cacti/auth_profile.php

<?php
/*
 +-------------------------------------------------------------------------+
 | Copyright (C) 2004-2026 The Cacti Group                                 |
 |                                                                         |
 | This program is free software; you can redistribute it and/or           |
 | modify it under the terms of the GNU General Public License             |
 | as published by the Free Software Foundation; either version 2          |
 | of the License, or (at your option) any later version.                  |
 |                                                                         |
 | This program is distributed in the hope that it will be useful,         |
 | but WITHOUT ANY WARRANTY; without even the implied warranty of          |
 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the           |
 | GNU General Public License for more details.                            |
 +-------------------------------------------------------------------------+
 | Cacti: The Complete RRDtool-based Graphing Solution                     |
 +-------------------------------------------------------------------------+
 | This code is designed, written, and maintained by the Cacti Group. See  |
 | about.php and/or the AUTHORS file for specific developer information.   |
 +-------------------------------------------------------------------------+
 | http://www.cacti.net/                                                   |
 +-------------------------------------------------------------------------+
*/

$guest_account = true;
require('./include/auth.php');

// set default action
set_default_action();

switch (grv('action')) {
	case 'save':
		form_save();

		break;
	case 'logout_everywhere':
		api_auth_logout_everywhere();

		break;
	case 'clear_user_settings':
		api_auth_clear_user_settings();

		break;
	case 'reset_default':
		$name  = gnrv('name');

		api_auth_clear_user_setting($name);

		break;
	case 'update_data':
		$name  = gnrv('name');
		$value = gnrv('value');

		$current_tab = gnrv('tab');

		if ($current_tab == 'general') {
			api_auth_update_user_setting($name, $value);
		} else {
			api_plugin_hook_function('auth_profile_update_data', $current_tab);
		}

		break;
	case 'disable_2fa':
		auth_profile_require_post();
		print disable_2fa($_SESSION[SESS_USER_ID]);

		exit;

	case 'enable_2fa':
		auth_profile_require_post();
		print enable_2fa($_SESSION[SESS_USER_ID]);

		exit;

	case 'verify_2fa':
		auth_profile_require_post();
		print verify_2fa($_SESSION[SESS_USER_ID], substr('000000' . gnrv('code'), -6));

		exit;

	default:
		// We must exempt ourselves from the page refresh, or else the settings page could update while the user is making changes
		$_SESSION['custom'] = 1;
		general_header();

		unset($_SESSION['custom']);

		// ================= input validation =================
		gfrv('tab', FILTER_VALIDATE_REGEXP, ['options' => ['regexp' => '/^([0-9a-z_A-Z]+)$/']]);
		// ====================================================

		// present a tabbed interface
		$tabs = [
			'general'  => [
				'display' => __('General'),
				'url'     => CACTI_PATH_URL . 'auth_profile.php?tab=general'
			],
			'2fa' => [
				'display' => __('2FA'),
				'url'     => CACTI_PATH_URL . 'auth_profile.php?tab=2fa'
			],
		];

		if (read_config_option('secpass_2fa_enabled') == '') {
			unset($tabs['2fa']);
		}

		$tabs = api_plugin_hook_function('auth_profile_tabs', $tabs);

		// set the default tab
		load_current_session_value('tab', 'sess_profile_tabs', 'general');
		$current_tab = gnrv('tab');

		if (cacti_sizeof($tabs) > 1) {
			$i = 0;

			// draw the tabs
			print "<div class='tabs'><nav><ul role='tablist'>";

			foreach ($tabs as $tab_short_name => $attribs) {
				print "<li class='subTab'><a class='tab" . (($tab_short_name == $current_tab) ? " selected'" : "'") .
					" href='" . htmle($attribs['url']) .
					"'>" . $attribs['display'] . '</a></li>';

				$i++;
			}

			print '</ul></nav></div>';
		}

		if ($current_tab == 'general') {
			settings();
			settings_javascript();
		} elseif ($current_tab == '2fa') {
			settings_2fa();
		} else {
			api_plugin_hook_function('auth_profile_run_action', grv('tab'));
		}

		bottom_footer();

		break;
}

function auth_profile_require_post() : void {
	if (strtoupper($_SERVER['REQUEST_METHOD'] ?? 'GET') !== 'POST') {
		http_response_code(405);
		print json_encode(['status' => 405, 'text' => __('Method not allowed')]);

		exit;
	}
}

function api_auth_logout_everywhere() : void {
	$user = $_SESSION[SESS_USER_ID];

	if (!empty($user)) {
		db_execute_prepared('DELETE FROM user_auth_cache
			WHERE user_id = ?',
			[$user]
		);

		// Revoking the remember-me tokens is not enough: a database session on
		// another device stays authenticated until it expires. Terminate the
		// user's other sessions too, keeping the current one so the action does
		// not log the caller out mid-request.
		db_execute_prepared('DELETE FROM sessions
			WHERE user_id = ?
			AND id != ?',
			[$user, session_id()]);
	}
}

function api_auth_clear_user_settings() : void {
	$user = $_SESSION[SESS_USER_ID];

	if (!empty($user)) {
		if (isrv('tab') && gnrv('tab') == 'general') {
			db_execute_prepared('DELETE FROM settings_user
				WHERE user_id = ?',
				[$user]
			);

			kill_session_var(OPTIONS_USER);
		} elseif (isrv('tab')) {
			api_plugin_hook('auth_profile_reset');
		}

		raise_message('37');
	}
}

function api_auth_clear_user_setting(string $name) : void {
	global $settings_user;

	$user = $_SESSION[SESS_USER_ID];

	if (read_config_option('client_timezone_support') == '0') {
		unset($settings_user['client_timezone_support']);
	}

	if (!empty($user)) {
		if (isrv('tab') && gnrv('tab') == 'general') {
			db_execute_prepared('DELETE FROM settings_user
				WHERE user_id = ?
				AND name = ?',
				[$user, $name]
			);

			foreach ($settings_user as $tab => $settings) {
				if (isset($settings[$name])) {
					if (isset($settings[$name]['default'])) {
						db_execute_prepared('INSERT INTO settings_user
							(name, value, user_id)
							VALUES (?, ?, ?)',
							[$name, $settings[$name]['default'], $user]
						);

						header('Content-Type: application/json');
						print json_encode(['id' => $name, 'value' => $settings[$name]['default']]);

						kill_session_var(OPTIONS_USER);

						break;
					}
				}
			}
		} else {
			api_plugin_hook_function('auth_profile_reset_value', $name);
		}
	}
}

function api_auth_update_user_setting(string $name, string $value) : void {
	global $settings_user;

	$user = $_SESSION[SESS_USER_ID];

	if (!empty($user)) {
		if ($name == 'full_name' || $name == 'email_address') {
			db_execute_prepared("UPDATE user_auth
				SET $name = ?
				WHERE id = ?",
				[$value, $user]
			);
		} else {
			foreach ($settings_user as $tab => $settings) {
				if (isset($settings[$name])) {
					db_execute_prepared('REPLACE INTO settings_user
						(name, value, user_id)
						VALUES (?, ?, ?)',
						[$name, $value, $user]
					);

					kill_session_var(OPTIONS_USER);
					kill_session_var('selected_theme');
					kill_session_var(SESS_USER_LANGUAGE);

					break;
				}
			}
		}
	}
}

function form_save() : void {
	global $errors, $settings_user;

	// Save the users profile information
	if (isrv('full_name') && isrv('email_address') && isset($_SESSION[SESS_USER_ID])) {
		db_execute_prepared('UPDATE user_auth
			SET full_name = ?, email_address = ?
			WHERE id = ?',
			[
				gnrv('full_name'),
				gnrv('email_address'),
				$_SESSION[SESS_USER_ID]
			]
		);
	}

	$errors = [];

	$currentTab = '';

	if (isrv('tab')) {
		// ================= input validation =================
		gfrv('tab', FILTER_VALIDATE_REGEXP, ['options' => ['regexp' => '/^([0-9a-z_A-Z]+)$/']]);
		// ====================================================
		$currentTab = (string) gnrv('tab');
	}

	// Save the users graph settings if they have permission
	if (is_view_allowed('graph_settings') == true && $currentTab == 'general') {
		save_user_settings($_SESSION[SESS_USER_ID]);
	} elseif ($currentTab !== '') {
		api_plugin_hook('auth_profile_save');
	}

	if (cacti_sizeof($errors) == 0) {
		raise_message(1);
	} else {
		raise_message(35);

		foreach ($errors as $error) { // @phpstan-ignore-line
			raise_message($error);
		}
	}

	// reset local settings cache so the user sees the new settings
	kill_session_var(SESS_USER_LANGUAGE);
	kill_session_var(OPTIONS_USER);
	kill_session_var('selected_theme');

	$tab = ($currentTab !== '') ? ('?tab=' . rawurlencode($currentTab)) : '';
	header('Location: auth_profile.php' . $tab);
}

function settings() : bool {
	global $tabs_graphs, $settings_user, $current_user, $graph_views, $current_user;

	// you cannot have per-user graph settings if cacti's user management is not turned on
	if (read_config_option('auth_method') == AUTH_METHOD_NONE) {
		raise_message(6);

		return false;
	}

	$referer = validate_redirect_url($_SERVER['HTTP_REFERER'] ?? '', 'graph_view.php');

	if (strpos($referer, 'auth_profile.php') === false) {
		$timespan_sel_pos = strpos($referer, '&predefined_timespan');

		if ($timespan_sel_pos !== false) {
			$referer = substr($referer, 0, $timespan_sel_pos);
		}

		$_SESSION['profile_referer'] = $referer;
	}

	form_start('auth_profile.php', 'chk');

	html_start_box(__('User Account Details'), '100%', true, 3, 'center', '');

	$current_user = db_fetch_row_prepared('SELECT *
		FROM user_auth
		WHERE id = ?',
		[$_SESSION[SESS_USER_ID]]
	);

	if (!cacti_sizeof($current_user)) {
		return false;
	}

	// Set the graph views the user has permission to
	unset($graph_views);

	if (is_view_allowed('show_tree')) {
		$graph_views[1] = __('Tree View');
	}

	if (is_view_allowed('show_list')) {
		$graph_views[2] = __('List View');
	}

	if (is_view_allowed('show_preview')) {
		$graph_views[2] = __('Preview View');
	}

	if (isset($graph_views) && cacti_sizeof($graph_views)) {
		$settings_user['general']['default_view_mode']['array'] = $graph_views;
	} else {
		unset($settings_user['general']['default_view_mode']);
	}

	// file: user_admin.php, action: user_edit (host)
	$fields_user = [
		'username' => [
			'method'        => 'value',
			'friendly_name' => __('User Name'),
			'description'   => __('The login name for this user.'),
			'value'         => '|arg1:username|',
			'max_length'    => '40',
			'size'          => '40'
		],
		'full_name' => [
			'method'        => 'textbox',
			'friendly_name' => __('Full Name'),
			'description'   => __('A more descriptive name for this user, that can include spaces or special characters.'),
			'value'         => '|arg1:full_name|',
			'max_length'    => '120',
			'size'          => '60'
		],
		'email_address' => [
			'method'        => 'textbox',
			'type'          => 'email',
			'friendly_name' => __('Email Address'),
			'description'   => __('An Email Address you be reached at.'),
			'value'         => '|arg1:email_address|',
			'max_length'    => '60',
			'size'          => '60'
		],
		'clear_settings' => [
			'method'        => 'button',
			'friendly_name' => __('Clear User Settings'),
			'description'   => __('Return all User Settings to Default values.'),
			'value'         => __('Clear User Settings'),
			'on_click'      => 'clearUserSettings()'
		],
		'private_data' => [
			'method'        => 'button',
			'friendly_name' => __('Clear Private Data'),
			'description'   => __('Clear Private Data including Column sizing.'),
			'value'         => __('Clear Private Data'),
			'on_click'      => 'clearPrivateData()'
		]
	];

	if (read_config_option('auth_cache_enabled') == 'on') {
		$fields_user += [
			'logout_everywhere' => [
				'method'        => 'button',
				'friendly_name' => __('Logout Everywhere'),
				'description'   => __('Clear all your Login Session Tokens from all devices that you have logged into using your session cookies.'),
				'value'         => __('Logout Everywhere'),
				'on_click'      => 'logoutEverywhere()'
			]
		];
	}

	draw_edit_form(
		[
			'config' => ['no_form_tag' => true],
			'fields' => inject_form_variables($fields_user, $current_user)
		]
	);

	html_end_box(true, true);

	if (is_view_allowed('graph_settings') == true) {
		if (read_config_option('client_timezone_support') == 0) {
			unset($settings_user['general']['client_timezone_support']);
		}

		$settings_user['tree']['default_tree_id']['sql'] = get_allowed_trees(false, true);

		html_start_box(__('User Settings'), '100%', true, 3, 'center', '');

		foreach ($settings_user as $tab_short_name => $tab_fields) {
			$collapsible = true;

			print "<div class='spacer formHeader collapsible' id='row_$tab_short_name'><div class='formHeaderText'>" . $tabs_graphs[$tab_short_name] . "<div style='float:right;padding-right:4px;'><i class='ti ti-chevrons-up'></i></div>" . '</div></div>';

			$form_array = [];

			foreach ($tab_fields as $field_name => $field_array) {
				$form_array += [$field_name => $tab_fields[$field_name]];

				if ((isset($field_array['items'])) && (is_array($field_array['items']))) {
					foreach ($field_array['items'] as $sub_field_name => $sub_field_array) {
						if (user_setting_exists($sub_field_name, $_SESSION[SESS_USER_ID])) {
							$form_array[$field_name]['items'][$sub_field_name]['form_id'] = 1;
						}

						$form_array[$field_name]['items'][$sub_field_name]['value'] =  db_fetch_cell_prepared('SELECT value
							FROM settings_user
							WHERE name = ?
							AND user_id = ?',
							[$sub_field_name, $_SESSION[SESS_USER_ID]]
						);
					}
				} else {
					if (user_setting_exists($field_name, $_SESSION[SESS_USER_ID])) {
						$form_array[$field_name]['form_id'] = 1;
					}

					$user_row = db_fetch_row_prepared('SELECT value
						FROM settings_user
						WHERE name = ?
						AND user_id = ?',
						[$field_name, $_SESSION[SESS_USER_ID]]
					);

					if (cacti_sizeof($user_row)) {
						$form_array[$field_name]['user_set'] = true;
						$form_array[$field_name]['value']    = $user_row['value'];
					} else {
						$form_array[$field_name]['user_set'] = false;
						$form_array[$field_name]['value']    = null;
					}
				}
			}

			draw_edit_form(
				[
					'config' => [
						'no_form_tag' => true
					],
					'fields' => $form_array
				]
			);
		}

		print '</td></tr>';

		html_end_box(true, true);
	}

	form_hidden_box('save_component_graph_config', '1', '');

	$buttons = [
		[
			'id'     => 'return',
			'value'  => __('Return'),
			'method' => 'return'
		]
	];

	form_save_buttons($buttons, $_SESSION['profile_referer']);

	form_end();

	return true;
}

function settings_2fa() : bool {
	global $tabs_graphs, $settings_user, $current_user, $graph_views, $current_user;

	// you cannot have per-user graph settings if cacti's user management is not turned on
	if (read_config_option('auth_method') == AUTH_METHOD_NONE) {
		raise_message(6);

		return false;
	}

	if (isset($_SERVER['HTTP_REFERER'])) {
		$referer = $_SERVER['HTTP_REFERER'];

		if (!str_contains($referer, 'auth_profile.php')) {
			$timespan_sel_pos = strpos($referer, '&predefined_timespan');

			if ($timespan_sel_pos !== false) {
				$referer = substr($referer, 0, $timespan_sel_pos);
			}

			$_SESSION['profile_referer'] = $referer;
		}
	} elseif (!isset($_SESSION['profile_referer'])) {
		$_SESSION['profile_referer'] = 'graph_view.php';
	}

	form_start('auth_profile.php', 'chk');

	html_start_box(__('2FA Settings'), '100%', true, 3, 'center', '');

	$current_user = db_fetch_row_prepared('SELECT *
		FROM user_auth
		WHERE id = ?',
		[$_SESSION[SESS_USER_ID]]
	);

	if (!cacti_sizeof($current_user)) {
		return false;
	}

	$fields_user = [
		'username' => [
			'method'        => 'value',
			'friendly_name' => __('User Name'),
			'description'   => __('The login name for this user.'),
			'value'         => '|arg1:username|',
			'max_length'    => '40',
			'size'          => '40',
		],
		'tfa_enabled' => [
			'method'        => 'checkbox',
			'friendly_name' => __('2FA Enabled'),
			'description'   => __('Whether 2FA is enabled for this user.'),
			'value'         => '|arg1:tfa_enabled|',
			'on_click'      => 'toggle2FA()',
			'max_length'    => '40',
			'size'          => '40',
		],
		'tfa_qr_code' => [
			'method'        => 'value',
			'friendly_name' => __('2FA QA Code'),
			'description'   => __('The 2FA QA Code to be scanned with Google Authenticator, Authy or any compatible 2FA app'),
			'value'         => '	',
			'max_length'    => '40',
			'size'          => '40',
		],
		'tfa_token' => [
			'method'        => 'textbox',
			'friendly_name' => __('2FA App Token'),
			'description'   => __('The token generated by Google Authenticator, Auth or any compatible 2FA app'),
			'value'         => '',
			'max_length'    => '40',
			'size'          => '40',
		],
		'tfa_verify' => [
			'method'        => 'button',
			'friendly_name' => __('Verify App Token'),
			'description'   => __('Verify the 2FA App token entered above'),
			'value'         => __('Verify App Token'),
			'max_length'    => '40',
			'size'          => '40',
		],
	];

	draw_edit_form(
		[
			'config' => ['no_form_tag' => true],
			'fields' => inject_form_variables($fields_user, $current_user),
		]
	);

	html_end_box(true, true);

	$buttons = [
		[
			'id'     => 'return',
			'value'  => __('Return'),
			'method' => 'return'
		]
	];

	form_save_buttons($buttons, $_SESSION['profile_referer']);

	?>
	<script type='text/javascript'>
		var tfa_enabled = <?php print $current_user['tfa_enabled'] != '' ? 'true' : 'false'; ?>;
		var tfa_text = '<?php print $current_user['tfa_enabled']   != '' ? __('Enabled') : __('Disabled'); ?>';
		var tfa_verified = false;
		var tfa_enabling = '<?php print __('Enabling...'); ?>';

		function set2FAText(text, id, cls) {
			if (id === undefined) {
				id = 'tfa_qr_code';
			}

			if (cls !== undefined) {
				cls = ' class=\'' + cls + '\'';
			}
			$('#' + id).html('<div id=\'' + id + '\'' + cls + '>' + text + '</div>');
		}

		$(function() {
			$('#row_tfa_token,#row_tfa_verify').hide();
			$('#tfa_qr_code').parent().parent().html('<div id=\'tfa_qr_code\'></div>');
			$('#tfa_verify').parent().append('<div id="tfa_error" class="textError"></div>');

			set2FAText(tfa_text);
			$('#tfa_enabled').change(function(e) {
				$('#tfa_enabled').prop('disabled', true);

				if ($('#tfa_enabled').is(':checked')) {
					if (!tfa_verified) {
						set2FAText(tfa_enabling);
						$.post('auth_profile.php?action=enable_2fa', {__csrf_magic: csrfMagicToken}, function(data) {
							$('#tfa_enabled').prop('disabled', false);

							if (data.status == 200) {
								var link = '<a target="_new" href="' + data.link + '"><img src="' + data.link + '"/></a>';

								set2FAText(link);
								$('#row_tfa_token,#row_tfa_verify').show();
							} else {
								set2FAText(data.status + ' - ' + data.text);
							}
						}, 'json');
					} else {
						$('#tfa_enabled').prop('disabled', false);
					}
				} else {
					$.post('auth_profile.php?action=disable_2fa', {__csrf_magic: csrfMagicToken}, function(data) {
						$('#tfa_enabled').prop('disabled', false);
						set2FAText('<?php print __('Disabled') ?>');
						$('#row_tfa_token,#row_tfa_verify').hide();
					}, 'json');
				}
			});
			$('#tfa_verify').click(function(e) {
				var code = $('#tfa_token').val();
				$.post('auth_profile.php?action=verify_2fa', {code: code, __csrf_magic: csrfMagicToken}, function(data) {
					var tfa_error = $('#tfa_error');
					if (!(tfa_error.length > 0)) {}
					$('#tfa_token').val('');
					if (data.status == 200) {
						set2FAText(data.text);
						$('#row_tfa_token,#row_tfa_verify').hide();
						data.text = '';
					}
					set2FAText(data.text, 'tfa_error', 'textError');
				}, 'json');
			});
		});
	</script>
	<?php

	form_end();

	return true;
}

function settings_javascript() : void {
	?>
	<script type='text/javascript'>
		var themeFonts = <?php print read_config_option('font_method'); ?>;
		var currentTab = <?php print json_encode((string) grv('tab')); ?>;
		var currentTheme = '<?php print get_selected_theme(); ?>';
		var currentLang = '<?php print read_config_option('user_language'); ?>';
		var authMethod = '<?php print read_config_option('auth_method'); ?>';

		function clearUserSettings() {
			$('#clear_settings').blur();

			loadUrl({
				url: 'auth_profile.php?action=clear_user_settings',
				redirect: 'auth_profile.php?newtheme=1',
			});
		}

		function clearPrivateData() {
			Storages.localStorage.removeAll();
			Storages.sessionStorage.removeAll();

			$('body').append('<div style="display:none;" id="cleared" title="<?php print __esc('Private Data Cleared'); ?>"><p><?php print __('Your Private Data has been cleared.'); ?></p></div>');

			$('#private_data').blur();
			$('#cleared').dialog({
				modal: true,
				resizable: false,
				draggable: false,
				height: 140,
				buttons: {
					Ok: function() {
						$(this).dialog('close');
						$('#cleared').remove();
					}
				}
			});

			$('#cleared').dialog('open');
		}

		function logoutEverywhere() {
			$('#logout_everywhere').blur();
			$.get('auth_profile.php?action=logout_everywhere', function(data) {
				$('body').append('<div style="display:none;" id="cleared" title="<?php print __esc('User Sessions Cleared'); ?>"><p><?php print __('All your login sessions have been cleared.'); ?></p></div>');

				$('#cleared').dialog({
					modal: true,
					resizable: false,
					draggable: false,
					height: 140,
					buttons: {
						Ok: function() {
							$(this).dialog('close');
							$('#cleared').remove();
						}
					}
				});

				$('#cleared').dialog('open');
			});
		}

		function graphSettings() {
			var showField = themeFonts == 1 && $('#custom_fonts').is(':checked');

			toggleFields({
				fonts: themeFonts == 1,
				title_size: showField,
				title_font: showField,
				legend_size: showField,
				legend_font: showField,
				axis_size: showField,
				axis_font: showField,
				unit_size: showField,
				unit_font: showField,
			});
		}

		function resetUserSettingsFinalise(options, data) {
			var item = $('#' + data.id);

			if (item.is(':checkbox')) {
				if (data.value == 'on') {
					item.prop('checked', true);
				} else {
					item.prop('checked', false);
				}
			} else {
				item.val(data.value);
				if (item.selectmenu('instance')) {
					item.selectmenu('refresh');
				}
			}
		}


		$(function() {
			graphSettings();

			$('#navigation, #navigation_right').show();
			$('#tabs').find('li a.selected').removeClass('selected');

			if (authMethod == <?= AUTH_METHOD_BASIC ?>) {
				$('#row_logout_everywhere').hide();
			}

			$('#auth_profile_general2 .formData, #auth_profile_edit2 .formData, #auth_profile_noreturn2 .formData').each(function() {
				if ($(this).find('select, input[type!="button"]').length) {
					$(this).parent().hover(
						function() {
							var id = $(this).find('select, input[type!="button"]').attr('id');

							$('<a class="resetHover" data-id="' + id + '" style="padding-left:10px" href="#"><?php print __('Reset'); ?></a>').appendTo($(this));
							$('.resetHover').on('click', function(event) {
								event.preventDefault();

								var id = $(this).attr('data-id');

								if (id != undefined) {
									var resetOptions = {
										url: 'auth_profile.php?tab=' + currentTab + '&action=reset_default&name=' + id,
										noState: true,
									};

									if (id != 'selected_theme' && id != 'user_language' && id != 'enable_hscroll') {
										resetOptions.funcEnd = 'resetUserSettingsFinalise';
									} else {
										resetOptions.redirect = 'auth_profile.php?action=edit';
									}

									loadUrl(resetOptions);
								}
							});
						},
						function() {
							$('.resetHover').remove();
						}
					);
				}
			});

			$('select, input:not([data-scope="theme"], [type="button"])').unbind().delayKeyup(function() {
				var name = $(this).attr('id');

				if ($(this).attr('type') == 'checkbox') {
					if ($(this).is(':checked')) {
						value = 'on';
					} else {
						value = '';
					}
				} else {
					value = $(this).val();
				}

				var options = {
					url: 'auth_profile.php?tab=' + currentTab + '&action=update_data',
					handle: false
				}

				var data = {
					__csrf_magic: csrfMagicToken,
					name: name,
					value: value
				}

				postUrl(options, data);
			}).change(function() {
				var name = $(this).attr('id');

				if ($(this).attr('type') == 'checkbox') {
					if ($(this).is(':checked')) {
						value = 'on';
					} else {
						value = '';
					}
				} else {
					value = $(this).val();
				}

				var options = {
					url: 'auth_profile.php?tab=' + currentTab + '&action=update_data',
					handle: false
				}

				if (name == 'selected_theme' || name == 'user_language') {
					options.redirect = 'auth_profile.php?action=edit';
				}

				var data = {
					__csrf_magic: csrfMagicToken,
					name: name,
					value: value
				}

				postUrl(options, data);
			});

			// set the buttons active
			$('#clear_settings, #private_data, #logout_everywhere').addClass('ui-state-active');
		});
	</script>
<?php
}