mod/settings.php

   1 <?php
   2 /**
   3  * @copyright Copyright (C) 2020, Friendica
   4  *
   5  * @license GNU AGPL version 3 or any later version
   6  *
   7  * This program is free software: you can redistribute it and/or modify
   8  * it under the terms of the GNU Affero General Public License as
   9  * published by the Free Software Foundation, either version 3 of the
  10  * License, or (at your option) any later version.
  11  *
  12  * This program is distributed in the hope that it will be useful,
  13  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  14  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  15  * GNU Affero General Public License for more details.
  16  *
  17  * You should have received a copy of the GNU Affero General Public License
  18  * along with this program.  If not, see <https://www.gnu.org/licenses/>.
  19  *
  20  */
  21
  22 use Friendica\App;
  23 use Friendica\BaseModule;
  24 use Friendica\Content\Feature;
  25 use Friendica\Content\Nav;
  26 use Friendica\Core\ACL;
  27 use Friendica\Core\Hook;
  28 use Friendica\Core\Logger;
  29 use Friendica\Core\Renderer;
  30 use Friendica\Core\Theme;
  31 use Friendica\Core\Worker;
  32 use Friendica\Database\DBA;
  33 use Friendica\DI;
  34 use Friendica\Model\Contact;
  35 use Friendica\Model\GContact;
  36 use Friendica\Model\Group;
  37 use Friendica\Model\Notify\Type;
  38 use Friendica\Model\User;
  39 use Friendica\Module\BaseSettings;
  40 use Friendica\Module\Security\Login;
  41 use Friendica\Protocol\Email;
  42 use Friendica\Util\Strings;
  43 use Friendica\Util\Temporal;
  44 use Friendica\Worker\Delivery;
  45
  46 function settings_init(App $a)
  47 {
  48         if (!local_user()) {
  49                 notice(DI::l10n()->t('Permission denied.'));
  50                 return;
  51         }
  52
  53         BaseSettings::content();
  54 }
  55
  56 function settings_post(App $a)
  57 {
  58         if (!local_user()) {
  59                 return;
  60         }
  61
  62         if (!empty($_SESSION['submanage'])) {
  63                 return;
  64         }
  65
  66         if (count($a->user) && !empty($a->user['uid']) && $a->user['uid'] != local_user()) {
  67                 notice(DI::l10n()->t('Permission denied.') . EOL);
  68                 return;
  69         }
  70
  71         $old_page_flags = $a->user['page-flags'];
  72
  73         if (($a->argc > 1) && ($a->argv[1] === 'oauth') && !empty($_POST['remove'])) {
  74                 BaseModule::checkFormSecurityTokenRedirectOnError('/settings/oauth', 'settings_oauth');
  75
  76                 $key = $_POST['remove'];
  77                 DBA::delete('tokens', ['id' => $key, 'uid' => local_user()]);
  78                 DI::baseUrl()->redirect('settings/oauth/', true);
  79                 return;
  80         }
  81
  82         if (($a->argc > 2) && ($a->argv[1] === 'oauth')  && ($a->argv[2] === 'edit'||($a->argv[2] === 'add')) && !empty($_POST['submit'])) {
  83                 BaseModule::checkFormSecurityTokenRedirectOnError('/settings/oauth', 'settings_oauth');
  84
  85                 $name     = $_POST['name']     ?? '';
  86                 $key      = $_POST['key']      ?? '';
  87                 $secret   = $_POST['secret']   ?? '';
  88                 $redirect = $_POST['redirect'] ?? '';
  89                 $icon     = $_POST['icon']     ?? '';
  90
  91                 if ($name == "" || $key == "" || $secret == "") {
  92                         notice(DI::l10n()->t("Missing some important data!"));
  93                 } else {
  94                         if ($_POST['submit'] == DI::l10n()->t("Update")) {
  95                                 q("UPDATE clients SET
  96                                                         client_id='%s',
  97                                                         pw='%s',
  98                                                         name='%s',
  99                                                         redirect_uri='%s',
 100                                                         icon='%s',
 101                                                         uid=%d
 102                                                 WHERE client_id='%s'",
 103                                         DBA::escape($key),
 104                                         DBA::escape($secret),
 105                                         DBA::escape($name),
 106                                         DBA::escape($redirect),
 107                                         DBA::escape($icon),
 108                                         local_user(),
 109                                         DBA::escape($key)
 110                                 );
 111                         } else {
 112                                 q("INSERT INTO clients
 113                                                         (client_id, pw, name, redirect_uri, icon, uid)
 114                                                 VALUES ('%s', '%s', '%s', '%s', '%s',%d)",
 115                                         DBA::escape($key),
 116                                         DBA::escape($secret),
 117                                         DBA::escape($name),
 118                                         DBA::escape($redirect),
 119                                         DBA::escape($icon),
 120                                         local_user()
 121                                 );
 122                         }
 123                 }
 124                 DI::baseUrl()->redirect('settings/oauth/', true);
 125                 return;
 126         }
 127
 128         if (($a->argc > 1) && ($a->argv[1] == 'addon')) {
 129                 BaseModule::checkFormSecurityTokenRedirectOnError('/settings/addon', 'settings_addon');
 130
 131                 Hook::callAll('addon_settings_post', $_POST);
 132                 return;
 133         }
 134
 135         if (($a->argc > 1) && ($a->argv[1] == 'connectors')) {
 136                 BaseModule::checkFormSecurityTokenRedirectOnError('/settings/connectors', 'settings_connectors');
 137
 138                 if (!empty($_POST['general-submit'])) {
 139                         DI::pConfig()->set(local_user(), 'system', 'accept_only_sharer', intval($_POST['accept_only_sharer']));
 140                         DI::pConfig()->set(local_user(), 'system', 'disable_cw', intval($_POST['disable_cw']));
 141                         DI::pConfig()->set(local_user(), 'system', 'no_intelligent_shortening', intval($_POST['no_intelligent_shortening']));
 142                         DI::pConfig()->set(local_user(), 'system', 'attach_link_title', intval($_POST['attach_link_title']));
 143                         DI::pConfig()->set(local_user(), 'system', 'ostatus_autofriend', intval($_POST['snautofollow']));
 144                         DI::pConfig()->set(local_user(), 'ostatus', 'default_group', $_POST['group-selection']);
 145                         DI::pConfig()->set(local_user(), 'ostatus', 'legacy_contact', $_POST['legacy_contact']);
 146                 } elseif (!empty($_POST['imap-submit'])) {
 147                         $mail_server       =                 $_POST['mail_server']       ?? '';
 148                         $mail_port         =                 $_POST['mail_port']         ?? '';
 149                         $mail_ssl          = strtolower(trim($_POST['mail_ssl']          ?? ''));
 150                         $mail_user         =                 $_POST['mail_user']         ?? '';
 151                         $mail_pass         =            trim($_POST['mail_pass']         ?? '');
 152                         $mail_action       =            trim($_POST['mail_action']       ?? '');
 153                         $mail_movetofolder =            trim($_POST['mail_movetofolder'] ?? '');
 154                         $mail_replyto      =                 $_POST['mail_replyto']      ?? '';
 155                         $mail_pubmail      =                 $_POST['mail_pubmail']      ?? '';
 156
 157                         if (
 158                                 !DI::config()->get('system', 'dfrn_only')
 159                                 && function_exists('imap_open')
 160                                 && !DI::config()->get('system', 'imap_disabled')
 161                         ) {
 162                                 $failed = false;
 163                                 $r = q("SELECT * FROM `mailacct` WHERE `uid` = %d LIMIT 1",
 164                                         intval(local_user())
 165                                 );
 166                                 if (!DBA::isResult($r)) {
 167                                         DBA::insert('mailacct', ['uid' => local_user()]);
 168                                 }
 169                                 if (strlen($mail_pass)) {
 170                                         $pass = '';
 171                                         openssl_public_encrypt($mail_pass, $pass, $a->user['pubkey']);
 172                                         DBA::update('mailacct', ['pass' => bin2hex($pass)], ['uid' => local_user()]);
 173                                 }
 174                                 $r = q("UPDATE `mailacct` SET `server` = '%s', `port` = %d, `ssltype` = '%s', `user` = '%s',
 175                                         `action` = %d, `movetofolder` = '%s',
 176                                         `mailbox` = 'INBOX', `reply_to` = '%s', `pubmail` = %d WHERE `uid` = %d",
 177                                         DBA::escape($mail_server),
 178                                         intval($mail_port),
 179                                         DBA::escape($mail_ssl),
 180                                         DBA::escape($mail_user),
 181                                         intval($mail_action),
 182                                         DBA::escape($mail_movetofolder),
 183                                         DBA::escape($mail_replyto),
 184                                         intval($mail_pubmail),
 185                                         intval(local_user())
 186                                 );
 187                                 Logger::log("mail: updating mailaccount. Response: ".print_r($r, true));
 188                                 $r = q("SELECT * FROM `mailacct` WHERE `uid` = %d LIMIT 1",
 189                                         intval(local_user())
 190                                 );
 191                                 if (DBA::isResult($r)) {
 192                                         $eacct = $r[0];
 193                                         $mb = Email::constructMailboxName($eacct);
 194
 195                                         if (strlen($eacct['server'])) {
 196                                                 $dcrpass = '';
 197                                                 openssl_private_decrypt(hex2bin($eacct['pass']), $dcrpass, $a->user['prvkey']);
 198                                                 $mbox = Email::connect($mb, $mail_user, $dcrpass);
 199                                                 unset($dcrpass);
 200                                                 if (!$mbox) {
 201                                                         $failed = true;
 202                                                         notice(DI::l10n()->t('Failed to connect with email account using the settings provided.') . EOL);
 203                                                 }
 204                                         }
 205                                 }
 206                                 if (!$failed) {
 207                                         info(DI::l10n()->t('Email settings updated.') . EOL);
 208                                 }
 209                         }
 210                 }
 211
 212                 Hook::callAll('connector_settings_post', $_POST);
 213                 return;
 214         }
 215
 216         if (($a->argc > 1) && ($a->argv[1] === 'features')) {
 217                 BaseModule::checkFormSecurityTokenRedirectOnError('/settings/features', 'settings_features');
 218                 foreach ($_POST as $k => $v) {
 219                         if (strpos($k, 'feature_') === 0) {
 220                                 DI::pConfig()->set(local_user(), 'feature', substr($k, 8), ((intval($v)) ? 1 : 0));
 221                         }
 222                 }
 223                 info(DI::l10n()->t('Features updated') . EOL);
 224                 return;
 225         }
 226
 227         BaseModule::checkFormSecurityTokenRedirectOnError('/settings', 'settings');
 228
 229         // Import Contacts from CSV file
 230         if (!empty($_POST['importcontact-submit'])) {
 231                 if (isset($_FILES['importcontact-filename'])) {
 232                         // was there an error
 233                         if ($_FILES['importcontact-filename']['error'] > 0) {
 234                                 Logger::notice('Contact CSV file upload error');
 235                                 info(DI::l10n()->t('Contact CSV file upload error'));
 236                         } else {
 237                                 $csvArray = array_map('str_getcsv', file($_FILES['importcontact-filename']['tmp_name']));
 238                                 // import contacts
 239                                 foreach ($csvArray as $csvRow) {
 240                                         // The 1st row may, or may not contain the headers of the table
 241                                         // We expect the 1st field of the row to contain either the URL
 242                                         // or the handle of the account, therefore we check for either
 243                                         // "http" or "@" to be present in the string.
 244                                         // All other fields from the row will be ignored
 245                                         if ((strpos($csvRow[0],'@') !== false) || (strpos($csvRow[0],'http') !== false)) {
 246                                                 Worker::add(PRIORITY_LOW, 'AddContact', $_SESSION['uid'], $csvRow[0]);
 247                                         }
 248                                 }
 249
 250                                 info(DI::l10n()->t('Importing Contacts done'));
 251                                 // delete temp file
 252                                 unlink($_FILES['importcontact-filename']['tmp_name']);
 253                         }
 254                 }
 255         }
 256
 257         if (!empty($_POST['resend_relocate'])) {
 258                 Worker::add(PRIORITY_HIGH, 'Notifier', Delivery::RELOCATION, local_user());
 259                 info(DI::l10n()->t("Relocate message has been send to your contacts"));
 260                 DI::baseUrl()->redirect('settings');
 261         }
 262
 263         Hook::callAll('settings_post', $_POST);
 264
 265         if (!empty($_POST['password']) || !empty($_POST['confirm'])) {
 266                 $newpass = $_POST['password'];
 267                 $confirm = $_POST['confirm'];
 268
 269                 try {
 270                         if ($newpass != $confirm) {
 271                                 throw new Exception(DI::l10n()->t('Passwords do not match.'));
 272                         }
 273
 274                         //  check if the old password was supplied correctly before changing it to the new value
 275                         User::getIdFromPasswordAuthentication(local_user(), $_POST['opassword']);
 276
 277                         $result = User::updatePassword(local_user(), $newpass);
 278                         if (!DBA::isResult($result)) {
 279                                 throw new Exception(DI::l10n()->t('Password update failed. Please try again.'));
 280                         }
 281
 282                         info(DI::l10n()->t('Password changed.'));
 283                 } catch (Exception $e) {
 284                         notice($e->getMessage());
 285                         notice(DI::l10n()->t('Password unchanged.'));
 286                 }
 287         }
 288
 289         $username         = (!empty($_POST['username'])   ? Strings::escapeTags(trim($_POST['username']))     : '');
 290         $email            = (!empty($_POST['email'])      ? Strings::escapeTags(trim($_POST['email']))        : '');
 291         $timezone         = (!empty($_POST['timezone'])   ? Strings::escapeTags(trim($_POST['timezone']))     : '');
 292         $language         = (!empty($_POST['language'])   ? Strings::escapeTags(trim($_POST['language']))     : '');
 293
 294         $defloc           = (!empty($_POST['defloc'])     ? Strings::escapeTags(trim($_POST['defloc']))       : '');
 295         $maxreq           = (!empty($_POST['maxreq'])     ? intval($_POST['maxreq'])             : 0);
 296         $expire           = (!empty($_POST['expire'])     ? intval($_POST['expire'])             : 0);
 297         $def_gid          = (!empty($_POST['group-selection']) ? intval($_POST['group-selection']) : 0);
 298
 299
 300         $expire_items     = (!empty($_POST['expire_items']) ? intval($_POST['expire_items'])     : 0);
 301         $expire_notes     = (!empty($_POST['expire_notes']) ? intval($_POST['expire_notes'])     : 0);
 302         $expire_starred   = (!empty($_POST['expire_starred']) ? intval($_POST['expire_starred']) : 0);
 303         $expire_photos    = (!empty($_POST['expire_photos'])? intval($_POST['expire_photos'])    : 0);
 304         $expire_network_only    = (!empty($_POST['expire_network_only'])? intval($_POST['expire_network_only'])  : 0);
 305
 306         $delete_openid    = ((!empty($_POST['delete_openid']) && (intval($_POST['delete_openid']) == 1)) ? 1: 0);
 307
 308         $allow_location   = ((!empty($_POST['allow_location']) && (intval($_POST['allow_location']) == 1)) ? 1: 0);
 309         $publish          = ((!empty($_POST['profile_in_directory']) && (intval($_POST['profile_in_directory']) == 1)) ? 1: 0);
 310         $net_publish      = ((!empty($_POST['profile_in_netdirectory']) && (intval($_POST['profile_in_netdirectory']) == 1)) ? 1: 0);
 311         $old_visibility   = ((!empty($_POST['visibility']) && (intval($_POST['visibility']) == 1)) ? 1 : 0);
 312         $account_type     = ((!empty($_POST['account-type']) && (intval($_POST['account-type']))) ? intval($_POST['account-type']) : 0);
 313         $page_flags       = ((!empty($_POST['page-flags']) && (intval($_POST['page-flags']))) ? intval($_POST['page-flags']) : 0);
 314         $blockwall        = ((!empty($_POST['blockwall']) && (intval($_POST['blockwall']) == 1)) ? 0: 1); // this setting is inverted!
 315         $blocktags        = ((!empty($_POST['blocktags']) && (intval($_POST['blocktags']) == 1)) ? 0: 1); // this setting is inverted!
 316         $unkmail          = ((!empty($_POST['unkmail']) && (intval($_POST['unkmail']) == 1)) ? 1: 0);
 317         $cntunkmail       = (!empty($_POST['cntunkmail']) ? intval($_POST['cntunkmail']) : 0);
 318         $hide_friends     = (($_POST['hide-friends'] == 1) ? 1: 0);
 319         $hidewall         = (($_POST['hidewall'] == 1) ? 1: 0);
 320         $unlisted         = (($_POST['unlisted'] == 1) ? 1: 0);
 321
 322         $email_textonly   = (($_POST['email_textonly'] == 1) ? 1 : 0);
 323         $detailed_notif   = (($_POST['detailed_notif'] == 1) ? 1 : 0);
 324
 325         $notify = 0;
 326
 327         if (!empty($_POST['notify1'])) {
 328                 $notify += intval($_POST['notify1']);
 329         }
 330         if (!empty($_POST['notify2'])) {
 331                 $notify += intval($_POST['notify2']);
 332         }
 333         if (!empty($_POST['notify3'])) {
 334                 $notify += intval($_POST['notify3']);
 335         }
 336         if (!empty($_POST['notify4'])) {
 337                 $notify += intval($_POST['notify4']);
 338         }
 339         if (!empty($_POST['notify5'])) {
 340                 $notify += intval($_POST['notify5']);
 341         }
 342         if (!empty($_POST['notify6'])) {
 343                 $notify += intval($_POST['notify6']);
 344         }
 345         if (!empty($_POST['notify7'])) {
 346                 $notify += intval($_POST['notify7']);
 347         }
 348         if (!empty($_POST['notify8'])) {
 349                 $notify += intval($_POST['notify8']);
 350         }
 351
 352         // Adjust the page flag if the account type doesn't fit to the page flag.
 353         if (($account_type == User::ACCOUNT_TYPE_PERSON) && !in_array($page_flags, [User::PAGE_FLAGS_NORMAL, User::PAGE_FLAGS_SOAPBOX, User::PAGE_FLAGS_FREELOVE])) {
 354                 $page_flags = User::PAGE_FLAGS_NORMAL;
 355         } elseif (($account_type == User::ACCOUNT_TYPE_ORGANISATION) && !in_array($page_flags, [User::PAGE_FLAGS_SOAPBOX])) {
 356                 $page_flags = User::PAGE_FLAGS_SOAPBOX;
 357         } elseif (($account_type == User::ACCOUNT_TYPE_NEWS) && !in_array($page_flags, [User::PAGE_FLAGS_SOAPBOX])) {
 358                 $page_flags = User::PAGE_FLAGS_SOAPBOX;
 359         } elseif (($account_type == User::ACCOUNT_TYPE_COMMUNITY) && !in_array($page_flags, [User::PAGE_FLAGS_COMMUNITY, User::PAGE_FLAGS_PRVGROUP])) {
 360                 $page_flags = User::PAGE_FLAGS_COMMUNITY;
 361         }
 362
 363         $err = '';
 364
 365         if ($username != $a->user['username']) {
 366                 if (strlen($username) > 40) {
 367                         $err .= DI::l10n()->t(' Please use a shorter name.');
 368                 }
 369                 if (strlen($username) < 3) {
 370                         $err .= DI::l10n()->t(' Name too short.');
 371                 }
 372         }
 373
 374         if ($email != $a->user['email']) {
 375                 //  check for the correct password
 376                 if (!User::authenticate(intval(local_user()), $_POST['mpassword'])) {
 377                         $err .= DI::l10n()->t('Wrong Password') . EOL;
 378                         $email = $a->user['email'];
 379                 }
 380                 //  check the email is valid
 381                 if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
 382                         $err .= DI::l10n()->t('Invalid email.');
 383                 }
 384                 //  ensure new email is not the admin mail
 385                 if (DI::config()->get('config', 'admin_email')) {
 386                         $adminlist = explode(",", str_replace(" ", "", strtolower(DI::config()->get('config', 'admin_email'))));
 387                         if (in_array(strtolower($email), $adminlist)) {
 388                                 $err .= DI::l10n()->t('Cannot change to that email.');
 389                                 $email = $a->user['email'];
 390                         }
 391                 }
 392         }
 393
 394         if (strlen($err)) {
 395                 notice($err . EOL);
 396                 return;
 397         }
 398
 399         if (($timezone != $a->user['timezone']) && strlen($timezone)) {
 400                 date_default_timezone_set($timezone);
 401         }
 402
 403         $aclFormatter = DI::aclFormatter();
 404
 405         $str_group_allow   = !empty($_POST['group_allow'])   ? $aclFormatter->toString($_POST['group_allow'])   : '';
 406         $str_contact_allow = !empty($_POST['contact_allow']) ? $aclFormatter->toString($_POST['contact_allow']) : '';
 407         $str_group_deny    = !empty($_POST['group_deny'])    ? $aclFormatter->toString($_POST['group_deny'])    : '';
 408         $str_contact_deny  = !empty($_POST['contact_deny'])  ? $aclFormatter->toString($_POST['contact_deny'])  : '';
 409
 410         DI::pConfig()->set(local_user(), 'expire', 'items', $expire_items);
 411         DI::pConfig()->set(local_user(), 'expire', 'notes', $expire_notes);
 412         DI::pConfig()->set(local_user(), 'expire', 'starred', $expire_starred);
 413         DI::pConfig()->set(local_user(), 'expire', 'photos', $expire_photos);
 414         DI::pConfig()->set(local_user(), 'expire', 'network_only', $expire_network_only);
 415
 416         DI::pConfig()->set(local_user(), 'system', 'email_textonly', $email_textonly);
 417         DI::pConfig()->set(local_user(), 'system', 'detailed_notif', $detailed_notif);
 418         DI::pConfig()->set(local_user(), 'system', 'unlisted', $unlisted);
 419
 420         if ($page_flags == User::PAGE_FLAGS_PRVGROUP) {
 421                 $hidewall = 1;
 422                 if (!$str_contact_allow && !$str_group_allow && !$str_contact_deny && !$str_group_deny) {
 423                         if ($def_gid) {
 424                                 info(DI::l10n()->t('Private forum has no privacy permissions. Using default privacy group.'). EOL);
 425                                 $str_group_allow = '<' . $def_gid . '>';
 426                         } else {
 427                                 notice(DI::l10n()->t('Private forum has no privacy permissions and no default privacy group.') . EOL);
 428                         }
 429                 }
 430         }
 431
 432         $fields = ['username' => $username, 'email' => $email, 'timezone' => $timezone,
 433                 'allow_cid' => $str_contact_allow, 'allow_gid' => $str_group_allow, 'deny_cid' => $str_contact_deny, 'deny_gid' => $str_group_deny,
 434                 'notify-flags' => $notify, 'page-flags' => $page_flags, 'account-type' => $account_type, 'default-location' => $defloc,
 435                 'allow_location' => $allow_location, 'maxreq' => $maxreq, 'expire' => $expire, 'def_gid' => $def_gid, 'blockwall' => $blockwall,
 436                 'hidewall' => $hidewall, 'blocktags' => $blocktags, 'unkmail' => $unkmail, 'cntunkmail' => $cntunkmail, 'language' => $language];
 437
 438         if ($delete_openid) {
 439                 $fields['openid'] = '';
 440                 $fields['openidserver'] = '';
 441         }
 442
 443         if (DBA::update('user', $fields, ['uid' => local_user()])) {
 444                 info(DI::l10n()->t('Settings updated.') . EOL);
 445         }
 446
 447         // clear session language
 448         unset($_SESSION['language']);
 449
 450         q("UPDATE `profile`
 451                 SET `publish` = %d,
 452                 `name` = '%s',
 453                 `net-publish` = %d,
 454                 `hide-friends` = %d
 455                 WHERE `uid` = %d",
 456                 intval($publish),
 457                 DBA::escape($username),
 458                 intval($net_publish),
 459                 intval($hide_friends),
 460                 intval(local_user())
 461         );
 462
 463         Contact::updateSelfFromUserID(local_user());
 464
 465         if (($old_visibility != $net_publish) || ($page_flags != $old_page_flags)) {
 466                 // Update global directory in background
 467                 $url = $_SESSION['my_url'];
 468                 if ($url && strlen(DI::config()->get('system', 'directory'))) {
 469                         Worker::add(PRIORITY_LOW, "Directory", $url);
 470                 }
 471         }
 472
 473         Worker::add(PRIORITY_LOW, 'ProfileUpdate', local_user());
 474
 475         // Update the global contact for the user
 476         GContact::updateForUser(local_user());
 477
 478         DI::baseUrl()->redirect('settings');
 479         return; // NOTREACHED
 480 }
 481
 482
 483 function settings_content(App $a)
 484 {
 485         $o = '';
 486         Nav::setSelected('settings');
 487
 488         if (!local_user()) {
 489                 //notice(DI::l10n()->t('Permission denied.') . EOL);
 490                 return Login::form();
 491         }
 492
 493         if (!empty($_SESSION['submanage'])) {
 494                 notice(DI::l10n()->t('Permission denied.') . EOL);
 495                 return;
 496         }
 497
 498         if (($a->argc > 1) && ($a->argv[1] === 'oauth')) {
 499                 if (($a->argc > 2) && ($a->argv[2] === 'add')) {
 500                         $tpl = Renderer::getMarkupTemplate('settings/oauth_edit.tpl');
 501                         $o .= Renderer::replaceMacros($tpl, [
 502                                 '$form_security_token' => BaseModule::getFormSecurityToken("settings_oauth"),
 503                                 '$title'        => DI::l10n()->t('Add application'),
 504                                 '$submit'       => DI::l10n()->t('Save Settings'),
 505                                 '$cancel'       => DI::l10n()->t('Cancel'),
 506                                 '$name'         => ['name', DI::l10n()->t('Name'), '', ''],
 507                                 '$key'          => ['key', DI::l10n()->t('Consumer Key'), '', ''],
 508                                 '$secret'       => ['secret', DI::l10n()->t('Consumer Secret'), '', ''],
 509                                 '$redirect'     => ['redirect', DI::l10n()->t('Redirect'), '', ''],
 510                                 '$icon'         => ['icon', DI::l10n()->t('Icon url'), '', ''],
 511                         ]);
 512                         return $o;
 513                 }
 514
 515                 if (($a->argc > 3) && ($a->argv[2] === 'edit')) {
 516                         $r = q("SELECT * FROM clients WHERE client_id='%s' AND uid=%d",
 517                                         DBA::escape($a->argv[3]),
 518                                         local_user());
 519
 520                         if (!DBA::isResult($r)) {
 521                                 notice(DI::l10n()->t("You can't edit this application."));
 522                                 return;
 523                         }
 524                         $app = $r[0];
 525
 526                         $tpl = Renderer::getMarkupTemplate('settings/oauth_edit.tpl');
 527                         $o .= Renderer::replaceMacros($tpl, [
 528                                 '$form_security_token' => BaseModule::getFormSecurityToken("settings_oauth"),
 529                                 '$title'        => DI::l10n()->t('Add application'),
 530                                 '$submit'       => DI::l10n()->t('Update'),
 531                                 '$cancel'       => DI::l10n()->t('Cancel'),
 532                                 '$name'         => ['name', DI::l10n()->t('Name'), $app['name'] , ''],
 533                                 '$key'          => ['key', DI::l10n()->t('Consumer Key'), $app['client_id'], ''],
 534                                 '$secret'       => ['secret', DI::l10n()->t('Consumer Secret'), $app['pw'], ''],
 535                                 '$redirect'     => ['redirect', DI::l10n()->t('Redirect'), $app['redirect_uri'], ''],
 536                                 '$icon'         => ['icon', DI::l10n()->t('Icon url'), $app['icon'], ''],
 537                         ]);
 538                         return $o;
 539                 }
 540
 541                 if (($a->argc > 3) && ($a->argv[2] === 'delete')) {
 542                         BaseModule::checkFormSecurityTokenRedirectOnError('/settings/oauth', 'settings_oauth', 't');
 543
 544                         DBA::delete('clients', ['client_id' => $a->argv[3], 'uid' => local_user()]);
 545                         DI::baseUrl()->redirect('settings/oauth/', true);
 546                         return;
 547                 }
 548
 549                 /// @TODO validate result with DBA::isResult()
 550                 $r = q("SELECT clients.*, tokens.id as oauth_token, (clients.uid=%d) AS my
 551                                 FROM clients
 552                                 LEFT JOIN tokens ON clients.client_id=tokens.client_id
 553                                 WHERE clients.uid IN (%d, 0)",
 554                                 local_user(),
 555                                 local_user());
 556
 557
 558                 $tpl = Renderer::getMarkupTemplate('settings/oauth.tpl');
 559                 $o .= Renderer::replaceMacros($tpl, [
 560                         '$form_security_token' => BaseModule::getFormSecurityToken("settings_oauth"),
 561                         '$baseurl'      => DI::baseUrl()->get(true),
 562                         '$title'        => DI::l10n()->t('Connected Apps'),
 563                         '$add'          => DI::l10n()->t('Add application'),
 564                         '$edit'         => DI::l10n()->t('Edit'),
 565                         '$delete'               => DI::l10n()->t('Delete'),
 566                         '$consumerkey' => DI::l10n()->t('Client key starts with'),
 567                         '$noname'       => DI::l10n()->t('No name'),
 568                         '$remove'       => DI::l10n()->t('Remove authorization'),
 569                         '$apps'         => $r,
 570                 ]);
 571                 return $o;
 572         }
 573
 574         if (($a->argc > 1) && ($a->argv[1] === 'addon')) {
 575                 $settings_addons = "";
 576
 577                 $r = q("SELECT * FROM `hook` WHERE `hook` = 'addon_settings' ");
 578                 if (!DBA::isResult($r)) {
 579                         $settings_addons = DI::l10n()->t('No Addon settings configured');
 580                 }
 581
 582                 Hook::callAll('addon_settings', $settings_addons);
 583
 584
 585                 $tpl = Renderer::getMarkupTemplate('settings/addons.tpl');
 586                 $o .= Renderer::replaceMacros($tpl, [
 587                         '$form_security_token' => BaseModule::getFormSecurityToken("settings_addon"),
 588                         '$title'        => DI::l10n()->t('Addon Settings'),
 589                         '$settings_addons' => $settings_addons
 590                 ]);
 591                 return $o;
 592         }
 593
 594         if (($a->argc > 1) && ($a->argv[1] === 'features')) {
 595
 596                 $arr = [];
 597                 $features = Feature::get();
 598                 foreach ($features as $fname => $fdata) {
 599                         $arr[$fname] = [];
 600                         $arr[$fname][0] = $fdata[0];
 601                         foreach (array_slice($fdata,1) as $f) {
 602                                 $arr[$fname][1][] = ['feature_' .$f[0], $f[1],((intval(Feature::isEnabled(local_user(), $f[0]))) ? "1" : ''), $f[2],[DI::l10n()->t('Off'), DI::l10n()->t('On')]];
 603                         }
 604                 }
 605
 606                 $tpl = Renderer::getMarkupTemplate('settings/features.tpl');
 607                 $o .= Renderer::replaceMacros($tpl, [
 608                         '$form_security_token' => BaseModule::getFormSecurityToken("settings_features"),
 609                         '$title'               => DI::l10n()->t('Additional Features'),
 610                         '$features'            => $arr,
 611                         '$submit'              => DI::l10n()->t('Save Settings'),
 612                 ]);
 613                 return $o;
 614         }
 615
 616         if (($a->argc > 1) && ($a->argv[1] === 'connectors')) {
 617                 $accept_only_sharer        = intval(DI::pConfig()->get(local_user(), 'system', 'accept_only_sharer'));
 618                 $disable_cw                = intval(DI::pConfig()->get(local_user(), 'system', 'disable_cw'));
 619                 $no_intelligent_shortening = intval(DI::pConfig()->get(local_user(), 'system', 'no_intelligent_shortening'));
 620                 $attach_link_title         = intval(DI::pConfig()->get(local_user(), 'system', 'attach_link_title'));
 621                 $ostatus_autofriend        = intval(DI::pConfig()->get(local_user(), 'system', 'ostatus_autofriend'));
 622                 $default_group             = DI::pConfig()->get(local_user(), 'ostatus', 'default_group');
 623                 $legacy_contact            = DI::pConfig()->get(local_user(), 'ostatus', 'legacy_contact');
 624
 625                 if (!empty($legacy_contact)) {
 626                         /// @todo Isn't it supposed to be a $a->internalRedirect() call?
 627                         DI::page()['htmlhead'] = '<meta http-equiv="refresh" content="0; URL=' . DI::baseUrl().'/ostatus_subscribe?url=' . urlencode($legacy_contact) . '">';
 628                 }
 629
 630                 $settings_connectors = '';
 631                 Hook::callAll('connector_settings', $settings_connectors);
 632
 633                 if (is_site_admin()) {
 634                         $diasp_enabled = DI::l10n()->t('Built-in support for %s connectivity is %s', DI::l10n()->t('Diaspora (Socialhome, Hubzilla)'), ((DI::config()->get('system', 'diaspora_enabled')) ? DI::l10n()->t('enabled') : DI::l10n()->t('disabled')));
 635                         $ostat_enabled = DI::l10n()->t('Built-in support for %s connectivity is %s', DI::l10n()->t('OStatus (GNU Social)'), ((DI::config()->get('system', 'ostatus_disabled')) ? DI::l10n()->t('disabled') : DI::l10n()->t('enabled')));
 636                 } else {
 637                         $diasp_enabled = "";
 638                         $ostat_enabled = "";
 639                 }
 640
 641                 $mail_disabled = ((function_exists('imap_open') && (!DI::config()->get('system', 'imap_disabled'))) ? 0 : 1);
 642                 if (DI::config()->get('system', 'dfrn_only')) {
 643                         $mail_disabled = 1;
 644                 }
 645                 if (!$mail_disabled) {
 646                         $r = q("SELECT * FROM `mailacct` WHERE `uid` = %d LIMIT 1",
 647                                 local_user()
 648                         );
 649                 } else {
 650                         $r = null;
 651                 }
 652
 653                 $mail_server       = ((DBA::isResult($r)) ? $r[0]['server'] : '');
 654                 $mail_port         = ((DBA::isResult($r) && intval($r[0]['port'])) ? intval($r[0]['port']) : '');
 655                 $mail_ssl          = ((DBA::isResult($r)) ? $r[0]['ssltype'] : '');
 656                 $mail_user         = ((DBA::isResult($r)) ? $r[0]['user'] : '');
 657                 $mail_replyto      = ((DBA::isResult($r)) ? $r[0]['reply_to'] : '');
 658                 $mail_pubmail      = ((DBA::isResult($r)) ? $r[0]['pubmail'] : 0);
 659                 $mail_action       = ((DBA::isResult($r)) ? $r[0]['action'] : 0);
 660                 $mail_movetofolder = ((DBA::isResult($r)) ? $r[0]['movetofolder'] : '');
 661                 $mail_chk          = ((DBA::isResult($r)) ? $r[0]['last_check'] : DBA::NULL_DATETIME);
 662
 663
 664                 $tpl = Renderer::getMarkupTemplate('settings/connectors.tpl');
 665
 666                 $mail_disabled_message = ($mail_disabled ? DI::l10n()->t('Email access is disabled on this site.') : '');
 667
 668                 $ssl_options = ['TLS' => 'TLS', 'SSL' => 'SSL'];
 669
 670                 if (DI::config()->get('system', 'insecure_imap')) {
 671                         $ssl_options['notls'] = DI::l10n()->t('None');
 672                 }
 673
 674                 $o .= Renderer::replaceMacros($tpl, [
 675                         '$form_security_token' => BaseModule::getFormSecurityToken("settings_connectors"),
 676
 677                         '$title'        => DI::l10n()->t('Social Networks'),
 678
 679                         '$diasp_enabled' => $diasp_enabled,
 680                         '$ostat_enabled' => $ostat_enabled,
 681
 682                         '$general_settings' => DI::l10n()->t('General Social Media Settings'),
 683                         '$accept_only_sharer' => ['accept_only_sharer', DI::l10n()->t('Accept only top level posts by contacts you follow'), $accept_only_sharer, DI::l10n()->t('The system does an auto completion of threads when a comment arrives. This has got the side effect that you can receive posts that had been started by a non-follower but had been commented by someone you follow. This setting deactivates this behaviour. When activated, you strictly only will receive posts from people you really do follow.')],
 684                         '$disable_cw' => ['disable_cw', DI::l10n()->t('Disable Content Warning'), $disable_cw, DI::l10n()->t('Users on networks like Mastodon or Pleroma are able to set a content warning field which collapse their post by default. This disables the automatic collapsing and sets the content warning as the post title. Doesn\'t affect any other content filtering you eventually set up.')],
 685                         '$no_intelligent_shortening' => ['no_intelligent_shortening', DI::l10n()->t('Disable intelligent shortening'), $no_intelligent_shortening, DI::l10n()->t('Normally the system tries to find the best link to add to shortened posts. If this option is enabled then every shortened post will always point to the original friendica post.')],
 686                         '$attach_link_title' => ['attach_link_title', DI::l10n()->t('Attach the link title'), $attach_link_title, DI::l10n()->t('When activated, the title of the attached link will be added as a title on posts to Diaspora. This is mostly helpful with "remote-self" contacts that share feed content.')],
 687                         '$ostatus_autofriend' => ['snautofollow', DI::l10n()->t("Automatically follow any GNU Social \x28OStatus\x29 followers/mentioners"), $ostatus_autofriend, DI::l10n()->t('If you receive a message from an unknown OStatus user, this option decides what to do. If it is checked, a new contact will be created for every unknown user.')],
 688                         '$default_group' => Group::displayGroupSelection(local_user(), $default_group, DI::l10n()->t("Default group for OStatus contacts")),
 689                         '$legacy_contact' => ['legacy_contact', DI::l10n()->t('Your legacy GNU Social account'), $legacy_contact, DI::l10n()->t("If you enter your old GNU Social/Statusnet account name here \x28in the format user@domain.tld\x29, your contacts will be added automatically. The field will be emptied when done.")],
 690
 691                         '$repair_ostatus_url' => DI::baseUrl() . '/repair_ostatus',
 692                         '$repair_ostatus_text' => DI::l10n()->t('Repair OStatus subscriptions'),
 693
 694                         '$settings_connectors' => $settings_connectors,
 695
 696                         '$h_imap' => DI::l10n()->t('Email/Mailbox Setup'),
 697                         '$imap_desc' => DI::l10n()->t("If you wish to communicate with email contacts using this service \x28optional\x29, please specify how to connect to your mailbox."),
 698                         '$imap_lastcheck' => ['imap_lastcheck', DI::l10n()->t('Last successful email check:'), $mail_chk, ''],
 699                         '$mail_disabled' => $mail_disabled_message,
 700                         '$mail_server'  => ['mail_server',      DI::l10n()->t('IMAP server name:'), $mail_server, ''],
 701                         '$mail_port'    => ['mail_port',        DI::l10n()->t('IMAP port:'), $mail_port, ''],
 702                         '$mail_ssl'     => ['mail_ssl',         DI::l10n()->t('Security:'), strtoupper($mail_ssl), '', $ssl_options],
 703                         '$mail_user'    => ['mail_user',        DI::l10n()->t('Email login name:'), $mail_user, ''],
 704                         '$mail_pass'    => ['mail_pass',        DI::l10n()->t('Email password:'), '', ''],
 705                         '$mail_replyto' => ['mail_replyto',     DI::l10n()->t('Reply-to address:'), $mail_replyto, 'Optional'],
 706                         '$mail_pubmail' => ['mail_pubmail',     DI::l10n()->t('Send public posts to all email contacts:'), $mail_pubmail, ''],
 707                         '$mail_action'  => ['mail_action',      DI::l10n()->t('Action after import:'), $mail_action, '', [0 => DI::l10n()->t('None'), 1 => DI::l10n()->t('Delete'), 2 => DI::l10n()->t('Mark as seen'), 3 => DI::l10n()->t('Move to folder')]],
 708                         '$mail_movetofolder' => ['mail_movetofolder', DI::l10n()->t('Move to folder:'), $mail_movetofolder, ''],
 709                         '$submit' => DI::l10n()->t('Save Settings'),
 710                 ]);
 711
 712                 Hook::callAll('display_settings', $o);
 713                 return $o;
 714         }
 715
 716         /*
 717          * ACCOUNT SETTINGS
 718          */
 719
 720         $profile = DBA::selectFirst('profile', [], ['uid' => local_user()]);
 721         if (!DBA::isResult($profile)) {
 722                 notice(DI::l10n()->t('Unable to find your profile. Please contact your admin.') . EOL);
 723                 return;
 724         }
 725
 726         $username   = $a->user['username'];
 727         $email      = $a->user['email'];
 728         $nickname   = $a->user['nickname'];
 729         $timezone   = $a->user['timezone'];
 730         $language   = $a->user['language'];
 731         $notify     = $a->user['notify-flags'];
 732         $defloc     = $a->user['default-location'];
 733         $openid     = $a->user['openid'];
 734         $maxreq     = $a->user['maxreq'];
 735         $expire     = ((intval($a->user['expire'])) ? $a->user['expire'] : '');
 736         $unkmail    = $a->user['unkmail'];
 737         $cntunkmail = $a->user['cntunkmail'];
 738
 739         $expire_items = DI::pConfig()->get(local_user(), 'expire', 'items', true);
 740         $expire_notes = DI::pConfig()->get(local_user(), 'expire', 'notes', true);
 741         $expire_starred = DI::pConfig()->get(local_user(), 'expire', 'starred', true);
 742         $expire_photos = DI::pConfig()->get(local_user(), 'expire', 'photos', false);
 743         $expire_network_only = DI::pConfig()->get(local_user(), 'expire', 'network_only', false);
 744
 745         if (!strlen($a->user['timezone'])) {
 746                 $timezone = date_default_timezone_get();
 747         }
 748
 749         // Set the account type to "Community" when the page is a community page but the account type doesn't fit
 750         // This is only happening on the first visit after the update
 751         if (in_array($a->user['page-flags'], [User::PAGE_FLAGS_COMMUNITY, User::PAGE_FLAGS_PRVGROUP]) &&
 752                 ($a->user['account-type'] != User::ACCOUNT_TYPE_COMMUNITY))
 753                 $a->user['account-type'] = User::ACCOUNT_TYPE_COMMUNITY;
 754
 755         $pageset_tpl = Renderer::getMarkupTemplate('settings/pagetypes.tpl');
 756
 757         $pagetype = Renderer::replaceMacros($pageset_tpl, [
 758                 '$account_types'        => DI::l10n()->t("Account Types"),
 759                 '$user'                 => DI::l10n()->t("Personal Page Subtypes"),
 760                 '$community'            => DI::l10n()->t("Community Forum Subtypes"),
 761                 '$account_type'         => $a->user['account-type'],
 762                 '$type_person'          => User::ACCOUNT_TYPE_PERSON,
 763                 '$type_organisation'    => User::ACCOUNT_TYPE_ORGANISATION,
 764                 '$type_news'            => User::ACCOUNT_TYPE_NEWS,
 765                 '$type_community'       => User::ACCOUNT_TYPE_COMMUNITY,
 766
 767                 '$account_person'       => ['account-type', DI::l10n()->t('Personal Page'), User::ACCOUNT_TYPE_PERSON,
 768                                                                         DI::l10n()->t('Account for a personal profile.'),
 769                                                                         ($a->user['account-type'] == User::ACCOUNT_TYPE_PERSON)],
 770
 771                 '$account_organisation' => ['account-type', DI::l10n()->t('Organisation Page'), User::ACCOUNT_TYPE_ORGANISATION,
 772                                                                         DI::l10n()->t('Account for an organisation that automatically approves contact requests as "Followers".'),
 773                                                                         ($a->user['account-type'] == User::ACCOUNT_TYPE_ORGANISATION)],
 774
 775                 '$account_news'         => ['account-type', DI::l10n()->t('News Page'), User::ACCOUNT_TYPE_NEWS,
 776                                                                         DI::l10n()->t('Account for a news reflector that automatically approves contact requests as "Followers".'),
 777                                                                         ($a->user['account-type'] == User::ACCOUNT_TYPE_NEWS)],
 778
 779                 '$account_community'    => ['account-type', DI::l10n()->t('Community Forum'), User::ACCOUNT_TYPE_COMMUNITY,
 780                                                                         DI::l10n()->t('Account for community discussions.'),
 781                                                                         ($a->user['account-type'] == User::ACCOUNT_TYPE_COMMUNITY)],
 782
 783                 '$page_normal'          => ['page-flags', DI::l10n()->t('Normal Account Page'), User::PAGE_FLAGS_NORMAL,
 784                                                                         DI::l10n()->t('Account for a regular personal profile that requires manual approval of "Friends" and "Followers".'),
 785                                                                         ($a->user['page-flags'] == User::PAGE_FLAGS_NORMAL)],
 786
 787                 '$page_soapbox'         => ['page-flags', DI::l10n()->t('Soapbox Page'), User::PAGE_FLAGS_SOAPBOX,
 788                                                                         DI::l10n()->t('Account for a public profile that automatically approves contact requests as "Followers".'),
 789                                                                         ($a->user['page-flags'] == User::PAGE_FLAGS_SOAPBOX)],
 790
 791                 '$page_community'       => ['page-flags', DI::l10n()->t('Public Forum'), User::PAGE_FLAGS_COMMUNITY,
 792                                                                         DI::l10n()->t('Automatically approves all contact requests.'),
 793                                                                         ($a->user['page-flags'] == User::PAGE_FLAGS_COMMUNITY)],
 794
 795                 '$page_freelove'        => ['page-flags', DI::l10n()->t('Automatic Friend Page'), User::PAGE_FLAGS_FREELOVE,
 796                                                                         DI::l10n()->t('Account for a popular profile that automatically approves contact requests as "Friends".'),
 797                                                                         ($a->user['page-flags'] == User::PAGE_FLAGS_FREELOVE)],
 798
 799                 '$page_prvgroup'        => ['page-flags', DI::l10n()->t('Private Forum [Experimental]'), User::PAGE_FLAGS_PRVGROUP,
 800                                                                         DI::l10n()->t('Requires manual approval of contact requests.'),
 801                                                                         ($a->user['page-flags'] == User::PAGE_FLAGS_PRVGROUP)],
 802
 803
 804         ]);
 805
 806         $noid = DI::config()->get('system', 'no_openid');
 807
 808         if ($noid) {
 809                 $openid_field = false;
 810         } else {
 811                 $openid_field = ['openid_url', DI::l10n()->t('OpenID:'), $openid, DI::l10n()->t("\x28Optional\x29 Allow this OpenID to login to this account."), "", "readonly", "url"];
 812         }
 813
 814         $opt_tpl = Renderer::getMarkupTemplate("field_checkbox.tpl");
 815         if (DI::config()->get('system', 'publish_all')) {
 816                 $profile_in_dir = '<input type="hidden" name="profile_in_directory" value="1" />';
 817         } else {
 818                 $profile_in_dir = Renderer::replaceMacros($opt_tpl, [
 819                         '$field' => ['profile_in_directory', DI::l10n()->t('Publish your profile in your local site directory?'), $profile['publish'], DI::l10n()->t('Your profile will be published in this node\'s <a href="%s">local directory</a>. Your profile details may be publicly visible depending on the system settings.', DI::baseUrl().'/directory')]
 820                 ]);
 821         }
 822
 823         if (strlen(DI::config()->get('system', 'directory'))) {
 824                 $net_pub_desc = ' ' . DI::l10n()->t('Your profile will also be published in the global friendica directories (e.g. <a href="%s">%s</a>).', DI::config()->get('system', 'directory'), DI::config()->get('system', 'directory'));
 825         } else {
 826                 $net_pub_desc = '';
 827         }
 828
 829         $profile_in_net_dir = Renderer::replaceMacros($opt_tpl, [
 830                 '$field' => ['profile_in_netdirectory', DI::l10n()->t('Allow your profile to be searchable globally?'), $profile['net-publish'], DI::l10n()->t("Activate this setting if you want others to easily find and follow you. Your profile will be searchable on remote systems. This setting also determines whether Friendica will inform search engines that your profile should be indexed or not.") . $net_pub_desc]
 831         ]);
 832
 833         $hide_friends = Renderer::replaceMacros($opt_tpl, [
 834                 '$field' => ['hide-friends', DI::l10n()->t('Hide your contact/friend list from viewers of your default profile?'), $profile['hide-friends'], DI::l10n()->t('Your contact list won\'t be shown in your default profile page. You can decide to show your contact list separately for each additional profile you create')],
 835         ]);
 836
 837         $hide_wall = Renderer::replaceMacros($opt_tpl, [
 838                 '$field' => ['hidewall', DI::l10n()->t('Hide your profile details from anonymous viewers?'), $a->user['hidewall'], DI::l10n()->t('Anonymous visitors will only see your profile picture, your display name and the nickname you are using on your profile page. Your public posts and replies will still be accessible by other means.')],
 839         ]);
 840
 841         $unlisted = Renderer::replaceMacros($opt_tpl, [
 842                 '$field' => ['unlisted', DI::l10n()->t('Should public posts be unlisted?'), DI::pConfig()->get(local_user(), 'system', 'unlisted'), DI::l10n()->t('Your public posts will not appear on the community page or in search results, nor will they be transported to relay servers.')],
 843         ]);
 844
 845         $blockwall = Renderer::replaceMacros($opt_tpl, [
 846                 '$field' => ['blockwall', DI::l10n()->t('Allow friends to post to your profile page?'), (intval($a->user['blockwall']) ? '0' : '1'), DI::l10n()->t('Your contacts may write posts on your profile wall. These posts will be distributed to your contacts')],
 847         ]);
 848
 849         $blocktags = Renderer::replaceMacros($opt_tpl, [
 850                 '$field' => ['blocktags', DI::l10n()->t('Allow friends to tag your posts?'), (intval($a->user['blocktags']) ? '0' : '1'), DI::l10n()->t('Your contacts can add additional tags to your posts.')],
 851         ]);
 852
 853         $unkmail = Renderer::replaceMacros($opt_tpl, [
 854                 '$field' => ['unkmail', DI::l10n()->t('Permit unknown people to send you private mail?'), $unkmail, DI::l10n()->t('Friendica network users may send you private messages even if they are not in your contact list.')],
 855         ]);
 856
 857         $tpl_addr = Renderer::getMarkupTemplate('settings/nick_set.tpl');
 858
 859         $prof_addr = Renderer::replaceMacros($tpl_addr,[
 860                 '$desc' => DI::l10n()->t("Your Identity Address is <strong>'%s'</strong> or '%s'.", $nickname . '@' . DI::baseUrl()->getHostname() . DI::baseUrl()->getUrlPath(), DI::baseUrl() . '/profile/' . $nickname),
 861                 '$basepath' => DI::baseUrl()->getHostname()
 862         ]);
 863
 864         $stpl = Renderer::getMarkupTemplate('settings/settings.tpl');
 865
 866         $expire_arr = [
 867                 'days' => ['expire',  DI::l10n()->t("Automatically expire posts after this many days:"), $expire, DI::l10n()->t('If empty, posts will not expire. Expired posts will be deleted')],
 868                 'label' => DI::l10n()->t('Expiration settings'),
 869                 'items' => ['expire_items', DI::l10n()->t('Expire posts'), $expire_items, DI::l10n()->t('When activated, posts and comments will be expired.')],
 870                 'notes' => ['expire_notes', DI::l10n()->t('Expire personal notes'), $expire_notes, DI::l10n()->t('When activated, the personal notes on your profile page will be expired.')],
 871                 'starred' => ['expire_starred', DI::l10n()->t('Expire starred posts'), $expire_starred, DI::l10n()->t('Starring posts keeps them from being expired. That behaviour is overwritten by this setting.')],
 872                 'photos' => ['expire_photos', DI::l10n()->t('Expire photos'), $expire_photos, DI::l10n()->t('When activated, photos will be expired.')],
 873                 'network_only' => ['expire_network_only', DI::l10n()->t('Only expire posts by others'), $expire_network_only, DI::l10n()->t('When activated, your own posts never expire. Then the settings above are only valid for posts you received.')],
 874         ];
 875
 876         $group_select = Group::displayGroupSelection(local_user(), $a->user['def_gid']);
 877
 878         // Private/public post links for the non-JS ACL form
 879         $private_post = 1;
 880         if (!empty($_REQUEST['public']) && !$_REQUEST['public']) {
 881                 $private_post = 0;
 882         }
 883
 884         $query_str = DI::args()->getQueryString();
 885         if (strpos($query_str, 'public=1') !== false) {
 886                 $query_str = str_replace(['?public=1', '&public=1'], ['', ''], $query_str);
 887         }
 888
 889         // I think $a->query_string may never have ? in it, but I could be wrong
 890         // It looks like it's from the index.php?q=[etc] rewrite that the web
 891         // server does, which converts any ? to &, e.g. suggest&ignore=61 for suggest?ignore=61
 892         if (strpos($query_str, '?') === false) {
 893                 $public_post_link = '?public=1';
 894         } else {
 895                 $public_post_link = '&public=1';
 896         }
 897
 898         /* Installed langs */
 899         $lang_choices = DI::l10n()->getAvailableLanguages();
 900
 901         /// @TODO Fix indending (or so)
 902         $o .= Renderer::replaceMacros($stpl, [
 903                 '$ptitle'       => DI::l10n()->t('Account Settings'),
 904
 905                 '$submit'       => DI::l10n()->t('Save Settings'),
 906                 '$baseurl' => DI::baseUrl()->get(true),
 907                 '$uid' => local_user(),
 908                 '$form_security_token' => BaseModule::getFormSecurityToken("settings"),
 909                 '$nickname_block' => $prof_addr,
 910
 911                 '$h_pass'       => DI::l10n()->t('Password Settings'),
 912                 '$password1'=> ['password', DI::l10n()->t('New Password:'), '', DI::l10n()->t('Allowed characters are a-z, A-Z, 0-9 and special characters except white spaces, accentuated letters and colon (:).')],
 913                 '$password2'=> ['confirm', DI::l10n()->t('Confirm:'), '', DI::l10n()->t('Leave password fields blank unless changing')],
 914                 '$password3'=> ['opassword', DI::l10n()->t('Current Password:'), '', DI::l10n()->t('Your current password to confirm the changes')],
 915                 '$password4'=> ['mpassword', DI::l10n()->t('Password:'), '', DI::l10n()->t('Your current password to confirm the changes')],
 916                 '$oid_enable' => (!DI::config()->get('system', 'no_openid')),
 917                 '$openid'       => $openid_field,
 918                 '$delete_openid' => ['delete_openid', DI::l10n()->t('Delete OpenID URL'), false, ''],
 919
 920                 '$h_basic'      => DI::l10n()->t('Basic Settings'),
 921                 '$username' => ['username',  DI::l10n()->t('Full Name:'), $username, ''],
 922                 '$email'        => ['email', DI::l10n()->t('Email Address:'), $email, '', '', '', 'email'],
 923                 '$timezone' => ['timezone_select' , DI::l10n()->t('Your Timezone:'), Temporal::getTimezoneSelect($timezone), ''],
 924                 '$language' => ['language', DI::l10n()->t('Your Language:'), $language, DI::l10n()->t('Set the language we use to show you friendica interface and to send you emails'), $lang_choices],
 925                 '$defloc'       => ['defloc', DI::l10n()->t('Default Post Location:'), $defloc, ''],
 926                 '$allowloc' => ['allow_location', DI::l10n()->t('Use Browser Location:'), ($a->user['allow_location'] == 1), ''],
 927
 928
 929                 '$h_prv'        => DI::l10n()->t('Security and Privacy Settings'),
 930
 931                 '$maxreq'       => ['maxreq', DI::l10n()->t('Maximum Friend Requests/Day:'), $maxreq , DI::l10n()->t("\x28to prevent spam abuse\x29")],
 932                 '$permissions' => DI::l10n()->t('Default Post Permissions'),
 933                 '$permdesc' => DI::l10n()->t("\x28click to open/close\x29"),
 934                 '$visibility' => $profile['net-publish'],
 935                 '$aclselect' => ACL::getFullSelectorHTML(DI::page(), $a->user),
 936                 '$blockwall'=> $blockwall, // array('blockwall', DI::l10n()->t('Allow friends to post to your profile page:'), !$blockwall, ''),
 937                 '$blocktags'=> $blocktags, // array('blocktags', DI::l10n()->t('Allow friends to tag your posts:'), !$blocktags, ''),
 938
 939                 // ACL permissions box
 940                 '$group_perms' => DI::l10n()->t('Show to Groups'),
 941                 '$contact_perms' => DI::l10n()->t('Show to Contacts'),
 942                 '$private' => DI::l10n()->t('Default Private Post'),
 943                 '$public' => DI::l10n()->t('Default Public Post'),
 944                 '$is_private' => $private_post,
 945                 '$return_path' => $query_str,
 946                 '$public_link' => $public_post_link,
 947                 '$settings_perms' => DI::l10n()->t('Default Permissions for New Posts'),
 948
 949                 '$group_select' => $group_select,
 950
 951
 952                 '$expire'       => $expire_arr,
 953
 954                 '$profile_in_dir' => $profile_in_dir,
 955                 '$profile_in_net_dir' => $profile_in_net_dir,
 956                 '$hide_friends' => $hide_friends,
 957                 '$hide_wall' => $hide_wall,
 958                 '$unlisted' => $unlisted,
 959                 '$unkmail' => $unkmail,
 960                 '$cntunkmail'   => ['cntunkmail', DI::l10n()->t('Maximum private messages per day from unknown people:'), $cntunkmail , DI::l10n()->t("\x28to prevent spam abuse\x29")],
 961
 962
 963                 '$h_not'        => DI::l10n()->t('Notification Settings'),
 964                 '$lbl_not'      => DI::l10n()->t('Send a notification email when:'),
 965                 '$notify1'      => ['notify1', DI::l10n()->t('You receive an introduction'), ($notify & Type::INTRO), Type::INTRO, ''],
 966                 '$notify2'      => ['notify2', DI::l10n()->t('Your introductions are confirmed'), ($notify & Type::CONFIRM), Type::CONFIRM, ''],
 967                 '$notify3'      => ['notify3', DI::l10n()->t('Someone writes on your profile wall'), ($notify & Type::WALL), Type::WALL, ''],
 968                 '$notify4'      => ['notify4', DI::l10n()->t('Someone writes a followup comment'), ($notify & Type::COMMENT), Type::COMMENT, ''],
 969                 '$notify5'      => ['notify5', DI::l10n()->t('You receive a private message'), ($notify & Type::MAIL), Type::MAIL, ''],
 970                 '$notify6'  => ['notify6', DI::l10n()->t('You receive a friend suggestion'), ($notify & Type::SUGGEST), Type::SUGGEST, ''],
 971                 '$notify7'  => ['notify7', DI::l10n()->t('You are tagged in a post'), ($notify & Type::TAG_SELF), Type::TAG_SELF, ''],
 972                 '$notify8'  => ['notify8', DI::l10n()->t('You are poked/prodded/etc. in a post'), ($notify & Type::POKE), Type::POKE, ''],
 973
 974                 '$desktop_notifications' => ['desktop_notifications', DI::l10n()->t('Activate desktop notifications') , false, DI::l10n()->t('Show desktop popup on new notifications')],
 975
 976                 '$email_textonly' => ['email_textonly', DI::l10n()->t('Text-only notification emails'),
 977                                                                         DI::pConfig()->get(local_user(), 'system', 'email_textonly'),
 978                                                                         DI::l10n()->t('Send text only notification emails, without the html part')],
 979
 980                 '$detailed_notif' => ['detailed_notif', DI::l10n()->t('Show detailled notifications'),
 981                                                                         DI::pConfig()->get(local_user(), 'system', 'detailed_notif'),
 982                                                                         DI::l10n()->t('Per default, notifications are condensed to a single notification per item. When enabled every notification is displayed.')],
 983
 984                 '$h_advn' => DI::l10n()->t('Advanced Account/Page Type Settings'),
 985                 '$h_descadvn' => DI::l10n()->t('Change the behaviour of this account for special situations'),
 986                 '$pagetype' => $pagetype,
 987
 988                 '$importcontact' => DI::l10n()->t('Import Contacts'),
 989                 '$importcontact_text' => DI::l10n()->t('Upload a CSV file that contains the handle of your followed accounts in the first column you exported from the old account.'),
 990                 '$importcontact_button' => DI::l10n()->t('Upload File'),
 991                 '$importcontact_maxsize' => DI::config()->get('system', 'max_csv_file_size', 30720),
 992                 '$relocate' => DI::l10n()->t('Relocate'),
 993                 '$relocate_text' => DI::l10n()->t("If you have moved this profile from another server, and some of your contacts don't receive your updates, try pushing this button."),
 994                 '$relocate_button' => DI::l10n()->t("Resend relocate message to contacts"),
 995
 996         ]);
 997
 998         Hook::callAll('settings_form', $o);
 999
1000         $o .= '</form>' . "\r\n";
1001
1002         return $o;
1003
1004 }