<?php

/*

Plugin Name: plugin_specialadmin_title

Plugin URI: http://enanocms.org/

Description: plugin_specialadmin_desc

Author: Dan Fuhry

Version: 1.1.1

Author URI: http://enanocms.org/

*/

/*

 * Enano - an open-source CMS capable of wiki functions, Drupal-like sidebar blocks, and everything in between

 * Version 1.1.2 (Caoineag alpha 2)

 * Copyright (C) 2006-2007 Dan Fuhry

 *

 * This program is Free Software; you can redistribute and/or modify it under the terms of the GNU General Public License

 * as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

 *

 * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied

 * warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for details.

 */

global $db, $session, $paths, $template, $plugins; // Common objects

$plugins->attachHook('session_started', '

  global $paths;

    $paths->add_page(Array(

      \'name\'=>\'specialpage_administration\',

      \'urlname\'=>\'Administration\',

      \'namespace\'=>\'Special\',

      \'special\'=>0,\'visible\'=>1,\'comments_on\'=>0,\'protected\'=>1,\'delvotes\'=>0,\'delvote_ips\'=>\'\',

      ));

    $paths->add_page(Array(

      \'name\'=>\'specialpage_manage_sidebar\',

      \'urlname\'=>\'EditSidebar\',

      \'namespace\'=>\'Special\',

      \'special\'=>0,\'visible\'=>1,\'comments_on\'=>0,\'protected\'=>1,\'delvotes\'=>0,\'delvote_ips\'=>\'\',

      ));

  ');

// Admin pages that were too enormous to be in this file were split off into the plugins/admin/ directory in 1.0.1

require(ENANO_ROOT . '/plugins/admin/PageManager.php');

require(ENANO_ROOT . '/plugins/admin/PageEditor.php');

require(ENANO_ROOT . '/plugins/admin/PageGroups.php');

require(ENANO_ROOT . '/plugins/admin/GroupManager.php');

require(ENANO_ROOT . '/plugins/admin/SecurityLog.php');

require(ENANO_ROOT . '/plugins/admin/UserManager.php');

require(ENANO_ROOT . '/plugins/admin/LangManager.php');

require(ENANO_ROOT . '/plugins/admin/ThemeManager.php');

// For convenience and nothing more.

function acp_start_form()

{

  global $db, $session, $paths, $template, $plugins; // Common objects

  echo '<form action="'.makeUrl($paths->nslist['Special'].'Administration', ( isset($_GET['sqldbg']) ? 'sqldbg&' : '' ) . ( isset($_GET['nocompress']) ? 'nocompress&' : '' ) . 'module='.$paths->cpage['module']).'" method="post" enctype="multipart/form-data">';

}

// function names are IMPORTANT!!! The name pattern is: page_<namespace ID>_<page URLname, without namespace>

function page_Admin_Home() {

  global $db, $session, $paths, $template, $plugins; // Common objects

  global $lang;

  if ( $session->auth_level < USER_LEVEL_ADMIN || $session->user_level < USER_LEVEL_ADMIN )

  {

    $login_link = makeUrlNS('Special', 'Login/' . $paths->nslist['Special'] . 'Administration', 'level=' . USER_LEVEL_ADMIN, true);

    echo '<h3>' . $lang->get('adm_err_not_auth_title') . '</h3>';

    echo '<p>' . $lang->get('adm_err_not_auth_body', array( 'login_link' => $login_link )) . '</p>';

    return;

  }

  if ( $paths->getParam(0) == 'updates.xml' )

  {

    require_once(ENANO_ROOT . '/includes/http.php');

    $req = new Request_HTTP('germantown.enanocms.org', '/meta/updates.xml');

    $response = $req->get_response_body();

    header('Content-type: application/xml');

    if ( $req->response_code != HTTP_OK )

    {

      // Error in response

      echo '<enano><latest><error><![CDATA[

Did not properly receive response from server. Response code: ' . $req->response_code . ' ' . $req->response_string . '

]]></error></latest></enano>';

    }

    else

    {

      // Retrieve first update

      $first_update = preg_match('/<release tag="([^"]+)" version="([^"]+)" (codename="([^"]+)" )?relnotes="([^"]+)" ?\/>/', $response, $match);

      if ( !$first_update )

      {

        echo '<enano><latest><error><![CDATA[

Received invalid XML response.

]]></error></latest></enano>';

      }

      if ( version_compare(enano_version(true), $match[2], '<') )

      {

        $response = str_replace_once('</latest>', "  <haveupdates />\n  </latest>", $response);

      }

      echo $response;

    }

    return;

  }

  // Basic information

  echo '<h2>' . $lang->get('acphome_heading_main') . '</h2>';

  echo '<p>' . $lang->get('acphome_welcome_line1') . '</p>';

  echo '<p>' . $lang->get('acphome_welcome_line2') . '</p>';

  // Demo mode

  if ( defined('ENANO_DEMO_MODE') )

  {

    echo '<h3>' . $lang->get('acphome_msg_demo_title') . '</h3>

          <p>' . $lang->get('acphome_msg_demo_body', array('reset_url' => makeUrlNS('Special', 'DemoReset', false, true))) . '</p>';

  }

  // Check for the installer scripts

  if( ( file_exists(ENANO_ROOT.'/install.php') || file_exists(ENANO_ROOT.'/schema.sql') ) && !defined('ENANO_DEMO_MODE') )

  {

    echo '<div class="error-box">

            ' . $lang->get('acphome_msg_install_files') . '

          </div>';

  }

  echo '<h3>' . $lang->get('acphome_heading_updates') . '</h3>';

  echo '<p>' . $lang->get('acphome_msg_updates_info', array('updates_url' => 'http://germantown.enanocms.org/meta/updates.xml')) . '</p>';

  echo '<div id="update_check_container"><input type="button" onclick="ajaxUpdateCheck(this.parentNode.id);" value="' . $lang->get('acphome_btn_check_updates') . '" /></div>';

  // Inactive users

  $q = $db->sql_query('SELECT time_id FROM '.table_prefix.'logs WHERE log_type=\'admin\' AND action=\'activ_req\';');

  if ( $q )

  {

    if ( $db->numrows() > 0 )

    {

      $n = $db->numrows();

      $um_flags = 'href="#" onclick="ajaxPage(\''.$paths->nslist['Admin'].'UserManager\'); return false;"';

      if ( $n == 1 )

        $s = $lang->get('acphome_msg_inactive_users_one', array('um_flags' => $um_flags));

      else

        $s = $lang->get('acphome_msg_inactive_users_plural', array('um_flags' => $um_flags));

      echo '<div class="warning-box">

              ' . $s . '

            </div>';

    }

  }

  $db->free_result();

  // Stats

  if(getConfig('log_hits') == '1')

  {

    $stats = stats_top_pages(10);

    //die('<pre>'.print_r($stats,true).'</pre>');

    $c = 0;

    $cls = 'row2';

    echo '<h3>' . $lang->get('acphome_heading_top_pages') . '</h3>

          <div class="tblholder">

            <table style="width: 100%;" border="0" cellspacing="1" cellpadding="4">

              <tr>

                <th>' . $lang->get('acphome_th_toppages_page') . '</th>

                <th>' . $lang->get('acphome_th_toppages_hits') . '</th>

              </tr>';

    foreach($stats as $data)

    {

      echo   '<tr>';

      $cls = ( $cls == 'row1' ) ? 'row2' : 'row1';

      echo     '<td class="'.$cls.'">

                  <a href="'.makeUrl($data['page_urlname']).'">'.$data['page_title'].'</a></td><td style="text-align: center;" class="'.$cls.'">'.$data['num_hits']

             . '</td>';

      echo   '</tr>';

    }

    echo '  </table>

          </div>';

  }

  // Security log

  echo '<h3>' . $lang->get('acphome_heading_seclog') . '</h3>';

  echo '<p>' . $lang->get('acphome_msg_seclog_info') . '</p>';

  $seclog = get_security_log(5);

  echo $seclog;

  echo '<p><a href="#" onclick="ajaxPage(\''.$paths->nslist['Admin'].'SecurityLog\'); return false;">' . $lang->get('acphome_btn_seclog_full') . '</a></p>';

}

function page_Admin_GeneralConfig() {

  global $db, $session, $paths, $template, $plugins; // Common objects

  global $lang;

  if ( $session->auth_level < USER_LEVEL_ADMIN || $session->user_level < USER_LEVEL_ADMIN )

  {

    $login_link = makeUrlNS('Special', 'Login/' . $paths->nslist['Special'] . 'Administration', 'level=' . USER_LEVEL_ADMIN, true);

    echo '<h3>' . $lang->get('adm_err_not_auth_title') . '</h3>';

    echo '<p>' . $lang->get('adm_err_not_auth_body', array( 'login_link' => $login_link )) . '</p>';

    return;

  }

  if(isset($_POST['submit']) && !defined('ENANO_DEMO_MODE') )

  {

    // Global site options

    setConfig('site_name', $_POST['site_name']);

    setConfig('site_desc', $_POST['site_desc']);

    setConfig('main_page', str_replace(' ', '_', $_POST['main_page']));

    setConfig('copyright_notice', $_POST['copyright']);

    setConfig('contact_email', $_POST['contact_email']);

    // Wiki mode

    if(isset($_POST['wikimode']))                setConfig('wiki_mode', '1');

    else                                         setConfig('wiki_mode', '0');

    if(isset($_POST['wiki_mode_require_login'])) setConfig('wiki_mode_require_login', '1');

    else                                         setConfig('wiki_mode_require_login', '0');

    if(isset($_POST['editmsg']))                 setConfig('wiki_edit_notice', '1');

    else                                         setConfig('wiki_edit_notice', '0');

    setConfig('wiki_edit_notice_text', $_POST['editmsg_text']);

    if(isset($_POST['guest_edit_require_captcha'])) setConfig('guest_edit_require_captcha', '1');

    else                                         setConfig('guest_edit_require_captcha', '0');

    // Stats

    if(isset($_POST['log_hits']))                setConfig('log_hits', '1');

    else                                         setConfig('log_hits', '0');

    // Disablement

    if(isset($_POST['site_disabled'])) {         setConfig('site_disabled', '1'); setConfig('site_disabled_notice', $_POST['site_disabled_notice']); }

    else                                         setConfig('site_disabled', '0');

    // Account activation

    setConfig('account_activation', $_POST['account_activation']);

    // W3C compliance buttons

    if(isset($_POST['w3c-vh32']))     setConfig("w3c_vh32", "1");

    else                              setConfig("w3c_vh32", "0");

    if(isset($_POST['w3c-vh40']))     setConfig("w3c_vh40", "1");

    else                              setConfig("w3c_vh40", "0");

    if(isset($_POST['w3c-vh401']))    setConfig("w3c_vh401", "1");

    else                              setConfig("w3c_vh401", "0");

    if(isset($_POST['w3c-vxhtml10'])) setConfig("w3c_vxhtml10", "1");

    else                              setConfig("w3c_vxhtml10", "0");

    if(isset($_POST['w3c-vxhtml11'])) setConfig("w3c_vxhtml11", "1");

    else                              setConfig("w3c_vxhtml11", "0");

    if(isset($_POST['w3c-vcss']))     setConfig("w3c_vcss", "1");

    else                              setConfig("w3c_vcss", "0");

    // SourceForge.net logo

    if(isset($_POST['showsf'])) setConfig('sflogo_enabled', '1');

    else                        setConfig('sflogo_enabled', '0');

    setConfig('sflogo_groupid', $_POST['sfgroup']);

    setConfig('sflogo_type', $_POST['sflogo']);

    // Comment options

    if(isset($_POST['comment-approval'])) setConfig('approve_comments', '1');

    else                                  setConfig('approve_comments', '0');

    if(isset($_POST['enable-comments']))  setConfig('enable_comments', '1');

    else                                  setConfig('enable_comments', '0');

    setConfig('comments_need_login', $_POST['comments_need_login']);

    // Powered by link

    if ( isset($_POST['enano_powered_link']) ) setConfig('powered_btn', '1');

    else                                       setConfig('powered_btn', '0');    

    if(isset($_POST['dbdbutton']))        setConfig('dbd_button', '1');

    else                                  setConfig('dbd_button', '0');

    if($_POST['emailmethod'] == 'phpmail') setConfig('smtp_enabled', '0');

    else                                   setConfig('smtp_enabled', '1');

    setConfig('smtp_server', $_POST['smtp_host']);

    setConfig('smtp_user', $_POST['smtp_user']);

    if($_POST['smtp_pass'] != 'XXXXXXXXXXXX') setConfig('smtp_password', $_POST['smtp_pass']);

    // Password strength

    if ( isset($_POST['pw_strength_enable']) ) setConfig('pw_strength_enable', '1');

    else                                       setConfig('pw_strength_enable', '0');

    $strength = intval($_POST['pw_strength_minimum']);

    if ( $strength >= -10 && $strength <= 30 )

    {

      $strength = strval($strength);

      setConfig('pw_strength_minimum', $strength);

    }

    setConfig('register_tou', RenderMan::preprocess_text($_POST['register_tou'], true, false));

    // Account lockout policy

    if ( preg_match('/^[0-9]+$/', $_POST['lockout_threshold']) )

      setConfig('lockout_threshold', $_POST['lockout_threshold']);

    if ( preg_match('/^[0-9]+$/', $_POST['lockout_duration']) )

      setConfig('lockout_duration', $_POST['lockout_duration']);

    if ( in_array($_POST['lockout_policy'], array('disable', 'captcha', 'lockout')) )

      setConfig('lockout_policy', $_POST['lockout_policy']);

    // Avatar settings

    setConfig('avatar_enable', ( isset($_POST['avatar_enable']) ? '1' : '0' ));

    // for these next three values, set the config value if it's a valid integer; this is

    // done by using strval(intval($foo)) === $foo, which flattens $foo to an integer and

    // then converts it back to a string. This effectively verifies that var $foo is both

    // set and that it's a valid string representing an integer.

    setConfig('avatar_max_size', ( strval(intval($_POST['avatar_max_size'])) === $_POST['avatar_max_size'] ? $_POST['avatar_max_size'] : '10240' ));

    setConfig('avatar_max_width', ( strval(intval($_POST['avatar_max_width'])) === $_POST['avatar_max_width'] ? $_POST['avatar_max_width'] : '96' ));

    setConfig('avatar_max_height', ( strval(intval($_POST['avatar_max_height'])) === $_POST['avatar_max_height'] ? $_POST['avatar_max_height'] : '96' ));

    setConfig('avatar_enable_anim', ( isset($_POST['avatar_enable_anim']) ? '1' : '0' ));

    setConfig('avatar_upload_file', ( isset($_POST['avatar_upload_file']) ? '1' : '0' ));

    setConfig('avatar_upload_http', ( isset($_POST['avatar_upload_http']) ? '1' : '0' ));

    if ( is_dir(ENANO_ROOT . '/' . $_POST['avatar_directory']) )

    {

      if ( preg_match('/^([A-z0-9_-]+)(\/([A-z0-9_-]+))*$/', $_POST['avatar_directory']) )

      {

        setConfig('avatar_directory', $_POST['avatar_directory']);

      }

      else

      {

        echo '<div class="error-box">' . $lang->get('acpgc_err_avatar_dir_invalid') . '</div>';

      }

    }

    else

    {

      echo '<div class="error-box">' . $lang->get('acpgc_err_avatar_dir_invalid') . '</div>';

    }

    echo '<div class="info-box">' . $lang->get('acpgc_msg_save_success') . '</div><br />';

  }

  else if ( isset($_POST['submit']) && defined('ENANO_DEMO_MODE') )

  {

    echo '<div class="error-box">Saving the general site configuration is blocked in the administration demo.</div>';

  }

  echo('<form name="main" action="'.htmlspecialchars(makeUrl($paths->nslist['Special'].'Administration', 'module='.$paths->cpage['module'])).'" method="post" onsubmit="if(!submitAuthorized) return false;">');

  ?>

  <div class="tblholder">

    <table border="0" width="100%" cellspacing="1" cellpadding="4">

    <!-- Global options -->

      <tr><th colspan="2"><?php echo $lang->get('acpgc_heading_main'); ?></th></tr>

      <tr><th colspan="2" class="subhead"><?php echo $lang->get('acpgc_heading_submain'); ?></th></tr>

      <tr><td class="row1" style="width: 50%;"><?php echo $lang->get('acpgc_field_site_name'); ?></td>  <td class="row1" style="width: 50%;"><input type="text" name="site_name" size="30" value="<?php echo htmlspecialchars(getConfig('site_name')); ?>" /></td></tr>

      <tr><td class="row2"><?php echo $lang->get('acpgc_field_site_desc'); ?></td>               <td class="row2"><input type="text" name="site_desc" size="30" value="<?php echo htmlspecialchars(getConfig('site_desc')); ?>" /></td></tr>

      <tr><td class="row1"><?php echo $lang->get('acpgc_field_main_page'); ?></td>                      <td class="row1"><?php echo $template->pagename_field('main_page', htmlspecialchars(str_replace('_', ' ', getConfig('main_page')))); ?></td></tr>

      <tr><td class="row2"><?php echo $lang->get('acpgc_field_copyright'); ?></td><td class="row2"><input type="text" name="copyright" size="30" value="<?php echo htmlspecialchars(getConfig('copyright_notice')); ?>" /></td></tr>

      <tr><td class="row1" colspan="2"><?php echo $lang->get('acpgc_field_copyright_hint'); ?></td></tr>

      <tr><td class="row2"><?php echo $lang->get('acpgc_field_contactemail'); ?><br /><small><?php echo $lang->get('acpgc_field_contactemail_hint'); ?></small></td><td class="row2"><input name="contact_email" type="text" size="40" value="<?php echo htmlspecialchars(getConfig('contact_email')); ?>" /></td></tr>

    <!-- Wiki mode -->

      <tr><th class="subhead" colspan="2"><?php echo $lang->get('acpgc_heading_wikimode'); ?></th></tr>

      <tr>

        <td class="row3" rowspan="2">

          <?php echo $lang->get('acpgc_field_wikimode_intro'); ?><br /><br />

          <?php echo $lang->get('acpgc_field_wikimode_info_sanitize'); ?><br /><br />

          <?php echo $lang->get('acpgc_field_wikimode_info_history'); ?>

        </td>

        <td class="row1">

          <input type="checkbox" name="wikimode" id="wikimode" <?php if(getConfig('wiki_mode')=='1') echo('CHECKED '); ?> /><label for="wikimode"><?php echo $lang->get('acpgc_field_wikimode'); ?></label>

        </td>

      </tr>

      <tr><td class="row2"><label><input type="checkbox" name="wiki_mode_require_login"<?php if(getConfig('wiki_mode_require_login')=='1') echo('CHECKED '); ?>/> Only for logged in users</label></td></tr>

      <tr>

        <td class="row3" rowspan="2">

          <b><?php echo $lang->get('acpgc_field_editnotice_title'); ?></b><br />

          <?php echo $lang->get('acpgc_field_editnotice_info'); ?>

        </td>

        <td class="row1">

          <input onclick="if(this.checked) document.getElementById('editmsg_text').style.display='block'; else document.getElementById('editmsg_text').style.display='none';" type="checkbox" name="editmsg" id="editmsg" <?php if(getConfig('wiki_edit_notice')=='1') echo('CHECKED '); ?>/>

          <label for="editmsg"><?php echo $lang->get('acpgc_field_editnotice'); ?></label>

        </td>

      </tr>

      <tr>

        <td class="row2">

          <textarea <?php if(getConfig('wiki_edit_notice')!='1') echo('style="display:none" '); ?>rows="5" cols="30" name="editmsg_text" id="editmsg_text"><?php echo getConfig('wiki_edit_notice_text'); ?></textarea>

        </td>

      </tr>

      <tr>

        <td class="row1">

          <b><?php echo $lang->get('acpgc_field_edit_require_captcha_title'); ?></b><br />

          <?php echo $lang->get('acpgc_field_edit_require_captcha_hint'); ?>

        </td>

        <td class="row1">

          <label>

            <input type="checkbox" name="guest_edit_require_captcha" <?php if ( getConfig('guest_edit_require_captcha') == '1' ) echo 'checked="checked" '; ?>/>

            <?php echo $lang->get('acpgc_field_edit_require_captcha'); ?>

          </label>

        </td>

      </tr>

    <!-- Site statistics -->

      <tr><th class="subhead" colspan="2"><?php echo $lang->get('acpgc_heading_stats'); ?></th></tr>

      <tr>

        <td class="row1">

          <?php echo $lang->get('acpgc_stats_intro'); ?><br /><br />

          <?php echo $lang->get('acpgc_stats_hint_privacy'); ?>

        </td>

        <td class="row1">

          <label>

            <input type="checkbox" name="log_hits" <?php if(getConfig('log_hits') == '1') echo 'checked="checked" '; ?>/>

            <?php echo $lang->get('acpgc_field_stats_enable'); ?>

          </label><br />

          <small><?php echo $lang->get('acpgc_field_stats_hint'); ?></small>

        </td>

      </tr>

    <!-- Comment options -->

      <tr>

        <th class="subhead" colspan="2">

          <?php echo $lang->get('acpgc_heading_comments'); ?>

        </th>

      </tr>

      <tr>

        <td class="row1">

          <label for="enable-comments">

            <b><?php echo $lang->get('acpgc_field_enable_comments'); ?></b>

          </label>

        </td>

        <td class="row1">

          <input name="enable-comments"  id="enable-comments"  type="checkbox" <?php if(getConfig('enable_comments')=='1')  echo('CHECKED '); ?>/>

        </td>

      </tr>

      <tr>

        <td class="row2">

          <label for="comment-approval">

            <?php echo $lang->get('acpgc_field_approve_comments'); ?>

          </label>

        </td>

        <td class="row2">

          <input name="comment-approval" id="comment-approval" type="checkbox" <?php if(getConfig('approve_comments')=='1') echo('CHECKED '); ?>/>

        </td>

      </tr>

      <tr>

        <td class="row1">

          <?php echo $lang->get('acpgc_field_comment_allow_guests'); ?>

        </td>

        <td class="row1">

          <label>

            <input name="comments_need_login" type="radio" value="0" <?php if(getConfig('comments_need_login')=='0') echo 'checked="checked" '; ?>/>

            <?php echo $lang->get('acpgc_field_comment_allow_guests_yes'); ?>

          </label>

          <label>

            <input name="comments_need_login" type="radio" value="1" <?php if(getConfig('comments_need_login')=='1') echo 'checked="checked" '; ?>/>

            <?php echo $lang->get('acpgc_field_comment_allow_guests_captcha'); ?>

          </label>

          <label>

            <input name="comments_need_login" type="radio" value="2" <?php if(getConfig('comments_need_login')=='2') echo 'checked="checked" '; ?>/>

            <?php echo $lang->get('acpgc_field_comment_allow_guests_no'); ?>

          </label>

        </td>

      </tr>

    <!-- Default permissions -->

    <!--

    READ: Do not try to enable this, backend support for it has been disabled. To edit default

          permissions, select The Entire Website in any permissions editor window.

      <tr><th colspan="2">Default permissions for pages</th></tr>

      <tr>

        <td class="row1">You can edit the default set of permissions used when no other permissions are available. Permissions set here are used when no other permissions are available. As with other ACL rules, you can assign these defaults to every user or one specific user or group.</td>

        <td class="row1"><a href="#" onclick="ajaxOpenACLManager('__DefaultPermissions', 'Special'); return false;">Manage default permissions</a></td>

      </tr>

      -->

    <!-- Site disablement -->

      <tr><th class="subhead" colspan="2"><?php echo $lang->get('acpgc_heading_disablesite'); ?></th></tr>

      <tr>

        <td class="row3" rowspan="2">

          <?php echo $lang->get('acpgc_field_disablesite_hint'); ?>

        </td>

        <td class="row1">

          <label>

            <input onclick="if(this.checked) document.getElementById('site_disabled_notice').style.display='block'; else document.getElementById('site_disabled_notice').style.display='none';" type="checkbox" name="site_disabled" <?php if(getConfig('site_disabled') == '1') echo 'checked="checked" '; ?>/>

            <?php echo $lang->get('acpgc_field_disablesite'); ?>

          </label>

        </td>

      </tr>

      <tr>

        <td class="row2">

          <div id="site_disabled_notice"<?php if(getConfig('site_disabled')!='1') echo(' style="display:none"'); ?>>

            <?php echo $lang->get('acpgc_field_disablesite_message'); ?><br />

            <textarea name="site_disabled_notice" rows="7" cols="30"><?php echo getConfig('site_disabled_notice'); ?></textarea>

          </div>

        </td>

      </tr>

    </table>

    </div>

    <div class="tblholder">