X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=actions%2Femailsettings.php;h=6e189a909d4a4c585cce158fa74a796a007a0b1f;hb=4f3d1e93e97365deac2366bfe422e8301d773a25;hp=b7e356c25683a6171298090ed729b91a17707a00;hpb=a47ab1ad6acee9a94dce7803d05683c2903b187d;p=quix0rs-gnu-social.git diff --git a/actions/emailsettings.php b/actions/emailsettings.php index b7e356c256..6e189a909d 100644 --- a/actions/emailsettings.php +++ b/actions/emailsettings.php @@ -34,6 +34,7 @@ class EmailsettingsAction extends SettingsAction { 'id' => 'emailsettings', 'action' => common_local_url('emailsettings'))); + common_hidden('token', common_session_token()); common_element('h2', NULL, _('Address')); @@ -63,14 +64,45 @@ class EmailsettingsAction extends SettingsAction { } } + if ($user->email) { + common_element('h2', NULL, _('Incoming email')); + + if ($user->incomingemail) { + common_element_start('p'); + common_element('span', 'address', $user->incomingemail); + common_element('span', 'input_instructions', + _('Send email to this address to post new notices.')); + common_element_end('p'); + common_submit('removeincoming', _('Remove')); + } + + common_element_start('p'); + common_element('span', 'input_instructions', + _('Make a new email address for posting to; cancels the old one.')); + common_element_end('p'); + common_submit('newincoming', _('New')); + } + common_element('h2', NULL, _('Preferences')); common_checkbox('emailnotifysub', _('Send me notices of new subscriptions through email.'), $user->emailnotifysub); - - common_submit('save', _('Save')); + common_checkbox('emailnotifyfav', + _('Send me email when someone adds my notice as a favorite.'), + $user->emailnotifyfav); + common_checkbox('emailnotifymsg', + _('Send me email when someone sends me a private message.'), + $user->emailnotifymsg); + common_checkbox('emailpost', + _('I want to post notices by email.'), + $user->emailpost); + common_checkbox('emailmicroid', + _('Publish a MicroID for my email address.'), + $user->emailmicroid); + common_submit('save', _('Save')); + common_element_end('form'); common_show_footer(); } @@ -89,6 +121,13 @@ class EmailsettingsAction extends SettingsAction { function handle_post() { + # CSRF protection + $token = $this->trimmed('token'); + if (!$token || $token != common_session_token()) { + $this->show_form(_('There was a problem with your session token. Try again, please.')); + return; + } + if ($this->arg('save')) { $this->save_preferences(); } else if ($this->arg('add')) { @@ -97,6 +136,10 @@ class EmailsettingsAction extends SettingsAction { $this->cancel_confirmation(); } else if ($this->arg('remove')) { $this->remove_address(); + } else if ($this->arg('removeincoming')) { + $this->remove_incoming(); + } else if ($this->arg('newincoming')) { + $this->new_incoming(); } else { $this->show_form(_('Unexpected form submission.')); } @@ -105,6 +148,10 @@ class EmailsettingsAction extends SettingsAction { function save_preferences() { $emailnotifysub = $this->boolean('emailnotifysub'); + $emailnotifyfav = $this->boolean('emailnotifyfav'); + $emailnotifymsg = $this->boolean('emailnotifymsg'); + $emailmicroid = $this->boolean('emailmicroid'); + $emailpost = $this->boolean('emailpost'); $user = common_current_user(); @@ -115,6 +162,10 @@ class EmailsettingsAction extends SettingsAction { $original = clone($user); $user->emailnotifysub = $emailnotifysub; + $user->emailnotifyfav = $emailnotifyfav; + $user->emailnotifymsg = $emailnotifymsg; + $user->emailmicroid = $emailmicroid; + $user->emailpost = $emailpost; $result = $user->update($original); @@ -228,11 +279,42 @@ class EmailsettingsAction extends SettingsAction { } $user->query('COMMIT'); - # XXX: unsubscribe to the old address - $this->show_form(_('The address was removed.'), TRUE); } + function remove_incoming() { + $user = common_current_user(); + + if (!$user->incomingemail) { + $this->show_form(_('No incoming email address.')); + return; + } + + $orig = clone($user); + $user->incomingemail = NULL; + + if (!$user->updateKeys($orig)) { + common_log_db_error($user, 'UPDATE', __FILE__); + $this->server_error(_("Couldn't update user record.")); + } + + $this->show_form(_('Incoming email address removed.'), TRUE); + } + + function new_incoming() { + $user = common_current_user(); + + $orig = clone($user); + $user->incomingemail = mail_new_incoming_address(); + + if (!$user->updateKeys($orig)) { + common_log_db_error($user, 'UPDATE', __FILE__); + $this->server_error(_("Couldn't update user record.")); + } + + $this->show_form(_('New incoming email address added.'), TRUE); + } + function email_exists($email) { $user = common_current_user(); $other = User::staticGet('email', $email);