mod/settings.php

   1 <?php
   2
   3 require_once('include/group.php');
   4 require_once('include/socgraph.php');
   5
   6 function get_theme_config_file($theme){
   7         $a = get_app();
   8         $base_theme = $a->theme_info['extends'];
   9
  10         if (file_exists("view/theme/$theme/config.php")){
  11                 return "view/theme/$theme/config.php";
  12         }
  13         if (file_exists("view/theme/$base_theme/config.php")){
  14                 return "view/theme/$base_theme/config.php";
  15         }
  16         return null;
  17 }
  18
  19 function settings_init(&$a) {
  20
  21         if(! local_user()) {
  22                 notice( t('Permission denied.') . EOL );
  23                 return;
  24         }
  25
  26         // APC deactivated, since there are problems with PHP 5.5
  27         //if (function_exists("apc_delete")) {
  28         //      $toDelete = new APCIterator('user', APC_ITER_VALUE);
  29         //      apc_delete($toDelete);
  30         //}
  31
  32         // These lines provide the javascript needed by the acl selector
  33
  34         $tpl = get_markup_template("settings-head.tpl");
  35         $a->page['htmlhead'] .= replace_macros($tpl,array(
  36                 '$ispublic' => t('everybody')
  37         ));
  38
  39
  40
  41         $tabs = array(
  42                 array(
  43                         'label' => t('Account'),
  44                         'url'   => 'settings',
  45                         'selected'      =>  (($a->argc == 1) && ($a->argv[0] === 'settings')?'active':''),
  46                         'accesskey' => 'o',
  47                 ),
  48         );
  49
  50         if(get_features()) {
  51                 $tabs[] =       array(
  52                                         'label' => t('Additional features'),
  53                                         'url'   => 'settings/features',
  54                                         'selected'      => (($a->argc > 1) && ($a->argv[1] === 'features') ? 'active' : ''),
  55                                         'accesskey' => 't',
  56                                 );
  57         }
  58
  59         $tabs[] =       array(
  60                 'label' => t('Display'),
  61                 'url'   => 'settings/display',
  62                 'selected'      => (($a->argc > 1) && ($a->argv[1] === 'display')?'active':''),
  63                 'accesskey' => 'i',
  64         );
  65
  66         $tabs[] =       array(
  67                 'label' => t('Social Networks'),
  68                 'url'   => 'settings/connectors',
  69                 'selected'      => (($a->argc > 1) && ($a->argv[1] === 'connectors')?'active':''),
  70                 'accesskey' => 'w',
  71         );
  72
  73         $tabs[] =       array(
  74                 'label' => t('Plugins'),
  75                 'url'   => 'settings/addon',
  76                 'selected'      => (($a->argc > 1) && ($a->argv[1] === 'addon')?'active':''),
  77                 'accesskey' => 'l',
  78         );
  79
  80         $tabs[] =       array(
  81                 'label' => t('Delegations'),
  82                 'url'   => 'delegate',
  83                 'selected'      => (($a->argc == 1) && ($a->argv[0] === 'delegate')?'active':''),
  84                 'accesskey' => 'd',
  85         );
  86
  87         $tabs[] =       array(
  88                 'label' => t('Connected apps'),
  89                 'url' => 'settings/oauth',
  90                 'selected' => (($a->argc > 1) && ($a->argv[1] === 'oauth')?'active':''),
  91                 'accesskey' => 'b',
  92         );
  93
  94         $tabs[] =       array(
  95                 'label' => t('Export personal data'),
  96                 'url' => 'uexport',
  97                 'selected' => (($a->argc == 1) && ($a->argv[0] === 'uexport')?'active':''),
  98                 'accesskey' => 'e',
  99         );
 100
 101         $tabs[] =       array(
 102                 'label' => t('Remove account'),
 103                 'url' => 'removeme',
 104                 'selected' => (($a->argc == 1) && ($a->argv[0] === 'removeme')?'active':''),
 105                 'accesskey' => 'r',
 106         );
 107
 108
 109         $tabtpl = get_markup_template("generic_links_widget.tpl");
 110         $a->page['aside'] = replace_macros($tabtpl, array(
 111                 '$title' => t('Settings'),
 112                 '$class' => 'settings-widget',
 113                 '$items' => $tabs,
 114         ));
 115
 116 }
 117
 118
 119 function settings_post(&$a) {
 120
 121         if(! local_user())
 122                 return;
 123
 124         if(x($_SESSION,'submanage') && intval($_SESSION['submanage']))
 125                 return;
 126
 127         if(count($a->user) && x($a->user,'uid') && $a->user['uid'] != local_user()) {
 128                 notice( t('Permission denied.') . EOL);
 129                 return;
 130         }
 131
 132         $old_page_flags = $a->user['page-flags'];
 133
 134         if(($a->argc > 1) && ($a->argv[1] === 'oauth') && x($_POST,'remove')){
 135                 check_form_security_token_redirectOnErr('/settings/oauth', 'settings_oauth');
 136
 137                 $key = $_POST['remove'];
 138                 q("DELETE FROM tokens WHERE id='%s' AND uid=%d",
 139                         dbesc($key),
 140                         local_user());
 141                 goaway($a->get_baseurl(true)."/settings/oauth/");
 142                 return;
 143         }
 144
 145         if(($a->argc > 2) && ($a->argv[1] === 'oauth')  && ($a->argv[2] === 'edit'||($a->argv[2] === 'add')) && x($_POST,'submit')) {
 146
 147                 check_form_security_token_redirectOnErr('/settings/oauth', 'settings_oauth');
 148
 149                 $name           = ((x($_POST,'name')) ? $_POST['name'] : '');
 150                 $key            = ((x($_POST,'key')) ? $_POST['key'] : '');
 151                 $secret         = ((x($_POST,'secret')) ? $_POST['secret'] : '');
 152                 $redirect       = ((x($_POST,'redirect')) ? $_POST['redirect'] : '');
 153                 $icon           = ((x($_POST,'icon')) ? $_POST['icon'] : '');
 154                 if ($name=="" || $key=="" || $secret==""){
 155                         notice(t("Missing some important data!"));
 156
 157                 } else {
 158                         if ($_POST['submit']==t("Update")){
 159                                 $r = q("UPDATE clients SET
 160                                                         client_id='%s',
 161                                                         pw='%s',
 162                                                         name='%s',
 163                                                         redirect_uri='%s',
 164                                                         icon='%s',
 165                                                         uid=%d
 166                                                 WHERE client_id='%s'",
 167                                                 dbesc($key),
 168                                                 dbesc($secret),
 169                                                 dbesc($name),
 170                                                 dbesc($redirect),
 171                                                 dbesc($icon),
 172                                                 local_user(),
 173                                                 dbesc($key));
 174                         } else {
 175                                 $r = q("INSERT INTO clients
 176                                                         (client_id, pw, name, redirect_uri, icon, uid)
 177                                                 VALUES ('%s','%s','%s','%s','%s',%d)",
 178                                                 dbesc($key),
 179                                                 dbesc($secret),
 180                                                 dbesc($name),
 181                                                 dbesc($redirect),
 182                                                 dbesc($icon),
 183                                                 local_user());
 184                         }
 185                 }
 186                 goaway($a->get_baseurl(true)."/settings/oauth/");
 187                 return;
 188         }
 189
 190         if(($a->argc > 1) && ($a->argv[1] == 'addon')) {
 191                 check_form_security_token_redirectOnErr('/settings/addon', 'settings_addon');
 192
 193                 call_hooks('plugin_settings_post', $_POST);
 194                 return;
 195         }
 196
 197         if(($a->argc > 1) && ($a->argv[1] == 'connectors')) {
 198
 199                 check_form_security_token_redirectOnErr('/settings/connectors', 'settings_connectors');
 200
 201                 if(x($_POST, 'general-submit')) {
 202                         set_pconfig(local_user(), 'system', 'no_intelligent_shortening', intval($_POST['no_intelligent_shortening']));
 203                         set_pconfig(local_user(), 'system', 'ostatus_autofriend', intval($_POST['snautofollow']));
 204                         set_pconfig(local_user(), 'ostatus', 'default_group', $_POST['group-selection']);
 205                         set_pconfig(local_user(), 'ostatus', 'legacy_contact', $_POST['legacy_contact']);
 206                 } elseif(x($_POST, 'imap-submit')) {
 207
 208                         $mail_server       = ((x($_POST,'mail_server')) ? $_POST['mail_server'] : '');
 209                         $mail_port         = ((x($_POST,'mail_port')) ? $_POST['mail_port'] : '');
 210                         $mail_ssl          = ((x($_POST,'mail_ssl')) ? strtolower(trim($_POST['mail_ssl'])) : '');
 211                         $mail_user         = ((x($_POST,'mail_user')) ? $_POST['mail_user'] : '');
 212                         $mail_pass         = ((x($_POST,'mail_pass')) ? trim($_POST['mail_pass']) : '');
 213                         $mail_action       = ((x($_POST,'mail_action')) ? trim($_POST['mail_action']) : '');
 214                         $mail_movetofolder = ((x($_POST,'mail_movetofolder')) ? trim($_POST['mail_movetofolder']) : '');
 215                         $mail_replyto      = ((x($_POST,'mail_replyto')) ? $_POST['mail_replyto'] : '');
 216                         $mail_pubmail      = ((x($_POST,'mail_pubmail')) ? $_POST['mail_pubmail'] : '');
 217
 218
 219                         $mail_disabled = ((function_exists('imap_open') && (! get_config('system','imap_disabled'))) ? 0 : 1);
 220                         if(get_config('system','dfrn_only'))
 221                                 $mail_disabled = 1;
 222
 223                         if(! $mail_disabled) {
 224                                 $failed = false;
 225                                 $r = q("SELECT * FROM `mailacct` WHERE `uid` = %d LIMIT 1",
 226                                         intval(local_user())
 227                                 );
 228                                 if(! count($r)) {
 229                                         q("INSERT INTO `mailacct` (`uid`) VALUES (%d)",
 230                                                 intval(local_user())
 231                                         );
 232                                 }
 233                                 if(strlen($mail_pass)) {
 234                                         $pass = '';
 235                                         openssl_public_encrypt($mail_pass,$pass,$a->user['pubkey']);
 236                                         q("UPDATE `mailacct` SET `pass` = '%s' WHERE `uid` = %d",
 237                                                 dbesc(bin2hex($pass)),
 238                                                 intval(local_user())
 239                                         );
 240                                 }
 241                                 $r = q("UPDATE `mailacct` SET `server` = '%s', `port` = %d, `ssltype` = '%s', `user` = '%s',
 242                                         `action` = %d, `movetofolder` = '%s',
 243                                         `mailbox` = 'INBOX', `reply_to` = '%s', `pubmail` = %d WHERE `uid` = %d",
 244                                         dbesc($mail_server),
 245                                         intval($mail_port),
 246                                         dbesc($mail_ssl),
 247                                         dbesc($mail_user),
 248                                         intval($mail_action),
 249                                         dbesc($mail_movetofolder),
 250                                         dbesc($mail_replyto),
 251                                         intval($mail_pubmail),
 252                                         intval(local_user())
 253                                 );
 254                                 logger("mail: updating mailaccount. Response: ".print_r($r, true));
 255                                 $r = q("SELECT * FROM `mailacct` WHERE `uid` = %d LIMIT 1",
 256                                         intval(local_user())
 257                                 );
 258                                 if(count($r)) {
 259                                         $eacct = $r[0];
 260                                         require_once('include/email.php');
 261                                         $mb = construct_mailbox_name($eacct);
 262                                         if(strlen($eacct['server'])) {
 263                                                 $dcrpass = '';
 264                                                 openssl_private_decrypt(hex2bin($eacct['pass']),$dcrpass,$a->user['prvkey']);
 265                                                 $mbox = email_connect($mb,$mail_user,$dcrpass);
 266                                                 unset($dcrpass);
 267                                                 if(! $mbox) {
 268                                                         $failed = true;
 269                                                         notice( t('Failed to connect with email account using the settings provided.') . EOL);
 270                                                 }
 271                                         }
 272                                 }
 273                                 if(! $failed)
 274                                         info( t('Email settings updated.') . EOL);
 275                         }
 276                 }
 277
 278                 call_hooks('connector_settings_post', $_POST);
 279                 return;
 280         }
 281
 282         if(($a->argc > 1) && ($a->argv[1] === 'features')) {
 283                 check_form_security_token_redirectOnErr('/settings/features', 'settings_features');
 284                 foreach($_POST as $k => $v) {
 285                         if(strpos($k,'feature_') === 0) {
 286                                 set_pconfig(local_user(),'feature',substr($k,8),((intval($v)) ? 1 : 0));
 287                         }
 288                 }
 289                 info( t('Features updated') . EOL);
 290                 return;
 291         }
 292
 293         if(($a->argc > 1) && ($a->argv[1] === 'display')) {
 294
 295                 check_form_security_token_redirectOnErr('/settings/display', 'settings_display');
 296
 297                 $theme = ((x($_POST,'theme')) ? notags(trim($_POST['theme']))  : $a->user['theme']);
 298                 $mobile_theme = ((x($_POST,'mobile_theme')) ? notags(trim($_POST['mobile_theme']))  : '');
 299                 $nosmile = ((x($_POST,'nosmile')) ? intval($_POST['nosmile'])  : 0);
 300                 $first_day_of_week = ((x($_POST,'first_day_of_week')) ? intval($_POST['first_day_of_week'])  : 0);
 301                 $noinfo = ((x($_POST,'noinfo')) ? intval($_POST['noinfo'])  : 0);
 302                 $infinite_scroll = ((x($_POST,'infinite_scroll')) ? intval($_POST['infinite_scroll'])  : 0);
 303                 $no_auto_update = ((x($_POST,'no_auto_update')) ? intval($_POST['no_auto_update'])  : 0);
 304                 $browser_update   = ((x($_POST,'browser_update')) ? intval($_POST['browser_update']) : 0);
 305                 if ($browser_update != -1) {
 306                         $browser_update   = $browser_update * 1000;
 307                         if ($browser_update < 10000)
 308                                 $browser_update = 10000;
 309                 }
 310
 311                 $itemspage_network   = ((x($_POST,'itemspage_network')) ? intval($_POST['itemspage_network']) : 40);
 312                 if($itemspage_network > 100)
 313                         $itemspage_network = 100;
 314                 $itemspage_mobile_network   = ((x($_POST,'itemspage_mobile_network')) ? intval($_POST['itemspage_mobile_network']) : 20);
 315                 if($itemspage_mobile_network > 100)
 316                         $itemspage_mobile_network = 100;
 317
 318
 319                 if($mobile_theme !== '') {
 320                         set_pconfig(local_user(),'system','mobile_theme',$mobile_theme);
 321                 }
 322
 323                 set_pconfig(local_user(),'system','update_interval', $browser_update);
 324                 set_pconfig(local_user(),'system','itemspage_network', $itemspage_network);
 325                 set_pconfig(local_user(),'system','itemspage_mobile_network', $itemspage_mobile_network);
 326                 set_pconfig(local_user(),'system','no_smilies',$nosmile);
 327                 set_pconfig(local_user(),'system','first_day_of_week',$first_day_of_week);
 328                 set_pconfig(local_user(),'system','ignore_info',$noinfo);
 329                 set_pconfig(local_user(),'system','infinite_scroll',$infinite_scroll);
 330                 set_pconfig(local_user(),'system','no_auto_update',$no_auto_update);
 331
 332
 333                 if ($theme == $a->user['theme']){
 334                         // call theme_post only if theme has not been changed
 335                         if( ($themeconfigfile = get_theme_config_file($theme)) != null){
 336                                 require_once($themeconfigfile);
 337                                 theme_post($a);
 338                         }
 339                 }
 340
 341
 342                 $r = q("UPDATE `user` SET `theme` = '%s' WHERE `uid` = %d",
 343                                 dbesc($theme),
 344                                 intval(local_user())
 345                 );
 346
 347                 call_hooks('display_settings_post', $_POST);
 348                 goaway('settings/display' );
 349                 return; // NOTREACHED
 350         }
 351
 352         check_form_security_token_redirectOnErr('/settings', 'settings');
 353
 354         if (x($_POST,'resend_relocate')) {
 355                 proc_run(PRIORITY_HIGH, 'include/notifier.php', 'relocate', local_user());
 356                 info(t("Relocate message has been send to your contacts"));
 357                 goaway('settings');
 358         }
 359
 360         call_hooks('settings_post', $_POST);
 361
 362         if((x($_POST,'password')) || (x($_POST,'confirm'))) {
 363
 364                 $newpass = $_POST['password'];
 365                 $confirm = $_POST['confirm'];
 366                 $oldpass = hash('whirlpool', $_POST['opassword']);
 367
 368                 $err = false;
 369                 if($newpass != $confirm ) {
 370                         notice( t('Passwords do not match. Password unchanged.') . EOL);
 371                         $err = true;
 372                 }
 373
 374                 if((! x($newpass)) || (! x($confirm))) {
 375                         notice( t('Empty passwords are not allowed. Password unchanged.') . EOL);
 376                         $err = true;
 377         }
 378
 379         //  check if the old password was supplied correctly before
 380         //  changing it to the new value
 381         $r = q("SELECT `password` FROM `user`WHERE `uid` = %d LIMIT 1", intval(local_user()));
 382         if( $oldpass != $r[0]['password'] ) {
 383             notice( t('Wrong password.') . EOL);
 384             $err = true;
 385         }
 386
 387                 if(! $err) {
 388                         $password = hash('whirlpool',$newpass);
 389                         $r = q("UPDATE `user` SET `password` = '%s' WHERE `uid` = %d",
 390                                 dbesc($password),
 391                                 intval(local_user())
 392                         );
 393                         if($r)
 394                                 info( t('Password changed.') . EOL);
 395                         else
 396                                 notice( t('Password update failed. Please try again.') . EOL);
 397                 }
 398         }
 399
 400
 401         $username         = ((x($_POST,'username'))   ? notags(trim($_POST['username']))     : '');
 402         $email            = ((x($_POST,'email'))      ? notags(trim($_POST['email']))        : '');
 403         $timezone         = ((x($_POST,'timezone'))   ? notags(trim($_POST['timezone']))     : '');
 404         $language         = ((x($_POST,'language'))   ? notags(trim($_POST['language']))     : '');
 405
 406         $defloc           = ((x($_POST,'defloc'))     ? notags(trim($_POST['defloc']))       : '');
 407         $openid           = ((x($_POST,'openid_url')) ? notags(trim($_POST['openid_url']))   : '');
 408         $maxreq           = ((x($_POST,'maxreq'))     ? intval($_POST['maxreq'])             : 0);
 409         $expire           = ((x($_POST,'expire'))     ? intval($_POST['expire'])             : 0);
 410         $def_gid          = ((x($_POST,'group-selection')) ? intval($_POST['group-selection']) : 0);
 411
 412
 413         $expire_items     = ((x($_POST,'expire_items')) ? intval($_POST['expire_items'])         : 0);
 414         $expire_notes     = ((x($_POST,'expire_notes')) ? intval($_POST['expire_notes'])         : 0);
 415         $expire_starred   = ((x($_POST,'expire_starred')) ? intval($_POST['expire_starred']) : 0);
 416         $expire_photos    = ((x($_POST,'expire_photos'))? intval($_POST['expire_photos'])        : 0);
 417         $expire_network_only    = ((x($_POST,'expire_network_only'))? intval($_POST['expire_network_only'])      : 0);
 418
 419         $allow_location   = (((x($_POST,'allow_location')) && (intval($_POST['allow_location']) == 1)) ? 1: 0);
 420         $publish          = (((x($_POST,'profile_in_directory')) && (intval($_POST['profile_in_directory']) == 1)) ? 1: 0);
 421         $net_publish      = (((x($_POST,'profile_in_netdirectory')) && (intval($_POST['profile_in_netdirectory']) == 1)) ? 1: 0);
 422         $old_visibility   = (((x($_POST,'visibility')) && (intval($_POST['visibility']) == 1)) ? 1 : 0);
 423         $account_type     = (((x($_POST,'account-type')) && (intval($_POST['account-type']))) ? intval($_POST['account-type']) : 0);
 424         $page_flags       = (((x($_POST,'page-flags')) && (intval($_POST['page-flags']))) ? intval($_POST['page-flags']) : 0);
 425         $blockwall        = (((x($_POST,'blockwall')) && (intval($_POST['blockwall']) == 1)) ? 0: 1); // this setting is inverted!
 426         $blocktags        = (((x($_POST,'blocktags')) && (intval($_POST['blocktags']) == 1)) ? 0: 1); // this setting is inverted!
 427         $unkmail          = (((x($_POST,'unkmail')) && (intval($_POST['unkmail']) == 1)) ? 1: 0);
 428         $cntunkmail       = ((x($_POST,'cntunkmail')) ? intval($_POST['cntunkmail']) : 0);
 429         $suggestme        = ((x($_POST,'suggestme')) ? intval($_POST['suggestme'])  : 0);
 430         $hide_friends     = (($_POST['hide-friends'] == 1) ? 1: 0);
 431         $hidewall         = (($_POST['hidewall'] == 1) ? 1: 0);
 432         $post_newfriend   = (($_POST['post_newfriend'] == 1) ? 1: 0);
 433         $post_joingroup   = (($_POST['post_joingroup'] == 1) ? 1: 0);
 434         $post_profilechange   = (($_POST['post_profilechange'] == 1) ? 1: 0);
 435
 436         $email_textonly   = (($_POST['email_textonly'] == 1) ? 1 : 0);
 437
 438         $notify = 0;
 439
 440         if(x($_POST,'notify1'))
 441                 $notify += intval($_POST['notify1']);
 442         if(x($_POST,'notify2'))
 443                 $notify += intval($_POST['notify2']);
 444         if(x($_POST,'notify3'))
 445                 $notify += intval($_POST['notify3']);
 446         if(x($_POST,'notify4'))
 447                 $notify += intval($_POST['notify4']);
 448         if(x($_POST,'notify5'))
 449                 $notify += intval($_POST['notify5']);
 450         if(x($_POST,'notify6'))
 451                 $notify += intval($_POST['notify6']);
 452         if(x($_POST,'notify7'))
 453                 $notify += intval($_POST['notify7']);
 454         if(x($_POST,'notify8'))
 455                 $notify += intval($_POST['notify8']);
 456
 457         // Adjust the page flag if the account type doesn't fit to the page flag.
 458         if (($account_type == ACCOUNT_TYPE_PERSON) AND !in_array($page_flags, array(PAGE_NORMAL, PAGE_SOAPBOX, PAGE_FREELOVE)))
 459                 $page_flags = PAGE_NORMAL;
 460         elseif (($account_type == ACCOUNT_TYPE_COMPANY) AND !in_array($page_flags, array(PAGE_SOAPBOX)))
 461                 $page_flags = PAGE_SOAPBOX;
 462         elseif (($account_type == ACCOUNT_TYPE_NEWS) AND !in_array($page_flags, array(PAGE_SOAPBOX)))
 463                 $page_flags = PAGE_SOAPBOX;
 464         elseif (($account_type == ACCOUNT_TYPE_COMMUNITY) AND !in_array($page_flags, array(PAGE_COMMUNITY, PAGE_PRVGROUP)))
 465                 $page_flags = PAGE_COMMUNITY;
 466
 467         $email_changed = false;
 468
 469         $err = '';
 470
 471         $name_change = false;
 472
 473         if($username != $a->user['username']) {
 474                 $name_change = true;
 475                 if(strlen($username) > 40)
 476                         $err .= t(' Please use a shorter name.');
 477                 if(strlen($username) < 3)
 478                         $err .= t(' Name too short.');
 479         }
 480
 481         if($email != $a->user['email']) {
 482                 $email_changed = true;
 483                 //  check for the correct password
 484                 $r = q("SELECT `password` FROM `user`WHERE `uid` = %d LIMIT 1", intval(local_user()));
 485                 $password = hash('whirlpool', $_POST['mpassword']);
 486                 if ($password != $r[0]['password']) {
 487                         $err .= t('Wrong Password') . EOL;
 488                         $email = $a->user['email'];
 489                 }
 490                 //  check the email is valid
 491                 if(! valid_email($email))
 492                         $err .= t(' Not valid email.');
 493                 //  ensure new email is not the admin mail
 494                 //if((x($a->config,'admin_email')) && (strcasecmp($email,$a->config['admin_email']) == 0)) {
 495                 if(x($a->config,'admin_email')) {
 496                         $adminlist = explode(",", str_replace(" ", "", strtolower($a->config['admin_email'])));
 497                         if (in_array(strtolower($email), $adminlist)) {
 498                                 $err .= t(' Cannot change to that email.');
 499                                 $email = $a->user['email'];
 500                         }
 501                 }
 502         }
 503
 504         if(strlen($err)) {
 505                 notice($err . EOL);
 506                 return;
 507         }
 508
 509         if($timezone != $a->user['timezone']) {
 510                 if(strlen($timezone))
 511                         date_default_timezone_set($timezone);
 512         }
 513
 514         $str_group_allow   = perms2str($_POST['group_allow']);
 515         $str_contact_allow = perms2str($_POST['contact_allow']);
 516         $str_group_deny    = perms2str($_POST['group_deny']);
 517         $str_contact_deny  = perms2str($_POST['contact_deny']);
 518
 519         $openidserver = $a->user['openidserver'];
 520         //$openid = normalise_openid($openid);
 521
 522         // If openid has changed or if there's an openid but no openidserver, try and discover it.
 523
 524         if($openid != $a->user['openid'] || (strlen($openid) && (! strlen($openidserver)))) {
 525                 $tmp_str = $openid;
 526                 if(strlen($tmp_str) && validate_url($tmp_str)) {
 527                         logger('updating openidserver');
 528                         require_once('library/openid.php');
 529                         $open_id_obj = new LightOpenID;
 530                         $open_id_obj->identity = $openid;
 531                         $openidserver = $open_id_obj->discover($open_id_obj->identity);
 532                 }
 533                 else
 534                         $openidserver = '';
 535         }
 536
 537         set_pconfig(local_user(),'expire','items', $expire_items);
 538         set_pconfig(local_user(),'expire','notes', $expire_notes);
 539         set_pconfig(local_user(),'expire','starred', $expire_starred);
 540         set_pconfig(local_user(),'expire','photos', $expire_photos);
 541         set_pconfig(local_user(),'expire','network_only', $expire_network_only);
 542
 543         set_pconfig(local_user(),'system','suggestme', $suggestme);
 544         set_pconfig(local_user(),'system','post_newfriend', $post_newfriend);
 545         set_pconfig(local_user(),'system','post_joingroup', $post_joingroup);
 546         set_pconfig(local_user(),'system','post_profilechange', $post_profilechange);
 547
 548         set_pconfig(local_user(),'system','email_textonly', $email_textonly);
 549
 550         if($page_flags == PAGE_PRVGROUP) {
 551                 $hidewall = 1;
 552                 if((! $str_contact_allow) && (! $str_group_allow) && (! $str_contact_deny) && (! $str_group_deny)) {
 553                         if($def_gid) {
 554                                 info( t('Private forum has no privacy permissions. Using default privacy group.'). EOL);
 555                                 $str_group_allow = '<' . $def_gid . '>';
 556                         }
 557                         else {
 558                                 notice( t('Private forum has no privacy permissions and no default privacy group.') . EOL);
 559                         }
 560                 }
 561         }
 562
 563
 564         $r = q("UPDATE `user` SET `username` = '%s', `email` = '%s',
 565                                 `openid` = '%s', `timezone` = '%s',
 566                                 `allow_cid` = '%s', `allow_gid` = '%s', `deny_cid` = '%s', `deny_gid` = '%s',
 567                                 `notify-flags` = %d, `page-flags` = %d, `account-type` = %d, `default-location` = '%s',
 568                                 `allow_location` = %d, `maxreq` = %d, `expire` = %d, `openidserver` = '%s',
 569                                 `def_gid` = %d, `blockwall` = %d, `hidewall` = %d, `blocktags` = %d,
 570                                 `unkmail` = %d, `cntunkmail` = %d, `language` = '%s'
 571                         WHERE `uid` = %d",
 572                         dbesc($username),
 573                         dbesc($email),
 574                         dbesc($openid),
 575                         dbesc($timezone),
 576                         dbesc($str_contact_allow),
 577                         dbesc($str_group_allow),
 578                         dbesc($str_contact_deny),
 579                         dbesc($str_group_deny),
 580                         intval($notify),
 581                         intval($page_flags),
 582                         intval($account_type),
 583                         dbesc($defloc),
 584                         intval($allow_location),
 585                         intval($maxreq),
 586                         intval($expire),
 587                         dbesc($openidserver),
 588                         intval($def_gid),
 589                         intval($blockwall),
 590                         intval($hidewall),
 591                         intval($blocktags),
 592                         intval($unkmail),
 593                         intval($cntunkmail),
 594                         dbesc($language),
 595                         intval(local_user())
 596         );
 597         if($r)
 598                 info( t('Settings updated.') . EOL);
 599
 600         // clear session language
 601         unset($_SESSION['language']);
 602
 603         $r = q("UPDATE `profile`
 604                 SET `publish` = %d,
 605                 `name` = '%s',
 606                 `net-publish` = %d,
 607                 `hide-friends` = %d
 608                 WHERE `is-default` = 1 AND `uid` = %d",
 609                 intval($publish),
 610                 dbesc($username),
 611                 intval($net_publish),
 612                 intval($hide_friends),
 613                 intval(local_user())
 614         );
 615
 616
 617         if($name_change) {
 618                 q("UPDATE `contact` SET `name` = '%s', `name-date` = '%s' WHERE `uid` = %d AND `self`",
 619                         dbesc($username),
 620                         dbesc(datetime_convert()),
 621                         intval(local_user())
 622                 );
 623         }
 624
 625         if(($old_visibility != $net_publish) || ($page_flags != $old_page_flags)) {
 626                 // Update global directory in background
 627                 $url = $_SESSION['my_url'];
 628                 if($url && strlen(get_config('system','directory')))
 629                         proc_run(PRIORITY_LOW, "include/directory.php", $url);
 630         }
 631
 632         require_once('include/profile_update.php');
 633         profile_change();
 634
 635         // Update the global contact for the user
 636         update_gcontact_for_user(local_user());
 637
 638         //$_SESSION['theme'] = $theme;
 639         if($email_changed && $a->config['register_policy'] == REGISTER_VERIFY) {
 640
 641                 // FIXME - set to un-verified, blocked and redirect to logout
 642                 // Why? Are we verifying people or email addresses?
 643
 644         }
 645
 646         goaway('settings');
 647         return; // NOTREACHED
 648 }
 649
 650
 651 function settings_content(&$a) {
 652
 653         $o = '';
 654         nav_set_selected('settings');
 655
 656         if(! local_user()) {
 657                 #notice( t('Permission denied.') . EOL );
 658                 return;
 659         }
 660
 661         if(x($_SESSION,'submanage') && intval($_SESSION['submanage'])) {
 662                 notice( t('Permission denied.') . EOL );
 663                 return;
 664         }
 665
 666
 667
 668         if(($a->argc > 1) && ($a->argv[1] === 'oauth')) {
 669
 670                 if(($a->argc > 2) && ($a->argv[2] === 'add')) {
 671                         $tpl = get_markup_template("settings_oauth_edit.tpl");
 672                         $o .= replace_macros($tpl, array(
 673                                 '$form_security_token' => get_form_security_token("settings_oauth"),
 674                                 '$title'        => t('Add application'),
 675                                 '$submit'       => t('Save Settings'),
 676                                 '$cancel'       => t('Cancel'),
 677                                 '$name'         => array('name', t('Name'), '', ''),
 678                                 '$key'          => array('key', t('Consumer Key'), '', ''),
 679                                 '$secret'       => array('secret', t('Consumer Secret'), '', ''),
 680                                 '$redirect'     => array('redirect', t('Redirect'), '', ''),
 681                                 '$icon'         => array('icon', t('Icon url'), '', ''),
 682                         ));
 683                         return $o;
 684                 }
 685
 686                 if(($a->argc > 3) && ($a->argv[2] === 'edit')) {
 687                         $r = q("SELECT * FROM clients WHERE client_id='%s' AND uid=%d",
 688                                         dbesc($a->argv[3]),
 689                                         local_user());
 690
 691                         if (!count($r)){
 692                                 notice(t("You can't edit this application."));
 693                                 return;
 694                         }
 695                         $app = $r[0];
 696
 697                         $tpl = get_markup_template("settings_oauth_edit.tpl");
 698                         $o .= replace_macros($tpl, array(
 699                                 '$form_security_token' => get_form_security_token("settings_oauth"),
 700                                 '$title'        => t('Add application'),
 701                                 '$submit'       => t('Update'),
 702                                 '$cancel'       => t('Cancel'),
 703                                 '$name'         => array('name', t('Name'), $app['name'] , ''),
 704                                 '$key'          => array('key', t('Consumer Key'), $app['client_id'], ''),
 705                                 '$secret'       => array('secret', t('Consumer Secret'), $app['pw'], ''),
 706                                 '$redirect'     => array('redirect', t('Redirect'), $app['redirect_uri'], ''),
 707                                 '$icon'         => array('icon', t('Icon url'), $app['icon'], ''),
 708                         ));
 709                         return $o;
 710                 }
 711
 712                 if(($a->argc > 3) && ($a->argv[2] === 'delete')) {
 713                         check_form_security_token_redirectOnErr('/settings/oauth', 'settings_oauth', 't');
 714
 715                         $r = q("DELETE FROM clients WHERE client_id='%s' AND uid=%d",
 716                                         dbesc($a->argv[3]),
 717                                         local_user());
 718                         goaway($a->get_baseurl(true)."/settings/oauth/");
 719                         return;
 720                 }
 721
 722
 723                 $r = q("SELECT clients.*, tokens.id as oauth_token, (clients.uid=%d) AS my
 724                                 FROM clients
 725                                 LEFT JOIN tokens ON clients.client_id=tokens.client_id
 726                                 WHERE clients.uid IN (%d,0)",
 727                                 local_user(),
 728                                 local_user());
 729
 730
 731                 $tpl = get_markup_template("settings_oauth.tpl");
 732                 $o .= replace_macros($tpl, array(
 733                         '$form_security_token' => get_form_security_token("settings_oauth"),
 734                         '$baseurl'      => $a->get_baseurl(true),
 735                         '$title'        => t('Connected Apps'),
 736                         '$add'          => t('Add application'),
 737                         '$edit'         => t('Edit'),
 738                         '$delete'               => t('Delete'),
 739                         '$consumerkey' => t('Client key starts with'),
 740                         '$noname'       => t('No name'),
 741                         '$remove'       => t('Remove authorization'),
 742                         '$apps'         => $r,
 743                 ));
 744                 return $o;
 745
 746         }
 747
 748         if(($a->argc > 1) && ($a->argv[1] === 'addon')) {
 749                 $settings_addons = "";
 750
 751                 $r = q("SELECT * FROM `hook` WHERE `hook` = 'plugin_settings' ");
 752                 if(! count($r))
 753                         $settings_addons = t('No Plugin settings configured');
 754
 755                 call_hooks('plugin_settings', $settings_addons);
 756
 757
 758                 $tpl = get_markup_template("settings_addons.tpl");
 759                 $o .= replace_macros($tpl, array(
 760                         '$form_security_token' => get_form_security_token("settings_addon"),
 761                         '$title'        => t('Plugin Settings'),
 762                         '$settings_addons' => $settings_addons
 763                 ));
 764                 return $o;
 765         }
 766
 767         if(($a->argc > 1) && ($a->argv[1] === 'features')) {
 768
 769                 $arr = array();
 770                 $features = get_features();
 771                 foreach($features as $fname => $fdata) {
 772                         $arr[$fname] = array();
 773                         $arr[$fname][0] = $fdata[0];
 774                         foreach(array_slice($fdata,1) as $f) {
 775                                 $arr[$fname][1][] = array('feature_' .$f[0],$f[1],((intval(feature_enabled(local_user(),$f[0]))) ? "1" : ''),$f[2],array(t('Off'),t('On')));
 776                         }
 777                 }
 778
 779
 780                 $tpl = get_markup_template("settings_features.tpl");
 781                 $o .= replace_macros($tpl, array(
 782                         '$form_security_token' => get_form_security_token("settings_features"),
 783                         '$title'        => t('Additional Features'),
 784                         '$features' => $arr,
 785                         '$submit'   => t('Save Settings'),
 786                 ));
 787                 return $o;
 788         }
 789
 790         if(($a->argc > 1) && ($a->argv[1] === 'connectors')) {
 791
 792                 $settings_connectors = '<span id="settings_general_inflated" class="settings-block fakelink" style="display: block;" onclick="openClose(\'settings_general_expanded\'); openClose(\'settings_general_inflated\');">';
 793                 $settings_connectors .= '<h3 class="connector">'. t('General Social Media Settings').'</h3>';
 794                 $settings_connectors .= '</span>';
 795                 $settings_connectors .= '<div id="settings_general_expanded" class="settings-block" style="display: none;">';
 796                 $settings_connectors .= '<span class="fakelink" onclick="openClose(\'settings_general_expanded\'); openClose(\'settings_general_inflated\');">';
 797                 $settings_connectors .= '<h3 class="connector">'. t('General Social Media Settings').'</h3>';
 798                 $settings_connectors .= '</span>';
 799
 800                 $checked = ((get_pconfig(local_user(), 'system', 'no_intelligent_shortening')) ? ' checked="checked" ' : '');
 801
 802                 $settings_connectors .= '<div id="no_intelligent_shortening" class="field checkbox">';
 803                 $settings_connectors .= '<label id="no_intelligent_shortening-label" for="shortening-checkbox">'. t('Disable intelligent shortening'). '</label>';
 804                 $settings_connectors .= '<input id="shortening-checkbox" type="checkbox" name="no_intelligent_shortening" value="1" ' . $checked . '/>';
 805                 $settings_connectors .= '<span class="field_help">'.t('Normally the system tries to find the best link to add to shortened posts. If this option is enabled then every shortened post will always point to the original friendica post.').'</span>';
 806                 $settings_connectors .= '</div>';
 807
 808                 $checked = ((get_pconfig(local_user(), 'system', 'ostatus_autofriend')) ? ' checked="checked" ' : '');
 809
 810                 $settings_connectors .= '<div id="snautofollow-wrapper" class="field checkbox">';
 811                 $settings_connectors .= '<label id="snautofollow-label" for="snautofollow-checkbox">'. t('Automatically follow any GNU Social (OStatus) followers/mentioners'). '</label>';
 812                 $settings_connectors .= '<input id="snautofollow-checkbox" type="checkbox" name="snautofollow" value="1" ' . $checked . '/>';
 813                 $settings_connectors .= '<span class="field_help">'.t('If you receive a message from an unknown OStatus user, this option decides what to do. If it is checked, a new contact will be created for every unknown user.').'</span>';
 814                 $settings_connectors .= '</div>';
 815
 816                 $default_group = get_pconfig(local_user(), 'ostatus', 'default_group');
 817                 $legacy_contact = get_pconfig(local_user(), 'ostatus', 'legacy_contact');
 818
 819                 $settings_connectors .= mini_group_select(local_user(), $default_group, t("Default group for OStatus contacts"));
 820
 821                 if ($legacy_contact != "")
 822                         $a->page['htmlhead'] = '<meta http-equiv="refresh" content="0; URL='.$a->get_baseurl().'/ostatus_subscribe?url='.urlencode($legacy_contact).'">';
 823
 824                 $settings_connectors .= '<div id="legacy-contact-wrapper" class="field input">';
 825                 $settings_connectors .= '<label id="legacy-contact-label" for="snautofollow-checkbox">'. t('Your legacy GNU Social account'). '</label>';
 826                 $settings_connectors .= '<input id="legacy-contact-checkbox" name="legacy_contact" value="'.$legacy_contact.'"/>';
 827                 $settings_connectors .= '<span class="field_help">'.t('If you enter your old GNU Social/Statusnet account name here (in the format user@domain.tld), your contacts will be added automatically. The field will be emptied when done.').'</span>';
 828                 $settings_connectors .= '</div>';
 829
 830                 $settings_connectors .= '<p><a href="'.$a->get_baseurl().'/repair_ostatus">'.t("Repair OStatus subscriptions").'</a></p>';
 831
 832                 $settings_connectors .= '<div class="settings-submit-wrapper" ><input type="submit" name="general-submit" class="settings-submit" value="' . t('Save Settings') . '" /></div>';
 833
 834                 $settings_connectors .= '</div><div class="clear"></div>';
 835
 836                 call_hooks('connector_settings', $settings_connectors);
 837
 838                 if (is_site_admin()) {
 839                         $diasp_enabled = sprintf( t('Built-in support for %s connectivity is %s'), t('Diaspora'), ((get_config('system','diaspora_enabled')) ? t('enabled') : t('disabled')));
 840                         $ostat_enabled = sprintf( t('Built-in support for %s connectivity is %s'), t('GNU Social (OStatus)'), ((get_config('system','ostatus_disabled')) ? t('disabled') : t('enabled')));
 841                 } else {
 842                         $diasp_enabled = "";
 843                         $ostat_enabled = "";
 844                 }
 845
 846                 $mail_disabled = ((function_exists('imap_open') && (! get_config('system','imap_disabled'))) ? 0 : 1);
 847                 if(get_config('system','dfrn_only'))
 848                         $mail_disabled = 1;
 849
 850                 if(! $mail_disabled) {
 851                         $r = q("SELECT * FROM `mailacct` WHERE `uid` = %d LIMIT 1",
 852                                 local_user()
 853                         );
 854                 }
 855                 else {
 856                         $r = null;
 857                 }
 858
 859                 $mail_server       = ((count($r)) ? $r[0]['server'] : '');
 860                 $mail_port         = ((count($r) && intval($r[0]['port'])) ? intval($r[0]['port']) : '');
 861                 $mail_ssl          = ((count($r)) ? $r[0]['ssltype'] : '');
 862                 $mail_user         = ((count($r)) ? $r[0]['user'] : '');
 863                 $mail_replyto      = ((count($r)) ? $r[0]['reply_to'] : '');
 864                 $mail_pubmail      = ((count($r)) ? $r[0]['pubmail'] : 0);
 865                 $mail_action       = ((count($r)) ? $r[0]['action'] : 0);
 866                 $mail_movetofolder = ((count($r)) ? $r[0]['movetofolder'] : '');
 867                 $mail_chk          = ((count($r)) ? $r[0]['last_check'] : '0000-00-00 00:00:00');
 868
 869
 870                 $tpl = get_markup_template("settings_connectors.tpl");
 871
 872                 if(! service_class_allows(local_user(),'email_connect')) {
 873                         $mail_disabled_message = upgrade_bool_message();
 874                 }
 875                 else {
 876                         $mail_disabled_message = (($mail_disabled) ? t('Email access is disabled on this site.') : '');
 877                 }
 878
 879
 880                 $o .= replace_macros($tpl, array(
 881                         '$form_security_token' => get_form_security_token("settings_connectors"),
 882
 883                         '$title'        => t('Social Networks'),
 884
 885                         '$diasp_enabled' => $diasp_enabled,
 886                         '$ostat_enabled' => $ostat_enabled,
 887
 888                         '$h_imap' => t('Email/Mailbox Setup'),
 889                         '$imap_desc' => t("If you wish to communicate with email contacts using this service \x28optional\x29, please specify how to connect to your mailbox."),
 890                         '$imap_lastcheck' => array('imap_lastcheck', t('Last successful email check:'), $mail_chk,''),
 891                         '$mail_disabled' => $mail_disabled_message,
 892                         '$mail_server'  => array('mail_server',  t('IMAP server name:'), $mail_server, ''),
 893                         '$mail_port'    => array('mail_port',    t('IMAP port:'), $mail_port, ''),
 894                         '$mail_ssl'             => array('mail_ssl',     t('Security:'), strtoupper($mail_ssl), '', array( 'notls'=>t('None'), 'TLS'=>'TLS', 'SSL'=>'SSL')),
 895                         '$mail_user'    => array('mail_user',    t('Email login name:'), $mail_user, ''),
 896                         '$mail_pass'    => array('mail_pass',    t('Email password:'), '', ''),
 897                         '$mail_replyto' => array('mail_replyto', t('Reply-to address:'), $mail_replyto, 'Optional'),
 898                         '$mail_pubmail' => array('mail_pubmail', t('Send public posts to all email contacts:'), $mail_pubmail, ''),
 899                         '$mail_action'  => array('mail_action',  t('Action after import:'), $mail_action, '', array(0=>t('None'), /*1=>t('Delete'),*/ 2=>t('Mark as seen'), 3=>t('Move to folder'))),
 900                         '$mail_movetofolder'    => array('mail_movetofolder',    t('Move to folder:'), $mail_movetofolder, ''),
 901                         '$submit' => t('Save Settings'),
 902
 903                         '$settings_connectors' => $settings_connectors
 904                 ));
 905
 906                 call_hooks('display_settings', $o);
 907                 return $o;
 908         }
 909
 910         /*
 911          * DISPLAY SETTINGS
 912          */
 913         if(($a->argc > 1) && ($a->argv[1] === 'display')) {
 914                 $default_theme = get_config('system','theme');
 915                 if(! $default_theme)
 916                         $default_theme = 'default';
 917                 $default_mobile_theme = get_config('system','mobile-theme');
 918                 if(! $mobile_default_theme)
 919                         $mobile_default_theme = 'none';
 920
 921                 $allowed_themes_str = get_config('system','allowed_themes');
 922                 $allowed_themes_raw = explode(',',$allowed_themes_str);
 923                 $allowed_themes = array();
 924                 if(count($allowed_themes_raw))
 925                         foreach($allowed_themes_raw as $x)
 926                                 if(strlen(trim($x)) && is_dir("view/theme/$x"))
 927                                         $allowed_themes[] = trim($x);
 928
 929
 930                 $themes = array();
 931                 $mobile_themes = array("---" => t('No special theme for mobile devices'));
 932                 $files = glob('view/theme/*'); /* */
 933                 if($allowed_themes) {
 934                         foreach($allowed_themes as $th) {
 935                                 $f = $th;
 936                                 $is_experimental = file_exists('view/theme/' . $th . '/experimental');
 937                                 $unsupported = file_exists('view/theme/' . $th . '/unsupported');
 938                                 $is_mobile = file_exists('view/theme/' . $th . '/mobile');
 939                                 if (!$is_experimental or ($is_experimental && (get_config('experimentals','exp_themes')==1 or get_config('experimentals','exp_themes')===false))){
 940                                         $theme_name = (($is_experimental) ?  sprintf("%s - \x28Experimental\x29", $f) : $f);
 941                                         if($is_mobile) {
 942                                                 $mobile_themes[$f]=$theme_name;
 943                                         }
 944                                         else {
 945                                                 $themes[$f]=$theme_name;
 946                                         }
 947                                 }
 948                         }
 949                 }
 950                 $theme_selected = (!x($_SESSION,'theme')? $default_theme : $_SESSION['theme']);
 951                 $mobile_theme_selected = (!x($_SESSION,'mobile-theme')? $default_mobile_theme : $_SESSION['mobile-theme']);
 952
 953                 $browser_update = intval(get_pconfig(local_user(), 'system','update_interval'));
 954                 if (intval($browser_update) != -1)
 955                         $browser_update = (($browser_update == 0) ? 40 : $browser_update / 1000); // default if not set: 40 seconds
 956
 957                 $itemspage_network = intval(get_pconfig(local_user(), 'system','itemspage_network'));
 958                 $itemspage_network = (($itemspage_network > 0 && $itemspage_network < 101) ? $itemspage_network : 40); // default if not set: 40 items
 959                 $itemspage_mobile_network = intval(get_pconfig(local_user(), 'system','itemspage_mobile_network'));
 960                 $itemspage_mobile_network = (($itemspage_mobile_network > 0 && $itemspage_mobile_network < 101) ? $itemspage_mobile_network : 20); // default if not set: 20 items
 961
 962                 $nosmile = get_pconfig(local_user(),'system','no_smilies');
 963                 $nosmile = (($nosmile===false)? '0': $nosmile); // default if not set: 0
 964
 965                 $first_day_of_week = get_pconfig(local_user(),'system','first_day_of_week');
 966                 $first_day_of_week = (($first_day_of_week===false)? '0': $first_day_of_week); // default if not set: 0
 967                 $weekdays = array(0 => t("Sunday"), 1 => t("Monday"));
 968
 969                 $noinfo = get_pconfig(local_user(),'system','ignore_info');
 970                 $noinfo = (($noinfo===false)? '0': $noinfo); // default if not set: 0
 971
 972                 $infinite_scroll = get_pconfig(local_user(),'system','infinite_scroll');
 973                 $infinite_scroll = (($infinite_scroll===false)? '0': $infinite_scroll); // default if not set: 0
 974
 975                 $no_auto_update = get_pconfig(local_user(),'system','no_auto_update');
 976                 $no_auto_update = (($no_auto_update===false)? '0': $no_auto_update); // default if not set: 0
 977
 978                 $theme_config = "";
 979                 if( ($themeconfigfile = get_theme_config_file($theme_selected)) != null){
 980                         require_once($themeconfigfile);
 981                         $theme_config = theme_content($a);
 982                 }
 983
 984                 $tpl = get_markup_template("settings_display.tpl");
 985                 $o = replace_macros($tpl, array(
 986                         '$ptitle'       => t('Display Settings'),
 987                         '$form_security_token' => get_form_security_token("settings_display"),
 988                         '$submit'       => t('Save Settings'),
 989                         '$baseurl' => $a->get_baseurl(true),
 990                         '$uid' => local_user(),
 991
 992                         '$theme'        => array('theme', t('Display Theme:'), $theme_selected, '', $themes, true),
 993                         '$mobile_theme' => array('mobile_theme', t('Mobile Theme:'), $mobile_theme_selected, '', $mobile_themes, false),
 994                         '$ajaxint'   => array('browser_update',  t("Update browser every xx seconds"), $browser_update, t('Minimum of 10 seconds. Enter -1 to disable it.')),
 995                         '$itemspage_network'   => array('itemspage_network',  t("Number of items to display per page:"), $itemspage_network, t('Maximum of 100 items')),
 996                         '$itemspage_mobile_network'   => array('itemspage_mobile_network',  t("Number of items to display per page when viewed from mobile device:"), $itemspage_mobile_network, t('Maximum of 100 items')),
 997                         '$nosmile'      => array('nosmile', t("Don't show emoticons"), $nosmile, ''),
 998                         '$calendar_title' => t('Calendar'),
 999                         '$first_day_of_week'    => array('first_day_of_week', t('Beginning of week:'), $first_day_of_week, '', $weekdays, false),
1000                         '$noinfo'       => array('noinfo', t("Don't show notices"), $noinfo, ''),
1001                         '$infinite_scroll'      => array('infinite_scroll', t("Infinite scroll"), $infinite_scroll, ''),
1002                         '$no_auto_update'       => array('no_auto_update', t("Automatic updates only at the top of the network page"), $no_auto_update, 'When disabled, the network page is updated all the time, which could be confusing while reading.'),
1003
1004                         '$d_tset' => t('General Theme Settings'),
1005                         '$d_ctset' => t('Custom Theme Settings'),
1006                         '$d_cset' => t('Content Settings'),
1007                         'stitle' => t('Theme settings'),
1008                         '$theme_config' => $theme_config,
1009                 ));
1010
1011                 $tpl = get_markup_template("settings_display_end.tpl");
1012                 $a->page['end'] .= replace_macros($tpl, array(
1013                         '$theme'        => array('theme', t('Display Theme:'), $theme_selected, '', $themes)
1014                 ));
1015
1016                 return $o;
1017         }
1018
1019
1020         /*
1021          * ACCOUNT SETTINGS
1022          */
1023
1024         require_once('include/acl_selectors.php');
1025
1026         $p = q("SELECT * FROM `profile` WHERE `is-default` = 1 AND `uid` = %d LIMIT 1",
1027                 intval(local_user())
1028         );
1029         if(count($p))
1030                 $profile = $p[0];
1031
1032         $username   = $a->user['username'];
1033         $email      = $a->user['email'];
1034         $nickname   = $a->user['nickname'];
1035         $timezone   = $a->user['timezone'];
1036         $language   = $a->user['language'];
1037         $notify     = $a->user['notify-flags'];
1038         $defloc     = $a->user['default-location'];
1039         $openid     = $a->user['openid'];
1040         $maxreq     = $a->user['maxreq'];
1041         $expire     = ((intval($a->user['expire'])) ? $a->user['expire'] : '');
1042         $blockwall  = $a->user['blockwall'];
1043         $blocktags  = $a->user['blocktags'];
1044         $unkmail    = $a->user['unkmail'];
1045         $cntunkmail = $a->user['cntunkmail'];
1046
1047         $expire_items = get_pconfig(local_user(), 'expire','items');
1048         $expire_items = (($expire_items===false)? '1' : $expire_items); // default if not set: 1
1049
1050         $expire_notes = get_pconfig(local_user(), 'expire','notes');
1051         $expire_notes = (($expire_notes===false)? '1' : $expire_notes); // default if not set: 1
1052
1053         $expire_starred = get_pconfig(local_user(), 'expire','starred');
1054         $expire_starred = (($expire_starred===false)? '1' : $expire_starred); // default if not set: 1
1055
1056         $expire_photos = get_pconfig(local_user(), 'expire','photos');
1057         $expire_photos = (($expire_photos===false)? '0' : $expire_photos); // default if not set: 0
1058
1059         $expire_network_only = get_pconfig(local_user(), 'expire','network_only');
1060         $expire_network_only = (($expire_network_only===false)? '0' : $expire_network_only); // default if not set: 0
1061
1062
1063         $suggestme = get_pconfig(local_user(), 'system','suggestme');
1064         $suggestme = (($suggestme===false)? '0': $suggestme); // default if not set: 0
1065
1066         $post_newfriend = get_pconfig(local_user(), 'system','post_newfriend');
1067         $post_newfriend = (($post_newfriend===false)? '0': $post_newfriend); // default if not set: 0
1068
1069         $post_joingroup = get_pconfig(local_user(), 'system','post_joingroup');
1070         $post_joingroup = (($post_joingroup===false)? '0': $post_joingroup); // default if not set: 0
1071
1072         $post_profilechange = get_pconfig(local_user(), 'system','post_profilechange');
1073         $post_profilechange = (($post_profilechange===false)? '0': $post_profilechange); // default if not set: 0
1074
1075         // nowarn_insecure
1076
1077         if(! strlen($a->user['timezone']))
1078                 $timezone = date_default_timezone_get();
1079
1080         $pageset_tpl = get_markup_template('pagetypes.tpl');
1081
1082         $pagetype = replace_macros($pageset_tpl, array(
1083                 '$account_types'=> t("Account Types"),
1084                 '$user'         => t("Personal Page Subtypes"),
1085                 '$community'    => t("Community Forum Subtypes"),
1086                 '$account_type' => $a->user['account-type'],
1087                 '$type_person'  => ACCOUNT_TYPE_PERSON,
1088                 '$type_company' => ACCOUNT_TYPE_COMPANY,
1089                 '$type_news'    => ACCOUNT_TYPE_NEWS,
1090                 '$type_community' => ACCOUNT_TYPE_COMMUNITY,
1091                 '$account_person'       => array('account-type', t('Personal Page'), ACCOUNT_TYPE_PERSON,
1092                                                                         t('This account is a regular personal profile'),
1093                                                                         ($a->user['account-type'] == ACCOUNT_TYPE_PERSON)),
1094
1095                 '$account_company'      => array('account-type', t('Company Page'), ACCOUNT_TYPE_COMPANY,
1096                                                                         t('This account is a company profile'),
1097                                                                         ($a->user['account-type'] == ACCOUNT_TYPE_COMPANY)),
1098
1099                 '$account_news'         => array('account-type', t('News Page'), ACCOUNT_TYPE_NEWS,
1100                                                                         t('This account is a news account/reflector'),
1101                                                                         ($a->user['account-type'] == ACCOUNT_TYPE_NEWS)),
1102
1103                 '$account_community'    => array('account-type', t('Community Forum'), ACCOUNT_TYPE_COMMUNITY,
1104                                                                         t('This account is a community forum where people can discuss with each other'),
1105                                                                         ($a->user['account-type'] == ACCOUNT_TYPE_COMMUNITY)),
1106
1107                 '$page_normal'          => array('page-flags', t('Normal Account Page'), PAGE_NORMAL,
1108                                                                         t('This account is a normal personal profile'),
1109                                                                         ($a->user['page-flags'] == PAGE_NORMAL)),
1110
1111                 '$page_soapbox'         => array('page-flags', t('Soapbox Page'), PAGE_SOAPBOX,
1112                                                                         t('Automatically approve all connection/friend requests as read-only fans'),
1113                                                                         ($a->user['page-flags'] == PAGE_SOAPBOX)),
1114
1115                 '$page_community'       => array('page-flags', t('Public Forum'), PAGE_COMMUNITY,
1116                                                                         t('Automatically approve all contact requests'),
1117                                                                         ($a->user['page-flags'] == PAGE_COMMUNITY)),
1118
1119                 '$page_freelove'        => array('page-flags', t('Automatic Friend Page'), PAGE_FREELOVE,
1120                                                                         t('Automatically approve all connection/friend requests as friends'),
1121                                                                         ($a->user['page-flags'] == PAGE_FREELOVE)),
1122
1123                 '$page_prvgroup'        => array('page-flags', t('Private Forum [Experimental]'), PAGE_PRVGROUP,
1124                                                                         t('Private forum - approved members only'),
1125                                                                         ($a->user['page-flags'] == PAGE_PRVGROUP)),
1126
1127
1128         ));
1129
1130         $noid = get_config('system','no_openid');
1131
1132         if($noid) {
1133                 $openid_field = false;
1134         }
1135         else {
1136                 $openid_field = array('openid_url', t('OpenID:'),$openid, t("\x28Optional\x29 Allow this OpenID to login to this account."), "", "", "url");
1137         }
1138
1139
1140         $opt_tpl = get_markup_template("field_yesno.tpl");
1141         if(get_config('system','publish_all')) {
1142                 $profile_in_dir = '<input type="hidden" name="profile_in_directory" value="1" />';
1143         }
1144         else {
1145                 $profile_in_dir = replace_macros($opt_tpl,array(
1146                         '$field'        => array('profile_in_directory', t('Publish your default profile in your local site directory?'), $profile['publish'], '', array(t('No'),t('Yes'))),
1147                 ));
1148         }
1149
1150         if(strlen(get_config('system','directory'))) {
1151                 $profile_in_net_dir = replace_macros($opt_tpl,array(
1152                         '$field'        => array('profile_in_netdirectory', t('Publish your default profile in the global social directory?'), $profile['net-publish'], '', array(t('No'),t('Yes'))),
1153                 ));
1154         }
1155         else
1156                 $profile_in_net_dir = '';
1157
1158
1159         $hide_friends = replace_macros($opt_tpl,array(
1160                         '$field'        => array('hide-friends', t('Hide your contact/friend list from viewers of your default profile?'), $profile['hide-friends'], '', array(t('No'),t('Yes'))),
1161         ));
1162
1163         $hide_wall = replace_macros($opt_tpl,array(
1164                         '$field'        => array('hidewall',  t('Hide your profile details from unknown viewers?'), $a->user['hidewall'], t("If enabled, posting public messages to Diaspora and other networks isn't possible."), array(t('No'),t('Yes'))),
1165
1166         ));
1167
1168         $blockwall = replace_macros($opt_tpl,array(
1169                         '$field'        => array('blockwall',  t('Allow friends to post to your profile page?'), (intval($a->user['blockwall']) ? '0' : '1'), '', array(t('No'),t('Yes'))),
1170
1171         ));
1172
1173
1174         $blocktags = replace_macros($opt_tpl,array(
1175                         '$field'        => array('blocktags',  t('Allow friends to tag your posts?'), (intval($a->user['blocktags']) ? '0' : '1'), '', array(t('No'),t('Yes'))),
1176
1177         ));
1178
1179
1180         $suggestme = replace_macros($opt_tpl,array(
1181                         '$field'        => array('suggestme',  t('Allow us to suggest you as a potential friend to new members?'), $suggestme, '', array(t('No'),t('Yes'))),
1182
1183         ));
1184
1185
1186         $unkmail = replace_macros($opt_tpl,array(
1187                         '$field'        => array('unkmail',  t('Permit unknown people to send you private mail?'), $unkmail, '', array(t('No'),t('Yes'))),
1188
1189         ));
1190
1191         $invisible = (((! $profile['publish']) && (! $profile['net-publish']))
1192                 ? true : false);
1193
1194         if($invisible)
1195                 info( t('Profile is <strong>not published</strong>.') . EOL );
1196
1197
1198         //$subdir = ((strlen($a->get_path())) ? '<br />' . t('or') . ' ' . 'profile/' . $nickname : '');
1199
1200         $tpl_addr = get_markup_template("settings_nick_set.tpl");
1201
1202         $prof_addr = replace_macros($tpl_addr,array(
1203                 '$desc' => sprintf(t("Your Identity Address is <strong>'%s'</strong> or '%s'."), $nickname.'@'.$a->get_hostname().$a->get_path(), $a->get_baseurl().'/profile/'.$nickname),
1204                 '$basepath' => $a->get_hostname()
1205         ));
1206
1207         $stpl = get_markup_template('settings.tpl');
1208
1209         $expire_arr = array(
1210                 'days' => array('expire',  t("Automatically expire posts after this many days:"), $expire, t('If empty, posts will not expire. Expired posts will be deleted')),
1211                 'advanced' => t('Advanced expiration settings'),
1212                 'label' => t('Advanced Expiration'),
1213                 'items' => array('expire_items',  t("Expire posts:"), $expire_items, '', array(t('No'),t('Yes'))),
1214                 'notes' => array('expire_notes',  t("Expire personal notes:"), $expire_notes, '', array(t('No'),t('Yes'))),
1215                 'starred' => array('expire_starred',  t("Expire starred posts:"), $expire_starred, '', array(t('No'),t('Yes'))),
1216                 'photos' => array('expire_photos',  t("Expire photos:"), $expire_photos, '', array(t('No'),t('Yes'))),
1217                 'network_only' => array('expire_network_only',  t("Only expire posts by others:"), $expire_network_only, '', array(t('No'),t('Yes'))),
1218         );
1219
1220         require_once('include/group.php');
1221         $group_select = mini_group_select(local_user(),$a->user['def_gid']);
1222
1223
1224         // Private/public post links for the non-JS ACL form
1225         $private_post = 1;
1226         if($_REQUEST['public'])
1227                 $private_post = 0;
1228
1229         $query_str = $a->query_string;
1230         if(strpos($query_str, 'public=1') !== false)
1231                 $query_str = str_replace(array('?public=1', '&public=1'), array('', ''), $query_str);
1232
1233         // I think $a->query_string may never have ? in it, but I could be wrong
1234         // It looks like it's from the index.php?q=[etc] rewrite that the web
1235         // server does, which converts any ? to &, e.g. suggest&ignore=61 for suggest?ignore=61
1236         if(strpos($query_str, '?') === false)
1237                 $public_post_link = '?public=1';
1238         else
1239                 $public_post_link = '&public=1';
1240
1241         /* Installed langs */
1242         $lang_choices = get_avaiable_languages();
1243
1244         $o .= replace_macros($stpl, array(
1245                 '$ptitle'       => t('Account Settings'),
1246
1247                 '$submit'       => t('Save Settings'),
1248                 '$baseurl' => $a->get_baseurl(true),
1249                 '$uid' => local_user(),
1250                 '$form_security_token' => get_form_security_token("settings"),
1251                 '$nickname_block' => $prof_addr,
1252
1253                 '$h_pass'       => t('Password Settings'),
1254                 '$password1'=> array('password', t('New Password:'), '', ''),
1255                 '$password2'=> array('confirm', t('Confirm:'), '', t('Leave password fields blank unless changing')),
1256                 '$password3'=> array('opassword', t('Current Password:'), '', t('Your current password to confirm the changes')),
1257                 '$password4'=> array('mpassword', t('Password:'), '', t('Your current password to confirm the changes')),
1258                 '$oid_enable' => (! get_config('system','no_openid')),
1259                 '$openid'       => $openid_field,
1260
1261                 '$h_basic'      => t('Basic Settings'),
1262                 '$username' => array('username',  t('Full Name:'), $username,''),
1263                 '$email'        => array('email', t('Email Address:'), $email, '', '', '', 'email'),
1264                 '$timezone' => array('timezone_select' , t('Your Timezone:'), select_timezone($timezone), ''),
1265                 '$language' => array('language', t('Your Language:'), $language, t('Set the language we use to show you friendica interface and to send you emails'), $lang_choices),
1266                 '$defloc'       => array('defloc', t('Default Post Location:'), $defloc, ''),
1267                 '$allowloc' => array('allow_location', t('Use Browser Location:'), ($a->user['allow_location'] == 1), ''),
1268
1269
1270                 '$h_prv'        => t('Security and Privacy Settings'),
1271
1272                 '$maxreq'       => array('maxreq', t('Maximum Friend Requests/Day:'), $maxreq ,t("\x28to prevent spam abuse\x29")),
1273                 '$permissions' => t('Default Post Permissions'),
1274                 '$permdesc' => t("\x28click to open/close\x29"),
1275                 '$visibility' => $profile['net-publish'],
1276                 '$aclselect' => populate_acl($a->user),
1277                 '$suggestme' => $suggestme,
1278                 '$blockwall'=> $blockwall, // array('blockwall', t('Allow friends to post to your profile page:'), !$blockwall, ''),
1279                 '$blocktags'=> $blocktags, // array('blocktags', t('Allow friends to tag your posts:'), !$blocktags, ''),
1280
1281                 // ACL permissions box
1282                 '$acl_data' => construct_acl_data($a, $a->user), // For non-Javascript ACL selector
1283                 '$group_perms' => t('Show to Groups'),
1284                 '$contact_perms' => t('Show to Contacts'),
1285                 '$private' => t('Default Private Post'),
1286                 '$public' => t('Default Public Post'),
1287                 '$is_private' => $private_post,
1288                 '$return_path' => $query_str,
1289                 '$public_link' => $public_post_link,
1290                 '$settings_perms' => t('Default Permissions for New Posts'),
1291
1292                 '$group_select' => $group_select,
1293
1294
1295                 '$expire'       => $expire_arr,
1296
1297                 '$profile_in_dir' => $profile_in_dir,
1298                 '$profile_in_net_dir' => $profile_in_net_dir,
1299                 '$hide_friends' => $hide_friends,
1300                 '$hide_wall' => $hide_wall,
1301                 '$unkmail' => $unkmail,
1302                 '$cntunkmail'   => array('cntunkmail', t('Maximum private messages per day from unknown people:'), $cntunkmail ,t("\x28to prevent spam abuse\x29")),
1303
1304
1305                 '$h_not'        => t('Notification Settings'),
1306                 '$activity_options' => t('By default post a status message when:'),
1307                 '$post_newfriend' => array('post_newfriend',  t('accepting a friend request'), $post_newfriend, ''),
1308                 '$post_joingroup' => array('post_joingroup',  t('joining a forum/community'), $post_joingroup, ''),
1309                 '$post_profilechange' => array('post_profilechange',  t('making an <em>interesting</em> profile change'), $post_profilechange, ''),
1310                 '$lbl_not'      => t('Send a notification email when:'),
1311                 '$notify1'      => array('notify1', t('You receive an introduction'), ($notify & NOTIFY_INTRO), NOTIFY_INTRO, ''),
1312                 '$notify2'      => array('notify2', t('Your introductions are confirmed'), ($notify & NOTIFY_CONFIRM), NOTIFY_CONFIRM, ''),
1313                 '$notify3'      => array('notify3', t('Someone writes on your profile wall'), ($notify & NOTIFY_WALL), NOTIFY_WALL, ''),
1314                 '$notify4'      => array('notify4', t('Someone writes a followup comment'), ($notify & NOTIFY_COMMENT), NOTIFY_COMMENT, ''),
1315                 '$notify5'      => array('notify5', t('You receive a private message'), ($notify & NOTIFY_MAIL), NOTIFY_MAIL, ''),
1316                 '$notify6'  => array('notify6', t('You receive a friend suggestion'), ($notify & NOTIFY_SUGGEST), NOTIFY_SUGGEST, ''),
1317                 '$notify7'  => array('notify7', t('You are tagged in a post'), ($notify & NOTIFY_TAGSELF), NOTIFY_TAGSELF, ''),
1318                 '$notify8'  => array('notify8', t('You are poked/prodded/etc. in a post'), ($notify & NOTIFY_POKE), NOTIFY_POKE, ''),
1319
1320                 '$desktop_notifications' => array('desktop_notifications', t('Activate desktop notifications') , false, t('Show desktop popup on new notifications')),
1321
1322                 '$email_textonly' => array('email_textonly', t('Text-only notification emails'),
1323                                                                         get_pconfig(local_user(),'system','email_textonly'),
1324                                                                         t('Send text only notification emails, without the html part')),
1325
1326                 '$h_advn' => t('Advanced Account/Page Type Settings'),
1327                 '$h_descadvn' => t('Change the behaviour of this account for special situations'),
1328                 '$pagetype' => $pagetype,
1329
1330                 '$relocate' => t('Relocate'),
1331                 '$relocate_text' => t("If you have moved this profile from another server, and some of your contacts don't receive your updates, try pushing this button."),
1332                 '$relocate_button' => t("Resend relocate message to contacts"),
1333
1334         ));
1335
1336         call_hooks('settings_form',$o);
1337
1338         $o .= '</form>' . "\r\n";
1339
1340         return $o;
1341
1342 }
1343