admin/settings/security.php

   1 <?php
   2
   3 if ($hassiteconfig) { // speedup for non-admins, add all caps used on this page
   4
   5     // "ip blocker" settingpage
   6     $temp = new admin_settingpage('ipblocker', new lang_string('ipblocker', 'admin'));
   7     $temp->add(new admin_setting_configcheckbox('allowbeforeblock', new lang_string('allowbeforeblock', 'admin'), new lang_string('allowbeforeblockdesc', 'admin'), 0));
   8     $temp->add(new admin_setting_configiplist('allowedip', new lang_string('allowediplist', 'admin'),
   9                                                 new lang_string('ipblockersyntax', 'admin'), ''));
  10     $temp->add(new admin_setting_configiplist('blockedip', new lang_string('blockediplist', 'admin'),
  11                                                 new lang_string('ipblockersyntax', 'admin'), ''));
  12     $ADMIN->add('security', $temp);
  13
  14     // "sitepolicies" settingpage
  15     $temp = new admin_settingpage('sitepolicies', new lang_string('sitepolicies', 'admin'));
  16     $temp->add(new admin_setting_configcheckbox('protectusernames', new lang_string('protectusernames', 'admin'), new lang_string('configprotectusernames', 'admin'), 1));
  17     $temp->add(new admin_setting_configcheckbox('forcelogin', new lang_string('forcelogin', 'admin'), new lang_string('configforcelogin', 'admin'), 0));
  18     $temp->add(new admin_setting_configcheckbox('forceloginforprofiles', new lang_string('forceloginforprofiles', 'admin'), new lang_string('configforceloginforprofiles', 'admin'), 1));
  19     $temp->add(new admin_setting_configcheckbox('forceloginforprofileimage', new lang_string('forceloginforprofileimage', 'admin'), new lang_string('forceloginforprofileimage_help', 'admin'), 0));
  20     $temp->add(new admin_setting_configcheckbox('opentogoogle', new lang_string('opentogoogle', 'admin'), new lang_string('configopentogoogle', 'admin'), 0));
  21     $temp->add(new admin_setting_configselect('allowindexing', new lang_string('allowindexing', 'admin'), new lang_string('allowindexing_desc', 'admin'),
  22         0,
  23         array(0 => new lang_string('allowindexingexceptlogin', 'admin'),
  24               1 => new lang_string('allowindexingeverywhere', 'admin'),
  25               2 => new lang_string('allowindexingnowhere', 'admin'))));
  26     $temp->add(new admin_setting_pickroles('profileroles',
  27         new lang_string('profileroles','admin'),
  28         new lang_string('configprofileroles', 'admin'),
  29         array('student', 'teacher', 'editingteacher')));
  30
  31     $maxbytes = 0;
  32     if (!empty($CFG->maxbytes)) {
  33         $maxbytes = $CFG->maxbytes;
  34     }
  35     $max_upload_choices = get_max_upload_sizes(0, 0, 0, $maxbytes);
  36     // maxbytes set to 0 will allow the maximum server limit for uploads
  37     $temp->add(new admin_setting_configselect('maxbytes', new lang_string('maxbytes', 'admin'), new lang_string('configmaxbytes', 'admin'), 0, $max_upload_choices));
  38     // 100MB
  39     $defaultuserquota = 104857600;
  40     $params = new stdClass();
  41     $params->bytes = $defaultuserquota;
  42     $params->displaysize = display_size($defaultuserquota);
  43     $temp->add(new admin_setting_configtext('userquota', new lang_string('userquota', 'admin'),
  44                 new lang_string('configuserquota', 'admin', $params), $defaultuserquota, PARAM_INT, 30));
  45
  46     $temp->add(new admin_setting_configcheckbox('forceclean', new lang_string('forceclean', 'core_admin'),
  47         new lang_string('forceclean_desc', 'core_admin'), 0));
  48
  49     $temp->add(new admin_setting_configcheckbox('allowobjectembed', new lang_string('allowobjectembed', 'admin'), new lang_string('configallowobjectembed', 'admin'), 0));
  50     $temp->add(new admin_setting_configcheckbox('enabletrusttext', new lang_string('enabletrusttext', 'admin'), new lang_string('configenabletrusttext', 'admin'), 0));
  51     $temp->add(new admin_setting_configselect('maxeditingtime', new lang_string('maxeditingtime','admin'), new lang_string('configmaxeditingtime','admin'), 1800,
  52                  array(60 => new lang_string('numminutes', '', 1),
  53                        300 => new lang_string('numminutes', '', 5),
  54                        900 => new lang_string('numminutes', '', 15),
  55                        1800 => new lang_string('numminutes', '', 30),
  56                        2700 => new lang_string('numminutes', '', 45),
  57                        3600 => new lang_string('numminutes', '', 60))));
  58
  59     $temp->add(new admin_setting_configcheckbox('extendedusernamechars', new lang_string('extendedusernamechars', 'admin'), new lang_string('configextendedusernamechars', 'admin'), 0));
  60
  61     $temp->add(new admin_setting_configcheckbox('extendedusernamechars', new lang_string('extendedusernamechars', 'admin'), new lang_string('configextendedusernamechars', 'admin'), 0));
  62     $temp->add(new admin_setting_configcheckbox('keeptagnamecase', new lang_string('keeptagnamecase','admin'),new lang_string('configkeeptagnamecase', 'admin'),'1'));
  63
  64     $temp->add(new admin_setting_configcheckbox('profilesforenrolledusersonly', new lang_string('profilesforenrolledusersonly','admin'),new lang_string('configprofilesforenrolledusersonly', 'admin'),'1'));
  65
  66     $temp->add(new admin_setting_configcheckbox('cronclionly', new lang_string('cronclionly', 'admin'), new lang_string
  67             ('configcronclionly', 'admin'), 1));
  68     $temp->add(new admin_setting_configpasswordunmask('cronremotepassword', new lang_string('cronremotepassword', 'admin'), new lang_string('configcronremotepassword', 'admin'), ''));
  69     $temp->add(new admin_setting_configcheckbox('tool_task/enablerunnow', new lang_string('enablerunnow', 'tool_task'),
  70             new lang_string('enablerunnow_desc', 'tool_task'), 1));
  71
  72     $options = array(0=>get_string('no'), 3=>3, 5=>5, 7=>7, 10=>10, 20=>20, 30=>30, 50=>50, 100=>100);
  73     $temp->add(new admin_setting_configselect('lockoutthreshold', new lang_string('lockoutthreshold', 'admin'), new lang_string('lockoutthreshold_desc', 'admin'), 0, $options));
  74     $temp->add(new admin_setting_configduration('lockoutwindow', new lang_string('lockoutwindow', 'admin'), new lang_string('lockoutwindow_desc', 'admin'), 60*30));
  75     $temp->add(new admin_setting_configduration('lockoutduration', new lang_string('lockoutduration', 'admin'), new lang_string('lockoutduration_desc', 'admin'), 60*30));
  76
  77     $temp->add(new admin_setting_configcheckbox('passwordpolicy', new lang_string('passwordpolicy', 'admin'), new lang_string('configpasswordpolicy', 'admin'), 1));
  78     $temp->add(new admin_setting_configtext('minpasswordlength', new lang_string('minpasswordlength', 'admin'), new lang_string('configminpasswordlength', 'admin'), 8, PARAM_INT));
  79     $temp->add(new admin_setting_configtext('minpassworddigits', new lang_string('minpassworddigits', 'admin'), new lang_string('configminpassworddigits', 'admin'), 1, PARAM_INT));
  80     $temp->add(new admin_setting_configtext('minpasswordlower', new lang_string('minpasswordlower', 'admin'), new lang_string('configminpasswordlower', 'admin'), 1, PARAM_INT));
  81     $temp->add(new admin_setting_configtext('minpasswordupper', new lang_string('minpasswordupper', 'admin'), new lang_string('configminpasswordupper', 'admin'), 1, PARAM_INT));
  82     $temp->add(new admin_setting_configtext('minpasswordnonalphanum', new lang_string('minpasswordnonalphanum', 'admin'), new lang_string('configminpasswordnonalphanum', 'admin'), 1, PARAM_INT));
  83     $temp->add(new admin_setting_configtext('maxconsecutiveidentchars', new lang_string('maxconsecutiveidentchars', 'admin'), new lang_string('configmaxconsecutiveidentchars', 'admin'), 0, PARAM_INT));
  84
  85     $temp->add(new admin_setting_configtext('passwordreuselimit',
  86         new lang_string('passwordreuselimit', 'admin'),
  87         new lang_string('passwordreuselimit_desc', 'admin'), 0, PARAM_INT));
  88
  89     $pwresetoptions = array(
  90         300 => new lang_string('numminutes', '', 5),
  91         900 => new lang_string('numminutes', '', 15),
  92         1800 => new lang_string('numminutes', '', 30),
  93         2700 => new lang_string('numminutes', '', 45),
  94         3600 => new lang_string('numminutes', '', 60),
  95         7200 => new lang_string('numminutes', '', 120),
  96         14400 => new lang_string('numminutes', '', 240)
  97     );
  98     $adminsetting = new admin_setting_configselect(
  99             'pwresettime',
 100             new lang_string('passwordresettime','admin'),
 101             new lang_string('configpasswordresettime','admin'),
 102             1800,
 103             $pwresetoptions);
 104     $temp->add($adminsetting);
 105     $temp->add(new admin_setting_configcheckbox('passwordchangelogout',
 106         new lang_string('passwordchangelogout', 'admin'),
 107         new lang_string('passwordchangelogout_desc', 'admin'), 0));
 108
 109     $temp->add(new admin_setting_configcheckbox('passwordchangetokendeletion',
 110         new lang_string('passwordchangetokendeletion', 'admin'),
 111         new lang_string('passwordchangetokendeletion_desc', 'admin'), 0));
 112
 113     $temp->add(new admin_setting_configduration('tokenduration',
 114         new lang_string('tokenduration', 'admin'),
 115         new lang_string('tokenduration_desc', 'admin'), 12 * WEEKSECS, WEEKSECS));
 116
 117     $temp->add(new admin_setting_configcheckbox('groupenrolmentkeypolicy', new lang_string('groupenrolmentkeypolicy', 'admin'), new lang_string('groupenrolmentkeypolicy_desc', 'admin'), 1));
 118     $temp->add(new admin_setting_configcheckbox('disableuserimages', new lang_string('disableuserimages', 'admin'), new lang_string('configdisableuserimages', 'admin'), 0));
 119     $temp->add(new admin_setting_configcheckbox('emailchangeconfirmation', new lang_string('emailchangeconfirmation', 'admin'), new lang_string('configemailchangeconfirmation', 'admin'), 1));
 120     $temp->add(new admin_setting_configselect('rememberusername', new lang_string('rememberusername','admin'), new lang_string('rememberusername_desc','admin'), 2, array(1=>new lang_string('yes'), 0=>new lang_string('no'), 2=>new lang_string('optional'))));
 121     $temp->add(new admin_setting_configcheckbox('strictformsrequired', new lang_string('strictformsrequired', 'admin'), new lang_string('configstrictformsrequired', 'admin'), 0));
 122     $ADMIN->add('security', $temp);
 123
 124
 125
 126
 127     // "httpsecurity" settingpage
 128     $temp = new admin_settingpage('httpsecurity', new lang_string('httpsecurity', 'admin'));
 129
 130     $temp->add(new admin_setting_configcheckbox('cookiesecure', new lang_string('cookiesecure', 'admin'), new lang_string('configcookiesecure', 'admin'), 1));
 131     $temp->add(new admin_setting_configcheckbox('cookiehttponly', new lang_string('cookiehttponly', 'admin'), new lang_string('configcookiehttponly', 'admin'), 0));
 132     $temp->add(new admin_setting_configcheckbox('allowframembedding', new lang_string('allowframembedding', 'admin'), new lang_string('allowframembedding_help', 'admin'), 0));
 133
 134     // Settings elements used by the \core\files\curl_security_helper class.
 135     $temp->add(new admin_setting_configmixedhostiplist('curlsecurityblockedhosts',
 136                new lang_string('curlsecurityblockedhosts', 'admin'),
 137                new lang_string('curlsecurityblockedhostssyntax', 'admin'), ""));
 138     $temp->add(new admin_setting_configportlist('curlsecurityallowedport',
 139                new lang_string('curlsecurityallowedport', 'admin'),
 140                new lang_string('curlsecurityallowedportsyntax', 'admin'), ""));
 141     $ADMIN->add('security', $temp);
 142
 143     // "notifications" settingpage
 144     $temp = new admin_settingpage('notifications', new lang_string('notifications', 'admin'));
 145     $temp->add(new admin_setting_configcheckbox('displayloginfailures', new lang_string('displayloginfailures', 'admin'),
 146             new lang_string('configdisplayloginfailures', 'admin'), 0));
 147     $temp->add(new admin_setting_users_with_capability('notifyloginfailures', new lang_string('notifyloginfailures', 'admin'), new lang_string('confignotifyloginfailures', 'admin'), array(), 'moodle/site:config'));
 148     $options = array();
 149     for ($i = 1; $i <= 100; $i++) {
 150         $options[$i] = $i;
 151     }
 152     $temp->add(new admin_setting_configselect('notifyloginthreshold', new lang_string('notifyloginthreshold', 'admin'), new lang_string('confignotifyloginthreshold', 'admin'), '10', $options));
 153     $ADMIN->add('security', $temp);
 154 } // end of speedup