mod/settings.php

   1 <?php
   2 /**
   3  * @copyright Copyright (C) 2020, Friendica
   4  *
   5  * @license GNU AGPL version 3 or any later version
   6  *
   7  * This program is free software: you can redistribute it and/or modify
   8  * it under the terms of the GNU Affero General Public License as
   9  * published by the Free Software Foundation, either version 3 of the
  10  * License, or (at your option) any later version.
  11  *
  12  * This program is distributed in the hope that it will be useful,
  13  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  14  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  15  * GNU Affero General Public License for more details.
  16  *
  17  * You should have received a copy of the GNU Affero General Public License
  18  * along with this program.  If not, see <https://www.gnu.org/licenses/>.
  19  *
  20  */
  21
  22 use Friendica\App;
  23 use Friendica\BaseModule;
  24 use Friendica\Content\Feature;
  25 use Friendica\Content\Nav;
  26 use Friendica\Core\ACL;
  27 use Friendica\Core\Hook;
  28 use Friendica\Core\Logger;
  29 use Friendica\Core\Renderer;
  30 use Friendica\Core\Worker;
  31 use Friendica\Database\DBA;
  32 use Friendica\DI;
  33 use Friendica\Model\Contact;
  34 use Friendica\Model\GContact;
  35 use Friendica\Model\Group;
  36 use Friendica\Model\Notify\Type;
  37 use Friendica\Model\User;
  38 use Friendica\Module\BaseSettings;
  39 use Friendica\Module\Security\Login;
  40 use Friendica\Protocol\Email;
  41 use Friendica\Util\Strings;
  42 use Friendica\Util\Temporal;
  43 use Friendica\Worker\Delivery;
  44
  45 function settings_init(App $a)
  46 {
  47         if (!local_user()) {
  48                 notice(DI::l10n()->t('Permission denied.'));
  49                 return;
  50         }
  51
  52         BaseSettings::content();
  53 }
  54
  55 function settings_post(App $a)
  56 {
  57         if (!local_user()) {
  58                 return;
  59         }
  60
  61         if (!empty($_SESSION['submanage'])) {
  62                 return;
  63         }
  64
  65         if (count($a->user) && !empty($a->user['uid']) && $a->user['uid'] != local_user()) {
  66                 notice(DI::l10n()->t('Permission denied.'));
  67                 return;
  68         }
  69
  70         $old_page_flags = $a->user['page-flags'];
  71
  72         if (($a->argc > 1) && ($a->argv[1] === 'oauth') && !empty($_POST['remove'])) {
  73                 BaseModule::checkFormSecurityTokenRedirectOnError('/settings/oauth', 'settings_oauth');
  74
  75                 $key = $_POST['remove'];
  76                 DBA::delete('tokens', ['id' => $key, 'uid' => local_user()]);
  77                 DI::baseUrl()->redirect('settings/oauth/', true);
  78                 return;
  79         }
  80
  81         if (($a->argc > 2) && ($a->argv[1] === 'oauth')  && ($a->argv[2] === 'edit'||($a->argv[2] === 'add')) && !empty($_POST['submit'])) {
  82                 BaseModule::checkFormSecurityTokenRedirectOnError('/settings/oauth', 'settings_oauth');
  83
  84                 $name     = $_POST['name']     ?? '';
  85                 $key      = $_POST['key']      ?? '';
  86                 $secret   = $_POST['secret']   ?? '';
  87                 $redirect = $_POST['redirect'] ?? '';
  88                 $icon     = $_POST['icon']     ?? '';
  89
  90                 if ($name == "" || $key == "" || $secret == "") {
  91                         notice(DI::l10n()->t("Missing some important data!"));
  92                 } else {
  93                         if ($_POST['submit'] == DI::l10n()->t("Update")) {
  94                                 q("UPDATE clients SET
  95                                                         client_id='%s',
  96                                                         pw='%s',
  97                                                         name='%s',
  98                                                         redirect_uri='%s',
  99                                                         icon='%s',
 100                                                         uid=%d
 101                                                 WHERE client_id='%s'",
 102                                         DBA::escape($key),
 103                                         DBA::escape($secret),
 104                                         DBA::escape($name),
 105                                         DBA::escape($redirect),
 106                                         DBA::escape($icon),
 107                                         local_user(),
 108                                         DBA::escape($key)
 109                                 );
 110                         } else {
 111                                 q("INSERT INTO clients
 112                                                         (client_id, pw, name, redirect_uri, icon, uid)
 113                                                 VALUES ('%s', '%s', '%s', '%s', '%s',%d)",
 114                                         DBA::escape($key),
 115                                         DBA::escape($secret),
 116                                         DBA::escape($name),
 117                                         DBA::escape($redirect),
 118                                         DBA::escape($icon),
 119                                         local_user()
 120                                 );
 121                         }
 122                 }
 123                 DI::baseUrl()->redirect('settings/oauth/', true);
 124                 return;
 125         }
 126
 127         if (($a->argc > 1) && ($a->argv[1] == 'addon')) {
 128                 BaseModule::checkFormSecurityTokenRedirectOnError('/settings/addon', 'settings_addon');
 129
 130                 Hook::callAll('addon_settings_post', $_POST);
 131                 return;
 132         }
 133
 134         if (($a->argc > 1) && ($a->argv[1] == 'connectors')) {
 135                 BaseModule::checkFormSecurityTokenRedirectOnError('/settings/connectors', 'settings_connectors');
 136
 137                 if (!empty($_POST['general-submit'])) {
 138                         DI::pConfig()->set(local_user(), 'system', 'accept_only_sharer', intval($_POST['accept_only_sharer']));
 139                         DI::pConfig()->set(local_user(), 'system', 'disable_cw', intval($_POST['disable_cw']));
 140                         DI::pConfig()->set(local_user(), 'system', 'no_intelligent_shortening', intval($_POST['no_intelligent_shortening']));
 141                         DI::pConfig()->set(local_user(), 'system', 'attach_link_title', intval($_POST['attach_link_title']));
 142                         DI::pConfig()->set(local_user(), 'system', 'ostatus_autofriend', intval($_POST['snautofollow']));
 143                         DI::pConfig()->set(local_user(), 'ostatus', 'default_group', $_POST['group-selection']);
 144                         DI::pConfig()->set(local_user(), 'ostatus', 'legacy_contact', $_POST['legacy_contact']);
 145                 } elseif (!empty($_POST['imap-submit'])) {
 146                         $mail_server       =                 $_POST['mail_server']       ?? '';
 147                         $mail_port         =                 $_POST['mail_port']         ?? '';
 148                         $mail_ssl          = strtolower(trim($_POST['mail_ssl']          ?? ''));
 149                         $mail_user         =                 $_POST['mail_user']         ?? '';
 150                         $mail_pass         =            trim($_POST['mail_pass']         ?? '');
 151                         $mail_action       =            trim($_POST['mail_action']       ?? '');
 152                         $mail_movetofolder =            trim($_POST['mail_movetofolder'] ?? '');
 153                         $mail_replyto      =                 $_POST['mail_replyto']      ?? '';
 154                         $mail_pubmail      =                 $_POST['mail_pubmail']      ?? '';
 155
 156                         if (
 157                                 !DI::config()->get('system', 'dfrn_only')
 158                                 && function_exists('imap_open')
 159                                 && !DI::config()->get('system', 'imap_disabled')
 160                         ) {
 161                                 $failed = false;
 162                                 $r = q("SELECT * FROM `mailacct` WHERE `uid` = %d LIMIT 1",
 163                                         intval(local_user())
 164                                 );
 165                                 if (!DBA::isResult($r)) {
 166                                         DBA::insert('mailacct', ['uid' => local_user()]);
 167                                 }
 168                                 if (strlen($mail_pass)) {
 169                                         $pass = '';
 170                                         openssl_public_encrypt($mail_pass, $pass, $a->user['pubkey']);
 171                                         DBA::update('mailacct', ['pass' => bin2hex($pass)], ['uid' => local_user()]);
 172                                 }
 173                                 $r = q("UPDATE `mailacct` SET `server` = '%s', `port` = %d, `ssltype` = '%s', `user` = '%s',
 174                                         `action` = %d, `movetofolder` = '%s',
 175                                         `mailbox` = 'INBOX', `reply_to` = '%s', `pubmail` = %d WHERE `uid` = %d",
 176                                         DBA::escape($mail_server),
 177                                         intval($mail_port),
 178                                         DBA::escape($mail_ssl),
 179                                         DBA::escape($mail_user),
 180                                         intval($mail_action),
 181                                         DBA::escape($mail_movetofolder),
 182                                         DBA::escape($mail_replyto),
 183                                         intval($mail_pubmail),
 184                                         intval(local_user())
 185                                 );
 186                                 Logger::notice('updating mailaccount', ['response' => $r]);
 187                                 $r = q("SELECT * FROM `mailacct` WHERE `uid` = %d LIMIT 1",
 188                                         intval(local_user())
 189                                 );
 190                                 if (DBA::isResult($r)) {
 191                                         $eacct = $r[0];
 192                                         $mb = Email::constructMailboxName($eacct);
 193
 194                                         if (strlen($eacct['server'])) {
 195                                                 $dcrpass = '';
 196                                                 openssl_private_decrypt(hex2bin($eacct['pass']), $dcrpass, $a->user['prvkey']);
 197                                                 $mbox = Email::connect($mb, $mail_user, $dcrpass);
 198                                                 unset($dcrpass);
 199                                                 if (!$mbox) {
 200                                                         $failed = true;
 201                                                         notice(DI::l10n()->t('Failed to connect with email account using the settings provided.'));
 202                                                 }
 203                                         }
 204                                 }
 205                         }
 206                 }
 207
 208                 Hook::callAll('connector_settings_post', $_POST);
 209                 return;
 210         }
 211
 212         if (($a->argc > 1) && ($a->argv[1] === 'features')) {
 213                 BaseModule::checkFormSecurityTokenRedirectOnError('/settings/features', 'settings_features');
 214                 foreach ($_POST as $k => $v) {
 215                         if (strpos($k, 'feature_') === 0) {
 216                                 DI::pConfig()->set(local_user(), 'feature', substr($k, 8), ((intval($v)) ? 1 : 0));
 217                         }
 218                 }
 219                 return;
 220         }
 221
 222         BaseModule::checkFormSecurityTokenRedirectOnError('/settings', 'settings');
 223
 224         // Import Contacts from CSV file
 225         if (!empty($_POST['importcontact-submit'])) {
 226                 if (isset($_FILES['importcontact-filename'])) {
 227                         // was there an error
 228                         if ($_FILES['importcontact-filename']['error'] > 0) {
 229                                 Logger::notice('Contact CSV file upload error');
 230                                 notice(DI::l10n()->t('Contact CSV file upload error'));
 231                         } else {
 232                                 $csvArray = array_map('str_getcsv', file($_FILES['importcontact-filename']['tmp_name']));
 233                                 // import contacts
 234                                 foreach ($csvArray as $csvRow) {
 235                                         // The 1st row may, or may not contain the headers of the table
 236                                         // We expect the 1st field of the row to contain either the URL
 237                                         // or the handle of the account, therefore we check for either
 238                                         // "http" or "@" to be present in the string.
 239                                         // All other fields from the row will be ignored
 240                                         if ((strpos($csvRow[0],'@') !== false) || (strpos($csvRow[0],'http') !== false)) {
 241                                                 Worker::add(PRIORITY_LOW, 'AddContact', $_SESSION['uid'], $csvRow[0]);
 242                                         }
 243                                 }
 244
 245                                 info(DI::l10n()->t('Importing Contacts done'));
 246                                 // delete temp file
 247                                 unlink($_FILES['importcontact-filename']['tmp_name']);
 248                         }
 249                 }
 250
 251                 return;
 252         }
 253
 254         if (!empty($_POST['resend_relocate'])) {
 255                 Worker::add(PRIORITY_HIGH, 'Notifier', Delivery::RELOCATION, local_user());
 256                 info(DI::l10n()->t("Relocate message has been send to your contacts"));
 257                 DI::baseUrl()->redirect('settings');
 258         }
 259
 260         Hook::callAll('settings_post', $_POST);
 261
 262         if (!empty($_POST['password']) || !empty($_POST['confirm'])) {
 263                 $newpass = $_POST['password'];
 264                 $confirm = $_POST['confirm'];
 265
 266                 try {
 267                         if ($newpass != $confirm) {
 268                                 throw new Exception(DI::l10n()->t('Passwords do not match.'));
 269                         }
 270
 271                         //  check if the old password was supplied correctly before changing it to the new value
 272                         User::getIdFromPasswordAuthentication(local_user(), $_POST['opassword']);
 273
 274                         $result = User::updatePassword(local_user(), $newpass);
 275                         if (!DBA::isResult($result)) {
 276                                 throw new Exception(DI::l10n()->t('Password update failed. Please try again.'));
 277                         }
 278
 279                         info(DI::l10n()->t('Password changed.'));
 280                 } catch (Exception $e) {
 281                         notice($e->getMessage());
 282                         notice(DI::l10n()->t('Password unchanged.'));
 283                 }
 284         }
 285
 286         $username         = (!empty($_POST['username'])   ? Strings::escapeTags(trim($_POST['username']))     : '');
 287         $email            = (!empty($_POST['email'])      ? Strings::escapeTags(trim($_POST['email']))        : '');
 288         $timezone         = (!empty($_POST['timezone'])   ? Strings::escapeTags(trim($_POST['timezone']))     : '');
 289         $language         = (!empty($_POST['language'])   ? Strings::escapeTags(trim($_POST['language']))     : '');
 290
 291         $defloc           = (!empty($_POST['defloc'])     ? Strings::escapeTags(trim($_POST['defloc']))       : '');
 292         $maxreq           = (!empty($_POST['maxreq'])     ? intval($_POST['maxreq'])             : 0);
 293         $expire           = (!empty($_POST['expire'])     ? intval($_POST['expire'])             : 0);
 294         $def_gid          = (!empty($_POST['group-selection']) ? intval($_POST['group-selection']) : 0);
 295
 296
 297         $expire_items     = (!empty($_POST['expire_items']) ? intval($_POST['expire_items'])     : 0);
 298         $expire_notes     = (!empty($_POST['expire_notes']) ? intval($_POST['expire_notes'])     : 0);
 299         $expire_starred   = (!empty($_POST['expire_starred']) ? intval($_POST['expire_starred']) : 0);
 300         $expire_photos    = (!empty($_POST['expire_photos'])? intval($_POST['expire_photos'])    : 0);
 301         $expire_network_only    = (!empty($_POST['expire_network_only'])? intval($_POST['expire_network_only'])  : 0);
 302
 303         $delete_openid    = ((!empty($_POST['delete_openid']) && (intval($_POST['delete_openid']) == 1)) ? 1: 0);
 304
 305         $allow_location   = ((!empty($_POST['allow_location']) && (intval($_POST['allow_location']) == 1)) ? 1: 0);
 306         $publish          = ((!empty($_POST['profile_in_directory']) && (intval($_POST['profile_in_directory']) == 1)) ? 1: 0);
 307         $net_publish      = ((!empty($_POST['profile_in_netdirectory']) && (intval($_POST['profile_in_netdirectory']) == 1)) ? 1: 0);
 308         $old_visibility   = ((!empty($_POST['visibility']) && (intval($_POST['visibility']) == 1)) ? 1 : 0);
 309         $account_type     = ((!empty($_POST['account-type']) && (intval($_POST['account-type']))) ? intval($_POST['account-type']) : 0);
 310         $page_flags       = ((!empty($_POST['page-flags']) && (intval($_POST['page-flags']))) ? intval($_POST['page-flags']) : 0);
 311         $blockwall        = ((!empty($_POST['blockwall']) && (intval($_POST['blockwall']) == 1)) ? 0: 1); // this setting is inverted!
 312         $blocktags        = ((!empty($_POST['blocktags']) && (intval($_POST['blocktags']) == 1)) ? 0: 1); // this setting is inverted!
 313         $unkmail          = ((!empty($_POST['unkmail']) && (intval($_POST['unkmail']) == 1)) ? 1: 0);
 314         $cntunkmail       = (!empty($_POST['cntunkmail']) ? intval($_POST['cntunkmail']) : 0);
 315         $hide_friends     = (($_POST['hide-friends'] == 1) ? 1: 0);
 316         $hidewall         = (($_POST['hidewall'] == 1) ? 1: 0);
 317         $unlisted         = (($_POST['unlisted'] == 1) ? 1: 0);
 318         $accessiblephotos = (($_POST['accessible-photos'] == 1) ? 1: 0);
 319
 320         $email_textonly   = (($_POST['email_textonly'] == 1) ? 1 : 0);
 321         $detailed_notif   = (($_POST['detailed_notif'] == 1) ? 1 : 0);
 322
 323         $notify = 0;
 324
 325         if (!empty($_POST['notify1'])) {
 326                 $notify += intval($_POST['notify1']);
 327         }
 328         if (!empty($_POST['notify2'])) {
 329                 $notify += intval($_POST['notify2']);
 330         }
 331         if (!empty($_POST['notify3'])) {
 332                 $notify += intval($_POST['notify3']);
 333         }
 334         if (!empty($_POST['notify4'])) {
 335                 $notify += intval($_POST['notify4']);
 336         }
 337         if (!empty($_POST['notify5'])) {
 338                 $notify += intval($_POST['notify5']);
 339         }
 340         if (!empty($_POST['notify6'])) {
 341                 $notify += intval($_POST['notify6']);
 342         }
 343         if (!empty($_POST['notify7'])) {
 344                 $notify += intval($_POST['notify7']);
 345         }
 346         if (!empty($_POST['notify8'])) {
 347                 $notify += intval($_POST['notify8']);
 348         }
 349
 350         // Adjust the page flag if the account type doesn't fit to the page flag.
 351         if (($account_type == User::ACCOUNT_TYPE_PERSON) && !in_array($page_flags, [User::PAGE_FLAGS_NORMAL, User::PAGE_FLAGS_SOAPBOX, User::PAGE_FLAGS_FREELOVE])) {
 352                 $page_flags = User::PAGE_FLAGS_NORMAL;
 353         } elseif (($account_type == User::ACCOUNT_TYPE_ORGANISATION) && !in_array($page_flags, [User::PAGE_FLAGS_SOAPBOX])) {
 354                 $page_flags = User::PAGE_FLAGS_SOAPBOX;
 355         } elseif (($account_type == User::ACCOUNT_TYPE_NEWS) && !in_array($page_flags, [User::PAGE_FLAGS_SOAPBOX])) {
 356                 $page_flags = User::PAGE_FLAGS_SOAPBOX;
 357         } elseif (($account_type == User::ACCOUNT_TYPE_COMMUNITY) && !in_array($page_flags, [User::PAGE_FLAGS_COMMUNITY, User::PAGE_FLAGS_PRVGROUP])) {
 358                 $page_flags = User::PAGE_FLAGS_COMMUNITY;
 359         }
 360
 361         $err = '';
 362
 363         if ($username != $a->user['username']) {
 364                 if (strlen($username) > 40) {
 365                         $err .= DI::l10n()->t('Please use a shorter name.');
 366                 }
 367                 if (strlen($username) < 3) {
 368                         $err .= DI::l10n()->t('Name too short.');
 369                 }
 370         }
 371
 372         if ($email != $a->user['email']) {
 373                 //  check for the correct password
 374                 if (!User::authenticate(intval(local_user()), $_POST['mpassword'])) {
 375                         $err .= DI::l10n()->t('Wrong Password.');
 376                         $email = $a->user['email'];
 377                 }
 378                 //  check the email is valid
 379                 if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
 380                         $err .= DI::l10n()->t('Invalid email.');
 381                 }
 382                 //  ensure new email is not the admin mail
 383                 if (DI::config()->get('config', 'admin_email')) {
 384                         $adminlist = explode(",", str_replace(" ", "", strtolower(DI::config()->get('config', 'admin_email'))));
 385                         if (in_array(strtolower($email), $adminlist)) {
 386                                 $err .= DI::l10n()->t('Cannot change to that email.');
 387                                 $email = $a->user['email'];
 388                         }
 389                 }
 390         }
 391
 392         if (strlen($err)) {
 393                 notice($err);
 394                 return;
 395         }
 396
 397         if (($timezone != $a->user['timezone']) && strlen($timezone)) {
 398                 date_default_timezone_set($timezone);
 399         }
 400
 401         $aclFormatter = DI::aclFormatter();
 402
 403         $str_group_allow   = !empty($_POST['group_allow'])   ? $aclFormatter->toString($_POST['group_allow'])   : '';
 404         $str_contact_allow = !empty($_POST['contact_allow']) ? $aclFormatter->toString($_POST['contact_allow']) : '';
 405         $str_group_deny    = !empty($_POST['group_deny'])    ? $aclFormatter->toString($_POST['group_deny'])    : '';
 406         $str_contact_deny  = !empty($_POST['contact_deny'])  ? $aclFormatter->toString($_POST['contact_deny'])  : '';
 407
 408         DI::pConfig()->set(local_user(), 'expire', 'items', $expire_items);
 409         DI::pConfig()->set(local_user(), 'expire', 'notes', $expire_notes);
 410         DI::pConfig()->set(local_user(), 'expire', 'starred', $expire_starred);
 411         DI::pConfig()->set(local_user(), 'expire', 'photos', $expire_photos);
 412         DI::pConfig()->set(local_user(), 'expire', 'network_only', $expire_network_only);
 413
 414         DI::pConfig()->set(local_user(), 'system', 'email_textonly', $email_textonly);
 415         DI::pConfig()->set(local_user(), 'system', 'detailed_notif', $detailed_notif);
 416         DI::pConfig()->set(local_user(), 'system', 'unlisted', $unlisted);
 417         DI::pConfig()->set(local_user(), 'system', 'accessible-photos', $accessiblephotos);
 418
 419         if ($page_flags == User::PAGE_FLAGS_PRVGROUP) {
 420                 $hidewall = 1;
 421                 if (!$str_contact_allow && !$str_group_allow && !$str_contact_deny && !$str_group_deny) {
 422                         if ($def_gid) {
 423                                 info(DI::l10n()->t('Private forum has no privacy permissions. Using default privacy group.'));
 424                                 $str_group_allow = '<' . $def_gid . '>';
 425                         } else {
 426                                 notice(DI::l10n()->t('Private forum has no privacy permissions and no default privacy group.'));
 427                         }
 428                 }
 429         }
 430
 431         $fields = ['username' => $username, 'email' => $email, 'timezone' => $timezone,
 432                 'allow_cid' => $str_contact_allow, 'allow_gid' => $str_group_allow, 'deny_cid' => $str_contact_deny, 'deny_gid' => $str_group_deny,
 433                 'notify-flags' => $notify, 'page-flags' => $page_flags, 'account-type' => $account_type, 'default-location' => $defloc,
 434                 'allow_location' => $allow_location, 'maxreq' => $maxreq, 'expire' => $expire, 'def_gid' => $def_gid, 'blockwall' => $blockwall,
 435                 'hidewall' => $hidewall, 'blocktags' => $blocktags, 'unkmail' => $unkmail, 'cntunkmail' => $cntunkmail, 'language' => $language];
 436
 437         if ($delete_openid) {
 438                 $fields['openid'] = '';
 439                 $fields['openidserver'] = '';
 440         }
 441
 442         if (!DBA::update('user', $fields, ['uid' => local_user()])) {
 443                 notice(DI::l10n()->t('Settings were not updated.'));
 444         }
 445
 446         // clear session language
 447         unset($_SESSION['language']);
 448
 449         q("UPDATE `profile`
 450                 SET `publish` = %d,
 451                 `name` = '%s',
 452                 `net-publish` = %d,
 453                 `hide-friends` = %d
 454                 WHERE `uid` = %d",
 455                 intval($publish),
 456                 DBA::escape($username),
 457                 intval($net_publish),
 458                 intval($hide_friends),
 459                 intval(local_user())
 460         );
 461
 462         Contact::updateSelfFromUserID(local_user());
 463
 464         if (($old_visibility != $net_publish) || ($page_flags != $old_page_flags)) {
 465                 // Update global directory in background
 466                 $url = $_SESSION['my_url'];
 467                 if ($url && strlen(DI::config()->get('system', 'directory'))) {
 468                         Worker::add(PRIORITY_LOW, "Directory", $url);
 469                 }
 470         }
 471
 472         Worker::add(PRIORITY_LOW, 'ProfileUpdate', local_user());
 473
 474         // Update the global contact for the user
 475         GContact::updateForUser(local_user());
 476
 477         DI::baseUrl()->redirect('settings');
 478         return; // NOTREACHED
 479 }
 480
 481
 482 function settings_content(App $a)
 483 {
 484         $o = '';
 485         Nav::setSelected('settings');
 486
 487         if (!local_user()) {
 488                 //notice(DI::l10n()->t('Permission denied.'));
 489                 return Login::form();
 490         }
 491
 492         if (!empty($_SESSION['submanage'])) {
 493                 notice(DI::l10n()->t('Permission denied.'));
 494                 return;
 495         }
 496
 497         if (($a->argc > 1) && ($a->argv[1] === 'oauth')) {
 498                 if (($a->argc > 2) && ($a->argv[2] === 'add')) {
 499                         $tpl = Renderer::getMarkupTemplate('settings/oauth_edit.tpl');
 500                         $o .= Renderer::replaceMacros($tpl, [
 501                                 '$form_security_token' => BaseModule::getFormSecurityToken("settings_oauth"),
 502                                 '$title'        => DI::l10n()->t('Add application'),
 503                                 '$submit'       => DI::l10n()->t('Save Settings'),
 504                                 '$cancel'       => DI::l10n()->t('Cancel'),
 505                                 '$name'         => ['name', DI::l10n()->t('Name'), '', ''],
 506                                 '$key'          => ['key', DI::l10n()->t('Consumer Key'), '', ''],
 507                                 '$secret'       => ['secret', DI::l10n()->t('Consumer Secret'), '', ''],
 508                                 '$redirect'     => ['redirect', DI::l10n()->t('Redirect'), '', ''],
 509                                 '$icon'         => ['icon', DI::l10n()->t('Icon url'), '', ''],
 510                         ]);
 511                         return $o;
 512                 }
 513
 514                 if (($a->argc > 3) && ($a->argv[2] === 'edit')) {
 515                         $r = q("SELECT * FROM clients WHERE client_id='%s' AND uid=%d",
 516                                         DBA::escape($a->argv[3]),
 517                                         local_user());
 518
 519                         if (!DBA::isResult($r)) {
 520                                 notice(DI::l10n()->t("You can't edit this application."));
 521                                 return;
 522                         }
 523                         $app = $r[0];
 524
 525                         $tpl = Renderer::getMarkupTemplate('settings/oauth_edit.tpl');
 526                         $o .= Renderer::replaceMacros($tpl, [
 527                                 '$form_security_token' => BaseModule::getFormSecurityToken("settings_oauth"),
 528                                 '$title'        => DI::l10n()->t('Add application'),
 529                                 '$submit'       => DI::l10n()->t('Update'),
 530                                 '$cancel'       => DI::l10n()->t('Cancel'),
 531                                 '$name'         => ['name', DI::l10n()->t('Name'), $app['name'] , ''],
 532                                 '$key'          => ['key', DI::l10n()->t('Consumer Key'), $app['client_id'], ''],
 533                                 '$secret'       => ['secret', DI::l10n()->t('Consumer Secret'), $app['pw'], ''],
 534                                 '$redirect'     => ['redirect', DI::l10n()->t('Redirect'), $app['redirect_uri'], ''],
 535                                 '$icon'         => ['icon', DI::l10n()->t('Icon url'), $app['icon'], ''],
 536                         ]);
 537                         return $o;
 538                 }
 539
 540                 if (($a->argc > 3) && ($a->argv[2] === 'delete')) {
 541                         BaseModule::checkFormSecurityTokenRedirectOnError('/settings/oauth', 'settings_oauth', 't');
 542
 543                         DBA::delete('clients', ['client_id' => $a->argv[3], 'uid' => local_user()]);
 544                         DI::baseUrl()->redirect('settings/oauth/', true);
 545                         return;
 546                 }
 547
 548                 /// @TODO validate result with DBA::isResult()
 549                 $r = q("SELECT clients.*, tokens.id as oauth_token, (clients.uid=%d) AS my
 550                                 FROM clients
 551                                 LEFT JOIN tokens ON clients.client_id=tokens.client_id
 552                                 WHERE clients.uid IN (%d, 0)",
 553                                 local_user(),
 554                                 local_user());
 555
 556
 557                 $tpl = Renderer::getMarkupTemplate('settings/oauth.tpl');
 558                 $o .= Renderer::replaceMacros($tpl, [
 559                         '$form_security_token' => BaseModule::getFormSecurityToken("settings_oauth"),
 560                         '$baseurl'      => DI::baseUrl()->get(true),
 561                         '$title'        => DI::l10n()->t('Connected Apps'),
 562                         '$add'          => DI::l10n()->t('Add application'),
 563                         '$edit'         => DI::l10n()->t('Edit'),
 564                         '$delete'               => DI::l10n()->t('Delete'),
 565                         '$consumerkey' => DI::l10n()->t('Client key starts with'),
 566                         '$noname'       => DI::l10n()->t('No name'),
 567                         '$remove'       => DI::l10n()->t('Remove authorization'),
 568                         '$apps'         => $r,
 569                 ]);
 570                 return $o;
 571         }
 572
 573         if (($a->argc > 1) && ($a->argv[1] === 'addon')) {
 574                 $settings_addons = "";
 575
 576                 $r = q("SELECT * FROM `hook` WHERE `hook` = 'addon_settings' ");
 577                 if (!DBA::isResult($r)) {
 578                         $settings_addons = DI::l10n()->t('No Addon settings configured');
 579                 }
 580
 581                 Hook::callAll('addon_settings', $settings_addons);
 582
 583
 584                 $tpl = Renderer::getMarkupTemplate('settings/addons.tpl');
 585                 $o .= Renderer::replaceMacros($tpl, [
 586                         '$form_security_token' => BaseModule::getFormSecurityToken("settings_addon"),
 587                         '$title'        => DI::l10n()->t('Addon Settings'),
 588                         '$settings_addons' => $settings_addons
 589                 ]);
 590                 return $o;
 591         }
 592
 593         if (($a->argc > 1) && ($a->argv[1] === 'features')) {
 594
 595                 $arr = [];
 596                 $features = Feature::get();
 597                 foreach ($features as $fname => $fdata) {
 598                         $arr[$fname] = [];
 599                         $arr[$fname][0] = $fdata[0];
 600                         foreach (array_slice($fdata,1) as $f) {
 601                                 $arr[$fname][1][] = ['feature_' . $f[0], $f[1], Feature::isEnabled(local_user(), $f[0]), $f[2]];
 602                         }
 603                 }
 604
 605                 $tpl = Renderer::getMarkupTemplate('settings/features.tpl');
 606                 $o .= Renderer::replaceMacros($tpl, [
 607                         '$form_security_token' => BaseModule::getFormSecurityToken("settings_features"),
 608                         '$title'               => DI::l10n()->t('Additional Features'),
 609                         '$features'            => $arr,
 610                         '$submit'              => DI::l10n()->t('Save Settings'),
 611                 ]);
 612                 return $o;
 613         }
 614
 615         if (($a->argc > 1) && ($a->argv[1] === 'connectors')) {
 616                 $accept_only_sharer        = intval(DI::pConfig()->get(local_user(), 'system', 'accept_only_sharer'));
 617                 $disable_cw                = intval(DI::pConfig()->get(local_user(), 'system', 'disable_cw'));
 618                 $no_intelligent_shortening = intval(DI::pConfig()->get(local_user(), 'system', 'no_intelligent_shortening'));
 619                 $attach_link_title         = intval(DI::pConfig()->get(local_user(), 'system', 'attach_link_title'));
 620                 $ostatus_autofriend        = intval(DI::pConfig()->get(local_user(), 'system', 'ostatus_autofriend'));
 621                 $default_group             = DI::pConfig()->get(local_user(), 'ostatus', 'default_group');
 622                 $legacy_contact            = DI::pConfig()->get(local_user(), 'ostatus', 'legacy_contact');
 623
 624                 if (!empty($legacy_contact)) {
 625                         /// @todo Isn't it supposed to be a $a->internalRedirect() call?
 626                         DI::page()['htmlhead'] = '<meta http-equiv="refresh" content="0; URL=' . DI::baseUrl().'/ostatus_subscribe?url=' . urlencode($legacy_contact) . '">';
 627                 }
 628
 629                 $settings_connectors = '';
 630                 Hook::callAll('connector_settings', $settings_connectors);
 631
 632                 if (is_site_admin()) {
 633                         $diasp_enabled = DI::l10n()->t('Built-in support for %s connectivity is %s', DI::l10n()->t('Diaspora (Socialhome, Hubzilla)'), ((DI::config()->get('system', 'diaspora_enabled')) ? DI::l10n()->t('enabled') : DI::l10n()->t('disabled')));
 634                         $ostat_enabled = DI::l10n()->t('Built-in support for %s connectivity is %s', DI::l10n()->t('OStatus (GNU Social)'), ((DI::config()->get('system', 'ostatus_disabled')) ? DI::l10n()->t('disabled') : DI::l10n()->t('enabled')));
 635                 } else {
 636                         $diasp_enabled = "";
 637                         $ostat_enabled = "";
 638                 }
 639
 640                 $mail_disabled = ((function_exists('imap_open') && (!DI::config()->get('system', 'imap_disabled'))) ? 0 : 1);
 641                 if (DI::config()->get('system', 'dfrn_only')) {
 642                         $mail_disabled = 1;
 643                 }
 644                 if (!$mail_disabled) {
 645                         $r = q("SELECT * FROM `mailacct` WHERE `uid` = %d LIMIT 1",
 646                                 local_user()
 647                         );
 648                 } else {
 649                         $r = null;
 650                 }
 651
 652                 $mail_server       = ((DBA::isResult($r)) ? $r[0]['server'] : '');
 653                 $mail_port         = ((DBA::isResult($r) && intval($r[0]['port'])) ? intval($r[0]['port']) : '');
 654                 $mail_ssl          = ((DBA::isResult($r)) ? $r[0]['ssltype'] : '');
 655                 $mail_user         = ((DBA::isResult($r)) ? $r[0]['user'] : '');
 656                 $mail_replyto      = ((DBA::isResult($r)) ? $r[0]['reply_to'] : '');
 657                 $mail_pubmail      = ((DBA::isResult($r)) ? $r[0]['pubmail'] : 0);
 658                 $mail_action       = ((DBA::isResult($r)) ? $r[0]['action'] : 0);
 659                 $mail_movetofolder = ((DBA::isResult($r)) ? $r[0]['movetofolder'] : '');
 660                 $mail_chk          = ((DBA::isResult($r)) ? $r[0]['last_check'] : DBA::NULL_DATETIME);
 661
 662
 663                 $tpl = Renderer::getMarkupTemplate('settings/connectors.tpl');
 664
 665                 $mail_disabled_message = ($mail_disabled ? DI::l10n()->t('Email access is disabled on this site.') : '');
 666
 667                 $ssl_options = ['TLS' => 'TLS', 'SSL' => 'SSL'];
 668
 669                 if (DI::config()->get('system', 'insecure_imap')) {
 670                         $ssl_options['notls'] = DI::l10n()->t('None');
 671                 }
 672
 673                 $o .= Renderer::replaceMacros($tpl, [
 674                         '$form_security_token' => BaseModule::getFormSecurityToken("settings_connectors"),
 675
 676                         '$title'        => DI::l10n()->t('Social Networks'),
 677
 678                         '$diasp_enabled' => $diasp_enabled,
 679                         '$ostat_enabled' => $ostat_enabled,
 680
 681                         '$general_settings' => DI::l10n()->t('General Social Media Settings'),
 682                         '$accept_only_sharer' => ['accept_only_sharer', DI::l10n()->t('Accept only top level posts by contacts you follow'), $accept_only_sharer, DI::l10n()->t('The system does an auto completion of threads when a comment arrives. This has got the side effect that you can receive posts that had been started by a non-follower but had been commented by someone you follow. This setting deactivates this behaviour. When activated, you strictly only will receive posts from people you really do follow.')],
 683                         '$disable_cw' => ['disable_cw', DI::l10n()->t('Disable Content Warning'), $disable_cw, DI::l10n()->t('Users on networks like Mastodon or Pleroma are able to set a content warning field which collapse their post by default. This disables the automatic collapsing and sets the content warning as the post title. Doesn\'t affect any other content filtering you eventually set up.')],
 684                         '$no_intelligent_shortening' => ['no_intelligent_shortening', DI::l10n()->t('Disable intelligent shortening'), $no_intelligent_shortening, DI::l10n()->t('Normally the system tries to find the best link to add to shortened posts. If this option is enabled then every shortened post will always point to the original friendica post.')],
 685                         '$attach_link_title' => ['attach_link_title', DI::l10n()->t('Attach the link title'), $attach_link_title, DI::l10n()->t('When activated, the title of the attached link will be added as a title on posts to Diaspora. This is mostly helpful with "remote-self" contacts that share feed content.')],
 686                         '$ostatus_autofriend' => ['snautofollow', DI::l10n()->t("Automatically follow any GNU Social \x28OStatus\x29 followers/mentioners"), $ostatus_autofriend, DI::l10n()->t('If you receive a message from an unknown OStatus user, this option decides what to do. If it is checked, a new contact will be created for every unknown user.')],
 687                         '$default_group' => Group::displayGroupSelection(local_user(), $default_group, DI::l10n()->t("Default group for OStatus contacts")),
 688                         '$legacy_contact' => ['legacy_contact', DI::l10n()->t('Your legacy GNU Social account'), $legacy_contact, DI::l10n()->t("If you enter your old GNU Social/Statusnet account name here \x28in the format user@domain.tld\x29, your contacts will be added automatically. The field will be emptied when done.")],
 689
 690                         '$repair_ostatus_url' => DI::baseUrl() . '/repair_ostatus',
 691                         '$repair_ostatus_text' => DI::l10n()->t('Repair OStatus subscriptions'),
 692
 693                         '$settings_connectors' => $settings_connectors,
 694
 695                         '$h_imap' => DI::l10n()->t('Email/Mailbox Setup'),
 696                         '$imap_desc' => DI::l10n()->t("If you wish to communicate with email contacts using this service \x28optional\x29, please specify how to connect to your mailbox."),
 697                         '$imap_lastcheck' => ['imap_lastcheck', DI::l10n()->t('Last successful email check:'), $mail_chk, ''],
 698                         '$mail_disabled' => $mail_disabled_message,
 699                         '$mail_server'  => ['mail_server',      DI::l10n()->t('IMAP server name:'), $mail_server, ''],
 700                         '$mail_port'    => ['mail_port',        DI::l10n()->t('IMAP port:'), $mail_port, ''],
 701                         '$mail_ssl'     => ['mail_ssl',         DI::l10n()->t('Security:'), strtoupper($mail_ssl), '', $ssl_options],
 702                         '$mail_user'    => ['mail_user',        DI::l10n()->t('Email login name:'), $mail_user, ''],
 703                         '$mail_pass'    => ['mail_pass',        DI::l10n()->t('Email password:'), '', ''],
 704                         '$mail_replyto' => ['mail_replyto',     DI::l10n()->t('Reply-to address:'), $mail_replyto, 'Optional'],
 705                         '$mail_pubmail' => ['mail_pubmail',     DI::l10n()->t('Send public posts to all email contacts:'), $mail_pubmail, ''],
 706                         '$mail_action'  => ['mail_action',      DI::l10n()->t('Action after import:'), $mail_action, '', [0 => DI::l10n()->t('None'), 1 => DI::l10n()->t('Delete'), 2 => DI::l10n()->t('Mark as seen'), 3 => DI::l10n()->t('Move to folder')]],
 707                         '$mail_movetofolder' => ['mail_movetofolder', DI::l10n()->t('Move to folder:'), $mail_movetofolder, ''],
 708                         '$submit' => DI::l10n()->t('Save Settings'),
 709                 ]);
 710
 711                 Hook::callAll('display_settings', $o);
 712                 return $o;
 713         }
 714
 715         /*
 716          * ACCOUNT SETTINGS
 717          */
 718
 719         $profile = DBA::selectFirst('profile', [], ['uid' => local_user()]);
 720         if (!DBA::isResult($profile)) {
 721                 notice(DI::l10n()->t('Unable to find your profile. Please contact your admin.'));
 722                 return;
 723         }
 724
 725         $username   = $a->user['username'];
 726         $email      = $a->user['email'];
 727         $nickname   = $a->user['nickname'];
 728         $timezone   = $a->user['timezone'];
 729         $language   = $a->user['language'];
 730         $notify     = $a->user['notify-flags'];
 731         $defloc     = $a->user['default-location'];
 732         $openid     = $a->user['openid'];
 733         $maxreq     = $a->user['maxreq'];
 734         $expire     = ((intval($a->user['expire'])) ? $a->user['expire'] : '');
 735         $unkmail    = $a->user['unkmail'];
 736         $cntunkmail = $a->user['cntunkmail'];
 737
 738         $expire_items = DI::pConfig()->get(local_user(), 'expire', 'items', true);
 739         $expire_notes = DI::pConfig()->get(local_user(), 'expire', 'notes', true);
 740         $expire_starred = DI::pConfig()->get(local_user(), 'expire', 'starred', true);
 741         $expire_photos = DI::pConfig()->get(local_user(), 'expire', 'photos', false);
 742         $expire_network_only = DI::pConfig()->get(local_user(), 'expire', 'network_only', false);
 743
 744         if (!strlen($a->user['timezone'])) {
 745                 $timezone = date_default_timezone_get();
 746         }
 747
 748         // Set the account type to "Community" when the page is a community page but the account type doesn't fit
 749         // This is only happening on the first visit after the update
 750         if (in_array($a->user['page-flags'], [User::PAGE_FLAGS_COMMUNITY, User::PAGE_FLAGS_PRVGROUP]) &&
 751                 ($a->user['account-type'] != User::ACCOUNT_TYPE_COMMUNITY))
 752                 $a->user['account-type'] = User::ACCOUNT_TYPE_COMMUNITY;
 753
 754         $pageset_tpl = Renderer::getMarkupTemplate('settings/pagetypes.tpl');
 755
 756         $pagetype = Renderer::replaceMacros($pageset_tpl, [
 757                 '$account_types'        => DI::l10n()->t("Account Types"),
 758                 '$user'                 => DI::l10n()->t("Personal Page Subtypes"),
 759                 '$community'            => DI::l10n()->t("Community Forum Subtypes"),
 760                 '$account_type'         => $a->user['account-type'],
 761                 '$type_person'          => User::ACCOUNT_TYPE_PERSON,
 762                 '$type_organisation'    => User::ACCOUNT_TYPE_ORGANISATION,
 763                 '$type_news'            => User::ACCOUNT_TYPE_NEWS,
 764                 '$type_community'       => User::ACCOUNT_TYPE_COMMUNITY,
 765
 766                 '$account_person'       => ['account-type', DI::l10n()->t('Personal Page'), User::ACCOUNT_TYPE_PERSON,
 767                                                                         DI::l10n()->t('Account for a personal profile.'),
 768                                                                         ($a->user['account-type'] == User::ACCOUNT_TYPE_PERSON)],
 769
 770                 '$account_organisation' => ['account-type', DI::l10n()->t('Organisation Page'), User::ACCOUNT_TYPE_ORGANISATION,
 771                                                                         DI::l10n()->t('Account for an organisation that automatically approves contact requests as "Followers".'),
 772                                                                         ($a->user['account-type'] == User::ACCOUNT_TYPE_ORGANISATION)],
 773
 774                 '$account_news'         => ['account-type', DI::l10n()->t('News Page'), User::ACCOUNT_TYPE_NEWS,
 775                                                                         DI::l10n()->t('Account for a news reflector that automatically approves contact requests as "Followers".'),
 776                                                                         ($a->user['account-type'] == User::ACCOUNT_TYPE_NEWS)],
 777
 778                 '$account_community'    => ['account-type', DI::l10n()->t('Community Forum'), User::ACCOUNT_TYPE_COMMUNITY,
 779                                                                         DI::l10n()->t('Account for community discussions.'),
 780                                                                         ($a->user['account-type'] == User::ACCOUNT_TYPE_COMMUNITY)],
 781
 782                 '$page_normal'          => ['page-flags', DI::l10n()->t('Normal Account Page'), User::PAGE_FLAGS_NORMAL,
 783                                                                         DI::l10n()->t('Account for a regular personal profile that requires manual approval of "Friends" and "Followers".'),
 784                                                                         ($a->user['page-flags'] == User::PAGE_FLAGS_NORMAL)],
 785
 786                 '$page_soapbox'         => ['page-flags', DI::l10n()->t('Soapbox Page'), User::PAGE_FLAGS_SOAPBOX,
 787                                                                         DI::l10n()->t('Account for a public profile that automatically approves contact requests as "Followers".'),
 788                                                                         ($a->user['page-flags'] == User::PAGE_FLAGS_SOAPBOX)],
 789
 790                 '$page_community'       => ['page-flags', DI::l10n()->t('Public Forum'), User::PAGE_FLAGS_COMMUNITY,
 791                                                                         DI::l10n()->t('Automatically approves all contact requests.'),
 792                                                                         ($a->user['page-flags'] == User::PAGE_FLAGS_COMMUNITY)],
 793
 794                 '$page_freelove'        => ['page-flags', DI::l10n()->t('Automatic Friend Page'), User::PAGE_FLAGS_FREELOVE,
 795                                                                         DI::l10n()->t('Account for a popular profile that automatically approves contact requests as "Friends".'),
 796                                                                         ($a->user['page-flags'] == User::PAGE_FLAGS_FREELOVE)],
 797
 798                 '$page_prvgroup'        => ['page-flags', DI::l10n()->t('Private Forum [Experimental]'), User::PAGE_FLAGS_PRVGROUP,
 799                                                                         DI::l10n()->t('Requires manual approval of contact requests.'),
 800                                                                         ($a->user['page-flags'] == User::PAGE_FLAGS_PRVGROUP)],
 801
 802
 803         ]);
 804
 805         $noid = DI::config()->get('system', 'no_openid');
 806
 807         if ($noid) {
 808                 $openid_field = false;
 809         } else {
 810                 $openid_field = ['openid_url', DI::l10n()->t('OpenID:'), $openid, DI::l10n()->t("\x28Optional\x29 Allow this OpenID to login to this account."), "", "readonly", "url"];
 811         }
 812
 813         $opt_tpl = Renderer::getMarkupTemplate("field_checkbox.tpl");
 814         if (DI::config()->get('system', 'publish_all')) {
 815                 $profile_in_dir = '<input type="hidden" name="profile_in_directory" value="1" />';
 816         } else {
 817                 $profile_in_dir = Renderer::replaceMacros($opt_tpl, [
 818                         '$field' => ['profile_in_directory', DI::l10n()->t('Publish your profile in your local site directory?'), $profile['publish'], DI::l10n()->t('Your profile will be published in this node\'s <a href="%s">local directory</a>. Your profile details may be publicly visible depending on the system settings.', DI::baseUrl().'/directory')]
 819                 ]);
 820         }
 821
 822         $net_pub_desc = '';
 823         if (strlen(DI::config()->get('system', 'directory'))) {
 824                 $net_pub_desc = ' ' . DI::l10n()->t('Your profile will also be published in the global friendica directories (e.g. <a href="%s">%s</a>).', DI::config()->get('system', 'directory'), DI::config()->get('system', 'directory'));
 825         }
 826
 827         $tpl_addr = Renderer::getMarkupTemplate('settings/nick_set.tpl');
 828
 829         $prof_addr = Renderer::replaceMacros($tpl_addr,[
 830                 '$desc' => DI::l10n()->t("Your Identity Address is <strong>'%s'</strong> or '%s'.", $nickname . '@' . DI::baseUrl()->getHostname() . DI::baseUrl()->getUrlPath(), DI::baseUrl() . '/profile/' . $nickname),
 831                 '$basepath' => DI::baseUrl()->getHostname()
 832         ]);
 833
 834         $stpl = Renderer::getMarkupTemplate('settings/settings.tpl');
 835
 836         // Private/public post links for the non-JS ACL form
 837         $private_post = 1;
 838         if (!empty($_REQUEST['public']) && !$_REQUEST['public']) {
 839                 $private_post = 0;
 840         }
 841
 842         $query_str = DI::args()->getQueryString();
 843         if (strpos($query_str, 'public=1') !== false) {
 844                 $query_str = str_replace(['?public=1', '&public=1'], ['', ''], $query_str);
 845         }
 846
 847         // I think $a->query_string may never have ? in it, but I could be wrong
 848         // It looks like it's from the index.php?q=[etc] rewrite that the web
 849         // server does, which converts any ? to &, e.g. suggest&ignore=61 for suggest?ignore=61
 850         if (strpos($query_str, '?') === false) {
 851                 $public_post_link = '?public=1';
 852         } else {
 853                 $public_post_link = '&public=1';
 854         }
 855
 856         /* Installed langs */
 857         $lang_choices = DI::l10n()->getAvailableLanguages();
 858
 859         /// @TODO Fix indending (or so)
 860         $o .= Renderer::replaceMacros($stpl, [
 861                 '$ptitle'       => DI::l10n()->t('Account Settings'),
 862
 863                 '$submit'       => DI::l10n()->t('Save Settings'),
 864                 '$baseurl' => DI::baseUrl()->get(true),
 865                 '$uid' => local_user(),
 866                 '$form_security_token' => BaseModule::getFormSecurityToken("settings"),
 867                 '$nickname_block' => $prof_addr,
 868
 869                 '$h_pass'       => DI::l10n()->t('Password Settings'),
 870                 '$password1'=> ['password', DI::l10n()->t('New Password:'), '', DI::l10n()->t('Allowed characters are a-z, A-Z, 0-9 and special characters except white spaces, accentuated letters and colon (:).')],
 871                 '$password2'=> ['confirm', DI::l10n()->t('Confirm:'), '', DI::l10n()->t('Leave password fields blank unless changing')],
 872                 '$password3'=> ['opassword', DI::l10n()->t('Current Password:'), '', DI::l10n()->t('Your current password to confirm the changes')],
 873                 '$password4'=> ['mpassword', DI::l10n()->t('Password:'), '', DI::l10n()->t('Your current password to confirm the changes')],
 874                 '$oid_enable' => (!DI::config()->get('system', 'no_openid')),
 875                 '$openid'       => $openid_field,
 876                 '$delete_openid' => ['delete_openid', DI::l10n()->t('Delete OpenID URL'), false, ''],
 877
 878                 '$h_basic'      => DI::l10n()->t('Basic Settings'),
 879                 '$username' => ['username',  DI::l10n()->t('Full Name:'), $username, ''],
 880                 '$email'        => ['email', DI::l10n()->t('Email Address:'), $email, '', '', '', 'email'],
 881                 '$timezone' => ['timezone_select' , DI::l10n()->t('Your Timezone:'), Temporal::getTimezoneSelect($timezone), ''],
 882                 '$language' => ['language', DI::l10n()->t('Your Language:'), $language, DI::l10n()->t('Set the language we use to show you friendica interface and to send you emails'), $lang_choices],
 883                 '$defloc'       => ['defloc', DI::l10n()->t('Default Post Location:'), $defloc, ''],
 884                 '$allowloc' => ['allow_location', DI::l10n()->t('Use Browser Location:'), ($a->user['allow_location'] == 1), ''],
 885
 886                 '$h_prv'                  => DI::l10n()->t('Security and Privacy Settings'),
 887                 '$visibility'         => $profile['net-publish'],
 888                 '$maxreq'                 => ['maxreq', DI::l10n()->t('Maximum Friend Requests/Day:'), $maxreq , DI::l10n()->t("\x28to prevent spam abuse\x29")],
 889                 '$profile_in_dir'     => $profile_in_dir,
 890                 '$profile_in_net_dir' => ['profile_in_netdirectory', DI::l10n()->t('Allow your profile to be searchable globally?'), $profile['net-publish'], DI::l10n()->t("Activate this setting if you want others to easily find and follow you. Your profile will be searchable on remote systems. This setting also determines whether Friendica will inform search engines that your profile should be indexed or not.") . $net_pub_desc],
 891                 '$hide_friends'       => ['hide-friends', DI::l10n()->t('Hide your contact/friend list from viewers of your profile?'), $profile['hide-friends'], DI::l10n()->t('A list of your contacts is displayed on your profile page. Activate this option to disable the display of your contact list.')],
 892                 '$hide_wall'          => ['hidewall', DI::l10n()->t('Hide your profile details from anonymous viewers?'), $a->user['hidewall'], DI::l10n()->t('Anonymous visitors will only see your profile picture, your display name and the nickname you are using on your profile page. Your public posts and replies will still be accessible by other means.')],
 893                 '$unlisted'           => ['unlisted', DI::l10n()->t('Make public posts unlisted'), DI::pConfig()->get(local_user(), 'system', 'unlisted'), DI::l10n()->t('Your public posts will not appear on the community pages or in search results, nor be sent to relay servers. However they can still appear on public feeds on remote servers.')],
 894                 '$accessiblephotos'   => ['accessible-photos', DI::l10n()->t('Make all posted pictures accessible'), DI::pConfig()->get(local_user(), 'system', 'accessible-photos'), DI::l10n()->t("This option makes every posted picture accessible via the direct link. This is a workaround for the problem that most other networks can't handle permissions on pictures. Non public pictures still won't be visible for the public on your photo albums though.")],
 895                 '$blockwall'          => ['blockwall', DI::l10n()->t('Allow friends to post to your profile page?'), (intval($a->user['blockwall']) ? '0' : '1'), DI::l10n()->t('Your contacts may write posts on your profile wall. These posts will be distributed to your contacts')], // array('blockwall', DI::l10n()->t('Allow friends to post to your profile page:'), !$blockwall, ''),
 896                 '$blocktags'          => ['blocktags', DI::l10n()->t('Allow friends to tag your posts?'), (intval($a->user['blocktags']) ? '0' : '1'), DI::l10n()->t('Your contacts can add additional tags to your posts.')], // array('blocktags', DI::l10n()->t('Allow friends to tag your posts:'), !$blocktags, ''),
 897                 '$unkmail'            => ['unkmail', DI::l10n()->t('Permit unknown people to send you private mail?'), $unkmail, DI::l10n()->t('Friendica network users may send you private messages even if they are not in your contact list.')],
 898                 '$cntunkmail'         => ['cntunkmail', DI::l10n()->t('Maximum private messages per day from unknown people:'), $cntunkmail , DI::l10n()->t("\x28to prevent spam abuse\x29")],
 899                 '$group_select'       => Group::displayGroupSelection(local_user(), $a->user['def_gid']),
 900                 '$permissions'        => DI::l10n()->t('Default Post Permissions'),
 901                 '$aclselect'          => ACL::getFullSelectorHTML(DI::page(), $a->user),
 902
 903                 '$expire' => [
 904                         'label'        => DI::l10n()->t('Expiration settings'),
 905                         'days'         => ['expire',  DI::l10n()->t("Automatically expire posts after this many days:"), $expire, DI::l10n()->t('If empty, posts will not expire. Expired posts will be deleted')],
 906                         'items'        => ['expire_items', DI::l10n()->t('Expire posts'), $expire_items, DI::l10n()->t('When activated, posts and comments will be expired.')],
 907                         'notes'        => ['expire_notes', DI::l10n()->t('Expire personal notes'), $expire_notes, DI::l10n()->t('When activated, the personal notes on your profile page will be expired.')],
 908                         'starred'      => ['expire_starred', DI::l10n()->t('Expire starred posts'), $expire_starred, DI::l10n()->t('Starring posts keeps them from being expired. That behaviour is overwritten by this setting.')],
 909                         'photos'       => ['expire_photos', DI::l10n()->t('Expire photos'), $expire_photos, DI::l10n()->t('When activated, photos will be expired.')],
 910                         'network_only' => ['expire_network_only', DI::l10n()->t('Only expire posts by others'), $expire_network_only, DI::l10n()->t('When activated, your own posts never expire. Then the settings above are only valid for posts you received.')],
 911                 ],
 912
 913                 '$h_not'        => DI::l10n()->t('Notification Settings'),
 914                 '$lbl_not'      => DI::l10n()->t('Send a notification email when:'),
 915                 '$notify1'      => ['notify1', DI::l10n()->t('You receive an introduction'), ($notify & Type::INTRO), Type::INTRO, ''],
 916                 '$notify2'      => ['notify2', DI::l10n()->t('Your introductions are confirmed'), ($notify & Type::CONFIRM), Type::CONFIRM, ''],
 917                 '$notify3'      => ['notify3', DI::l10n()->t('Someone writes on your profile wall'), ($notify & Type::WALL), Type::WALL, ''],
 918                 '$notify4'      => ['notify4', DI::l10n()->t('Someone writes a followup comment'), ($notify & Type::COMMENT), Type::COMMENT, ''],
 919                 '$notify5'      => ['notify5', DI::l10n()->t('You receive a private message'), ($notify & Type::MAIL), Type::MAIL, ''],
 920                 '$notify6'  => ['notify6', DI::l10n()->t('You receive a friend suggestion'), ($notify & Type::SUGGEST), Type::SUGGEST, ''],
 921                 '$notify7'  => ['notify7', DI::l10n()->t('You are tagged in a post'), ($notify & Type::TAG_SELF), Type::TAG_SELF, ''],
 922                 '$notify8'  => ['notify8', DI::l10n()->t('You are poked/prodded/etc. in a post'), ($notify & Type::POKE), Type::POKE, ''],
 923
 924                 '$desktop_notifications' => ['desktop_notifications', DI::l10n()->t('Activate desktop notifications') , false, DI::l10n()->t('Show desktop popup on new notifications')],
 925
 926                 '$email_textonly' => ['email_textonly', DI::l10n()->t('Text-only notification emails'),
 927                                                                         DI::pConfig()->get(local_user(), 'system', 'email_textonly'),
 928                                                                         DI::l10n()->t('Send text only notification emails, without the html part')],
 929
 930                 '$detailed_notif' => ['detailed_notif', DI::l10n()->t('Show detailled notifications'),
 931                                                                         DI::pConfig()->get(local_user(), 'system', 'detailed_notif'),
 932                                                                         DI::l10n()->t('Per default, notifications are condensed to a single notification per item. When enabled every notification is displayed.')],
 933
 934                 '$h_advn' => DI::l10n()->t('Advanced Account/Page Type Settings'),
 935                 '$h_descadvn' => DI::l10n()->t('Change the behaviour of this account for special situations'),
 936                 '$pagetype' => $pagetype,
 937
 938                 '$importcontact' => DI::l10n()->t('Import Contacts'),
 939                 '$importcontact_text' => DI::l10n()->t('Upload a CSV file that contains the handle of your followed accounts in the first column you exported from the old account.'),
 940                 '$importcontact_button' => DI::l10n()->t('Upload File'),
 941                 '$importcontact_maxsize' => DI::config()->get('system', 'max_csv_file_size', 30720),
 942                 '$relocate' => DI::l10n()->t('Relocate'),
 943                 '$relocate_text' => DI::l10n()->t("If you have moved this profile from another server, and some of your contacts don't receive your updates, try pushing this button."),
 944                 '$relocate_button' => DI::l10n()->t("Resend relocate message to contacts"),
 945
 946         ]);
 947
 948         Hook::callAll('settings_form', $o);
 949
 950         $o .= '</form>' . "\r\n";
 951
 952         return $o;
 953
 954 }