mirror of
https://github.com/DanWin/mail-hosting.git
synced 2024-06-02 18:35:13 +00:00
416 lines
22 KiB
PHP
416 lines
22 KiB
PHP
<?php
|
|
require_once( '../common_config.php' );
|
|
global $language, $dir, $locale;
|
|
session_start();
|
|
if ( empty( $_SESSION[ 'csrf_token' ] ) ) {
|
|
$_SESSION[ 'csrf_token' ] = sha1( uniqid() );
|
|
}
|
|
$msg = '';
|
|
if ( ! empty( $_SESSION[ 'email_user' ] ) ) {
|
|
$db = get_db_instance();
|
|
$stmt = $db->prepare( 'SELECT null FROM mailbox WHERE username=? AND active = 1;' );
|
|
$stmt->execute( [ $_SESSION[ 'email_user' ] ] );
|
|
if ( ! $user = $stmt->fetch( PDO::FETCH_ASSOC ) ) {
|
|
$_SESSION = [];
|
|
session_regenerate_id( true );
|
|
$_SESSION[ 'csrf_token' ] = sha1( uniqid() );
|
|
$msg .= '<div class="red" role="alert">'._('It looks like your user no longer exists!').'</div>';
|
|
}
|
|
}
|
|
|
|
if ( $_SERVER[ 'REQUEST_METHOD' ] === 'POST' ) {
|
|
if ( $_SESSION[ 'csrf_token' ] !== $_POST[ 'csrf_token' ] ?? '' ) {
|
|
die( 'Invalid CSRF token' );
|
|
}
|
|
if ( isset( $_SESSION[ '2fa_code' ] ) ) {
|
|
if ( ! empty( $_POST[ '2fa_code' ] ) && $_POST[ '2fa_code' ] === $_SESSION[ '2fa_code' ] ) {
|
|
unset( $_SESSION[ '2fa_code' ] );
|
|
unset( $_SESSION[ 'pgp_key' ] );
|
|
} else {
|
|
$msg .= '<p style="color:red">'._('Wrong 2FA code').'</p>';
|
|
}
|
|
}
|
|
if ( ! isset( $_SESSION[ '2fa_code' ] ) && isset( $_POST[ 'action' ] ) ) {
|
|
if ( $_POST[ 'action' ] === 'logout' ) {
|
|
$_SESSION = [];
|
|
session_regenerate_id( true );
|
|
$_SESSION[ 'csrf_token' ] = sha1( uniqid() );
|
|
$msg .= '<div class="green" role="alert">'._('Successfully logged out').'</div>';
|
|
} elseif ( $_POST[ 'action' ] === 'login' ) {
|
|
$ok = true;
|
|
if ( ! check_captcha( $_POST[ 'challenge' ] ?? '', $_POST[ 'captcha' ] ?? '' ) ) {
|
|
$ok = false;
|
|
$msg .= '<div class="red" role="alert">'._('Invalid captcha').'</div>';
|
|
}
|
|
if ( empty( $_POST[ 'user' ] ) || ! preg_match( '/^([^+]+?)(@([^@]+))?$/i', $_POST[ 'user' ], $match ) ) {
|
|
$ok = false;
|
|
$msg .= '<div class="red" role="alert">'._('Invalid username').'</div>';
|
|
}
|
|
if ( $ok ) {
|
|
$db = get_db_instance();
|
|
$user = $match[ 1 ];
|
|
$domain = $match[ 3 ] ?? 'danwin1210.de';
|
|
$stmt = $db->prepare( 'SELECT target_domain FROM alias_domain WHERE alias_domain = ? AND active=1;' );
|
|
$stmt->execute( [ $domain ] );
|
|
if ( $tmp = $stmt->fetch( PDO::FETCH_ASSOC ) ) {
|
|
$domain = $tmp[ 'target_domain' ];
|
|
}
|
|
$stmt = $db->prepare( 'SELECT username, password, password_hash_type, tfa, pgp_key FROM mailbox WHERE username = ? AND active = 1;' );
|
|
$stmt->execute( [ "$user@$domain" ] );
|
|
if ( $tmp = $stmt->fetch( PDO::FETCH_ASSOC ) ) {
|
|
if ( empty( $_POST[ 'pwd' ] ) || ! password_verify( $_POST[ 'pwd' ], $tmp[ 'password' ] ) ) {
|
|
$ok = false;
|
|
$msg .= '<div class="red" role="alert">'._('Incorrect username or password').'</div>';
|
|
} else {
|
|
$_SESSION[ 'email_user' ] = $tmp[ 'username' ];
|
|
$stmt = $db->prepare( 'UPDATE mailbox SET last_login = ? WHERE username = ? AND active = 1;' );
|
|
$stmt->execute( [ time(), $_SESSION[ 'email_user' ] ] );
|
|
// update password hash if it's using an old hashing algorithm
|
|
if ( $tmp[ 'password_hash_type' ] !== '{ARGON2ID}' ) {
|
|
$hash = password_hash( $_POST[ 'pwd' ], PASSWORD_ARGON2ID );
|
|
$stmt = $db->prepare( 'UPDATE mailbox SET password_hash_type = "{ARGON2ID}", password = ? WHERE username = ? AND active = 1;' );
|
|
$stmt->execute( [ $hash, $_SESSION[ 'email_user' ] ] );
|
|
}
|
|
if ( $tmp[ 'tfa' ] ) {
|
|
$code = bin2hex( random_bytes( 3 ) );
|
|
$_SESSION[ '2fa_code' ] = $code;
|
|
$_SESSION[ 'pgp_key' ] = $tmp[ 'pgp_key' ];
|
|
}
|
|
}
|
|
} else {
|
|
$msg .= '<div class="red" role="alert">'._('Incorrect username or password').'</div>';
|
|
}
|
|
}
|
|
} elseif ( ! empty( $_SESSION[ 'email_user' ] ) && $_POST[ 'action' ] === 'update_settings' ) {
|
|
$alias_goto = '';
|
|
if ( isset( $_POST[ 'alias_keep_copy' ] ) ) {
|
|
$alias_goto .= $_SESSION[ 'email_user' ] . ',';
|
|
}
|
|
if ( ! empty( $_POST[ 'alias_to' ] ) ) {
|
|
$additional = preg_split( "/[\s,]+/", $_POST[ 'alias_to' ] );
|
|
$alias_goto .= validate_email_list( $additional, $msg );
|
|
}
|
|
$alias_goto = rtrim( $alias_goto, ',' );
|
|
$stmt = $db->prepare( 'UPDATE alias SET goto = ?, enforce_tls_in = ? WHERE address = ? AND active = 1;' );
|
|
$stmt->execute( [ $alias_goto, ( isset( $_POST[ 'enforce_tls_in' ] ) ? 1 : 0 ), $_SESSION[ 'email_user' ] ] );
|
|
$stmt = $db->prepare( 'UPDATE mailbox SET enforce_tls_in = ?, enforce_tls_out = ? WHERE username = ? AND active = 1;' );
|
|
$stmt->execute( [ ( isset( $_POST[ 'enforce_tls_in' ] ) ? 1 : 0 ), ( isset( $_POST[ 'enforce_tls_out' ] ) ? 1 : 0 ), $_SESSION[ 'email_user' ] ] );
|
|
} elseif ( ! empty( $_SESSION[ 'email_user' ] ) && $_POST[ 'action' ] === 'update_password' ) {
|
|
if ( empty( $_POST[ 'pass_update' ] ) || empty( $_POST[ 'pass_update2' ] ) || $_POST[ 'pass_update' ] !== $_POST[ 'pass_update2' ] ) {
|
|
$msg .= '<div class="red" role="alert">'._('Passwords empty or don\'t match').'</div>';
|
|
} else {
|
|
$hash = password_hash( $_POST[ 'pass_update' ], PASSWORD_ARGON2ID );
|
|
$stmt = $db->prepare( 'UPDATE mailbox SET password_hash_type = "{ARGON2ID}", password = ? WHERE username = ? AND active = 1;' );
|
|
$stmt->execute( [ $hash, $_SESSION[ 'email_user' ] ] );
|
|
$msg .= '<div class="green" role="alert">'._('Successfully updated password').'</div>';
|
|
}
|
|
} elseif ( ! empty( $_SESSION[ 'email_user' ] ) && $_POST[ 'action' ] === 'delete_account' ) {
|
|
$msg .= '<div class="red" role="alert">'._('Warning: This will permenently delete your account and all your data. Anyone can immediately register with this user again. It cannot be reversed. Are you absolutely sure?').'</div>';
|
|
$msg .= '<form method="post"><input type="hidden" name="csrf_token" value="' . $_SESSION[ 'csrf_token' ] . '">';
|
|
$msg .= '<button type="submit" name="action" value="delete_account2">'._('Yes, I want to permanently delete my account').'</button></form>';
|
|
} elseif ( ! empty( $_SESSION[ 'email_user' ] ) && $_POST[ 'action' ] === 'disable_account' ) {
|
|
$msg .= '<div class="red" role="alert">'._('Warning: This will disable your account for a year and delete all your data. After a year it is available for registrations again. It cannot be reversed. Are you absolutely sure?').'</div>';
|
|
$msg .= '<form method="post"><input type="hidden" name="csrf_token" value="' . $_SESSION[ 'csrf_token' ] . '">';
|
|
$msg .= '<button type="submit" name="action" value="disable_account2">'._('Yes, I want to disable my account').'</button></form>';
|
|
} elseif ( ! empty( $_SESSION[ 'email_user' ] ) && $_POST[ 'action' ] === 'delete_account2' ) {
|
|
$stmt = $db->prepare( 'DELETE FROM alias WHERE address = ?;' );
|
|
$stmt->execute( [ $_SESSION[ 'email_user' ] ] );
|
|
$stmt = $db->prepare( 'UPDATE mailbox SET active = -2 WHERE username = ? AND active = 1;' );
|
|
$stmt->execute( [ $_SESSION[ 'email_user' ] ] );
|
|
$_SESSION = [];
|
|
session_regenerate_id( true );
|
|
$_SESSION[ 'csrf_token' ] = sha1( uniqid() );
|
|
$msg .= '<div class="green" role="alert">'._('Successfully deleted account').'</div>';
|
|
} elseif ( ! empty( $_SESSION[ 'email_user' ] ) && $_POST[ 'action' ] === 'disable_account2' ) {
|
|
$stmt = $db->prepare( 'UPDATE alias SET active = 0 WHERE address = ?;' );
|
|
$stmt->execute( [ $_SESSION[ 'email_user' ] ] );
|
|
$stmt = $db->prepare( 'UPDATE mailbox SET active = -1 WHERE username = ? AND active = 1;' );
|
|
$stmt->execute( [ $_SESSION[ 'email_user' ] ] );
|
|
$_SESSION = [];
|
|
session_regenerate_id( true );
|
|
$_SESSION[ 'csrf_token' ] = sha1( uniqid() );
|
|
$msg .= '<div class="green" role="alert">'._('Successfully disabled account').'</div>';
|
|
} elseif ( isset( $_POST[ 'pgp_key' ] ) && ! empty( $_SESSION[ 'email_user' ] ) && $_POST[ 'action' ] === 'update_pgp_key' ) {
|
|
$pgp_key = trim( $_POST[ 'pgp_key' ] );
|
|
if ( empty( $pgp_key ) ) {
|
|
$msg .= '<p class="green">'._('Successfully removed the key').'</p>';
|
|
$stmt = $db->prepare( 'UPDATE mailbox SET pgp_key = "", tfa = 0, pgp_verified = 0 WHERE username = ?;' );
|
|
$stmt->execute( [ $_SESSION[ 'email_user' ] ] );
|
|
} else {
|
|
$gpg = gnupg_init();
|
|
gnupg_seterrormode( $gpg, GNUPG_ERROR_WARNING );
|
|
gnupg_setarmor( $gpg, 1 );
|
|
$imported_key = gnupg_import( $gpg, $pgp_key );
|
|
if ( ! $imported_key ) {
|
|
$msg .= '<p class="red">'._('There was an error importing the key').'</p>';
|
|
} else {
|
|
$has_this_email = false;
|
|
$key_info = gnupg_keyinfo( $gpg, $imported_key[ 'fingerprint' ] );
|
|
foreach ( $key_info as $key ) {
|
|
foreach ( $key[ 'uids' ] as $uid ) {
|
|
if ( $uid[ 'email' ] === $_SESSION[ 'email_user' ] ) {
|
|
$has_this_email = true;
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
if ( $has_this_email ) {
|
|
$msg .= '<p class="green">'._('Successfully imported the key').'</p>';
|
|
$stmt = $db->prepare( 'UPDATE mailbox SET pgp_key = ?, tfa = 0, pgp_verified = 0 WHERE username = ?;' );
|
|
$stmt->execute( [ $pgp_key, $_SESSION[ 'email_user' ] ] );
|
|
} else {
|
|
$msg .= '<p class="red">' . sprintf( _('Oops, looks like the key is missing this email address as user id. Please add your address "%s" as user ID to your pgp key or create a new key pair.'), htmlspecialchars( $_SESSION[ 'email_user' ] ) ) . '</p>';
|
|
}
|
|
}
|
|
}
|
|
} elseif ( isset( $_POST[ 'enable_2fa_code' ] ) && ! empty( $_SESSION[ 'email_user' ] ) && $_POST[ 'action' ] === 'enable_2fa' ) {
|
|
if ( $_POST[ 'enable_2fa_code' ] !== $_SESSION[ 'enable_2fa_code' ] ) {
|
|
$msg .= '<p class="red">'._('Sorry, the code was incorrect').'</p>';
|
|
} else {
|
|
$stmt = $db->prepare( 'UPDATE mailbox SET tfa = 1, pgp_verified = 1 WHERE username = ?;' );
|
|
$stmt->execute( [ $_SESSION[ 'email_user' ] ] );
|
|
$msg .= '<p class="green">'._('Successfully enabled 2FA').'</p>';
|
|
}
|
|
}
|
|
}
|
|
}
|
|
?>
|
|
<!DOCTYPE html>
|
|
<html lang="<?php echo $language; ?>" dir="<?php echo $dir; ?>">
|
|
<head>
|
|
<title><?php echo _('E-Mail and XMPP - Manage account'); ?></title>
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
|
|
<meta name="author" content="Daniel Winzen">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1">
|
|
<meta name="description"
|
|
content="<?php echo _('Manage your free and anonymous E-Mail address and an XMPP/Jabber account. Add forwarding addresses, change your password or disable/delete your account.'); ?>">
|
|
<link rel="canonical" href="<?php echo CANONICAL_URL; ?>manage_account.php">
|
|
<link rel="alternate" href="<?php echo CANONICAL_URL; ?>manage_account.php" hreflang="x-default">
|
|
<?php alt_links(); ?>
|
|
<meta property="og:type" content="website">
|
|
<meta property="og:title" content="<?php echo _('E-Mail and XMPP - Manage account'); ?>">
|
|
<meta property="og:description" content="<?php echo _('Manage your free and anonymous E-Mail address and an XMPP/Jabber account. Add forwarding addresses, change your password or disable/delete your account.'); ?>">
|
|
<meta property="og:url" content="<?php echo CANONICAL_URL; ?>manage_account.php">
|
|
<meta property="og:locale" content="<?php echo $locale; ?>">
|
|
</head>
|
|
<body>
|
|
<main>
|
|
<?php
|
|
if ( isset( $_SESSION[ '2fa_code' ] ) ){
|
|
$gpg = gnupg_init();
|
|
gnupg_seterrormode( $gpg, GNUPG_ERROR_WARNING );
|
|
gnupg_setarmor( $gpg, 1 );
|
|
$imported_key = gnupg_import( $gpg, $_SESSION[ 'pgp_key' ] );
|
|
if ( $imported_key ){
|
|
$key_info = gnupg_keyinfo( $gpg, $imported_key[ 'fingerprint' ] );
|
|
foreach ( $key_info as $key ) {
|
|
if ( $key[ 'can_encrypt' ] ) {
|
|
foreach ( $key[ 'subkeys' ] as $subkey ) {
|
|
gnupg_addencryptkey( $gpg, $subkey[ 'fingerprint' ] );
|
|
}
|
|
}
|
|
}
|
|
$encrypted = gnupg_encrypt( $gpg, _('To login, please enter the following code to confirm ownership of your key:')."\n\n" . $_SESSION[ '2fa_code' ] . "\n" );
|
|
echo $msg;
|
|
echo '<p>'._('To login, please decrypt the following PGP encrypted message and confirm the code:').'</p>';
|
|
echo "<pre>$encrypted</pre>";
|
|
?>
|
|
<form class="form_limit" action="manage_account.php" method="post">
|
|
<input type="hidden" name="csrf_token" value="<?php echo $_SESSION[ 'csrf_token' ]; ?>">
|
|
<div class="row">
|
|
<div class="col"><input type="text" name="2fa_code" aria-label="<?php echo _('2FA code'); ?>"></div>
|
|
<div class="col">
|
|
<button type="submit"><?php echo _('Confirm'); ?></button>
|
|
</div>
|
|
</div>
|
|
</form>
|
|
</main></body>
|
|
</html>
|
|
<?php
|
|
exit;
|
|
}
|
|
}
|
|
if ( ! empty( $_SESSION[ 'email_user' ] ) ){ ?>
|
|
<form method="post"><input type="hidden" name="csrf_token" value="<?php echo $_SESSION[ 'csrf_token' ]; ?>">
|
|
<?php } ?>
|
|
<p><a href="<?php echo ROOT_URL; ?>"><?php echo _('Info'); ?></a> |<?php
|
|
if ( ! empty( $_SESSION[ 'email_user' ] ) ) {
|
|
printf(_('Logged in as %s'), htmlspecialchars( $_SESSION[ 'email_user' ] ) );
|
|
} else { ?>
|
|
<a href="<?php echo ROOT_URL; ?>register.php"><?php echo _('Register'); ?></a>
|
|
<?php } ?> | <a href="<?php echo ROOT_URL; ?>squirrelmail/src/login.php" target="_blank"><?php echo _('Webmail-Login'); ?></a> <?php
|
|
if ( ! empty( $_SESSION[ 'email_user' ] ) ) { ?>
|
|
|
|
|
<button name="action" value="logout" type="submit"><?php echo _('Logout'); ?></button>
|
|
<?php } else { ?>
|
|
| Manage account');
|
|
} ?> | <a href="<?php echo WEB_XMPP_URL; ?>" target="_blank" rel="noopener"><?php echo _('Web-XMPP'); ?></a></p>
|
|
<?php if ( ! empty( $_SESSION[ 'email_user' ] ) ){ ?></form><?php }
|
|
echo "<p>$msg</p>";
|
|
if ( empty( $_SESSION[ 'email_user' ] ) ) { ?>
|
|
<form class="form_limit" action="manage_account.php" method="post">
|
|
<input type="hidden" name="csrf_token" value="<?php echo $_SESSION[ 'csrf_token' ]; ?>">
|
|
<div class="row">
|
|
<div class="col"><label for="user"><?php echo _('Username'); ?></label></div>
|
|
<div class="col"><input type="text" name="user" id="user" autocomplete="username" required
|
|
value="<?php echo htmlspecialchars( $_POST[ 'user' ] ?? '' ); ?>"></div>
|
|
</div>
|
|
<div class="row">
|
|
<div class="col"><label for="pwd"><?php echo _('Password'); ?></label></div>
|
|
<div class="col"><input type="password" name="pwd" id="pwd" autocomplete="new-password" required></div>
|
|
</div>
|
|
<?php send_captcha(); ?>
|
|
<div class="row">
|
|
<div class="col">
|
|
<button name="action" value="login" type="submit"><?php echo _('Login'); ?></button>
|
|
</div>
|
|
</div>
|
|
</form>
|
|
<?php } else {
|
|
$aliases = [];
|
|
$stmt = $db->prepare( 'SELECT goto FROM alias WHERE address = ?;' );
|
|
$stmt->execute( [ $_SESSION[ 'email_user' ] ] );
|
|
if ( $tmp = $stmt->fetch( PDO::FETCH_ASSOC ) ) {
|
|
$aliases = explode( ',', $tmp[ 'goto' ] );
|
|
}
|
|
$aliases_to = implode( "\n", array_diff( $aliases, [ $_SESSION[ 'email_user' ] ] ) );
|
|
$stmt = $db->prepare( 'SELECT enforce_tls_in, enforce_tls_out FROM mailbox WHERE username = ?;' );
|
|
$stmt->execute( [ $_SESSION[ 'email_user' ] ] );
|
|
$tls_status = $stmt->fetch( PDO::FETCH_ASSOC );
|
|
?>
|
|
<form class="form_limit" action="manage_account.php" method="post">
|
|
<h2><?php echo _('Settings'); ?></h2>
|
|
<h3><?php echo _('Delivery'); ?></h3>
|
|
<p><?php echo _('Change how your mail is delivered. You can add forwarding addresses one per line, or comma seperated. When you disable the "keep a local copy" checkbox, your mail will only be sent to your forwarding addresses.'); ?></p>
|
|
<input type="hidden" name="csrf_token" value="<?php echo $_SESSION[ 'csrf_token' ]; ?>">
|
|
<div class="row">
|
|
<div class="col"><label for="alias_to"><?php echo _('Forward to'); ?></label></div>
|
|
<div class="col"><textarea name="alias_to"
|
|
id="alias_to"><?php echo htmlspecialchars( $aliases_to ); ?></textarea></div>
|
|
</div>
|
|
<div class="row">
|
|
<div class="col"><label for="alias_keep_copy"><?php echo _('Keep a local copy'); ?></label></div>
|
|
<div class="col"><input type="checkbox" name="alias_keep_copy"
|
|
id="alias_keep_copy"<?php echo in_array( $_SESSION[ 'email_user' ], $aliases, true ) ? ' checked' : ''; ?>>
|
|
</div>
|
|
</div>
|
|
<h3><?php echo _('Encryption'); ?></h3>
|
|
<p><?php echo _('If you are having issues sending or receiving mails with some other provider, you can try disabling forced encryption here. But be aware, that this makes it possible for 3rd parties on the network to read your emails. Make sure to ask your correspondent to demand encryption support from their provider for a safer internet.'); ?></p>
|
|
<div class="row">
|
|
<div class="col"><label for="enforce_tls_in"><?php echo _('Enforce encryption for incoming mail'); ?></label></div>
|
|
<div class="col"><input type="checkbox" name="enforce_tls_in"
|
|
id="enforce_tls_in"<?php echo ! empty( $tls_status[ 'enforce_tls_in' ] ) ? ' checked' : ''; ?>>
|
|
</div>
|
|
</div>
|
|
<div class="row">
|
|
<div class="col"><label for="enforce_tls_out"><?php echo _('Enforce encryption for outgoing mail'); ?></label></div>
|
|
<div class="col"><input type="checkbox" name="enforce_tls_out"
|
|
id="enforce_tls_out"<?php echo ! empty( $tls_status[ 'enforce_tls_out' ] ) ? ' checked' : ''; ?>>
|
|
</div>
|
|
</div>
|
|
<div class="row">
|
|
<div class="col">
|
|
<button name="action" value="update_settings" type="submit"><?php echo _('Update settings'); ?></button>
|
|
</div>
|
|
</div>
|
|
</form>
|
|
|
|
<h2><?php echo _('Change password'); ?></h2>
|
|
<form class="form_limit" action="manage_account.php" method="post">
|
|
<input type="hidden" name="csrf_token" value="<?php echo $_SESSION[ 'csrf_token' ]; ?>">
|
|
<div class="row">
|
|
<div class="col"><label for="pass_update"><?php echo _('Password'); ?></label></div>
|
|
<div class="col"><input type="password" name="pass_update" id="pass_update" autocomplete="new-password"
|
|
required></div>
|
|
</div>
|
|
<div class="row">
|
|
<div class="col"><label for="pass_update2"><?php echo _('Password again'); ?></label></div>
|
|
<div class="col"><input type="password" name="pass_update2" id="pass_update2" autocomplete="new-password"
|
|
required></div>
|
|
</div>
|
|
<div class="row">
|
|
<div class="col">
|
|
<button name="action" value="update_password" type="submit"><?php echo _('Change password'); ?></button>
|
|
</div>
|
|
</div>
|
|
</form>
|
|
|
|
<?php
|
|
$stmt = $db->prepare( 'SELECT pgp_key, tfa FROM mailbox WHERE username = ?;' );
|
|
$stmt->execute( [ $_SESSION[ 'email_user' ] ] );
|
|
$pgp_status = $stmt->fetch( PDO::FETCH_ASSOC );
|
|
if ( ! empty( $pgp_status[ 'pgp_key' ] ) ) {
|
|
if ( $pgp_status[ 'tfa' ] === 1 ) {
|
|
echo '<p class="green">'._('Yay, PGP based 2FA is enabled!').'</p>';
|
|
} else {
|
|
$gpg = gnupg_init();
|
|
gnupg_seterrormode( $gpg, GNUPG_ERROR_WARNING );
|
|
gnupg_setarmor( $gpg, 1 );
|
|
$imported_key = gnupg_import( $gpg, $pgp_status[ 'pgp_key' ] );
|
|
if ( $imported_key ) {
|
|
$key_info = gnupg_keyinfo( $gpg, $imported_key[ 'fingerprint' ] );
|
|
foreach ( $key_info as $key ) {
|
|
if ( ! $key[ 'can_encrypt' ] ) {
|
|
echo '<p>'._('Sorry, this key can\'t be used to encrypt a message to you. Your key may have expired or has been revoked.').'</p>';
|
|
} else {
|
|
foreach ( $key[ 'subkeys' ] as $subkey ) {
|
|
gnupg_addencryptkey( $gpg, $subkey[ 'fingerprint' ] );
|
|
}
|
|
}
|
|
}
|
|
$_SESSION[ 'enable_2fa_code' ] = bin2hex( random_bytes( 3 ) );
|
|
if ( $encrypted = gnupg_encrypt( $gpg, _('To enable 2FA, please enter the following code to confirm ownership of your key:'). "\n\n$_SESSION[enable_2fa_code]\n" ) ) {
|
|
echo '<h2>'._( 'Enable 2FA').'</h2>';
|
|
echo '<p>'._('To enable 2FA using your PGP key, please decrypt the following PGP encrypted message and confirm the code:').'</p>';
|
|
echo "<pre>$encrypted</pre>";
|
|
?>
|
|
<form class="form_limit" action="manage_account.php" method="post">
|
|
<input type="hidden" name="csrf_token" value="<?php echo $_SESSION[ 'csrf_token' ]; ?>">
|
|
<div class="row">
|
|
<div class="col"><input type="text" name="enable_2fa_code" aria-label="<?php echo _('2FA code'); ?>"></div>
|
|
<div>
|
|
<button type="submit" name="action" value="enable_2fa"><?php echo _('Confirm'); ?></button>
|
|
</div>
|
|
</div>
|
|
</form>
|
|
<?php
|
|
}
|
|
}
|
|
}
|
|
}
|
|
?>
|
|
|
|
<h2><?php echo _('Add PGP key for 2FA and end-to-end encryption'); ?></h2>
|
|
<form class="form_limit" action="manage_account.php" method="post">
|
|
<input type="hidden" name="csrf_token" value="<?php echo $_SESSION[ 'csrf_token' ]; ?>">
|
|
<div class="row">
|
|
<div class="col"><textarea name="pgp_key" rows="10" cols="50"
|
|
aria-label="<?php echo _('PGP key'); ?>"><?php echo htmlspecialchars( $pgp_status[ 'pgp_key' ] ?? '' ); ?></textarea>
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<div>
|
|
<button type="submit" name="action" value="update_pgp_key"><?php echo _('Update PGP key'); ?></button>
|
|
</div>
|
|
</div>
|
|
</form>
|
|
|
|
<form class="form_limit" action="manage_account.php" method="post">
|
|
<h2><?php echo _('Disable/Delete account'); ?></h2>
|
|
<p><?php echo _('Warning, this is permanent and cannot be undone. Disabling an account will delete your email data from the server, but leave the account blocked in the database for a year, so no one else can use it. Deleting your account will completely wipe all records of it and it will be available for new registrations again.'); ?></p>
|
|
<input type="hidden" name="csrf_token" value="<?php echo $_SESSION[ 'csrf_token' ]; ?>">
|
|
<div class="row">
|
|
<div class="col">
|
|
<button type="submit" name="action" value="disable_account"><?php echo _('Disable account'); ?></button>
|
|
</div>
|
|
</div>
|
|
<div class="row">
|
|
<div class="col">
|
|
<button type="submit" name="action" value="delete_account"><?php echo _('Delete account'); ?></button>
|
|
</div>
|
|
</div>
|
|
</form>
|
|
<?php } ?>
|
|
</main>
|
|
</body></html>
|