--

--	loona - tiny CMS

--	Written by Timm S. Mueller <tmueller at neoscientists.org>

--	See copyright notice in COPYRIGHT

--

local Class = require "tek.class"

local lib = require "tek.lib"

local luahtml = require "tek.lib.luahtml"

local posix = require "tek.os.posix"

local cgi = require "tek.class.cgi"

local Request = require "tek.class.cgi.request"

local util = require "tek.class.loona.util"

local Markup = require "tek.class.markup"

local boxed_G = {

	string = string, table = table,

	assert = assert, collectgarbage = collectgarbage, dofile = dofile,

	error = error, getfenv = getfenv, getmetatable = getmetatable,

	ipairs = ipairs, load = load, loadfile = loadfile, loadstring = loadstring,

	next = next, pairs = pairs, pcall = pcall, print = print,

	rawequal = rawequal, rawget = rawget, rawset = rawset, require = require,

	select = select, setfenv = setfenv, setmetatable = setmetatable,

	tonumber = tonumber, tostring = tostring, type = type, unpack = unpack,

	xpcall = xpcall

}

local table, string, assert, unpack, ipairs, pairs, type, require, setfenv =

	table, string, assert, unpack, ipairs, pairs, type, require, setfenv

local open, remove, rename, getenv, time, date =

	io.open, os.remove, os.rename, os.getenv, os.time, os.date

local setmetatable = setmetatable

-------------------------------------------------------------------------------

--	Module setup:

-------------------------------------------------------------------------------

module("tek.class.loona", Class)

_VERSION = "LOona Class 5.1"

-------------------------------------------------------------------------------

--	Markup:

-------------------------------------------------------------------------------

Markup = Markup:newClass()

function Markup:init()

	self.depth = 1

	return ''

end

function Markup:exit()

	return ''

end

function Markup:argument(name, text)

	return ', function()%>', '<%end'

end

function Markup:func(is_dynamic, args)

	if is_dynamic then

		self.is_dynamic_content = true

	end

	local t = { '<%loona:include("', args[1], '"' }

	table.remove(args, 1)

	for _, v in ipairs(args) do

		table.insert(t, ',' .. v)

	end

	return table.concat(t), ')%>'

end

function Markup:link(link)

	local func = link:match("^(.*)%(%)$")

	if func then

		return '<%=loona:link("' .. '#' .. self:encodeurl(func, true) .. '", [[', ']])%>'

	elseif link:match("^%a*://.*$") then

		return '<%=loona:elink("' .. self:encodeurl(link, true) .. '", [[', ']])%>'

	else

		return '<%=loona:link("' .. link .. '", [[', ']])%>'

	end

end

function Markup:indent()

	return '<div class="indent">', '</div>'

end

-------------------------------------------------------------------------------

--	class Session:

-------------------------------------------------------------------------------

local Session = Class:newClass()

function Session.new(class, self)

	self = Class.new(class, self or { })

	assert(self.id, "No session Id")

 	assert(self.sessiondir, "No session directory")

	self.name = self.id:gsub("(.)", function(a)

		return ("%02x"):format(a:byte())

	end)

	self.filename = self.sessiondir .. "/" .. self.name

	-- remove non-dotted files (expired sessions) from sessions dir:

	util.expire(self.sessiondir, "[^.]%S+", self.maxage or 600)

	-- load session state:

	self.data = lib.source(self.filename) or { }

	return self

end

function Session:save()

	local f = open(self.filename, "wb")

	assert(f, "Failed to open session file for writing")

	lib.dump(self.data, function(...)

		f:write(...)

	end)

	f:close()

end

function Session:delete()

	remove(self.filename)

end

-------------------------------------------------------------------------------

--	class Loona

-------------------------------------------------------------------------------

local Loona = _M

function Loona:dbmsg(msg, detail)

 	return (msg and detail and self.authuser) and

 		("%s : %s"):format(msg, detail) or msg

end

function Loona:checkprofilename(n)

	assert(n:match("^%w+$") and n ~= "current",

		self:dbmsg("Invalid profile name", n))

	return n

end

function Loona:checklanguage(n)

	assert(n:match("^%l%l$"), self:dbmsg("Invalid language code", n))

	return n

end

function Loona:checkbodyname(s)

	s = s or "main"

	assert(s:match("^[%w_]*%w+[%w_]*$"), self:dbmsg("Invalid body name", s))

	return s

end

function Loona:deleteprofile(p, lang)

	p = self.config.contentdir .. "/" .. p .. "_" .. (lang or self.lang)

	for e in util.readdir(p) do

 		local success, msg = remove(p .. "/" .. e)

		assert(success, self:dbmsg("Error removing entry in profile", msg))

	end

	return remove(p)

end

function Loona:copyprofile(dstprof, srcprof, dstlang, srclang)

	local contentdir = self.config.contentdir

	local src = ("%s/%s_%s"):format(contentdir,

		srcprof or self.profile, srclang or self.lang)

	local dst = ("%s/%s_%s"):format(contentdir,

		dstprof or self.profile, dstlang or self.lang)

	assert(src ~= dst, self:dbmsg("Attempt to copy profile over itself"))

	assert(posix.stat(src, "mode") == "directory",

		self:dbmsg("Source profile not a directory", src))

	local success, msg = posix.mkdir(dst)

	assert(success, self:dbmsg("Error creating profile directory " .. dst, msg))

	for e in util.readdir(src) do

		local ext = e:match("^[^.].*%.([^.]*)$")

		if ext ~= "LOCK" then

			local f = src .. "/" .. e

			if posix.stat(f, "mode") == "file" then

				success, msg = lib.copyfile(f, dst .. "/" .. e)

				assert(success, self:dbmsg("Error copying file", msg))

			end

		end

	end

	-- create "current" symlink if none exists for new profile/language

	if not posix.readlink(contentdir .. "/current_" .. dstlang) then

		self:makecurrent(dstprof, dstlang)

	end

end

function Loona:makecurrent(prof, lang)

	prof = prof or self.profile

	lang = lang or self.lang

	local contentdir = self.config.contentdir

	local newpath = ("%s/current_%s"):format(contentdir, lang)

	local tmppath = newpath .. "." .. self.session.name

	local success, msg = posix.symlink(prof .. "_" .. lang, tmppath)

	assert(success, self:dbmsg("Cannot create symlink", msg))

	success, msg = rename(tmppath, newpath)

	assert(success, self:dbmsg("Cannot put symlink in place", msg))

	return true

end

function Loona:publishprofile(profile, lang)

	lang = lang or self.lang

	local contentdir = self.config.contentdir

	-- Get languages for the current profile

	local plangs = { }

	local lmatch = "^" .. self.profile .. "_(%w+)$"

	for e in util.readdir(self.config.contentdir) do

		local l = e:match(lmatch)

		if l then

			table.insert(plangs, l)

		end

	end

	-- For all languages, update "current" symlink

	for _, lang in ipairs(plangs) do

		self:makecurrent(profile, lang)

	end

	-- These arguments are overwritten globally and need to get restored

	local save_args = { self.args.lang, self.args.profile, self.args.session }

	-- For all languages, unroll site to static HTML

	for _, lang in ipairs(plangs) do

		local ext = (#plangs == 1 and ".html") or (".html." .. lang)

		self:recursesections(self.sections, function(self, s, e, path)

			path = path and path .. "/" .. e.name or e.name

			if not e.notvisible then

				Loona:dumphtml {

					request = self.request, -- reuse request

					userdata = self.userdata, -- reuse userdata

					requestpath = path, requestlang = lang,

					htmlext = ext, insecure = true

				}

			end

			return path

		end)

	end

	-- Restore arguments

	self.args.lang, self.args.profile, self.args.session = unpack(save_args)

	-- Update file cache

	local htdocs = self.config.htdocsdir

	local cache = self.config.htmlcachedir

	for e in util.readdir(cache) do

		local f = e:match("^.*%.html%.?(%w*)$")

		if f and f ~= "tmp" then

			local success, msg = remove(htdocs .. "/" .. e)

			success, msg = remove(cache .. "/" .. e)

 			assert(success,

 				self:dbmsg("Could not purge cached HTML file", msg))

		end

	end

	for e in util.readdir(cache) do

		local f = e:match("^(.*%.html%.?%w*)%.tmp$")

		if f then

			local success, msg = rename(cache .. "/" .. e, cache .. "/" .. f)

			assert(success,

				self:dbmsg("Could not update cached HTML file", msg))

			success, msg = rename(htdocs .. "/" .. e, htdocs .. "/" .. f)

			assert(success,

				self:dbmsg("Could not update cached HTML file", msg))

		end

	end

end

function Loona:recursesections(s, func, ...)

	for _, e in ipairs(s) do

		local udata = { func(self, s, e, unpack(arg)) }

		if e.subs then

			self:recursesections(e.subs, func, unpack(udata))

		end

	end

end

function Loona:indexsections()

	local userperm = self.session and self.session.data.permissions

	userperm = userperm and userperm ~= "" and "[" .. userperm .. "]"

	self:recursesections(self.sections, function(self, s, e)

		local permitted = true

		local sectperm = e.permissions

		if sectperm and sectperm ~= "" and not self.authuser_seeall then

			permitted = false

			if userperm then

				local num = sectperm:len()

				sectperm:gsub(userperm, function() num = num - 1 end)

				permitted = num == 0

			end

		end

		e.notvalid = not permitted or (not self.secure and e.secure) or

			(not self.authuser_visible and e.secret) or nil

		e.notvisible = e.notvalid or not self.authuser_visible and e.hidden or nil

		s[e.name] = e

	end)

end

--	Decompose section path into a stack of sections, returning only up to

--	the last valid element in the path. additionally returns the table of

--	the last section path element (or the default section)

function Loona:getsection(path)

	local default = not self.authuser and self.config.defname

	local tab = { { entries = self.sections, name = default } }

	local ss = self.sections

	local sectionpath

	(path or ""):gsub("(%w+)/?", function(a)

		if ss then

			local s = ss[a]

			if s and not s.notvalid then

				sectionpath = s

				tab[#tab].name = a

				ss = s.subs

				if ss then

					table.insert(tab, { entries = ss })

				end

			else

				ss = nil -- stop.

			end

		end

	end)

	if not self.section and not sectionpath then

		sectionpath = self.sections[default]

		if sectionpath then

			table.insert(tab, { entries = sectionpath.subs })

		end

	end

	return tab, sectionpath

end

function Loona:getpath(delimiter, maxdepth)

	local t = { }

	local d = 0

	maxdepth = maxdepth or #self.submenus

	for _, menu in ipairs(self.submenus) do

		if menu.name then

			table.insert(t, menu.name)

		end

		d = d + 1

		if d == maxdepth then

			break

		end

	end

	return table.concat(t, delimiter or "/")

end

function Loona:deletesection(fname, all_bodies)

	local fullname = self.contentdir .. "/" .. fname

	local success, msg = remove(fullname)

	if all_bodies then

		local pat = "^" .. -- TODO: check

			fname:gsub("%^%$%(%)%%%.%[%]%*%+%-%?", "%%%1") .. "%..*$"

		for e in util.readdir(self.contentdir) do

			if e:match(pat) then

				remove(self.contentdir .. "/" .. e)

			end

		end

	end

	return success, msg

end

function Loona:addpath(path, e)

	local tab = self.sections

	path:gsub("(%w+)/?", function(a)

		if tab then

			local s = tab[a]

			if s then

				if not s.subs then

					s.subs = { }

				end

				tab = s.subs

			else

				table.insert(tab, e)

				tab[a] = e

 				tab = nil -- stop

			end

		end

	end)

	return e

end

local function lookupname(tab, val)

	for i, v in ipairs(tab) do

		if v.name == val then

			return i

		end

	end

end

function Loona:rmpath(path)

	local parent

	local tab = self.sections

	path:gsub("(%w+)/?", function(a)

		if tab then

			local idx = lookupname(tab, a)

			if idx then

				if tab[idx].subs then

					parent = tab[idx]

					tab = tab[idx].subs

				else

					table.remove(tab, idx)

					tab[a] = nil

					if #tab == 0 and parent then

						parent.subs = nil

					end

					tab = nil

				end

			end

		end

	end)

end

function Loona:checkpath(path)

	if path ~= "index" then -- "index" is reserved

		local res, idx

		local tab = self.sections

		path:gsub("(%w+)/?", function(a)

			if tab then

				local i = lookupname(tab, a)

				if i then

					res, idx = tab, i

					tab = tab[i].subs

				else

					res, idx, tab = nil, nil, nil

				end

			end

		end)

		return res, idx

	end

end

function Loona:title()

	return self.section and (self.section.title or self.section.label or

		self.section.name) or ""

end

--	Run a site function snippet, with full error recovery

--	(also recovers from errors in error handling function)

function Loona:dosnippet(func, errfunc)

	local ret = { lib.catch(func) }

	if ret[1] == 0 or (errfunc and lib.catch(errfunc) == 0) then

		return unpack(ret)

	end

	self:out("<h2>Error</h2>")

	self:out("<h3>" .. self:encodeform(ret[2] or "") .. "</h3>")

	if self.authuser_debug then

		if type(ret[3]) == "string" then

			self:out("<p>" .. self:encodeform(ret[3]) .. "</p>")

		end

		if ret[4] then

			self:out("<pre>" .. self:encodeform(ret[4]) .. "</pre>")

		end

	end

end

function Loona:lockfile(file)

	return not self.session and true or

		posix.symlink(self.session.filename, file .. ".LOCK")

end

function Loona:unlockfile(file)

	return not self.session and true or remove(file .. ".LOCK")

end

function Loona:saveindex()

	local tempname = self.indexfname .. "." .. self.session.name

	local f, msg = open(tempname, "wb")

	assert(f, self:dbmsg("Error opening section file for writing", msg))

	lib.dump(self.sections, function(...)

		f:write(unpack(arg))

	end)

	f:close()

	local success, msg = rename(tempname, self.indexfname)

	assert(success, self:dbmsg("Error renaming section file", msg))

end

function Loona:savebody(fname, content)

	fname = self.contentdir .. "/" .. fname

	local f, msg = open(fname, "wb")

	assert(f, self:dbmsg("Could not open file for writing", msg))

	f:write(content or "")

	f:close()

end

function Loona:runboxed(func, envitems, ...)

	local fenv = {

 		arg = arg,

 		loona = self

 	}

 	if envitems then

	 	for k, v in pairs(envitems) do

 			fenv[k] = v

 		end

 	end

 	setmetatable(fenv, { __index = boxed_G }) -- boxed global environment

	setfenv(func, fenv)

	return func()

end

function Loona:include(fname, ...)

	assert(not fname:match("%W"), self:dbmsg("Invalid include name", fname))

	local fname2 = ("%s/%s.lua"):format(self.config.extdir, fname)

	local f, msg = open(fname2)

	assert(f, self:dbmsg("Cannot open file", msg))

	local parsed, msg = self:loadhtml(f, "loona:out", fname2)

	msg = msg and (type(msg) == "string" and msg or msg.txt)

	assert(parsed, self:dbmsg("Syntax error", msg))

	return self:runboxed(parsed, nil, unpack(arg))

end

--	produce link target (simple)

function Loona:shref(section, arg)

	local args2 = { } -- propagated or new arguments

	for _, a in ipairs(arg) do

		local key, val = a:match("^([%w_]+)=(.*)$")

		if key and val then -- "arg=val" sets/overrides argument

			table.insert(args2, { name = key, value = val })

		elseif self.args[a] then -- just "arg" propagates argument

			table.insert(args2, { name = a, value = self.args[a] })

		end

	end

	local doc = self:getdocname(section, #args2 > 0)

	local url, anch = doc:match("^(.+)(#.+)$")

	local notfirst = doc:match("%?")

	local href = { anch and url or doc }

	for i, arg in ipairs(args2) do

		if i > 1 or notfirst then

			table.insert(href, "&")

		else

			table.insert(href, "?")

		end

		table.insert(href, arg.name .. "=" .. cgi.encodeurl(arg.value))

	end

	if anch then

		table.insert(href, anch)

	end

	return table.concat(href)

end

--	produce link target, implicit propagation of lang, profile, session

function Loona:href(section, ...)

	if self.session then

		table.insert(arg, 1, "profile")

		table.insert(arg, 1, "session")

	end

	if self.explicitlang then

		table.insert(arg, 1, "lang")

	end

	return self:shref(section, arg)

end

function Loona:ilink(target, text, extra)

	return ('<a href="%s"%s>%s</a>'):format(target, extra or "", text)

end

--	internal link, implicit propagation of lang, profile, session

function Loona:link(section, text, ...)

	return self:ilink(self:href(section, unpack(arg)), text or section,

	' class="intlink"')

end

--	external link (opens in a new window), no argument propagation

function Loona:elink(target, text)

	return self:ilink(target, text or target, self.config.extlinkextra)

end

--	plain link, no implicit argument propagation

function Loona:plink(section, text, ...)

	return self:ilink(self:shref(section, arg), text or section)

end

--	user interface link, implicit propagation of lang, profile, session

function Loona:uilink(section, text, ...)

	return self:ilink(self:href(section, unpack(arg)), text or section,

	' class="uilink"')

end

--	produce a hidden input value in forms

function Loona:hidden(name, value)

	return not value and "" or

		('<input type="hidden" name="%s" value="%s" />'):format(name, value)

end

function Loona:scanprofiles(func)

	local tab = { }

	local dir = self.config.contentdir

	for f in util.readdir(dir) do

		if posix.lstat(dir .. "/" .. f, "mode") == "directory" then

			f = func(f)

			if f then

				table.insert(tab, f)

			end

		end

	end

	table.sort(tab)

	for _, v in ipairs(tab) do

		tab[v] = v

	end

	return tab

end

function Loona:getprofiles(lang)

	lang = lang or self.lang

	return self:scanprofiles(function(f)

		return f:match("^(%w+)_" .. lang .. "$")

	end)

end

function Loona:getlanguages(prof)

	prof = prof or self.profile

	return self:scanprofiles(function(f)

		return f:match("^" .. prof .. "_(%l%l)$")

	end)

end

--	Functions to produce a navigation menu

local newent = { name = "new", label = "[+]", action="actionnew=true" }

function Loona:rmenu(level, render, path, addnew, recurse)

	local sub = (addnew and level == #self.submenus + 1) and

		{ name = "new", entries = { }} or self.submenus[level]

 	if sub and sub.entries then

		local visible = { }

		for _, e in ipairs(sub.entries) do

			if not e.notvisible then

				table.insert(visible, e)

			end

		end

		if addnew then

			table.insert(visible, newent)

		end

		local numvis = #visible

		if numvis > 0 then

			render.listbegin(self, level, numvis, path)

			for idx, e in ipairs(visible) do

				local label = self:encodeform(e.label or e.name)

				local newpath = path and path .. "/" .. e.name or e.name

				local active = (e.name == sub.name)

				render.itembegin(self, level, idx, label)

				render.link(self, level, newpath, label, active, e.action)

				if recurse and active then

					self:rmenu(level + 1, render, newpath, addnew, recurse)

				end

				render.itemend(self, level, idx, label)

			end

			render.listend(self)

		end

	end

end

function Loona:menu(level, recurse, render)

	level = level or 1

	render = render or { }

	render.link = render.link or

		function(self, level, path, label, active, ...)

			self:out(('<a %shref="%s">%s</a>\n'):format(active and

				'class="active" ' or "", self:href(path, unpack(arg)), label))

		end

	render.listbegin = render.listbegin or

		function(self, level) -- , numvis, path

			self:out('<ul id="menulevel' .. level .. '">\n')

		end

	render.listend = render.listend or

		function(self)

			self:out('</ul>\n')

		end

	render.itembegin = render.itembegin or

		function(self) -- , level, idx

			self:out('<li>\n')

		end

	render.itemend = render.itemend or

		function(self)

			self:out('</li>\n')

		end

	recurse = recurse == nil and true or recurse

	local path = level > 1 and self:getpath("/", level - 1) or nil

	local addnew = self.authuser_menu and

		(not self.ispubprofile or self.config.editablepubprofile)

	self:rmenu(level, render, path, addnew, recurse)

end

function Loona:loadcontent(fname)

	if fname then

		local f = open(self.contentdir .. "/" .. fname)

		local c = f:read("*a")

		f:close()

		return c

	end

	return ""

end

function Loona:loadmarkup(fname)

	return (fname and fname ~= "") and

		self:domarkup(self:loadcontent(fname)) or ""

end

function Loona:editable(editkey, fname, savename)

	local contentdir = self.contentdir

	local edit, show, hidden, extramsg, changed

	if self.authuser_edit or self.authuser_profile or self.authuser_menu then

		local hiddenvars = table.concat( {

			self:hidden("lang", self.args.lang),

			self:hidden("profile", self.profile),

			self:hidden("session", self.session.id),

			self:hidden("editkey", editkey) }, " ")

		local lockfname = fname and (contentdir .. "/" .. fname)

		if self.useralert and editkey == self.args.editkey then

			--	display user alert/request/confirmation

			hidden = true

			self:out([[

			<form action="]] .. self.document .. [[" method="post" accept-charset="utf-8">

				<fieldset>

					<legend>]] .. self.useralert.text ..[[</legend>

					]] .. (self.useralert.confirm or "") .. [[

					]] .. (self.useralert.returnto or "") .. [[

					<input type="submit" name="actioncancel" value="]] .. self.locale.CANCEL  ..[[" />

					]] .. hiddenvars .. [[

				</fieldset>

			</form>

			]])

		elseif self.args.actionnew and editkey == "main" and self.authuser_menu then

			--	form for creating a new section

			hidden = true

			if self.ispubprofile then

				self:out([[<h2><span class="warn">]] .. self.locale.WARNING_YOU_ARE_IN_PUBLISHED_PROFILE ..[[</span></h2>]])

			end

			self:out([[

			<form action="]] .. self.document .. [[" method="post" accept-charset="utf-8">

				<fieldset>

					<legend>

						]] .. self.locale.CREATE_NEW_SECTION_UNDER .. " " .. self.sectionpath .. [[

					</legend>

					<table>

						<tr>

							<td align="right">

								]] .. self.locale.PATHNAME .. [[

							</td>

							<td>

								<input size="30" maxlength="30" name="editname" />

							</td>

						</tr>

						<tr>

							<td align="right">

								]] .. self.locale.MENULABEL .. [[

							</td>

							<td>

								<input size="30" maxlength="50" name="editlabel" />

							</td>

						</tr>

						<tr>

							<td align="right">

								]] .. self.locale.WINDOWTITLE .. [[

							</td>

							<td>

								<input size="30" maxlength="50" name="edittitle" />

							</td>

						</tr>

						<tr>

							<td align="right">

								]] .. self.locale.INVISIBLE .. [[

							</td>

							<td>

								<input type="checkbox" name="editvisibility" />

							</td>

						</tr>

						<tr>

							<td align="right">

								]] .. self.locale.SECRET .. [[

							</td>

							<td>

								<input type="checkbox" name="editsecrecy" />

							</td>

						</tr>

						<tr>

							<td align="right">

								]] .. self.locale.SECURE_CONNECTION .. [[

							</td>

							<td>

								<input type="checkbox" name="editsecure" />

							</td>

						</tr>

						<tr>

							<td align="right">

								]] .. self.locale.PERMISSIONS .. [[

							</td>

							<td>

								<input size="30" maxlength="50" name="editpermissions" />

							</td>

						</tr>

						<tr>

							<td align="right">

								]] .. self.locale.REDIRECT .. [[

							</td>

							<td>

								<input size="30" maxlength="50" name="editredirect" />

							</td>

						</tr>

					</table>

					<input type="submit" name="actioncreate" value="]] .. self.locale.CREATE .. [[" />

					]] .. hiddenvars .. [[

				</fieldset>

			</form>

			<hr />

			]])

		elseif self.args.actioneditprops and editkey == "main" and

			self.authuser_menu then

			hidden = true

			if self.ispubprofile then

				self:out([[<h2><span class="warn">]] .. self.locale.WARNING_YOU_ARE_IN_PUBLISHED_PROFILE ..[[</span></h2>]])

			end

			self:out([[

			<form action="]] ..self.document .. [[" method="post" accept-charset="utf-8">

				<fieldset>

					<legend>

						]] .. self.locale.MODIFY_PROPERTIES_OF_SECTION .. " " .. self.sectionpath .. [[

					</legend>

					<table>

						<tr>

							<td align="right">

								]] .. self.locale.MENULABEL .. [[

							</td>

							<td>

								<input size="30" maxlength="50" name="editlabel" value="]] .. (self.section.label or "") .. [[" />

							</td>

						</tr>

						<tr>

							<td align="right">

								]] .. self.locale.WINDOWTITLE .. [[

							</td>

							<td>

								<input size="30" maxlength="50" name="edittitle" value="]] .. (self.section.title or "") .. [[" />

							</td>

						</tr>

						<tr>

							<td align="right">

								]] .. self.locale.INVISIBLE .. [[

							</td>

							<td>

								<input type="checkbox" name="editvisibility" ]] .. (self.section.hidden and 'checked="checked"' or "") .. [[/>

							</td>

						</tr>

						<tr>

							<td align="right">

								]] .. self.locale.SECRET .. [[

							</td>

							<td>

								<input type="checkbox" name="editsecrecy" ]] .. (self.section.secret and 'checked="checked"' or "") .. [[/>

							</td>

						</tr>

						<tr>

							<td align="right">

								]] .. self.locale.SECURE_CONNECTION .. [[

							</td>

							<td>

								<input type="checkbox" name="editsecure" ]] .. (self.section.secure and 'checked="checked"' or "") .. [[/>

							</td>

						</tr>

						<tr>

							<td align="right">

								]] .. self.locale.PERMISSIONS .. [[

							</td>

							<td>

								<input size="30" maxlength="50" name="editpermissions" value="]] .. (self.section.permissions or "") .. [[" />

							</td>

						</tr>

						<tr>

							<td align="right">

								]] .. self.locale.REDIRECT .. [[

							</td>

							<td>

								<input size="30" maxlength="50" name="editredirect" value="]] .. (self.section.redirect or "") .. [[" />

							</td>

						</tr>

					</table>

					<input type="submit" name="actionsaveprops" value="]] .. self.locale.SAVE .. [[" />

					<input type="submit" name="actioncancel" value="]] .. self.locale.CANCEL .. [[" />

					]] .. hiddenvars .. [[

				</fieldset>

			</form>

			]])

		elseif (self.args.actioneditprofiles or

			self.args.actioncreateprofile or

			self.args.actionchangeprofile or

			self.args.actionchangelanguage or

			self.args.actionpublishprofile) and editkey == "main" and

			self.authuser_profile then

			hidden = true

			self:out([[

			<form action="]] .. self.document .. [[" method="post" accept-charset="utf-8">

				<fieldset>

					<legend>

						]] .. self.locale.CHANGEPROFILE .. [[

					</legend>

					<select name="changeprofile" size="1">]])

						for _, val in ipairs(self:getprofiles()) do

							self:out('<option' .. (val == self.profile and ' selected="selected"' or '') .. '>')

							self:out(val)

							self:out('</option>')

						end

					self:out([[

					</select>

					<input type="submit" name="actionchangeprofile" value="]] .. self.locale.CHANGE ..[[" />

					]] .. hiddenvars .. [[

				</fieldset>

			</form>

			<form action="]] .. self.document .. [[" method="post" accept-charset="utf-8">

				<fieldset>

					<legend>

						]] .. self.locale.CHANGELANGUAGE .. [[

					</legend>

					<select name="changelanguage" size="1">]])

						for _, val in ipairs(self:getlanguages()) do

							self:out('<option' .. (val == self.lang and ' selected="selected"' or '') .. '>')

							self:out(val)

							self:out('</option>')

						end

					self:out([[

					</select>

					<input type="submit" name="actionchangelanguage" value="]] .. self.locale.CHANGE ..[[" />

					]] .. hiddenvars .. [[

				</fieldset>