<?php

/*

Plugin URI: http://enanocms.org/

Author: Dan Fuhry

Version: 1.0.3

Author URI: http://enanocms.org/

*/

/*

 * Enano - an open-source CMS capable of wiki functions, Drupal-like sidebar blocks, and everything in between

 * Version 1.1.1

 * Copyright (C) 2006-2007 Dan Fuhry

 *

 * This program is Free Software; you can redistribute and/or modify it under the terms of the GNU General Public License

 * as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

 *

 * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied

 * warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for details.

 */

global $db, $session, $paths, $template, $plugins; // Common objects

$plugins->attachHook('session_started', '

  global $paths;

    $paths->add_page(Array(

      \'name\'=>\'specialpage_administration\',

      \'urlname\'=>\'Administration\',

      \'namespace\'=>\'Special\',

      \'special\'=>0,\'visible\'=>1,\'comments_on\'=>0,\'protected\'=>1,\'delvotes\'=>0,\'delvote_ips\'=>\'\',

      ));

    $paths->add_page(Array(

      \'name\'=>\'specialpage_manage_sidebar\',

      \'urlname\'=>\'EditSidebar\',

      \'namespace\'=>\'Special\',

      \'special\'=>0,\'visible\'=>1,\'comments_on\'=>0,\'protected\'=>1,\'delvotes\'=>0,\'delvote_ips\'=>\'\',

      ));

  ');

// Admin pages that were too enormous to be in this file were split off into the plugins/admin/ directory in 1.0.1

require(ENANO_ROOT . '/plugins/admin/PageGroups.php');

require(ENANO_ROOT . '/plugins/admin/SecurityLog.php');

require(ENANO_ROOT . '/plugins/admin/UserManager.php');

// function names are IMPORTANT!!! The name pattern is: page_<namespace ID>_<page URLname, without namespace>

function page_Admin_Home() {

  global $db, $session, $paths, $template, $plugins; // Common objects

  global $lang;

  if ( $session->auth_level < USER_LEVEL_ADMIN || $session->user_level < USER_LEVEL_ADMIN )

  {

    $login_link = makeUrlNS('Special', 'Login/' . $paths->nslist['Special'] . 'Administration', 'level=' . USER_LEVEL_ADMIN, true);

    echo '<h3>' . $lang->get('adm_err_not_auth_title') . '</h3>';

    echo '<p>' . $lang->get('adm_err_not_auth_body', array( 'login_link' => $login_link )) . '</p>';

    return;

  }

  if ( $paths->getParam(0) == 'updates.xml' )

  {

    require_once(ENANO_ROOT . '/includes/http.php');

    $req = new Request_HTTP('germantown.enanocms.org', '/meta/updates.xml');

    $response = $req->get_response_body();

    header('Content-type: application/xml');

    if ( $req->response_code != HTTP_OK )

    {

      // Error in response

      echo '<enano><latest><error><![CDATA[

Did not properly receive response from server. Response code: ' . $req->response_code . ' ' . $req->response_string . '

]]></error></latest></enano>';

    }

    else

    {

      // Retrieve first update

      $first_update = preg_match('/<release tag="([^"]+)" version="([^"]+)" (codename="([^"]+)" )?relnotes="([^"]+)" ?\/>/', $response, $match);

      if ( !$first_update )

      {

        echo '<enano><latest><error><![CDATA[

Received invalid XML response.

]]></error></latest></enano>';

      }

      if ( version_compare(enano_version(true), $match[2], '<') )

      {

        $response = str_replace_once('</latest>', "  <haveupdates />\n  </latest>", $response);

      }

      echo $response;

    }

    return;

  }

  // Basic information

  // Demo mode

  if ( defined('ENANO_DEMO_MODE') )

  {

  }

  // Check for the installer scripts

  if( ( file_exists(ENANO_ROOT.'/install.php') || file_exists(ENANO_ROOT.'/schema.sql') ) && !defined('ENANO_DEMO_MODE') )

  {

  }

  // Inactive users

    {

      $n = $db->numrows();

    }

  $db->free_result();

  // Stats

  if(getConfig('log_hits') == '1')

  {

    $stats = stats_top_pages(10);

    //die('<pre>'.print_r($stats,true).'</pre>');

    $c = 0;

    $cls = 'row2';

    foreach($stats as $data)

    {

      $cls = ( $cls == 'row1' ) ? 'row2' : 'row1';

    }

  }

  // Security log

  $seclog = get_security_log(5);

  echo $seclog;

}

function page_Admin_GeneralConfig() {

  global $db, $session, $paths, $template, $plugins; // Common objects

  global $lang;

  if ( $session->auth_level < USER_LEVEL_ADMIN || $session->user_level < USER_LEVEL_ADMIN )

  {

    $login_link = makeUrlNS('Special', 'Login/' . $paths->nslist['Special'] . 'Administration', 'level=' . USER_LEVEL_ADMIN, true);

    echo '<h3>' . $lang->get('adm_err_not_auth_title') . '</h3>';

    echo '<p>' . $lang->get('adm_err_not_auth_body', array( 'login_link' => $login_link )) . '</p>';

    return;

  }

  if(isset($_POST['submit']) && !defined('ENANO_DEMO_MODE') )

  {

    // Global site options

    setConfig('site_name', $_POST['site_name']);

    setConfig('site_desc', $_POST['site_desc']);

    setConfig('main_page', str_replace(' ', '_', $_POST['main_page']));

    setConfig('copyright_notice', $_POST['copyright']);

    setConfig('contact_email', $_POST['contact_email']);

    // Wiki mode

    if(isset($_POST['wikimode']))                setConfig('wiki_mode', '1');

    else                                         setConfig('wiki_mode', '0');

    if(isset($_POST['wiki_mode_require_login'])) setConfig('wiki_mode_require_login', '1');

    else                                         setConfig('wiki_mode_require_login', '0');

    if(isset($_POST['editmsg']))                 setConfig('wiki_edit_notice', '1');

    else                                         setConfig('wiki_edit_notice', '0');

    setConfig('wiki_edit_notice_text', $_POST['editmsg_text']);

    if(isset($_POST['guest_edit_require_captcha'])) setConfig('guest_edit_require_captcha', '1');

    else                                         setConfig('guest_edit_require_captcha', '0');

    // Stats

    if(isset($_POST['log_hits']))                setConfig('log_hits', '1');

    else                                         setConfig('log_hits', '0');

    // Disablement

    if(isset($_POST['site_disabled'])) {         setConfig('site_disabled', '1'); setConfig('site_disabled_notice', $_POST['site_disabled_notice']); }

    else                                         setConfig('site_disabled', '0');

    // Account activation

    setConfig('account_activation', $_POST['account_activation']);

    // W3C compliance buttons

    if(isset($_POST['w3c-vh32']))     setConfig("w3c_vh32", "1");

    else                              setConfig("w3c_vh32", "0");

    if(isset($_POST['w3c-vh40']))     setConfig("w3c_vh40", "1");

    else                              setConfig("w3c_vh40", "0");

    if(isset($_POST['w3c-vh401']))    setConfig("w3c_vh401", "1");

    else                              setConfig("w3c_vh401", "0");

    if(isset($_POST['w3c-vxhtml10'])) setConfig("w3c_vxhtml10", "1");

    else                              setConfig("w3c_vxhtml10", "0");

    if(isset($_POST['w3c-vxhtml11'])) setConfig("w3c_vxhtml11", "1");

    else                              setConfig("w3c_vxhtml11", "0");

    if(isset($_POST['w3c-vcss']))     setConfig("w3c_vcss", "1");

    else                              setConfig("w3c_vcss", "0");

    // SourceForge.net logo

    if(isset($_POST['showsf'])) setConfig('sflogo_enabled', '1');

    else                        setConfig('sflogo_enabled', '0');

    setConfig('sflogo_groupid', $_POST['sfgroup']);

    setConfig('sflogo_type', $_POST['sflogo']);

    // Comment options

    if(isset($_POST['comment-approval'])) setConfig('approve_comments', '1');

    else                                  setConfig('approve_comments', '0');

    if(isset($_POST['enable-comments']))  setConfig('enable_comments', '1');

    else                                  setConfig('enable_comments', '0');

    setConfig('comments_need_login', $_POST['comments_need_login']);

    // Powered by link

    if ( isset($_POST['enano_powered_link']) ) setConfig('powered_btn', '1');

    else                                       setConfig('powered_btn', '0');    

    if(isset($_POST['dbdbutton']))        setConfig('dbd_button', '1');

    else                                  setConfig('dbd_button', '0');

    if($_POST['emailmethod'] == 'phpmail') setConfig('smtp_enabled', '0');

    else                                   setConfig('smtp_enabled', '1');

    setConfig('smtp_server', $_POST['smtp_host']);

    setConfig('smtp_user', $_POST['smtp_user']);

    if($_POST['smtp_pass'] != 'XXXXXXXXXXXX') setConfig('smtp_password', $_POST['smtp_pass']);

    // Password strength

    if ( isset($_POST['pw_strength_enable']) ) setConfig('pw_strength_enable', '1');

    else                                       setConfig('pw_strength_enable', '0');

    $strength = intval($_POST['pw_strength_minimum']);

    if ( $strength >= -10 && $strength <= 30 )

    {

      $strength = strval($strength);

      setConfig('pw_strength_minimum', $strength);

    }

    // Account lockout policy

    if ( preg_match('/^[0-9]+$/', $_POST['lockout_threshold']) )

      setConfig('lockout_threshold', $_POST['lockout_threshold']);

    if ( preg_match('/^[0-9]+$/', $_POST['lockout_duration']) )

      setConfig('lockout_duration', $_POST['lockout_duration']);

    if ( in_array($_POST['lockout_policy'], array('disable', 'captcha', 'lockout')) )

      setConfig('lockout_policy', $_POST['lockout_policy']);

    // Avatar settings

    setConfig('avatar_enable', ( isset($_POST['avatar_enable']) ? '1' : '0' ));

    // for these next three values, set the config value if it's a valid integer; this is

    // done by using strval(intval($foo)) === $foo, which flattens $foo to an integer and

    // then converts it back to a string. This effectively verifies that var $foo is both

    // set and that it's a valid string representing an integer.

    setConfig('avatar_max_size', ( strval(intval($_POST['avatar_max_size'])) === $_POST['avatar_max_size'] ? $_POST['avatar_max_size'] : '10240' ));

    setConfig('avatar_max_width', ( strval(intval($_POST['avatar_max_width'])) === $_POST['avatar_max_width'] ? $_POST['avatar_max_width'] : '96' ));

    setConfig('avatar_max_height', ( strval(intval($_POST['avatar_max_height'])) === $_POST['avatar_max_height'] ? $_POST['avatar_max_height'] : '96' ));

    setConfig('avatar_enable_anim', ( isset($_POST['avatar_enable_anim']) ? '1' : '0' ));

    setConfig('avatar_upload_file', ( isset($_POST['avatar_upload_file']) ? '1' : '0' ));

    setConfig('avatar_upload_http', ( isset($_POST['avatar_upload_http']) ? '1' : '0' ));

    if ( is_dir(ENANO_ROOT . '/' . $_POST['avatar_directory']) )

    {

      if ( preg_match('/^([A-z0-9_-]+)(\/([A-z0-9_-]+))*$/', $_POST['avatar_directory']) )

      {

        setConfig('avatar_directory', $_POST['avatar_directory']);

      }

      else

      {

      }

    }

    else

    {

    }

  }

  else if ( isset($_POST['submit']) && defined('ENANO_DEMO_MODE') )

  {

    echo '<div class="error-box">Saving the general site configuration is blocked in the administration demo.</div>';

  }

  echo('<form name="main" action="'.htmlspecialchars(makeUrl($paths->nslist['Special'].'Administration', 'module='.$paths->cpage['module'])).'" method="post" onsubmit="if(!submitAuthorized) return false;">');

  ?>

  <div class="tblholder">

    <table border="0" width="100%" cellspacing="1" cellpadding="4">

    <!-- Global options -->

    <!-- Wiki mode -->

      <tr>

        <td class="row3" rowspan="2">

        </td>

        <td class="row1">

        </td>

      </tr>

      <tr><td class="row2"><label><input type="checkbox" name="wiki_mode_require_login"<?php if(getConfig('wiki_mode_require_login')=='1') echo('CHECKED '); ?>/> Only for logged in users</label></td></tr>

      <tr>

        <td class="row3" rowspan="2">

        </td>

        <td class="row1">

        </td>

      </tr>

      <tr>

        <td class="row2">

          <textarea <?php if(getConfig('wiki_edit_notice')!='1') echo('style="display:none" '); ?>rows="5" cols="30" name="editmsg_text" id="editmsg_text"><?php echo getConfig('wiki_edit_notice_text'); ?></textarea>

        </td>

      </tr>

      <tr>

        <td class="row1">

        </td>

        <td class="row1">

          <label>

            <input type="checkbox" name="guest_edit_require_captcha" <?php if ( getConfig('guest_edit_require_captcha') == '1' ) echo 'checked="checked" '; ?>/>

          </label>

        </td>

      </tr>

    <!-- Site statistics -->

      <tr>

      </tr>

    <!-- Comment options -->

    <!--

    READ: Do not try to enable this, backend support for it has been disabled. To edit default

          permissions, select The Entire Website in any permissions editor window.

      <tr><th colspan="2">Default permissions for pages</th></tr>

      <tr>

        <td class="row1">You can edit the default set of permissions used when no other permissions are available. Permissions set here are used when no other permissions are available. As with other ACL rules, you can assign these defaults to every user or one specific user or group.</td>

        <td class="row1"><a href="#" onclick="ajaxOpenACLManager('__DefaultPermissions', 'Special'); return false;">Manage default permissions</a></td>

      </tr>

      -->

    <!-- Site disablement -->

      <tr>

      </tr>

      <tr>

        <td class="row2">

          <div id="site_disabled_notice"<?php if(getConfig('site_disabled')!='1') echo(' style="display:none"'); ?>>

            <textarea name="site_disabled_notice" rows="7" cols="30"><?php echo getConfig('site_disabled_notice'); ?></textarea>

          </div>

        </td>

      </tr>

    </table>

    </div>

    <div class="tblholder">

    <table border="0" width="100%" cellspacing="1" cellpadding="4">

    <tr>

    </tr>

    <!-- Account activation -->

      <tr>

        <td class="row3" colspan="2">