1:    2:    3:    4:    5:    6:    7:    8:    9:   10:   11:   12:   13:   14:   15:   16:   17:   18:   19:   20:   21:   22:   23:   24:   25:   26:   27:   28:   29:   30:   31:   32:   33:   34:   35:   36:   37:   38:   39:   40:   41:   42:   43:   44:   45:   46:   47:   48:   49:   50:   51:   52:   53:   54:   55:   56:   57:   58:   59:   60:   61:   62:   63:   64:   65:   66:   67:   68:   69:   70:   71:   72:   73:   74:   75:   76:   77:   78:   79:   80:   81:   82:   83:   84:   85:   86:   87:   88:   89:   90:   91:   92:   93:   94:   95:   96:   97:   98:   99:  100:  101:  102:  103:  104:  105:  106:  107:  108:  109:  110:  111:  112:  113:  114:  115:  116:  117:  118:  119:  120:  121:  122:  123:  124:  125:  126:  127:  128:  129:  130:  131:  132:  133:  134:  135:  136:  137:  138:  139:  140:  141:  142:  143:  144:  145:  146:  147:  148:  149:  150:  151:  152:  153:  154:  155:  156:  157:  158:  159:  160:  161:  162:  163:  164:  165:  166:  167:  168:  169:  170:  171:  172:  173:  174:  175:  176:  177:  178:  179:  180:  181:  182:  183:  184:  185:  186:  187:  188:  189:  190:  191:  192:  193:  194:  195:  196:  197:  198:  199:  200:  201:  202:  203:  204:  205:  206:  207:  208:  209:  210:  211:  212:  213:  214:  215:  216:  217:  218:  219:  220:  221:  222:  223:  224:  225:  226:  227:  228:  229:  230:  231:  232:  233:  234:  235:  236:  237:  238:  239:  240:  241:  242:  243:  244:  245:  246:  247:  248:  249:  250:  251:  252:  253:  254:  255:  256:  257:  258:  259:  260:  261:  262:  263:  264:  265:  266:  267:  268:  269:  270:  271:  272:  273:  274:  275:  276:  277:  278:  279:  280:  281:  282:  283:  284:  285:  286:  287:  288:  289:  290:  291:  292:  293:  294:  295:  296:  297:  298:  299:  300:  301:  302:  303:  304:  305:  306:  307:  308:  309:  310:  311:  312:  313:  314:  315:  316:  317:  318:  319:  320:  321:  322:  323:  324:  325:  326:  327:  328:  329:  330:  331:  332:  333:  334:  335:  336:  337:  338:  339:  340:  341:  342:  343:  344:  345:  346:  347:  348:  349:  350:  351:  352:  353:  354:  355:  356:  357:  358:  359:  360:  361:  362:  363:  364:  365:  366:  367:  368:  369:  370:  371:  372:  373:  374:  375:  376:  377:  378:  379:  380:  381:  382:  383:  384:  385:  386:  387:  388:  389:  390:  391:  392:  393:  394:  395:  396:  397:  398:  399:  400:  401:  402:  403:  404:  405:  406:  407:  408:  409:  410:  411:  412:  413:  414:  415:  416:  417:  418:  419:  420:  421:  422:  423:  424:  425:  426:  427:  428:  429:  430:  431:  432:  433:  434:  435:  436:  437:  438:  439:  440:  441:  442:  443:  444:  445:  446:  447:  448:  449:  450:  451:  452:  453:  454:  455:  456:  457:  458:  459:  460:  461:  462:  463:  464:  465:  466:  467:  468:  469:  470:  471:  472:  473:  474:  475:  476:  477:  478:  479:  480:  481:  482:  483:  484:  485:  486:  487:  488:  489:  490:  491:  492:  493:  494:  495:  496:  497:  498:  499:  500:  501:  502:  503:  504:  505:  506:  507:  508:  509:  510:  511:  512:  513:  514:  515:  516:  517:  518:  519:  520:  521:  522:  523:  524:  525:  526:  527:  528:  529:  530:  531:  532:  533:  534:  535:  536:  537:  538:  539:  540:  541:  542:  543:  544:  545:  546:  547:  548:  549:  550:  551:  552:  553:  554:  555:  556:  557:  558:  559:  560:  561:  562:  563:  564:  565:  566:  567:  568:  569:  570:  571:  572:  573:  574:  575:  576:  577:  578:  579:  580:  581:  582:  583:  584:  585:  586:  587:  588:  589:  590:  591:  592:  593:  594:  595:  596:  597:  598:  599:  600:  601:  602:  603:  604:  605:  606:  607:  608:  609:  610:  611:  612:  613:  614:  615:  616:  617:  618:  619:  620:  621:  622:  623:  624:  625:  626:  627:  628:  629:  630:  631:  632:  633:  634:  635:  636:  637:  638:  639:  640:  641:  642:  643:  644:  645:  646:  647:  648:  649:  650:  651:  652:  653:  654:  655:  656:  657:  658:  659:  660:  661:  662:  663:  664:  665:  666:  667:  668:  669:  670:  671:  672:  673:  674:  675:  676:  677:  678:  679:  680:  681:  682:  683:  684:  685:  686:  687:  688:  689:  690:  691:  692:  693:  694:  695:  696:  697:  698:  699:  700:  701:  702:  703:  704:  705:  706:  707:  708:  709:  710:  711:  712:  713:  714:  715:  716:  717:  718:  719:  720:  721:  722:  723:  724:  725:  726:  727:  728:  729:  730:  731:  732:  733:  734:  735:  736:  737:  738:  739:  740:  741:  742:  743:  744:  745:  746:  747:  748:  749:  750:  751:  752:  753:  754:  755:  756:  757:  758:  759:  760:  761:  762:  763:  764:  765:  766:  767:  768:  769:  770:  771:  772:  773:  774:  775:  776:  777:  778:  779:  780:  781:  782:  783:  784:  785:  786:  787:  788:  789:  790:  791:  792:  793:  794:  795:  796:  797:  798:  799:  800:  801:  802:  803:  804:  805:  806:  807:  808:  809:  810:  811:  812:  813:  814:  815:  816:  817:  818:  819:  820:  821:  822:  823:  824:  825:  826:  827:  828:  829:  830:  831:  832:  833:  834:  835:  836:  837:  838:  839:  840:  841:  842:  843:  844:  845:  846:  847:  848:  849:  850:  851:  852:  853:  854:  855:  856:  857:  858:  859:  860:  861:  862:  863:  864:  865:  866:  867:  868:  869:  870:  871:  872:  873:  874:  875:  876:  877:  878:  879:  880:  881:  882:  883:  884:  885:  886:  887:  888:  889:  890:  891:  892:  893:  894:  895:  896:  897:  898:  899:  900:  901:  902:  903:  904:  905:  906:  907:  908:  909:  910:  911:  912:  913:  914:  915:  916:  917:  918:  919:  920:  921:  922:  923:  924:  925:  926:  927:  928:  929:  930:  931:  932:  933:  934:  935:  936:  937:  938:  939:  940:  941:  942:  943:  944:  945:  946:  947:  948:  949:  950:  951:  952:  953:  954:  955:  956:  957:  958:  959:  960:  961:  962:  963:  964:  965:  966:  967:  968:  969:  970:  971:  972:  973:  974:  975:  976:  977:  978:  979:  980:  981:  982:  983:  984:  985:  986:  987:  988:  989:  990:  991:  992:  993:  994:  995:  996:  997:  998:  999: 1000: 1001: 1002: 1003: 1004: 1005: 1006: 1007: 1008: 1009: 1010: 1011: 1012: 1013: 1014: 1015: 1016: 1017: 1018: 1019: 1020: 1021: 1022: 1023: 1024: 1025: 1026: 1027: 1028: 1029: 1030: 1031: 1032: 1033: 1034: 1035: 1036: 1037: 1038: 1039: 1040: 1041: 1042: 1043: 1044: 1045: 1046: 1047: 1048: 1049: 1050: 1051: 1052: 1053: 1054: 1055: 1056: 1057: 1058: 1059: 1060: 1061: 1062: 1063: 1064: 1065: 1066: 1067: 1068: 1069: 1070: 1071: 1072: 1073: 1074: 1075: 1076: 1077: 1078: 1079: 1080: 1081: 1082: 1083: 1084: 1085: 1086: 1087: 1088: 1089: 1090: 1091: 1092: 1093: 1094: 1095: 1096: 1097: 1098: 1099: 1100: 1101: 1102: 1103: 1104: 1105: 1106: 1107: 1108: 1109: 1110: 1111: 1112: 1113: 1114: 1115: 1116: 1117: 1118: 1119: 1120: 1121: 1122: 1123: 1124: 1125: 1126: 1127: 1128: 1129: 1130: 1131: 1132: 1133: 1134: 1135: 1136: 1137: 1138: 1139: 1140: 1141: 1142: 1143: 1144: 1145: 1146: 1147: 1148: 1149: 1150: 1151: 1152: 1153: 1154: 1155: 1156: 1157: 1158: 1159: 1160: 1161: 1162: 1163: 1164: 1165: 1166: 1167: 1168: 1169: 1170: 1171: 1172: 1173: 1174: 1175: 1176: 1177: 1178: 1179: 1180: 1181: 1182: 1183: 1184: 1185: 1186: 1187: 1188: 1189: 1190: 1191: 1192: 1193: 1194: 1195: 1196: 1197: 1198: 1199: 1200: 1201: 1202: 1203: 1204: 1205: 1206: 1207: 1208: 1209: 1210: 1211: 1212: 1213: 1214: 1215: 1216: 1217: 1218: 1219: 1220: 1221: 1222: 1223: 1224: 1225: 1226: 1227: 1228: 1229: 1230: 1231: 1232: 1233: 1234: 1235: 1236: 1237: 1238: 1239: 1240: 1241: 1242: 1243: 1244: 1245: 1246: 1247: 1248: 1249: 1250: 1251: 1252: 1253: 1254: 1255: 1256: 1257: 1258: 1259: 1260: 1261: 1262: 1263: 1264: 1265: 1266: 1267: 1268: 1269: 1270: 1271: 1272: 1273: 1274: 1275: 1276: 1277: 1278: 1279: 1280: 1281: 1282: 1283: 1284: 1285: 1286: 1287: 1288: 1289: 1290: 1291: 1292: 1293: 1294: 1295: 1296: 1297: 1298: 1299: 1300: 1301: 1302: 1303: 1304: 1305: 1306: 1307: 1308: 1309: 1310: 1311: 1312: 1313: 1314: 1315: 1316: 1317: 1318: 1319: 1320: 1321: 1322: 1323: 1324: 1325: 1326: 1327: 1328: 1329: 1330: 1331: 1332: 1333: 1334: 1335: 1336: 1337: 1338: 1339: 1340: 1341: 1342: 1343: 1344: 1345: 1346: 1347: 1348: 1349: 1350: 1351: 1352: 1353: 1354: 1355: 1356: 1357: 1358: 1359: 1360: 1361: 1362: 1363: 1364: 1365: 1366: 1367: 1368: 1369: 1370: 1371: 1372: 1373: 1374: 1375: 1376: 1377: 1378: 1379: 1380: 1381: 1382: 1383: 1384: 1385: 1386: 1387: 1388: 1389: 1390: 1391: 1392: 1393: 1394: 1395: 1396: 1397: 1398: 1399: 1400: 1401: 1402: 1403: 1404: 1405: 1406: 1407: 1408: 1409: 1410: 1411: 1412: 1413: 1414: 1415: 1416: 1417: 1418: 1419: 1420: 1421: 1422: 1423: 1424: 1425: 1426: 1427: 1428: 1429: 1430: 1431: 1432: 1433: 1434: 1435: 1436: 1437: 1438: 1439: 1440: 1441: 1442: 1443: 1444: 1445: 1446: 1447: 1448: 1449: 1450: 1451: 1452: 1453: 1454: 1455: 1456: 1457: 1458: 1459: 1460: 1461: 1462: 1463: 1464: 1465: 1466: 1467: 1468: 1469: 1470: 1471: 1472: 1473: 1474: 1475: 1476: 1477: 1478: 1479: 1480: 1481: 1482: 1483: 1484: 1485: 1486: 1487: 1488: 1489: 1490: 1491: 1492: 1493: 1494: 1495: 1496: 1497: 1498: 1499: 1500: 1501: 1502: 1503: 1504: 1505: 1506: 1507: 1508: 1509: 1510: 1511: 1512: 1513: 1514: 1515: 1516: 1517: 1518: 1519: 1520: 1521: 1522: 1523: 1524: 1525: 1526: 1527: 1528: 1529: 1530: 1531: 1532: 1533: 1534: 1535: 1536: 1537: 1538: 1539: 1540: 1541: 1542: 1543: 1544: 1545: 1546: 1547: 1548: 1549: 1550: 1551: 1552: 1553: 1554: 1555: 1556: 1557: 1558: 1559: 1560: 1561: 1562: 1563: 1564: 1565: 1566: 1567: 1568: 1569: 1570: 1571: 1572: 1573: 1574: 1575: 1576: 1577: 1578: 1579: 1580: 1581: 1582: 1583: 1584: 1585: 1586: 1587: 1588: 1589: 1590: 1591: 1592: 1593: 1594: 1595: 1596: 1597: 1598: 1599: 1600: 1601: 1602: 1603: 1604: 1605: 1606: 1607: 1608: 1609: 1610: 1611: 1612: 1613: 1614: 1615: 1616: 1617: 1618: 1619: 1620: 1621: 1622: 1623: 1624: 1625: 1626: 1627: 1628: 1629: 1630: 1631: 1632: 1633: 1634: 1635: 1636: 1637: 1638: 1639: 1640: 1641: 1642: 1643: 1644: 1645: 1646: 1647: 1648: 1649: 1650: 1651: 1652: 1653: 1654: 1655: 1656: 1657: 1658: 1659: 1660: 1661: 1662: 1663: 1664: 1665: 1666: 1667: 1668: 1669: 1670: 1671: 1672: 1673: 1674: 1675: 1676: 1677: 1678: 1679: 1680: 1681: 1682: 1683: 1684: 1685: 1686: 1687: 1688: 1689: 1690: 1691: 1692: 1693: 1694: 1695: 1696: 1697: 1698: 1699: 1700: 1701: 1702: 1703: 1704: 1705: 1706: 1707: 1708: 1709: 1710: 1711: 1712: 1713: 1714: 1715: 1716: 1717: 1718: 1719: 1720: 1721: 1722: 1723: 1724: 1725: 1726: 1727: 1728: 1729: 1730: 1731: 1732: 1733: 1734: 1735: 1736: 1737: 1738: 1739: 1740: 1741: 1742: 1743: 1744: 1745: 1746: 1747: 1748: 1749: 1750: 1751: 1752: 1753: 1754: 1755: 1756: 1757: 1758: 1759: 1760: 1761: 1762: 1763: 1764: 1765: 1766: 1767: 1768: 1769: 1770: 1771: 1772: 1773: 1774: 1775: 1776: 1777: 1778: 1779: 1780: 1781: 1782: 1783: 1784: 1785: 1786: 1787: 1788: 1789: 1790: 1791: 1792: 1793: 1794: 1795: 1796: 1797: 1798: 1799: 1800: 1801: 1802: 1803: 1804: 1805: 1806: 1807: 1808: 1809: 1810: 1811: 1812: 1813: 1814: 1815: 1816: 1817: 1818: 1819: 1820: 1821: 1822: 1823: 1824: 1825: 1826: 1827: 1828: 1829: 1830: 1831: 1832: 1833: 1834: 1835: 1836: 1837: 1838: 1839: 1840: 1841: 1842: 1843: 1844: 1845: 1846: 1847: 1848: 1849: 1850: 1851: 1852: 1853: 1854: 1855: 1856: 1857: 1858: 1859: 1860: 1861: 1862: 1863: 1864: 1865: 1866: 1867: 1868: 1869: 1870: 1871: 1872: 1873: 1874: 1875: 1876: 1877: 1878: 1879: 1880: 1881: 1882: 1883: 1884: 1885: 1886: 1887: 1888: 1889: 1890: 1891: 1892: 1893: 1894: 1895: 1896: 1897: 1898: 1899: 1900: 1901: 1902: 1903: 1904: 1905: 1906: 1907: 1908: 1909: 1910: 1911: 1912: 1913: 1914: 1915: 1916: 1917: 1918: 1919: 1920: 1921: 1922: 1923: 1924: 1925: 1926: 1927: 1928: 1929: 1930: 1931: 1932: 1933: 

<?php

/**
 * This file concerns itself almost completely with theme administration.
 * Its tasks include changing theme settings, installing and removing
 * themes, choosing the current theme, and editing themes.
 *
 * @todo Update this for the new package manager?
 *
 * Creating and distributing theme packages:
 *  There isn't that much required to package and distribute your own themes...
 * just do the following:
 * - create a theme_info.xml file, with the root element theme-info.
 * - its name should go in a name element, just like description.
 * - your name should go in author. (email in the email attribute.)
 * - any support website for the theme should be in website.
 * - layers and templates (non-default) should go in those elements ;).
 * - if the images dir isn't images, specify in the images element.
 * - any extra rows for themes should go in extra, serialized. (as in array(variable => value).)
 * - tar and gzip the directory - and you're done!
 * - please include any special license in a license.txt file.
 *
 * Simple Machines Forum (SMF)
 *
 * @package SMF
 * @author Simple Machines https://www.simplemachines.org
 * @copyright 2020 Simple Machines and individual contributors
 * @license https://www.simplemachines.org/about/smf/license.php BSD
 *
 * @version 2.1 RC2
 */

if (!defined('SMF'))
    die('No direct access...');

/**
 * Subaction handler - manages the action and delegates control to the proper
 * sub-action.
 * It loads both the Themes and Settings language files.
 * Checks the session by GET or POST to verify the sent data.
 * Requires the user not be a guest. (@todo what?)
 * Accessed via ?action=admin;area=theme.
 */
function ThemesMain()
{
    global $txt, $context, $sourcedir;

    // Load the important language files...
    loadLanguage('Themes');
    loadLanguage('Settings');
    loadLanguage('Drafts');

    // No funny business - guests only.
    is_not_guest();

    require_once($sourcedir . '/Subs-Themes.php');

    // Default the page title to Theme Administration by default.
    $context['page_title'] = $txt['themeadmin_title'];

    // Theme administration, removal, choice, or installation...
    $subActions = array(
        'admin' => 'ThemeAdmin',
        'list' => 'ThemeList',
        'reset' => 'SetThemeOptions',
        'options' => 'SetThemeOptions',
        'install' => 'ThemeInstall',
        'remove' => 'RemoveTheme',
        'pick' => 'PickTheme',
        'edit' => 'EditTheme',
        'enable' => 'EnableTheme',
        'copy' => 'CopyTemplate',
    );

    // @todo Layout Settings?  huh?
    if (!empty($context['admin_menu_name']))
    {
        $context[$context['admin_menu_name']]['tab_data'] = array(
            'title' => $txt['themeadmin_title'],
            'help' => 'themes',
            'description' => $txt['themeadmin_description'],
            'tabs' => array(
                'admin' => array(
                    'description' => $txt['themeadmin_admin_desc'],
                ),
                'list' => array(
                    'description' => $txt['themeadmin_list_desc'],
                ),
                'reset' => array(
                    'description' => $txt['themeadmin_reset_desc'],
                ),
                'edit' => array(
                    'description' => $txt['themeadmin_edit_desc'],
                ),
            ),
        );
    }

    // CRUD $subActions as needed.
    call_integration_hook('integrate_manage_themes', array(&$subActions));

    // Whatever you decide to do, clean the minify cache.
    cache_put_data('minimized_css', null);

    // Follow the sa or just go to administration.
    if (isset($_GET['sa']) && !empty($subActions[$_GET['sa']]))
        call_helper($subActions[$_GET['sa']]);

    else
        call_helper($subActions['admin']);
}

/**
 * This function allows administration of themes and their settings,
 * as well as global theme settings.
 *  - sets the settings theme_allow, theme_guests, and knownThemes.
 *  - requires the admin_forum permission.
 *  - accessed with ?action=admin;area=theme;sa=admin.
 *
 * @uses Themes template
 * @uses Admin language file
 */
function ThemeAdmin()
{
    global $context, $boarddir;

    // Are handling any settings?
    if (isset($_POST['save']))
    {
        checkSession();
        validateToken('admin-tm');

        if (isset($_POST['options']['known_themes']))
            foreach ($_POST['options']['known_themes'] as $key => $id)
                $_POST['options']['known_themes'][$key] = (int) $id;

        else
            fatal_lang_error('themes_none_selectable', false);

        if (!in_array($_POST['options']['theme_guests'], $_POST['options']['known_themes']))
            fatal_lang_error('themes_default_selectable', false);

        // Commit the new settings.
        updateSettings(array(
            'theme_allow' => $_POST['options']['theme_allow'],
            'theme_guests' => $_POST['options']['theme_guests'],
            'knownThemes' => implode(',', $_POST['options']['known_themes']),
        ));
        if ((int) $_POST['theme_reset'] == 0 || in_array($_POST['theme_reset'], $_POST['options']['known_themes']))
            updateMemberData(null, array('id_theme' => (int) $_POST['theme_reset']));

        redirectexit('action=admin;area=theme;' . $context['session_var'] . '=' . $context['session_id'] . ';sa=admin');
    }

    loadLanguage('Admin');
    isAllowedTo('admin_forum');
    loadTemplate('Themes');

    // List all enabled themes.
    get_all_themes(true);

    // Can we create a new theme?
    $context['can_create_new'] = is_writable($boarddir . '/Themes');
    $context['new_theme_dir'] = substr(realpath($boarddir . '/Themes/default'), 0, -7);

    // Look for a non existent theme directory. (ie theme87.)
    $theme_dir = $boarddir . '/Themes/theme';
    $i = 1;
    while (file_exists($theme_dir . $i))
        $i++;

    $context['new_theme_name'] = 'theme' . $i;

    // A bunch of tokens for a bunch of forms.
    createToken('admin-tm');
    createToken('admin-t-file');
    createToken('admin-t-copy');
    createToken('admin-t-dir');
}

/**
 * This function lists the available themes and provides an interface to reset
 * the paths of all the installed themes.
 */
function ThemeList()
{
    global $context, $boarddir, $boardurl, $smcFunc;

    loadLanguage('Admin');
    isAllowedTo('admin_forum');

    if (isset($_REQUEST['th']))
        return SetThemeSettings();

    if (isset($_POST['save']))
    {
        checkSession();
        validateToken('admin-tl');

        // Calling the almighty power of global vars!
        get_installed_themes();

        $setValues = array();
        foreach ($context['themes'] as $id => $theme)
        {
            if (file_exists($_POST['reset_dir'] . '/' . basename($theme['theme_dir'])))
            {
                $setValues[] = array($id, 0, 'theme_dir', realpath($_POST['reset_dir'] . '/' . basename($theme['theme_dir'])));
                $setValues[] = array($id, 0, 'theme_url', $_POST['reset_url'] . '/' . basename($theme['theme_dir']));
                $setValues[] = array($id, 0, 'images_url', $_POST['reset_url'] . '/' . basename($theme['theme_dir']) . '/' . basename($theme['images_url']));
            }

            if (isset($theme['base_theme_dir']) && file_exists($_POST['reset_dir'] . '/' . basename($theme['base_theme_dir'])))
            {
                $setValues[] = array($id, 0, 'base_theme_dir', realpath($_POST['reset_dir'] . '/' . basename($theme['base_theme_dir'])));
                $setValues[] = array($id, 0, 'base_theme_url', $_POST['reset_url'] . '/' . basename($theme['base_theme_dir']));
                $setValues[] = array($id, 0, 'base_images_url', $_POST['reset_url'] . '/' . basename($theme['base_theme_dir']) . '/' . basename($theme['base_images_url']));
            }

            cache_put_data('theme_settings-' . $id, null, 90);
        }

        if (!empty($setValues))
        {
            $smcFunc['db_insert']('replace',
                '{db_prefix}themes',
                array('id_theme' => 'int', 'id_member' => 'int', 'variable' => 'string-255', 'value' => 'string-65534'),
                $setValues,
                array('id_theme', 'variable', 'id_member')
            );
        }

        redirectexit('action=admin;area=theme;sa=list;' . $context['session_var'] . '=' . $context['session_id']);
    }

    loadTemplate('Themes');

    // Get all installed themes.
    get_installed_themes();

    $context['reset_dir'] = realpath($boarddir . '/Themes');
    $context['reset_url'] = $boardurl . '/Themes';

    $context['sub_template'] = 'list_themes';
    createToken('admin-tl');
    createToken('admin-tr', 'request');
    createToken('admin-tre', 'request');
}

/**
 * Administrative global settings.
 */
function SetThemeOptions()
{
    global $txt, $context, $settings, $modSettings, $smcFunc;

    $_GET['th'] = isset($_GET['th']) ? (int) $_GET['th'] : (isset($_GET['id']) ? (int) $_GET['id'] : 0);

    isAllowedTo('admin_forum');

    if (empty($_GET['th']) && empty($_GET['id']))
    {
        $request = $smcFunc['db_query']('', '
            SELECT id_theme, variable, value
            FROM {db_prefix}themes
            WHERE variable IN ({string:name}, {string:theme_dir})
                AND id_member = {int:no_member}',
            array(
                'no_member' => 0,
                'name' => 'name',
                'theme_dir' => 'theme_dir',
            )
        );
        $context['themes'] = array();
        while ($row = $smcFunc['db_fetch_assoc']($request))
        {
            if (!isset($context['themes'][$row['id_theme']]))
                $context['themes'][$row['id_theme']] = array(
                    'id' => $row['id_theme'],
                    'num_default_options' => 0,
                    'num_members' => 0,
                );
            $context['themes'][$row['id_theme']][$row['variable']] = $row['value'];
        }
        $smcFunc['db_free_result']($request);

        $request = $smcFunc['db_query']('', '
            SELECT id_theme, COUNT(*) AS value
            FROM {db_prefix}themes
            WHERE id_member = {int:guest_member}
            GROUP BY id_theme',
            array(
                'guest_member' => -1,
            )
        );
        while ($row = $smcFunc['db_fetch_assoc']($request))
            $context['themes'][$row['id_theme']]['num_default_options'] = $row['value'];
        $smcFunc['db_free_result']($request);

        // Need to make sure we don't do custom fields.
        $request = $smcFunc['db_query']('', '
            SELECT col_name
            FROM {db_prefix}custom_fields',
            array(
            )
        );
        $customFields = array();
        while ($row = $smcFunc['db_fetch_assoc']($request))
            $customFields[] = $row['col_name'];
        $smcFunc['db_free_result']($request);
        $customFieldsQuery = empty($customFields) ? '' : ('AND variable NOT IN ({array_string:custom_fields})');

        $request = $smcFunc['db_query']('themes_count', '
            SELECT COUNT(DISTINCT id_member) AS value, id_theme
            FROM {db_prefix}themes
            WHERE id_member > {int:no_member}
                ' . $customFieldsQuery . '
            GROUP BY id_theme',
            array(
                'no_member' => 0,
                'custom_fields' => empty($customFields) ? array() : $customFields,
            )
        );
        while ($row = $smcFunc['db_fetch_assoc']($request))
            $context['themes'][$row['id_theme']]['num_members'] = $row['value'];
        $smcFunc['db_free_result']($request);

        // There has to be a Settings template!
        foreach ($context['themes'] as $k => $v)
            if (empty($v['theme_dir']) || (!file_exists($v['theme_dir'] . '/Settings.template.php') && empty($v['num_members'])))
                unset($context['themes'][$k]);

        loadTemplate('Themes');
        $context['sub_template'] = 'reset_list';

        createToken('admin-stor', 'request');
        return;
    }

    // Submit?
    if (isset($_POST['submit']) && empty($_POST['who']))
    {
        checkSession();
        validateToken('admin-sto');

        if (empty($_POST['options']))
            $_POST['options'] = array();
        if (empty($_POST['default_options']))
            $_POST['default_options'] = array();

        // Set up the sql query.
        $setValues = array();

        foreach ($_POST['options'] as $opt => $val)
            $setValues[] = array(-1, $_GET['th'], $opt, is_array($val) ? implode(',', $val) : $val);

        $old_settings = array();
        foreach ($_POST['default_options'] as $opt => $val)
        {
            $old_settings[] = $opt;

            $setValues[] = array(-1, 1, $opt, is_array($val) ? implode(',', $val) : $val);
        }

        // If we're actually inserting something..
        if (!empty($setValues))
        {
            // Are there options in non-default themes set that should be cleared?
            if (!empty($old_settings))
                $smcFunc['db_query']('', '
                    DELETE FROM {db_prefix}themes
                    WHERE id_theme != {int:default_theme}
                        AND id_member = {int:guest_member}
                        AND variable IN ({array_string:old_settings})',
                    array(
                        'default_theme' => 1,
                        'guest_member' => -1,
                        'old_settings' => $old_settings,
                    )
                );

            $smcFunc['db_insert']('replace',
                '{db_prefix}themes',
                array('id_member' => 'int', 'id_theme' => 'int', 'variable' => 'string-255', 'value' => 'string-65534'),
                $setValues,
                array('id_theme', 'variable', 'id_member')
            );
        }

        cache_put_data('theme_settings-' . $_GET['th'], null, 90);
        cache_put_data('theme_settings-1', null, 90);

        redirectexit('action=admin;area=theme;' . $context['session_var'] . '=' . $context['session_id'] . ';sa=reset');
    }
    elseif (isset($_POST['submit']) && $_POST['who'] == 1)
    {
        checkSession();
        validateToken('admin-sto');

        $_POST['options'] = empty($_POST['options']) ? array() : $_POST['options'];
        $_POST['options_master'] = empty($_POST['options_master']) ? array() : $_POST['options_master'];
        $_POST['default_options'] = empty($_POST['default_options']) ? array() : $_POST['default_options'];
        $_POST['default_options_master'] = empty($_POST['default_options_master']) ? array() : $_POST['default_options_master'];

        $old_settings = array();
        foreach ($_POST['default_options'] as $opt => $val)
        {
            if ($_POST['default_options_master'][$opt] == 0)
                continue;
            elseif ($_POST['default_options_master'][$opt] == 1)
            {
                // Delete then insert for ease of database compatibility!
                $smcFunc['db_query']('substring', '
                    DELETE FROM {db_prefix}themes
                    WHERE id_theme = {int:default_theme}
                        AND id_member > {int:no_member}
                        AND variable = SUBSTRING({string:option}, 1, 255)',
                    array(
                        'default_theme' => 1,
                        'no_member' => 0,
                        'option' => $opt,
                    )
                );
                $smcFunc['db_query']('substring', '
                    INSERT INTO {db_prefix}themes
                        (id_member, id_theme, variable, value)
                    SELECT id_member, 1, SUBSTRING({string:option}, 1, 255), SUBSTRING({string:value}, 1, 65534)
                    FROM {db_prefix}members',
                    array(
                        'option' => $opt,
                        'value' => (is_array($val) ? implode(',', $val) : $val),
                    )
                );

                $old_settings[] = $opt;
            }
            elseif ($_POST['default_options_master'][$opt] == 2)
            {
                $smcFunc['db_query']('', '
                    DELETE FROM {db_prefix}themes
                    WHERE variable = {string:option_name}
                        AND id_member > {int:no_member}',
                    array(
                        'no_member' => 0,
                        'option_name' => $opt,
                    )
                );
            }
        }

        // Delete options from other themes.
        if (!empty($old_settings))
            $smcFunc['db_query']('', '
                DELETE FROM {db_prefix}themes
                WHERE id_theme != {int:default_theme}
                    AND id_member > {int:no_member}
                    AND variable IN ({array_string:old_settings})',
                array(
                    'default_theme' => 1,
                    'no_member' => 0,
                    'old_settings' => $old_settings,
                )
            );

        foreach ($_POST['options'] as $opt => $val)
        {
            if ($_POST['options_master'][$opt] == 0)
                continue;
            elseif ($_POST['options_master'][$opt] == 1)
            {
                // Delete then insert for ease of database compatibility - again!
                $smcFunc['db_query']('substring', '
                    DELETE FROM {db_prefix}themes
                    WHERE id_theme = {int:current_theme}
                        AND id_member > {int:no_member}
                        AND variable = SUBSTRING({string:option}, 1, 255)',
                    array(
                        'current_theme' => $_GET['th'],
                        'no_member' => 0,
                        'option' => $opt,
                    )
                );
                $smcFunc['db_query']('substring', '
                    INSERT INTO {db_prefix}themes
                        (id_member, id_theme, variable, value)
                    SELECT id_member, {int:current_theme}, SUBSTRING({string:option}, 1, 255), SUBSTRING({string:value}, 1, 65534)
                    FROM {db_prefix}members',
                    array(
                        'current_theme' => $_GET['th'],
                        'option' => $opt,
                        'value' => (is_array($val) ? implode(',', $val) : $val),
                    )
                );
            }
            elseif ($_POST['options_master'][$opt] == 2)
            {
                $smcFunc['db_query']('', '
                    DELETE FROM {db_prefix}themes
                    WHERE variable = {string:option}
                        AND id_member > {int:no_member}
                        AND id_theme = {int:current_theme}',
                    array(
                        'no_member' => 0,
                        'current_theme' => $_GET['th'],
                        'option' => $opt,
                    )
                );
            }
        }

        redirectexit('action=admin;area=theme;' . $context['session_var'] . '=' . $context['session_id'] . ';sa=reset');
    }
    elseif (!empty($_GET['who']) && $_GET['who'] == 2)
    {
        checkSession('get');
        validateToken('admin-stor', 'request');

        // Don't delete custom fields!!
        if ($_GET['th'] == 1)
        {
            $request = $smcFunc['db_query']('', '
                SELECT col_name
                FROM {db_prefix}custom_fields',
                array(
                )
            );
            $customFields = array();
            while ($row = $smcFunc['db_fetch_assoc']($request))
                $customFields[] = $row['col_name'];
            $smcFunc['db_free_result']($request);
        }
        $customFieldsQuery = empty($customFields) ? '' : ('AND variable NOT IN ({array_string:custom_fields})');

        $smcFunc['db_query']('', '
            DELETE FROM {db_prefix}themes
            WHERE id_member > {int:no_member}
                AND id_theme = {int:current_theme}
                ' . $customFieldsQuery,
            array(
                'no_member' => 0,
                'current_theme' => $_GET['th'],
                'custom_fields' => empty($customFields) ? array() : $customFields,
            )
        );

        redirectexit('action=admin;area=theme;' . $context['session_var'] . '=' . $context['session_id'] . ';sa=reset');
    }

    $old_id = $settings['theme_id'];
    $old_settings = $settings;

    loadTheme($_GET['th'], false);

    loadLanguage('Profile');
    // @todo Should we just move these options so they are no longer theme dependant?
    loadLanguage('PersonalMessage');

    // Let the theme take care of the settings.
    loadTemplate('Settings');
    loadSubTemplate('options');

    // Let mods hook into the theme options.
    call_integration_hook('integrate_theme_options');

    $context['sub_template'] = 'set_options';
    $context['page_title'] = $txt['theme_settings'];

    $context['options'] = $context['theme_options'];
    $context['theme_settings'] = $settings;

    if (empty($_REQUEST['who']))
    {
        $request = $smcFunc['db_query']('', '
            SELECT variable, value
            FROM {db_prefix}themes
            WHERE id_theme IN (1, {int:current_theme})
                AND id_member = {int:guest_member}',
            array(
                'current_theme' => $_GET['th'],
                'guest_member' => -1,
            )
        );
        $context['theme_options'] = array();
        while ($row = $smcFunc['db_fetch_assoc']($request))
            $context['theme_options'][$row['variable']] = $row['value'];
        $smcFunc['db_free_result']($request);

        $context['theme_options_reset'] = false;
    }
    else
    {
        $context['theme_options'] = array();
        $context['theme_options_reset'] = true;
    }

    foreach ($context['options'] as $i => $setting)
    {
        // Just skip separators
        if (!is_array($setting))
            continue;

        // Is this disabled?
        if (isset($setting['enabled']) && $setting['enabled'] === false)
        {
            unset($context['options'][$i]);
            continue;
        }

        if (!isset($setting['type']) || $setting['type'] == 'bool')
            $context['options'][$i]['type'] = 'checkbox';
        elseif ($setting['type'] == 'int' || $setting['type'] == 'integer')
            $context['options'][$i]['type'] = 'number';
        elseif ($setting['type'] == 'string')
            $context['options'][$i]['type'] = 'text';

        if (isset($setting['options']))
            $context['options'][$i]['type'] = 'list';

        $context['options'][$i]['value'] = !isset($context['theme_options'][$setting['id']]) ? '' : $context['theme_options'][$setting['id']];
    }

    // Restore the existing theme.
    loadTheme($old_id, false);
    $settings = $old_settings;

    loadTemplate('Themes');
    createToken('admin-sto');
}

/**
 * Administrative global settings.
 * - saves and requests global theme settings. ($settings)
 * - loads the Admin language file.
 * - calls ThemeAdmin() if no theme is specified. (the theme center.)
 * - requires admin_forum permission.
 * - accessed with ?action=admin;area=theme;sa=list&th=xx.
 */
function SetThemeSettings()
{
    global $txt, $context, $settings, $modSettings, $smcFunc;

    if (empty($_GET['th']) && empty($_GET['id']))
        return ThemeAdmin();

    $_GET['th'] = isset($_GET['th']) ? (int) $_GET['th'] : (int) $_GET['id'];

    // Select the best fitting tab.
    $context[$context['admin_menu_name']]['current_subsection'] = 'list';

    loadLanguage('Admin');
    isAllowedTo('admin_forum');

    // Validate inputs/user.
    if (empty($_GET['th']))
        fatal_lang_error('no_theme', false);

    // Fetch the smiley sets...
    $sets = explode(',', 'none,' . $modSettings['smiley_sets_known']);
    $set_names = explode("\n", $txt['smileys_none'] . "\n" . $modSettings['smiley_sets_names']);
    $context['smiley_sets'] = array(
        '' => $txt['smileys_no_default']
    );
    foreach ($sets as $i => $set)
        $context['smiley_sets'][$set] = $smcFunc['htmlspecialchars']($set_names[$i]);

    $old_id = $settings['theme_id'];
    $old_settings = $settings;

    loadTheme($_GET['th'], false);

    // Sadly we really do need to init the template.
    loadSubTemplate('init', 'ignore');

    // Also load the actual themes language file - in case of special settings.
    loadLanguage('Settings', '', true, true);

    // And the custom language strings...
    loadLanguage('ThemeStrings', '', false, true);

    // Let the theme take care of the settings.
    loadTemplate('Settings');
    loadSubTemplate('settings');

    // Load the variants separately...
    $settings['theme_variants'] = array();
    if (file_exists($settings['theme_dir'] . '/index.template.php'))
    {
        $file_contents = implode('', file($settings['theme_dir'] . '/index.template.php'));
        if (preg_match('~\$settings\[\'theme_variants\'\]\s*=(.+?);~', $file_contents, $matches))
            eval('global $settings;' . $matches[0]);
    }

    // Let mods hook into the theme settings.
    call_integration_hook('integrate_theme_settings');

    // Submitting!
    if (isset($_POST['save']))
    {
        checkSession();
        validateToken('admin-sts');

        if (empty($_POST['options']))
            $_POST['options'] = array();
        if (empty($_POST['default_options']))
            $_POST['default_options'] = array();

        // Make sure items are cast correctly.
        foreach ($context['theme_settings'] as $item)
        {
            // Disregard this item if this is just a separator.
            if (!is_array($item))
                continue;

            foreach (array('options', 'default_options') as $option)
            {
                if (!isset($_POST[$option][$item['id']]))
                    continue;
                // Checkbox.
                elseif (empty($item['type']))
                    $_POST[$option][$item['id']] = $_POST[$option][$item['id']] ? 1 : 0;
                // Number
                elseif ($item['type'] == 'number')
                    $_POST[$option][$item['id']] = (int) $_POST[$option][$item['id']];
            }
        }

        // Set up the sql query.
        $inserts = array();
        foreach ($_POST['options'] as $opt => $val)
            $inserts[] = array(0, $_GET['th'], $opt, is_array($val) ? implode(',', $val) : $val);
        foreach ($_POST['default_options'] as $opt => $val)
            $inserts[] = array(0, 1, $opt, is_array($val) ? implode(',', $val) : $val);
        // If we're actually inserting something..
        if (!empty($inserts))
        {
            $smcFunc['db_insert']('replace',
                '{db_prefix}themes',
                array('id_member' => 'int', 'id_theme' => 'int', 'variable' => 'string-255', 'value' => 'string-65534'),
                $inserts,
                array('id_member', 'id_theme', 'variable')
            );
        }

        cache_put_data('theme_settings-' . $_GET['th'], null, 90);
        cache_put_data('theme_settings-1', null, 90);

        // Invalidate the cache.
        updateSettings(array('settings_updated' => time()));

        redirectexit('action=admin;area=theme;sa=list;th=' . $_GET['th'] . ';' . $context['session_var'] . '=' . $context['session_id']);
    }

    $context['sub_template'] = 'set_settings';
    $context['page_title'] = $txt['theme_settings'];

    foreach ($settings as $setting => $dummy)
    {
        if (!in_array($setting, array('theme_url', 'theme_dir', 'images_url', 'template_dirs')))
            $settings[$setting] = htmlspecialchars__recursive($settings[$setting]);
    }

    $context['settings'] = $context['theme_settings'];
    $context['theme_settings'] = $settings;

    foreach ($context['settings'] as $i => $setting)
    {
        // Separators are dummies, so leave them alone.
        if (!is_array($setting))
            continue;

        if (!isset($setting['type']) || $setting['type'] == 'bool')
            $context['settings'][$i]['type'] = 'checkbox';
        elseif ($setting['type'] == 'int' || $setting['type'] == 'integer')
            $context['settings'][$i]['type'] = 'number';
        elseif ($setting['type'] == 'string')
            $context['settings'][$i]['type'] = 'text';

        if (isset($setting['options']))
            $context['settings'][$i]['type'] = 'list';

        $context['settings'][$i]['value'] = !isset($settings[$setting['id']]) ? '' : $settings[$setting['id']];
    }

    // Do we support variants?
    if (!empty($settings['theme_variants']))
    {
        $context['theme_variants'] = array();
        foreach ($settings['theme_variants'] as $variant)
        {
            // Have any text, old chap?
            $context['theme_variants'][$variant] = array(
                'label' => isset($txt['variant_' . $variant]) ? $txt['variant_' . $variant] : $variant,
                'thumbnail' => !file_exists($settings['theme_dir'] . '/images/thumbnail.png') || file_exists($settings['theme_dir'] . '/images/thumbnail_' . $variant . '.png') ? $settings['images_url'] . '/thumbnail_' . $variant . '.png' : ($settings['images_url'] . '/thumbnail.png'),
            );
        }
        $context['default_variant'] = !empty($settings['default_variant']) && isset($context['theme_variants'][$settings['default_variant']]) ? $settings['default_variant'] : $settings['theme_variants'][0];
    }

    // Restore the current theme.
    loadTheme($old_id, false);

    // Reinit just incase.
    loadSubTemplate('init', 'ignore');

    $settings = $old_settings;

    loadTemplate('Themes');

    // We like Kenny better than Token.
    createToken('admin-sts');
}

/**
 * Remove a theme from the database.
 * - removes an installed theme.
 * - requires an administrator.
 * - accessed with ?action=admin;area=theme;sa=remove.
 */
function RemoveTheme()
{
    global $context;

    checkSession('get');

    isAllowedTo('admin_forum');
    validateToken('admin-tr', 'request');

    // The theme's ID must be an integer.
    $themeID = isset($_GET['th']) ? (int) $_GET['th'] : (int) $_GET['id'];

    // You can't delete the default theme!
    if ($themeID == 1)
        fatal_lang_error('no_access', false);

    $theme_info = get_single_theme($themeID);

    // Remove it from the DB.
    remove_theme($themeID);

    // And remove all its files and folders too.
    if (!empty($theme_info) && !empty($theme_info['theme_dir']))
        remove_dir($theme_info['theme_dir']);

    // Go back to the list page.
    redirectexit('action=admin;area=theme;sa=list;' . $context['session_var'] . '=' . $context['session_id'] . ';done=removing');
}

/**
 * Handles enabling/disabling a theme from the admin center
 */
function EnableTheme()
{
    global $modSettings, $context;

    checkSession('get');

    isAllowedTo('admin_forum');
    validateToken('admin-tre', 'request');

    // The theme's ID must be an string.
    $themeID = isset($_GET['th']) ? (string) trim($_GET['th']) : (string) trim($_GET['id']);

    // Get the current list.
    $enableThemes = explode(',', $modSettings['enableThemes']);

    // Are we disabling it?
    if (isset($_GET['disabled']))
        $enableThemes = array_diff($enableThemes, array($themeID));

    // Nope? then enable it!
    else
        $enableThemes[] = (string) $themeID;

    // Update the setting.
    $enableThemes = strtr(implode(',', $enableThemes), array(',,' => ','));
    updateSettings(array('enableThemes' => $enableThemes));

    // Done!
    redirectexit('action=admin;area=theme;sa=list;' . $context['session_var'] . '=' . $context['session_id'] . ';done=' . (isset($_GET['disabled']) ? 'disabling' : 'enabling'));
}

/**
 * Determines if a user can change their theme.
 *
 * @param int $id_member
 * @param int $id_theme
 *
 * @return bool
 */
function canPickTheme($id_member, $id_theme)
{
    global $modSettings, $user_info;

    return
        allowedTo($user_info['id'] == $id_member ? 'profile_extra_own' : 'profile_extra_any')
        && ($id_theme == 0 || (allowedTo('admin_forum') || in_array($id_theme, explode(',', $modSettings['knownThemes']))) && in_array($id_theme, explode(',', $modSettings['enableThemes'])))
        && (!empty($modSettings['theme_allow']) || allowedTo('admin_forum'));
}

/**
 * Choose a theme from a list.
 * allows a user to pick a new theme with an interface.
 * - uses the Themes template. (pick sub template.)
 * - accessed with ?action=theme;sa=pick.
 */
function PickTheme()
{
    global $txt, $context, $modSettings, $user_info, $language, $smcFunc, $settings, $scripturl;

    loadLanguage('Profile');
    loadTemplate('Themes');

    // Build the link tree.
    $context['linktree'][] = array(
        'url' => $scripturl . '?action=theme;sa=pick;u=' . (!empty($_REQUEST['u']) ? (int) $_REQUEST['u'] : 0),
        'name' => $txt['theme_pick'],
    );
    $context['default_theme_id'] = $modSettings['theme_default'];
    $_SESSION['id_theme'] = 0;
    if (!isset($_REQUEST['u']))
        $_REQUEST['u'] = $user_info['id'];

    // Have we made a decision, or are we just browsing?
    if (isset($_POST['save']))
    {
        checkSession();
        validateToken('pick-th');

        $id_theme = (int) key($_POST['save']);
        if (isset($_POST['vrt'][$id_theme]))
            $variant = $_POST['vrt'][$id_theme];

        if (canPickTheme((int) $_REQUEST['u'], $id_theme))
        {
            // An identifier of zero means that the user wants the forum default theme.
            updateMemberData((int) $_REQUEST['u'], array('id_theme' => $id_theme));

            if (!empty($variant))
            {
                // Set the identifier to the forum default.
                if (isset($id_theme) && $id_theme == 0)
                    $id_theme = $modSettings['theme_guests'];

                $smcFunc['db_insert']('replace',
                    '{db_prefix}themes',
                    array('id_theme' => 'int', 'id_member' => 'int', 'variable' => 'string-255', 'value' => 'string-65534'),
                    array($id_theme, (int) $_REQUEST['u'], 'theme_variant', $variant),
                    array('id_theme', 'id_member', 'variable')
                );
                cache_put_data('theme_settings-' . $id_theme . ':' . (int) $_REQUEST['u'], null, 90);

                if ($user_info['id'] == $_REQUEST['u'])
                    $_SESSION['id_variant'] = 0;
            }

            redirectexit('action=profile;u=' . (int) $_REQUEST['u'] . ';area=theme');
        }
    }

    // Figure out who the member of the minute is, and what theme they've chosen.
    if (!isset($_REQUEST['u']) || !allowedTo('admin_forum'))
    {
        $context['current_member'] = $user_info['id'];
        $context['current_theme'] = $user_info['theme'];
    }
    else
    {
        $context['current_member'] = (int) $_REQUEST['u'];

        $request = $smcFunc['db_query']('', '
            SELECT id_theme
            FROM {db_prefix}members
            WHERE id_member = {int:current_member}
            LIMIT 1',
            array(
                'current_member' => $context['current_member'],
            )
        );
        list ($context['current_theme']) = $smcFunc['db_fetch_row']($request);
        $smcFunc['db_free_result']($request);
    }

    // Get the theme name and descriptions.
    $context['available_themes'] = array();
    if (!empty($modSettings['knownThemes']))
    {
        $request = $smcFunc['db_query']('', '
            SELECT id_theme, variable, value
            FROM {db_prefix}themes
            WHERE variable IN ({literal:name}, {literal:theme_url}, {literal:theme_dir}, {literal:images_url}, {literal:disable_user_variant})' . (!allowedTo('admin_forum') ? '
                AND id_theme IN ({array_int:known_themes})' : '') . '
                AND id_theme != {int:default_theme}
                AND id_member = {int:no_member}
                AND id_theme IN ({array_int:enable_themes})',
            array(
                'default_theme' => 0,
                'no_member' => 0,
                'known_themes' => explode(',', $modSettings['knownThemes']),
                'enable_themes' => explode(',', $modSettings['enableThemes']),
            )
        );
        while ($row = $smcFunc['db_fetch_assoc']($request))
        {
            if (!isset($context['available_themes'][$row['id_theme']]))
                $context['available_themes'][$row['id_theme']] = array(
                    'id' => $row['id_theme'],
                    'selected' => $context['current_theme'] == $row['id_theme'],
                    'num_users' => 0
                );
            $context['available_themes'][$row['id_theme']][$row['variable']] = $row['value'];
        }
        $smcFunc['db_free_result']($request);
    }

    // Okay, this is a complicated problem: the default theme is 1, but they aren't allowed to access 1!
    if (!isset($context['available_themes'][$modSettings['theme_guests']]))
    {
        $context['available_themes'][0] = array(
            'num_users' => 0
        );
        $guest_theme = 0;
    }
    else
        $guest_theme = $modSettings['theme_guests'];

    $request = $smcFunc['db_query']('', '
        SELECT id_theme, COUNT(*) AS the_count
        FROM {db_prefix}members
        GROUP BY id_theme
        ORDER BY id_theme DESC',
        array(
        )
    );
    while ($row = $smcFunc['db_fetch_assoc']($request))
    {
        // Figure out which theme it is they are REALLY using.
        if (!empty($modSettings['knownThemes']) && !in_array($row['id_theme'], explode(',', $modSettings['knownThemes'])))
            $row['id_theme'] = $guest_theme;
        elseif (empty($modSettings['theme_allow']))
            $row['id_theme'] = $guest_theme;

        if (isset($context['available_themes'][$row['id_theme']]))
            $context['available_themes'][$row['id_theme']]['num_users'] += $row['the_count'];
        else
            $context['available_themes'][$guest_theme]['num_users'] += $row['the_count'];
    }
    $smcFunc['db_free_result']($request);

    // Get any member variant preferences.
    $variant_preferences = array();
    if ($context['current_member'] > 0)
    {
        $request = $smcFunc['db_query']('', '
            SELECT id_theme, value
            FROM {db_prefix}themes
            WHERE variable = {string:theme_variant}
                AND id_member IN ({array_int:id_member})
            ORDER BY id_member ASC',
            array(
                'theme_variant' => 'theme_variant',
                'id_member' => isset($_REQUEST['sa']) && $_REQUEST['sa'] == 'pick' ? array(-1, $context['current_member']) : array(-1),
            )
        );
        while ($row = $smcFunc['db_fetch_assoc']($request))
            $variant_preferences[$row['id_theme']] = $row['value'];
        $smcFunc['db_free_result']($request);
    }

    // Save the setting first.
    $current_images_url = $settings['images_url'];
    $current_theme_variants = !empty($settings['theme_variants']) ? $settings['theme_variants'] : array();

    foreach ($context['available_themes'] as $id_theme => $theme_data)
    {
        // Don't try to load the forum or board default theme's data... it doesn't have any!
        if ($id_theme == 0)
            continue;

        // The thumbnail needs the correct path.
        $settings['images_url'] = &$theme_data['images_url'];

        if (file_exists($theme_data['theme_dir'] . '/languages/Settings.' . $user_info['language'] . '.php'))
            include($theme_data['theme_dir'] . '/languages/Settings.' . $user_info['language'] . '.php');
        elseif (file_exists($theme_data['theme_dir'] . '/languages/Settings.' . $language . '.php'))
            include($theme_data['theme_dir'] . '/languages/Settings.' . $language . '.php');
        else
        {
            $txt['theme_thumbnail_href'] = $theme_data['images_url'] . '/thumbnail.png';
            $txt['theme_description'] = '';
        }

        $context['available_themes'][$id_theme]['thumbnail_href'] = $txt['theme_thumbnail_href'];
        $context['available_themes'][$id_theme]['description'] = $txt['theme_description'];

        // Are there any variants?
        $context['available_themes'][$id_theme]['variants'] = array();
        if (file_exists($theme_data['theme_dir'] . '/index.template.php') && (empty($theme_data['disable_user_variant']) || allowedTo('admin_forum')))
        {
            $file_contents = implode('', file($theme_data['theme_dir'] . '/index.template.php'));
            if (preg_match('~\$settings\[\'theme_variants\'\]\s*=(.+?);~', $file_contents, $matches))
            {
                $settings['theme_variants'] = array();

                // Fill settings up.
                eval('global $settings;' . $matches[0]);

                if (!empty($settings['theme_variants']))
                {
                    loadLanguage('Settings');

                    foreach ($settings['theme_variants'] as $variant)
                        $context['available_themes'][$id_theme]['variants'][$variant] = array(
                            'label' => isset($txt['variant_' . $variant]) ? $txt['variant_' . $variant] : $variant,
                            'thumbnail' => !file_exists($theme_data['theme_dir'] . '/images/thumbnail.png') || file_exists($theme_data['theme_dir'] . '/images/thumbnail_' . $variant . '.png') ? $theme_data['images_url'] . '/thumbnail_' . $variant . '.png' : ($theme_data['images_url'] . '/thumbnail.png'),
                        );

                    $context['available_themes'][$id_theme]['selected_variant'] = isset($_GET['vrt']) ? $_GET['vrt'] : (!empty($variant_preferences[$id_theme]) ? $variant_preferences[$id_theme] : (!empty($settings['default_variant']) ? $settings['default_variant'] : $settings['theme_variants'][0]));
                    if (!isset($context['available_themes'][$id_theme]['variants'][$context['available_themes'][$id_theme]['selected_variant']]['thumbnail']))
                        $context['available_themes'][$id_theme]['selected_variant'] = $settings['theme_variants'][0];

                    $context['available_themes'][$id_theme]['thumbnail_href'] = $context['available_themes'][$id_theme]['variants'][$context['available_themes'][$id_theme]['selected_variant']]['thumbnail'];
                    // Allow themes to override the text.
                    $context['available_themes'][$id_theme]['pick_label'] = isset($txt['variant_pick']) ? $txt['variant_pick'] : $txt['theme_pick_variant'];
                }
            }
        }
    }
    // Then return it.
    addJavaScriptVar(
        'oThemeVariants',
        json_encode(array_map(function($theme)
        {
            return $theme['variants'];
        }, $context['available_themes']
    )));
    loadJavaScriptFile('profile.js', array('defer' => false, 'minimize' => true), 'smf_profile');
    $settings['images_url'] = $current_images_url;
    $settings['theme_variants'] = $current_theme_variants;

    // As long as we're not doing the default theme...
    if (!isset($_REQUEST['u']) || $_REQUEST['u'] >= 0)
    {
        if ($guest_theme != 0)
            $context['available_themes'][0] = $context['available_themes'][$guest_theme];

        $context['available_themes'][0]['id'] = 0;
        $context['available_themes'][0]['name'] = $txt['theme_forum_default'];
        $context['available_themes'][0]['selected'] = $context['current_theme'] == 0;
        $context['available_themes'][0]['description'] = $txt['theme_global_description'];
    }

    ksort($context['available_themes']);

    $context['page_title'] = $txt['theme_pick'];
    $context['sub_template'] = 'pick';
    createToken('pick-th');
}

/**
 * Installs new themes, calls the respective function according to the install type.
 * - puts themes in $boardurl/Themes.
 * - assumes the gzip has a root directory in it. (ie default.)
 * Requires admin_forum.
 * Accessed with ?action=admin;area=theme;sa=install.
 */
function ThemeInstall()
{
    global $sourcedir, $txt, $context, $boarddir, $boardurl;
    global $themedir, $themeurl, $smcFunc;

    checkSession('request');
    isAllowedTo('admin_forum');

    require_once($sourcedir . '/Subs-Package.php');

    // Make it easier to change the path and url.
    $themedir = $boarddir . '/Themes';
    $themeurl = $boardurl . '/Themes';

    loadTemplate('Themes');

    $subActions = array(
        'file' => 'InstallFile',
        'copy' => 'InstallCopy',
        'dir' => 'InstallDir',
    );

    // Is there a function to call?
    if (isset($_GET['do']) && !empty($_GET['do']) && isset($subActions[$_GET['do']]))
    {
        $action = $smcFunc['htmlspecialchars'](trim($_GET['do']));

        // Got any info from the specific form?
        if (!isset($_POST['save_' . $action]))
            fatal_lang_error('theme_install_no_action', false);

        validateToken('admin-t-' . $action);

        // Hopefully the themes directory is writable, or we might have a problem.
        if (!is_writable($themedir))
            fatal_lang_error('theme_install_write_error', 'critical');

        // Call the function and handle the result.
        $result = $subActions[$action]();

        // Everything went better than expected!
        if (!empty($result))
        {
            $context['sub_template'] = 'installed';
            $context['page_title'] = $txt['theme_installed'];
            $context['installed_theme'] = $result;
        }
    }

    // Nope, show a nice error.
    else
        fatal_lang_error('theme_install_no_action', false);
}

/**
 * Installs a theme from a theme package.
 *
 * Stores the theme files on a temp dir, on success it renames the dir to the new theme's name. Ends execution with fatal_lang_error() on any error.
 *
 * @return array The newly created theme's info.
 */
function InstallFile()
{
    global $themedir, $themeurl, $context;

    // Set a temp dir for dumping all required files on it.
    $dirtemp = $themedir . '/temp';

    // Make sure the temp dir doesn't already exist
    if (file_exists($dirtemp))
        remove_dir($dirtemp);

    // Create the temp dir.
    mkdir($dirtemp, 0777);

    // Hopefully the temp directory is writable, or we might have a problem.
    if (!is_writable($dirtemp))
    {
        // Lets give it a try.
        smf_chmod($dirtemp, '0755');

        // How about now?
        if (!is_writable($dirtemp))
            fatal_lang_error('theme_install_write_error', 'critical');
    }

    // This happens when the admin session is gone and the user has to login again.
    if (!isset($_FILES) || !isset($_FILES['theme_gz']) || empty($_FILES['theme_gz']))
        redirectexit('action=admin;area=theme;sa=admin;' . $context['session_var'] . '=' . $context['session_id']);

    // Another error check layer, something went wrong with the upload.
    if (isset($_FILES['theme_gz']['error']) && $_FILES['theme_gz']['error'] != 0)
        fatal_lang_error('theme_install_error_file_' . $_FILES['theme_gz']['error'], false);

    // Get the theme's name.
    $name = pathinfo($_FILES['theme_gz']['name'], PATHINFO_FILENAME);
    $name = preg_replace(array('/\s/', '/\.[\.]+/', '/[^\w_\.\-]/', '/\.tar$/'), array('_', '.', '', ''), $name);

    // Start setting some vars.
    $context['to_install'] = array(
        'theme_dir' => $themedir . '/' . $name,
        'theme_url' => $themeurl . '/' . $name,
        'images_url' => $themeurl . '/' . $name . '/images',
        'name' => $name,
    );

    // Extract the file on the proper themes dir.
    $extracted = read_tgz_file($_FILES['theme_gz']['tmp_name'], $dirtemp, false, true);

    if ($extracted)
    {
        // Read its info form the XML file.
        $theme_info = get_theme_info($dirtemp);
        $context['to_install'] += $theme_info;

        // Install the theme. theme_install() will return the new installed ID.
        $context['to_install']['id'] = theme_install($context['to_install']);

        // Rename the temp dir to the actual theme name.
        rename($dirtemp, $context['to_install']['theme_dir']);

        // return all the info.
        return $context['to_install'];
    }

    else
        fatal_lang_error('theme_install_error_title', false);
}

/**
 * Makes a copy from the default theme, assigns a name for it and installs it.
 *
 * Creates a new .xml file containing all the theme's info.
 *
 * @return array The newly created theme's info.
 */
function InstallCopy()
{
    global $themedir, $themeurl, $settings, $smcFunc, $context;

    // There's gotta be something to work with.
    if (!isset($_REQUEST['copy']) || empty($_REQUEST['copy']))
        fatal_lang_error('theme_install_error_title', false);

    // Get a cleaner version.
    $name = preg_replace('~[^A-Za-z0-9_\- ]~', '', $_REQUEST['copy']);

    // Is there a theme already named like this?
    if (file_exists($themedir . '/' . $name))
        fatal_lang_error('theme_install_already_dir', false);

    // This is a brand new theme so set all possible values.
    $context['to_install'] = array(
        'theme_dir' => $themedir . '/' . $name,
        'theme_url' => $themeurl . '/' . $name,
        'name' => $name,
        'images_url' => $themeurl . '/' . $name . '/images',
        'version' => '1.0',
        'install_for' => '2.1 - 2.1.99, ' . SMF_VERSION,
        'based_on' => '',
        'based_on_dir' => $themedir . '/default',
    );

    // Create the specific dir.
    umask(0);
    mkdir($context['to_install']['theme_dir'], 0777);

    // Buy some time.
    @set_time_limit(600);
    if (function_exists('apache_reset_timeout'))
        @apache_reset_timeout();

    // Create subdirectories for css and javascript files.
    mkdir($context['to_install']['theme_dir'] . '/css', 0777);
    mkdir($context['to_install']['theme_dir'] . '/scripts', 0777);

    // Copy over the default non-theme files.
    $to_copy = array('/index.php', '/index.template.php', '/css/index.css', '/css/responsive.css', '/css/slider.min.css', '/css/rtl.css', '/css/calendar.css', '/css/calendar.rtl.css', '/css/admin.css', '/scripts/theme.js');

    foreach ($to_copy as $file)
    {
        copy($settings['default_theme_dir'] . $file, $context['to_install']['theme_dir'] . $file);
        smf_chmod($context['to_install']['theme_dir'] . $file, 0777);
    }

    // And now the entire images directory!
    copytree($settings['default_theme_dir'] . '/images', $context['to_install']['theme_dir'] . '/images');
    package_flush_cache();

    // Lets get some data for the new theme.
    $request = $smcFunc['db_query']('', '
        SELECT variable, value
        FROM {db_prefix}themes
        WHERE variable IN ({string:theme_templates}, {string:theme_layers})
            AND id_member = {int:no_member}
            AND id_theme = {int:default_theme}',
        array(
            'no_member' => 0,
            'default_theme' => 1,
            'theme_templates' => 'theme_templates',
            'theme_layers' => 'theme_layers',
        )
    );

    while ($row = $smcFunc['db_fetch_assoc']($request))
    {
        if ($row['variable'] == 'theme_templates')
            $theme_templates = $row['value'];
        elseif ($row['variable'] == 'theme_layers')
            $theme_layers = $row['value'];
        else
            continue;
    }

    $smcFunc['db_free_result']($request);

    $context['to_install'] += array(
        'theme_layers' => empty($theme_layers) ? 'html,body' : $theme_layers,
        'theme_templates' => empty($theme_templates) ? 'index' : $theme_templates,
    );

    // Lets add a theme_info.xml to this theme.
    $xml_info = '<' . '?xml version="1.0"?' . '>
<theme-info xmlns="http://www.simplemachines.org/xml/theme-info" xmlns:smf="http://www.simplemachines.org/">
<!-- For the id, always use something unique - put your name, a colon, and then the package name. -->
<id>smf:' . $smcFunc['strtolower']($context['to_install']['name']) . '</id>
<!-- The theme\'s version, please try to use semantic versioning. -->
<version>1.0</version>
<!-- Install for, the SMF versions this theme was designed for. Uses the same wildcards used in the packager manager. This field is mandatory. -->
<install for="' . $context['to_install']['install_for'] . '" />
<!-- Theme name, used purely for aesthetics. -->
<name>' . $context['to_install']['name'] . '</name>
<!-- Author: your email address or contact information. The name attribute is optional. -->
<author name="Simple Machines">info@simplemachines.org</author>
<!-- Website... where to get updates and more information. -->
<website>https://www.simplemachines.org/</website>
<!-- Template layers to use, defaults to "html,body". -->
<layers>' . $context['to_install']['theme_layers'] . '</layers>
<!-- Templates to load on startup. Default is "index". -->
<templates>' . $context['to_install']['theme_templates'] . '</templates>
<!-- Base this theme off another? Default is blank, or no. It could be "default". -->
<based-on></based-on>
</theme-info>';

    // Now write it.
    $fp = @fopen($context['to_install']['theme_dir'] . '/theme_info.xml', 'w+');
    if ($fp)
    {
        fwrite($fp, $xml_info);
        fclose($fp);
    }

    // Install the theme. theme_install() will take care of possible errors.
    $context['to_install']['id'] = theme_install($context['to_install']);

    // return the info.
    return $context['to_install'];
}

/**
 * Install a theme from a specific dir
 *
 * Assumes the dir is located on the main Themes dir. Ends execution with fatal_lang_error() on any error.
 *
 * @return array The newly created theme's info.
 */
function InstallDir()
{
    global $themedir, $themeurl, $context;

    // Cannot use the theme dir as a theme dir.
    if (!isset($_REQUEST['theme_dir']) || empty($_REQUEST['theme_dir']) || rtrim(realpath($_REQUEST['theme_dir']), '/\\') == realpath($themedir))
        fatal_lang_error('theme_install_invalid_dir', false);

    // Check is there is "something" on the dir.
    elseif (!is_dir($_REQUEST['theme_dir']) || !file_exists($_REQUEST['theme_dir'] . '/theme_info.xml'))
        fatal_lang_error('theme_install_error', false);

    $name = basename($_REQUEST['theme_dir']);
    $name = preg_replace(array('/\s/', '/\.[\.]+/', '/[^\w_\.\-]/'), array('_', '.', ''), $name);

    // All good! set some needed vars.
    $context['to_install'] = array(
        'theme_dir' => $_REQUEST['theme_dir'],
        'theme_url' => $themeurl . '/' . $name,
        'name' => $name,
        'images_url' => $themeurl . '/' . $name . '/images',
    );

    // Read its info form the XML file.
    $theme_info = get_theme_info($context['to_install']['theme_dir']);
    $context['to_install'] += $theme_info;

    // Install the theme. theme_install() will take care of possible errors.
    $context['to_install']['id'] = theme_install($context['to_install']);

    // return the info.
    return $context['to_install'];
}

/**
 * Possibly the simplest and best example of how to use the template system.
 *  - allows the theme to take care of actions.
 *  - happens if $settings['catch_action'] is set and action isn't found
 *   in the action array.
 *  - can use a template, layers, sub_template, filename, and/or function.
 */
function WrapAction()
{
    global $context, $settings;

    // Load any necessary template(s)?
    if (isset($settings['catch_action']['template']))
    {
        // Load both the template and language file. (but don't fret if the language file isn't there...)
        loadTemplate($settings['catch_action']['template']);
        loadLanguage($settings['catch_action']['template'], '', false);
    }

    // Any special layers?
    if (isset($settings['catch_action']['layers']))
        $context['template_layers'] = $settings['catch_action']['layers'];

    // Any function to call?
    if (isset($settings['catch_action']['function']))
    {
        $hook = $settings['catch_action']['function'];

        if (!isset($settings['catch_action']['filename']))
            $settings['catch_action']['filename'] = '';

        add_integration_function('integrate_wrap_action', $hook, false, $settings['catch_action']['filename'], false);
        call_integration_hook('integrate_wrap_action');
    }
    // And finally, the main sub template ;).
    if (isset($settings['catch_action']['sub_template']))
        $context['sub_template'] = $settings['catch_action']['sub_template'];
}

/**
 * Set an option via javascript.
 * - sets a theme option without outputting anything.
 * - can be used with javascript, via a dummy image... (which doesn't require
 * the page to reload.)
 * - requires someone who is logged in.
 * - accessed via ?action=jsoption;var=variable;val=value;session_var=sess_id.
 * - does not log access to the Who's Online log. (in index.php..)
 */
function SetJavaScript()
{
    global $settings, $user_info, $smcFunc, $options;

    // Check the session id.
    checkSession('get');

    // This good-for-nothing pixel is being used to keep the session alive.
    if (empty($_GET['var']) || !isset($_GET['val']))
        redirectexit($settings['images_url'] . '/blank.png');

    // Sorry, guests can't go any further than this.
    if ($user_info['is_guest'] || $user_info['id'] == 0)
        obExit(false);

    $reservedVars = array(
        'actual_theme_url',
        'actual_images_url',
        'base_theme_dir',
        'base_theme_url',
        'default_images_url',
        'default_theme_dir',
        'default_theme_url',
        'default_template',
        'images_url',
        'number_recent_posts',
        'smiley_sets_default',
        'theme_dir',
        'theme_id',
        'theme_layers',
        'theme_templates',
        'theme_url',
        'name',
    );

    // Can't change reserved vars.
    if (in_array(strtolower($_GET['var']), $reservedVars))
        redirectexit($settings['images_url'] . '/blank.png');

    // Use a specific theme?
    if (isset($_GET['th']) || isset($_GET['id']))
    {
        // Invalidate the current themes cache too.
        cache_put_data('theme_settings-' . $settings['theme_id'] . ':' . $user_info['id'], null, 60);

        $settings['theme_id'] = isset($_GET['th']) ? (int) $_GET['th'] : (int) $_GET['id'];
    }

    // If this is the admin preferences the passed value will just be an element of it.
    if ($_GET['var'] == 'admin_preferences')
    {
        $options['admin_preferences'] = !empty($options['admin_preferences']) ? $smcFunc['json_decode']($options['admin_preferences'], true) : array();
        // New thingy...
        if (isset($_GET['admin_key']) && strlen($_GET['admin_key']) < 5)
            $options['admin_preferences'][$_GET['admin_key']] = $_GET['val'];

        // Change the value to be something nice,
        $_GET['val'] = $smcFunc['json_encode']($options['admin_preferences']);
    }

    // Update the option.
    $smcFunc['db_insert']('replace',
        '{db_prefix}themes',
        array('id_theme' => 'int', 'id_member' => 'int', 'variable' => 'string-255', 'value' => 'string-65534'),
        array($settings['theme_id'], $user_info['id'], $_GET['var'], is_array($_GET['val']) ? implode(',', $_GET['val']) : $_GET['val']),
        array('id_theme', 'id_member', 'variable')
    );

    cache_put_data('theme_settings-' . $settings['theme_id'] . ':' . $user_info['id'], null, 60);

    // Don't output anything...
    redirectexit($settings['images_url'] . '/blank.png');
}

/**
 * Shows an interface for editing the templates.
 * - uses the Themes template and edit_template/edit_style sub template.
 * - accessed via ?action=admin;area=theme;sa=edit
 */
function EditTheme()
{
    global $context, $scripturl, $boarddir, $smcFunc, $txt;

    // @todo Should this be removed?
    if (isset($_REQUEST['preview']))
        die('die() with fire');

    isAllowedTo('admin_forum');
    loadTemplate('Themes');

    $_GET['th'] = isset($_GET['th']) ? (int) $_GET['th'] : (int) @$_GET['id'];

    if (empty($_GET['th']))
    {
        get_installed_themes();

        foreach ($context['themes'] as $key => $theme)
        {
            // There has to be a Settings template!
            if (!file_exists($theme['theme_dir'] . '/index.template.php') && !file_exists($theme['theme_dir'] . '/css/index.css'))
                unset($context['themes'][$key]);

            else
                $context['themes'][$key]['can_edit_style'] = file_exists($theme['theme_dir'] . '/css/index.css');
        }

        $context['sub_template'] = 'edit_list';

        return 'no_themes';
    }

    $context['session_error'] = false;

    // Get the directory of the theme we are editing.
    $currentTheme = get_single_theme($_GET['th']);
    $context['theme_id'] = $currentTheme['id'];
    $context['browse_title'] = sprintf($txt['themeadmin_browsing_theme'], $currentTheme['name']);

    if (!file_exists($currentTheme['theme_dir'] . '/index.template.php') && !file_exists($currentTheme['theme_dir'] . '/css/index.css'))
        fatal_lang_error('theme_edit_missing', false);

    if (!isset($_REQUEST['filename']))
    {
        if (isset($_GET['directory']))
        {
            if (substr($_GET['directory'], 0, 1) == '.')
                $_GET['directory'] = '';
            else
            {
                $_GET['directory'] = preg_replace(array('~^[\./\\:\0\n\r]+~', '~[\\\\]~', '~/[\./]+~'), array('', '/', '/'), $_GET['directory']);

                $temp = realpath($currentTheme['theme_dir'] . '/' . $_GET['directory']);
                if (empty($temp) || substr($temp, 0, strlen(realpath($currentTheme['theme_dir']))) != realpath($currentTheme['theme_dir']))
                    $_GET['directory'] = '';
            }
        }

        if (isset($_GET['directory']) && $_GET['directory'] != '')
        {
            $context['theme_files'] = get_file_listing($currentTheme['theme_dir'] . '/' . $_GET['directory'], $_GET['directory'] . '/');

            $temp = dirname($_GET['directory']);
            array_unshift($context['theme_files'], array(
                'filename' => $temp == '.' || $temp == '' ? '/ (..)' : $temp . ' (..)',
                'is_writable' => is_writable($currentTheme['theme_dir'] . '/' . $temp),
                'is_directory' => true,
                'is_template' => false,
                'is_image' => false,
                'is_editable' => false,
                'href' => $scripturl . '?action=admin;area=theme;th=' . $_GET['th'] . ';' . $context['session_var'] . '=' . $context['session_id'] . ';sa=edit;directory=' . $temp,
                'size' => '',
            ));
        }
        else
            $context['theme_files'] = get_file_listing($currentTheme['theme_dir'], '');

        // Do not list minified_ files
        foreach ($context['theme_files'] as $key => $file)
        {
            if (strpos($file['filename'], 'minified_') !== false)
                unset($context['theme_files'][$key]);
        }

        $context['sub_template'] = 'edit_browse';

        return;
    }
    else
    {
        if (substr($_REQUEST['filename'], 0, 1) == '.')
            $_REQUEST['filename'] = '';
        else
        {
            $_REQUEST['filename'] = preg_replace(array('~^[\./\\:\0\n\r]+~', '~[\\\\]~', '~/[\./]+~'), array('', '/', '/'), $_REQUEST['filename']);

            $temp = realpath($currentTheme['theme_dir'] . '/' . $_REQUEST['filename']);
            if (empty($temp) || substr($temp, 0, strlen(realpath($currentTheme['theme_dir']))) != realpath($currentTheme['theme_dir']))
                $_REQUEST['filename'] = '';
        }

        if (empty($_REQUEST['filename']))
            fatal_lang_error('theme_edit_missing', false);
    }

    if (isset($_POST['save']))
    {
        if (checkSession('post', '', false) == '' && validateToken('admin-te-' . md5($_GET['th'] . '-' . $_REQUEST['filename']), 'post', false) == true)
        {
            if (is_array($_POST['entire_file']))
                $_POST['entire_file'] = implode("\n", $_POST['entire_file']);

            $_POST['entire_file'] = rtrim(strtr($_POST['entire_file'], array("\r" => '', '   ' => "\t")));

            // Check for a parse error!
            if (substr($_REQUEST['filename'], -13) == '.template.php' && is_writable($currentTheme['theme_dir']) && ini_get('display_errors'))
            {
                $fp = fopen($currentTheme['theme_dir'] . '/tmp_' . session_id() . '.php', 'w');
                fwrite($fp, $_POST['entire_file']);
                fclose($fp);

                $error = @file_get_contents($currentTheme['theme_url'] . '/tmp_' . session_id() . '.php');
                if (preg_match('~ <b>(\d+)</b><br( /)?' . '>$~i', $error) != 0)
                    $error_file = $currentTheme['theme_dir'] . '/tmp_' . session_id() . '.php';
                else
                    unlink($currentTheme['theme_dir'] . '/tmp_' . session_id() . '.php');
            }

            if (!isset($error_file))
            {
                $fp = fopen($currentTheme['theme_dir'] . '/' . $_REQUEST['filename'], 'w');
                fwrite($fp, $_POST['entire_file']);
                fclose($fp);

                // Nuke any minified files and update $modSettings['browser_cache']
                deleteAllMinified();

                redirectexit('action=admin;area=theme;th=' . $_GET['th'] . ';' . $context['session_var'] . '=' . $context['session_id'] . ';sa=edit;directory=' . dirname($_REQUEST['filename']));
            }
        }
        // Session timed out.
        else
        {
            loadLanguage('Errors');

            $context['session_error'] = true;
            $context['sub_template'] = 'edit_file';

            // Recycle the submitted data.
            if (is_array($_POST['entire_file']))
                $context['entire_file'] = $smcFunc['htmlspecialchars'](implode("\n", $_POST['entire_file']));
            else
                $context['entire_file'] = $smcFunc['htmlspecialchars']($_POST['entire_file']);

            $context['edit_filename'] = $smcFunc['htmlspecialchars']($_POST['filename']);

            // You were able to submit it, so it's reasonable to assume you are allowed to save.
            $context['allow_save'] = true;

            // Re-create the token so that it can be used
            createToken('admin-te-' . md5($_GET['th'] . '-' . $_REQUEST['filename']));

            return;
        }
    }

    $context['allow_save'] = is_writable($currentTheme['theme_dir'] . '/' . $_REQUEST['filename']);
    $context['allow_save_filename'] = strtr($currentTheme['theme_dir'] . '/' . $_REQUEST['filename'], array($boarddir => '...'));
    $context['edit_filename'] = $smcFunc['htmlspecialchars']($_REQUEST['filename']);

    if (substr($_REQUEST['filename'], -4) == '.css')
    {
        $context['sub_template'] = 'edit_style';

        $context['entire_file'] = $smcFunc['htmlspecialchars'](strtr(file_get_contents($currentTheme['theme_dir'] . '/' . $_REQUEST['filename']), array("\t" => '   ')));
    }
    elseif (substr($_REQUEST['filename'], -13) == '.template.php')
    {
        $context['sub_template'] = 'edit_template';

        if (!isset($error_file))
            $file_data = file($currentTheme['theme_dir'] . '/' . $_REQUEST['filename']);
        else
        {
            if (preg_match('~(<b>.+?</b>:.+?<b>).+?(</b>.+?<b>\d+</b>)<br( /)?' . '>$~i', $error, $match) != 0)
                $context['parse_error'] = $match[1] . $_REQUEST['filename'] . $match[2];
            $file_data = file($error_file);
            unlink($error_file);
        }

        $j = 0;
        $context['file_parts'] = array(array('lines' => 0, 'line' => 1, 'data' => ''));
        for ($i = 0, $n = count($file_data); $i < $n; $i++)
        {
            if (isset($file_data[$i + 1]) && substr($file_data[$i + 1], 0, 9) == 'function ')
            {
                // Try to format the functions a little nicer...
                $context['file_parts'][$j]['data'] = trim($context['file_parts'][$j]['data']) . "\n";

                if (empty($context['file_parts'][$j]['lines']))
                    unset($context['file_parts'][$j]);
                $context['file_parts'][++$j] = array('lines' => 0, 'line' => $i + 1, 'data' => '');
            }

            $context['file_parts'][$j]['lines']++;
            $context['file_parts'][$j]['data'] .= $smcFunc['htmlspecialchars'](strtr($file_data[$i], array("\t" => '   ')));
        }

        $context['entire_file'] = $smcFunc['htmlspecialchars'](strtr(implode('', $file_data), array("\t" => '   ')));
    }
    else
    {
        $context['sub_template'] = 'edit_file';

        $context['entire_file'] = $smcFunc['htmlspecialchars'](strtr(file_get_contents($currentTheme['theme_dir'] . '/' . $_REQUEST['filename']), array("\t" => '   ')));
    }

    // Create a special token to allow editing of multiple files.
    createToken('admin-te-' . md5($_GET['th'] . '-' . $_REQUEST['filename']));
}

/**
 * Makes a copy of a template file in a new location
 *
 * @uses Themes template, copy_template sub-template.
 */
function CopyTemplate()
{
    global $context, $settings;

    isAllowedTo('admin_forum');
    loadTemplate('Themes');

    $context[$context['admin_menu_name']]['current_subsection'] = 'edit';

    $_GET['th'] = isset($_GET['th']) ? (int) $_GET['th'] : (int) $_GET['id'];

    if (empty($_GET['th']))
        fatal_lang_error('theme_install_invalid_id');

    // Get the theme info.
    $theme = get_single_theme($_GET['th']);
    $context['theme_id'] = $theme['id'];

    if (isset($_REQUEST['template']) && preg_match('~[\./\\\\:\0]~', $_REQUEST['template']) == 0)
    {
        if (file_exists($settings['default_theme_dir'] . '/' . $_REQUEST['template'] . '.template.php'))
            $filename = $settings['default_theme_dir'] . '/' . $_REQUEST['template'] . '.template.php';

        else
            fatal_lang_error('no_access', false);

        $fp = fopen($theme['theme_dir'] . '/' . $_REQUEST['template'] . '.template.php', 'w');
        fwrite($fp, file_get_contents($filename));
        fclose($fp);

        redirectexit('action=admin;area=theme;th=' . $context['theme_id'] . ';' . $context['session_var'] . '=' . $context['session_id'] . ';sa=copy');
    }
    elseif (isset($_REQUEST['lang_file']) && preg_match('~^[^\./\\\\:\0]\.[^\./\\\\:\0]$~', $_REQUEST['lang_file']) != 0)
    {
        if (file_exists($settings['default_theme_dir'] . '/languages/' . $_REQUEST['template'] . '.php'))
            $filename = $settings['default_theme_dir'] . '/languages/' . $_REQUEST['template'] . '.php';

        else
            fatal_lang_error('no_access', false);

        $fp = fopen($theme['theme_dir'] . '/languages/' . $_REQUEST['lang_file'] . '.php', 'w');
        fwrite($fp, file_get_contents($filename));
        fclose($fp);

        redirectexit('action=admin;area=theme;th=' . $context['theme_id'] . ';' . $context['session_var'] . '=' . $context['session_id'] . ';sa=copy');
    }

    $templates = array();
    $lang_files = array();

    $dir = dir($settings['default_theme_dir']);
    while ($entry = $dir->read())
    {
        if (substr($entry, -13) == '.template.php')
            $templates[] = substr($entry, 0, -13);
    }
    $dir->close();

    $dir = dir($settings['default_theme_dir'] . '/languages');
    while ($entry = $dir->read())
    {
        if (preg_match('~^([^\.]+\.[^\.]+)\.php$~', $entry, $matches))
            $lang_files[] = $matches[1];
    }
    $dir->close();

    natcasesort($templates);
    natcasesort($lang_files);

    $context['available_templates'] = array();
    foreach ($templates as $template)
        $context['available_templates'][$template] = array(
            'filename' => $template . '.template.php',
            'value' => $template,
            'already_exists' => false,
            'can_copy' => is_writable($theme['theme_dir']),
        );
    $context['available_language_files'] = array();
    foreach ($lang_files as $file)
        $context['available_language_files'][$file] = array(
            'filename' => $file . '.php',
            'value' => $file,
            'already_exists' => false,
            'can_copy' => file_exists($theme['theme_dir'] . '/languages') ? is_writable($theme['theme_dir'] . '/languages') : is_writable($theme['theme_dir']),
        );

    $dir = dir($theme['theme_dir']);
    while ($entry = $dir->read())
    {
        if (substr($entry, -13) == '.template.php' && isset($context['available_templates'][substr($entry, 0, -13)]))
        {
            $context['available_templates'][substr($entry, 0, -13)]['already_exists'] = true;
            $context['available_templates'][substr($entry, 0, -13)]['can_copy'] = is_writable($theme['theme_dir'] . '/' . $entry);
        }
    }
    $dir->close();

    if (file_exists($theme['theme_dir'] . '/languages'))
    {
        $dir = dir($theme['theme_dir'] . '/languages');
        while ($entry = $dir->read())
        {
            if (preg_match('~^([^\.]+\.[^\.]+)\.php$~', $entry, $matches) && isset($context['available_language_files'][$matches[1]]))
            {
                $context['available_language_files'][$matches[1]]['already_exists'] = true;
                $context['available_language_files'][$matches[1]]['can_copy'] = is_writable($theme['theme_dir'] . '/languages/' . $entry);
            }
        }
        $dir->close();
    }

    $context['sub_template'] = 'copy_template';
}

?>