);
 214
 215         // We can do better, but this is a quick queue status
 216
 217         $queues = array( 'label' => t('Message queues'), 'deliverq' => $deliverq, 'queue' => $queue );
 218
 219
 220         $t = get_markup_template("admin_summary.tpl");
 221         return replace_macros($t, array(
 222                 '$title' => t('Administration'),
 223                 '$page' => t('Summary'),
 224                 '$queues' => $queues,
 225                 '$users' => Array( t('Registered users'), $users),
 226                 '$accounts' => $accounts,
 227                 '$pending' => Array( t('Pending registrations'), $pending),
 228                 '$version' => Array( t('Version'), FRIENDICA_VERSION),
 229                 '$platform' => FRIENDICA_PLATFORM,
 230                 '$codename' => FRIENDICA_CODENAME,
 231                 '$build' =>  get_config('system','build'),
 232                 '$plugins' => Array( t('Active plugins'), $a->plugins )
 233         ));
 234 }
 235
 236
 237 /**
 238  * Admin Site Page
 239  *  @param App $a
 240  */
 241 function admin_page_site_post(&$a){
 242         if (!x($_POST,"page_site")){
 243                 return;
 244         }
 245
 246         check_form_security_token_redirectOnErr('/admin/site', 'admin_site');
 247
 248         // relocate
 249         if (x($_POST,'relocate') && x($_POST,'relocate_url') && $_POST['relocate_url']!=""){
 250                 $new_url = $_POST['relocate_url'];
 251                 $new_url = rtrim($new_url,"/");
 252
 253                 $parsed = @parse_url($new_url);
 254                 if (!$parsed || (!x($parsed,'host') || !x($parsed,'scheme'))) {
 255                         notice(t("Can not parse base url. Must have at least <scheme>://<domain>"));
 256                         goaway($a->get_baseurl(true) . '/admin/site' );
 257                 }
 258
 259                 /* steps:
 260                  * replace all "baseurl" to "new_url" in config, profile, term, items and contacts
 261                  * send relocate for every local user
 262                  * */
 263
 264                 $old_url = $a->get_baseurl(true);
 265
 266                 function update_table($table_name, $fields, $old_url, $new_url) {
 267                         global $db, $a;
 268
 269                         $dbold = dbesc($old_url);
 270                         $dbnew = dbesc($new_url);
 271
 272                         $upd = array();
 273                         foreach ($fields as $f) {
 274                                 $upd[] = "`$f` = REPLACE(`$f`, '$dbold', '$dbnew')";
 275                         }
 276
 277                         $upds = implode(", ", $upd);
 278
 279
 280
 281                         $q = sprintf("UPDATE %s SET %s;", $table_name, $upds);
 282                         $r = q($q);
 283                         if (!$r) {
 284                                 notice( "Failed updating '$table_name': " . $db->error );
 285                                 goaway($a->get_baseurl(true) . '/admin/site' );
 286                         }
 287                 }
 288
 289                 // update tables
 290                 update_table("profile", array('photo', 'thumb'), $old_url, $new_url);
 291                 update_table("term", array('url'), $old_url, $new_url);
 292                 update_table("contact", array('photo','thumb','micro','url','nurl','request','notify','poll','confirm','poco'), $old_url, $new_url);
 293                 update_table("unique_contacts", array('url'), $old_url, $new_url);
 294                 update_table("item", array('owner-link','owner-avatar','author-name','author-link','author-avatar','body','plink','tag'), $old_url, $new_url);
 295
 296                 // update config
 297                 $a->set_baseurl($new_url);
 298                 set_config('system','url',$new_url);
 299
 300                 // send relocate
 301                 $users = q("SELECT uid FROM user WHERE account_removed = 0 AND account_expired = 0");
 302
 303                 foreach ($users as $user) {
 304                         proc_run('php', 'include/notifier.php', 'relocate', $user['uid']);
 305                 }
 306
 307                 info("Relocation started. Could take a while to complete.");
 308
 309                 goaway($a->get_baseurl(true) . '/admin/site' );
 310         }
 311         // end relocate
 312
 313         $sitename               =       ((x($_POST,'sitename'))                 ? notags(trim($_POST['sitename']))              : '');
 314         $hostname               =       ((x($_POST,'hostname'))                 ? notags(trim($_POST['hostname']))              : '');
 315         $sender_email   =       ((x($_POST,'sender_email'))             ? notags(trim($_POST['sender_email']))          : '');
 316         $banner                 =       ((x($_POST,'banner'))                   ? trim($_POST['banner'])                        : false);
 317         $info                   =       ((x($_POST,'info'))                     ? trim($_POST['info'])                  : false);
 318         $language               =       ((x($_POST,'language'))                 ? notags(trim($_POST['language']))              : '');
 319         $theme                  =       ((x($_POST,'theme'))                    ? notags(trim($_POST['theme']))                 : '');
 320         $theme_mobile           =       ((x($_POST,'theme_mobile'))             ? notags(trim($_POST['theme_mobile']))          : '');
 321         $maximagesize           =       ((x($_POST,'maximagesize'))             ? intval(trim($_POST['maximagesize']))          :  0);
 322         $maximagelength         =       ((x($_POST,'maximagelength'))           ? intval(trim($_POST['maximagelength']))        :  MAX_IMAGE_LENGTH);
 323         $jpegimagequality       =       ((x($_POST,'jpegimagequality'))         ? intval(trim($_POST['jpegimagequality']))      :  JPEG_QUALITY);
 324
 325
 326         $register_policy        =       ((x($_POST,'register_policy'))          ? intval(trim($_POST['register_policy']))       :  0);
 327         $daily_registrations    =       ((x($_POST,'max_daily_registrations'))  ? intval(trim($_POST['max_daily_registrations']))       :0);
 328         $abandon_days           =       ((x($_POST,'abandon_days'))             ? intval(trim($_POST['abandon_days']))          :  0);
 329
 330         $register_text          =       ((x($_POST,'register_text'))            ? notags(trim($_POST['register_text']))         : '');
 331
 332         $allowed_sites          =       ((x($_POST,'allowed_sites'))            ? notags(trim($_POST['allowed_sites']))         : '');
 333         $allowed_email          =       ((x($_POST,'allowed_email'))            ? notags(trim($_POST['allowed_email']))         : '');
 334         $block_public           =       ((x($_POST,'block_public'))             ? True                                          : False);
 335         $force_publish          =       ((x($_POST,'publish_all'))              ? True                                          : False);
 336         $global_directory       =       ((x($_POST,'directory_submit_url'))     ? notags(trim($_POST['directory_submit_url']))  : '');
 337         $thread_allow           =       ((x($_POST,'thread_allow'))             ? True                                          : False);
 338         $newuser_private                =       ((x($_POST,'newuser_private'))          ? True                                          : False);
 339         $enotify_no_content             =       ((x($_POST,'enotify_no_content'))       ? True                                          : False);
 340         $private_addons                 =       ((x($_POST,'private_addons'))           ? True                                          : False);
 341         $disable_embedded               =       ((x($_POST,'disable_embedded'))         ? True                                          : False);
 342         $allow_users_remote_self        =       ((x($_POST,'allow_users_remote_self'))          ? True                                          : False);
 343
 344         $no_multi_reg           =       ((x($_POST,'no_multi_reg'))             ? True                                          : False);
 345         $no_openid              =       !((x($_POST,'no_openid'))               ? True                                          : False);
 346         $no_regfullname         =       !((x($_POST,'no_regfullname'))          ? True                                          : False);
 347         $no_utf                 =       !((x($_POST,'no_utf'))                  ? True                                          : False);
 348         $no_community_page      =       !((x($_POST,'no_community_page'))       ? True                                          : False);
 349
 350         $verifyssl              =       ((x($_POST,'verifyssl'))                ? True                                          : False);
 351         $proxyuser              =       ((x($_POST,'proxyuser'))                ? notags(trim($_POST['proxyuser']))             : '');
 352         $proxy                  =       ((x($_POST,'proxy'))                    ? notags(trim($_POST['proxy']))                 : '');
 353         $timeout                =       ((x($_POST,'timeout'))                  ? intval(trim($_POST['timeout']))               : 60);
 354         $delivery_interval      =       ((x($_POST,'delivery_interval'))        ? intval(trim($_POST['delivery_interval']))     : 0);
 355         $poll_interval          =       ((x($_POST,'poll_interval'))            ? intval(trim($_POST['poll_interval']))         : 0);
 356         $maxloadavg             =       ((x($_POST,'maxloadavg'))               ? intval(trim($_POST['maxloadavg']))            : 50);
 357         $dfrn_only              =       ((x($_POST,'dfrn_only'))                ? True                                          : False);
 358         $ostatus_disabled       =       !((x($_POST,'ostatus_disabled'))        ? True                                          : False);
 359         $ostatus_poll_interval  =       ((x($_POST,'ostatus_poll_interval'))    ? intval(trim($_POST['ostatus_poll_interval']))         :  0);
 360         $diaspora_enabled       =       ((x($_POST,'diaspora_enabled'))         ? True                                          : False);
 361         $ssl_policy             =       ((x($_POST,'ssl_policy'))               ? intval($_POST['ssl_policy'])                  : 0);
 362         $force_ssl              =       ((x($_POST,'force_ssl'))                ? True                                          : False);
 363         $old_share              =       ((x($_POST,'old_share'))                ? True                                          : False);
 364         $hide_help              =       ((x($_POST,'hide_help'))                ? True                                          : False);
 365         $suppress_language      =       ((x($_POST,'suppress_language'))        ? True                                          : False);
 366         $use_fulltext_engine    =       ((x($_POST,'use_fulltext_engine'))      ? True                                          : False);
 367         $itemcache              =       ((x($_POST,'itemcache'))                ? notags(trim($_POST['itemcache']))             : '');
 368         $itemcache_duration     =       ((x($_POST,'itemcache_duration'))       ? intval($_POST['itemcache_duration'])          : 0);
 369         $max_comments           =       ((x($_POST,'max_comments'))             ? intval($_POST['max_comments'])                : 0);
 370         $lockpath               =       ((x($_POST,'lockpath'))                 ? notags(trim($_POST['lockpath']))              : '');
 371         $temppath               =       ((x($_POST,'temppath'))                 ? notags(trim($_POST['temppath']))              : '');
 372         $basepath               =       ((x($_POST,'basepath'))                 ? notags(trim($_POST['basepath']))              : '');
 373         $singleuser             =       ((x($_POST,'singleuser'))               ? notags(trim($_POST['singleuser']))            : '');
 374         $proxy_disabled         =       ((x($_POST,'proxy_disabled'))           ? True                                          : False);
 375         $old_pager              =       ((x($_POST,'old_pager'))                ? True                                          : False);
 376         $disable_noscrape = ((x($_POST,'disable_noscrape')) ? true : false);
 377         if($ssl_policy != intval(get_config('system','ssl_policy'))) {
 378                 if($ssl_policy == SSL_POLICY_FULL) {
 379                         q("update `contact` set
 380                                 `url`     = replace(`url`    , 'http:' , 'https:'),
 381                                 `photo`   = replace(`photo`  , 'http:' , 'https:'),
 382                                 `thumb`   = replace(`thumb`  , 'http:' , 'https:'),
 383                                 `micro`   = replace(`micro`  , 'http:' , 'https:'),
 384                                 `request` = replace(`request`, 'http:' , 'https:'),
 385                                 `notify`  = replace(`notify` , 'http:' , 'https:'),
 386                                 `poll`    = replace(`poll`   , 'http:' , 'https:'),
 387                                 `confirm` = replace(`confirm`, 'http:' , 'https:'),
 388                                 `poco`    = replace(`poco`   , 'http:' , 'https:')
 389                                 where `self` = 1"
 390                         );
 391                         q("update `profile` set
 392                                 `photo`   = replace(`photo`  , 'http:' , 'https:'),
 393                                 `thumb`   = replace(`thumb`  , 'http:' , 'https:')
 394                                 where 1 "
 395                         );
 396                 }
 397                 elseif($ssl_policy == SSL_POLICY_SELFSIGN) {
 398                         q("update `contact` set
 399                                 `url`     = replace(`url`    , 'https:' , 'http:'),
 400                                 `photo`   = replace(`photo`  , 'https:' , 'http:'),
 401                                 `thumb`   = replace(`thumb`  , 'https:' , 'http:'),
 402                                 `micro`   = replace(`micro`  , 'https:' , 'http:'),
 403                                 `request` = replace(`request`, 'https:' , 'http:'),
 404                                 `notify`  = replace(`notify` , 'https:' , 'http:'),
 405                                 `poll`    = replace(`poll`   , 'https:' , 'http:'),
 406                                 `confirm` = replace(`confirm`, 'https:' , 'http:'),
 407                                 `poco`    = replace(`poco`   , 'https:' , 'http:')
 408                                 where `self` = 1"
 409                         );
 410                         q("update `profile` set
 411                                 `photo`   = replace(`photo`  , 'https:' , 'http:'),
 412                                 `thumb`   = replace(`thumb`  , 'https:' , 'http:')
 413                                 where 1 "
 414                         );
 415                 }
 416         }
 417         set_config('system','ssl_policy',$ssl_policy);
 418         set_config('system','delivery_interval',$delivery_interval);
 419         set_config('system','poll_interval',$poll_interval);
 420         set_config('system','maxloadavg',$maxloadavg);
 421         set_config('config','sitename',$sitename);
 422         set_config('config','hostname',$hostname);
 423         set_config('config','sender_email', $sender_email);
 424         set_config('system','suppress_language',$suppress_language);
 425         if ($banner==""){
 426                 // don't know why, but del_config doesn't work...
 427                 q("DELETE FROM `config` WHERE `cat` = '%s' AND `k` = '%s' LIMIT 1",
 428                         dbesc("system"),
 429                         dbesc("banner")
 430                 );
 431         } else {
 432                 set_config('system','banner', $banner);
 433         }
 434         if ($info=="") {
 435                 del_config('config','info');
 436         } else {
 437                 set_config('config','info',$info);
 438         }
 439         set_config('system','language', $language);
 440         set_config('system','theme', $theme);
 441         if ( $theme_mobile === '---' ) {
 442                 del_config('system','mobile-theme');
 443         } else {
 444                 set_config('system','mobile-theme', $theme_mobile);
 445                 }
 446                 if ( $singleuser === '---' ) {
 447                         del_config('system','singleuser');
 448                 } else {
 449                         set_config('system','singleuser', $singleuser);
 450                 }
 451         set_config('system','maximagesize', $maximagesize);
 452         set_config('system','max_image_length', $maximagelength);
 453         set_config('system','jpeg_quality', $jpegimagequality);
 454
 455         set_config('config','register_policy', $register_policy);
 456         set_config('system','max_daily_registrations', $daily_registrations);
 457         set_config('system','account_abandon_days', $abandon_days);
 458         set_config('config','register_text', $register_text);
 459         set_config('system','allowed_sites', $allowed_sites);
 460         set_config('system','allowed_email', $allowed_email);
 461         set_config('system','block_public', $block_public);
 462         set_config('system','publish_all', $force_publish);
 463         if ($global_directory==""){
 464                 // don't know why, but del_config doesn't work...
 465                 q("DELETE FROM `config` WHERE `cat` = '%s' AND `k` = '%s' LIMIT 1",
 466                         dbesc("system"),
 467                         dbesc("directory_submit_url")
 468                 );
 469         } else {
 470                 set_config('system','directory_submit_url', $global_directory);
 471         }
 472         set_config('system','thread_allow', $thread_allow);
 473         set_config('system','newuser_private', $newuser_private);
 474         set_config('system','enotify_no_content', $enotify_no_content);
 475         set_config('system','disable_embedded', $disable_embedded);
 476         set_config('system','allow_users_remote_self', $allow_users_remote_self);
 477
 478         set_config('system','block_extended_register', $no_multi_reg);
 479         set_config('system','no_openid', $no_openid);
 480         set_config('system','no_regfullname', $no_regfullname);
 481         set_config('system','no_community_page', $no_community_page);
 482         set_config('system','no_utf', $no_utf);
 483         set_config('system','verifyssl', $verifyssl);
 484         set_config('system','proxyuser', $proxyuser);
 485         set_config('system','proxy', $proxy);
 486         set_config('system','curl_timeout', $timeout);
 487         set_config('system','dfrn_only', $dfrn_only);
 488         set_config('system','ostatus_disabled', $ostatus_disabled);
 489                 set_config('system','ostatus_poll_interval', $ostatus_poll_interval);
 490         set_config('system','diaspora_enabled', $diaspora_enabled);
 491         set_config('config','private_addons', $private_addons);
 492
 493         set_config('system','force_ssl', $force_ssl);
 494         set_config('system','old_share', $old_share);
 495         set_config('system','hide_help', $hide_help);
 496         set_config('system','use_fulltext_engine', $use_fulltext_engine);
 497         set_config('system','itemcache', $itemcache);
 498         set_config('system','itemcache_duration', $itemcache_duration);
 499         set_config('system','max_comments', $max_comments);
 500         set_config('system','lockpath', $lockpath);
 501         set_config('system','temppath', $temppath);
 502         set_config('system','basepath', $basepath);
 503         set_config('system','proxy_disabled', $proxy_disabled);
 504         set_config('system','old_pager', $old_pager);
 505         set_config('system','disable_noscrape', $disable_noscrape);
 506
 507         info( t('Site settings updated.') . EOL);
 508         goaway($a->get_baseurl(true) . '/admin/site' );
 509         return; // NOTREACHED
 510
 511 }
 512
 513 /**
 514  * @param  App $a
 515  * @return string
 516  */
 517 function admin_page_site(&$a) {
 518
 519         /* Installed langs */
 520         $lang_choices = array();
 521         $langs = glob('view/*/strings.php');
 522
 523         if(is_array($langs) && count($langs)) {
 524                 if(! in_array('view/en/strings.php',$langs))
 525                         $langs[] = 'view/en/';
 526                 asort($langs);
 527                 foreach($langs as $l) {
 528                         $t = explode("/",$l);
 529                         $lang_choices[$t[1]] = $t[1];
 530                 }
 531         }
 532
 533         /* Installed themes */
 534         $theme_choices = array();
 535         $theme_choices_mobile = array();
 536         $theme_choices_mobile["---"] = t("No special theme for mobile devices");
 537         $files = glob('view/theme/*');
 538         if($files) {
 539                 foreach($files as $file) {
 540                         $f = basename($file);
 541                         $theme_name = ((file_exists($file . '/experimental')) ?  sprintf("%s - \x28Experimental\x29", $f) : $f);
 542                         if (file_exists($file . '/mobile')) {
 543                                 $theme_choices_mobile[$f] = $theme_name;
 544                         }
 545                 else {
 546                                 $theme_choices[$f] = $theme_name;
 547                         }
 548                 }
 549                 }
 550
 551                 /* OStatus conversation poll choices */
 552                 $ostatus_poll_choices = array(
 553                 "-2" => t("Never"),
 554                 "-1" => t("At post arrival"),
 555                 "0" => t("Frequently"),
 556                 "60" => t("Hourly"),
 557                 "720" => t("Twice daily"),
 558                 "1440" => t("Daily")
 559                         );
 560
 561                 /* get user names to make the install a personal install of X */
 562                 $user_names = array();
 563                 $user_names['---'] = t('Multi user instance');
 564                 $users = q("SELECT username, nickname FROM `user`");
 565                 foreach ($users as $user) {
 566                         $user_names[$user['nickname']] = $user['username'];
 567                 }
 568
 569         /* Banner */
 570         $banner = get_config('system','banner');
 571         if($banner == false)
 572                 $banner = '<a href="http://friendica.com"><img id="logo-img" src="images/friendica-32.png" alt="logo" /></a><span id="logo-text"><a href="http://friendica.com">Friendica</a></span>';
 573         $banner = htmlspecialchars($banner);
 574         $info = get_config('config','info');
 575         $info = htmlspecialchars($info);
 576
 577         // Automatically create temporary paths
 578         get_temppath();
 579         get_lockpath();
 580         get_itemcachepath();
 581
 582         //echo "<pre>"; var_dump($lang_choices); die("</pre>");
 583
 584         /* Register policy */
 585         $register_choices = Array(
 586                 REGISTER_CLOSED => t("Closed"),
 587                 REGISTER_APPROVE => t("Requires approval"),
 588                 REGISTER_OPEN => t("Open")
 589         );
 590
 591         $ssl_choices = array(
 592                 SSL_POLICY_NONE => t("No SSL policy, links will track page SSL state"),
 593                 SSL_POLICY_FULL => t("Force all links to use SSL"),
 594                 SSL_POLICY_SELFSIGN => t("Self-signed certificate, use SSL for local links only (discouraged)")
 595         );
 596
 597         if ($a->config['hostname'] == "")
 598                 $a->config['hostname'] = $a->get_hostname();
 599
 600         $t = get_markup_template("admin_site.tpl");
 601         return replace_macros($t, array(
 602                 '$title' => t('Administration'),
 603                 '$page' => t('Site'),
 604                 '$submit' => t('Save Settings'),
 605                 '$registration' => t('Registration'),
 606                 '$upload' => t('File upload'),
 607                 '$corporate' => t('Policies'),
 608                 '$advanced' => t('Advanced'),
 609                 '$performance' => t('Performance'),
 610                 '$relocate'=> t('Relocate - WARNING: advanced function. Could make this server unreachable.'),
 611                 '$baseurl' => $a->get_baseurl(true),
 612                 // name, label, value, help string, extra data...
 613                 '$sitename'             => array('sitename', t("Site name"), htmlentities($a->config['sitename'], ENT_QUOTES), 'UTF-8'),
 614                 '$hostname'             => array('hostname', t("Host name"), $a->config['hostname'], ""),
 615                 '$sender_email'         => array('sender_email', t("Sender Email"), $a->config['sender_email'], "The email address your server shall use to send notification emails from.", "", "", "email"),
 616                 '$banner'               => array('banner', t("Banner/Logo"), $banner, ""),
 617                 '$info' => array('info',t('Additional Info'), $info, t('For public servers: you can add additional information here that will be listed at dir.friendica.com/siteinfo.')),
 618                 '$language'             => array('language', t("System language"), get_config('system','language'), "", $lang_choices),
 619                 '$theme'                => array('theme', t("System theme"), get_config('system','theme'), t("Default system theme - may be over-ridden by user profiles - <a href='#' id='cnftheme'>change theme settings</a>"), $theme_choices),
 620                 '$theme_mobile'         => array('theme_mobile', t("Mobile system theme"), get_config('system','mobile-theme'), t("Theme for mobile devices"), $theme_choices_mobile),
 621                 '$ssl_policy'           => array('ssl_policy', t("SSL link policy"), (string) intval(get_config('system','ssl_policy')), t("Determines whether generated links should be forced to use SSL"), $ssl_choices),
 622                 '$force_ssl'            => array('force_ssl', t("Force SSL"), get_config('system','force_ssl'), t("Force all Non-SSL requests to SSL - Attention: on some systems it could lead to endless loops.")),
 623                 '$old_share'            => array('old_share', t("Old style 'Share'"), get_config('system','old_share'), t("Deactivates the bbcode element 'share' for repeating items.")),
 624                 '$hide_help'            => array('hide_help', t("Hide help entry from navigation menu"), get_config('system','hide_help'), t("Hides the menu entry for the Help pages from the navigation menu. You can still access it calling /help directly.")),
 625                 '$singleuser'           => array('singleuser', t("Single user instance"), get_config('system','singleuser'), t("Make this instance multi-user or single-user for the named user"), $user_names),
 626                 '$maximagesize'         => array('maximagesize', t("Maximum image size"), get_config('system','maximagesize'), t("Maximum size in bytes of uploaded images. Default is 0, which means no limits.")),
 627                 '$maximagelength'               => array('maximagelength', t("Maximum image length"), get_config('system','max_image_length'), t("Maximum length in pixels of the longest side of uploaded images. Default is -1, which means no limits.")),
 628                 '$jpegimagequality'             => array('jpegimagequality', t("JPEG image quality"), get_config('system','jpeg_quality'), t("Uploaded JPEGS will be saved at this quality setting [0-100]. Default is 100, which is full quality.")),
 629
 630                 '$register_policy'      => array('register_policy', t("Register policy"), $a->config['register_policy'], "", $register_choices),
 631                 '$daily_registrations'  => array('max_daily_registrations', t("Maximum Daily Registrations"), get_config('system', 'max_daily_registrations'), t("If registration is permitted above, this sets the maximum number of new user registrations to accept per day.  If register is set to closed, this setting has no effect.")),
 632                 '$register_text'        => array('register_text', t("Register text"), htmlentities($a->config['register_text'], ENT_QUOTES, 'UTF-8'), t("Will be displayed prominently on the registration page.")),
 633                 '$abandon_days'         => array('abandon_days', t('Accounts abandoned after x days'), get_config('system','account_abandon_days'), t('Will not waste system resources polling external sites for abandonded accounts. Enter 0 for no time limit.')),
 634                 '$allowed_sites'        => array('allowed_sites', t("Allowed friend domains"), get_config('system','allowed_sites'), t("Comma separated list of domains which are allowed to establish friendships with this site. Wildcards are accepted. Empty to allow any domains")),
 635                 '$allowed_email'        => array('allowed_email', t("Allowed email domains"), get_config('system','allowed_email'), t("Comma separated list of domains which are allowed in email addresses for registrations to this site. Wildcards are accepted. Empty to allow any domains")),
 636                 '$block_public'         => array('block_public', t("Block public"), get_config('system','block_public'), t("Check to block public access to all otherwise public personal pages on this site unless you are currently logged in.")),
 637                 '$force_publish'        => array('publish_all', t("Force publish"), get_config('system','publish_all'), t("Check to force all profiles on this site to be listed in the site directory.")),
 638                 '$global_directory'     => array('directory_submit_url', t("Global directory update URL"), get_config('system','directory_submit_url'), t("URL to update the global directory. If this is not set, the global directory is completely unavailable to the application.")),
 639                 '$thread_allow'         => array('thread_allow', t("Allow threaded items"), get_config('system','thread_allow'), t("Allow infinite level threading for items on this site.")),
 640                 '$newuser_private'      => array('newuser_private', t("Private posts by default for new users"), get_config('system','newuser_private'), t("Set default post permissions for all new members to the default privacy group rather than public.")),
 641                 '$enotify_no_content'   => array('enotify_no_content', t("Don't include post content in email notifications"), get_config('system','enotify_no_content'), t("Don't include the content of a post/comment/private message/etc. in the email notifications that are sent out from this site, as a privacy measure.")),
 642                 '$private_addons'       => array('private_addons', t("Disallow public access to addons listed in the apps menu."), get_config('config','private_addons'), t("Checking this box will restrict addons listed in the apps menu to members only.")),
 643                 '$disable_embedded'     => array('disable_embedded', t("Don't embed private images in posts"), get_config('system','disable_embedded'), t("Don't replace locally-hosted private photos in posts with an embedded copy of the image. This means that contacts who receive posts containing private photos will have to authenticate and load each image, which may take a while.")),
 644                 '$allow_users_remote_self'      => array('allow_users_remote_self', t('Allow Users to set remote_self'), get_config('system','allow_users_remote_self'), t('With checking this, every user is allowed to mark every contact as a remote_self in the repair contact dialog. Setting this flag on a contact causes mirroring every posting of that contact in the users stream.')),
 645                 '$no_multi_reg'         => array('no_multi_reg', t("Block multiple registrations"),  get_config('system','block_extended_register'), t("Disallow users to register additional accounts for use as pages.")),
 646                 '$no_openid'            => array('no_openid', t("OpenID support"), !get_config('system','no_openid'), t("OpenID support for registration and logins.")),
 647                 '$no_regfullname'       => array('no_regfullname', t("Fullname check"), !get_config('system','no_regfullname'), t("Force users to register with a space between firstname and lastname in Full name, as an antispam measure")),
 648                 '$no_utf'               => array('no_utf', t("UTF-8 Regular expressions"), !get_config('system','no_utf'), t("Use PHP UTF8 regular expressions")),
 649                 '$no_community_page'    => array('no_community_page', t("Show Community Page"), !get_config('system','no_community_page'), t("Display a Community page showing all recent public postings on this site.")),
 650                 '$ostatus_disabled'     => array('ostatus_disabled', t("Enable OStatus support"), !get_config('system','ostatus_disabled'), t("Provide built-in OStatus \x28StatusNet, GNU Social etc.\x29 compatibility. All communications in OStatus are public, so privacy warnings will be occasionally displayed.")),
 651                 '$ostatus_poll_interval'        => array('ostatus_poll_interval', t("OStatus conversation completion interval"), (string) intval(get_config('system','ostatus_poll_interval')), t("How often shall the poller check for new entries in OStatus conversations? This can be a very ressource task."), $ostatus_poll_choices),
 652                 '$diaspora_enabled'     => array('diaspora_enabled', t("Enable Diaspora support"), get_config('system','diaspora_enabled'), t("Provide built-in Diaspora network compatibility.")),
 653                 '$dfrn_only'            => array('dfrn_only', t('Only allow Friendica contacts'), get_config('system','dfrn_only'), t("All contacts must use Friendica protocols. All other built-in communication protocols disabled.")),
 654                 '$verifyssl'            => array('verifyssl', t("Verify SSL"), get_config('system','verifyssl'), t("If you wish, you can turn on strict certificate checking. This will mean you cannot connect (at all) to self-signed SSL sites.")),
 655                 '$proxyuser'            => array('proxyuser', t("Proxy user"), get_config('system','proxyuser'), ""),
 656                 '$proxy'                => array('proxy', t("Proxy URL"), get_config('system','proxy'), ""),
 657                 '$timeout'              => array('timeout', t("Network timeout"), (x(get_config('system','curl_timeout'))?get_config('system','curl_timeout'):60), t("Value is in seconds. Set to 0 for unlimited (not recommended).")),
 658                 '$delivery_interval'    => array('delivery_interval', t("Delivery interval"), (x(get_config('system','delivery_interval'))?get_config('system','delivery_interval'):2), t("Delay background delivery processes by this many seconds to reduce system load. Recommend: 4-5 for shared hosts, 2-3 for virtual private servers. 0-1 for large dedicated servers.")),
 659                 '$poll_interval'        => array('poll_interval', t("Poll interval"), (x(get_config('system','poll_interval'))?get_config('system','poll_interval'):2), t("Delay background polling processes by this many seconds to reduce system load. If 0, use delivery interval.")),
 660                 '$maxloadavg'           => array('maxloadavg', t("Maximum Load Average"), ((intval(get_config('system','maxloadavg')) > 0)?get_config('system','maxloadavg'):50), t("Maximum system load before delivery and poll processes are deferred - default 50.")),
 661
 662                 '$use_fulltext_engine'  => array('use_fulltext_engine', t("Use MySQL full text engine"), get_config('system','use_fulltext_engine'), t("Activates the full text engine. Speeds up search - but can only search for four and more characters.")),
 663                 '$suppress_language'    => array('suppress_language', t("Suppress Language"), get_config('system','suppress_language'), t("Suppress language information in meta information about a posting.")),
 664                 '$itemcache'            => array('itemcache', t("Path to item cache"), get_config('system','itemcache'), "The item caches buffers generated bbcode and external images."),
 665                 '$itemcache_duration'   => array('itemcache_duration', t("Cache duration in seconds"), get_config('system','itemcache_duration'), t("How long should the cache files be hold? Default value is 86400 seconds (One day). To disable the item cache, set the value to -1.")),
 666                 '$max_comments'         => array('max_comments', t("Maximum numbers of comments per post"), get_config('system','max_comments'), t("How much comments should be shown for each post? Default value is 100.")),
 667                 '$lockpath'             => array('lockpath', t("Path for lock file"), get_config('system','lockpath'), "The lock file is used to avoid multiple pollers at one time. Only define a folder here."),
 668                 '$temppath'             => array('temppath', t("Temp path"), get_config('system','temppath'), "If you have a restricted system where the webserver can't access the system temp path, enter another path here."),
 669                 '$basepath'             => array('basepath', t("Base path to installation"), get_config('system','basepath'), "If the system cannot detect the correct path to your installation, enter the correct path here. This setting should only be set if you are using a restricted system and symbolic links to your webroot."),
 670                 '$proxy_disabled'       => array('proxy_disabled', t("Disable picture proxy"), get_config('system','proxy_disabled'), t("The picture proxy increases performance and privacy. It shouldn't be used on systems with very low bandwith.")),
 671                 '$old_pager'            => array('old_pager', t("Enable old style pager"), get_config('system','old_pager'), t("The old style pager has page numbers but slows down massively the page speed.")),
 672
 673                 '$relocate_url'     => array('relocate_url', t("New base url"), $a->get_baseurl(), "Change base url for this server. Sends relocate message to all DFRN contacts of all users."),
 674
 675                 '$disable_noscrape'=> array('disable_noscrape', t("Disable noscrape"), get_config('system','disable_noscrape'), t("The noscrape feature speeds up directory submissions by using JSON data instead of HTML scraping. Disabling it will cause higher load on your server and the directory server.")),
 676         '$form_security_token' => get_form_security_token("admin_site")
 677
 678         ));
 679
 680 }
 681
 682
 683 function admin_page_dbsync(&$a) {
 684
 685         $o = '';
 686
 687         if($a->argc > 3 && intval($a->argv[3]) && $a->argv[2] === 'mark') {
 688                 set_config('database', 'update_' . intval($a->argv[3]), 'success');
 689                 $curr = get_config('system','build');
 690                 if(intval($curr) == intval($a->argv[3]))
 691                         set_config('system','build',intval($curr) + 1);
 692                 info( t('Update has been marked successful') . EOL);
 693                 goaway($a->get_baseurl(true) . '/admin/dbsync');
 694         }
 695
 696         if(($a->argc > 2) AND (intval($a->argv[2]) OR ($a->argv[2] === 'check'))) {
 697                 require_once("include/dbstructure.php");
 698                 $retval = update_structure(false, true);
 699                 if (!$retval) {
 700                         $o .= sprintf(t("Database structure update %s was successfully applied."), DB_UPDATE_VERSION)."<br />";
 701                         set_config('database', 'dbupdate_'.DB_UPDATE_VERSION, 'success');
 702                 } else
 703                         $o .= sprintf(t("Executing of database structure update %s failed with error: %s"),
 704                                         DB_UPDATE_VERSION, $retval)."<br />";
 705                 if ($a->argv[2] === 'check')
 706                         return $o;
 707         }
 708
 709         if ($a->argc > 2 && intval($a->argv[2])) {
 710                 require_once('update.php');
 711                 $func = 'update_' . intval($a->argv[2]);
 712                 if(function_exists($func)) {
 713                         $retval = $func();
 714                         if($retval === UPDATE_FAILED) {
 715                                 $o .= sprintf(t("Executing %s failed with error: %s"), $func, $retval);
 716                         }
 717                         elseif($retval === UPDATE_SUCCESS) {
 718                                 $o .= sprintf(t('Update %s was successfully applied.', $func));
 719                                 set_config('database',$func, 'success');
 720                         }
 721                         else
 722                                 $o .= sprintf(t('Update %s did not return a status. Unknown if it succeeded.'), $func);
 723                 } else {
 724                         $o .= sprintf(t('There was no additional update function %s that needed to be called.'), $func)."<br />";
 725                         set_config('database',$func, 'success');
 726                 }
 727                 return $o;
 728         }
 729
 730         $failed = array();
 731         $r = q("select k, v from config where `cat` = 'database' ");
 732         if(count($r)) {
 733                 foreach($r as $rr) {
 734                         $upd = intval(substr($rr['k'],7));
 735                         if($upd < 1139 || $rr['v'] === 'success')
 736                                 continue;
 737                         $failed[] = $upd;
 738                 }
 739         }
 740         if(! count($failed)) {
 741                 $o = replace_macros(get_markup_template('structure_check.tpl'),array(
 742                         '$base' => $a->get_baseurl(true),
 743                         '$banner' => t('No failed updates.'),
 744                         '$check' => t('Check database structure'),
 745                 ));
 746         } else {
 747                 $o = replace_macros(get_markup_template('failed_updates.tpl'),array(
 748                         '$base' => $a->get_baseurl(true),
 749                         '$banner' => t('Failed Updates'),
 750                         '$desc' => t('This does not include updates prior to 1139, which did not return a status.'),
 751                         '$mark' => t('Mark success (if update was manually applied)'),
 752                         '$apply' => t('Attempt to execute this update step automatically'),
 753                         '$failed' => $failed
 754                 ));
 755         }
 756
 757         return $o;
 758
 759 }
 760
 761 /**
 762  * Users admin page
 763  *
 764  * @param App $a
 765  */
 766 function admin_page_users_post(&$a){
 767         $pending = ( x($_POST, 'pending') ? $_POST['pending'] : Array() );
 768         $users = ( x($_POST, 'user') ? $_POST['user'] : Array() );
 769         $nu_name = ( x($_POST, 'new_user_name') ? $_POST['new_user_name'] : '');
 770         $nu_nickname = ( x($_POST, 'new_user_nickname') ? $_POST['new_user_nickname'] : '');
 771         $nu_email = ( x($_POST, 'new_user_email') ? $_POST['new_user_email'] : '');
 772
 773         check_form_security_token_redirectOnErr('/admin/users', 'admin_users');
 774
 775         if (!($nu_name==="") && !($nu_email==="") && !($nu_nickname==="")) {
 776                 require_once('include/user.php');
 777
 778                 $result = create_user( array('username'=>$nu_name, 'email'=>$nu_email, 'nickname'=>$nu_nickname, 'verified'=>1)  );
 779                 if(! $result['success']) {
 780                         notice($result['message']);
 781                         return;
 782                 }
 783                 $nu = $result['user'];
 784                 $preamble = deindent(t('
 785                         Dear %1$s,
 786                                 the administrator of %2$s has set up an account for you.'));
 787                 $body = deindent(t('
 788                         The login details are as follows:
 789
 790                         Site Location:  %1$s
 791                         Login Name:             %2$s
 792                         Password:               %3$s
 793
 794                         You may change your password from your account "Settings" page after logging
 795                         in.
 796
 797                         Please take a few moments to review the other account settings on that page.
 798
 799                         You may also wish to add some basic information to your default profile
 800                         (on the "Profiles" page) so that other people can easily find you.
 801
 802                         We recommend setting your full name, adding a profile photo,
 803                         adding some profile "keywords" (very useful in making new friends) - and
 804                         perhaps what country you live in; if you do not wish to be more specific
 805                         than that.
 806
 807                         We fully respect your right to privacy, and none of these items are necessary.
 808                         If you are new and do not know anybody here, they may help
 809                         you to make some new and interesting friends.
 810
 811                         Thank you and welcome to %4$s.'));
 812
 813                 $preamble = sprintf($preamble, $nu['username'], $a->config['sitename']);
 814                 $body = sprintf($body, $a->get_baseurl(), $nu['email'], $result['password'], $a->config['sitename']);
 815
 816                 notification(array(
 817                         'type' => "SYSTEM_EMAIL",
 818                         'to_email' => $nu['email'],
 819                         'subject'=> sprintf( t('Registration details for %s'), $a->config['sitename']),
 820                         'preamble'=> $preamble,
 821                         'body' => $body));
 822
 823         }
 824
 825         if (x($_POST,'page_users_block')){
 826                 foreach($users as $uid){
 827                         q("UPDATE `user` SET `blocked`=1-`blocked` WHERE `uid`=%s",
 828                                 intval( $uid )
 829                         );
 830                 }
 831                 notice( sprintf( tt("%s user blocked/unblocked", "%s users blocked/unblocked", count($users)), count($users)) );
 832         }
 833         if (x($_POST,'page_users_delete')){
 834                 require_once("include/Contact.php");
 835                 foreach($users as $uid){
 836                         user_remove($uid);
 837                 }
 838                 notice( sprintf( tt("%s user deleted", "%s users deleted", count($users)), count($users)) );
 839         }
 840
 841         if (x($_POST,'page_users_approve')){
 842                 require_once("mod/regmod.php");
 843                 foreach($pending as $hash){
 844                         user_allow($hash);
 845                 }
 846         }
 847         if (x($_POST,'page_users_deny')){
 848                 require_once("mod/regmod.php");
 849                 foreach($pending as $hash){
 850                         user_deny($hash);
 851                 }
 852         }
 853         goaway($a->get_baseurl(true) . '/admin/users' );
 854         return; // NOTREACHED
 855 }
 856
 857 /**
 858  * @param App $a
 859  * @return string
 860  */
 861 function admin_page_users(&$a){
 862         if ($a->argc>2) {
 863                 $uid = $a->argv[3];
 864                 $user = q("SELECT username, blocked FROM `user` WHERE `uid`=%d", intval($uid));
 865                 if (count($user)==0){
 866                         notice( 'User not found' . EOL);
 867                         goaway($a->get_baseurl(true) . '/admin/users' );
 868                         return ''; // NOTREACHED
 869                 }
 870                 switch($a->argv[2]){
 871                         case "delete":{
 872                                 check_form_security_token_redirectOnErr('/admin/users', 'admin_users', 't');
 873                                 // delete user
 874                                 require_once("include/Contact.php");
 875                                 user_remove($uid);
 876
 877                                 notice( sprintf(t("User '%s' deleted"), $user[0]['username']) . EOL);
 878                         }; break;
 879                         case "block":{
 880                                 check_form_security_token_redirectOnErr('/admin/users', 'admin_users', 't');
 881                                 q("UPDATE `user` SET `blocked`=%d WHERE `uid`=%s",
 882                                         intval( 1-$user[0]['blocked'] ),
 883                                         intval( $uid )
 884                                 );
 885                                 notice( sprintf( ($user[0]['blocked']?t("User '%s' unblocked"):t("User '%s' blocked")) , $user[0]['username']) . EOL);
 886                         }; break;
 887                 }
 888                 goaway($a->get_baseurl(true) . '/admin/users' );
 889                 return ''; // NOTREACHED
 890
 891         }
 892
 893         /* get pending */
 894         $pending = q("SELECT `register`.*, `contact`.`name`, `user`.`email`
 895                                  FROM `register`
 896                                  LEFT JOIN `contact` ON `register`.`uid` = `contact`.`uid`
 897                                  LEFT JOIN `user` ON `register`.`uid` = `user`.`uid`;");
 898
 899
 900         /* get users */
 901
 902         $total = q("SELECT count(*) as total FROM `user` where 1");
 903         if(count($total)) {
 904                 $a->set_pager_total($total[0]['total']);
 905                 $a->set_pager_itemspage(100);
 906         }
 907
 908
 909         $users = q("SELECT `user` . * , `contact`.`name` , `contact`.`url` , `contact`.`micro`, `lastitem`.`lastitem_date`, `user`.`account_expired`
 910                                 FROM
 911                                         (SELECT MAX(`item`.`changed`) as `lastitem_date`, `item`.`uid`
 912                                         FROM `item`
 913                                         WHERE `item`.`type` = 'wall'
 914                                         GROUP BY `item`.`uid`) AS `lastitem`
 915                                                  RIGHT OUTER JOIN `user` ON `user`.`uid` = `lastitem`.`uid`,
 916                                            `contact`
 917                                 WHERE
 918                                            `user`.`uid` = `contact`.`uid`
 919                                                 AND `user`.`verified` =1
 920                                         AND `contact`.`self` =1
 921                                 ORDER BY `contact`.`name` LIMIT %d, %d
 922                                 ",
 923                                 intval($a->pager['start']),
 924                                 intval($a->pager['itemspage'])
 925                                 );
 926
 927         function _setup_users($e){
 928                 $a = get_app();
 929
 930                 $adminlist = explode(",", str_replace(" ", "", $a->config['admin_email']));
 931
 932                 $accounts = Array(
 933                         t('Normal Account'),
 934                         t('Soapbox Account'),
 935                         t('Community/Celebrity Account'),
 936                                                 t('Automatic Friend Account')
 937                 );
 938                 $e['page-flags'] = $accounts[$e['page-flags']];
 939                 $e['register_date'] = relative_date($e['register_date']);
 940                 $e['login_date'] = relative_date($e['login_date']);
 941                 $e['lastitem_date'] = relative_date($e['lastitem_date']);
 942                 //$e['is_admin'] = ($e['email'] === $a->config['admin_email']);
 943                 $e['is_admin'] = in_array($e['email'], $adminlist);
 944                 $e['deleted'] = ($e['account_removed']?relative_date($e['account_expires_on']):False);
 945                 return $e;
 946         }
 947         $users = array_map("_setup_users", $users);
 948
 949
 950         // Get rid of dashes in key names, Smarty3 can't handle them
 951         // and extracting deleted users
 952
 953         $tmp_users = Array();
 954         $deleted = Array();
 955
 956         while(count($users)) {
 957                 $new_user = Array();
 958                 foreach( array_pop($users) as $k => $v) {
 959                         $k = str_replace('-','_',$k);
 960                         $new_user[$k] = $v;
 961                 }
 962                 if($new_user['deleted']) {
 963                         array_push($deleted, $new_user);
 964                 }
 965                 else {
 966                         array_push($tmp_users, $new_user);
 967                 }
 968         }
 969         //Reversing the two array, and moving $tmp_users to $users
 970         array_reverse($deleted);
 971         while(count($tmp_users)) {
 972                 array_push($users, array_pop($tmp_users));
 973         }
 974
 975         $t = get_markup_template("admin_users.tpl");
 976         $o = replace_macros($t, array(
 977                 // strings //
 978                 '$title' => t('Administration'),
 979                 '$page' => t('Users'),
 980                 '$submit' => t('Add User'),
 981                 '$select_all' => t('select all'),
 982                 '$h_pending' => t('User registrations waiting for confirm'),
 983                 '$h_deleted' => t('User waiting for permanent deletion'),
 984                 '$th_pending' => array( t('Request date'), t('Name'), t('Email') ),
 985                 '$no_pending' =>  t('No registrations.'),
 986                 '$approve' => t('Approve'),
 987                 '$deny' => t('Deny'),
 988                 '$delete' => t('Delete'),
 989                 '$block' => t('Block'),
 990                 '$unblock' => t('Unblock'),
 991                 '$siteadmin' => t('Site admin'),
 992                 '$accountexpired' => t('Account expired'),
 993
 994                 '$h_users' => t('Users'),
 995                 '$h_newuser' => t('New User'),
 996                 '$th_deleted' => array( t('Name'), t('Email'), t('Register date'), t('Last login'), t('Last item'), t('Deleted since') ),
 997                 '$th_users' => array( t('Name'), t('Email'), t('Register date'), t('Last login'), t('Last item'),  t('Account') ),
 998
 999                 '$confirm_delete_multi' => t('Selected users will be deleted!\n\nEverything these users had posted on this site will be permanently deleted!\n\nAre you sure?'),
1000                 '$confirm_delete' => t('The user {0} will be deleted!\n\nEverything this user has posted on this site will be permanently deleted!\n\nAre you sure?'),
1001
1002                 '$form_security_token' => get_form_security_token("admin_users"),
1003
1004                 // values //
1005                 '$baseurl' => $a->get_baseurl(true),
1006
1007                 '$pending' => $pending,
1008                 'deleted' => $deleted,
1009                 '$users' => $users,
1010                 '$newusername'  => array('new_user_name', t("Name"), '', t("Name of the new user.")),
1011                 '$newusernickname'  => array('new_user_nickname', t("Nickname"), '', t("Nickname of the new user.")),
1012                 '$newuseremail'  => array('new_user_email', t("Email"), '', t("Email address of the new user."), '', '', 'email'),
1013         ));
1014         $o .= paginate($a);
1015         return $o;
1016 }
1017
1018
1019 /**
1020  * Plugins admin page
1021  *
1022  * @param App $a
1023  * @return string
1024  */
1025 function admin_page_plugins(&$a){
1026
1027         /**
1028          * Single plugin
1029          */
1030         if ($a->argc == 3){
1031                 $plugin = $a->argv[2];
1032                 if (!is_file("addon/$plugin/$plugin.php")){
1033                         notice( t("Item not found.") );
1034                         return '';
1035                 }
1036
1037                 if (x($_GET,"a") && $_GET['a']=="t"){
1038                         check_form_security_token_redirectOnErr('/admin/plugins', 'admin_themes', 't');
1039
1040                         // Toggle plugin status
1041                         $idx = array_search($plugin, $a->plugins);
1042                         if ($idx !== false){
1043                                 unset($a->plugins[$idx]);
1044                                 uninstall_plugin($plugin);
1045                                 info( sprintf( t("Plugin %s disabled."), $plugin ) );
1046                         } else {
1047                                 $a->plugins[] = $plugin;
1048                                 install_plugin($plugin);
1049                                 info( sprintf( t("Plugin %s enabled."), $plugin ) );
1050                         }
1051                         set_config("system","addon", implode(", ",$a->plugins));
1052                         goaway($a->get_baseurl(true) . '/admin/plugins' );
1053                         return ''; // NOTREACHED
1054                 }
1055                 // display plugin details
1056                 require_once('library/markdown.php');
1057
1058                 if (in_array($plugin, $a->plugins)){
1059                         $status="on"; $action= t("Disable");
1060                 } else {
1061                         $status="off"; $action= t("Enable");
1062                 }
1063
1064                 $readme=Null;
1065                 if (is_file("addon/$plugin/README.md")){
1066                         $readme = file_get_contents("addon/$plugin/README.md");
1067                         $readme = Markdown($readme);
1068                 } else if (is_file("addon/$plugin/README")){
1069                         $readme = "<pre>". file_get_contents("addon/$plugin/README") ."</pre>";
1070                 }
1071
1072                 $admin_form="";
1073                 if (is_array($a->plugins_admin) && in_array($plugin, $a->plugins_admin)){
1074                         @require_once("addon/$plugin/$plugin.php");
1075                         $func = $plugin.'_plugin_admin';
1076                         $func($a, $admin_form);
1077                 }
1078
1079                 $t = get_markup_template("admin_plugins_details.tpl");
1080
1081                 return replace_macros($t, array(
1082                         '$title' => t('Administration'),
1083                         '$page' => t('Plugins'),
1084                         '$toggle' => t('Toggle'),
1085                         '$settings' => t('Settings'),
1086                         '$baseurl' => $a->get_baseurl(true),
1087
1088                         '$plugin' => $plugin,
1089                         '$status' => $status,
1090                         '$action' => $action,
1091                         '$info' => get_plugin_info($plugin),
1092                         '$str_author' => t('Author: '),
1093                         '$str_maintainer' => t('Maintainer: '),
1094
1095                         '$admin_form' => $admin_form,
1096                         '$function' => 'plugins',
1097                         '$screenshot' => '',
1098                         '$readme' => $readme,
1099
1100                         '$form_security_token' => get_form_security_token("admin_themes"),
1101                 ));
1102         }
1103
1104
1105
1106         /**
1107          * List plugins
1108          */
1109
1110         $plugins = array();
1111         $files = glob("addon/*/"); /* */
1112         if($files) {
1113                 foreach($files as $file) {
1114                         if (is_dir($file)){
1115                                 list($tmp, $id)=array_map("trim", explode("/",$file));
1116                                 $info = get_plugin_info($id);
1117                                 $show_plugin = true;
1118
1119                                 // If the addon is unsupported, then only show it, when it is enabled
1120                                 if ((strtolower($info["status"]) == "unsupported") AND !in_array($id,  $a->plugins))
1121                                         $show_plugin = false;
1122
1123                                 // Override the above szenario, when the admin really wants to see outdated stuff
1124                                 if (get_config("system", "show_unsupported_addons"))
1125                                         $show_plugin = true;
1126
1127                                 if ($show_plugin)
1128                                         $plugins[] = array($id, (in_array($id,  $a->plugins)?"on":"off") , $info);
1129                         }
1130                 }
1131         }
1132
1133         $t = get_markup_template("admin_plugins.tpl");
1134         return replace_macros($t, array(
1135                 '$title' => t('Administration'),
1136                 '$page' => t('Plugins'),
1137                 '$submit' => t('Save Settings'),
1138                 '$baseurl' => $a->get_baseurl(true),
1139                 '$function' => 'plugins',
1140                 '$plugins' => $plugins,
1141                 '$form_security_token' => get_form_security_token("admin_themes"),
1142         ));
1143 }
1144
1145 /**
1146  * @param array $themes
1147  * @param string $th
1148  * @param int $result
1149  */
1150 function toggle_theme(&$themes,$th,&$result) {
1151         for($x = 0; $x < count($themes); $x ++) {
1152                 if($themes[$x]['name'] === $th) {
1153                         if($themes[$x]['allowed']) {
1154                                 $themes[$x]['allowed'] = 0;
1155                                 $result = 0;
1156                         }
1157                         else {
1158                                 $themes[$x]['allowed'] = 1;
1159                                 $result = 1;
1160                         }
1161                 }
1162         }
1163 }
1164
1165 /**
1166  * @param array $themes
1167  * @param string $th
1168  * @return int
1169  */
1170 function theme_status($themes,$th) {
1171         for($x = 0; $x < count($themes); $x ++) {
1172                 if($themes[$x]['name'] === $th) {
1173                         if($themes[$x]['allowed']) {
1174                                 return 1;
1175                         }
1176                         else {
1177                                 return 0;
1178                         }
1179                 }
1180         }
1181         return 0;
1182 }
1183
1184
1185 /**
1186  * @param array $themes
1187  * @return string
1188  */
1189 function rebuild_theme_table($themes) {
1190         $o = '';
1191         if(count($themes)) {
1192                 foreach($themes as $th) {
1193                         if($th['allowed']) {
1194                                 if(strlen($o))
1195                                         $o .= ',';
1196                                 $o .= $th['name'];
1197                         }
1198                 }
1199         }
1200         return $o;
1201 }
1202
1203
1204 /**
1205  * Themes admin page
1206  *
1207  * @param App $a
1208  * @return string
1209  */
1210 function admin_page_themes(&$a){
1211
1212         $allowed_themes_str = get_config('system','allowed_themes');
1213         $allowed_themes_raw = explode(',',$allowed_themes_str);
1214         $allowed_themes = array();
1215         if(count($allowed_themes_raw))
1216                 foreach($allowed_themes_raw as $x)
1217                         if(strlen(trim($x)))
1218                                 $allowed_themes[] = trim($x);
1219
1220         $themes = array();
1221         $files = glob('view/theme/*'); /* */
1222         if($files) {
1223                 foreach($files as $file) {
1224                         $f = basename($file);
1225                         $is_experimental = intval(file_exists($file . '/experimental'));
1226                         $is_supported = 1-(intval(file_exists($file . '/unsupported')));
1227                         $is_allowed = intval(in_array($f,$allowed_themes));
1228
1229                         if ($is_allowed OR $is_supported OR get_config("system", "show_unsupported_themes"))
1230                                 $themes[] = array('name' => $f, 'experimental' => $is_experimental, 'supported' => $is_supported, 'allowed' => $is_allowed);
1231                 }
1232         }
1233
1234         if(! count($themes)) {
1235                 notice( t('No themes found.'));
1236                 return '';
1237         }
1238
1239         /**
1240          * Single theme
1241          */
1242
1243         if ($a->argc == 3){
1244                 $theme = $a->argv[2];
1245                 if(! is_dir("view/theme/$theme")){
1246                         notice( t("Item not found.") );
1247                         return '';
1248                 }
1249
1250                 if (x($_GET,"a") && $_GET['a']=="t"){
1251                         check_form_security_token_redirectOnErr('/admin/themes', 'admin_themes', 't');
1252
1253                         // Toggle theme status
1254
1255                         toggle_theme($themes,$theme,$result);
1256                         $s = rebuild_theme_table($themes);
1257                         if($result) {
1258                                 install_theme($theme);
1259                                 info( sprintf('Theme %s enabled.',$theme));
1260                         }
1261                         else {
1262                                 uninstall_theme($theme);
1263                                 info( sprintf('Theme %s disabled.',$theme));
1264                         }
1265
1266                         set_config('system','allowed_themes',$s);
1267                         goaway($a->get_baseurl(true) . '/admin/themes' );
1268                         return ''; // NOTREACHED
1269                 }
1270
1271                 // display theme details
1272                 require_once('library/markdown.php');
1273
1274                 if (theme_status($themes,$theme)) {
1275                         $status="on"; $action= t("Disable");
1276                 } else {
1277                         $status="off"; $action= t("Enable");
1278                 }
1279
1280                 $readme=Null;
1281                 if (is_file("view/theme/$theme/README.md")){
1282                         $readme = file_get_contents("view/theme/$theme/README.md");
1283                         $readme = Markdown($readme);
1284                 } else if (is_file("view/theme/$theme/README")){
1285                         $readme = "<pre>". file_get_contents("view/theme/$theme/README") ."</pre>";
1286                 }
1287
1288                 $admin_form="";
1289                 if (is_file("view/theme/$theme/config.php")){
1290                         require_once("view/theme/$theme/config.php");
1291                         if(function_exists("theme_admin")){
1292                                 $admin_form = theme_admin($a);
1293                         }
1294
1295                 }
1296
1297                 $screenshot = array( get_theme_screenshot($theme), t('Screenshot'));
1298                 if(! stristr($screenshot[0],$theme))
1299                         $screenshot = null;
1300
1301                 $t = get_markup_template("admin_plugins_details.tpl");
1302                 return replace_macros($t, array(
1303                         '$title' => t('Administration'),
1304                         '$page' => t('Themes'),
1305                         '$toggle' => t('Toggle'),
1306                         '$settings' => t('Settings'),
1307                         '$baseurl' => $a->get_baseurl(true),
1308
1309                         '$plugin' => $theme,
1310                         '$status' => $status,
1311                         '$action' => $action,
1312                         '$info' => get_theme_info($theme),
1313                         '$function' => 'themes',
1314                         '$admin_form' => $admin_form,
1315                         '$str_author' => t('Author: '),
1316                         '$str_maintainer' => t('Maintainer: '),
1317                         '$screenshot' => $screenshot,
1318                         '$readme' => $readme,
1319
1320                         '$form_security_token' => get_form_security_token("admin_themes"),
1321                 ));
1322         }
1323
1324         /**
1325          * List themes
1326          */
1327
1328         $xthemes = array();
1329         if($themes) {
1330                 foreach($themes as $th) {
1331                         $xthemes[] = array($th['name'],(($th['allowed']) ? "on" : "off"), get_theme_info($th['name']));
1332                 }
1333         }
1334
1335         $t = get_markup_template("admin_plugins.tpl");
1336         return replace_macros($t, array(
1337                 '$title' => t('Administration'),
1338                 '$page' => t('Themes'),
1339                 '$submit' => t('Save Settings'),
1340                 '$baseurl' => $a->get_baseurl(true),
1341                 '$function' => 'themes',
1342                 '$plugins' => $xthemes,
1343                 '$experimental' => t('[Experimental]'),
1344                 '$unsupported' => t('[Unsupported]'),
1345                 '$form_security_token' => get_form_security_token("admin_themes"),
1346         ));
1347 }
1348
1349
1350 /**
1351  * Logs admin page
1352  *
1353  * @param App $a
1354  */
1355
1356 function admin_page_logs_post(&$a) {
1357         if (x($_POST,"page_logs")) {
1358                 check_form_security_token_redirectOnErr('/admin/logs', 'admin_logs');
1359
1360                 $logfile                =       ((x($_POST,'logfile'))          ? notags(trim($_POST['logfile']))       : '');
1361                 $debugging              =       ((x($_POST,'debugging'))        ? true                                                          : false);
1362                 $loglevel               =       ((x($_POST,'loglevel'))         ? intval(trim($_POST['loglevel']))      : 0);
1363
1364                 set_config('system','logfile', $logfile);
1365                 set_config('system','debugging',  $debugging);
1366                 set_config('system','loglevel', $loglevel);
1367
1368
1369         }
1370
1371         info( t("Log settings updated.") );
1372         goaway($a->get_baseurl(true) . '/admin/logs' );
1373         return; // NOTREACHED
1374 }
1375
1376 /**
1377  * @param App $a
1378  * @return string
1379  */
1380 function admin_page_logs(&$a){
1381
1382         $log_choices = Array(
1383                 LOGGER_NORMAL => 'Normal',
1384                 LOGGER_TRACE => 'Trace',
1385                 LOGGER_DEBUG => 'Debug',
1386                 LOGGER_DATA => 'Data',
1387                 LOGGER_ALL => 'All'
1388         );
1389
1390         $t = get_markup_template("admin_logs.tpl");
1391
1392         $f = get_config('system','logfile');
1393
1394         $data = '';
1395
1396         if(!file_exists($f)) {
1397                 $data = t("Error trying to open <strong>$f</strong> log file.\r\n<br/>Check to see if file $f exist and is
1398 readable.");
1399         }
1400         else {
1401                 $fp = fopen($f, 'r');
1402                 if(!$fp) {
1403                         $data = t("Couldn't open <strong>$f</strong> log file.\r\n<br/>Check to see if file $f is readable.");
1404                 }
1405                 else {
1406                         $fstat = fstat($fp);
1407                         $size = $fstat['size'];
1408                         if($size != 0)
1409                         {
1410                                 if($size > 5000000 || $size < 0)
1411                                         $size = 5000000;
1412                                 $seek = fseek($fp,0-$size,SEEK_END);
1413                                 if($seek === 0) {
1414                                         $data = escape_tags(fread($fp,$size));
1415                                         while(! feof($fp))
1416                                                 $data .= escape_tags(fread($fp,4096));
1417                                 }
1418                         }
1419                         fclose($fp);
1420                 }
1421         }
1422
1423         return replace_macros($t, array(
1424                 '$title' => t('Administration'),
1425                 '$page' => t('Logs'),
1426                 '$submit' => t('Save Settings'),
1427                 '$clear' => t('Clear'),
1428                 '$data' => $data,
1429                 '$baseurl' => $a->get_baseurl(true),
1430                 '$logname' =>  get_config('system','logfile'),
1431
1432                                                                         // name, label, value, help string, extra data...
1433                 '$debugging'            => array('debugging', t("Enable Debugging"),get_config('system','debugging'), ""),
1434                 '$logfile'                      => array('logfile', t("Log file"), get_config('system','logfile'), t("Must be writable by web server. Relative to your Friendica top-level directory.")),
1435                 '$loglevel'             => array('loglevel', t("Log level"), get_config('system','loglevel'), "", $log_choices),
1436
1437                 '$form_security_token' => get_form_security_token("admin_logs"),
1438         ));
1439 }
1440
1441 /**
1442  * @param App $a
1443  */
1444 function admin_page_remoteupdate_post(&$a) {
1445         // this function should be called via ajax post
1446         if(!is_site_admin()) {
1447                 return;
1448         }
1449
1450
1451         if (x($_POST,'remotefile') && $_POST['remotefile']!=""){
1452                 $remotefile = $_POST['remotefile'];
1453                 $ftpdata = (x($_POST['ftphost'])?$_POST:false);
1454                 doUpdate($remotefile, $ftpdata);
1455         } else {
1456                 echo "No remote file to download. Abort!";
1457         }
1458
1459         killme();
1460 }
1461
1462 /**
1463  * @param App $a
1464  * @return string
1465  */
1466 function admin_page_remoteupdate(&$a) {
1467         if(!is_site_admin()) {
1468                 return login(false);
1469         }
1470
1471         $canwrite = canWeWrite();
1472         $canftp = function_exists('ftp_connect');
1473
1474         $needupdate = true;
1475         $u = checkUpdate();
1476         if (!is_array($u)){
1477                 $needupdate = false;
1478                 $u = array('','','');
1479         }
1480
1481         $tpl = get_markup_template("admin_remoteupdate.tpl");
1482         return replace_macros($tpl, array(
1483                 '$baseurl' => $a->get_baseurl(true),
1484                 '$submit' => t("Update now"),
1485                 '$close' => t("Close"),
1486                 '$localversion' => FRIENDICA_VERSION,
1487                 '$remoteversion' => $u[1],
1488                 '$needupdate' => $needupdate,
1489                 '$canwrite' => $canwrite,
1490                 '$canftp'       => $canftp,
1491                 '$ftphost'      => array('ftphost', t("FTP Host"), '',''),
1492                 '$ftppath'      => array('ftppath', t("FTP Path"), '/',''),
1493                 '$ftpuser'      => array('ftpuser', t("FTP User"), '',''),
1494                 '$ftppwd'       => array('ftppwd', t("FTP Password"), '',''),
1495                 '$remotefile'=>array('remotefile','', $u['2'],''),
1496         ));
1497
1498 }