496 lines
17 KiB
PHP
496 lines
17 KiB
PHP
<?php
|
|
/**
|
|
* @file mod/admin.php
|
|
*
|
|
* @brief Friendica admin
|
|
*/
|
|
|
|
use Friendica\App;
|
|
use Friendica\BaseModule;
|
|
use Friendica\Content\Feature;
|
|
use Friendica\Content\Pager;
|
|
use Friendica\Content\Text\Markdown;
|
|
use Friendica\Core\Config;
|
|
use Friendica\Core\L10n;
|
|
use Friendica\Core\Logger;
|
|
use Friendica\Core\Renderer;
|
|
use Friendica\Core\StorageManager;
|
|
use Friendica\Core\System;
|
|
use Friendica\Core\Theme;
|
|
use Friendica\Core\Update;
|
|
use Friendica\Core\Worker;
|
|
use Friendica\Database\DBA;
|
|
use Friendica\Database\DBStructure;
|
|
use Friendica\Model\Contact;
|
|
use Friendica\Model\Item;
|
|
use Friendica\Model\Register;
|
|
use Friendica\Model\User;
|
|
use Friendica\Module;
|
|
use Friendica\Module\Login;
|
|
use Friendica\Module\Tos;
|
|
use Friendica\Protocol\PortableContact;
|
|
use Friendica\Util\Arrays;
|
|
use Friendica\Util\BasePath;
|
|
use Friendica\Util\BaseURL;
|
|
use Friendica\Util\DateTimeFormat;
|
|
use Friendica\Util\Network;
|
|
use Friendica\Util\Strings;
|
|
use Friendica\Util\Temporal;
|
|
use Psr\Log\LogLevel;
|
|
|
|
/**
|
|
* @brief Process send data from the admin panels subpages
|
|
*
|
|
* This function acts as relay for processing the data send from the subpages
|
|
* of the admin panel. Depending on the 1st parameter of the url (argv[1])
|
|
* specialized functions are called to process the data from the subpages.
|
|
*
|
|
* The function itself does not return anything, but the subsequently function
|
|
* return the HTML for the pages of the admin panel.
|
|
*
|
|
* @param App $a
|
|
* @throws ImagickException
|
|
* @throws \Friendica\Network\HTTPException\InternalServerErrorException
|
|
*/
|
|
function admin_post(App $a)
|
|
{
|
|
if (!is_site_admin()) {
|
|
return;
|
|
}
|
|
|
|
// do not allow a page manager to access the admin panel at all.
|
|
|
|
if (!empty($_SESSION['submanage'])) {
|
|
return;
|
|
}
|
|
|
|
$return_path = 'admin';
|
|
if ($a->argc > 1) {
|
|
switch ($a->argv[1]) {
|
|
case 'logs':
|
|
admin_page_logs_post($a);
|
|
break;
|
|
case 'deleteitem':
|
|
admin_page_deleteitem_post($a);
|
|
break;
|
|
}
|
|
}
|
|
|
|
$a->internalRedirect($return_path);
|
|
return; // NOTREACHED
|
|
}
|
|
|
|
/**
|
|
* @brief Generates content of the admin panel pages
|
|
*
|
|
* This function generates the content for the admin panel. It consists of the
|
|
* aside menu (same for the entire admin panel) and the code for the soecified
|
|
* subpage of the panel.
|
|
*
|
|
* The structure of the adress is: /admin/subpage/details though "details" is
|
|
* only necessary for some subpages, like themes or addons where it is the name
|
|
* of one theme resp. addon from which the details should be shown. Content for
|
|
* the subpages is generated in separate functions for each of the subpages.
|
|
*
|
|
* The returned string hold the generated HTML code of the page.
|
|
*
|
|
* @param App $a
|
|
* @return string
|
|
* @throws \Friendica\Network\HTTPException\InternalServerErrorException
|
|
*/
|
|
function admin_content(App $a)
|
|
{
|
|
if (!is_site_admin()) {
|
|
return Login::form();
|
|
}
|
|
|
|
if (!empty($_SESSION['submanage'])) {
|
|
return "";
|
|
}
|
|
|
|
// APC deactivated, since there are problems with PHP 5.5
|
|
//if (function_exists("apc_delete")) {
|
|
// $toDelete = new APCIterator('user', APC_ITER_VALUE);
|
|
// apc_delete($toDelete);
|
|
//}
|
|
// Header stuff
|
|
$a->page['htmlhead'] .= Renderer::replaceMacros(Renderer::getMarkupTemplate('admin/settings_head.tpl'), []);
|
|
|
|
/*
|
|
* Side bar links
|
|
*/
|
|
$aside_tools = [];
|
|
// array(url, name, extra css classes)
|
|
// not part of $aside to make the template more adjustable
|
|
$aside_sub = [
|
|
'information' => [L10n::t('Information'), [
|
|
'overview' => ['admin/', L10n::t('Overview'), 'overview'],
|
|
'federation' => ['admin/federation/' , L10n::t('Federation Statistics'), 'federation']]],
|
|
'configuration' => [L10n::t('Configuration'), [
|
|
'site' => ['admin/site/' , L10n::t('Site') , 'site'],
|
|
'users' => ['admin/users/' , L10n::t('Users') , 'users'],
|
|
'addons' => ['admin/addons/' , L10n::t('Addons') , 'addons'],
|
|
'themes' => ['admin/themes/' , L10n::t('Themes') , 'themes'],
|
|
'features' => ['admin/features/' , L10n::t('Additional features') , 'features'],
|
|
'tos' => ['admin/tos/' , L10n::t('Terms of Service') , 'tos']]],
|
|
'database' => [L10n::t('Database'), [
|
|
'dbsync' => ['admin/dbsync/' , L10n::t('DB updates') , 'dbsync'],
|
|
'deferred' => ['admin/deferred/' , L10n::t('Inspect Deferred Workers'), 'deferred'],
|
|
'workerqueue' => ['admin/workerqueue/' , L10n::t('Inspect worker Queue') , 'workerqueue']]],
|
|
'tools' => [L10n::t('Tools'), [
|
|
'contactblock' => ['admin/contactblock/', L10n::t('Contact Blocklist') , 'contactblock'],
|
|
'blocklist' => ['admin/blocklist/' , L10n::t('Server Blocklist') , 'blocklist'],
|
|
'deleteitem' => ['admin/deleteitem/' , L10n::t('Delete Item') , 'deleteitem'],]],
|
|
'logs' => [L10n::t('Logs'), [
|
|
'logsconfig' => ['admin/logs/', L10n::t('Logs'), 'logs'],
|
|
'logsview' => ['admin/viewlogs/', L10n::t('View Logs'), 'viewlogs']
|
|
]],
|
|
'diagnostics' => [L10n::t('Diagnostics'), [
|
|
'phpinfo' => ['phpinfo/', L10n::t('PHP Info'), 'phpinfo'],
|
|
'probe' => ['probe/', L10n::t('probe address'), 'probe'],
|
|
'webfinger' =>['webfinger/', L10n::t('check webfinger'), 'webfinger']
|
|
]]
|
|
];
|
|
|
|
$aside_tools['addons_admin'] = [];
|
|
|
|
$t = Renderer::getMarkupTemplate('admin/aside.tpl');
|
|
$a->page['aside'] .= Renderer::replaceMacros($t, [
|
|
'$admin' => $aside_tools,
|
|
'$subpages' => $aside_sub,
|
|
'$admtxt' => L10n::t('Admin'),
|
|
'$plugadmtxt' => L10n::t('Addon Features'),
|
|
'$h_pending' => L10n::t('User registrations waiting for confirmation'),
|
|
'$admurl' => "admin/"
|
|
]);
|
|
|
|
// Page content
|
|
$o = '';
|
|
// urls
|
|
if ($a->argc > 1) {
|
|
switch ($a->argv[1]) {
|
|
case 'logs':
|
|
$o = admin_page_logs($a);
|
|
break;
|
|
case 'viewlogs':
|
|
$o = admin_page_viewlogs($a);
|
|
break;
|
|
case 'dbsync':
|
|
$o = admin_page_dbsync($a);
|
|
break;
|
|
case 'deleteitem':
|
|
$o = admin_page_deleteitem($a);
|
|
break;
|
|
default:
|
|
notice(L10n::t("Item not found."));
|
|
}
|
|
}
|
|
|
|
if ($a->isAjax()) {
|
|
echo $o;
|
|
exit();
|
|
} else {
|
|
return $o;
|
|
}
|
|
}
|
|
|
|
/**
|
|
* @brief Subpage where the admin can delete an item from their node given the GUID
|
|
*
|
|
* This subpage of the admin panel offers the nodes admin to delete an item from
|
|
* the node, given the GUID or the display URL such as http://example.com/display/123456.
|
|
* The item will then be marked as deleted in the database and processed accordingly.
|
|
*
|
|
* @param App $a
|
|
* @return string
|
|
* @throws \Friendica\Network\HTTPException\InternalServerErrorException
|
|
*/
|
|
function admin_page_deleteitem(App $a)
|
|
{
|
|
$t = Renderer::getMarkupTemplate('admin/deleteitem.tpl');
|
|
|
|
return Renderer::replaceMacros($t, [
|
|
'$title' => L10n::t('Administration'),
|
|
'$page' => L10n::t('Delete Item'),
|
|
'$submit' => L10n::t('Delete this Item'),
|
|
'$intro1' => L10n::t('On this page you can delete an item from your node. If the item is a top level posting, the entire thread will be deleted.'),
|
|
'$intro2' => L10n::t('You need to know the GUID of the item. You can find it e.g. by looking at the display URL. The last part of http://example.com/display/123456 is the GUID, here 123456.'),
|
|
'$deleteitemguid' => ['deleteitemguid', L10n::t("GUID"), '', L10n::t("The GUID of the item you want to delete."), 'required', 'autofocus'],
|
|
'$baseurl' => System::baseUrl(),
|
|
'$form_security_token' => BaseModule::getFormSecurityToken("admin_deleteitem")
|
|
]);
|
|
}
|
|
|
|
/**
|
|
* @brief Process send data from Admin Delete Item Page
|
|
*
|
|
* The GUID passed through the form should be only the GUID. But we also parse
|
|
* URLs like the full /display URL to make the process more easy for the admin.
|
|
*
|
|
* @param App $a
|
|
* @throws \Friendica\Network\HTTPException\InternalServerErrorException
|
|
*/
|
|
function admin_page_deleteitem_post(App $a)
|
|
{
|
|
if (empty($_POST['page_deleteitem_submit'])) {
|
|
return;
|
|
}
|
|
|
|
BaseModule::checkFormSecurityTokenRedirectOnError('/admin/deleteitem/', 'admin_deleteitem');
|
|
|
|
if (!empty($_POST['page_deleteitem_submit'])) {
|
|
$guid = trim(Strings::escapeTags($_POST['deleteitemguid']));
|
|
// The GUID should not include a "/", so if there is one, we got an URL
|
|
// and the last part of it is most likely the GUID.
|
|
if (strpos($guid, '/')) {
|
|
$guid = substr($guid, strrpos($guid, '/') + 1);
|
|
}
|
|
// Now that we have the GUID, drop those items, which will also delete the
|
|
// associated threads.
|
|
Item::delete(['guid' => $guid]);
|
|
}
|
|
|
|
info(L10n::t('Item marked for deletion.') . EOL);
|
|
$a->internalRedirect('admin/deleteitem');
|
|
return; // NOTREACHED
|
|
}
|
|
|
|
/**
|
|
* @brief Generates admin panel subpage for DB syncronization
|
|
*
|
|
* This page checks if the database of friendica is in sync with the specs.
|
|
* Should this not be the case, it attemps to sync the structure and notifies
|
|
* the admin if the automatic process was failing.
|
|
*
|
|
* The returned string holds the HTML code of the page.
|
|
*
|
|
* @param App $a
|
|
* @return string
|
|
* @throws \Friendica\Network\HTTPException\InternalServerErrorException
|
|
*/
|
|
function admin_page_dbsync(App $a)
|
|
{
|
|
$o = '';
|
|
|
|
if ($a->argc > 3 && intval($a->argv[3]) && $a->argv[2] === 'mark') {
|
|
Config::set('database', 'update_' . intval($a->argv[3]), 'success');
|
|
$curr = Config::get('system', 'build');
|
|
if (intval($curr) == intval($a->argv[3])) {
|
|
Config::set('system', 'build', intval($curr) + 1);
|
|
}
|
|
info(L10n::t('Update has been marked successful') . EOL);
|
|
$a->internalRedirect('admin/dbsync');
|
|
}
|
|
|
|
if (($a->argc > 2) && (intval($a->argv[2]) || ($a->argv[2] === 'check'))) {
|
|
$retval = DBStructure::update($a->getBasePath(), false, true);
|
|
if ($retval === '') {
|
|
$o .= L10n::t("Database structure update %s was successfully applied.", DB_UPDATE_VERSION) . "<br />";
|
|
Config::set('database', 'last_successful_update', DB_UPDATE_VERSION);
|
|
Config::set('database', 'last_successful_update_time', time());
|
|
} else {
|
|
$o .= L10n::t("Executing of database structure update %s failed with error: %s", DB_UPDATE_VERSION, $retval) . "<br />";
|
|
}
|
|
if ($a->argv[2] === 'check') {
|
|
return $o;
|
|
}
|
|
}
|
|
|
|
if ($a->argc > 2 && intval($a->argv[2])) {
|
|
require_once 'update.php';
|
|
|
|
$func = 'update_' . intval($a->argv[2]);
|
|
|
|
if (function_exists($func)) {
|
|
$retval = $func();
|
|
|
|
if ($retval === Update::FAILED) {
|
|
$o .= L10n::t("Executing %s failed with error: %s", $func, $retval);
|
|
} elseif ($retval === Update::SUCCESS) {
|
|
$o .= L10n::t('Update %s was successfully applied.', $func);
|
|
Config::set('database', $func, 'success');
|
|
} else {
|
|
$o .= L10n::t('Update %s did not return a status. Unknown if it succeeded.', $func);
|
|
}
|
|
} else {
|
|
$o .= L10n::t('There was no additional update function %s that needed to be called.', $func) . "<br />";
|
|
Config::set('database', $func, 'success');
|
|
}
|
|
|
|
return $o;
|
|
}
|
|
|
|
$failed = [];
|
|
$r = q("SELECT `k`, `v` FROM `config` WHERE `cat` = 'database' ");
|
|
|
|
if (DBA::isResult($r)) {
|
|
foreach ($r as $rr) {
|
|
$upd = intval(substr($rr['k'], 7));
|
|
if ($upd < 1139 || $rr['v'] === 'success') {
|
|
continue;
|
|
}
|
|
$failed[] = $upd;
|
|
}
|
|
}
|
|
|
|
if (!count($failed)) {
|
|
$o = Renderer::replaceMacros(Renderer::getMarkupTemplate('structure_check.tpl'), [
|
|
'$base' => System::baseUrl(true),
|
|
'$banner' => L10n::t('No failed updates.'),
|
|
'$check' => L10n::t('Check database structure'),
|
|
]);
|
|
} else {
|
|
$o = Renderer::replaceMacros(Renderer::getMarkupTemplate('failed_updates.tpl'), [
|
|
'$base' => System::baseUrl(true),
|
|
'$banner' => L10n::t('Failed Updates'),
|
|
'$desc' => L10n::t('This does not include updates prior to 1139, which did not return a status.'),
|
|
'$mark' => L10n::t("Mark success \x28if update was manually applied\x29"),
|
|
'$apply' => L10n::t('Attempt to execute this update step automatically'),
|
|
'$failed' => $failed
|
|
]);
|
|
}
|
|
|
|
return $o;
|
|
}
|
|
|
|
/**
|
|
* @brief Prosesses data send by Logs admin page
|
|
*
|
|
* @param App $a
|
|
* @throws \Friendica\Network\HTTPException\InternalServerErrorException
|
|
*/
|
|
function admin_page_logs_post(App $a)
|
|
{
|
|
if (!empty($_POST['page_logs'])) {
|
|
BaseModule::checkFormSecurityTokenRedirectOnError('/admin/logs', 'admin_logs');
|
|
|
|
$logfile = (!empty($_POST['logfile']) ? Strings::escapeTags(trim($_POST['logfile'])) : '');
|
|
$debugging = !empty($_POST['debugging']);
|
|
$loglevel = defaults($_POST, 'loglevel', LogLevel::ERROR);
|
|
|
|
Config::set('system', 'logfile', $logfile);
|
|
Config::set('system', 'debugging', $debugging);
|
|
Config::set('system', 'loglevel', $loglevel);
|
|
}
|
|
|
|
info(L10n::t("Log settings updated."));
|
|
$a->internalRedirect('admin/logs');
|
|
return; // NOTREACHED
|
|
}
|
|
|
|
/**
|
|
* @brief Generates admin panel subpage for configuration of the logs
|
|
*
|
|
* This function take the view/templates/admin_logs.tpl file and generates a
|
|
* page where admin can configure the logging of friendica.
|
|
*
|
|
* Displaying the log is separated from the log config as the logfile can get
|
|
* big depending on the settings and changing settings regarding the logs can
|
|
* thus waste bandwidth.
|
|
*
|
|
* The string returned contains the content of the template file with replaced
|
|
* macros.
|
|
*
|
|
* @param App $a
|
|
* @return string
|
|
* @throws \Friendica\Network\HTTPException\InternalServerErrorException
|
|
*/
|
|
function admin_page_logs(App $a)
|
|
{
|
|
$log_choices = [
|
|
LogLevel::ERROR => 'Error',
|
|
LogLevel::WARNING => 'Warning',
|
|
LogLevel::NOTICE => 'Notice',
|
|
LogLevel::INFO => 'Info',
|
|
LogLevel::DEBUG => 'Debug',
|
|
];
|
|
|
|
if (ini_get('log_errors')) {
|
|
$phplogenabled = L10n::t('PHP log currently enabled.');
|
|
} else {
|
|
$phplogenabled = L10n::t('PHP log currently disabled.');
|
|
}
|
|
|
|
$t = Renderer::getMarkupTemplate('admin/logs.tpl');
|
|
|
|
return Renderer::replaceMacros($t, [
|
|
'$title' => L10n::t('Administration'),
|
|
'$page' => L10n::t('Logs'),
|
|
'$submit' => L10n::t('Save Settings'),
|
|
'$clear' => L10n::t('Clear'),
|
|
'$baseurl' => System::baseUrl(true),
|
|
'$logname' => Config::get('system', 'logfile'),
|
|
// name, label, value, help string, extra data...
|
|
'$debugging' => ['debugging', L10n::t("Enable Debugging"), Config::get('system', 'debugging'), ""],
|
|
'$logfile' => ['logfile', L10n::t("Log file"), Config::get('system', 'logfile'), L10n::t("Must be writable by web server. Relative to your Friendica top-level directory.")],
|
|
'$loglevel' => ['loglevel', L10n::t("Log level"), Config::get('system', 'loglevel'), "", $log_choices],
|
|
'$form_security_token' => BaseModule::getFormSecurityToken("admin_logs"),
|
|
'$phpheader' => L10n::t("PHP logging"),
|
|
'$phphint' => L10n::t("To temporarily enable logging of PHP errors and warnings you can prepend the following to the index.php file of your installation. The filename set in the 'error_log' line is relative to the friendica top-level directory and must be writeable by the web server. The option '1' for 'log_errors' and 'display_errors' is to enable these options, set to '0' to disable them."),
|
|
'$phplogcode' => "error_reporting(E_ERROR | E_WARNING | E_PARSE);\nini_set('error_log','php.out');\nini_set('log_errors','1');\nini_set('display_errors', '1');",
|
|
'$phplogenabled' => $phplogenabled,
|
|
]);
|
|
}
|
|
|
|
/**
|
|
* @brief Generates admin panel subpage to view the Friendica log
|
|
*
|
|
* This function loads the template view/templates/admin_viewlogs.tpl to
|
|
* display the systemlog content. The filename for the systemlog of friendica
|
|
* is relative to the base directory and taken from the config entry 'logfile'
|
|
* in the 'system' category.
|
|
*
|
|
* Displaying the log is separated from the log config as the logfile can get
|
|
* big depending on the settings and changing settings regarding the logs can
|
|
* thus waste bandwidth.
|
|
*
|
|
* The string returned contains the content of the template file with replaced
|
|
* macros.
|
|
*
|
|
* @param App $a
|
|
* @return string
|
|
* @throws \Friendica\Network\HTTPException\InternalServerErrorException
|
|
*/
|
|
function admin_page_viewlogs(App $a)
|
|
{
|
|
$t = Renderer::getMarkupTemplate('admin/viewlogs.tpl');
|
|
$f = Config::get('system', 'logfile');
|
|
$data = '';
|
|
|
|
if (!file_exists($f)) {
|
|
$data = L10n::t('Error trying to open <strong>%1$s</strong> log file.\r\n<br/>Check to see if file %1$s exist and is readable.', $f);
|
|
} else {
|
|
$fp = fopen($f, 'r');
|
|
if (!$fp) {
|
|
$data = L10n::t('Couldn\'t open <strong>%1$s</strong> log file.\r\n<br/>Check to see if file %1$s is readable.', $f);
|
|
} else {
|
|
$fstat = fstat($fp);
|
|
$size = $fstat['size'];
|
|
if ($size != 0) {
|
|
if ($size > 5000000 || $size < 0) {
|
|
$size = 5000000;
|
|
}
|
|
$seek = fseek($fp, 0 - $size, SEEK_END);
|
|
if ($seek === 0) {
|
|
$data = Strings::escapeHtml(fread($fp, $size));
|
|
while (!feof($fp)) {
|
|
$data .= Strings::escapeHtml(fread($fp, 4096));
|
|
}
|
|
}
|
|
}
|
|
fclose($fp);
|
|
}
|
|
}
|
|
return Renderer::replaceMacros($t, [
|
|
'$title' => L10n::t('Administration'),
|
|
'$page' => L10n::t('View Logs'),
|
|
'$data' => $data,
|
|
'$logname' => Config::get('system', 'logfile')
|
|
]);
|
|
}
|
|
|
|
function admin_page_server_vital()
|
|
{
|
|
// Fetch the host-meta to check if this really is a vital server
|
|
return Network::curl(System::baseUrl() . '/.well-known/host-meta')->isSuccess();
|
|
}
|