mod/admin.php

   1 <?php
   2
   3  /**
   4   * Friendica admin
   5   */
   6 require_once("include/remoteupdate.php");
   7
   8
   9 /**
  10  * @param App $a
  11  */
  12 function admin_post(&$a){
  13
  14
  15         if(!is_site_admin()) {
  16                 return;
  17         }
  18
  19         // do not allow a page manager to access the admin panel at all.
  20
  21         if(x($_SESSION,'submanage') && intval($_SESSION['submanage']))
  22                 return;
  23
  24
  25
  26         // urls
  27         if ($a->argc > 1){
  28                 switch ($a->argv[1]){
  29                         case 'site':
  30                                 admin_page_site_post($a);
  31                                 break;
  32                         case 'users':
  33                                 admin_page_users_post($a);
  34                                 break;
  35                         case 'plugins':
  36                                 if ($a->argc > 2 &&
  37                                         is_file("addon/".$a->argv[2]."/".$a->argv[2].".php")){
  38                                                 @include_once("addon/".$a->argv[2]."/".$a->argv[2].".php");
  39                                                 if(function_exists($a->argv[2].'_plugin_admin_post')) {
  40                                                         $func = $a->argv[2].'_plugin_admin_post';
  41                                                         $func($a);
  42                                                 }
  43                                 }
  44                                 goaway($a->get_baseurl(true) . '/admin/plugins/' . $a->argv[2] );
  45                                 return; // NOTREACHED
  46                                 break;
  47                         case 'themes':
  48                                 $theme = $a->argv[2];
  49                                 if (is_file("view/theme/$theme/config.php")){
  50                                         require_once("view/theme/$theme/config.php");
  51                                         if (function_exists("theme_admin_post")){
  52                                                 theme_admin_post($a);
  53                                         }
  54                                 }
  55                                 info(t('Theme settings updated.'));
  56                                 if(is_ajax()) return;
  57
  58                                 goaway($a->get_baseurl(true) . '/admin/themes/' . $theme );
  59                                 return;
  60                                 break;
  61                         case 'logs':
  62                                 admin_page_logs_post($a);
  63                                 break;
  64                         case 'dbsync':
  65                                 admin_page_dbsync_post($a);
  66                                 break;
  67                         case 'update':
  68                                 admin_page_remoteupdate_post($a);
  69                                 break;
  70                 }
  71         }
  72
  73         goaway($a->get_baseurl(true) . '/admin' );
  74         return; // NOTREACHED
  75 }
  76
  77 /**
  78  * @param App $a
  79  * @return string
  80  */
  81 function admin_content(&$a) {
  82
  83         if(!is_site_admin()) {
  84                 return login(false);
  85         }
  86
  87         if(x($_SESSION,'submanage') && intval($_SESSION['submanage']))
  88                 return "";
  89
  90         /**
  91          * Side bar links
  92          */
  93
  94         // array( url, name, extra css classes )
  95         $aside = Array(
  96                 'site'   =>     Array($a->get_baseurl(true)."/admin/site/", t("Site") , "site"),
  97                 'users'  =>     Array($a->get_baseurl(true)."/admin/users/", t("Users") , "users"),
  98                 'plugins'=>     Array($a->get_baseurl(true)."/admin/plugins/", t("Plugins") , "plugins"),
  99                 'themes' =>     Array($a->get_baseurl(true)."/admin/themes/", t("Themes") , "themes"),
 100                 'dbsync' => Array($a->get_baseurl(true)."/admin/dbsync/", t('DB updates'), "dbsync"),
 101                 //'update' =>   Array($a->get_baseurl(true)."/admin/update/", t("Software Update") , "update")
 102         );
 103
 104         /* get plugins admin page */
 105
 106         $r = q("SELECT * FROM `addon` WHERE `plugin_admin`=1");
 107         $aside['plugins_admin']=Array();
 108         foreach ($r as $h){
 109                 $plugin =$h['name'];
 110                 $aside['plugins_admin'][] = Array($a->get_baseurl(true)."/admin/plugins/".$plugin, $plugin, "plugin");
 111                 // temp plugins with admin
 112                 $a->plugins_admin[] = $plugin;
 113         }
 114
 115         $aside['logs'] = Array($a->get_baseurl(true)."/admin/logs/", t("Logs"), "logs");
 116
 117         $t = get_markup_template("admin_aside.tpl");
 118         $a->page['aside'] .= replace_macros( $t, array(
 119                         '$admin' => $aside,
 120                         '$admtxt' => t('Admin'),
 121                         '$plugadmtxt' => t('Plugin Features'),
 122                         '$logtxt' => t('Logs'),
 123                         '$h_pending' => t('User registrations waiting for confirmation'),
 124                         '$admurl'=> $a->get_baseurl(true)."/admin/"
 125         ));
 126
 127
 128
 129         /**
 130          * Page content
 131          */
 132         $o = '';
 133
 134         // urls
 135         if ($a->argc > 1){
 136                 switch ($a->argv[1]){
 137                         case 'site':
 138                                 $o = admin_page_site($a);
 139                                 break;
 140                         case 'users':
 141                                 $o = admin_page_users($a);
 142                                 break;
 143                         case 'plugins':
 144                                 $o = admin_page_plugins($a);
 145                                 break;
 146                         case 'themes':
 147                                 $o = admin_page_themes($a);
 148                                 break;
 149                         case 'logs':
 150                                 $o = admin_page_logs($a);
 151                                 break;
 152                         case 'dbsync':
 153                                 $o = admin_page_dbsync($a);
 154                                 break;
 155                         case 'update':
 156                                 $o = admin_page_remoteupdate($a);
 157                                 break;
 158                         default:
 159                                 notice( t("Item not found.") );
 160                 }
 161         } else {
 162                 $o = admin_page_summary($a);
 163         }
 164
 165         if(is_ajax()) {
 166                 echo $o;
 167                 killme();
 168                 return '';
 169         } else {
 170                 return $o;
 171         }
 172 }
 173
 174
 175 /**
 176  * Admin Summary Page
 177  * @param App $a
 178  * @return string
 179  */
 180 function admin_page_summary(&$a) {
 181         $r = q("SELECT `page-flags`, COUNT(uid) as `count` FROM `user` GROUP BY `page-flags`");
 182         $accounts = Array(
 183                 Array( t('Normal Account'), 0),
 184                 Array( t('Soapbox Account'), 0),
 185                 Array( t('Community/Celebrity Account'), 0),
 186                 Array( t('Automatic Friend Account'), 0),
 187                 Array( t('Blog Account'), 0),
 188                 Array( t('Private Forum'), 0)
 189         );
 190
 191         $users=0;
 192         foreach ($r as $u){ $accounts[$u['page-flags']][1] = $u['count']; $users+= $u['count']; }
 193
 194         logger('accounts: ' . print_r($accounts,true),LOGGER_DATA);
 195
 196         $r = q("SELECT COUNT(id) as `count` FROM `register`");
 197         $pending = $r[0]['count'];
 198
 199         $r = q("select count(*) as total from deliverq where 1");
 200         $deliverq = (($r) ? $r[0]['total'] : 0);
 201
 202         $r = q("select count(*) as total from queue where 1");
 203         $queue = (($r) ? $r[0]['total'] : 0);
 204
 205         // We can do better, but this is a quick queue status
 206
 207         $queues = array( 'label' => t('Message queues'), 'deliverq' => $deliverq, 'queue' => $queue );
 208
 209
 210         $t = get_markup_template("admin_summary.tpl");
 211         return replace_macros($t, array(
 212                 '$title' => t('Administration'),
 213                 '$page' => t('Summary'),
 214                 '$queues' => $queues,
 215                 '$users' => Array( t('Registered users'), $users),
 216                 '$accounts' => $accounts,
 217                 '$pending' => Array( t('Pending registrations'), $pending),
 218                 '$version' => Array( t('Version'), FRIENDICA_VERSION),
 219                 '$build' =>  get_config('system','build'),
 220                 '$plugins' => Array( t('Active plugins'), $a->plugins )
 221         ));
 222 }
 223
 224
 225 /**
 226  * Admin Site Page
 227  *  @param App $a
 228  */
 229 function admin_page_site_post(&$a){
 230         if (!x($_POST,"page_site")){
 231                 return;
 232         }
 233
 234     check_form_security_token_redirectOnErr('/admin/site', 'admin_site');
 235
 236         $sitename                       =       ((x($_POST,'sitename'))                 ? notags(trim($_POST['sitename']))                      : '');
 237         $banner                         =       ((x($_POST,'banner'))                   ? trim($_POST['banner'])                                        : false);
 238         $language                       =       ((x($_POST,'language'))                 ? notags(trim($_POST['language']))                      : '');
 239         $theme                          =       ((x($_POST,'theme'))                    ? notags(trim($_POST['theme']))                         : '');
 240         $maximagesize           =       ((x($_POST,'maximagesize'))             ? intval(trim($_POST['maximagesize']))          :  0);
 241
 242
 243         $register_policy        =       ((x($_POST,'register_policy'))  ? intval(trim($_POST['register_policy']))       :  0);
 244         $abandon_days       =   ((x($_POST,'abandon_days'))         ? intval(trim($_POST['abandon_days']))          :  0);
 245
 246         $register_text          =       ((x($_POST,'register_text'))    ? notags(trim($_POST['register_text']))         : '');
 247
 248         $allowed_sites          =       ((x($_POST,'allowed_sites'))    ? notags(trim($_POST['allowed_sites']))         : '');
 249         $allowed_email          =       ((x($_POST,'allowed_email'))    ? notags(trim($_POST['allowed_email']))         : '');
 250         $block_public           =       ((x($_POST,'block_public'))             ? True  :       False);
 251         $force_publish          =       ((x($_POST,'publish_all'))              ? True  :       False);
 252         $global_directory       =       ((x($_POST,'directory_submit_url'))     ? notags(trim($_POST['directory_submit_url']))  : '');
 253         $no_multi_reg           =       ((x($_POST,'no_multi_reg'))             ? True  :       False);
 254         $no_openid                      =       !((x($_POST,'no_openid'))               ? True  :       False);
 255         $no_regfullname         =       !((x($_POST,'no_regfullname'))  ? True  :       False);
 256         $no_utf                         =       !((x($_POST,'no_utf'))                  ? True  :       False);
 257         $no_community_page      =       !((x($_POST,'no_community_page'))       ? True  :       False);
 258
 259         $verifyssl                      =       ((x($_POST,'verifyssl'))                ? True  :       False);
 260         $proxyuser                      =       ((x($_POST,'proxyuser'))                ? notags(trim($_POST['proxyuser']))     : '');
 261         $proxy                          =       ((x($_POST,'proxy'))                    ? notags(trim($_POST['proxy'])) : '');
 262         $timeout                        =       ((x($_POST,'timeout'))                  ? intval(trim($_POST['timeout']))               : 60);
 263         $delivery_interval      =       ((x($_POST,'delivery_interval'))? intval(trim($_POST['delivery_interval']))             : 0);
 264         $poll_interval  =       ((x($_POST,'poll_interval'))? intval(trim($_POST['poll_interval']))             : 0);
 265         $maxloadavg             =       ((x($_POST,'maxloadavg'))       ? intval(trim($_POST['maxloadavg']))            : 50);
 266         $dfrn_only          =   ((x($_POST,'dfrn_only'))            ? True      :       False);
 267         $ostatus_disabled   =   !((x($_POST,'ostatus_disabled')) ? True  :   False);
 268         $diaspora_enabled   =   ((x($_POST,'diaspora_enabled')) ? True   :  False);
 269         $ssl_policy         =   ((x($_POST,'ssl_policy')) ? intval($_POST['ssl_policy']) : 0);
 270
 271         if($ssl_policy != intval(get_config('system','ssl_policy'))) {
 272                 if($ssl_policy == SSL_POLICY_FULL) {
 273                         q("update `contact` set
 274                                 `url`     = replace(`url`    , 'http:' , 'https:'),
 275                                 `photo`   = replace(`photo`  , 'http:' , 'https:'),
 276                                 `thumb`   = replace(`thumb`  , 'http:' , 'https:'),
 277                                 `micro`   = replace(`micro`  , 'http:' , 'https:'),
 278                                 `request` = replace(`request`, 'http:' , 'https:'),
 279                                 `notify`  = replace(`notify` , 'http:' , 'https:'),
 280                                 `poll`    = replace(`poll`   , 'http:' , 'https:'),
 281                                 `confirm` = replace(`confirm`, 'http:' , 'https:'),
 282                                 `poco`    = replace(`poco`   , 'http:' , 'https:')
 283                                 where `self` = 1"
 284                         );
 285                         q("update `profile` set
 286                                 `photo`   = replace(`photo`  , 'http:' , 'https:'),
 287                                 `thumb`   = replace(`thumb`  , 'http:' , 'https:')
 288                                 where 1 "
 289                         );
 290                 }
 291                 elseif($ssl_policy == SSL_POLICY_SELFSIGN) {
 292                         q("update `contact` set
 293                                 `url`     = replace(`url`    , 'https:' , 'http:'),
 294                                 `photo`   = replace(`photo`  , 'https:' , 'http:'),
 295                                 `thumb`   = replace(`thumb`  , 'https:' , 'http:'),
 296                                 `micro`   = replace(`micro`  , 'https:' , 'http:'),
 297                                 `request` = replace(`request`, 'https:' , 'http:'),
 298                                 `notify`  = replace(`notify` , 'https:' , 'http:'),
 299                                 `poll`    = replace(`poll`   , 'https:' , 'http:'),
 300                                 `confirm` = replace(`confirm`, 'https:' , 'http:'),
 301                                 `poco`    = replace(`poco`   , 'https:' , 'http:')
 302                                 where `self` = 1"
 303                         );
 304                         q("update `profile` set
 305                                 `photo`   = replace(`photo`  , 'https:' , 'http:'),
 306                                 `thumb`   = replace(`thumb`  , 'https:' , 'http:')
 307                                 where 1 "
 308                         );
 309                 }
 310         }
 311         set_config('system','ssl_policy',$ssl_policy);
 312         set_config('system','delivery_interval',$delivery_interval);
 313         set_config('system','poll_interval',$poll_interval);
 314         set_config('system','maxloadavg',$maxloadavg);
 315         set_config('config','sitename',$sitename);
 316         if ($banner==""){
 317                 // don't know why, but del_config doesn't work...
 318                 q("DELETE FROM `config` WHERE `cat` = '%s' AND `k` = '%s' LIMIT 1",
 319                         dbesc("system"),
 320                         dbesc("banner")
 321                 );
 322         } else {
 323                 set_config('system','banner', $banner);
 324         }
 325         set_config('system','language', $language);
 326         set_config('system','theme', $theme);
 327         set_config('system','maximagesize', $maximagesize);
 328
 329         set_config('config','register_policy', $register_policy);
 330         set_config('system','account_abandon_days', $abandon_days);
 331         set_config('config','register_text', $register_text);
 332         set_config('system','allowed_sites', $allowed_sites);
 333         set_config('system','allowed_email', $allowed_email);
 334         set_config('system','block_public', $block_public);
 335         set_config('system','publish_all', $force_publish);
 336         if ($global_directory==""){
 337                 // don't know why, but del_config doesn't work...
 338                 q("DELETE FROM `config` WHERE `cat` = '%s' AND `k` = '%s' LIMIT 1",
 339                         dbesc("system"),
 340                         dbesc("directory_submit_url")
 341                 );
 342         } else {
 343                 set_config('system','directory_submit_url', $global_directory);
 344         }
 345
 346         set_config('system','block_extended_register', $no_multi_reg);
 347         set_config('system','no_openid', $no_openid);
 348         set_config('system','no_regfullname', $no_regfullname);
 349         set_config('system','no_community_page', $no_community_page);
 350         set_config('system','no_utf', $no_utf);
 351         set_config('system','verifyssl', $verifyssl);
 352         set_config('system','proxyuser', $proxyuser);
 353         set_config('system','proxy', $proxy);
 354         set_config('system','curl_timeout', $timeout);
 355         set_config('system','dfrn_only', $dfrn_only);
 356         set_config('system','ostatus_disabled', $ostatus_disabled);
 357         set_config('system','diaspora_enabled', $diaspora_enabled);
 358
 359         info( t('Site settings updated.') . EOL);
 360         goaway($a->get_baseurl(true) . '/admin/site' );
 361         return; // NOTREACHED
 362
 363 }
 364
 365 /**
 366  * @param  App $a
 367  * @return string
 368  */
 369 function admin_page_site(&$a) {
 370
 371         /* Installed langs */
 372         $lang_choices = array();
 373         $langs = glob('view/*/strings.php');
 374
 375         if(is_array($langs) && count($langs)) {
 376                 if(! in_array('view/en/strings.php',$langs))
 377                         $langs[] = 'view/en/';
 378                 asort($langs);
 379                 foreach($langs as $l) {
 380                         $t = explode("/",$l);
 381                         $lang_choices[$t[1]] = $t[1];
 382                 }
 383         }
 384
 385         /* Installed themes */
 386         $theme_choices = array();
 387         $files = glob('view/theme/*');
 388         if($files) {
 389                 foreach($files as $file) {
 390                         $f = basename($file);
 391                         $theme_name = ((file_exists($file . '/experimental')) ?  sprintf("%s - \x28Experimental\x29", $f) : $f);
 392                         $theme_choices[$f] = $theme_name;
 393                 }
 394         }
 395
 396
 397         /* Banner */
 398         $banner = get_config('system','banner');
 399         if($banner == false)
 400                 $banner = '<a href="http://friendica.com"><img id="logo-img" src="images/friendica-32.png" alt="logo" /></a><span id="logo-text"><a href="http://friendica.com">Friendica</a></span>';
 401         $banner = htmlspecialchars($banner);
 402
 403         //echo "<pre>"; var_dump($lang_choices); die("</pre>");
 404
 405         /* Register policy */
 406         $register_choices = Array(
 407                 REGISTER_CLOSED => t("Closed"),
 408                 REGISTER_APPROVE => t("Requires approval"),
 409                 REGISTER_OPEN => t("Open")
 410         );
 411
 412         $ssl_choices = array(
 413                 SSL_POLICY_NONE => t("No SSL policy, links will track page SSL state"),
 414                 SSL_POLICY_FULL => t("Force all links to use SSL"),
 415                 SSL_POLICY_SELFSIGN => t("Self-signed certificate, use SSL for local links only (discouraged)")
 416         );
 417
 418         $t = get_markup_template("admin_site.tpl");
 419         return replace_macros($t, array(
 420                 '$title' => t('Administration'),
 421                 '$page' => t('Site'),
 422                 '$submit' => t('Submit'),
 423                 '$registration' => t('Registration'),
 424                 '$upload' => t('File upload'),
 425                 '$corporate' => t('Policies'),
 426                 '$advanced' => t('Advanced'),
 427
 428                 '$baseurl' => $a->get_baseurl(true),
 429                                                                         // name, label, value, help string, extra data...
 430                 '$sitename'             => array('sitename', t("Site name"), htmlentities($a->config['sitename'], ENT_QUOTES), ""),
 431                 '$banner'                       => array('banner', t("Banner/Logo"), $banner, ""),
 432                 '$language'             => array('language', t("System language"), get_config('system','language'), "", $lang_choices),
 433                 '$theme'                        => array('theme', t("System theme"), get_config('system','theme'), t("Default system theme - may be over-ridden by user profiles - <a href='#' id='cnftheme'>change theme settings</a>"), $theme_choices),
 434                 '$ssl_policy'       => array('ssl_policy', t("SSL link policy"), (string) intval(get_config('system','ssl_policy')), t("Determines whether generated links should be forced to use SSL"), $ssl_choices),
 435                 '$maximagesize'         => array('maximagesize', t("Maximum image size"), get_config('system','maximagesize'), t("Maximum size in bytes of uploaded images. Default is 0, which means no limits.")),
 436
 437                 '$register_policy'      => array('register_policy', t("Register policy"), $a->config['register_policy'], "", $register_choices),
 438                 '$register_text'        => array('register_text', t("Register text"), htmlentities($a->config['register_text'], ENT_QUOTES, 'UTF-8'), t("Will be displayed prominently on the registration page.")),
 439                 '$abandon_days'     => array('abandon_days', t('Accounts abandoned after x days'), get_config('system','account_abandon_days'), t('Will not waste system resources polling external sites for abandonded accounts. Enter 0 for no time limit.')),
 440                 '$allowed_sites'        => array('allowed_sites', t("Allowed friend domains"), get_config('system','allowed_sites'), t("Comma separated list of domains which are allowed to establish friendships with this site. Wildcards are accepted. Empty to allow any domains")),
 441                 '$allowed_email'        => array('allowed_email', t("Allowed email domains"), get_config('system','allowed_email'), t("Comma separated list of domains which are allowed in email addresses for registrations to this site. Wildcards are accepted. Empty to allow any domains")),
 442                 '$block_public'         => array('block_public', t("Block public"), get_config('system','block_public'), t("Check to block public access to all otherwise public personal pages on this site unless you are currently logged in.")),
 443                 '$force_publish'        => array('publish_all', t("Force publish"), get_config('system','publish_all'), t("Check to force all profiles on this site to be listed in the site directory.")),
 444                 '$global_directory'     => array('directory_submit_url', t("Global directory update URL"), get_config('system','directory_submit_url'), t("URL to update the global directory. If this is not set, the global directory is completely unavailable to the application.")),
 445
 446                 '$no_multi_reg'         => array('no_multi_reg', t("Block multiple registrations"),  get_config('system','block_extended_register'), t("Disallow users to register additional accounts for use as pages.")),
 447                 '$no_openid'            => array('no_openid', t("OpenID support"), !get_config('system','no_openid'), t("OpenID support for registration and logins.")),
 448                 '$no_regfullname'       => array('no_regfullname', t("Fullname check"), !get_config('system','no_regfullname'), t("Force users to register with a space between firstname and lastname in Full name, as an antispam measure")),
 449                 '$no_utf'                       => array('no_utf', t("UTF-8 Regular expressions"), !get_config('system','no_utf'), t("Use PHP UTF8 regular expressions")),
 450                 '$no_community_page' => array('no_community_page', t("Show Community Page"), !get_config('system','no_community_page'), t("Display a Community page showing all recent public postings on this site.")),
 451                 '$ostatus_disabled' => array('ostatus_disabled', t("Enable OStatus support"), !get_config('system','ostatus_disable'), t("Provide built-in OStatus \x28identi.ca, status.net, etc.\x29 compatibility. All communications in OStatus are public, so privacy warnings will be occasionally displayed.")),
 452                 '$diaspora_enabled' => array('diaspora_enabled', t("Enable Diaspora support"), get_config('system','diaspora_enabled'), t("Provide built-in Diaspora network compatibility.")),
 453                 '$dfrn_only'        => array('dfrn_only', t('Only allow Friendica contacts'), get_config('system','dfrn_only'), t("All contacts must use Friendica protocols. All other built-in communication protocols disabled.")),
 454                 '$verifyssl'            => array('verifyssl', t("Verify SSL"), get_config('system','verifyssl'), t("If you wish, you can turn on strict certificate checking. This will mean you cannot connect (at all) to self-signed SSL sites.")),
 455                 '$proxyuser'            => array('proxyuser', t("Proxy user"), get_config('system','proxyuser'), ""),
 456                 '$proxy'                        => array('proxy', t("Proxy URL"), get_config('system','proxy'), ""),
 457                 '$timeout'                      => array('timeout', t("Network timeout"), (x(get_config('system','curl_timeout'))?get_config('system','curl_timeout'):60), t("Value is in seconds. Set to 0 for unlimited (not recommended).")),
 458                 '$delivery_interval'                    => array('delivery_interval', t("Delivery interval"), (x(get_config('system','delivery_interval'))?get_config('system','delivery_interval'):2), t("Delay background delivery processes by this many seconds to reduce system load. Recommend: 4-5 for shared hosts, 2-3 for virtual private servers. 0-1 for large dedicated servers.")),
 459                 '$poll_interval'                        => array('poll_interval', t("Poll interval"), (x(get_config('system','poll_interval'))?get_config('system','poll_interval'):2), t("Delay background polling processes by this many seconds to reduce system load. If 0, use delivery interval.")),
 460                 '$maxloadavg'                   => array('maxloadavg', t("Maximum Load Average"), ((intval(get_config('system','maxloadavg')) > 0)?get_config('system','maxloadavg'):50), t("Maximum system load before delivery and poll processes are deferred - default 50.")),
 461         '$form_security_token' => get_form_security_token("admin_site"),
 462
 463         ));
 464
 465 }
 466
 467
 468 function admin_page_dbsync(&$a) {
 469
 470         $o = '';
 471
 472         if($a->argc > 3 && intval($a->argv[3]) && $a->argv[2] === 'mark') {
 473                 set_config('database', 'update_' . intval($a->argv[3]), 'success');
 474                 info( t('Update has been marked successful') . EOL);
 475                 goaway($a->get_baseurl(true) . '/admin/dbsync');
 476         }
 477
 478         if($a->argc > 2 && intval($a->argv[2])) {
 479                 require_once('update.php');
 480                 $func = 'update_' . intval($a->argv[2]);
 481                 if(function_exists($func)) {
 482                         $retval = $func();
 483                         if($retval === UPDATE_FAILED) {
 484                                 $o .= sprintf( t('Executing %s failed. Check system logs.'), $func);
 485                         }
 486                         elseif($retval === UPDATE_SUCCESS) {
 487                                 $o .= sprintf( t('Update %s was successfully applied.', $func));
 488                                 set_config('database',$func, 'success');
 489                         }
 490                         else
 491                                 $o .= sprintf( t('Update %s did not return a status. Unknown if it succeeded.'), $func);
 492                 }
 493                 else
 494                         $o .= sprintf( t('Update function %s could not be found.'), $func);
 495                 return $o;
 496         }
 497
 498         $failed = array();
 499         $r = q("select * from config where `cat` = 'database' ");
 500         if(count($r)) {
 501                 foreach($r as $rr) {
 502                         $upd = intval(substr($rr['k'],7));
 503                         if($upd < 1139 || $rr['v'] === 'success')
 504                                 continue;
 505                         $failed[] = $upd;
 506                 }
 507         }
 508         if(! count($failed))
 509                 return '<h3>' . t('No failed updates.') . '</h3>';
 510
 511         $o = replace_macros(get_markup_template('failed_updates.tpl'),array(
 512                 '$base' => $a->get_baseurl(true),
 513                 '$banner' => t('Failed Updates'),
 514                 '$desc' => t('This does not include updates prior to 1139, which did not return a status.'),
 515                 '$mark' => t('Mark success (if update was manually applied)'),
 516                 '$apply' => t('Attempt to execute this update step automatically'),
 517                 '$failed' => $failed
 518         ));
 519
 520         return $o;
 521
 522 }
 523
 524 /**
 525  * Users admin page
 526  *
 527  * @param App $a
 528  */
 529 function admin_page_users_post(&$a){
 530         $pending = ( x($_POST, 'pending') ? $_POST['pending'] : Array() );
 531         $users = ( x($_POST, 'user') ? $_POST['user'] : Array() );
 532
 533     check_form_security_token_redirectOnErr('/admin/users', 'admin_users');
 534
 535         if (x($_POST,'page_users_block')){
 536                 foreach($users as $uid){
 537                         q("UPDATE `user` SET `blocked`=1-`blocked` WHERE `uid`=%s",
 538                                 intval( $uid )
 539                         );
 540                 }
 541                 notice( sprintf( tt("%s user blocked/unblocked", "%s users blocked/unblocked", count($users)), count($users)) );
 542         }
 543         if (x($_POST,'page_users_delete')){
 544                 require_once("include/Contact.php");
 545                 foreach($users as $uid){
 546                         user_remove($uid);
 547                 }
 548                 notice( sprintf( tt("%s user deleted", "%s users deleted", count($users)), count($users)) );
 549         }
 550
 551         if (x($_POST,'page_users_approve')){
 552                 require_once("mod/regmod.php");
 553                 foreach($pending as $hash){
 554                         user_allow($hash);
 555                 }
 556         }
 557         if (x($_POST,'page_users_deny')){
 558                 require_once("mod/regmod.php");
 559                 foreach($pending as $hash){
 560                         user_deny($hash);
 561                 }
 562         }
 563         goaway($a->get_baseurl(true) . '/admin/users' );
 564         return; // NOTREACHED
 565 }
 566
 567 /**
 568  * @param App $a
 569  * @return string
 570  */
 571 function admin_page_users(&$a){
 572         if ($a->argc>2) {
 573                 $uid = $a->argv[3];
 574                 $user = q("SELECT * FROM `user` WHERE `uid`=%d", intval($uid));
 575                 if (count($user)==0){
 576                         notice( 'User not found' . EOL);
 577                         goaway($a->get_baseurl(true) . '/admin/users' );
 578                         return ''; // NOTREACHED
 579                 }
 580                 switch($a->argv[2]){
 581                         case "delete":{
 582                 check_form_security_token_redirectOnErr('/admin/users', 'admin_users', 't');
 583                                 // delete user
 584                                 require_once("include/Contact.php");
 585                                 user_remove($uid);
 586
 587                                 notice( sprintf(t("User '%s' deleted"), $user[0]['username']) . EOL);
 588                         }; break;
 589                         case "block":{
 590                 check_form_security_token_redirectOnErr('/admin/users', 'admin_users', 't');
 591                                 q("UPDATE `user` SET `blocked`=%d WHERE `uid`=%s",
 592                                         intval( 1-$user[0]['blocked'] ),
 593                                         intval( $uid )
 594                                 );
 595                                 notice( sprintf( ($user[0]['blocked']?t("User '%s' unblocked"):t("User '%s' blocked")) , $user[0]['username']) . EOL);
 596                         }; break;
 597                 }
 598                 goaway($a->get_baseurl(true) . '/admin/users' );
 599                 return ''; // NOTREACHED
 600
 601         }
 602
 603         /* get pending */
 604         $pending = q("SELECT `register`.*, `contact`.`name`, `user`.`email`
 605                                  FROM `register`
 606                                  LEFT JOIN `contact` ON `register`.`uid` = `contact`.`uid`
 607                                  LEFT JOIN `user` ON `register`.`uid` = `user`.`uid`;");
 608
 609
 610         /* get users */
 611
 612         $total = q("SELECT count(*) as total FROM `user` where 1");
 613         if(count($total)) {
 614                 $a->set_pager_total($total[0]['total']);
 615                 $a->set_pager_itemspage(100);
 616         }
 617
 618
 619         $users = q("SELECT `user` . * , `contact`.`name` , `contact`.`url` , `contact`.`micro`, `lastitem`.`lastitem_date`
 620                                 FROM
 621                                         (SELECT MAX(`item`.`changed`) as `lastitem_date`, `item`.`uid`
 622                                         FROM `item`
 623                                         WHERE `item`.`type` = 'wall'
 624                                         GROUP BY `item`.`uid`) AS `lastitem`
 625                                                  RIGHT OUTER JOIN `user` ON `user`.`uid` = `lastitem`.`uid`,
 626                                            `contact`
 627                                 WHERE
 628                                            `user`.`uid` = `contact`.`uid`
 629                                                 AND `user`.`verified` =1
 630                                         AND `contact`.`self` =1
 631                                 ORDER BY `contact`.`name` LIMIT %d, %d
 632                                 ",
 633                                 intval($a->pager['start']),
 634                                 intval($a->pager['itemspage'])
 635                                 );
 636
 637         function _setup_users($e){
 638                 $accounts = Array(
 639                         t('Normal Account'),
 640                         t('Soapbox Account'),
 641                         t('Community/Celebrity Account'),
 642                         t('Automatic Friend Account')
 643                 );
 644                 $e['page-flags'] = $accounts[$e['page-flags']];
 645                 $e['register_date'] = relative_date($e['register_date']);
 646                 $e['login_date'] = relative_date($e['login_date']);
 647                 $e['lastitem_date'] = relative_date($e['lastitem_date']);
 648                 return $e;
 649         }
 650         $users = array_map("_setup_users", $users);
 651
 652
 653         $t = get_markup_template("admin_users.tpl");
 654         $o = replace_macros($t, array(
 655                 // strings //
 656                 '$title' => t('Administration'),
 657                 '$page' => t('Users'),
 658                 '$submit' => t('Submit'),
 659                 '$select_all' => t('select all'),
 660                 '$h_pending' => t('User registrations waiting for confirm'),
 661                 '$th_pending' => array( t('Request date'), t('Name'), t('Email') ),
 662                 '$no_pending' =>  t('No registrations.'),
 663                 '$approve' => t('Approve'),
 664                 '$deny' => t('Deny'),
 665                 '$delete' => t('Delete'),
 666                 '$block' => t('Block'),
 667                 '$unblock' => t('Unblock'),
 668
 669                 '$h_users' => t('Users'),
 670                 '$th_users' => array( t('Name'), t('Email'), t('Register date'), t('Last login'), t('Last item'),  t('Account') ),
 671
 672                 '$confirm_delete_multi' => t('Selected users will be deleted!\n\nEverything these users had posted on this site will be permanently deleted!\n\nAre you sure?'),
 673                 '$confirm_delete' => t('The user {0} will be deleted!\n\nEverything this user has posted on this site will be permanently deleted!\n\nAre you sure?'),
 674
 675         '$form_security_token' => get_form_security_token("admin_users"),
 676
 677                 // values //
 678                 '$baseurl' => $a->get_baseurl(true),
 679
 680                 '$pending' => $pending,
 681                 '$users' => $users,
 682         ));
 683         $o .= paginate($a);
 684         return $o;
 685 }
 686
 687
 688 /**
 689  * Plugins admin page
 690  *
 691  * @param App $a
 692  * @return string
 693  */
 694 function admin_page_plugins(&$a){
 695
 696         /**
 697          * Single plugin
 698          */
 699         if ($a->argc == 3){
 700                 $plugin = $a->argv[2];
 701                 if (!is_file("addon/$plugin/$plugin.php")){
 702                         notice( t("Item not found.") );
 703                         return '';
 704                 }
 705
 706                 if (x($_GET,"a") && $_GET['a']=="t"){
 707             check_form_security_token_redirectOnErr('/admin/plugins', 'admin_themes', 't');
 708
 709                         // Toggle plugin status
 710                         $idx = array_search($plugin, $a->plugins);
 711                         if ($idx !== false){
 712                                 unset($a->plugins[$idx]);
 713                                 uninstall_plugin($plugin);
 714                                 info( sprintf( t("Plugin %s disabled."), $plugin ) );
 715                         } else {
 716                                 $a->plugins[] = $plugin;
 717                                 install_plugin($plugin);
 718                                 info( sprintf( t("Plugin %s enabled."), $plugin ) );
 719                         }
 720                         set_config("system","addon", implode(", ",$a->plugins));
 721                         goaway($a->get_baseurl(true) . '/admin/plugins' );
 722                         return ''; // NOTREACHED
 723                 }
 724                 // display plugin details
 725                 require_once('library/markdown.php');
 726
 727                 if (in_array($plugin, $a->plugins)){
 728                         $status="on"; $action= t("Disable");
 729                 } else {
 730                         $status="off"; $action= t("Enable");
 731                 }
 732
 733                 $readme=Null;
 734                 if (is_file("addon/$plugin/README.md")){
 735                         $readme = file_get_contents("addon/$plugin/README.md");
 736                         $readme = Markdown($readme);
 737                 } else if (is_file("addon/$plugin/README")){
 738                         $readme = "<pre>". file_get_contents("addon/$plugin/README") ."</pre>";
 739                 }
 740
 741                 $admin_form="";
 742                 if (is_array($a->plugins_admin) && in_array($plugin, $a->plugins_admin)){
 743                         @require_once("addon/$plugin/$plugin.php");
 744                         $func = $plugin.'_plugin_admin';
 745                         $func($a, $admin_form);
 746                 }
 747
 748                 $t = get_markup_template("admin_plugins_details.tpl");
 749                 return replace_macros($t, array(
 750                         '$title' => t('Administration'),
 751                         '$page' => t('Plugins'),
 752                         '$toggle' => t('Toggle'),
 753                         '$settings' => t('Settings'),
 754                         '$baseurl' => $a->get_baseurl(true),
 755
 756                         '$plugin' => $plugin,
 757                         '$status' => $status,
 758                         '$action' => $action,
 759                         '$info' => get_plugin_info($plugin),
 760                         '$str_author' => t('Author: '),
 761                         '$str_maintainer' => t('Maintainer: '),
 762
 763                         '$admin_form' => $admin_form,
 764                         '$function' => 'plugins',
 765                         '$screenshot' => '',
 766                         '$readme' => $readme,
 767
 768             '$form_security_token' => get_form_security_token("admin_themes"),
 769                 ));
 770         }
 771
 772
 773
 774         /**
 775          * List plugins
 776          */
 777
 778         $plugins = array();
 779         $files = glob("addon/*/");
 780         if($files) {
 781                 foreach($files as $file) {
 782                         if (is_dir($file)){
 783                                 list($tmp, $id)=array_map("trim", explode("/",$file));
 784                                 $info = get_plugin_info($id);
 785                                 $plugins[] = array( $id, (in_array($id,  $a->plugins)?"on":"off") , $info);
 786                         }
 787                 }
 788         }
 789
 790         $t = get_markup_template("admin_plugins.tpl");
 791         return replace_macros($t, array(
 792                 '$title' => t('Administration'),
 793                 '$page' => t('Plugins'),
 794                 '$submit' => t('Submit'),
 795                 '$baseurl' => $a->get_baseurl(true),
 796                 '$function' => 'plugins',
 797                 '$plugins' => $plugins,
 798         '$form_security_token' => get_form_security_token("admin_themes"),
 799         ));
 800 }
 801
 802 /**
 803  * @param array $themes
 804  * @param string $th
 805  * @param int $result
 806  */
 807 function toggle_theme(&$themes,$th,&$result) {
 808         for($x = 0; $x < count($themes); $x ++) {
 809                 if($themes[$x]['name'] === $th) {
 810                         if($themes[$x]['allowed']) {
 811                                 $themes[$x]['allowed'] = 0;
 812                                 $result = 0;
 813                         }
 814                         else {
 815                                 $themes[$x]['allowed'] = 1;
 816                                 $result = 1;
 817                         }
 818                 }
 819         }
 820 }
 821
 822 /**
 823  * @param array $themes
 824  * @param string $th
 825  * @return int
 826  */
 827 function theme_status($themes,$th) {
 828         for($x = 0; $x < count($themes); $x ++) {
 829                 if($themes[$x]['name'] === $th) {
 830                         if($themes[$x]['allowed']) {
 831                                 return 1;
 832                         }
 833                         else {
 834                                 return 0;
 835                         }
 836                 }
 837         }
 838         return 0;
 839 }
 840
 841
 842 /**
 843  * @param array $themes
 844  * @return string
 845  */
 846 function rebuild_theme_table($themes) {
 847         $o = '';
 848         if(count($themes)) {
 849                 foreach($themes as $th) {
 850                         if($th['allowed']) {
 851                                 if(strlen($o))
 852                                         $o .= ',';
 853                                 $o .= $th['name'];
 854                         }
 855                 }
 856         }
 857         return $o;
 858 }
 859
 860
 861 /**
 862  * Themes admin page
 863  *
 864  * @param App $a
 865  * @return string
 866  */
 867 function admin_page_themes(&$a){
 868
 869         $allowed_themes_str = get_config('system','allowed_themes');
 870         $allowed_themes_raw = explode(',',$allowed_themes_str);
 871         $allowed_themes = array();
 872         if(count($allowed_themes_raw))
 873                 foreach($allowed_themes_raw as $x)
 874                         if(strlen(trim($x)))
 875                                 $allowed_themes[] = trim($x);
 876
 877         $themes = array();
 878     $files = glob('view/theme/*');
 879     if($files) {
 880         foreach($files as $file) {
 881             $f = basename($file);
 882             $is_experimental = intval(file_exists($file . '/experimental'));
 883                         $is_supported = 1-(intval(file_exists($file . '/unsupported'))); // Is not used yet
 884                         $is_allowed = intval(in_array($f,$allowed_themes));
 885                         $themes[] = array('name' => $f, 'experimental' => $is_experimental, 'supported' => $is_supported, 'allowed' => $is_allowed);
 886         }
 887     }
 888
 889         if(! count($themes)) {
 890                 notice( t('No themes found.'));
 891                 return '';
 892         }
 893
 894         /**
 895          * Single theme
 896          */
 897
 898         if ($a->argc == 3){
 899                 $theme = $a->argv[2];
 900                 if(! is_dir("view/theme/$theme")){
 901                         notice( t("Item not found.") );
 902                         return '';
 903                 }
 904
 905                 if (x($_GET,"a") && $_GET['a']=="t"){
 906             check_form_security_token_redirectOnErr('/admin/themes', 'admin_themes', 't');
 907
 908                         // Toggle theme status
 909
 910                         toggle_theme($themes,$theme,$result);
 911                         $s = rebuild_theme_table($themes);
 912                         if($result)
 913                                 info( sprintf('Theme %s enabled.',$theme));
 914                         else
 915                                 info( sprintf('Theme %s disabled.',$theme));
 916
 917                         set_config('system','allowed_themes',$s);
 918                         goaway($a->get_baseurl(true) . '/admin/themes' );
 919                         return ''; // NOTREACHED
 920                 }
 921
 922                 // display theme details
 923                 require_once('library/markdown.php');
 924
 925                 if (theme_status($themes,$theme)) {
 926                         $status="on"; $action= t("Disable");
 927                 } else {
 928                         $status="off"; $action= t("Enable");
 929                 }
 930
 931                 $readme=Null;
 932                 if (is_file("view/theme/$theme/README.md")){
 933                         $readme = file_get_contents("view/theme/$theme/README.md");
 934                         $readme = Markdown($readme);
 935                 } else if (is_file("view/theme/$theme/README")){
 936                         $readme = "<pre>". file_get_contents("view/theme/$theme/README") ."</pre>";
 937                 }
 938
 939                 $admin_form="";
 940                 if (is_file("view/theme/$theme/config.php")){
 941                         require_once("view/theme/$theme/config.php");
 942                         if(function_exists("theme_admin")){
 943                                 $admin_form = theme_admin($a);
 944                         }
 945
 946                 }
 947
 948
 949                 $screenshot = array( get_theme_screenshot($theme), t('Screenshot'));
 950                 if(! stristr($screenshot[0],$theme))
 951                         $screenshot = null;
 952
 953                 $t = get_markup_template("admin_plugins_details.tpl");
 954                 return replace_macros($t, array(
 955                         '$title' => t('Administration'),
 956                         '$page' => t('Themes'),
 957                         '$toggle' => t('Toggle'),
 958                         '$settings' => t('Settings'),
 959                         '$baseurl' => $a->get_baseurl(true),
 960
 961                         '$plugin' => $theme,
 962                         '$status' => $status,
 963                         '$action' => $action,
 964                         '$info' => get_theme_info($theme),
 965                         '$function' => 'themes',
 966                         '$admin_form' => $admin_form,
 967                         '$str_author' => t('Author: '),
 968                         '$str_maintainer' => t('Maintainer: '),
 969                         '$screenshot' => $screenshot,
 970                         '$readme' => $readme,
 971
 972                         '$form_security_token' => get_form_security_token("admin_themes"),
 973                 ));
 974         }
 975
 976
 977
 978         /**
 979          * List themes
 980          */
 981
 982         $xthemes = array();
 983         if($themes) {
 984                 foreach($themes as $th) {
 985                         $xthemes[] = array($th['name'],(($th['allowed']) ? "on" : "off"), get_theme_info($th['name']));
 986                 }
 987         }
 988
 989         $t = get_markup_template("admin_plugins.tpl");
 990         return replace_macros($t, array(
 991                 '$title' => t('Administration'),
 992                 '$page' => t('Themes'),
 993                 '$submit' => t('Submit'),
 994                 '$baseurl' => $a->get_baseurl(true),
 995                 '$function' => 'themes',
 996                 '$plugins' => $xthemes,
 997                 '$experimental' => t('[Experimental]'),
 998                 '$unsupported' => t('[Unsupported]'),
 999         '$form_security_token' => get_form_security_token("admin_themes"),
1000         ));
1001 }
1002
1003
1004 /**
1005  * Logs admin page
1006  *
1007  * @param App $a
1008  */
1009
1010 function admin_page_logs_post(&$a) {
1011         if (x($_POST,"page_logs")) {
1012         check_form_security_token_redirectOnErr('/admin/logs', 'admin_logs');
1013
1014                 $logfile                =       ((x($_POST,'logfile'))          ? notags(trim($_POST['logfile']))       : '');
1015                 $debugging              =       ((x($_POST,'debugging'))        ? true                                                          : false);
1016                 $loglevel               =       ((x($_POST,'loglevel'))         ? intval(trim($_POST['loglevel']))      : 0);
1017
1018                 set_config('system','logfile', $logfile);
1019                 set_config('system','debugging',  $debugging);
1020                 set_config('system','loglevel', $loglevel);
1021
1022
1023         }
1024
1025         info( t("Log settings updated.") );
1026         goaway($a->get_baseurl(true) . '/admin/logs' );
1027         return; // NOTREACHED
1028 }
1029
1030 /**
1031  * @param App $a
1032  * @return string
1033  */
1034 function admin_page_logs(&$a){
1035
1036         $log_choices = Array(
1037                 LOGGER_NORMAL => 'Normal',
1038                 LOGGER_TRACE => 'Trace',
1039                 LOGGER_DEBUG => 'Debug',
1040                 LOGGER_DATA => 'Data',
1041                 LOGGER_ALL => 'All'
1042         );
1043
1044         $t = get_markup_template("admin_logs.tpl");
1045
1046         $f = get_config('system','logfile');
1047
1048         $data = '';
1049
1050         if(!file_exists($f)) {
1051                 $data = t("Error trying to open <strong>$f</strong> log file.\r\n<br/>Check to see if file $f exist and is
1052 readable.");
1053         }
1054         else {
1055                 $fp = fopen($f, 'r');
1056                 if(!$fp) {
1057                         $data = t("Couldn't open <strong>$f</strong> log file.\r\n<br/>Check to see if file $f is readable.");
1058                 }
1059                 else {
1060                         $fstat = fstat($fp);
1061                         $size = $fstat['size'];
1062                         if($size != 0)
1063                         {
1064                                 if($size > 5000000 || $size < 0)
1065                                         $size = 5000000;
1066                                 $seek = fseek($fp,0-$size,SEEK_END);
1067                                 if($seek === 0) {
1068                                         $data = escape_tags(fread($fp,$size));
1069                                         while(! feof($fp))
1070                                                 $data .= escape_tags(fread($fp,4096));
1071                                 }
1072                         }
1073                         fclose($fp);
1074                 }
1075         }
1076
1077         return replace_macros($t, array(
1078                 '$title' => t('Administration'),
1079                 '$page' => t('Logs'),
1080                 '$submit' => t('Submit'),
1081                 '$clear' => t('Clear'),
1082                 '$data' => $data,
1083                 '$baseurl' => $a->get_baseurl(true),
1084                 '$logname' =>  get_config('system','logfile'),
1085
1086                                                                         // name, label, value, help string, extra data...
1087                 '$debugging'            => array('debugging', t("Debugging"),get_config('system','debugging'), ""),
1088                 '$logfile'                      => array('logfile', t("Log file"), get_config('system','logfile'), t("Must be writable by web server. Relative to your Friendica top-level directory.")),
1089                 '$loglevel'             => array('loglevel', t("Log level"), get_config('system','loglevel'), "", $log_choices),
1090
1091         '$form_security_token' => get_form_security_token("admin_logs"),
1092         ));
1093 }
1094
1095 /**
1096  * @param App $a
1097  */
1098 function admin_page_remoteupdate_post(&$a) {
1099         // this function should be called via ajax post
1100         if(!is_site_admin()) {
1101                 return;
1102         }
1103
1104
1105         if (x($_POST,'remotefile') && $_POST['remotefile']!=""){
1106                 $remotefile = $_POST['remotefile'];
1107                 $ftpdata = (x($_POST['ftphost'])?$_POST:false);
1108                 doUpdate($remotefile, $ftpdata);
1109         } else {
1110                 echo "No remote file to download. Abort!";
1111         }
1112
1113         killme();
1114 }
1115
1116 /**
1117  * @param App $a
1118  * @return string
1119  */
1120 function admin_page_remoteupdate(&$a) {
1121         if(!is_site_admin()) {
1122                 return login(false);
1123         }
1124
1125         $canwrite = canWeWrite();
1126         $canftp = function_exists('ftp_connect');
1127
1128         $needupdate = true;
1129         $u = checkUpdate();
1130         if (!is_array($u)){
1131                 $needupdate = false;
1132                 $u = array('','','');
1133         }
1134
1135         $tpl = get_markup_template("admin_remoteupdate.tpl");
1136         return replace_macros($tpl, array(
1137                 '$baseurl' => $a->get_baseurl(true),
1138                 '$submit' => t("Update now"),
1139                 '$close' => t("Close"),
1140                 '$localversion' => FRIENDICA_VERSION,
1141                 '$remoteversion' => $u[1],
1142                 '$needupdate' => $needupdate,
1143                 '$canwrite' => $canwrite,
1144                 '$canftp'       => $canftp,
1145                 '$ftphost'      => array('ftphost', t("FTP Host"), '',''),
1146                 '$ftppath'      => array('ftppath', t("FTP Path"), '/',''),
1147                 '$ftpuser'      => array('ftpuser', t("FTP User"), '',''),
1148                 '$ftppwd'       => array('ftppwd', t("FTP Password"), '',''),
1149                 '$remotefile'=>array('remotefile','', $u['2'],'')
1150         ));
1151
1152 }