287 lines
		
	
	
		
			No EOL
		
	
	
		
			8.1 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
			
		
		
	
	
			287 lines
		
	
	
		
			No EOL
		
	
	
		
			8.1 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
<?php
 | 
						|
 | 
						|
 | 
						|
function settings_init(&$a) {
 | 
						|
 | 
						|
	if(! local_user()) {
 | 
						|
		notice("Permission denied." . EOL);
 | 
						|
		$a->error = 404;
 | 
						|
		return;
 | 
						|
	}
 | 
						|
	require_once("mod/profile.php");
 | 
						|
	profile_load($a,$a->user['nickname']);
 | 
						|
}
 | 
						|
 | 
						|
 | 
						|
function settings_post(&$a) {
 | 
						|
 | 
						|
 | 
						|
	if(! local_user()) {
 | 
						|
		notice( t('Permission denied.') . EOL);
 | 
						|
		return;
 | 
						|
	}
 | 
						|
	if(count($a->user) && x($a->user,'uid') && $a->user['uid'] != $_SESSION['uid']) {
 | 
						|
		notice( t('Permission denied.') . EOL);
 | 
						|
		return;
 | 
						|
	}
 | 
						|
	if((x($_POST,'npassword')) || (x($_POST,'confirm'))) {
 | 
						|
 | 
						|
		$newpass = trim($_POST['npassword']);
 | 
						|
		$confirm = trim($_POST['confirm']);
 | 
						|
 | 
						|
		$err = false;
 | 
						|
		if($newpass != $confirm ) {
 | 
						|
			notice( t('Passwords do not match. Password unchanged.') . EOL);
 | 
						|
			$err = true;
 | 
						|
		}
 | 
						|
 | 
						|
		if((! x($newpass)) || (! x($confirm))) {
 | 
						|
			notice( t('Empty passwords are not allowed. Password unchanged.') . EOL);
 | 
						|
			$err = true;
 | 
						|
		}
 | 
						|
 | 
						|
		if(! $err) {
 | 
						|
			$password = hash('whirlpool',$newpass);
 | 
						|
			$r = q("UPDATE `user` SET `password` = '%s' WHERE `uid` = %d LIMIT 1",
 | 
						|
				dbesc($password),
 | 
						|
				intval($_SESSION['uid']));
 | 
						|
			if($r)
 | 
						|
				notice( t('Password changed.') . EOL);
 | 
						|
			else
 | 
						|
				notice( t('Password update failed. Please try again.') . EOL);
 | 
						|
		}
 | 
						|
	}
 | 
						|
 | 
						|
	$theme = notags(trim($_POST['theme']));
 | 
						|
	$username = notags(trim($_POST['username']));
 | 
						|
	$email = notags(trim($_POST['email']));
 | 
						|
	$timezone = notags(trim($_POST['timezone']));
 | 
						|
 | 
						|
	$publish = (($_POST['profile_in_directory'] == 1) ? 1: 0);
 | 
						|
	$net_publish = (($_POST['profile_in_netdirectory'] == 1) ? 1: 0);
 | 
						|
	$old_visibility = ((intval($_POST['visibility']) == 1) ? 1 : 0);
 | 
						|
 | 
						|
	$notify = 0;
 | 
						|
 | 
						|
	if($_POST['notify1'])
 | 
						|
		$notify += intval($_POST['notify1']);
 | 
						|
	if($_POST['notify2'])
 | 
						|
		$notify += intval($_POST['notify2']);
 | 
						|
	if($_POST['notify3'])
 | 
						|
		$notify += intval($_POST['notify3']);
 | 
						|
	if($_POST['notify4'])
 | 
						|
		$notify += intval($_POST['notify4']);
 | 
						|
	if($_POST['notify5'])
 | 
						|
		$notify += intval($_POST['notify5']);
 | 
						|
 | 
						|
	$username_changed = false;
 | 
						|
	$email_changed = false;
 | 
						|
	$zone_changed = false;
 | 
						|
	$err = '';
 | 
						|
 | 
						|
	if($username != $a->user['username']) {
 | 
						|
		$username_changed = true;
 | 
						|
        	if(strlen($username) > 40)
 | 
						|
                	$err .= t(' Please use a shorter name.');
 | 
						|
        	if(strlen($username) < 3)
 | 
						|
                	$err .= t(' Name too short.');
 | 
						|
	}
 | 
						|
	if($email != $a->user['email']) {
 | 
						|
		$email_changed = true;
 | 
						|
        	if(!eregi('[A-Za-z0-9._%-]+@[A-Za-z0-9._%-]+\.[A-Za-z]{2,6}',$email))
 | 
						|
                	$err .= t(' Not valid email.');
 | 
						|
        	$r = q("SELECT `uid` FROM `user`
 | 
						|
                	WHERE `email` = '%s' LIMIT 1",
 | 
						|
                	dbesc($email)
 | 
						|
                	);
 | 
						|
	        if($r !== NULL && count($r))
 | 
						|
        	        $err .= t(' This email address is already registered.');
 | 
						|
	}
 | 
						|
 | 
						|
        if(strlen($err)) {
 | 
						|
                notice($err . EOL);
 | 
						|
                return;
 | 
						|
        }
 | 
						|
	if($timezone != $a->user['timezone']) {
 | 
						|
		$zone_changed = true;
 | 
						|
		if(strlen($timezone))
 | 
						|
			date_default_timezone_set($timezone);
 | 
						|
	}
 | 
						|
 | 
						|
	$str_group_allow = '';
 | 
						|
	$group_allow = $_POST['group_allow'];
 | 
						|
	if(is_array($group_allow)) {
 | 
						|
		array_walk($group_allow,'sanitise_acl');
 | 
						|
		$str_group_allow = implode('',$group_allow);
 | 
						|
	}
 | 
						|
 | 
						|
	$str_contact_allow = '';
 | 
						|
	$contact_allow = $_POST['contact_allow'];
 | 
						|
	if(is_array($contact_allow)) {
 | 
						|
		array_walk($contact_allow,'sanitise_acl');
 | 
						|
		$str_contact_allow = implode('',$contact_allow);
 | 
						|
	}
 | 
						|
 | 
						|
	$str_group_deny = '';
 | 
						|
	$group_deny = $_POST['group_deny'];
 | 
						|
	if(is_array($group_deny)) {
 | 
						|
		array_walk($group_deny,'sanitise_acl');
 | 
						|
		$str_group_deny = implode('',$group_deny);
 | 
						|
	}
 | 
						|
 | 
						|
	$str_contact_deny = '';
 | 
						|
	$contact_deny = $_POST['contact_deny'];
 | 
						|
	if(is_array($contact_deny)) {
 | 
						|
		array_walk($contact_deny,'sanitise_acl');
 | 
						|
		$str_contact_deny = implode('',$contact_deny);
 | 
						|
	}
 | 
						|
 | 
						|
	$r = q("UPDATE `user` SET `username` = '%s', `email` = '%s', `timezone` = '%s',  `allow_cid` = '%s', `allow_gid` = '%s', `deny_cid` = '%s', `deny_gid` = '%s', `notify-flags` = %d, `theme` = '%s'  WHERE `uid` = %d LIMIT 1",
 | 
						|
			dbesc($username),
 | 
						|
			dbesc($email),
 | 
						|
			dbesc($timezone),
 | 
						|
			dbesc($str_contact_allow),
 | 
						|
			dbesc($str_group_allow),
 | 
						|
			dbesc($str_contact_deny),
 | 
						|
			dbesc($str_group_deny),
 | 
						|
			intval($notify),
 | 
						|
			dbesc($theme),
 | 
						|
			intval($_SESSION['uid'])
 | 
						|
	);
 | 
						|
	if($r)
 | 
						|
		notice( t('Settings updated.') . EOL);
 | 
						|
 | 
						|
	$r = q("UPDATE `profile` 
 | 
						|
		SET `publish` = %d, `net-publish` = %d
 | 
						|
		WHERE `is-default` = 1 AND `uid` = %d LIMIT 1",
 | 
						|
		intval($publish),
 | 
						|
		intval($net_publish),
 | 
						|
		intval($_SESSION['uid'])
 | 
						|
	);
 | 
						|
 | 
						|
	if($old_visibility != $net_publish) {
 | 
						|
		// Update global directory in background
 | 
						|
		$php_path = ((strlen($a->config['php_path'])) ? $a->config['php_path'] : 'php');
 | 
						|
		$url = $_SESSION['my_url'];
 | 
						|
		if($url && strlen(get_config('system','directory_submit_url')))
 | 
						|
			proc_close(proc_open("\"$php_path\" \"include/directory.php\" \"$url\" &",
 | 
						|
				array(),$foo));
 | 
						|
	}
 | 
						|
 | 
						|
	$_SESSION['theme'] = $theme;
 | 
						|
	if($email_changed && $a->config['register_policy'] == REGISTER_VERIFY) {
 | 
						|
 | 
						|
		// FIXME - set to un-verified, blocked and redirect to logout
 | 
						|
 | 
						|
	}
 | 
						|
 | 
						|
	goaway($a->get_baseurl() . '/settings' );
 | 
						|
}
 | 
						|
		
 | 
						|
 | 
						|
if(! function_exists('settings_content')) {
 | 
						|
function settings_content(&$a) {
 | 
						|
 | 
						|
	if(! local_user()) {
 | 
						|
		notice( t('Permission denied.') . EOL );
 | 
						|
		return;
 | 
						|
	}
 | 
						|
 | 
						|
	require_once('view/acl_selectors.php');
 | 
						|
 | 
						|
	$p = q("SELECT * FROM `profile` WHERE `is-default` = 1 AND `uid` = %d LIMIT 1",
 | 
						|
		intval($_SESSION['uid'])
 | 
						|
	);
 | 
						|
	if(count($p))
 | 
						|
		$profile = $p[0];
 | 
						|
 | 
						|
	$username = $a->user['username'];
 | 
						|
	$email    = $a->user['email'];
 | 
						|
	$nickname = $a->user['nickname'];
 | 
						|
	$timezone = $a->user['timezone'];
 | 
						|
	$notify   = $a->user['notify-flags'];
 | 
						|
 | 
						|
	if(! strlen($a->user['timezone']))
 | 
						|
		$timezone = date_default_timezone_get();
 | 
						|
 | 
						|
 | 
						|
	$opt_tpl = file_get_contents("view/profile-in-directory.tpl");
 | 
						|
	$profile_in_dir = replace_macros($opt_tpl,array(
 | 
						|
		'$yes_selected' => (($profile['publish']) ? " checked=\"checked\" " : ""),
 | 
						|
		'$no_selected' => (($profile['publish'] == 0) ? " checked=\"checked\" " : "")
 | 
						|
	));
 | 
						|
 | 
						|
	if(strlen(get_config('system','directory_submit_url'))) {
 | 
						|
		$opt_tpl = file_get_contents("view/profile-in-netdir.tpl");
 | 
						|
 | 
						|
		$profile_in_net_dir = replace_macros($opt_tpl,array(
 | 
						|
			'$yes_selected' => (($profile['net-publish']) ? " checked=\"checked\" " : ""),
 | 
						|
			'$no_selected' => (($profile['net-publish'] == 0) ? " checked=\"checked\" " : "")
 | 
						|
		));
 | 
						|
	}
 | 
						|
	else
 | 
						|
		$profile_in_net_dir = '';
 | 
						|
 | 
						|
 | 
						|
 | 
						|
 | 
						|
 | 
						|
	$nickname_block = file_get_contents("view/settings_nick_set.tpl");
 | 
						|
	
 | 
						|
 | 
						|
	$nickname_subdir = '';
 | 
						|
	if(strlen($a->get_path())) {
 | 
						|
		$subdir_tpl = file_get_contents('view/settings_nick_subdir.tpl');
 | 
						|
		$nickname_subdir = replace_macros($subdir_tpl, array(
 | 
						|
			'$baseurl' => $a->get_baseurl(),
 | 
						|
			'$nickname' => $nickname,
 | 
						|
			'$hostname' => $a->get_hostname()
 | 
						|
		));
 | 
						|
	}
 | 
						|
 | 
						|
	$theme_selector = '<select name="theme" id="theme-select" >';
 | 
						|
	$files = glob('view/theme/*');
 | 
						|
	if($files) {
 | 
						|
		foreach($files as $file) {
 | 
						|
			$f = basename($file);
 | 
						|
			$selected = (($f == $_SESSION['theme']) || ($f == 'default' && (! x($_SESSION,'theme')))
 | 
						|
				? ' selected="selected" ' : '' );
 | 
						|
			$theme_selector .= '<option val="' . basename($file) . '"' . $selected . '>' . basename($file) . '</option>';
 | 
						|
		}
 | 
						|
	}
 | 
						|
	$theme_selector .= '</select>';
 | 
						|
 | 
						|
 | 
						|
	$nickname_block = replace_macros($nickname_block,array(
 | 
						|
		'$nickname' => $nickname,
 | 
						|
		'$uid' => $_SESSION['uid'],
 | 
						|
		'$subdir' => $nickname_subdir,
 | 
						|
		'$basepath' => $a->get_hostname(),
 | 
						|
		'$baseurl' => $a->get_baseurl()));	
 | 
						|
 | 
						|
	$o = file_get_contents('view/settings.tpl');
 | 
						|
 | 
						|
	$o = replace_macros($o,array(
 | 
						|
		'$baseurl' => $a->get_baseurl(),
 | 
						|
		'$uid' => $_SESSION['uid'],
 | 
						|
		'$username' => $username,
 | 
						|
		'$email' => $email,
 | 
						|
		'$nickname_block' => $nickname_block,
 | 
						|
		'$timezone' => $timezone,
 | 
						|
		'$zoneselect' => select_timezone($timezone),
 | 
						|
		'$profile_in_dir' => $profile_in_dir,
 | 
						|
		'$profile_in_net_dir' => $profile_in_net_dir,
 | 
						|
		'$permissions' => t('Default Post Permissions'),
 | 
						|
		'$visibility' => $profile['net-publish'],
 | 
						|
		'$aclselect' => populate_acl($a->user),
 | 
						|
		'$sel_notify1' => (($notify & NOTIFY_INTRO)   ? ' checked="checked" ' : ''),
 | 
						|
		'$sel_notify2' => (($notify & NOTIFY_CONFIRM) ? ' checked="checked" ' : ''),
 | 
						|
		'$sel_notify3' => (($notify & NOTIFY_WALL)    ? ' checked="checked" ' : ''),
 | 
						|
		'$sel_notify4' => (($notify & NOTIFY_COMMENT) ? ' checked="checked" ' : ''),
 | 
						|
		'$sel_notify5' => (($notify & NOTIFY_MAIL)    ? ' checked="checked" ' : ''),
 | 
						|
		'$theme' => $theme_selector
 | 
						|
	));
 | 
						|
 | 
						|
	return $o;
 | 
						|
 | 
						|
}} |