mod/settings.php

   1 <?php
   2 /**
   3  * @copyright Copyright (C) 2010-2021, the Friendica project
   4  *
   5  * @license GNU AGPL version 3 or any later version
   6  *
   7  * This program is free software: you can redistribute it and/or modify
   8  * it under the terms of the GNU Affero General Public License as
   9  * published by the Free Software Foundation, either version 3 of the
  10  * License, or (at your option) any later version.
  11  *
  12  * This program is distributed in the hope that it will be useful,
  13  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  14  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  15  * GNU Affero General Public License for more details.
  16  *
  17  * You should have received a copy of the GNU Affero General Public License
  18  * along with this program.  If not, see <https://www.gnu.org/licenses/>.
  19  *
  20  */
  21
  22 use Friendica\App;
  23 use Friendica\BaseModule;
  24 use Friendica\Content\Feature;
  25 use Friendica\Content\Nav;
  26 use Friendica\Core\ACL;
  27 use Friendica\Core\Hook;
  28 use Friendica\Core\Logger;
  29 use Friendica\Core\Renderer;
  30 use Friendica\Core\Worker;
  31 use Friendica\Database\DBA;
  32 use Friendica\DI;
  33 use Friendica\Model\Contact;
  34 use Friendica\Model\Group;
  35 use Friendica\Model\Notification;
  36 use Friendica\Model\User;
  37 use Friendica\Module\BaseSettings;
  38 use Friendica\Module\Security\Login;
  39 use Friendica\Protocol\Email;
  40 use Friendica\Util\Strings;
  41 use Friendica\Util\Temporal;
  42 use Friendica\Worker\Delivery;
  43
  44 function settings_init(App $a)
  45 {
  46         if (!local_user()) {
  47                 notice(DI::l10n()->t('Permission denied.'));
  48                 return;
  49         }
  50
  51         BaseSettings::content();
  52 }
  53
  54 function settings_post(App $a)
  55 {
  56         if (!local_user()) {
  57                 return;
  58         }
  59
  60         if (!empty($_SESSION['submanage'])) {
  61                 return;
  62         }
  63
  64         if (count($a->user) && !empty($a->user['uid']) && $a->user['uid'] != local_user()) {
  65                 notice(DI::l10n()->t('Permission denied.'));
  66                 return;
  67         }
  68
  69         $old_page_flags = $a->user['page-flags'];
  70
  71         if (($a->argc > 1) && ($a->argv[1] === 'oauth') && !empty($_POST['remove'])) {
  72                 BaseModule::checkFormSecurityTokenRedirectOnError('/settings/oauth', 'settings_oauth');
  73
  74                 $key = $_POST['remove'];
  75                 DBA::delete('tokens', ['id' => $key, 'uid' => local_user()]);
  76                 DI::baseUrl()->redirect('settings/oauth/', true);
  77                 return;
  78         }
  79
  80         if (($a->argc > 2) && ($a->argv[1] === 'oauth')  && ($a->argv[2] === 'edit'||($a->argv[2] === 'add')) && !empty($_POST['submit'])) {
  81                 BaseModule::checkFormSecurityTokenRedirectOnError('/settings/oauth', 'settings_oauth');
  82
  83                 $name     = $_POST['name']     ?? '';
  84                 $key      = $_POST['key']      ?? '';
  85                 $secret   = $_POST['secret']   ?? '';
  86                 $redirect = $_POST['redirect'] ?? '';
  87                 $icon     = $_POST['icon']     ?? '';
  88
  89                 if ($name == "" || $key == "" || $secret == "") {
  90                         notice(DI::l10n()->t("Missing some important data!"));
  91                 } else {
  92                         if ($_POST['submit'] == DI::l10n()->t("Update")) {
  93                                 q("UPDATE clients SET
  94                                                         client_id='%s',
  95                                                         pw='%s',
  96                                                         name='%s',
  97                                                         redirect_uri='%s',
  98                                                         icon='%s',
  99                                                         uid=%d
 100                                                 WHERE client_id='%s'",
 101                                         DBA::escape($key),
 102                                         DBA::escape($secret),
 103                                         DBA::escape($name),
 104                                         DBA::escape($redirect),
 105                                         DBA::escape($icon),
 106                                         local_user(),
 107                                         DBA::escape($key)
 108                                 );
 109                         } else {
 110                                 q("INSERT INTO clients
 111                                                         (client_id, pw, name, redirect_uri, icon, uid)
 112                                                 VALUES ('%s', '%s', '%s', '%s', '%s',%d)",
 113                                         DBA::escape($key),
 114                                         DBA::escape($secret),
 115                                         DBA::escape($name),
 116                                         DBA::escape($redirect),
 117                                         DBA::escape($icon),
 118                                         local_user()
 119                                 );
 120                         }
 121                 }
 122                 DI::baseUrl()->redirect('settings/oauth/', true);
 123                 return;
 124         }
 125
 126         if (($a->argc > 1) && ($a->argv[1] == 'addon')) {
 127                 BaseModule::checkFormSecurityTokenRedirectOnError('/settings/addon', 'settings_addon');
 128
 129                 Hook::callAll('addon_settings_post', $_POST);
 130                 return;
 131         }
 132
 133         if (($a->argc > 1) && ($a->argv[1] == 'connectors')) {
 134                 BaseModule::checkFormSecurityTokenRedirectOnError('/settings/connectors', 'settings_connectors');
 135
 136                 if (!empty($_POST['general-submit'])) {
 137                         DI::pConfig()->set(local_user(), 'system', 'accept_only_sharer', intval($_POST['accept_only_sharer']));
 138                         DI::pConfig()->set(local_user(), 'system', 'disable_cw', intval($_POST['disable_cw']));
 139                         DI::pConfig()->set(local_user(), 'system', 'no_intelligent_shortening', intval($_POST['no_intelligent_shortening']));
 140                         DI::pConfig()->set(local_user(), 'system', 'attach_link_title', intval($_POST['attach_link_title']));
 141                         DI::pConfig()->set(local_user(), 'system', 'ostatus_autofriend', intval($_POST['snautofollow']));
 142                         DI::pConfig()->set(local_user(), 'ostatus', 'default_group', $_POST['group-selection']);
 143                         DI::pConfig()->set(local_user(), 'ostatus', 'legacy_contact', $_POST['legacy_contact']);
 144                 } elseif (!empty($_POST['imap-submit'])) {
 145                         $mail_server       =                 $_POST['mail_server']       ?? '';
 146                         $mail_port         =                 $_POST['mail_port']         ?? '';
 147                         $mail_ssl          = strtolower(trim($_POST['mail_ssl']          ?? ''));
 148                         $mail_user         =                 $_POST['mail_user']         ?? '';
 149                         $mail_pass         =            trim($_POST['mail_pass']         ?? '');
 150                         $mail_action       =            trim($_POST['mail_action']       ?? '');
 151                         $mail_movetofolder =            trim($_POST['mail_movetofolder'] ?? '');
 152                         $mail_replyto      =                 $_POST['mail_replyto']      ?? '';
 153                         $mail_pubmail      =                 $_POST['mail_pubmail']      ?? '';
 154
 155                         if (
 156                                 !DI::config()->get('system', 'dfrn_only')
 157                                 && function_exists('imap_open')
 158                                 && !DI::config()->get('system', 'imap_disabled')
 159                         ) {
 160                                 $failed = false;
 161                                 $r = q("SELECT * FROM `mailacct` WHERE `uid` = %d LIMIT 1",
 162                                         intval(local_user())
 163                                 );
 164                                 if (!DBA::isResult($r)) {
 165                                         DBA::insert('mailacct', ['uid' => local_user()]);
 166                                 }
 167                                 if (strlen($mail_pass)) {
 168                                         $pass = '';
 169                                         openssl_public_encrypt($mail_pass, $pass, $a->user['pubkey']);
 170                                         DBA::update('mailacct', ['pass' => bin2hex($pass)], ['uid' => local_user()]);
 171                                 }
 172                                 $r = q("UPDATE `mailacct` SET `server` = '%s', `port` = %d, `ssltype` = '%s', `user` = '%s',
 173                                         `action` = %d, `movetofolder` = '%s',
 174                                         `mailbox` = 'INBOX', `reply_to` = '%s', `pubmail` = %d WHERE `uid` = %d",
 175                                         DBA::escape($mail_server),
 176                                         intval($mail_port),
 177                                         DBA::escape($mail_ssl),
 178                                         DBA::escape($mail_user),
 179                                         intval($mail_action),
 180                                         DBA::escape($mail_movetofolder),
 181                                         DBA::escape($mail_replyto),
 182                                         intval($mail_pubmail),
 183                                         intval(local_user())
 184                                 );
 185                                 Logger::notice('updating mailaccount', ['response' => $r]);
 186                                 $r = q("SELECT * FROM `mailacct` WHERE `uid` = %d LIMIT 1",
 187                                         intval(local_user())
 188                                 );
 189                                 if (DBA::isResult($r)) {
 190                                         $eacct = $r[0];
 191                                         $mb = Email::constructMailboxName($eacct);
 192
 193                                         if (strlen($eacct['server'])) {
 194                                                 $dcrpass = '';
 195                                                 openssl_private_decrypt(hex2bin($eacct['pass']), $dcrpass, $a->user['prvkey']);
 196                                                 $mbox = Email::connect($mb, $mail_user, $dcrpass);
 197                                                 unset($dcrpass);
 198                                                 if (!$mbox) {
 199                                                         $failed = true;
 200                                                         notice(DI::l10n()->t('Failed to connect with email account using the settings provided.'));
 201                                                 }
 202                                         }
 203                                 }
 204                         }
 205                 }
 206
 207                 Hook::callAll('connector_settings_post', $_POST);
 208                 return;
 209         }
 210
 211         if (($a->argc > 1) && ($a->argv[1] === 'features')) {
 212                 BaseModule::checkFormSecurityTokenRedirectOnError('/settings/features', 'settings_features');
 213                 foreach ($_POST as $k => $v) {
 214                         if (strpos($k, 'feature_') === 0) {
 215                                 DI::pConfig()->set(local_user(), 'feature', substr($k, 8), ((intval($v)) ? 1 : 0));
 216                         }
 217                 }
 218                 return;
 219         }
 220
 221         BaseModule::checkFormSecurityTokenRedirectOnError('/settings', 'settings');
 222
 223         // Import Contacts from CSV file
 224         if (!empty($_POST['importcontact-submit'])) {
 225                 if (isset($_FILES['importcontact-filename'])) {
 226                         // was there an error
 227                         if ($_FILES['importcontact-filename']['error'] > 0) {
 228                                 Logger::notice('Contact CSV file upload error', ['error' => $_FILES['importcontact-filename']['error']]);
 229                                 notice(DI::l10n()->t('Contact CSV file upload error'));
 230                         } else {
 231                                 $csvArray = array_map('str_getcsv', file($_FILES['importcontact-filename']['tmp_name']));
 232                                 Logger::notice('Import started', ['lines' => count($csvArray)]);
 233                                 // import contacts
 234                                 foreach ($csvArray as $csvRow) {
 235                                         // The 1st row may, or may not contain the headers of the table
 236                                         // We expect the 1st field of the row to contain either the URL
 237                                         // or the handle of the account, therefore we check for either
 238                                         // "http" or "@" to be present in the string.
 239                                         // All other fields from the row will be ignored
 240                                         if ((strpos($csvRow[0],'@') !== false) || in_array(parse_url($csvRow[0], PHP_URL_SCHEME), ['http', 'https'])) {
 241                                                 Worker::add(PRIORITY_LOW, 'AddContact', $_SESSION['uid'], $csvRow[0]);
 242                                         } else {
 243                                                 Logger::notice('Invalid account', ['url' => $csvRow[0]]);
 244                                         }
 245                                 }
 246                                 Logger::notice('Import done');
 247
 248                                 info(DI::l10n()->t('Importing Contacts done'));
 249                                 // delete temp file
 250                                 unlink($_FILES['importcontact-filename']['tmp_name']);
 251                         }
 252                 } else {
 253                         Logger::notice('Import triggered, but no import file was found.');
 254                 }
 255
 256                 return;
 257         }
 258
 259         if (!empty($_POST['resend_relocate'])) {
 260                 Worker::add(PRIORITY_HIGH, 'Notifier', Delivery::RELOCATION, local_user());
 261                 info(DI::l10n()->t("Relocate message has been send to your contacts"));
 262                 DI::baseUrl()->redirect('settings');
 263         }
 264
 265         Hook::callAll('settings_post', $_POST);
 266
 267         if (!empty($_POST['password']) || !empty($_POST['confirm'])) {
 268                 $newpass = $_POST['password'];
 269                 $confirm = $_POST['confirm'];
 270
 271                 try {
 272                         if ($newpass != $confirm) {
 273                                 throw new Exception(DI::l10n()->t('Passwords do not match.'));
 274                         }
 275
 276                         //  check if the old password was supplied correctly before changing it to the new value
 277                         User::getIdFromPasswordAuthentication(local_user(), $_POST['opassword']);
 278
 279                         $result = User::updatePassword(local_user(), $newpass);
 280                         if (!DBA::isResult($result)) {
 281                                 throw new Exception(DI::l10n()->t('Password update failed. Please try again.'));
 282                         }
 283
 284                         info(DI::l10n()->t('Password changed.'));
 285                 } catch (Exception $e) {
 286                         notice($e->getMessage());
 287                         notice(DI::l10n()->t('Password unchanged.'));
 288                 }
 289         }
 290
 291         $username         = (!empty($_POST['username'])   ? Strings::escapeTags(trim($_POST['username']))     : '');
 292         $email            = (!empty($_POST['email'])      ? Strings::escapeTags(trim($_POST['email']))        : '');
 293         $timezone         = (!empty($_POST['timezone'])   ? Strings::escapeTags(trim($_POST['timezone']))     : '');
 294         $language         = (!empty($_POST['language'])   ? Strings::escapeTags(trim($_POST['language']))     : '');
 295
 296         $defloc           = (!empty($_POST['defloc'])     ? Strings::escapeTags(trim($_POST['defloc']))       : '');
 297         $maxreq           = (!empty($_POST['maxreq'])     ? intval($_POST['maxreq'])             : 0);
 298         $expire           = (!empty($_POST['expire'])     ? intval($_POST['expire'])             : 0);
 299         $def_gid          = (!empty($_POST['group-selection']) ? intval($_POST['group-selection']) : 0);
 300
 301
 302         $expire_items     = (!empty($_POST['expire_items']) ? intval($_POST['expire_items'])     : 0);
 303         $expire_notes     = (!empty($_POST['expire_notes']) ? intval($_POST['expire_notes'])     : 0);
 304         $expire_starred   = (!empty($_POST['expire_starred']) ? intval($_POST['expire_starred']) : 0);
 305         $expire_photos    = (!empty($_POST['expire_photos'])? intval($_POST['expire_photos'])    : 0);
 306         $expire_network_only    = (!empty($_POST['expire_network_only'])? intval($_POST['expire_network_only'])  : 0);
 307
 308         $delete_openid    = ((!empty($_POST['delete_openid']) && (intval($_POST['delete_openid']) == 1)) ? 1: 0);
 309
 310         $allow_location   = ((!empty($_POST['allow_location']) && (intval($_POST['allow_location']) == 1)) ? 1: 0);
 311         $publish          = ((!empty($_POST['profile_in_directory']) && (intval($_POST['profile_in_directory']) == 1)) ? 1: 0);
 312         $net_publish      = ((!empty($_POST['profile_in_netdirectory']) && (intval($_POST['profile_in_netdirectory']) == 1)) ? 1: 0);
 313         $old_visibility   = ((!empty($_POST['visibility']) && (intval($_POST['visibility']) == 1)) ? 1 : 0);
 314         $account_type     = ((!empty($_POST['account-type']) && (intval($_POST['account-type']))) ? intval($_POST['account-type']) : 0);
 315         $page_flags       = ((!empty($_POST['page-flags']) && (intval($_POST['page-flags']))) ? intval($_POST['page-flags']) : 0);
 316         $blockwall        = ((!empty($_POST['blockwall']) && (intval($_POST['blockwall']) == 1)) ? 0: 1); // this setting is inverted!
 317         $blocktags        = ((!empty($_POST['blocktags']) && (intval($_POST['blocktags']) == 1)) ? 0: 1); // this setting is inverted!
 318         $unkmail          = ((!empty($_POST['unkmail']) && (intval($_POST['unkmail']) == 1)) ? 1: 0);
 319         $cntunkmail       = (!empty($_POST['cntunkmail']) ? intval($_POST['cntunkmail']) : 0);
 320         $hide_friends     = (($_POST['hide-friends'] == 1) ? 1: 0);
 321         $hidewall         = (($_POST['hidewall'] == 1) ? 1: 0);
 322         $unlisted         = (($_POST['unlisted'] == 1) ? 1: 0);
 323         $accessiblephotos = (($_POST['accessible-photos'] == 1) ? 1: 0);
 324
 325         $email_textonly   = (($_POST['email_textonly'] == 1) ? 1 : 0);
 326         $detailed_notif   = (($_POST['detailed_notif'] == 1) ? 1 : 0);
 327
 328         $notify_ignored   = (($_POST['notify_ignored'] == 1) ? 1 : 0);
 329
 330         $notify = 0;
 331
 332         if (!empty($_POST['notify1'])) {
 333                 $notify += intval($_POST['notify1']);
 334         }
 335         if (!empty($_POST['notify2'])) {
 336                 $notify += intval($_POST['notify2']);
 337         }
 338         if (!empty($_POST['notify3'])) {
 339                 $notify += intval($_POST['notify3']);
 340         }
 341         if (!empty($_POST['notify4'])) {
 342                 $notify += intval($_POST['notify4']);
 343         }
 344         if (!empty($_POST['notify5'])) {
 345                 $notify += intval($_POST['notify5']);
 346         }
 347         if (!empty($_POST['notify6'])) {
 348                 $notify += intval($_POST['notify6']);
 349         }
 350         if (!empty($_POST['notify7'])) {
 351                 $notify += intval($_POST['notify7']);
 352         }
 353         if (!empty($_POST['notify8'])) {
 354                 $notify += intval($_POST['notify8']);
 355         }
 356
 357         // Adjust the page flag if the account type doesn't fit to the page flag.
 358         if (($account_type == User::ACCOUNT_TYPE_PERSON) && !in_array($page_flags, [User::PAGE_FLAGS_NORMAL, User::PAGE_FLAGS_SOAPBOX, User::PAGE_FLAGS_FREELOVE])) {
 359                 $page_flags = User::PAGE_FLAGS_NORMAL;
 360         } elseif (($account_type == User::ACCOUNT_TYPE_ORGANISATION) && !in_array($page_flags, [User::PAGE_FLAGS_SOAPBOX])) {
 361                 $page_flags = User::PAGE_FLAGS_SOAPBOX;
 362         } elseif (($account_type == User::ACCOUNT_TYPE_NEWS) && !in_array($page_flags, [User::PAGE_FLAGS_SOAPBOX])) {
 363                 $page_flags = User::PAGE_FLAGS_SOAPBOX;
 364         } elseif (($account_type == User::ACCOUNT_TYPE_COMMUNITY) && !in_array($page_flags, [User::PAGE_FLAGS_COMMUNITY, User::PAGE_FLAGS_PRVGROUP])) {
 365                 $page_flags = User::PAGE_FLAGS_COMMUNITY;
 366         }
 367
 368         $err = '';
 369
 370         if ($username != $a->user['username']) {
 371                 if (strlen($username) > 40) {
 372                         $err .= DI::l10n()->t('Please use a shorter name.');
 373                 }
 374                 if (strlen($username) < 3) {
 375                         $err .= DI::l10n()->t('Name too short.');
 376                 }
 377         }
 378
 379         if ($email != $a->user['email']) {
 380                 //  check for the correct password
 381                 if (!User::authenticate(intval(local_user()), $_POST['mpassword'])) {
 382                         $err .= DI::l10n()->t('Wrong Password.');
 383                         $email = $a->user['email'];
 384                 }
 385                 //  check the email is valid
 386                 if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
 387                         $err .= DI::l10n()->t('Invalid email.');
 388                 }
 389                 //  ensure new email is not the admin mail
 390                 if (DI::config()->get('config', 'admin_email')) {
 391                         $adminlist = explode(",", str_replace(" ", "", strtolower(DI::config()->get('config', 'admin_email'))));
 392                         if (in_array(strtolower($email), $adminlist)) {
 393                                 $err .= DI::l10n()->t('Cannot change to that email.');
 394                                 $email = $a->user['email'];
 395                         }
 396                 }
 397         }
 398
 399         if (strlen($err)) {
 400                 notice($err);
 401                 return;
 402         }
 403
 404         if (($timezone != $a->user['timezone']) && strlen($timezone)) {
 405                 date_default_timezone_set($timezone);
 406         }
 407
 408         $aclFormatter = DI::aclFormatter();
 409
 410         $str_group_allow   = !empty($_POST['group_allow'])   ? $aclFormatter->toString($_POST['group_allow'])   : '';
 411         $str_contact_allow = !empty($_POST['contact_allow']) ? $aclFormatter->toString($_POST['contact_allow']) : '';
 412         $str_group_deny    = !empty($_POST['group_deny'])    ? $aclFormatter->toString($_POST['group_deny'])    : '';
 413         $str_contact_deny  = !empty($_POST['contact_deny'])  ? $aclFormatter->toString($_POST['contact_deny'])  : '';
 414
 415         DI::pConfig()->set(local_user(), 'expire', 'items', $expire_items);
 416         DI::pConfig()->set(local_user(), 'expire', 'notes', $expire_notes);
 417         DI::pConfig()->set(local_user(), 'expire', 'starred', $expire_starred);
 418         DI::pConfig()->set(local_user(), 'expire', 'photos', $expire_photos);
 419         DI::pConfig()->set(local_user(), 'expire', 'network_only', $expire_network_only);
 420
 421         DI::pConfig()->set(local_user(), 'system', 'email_textonly', $email_textonly);
 422         DI::pConfig()->set(local_user(), 'system', 'detailed_notif', $detailed_notif);
 423         DI::pConfig()->set(local_user(), 'system', 'notify_ignored', $notify_ignored);
 424         DI::pConfig()->set(local_user(), 'system', 'unlisted', $unlisted);
 425         DI::pConfig()->set(local_user(), 'system', 'accessible-photos', $accessiblephotos);
 426
 427         if ($page_flags == User::PAGE_FLAGS_PRVGROUP) {
 428                 $hidewall = 1;
 429                 if (!$str_contact_allow && !$str_group_allow && !$str_contact_deny && !$str_group_deny) {
 430                         if ($def_gid) {
 431                                 info(DI::l10n()->t('Private forum has no privacy permissions. Using default privacy group.'));
 432                                 $str_group_allow = '<' . $def_gid . '>';
 433                         } else {
 434                                 notice(DI::l10n()->t('Private forum has no privacy permissions and no default privacy group.'));
 435                         }
 436                 }
 437         }
 438
 439         $fields = ['username' => $username, 'email' => $email, 'timezone' => $timezone,
 440                 'allow_cid' => $str_contact_allow, 'allow_gid' => $str_group_allow, 'deny_cid' => $str_contact_deny, 'deny_gid' => $str_group_deny,
 441                 'notify-flags' => $notify, 'page-flags' => $page_flags, 'account-type' => $account_type, 'default-location' => $defloc,
 442                 'allow_location' => $allow_location, 'maxreq' => $maxreq, 'expire' => $expire, 'def_gid' => $def_gid, 'blockwall' => $blockwall,
 443                 'hidewall' => $hidewall, 'blocktags' => $blocktags, 'unkmail' => $unkmail, 'cntunkmail' => $cntunkmail, 'language' => $language];
 444
 445         if ($delete_openid) {
 446                 $fields['openid'] = '';
 447                 $fields['openidserver'] = '';
 448         }
 449
 450         if (!DBA::update('user', $fields, ['uid' => local_user()])) {
 451                 notice(DI::l10n()->t('Settings were not updated.'));
 452         }
 453
 454         // clear session language
 455         unset($_SESSION['language']);
 456
 457         q("UPDATE `profile`
 458                 SET `publish` = %d,
 459                 `name` = '%s',
 460                 `net-publish` = %d,
 461                 `hide-friends` = %d
 462                 WHERE `uid` = %d",
 463                 intval($publish),
 464                 DBA::escape($username),
 465                 intval($net_publish),
 466                 intval($hide_friends),
 467                 intval(local_user())
 468         );
 469
 470         Contact::updateSelfFromUserID(local_user());
 471
 472         if (($old_visibility != $net_publish) || ($page_flags != $old_page_flags)) {
 473                 // Update global directory in background
 474                 $url = $_SESSION['my_url'];
 475                 if ($url && strlen(DI::config()->get('system', 'directory'))) {
 476                         Worker::add(PRIORITY_LOW, "Directory", $url);
 477                 }
 478         }
 479
 480         Worker::add(PRIORITY_LOW, 'ProfileUpdate', local_user());
 481
 482         DI::baseUrl()->redirect('settings');
 483         return; // NOTREACHED
 484 }
 485
 486
 487 function settings_content(App $a)
 488 {
 489         $o = '';
 490         Nav::setSelected('settings');
 491
 492         if (!local_user()) {
 493                 //notice(DI::l10n()->t('Permission denied.'));
 494                 return Login::form();
 495         }
 496
 497         if (!empty($_SESSION['submanage'])) {
 498                 notice(DI::l10n()->t('Permission denied.'));
 499                 return;
 500         }
 501
 502         if (($a->argc > 1) && ($a->argv[1] === 'oauth')) {
 503                 if (($a->argc > 2) && ($a->argv[2] === 'add')) {
 504                         $tpl = Renderer::getMarkupTemplate('settings/oauth_edit.tpl');
 505                         $o .= Renderer::replaceMacros($tpl, [
 506                                 '$form_security_token' => BaseModule::getFormSecurityToken("settings_oauth"),
 507                                 '$title'        => DI::l10n()->t('Add application'),
 508                                 '$submit'       => DI::l10n()->t('Save Settings'),
 509                                 '$cancel'       => DI::l10n()->t('Cancel'),
 510                                 '$name'         => ['name', DI::l10n()->t('Name'), '', ''],
 511                                 '$key'          => ['key', DI::l10n()->t('Consumer Key'), '', ''],
 512                                 '$secret'       => ['secret', DI::l10n()->t('Consumer Secret'), '', ''],
 513                                 '$redirect'     => ['redirect', DI::l10n()->t('Redirect'), '', ''],
 514                                 '$icon'         => ['icon', DI::l10n()->t('Icon url'), '', ''],
 515                         ]);
 516                         return $o;
 517                 }
 518
 519                 if (($a->argc > 3) && ($a->argv[2] === 'edit')) {
 520                         $r = q("SELECT * FROM clients WHERE client_id='%s' AND uid=%d",
 521                                         DBA::escape($a->argv[3]),
 522                                         local_user());
 523
 524                         if (!DBA::isResult($r)) {
 525                                 notice(DI::l10n()->t("You can't edit this application."));
 526                                 return;
 527                         }
 528                         $app = $r[0];
 529
 530                         $tpl = Renderer::getMarkupTemplate('settings/oauth_edit.tpl');
 531                         $o .= Renderer::replaceMacros($tpl, [
 532                                 '$form_security_token' => BaseModule::getFormSecurityToken("settings_oauth"),
 533                                 '$title'        => DI::l10n()->t('Add application'),
 534                                 '$submit'       => DI::l10n()->t('Update'),
 535                                 '$cancel'       => DI::l10n()->t('Cancel'),
 536                                 '$name'         => ['name', DI::l10n()->t('Name'), $app['name'] , ''],
 537                                 '$key'          => ['key', DI::l10n()->t('Consumer Key'), $app['client_id'], ''],
 538                                 '$secret'       => ['secret', DI::l10n()->t('Consumer Secret'), $app['pw'], ''],
 539                                 '$redirect'     => ['redirect', DI::l10n()->t('Redirect'), $app['redirect_uri'], ''],
 540                                 '$icon'         => ['icon', DI::l10n()->t('Icon url'), $app['icon'], ''],
 541                         ]);
 542                         return $o;
 543                 }
 544
 545                 if (($a->argc > 3) && ($a->argv[2] === 'delete')) {
 546                         BaseModule::checkFormSecurityTokenRedirectOnError('/settings/oauth', 'settings_oauth', 't');
 547
 548                         DBA::delete('clients', ['client_id' => $a->argv[3], 'uid' => local_user()]);
 549                         DI::baseUrl()->redirect('settings/oauth/', true);
 550                         return;
 551                 }
 552
 553                 /// @TODO validate result with DBA::isResult()
 554                 $r = q("SELECT clients.*, tokens.id as oauth_token, (clients.uid=%d) AS my
 555                                 FROM clients
 556                                 LEFT JOIN tokens ON clients.client_id=tokens.client_id
 557                                 WHERE clients.uid IN (%d, 0)",
 558                                 local_user(),
 559                                 local_user());
 560
 561
 562                 $tpl = Renderer::getMarkupTemplate('settings/oauth.tpl');
 563                 $o .= Renderer::replaceMacros($tpl, [
 564                         '$form_security_token' => BaseModule::getFormSecurityToken("settings_oauth"),
 565                         '$baseurl'      => DI::baseUrl()->get(true),
 566                         '$title'        => DI::l10n()->t('Connected Apps'),
 567                         '$add'          => DI::l10n()->t('Add application'),
 568                         '$edit'         => DI::l10n()->t('Edit'),
 569                         '$delete'               => DI::l10n()->t('Delete'),
 570                         '$consumerkey' => DI::l10n()->t('Client key starts with'),
 571                         '$noname'       => DI::l10n()->t('No name'),
 572                         '$remove'       => DI::l10n()->t('Remove authorization'),
 573                         '$apps'         => $r,
 574                 ]);
 575                 return $o;
 576         }
 577
 578         if (($a->argc > 1) && ($a->argv[1] === 'addon')) {
 579                 $settings_addons = "";
 580
 581                 $r = q("SELECT * FROM `hook` WHERE `hook` = 'addon_settings' ");
 582                 if (!DBA::isResult($r)) {
 583                         $settings_addons = DI::l10n()->t('No Addon settings configured');
 584                 }
 585
 586                 Hook::callAll('addon_settings', $settings_addons);
 587
 588
 589                 $tpl = Renderer::getMarkupTemplate('settings/addons.tpl');
 590                 $o .= Renderer::replaceMacros($tpl, [
 591                         '$form_security_token' => BaseModule::getFormSecurityToken("settings_addon"),
 592                         '$title'        => DI::l10n()->t('Addon Settings'),
 593                         '$settings_addons' => $settings_addons
 594                 ]);
 595                 return $o;
 596         }
 597
 598         if (($a->argc > 1) && ($a->argv[1] === 'features')) {
 599
 600                 $arr = [];
 601                 $features = Feature::get();
 602                 foreach ($features as $fname => $fdata) {
 603                         $arr[$fname] = [];
 604                         $arr[$fname][0] = $fdata[0];
 605                         foreach (array_slice($fdata,1) as $f) {
 606                                 $arr[$fname][1][] = ['feature_' . $f[0], $f[1], Feature::isEnabled(local_user(), $f[0]), $f[2]];
 607                         }
 608                 }
 609
 610                 $tpl = Renderer::getMarkupTemplate('settings/features.tpl');
 611                 $o .= Renderer::replaceMacros($tpl, [
 612                         '$form_security_token' => BaseModule::getFormSecurityToken("settings_features"),
 613                         '$title'               => DI::l10n()->t('Additional Features'),
 614                         '$features'            => $arr,
 615                         '$submit'              => DI::l10n()->t('Save Settings'),
 616                 ]);
 617                 return $o;
 618         }
 619
 620         if (($a->argc > 1) && ($a->argv[1] === 'connectors')) {
 621                 $accept_only_sharer        = intval(DI::pConfig()->get(local_user(), 'system', 'accept_only_sharer'));
 622                 $disable_cw                = intval(DI::pConfig()->get(local_user(), 'system', 'disable_cw'));
 623                 $no_intelligent_shortening = intval(DI::pConfig()->get(local_user(), 'system', 'no_intelligent_shortening'));
 624                 $attach_link_title         = intval(DI::pConfig()->get(local_user(), 'system', 'attach_link_title'));
 625                 $ostatus_autofriend        = intval(DI::pConfig()->get(local_user(), 'system', 'ostatus_autofriend'));
 626                 $default_group             = DI::pConfig()->get(local_user(), 'ostatus', 'default_group');
 627                 $legacy_contact            = DI::pConfig()->get(local_user(), 'ostatus', 'legacy_contact');
 628
 629                 if (!empty($legacy_contact)) {
 630                         /// @todo Isn't it supposed to be a $a->internalRedirect() call?
 631                         DI::page()['htmlhead'] = '<meta http-equiv="refresh" content="0; URL=' . DI::baseUrl().'/ostatus_subscribe?url=' . urlencode($legacy_contact) . '">';
 632                 }
 633
 634                 $settings_connectors = '';
 635                 Hook::callAll('connector_settings', $settings_connectors);
 636
 637                 if (is_site_admin()) {
 638                         $diasp_enabled = DI::l10n()->t('Built-in support for %s connectivity is %s', DI::l10n()->t('Diaspora (Socialhome, Hubzilla)'), ((DI::config()->get('system', 'diaspora_enabled')) ? DI::l10n()->t('enabled') : DI::l10n()->t('disabled')));
 639                         $ostat_enabled = DI::l10n()->t('Built-in support for %s connectivity is %s', DI::l10n()->t('OStatus (GNU Social)'), ((DI::config()->get('system', 'ostatus_disabled')) ? DI::l10n()->t('disabled') : DI::l10n()->t('enabled')));
 640                 } else {
 641                         $diasp_enabled = "";
 642                         $ostat_enabled = "";
 643                 }
 644
 645                 $mail_disabled = ((function_exists('imap_open') && (!DI::config()->get('system', 'imap_disabled'))) ? 0 : 1);
 646                 if (DI::config()->get('system', 'dfrn_only')) {
 647                         $mail_disabled = 1;
 648                 }
 649                 if (!$mail_disabled) {
 650                         $r = q("SELECT * FROM `mailacct` WHERE `uid` = %d LIMIT 1",
 651                                 local_user()
 652                         );
 653                 } else {
 654                         $r = null;
 655                 }
 656
 657                 $mail_server       = ((DBA::isResult($r)) ? $r[0]['server'] : '');
 658                 $mail_port         = ((DBA::isResult($r) && intval($r[0]['port'])) ? intval($r[0]['port']) : '');
 659                 $mail_ssl          = ((DBA::isResult($r)) ? $r[0]['ssltype'] : '');
 660                 $mail_user         = ((DBA::isResult($r)) ? $r[0]['user'] : '');
 661                 $mail_replyto      = ((DBA::isResult($r)) ? $r[0]['reply_to'] : '');
 662                 $mail_pubmail      = ((DBA::isResult($r)) ? $r[0]['pubmail'] : 0);
 663                 $mail_action       = ((DBA::isResult($r)) ? $r[0]['action'] : 0);
 664                 $mail_movetofolder = ((DBA::isResult($r)) ? $r[0]['movetofolder'] : '');
 665                 $mail_chk          = ((DBA::isResult($r)) ? $r[0]['last_check'] : DBA::NULL_DATETIME);
 666
 667
 668                 $tpl = Renderer::getMarkupTemplate('settings/connectors.tpl');
 669
 670                 $mail_disabled_message = ($mail_disabled ? DI::l10n()->t('Email access is disabled on this site.') : '');
 671
 672                 $ssl_options = ['TLS' => 'TLS', 'SSL' => 'SSL'];
 673
 674                 if (DI::config()->get('system', 'insecure_imap')) {
 675                         $ssl_options['notls'] = DI::l10n()->t('None');
 676                 }
 677
 678                 $o .= Renderer::replaceMacros($tpl, [
 679                         '$form_security_token' => BaseModule::getFormSecurityToken("settings_connectors"),
 680
 681                         '$title'        => DI::l10n()->t('Social Networks'),
 682
 683                         '$diasp_enabled' => $diasp_enabled,
 684                         '$ostat_enabled' => $ostat_enabled,
 685
 686                         '$general_settings' => DI::l10n()->t('General Social Media Settings'),
 687                         '$accept_only_sharer' => ['accept_only_sharer', DI::l10n()->t('Accept only top level posts by contacts you follow'), $accept_only_sharer, DI::l10n()->t('The system does an auto completion of threads when a comment arrives. This has got the side effect that you can receive posts that had been started by a non-follower but had been commented by someone you follow. This setting deactivates this behaviour. When activated, you strictly only will receive posts from people you really do follow.')],
 688                         '$disable_cw' => ['disable_cw', DI::l10n()->t('Disable Content Warning'), $disable_cw, DI::l10n()->t('Users on networks like Mastodon or Pleroma are able to set a content warning field which collapse their post by default. This disables the automatic collapsing and sets the content warning as the post title. Doesn\'t affect any other content filtering you eventually set up.')],
 689                         '$no_intelligent_shortening' => ['no_intelligent_shortening', DI::l10n()->t('Disable intelligent shortening'), $no_intelligent_shortening, DI::l10n()->t('Normally the system tries to find the best link to add to shortened posts. If this option is enabled then every shortened post will always point to the original friendica post.')],
 690                         '$attach_link_title' => ['attach_link_title', DI::l10n()->t('Attach the link title'), $attach_link_title, DI::l10n()->t('When activated, the title of the attached link will be added as a title on posts to Diaspora. This is mostly helpful with "remote-self" contacts that share feed content.')],
 691                         '$ostatus_autofriend' => ['snautofollow', DI::l10n()->t("Automatically follow any GNU Social \x28OStatus\x29 followers/mentioners"), $ostatus_autofriend, DI::l10n()->t('If you receive a message from an unknown OStatus user, this option decides what to do. If it is checked, a new contact will be created for every unknown user.')],
 692                         '$default_group' => Group::displayGroupSelection(local_user(), $default_group, DI::l10n()->t("Default group for OStatus contacts")),
 693                         '$legacy_contact' => ['legacy_contact', DI::l10n()->t('Your legacy GNU Social account'), $legacy_contact, DI::l10n()->t("If you enter your old GNU Social/Statusnet account name here \x28in the format user@domain.tld\x29, your contacts will be added automatically. The field will be emptied when done.")],
 694
 695                         '$repair_ostatus_url' => DI::baseUrl() . '/repair_ostatus',
 696                         '$repair_ostatus_text' => DI::l10n()->t('Repair OStatus subscriptions'),
 697
 698                         '$settings_connectors' => $settings_connectors,
 699
 700                         '$h_imap' => DI::l10n()->t('Email/Mailbox Setup'),
 701                         '$imap_desc' => DI::l10n()->t("If you wish to communicate with email contacts using this service \x28optional\x29, please specify how to connect to your mailbox."),
 702                         '$imap_lastcheck' => ['imap_lastcheck', DI::l10n()->t('Last successful email check:'), $mail_chk, ''],
 703                         '$mail_disabled' => $mail_disabled_message,
 704                         '$mail_server'  => ['mail_server',      DI::l10n()->t('IMAP server name:'), $mail_server, ''],
 705                         '$mail_port'    => ['mail_port',        DI::l10n()->t('IMAP port:'), $mail_port, ''],
 706                         '$mail_ssl'     => ['mail_ssl',         DI::l10n()->t('Security:'), strtoupper($mail_ssl), '', $ssl_options],
 707                         '$mail_user'    => ['mail_user',        DI::l10n()->t('Email login name:'), $mail_user, ''],
 708                         '$mail_pass'    => ['mail_pass',        DI::l10n()->t('Email password:'), '', ''],
 709                         '$mail_replyto' => ['mail_replyto',     DI::l10n()->t('Reply-to address:'), $mail_replyto, 'Optional'],
 710                         '$mail_pubmail' => ['mail_pubmail',     DI::l10n()->t('Send public posts to all email contacts:'), $mail_pubmail, ''],
 711                         '$mail_action'  => ['mail_action',      DI::l10n()->t('Action after import:'), $mail_action, '', [0 => DI::l10n()->t('None'), 1 => DI::l10n()->t('Delete'), 2 => DI::l10n()->t('Mark as seen'), 3 => DI::l10n()->t('Move to folder')]],
 712                         '$mail_movetofolder' => ['mail_movetofolder', DI::l10n()->t('Move to folder:'), $mail_movetofolder, ''],
 713                         '$submit' => DI::l10n()->t('Save Settings'),
 714                 ]);
 715
 716                 Hook::callAll('display_settings', $o);
 717                 return $o;
 718         }
 719
 720         /*
 721          * ACCOUNT SETTINGS
 722          */
 723
 724         $profile = DBA::selectFirst('profile', [], ['uid' => local_user()]);
 725         if (!DBA::isResult($profile)) {
 726                 notice(DI::l10n()->t('Unable to find your profile. Please contact your admin.'));
 727                 return;
 728         }
 729
 730         $username   = $a->user['username'];
 731         $email      = $a->user['email'];
 732         $nickname   = $a->user['nickname'];
 733         $timezone   = $a->user['timezone'];
 734         $language   = $a->user['language'];
 735         $notify     = $a->user['notify-flags'];
 736         $defloc     = $a->user['default-location'];
 737         $openid     = $a->user['openid'];
 738         $maxreq     = $a->user['maxreq'];
 739         $expire     = ((intval($a->user['expire'])) ? $a->user['expire'] : '');
 740         $unkmail    = $a->user['unkmail'];
 741         $cntunkmail = $a->user['cntunkmail'];
 742
 743         $expire_items = DI::pConfig()->get(local_user(), 'expire', 'items', true);
 744         $expire_notes = DI::pConfig()->get(local_user(), 'expire', 'notes', true);
 745         $expire_starred = DI::pConfig()->get(local_user(), 'expire', 'starred', true);
 746         $expire_photos = DI::pConfig()->get(local_user(), 'expire', 'photos', false);
 747         $expire_network_only = DI::pConfig()->get(local_user(), 'expire', 'network_only', false);
 748
 749         if (!strlen($a->user['timezone'])) {
 750                 $timezone = date_default_timezone_get();
 751         }
 752
 753         // Set the account type to "Community" when the page is a community page but the account type doesn't fit
 754         // This is only happening on the first visit after the update
 755         if (in_array($a->user['page-flags'], [User::PAGE_FLAGS_COMMUNITY, User::PAGE_FLAGS_PRVGROUP]) &&
 756                 ($a->user['account-type'] != User::ACCOUNT_TYPE_COMMUNITY))
 757                 $a->user['account-type'] = User::ACCOUNT_TYPE_COMMUNITY;
 758
 759         $pageset_tpl = Renderer::getMarkupTemplate('settings/pagetypes.tpl');
 760
 761         $pagetype = Renderer::replaceMacros($pageset_tpl, [
 762                 '$account_types'        => DI::l10n()->t("Account Types"),
 763                 '$user'                 => DI::l10n()->t("Personal Page Subtypes"),
 764                 '$community'            => DI::l10n()->t("Community Forum Subtypes"),
 765                 '$account_type'         => $a->user['account-type'],
 766                 '$type_person'          => User::ACCOUNT_TYPE_PERSON,
 767                 '$type_organisation'    => User::ACCOUNT_TYPE_ORGANISATION,
 768                 '$type_news'            => User::ACCOUNT_TYPE_NEWS,
 769                 '$type_community'       => User::ACCOUNT_TYPE_COMMUNITY,
 770
 771                 '$account_person'       => ['account-type', DI::l10n()->t('Personal Page'), User::ACCOUNT_TYPE_PERSON,
 772                                                                         DI::l10n()->t('Account for a personal profile.'),
 773                                                                         ($a->user['account-type'] == User::ACCOUNT_TYPE_PERSON)],
 774
 775                 '$account_organisation' => ['account-type', DI::l10n()->t('Organisation Page'), User::ACCOUNT_TYPE_ORGANISATION,
 776                                                                         DI::l10n()->t('Account for an organisation that automatically approves contact requests as "Followers".'),
 777                                                                         ($a->user['account-type'] == User::ACCOUNT_TYPE_ORGANISATION)],
 778
 779                 '$account_news'         => ['account-type', DI::l10n()->t('News Page'), User::ACCOUNT_TYPE_NEWS,
 780                                                                         DI::l10n()->t('Account for a news reflector that automatically approves contact requests as "Followers".'),
 781                                                                         ($a->user['account-type'] == User::ACCOUNT_TYPE_NEWS)],
 782
 783                 '$account_community'    => ['account-type', DI::l10n()->t('Community Forum'), User::ACCOUNT_TYPE_COMMUNITY,
 784                                                                         DI::l10n()->t('Account for community discussions.'),
 785                                                                         ($a->user['account-type'] == User::ACCOUNT_TYPE_COMMUNITY)],
 786
 787                 '$page_normal'          => ['page-flags', DI::l10n()->t('Normal Account Page'), User::PAGE_FLAGS_NORMAL,
 788                                                                         DI::l10n()->t('Account for a regular personal profile that requires manual approval of "Friends" and "Followers".'),
 789                                                                         ($a->user['page-flags'] == User::PAGE_FLAGS_NORMAL)],
 790
 791                 '$page_soapbox'         => ['page-flags', DI::l10n()->t('Soapbox Page'), User::PAGE_FLAGS_SOAPBOX,
 792                                                                         DI::l10n()->t('Account for a public profile that automatically approves contact requests as "Followers".'),
 793                                                                         ($a->user['page-flags'] == User::PAGE_FLAGS_SOAPBOX)],
 794
 795                 '$page_community'       => ['page-flags', DI::l10n()->t('Public Forum'), User::PAGE_FLAGS_COMMUNITY,
 796                                                                         DI::l10n()->t('Automatically approves all contact requests.'),
 797                                                                         ($a->user['page-flags'] == User::PAGE_FLAGS_COMMUNITY)],
 798
 799                 '$page_freelove'        => ['page-flags', DI::l10n()->t('Automatic Friend Page'), User::PAGE_FLAGS_FREELOVE,
 800                                                                         DI::l10n()->t('Account for a popular profile that automatically approves contact requests as "Friends".'),
 801                                                                         ($a->user['page-flags'] == User::PAGE_FLAGS_FREELOVE)],
 802
 803                 '$page_prvgroup'        => ['page-flags', DI::l10n()->t('Private Forum [Experimental]'), User::PAGE_FLAGS_PRVGROUP,
 804                                                                         DI::l10n()->t('Requires manual approval of contact requests.'),
 805                                                                         ($a->user['page-flags'] == User::PAGE_FLAGS_PRVGROUP)],
 806
 807
 808         ]);
 809
 810         $noid = DI::config()->get('system', 'no_openid');
 811
 812         if ($noid) {
 813                 $openid_field = false;
 814         } else {
 815                 $openid_field = ['openid_url', DI::l10n()->t('OpenID:'), $openid, DI::l10n()->t("\x28Optional\x29 Allow this OpenID to login to this account."), "", "readonly", "url"];
 816         }
 817
 818         $opt_tpl = Renderer::getMarkupTemplate("field_checkbox.tpl");
 819         if (DI::config()->get('system', 'publish_all')) {
 820                 $profile_in_dir = '<input type="hidden" name="profile_in_directory" value="1" />';
 821         } else {
 822                 $profile_in_dir = Renderer::replaceMacros($opt_tpl, [
 823                         '$field' => ['profile_in_directory', DI::l10n()->t('Publish your profile in your local site directory?'), $profile['publish'], DI::l10n()->t('Your profile will be published in this node\'s <a href="%s">local directory</a>. Your profile details may be publicly visible depending on the system settings.', DI::baseUrl().'/directory')]
 824                 ]);
 825         }
 826
 827         $net_pub_desc = '';
 828         if (strlen(DI::config()->get('system', 'directory'))) {
 829                 $net_pub_desc = ' ' . DI::l10n()->t('Your profile will also be published in the global friendica directories (e.g. <a href="%s">%s</a>).', DI::config()->get('system', 'directory'), DI::config()->get('system', 'directory'));
 830         }
 831
 832         $tpl_addr = Renderer::getMarkupTemplate('settings/nick_set.tpl');
 833
 834         $prof_addr = Renderer::replaceMacros($tpl_addr,[
 835                 '$desc' => DI::l10n()->t("Your Identity Address is <strong>'%s'</strong> or '%s'.", $nickname . '@' . DI::baseUrl()->getHostname() . DI::baseUrl()->getUrlPath(), DI::baseUrl() . '/profile/' . $nickname),
 836                 '$basepath' => DI::baseUrl()->getHostname()
 837         ]);
 838
 839         $stpl = Renderer::getMarkupTemplate('settings/settings.tpl');
 840
 841         /* Installed langs */
 842         $lang_choices = DI::l10n()->getAvailableLanguages();
 843
 844         /// @TODO Fix indending (or so)
 845         $o .= Renderer::replaceMacros($stpl, [
 846                 '$ptitle'       => DI::l10n()->t('Account Settings'),
 847
 848                 '$submit'       => DI::l10n()->t('Save Settings'),
 849                 '$baseurl' => DI::baseUrl()->get(true),
 850                 '$uid' => local_user(),
 851                 '$form_security_token' => BaseModule::getFormSecurityToken("settings"),
 852                 '$nickname_block' => $prof_addr,
 853
 854                 '$h_pass'       => DI::l10n()->t('Password Settings'),
 855                 '$password1'=> ['password', DI::l10n()->t('New Password:'), '', DI::l10n()->t('Allowed characters are a-z, A-Z, 0-9 and special characters except white spaces, accentuated letters and colon (:).')],
 856                 '$password2'=> ['confirm', DI::l10n()->t('Confirm:'), '', DI::l10n()->t('Leave password fields blank unless changing')],
 857                 '$password3'=> ['opassword', DI::l10n()->t('Current Password:'), '', DI::l10n()->t('Your current password to confirm the changes')],
 858                 '$password4'=> ['mpassword', DI::l10n()->t('Password:'), '', DI::l10n()->t('Your current password to confirm the changes of the email address')],
 859                 '$oid_enable' => (!DI::config()->get('system', 'no_openid')),
 860                 '$openid'       => $openid_field,
 861                 '$delete_openid' => ['delete_openid', DI::l10n()->t('Delete OpenID URL'), false, ''],
 862
 863                 '$h_basic'      => DI::l10n()->t('Basic Settings'),
 864                 '$username' => ['username',  DI::l10n()->t('Full Name:'), $username, ''],
 865                 '$email'        => ['email', DI::l10n()->t('Email Address:'), $email, '', '', '', 'email'],
 866                 '$timezone' => ['timezone_select' , DI::l10n()->t('Your Timezone:'), Temporal::getTimezoneSelect($timezone), ''],
 867                 '$language' => ['language', DI::l10n()->t('Your Language:'), $language, DI::l10n()->t('Set the language we use to show you friendica interface and to send you emails'), $lang_choices],
 868                 '$defloc'       => ['defloc', DI::l10n()->t('Default Post Location:'), $defloc, ''],
 869                 '$allowloc' => ['allow_location', DI::l10n()->t('Use Browser Location:'), ($a->user['allow_location'] == 1), ''],
 870
 871                 '$h_prv'                  => DI::l10n()->t('Security and Privacy Settings'),
 872                 '$visibility'         => $profile['net-publish'],
 873                 '$maxreq'                 => ['maxreq', DI::l10n()->t('Maximum Friend Requests/Day:'), $maxreq , DI::l10n()->t("\x28to prevent spam abuse\x29")],
 874                 '$profile_in_dir'     => $profile_in_dir,
 875                 '$profile_in_net_dir' => ['profile_in_netdirectory', DI::l10n()->t('Allow your profile to be searchable globally?'), $profile['net-publish'], DI::l10n()->t("Activate this setting if you want others to easily find and follow you. Your profile will be searchable on remote systems. This setting also determines whether Friendica will inform search engines that your profile should be indexed or not.") . $net_pub_desc],
 876                 '$hide_friends'       => ['hide-friends', DI::l10n()->t('Hide your contact/friend list from viewers of your profile?'), $profile['hide-friends'], DI::l10n()->t('A list of your contacts is displayed on your profile page. Activate this option to disable the display of your contact list.')],
 877                 '$hide_wall'          => ['hidewall', DI::l10n()->t('Hide your profile details from anonymous viewers?'), $a->user['hidewall'], DI::l10n()->t('Anonymous visitors will only see your profile picture, your display name and the nickname you are using on your profile page. Your public posts and replies will still be accessible by other means.')],
 878                 '$unlisted'           => ['unlisted', DI::l10n()->t('Make public posts unlisted'), DI::pConfig()->get(local_user(), 'system', 'unlisted'), DI::l10n()->t('Your public posts will not appear on the community pages or in search results, nor be sent to relay servers. However they can still appear on public feeds on remote servers.')],
 879                 '$accessiblephotos'   => ['accessible-photos', DI::l10n()->t('Make all posted pictures accessible'), DI::pConfig()->get(local_user(), 'system', 'accessible-photos'), DI::l10n()->t("This option makes every posted picture accessible via the direct link. This is a workaround for the problem that most other networks can't handle permissions on pictures. Non public pictures still won't be visible for the public on your photo albums though.")],
 880                 '$blockwall'          => ['blockwall', DI::l10n()->t('Allow friends to post to your profile page?'), (intval($a->user['blockwall']) ? '0' : '1'), DI::l10n()->t('Your contacts may write posts on your profile wall. These posts will be distributed to your contacts')], // array('blockwall', DI::l10n()->t('Allow friends to post to your profile page:'), !$blockwall, ''),
 881                 '$blocktags'          => ['blocktags', DI::l10n()->t('Allow friends to tag your posts?'), (intval($a->user['blocktags']) ? '0' : '1'), DI::l10n()->t('Your contacts can add additional tags to your posts.')], // array('blocktags', DI::l10n()->t('Allow friends to tag your posts:'), !$blocktags, ''),
 882                 '$unkmail'            => ['unkmail', DI::l10n()->t('Permit unknown people to send you private mail?'), $unkmail, DI::l10n()->t('Friendica network users may send you private messages even if they are not in your contact list.')],
 883                 '$cntunkmail'         => ['cntunkmail', DI::l10n()->t('Maximum private messages per day from unknown people:'), $cntunkmail , DI::l10n()->t("\x28to prevent spam abuse\x29")],
 884                 '$group_select'       => Group::displayGroupSelection(local_user(), $a->user['def_gid']),
 885                 '$permissions'        => DI::l10n()->t('Default Post Permissions'),
 886                 '$aclselect'          => ACL::getFullSelectorHTML(DI::page(), $a->user),
 887
 888                 '$expire' => [
 889                         'label'        => DI::l10n()->t('Expiration settings'),
 890                         'days'         => ['expire',  DI::l10n()->t("Automatically expire posts after this many days:"), $expire, DI::l10n()->t('If empty, posts will not expire. Expired posts will be deleted')],
 891                         'items'        => ['expire_items', DI::l10n()->t('Expire posts'), $expire_items, DI::l10n()->t('When activated, posts and comments will be expired.')],
 892                         'notes'        => ['expire_notes', DI::l10n()->t('Expire personal notes'), $expire_notes, DI::l10n()->t('When activated, the personal notes on your profile page will be expired.')],
 893                         'starred'      => ['expire_starred', DI::l10n()->t('Expire starred posts'), $expire_starred, DI::l10n()->t('Starring posts keeps them from being expired. That behaviour is overwritten by this setting.')],
 894                         'photos'       => ['expire_photos', DI::l10n()->t('Expire photos'), $expire_photos, DI::l10n()->t('When activated, photos will be expired.')],
 895                         'network_only' => ['expire_network_only', DI::l10n()->t('Only expire posts by others'), $expire_network_only, DI::l10n()->t('When activated, your own posts never expire. Then the settings above are only valid for posts you received.')],
 896                 ],
 897
 898                 '$h_not'        => DI::l10n()->t('Notification Settings'),
 899                 '$lbl_not'      => DI::l10n()->t('Send a notification email when:'),
 900                 '$notify1'      => ['notify1', DI::l10n()->t('You receive an introduction'), ($notify & Notification\Type::INTRO), Notification\Type::INTRO, ''],
 901                 '$notify2'      => ['notify2', DI::l10n()->t('Your introductions are confirmed'), ($notify & Notification\Type::CONFIRM), Notification\Type::CONFIRM, ''],
 902                 '$notify3'      => ['notify3', DI::l10n()->t('Someone writes on your profile wall'), ($notify & Notification\Type::WALL), Notification\Type::WALL, ''],
 903                 '$notify4'      => ['notify4', DI::l10n()->t('Someone writes a followup comment'), ($notify & Notification\Type::COMMENT), Notification\Type::COMMENT, ''],
 904                 '$notify5'      => ['notify5', DI::l10n()->t('You receive a private message'), ($notify & Notification\Type::MAIL), Notification\Type::MAIL, ''],
 905                 '$notify6'  => ['notify6', DI::l10n()->t('You receive a friend suggestion'), ($notify & Notification\Type::SUGGEST), Notification\Type::SUGGEST, ''],
 906                 '$notify7'  => ['notify7', DI::l10n()->t('You are tagged in a post'), ($notify & Notification\Type::TAG_SELF), Notification\Type::TAG_SELF, ''],
 907                 '$notify8'  => ['notify8', DI::l10n()->t('You are poked/prodded/etc. in a post'), ($notify & Notification\Type::POKE), Notification\Type::POKE, ''],
 908
 909                 '$desktop_notifications' => ['desktop_notifications', DI::l10n()->t('Activate desktop notifications') , false, DI::l10n()->t('Show desktop popup on new notifications')],
 910
 911                 '$email_textonly' => ['email_textonly', DI::l10n()->t('Text-only notification emails'),
 912                                                                         DI::pConfig()->get(local_user(), 'system', 'email_textonly'),
 913                                                                         DI::l10n()->t('Send text only notification emails, without the html part')],
 914
 915                 '$detailed_notif' => ['detailed_notif', DI::l10n()->t('Show detailled notifications'),
 916                                                                         DI::pConfig()->get(local_user(), 'system', 'detailed_notif'),
 917                                                                         DI::l10n()->t('Per default, notifications are condensed to a single notification per item. When enabled every notification is displayed.')],
 918
 919                 '$notify_ignored' => ['notify_ignored', DI::l10n()->t('Show notifications of ignored contacts') ,
 920                                                                         DI::pConfig()->get(local_user(), 'system', 'notify_ignored', true),
 921                                                                         DI::l10n()->t("You don't see posts from ignored contacts. But you still see their comments. This setting controls if you want to still receive regular notifications that are caused by ignored contacts or not.")],
 922
 923                                                                         '$h_advn' => DI::l10n()->t('Advanced Account/Page Type Settings'),
 924                 '$h_descadvn' => DI::l10n()->t('Change the behaviour of this account for special situations'),
 925                 '$pagetype' => $pagetype,
 926
 927                 '$importcontact' => DI::l10n()->t('Import Contacts'),
 928                 '$importcontact_text' => DI::l10n()->t('Upload a CSV file that contains the handle of your followed accounts in the first column you exported from the old account.'),
 929                 '$importcontact_button' => DI::l10n()->t('Upload File'),
 930                 '$importcontact_maxsize' => DI::config()->get('system', 'max_csv_file_size', 30720),
 931                 '$relocate' => DI::l10n()->t('Relocate'),
 932                 '$relocate_text' => DI::l10n()->t("If you have moved this profile from another server, and some of your contacts don't receive your updates, try pushing this button."),
 933                 '$relocate_button' => DI::l10n()->t("Resend relocate message to contacts"),
 934
 935         ]);
 936
 937         Hook::callAll('settings_form', $o);
 938
 939         $o .= '</form>' . "\r\n";
 940
 941         return $o;
 942
 943 }