mod/settings.php

   1 <?php
   2 /**
   3  * @copyright Copyright (C) 2020, Friendica
   4  *
   5  * @license GNU AGPL version 3 or any later version
   6  *
   7  * This program is free software: you can redistribute it and/or modify
   8  * it under the terms of the GNU Affero General Public License as
   9  * published by the Free Software Foundation, either version 3 of the
  10  * License, or (at your option) any later version.
  11  *
  12  * This program is distributed in the hope that it will be useful,
  13  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  14  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  15  * GNU Affero General Public License for more details.
  16  *
  17  * You should have received a copy of the GNU Affero General Public License
  18  * along with this program.  If not, see <https://www.gnu.org/licenses/>.
  19  *
  20  */
  21
  22 use Friendica\App;
  23 use Friendica\BaseModule;
  24 use Friendica\Content\Feature;
  25 use Friendica\Content\Nav;
  26 use Friendica\Core\ACL;
  27 use Friendica\Core\Hook;
  28 use Friendica\Core\Logger;
  29 use Friendica\Core\Renderer;
  30 use Friendica\Core\Worker;
  31 use Friendica\Database\DBA;
  32 use Friendica\DI;
  33 use Friendica\Model\Contact;
  34 use Friendica\Model\GContact;
  35 use Friendica\Model\Group;
  36 use Friendica\Model\Notify\Type;
  37 use Friendica\Model\User;
  38 use Friendica\Module\BaseSettings;
  39 use Friendica\Module\Security\Login;
  40 use Friendica\Protocol\Email;
  41 use Friendica\Util\Strings;
  42 use Friendica\Util\Temporal;
  43 use Friendica\Worker\Delivery;
  44
  45 function settings_init(App $a)
  46 {
  47         if (!local_user()) {
  48                 notice(DI::l10n()->t('Permission denied.'));
  49                 return;
  50         }
  51
  52         BaseSettings::content();
  53 }
  54
  55 function settings_post(App $a)
  56 {
  57         if (!local_user()) {
  58                 return;
  59         }
  60
  61         if (!empty($_SESSION['submanage'])) {
  62                 return;
  63         }
  64
  65         if (count($a->user) && !empty($a->user['uid']) && $a->user['uid'] != local_user()) {
  66                 notice(DI::l10n()->t('Permission denied.') . EOL);
  67                 return;
  68         }
  69
  70         $old_page_flags = $a->user['page-flags'];
  71
  72         if (($a->argc > 1) && ($a->argv[1] === 'oauth') && !empty($_POST['remove'])) {
  73                 BaseModule::checkFormSecurityTokenRedirectOnError('/settings/oauth', 'settings_oauth');
  74
  75                 $key = $_POST['remove'];
  76                 DBA::delete('tokens', ['id' => $key, 'uid' => local_user()]);
  77                 DI::baseUrl()->redirect('settings/oauth/', true);
  78                 return;
  79         }
  80
  81         if (($a->argc > 2) && ($a->argv[1] === 'oauth')  && ($a->argv[2] === 'edit'||($a->argv[2] === 'add')) && !empty($_POST['submit'])) {
  82                 BaseModule::checkFormSecurityTokenRedirectOnError('/settings/oauth', 'settings_oauth');
  83
  84                 $name     = $_POST['name']     ?? '';
  85                 $key      = $_POST['key']      ?? '';
  86                 $secret   = $_POST['secret']   ?? '';
  87                 $redirect = $_POST['redirect'] ?? '';
  88                 $icon     = $_POST['icon']     ?? '';
  89
  90                 if ($name == "" || $key == "" || $secret == "") {
  91                         notice(DI::l10n()->t("Missing some important data!"));
  92                 } else {
  93                         if ($_POST['submit'] == DI::l10n()->t("Update")) {
  94                                 q("UPDATE clients SET
  95                                                         client_id='%s',
  96                                                         pw='%s',
  97                                                         name='%s',
  98                                                         redirect_uri='%s',
  99                                                         icon='%s',
 100                                                         uid=%d
 101                                                 WHERE client_id='%s'",
 102                                         DBA::escape($key),
 103                                         DBA::escape($secret),
 104                                         DBA::escape($name),
 105                                         DBA::escape($redirect),
 106                                         DBA::escape($icon),
 107                                         local_user(),
 108                                         DBA::escape($key)
 109                                 );
 110                         } else {
 111                                 q("INSERT INTO clients
 112                                                         (client_id, pw, name, redirect_uri, icon, uid)
 113                                                 VALUES ('%s', '%s', '%s', '%s', '%s',%d)",
 114                                         DBA::escape($key),
 115                                         DBA::escape($secret),
 116                                         DBA::escape($name),
 117                                         DBA::escape($redirect),
 118                                         DBA::escape($icon),
 119                                         local_user()
 120                                 );
 121                         }
 122                 }
 123                 DI::baseUrl()->redirect('settings/oauth/', true);
 124                 return;
 125         }
 126
 127         if (($a->argc > 1) && ($a->argv[1] == 'addon')) {
 128                 BaseModule::checkFormSecurityTokenRedirectOnError('/settings/addon', 'settings_addon');
 129
 130                 Hook::callAll('addon_settings_post', $_POST);
 131                 return;
 132         }
 133
 134         if (($a->argc > 1) && ($a->argv[1] == 'connectors')) {
 135                 BaseModule::checkFormSecurityTokenRedirectOnError('/settings/connectors', 'settings_connectors');
 136
 137                 if (!empty($_POST['general-submit'])) {
 138                         DI::pConfig()->set(local_user(), 'system', 'accept_only_sharer', intval($_POST['accept_only_sharer']));
 139                         DI::pConfig()->set(local_user(), 'system', 'disable_cw', intval($_POST['disable_cw']));
 140                         DI::pConfig()->set(local_user(), 'system', 'no_intelligent_shortening', intval($_POST['no_intelligent_shortening']));
 141                         DI::pConfig()->set(local_user(), 'system', 'attach_link_title', intval($_POST['attach_link_title']));
 142                         DI::pConfig()->set(local_user(), 'system', 'ostatus_autofriend', intval($_POST['snautofollow']));
 143                         DI::pConfig()->set(local_user(), 'ostatus', 'default_group', $_POST['group-selection']);
 144                         DI::pConfig()->set(local_user(), 'ostatus', 'legacy_contact', $_POST['legacy_contact']);
 145                 } elseif (!empty($_POST['imap-submit'])) {
 146                         $mail_server       =                 $_POST['mail_server']       ?? '';
 147                         $mail_port         =                 $_POST['mail_port']         ?? '';
 148                         $mail_ssl          = strtolower(trim($_POST['mail_ssl']          ?? ''));
 149                         $mail_user         =                 $_POST['mail_user']         ?? '';
 150                         $mail_pass         =            trim($_POST['mail_pass']         ?? '');
 151                         $mail_action       =            trim($_POST['mail_action']       ?? '');
 152                         $mail_movetofolder =            trim($_POST['mail_movetofolder'] ?? '');
 153                         $mail_replyto      =                 $_POST['mail_replyto']      ?? '';
 154                         $mail_pubmail      =                 $_POST['mail_pubmail']      ?? '';
 155
 156                         if (
 157                                 !DI::config()->get('system', 'dfrn_only')
 158                                 && function_exists('imap_open')
 159                                 && !DI::config()->get('system', 'imap_disabled')
 160                         ) {
 161                                 $failed = false;
 162                                 $r = q("SELECT * FROM `mailacct` WHERE `uid` = %d LIMIT 1",
 163                                         intval(local_user())
 164                                 );
 165                                 if (!DBA::isResult($r)) {
 166                                         DBA::insert('mailacct', ['uid' => local_user()]);
 167                                 }
 168                                 if (strlen($mail_pass)) {
 169                                         $pass = '';
 170                                         openssl_public_encrypt($mail_pass, $pass, $a->user['pubkey']);
 171                                         DBA::update('mailacct', ['pass' => bin2hex($pass)], ['uid' => local_user()]);
 172                                 }
 173                                 $r = q("UPDATE `mailacct` SET `server` = '%s', `port` = %d, `ssltype` = '%s', `user` = '%s',
 174                                         `action` = %d, `movetofolder` = '%s',
 175                                         `mailbox` = 'INBOX', `reply_to` = '%s', `pubmail` = %d WHERE `uid` = %d",
 176                                         DBA::escape($mail_server),
 177                                         intval($mail_port),
 178                                         DBA::escape($mail_ssl),
 179                                         DBA::escape($mail_user),
 180                                         intval($mail_action),
 181                                         DBA::escape($mail_movetofolder),
 182                                         DBA::escape($mail_replyto),
 183                                         intval($mail_pubmail),
 184                                         intval(local_user())
 185                                 );
 186                                 Logger::log("mail: updating mailaccount. Response: ".print_r($r, true));
 187                                 $r = q("SELECT * FROM `mailacct` WHERE `uid` = %d LIMIT 1",
 188                                         intval(local_user())
 189                                 );
 190                                 if (DBA::isResult($r)) {
 191                                         $eacct = $r[0];
 192                                         $mb = Email::constructMailboxName($eacct);
 193
 194                                         if (strlen($eacct['server'])) {
 195                                                 $dcrpass = '';
 196                                                 openssl_private_decrypt(hex2bin($eacct['pass']), $dcrpass, $a->user['prvkey']);
 197                                                 $mbox = Email::connect($mb, $mail_user, $dcrpass);
 198                                                 unset($dcrpass);
 199                                                 if (!$mbox) {
 200                                                         $failed = true;
 201                                                         notice(DI::l10n()->t('Failed to connect with email account using the settings provided.') . EOL);
 202                                                 }
 203                                         }
 204                                 }
 205                                 if (!$failed) {
 206                                         info(DI::l10n()->t('Email settings updated.') . EOL);
 207                                 }
 208                         }
 209                 }
 210
 211                 Hook::callAll('connector_settings_post', $_POST);
 212                 return;
 213         }
 214
 215         if (($a->argc > 1) && ($a->argv[1] === 'features')) {
 216                 BaseModule::checkFormSecurityTokenRedirectOnError('/settings/features', 'settings_features');
 217                 foreach ($_POST as $k => $v) {
 218                         if (strpos($k, 'feature_') === 0) {
 219                                 DI::pConfig()->set(local_user(), 'feature', substr($k, 8), ((intval($v)) ? 1 : 0));
 220                         }
 221                 }
 222                 info(DI::l10n()->t('Features updated') . EOL);
 223                 return;
 224         }
 225
 226         BaseModule::checkFormSecurityTokenRedirectOnError('/settings', 'settings');
 227
 228         // Import Contacts from CSV file
 229         if (!empty($_POST['importcontact-submit'])) {
 230                 if (isset($_FILES['importcontact-filename'])) {
 231                         // was there an error
 232                         if ($_FILES['importcontact-filename']['error'] > 0) {
 233                                 Logger::notice('Contact CSV file upload error');
 234                                 info(DI::l10n()->t('Contact CSV file upload error'));
 235                         } else {
 236                                 $csvArray = array_map('str_getcsv', file($_FILES['importcontact-filename']['tmp_name']));
 237                                 // import contacts
 238                                 foreach ($csvArray as $csvRow) {
 239                                         // The 1st row may, or may not contain the headers of the table
 240                                         // We expect the 1st field of the row to contain either the URL
 241                                         // or the handle of the account, therefore we check for either
 242                                         // "http" or "@" to be present in the string.
 243                                         // All other fields from the row will be ignored
 244                                         if ((strpos($csvRow[0],'@') !== false) || (strpos($csvRow[0],'http') !== false)) {
 245                                                 Worker::add(PRIORITY_LOW, 'AddContact', $_SESSION['uid'], $csvRow[0]);
 246                                         }
 247                                 }
 248
 249                                 info(DI::l10n()->t('Importing Contacts done'));
 250                                 // delete temp file
 251                                 unlink($_FILES['importcontact-filename']['tmp_name']);
 252                         }
 253                 }
 254
 255                 return;
 256         }
 257
 258         if (!empty($_POST['resend_relocate'])) {
 259                 Worker::add(PRIORITY_HIGH, 'Notifier', Delivery::RELOCATION, local_user());
 260                 info(DI::l10n()->t("Relocate message has been send to your contacts"));
 261                 DI::baseUrl()->redirect('settings');
 262         }
 263
 264         Hook::callAll('settings_post', $_POST);
 265
 266         if (!empty($_POST['password']) || !empty($_POST['confirm'])) {
 267                 $newpass = $_POST['password'];
 268                 $confirm = $_POST['confirm'];
 269
 270                 try {
 271                         if ($newpass != $confirm) {
 272                                 throw new Exception(DI::l10n()->t('Passwords do not match.'));
 273                         }
 274
 275                         //  check if the old password was supplied correctly before changing it to the new value
 276                         User::getIdFromPasswordAuthentication(local_user(), $_POST['opassword']);
 277
 278                         $result = User::updatePassword(local_user(), $newpass);
 279                         if (!DBA::isResult($result)) {
 280                                 throw new Exception(DI::l10n()->t('Password update failed. Please try again.'));
 281                         }
 282
 283                         info(DI::l10n()->t('Password changed.'));
 284                 } catch (Exception $e) {
 285                         notice($e->getMessage());
 286                         notice(DI::l10n()->t('Password unchanged.'));
 287                 }
 288         }
 289
 290         $username         = (!empty($_POST['username'])   ? Strings::escapeTags(trim($_POST['username']))     : '');
 291         $email            = (!empty($_POST['email'])      ? Strings::escapeTags(trim($_POST['email']))        : '');
 292         $timezone         = (!empty($_POST['timezone'])   ? Strings::escapeTags(trim($_POST['timezone']))     : '');
 293         $language         = (!empty($_POST['language'])   ? Strings::escapeTags(trim($_POST['language']))     : '');
 294
 295         $defloc           = (!empty($_POST['defloc'])     ? Strings::escapeTags(trim($_POST['defloc']))       : '');
 296         $maxreq           = (!empty($_POST['maxreq'])     ? intval($_POST['maxreq'])             : 0);
 297         $expire           = (!empty($_POST['expire'])     ? intval($_POST['expire'])             : 0);
 298         $def_gid          = (!empty($_POST['group-selection']) ? intval($_POST['group-selection']) : 0);
 299
 300
 301         $expire_items     = (!empty($_POST['expire_items']) ? intval($_POST['expire_items'])     : 0);
 302         $expire_notes     = (!empty($_POST['expire_notes']) ? intval($_POST['expire_notes'])     : 0);
 303         $expire_starred   = (!empty($_POST['expire_starred']) ? intval($_POST['expire_starred']) : 0);
 304         $expire_photos    = (!empty($_POST['expire_photos'])? intval($_POST['expire_photos'])    : 0);
 305         $expire_network_only    = (!empty($_POST['expire_network_only'])? intval($_POST['expire_network_only'])  : 0);
 306
 307         $delete_openid    = ((!empty($_POST['delete_openid']) && (intval($_POST['delete_openid']) == 1)) ? 1: 0);
 308
 309         $allow_location   = ((!empty($_POST['allow_location']) && (intval($_POST['allow_location']) == 1)) ? 1: 0);
 310         $publish          = ((!empty($_POST['profile_in_directory']) && (intval($_POST['profile_in_directory']) == 1)) ? 1: 0);
 311         $net_publish      = ((!empty($_POST['profile_in_netdirectory']) && (intval($_POST['profile_in_netdirectory']) == 1)) ? 1: 0);
 312         $old_visibility   = ((!empty($_POST['visibility']) && (intval($_POST['visibility']) == 1)) ? 1 : 0);
 313         $account_type     = ((!empty($_POST['account-type']) && (intval($_POST['account-type']))) ? intval($_POST['account-type']) : 0);
 314         $page_flags       = ((!empty($_POST['page-flags']) && (intval($_POST['page-flags']))) ? intval($_POST['page-flags']) : 0);
 315         $blockwall        = ((!empty($_POST['blockwall']) && (intval($_POST['blockwall']) == 1)) ? 0: 1); // this setting is inverted!
 316         $blocktags        = ((!empty($_POST['blocktags']) && (intval($_POST['blocktags']) == 1)) ? 0: 1); // this setting is inverted!
 317         $unkmail          = ((!empty($_POST['unkmail']) && (intval($_POST['unkmail']) == 1)) ? 1: 0);
 318         $cntunkmail       = (!empty($_POST['cntunkmail']) ? intval($_POST['cntunkmail']) : 0);
 319         $hide_friends     = (($_POST['hide-friends'] == 1) ? 1: 0);
 320         $hidewall         = (($_POST['hidewall'] == 1) ? 1: 0);
 321         $unlisted         = (($_POST['unlisted'] == 1) ? 1: 0);
 322
 323         $email_textonly   = (($_POST['email_textonly'] == 1) ? 1 : 0);
 324         $detailed_notif   = (($_POST['detailed_notif'] == 1) ? 1 : 0);
 325
 326         $notify = 0;
 327
 328         if (!empty($_POST['notify1'])) {
 329                 $notify += intval($_POST['notify1']);
 330         }
 331         if (!empty($_POST['notify2'])) {
 332                 $notify += intval($_POST['notify2']);
 333         }
 334         if (!empty($_POST['notify3'])) {
 335                 $notify += intval($_POST['notify3']);
 336         }
 337         if (!empty($_POST['notify4'])) {
 338                 $notify += intval($_POST['notify4']);
 339         }
 340         if (!empty($_POST['notify5'])) {
 341                 $notify += intval($_POST['notify5']);
 342         }
 343         if (!empty($_POST['notify6'])) {
 344                 $notify += intval($_POST['notify6']);
 345         }
 346         if (!empty($_POST['notify7'])) {
 347                 $notify += intval($_POST['notify7']);
 348         }
 349         if (!empty($_POST['notify8'])) {
 350                 $notify += intval($_POST['notify8']);
 351         }
 352
 353         // Adjust the page flag if the account type doesn't fit to the page flag.
 354         if (($account_type == User::ACCOUNT_TYPE_PERSON) && !in_array($page_flags, [User::PAGE_FLAGS_NORMAL, User::PAGE_FLAGS_SOAPBOX, User::PAGE_FLAGS_FREELOVE])) {
 355                 $page_flags = User::PAGE_FLAGS_NORMAL;
 356         } elseif (($account_type == User::ACCOUNT_TYPE_ORGANISATION) && !in_array($page_flags, [User::PAGE_FLAGS_SOAPBOX])) {
 357                 $page_flags = User::PAGE_FLAGS_SOAPBOX;
 358         } elseif (($account_type == User::ACCOUNT_TYPE_NEWS) && !in_array($page_flags, [User::PAGE_FLAGS_SOAPBOX])) {
 359                 $page_flags = User::PAGE_FLAGS_SOAPBOX;
 360         } elseif (($account_type == User::ACCOUNT_TYPE_COMMUNITY) && !in_array($page_flags, [User::PAGE_FLAGS_COMMUNITY, User::PAGE_FLAGS_PRVGROUP])) {
 361                 $page_flags = User::PAGE_FLAGS_COMMUNITY;
 362         }
 363
 364         $err = '';
 365
 366         if ($username != $a->user['username']) {
 367                 if (strlen($username) > 40) {
 368                         $err .= DI::l10n()->t('Please use a shorter name.');
 369                 }
 370                 if (strlen($username) < 3) {
 371                         $err .= DI::l10n()->t('Name too short.');
 372                 }
 373         }
 374
 375         if ($email != $a->user['email']) {
 376                 //  check for the correct password
 377                 if (!User::authenticate(intval(local_user()), $_POST['mpassword'])) {
 378                         $err .= DI::l10n()->t('Wrong Password.');
 379                         $email = $a->user['email'];
 380                 }
 381                 //  check the email is valid
 382                 if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
 383                         $err .= DI::l10n()->t('Invalid email.');
 384                 }
 385                 //  ensure new email is not the admin mail
 386                 if (DI::config()->get('config', 'admin_email')) {
 387                         $adminlist = explode(",", str_replace(" ", "", strtolower(DI::config()->get('config', 'admin_email'))));
 388                         if (in_array(strtolower($email), $adminlist)) {
 389                                 $err .= DI::l10n()->t('Cannot change to that email.');
 390                                 $email = $a->user['email'];
 391                         }
 392                 }
 393         }
 394
 395         if (strlen($err)) {
 396                 notice($err);
 397                 return;
 398         }
 399
 400         if (($timezone != $a->user['timezone']) && strlen($timezone)) {
 401                 date_default_timezone_set($timezone);
 402         }
 403
 404         $aclFormatter = DI::aclFormatter();
 405
 406         $str_group_allow   = !empty($_POST['group_allow'])   ? $aclFormatter->toString($_POST['group_allow'])   : '';
 407         $str_contact_allow = !empty($_POST['contact_allow']) ? $aclFormatter->toString($_POST['contact_allow']) : '';
 408         $str_group_deny    = !empty($_POST['group_deny'])    ? $aclFormatter->toString($_POST['group_deny'])    : '';
 409         $str_contact_deny  = !empty($_POST['contact_deny'])  ? $aclFormatter->toString($_POST['contact_deny'])  : '';
 410
 411         DI::pConfig()->set(local_user(), 'expire', 'items', $expire_items);
 412         DI::pConfig()->set(local_user(), 'expire', 'notes', $expire_notes);
 413         DI::pConfig()->set(local_user(), 'expire', 'starred', $expire_starred);
 414         DI::pConfig()->set(local_user(), 'expire', 'photos', $expire_photos);
 415         DI::pConfig()->set(local_user(), 'expire', 'network_only', $expire_network_only);
 416
 417         DI::pConfig()->set(local_user(), 'system', 'email_textonly', $email_textonly);
 418         DI::pConfig()->set(local_user(), 'system', 'detailed_notif', $detailed_notif);
 419         DI::pConfig()->set(local_user(), 'system', 'unlisted', $unlisted);
 420
 421         if ($page_flags == User::PAGE_FLAGS_PRVGROUP) {
 422                 $hidewall = 1;
 423                 if (!$str_contact_allow && !$str_group_allow && !$str_contact_deny && !$str_group_deny) {
 424                         if ($def_gid) {
 425                                 info(DI::l10n()->t('Private forum has no privacy permissions. Using default privacy group.'). EOL);
 426                                 $str_group_allow = '<' . $def_gid . '>';
 427                         } else {
 428                                 notice(DI::l10n()->t('Private forum has no privacy permissions and no default privacy group.') . EOL);
 429                         }
 430                 }
 431         }
 432
 433         $fields = ['username' => $username, 'email' => $email, 'timezone' => $timezone,
 434                 'allow_cid' => $str_contact_allow, 'allow_gid' => $str_group_allow, 'deny_cid' => $str_contact_deny, 'deny_gid' => $str_group_deny,
 435                 'notify-flags' => $notify, 'page-flags' => $page_flags, 'account-type' => $account_type, 'default-location' => $defloc,
 436                 'allow_location' => $allow_location, 'maxreq' => $maxreq, 'expire' => $expire, 'def_gid' => $def_gid, 'blockwall' => $blockwall,
 437                 'hidewall' => $hidewall, 'blocktags' => $blocktags, 'unkmail' => $unkmail, 'cntunkmail' => $cntunkmail, 'language' => $language];
 438
 439         if ($delete_openid) {
 440                 $fields['openid'] = '';
 441                 $fields['openidserver'] = '';
 442         }
 443
 444         if (DBA::update('user', $fields, ['uid' => local_user()])) {
 445                 info(DI::l10n()->t('Settings updated.') . EOL);
 446         }
 447
 448         // clear session language
 449         unset($_SESSION['language']);
 450
 451         q("UPDATE `profile`
 452                 SET `publish` = %d,
 453                 `name` = '%s',
 454                 `net-publish` = %d,
 455                 `hide-friends` = %d
 456                 WHERE `uid` = %d",
 457                 intval($publish),
 458                 DBA::escape($username),
 459                 intval($net_publish),
 460                 intval($hide_friends),
 461                 intval(local_user())
 462         );
 463
 464         Contact::updateSelfFromUserID(local_user());
 465
 466         if (($old_visibility != $net_publish) || ($page_flags != $old_page_flags)) {
 467                 // Update global directory in background
 468                 $url = $_SESSION['my_url'];
 469                 if ($url && strlen(DI::config()->get('system', 'directory'))) {
 470                         Worker::add(PRIORITY_LOW, "Directory", $url);
 471                 }
 472         }
 473
 474         Worker::add(PRIORITY_LOW, 'ProfileUpdate', local_user());
 475
 476         // Update the global contact for the user
 477         GContact::updateForUser(local_user());
 478
 479         DI::baseUrl()->redirect('settings');
 480         return; // NOTREACHED
 481 }
 482
 483
 484 function settings_content(App $a)
 485 {
 486         $o = '';
 487         Nav::setSelected('settings');
 488
 489         if (!local_user()) {
 490                 //notice(DI::l10n()->t('Permission denied.') . EOL);
 491                 return Login::form();
 492         }
 493
 494         if (!empty($_SESSION['submanage'])) {
 495                 notice(DI::l10n()->t('Permission denied.') . EOL);
 496                 return;
 497         }
 498
 499         if (($a->argc > 1) && ($a->argv[1] === 'oauth')) {
 500                 if (($a->argc > 2) && ($a->argv[2] === 'add')) {
 501                         $tpl = Renderer::getMarkupTemplate('settings/oauth_edit.tpl');
 502                         $o .= Renderer::replaceMacros($tpl, [
 503                                 '$form_security_token' => BaseModule::getFormSecurityToken("settings_oauth"),
 504                                 '$title'        => DI::l10n()->t('Add application'),
 505                                 '$submit'       => DI::l10n()->t('Save Settings'),
 506                                 '$cancel'       => DI::l10n()->t('Cancel'),
 507                                 '$name'         => ['name', DI::l10n()->t('Name'), '', ''],
 508                                 '$key'          => ['key', DI::l10n()->t('Consumer Key'), '', ''],
 509                                 '$secret'       => ['secret', DI::l10n()->t('Consumer Secret'), '', ''],
 510                                 '$redirect'     => ['redirect', DI::l10n()->t('Redirect'), '', ''],
 511                                 '$icon'         => ['icon', DI::l10n()->t('Icon url'), '', ''],
 512                         ]);
 513                         return $o;
 514                 }
 515
 516                 if (($a->argc > 3) && ($a->argv[2] === 'edit')) {
 517                         $r = q("SELECT * FROM clients WHERE client_id='%s' AND uid=%d",
 518                                         DBA::escape($a->argv[3]),
 519                                         local_user());
 520
 521                         if (!DBA::isResult($r)) {
 522                                 notice(DI::l10n()->t("You can't edit this application."));
 523                                 return;
 524                         }
 525                         $app = $r[0];
 526
 527                         $tpl = Renderer::getMarkupTemplate('settings/oauth_edit.tpl');
 528                         $o .= Renderer::replaceMacros($tpl, [
 529                                 '$form_security_token' => BaseModule::getFormSecurityToken("settings_oauth"),
 530                                 '$title'        => DI::l10n()->t('Add application'),
 531                                 '$submit'       => DI::l10n()->t('Update'),
 532                                 '$cancel'       => DI::l10n()->t('Cancel'),
 533                                 '$name'         => ['name', DI::l10n()->t('Name'), $app['name'] , ''],
 534                                 '$key'          => ['key', DI::l10n()->t('Consumer Key'), $app['client_id'], ''],
 535                                 '$secret'       => ['secret', DI::l10n()->t('Consumer Secret'), $app['pw'], ''],
 536                                 '$redirect'     => ['redirect', DI::l10n()->t('Redirect'), $app['redirect_uri'], ''],
 537                                 '$icon'         => ['icon', DI::l10n()->t('Icon url'), $app['icon'], ''],
 538                         ]);
 539                         return $o;
 540                 }
 541
 542                 if (($a->argc > 3) && ($a->argv[2] === 'delete')) {
 543                         BaseModule::checkFormSecurityTokenRedirectOnError('/settings/oauth', 'settings_oauth', 't');
 544
 545                         DBA::delete('clients', ['client_id' => $a->argv[3], 'uid' => local_user()]);
 546                         DI::baseUrl()->redirect('settings/oauth/', true);
 547                         return;
 548                 }
 549
 550                 /// @TODO validate result with DBA::isResult()
 551                 $r = q("SELECT clients.*, tokens.id as oauth_token, (clients.uid=%d) AS my
 552                                 FROM clients
 553                                 LEFT JOIN tokens ON clients.client_id=tokens.client_id
 554                                 WHERE clients.uid IN (%d, 0)",
 555                                 local_user(),
 556                                 local_user());
 557
 558
 559                 $tpl = Renderer::getMarkupTemplate('settings/oauth.tpl');
 560                 $o .= Renderer::replaceMacros($tpl, [
 561                         '$form_security_token' => BaseModule::getFormSecurityToken("settings_oauth"),
 562                         '$baseurl'      => DI::baseUrl()->get(true),
 563                         '$title'        => DI::l10n()->t('Connected Apps'),
 564                         '$add'          => DI::l10n()->t('Add application'),
 565                         '$edit'         => DI::l10n()->t('Edit'),
 566                         '$delete'               => DI::l10n()->t('Delete'),
 567                         '$consumerkey' => DI::l10n()->t('Client key starts with'),
 568                         '$noname'       => DI::l10n()->t('No name'),
 569                         '$remove'       => DI::l10n()->t('Remove authorization'),
 570                         '$apps'         => $r,
 571                 ]);
 572                 return $o;
 573         }
 574
 575         if (($a->argc > 1) && ($a->argv[1] === 'addon')) {
 576                 $settings_addons = "";
 577
 578                 $r = q("SELECT * FROM `hook` WHERE `hook` = 'addon_settings' ");
 579                 if (!DBA::isResult($r)) {
 580                         $settings_addons = DI::l10n()->t('No Addon settings configured');
 581                 }
 582
 583                 Hook::callAll('addon_settings', $settings_addons);
 584
 585
 586                 $tpl = Renderer::getMarkupTemplate('settings/addons.tpl');
 587                 $o .= Renderer::replaceMacros($tpl, [
 588                         '$form_security_token' => BaseModule::getFormSecurityToken("settings_addon"),
 589                         '$title'        => DI::l10n()->t('Addon Settings'),
 590                         '$settings_addons' => $settings_addons
 591                 ]);
 592                 return $o;
 593         }
 594
 595         if (($a->argc > 1) && ($a->argv[1] === 'features')) {
 596
 597                 $arr = [];
 598                 $features = Feature::get();
 599                 foreach ($features as $fname => $fdata) {
 600                         $arr[$fname] = [];
 601                         $arr[$fname][0] = $fdata[0];
 602                         foreach (array_slice($fdata,1) as $f) {
 603                                 $arr[$fname][1][] = ['feature_' . $f[0], $f[1], Feature::isEnabled(local_user(), $f[0]), $f[2]];
 604                         }
 605                 }
 606
 607                 $tpl = Renderer::getMarkupTemplate('settings/features.tpl');
 608                 $o .= Renderer::replaceMacros($tpl, [
 609                         '$form_security_token' => BaseModule::getFormSecurityToken("settings_features"),
 610                         '$title'               => DI::l10n()->t('Additional Features'),
 611                         '$features'            => $arr,
 612                         '$submit'              => DI::l10n()->t('Save Settings'),
 613                 ]);
 614                 return $o;
 615         }
 616
 617         if (($a->argc > 1) && ($a->argv[1] === 'connectors')) {
 618                 $accept_only_sharer        = intval(DI::pConfig()->get(local_user(), 'system', 'accept_only_sharer'));
 619                 $disable_cw                = intval(DI::pConfig()->get(local_user(), 'system', 'disable_cw'));
 620                 $no_intelligent_shortening = intval(DI::pConfig()->get(local_user(), 'system', 'no_intelligent_shortening'));
 621                 $attach_link_title         = intval(DI::pConfig()->get(local_user(), 'system', 'attach_link_title'));
 622                 $ostatus_autofriend        = intval(DI::pConfig()->get(local_user(), 'system', 'ostatus_autofriend'));
 623                 $default_group             = DI::pConfig()->get(local_user(), 'ostatus', 'default_group');
 624                 $legacy_contact            = DI::pConfig()->get(local_user(), 'ostatus', 'legacy_contact');
 625
 626                 if (!empty($legacy_contact)) {
 627                         /// @todo Isn't it supposed to be a $a->internalRedirect() call?
 628                         DI::page()['htmlhead'] = '<meta http-equiv="refresh" content="0; URL=' . DI::baseUrl().'/ostatus_subscribe?url=' . urlencode($legacy_contact) . '">';
 629                 }
 630
 631                 $settings_connectors = '';
 632                 Hook::callAll('connector_settings', $settings_connectors);
 633
 634                 if (is_site_admin()) {
 635                         $diasp_enabled = DI::l10n()->t('Built-in support for %s connectivity is %s', DI::l10n()->t('Diaspora (Socialhome, Hubzilla)'), ((DI::config()->get('system', 'diaspora_enabled')) ? DI::l10n()->t('enabled') : DI::l10n()->t('disabled')));
 636                         $ostat_enabled = DI::l10n()->t('Built-in support for %s connectivity is %s', DI::l10n()->t('OStatus (GNU Social)'), ((DI::config()->get('system', 'ostatus_disabled')) ? DI::l10n()->t('disabled') : DI::l10n()->t('enabled')));
 637                 } else {
 638                         $diasp_enabled = "";
 639                         $ostat_enabled = "";
 640                 }
 641
 642                 $mail_disabled = ((function_exists('imap_open') && (!DI::config()->get('system', 'imap_disabled'))) ? 0 : 1);
 643                 if (DI::config()->get('system', 'dfrn_only')) {
 644                         $mail_disabled = 1;
 645                 }
 646                 if (!$mail_disabled) {
 647                         $r = q("SELECT * FROM `mailacct` WHERE `uid` = %d LIMIT 1",
 648                                 local_user()
 649                         );
 650                 } else {
 651                         $r = null;
 652                 }
 653
 654                 $mail_server       = ((DBA::isResult($r)) ? $r[0]['server'] : '');
 655                 $mail_port         = ((DBA::isResult($r) && intval($r[0]['port'])) ? intval($r[0]['port']) : '');
 656                 $mail_ssl          = ((DBA::isResult($r)) ? $r[0]['ssltype'] : '');
 657                 $mail_user         = ((DBA::isResult($r)) ? $r[0]['user'] : '');
 658                 $mail_replyto      = ((DBA::isResult($r)) ? $r[0]['reply_to'] : '');
 659                 $mail_pubmail      = ((DBA::isResult($r)) ? $r[0]['pubmail'] : 0);
 660                 $mail_action       = ((DBA::isResult($r)) ? $r[0]['action'] : 0);
 661                 $mail_movetofolder = ((DBA::isResult($r)) ? $r[0]['movetofolder'] : '');
 662                 $mail_chk          = ((DBA::isResult($r)) ? $r[0]['last_check'] : DBA::NULL_DATETIME);
 663
 664
 665                 $tpl = Renderer::getMarkupTemplate('settings/connectors.tpl');
 666
 667                 $mail_disabled_message = ($mail_disabled ? DI::l10n()->t('Email access is disabled on this site.') : '');
 668
 669                 $ssl_options = ['TLS' => 'TLS', 'SSL' => 'SSL'];
 670
 671                 if (DI::config()->get('system', 'insecure_imap')) {
 672                         $ssl_options['notls'] = DI::l10n()->t('None');
 673                 }
 674
 675                 $o .= Renderer::replaceMacros($tpl, [
 676                         '$form_security_token' => BaseModule::getFormSecurityToken("settings_connectors"),
 677
 678                         '$title'        => DI::l10n()->t('Social Networks'),
 679
 680                         '$diasp_enabled' => $diasp_enabled,
 681                         '$ostat_enabled' => $ostat_enabled,
 682
 683                         '$general_settings' => DI::l10n()->t('General Social Media Settings'),
 684                         '$accept_only_sharer' => ['accept_only_sharer', DI::l10n()->t('Accept only top level posts by contacts you follow'), $accept_only_sharer, DI::l10n()->t('The system does an auto completion of threads when a comment arrives. This has got the side effect that you can receive posts that had been started by a non-follower but had been commented by someone you follow. This setting deactivates this behaviour. When activated, you strictly only will receive posts from people you really do follow.')],
 685                         '$disable_cw' => ['disable_cw', DI::l10n()->t('Disable Content Warning'), $disable_cw, DI::l10n()->t('Users on networks like Mastodon or Pleroma are able to set a content warning field which collapse their post by default. This disables the automatic collapsing and sets the content warning as the post title. Doesn\'t affect any other content filtering you eventually set up.')],
 686                         '$no_intelligent_shortening' => ['no_intelligent_shortening', DI::l10n()->t('Disable intelligent shortening'), $no_intelligent_shortening, DI::l10n()->t('Normally the system tries to find the best link to add to shortened posts. If this option is enabled then every shortened post will always point to the original friendica post.')],
 687                         '$attach_link_title' => ['attach_link_title', DI::l10n()->t('Attach the link title'), $attach_link_title, DI::l10n()->t('When activated, the title of the attached link will be added as a title on posts to Diaspora. This is mostly helpful with "remote-self" contacts that share feed content.')],
 688                         '$ostatus_autofriend' => ['snautofollow', DI::l10n()->t("Automatically follow any GNU Social \x28OStatus\x29 followers/mentioners"), $ostatus_autofriend, DI::l10n()->t('If you receive a message from an unknown OStatus user, this option decides what to do. If it is checked, a new contact will be created for every unknown user.')],
 689                         '$default_group' => Group::displayGroupSelection(local_user(), $default_group, DI::l10n()->t("Default group for OStatus contacts")),
 690                         '$legacy_contact' => ['legacy_contact', DI::l10n()->t('Your legacy GNU Social account'), $legacy_contact, DI::l10n()->t("If you enter your old GNU Social/Statusnet account name here \x28in the format user@domain.tld\x29, your contacts will be added automatically. The field will be emptied when done.")],
 691
 692                         '$repair_ostatus_url' => DI::baseUrl() . '/repair_ostatus',
 693                         '$repair_ostatus_text' => DI::l10n()->t('Repair OStatus subscriptions'),
 694
 695                         '$settings_connectors' => $settings_connectors,
 696
 697                         '$h_imap' => DI::l10n()->t('Email/Mailbox Setup'),
 698                         '$imap_desc' => DI::l10n()->t("If you wish to communicate with email contacts using this service \x28optional\x29, please specify how to connect to your mailbox."),
 699                         '$imap_lastcheck' => ['imap_lastcheck', DI::l10n()->t('Last successful email check:'), $mail_chk, ''],
 700                         '$mail_disabled' => $mail_disabled_message,
 701                         '$mail_server'  => ['mail_server',      DI::l10n()->t('IMAP server name:'), $mail_server, ''],
 702                         '$mail_port'    => ['mail_port',        DI::l10n()->t('IMAP port:'), $mail_port, ''],
 703                         '$mail_ssl'     => ['mail_ssl',         DI::l10n()->t('Security:'), strtoupper($mail_ssl), '', $ssl_options],
 704                         '$mail_user'    => ['mail_user',        DI::l10n()->t('Email login name:'), $mail_user, ''],
 705                         '$mail_pass'    => ['mail_pass',        DI::l10n()->t('Email password:'), '', ''],
 706                         '$mail_replyto' => ['mail_replyto',     DI::l10n()->t('Reply-to address:'), $mail_replyto, 'Optional'],
 707                         '$mail_pubmail' => ['mail_pubmail',     DI::l10n()->t('Send public posts to all email contacts:'), $mail_pubmail, ''],
 708                         '$mail_action'  => ['mail_action',      DI::l10n()->t('Action after import:'), $mail_action, '', [0 => DI::l10n()->t('None'), 1 => DI::l10n()->t('Delete'), 2 => DI::l10n()->t('Mark as seen'), 3 => DI::l10n()->t('Move to folder')]],
 709                         '$mail_movetofolder' => ['mail_movetofolder', DI::l10n()->t('Move to folder:'), $mail_movetofolder, ''],
 710                         '$submit' => DI::l10n()->t('Save Settings'),
 711                 ]);
 712
 713                 Hook::callAll('display_settings', $o);
 714                 return $o;
 715         }
 716
 717         /*
 718          * ACCOUNT SETTINGS
 719          */
 720
 721         $profile = DBA::selectFirst('profile', [], ['uid' => local_user()]);
 722         if (!DBA::isResult($profile)) {
 723                 notice(DI::l10n()->t('Unable to find your profile. Please contact your admin.') . EOL);
 724                 return;
 725         }
 726
 727         $username   = $a->user['username'];
 728         $email      = $a->user['email'];
 729         $nickname   = $a->user['nickname'];
 730         $timezone   = $a->user['timezone'];
 731         $language   = $a->user['language'];
 732         $notify     = $a->user['notify-flags'];
 733         $defloc     = $a->user['default-location'];
 734         $openid     = $a->user['openid'];
 735         $maxreq     = $a->user['maxreq'];
 736         $expire     = ((intval($a->user['expire'])) ? $a->user['expire'] : '');
 737         $unkmail    = $a->user['unkmail'];
 738         $cntunkmail = $a->user['cntunkmail'];
 739
 740         $expire_items = DI::pConfig()->get(local_user(), 'expire', 'items', true);
 741         $expire_notes = DI::pConfig()->get(local_user(), 'expire', 'notes', true);
 742         $expire_starred = DI::pConfig()->get(local_user(), 'expire', 'starred', true);
 743         $expire_photos = DI::pConfig()->get(local_user(), 'expire', 'photos', false);
 744         $expire_network_only = DI::pConfig()->get(local_user(), 'expire', 'network_only', false);
 745
 746         if (!strlen($a->user['timezone'])) {
 747                 $timezone = date_default_timezone_get();
 748         }
 749
 750         // Set the account type to "Community" when the page is a community page but the account type doesn't fit
 751         // This is only happening on the first visit after the update
 752         if (in_array($a->user['page-flags'], [User::PAGE_FLAGS_COMMUNITY, User::PAGE_FLAGS_PRVGROUP]) &&
 753                 ($a->user['account-type'] != User::ACCOUNT_TYPE_COMMUNITY))
 754                 $a->user['account-type'] = User::ACCOUNT_TYPE_COMMUNITY;
 755
 756         $pageset_tpl = Renderer::getMarkupTemplate('settings/pagetypes.tpl');
 757
 758         $pagetype = Renderer::replaceMacros($pageset_tpl, [
 759                 '$account_types'        => DI::l10n()->t("Account Types"),
 760                 '$user'                 => DI::l10n()->t("Personal Page Subtypes"),
 761                 '$community'            => DI::l10n()->t("Community Forum Subtypes"),
 762                 '$account_type'         => $a->user['account-type'],
 763                 '$type_person'          => User::ACCOUNT_TYPE_PERSON,
 764                 '$type_organisation'    => User::ACCOUNT_TYPE_ORGANISATION,
 765                 '$type_news'            => User::ACCOUNT_TYPE_NEWS,
 766                 '$type_community'       => User::ACCOUNT_TYPE_COMMUNITY,
 767
 768                 '$account_person'       => ['account-type', DI::l10n()->t('Personal Page'), User::ACCOUNT_TYPE_PERSON,
 769                                                                         DI::l10n()->t('Account for a personal profile.'),
 770                                                                         ($a->user['account-type'] == User::ACCOUNT_TYPE_PERSON)],
 771
 772                 '$account_organisation' => ['account-type', DI::l10n()->t('Organisation Page'), User::ACCOUNT_TYPE_ORGANISATION,
 773                                                                         DI::l10n()->t('Account for an organisation that automatically approves contact requests as "Followers".'),
 774                                                                         ($a->user['account-type'] == User::ACCOUNT_TYPE_ORGANISATION)],
 775
 776                 '$account_news'         => ['account-type', DI::l10n()->t('News Page'), User::ACCOUNT_TYPE_NEWS,
 777                                                                         DI::l10n()->t('Account for a news reflector that automatically approves contact requests as "Followers".'),
 778                                                                         ($a->user['account-type'] == User::ACCOUNT_TYPE_NEWS)],
 779
 780                 '$account_community'    => ['account-type', DI::l10n()->t('Community Forum'), User::ACCOUNT_TYPE_COMMUNITY,
 781                                                                         DI::l10n()->t('Account for community discussions.'),
 782                                                                         ($a->user['account-type'] == User::ACCOUNT_TYPE_COMMUNITY)],
 783
 784                 '$page_normal'          => ['page-flags', DI::l10n()->t('Normal Account Page'), User::PAGE_FLAGS_NORMAL,
 785                                                                         DI::l10n()->t('Account for a regular personal profile that requires manual approval of "Friends" and "Followers".'),
 786                                                                         ($a->user['page-flags'] == User::PAGE_FLAGS_NORMAL)],
 787
 788                 '$page_soapbox'         => ['page-flags', DI::l10n()->t('Soapbox Page'), User::PAGE_FLAGS_SOAPBOX,
 789                                                                         DI::l10n()->t('Account for a public profile that automatically approves contact requests as "Followers".'),
 790                                                                         ($a->user['page-flags'] == User::PAGE_FLAGS_SOAPBOX)],
 791
 792                 '$page_community'       => ['page-flags', DI::l10n()->t('Public Forum'), User::PAGE_FLAGS_COMMUNITY,
 793                                                                         DI::l10n()->t('Automatically approves all contact requests.'),
 794                                                                         ($a->user['page-flags'] == User::PAGE_FLAGS_COMMUNITY)],
 795
 796                 '$page_freelove'        => ['page-flags', DI::l10n()->t('Automatic Friend Page'), User::PAGE_FLAGS_FREELOVE,
 797                                                                         DI::l10n()->t('Account for a popular profile that automatically approves contact requests as "Friends".'),
 798                                                                         ($a->user['page-flags'] == User::PAGE_FLAGS_FREELOVE)],
 799
 800                 '$page_prvgroup'        => ['page-flags', DI::l10n()->t('Private Forum [Experimental]'), User::PAGE_FLAGS_PRVGROUP,
 801                                                                         DI::l10n()->t('Requires manual approval of contact requests.'),
 802                                                                         ($a->user['page-flags'] == User::PAGE_FLAGS_PRVGROUP)],
 803
 804
 805         ]);
 806
 807         $noid = DI::config()->get('system', 'no_openid');
 808
 809         if ($noid) {
 810                 $openid_field = false;
 811         } else {
 812                 $openid_field = ['openid_url', DI::l10n()->t('OpenID:'), $openid, DI::l10n()->t("\x28Optional\x29 Allow this OpenID to login to this account."), "", "readonly", "url"];
 813         }
 814
 815         $opt_tpl = Renderer::getMarkupTemplate("field_checkbox.tpl");
 816         if (DI::config()->get('system', 'publish_all')) {
 817                 $profile_in_dir = '<input type="hidden" name="profile_in_directory" value="1" />';
 818         } else {
 819                 $profile_in_dir = Renderer::replaceMacros($opt_tpl, [
 820                         '$field' => ['profile_in_directory', DI::l10n()->t('Publish your profile in your local site directory?'), $profile['publish'], DI::l10n()->t('Your profile will be published in this node\'s <a href="%s">local directory</a>. Your profile details may be publicly visible depending on the system settings.', DI::baseUrl().'/directory')]
 821                 ]);
 822         }
 823
 824         if (strlen(DI::config()->get('system', 'directory'))) {
 825                 $net_pub_desc = ' ' . DI::l10n()->t('Your profile will also be published in the global friendica directories (e.g. <a href="%s">%s</a>).', DI::config()->get('system', 'directory'), DI::config()->get('system', 'directory'));
 826         } else {
 827                 $net_pub_desc = '';
 828         }
 829
 830         $profile_in_net_dir = Renderer::replaceMacros($opt_tpl, [
 831                 '$field' => ['profile_in_netdirectory', DI::l10n()->t('Allow your profile to be searchable globally?'), $profile['net-publish'], DI::l10n()->t("Activate this setting if you want others to easily find and follow you. Your profile will be searchable on remote systems. This setting also determines whether Friendica will inform search engines that your profile should be indexed or not.") . $net_pub_desc]
 832         ]);
 833
 834         $hide_friends = Renderer::replaceMacros($opt_tpl, [
 835                 '$field' => ['hide-friends', DI::l10n()->t('Hide your contact/friend list from viewers of your default profile?'), $profile['hide-friends'], DI::l10n()->t('Your contact list won\'t be shown in your default profile page. You can decide to show your contact list separately for each additional profile you create')],
 836         ]);
 837
 838         $hide_wall = Renderer::replaceMacros($opt_tpl, [
 839                 '$field' => ['hidewall', DI::l10n()->t('Hide your profile details from anonymous viewers?'), $a->user['hidewall'], DI::l10n()->t('Anonymous visitors will only see your profile picture, your display name and the nickname you are using on your profile page. Your public posts and replies will still be accessible by other means.')],
 840         ]);
 841
 842         $unlisted = Renderer::replaceMacros($opt_tpl, [
 843                 '$field' => ['unlisted', DI::l10n()->t('Should public posts be unlisted?'), DI::pConfig()->get(local_user(), 'system', 'unlisted'), DI::l10n()->t('Your public posts will not appear on the community page or in search results, nor will they be transported to relay servers. However they can appear on public feeds from other servers.')],
 844         ]);
 845
 846         $blockwall = Renderer::replaceMacros($opt_tpl, [
 847                 '$field' => ['blockwall', DI::l10n()->t('Allow friends to post to your profile page?'), (intval($a->user['blockwall']) ? '0' : '1'), DI::l10n()->t('Your contacts may write posts on your profile wall. These posts will be distributed to your contacts')],
 848         ]);
 849
 850         $blocktags = Renderer::replaceMacros($opt_tpl, [
 851                 '$field' => ['blocktags', DI::l10n()->t('Allow friends to tag your posts?'), (intval($a->user['blocktags']) ? '0' : '1'), DI::l10n()->t('Your contacts can add additional tags to your posts.')],
 852         ]);
 853
 854         $unkmail = Renderer::replaceMacros($opt_tpl, [
 855                 '$field' => ['unkmail', DI::l10n()->t('Permit unknown people to send you private mail?'), $unkmail, DI::l10n()->t('Friendica network users may send you private messages even if they are not in your contact list.')],
 856         ]);
 857
 858         $tpl_addr = Renderer::getMarkupTemplate('settings/nick_set.tpl');
 859
 860         $prof_addr = Renderer::replaceMacros($tpl_addr,[
 861                 '$desc' => DI::l10n()->t("Your Identity Address is <strong>'%s'</strong> or '%s'.", $nickname . '@' . DI::baseUrl()->getHostname() . DI::baseUrl()->getUrlPath(), DI::baseUrl() . '/profile/' . $nickname),
 862                 '$basepath' => DI::baseUrl()->getHostname()
 863         ]);
 864
 865         $stpl = Renderer::getMarkupTemplate('settings/settings.tpl');
 866
 867         $expire_arr = [
 868                 'days' => ['expire',  DI::l10n()->t("Automatically expire posts after this many days:"), $expire, DI::l10n()->t('If empty, posts will not expire. Expired posts will be deleted')],
 869                 'label' => DI::l10n()->t('Expiration settings'),
 870                 'items' => ['expire_items', DI::l10n()->t('Expire posts'), $expire_items, DI::l10n()->t('When activated, posts and comments will be expired.')],
 871                 'notes' => ['expire_notes', DI::l10n()->t('Expire personal notes'), $expire_notes, DI::l10n()->t('When activated, the personal notes on your profile page will be expired.')],
 872                 'starred' => ['expire_starred', DI::l10n()->t('Expire starred posts'), $expire_starred, DI::l10n()->t('Starring posts keeps them from being expired. That behaviour is overwritten by this setting.')],
 873                 'photos' => ['expire_photos', DI::l10n()->t('Expire photos'), $expire_photos, DI::l10n()->t('When activated, photos will be expired.')],
 874                 'network_only' => ['expire_network_only', DI::l10n()->t('Only expire posts by others'), $expire_network_only, DI::l10n()->t('When activated, your own posts never expire. Then the settings above are only valid for posts you received.')],
 875         ];
 876
 877         $group_select = Group::displayGroupSelection(local_user(), $a->user['def_gid']);
 878
 879         // Private/public post links for the non-JS ACL form
 880         $private_post = 1;
 881         if (!empty($_REQUEST['public']) && !$_REQUEST['public']) {
 882                 $private_post = 0;
 883         }
 884
 885         $query_str = DI::args()->getQueryString();
 886         if (strpos($query_str, 'public=1') !== false) {
 887                 $query_str = str_replace(['?public=1', '&public=1'], ['', ''], $query_str);
 888         }
 889
 890         // I think $a->query_string may never have ? in it, but I could be wrong
 891         // It looks like it's from the index.php?q=[etc] rewrite that the web
 892         // server does, which converts any ? to &, e.g. suggest&ignore=61 for suggest?ignore=61
 893         if (strpos($query_str, '?') === false) {
 894                 $public_post_link = '?public=1';
 895         } else {
 896                 $public_post_link = '&public=1';
 897         }
 898
 899         /* Installed langs */
 900         $lang_choices = DI::l10n()->getAvailableLanguages();
 901
 902         /// @TODO Fix indending (or so)
 903         $o .= Renderer::replaceMacros($stpl, [
 904                 '$ptitle'       => DI::l10n()->t('Account Settings'),
 905
 906                 '$submit'       => DI::l10n()->t('Save Settings'),
 907                 '$baseurl' => DI::baseUrl()->get(true),
 908                 '$uid' => local_user(),
 909                 '$form_security_token' => BaseModule::getFormSecurityToken("settings"),
 910                 '$nickname_block' => $prof_addr,
 911
 912                 '$h_pass'       => DI::l10n()->t('Password Settings'),
 913                 '$password1'=> ['password', DI::l10n()->t('New Password:'), '', DI::l10n()->t('Allowed characters are a-z, A-Z, 0-9 and special characters except white spaces, accentuated letters and colon (:).')],
 914                 '$password2'=> ['confirm', DI::l10n()->t('Confirm:'), '', DI::l10n()->t('Leave password fields blank unless changing')],
 915                 '$password3'=> ['opassword', DI::l10n()->t('Current Password:'), '', DI::l10n()->t('Your current password to confirm the changes')],
 916                 '$password4'=> ['mpassword', DI::l10n()->t('Password:'), '', DI::l10n()->t('Your current password to confirm the changes')],
 917                 '$oid_enable' => (!DI::config()->get('system', 'no_openid')),
 918                 '$openid'       => $openid_field,
 919                 '$delete_openid' => ['delete_openid', DI::l10n()->t('Delete OpenID URL'), false, ''],
 920
 921                 '$h_basic'      => DI::l10n()->t('Basic Settings'),
 922                 '$username' => ['username',  DI::l10n()->t('Full Name:'), $username, ''],
 923                 '$email'        => ['email', DI::l10n()->t('Email Address:'), $email, '', '', '', 'email'],
 924                 '$timezone' => ['timezone_select' , DI::l10n()->t('Your Timezone:'), Temporal::getTimezoneSelect($timezone), ''],
 925                 '$language' => ['language', DI::l10n()->t('Your Language:'), $language, DI::l10n()->t('Set the language we use to show you friendica interface and to send you emails'), $lang_choices],
 926                 '$defloc'       => ['defloc', DI::l10n()->t('Default Post Location:'), $defloc, ''],
 927                 '$allowloc' => ['allow_location', DI::l10n()->t('Use Browser Location:'), ($a->user['allow_location'] == 1), ''],
 928
 929
 930                 '$h_prv'        => DI::l10n()->t('Security and Privacy Settings'),
 931
 932                 '$maxreq'       => ['maxreq', DI::l10n()->t('Maximum Friend Requests/Day:'), $maxreq , DI::l10n()->t("\x28to prevent spam abuse\x29")],
 933                 '$permissions' => DI::l10n()->t('Default Post Permissions'),
 934                 '$permdesc' => DI::l10n()->t("\x28click to open/close\x29"),
 935                 '$visibility' => $profile['net-publish'],
 936                 '$aclselect' => ACL::getFullSelectorHTML(DI::page(), $a->user),
 937                 '$blockwall'=> $blockwall, // array('blockwall', DI::l10n()->t('Allow friends to post to your profile page:'), !$blockwall, ''),
 938                 '$blocktags'=> $blocktags, // array('blocktags', DI::l10n()->t('Allow friends to tag your posts:'), !$blocktags, ''),
 939
 940                 // ACL permissions box
 941                 '$group_perms' => DI::l10n()->t('Show to Groups'),
 942                 '$contact_perms' => DI::l10n()->t('Show to Contacts'),
 943                 '$private' => DI::l10n()->t('Default Private Post'),
 944                 '$public' => DI::l10n()->t('Default Public Post'),
 945                 '$is_private' => $private_post,
 946                 '$return_path' => $query_str,
 947                 '$public_link' => $public_post_link,
 948                 '$settings_perms' => DI::l10n()->t('Default Permissions for New Posts'),
 949
 950                 '$group_select' => $group_select,
 951
 952
 953                 '$expire'       => $expire_arr,
 954
 955                 '$profile_in_dir' => $profile_in_dir,
 956                 '$profile_in_net_dir' => $profile_in_net_dir,
 957                 '$hide_friends' => $hide_friends,
 958                 '$hide_wall' => $hide_wall,
 959                 '$unlisted' => $unlisted,
 960                 '$unkmail' => $unkmail,
 961                 '$cntunkmail'   => ['cntunkmail', DI::l10n()->t('Maximum private messages per day from unknown people:'), $cntunkmail , DI::l10n()->t("\x28to prevent spam abuse\x29")],
 962
 963
 964                 '$h_not'        => DI::l10n()->t('Notification Settings'),
 965                 '$lbl_not'      => DI::l10n()->t('Send a notification email when:'),
 966                 '$notify1'      => ['notify1', DI::l10n()->t('You receive an introduction'), ($notify & Type::INTRO), Type::INTRO, ''],
 967                 '$notify2'      => ['notify2', DI::l10n()->t('Your introductions are confirmed'), ($notify & Type::CONFIRM), Type::CONFIRM, ''],
 968                 '$notify3'      => ['notify3', DI::l10n()->t('Someone writes on your profile wall'), ($notify & Type::WALL), Type::WALL, ''],
 969                 '$notify4'      => ['notify4', DI::l10n()->t('Someone writes a followup comment'), ($notify & Type::COMMENT), Type::COMMENT, ''],
 970                 '$notify5'      => ['notify5', DI::l10n()->t('You receive a private message'), ($notify & Type::MAIL), Type::MAIL, ''],
 971                 '$notify6'  => ['notify6', DI::l10n()->t('You receive a friend suggestion'), ($notify & Type::SUGGEST), Type::SUGGEST, ''],
 972                 '$notify7'  => ['notify7', DI::l10n()->t('You are tagged in a post'), ($notify & Type::TAG_SELF), Type::TAG_SELF, ''],
 973                 '$notify8'  => ['notify8', DI::l10n()->t('You are poked/prodded/etc. in a post'), ($notify & Type::POKE), Type::POKE, ''],
 974
 975                 '$desktop_notifications' => ['desktop_notifications', DI::l10n()->t('Activate desktop notifications') , false, DI::l10n()->t('Show desktop popup on new notifications')],
 976
 977                 '$email_textonly' => ['email_textonly', DI::l10n()->t('Text-only notification emails'),
 978                                                                         DI::pConfig()->get(local_user(), 'system', 'email_textonly'),
 979                                                                         DI::l10n()->t('Send text only notification emails, without the html part')],
 980
 981                 '$detailed_notif' => ['detailed_notif', DI::l10n()->t('Show detailled notifications'),
 982                                                                         DI::pConfig()->get(local_user(), 'system', 'detailed_notif'),
 983                                                                         DI::l10n()->t('Per default, notifications are condensed to a single notification per item. When enabled every notification is displayed.')],
 984
 985                 '$h_advn' => DI::l10n()->t('Advanced Account/Page Type Settings'),
 986                 '$h_descadvn' => DI::l10n()->t('Change the behaviour of this account for special situations'),
 987                 '$pagetype' => $pagetype,
 988
 989                 '$importcontact' => DI::l10n()->t('Import Contacts'),
 990                 '$importcontact_text' => DI::l10n()->t('Upload a CSV file that contains the handle of your followed accounts in the first column you exported from the old account.'),
 991                 '$importcontact_button' => DI::l10n()->t('Upload File'),
 992                 '$importcontact_maxsize' => DI::config()->get('system', 'max_csv_file_size', 30720),
 993                 '$relocate' => DI::l10n()->t('Relocate'),
 994                 '$relocate_text' => DI::l10n()->t("If you have moved this profile from another server, and some of your contacts don't receive your updates, try pushing this button."),
 995                 '$relocate_button' => DI::l10n()->t("Resend relocate message to contacts"),
 996
 997         ]);
 998
 999         Hook::callAll('settings_form', $o);
1000
1001         $o .= '</form>' . "\r\n";
1002
1003         return $o;
1004
1005 }