<?php

/*

Plugin Name: plugin_specialadmin_title

Plugin URI: http://enanocms.org/

Description: plugin_specialadmin_desc

Author: Dan Fuhry

Version: 1.1.1

Author URI: http://enanocms.org/

*/

/*

 * Enano - an open-source CMS capable of wiki functions, Drupal-like sidebar blocks, and everything in between

 * Version 1.1.2 (Caoineag alpha 2)

 * Copyright (C) 2006-2007 Dan Fuhry

 *

 * This program is Free Software; you can redistribute and/or modify it under the terms of the GNU General Public License

 * as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

 *

 * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied

 * warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for details.

 */

global $db, $session, $paths, $template, $plugins; // Common objects

$plugins->attachHook('session_started', '

  global $paths;

    $paths->add_page(Array(

      \'name\'=>\'specialpage_administration\',

      \'urlname\'=>\'Administration\',

      \'namespace\'=>\'Special\',

      \'special\'=>0,\'visible\'=>1,\'comments_on\'=>0,\'protected\'=>1,\'delvotes\'=>0,\'delvote_ips\'=>\'\',

      ));

    $paths->add_page(Array(

      \'name\'=>\'specialpage_manage_sidebar\',

      \'urlname\'=>\'EditSidebar\',

      \'namespace\'=>\'Special\',

      \'special\'=>0,\'visible\'=>1,\'comments_on\'=>0,\'protected\'=>1,\'delvotes\'=>0,\'delvote_ips\'=>\'\',

      ));

  ');

// Admin pages that were too enormous to be in this file were split off into the plugins/admin/ directory in 1.0.1

require(ENANO_ROOT . '/plugins/admin/PageManager.php');

require(ENANO_ROOT . '/plugins/admin/PageEditor.php');

require(ENANO_ROOT . '/plugins/admin/PageGroups.php');

require(ENANO_ROOT . '/plugins/admin/GroupManager.php');

require(ENANO_ROOT . '/plugins/admin/SecurityLog.php');

require(ENANO_ROOT . '/plugins/admin/UserManager.php');

require(ENANO_ROOT . '/plugins/admin/LangManager.php');

require(ENANO_ROOT . '/plugins/admin/ThemeManager.php');

// For convenience and nothing more.

function acp_start_form()

{

  global $db, $session, $paths, $template, $plugins; // Common objects

  echo '<form action="'.makeUrl($paths->nslist['Special'].'Administration', ( isset($_GET['sqldbg']) ? 'sqldbg&' : '' ) . ( isset($_GET['nocompress']) ? 'nocompress&' : '' ) . 'module='.$paths->cpage['module']).'" method="post" enctype="multipart/form-data">';

}

// function names are IMPORTANT!!! The name pattern is: page_<namespace ID>_<page URLname, without namespace>

function page_Admin_Home() {

  global $db, $session, $paths, $template, $plugins; // Common objects

  global $lang;

  if ( $session->auth_level < USER_LEVEL_ADMIN || $session->user_level < USER_LEVEL_ADMIN )

  {

    $login_link = makeUrlNS('Special', 'Login/' . $paths->nslist['Special'] . 'Administration', 'level=' . USER_LEVEL_ADMIN, true);

    echo '<h3>' . $lang->get('adm_err_not_auth_title') . '</h3>';

    echo '<p>' . $lang->get('adm_err_not_auth_body', array( 'login_link' => $login_link )) . '</p>';

    return;

  }

  if ( $paths->getParam(0) == 'updates.xml' )

  {

    require_once(ENANO_ROOT . '/includes/http.php');

    $req = new Request_HTTP('germantown.enanocms.org', '/meta/updates.xml');

    $response = $req->get_response_body();

    header('Content-type: application/xml');

    if ( $req->response_code != HTTP_OK )

    {

      // Error in response

      echo '<enano><latest><error><![CDATA[

Did not properly receive response from server. Response code: ' . $req->response_code . ' ' . $req->response_string . '

]]></error></latest></enano>';

    }

    else

    {

      // Retrieve first update

      $first_update = preg_match('/<release tag="([^"]+)" version="([^"]+)" (codename="([^"]+)" )?relnotes="([^"]+)" ?\/>/', $response, $match);

      if ( !$first_update )

      {

        echo '<enano><latest><error><![CDATA[

Received invalid XML response.

]]></error></latest></enano>';

      }

      if ( version_compare(enano_version(true), $match[2], '<') )

      {

        $response = str_replace_once('</latest>', "  <haveupdates />\n  </latest>", $response);

      }

      echo $response;

    }

    return;

  }

  // Basic information

  echo '<h2>' . $lang->get('acphome_heading_main') . '</h2>';

  echo '<p>' . $lang->get('acphome_welcome_line1') . '</p>';

  echo '<p>' . $lang->get('acphome_welcome_line2') . '</p>';

  // Demo mode

  if ( defined('ENANO_DEMO_MODE') )

  {

    echo '<h3>' . $lang->get('acphome_msg_demo_title') . '</h3>

          <p>' . $lang->get('acphome_msg_demo_body', array('reset_url' => makeUrlNS('Special', 'DemoReset', false, true))) . '</p>';

  }

  // Check for the installer scripts

  if( ( file_exists(ENANO_ROOT.'/install.php') || file_exists(ENANO_ROOT.'/schema.sql') ) && !defined('ENANO_DEMO_MODE') )

  {

    echo '<div class="error-box">

            ' . $lang->get('acphome_msg_install_files') . '

          </div>';

  }

  echo '<h3>' . $lang->get('acphome_heading_updates') . '</h3>';

  echo '<p>' . $lang->get('acphome_msg_updates_info', array('updates_url' => 'http://germantown.enanocms.org/meta/updates.xml')) . '</p>';

  echo '<div id="update_check_container"><input type="button" onclick="ajaxUpdateCheck(this.parentNode.id);" value="' . $lang->get('acphome_btn_check_updates') . '" /></div>';

  // Inactive users

  $q = $db->sql_query('SELECT time_id FROM '.table_prefix.'logs WHERE log_type=\'admin\' AND action=\'activ_req\';');

  if ( $q )

  {

    if ( $db->numrows() > 0 )

    {

      $n = $db->numrows();

      $um_flags = 'href="#" onclick="ajaxPage(\''.$paths->nslist['Admin'].'UserManager\'); return false;"';

      if ( $n == 1 )

        $s = $lang->get('acphome_msg_inactive_users_one', array('um_flags' => $um_flags));

      else

        $s = $lang->get('acphome_msg_inactive_users_plural', array('um_flags' => $um_flags));

      echo '<div class="warning-box">

              ' . $s . '

            </div>';

    }

  }

  $db->free_result();

  // Stats

  if(getConfig('log_hits') == '1')

  {

    $stats = stats_top_pages(10);

    //die('<pre>'.print_r($stats,true).'</pre>');

    $c = 0;

    $cls = 'row2';

    echo '<h3>' . $lang->get('acphome_heading_top_pages') . '</h3>

          <div class="tblholder">

            <table style="width: 100%;" border="0" cellspacing="1" cellpadding="4">

              <tr>

                <th>' . $lang->get('acphome_th_toppages_page') . '</th>

                <th>' . $lang->get('acphome_th_toppages_hits') . '</th>

              </tr>';

    foreach($stats as $data)

    {

      echo   '<tr>';

      $cls = ( $cls == 'row1' ) ? 'row2' : 'row1';

      echo     '<td class="'.$cls.'">

                  <a href="'.makeUrl($data['page_urlname']).'">'.$data['page_title'].'</a></td><td style="text-align: center;" class="'.$cls.'">'.$data['num_hits']

             . '</td>';

      echo   '</tr>';

    }

    echo '  </table>

          </div>';

  }

  // Security log

  echo '<h3>' . $lang->get('acphome_heading_seclog') . '</h3>';

  echo '<p>' . $lang->get('acphome_msg_seclog_info') . '</p>';

  $seclog = get_security_log(5);

  echo $seclog;

  echo '<p><a href="#" onclick="ajaxPage(\''.$paths->nslist['Admin'].'SecurityLog\'); return false;">' . $lang->get('acphome_btn_seclog_full') . '</a></p>';

}

function page_Admin_GeneralConfig() {

  global $db, $session, $paths, $template, $plugins; // Common objects

  global $lang;

  if ( $session->auth_level < USER_LEVEL_ADMIN || $session->user_level < USER_LEVEL_ADMIN )

  {

    $login_link = makeUrlNS('Special', 'Login/' . $paths->nslist['Special'] . 'Administration', 'level=' . USER_LEVEL_ADMIN, true);

    echo '<h3>' . $lang->get('adm_err_not_auth_title') . '</h3>';

    echo '<p>' . $lang->get('adm_err_not_auth_body', array( 'login_link' => $login_link )) . '</p>';

    return;

  }

  if(isset($_POST['submit']) && !defined('ENANO_DEMO_MODE') )

  {

    // Global site options

    setConfig('site_name', $_POST['site_name']);

    setConfig('site_desc', $_POST['site_desc']);

    setConfig('main_page', str_replace(' ', '_', $_POST['main_page']));

    setConfig('copyright_notice', $_POST['copyright']);

    setConfig('contact_email', $_POST['contact_email']);

    // Wiki mode

    if(isset($_POST['wikimode']))                setConfig('wiki_mode', '1');

    else                                         setConfig('wiki_mode', '0');

    if(isset($_POST['wiki_mode_require_login'])) setConfig('wiki_mode_require_login', '1');

    else                                         setConfig('wiki_mode_require_login', '0');

    if(isset($_POST['editmsg']))                 setConfig('wiki_edit_notice', '1');

    else                                         setConfig('wiki_edit_notice', '0');

    setConfig('wiki_edit_notice_text', $_POST['editmsg_text']);

    if(isset($_POST['guest_edit_require_captcha'])) setConfig('guest_edit_require_captcha', '1');

    else                                         setConfig('guest_edit_require_captcha', '0');

    // Stats

    if(isset($_POST['log_hits']))                setConfig('log_hits', '1');

    else                                         setConfig('log_hits', '0');

    // Disablement

    if(isset($_POST['site_disabled'])) {         setConfig('site_disabled', '1'); setConfig('site_disabled_notice', $_POST['site_disabled_notice']); }

    else                                         setConfig('site_disabled', '0');

    // Account activation

    setConfig('account_activation', $_POST['account_activation']);

    // W3C compliance buttons

    if(isset($_POST['w3c-vh32']))     setConfig("w3c_vh32", "1");

    else                              setConfig("w3c_vh32", "0");

    if(isset($_POST['w3c-vh40']))     setConfig("w3c_vh40", "1");

    else                              setConfig("w3c_vh40", "0");

    if(isset($_POST['w3c-vh401']))    setConfig("w3c_vh401", "1");

    else                              setConfig("w3c_vh401", "0");

    if(isset($_POST['w3c-vxhtml10'])) setConfig("w3c_vxhtml10", "1");

    else                              setConfig("w3c_vxhtml10", "0");

    if(isset($_POST['w3c-vxhtml11'])) setConfig("w3c_vxhtml11", "1");

    else                              setConfig("w3c_vxhtml11", "0");

    if(isset($_POST['w3c-vcss']))     setConfig("w3c_vcss", "1");

    else                              setConfig("w3c_vcss", "0");

    // SourceForge.net logo

    if(isset($_POST['showsf'])) setConfig('sflogo_enabled', '1');

    else                        setConfig('sflogo_enabled', '0');

    setConfig('sflogo_groupid', $_POST['sfgroup']);

    setConfig('sflogo_type', $_POST['sflogo']);

    // Comment options

    if(isset($_POST['comment-approval'])) setConfig('approve_comments', '1');

    else                                  setConfig('approve_comments', '0');

    if(isset($_POST['enable-comments']))  setConfig('enable_comments', '1');

    else                                  setConfig('enable_comments', '0');

    setConfig('comments_need_login', $_POST['comments_need_login']);

    // Powered by link

    if ( isset($_POST['enano_powered_link']) ) setConfig('powered_btn', '1');

    else                                       setConfig('powered_btn', '0');    

    if(isset($_POST['dbdbutton']))        setConfig('dbd_button', '1');

    else                                  setConfig('dbd_button', '0');

    if($_POST['emailmethod'] == 'phpmail') setConfig('smtp_enabled', '0');

    else                                   setConfig('smtp_enabled', '1');

    setConfig('smtp_server', $_POST['smtp_host']);

    setConfig('smtp_user', $_POST['smtp_user']);

    if($_POST['smtp_pass'] != 'XXXXXXXXXXXX') setConfig('smtp_password', $_POST['smtp_pass']);

    // Password strength

    if ( isset($_POST['pw_strength_enable']) ) setConfig('pw_strength_enable', '1');

    else                                       setConfig('pw_strength_enable', '0');

    $strength = intval($_POST['pw_strength_minimum']);

    if ( $strength >= -10 && $strength <= 30 )

    {

      $strength = strval($strength);

      setConfig('pw_strength_minimum', $strength);

    }

    // Default theme

    $default_theme = ( isset($template->named_theme_list[@$_POST['default_theme']]) ) ? $_POST['default_theme'] : $template->theme_list[0]['theme_id'];

    setConfig('theme_default', $default_theme);

    setConfig('register_tou', RenderMan::preprocess_text($_POST['register_tou'], true, false));

    // Account lockout policy

    if ( preg_match('/^[0-9]+$/', $_POST['lockout_threshold']) )

      setConfig('lockout_threshold', $_POST['lockout_threshold']);

    if ( preg_match('/^[0-9]+$/', $_POST['lockout_duration']) )

      setConfig('lockout_duration', $_POST['lockout_duration']);

    if ( in_array($_POST['lockout_policy'], array('disable', 'captcha', 'lockout')) )

      setConfig('lockout_policy', $_POST['lockout_policy']);

    // Avatar settings

    setConfig('avatar_enable', ( isset($_POST['avatar_enable']) ? '1' : '0' ));

    // for these next three values, set the config value if it's a valid integer; this is

    // done by using strval(intval($foo)) === $foo, which flattens $foo to an integer and

    // then converts it back to a string. This effectively verifies that var $foo is both

    // set and that it's a valid string representing an integer.

    setConfig('avatar_max_size', ( strval(intval($_POST['avatar_max_size'])) === $_POST['avatar_max_size'] ? $_POST['avatar_max_size'] : '10240' ));

    setConfig('avatar_max_width', ( strval(intval($_POST['avatar_max_width'])) === $_POST['avatar_max_width'] ? $_POST['avatar_max_width'] : '96' ));

    setConfig('avatar_max_height', ( strval(intval($_POST['avatar_max_height'])) === $_POST['avatar_max_height'] ? $_POST['avatar_max_height'] : '96' ));

    setConfig('avatar_enable_anim', ( isset($_POST['avatar_enable_anim']) ? '1' : '0' ));

    setConfig('avatar_upload_file', ( isset($_POST['avatar_upload_file']) ? '1' : '0' ));

    setConfig('avatar_upload_http', ( isset($_POST['avatar_upload_http']) ? '1' : '0' ));

    if ( is_dir(ENANO_ROOT . '/' . $_POST['avatar_directory']) )

    {

      if ( preg_match('/^([A-z0-9_-]+)(\/([A-z0-9_-]+))*$/', $_POST['avatar_directory']) )

      {

        setConfig('avatar_directory', $_POST['avatar_directory']);

      }

      else

      {

        echo '<div class="error-box">' . $lang->get('acpgc_err_avatar_dir_invalid') . '</div>';

      }

    }

    else

    {

      echo '<div class="error-box">' . $lang->get('acpgc_err_avatar_dir_invalid') . '</div>';

    }

    echo '<div class="info-box">' . $lang->get('acpgc_msg_save_success') . '</div><br />';

  }

  else if ( isset($_POST['submit']) && defined('ENANO_DEMO_MODE') )

  {

    echo '<div class="error-box">Saving the general site configuration is blocked in the administration demo.</div>';

  }

  echo('<form name="main" action="'.htmlspecialchars(makeUrl($paths->nslist['Special'].'Administration', 'module='.$paths->cpage['module'])).'" method="post" onsubmit="if(!submitAuthorized) return false;">');

  ?>

  <div class="tblholder">

    <table border="0" width="100%" cellspacing="1" cellpadding="4">

    <!-- Global options -->

      <tr><th colspan="2"><?php echo $lang->get('acpgc_heading_main'); ?></th></tr>

      <tr><th colspan="2" class="subhead"><?php echo $lang->get('acpgc_heading_submain'); ?></th></tr>

      <tr><td class="row1" style="width: 50%;"><?php echo $lang->get('acpgc_field_site_name'); ?></td>  <td class="row1" style="width: 50%;"><input type="text" name="site_name" size="30" value="<?php echo htmlspecialchars(getConfig('site_name')); ?>" /></td></tr>

      <tr><td class="row2"><?php echo $lang->get('acpgc_field_site_desc'); ?></td>               <td class="row2"><input type="text" name="site_desc" size="30" value="<?php echo htmlspecialchars(getConfig('site_desc')); ?>" /></td></tr>

      <tr><td class="row1"><?php echo $lang->get('acpgc_field_main_page'); ?></td>                      <td class="row1"><?php echo $template->pagename_field('main_page', htmlspecialchars(str_replace('_', ' ', getConfig('main_page')))); ?></td></tr>

      <tr><td class="row2"><?php echo $lang->get('acpgc_field_copyright'); ?></td><td class="row2"><input type="text" name="copyright" size="30" value="<?php echo htmlspecialchars(getConfig('copyright_notice')); ?>" /></td></tr>

      <tr><td class="row1" colspan="2"><?php echo $lang->get('acpgc_field_copyright_hint'); ?></td></tr>

      <tr><td class="row2"><?php echo $lang->get('acpgc_field_contactemail'); ?><br /><small><?php echo $lang->get('acpgc_field_contactemail_hint'); ?></small></td><td class="row2"><input name="contact_email" type="text" size="40" value="<?php echo htmlspecialchars(getConfig('contact_email')); ?>" /></td></tr>

    <!-- Wiki mode -->

      <tr><th class="subhead" colspan="2"><?php echo $lang->get('acpgc_heading_wikimode'); ?></th></tr>

      <tr>

        <td class="row3" rowspan="2">

          <?php echo $lang->get('acpgc_field_wikimode_intro'); ?><br /><br />

          <?php echo $lang->get('acpgc_field_wikimode_info_sanitize'); ?><br /><br />

          <?php echo $lang->get('acpgc_field_wikimode_info_history'); ?>

        </td>

        <td class="row1">

          <input type="checkbox" name="wikimode" id="wikimode" <?php if(getConfig('wiki_mode')=='1') echo('CHECKED '); ?> /><label for="wikimode"><?php echo $lang->get('acpgc_field_wikimode'); ?></label>

        </td>

      </tr>

      <tr><td class="row2"><label><input type="checkbox" name="wiki_mode_require_login"<?php if(getConfig('wiki_mode_require_login')=='1') echo('CHECKED '); ?>/> Only for logged in users</label></td></tr>

      <tr>

        <td class="row3" rowspan="2">

          <b><?php echo $lang->get('acpgc_field_editnotice_title'); ?></b><br />

          <?php echo $lang->get('acpgc_field_editnotice_info'); ?>

        </td>

        <td class="row1">

          <input onclick="if(this.checked) document.getElementById('editmsg_text').style.display='block'; else document.getElementById('editmsg_text').style.display='none';" type="checkbox" name="editmsg" id="editmsg" <?php if(getConfig('wiki_edit_notice')=='1') echo('CHECKED '); ?>/>

          <label for="editmsg"><?php echo $lang->get('acpgc_field_editnotice'); ?></label>

        </td>

      </tr>

      <tr>

        <td class="row2">

          <textarea <?php if(getConfig('wiki_edit_notice')!='1') echo('style="display:none" '); ?>rows="5" cols="30" name="editmsg_text" id="editmsg_text"><?php echo getConfig('wiki_edit_notice_text'); ?></textarea>

        </td>

      </tr>

      <tr>

        <td class="row1">

          <b><?php echo $lang->get('acpgc_field_edit_require_captcha_title'); ?></b><br />

          <?php echo $lang->get('acpgc_field_edit_require_captcha_hint'); ?>

        </td>

        <td class="row1">

          <label>

            <input type="checkbox" name="guest_edit_require_captcha" <?php if ( getConfig('guest_edit_require_captcha') == '1' ) echo 'checked="checked" '; ?>/>

            <?php echo $lang->get('acpgc_field_edit_require_captcha'); ?>

          </label>

        </td>

      </tr>