mirror of https://github.com/Maecenas/tt-rss.git
An unofficial mirror of the Tiny Tiny RSS, an open-source RSS feed reader and aggregator
https://git.tt-rss.org/fox/tt-rss
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
1352 lines
42 KiB
1352 lines
42 KiB
<?php |
|
|
|
class Pref_Prefs extends Handler_Protected { |
|
|
|
private $pref_help = []; |
|
private $pref_item_map = []; |
|
private $pref_blacklist = []; |
|
private $profile_blacklist = []; |
|
|
|
function csrf_ignore($method) { |
|
$csrf_ignored = array("index", "updateself", "customizecss", "editprefprofiles"); |
|
|
|
return array_search($method, $csrf_ignored) !== false; |
|
} |
|
|
|
function __construct($args) { |
|
parent::__construct($args); |
|
|
|
$this->pref_item_map = [ |
|
__('General') => [ |
|
'USER_LANGUAGE', |
|
'USER_TIMEZONE', |
|
'BLOCK_SEPARATOR', |
|
'USER_CSS_THEME', |
|
'BLOCK_SEPARATOR', |
|
'ENABLE_API_ACCESS', |
|
], |
|
__('Feeds') => [ |
|
'DEFAULT_UPDATE_INTERVAL', |
|
'FRESH_ARTICLE_MAX_AGE', |
|
'DEFAULT_SEARCH_LANGUAGE', |
|
'BLOCK_SEPARATOR', |
|
'ENABLE_FEED_CATS', |
|
'BLOCK_SEPARATOR', |
|
'CONFIRM_FEED_CATCHUP', |
|
'ON_CATCHUP_SHOW_NEXT_FEED', |
|
'BLOCK_SEPARATOR', |
|
'HIDE_READ_FEEDS', |
|
'HIDE_READ_SHOWS_SPECIAL', |
|
], |
|
__('Articles') => [ |
|
'PURGE_OLD_DAYS', |
|
'PURGE_UNREAD_ARTICLES', |
|
'BLOCK_SEPARATOR', |
|
'COMBINED_DISPLAY_MODE', |
|
'CDM_EXPANDED', |
|
'BLOCK_SEPARATOR', |
|
'CDM_AUTO_CATCHUP', |
|
'VFEED_GROUP_BY_FEED', |
|
'BLOCK_SEPARATOR', |
|
'SHOW_CONTENT_PREVIEW', |
|
'STRIP_IMAGES', |
|
], |
|
__('Digest') => [ |
|
'DIGEST_ENABLE', |
|
'DIGEST_CATCHUP', |
|
'DIGEST_PREFERRED_TIME', |
|
], |
|
__('Advanced') => [ |
|
'BLACKLISTED_TAGS', |
|
'BLOCK_SEPARATOR', |
|
'LONG_DATE_FORMAT', |
|
'SHORT_DATE_FORMAT', |
|
'BLOCK_SEPARATOR', |
|
'SSL_CERT_SERIAL', |
|
] |
|
]; |
|
|
|
$this->pref_help = [ |
|
"ALLOW_DUPLICATE_POSTS" => array(__("Allow duplicate articles"), ""), |
|
"BLACKLISTED_TAGS" => array(__("Blacklisted tags"), __("Never apply these tags automatically (comma-separated list).")), |
|
"DEFAULT_SEARCH_LANGUAGE" => array(__("Default language"), __("Used for full-text search")), |
|
"CDM_AUTO_CATCHUP" => array(__("Mark read on scroll"), __("Mark articles as read as you scroll past them")), |
|
"CDM_EXPANDED" => array(__("Always expand articles")), |
|
"COMBINED_DISPLAY_MODE" => array(__("Combined mode"), __("Show flat list of articles instead of separate panels")), |
|
"CONFIRM_FEED_CATCHUP" => array(__("Confirm marking feeds as read")), |
|
"DEFAULT_ARTICLE_LIMIT" => array(__("Amount of articles to display at once")), |
|
"DEFAULT_UPDATE_INTERVAL" => array(__("Default update interval")), |
|
"DIGEST_CATCHUP" => array(__("Mark sent articles as read")), |
|
"DIGEST_ENABLE" => array(__("Enable digest"), __("Send daily digest of new (and unread) headlines to your e-mail address")), |
|
"DIGEST_PREFERRED_TIME" => array(__("Try to send around this time"), __("Time in UTC")), |
|
"ENABLE_API_ACCESS" => array(__("Enable API"), __("Allows accessing this account through the API")), |
|
"ENABLE_FEED_CATS" => array(__("Enable categories")), |
|
"FEEDS_SORT_BY_UNREAD" => array(__("Sort feeds by unread articles count"), ""), |
|
"FRESH_ARTICLE_MAX_AGE" => array(__("Maximum age of fresh articles"), "<strong>" . __("hours") . "</strong>"), |
|
"HIDE_READ_FEEDS" => array(__("Hide read feeds")), |
|
"HIDE_READ_SHOWS_SPECIAL" => array(__("Always show special feeds"), __("While hiding read feeds")), |
|
"LONG_DATE_FORMAT" => array(__("Long date format"), __("Syntax is identical to PHP <a href='http://php.net/manual/function.date.php'>date()</a> function.")), |
|
"ON_CATCHUP_SHOW_NEXT_FEED" => array(__("Automatically show next feed"), __("After marking one as read")), |
|
"PURGE_OLD_DAYS" => array(__("Purge articles older than"), __("<strong>days</strong> (0 disables)")), |
|
"PURGE_UNREAD_ARTICLES" => array(__("Purge unread articles")), |
|
"REVERSE_HEADLINES" => array(__("Reverse headline order (oldest first)")), |
|
"SHORT_DATE_FORMAT" => array(__("Short date format")), |
|
"SHOW_CONTENT_PREVIEW" => array(__("Show content preview in headlines")), |
|
"SORT_HEADLINES_BY_FEED_DATE" => array(__("Sort headlines by feed date"), __("Use feed-specified date to sort headlines instead of local import date.")), |
|
"SSL_CERT_SERIAL" => array(__("SSL client certificate")), |
|
"STRIP_IMAGES" => array(__("Do not embed media")), |
|
"STRIP_UNSAFE_TAGS" => array(__("Strip unsafe tags from articles"), __("Strip all but most common HTML tags when reading articles.")), |
|
"USER_STYLESHEET" => array(__("Customize stylesheet")), |
|
"USER_TIMEZONE" => array(__("Time zone")), |
|
"VFEED_GROUP_BY_FEED" => array(__("Group by feed"), __("Group multiple-feed output by originating feed")), |
|
"USER_LANGUAGE" => array(__("Language")), |
|
"USER_CSS_THEME" => array(__("Theme")) |
|
]; |
|
|
|
$this->pref_blacklist = ["ALLOW_DUPLICATE_POSTS", "STRIP_UNSAFE_TAGS", "REVERSE_HEADLINES", |
|
"SORT_HEADLINES_BY_FEED_DATE", "DEFAULT_ARTICLE_LIMIT", |
|
"FEEDS_SORT_BY_UNREAD", "USER_STYLESHEET"]; |
|
|
|
/* "FEEDS_SORT_BY_UNREAD", "HIDE_READ_FEEDS", "REVERSE_HEADLINES" */ |
|
|
|
$this->profile_blacklist = ["ALLOW_DUPLICATE_POSTS", "PURGE_OLD_DAYS", |
|
"PURGE_UNREAD_ARTICLES", "DIGEST_ENABLE", "DIGEST_CATCHUP", |
|
"BLACKLISTED_TAGS", "ENABLE_API_ACCESS", "UPDATE_POST_ON_CHECKSUM_CHANGE", |
|
"DEFAULT_UPDATE_INTERVAL", "USER_TIMEZONE", "SORT_HEADLINES_BY_FEED_DATE", |
|
"SSL_CERT_SERIAL", "DIGEST_PREFERRED_TIME"]; |
|
} |
|
|
|
function changepassword() { |
|
|
|
if (defined('_TTRSS_DEMO_INSTANCE')) { |
|
print "ERROR: ".format_error("Disabled in demo version."); |
|
return; |
|
} |
|
|
|
$old_pw = clean($_POST["old_password"]); |
|
$new_pw = clean($_POST["new_password"]); |
|
$con_pw = clean($_POST["confirm_password"]); |
|
|
|
if ($old_pw == $new_pw) { |
|
print "ERROR: ".format_error("New password must be different from the old one."); |
|
return; |
|
} |
|
|
|
if ($old_pw == "") { |
|
print "ERROR: ".format_error("Old password cannot be blank."); |
|
return; |
|
} |
|
|
|
if ($new_pw == "") { |
|
print "ERROR: ".format_error("New password cannot be blank."); |
|
return; |
|
} |
|
|
|
if ($new_pw != $con_pw) { |
|
print "ERROR: ".format_error("Entered passwords do not match."); |
|
return; |
|
} |
|
|
|
$authenticator = PluginHost::getInstance()->get_plugin($_SESSION["auth_module"]); |
|
|
|
if (method_exists($authenticator, "change_password")) { |
|
print format_notice($authenticator->change_password($_SESSION["uid"], $old_pw, $new_pw)); |
|
} else { |
|
print "ERROR: ".format_error("Function not supported by authentication module."); |
|
} |
|
} |
|
|
|
function saveconfig() { |
|
$boolean_prefs = explode(",", clean($_POST["boolean_prefs"])); |
|
|
|
foreach ($boolean_prefs as $pref) { |
|
if (!isset($_POST[$pref])) $_POST[$pref] = 'false'; |
|
} |
|
|
|
$need_reload = false; |
|
|
|
foreach (array_keys($_POST) as $pref_name) { |
|
|
|
$value = $_POST[$pref_name]; |
|
|
|
switch ($pref_name) { |
|
case 'DIGEST_PREFERRED_TIME': |
|
if (get_pref('DIGEST_PREFERRED_TIME') != $value) { |
|
|
|
$sth = $this->pdo->prepare("UPDATE ttrss_users SET |
|
last_digest_sent = NULL WHERE id = ?"); |
|
$sth->execute([$_SESSION['uid']]); |
|
|
|
} |
|
break; |
|
case 'USER_LANGUAGE': |
|
if (!$need_reload) $need_reload = $_SESSION["language"] != $value; |
|
break; |
|
|
|
case 'USER_CSS_THEME': |
|
if (!$need_reload) $need_reload = get_pref($pref_name) != $value; |
|
break; |
|
} |
|
|
|
set_pref($pref_name, $value); |
|
} |
|
|
|
if ($need_reload) { |
|
print "PREFS_NEED_RELOAD"; |
|
} else { |
|
print __("The configuration was saved."); |
|
} |
|
} |
|
|
|
function changeemail() { |
|
|
|
$email = clean($_POST["email"]); |
|
$full_name = clean($_POST["full_name"]); |
|
$active_uid = $_SESSION["uid"]; |
|
|
|
$sth = $this->pdo->prepare("SELECT email, login, full_name FROM ttrss_users WHERE id = ?"); |
|
$sth->execute([$active_uid]); |
|
|
|
if ($row = $sth->fetch()) { |
|
$old_email = $row["email"]; |
|
|
|
if ($old_email != $email) { |
|
$mailer = new Mailer(); |
|
|
|
$tpl = new Templator(); |
|
|
|
$tpl->readTemplateFromFile("mail_change_template.txt"); |
|
|
|
$tpl->setVariable('LOGIN', $row["login"]); |
|
$tpl->setVariable('NEWMAIL', $email); |
|
$tpl->setVariable('TTRSS_HOST', SELF_URL_PATH); |
|
|
|
$tpl->addBlock('message'); |
|
|
|
$tpl->generateOutputToString($message); |
|
|
|
$mailer->mail(["to_name" => $row["login"], |
|
"to_address" => $row["email"], |
|
"subject" => "[tt-rss] Mail address change notification", |
|
"message" => $message]); |
|
|
|
} |
|
} |
|
|
|
$sth = $this->pdo->prepare("UPDATE ttrss_users SET email = ?, |
|
full_name = ? WHERE id = ?"); |
|
$sth->execute([$email, $full_name, $active_uid]); |
|
|
|
print __("Your personal data has been saved."); |
|
|
|
return; |
|
} |
|
|
|
function resetconfig() { |
|
|
|
$_SESSION["prefs_op_result"] = "reset-to-defaults"; |
|
|
|
$sth = $this->pdo->prepare("DELETE FROM ttrss_user_prefs |
|
WHERE (profile = :profile OR (:profile IS NULL AND profile IS NULL)) |
|
AND owner_uid = :uid"); |
|
$sth->execute([":profile" => $_SESSION['profile'], ":uid" => $_SESSION['uid']]); |
|
|
|
initialize_user_prefs($_SESSION["uid"], $_SESSION["profile"]); |
|
|
|
echo __("Your preferences are now set to default values."); |
|
} |
|
|
|
function index() { |
|
|
|
global $access_level_names; |
|
|
|
$_SESSION["prefs_op_result"] = ""; |
|
|
|
print "<div dojoType='dijit.layout.AccordionContainer' region='center'>"; |
|
print "<div dojoType='dijit.layout.AccordionPane' |
|
title=\"<i class='material-icons'>person</i> ".__('Personal data / Authentication')."\">"; |
|
|
|
print "<div dojoType='dijit.layout.TabContainer'>"; |
|
print "<div dojoType='dijit.layout.ContentPane' title=\"".__('Personal data')."\">"; |
|
|
|
print "<form dojoType='dijit.form.Form' id='changeUserdataForm'>"; |
|
|
|
print "<script type='dojo/method' event='onSubmit' args='evt'> |
|
evt.preventDefault(); |
|
if (this.validate()) { |
|
Notify.progress('Saving data...', true); |
|
|
|
new Ajax.Request('backend.php', { |
|
parameters: dojo.objectToQuery(this.getValues()), |
|
onComplete: function(transport) { |
|
notify_callback2(transport); |
|
} }); |
|
|
|
} |
|
</script>"; |
|
|
|
$sth = $this->pdo->prepare("SELECT email,full_name,otp_enabled, |
|
access_level FROM ttrss_users |
|
WHERE id = ?"); |
|
$sth->execute([$_SESSION["uid"]]); |
|
$row = $sth->fetch(); |
|
|
|
$email = htmlspecialchars($row["email"]); |
|
$full_name = htmlspecialchars($row["full_name"]); |
|
$otp_enabled = sql_bool_to_bool($row["otp_enabled"]); |
|
|
|
print "<fieldset>"; |
|
print "<label>".__('Full name:')."</label>"; |
|
print "<input dojoType='dijit.form.ValidationTextBox' name='full_name' required='1' value='$full_name'>"; |
|
print "</fieldset>"; |
|
|
|
print "<fieldset>"; |
|
print "<label>".__('E-mail:')."</label>"; |
|
print "<input dojoType='dijit.form.ValidationTextBox' name='email' required='1' value='$email'>"; |
|
print "</fieldset>"; |
|
|
|
if (!SINGLE_USER_MODE && !$_SESSION["hide_hello"]) { |
|
|
|
$access_level = $row["access_level"]; |
|
print "<fieldset>"; |
|
print "<label>".__('Access level:')."</label>"; |
|
print $access_level_names[$access_level]; |
|
print "</fieldset>"; |
|
} |
|
|
|
print_hidden("op", "pref-prefs"); |
|
print_hidden("method", "changeemail"); |
|
|
|
print "<hr/>"; |
|
|
|
print "<button dojoType='dijit.form.Button' type='submit' class='alt-primary'>". |
|
__("Save data")."</button>"; |
|
|
|
print "</form>"; |
|
|
|
print "</div>"; # content pane |
|
|
|
if ($_SESSION["auth_module"]) { |
|
$authenticator = PluginHost::getInstance()->get_plugin($_SESSION["auth_module"]); |
|
} else { |
|
$authenticator = false; |
|
} |
|
|
|
print "<div dojoType='dijit.layout.ContentPane' title=\"" . __('Password') . "\">"; |
|
|
|
if ($authenticator && method_exists($authenticator, "change_password")) { |
|
|
|
print "<div style='display : none' id='pwd_change_infobox'></div>"; |
|
|
|
print "<form dojoType='dijit.form.Form'>"; |
|
|
|
print "<script type='dojo/method' event='onSubmit' args='evt'> |
|
evt.preventDefault(); |
|
if (this.validate()) { |
|
Notify.progress('Changing password...', true); |
|
|
|
new Ajax.Request('backend.php', { |
|
parameters: dojo.objectToQuery(this.getValues()), |
|
onComplete: function(transport) { |
|
Notify.close(); |
|
if (transport.responseText.indexOf('ERROR: ') == 0) { |
|
|
|
$('pwd_change_infobox').innerHTML = |
|
transport.responseText.replace('ERROR: ', ''); |
|
|
|
} else { |
|
$('pwd_change_infobox').innerHTML = |
|
transport.responseText.replace('ERROR: ', ''); |
|
|
|
var warn = $('default_pass_warning'); |
|
if (warn) Element.hide(warn); |
|
} |
|
|
|
new Effect.Appear('pwd_change_infobox'); |
|
|
|
}}); |
|
this.reset(); |
|
} |
|
</script>"; |
|
|
|
if ($otp_enabled) { |
|
print_notice(__("Changing your current password will disable OTP.")); |
|
} |
|
|
|
print "<fieldset>"; |
|
print "<label>" . __("Old password:") . "</label>"; |
|
print "<input dojoType='dijit.form.ValidationTextBox' type='password' required='1' name='old_password'>"; |
|
print "</fieldset>"; |
|
|
|
print "<fieldset>"; |
|
print "<label>" . __("New password:") . "</label>"; |
|
print "<input dojoType='dijit.form.ValidationTextBox' type='password' required='1' name='new_password'>"; |
|
print "</fieldset>"; |
|
|
|
print "<fieldset>"; |
|
print "<label>" . __("Confirm password:") . "</label>"; |
|
print "<input dojoType='dijit.form.ValidationTextBox' type='password' required='1' name='confirm_password'>"; |
|
print "</fieldset>"; |
|
|
|
print_hidden("op", "pref-prefs"); |
|
print_hidden("method", "changepassword"); |
|
|
|
print "<hr/>"; |
|
|
|
print "<button dojoType='dijit.form.Button' type='submit' class='alt-primary'>" . |
|
__("Change password") . "</button>"; |
|
|
|
print "</form>"; |
|
|
|
} else { |
|
print_notice(T_sprintf("Authentication module used for this session (<b>%s</b>) does not provide an ability to set passwords.", |
|
$_SESSION["auth_module"])); |
|
} |
|
|
|
print "</div>"; # content pane |
|
|
|
print "<div dojoType='dijit.layout.ContentPane' title=\"" . __('App passwords') . "\">"; |
|
|
|
print_notice("You can create separate passwords for API clients. Using one is required if you enable OTP."); |
|
|
|
print "<div id='app_passwords_holder'>"; |
|
$this->appPasswordList(); |
|
print "</div>"; |
|
|
|
print "<hr>"; |
|
|
|
print "<button style='float : left' class='alt-primary' dojoType='dijit.form.Button' |
|
onclick=\"Helpers.AppPasswords.generate()\">" . |
|
__('Generate new password') . "</button> "; |
|
|
|
print "<button style='float : left' class='alt-danger' dojoType='dijit.form.Button' |
|
onclick=\"Helpers.AppPasswords.removeSelected()\">" . |
|
__('Remove selected passwords') . "</button>"; |
|
|
|
print "</div>"; # content pane |
|
|
|
print "<div dojoType='dijit.layout.ContentPane' title=\"".__('One time passwords / Authenticator')."\">"; |
|
|
|
if ($_SESSION["auth_module"] == "auth_internal") { |
|
|
|
if ($otp_enabled) { |
|
|
|
print_warning("One time passwords are currently enabled. Enter your current password below to disable."); |
|
|
|
print "<form dojoType='dijit.form.Form'>"; |
|
|
|
print "<script type='dojo/method' event='onSubmit' args='evt'> |
|
evt.preventDefault(); |
|
if (this.validate()) { |
|
Notify.progress('Disabling OTP', true); |
|
|
|
new Ajax.Request('backend.php', { |
|
parameters: dojo.objectToQuery(this.getValues()), |
|
onComplete: function(transport) { |
|
Notify.close(); |
|
if (transport.responseText.indexOf('ERROR: ') == 0) { |
|
Notify.error(transport.responseText.replace('ERROR: ', '')); |
|
} else { |
|
window.location.reload(); |
|
} |
|
}}); |
|
this.reset(); |
|
} |
|
</script>"; |
|
|
|
print "<fieldset>"; |
|
print "<label>".__("Your password:")."</label>"; |
|
print "<input dojoType='dijit.form.ValidationTextBox' type='password' required='1' name='password'>"; |
|
print "</fieldset>"; |
|
|
|
print_hidden("op", "pref-prefs"); |
|
print_hidden("method", "otpdisable"); |
|
|
|
print "<hr/>"; |
|
|
|
print "<button dojoType='dijit.form.Button' type='submit'>". |
|
__("Disable OTP")."</button>"; |
|
|
|
print "</form>"; |
|
|
|
} else { |
|
|
|
print_warning("You will need a compatible Authenticator to use this. Changing your password would automatically disable OTP."); |
|
print_notice("You will need to generate app passwords for the API clients if you enable OTP."); |
|
|
|
if (function_exists("imagecreatefromstring")) { |
|
print "<h3>" . __("Scan the following code by the Authenticator application or copy the key manually") . "</h3>"; |
|
|
|
$csrf_token = $_SESSION["csrf_token"]; |
|
print "<img alt='otp qr-code' src='backend.php?op=pref-prefs&method=otpqrcode&csrf_token=$csrf_token'>"; |
|
} else { |
|
print_error("PHP GD functions are required to generate QR codes."); |
|
print "<h3>" . __("Use the following OTP key with a compatible Authenticator application") . "</h3>"; |
|
} |
|
|
|
print "<form dojoType='dijit.form.Form' id='changeOtpForm'>"; |
|
|
|
$otp_secret = $this->otpsecret(); |
|
|
|
print "<fieldset>"; |
|
print "<label>".__("OTP Key:")."</label>"; |
|
print "<input dojoType='dijit.form.ValidationTextBox' disabled='disabled' value='$otp_secret' size='32'>"; |
|
print "</fieldset>"; |
|
|
|
print_hidden("op", "pref-prefs"); |
|
print_hidden("method", "otpenable"); |
|
|
|
print "<script type='dojo/method' event='onSubmit' args='evt'> |
|
evt.preventDefault(); |
|
if (this.validate()) { |
|
Notify.progress('Saving data...', true); |
|
|
|
new Ajax.Request('backend.php', { |
|
parameters: dojo.objectToQuery(this.getValues()), |
|
onComplete: function(transport) { |
|
Notify.close(); |
|
if (transport.responseText.indexOf('ERROR:') == 0) { |
|
Notify.error(transport.responseText.replace('ERROR:', '')); |
|
} else { |
|
window.location.reload(); |
|
} |
|
} }); |
|
|
|
} |
|
</script>"; |
|
|
|
print "<fieldset>"; |
|
print "<label>".__("Your password:")."</label>"; |
|
print "<input dojoType='dijit.form.ValidationTextBox' type='password' required='1' |
|
name='password'>"; |
|
print "</fieldset>"; |
|
|
|
print "<fieldset>"; |
|
print "<label>".__("One time password:")."</label>"; |
|
print "<input dojoType='dijit.form.ValidationTextBox' autocomplete='off' |
|
required='1' name='otp'>"; |
|
print "</fieldset>"; |
|
|
|
print "<hr/>"; |
|
print "<button dojoType='dijit.form.Button' type='submit' class='alt-primary'>". |
|
__("Enable OTP")."</button>"; |
|
|
|
print "</form>"; |
|
|
|
} |
|
|
|
} else { |
|
print_notice("OTP is only available when using <b>auth_internal</b> authentication module."); |
|
} |
|
|
|
print "</div>"; # content pane |
|
|
|
print "</div>"; # tab container |
|
|
|
PluginHost::getInstance()->run_hooks(PluginHost::HOOK_PREFS_TAB_SECTION, |
|
"hook_prefs_tab_section", "prefPrefsAuth"); |
|
|
|
print "</div>"; #pane |
|
|
|
print "<div dojoType='dijit.layout.AccordionPane' selected='true' |
|
title=\"<i class='material-icons'>settings</i> ".__('Preferences')."\">"; |
|
|
|
print "<form dojoType='dijit.form.Form' id='changeSettingsForm'>"; |
|
|
|
print "<script type='dojo/method' event='onSubmit' args='evt, quit'> |
|
if (evt) evt.preventDefault(); |
|
if (this.validate()) { |
|
console.log(dojo.objectToQuery(this.getValues())); |
|
|
|
new Ajax.Request('backend.php', { |
|
parameters: dojo.objectToQuery(this.getValues()), |
|
onComplete: function(transport) { |
|
var msg = transport.responseText; |
|
if (quit) { |
|
document.location.href = 'index.php'; |
|
} else { |
|
if (msg == 'PREFS_NEED_RELOAD') { |
|
window.location.reload(); |
|
} else { |
|
Notify.info(msg); |
|
} |
|
} |
|
} }); |
|
} |
|
</script>"; |
|
|
|
print '<div dojoType="dijit.layout.BorderContainer" gutters="false">'; |
|
|
|
print '<div dojoType="dijit.layout.ContentPane" region="center" style="overflow-y : auto">'; |
|
|
|
$profile = $_SESSION["profile"]; |
|
|
|
if ($profile) { |
|
print_notice(__("Some preferences are only available in default profile.")); |
|
|
|
initialize_user_prefs($_SESSION["uid"], $profile); |
|
} else { |
|
initialize_user_prefs($_SESSION["uid"]); |
|
} |
|
|
|
$prefs_available = []; |
|
|
|
$sth = $this->pdo->prepare("SELECT DISTINCT |
|
ttrss_user_prefs.pref_name,value,type_name, |
|
ttrss_prefs_sections.order_id, |
|
def_value,section_id |
|
FROM ttrss_prefs,ttrss_prefs_types,ttrss_prefs_sections,ttrss_user_prefs |
|
WHERE type_id = ttrss_prefs_types.id AND |
|
(profile = :profile OR (:profile IS NULL AND profile IS NULL)) AND |
|
section_id = ttrss_prefs_sections.id AND |
|
ttrss_user_prefs.pref_name = ttrss_prefs.pref_name AND |
|
owner_uid = :uid |
|
ORDER BY ttrss_prefs_sections.order_id,pref_name"); |
|
$sth->execute([":uid" => $_SESSION['uid'], ":profile" => $profile]); |
|
|
|
$listed_boolean_prefs = []; |
|
|
|
while ($line = $sth->fetch()) { |
|
|
|
if (in_array($line["pref_name"], $this->pref_blacklist)) { |
|
continue; |
|
} |
|
|
|
if ($profile && in_array($line["pref_name"], $this->profile_blacklist)) { |
|
continue; |
|
} |
|
|
|
$pref_name = $line["pref_name"]; |
|
$short_desc = $this->getShortDesc($pref_name); |
|
|
|
if (!$short_desc) |
|
continue; |
|
|
|
$prefs_available[$pref_name] = [ |
|
'type_name' => $line["type_name"], |
|
'value' => $line['value'], |
|
'help_text' => $this->getHelpText($pref_name), |
|
'short_desc' => $short_desc |
|
]; |
|
} |
|
|
|
foreach (array_keys($this->pref_item_map) as $section) { |
|
|
|
print "<h2>$section</h2>"; |
|
|
|
foreach ($this->pref_item_map[$section] as $pref_name) { |
|
|
|
if ($pref_name == 'BLOCK_SEPARATOR' && !$profile) { |
|
print "<hr/>"; |
|
continue; |
|
} |
|
|
|
if ($pref_name == "DEFAULT_SEARCH_LANGUAGE" && DB_TYPE != "pgsql") { |
|
continue; |
|
} |
|
|
|
if ($item = $prefs_available[$pref_name]) { |
|
|
|
print "<fieldset class='prefs'>"; |
|
|
|
print "<label for='CB_$pref_name'>"; |
|
print $item['short_desc'] . ":"; |
|
print "</label>"; |
|
|
|
$value = $item['value']; |
|
$type_name = $item['type_name']; |
|
|
|
if ($pref_name == "USER_LANGUAGE") { |
|
print_select_hash($pref_name, $value, get_translations(), |
|
"style='width : 220px; margin : 0px' dojoType='fox.form.Select'"); |
|
|
|
} else if ($pref_name == "USER_TIMEZONE") { |
|
|
|
$timezones = explode("\n", file_get_contents("lib/timezones.txt")); |
|
|
|
print_select($pref_name, $value, $timezones, 'dojoType="dijit.form.FilteringSelect"'); |
|
} else if ($pref_name == "USER_CSS_THEME") { |
|
|
|
$themes = array_merge(glob("themes/*.php"), glob("themes/*.css"), glob("themes.local/*.css")); |
|
$themes = array_map("basename", $themes); |
|
$themes = array_filter($themes, "theme_exists"); |
|
asort($themes); |
|
|
|
if (!theme_exists($value)) $value = ""; |
|
|
|
print "<select name='$pref_name' id='$pref_name' dojoType='fox.form.Select'>"; |
|
|
|
$issel = $value == "" ? "selected='selected'" : ""; |
|
print "<option $issel value=''>".__("default")."</option>"; |
|
|
|
foreach ($themes as $theme) { |
|
$issel = $value == $theme ? "selected='selected'" : ""; |
|
print "<option $issel value='$theme'>$theme</option>"; |
|
} |
|
|
|
print "</select>"; |
|
|
|
print " <button dojoType=\"dijit.form.Button\" class='alt-info' |
|
onclick=\"Helpers.customizeCSS()\">" . __('Customize') . "</button>"; |
|
|
|
print " <button dojoType='dijit.form.Button' onclick='window.open(\"https://tt-rss.org/wiki/Themes\")'> |
|
<i class='material-icons'>open_in_new</i> ".__("More themes...")."</button>"; |
|
|
|
} else if ($pref_name == "DEFAULT_UPDATE_INTERVAL") { |
|
|
|
global $update_intervals_nodefault; |
|
|
|
print_select_hash($pref_name, $value, $update_intervals_nodefault, |
|
'dojoType="fox.form.Select"'); |
|
} else if ($pref_name == "DEFAULT_SEARCH_LANGUAGE") { |
|
|
|
print_select($pref_name, $value, Pref_Feeds::get_ts_languages(), |
|
'dojoType="fox.form.Select"'); |
|
|
|
} else if ($type_name == "bool") { |
|
|
|
array_push($listed_boolean_prefs, $pref_name); |
|
|
|
$checked = ($value == "true") ? "checked=\"checked\"" : ""; |
|
|
|
if ($pref_name == "PURGE_UNREAD_ARTICLES" && FORCE_ARTICLE_PURGE != 0) { |
|
$disabled = "disabled=\"1\""; |
|
$checked = "checked=\"checked\""; |
|
} else { |
|
$disabled = ""; |
|
} |
|
|
|
print "<input type='checkbox' name='$pref_name' $checked $disabled |
|
dojoType='dijit.form.CheckBox' id='CB_$pref_name' value='1'>"; |
|
|
|
} else if (array_search($pref_name, array('FRESH_ARTICLE_MAX_AGE', |
|
'PURGE_OLD_DAYS', 'LONG_DATE_FORMAT', 'SHORT_DATE_FORMAT')) !== false) { |
|
|
|
$regexp = ($type_name == 'integer') ? 'regexp="^\d*$"' : ''; |
|
|
|
if ($pref_name == "PURGE_OLD_DAYS" && FORCE_ARTICLE_PURGE != 0) { |
|
$disabled = "disabled='1'"; |
|
$value = FORCE_ARTICLE_PURGE; |
|
} else { |
|
$disabled = ""; |
|
} |
|
|
|
if ($type_name == 'integer') |
|
print "<input dojoType=\"dijit.form.NumberSpinner\" |
|
required='1' $disabled |
|
name=\"$pref_name\" value=\"$value\">"; |
|
else |
|
print "<input dojoType=\"dijit.form.TextBox\" |
|
required='1' $regexp $disabled |
|
name=\"$pref_name\" value=\"$value\">"; |
|
|
|
} else if ($pref_name == "SSL_CERT_SERIAL") { |
|
|
|
print "<input dojoType='dijit.form.ValidationTextBox' |
|
id='SSL_CERT_SERIAL' readonly='1' |
|
name=\"$pref_name\" value=\"$value\">"; |
|
|
|
$cert_serial = htmlspecialchars(get_ssl_certificate_id()); |
|
$has_serial = ($cert_serial) ? "false" : "true"; |
|
|
|
print "<button dojoType='dijit.form.Button' disabled='$has_serial' |
|
onclick=\"dijit.byId('SSL_CERT_SERIAL').attr('value', '$cert_serial')\">" . |
|
__('Register') . "</button>"; |
|
|
|
print "<button dojoType='dijit.form.Button' class='alt-danger' |
|
onclick=\"dijit.byId('SSL_CERT_SERIAL').attr('value', '')\">" . |
|
__('Clear') . "</button>"; |
|
|
|
print "<button dojoType='dijit.form.Button' class='alt-info' |
|
onclick='window.open(\"https://tt-rss.org/wiki/SSL%20Certificate%20Authentication\")'> |
|
<i class='material-icons'>help</i> ".__("More info...")."</button>"; |
|
|
|
} else if ($pref_name == 'DIGEST_PREFERRED_TIME') { |
|
print "<input dojoType=\"dijit.form.ValidationTextBox\" |
|
id=\"$pref_name\" regexp=\"[012]?\d:\d\d\" placeHolder=\"12:00\" |
|
name=\"$pref_name\" value=\"$value\">"; |
|
|
|
$item['help_text'] .= ". " . T_sprintf("Current server time: %s", date("H:i")); |
|
} else { |
|
$regexp = ($type_name == 'integer') ? 'regexp="^\d*$"' : ''; |
|
|
|
print "<input dojoType=\"dijit.form.ValidationTextBox\" $regexp name=\"$pref_name\" value=\"$value\">"; |
|
} |
|
|
|
if ($item['help_text']) |
|
print "<div class='help-text text-muted'><label for='CB_$pref_name'>".$item['help_text']."</label></div>"; |
|
|
|
print "</fieldset>"; |
|
} |
|
} |
|
} |
|
|
|
$listed_boolean_prefs = htmlspecialchars(join(",", $listed_boolean_prefs)); |
|
|
|
print_hidden("boolean_prefs", "$listed_boolean_prefs"); |
|
|
|
PluginHost::getInstance()->run_hooks(PluginHost::HOOK_PREFS_TAB_SECTION, |
|
"hook_prefs_tab_section", "prefPrefsPrefsInside"); |
|
|
|
print '</div>'; # inside pane |
|
print '<div dojoType="dijit.layout.ContentPane" region="bottom">'; |
|
|
|
print_hidden("op", "pref-prefs"); |
|
print_hidden("method", "saveconfig"); |
|
|
|
print "<div dojoType=\"fox.form.ComboButton\" type=\"submit\" class=\"alt-primary\"> |
|
<span>".__('Save configuration')."</span> |
|
<div dojoType=\"dijit.DropDownMenu\"> |
|
<div dojoType=\"dijit.MenuItem\" |
|
onclick=\"dijit.byId('changeSettingsForm').onSubmit(null, true)\">". |
|
__("Save and exit preferences")."</div> |
|
</div> |
|
</div>"; |
|
|
|
print "<button dojoType=\"dijit.form.Button\" onclick=\"return Helpers.editProfiles()\">". |
|
__('Manage profiles')."</button> "; |
|
|
|
print "<button dojoType=\"dijit.form.Button\" class=\"alt-danger\" onclick=\"return Helpers.confirmReset()\">". |
|
__('Reset to defaults')."</button>"; |
|
|
|
print " "; |
|
|
|
PluginHost::getInstance()->run_hooks(PluginHost::HOOK_PREFS_TAB_SECTION, |
|
"hook_prefs_tab_section", "prefPrefsPrefsOutside"); |
|
|
|
print "</form>"; |
|
print '</div>'; # inner pane |
|
print '</div>'; # border container |
|
|
|
print "</div>"; #pane |
|
|
|
print "<div dojoType=\"dijit.layout.AccordionPane\" |
|
title=\"<i class='material-icons'>extension</i> ".__('Plugins')."\">"; |
|
|
|
print "<form dojoType=\"dijit.form.Form\" id=\"changePluginsForm\">"; |
|
|
|
print "<script type=\"dojo/method\" event=\"onSubmit\" args=\"evt\"> |
|
evt.preventDefault(); |
|
if (this.validate()) { |
|
Notify.progress('Saving data...', true); |
|
|
|
new Ajax.Request('backend.php', { |
|
parameters: dojo.objectToQuery(this.getValues()), |
|
onComplete: function(transport) { |
|
Notify.close(); |
|
if (confirm(__('Selected plugins have been enabled. Reload?'))) { |
|
window.location.reload(); |
|
} |
|
} }); |
|
|
|
} |
|
</script>"; |
|
|
|
print_hidden("op", "pref-prefs"); |
|
print_hidden("method", "setplugins"); |
|
|
|
print '<div dojoType="dijit.layout.BorderContainer" gutters="false">'; |
|
print '<div dojoType="dijit.layout.ContentPane" region="center" style="overflow-y : auto">'; |
|
|
|
if (ini_get("open_basedir") && function_exists("curl_init") && !defined("NO_CURL")) { |
|
print_warning("Your PHP configuration has open_basedir restrictions enabled. Some plugins relying on CURL for functionality may not work correctly."); |
|
} |
|
|
|
$feed_handler_whitelist = [ "Af_Comics" ]; |
|
|
|
$feed_handlers = array_merge( |
|
PluginHost::getInstance()->get_hooks(PluginHost::HOOK_FEED_FETCHED), |
|
PluginHost::getInstance()->get_hooks(PluginHost::HOOK_FEED_PARSED), |
|
PluginHost::getInstance()->get_hooks(PluginHost::HOOK_FETCH_FEED)); |
|
|
|
$feed_handlers = array_filter($feed_handlers, function($plugin) use ($feed_handler_whitelist) { |
|
return in_array(get_class($plugin), $feed_handler_whitelist) === FALSE; }); |
|
|
|
if (count($feed_handlers) > 0) { |
|
print_error( |
|
T_sprintf("The following plugins use per-feed content hooks. This may cause excessive data usage and origin server load resulting in a ban of your instance: <b>%s</b>" , |
|
implode(", ", array_map(function($plugin) { return get_class($plugin); }, $feed_handlers)) |
|
) . " (<a href='https://tt-rss.org/wiki/FeedHandlerPlugins' target='_blank'>".__("More info...")."</a>)" |
|
); |
|
} |
|
|
|
print "<h2>".__("System plugins")."</h2>"; |
|
print_notice("System plugins are enabled in <strong>config.php</strong> for all users."); |
|
|
|
$system_enabled = array_map("trim", explode(",", PLUGINS)); |
|
$user_enabled = array_map("trim", explode(",", get_pref("_ENABLED_PLUGINS"))); |
|
|
|
$tmppluginhost = new PluginHost(); |
|
$tmppluginhost->load_all($tmppluginhost::KIND_ALL, $_SESSION["uid"], true); |
|
$tmppluginhost->load_data(true); |
|
|
|
foreach ($tmppluginhost->get_plugins() as $name => $plugin) { |
|
$about = $plugin->about(); |
|
|
|
if ($about[3]) { |
|
if (in_array($name, $system_enabled)) { |
|
$checked = "checked='1'"; |
|
} else { |
|
$checked = ""; |
|
} |
|
|
|
print "<fieldset class='prefs plugin'> |
|
<label>$name:</label> |
|
<label class='checkbox description text-muted' id='PLABEL-$name'> |
|
<input disabled='1' |
|
dojoType='dijit.form.CheckBox' $checked type='checkbox'> |
|
".htmlspecialchars($about[1]). "</label>"; |
|
|
|
if (@$about[4]) { |
|
print "<button dojoType='dijit.form.Button' class='alt-info' |
|
onclick='window.open(\"".htmlspecialchars($about[4])."\")'> |
|
<i class='material-icons'>open_in_new</i> ".__("More info...")."</button>"; |
|
} |
|
|
|
print "<div dojoType='dijit.Tooltip' connectId='PLABEL-$name' position='after'>". |
|
htmlspecialchars(T_sprintf("v%.2f, by %s", $about[0], $about[2])). |
|
"</div>"; |
|
|
|
print "</fieldset>"; |
|
|
|
} |
|
} |
|
|
|
print "<h2>".__("User plugins")."</h2>"; |
|
|
|
foreach ($tmppluginhost->get_plugins() as $name => $plugin) { |
|
$about = $plugin->about(); |
|
|
|
if (!$about[3]) { |
|
|
|
$checked = ""; |
|
$disabled = ""; |
|
|
|
if (in_array($name, $system_enabled)) { |
|
$checked = "checked='1'"; |
|
$disabled = "disabled='1'"; |
|
} else if (in_array($name, $user_enabled)) { |
|
$checked = "checked='1'"; |
|
} |
|
|
|
print "<fieldset class='prefs plugin'> |
|
<label>$name:</label> |
|
<label class='checkbox description text-muted' id='PLABEL-$name'> |
|
<input name='plugins[]' value='$name' dojoType='dijit.form.CheckBox' $checked $disabled type='checkbox'> |
|
".htmlspecialchars($about[1])."</label>"; |
|
|
|
if (count($tmppluginhost->get_all($plugin)) > 0) { |
|
if (in_array($name, $system_enabled) || in_array($name, $user_enabled)) { |
|
print " <button dojoType='dijit.form.Button' |
|
onclick=\"Helpers.clearPluginData('$name')\"> |
|
<i class='material-icons'>clear</i> ".__("Clear data")."</button>"; |
|
} |
|
} |
|
|
|
if (@$about[4]) { |
|
print " <button dojoType='dijit.form.Button' class='alt-info' |
|
onclick='window.open(\"".htmlspecialchars($about[4])."\")'> |
|
<i class='material-icons'>open_in_new</i> ".__("More info...")."</button>"; |
|
} |
|
|
|
print "<div dojoType='dijit.Tooltip' connectId='PLABEL-$name' position='after'>". |
|
htmlspecialchars(T_sprintf("v%.2f, by %s", $about[0], $about[2])). |
|
"</div>"; |
|
|
|
print "</fieldset>"; |
|
} |
|
} |
|
|
|
print "</div>"; #content-pane |
|
print '<div dojoType="dijit.layout.ContentPane" region="bottom">'; |
|
|
|
print "<button dojoType='dijit.form.Button' style='float : left' class='alt-info' onclick='window.open(\"https://tt-rss.org/wiki/Plugins\")'> |
|
<i class='material-icons'>help</i> ".__("More info...")."</button>"; |
|
|
|
print "<button dojoType='dijit.form.Button' class='alt-primary' type='submit'>". |
|
__("Enable selected plugins")."</button>"; |
|
print "</div>"; #pane |
|
|
|
print "</div>"; #pane |
|
print "</div>"; #border-container |
|
|
|
print "</form>"; |
|
|
|
PluginHost::getInstance()->run_hooks(PluginHost::HOOK_PREFS_TAB, |
|
"hook_prefs_tab", "prefPrefs"); |
|
|
|
print "</div>"; #container |
|
|
|
} |
|
|
|
function toggleAdvanced() { |
|
$_SESSION["prefs_show_advanced"] = !$_SESSION["prefs_show_advanced"]; |
|
} |
|
|
|
function otpsecret() { |
|
$sth = $this->pdo->prepare("SELECT salt, otp_enabled |
|
FROM ttrss_users |
|
WHERE id = ?"); |
|
$sth->execute([$_SESSION['uid']]); |
|
|
|
if ($row = $sth->fetch()) { |
|
$otp_enabled = sql_bool_to_bool($row["otp_enabled"]); |
|
|
|
if (!$otp_enabled) { |
|
$base32 = new \OTPHP\Base32(); |
|
$secret = $base32->encode(mb_substr(sha1($row["salt"]), 0, 12), false); |
|
|
|
return $secret; |
|
} |
|
} |
|
|
|
return false; |
|
} |
|
|
|
function otpqrcode() { |
|
require_once "lib/phpqrcode/phpqrcode.php"; |
|
|
|
$sth = $this->pdo->prepare("SELECT login |
|
FROM ttrss_users |
|
WHERE id = ?"); |
|
$sth->execute([$_SESSION['uid']]); |
|
|
|
if ($row = $sth->fetch()) { |
|
$secret = $this->otpsecret(); |
|
$login = $row['login']; |
|
|
|
if ($secret) { |
|
QRcode::png("otpauth://totp/".urlencode($login). |
|
"?secret=$secret&issuer=".urlencode("Tiny Tiny RSS")); |
|
} |
|
} |
|
} |
|
|
|
function otpenable() { |
|
|
|
$password = clean($_REQUEST["password"]); |
|
$otp = clean($_REQUEST["otp"]); |
|
|
|
$authenticator = PluginHost::getInstance()->get_plugin($_SESSION["auth_module"]); |
|
|
|
if ($authenticator->check_password($_SESSION["uid"], $password)) { |
|
|
|
$secret = $this->otpsecret(); |
|
|
|
if ($secret) { |
|
|
|
$base32 = new \OTPHP\Base32(); |
|
|
|
$topt = new \OTPHP\TOTP($secret); |
|
|
|
$otp_check = $topt->now(); |
|
|
|
if ($otp == $otp_check) { |
|
$sth = $this->pdo->prepare("UPDATE ttrss_users |
|
SET otp_enabled = true WHERE id = ?"); |
|
|
|
$sth->execute([$_SESSION['uid']]); |
|
|
|
print "OK"; |
|
} else { |
|
print "ERROR:".__("Incorrect one time password"); |
|
} |
|
} |
|
|
|
} else { |
|
print "ERROR:".__("Incorrect password"); |
|
} |
|
|
|
} |
|
|
|
static function isdefaultpassword() { |
|
$authenticator = PluginHost::getInstance()->get_plugin($_SESSION["auth_module"]); |
|
|
|
if ($authenticator && |
|
method_exists($authenticator, "check_password") && |
|
$authenticator->check_password($_SESSION["uid"], "password")) { |
|
|
|
return true; |
|
} |
|
|
|
return false; |
|
} |
|
|
|
function otpdisable() { |
|
$password = clean($_REQUEST["password"]); |
|
|
|
$authenticator = PluginHost::getInstance()->get_plugin($_SESSION["auth_module"]); |
|
|
|
if ($authenticator->check_password($_SESSION["uid"], $password)) { |
|
|
|
$sth = $this->pdo->prepare("SELECT email, login FROM ttrss_users WHERE id = ?"); |
|
$sth->execute([$_SESSION['uid']]); |
|
|
|
if ($row = $sth->fetch()) { |
|
$mailer = new Mailer(); |
|
|
|
$tpl = new Templator(); |
|
|
|
$tpl->readTemplateFromFile("otp_disabled_template.txt"); |
|
|
|
$tpl->setVariable('LOGIN', $row["login"]); |
|
$tpl->setVariable('TTRSS_HOST', SELF_URL_PATH); |
|
|
|
$tpl->addBlock('message'); |
|
|
|
$tpl->generateOutputToString($message); |
|
|
|
$mailer->mail(["to_name" => $row["login"], |
|
"to_address" => $row["email"], |
|
"subject" => "[tt-rss] OTP change notification", |
|
"message" => $message]); |
|
} |
|
|
|
$sth = $this->pdo->prepare("UPDATE ttrss_users SET otp_enabled = false WHERE |
|
id = ?"); |
|
$sth->execute([$_SESSION['uid']]); |
|
|
|
print "OK"; |
|
} else { |
|
print "ERROR: ".__("Incorrect password"); |
|
} |
|
|
|
} |
|
|
|
function setplugins() { |
|
if (is_array(clean($_REQUEST["plugins"]))) |
|
$plugins = join(",", clean($_REQUEST["plugins"])); |
|
else |
|
$plugins = ""; |
|
|
|
set_pref("_ENABLED_PLUGINS", $plugins); |
|
} |
|
|
|
function clearplugindata() { |
|
$name = clean($_REQUEST["name"]); |
|
|
|
PluginHost::getInstance()->clear_data(PluginHost::getInstance()->get_plugin($name)); |
|
} |
|
|
|
function customizeCSS() { |
|
$value = get_pref("USER_STYLESHEET"); |
|
$value = str_replace("<br/>", "\n", $value); |
|
|
|
print_notice(__("You can override colors, fonts and layout of your currently selected theme with custom CSS declarations here.")); |
|
|
|
print_hidden("op", "rpc"); |
|
print_hidden("method", "setpref"); |
|
print_hidden("key", "USER_STYLESHEET"); |
|
|
|
print "<div id='css_edit_apply_msg' style='display : none'>"; |
|
print_warning(__("User CSS has been applied, you might need to reload the page to see all changes.")); |
|
print "</div>"; |
|
|
|
print "<textarea class='panel user-css-editor' dojoType='dijit.form.SimpleTextarea' |
|
style='font-size : 12px;' name='value'>$value</textarea>"; |
|
|
|
print "<footer>"; |
|
print "<button dojoType='dijit.form.Button' class='alt-success' |
|
onclick=\"dijit.byId('cssEditDlg').apply()\">".__('Apply')."</button> "; |
|
print "<button dojoType='dijit.form.Button' class='alt-primary' |
|
onclick=\"dijit.byId('cssEditDlg').execute()\">".__('Save and reload')."</button> "; |
|
print "<button dojoType='dijit.form.Button' |
|
onclick=\"dijit.byId('cssEditDlg').hide()\">".__('Cancel')."</button>"; |
|
print "</footer>"; |
|
|
|
} |
|
|
|
function editPrefProfiles() { |
|
print "<div dojoType='fox.Toolbar'>"; |
|
|
|
print "<div dojoType='fox.form.DropDownButton'>". |
|
"<span>" . __('Select')."</span>"; |
|
print "<div dojoType='dijit.Menu' style='display: none'>"; |
|
print "<div onclick=\"Tables.select('pref-profiles-list', true)\" |
|
dojoType='dijit.MenuItem'>".__('All')."</div>"; |
|
print "<div onclick=\"Tables.select('pref-profiles-list', false)\" |
|
dojoType='dijit.MenuItem'>".__('None')."</div>"; |
|
print "</div></div>"; |
|
|
|
print "<div style='float : right'>"; |
|
|
|
print "<input name='newprofile' dojoType='dijit.form.ValidationTextBox' |
|
required='1'> |
|
<button dojoType='dijit.form.Button' |
|
onclick=\"dijit.byId('profileEditDlg').addProfile()\">". |
|
__('Create profile')."</button></div>"; |
|
|
|
print "</div>"; |
|
|
|
$sth = $this->pdo->prepare("SELECT title,id FROM ttrss_settings_profiles |
|
WHERE owner_uid = ? ORDER BY title"); |
|
$sth->execute([$_SESSION['uid']]); |
|
|
|
print "<div class='panel panel-scrollable'>"; |
|
|
|
print "<form id='profile_edit_form' onsubmit='return false'>"; |
|
|
|
print "<table width='100%' id='pref-profiles-list'>"; |
|
|
|
print "<tr>"; # data-row-id='0' <-- no point, shouldn't be removed |
|
|
|
print "<td><input onclick='Tables.onRowChecked(this);' dojoType='dijit.form.CheckBox' type='checkbox'></td>"; |
|
|
|
if (!$_SESSION["profile"]) { |
|
$is_active = __("(active)"); |
|
} else { |
|
$is_active = ""; |
|
} |
|
|
|
print "<td width='100%'><span>" . __("Default profile") . " $is_active</span></td>"; |
|
|
|
print "</tr>"; |
|
|
|
while ($line = $sth->fetch()) { |
|
|
|
$profile_id = $line["id"]; |
|
|
|
print "<tr data-row-id='$profile_id'>"; |
|
|
|
$edit_title = htmlspecialchars($line["title"]); |
|
|
|
print "<td><input onclick='Tables.onRowChecked(this);' dojoType='dijit.form.CheckBox' type='checkbox'></td>"; |
|
|
|
if ($_SESSION["profile"] == $line["id"]) { |
|
$is_active = __("(active)"); |
|
} else { |
|
$is_active = ""; |
|
} |
|
|
|
print "<td><span dojoType='dijit.InlineEditBox' |
|
width='300px' autoSave='false' |
|
profile-id='$profile_id'>" . $edit_title . |
|
"<script type='dojo/method' event='onChange' args='item'> |
|
var elem = this; |
|
dojo.xhrPost({ |
|
url: 'backend.php', |
|
content: {op: 'rpc', method: 'saveprofile', |
|
value: this.value, |
|
id: this.srcNodeRef.getAttribute('profile-id')}, |
|
load: function(response) { |
|
elem.attr('value', response); |
|
} |
|
}); |
|
</script> |
|
</span> $is_active</td>"; |
|
|
|
print "</tr>"; |
|
} |
|
|
|
print "</table>"; |
|
print "</form>"; |
|
print "</div>"; |
|
|
|
print "<footer> |
|
<button style='float : left' class='alt-danger' dojoType=\"dijit.form.Button\" onclick=\"dijit.byId('profileEditDlg').removeSelected()\">". |
|
__('Remove selected profiles')."</button> |
|
<button dojoType='dijit.form.Button' class='alt-primary' type='submit' onclick=\"dijit.byId('profileEditDlg').activateProfile()\">". |
|
__('Activate profile')."</button> |
|
<button dojoType='dijit.form.Button' onclick=\"dijit.byId('profileEditDlg').hide()\">". |
|
__('Cancel')."</button>"; |
|
print "</footer>"; |
|
|
|
} |
|
|
|
private function getShortDesc($pref_name) { |
|
if (isset($this->pref_help[$pref_name])) { |
|
return $this->pref_help[$pref_name][0]; |
|
} |
|
return ""; |
|
} |
|
|
|
private function getHelpText($pref_name) { |
|
if (isset($this->pref_help[$pref_name])) { |
|
return $this->pref_help[$pref_name][1]; |
|
} |
|
return ""; |
|
} |
|
|
|
private function appPasswordList() { |
|
print "<div dojoType='fox.Toolbar'>"; |
|
print "<div dojoType='fox.form.DropDownButton'>" . |
|
"<span>" . __('Select') . "</span>"; |
|
print "<div dojoType='dijit.Menu' style='display: none'>"; |
|
print "<div onclick=\"Tables.select('app-password-list', true)\" |
|
dojoType=\"dijit.MenuItem\">" . __('All') . "</div>"; |
|
print "<div onclick=\"Tables.select('app-password-list', false)\" |
|
dojoType=\"dijit.MenuItem\">" . __('None') . "</div>"; |
|
print "</div></div>"; |
|
print "</div>"; #toolbar |
|
|
|
print "<div class='panel panel-scrollable'>"; |
|
print "<table width='100%' id='app-password-list'>"; |
|
print "<tr>"; |
|
print "<th width='2%'></th>"; |
|
print "<th align='left'>".__("Description")."</th>"; |
|
print "<th align='right'>".__("Created")."</th>"; |
|
print "<th align='right'>".__("Last used")."</th>"; |
|
print "</tr>"; |
|
|
|
$sth = $this->pdo->prepare("SELECT id, title, created, last_used |
|
FROM ttrss_app_passwords WHERE owner_uid = ?"); |
|
$sth->execute([$_SESSION['uid']]); |
|
|
|
while ($row = $sth->fetch()) { |
|
|
|
$row_id = $row["id"]; |
|
|
|
print "<tr data-row-id='$row_id'>"; |
|
|
|
print "<td align='center'> |
|
<input onclick='Tables.onRowChecked(this)' dojoType='dijit.form.CheckBox' type='checkbox'></td>"; |
|
print "<td>" . htmlspecialchars($row["title"]) . "</td>"; |
|
|
|
print "<td align='right' class='text-muted'>"; |
|
print make_local_datetime($row['created'], false); |
|
print "</td>"; |
|
|
|
print "<td align='right' class='text-muted'>"; |
|
print make_local_datetime($row['last_used'], false); |
|
print "</td>"; |
|
|
|
print "</tr>"; |
|
} |
|
|
|
print "</table>"; |
|
print "</div>"; |
|
} |
|
|
|
private function encryptAppPassword($password) { |
|
$salt = substr(bin2hex(get_random_bytes(24)), 0, 24); |
|
|
|
return "SSHA-512:".hash('sha512', $salt . $password). ":$salt"; |
|
} |
|
|
|
function deleteAppPassword() { |
|
$ids = explode(",", clean($_REQUEST['ids'])); |
|
$ids_qmarks = arr_qmarks($ids); |
|
|
|
$sth = $this->pdo->prepare("DELETE FROM ttrss_app_passwords WHERE id IN ($ids_qmarks) AND owner_uid = ?"); |
|
$sth->execute(array_merge($ids, [$_SESSION['uid']])); |
|
|
|
$this->appPasswordList(); |
|
} |
|
|
|
function generateAppPassword() { |
|
$title = clean($_REQUEST['title']); |
|
$new_password = make_password(16); |
|
$new_password_hash = $this->encryptAppPassword($new_password); |
|
|
|
print_warning(T_sprintf("Generated password <strong>%s</strong> for %s. Please remember it for future reference.", $new_password, $title)); |
|
|
|
$sth = $this->pdo->prepare("INSERT INTO ttrss_app_passwords |
|
(title, pwd_hash, service, created, owner_uid) |
|
VALUES |
|
(?, ?, ?, NOW(), ?)"); |
|
|
|
$sth->execute([$title, $new_password_hash, Auth_Base::AUTH_SERVICE_API, $_SESSION['uid']]); |
|
|
|
$this->appPasswordList(); |
|
} |
|
}
|
|
|