<?php

/**!info**

{

	"Plugin Name"  : "plugin_specialadmin_title",

	"Plugin URI"   : "http://enanocms.org/",

	"Description"  : "plugin_specialadmin_desc",

	"Author"       : "Dan Fuhry",

	"Version"      : "1.1.6",

	"Author URI"   : "http://enanocms.org/"

}

**!*/

/*

 * Enano - an open-source CMS capable of wiki functions, Drupal-like sidebar blocks, and everything in between

 * Copyright (C) 2006-2009 Dan Fuhry

 *

 * This program is Free Software; you can redistribute and/or modify it under the terms of the GNU General Public License

 * as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

 *

 * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied

 * warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for details.

 */

global $db, $session, $paths, $template, $plugins; // Common objects

// $plugins->attachHook('session_started', 'SpecialAdmin_paths_init();');

function SpecialAdmin_paths_init()

{

	global $paths;

	register_special_page('Administration', 'specialpage_administration');

}

$plugins->attachHook('base_classes_initted', 'SpecialAdmin_include();');

function SpecialAdmin_include()

{

	global $db, $session, $paths, $template, $plugins; // Common objects

	// Admin pages that were too enormous to be in this file were split off into the plugins/admin/ directory in 1.0.1.

	// Only load these files if we're looking to load the admin panel

	list($pid, $ns) = RenderMan::strToPageID($paths->get_pageid_from_url());

	if ( $ns == 'Admin' || ( $pid == 'Administration' && $ns == 'Special' ) )

	{

		require(ENANO_ROOT . '/plugins/admin/Home.php');

		require(ENANO_ROOT . '/plugins/admin/PageManager.php');

		require(ENANO_ROOT . '/plugins/admin/PageEditor.php');

		require(ENANO_ROOT . '/plugins/admin/PageGroups.php');

		require(ENANO_ROOT . '/plugins/admin/GroupManager.php');

		require(ENANO_ROOT . '/plugins/admin/SecurityLog.php');

		require(ENANO_ROOT . '/plugins/admin/UserManager.php');

		require(ENANO_ROOT . '/plugins/admin/UserRanks.php');

		require(ENANO_ROOT . '/plugins/admin/LangManager.php');

		require(ENANO_ROOT . '/plugins/admin/ThemeManager.php');

		require(ENANO_ROOT . '/plugins/admin/PluginManager.php');

		require(ENANO_ROOT . '/plugins/admin/CacheManager.php');

	}

}

// For convenience and nothing more.

function acp_start_form()

{

	global $db, $session, $paths, $template, $plugins; // Common objects

	echo '<form action="'.makeUrl($paths->nslist['Special'].'Administration', ( isset($_GET['sqldbg']) ? 'sqldbg&' : '' ) . ( isset($_GET['nocompress']) ? 'nocompress&' : '' ) . 'module='.$paths->cpage['module']).'" method="post" enctype="multipart/form-data">';

}

// function names are IMPORTANT!!! The name pattern is: page_<namespace ID>_<page URLname, without namespace>

function page_Admin_GeneralConfig()

{

	global $db, $session, $paths, $template, $plugins; // Common objects

	global $lang;

	global $cache;

	if ( $session->auth_level < USER_LEVEL_ADMIN || $session->user_level < USER_LEVEL_ADMIN )

	{

		$login_link = makeUrlNS('Special', 'Login/' . $paths->nslist['Special'] . 'Administration', 'level=' . USER_LEVEL_ADMIN, true);

		echo '<h3>' . $lang->get('adm_err_not_auth_title') . '</h3>';

		echo '<p>' . $lang->get('adm_err_not_auth_body', array( 'login_link' => $login_link )) . '</p>';

		return;

	}

	// FIXME: is this a bad place for this? I couldn't think of anything much better. Not helped by the fact that I hate misc scripts.

	if ( isset($_POST['act']) && $_POST['act'] === 'gzip_check' )

	{

		global $is_https;

		header('Content-type: application/json');

		require(ENANO_ROOT . '/includes/http.php');

		try

		{

			if ( !isset($_SERVER['SERVER_ADDR']) )

				throw new Exception('No SERVER_ADDR support - can\'t test server environment');

			$server_addr = $_SERVER['SERVER_ADDR'];

			// cheap ipv6 test

			if ( strstr($server_addr, ":") )

				$server_addr = "[$server_addr]";

			$req = new Request_HTTP($server_addr, makeUrlNS('System', 'GzipTest', 'disable_builtin_gzip'), 'GET', intval($_SERVER['SERVER_PORT']), $is_https);

			$req->add_header('Accept-Encoding', 'gzip,deflate');

			$headers = $req->get_response_headers_array();

			$send = array(

					'server_does_it' => ( isset($headers['Content-encoding']) && in_array($headers['Content-encoding'], array('gzip', 'deflate')) ),

					'php_supports_gzip' => function_exists('gzdeflate')

				);

		}

		catch ( Exception $e )

		{

			$send = array(

				'mode' => 'error',

				'error' => "HTTP request exception: <pre>$e</pre>"

				);

		}

		echo enano_json_encode($send);

		return;

	}

	if(isset($_POST['submit']) && !defined('ENANO_DEMO_MODE') )

	{

		// Global site options

		setConfig('site_name', $_POST['site_name']);

		setConfig('site_desc', $_POST['site_desc']);

		setConfig('main_page', sanitize_page_id($_POST['main_page']));

		setConfig('copyright_notice', $_POST['copyright']);

		setConfig('contact_email', $_POST['contact_email']);

		setConfig('main_page_alt_enable', ( isset($_POST['main_page_alt_enable']) && $_POST['main_page_alt_enable'] === '1' ? '1' : '0' ));

		if ( !empty($_POST['main_page_alt']) )

		{

			setConfig('main_page_alt', sanitize_page_id($_POST['main_page_alt']));

		}

		// Wiki mode

		if(isset($_POST['wikimode']))                setConfig('wiki_mode', '1');

		else                                         setConfig('wiki_mode', '0');

		if(isset($_POST['wiki_mode_require_login'])) setConfig('wiki_mode_require_login', '1');

		else                                         setConfig('wiki_mode_require_login', '0');

		if(isset($_POST['editmsg']))                 setConfig('wiki_edit_notice', '1');

		else                                         setConfig('wiki_edit_notice', '0');

		setConfig('wiki_edit_notice_text', $_POST['editmsg_text']);

		$cache->purge('wiki_edit_notice');

		if(isset($_POST['guest_edit_require_captcha'])) setConfig('guest_edit_require_captcha', '1');

		else                                         setConfig('guest_edit_require_captcha', '0');

		// Stats

		if(isset($_POST['log_hits']))                setConfig('log_hits', '1');

		else                                         setConfig('log_hits', '0');

		// Disablement

		if(isset($_POST['site_disabled'])) {         setConfig('site_disabled', '1'); setConfig('site_disabled_notice', $_POST['site_disabled_notice']); }

		else                                         setConfig('site_disabled', '0');

		// Account activation

		setConfig('account_activation', $_POST['account_activation']);

		// W3C compliance buttons

		if(isset($_POST['w3c-vh32']))     setConfig("w3c_vh32", "1");

		else                              setConfig("w3c_vh32", "0");

		if(isset($_POST['w3c-vh40']))     setConfig("w3c_vh40", "1");

		else                              setConfig("w3c_vh40", "0");

		if(isset($_POST['w3c-vh401']))    setConfig("w3c_vh401", "1");

		else                              setConfig("w3c_vh401", "0");

		if(isset($_POST['w3c-vxhtml10'])) setConfig("w3c_vxhtml10", "1");

		else                              setConfig("w3c_vxhtml10", "0");

		if(isset($_POST['w3c-vxhtml11'])) setConfig("w3c_vxhtml11", "1");

		else                              setConfig("w3c_vxhtml11", "0");

		if(isset($_POST['w3c-vcss']))     setConfig("w3c_vcss", "1");

		else                              setConfig("w3c_vcss", "0");

		// SourceForge.net logo

		if(isset($_POST['showsf'])) setConfig('sflogo_enabled', '1');

		else                        setConfig('sflogo_enabled', '0');

		setConfig('sflogo_groupid', $_POST['sfgroup']);

		setConfig('sflogo_type', $_POST['sflogo']);

		// Comment options

		if(isset($_POST['comment-approval'])) setConfig('approve_comments', '1');

		else                                  setConfig('approve_comments', '0');

		if(isset($_POST['enable-comments']))  setConfig('enable_comments', '1');

		else                                  setConfig('enable_comments', '0');

		setConfig('comments_need_login', $_POST['comments_need_login']);

		if ( in_array($_POST['comment_spam_policy'], array('moderate', 'reject', 'accept')) )

		{

			setConfig('comment_spam_policy', $_POST['comment_spam_policy']);

		}

		// Powered by link

		if ( isset($_POST['enano_powered_link']) ) setConfig('powered_btn', '1');

		else                                       setConfig('powered_btn', '0');    

		if(isset($_POST['dbdbutton']))        setConfig('dbd_button', '1');

		else                                  setConfig('dbd_button', '0');

		if($_POST['emailmethod'] == 'phpmail') setConfig('smtp_enabled', '0');

		else                                   setConfig('smtp_enabled', '1');

		setConfig('smtp_server', $_POST['smtp_host']);

		setConfig('smtp_user', $_POST['smtp_user']);

		if($_POST['smtp_pass'] != 'XXXXXXXXXXXX') setConfig('smtp_password', $_POST['smtp_pass']);

		// Password strength

		if ( isset($_POST['pw_strength_enable']) ) setConfig('pw_strength_enable', '1');

		else                                       setConfig('pw_strength_enable', '0');

		$strength = intval($_POST['pw_strength_minimum']);

		if ( $strength >= -10 && $strength <= 30 )

		{

			$strength = strval($strength);

			setConfig('pw_strength_minimum', $strength);

		}

		// Default theme

		$default_theme = ( isset($template->named_theme_list[@$_POST['default_theme']]) ) ? $_POST['default_theme'] : $template->theme_list[0]['theme_id'];

		setConfig('theme_default', $default_theme);

		// Breadcrumb mode

		if ( in_array($_POST['breadcrumb_mode'], array('subpages', 'always', 'never')) )

		{

			setConfig('breadcrumb_mode', $_POST['breadcrumb_mode']);

		}

		// CDN path

		if ( preg_match('/^http:\/\//', $_POST['cdn_path']) || $_POST['cdn_path'] === '' )

		{

			// trim off a trailing slash

			setConfig('cdn_path', preg_replace('#/$#', '', $_POST['cdn_path']));

		}

		setConfig('register_tou', RenderMan::preprocess_text($_POST['register_tou'], true, false));

		// Account lockout policy

		if ( ctype_digit($_POST['lockout_threshold']) )

			setConfig('lockout_threshold', $_POST['lockout_threshold']);

		if ( ctype_digit($_POST['lockout_duration']) )

			setConfig('lockout_duration', $_POST['lockout_duration']);

		if ( in_array($_POST['lockout_policy'], array('disable', 'captcha', 'lockout')) )

			setConfig('lockout_policy', $_POST['lockout_policy']);

		// Session time

		foreach ( array('session_short_time', 'session_remember_time') as $k )

		{

			if ( strval(intval($_POST[$k])) === $_POST[$k] && intval($_POST[$k]) >= 0 )

			{

				setConfig($k, $_POST[$k]);

			}

		}

		// Avatar settings

		setConfig('avatar_enable', ( isset($_POST['avatar_enable']) ? '1' : '0' ));

		// for these next three values, set the config value if it's a valid integer; this is

		// done by using strval(intval($foo)) === $foo, which flattens $foo to an integer and

		// then converts it back to a string. This effectively verifies that var $foo is both

		// set and that it's a valid string representing an integer.

		setConfig('avatar_max_size', ( strval(intval($_POST['avatar_max_size'])) === $_POST['avatar_max_size'] ? $_POST['avatar_max_size'] : '10240' ));

		setConfig('avatar_max_width', ( strval(intval($_POST['avatar_max_width'])) === $_POST['avatar_max_width'] ? $_POST['avatar_max_width'] : '96' ));

		setConfig('avatar_max_height', ( strval(intval($_POST['avatar_max_height'])) === $_POST['avatar_max_height'] ? $_POST['avatar_max_height'] : '96' ));

		setConfig('avatar_enable_anim', ( isset($_POST['avatar_enable_anim']) ? '1' : '0' ));

		setConfig('avatar_upload_file', ( isset($_POST['avatar_upload_file']) ? '1' : '0' ));

		setConfig('avatar_upload_http', ( isset($_POST['avatar_upload_http']) ? '1' : '0' ));

		setConfig('avatar_upload_gravatar', ( isset($_POST['avatar_upload_gravatar']) ? '1' : '0' ));

		if ( in_array($_POST['gravatar_rating'], array('g', 'pg', 'r', 'x')) )

		{

			setConfig('gravatar_rating', $_POST['gravatar_rating']);

		}

		setConfig('avatar_directory', 'files/avatars');

		setConfig('userpage_grant_acl', ( isset($_POST['userpage_grant_acl']) ? '1' : '0' ));

		setConfig('autofill_username_for_guests', ( isset($_POST['autofill_username_for_guests']) ? '1' : '0' ));

		setConfig('gzip_output', ( isset($_POST['gzip_output']) ? '1' : '0' ));

		if ( isset($_POST['trust_xff']) )

		{

			setConfig('trust_xff', $_POST['trust_xff_type']);

		}

		else

		{

			setConfig('trust_xff', 'none');

		}

		// Allow plugins to save their changes

		$code = $plugins->setHook('acp_general_save');

		foreach ( $code as $cmd )

		{

			eval($cmd);

		}

		echo '<div class="info-box">' . $lang->get('acpgc_msg_save_success') . '</div><br />';

	}

	else if ( isset($_POST['submit']) && defined('ENANO_DEMO_MODE') )

	{

		echo '<div class="error-box">Saving the general site configuration is blocked in the administration demo.</div>';

	}

	echo('<form name="main" action="'.htmlspecialchars(makeUrl($paths->nslist['Special'].'Administration', 'module='.$paths->cpage['module'])).'" method="post" onsubmit="if(!submitAuthorized) return false;">');

	?>

	<div class="tblholder">

		<table border="0" width="100%" cellspacing="1" cellpadding="4">

		<!-- Global options -->

			<tr><th colspan="2"><?php echo $lang->get('acpgc_heading_main'); ?></th></tr>

			<tr>

				<th colspan="2" class="subhead"><?php echo $lang->get('acpgc_heading_submain'); ?></th>

			</tr>

			<!-- site name -->

			<tr>

				<td class="row1" style="width: 50%;">

					<?php echo $lang->get('acpgc_field_site_name'); ?>

				</td>

				<td class="row1" style="width: 50%;">

					<input type="text" name="site_name" size="30" value="<?php echo htmlspecialchars(getConfig('site_name')); ?>" />

				</td>

			</tr>

			<!-- site tagline -->

			<tr>

				<td class="row2">

					<?php echo $lang->get('acpgc_field_site_desc'); ?>

				</td>

				<td class="row2">

					<input type="text" name="site_desc" size="30" value="<?php echo htmlspecialchars(getConfig('site_desc')); ?>" />

				</td>

			</tr>

			<!-- main page -->

			<tr>

				<td class="row1">

					<?php echo $lang->get('acpgc_field_main_page'); ?></td>

				<td class="row1">

					<?php echo $template->pagename_field('main_page', sanitize_page_id(getConfig('main_page', 'Main_Page'))); ?><br />

						<label><input type="radio" name="main_page_alt_enable" value="0" onclick="$('#main_page_alt_tr').hide();" <?php if ( getConfig('main_page_alt_enable', '0') == '0' ) echo 'checked="checked" '; ?>/> <?php echo $lang->get('acpgc_field_main_page_option_same'); ?></label><br />

						<label><input type="radio" name="main_page_alt_enable" value="1" onclick="$('#main_page_alt_tr').show();" <?php if ( getConfig('main_page_alt_enable', '0') == '1' ) echo 'checked="checked" '; ?>/> <?php echo $lang->get('acpgc_field_main_page_option_members'); ?></label>

				</td>

			</tr>

			<tr id="main_page_alt_tr"<?php if ( getConfig('main_page_alt_enable', '0') == '0' ) echo ' style="display: none;"'; ?>>

				<td class="row3">

					<?php echo $lang->get('acpgc_field_main_page_members'); ?>

				</td>

				<td class="row3">

					<?php echo $template->pagename_field('main_page_alt', sanitize_page_id(getConfig('main_page_alt', /* default alt to current main page */ getConfig('main_page', 'Main_Page')))); ?>

				</td>

			</tr>

			<!-- copyright notice -->

			<tr>

				<td class="row2">

						<?php echo $lang->get('acpgc_field_copyright'); ?>

				</td>

				<td class="row2">

					<input type="text" name="copyright" size="30" value="<?php echo htmlspecialchars(getConfig('copyright_notice')); ?>" />

				</td>

			</tr>

			<tr>

				<td class="row1" colspan="2">

					<?php echo $lang->get('acpgc_field_copyright_hint'); ?>

				</td>

			</tr>

			<!-- contact e-mail -->

			<tr>

				<td class="row2">

					<?php echo $lang->get('acpgc_field_contactemail'); ?><br />

					<small><?php echo $lang->get('acpgc_field_contactemail_hint'); ?></small>

				</td>

				<td class="row2">

					<input name="contact_email" type="text" size="40" value="<?php echo htmlspecialchars(getConfig('contact_email')); ?>" />

				</td>

			</tr>

		<!-- Wiki mode -->

			<tr><th class="subhead" colspan="2"><?php echo $lang->get('acpgc_heading_wikimode'); ?></th></tr>

			<tr>

				<td class="row3" rowspan="2">

					<?php echo $lang->get('acpgc_field_wikimode_intro'); ?><br /><br />

					<?php echo $lang->get('acpgc_field_wikimode_info_sanitize'); ?><br /><br />

					<?php echo $lang->get('acpgc_field_wikimode_info_history'); ?>

				</td>

				<td class="row1">

					<input type="checkbox" name="wikimode" id="wikimode" <?php if(getConfig('wiki_mode')=='1') echo('CHECKED '); ?> /><label for="wikimode"><?php echo $lang->get('acpgc_field_wikimode'); ?></label>

				</td>

			</tr>

			<tr><td class="row2"><label><input type="checkbox" name="wiki_mode_require_login"<?php if(getConfig('wiki_mode_require_login')=='1') echo('CHECKED '); ?>/> Only for logged in users</label></td></tr>

			<tr>

				<td class="row3" rowspan="2">