mirror of
https://github.com/NamelessMC/Nameless
synced 2026-08-18 06:29:04 -04:00
0c4d89e8f9
* Allow editing user titles from UserCP * add permission * duplicate language value * retain old title if no permission
694 lines
28 KiB
PHP
694 lines
28 KiB
PHP
<?php
|
|
/**
|
|
* User settings page
|
|
*
|
|
* @author Samerton
|
|
* @license MIT
|
|
* @version 2.2.0
|
|
*
|
|
* @var Cache $cache
|
|
* @var FakeSmarty $smarty
|
|
* @var Language $language
|
|
* @var Navigation $cc_nav
|
|
* @var Navigation $navigation
|
|
* @var Navigation $staffcp_nav
|
|
* @var Pages $pages
|
|
* @var TemplateBase $template
|
|
* @var User $user
|
|
* @var Widgets $widgets
|
|
*/
|
|
|
|
// Must be logged in
|
|
if (!$user->isLoggedIn()) {
|
|
Redirect::to(URL::build('/'));
|
|
}
|
|
|
|
// Always define page name for navbar
|
|
const PAGE = 'cc_settings';
|
|
$page_title = $language->get('user', 'user_cp');
|
|
require_once ROOT_PATH . '/core/templates/frontend_init.php';
|
|
|
|
// Forum enabled?
|
|
$forum_enabled = Util::isModuleEnabled('Forum');
|
|
|
|
// Two-factor auth?
|
|
if (isset($_GET['do'])) {
|
|
if ($_GET['do'] == 'enable_tfa') {
|
|
|
|
// Ensure TFA is currently disabled
|
|
if ($user->data()->tfa_enabled == 1) {
|
|
Redirect::to(URL::build('/user/settings'));
|
|
}
|
|
|
|
$tfa = new \RobThree\Auth\TwoFactorAuth(new \RobThree\Auth\Providers\Qr\QRServerProvider(), Output::getClean(SITE_NAME));
|
|
|
|
if (!isset($_GET['s'])) {
|
|
|
|
// Generate secret
|
|
$cache->setCache('users_tfa');
|
|
$secret = $cache->retrieve($user->data()->id);
|
|
if (!$secret) {
|
|
$secret = $tfa->createSecret();
|
|
$cache->store($user->data()->id, $secret, 60);
|
|
$user->update([
|
|
'tfa_secret' => $secret
|
|
]);
|
|
}
|
|
|
|
if (Session::exists('force_tfa_alert')) {
|
|
$errors[] = Session::get('force_tfa_alert');
|
|
}
|
|
|
|
// Assign template variables
|
|
$template->getEngine()->addVariables([
|
|
'TWO_FACTOR_AUTH' => $language->get('user', 'two_factor_auth'),
|
|
'TFA_SCAN_CODE_TEXT' => $language->get('user', 'tfa_scan_code'),
|
|
'IMG_SRC' => $tfa->getQRCodeImageAsDataUri(Output::getClean(SITE_NAME) . ':' . Output::getClean($user->data()->username), $secret),
|
|
'TFA_CODE_TEXT' => $language->get('user', 'tfa_code'),
|
|
'TFA_CODE' => chunk_split($secret, 4, ' '),
|
|
'NEXT' => $language->get('general', 'next'),
|
|
'LINK' => URL::build('/user/settings/', 'do=enable_tfa&s=2'),
|
|
'CANCEL' => $language->get('general', 'cancel'),
|
|
'CANCEL_LINK' => URL::build('/user/settings/', 'do=disable_tfa'),
|
|
'ERROR_TITLE' => $language->get('general', 'error'),
|
|
'TOKEN' => Token::get(),
|
|
]);
|
|
|
|
if (isset($errors) && count($errors)) {
|
|
$template->getEngine()->addVariable('ERRORS', $errors);
|
|
}
|
|
} else {
|
|
// Validate code to see if it matches the secret
|
|
if (Input::exists()) {
|
|
if (Token::check()) {
|
|
if (isset($_POST['tfa_code'])) {
|
|
if ($tfa->verifyCode($user->data()->tfa_secret, str_replace(' ', '', $_POST['tfa_code'])) === true) {
|
|
$user->update([
|
|
'tfa_complete' => true,
|
|
'tfa_enabled' => true,
|
|
'tfa_type' => 1
|
|
]);
|
|
|
|
// Logout all other sessions for this user
|
|
$user->logoutAllOtherSessions();
|
|
|
|
Session::delete('force_tfa_alert');
|
|
Session::flash('tfa_success', $language->get('user', 'tfa_successful'));
|
|
Redirect::to(URL::build('/user/settings'));
|
|
}
|
|
}
|
|
$error = $language->get('user', 'invalid_tfa');
|
|
} else {
|
|
$error = $language->get('general', 'invalid_token');
|
|
}
|
|
}
|
|
|
|
if (isset($error)) {
|
|
$template->getEngine()->addVariable('ERROR', $error);
|
|
}
|
|
|
|
$template->getEngine()->addVariables([
|
|
'TWO_FACTOR_AUTH' => $language->get('user', 'two_factor_auth'),
|
|
'TFA_ENTER_CODE' => $language->get('user', 'tfa_enter_code'),
|
|
'SUBMIT' => $language->get('general', 'submit'),
|
|
'TOKEN' => Token::get(),
|
|
'CANCEL' => $language->get('general', 'cancel'),
|
|
'CANCEL_LINK' => URL::build('/user/settings/', 'do=disable_tfa'),
|
|
'ERROR_TITLE' => $language->get('general', 'error')
|
|
]);
|
|
}
|
|
Module::loadPage($user, $pages, $cache, $smarty, [$navigation, $cc_nav, $staffcp_nav], $widgets, $template);
|
|
require ROOT_PATH . '/core/templates/cc_navbar.php';
|
|
$template->onPageLoad();
|
|
require ROOT_PATH . '/core/templates/navbar.php';
|
|
require ROOT_PATH . '/core/templates/footer.php';
|
|
$template->displayTemplate('user/tfa');
|
|
|
|
} else {
|
|
if ($_GET['do'] == 'disable_tfa') {
|
|
// Disable TFA
|
|
// TODO - https://github.com/NamelessMC/Nameless/issues/3017
|
|
if (Input::exists()) {
|
|
if (Token::check()) {
|
|
$user->update([
|
|
'tfa_enabled' => false,
|
|
'tfa_type' => 0,
|
|
'tfa_secret' => null,
|
|
'tfa_complete' => false
|
|
]);
|
|
|
|
Session::flash('settings_success', $language->get('user', 'tfa_disabled'));
|
|
Redirect::to(URL::build('/user/settings'));
|
|
}
|
|
|
|
echo $language->get('general', 'invalid_token') . '<hr />';
|
|
}
|
|
|
|
echo '
|
|
<form method="post" action="" id="tfa_disable">
|
|
<input type="hidden" name="token" value="' . Token::get() . '">
|
|
</form>
|
|
<a href="javascript:void(0)" onclick="document.getElementById(\'tfa_disable\').submit();">' . $language->get('user', 'tfa_disable_click') . '</a>
|
|
';
|
|
|
|
return;
|
|
}
|
|
}
|
|
|
|
} else {
|
|
// Handle input
|
|
if (Input::exists()) {
|
|
if (Token::check()) {
|
|
if (Input::get('action') == 'settings') {
|
|
$to_validate = [
|
|
'signature' => [
|
|
Validate::MAX => 900
|
|
],
|
|
'timezone' => [
|
|
Validate::TIMEZONE => true,
|
|
]
|
|
];
|
|
|
|
// Permission to use nickname?
|
|
if ($user->hasPermission('usercp.nickname')) {
|
|
$to_validate['nickname'] = [
|
|
Validate::REQUIRED => true,
|
|
Validate::UNIQUE => [
|
|
'users',
|
|
'id:' . $user->data()->id // ignore current user
|
|
],
|
|
Validate::MIN => 3,
|
|
Validate::MAX => 20
|
|
];
|
|
|
|
$displayname = Output::getClean(Input::get('nickname'));
|
|
} else {
|
|
$displayname = $user->data()->username;
|
|
}
|
|
|
|
// Permission to use title?
|
|
if ($user->hasPermission('usercp.title')) {
|
|
$to_validate['user_title'] = [
|
|
Validate::MAX => 64
|
|
];
|
|
}
|
|
|
|
// Get a list of required profile fields
|
|
$profile_fields = $user->getProfileFields(true);
|
|
foreach ($profile_fields as $field) {
|
|
if (!$field->editable && $field->value != null) {
|
|
continue;
|
|
}
|
|
|
|
if ($field->required) {
|
|
$to_validate["profile_fields[{$field->id}]"] = [
|
|
'required' => true,
|
|
];
|
|
}
|
|
$to_validate["profile_fields[{$field->id}]"]['max'] = (is_null($field->length) ? 1024 : $field->length);
|
|
}
|
|
|
|
|
|
$validation = Validate::check(
|
|
$_POST, $to_validate
|
|
)->messages([
|
|
'nickname' => [
|
|
Validate::REQUIRED => $language->get('user', 'nickname_required'),
|
|
Validate::UNIQUE => $language->get('user', 'nickname_already_exists'),
|
|
Validate::MIN => $language->get('user', 'nickname_minimum_3'),
|
|
Validate::MAX => $language->get('user', 'nickname_maximum_20')
|
|
],
|
|
'user_title' => $language->get('user', 'user_title_max_64'),
|
|
'signature' => $language->get('user', 'signature_max_900'),
|
|
'timezone' => $language->get('general', 'invalid_timezone'),
|
|
// fallback message for required profile fields
|
|
'*' => static function ($field) use ($language) {
|
|
// get the id from between the square brackets
|
|
$id = substr($field, strpos($field, '[') + 1, -1);
|
|
|
|
$field = ProfileField::find($id);
|
|
if (!$field) {
|
|
return null;
|
|
}
|
|
|
|
return $language->get('user', 'field_is_required', [
|
|
'field' => Output::getClean($field->name),
|
|
]);
|
|
},
|
|
]);
|
|
|
|
if ($validation->passed()) {
|
|
// Update language, template and timezone
|
|
$new_language_results = DB::getInstance()->get('languages', ['name', Input::get('language')])->results();
|
|
|
|
if (count($new_language_results)) {
|
|
$new_language = $new_language_results[0]->id;
|
|
$language = new Language('core', $new_language_results[0]->short_code);
|
|
} else {
|
|
$new_language = $user->data()->language_id;
|
|
}
|
|
|
|
// Template
|
|
if (Input::get('template') != 0) {
|
|
$new_template = DB::getInstance()->get('templates', ['id', Input::get('template')])->results();
|
|
|
|
if (count($new_template)) {
|
|
$new_template = $new_template[0]->id;
|
|
} else {
|
|
$new_template = $user_query->theme_id;
|
|
}
|
|
} else {
|
|
$new_template = null;
|
|
}
|
|
|
|
// Check permissions
|
|
$available_templates = $user->getUserTemplates();
|
|
|
|
foreach ($available_templates as $available_template) {
|
|
if ($available_template->id == $new_template) {
|
|
$can_update = true;
|
|
break;
|
|
}
|
|
}
|
|
|
|
if (!isset($can_update)) {
|
|
$new_template = $user->data()->theme_id;
|
|
}
|
|
|
|
$timezone = Input::get('timezone');
|
|
|
|
if ($user->hasPermission('usercp.signature')) {
|
|
$signature = Input::get('signature');
|
|
} else {
|
|
$signature = '';
|
|
}
|
|
|
|
// Private profiles enabled?
|
|
$private_profiles = Settings::get('private_profile');
|
|
if ($private_profiles === '1') {
|
|
if ($user->canPrivateProfile() && $_POST['privateProfile'] == 1) {
|
|
$privateProfile = 1;
|
|
} else {
|
|
$privateProfile = 0;
|
|
}
|
|
} else {
|
|
$privateProfile = $user->data()->private_profile;
|
|
}
|
|
|
|
$gravatar = $_POST['gravatar'] == '1' ? 1 : 0;
|
|
|
|
$user_title = $user->hasPermission('usercp.title') ? Input::get('user_title') : $user->data()->user_title;
|
|
|
|
$data = [
|
|
'language_id' => $new_language,
|
|
'timezone' => $timezone,
|
|
'signature' => $signature,
|
|
'nickname' => $displayname,
|
|
'user_title' => $user_title,
|
|
'private_profile' => $privateProfile,
|
|
'theme_id' => $new_template,
|
|
'gravatar' => $gravatar,
|
|
];
|
|
|
|
if ($user->data()->register_method === 'authme' && Settings::get('authme')) {
|
|
$data['authme_sync_password'] = Input::get('authmeSync');
|
|
}
|
|
|
|
$user->update($data);
|
|
|
|
Log::getInstance()->log(Log::Action('user/ucp/update'));
|
|
|
|
foreach ($_POST['profile_fields'] as $field_id => $value) {
|
|
// Check field exists
|
|
$field = ProfileField::find($field_id);
|
|
if (!$field) {
|
|
continue;
|
|
}
|
|
|
|
$user_profile_fields = $user->getProfileFields(true);
|
|
if (array_key_exists($field->id, $user_profile_fields) && $user_profile_fields[$field->id]->value !== null) {
|
|
// Update field value if it has changed
|
|
if ($value !== $user_profile_fields[$field->id]->value) {
|
|
DB::getInstance()->update('users_profile_fields', $user_profile_fields[$field->id]->upf_id, [
|
|
'value' => $value,
|
|
'updated' => date('U'),
|
|
]);
|
|
}
|
|
} else {
|
|
// Create new field value
|
|
DB::getInstance()->insert('users_profile_fields', [
|
|
'user_id' => $user->data()->id,
|
|
'field_id' => $field->id,
|
|
'value' => $value,
|
|
'updated' => date('U'),
|
|
]);
|
|
}
|
|
}
|
|
|
|
Session::flash('settings_success', $language->get('user', 'settings_updated_successfully'));
|
|
Redirect::to(URL::build('/user/settings'));
|
|
} else {
|
|
$errors = $validation->errors();
|
|
}
|
|
} else if (Input::get('action') == 'password') {
|
|
// Change password
|
|
$validation = Validate::check($_POST, [
|
|
'old_password' => [
|
|
Validate::REQUIRED => true
|
|
],
|
|
'new_password' => [
|
|
Validate::REQUIRED => true,
|
|
Validate::MIN => 6
|
|
],
|
|
'new_password_again' => [
|
|
Validate::REQUIRED => true,
|
|
Validate::MATCHES => 'new_password'
|
|
]
|
|
])->messages([
|
|
'old_password' => $language->get('user', 'password_required') . '<br />',
|
|
'new_password' => [
|
|
Validate::REQUIRED => $language->get('user', 'password_required') . '<br />',
|
|
Validate::MIN => $language->get('user', 'password_minimum_6') . '<br />'
|
|
],
|
|
'new_password_again' => [
|
|
Validate::REQUIRED => $language->get('user', 'password_required') . '<br />',
|
|
Validate::MATCHES => $language->get('user', 'passwords_dont_match') . '<br />'
|
|
]
|
|
]);
|
|
|
|
if ($validation->passed()) {
|
|
// Update password
|
|
// Check old password matches
|
|
$old_password = Input::get('old_password');
|
|
if ($user->checkCredentials($user->data()->username, $old_password, 'username')) {
|
|
|
|
// Hash new password
|
|
$new_password = password_hash(Input::get('new_password'), PASSWORD_BCRYPT, ['cost' => 13]);
|
|
|
|
// Update password
|
|
$user->update([
|
|
'password' => $new_password,
|
|
'pass_method' => 'default'
|
|
]);
|
|
|
|
// Logout all other sessions for this user
|
|
$user->logoutAllOtherSessions();
|
|
|
|
$success = $language->get('user', 'password_changed_successfully');
|
|
|
|
} else {
|
|
// Invalid current password
|
|
Session::flash('settings_error', $language->get('user', 'incorrect_password'));
|
|
}
|
|
} else {
|
|
$errors = $validation->errors();
|
|
}
|
|
} else if (Input::get('action') == 'email') {
|
|
// Change password
|
|
$validation = Validate::check($_POST, [
|
|
'password' => [
|
|
Validate::REQUIRED => true
|
|
],
|
|
'email' => [
|
|
Validate::REQUIRED => true,
|
|
Validate::EMAIL => true,
|
|
]
|
|
])->messages([
|
|
'password' => [
|
|
Validate::REQUIRED => $language->get('user', 'password_required') . '<br />'
|
|
],
|
|
'email' => [
|
|
Validate::REQUIRED => $language->get('user', 'email_required') . '<br />',
|
|
Validate::EMAIL => $language->get('user', 'invalid_email') . '<br />'
|
|
]
|
|
]);
|
|
|
|
if ($validation->passed()) {
|
|
// Check email doesn't exist
|
|
$email_query = DB::getInstance()->get('users', ['email', $_POST['email']])->results();
|
|
if (count($email_query)) {
|
|
if ($email_query[0]->id != $user->data()->id) {
|
|
$error = $language->get('user', 'email_already_exists');
|
|
}
|
|
}
|
|
|
|
if (!isset($error)) {
|
|
// Check password matches
|
|
$password = Input::get('password');
|
|
if ($user->checkCredentials($user->data()->username, $password, 'username')) {
|
|
|
|
// Update email
|
|
$user->update([
|
|
'email' => $_POST['email']
|
|
]);
|
|
|
|
Session::flash('settings_success', $language->get('user', 'email_changed_successfully'));
|
|
Redirect::to(URL::build('/user/settings'));
|
|
}
|
|
|
|
// Invalid password
|
|
Session::flash('settings_error', $language->get('user', 'incorrect_password'));
|
|
}
|
|
} else {
|
|
$errors = $validation->errors();
|
|
}
|
|
} else if (Input::get('action') == 'reset_avatar') {
|
|
$user->update([
|
|
'has_avatar' => false,
|
|
]);
|
|
Session::flash('settings_success', $language->get('user', 'avatar_removed_successfully'));
|
|
Redirect::to(URL::build('/user/settings')); // To ensure that their reset avatar shows up. Otherwise their old avatar is still shown for this request
|
|
}
|
|
} else {
|
|
// Invalid form token
|
|
Session::flash('settings_error', $language->get('general', 'invalid_token'));
|
|
}
|
|
}
|
|
|
|
$template->assets()->include([
|
|
AssetTree::TINYMCE,
|
|
]);
|
|
|
|
$template->addJSScript(Input::createTinyEditor($language, 'inputSignature'));
|
|
|
|
// Error/success message?
|
|
if (Session::exists('settings_error')) {
|
|
$error = Session::flash('settings_error');
|
|
}
|
|
if (Session::exists('settings_success')) {
|
|
$success = Session::flash('settings_success');
|
|
}
|
|
|
|
// Get languages
|
|
$languages = [];
|
|
$language_query = DB::getInstance()->get('languages', ['id', '<>', 0])->results();
|
|
|
|
foreach ($language_query as $item) {
|
|
$language_path = implode(DIRECTORY_SEPARATOR, [ROOT_PATH, 'modules', 'Core', 'language', $item->short_code . '.json']);
|
|
if (!file_exists($language_path)) {
|
|
continue;
|
|
}
|
|
|
|
$languages[] = [
|
|
'name' => Output::getClean($item->name),
|
|
'active' => $user->data()->language_id == $item->id
|
|
];
|
|
}
|
|
|
|
// Get templates
|
|
$templates = [];
|
|
$templates_query = $user->getUserTemplates();
|
|
|
|
$templates[] = [
|
|
'id' => 0,
|
|
'name' => $language->get('general', 'default'),
|
|
'active' => $user->data()->theme_id === null
|
|
];
|
|
foreach ($templates_query as $item) {
|
|
$templates[] = [
|
|
'id' => Output::getClean($item->id),
|
|
'active' => $item->id === $user->data()->theme_id,
|
|
'name' => Output::getClean($item->name)
|
|
];
|
|
}
|
|
|
|
// Get custom fields
|
|
$custom_fields_template = [];
|
|
if ($user->hasPermission('usercp.nickname')) {
|
|
$custom_fields_template['nickname'] = [
|
|
'name' => $language->get('user', 'nickname'),
|
|
'value' => Output::getClean($user->data()->nickname),
|
|
'id' => 'nickname',
|
|
'type' => 'text'
|
|
];
|
|
} else {
|
|
$custom_fields_template['nickname'] = [
|
|
'nickname' => [
|
|
'disabled' => true
|
|
]
|
|
];
|
|
}
|
|
|
|
if ($user->hasPermission('usercp.title')) {
|
|
$custom_fields_template['user_title'] = [
|
|
'name' => $language->get('user', 'user_title'),
|
|
'value' => Output::getClean($user->data()->user_title),
|
|
'id' => 'user_title',
|
|
'type' => 'text',
|
|
];
|
|
}
|
|
|
|
foreach ($user->getProfileFields(true) as $id => $field) {
|
|
// Skip this field if it's not editable, and it is already set.
|
|
// This fixes when a field is made after someone registers,
|
|
// the next time they edit their profile, they will have to set it.
|
|
if (!$field->editable && $field->value != null) {
|
|
continue;
|
|
}
|
|
|
|
// Get custom field type
|
|
switch ($field->type) {
|
|
case Fields::DATE:
|
|
$type = 'date';
|
|
break;
|
|
|
|
case Fields::TEXTAREA:
|
|
$type = 'textarea';
|
|
break;
|
|
|
|
case Fields::TEXT:
|
|
default:
|
|
$type = 'text';
|
|
break;
|
|
}
|
|
|
|
$custom_fields_template[$field->name] = [
|
|
'name' => Output::getClean($field->name),
|
|
'value' => Output::getClean($field->value),
|
|
'id' => $field->id,
|
|
'type' => $type,
|
|
'required' => $field->required,
|
|
'description' => $field->description ?: $field->name
|
|
];
|
|
}
|
|
|
|
if (Session::exists('tfa_success')) {
|
|
$success = Session::flash('tfa_success');
|
|
}
|
|
|
|
if (isset($errors) && count($errors)) {
|
|
$template->getEngine()->addVariables([
|
|
'ERRORS' => $errors,
|
|
'ERRORS_TITLE' => $language->get('general', 'error')
|
|
]);
|
|
}
|
|
|
|
if ($user->hasPermission('usercp.signature')) {
|
|
$signature = Output::getPurified($user->data()->signature);
|
|
|
|
$template->getEngine()->addVariables([
|
|
'SIGNATURE' => $language->get('user', 'signature'),
|
|
'SIGNATURE_VALUE' => $signature
|
|
]);
|
|
}
|
|
|
|
if ($user->canPrivateProfile()) {
|
|
$template->getEngine()->addVariables([
|
|
'PRIVATE_PROFILE' => $language->get('user', 'private_profile'),
|
|
'PRIVATE_PROFILE_ENABLED' => $user->isPrivateProfile()
|
|
]);
|
|
}
|
|
|
|
if (isset($error)) {
|
|
$template->getEngine()->addVariable('ERROR', $error);
|
|
}
|
|
|
|
// Language values
|
|
$template->getEngine()->addVariables([
|
|
'SETTINGS' => $language->get('user', 'profile_settings'),
|
|
'ACTIVE_LANGUAGE' => $language->get('user', 'active_language'),
|
|
'LANGUAGES' => $languages,
|
|
'ACTIVE_TEMPLATE' => $language->get('user', 'active_template'),
|
|
'TEMPLATES' => $templates,
|
|
'PROFILE_FIELDS' => $custom_fields_template,
|
|
'SUBMIT' => $language->get('general', 'submit'),
|
|
'TOKEN' => Token::get(),
|
|
'SUCCESS' => ($success ?? false),
|
|
'CHANGE_PASSWORD' => $language->get('user', 'change_password'),
|
|
'CURRENT_PASSWORD' => $language->get('user', 'current_password'),
|
|
'NEW_PASSWORD' => $language->get('user', 'new_password'),
|
|
'CONFIRM_NEW_PASSWORD' => $language->get('user', 'confirm_new_password'),
|
|
'TWO_FACTOR_AUTH' => $language->get('user', 'two_factor_auth'),
|
|
'TIMEZONE' => $language->get('user', 'timezone'),
|
|
'TIMEZONES' => Util::listTimezones(),
|
|
'SELECTED_TIMEZONE' => $user->data()->timezone,
|
|
'CURRENT_EMAIL' => Output::getClean($user->data()->email),
|
|
'CHANGE_EMAIL_ADDRESS' => $language->get('user', 'change_email_address'),
|
|
'EMAIL_ADDRESS' => $language->get('user', 'email_address'),
|
|
'SUCCESS_TITLE' => $language->get('general', 'success'),
|
|
'ERROR_TITLE' => $language->get('general', 'error'),
|
|
'HELP' => $language->get('general', 'help'),
|
|
'INFO' => $language->get('general', 'info'),
|
|
'ENABLED' => $language->get('user', 'enabled'),
|
|
'DISABLED' => $language->get('user', 'disabled'),
|
|
'GRAVATAR' => $language->get('user', 'gravatar'),
|
|
'GRAVATAR_VALUE' => $user->data()->gravatar == '1' ? '1' : '0',
|
|
]);
|
|
|
|
if (Settings::get('custom_avatars')) {
|
|
$template->getEngine()->addVariables([
|
|
'CUSTOM_AVATARS' => true,
|
|
'CUSTOM_AVATARS_SCRIPT' => ((defined('CONFIG_PATH')) ? CONFIG_PATH . '/' : '/') . 'core/includes/image_upload.php',
|
|
'BROWSE' => $language->get('general', 'browse'),
|
|
'UPLOAD_NEW_PROFILE_IMAGE' => $language->get('user', 'upload_new_avatar'),
|
|
'REMOVE_AVATAR' => $language->get('user', 'remove_avatar'),
|
|
'REMOVE' => $language->get('general', 'remove'),
|
|
'HAS_CUSTOM_AVATAR' => $user->data()->has_avatar
|
|
]);
|
|
}
|
|
|
|
if ($user->data()->tfa_enabled == 1) {
|
|
$template->getEngine()->addVariable('DISABLE', $language->get('user', 'disable'));
|
|
foreach ($user->getGroups() as $group) {
|
|
if ($group->force_tfa) {
|
|
$forced = true;
|
|
break;
|
|
}
|
|
}
|
|
|
|
if (isset($forced) && $forced) {
|
|
$template->getEngine()->addVariable('FORCED', true);
|
|
} else {
|
|
$template->getEngine()->addVariable('DISABLE_LINK', URL::build('/user/settings/', 'do=disable_tfa'));
|
|
}
|
|
} else {
|
|
// Enable
|
|
$template->getEngine()->addVariables([
|
|
'ENABLE' => $language->get('user', 'enable'),
|
|
'ENABLE_LINK' => URL::build('/user/settings/', 'do=enable_tfa'),
|
|
]);
|
|
}
|
|
|
|
if ($user->data()->register_method && Settings::get('authme')) {
|
|
$template->getEngine()->addVariables([
|
|
'AUTHME_SYNC_PASSWORD' => $language->get('user', 'authme_sync_password'),
|
|
'AUTHME_SYNC_PASSWORD_INFO' => Settings::get('login_method') === 'username'
|
|
? $language->get('user', 'authme_sync_password_setting')
|
|
: $language->get('user', 'authme_sync_password_setting_email'),
|
|
'AUTHME_SYNC_PASSWORD_ENABLED' => $user->data()->authme_sync_password,
|
|
]);
|
|
}
|
|
|
|
// Load modules + template
|
|
Module::loadPage($user, $pages, $cache, $smarty, [$navigation, $cc_nav, $staffcp_nav], $widgets, $template);
|
|
|
|
require ROOT_PATH . '/core/templates/cc_navbar.php';
|
|
|
|
$template->onPageLoad();
|
|
|
|
require ROOT_PATH . '/core/templates/navbar.php';
|
|
require ROOT_PATH . '/core/templates/footer.php';
|
|
|
|
// Display template
|
|
$template->displayTemplate('user/settings');
|
|
}
|