{* $Id$ *}
{if !$ts.ajax}
    {title help="Users Management" admpage="login" url="tiki-adminusers.php"}{tr}Admin Users{/tr}{/title}

    <div class="t_navbar mb-4">
        {if $tiki_p_admin eq 'y'} {* only full admins can manage groups, not tiki_p_admin_users *}
            {button href="tiki-admingroups.php" class="btn btn-primary" _type="link" _icon_name="group" _text="{tr}Admin Groups{/tr}"}
        {/if}
        {if $tiki_p_admin eq 'y'}
            {permission_link mode=button_link}
        {/if}
        {if isset($userinfo.userId)}
            {button href="?add=1" class="btn btn-primary" _text="{tr}Add a New User{/tr}"}
        {/if}
        {if $prefs.feature_invite eq 'y' and $tiki_p_invite eq 'y'}
            {button href="tiki-list_invite.php" _type="link" _icon_name="thumbs-up" _text="{tr}Invitation List{/tr}"}
        {/if}
    </div>

    {if $prefs.feature_intertiki eq 'y' and ($prefs.feature_intertiki_import_groups eq 'y' or $prefs.feature_intertiki_import_preferences eq 'y')}
        {remarksbox type="warning" title="{tr}Warning{/tr}"}
            {if $prefs.feature_intertiki_import_groups eq 'y'}{tr}Since this Tiki site is in slave mode and imports groups, the master groups will be automatically reimported at each login{/tr}{/if}
            {if $prefs.feature_intertiki_import_preferences eq 'y'}{tr}Since this Tiki site is in slave mode and imports preferences, the master user preferences will be automatically reimported at each login{/tr}{/if}
        {/remarksbox}
    {/if}
{/if}
{tabset name='tabs_adminusers'}

    {* ---------------------- tab with list -------------------- *}
    {tab name="{tr}Users{/tr}"}
        {if !$ts.ajax}
            <h2>{tr}Users{/tr}</h2>
            {if !$ts.enabled}
                <form method="get" action="tiki-adminusers.php">
                    <div class="mb-3 row">
                        <label class="col-form-label col-sm-5" for="find">{tr}Find{/tr}</label>
                        <div class="col-sm-7">
                            <input type="text" class="form-control form-control-sm" id="find" name="find" value="{$find|escape}">
                        </div>
                    </div>
                    <div class="mb-3 row">
                        <label class="col-form-label col-sm-5" for="numrows">{tr}Number of displayed rows{/tr}</label>
                        <div class="col-sm-7">
                            <input class="form-control form-control-sm" type="number" id="numrows" name="numrows" value="{$numrows|escape}">
                        </div>
                    </div>
                    <div class="mb-3 row">
                        <div class="col-sm-7 offset-sm-5">
                            <a href="javascript:toggleBlock('search')" class="link">
                                {icon name='add' alt="{tr}more{/tr}"}&nbsp;{tr}More Criteria{/tr}
                            </a>
                        </div>
                    </div>
                    {autocomplete element='#find' type='username'}
                    <div class="col-sm-12" id="search" {if $filterGroup or $filterEmail}style="display:block;"{else}style="display:none;"{/if}>
                        <div class="mb-3 row">
                            <label class="col-form-label col-sm-5" for="filterGroup">{tr}Group (direct){/tr}</label>
                            <div class="col-sm-7">
                                <select class="form-select form-control-sm" name="filterGroup" id="filterGroup">
                                    <option value=""></option>
                                    {section name=ix loop=$all_groups}
                                        {if $all_groups[ix] != 'Registered' && $all_groups[ix] != 'Anonymous'}
                                            <option value="{$all_groups[ix]|escape}" {if $filterGroup eq $all_groups[ix]}selected{/if}>{$all_groups[ix]|escape}</option>
                                        {/if}
                                    {/section}
                                </select>
                            </div>
                        </div>
                        <div class="mb-3 row">
                            <div class="offset-sm-5 col-sm-7">
                                <div class="form-check">
                                    <label class="form-check-label">
                                        <input id="filterEmailNotConfirmed" class="form-check-input" name="filterEmailNotConfirmed" type="checkbox"{if !empty($smarty.request.filterEmailNotConfirmed)} checked="checked"{/if}>{tr}Email not confirmed{/tr}
                                    </label>
                                </div>
                            </div>
                        </div>
                        <div class="mb-3 row">
                            <div class="offset-sm-5 col-sm-7">
                                <div class="form-check">
                                    <label class="form-check-label">
                                        <input class="form-check-input" id="filterNeverLoggedIn" name="filterNeverLoggedIn" type="checkbox"{if !empty($smarty.request.filterNeverLoggedIn)} checked="checked"{/if}>{tr}Never logged in{/tr}
                                    </label>
                                </div>
                            </div>
                        </div>
                        <div class="mb-3 row">
                            <div class="offset-sm-5 col-sm-7">
                                <div class="form-check">
                                    <label class="form-check-label">
                                        <input class="form-check-input" id="filterNotValidated" name="filterNotValidated" type="checkbox"{if !empty($smarty.request.filterNotValidated)} checked="checked"{/if}>{tr}User not validated{/tr}
                                    </label>
                                </div>
                            </div>
                        </div>
                    </div>
                    <div class="mb-3 row">
                        <div class="col-sm-7 offset-sm-5">
                            <input type="hidden" name="sort_mode" value="{$sort_mode|escape}">
                            <input type="submit" class="btn btn-primary btn-sm" value="{tr}Find{/tr}" name="search">
                        </div>
                    </div>
                </form>
            {/if}
            {if ($cant > $numrows or !empty($initial)) && !$ts.enabled}
                {initials_filter_links}
            {/if}
            <form name="checkform" id="checkform" method="post">
                <div id="{$ts.tableid}-div" {if $ts.enabled}style="visibility:hidden;"{/if}>
                    <div class="{if $js}table-responsive{/if} user-table ts-wrapperdiv">
        {/if}
                        {* Use css menus as fallback for item dropdown action menu if javascript is not being used *}
                        <table id="{$ts.tableid}" class="table normal table-striped table-hover" data-count="{$cant|escape}">
                            {* Note: th element ids here need to match those at /lib/core/Table/Settings/TikiAdminusers.php
                            for tablesorter to work properly *}
                            {if !$ts.ajax}
                                <thead>
                                    <tr>
                                        <th id="checkbox">
                                            {if $users}
                                                {select_all checkbox_names='checked[]' tablesorter="{$ts.enabled}"}
                                            {/if}
                                        </th>
                                        <th id="user">{self_link _sort_arg='sort_mode' _sort_field='login'}{tr}User{/tr}{/self_link}</th>
                                        {if $prefs.login_is_email neq 'y'}
                                            <th id="email">{self_link _sort_arg='sort_mode' _sort_field='email'}{tr}Email{/tr}{/self_link}</th>
                                        {/if}
                                        {if $prefs.auth_method eq 'openid'}
                                            <th id="openid">{self_link _sort_arg='sort_mode' _sort_field='openID'}{tr}OpenID{/tr}{/self_link}</th>
                                        {/if}
                                        <th id="lastlogin">{self_link _sort_arg='sort_mode' _sort_field='currentLogin'}{tr}Last login{/tr}{/self_link}</th>
                                        <th id="registered">{self_link _sort_arg='sort_mode' _sort_field='created'}{tr}Registered{/tr}{/self_link}</th>
                                        <th id="groups">{tr}Groups{/tr}</th>
                                        <th id="actions"></th>
                                    </tr>
                                </thead>
                            {/if}
                            <tbody>
                            {section name=user loop=$users}
                                {if $users[user].editable}
                                    {capture assign=username}{$users[user].user|escape}{/capture}
                                        <tr>
                                            <td class="checkbox-cell">
                                                <div class="form-check">
                                                    {if $users[user].user ne 'admin'}
                                                        <input type="checkbox" name="checked[]" value="{$users[user].user|escape}" {if isset($users[user].checked) && $users[user].checked eq 'y'}checked="checked" {/if}>
                                                    {/if}
                                                </div>
                                            </td>

                                            <td class="username">
                                                {capture name=username}{$users[user].user|username}{/capture}
                                                <a
                                                    class="link tips"
                                                    href="tiki-adminusers.php?offset={$offset}&amp;numrows={$numrows}&amp;sort_mode={$sort_mode}&amp;user={$users[user].userId}{if $prefs.feature_tabs ne 'y'}#2{/if}"
                                                    title="{$username}:{tr}Edit account settings{/tr}" {if $users[user].itemId}data-itemid="{$users[user].itemId}"{/if}>
                                                        {$users[user].user|escape}
                                                </a>
                                                {if $prefs.user_show_realnames eq 'y' and $smarty.capture.username ne $users[user].user}
                                                    <div class="subcomment">
                                                        {$smarty.capture.username|escape}
                                                    </div>
                                                {/if}
                                            </td>

                                            {if $prefs.login_is_email ne 'y'}
                                                <td class="email">{$users[user].email}</td>
                                            {/if}
                                            {if $prefs.auth_method eq 'openid'}
                                                <td class="text">{$users[user].openid_url|default:"{tr}N{/tr}"}</td>
                                            {/if}
                                            <td class="text">
                                                {if $users[user].currentLogin eq ''}
                                                    {capture name=when}{$users[user].age|duration_short}{/capture}
                                                    {tr}Never{/tr} <em>({tr _0=$smarty.capture.when}Registered %0 ago{/tr})</em>
                                                {else}
                                                    {$users[user].currentLogin|tiki_short_datetime}
                                                {/if}

                                                {if $users[user].waiting eq 'u'}
                                                    <br>
                                                    {tr}Need to validate email{/tr}
                                                {/if}
                                            </td>
                                            <td class="text">
                                                {$users[user].registrationDate|tiki_short_datetime}
                                            </td>

                                            <td class="text">
                                                {foreach from=$users[user].groups key=grs item=what name=gr}
                                                    <div style="white-space:nowrap">
                                                        {if $grs != "Anonymous" and ($tiki_p_admin eq 'y' || in_array($grs, $all_groups))}
                                                            {if $tiki_p_admin eq 'y'}
                                                                <a
                                                                    class="link tips" {if isset($link_style)}{$link_style}{/if}
                                                                    href="tiki-admingroups.php?group={$grs|escape:"url"}"
                                                                    title="{$grs|escape}:{if $what eq 'included'}{tr}Edit this included group{/tr}"{else}{tr}Edit group{/tr}"{/if}>
                                                                        {$grs|escape}
                                                                </a>
                                                            {else}
                                                                {$grs|escape}
                                                            {/if}
                                                            {if $what eq 'included'}<span class="label label-info">{tr}Included{/tr}</span>{/if}
                                                            {if $grs eq $users[user].default_group}<small>({tr}default{/tr})</small>{/if}
                                                            {if $what ne 'included' and $grs != "Registered"}
                                                                {* keep link code on one line to avoid stray underlining *}
                                                                <a href="{bootstrap_modal controller=user action=manage_groups checked=$username groupremove=$grs offset=$offset sort_mode=$sort_mode numrows=$numrows}">{icon name="remove"}</a>
                                                            {/if}
                                                            {if !$smarty.foreach.gr.last}<br>{/if}
                                                        {/if}
                                                    </div>
                                                {/foreach}
                                            </td>

                                            <td class="action">
                                                {actions}
                                                    {strip}
                                                        <action>
                                                            <a href="{bootstrap_modal controller=user action=manage_groups checked=$username offset=$offset sort_mode=$sort_mode numrows=$numrows}">
                                                                {icon name="group" _menu_text='y' _menu_icon='y' alt="{tr}Add or remove from a group{/tr}"}
                                                            </a>
                                                        </action>
                                                        <action>
                                                            <a class="link" href="tiki-assignuser.php?assign_user={$users[user].user|escape:url}" title="{tr}Edit group expiry{/tr}">
                                                                {icon name='time' _menu_text='y' _menu_icon='y' alt='{tr}Edit group expiry{/tr}'}
                                                            </a>
                                                        </action>
                                                        <action>
                                                            <a href="{query _type='relative' user=$users[user].userId}">
                                                                {icon name="edit" _menu_text='y' _menu_icon='y' alt="{tr}Edit account settings{/tr}"}
                                                            </a>
                                                        </action>
                                                        {if $prefs.feature_userPreferences eq 'y' || $user eq 'admin'}
                                                            <action>
                                                                <a href="tiki-user_preferences.php?userId={$users[user].userId}">
                                                                    {icon name="settings" _menu_text='y' _menu_icon='y' alt="{tr}Change user preferences{/tr}"}
                                                                </a>
                                                            </action>
                                                        {/if}
                                                        {if $users[user].user eq $user or $users[user].user_information neq 'private' or $tiki_p_admin eq 'y'}
                                                            <action>
                                                                <a href="tiki-user_information.php?userId={$users[user].userId}"{if $users[user].user_information eq 'private'}
                                                                    style="opacity:0.5;"{/if}
                                                                >
                                                                    {icon name="help" _menu_text='y' _menu_icon='y' alt="{tr}User information{/tr}"}
                                                                </a>
                                                            </action>
                                                        {/if}
                                                        {if $users[user].user ne 'admin' and $users[user].user ne $user and $tiki_p_admin eq 'y'}
                                                            <action>
                                                                <a href='#' onClick="$('#login-switchuser_1').val('{$users[user].user|username|escape:javascript}'); $('#form_switch_user').submit(); return false;">
                                                                    {icon name="user" _menu_text='y' _menu_icon='y' alt="{tr}Switch to this user{/tr}"}
                                                                </a>
                                                            </action>
                                                        {/if}
                                                        {if $users[user].user ne 'admin'}
                                                            {if $users[user].waiting eq 'a'}
                                                                {* Use a form for the next three actions since they change the database.
                                                                    No confirm needed, confirmPopup() only checks if the ticket has expired
                                                                *}
                                                                <action>
                                                                    <form action="tiki-login_validate.php" method="post">
                                                                        {ticket}
                                                                        <input type="hidden" name="user" value="{$users[user].user|escape:'attr'}">
                                                                        <input type="hidden" name="pass" value="{$users[user].valid|escape:'attr'}">
                                                                        <button type="submit" class="btn btn-link link-list">
                                                                            {icon name="ok"} {tr}Validate user{/tr}
                                                                        </button>
                                                                    </form>
                                                                </action>
                                                            {/if}
                                                            {if $users[user].waiting eq 'u'}
                                                                <action>
                                                                    <form action="tiki-confirm_user_email.php" method="post">
                                                                        {ticket}
                                                                        <input type="hidden" name="user" value="{$users[user].user|escape:'attr'}">
                                                                        <input type="hidden" name="pass" value="{$users[user].provpass|md5|escape:'attr'}">
                                                                        <button type="submit" class="btn btn-link link-list">
                                                                            {icon name="thumbs-up"} {tr}Validate user{/tr}
                                                                        </button>
                                                                    </form>
                                                                </action>
                                                            {/if}
                                                            {if $prefs.email_due > 0 and $users[user].waiting ne 'u' and $users[user].waiting ne 'a'}
                                                                <action>
                                                                    <form action="tiki-adminusers.php" method="post">
                                                                        {ticket}
                                                                        <input type="hidden" name="user" value="{$users[user].user|escape:'attr'}">
                                                                        <button type="submit" name="action" value="email_due" class="btn btn-link link-list">
                                                                            {icon name="thumbs-down"} {tr}Invalidate user{/tr}
                                                                        </button>
                                                                    </form>
                                                                </action>
                                                            {/if}
                                                            <action>
                                                                <a href="{bootstrap_modal controller=user action=remove_users checked=$username offset=$offset sort_mode=$sort_mode numrows=$numrows}">
                                                                    {icon name="remove" _menu_text='y' _menu_icon='y' alt="{tr}Delete{/tr}"}
                                                                </a>
                                                            </action>
                                                            {if $users[user].waiting eq 'l'}
                                                                <action>
                                                                    <a href="{bootstrap_modal controller=user action=set_user_lock_status checked=$username offset=$offset sort_mode=$sort_mode numrows=$numrows lock=unlock}">
                                                                        {icon name="unlock" _menu_text='y' _menu_icon='y' alt="{tr}Unlock account{/tr}"}
                                                                    </a>
                                                                </action>
                                                            {else}
                                                                <action>
                                                                    <a href="{bootstrap_modal controller=user action=set_user_lock_status checked=$username offset=$offset sort_mode=$sort_mode numrows=$numrows lock=lock}">
                                                                        {icon name="lock" _menu_text='y' _menu_icon='y' alt="{tr}Lock account{/tr}"}
                                                                    </a>
                                                                </action>
                                                            {/if}
                                                        {/if}
                                                        {* Use a confirm here since action cannot easily be undone *}
                                                        {if !empty($users[user].openid_url)}
                                                            <action>
                                                                <a href="tiki-adminusers.php?userId={$userId=$users[user].userId|escape:url}&amp;action=remove_openid" onclick="confirmPopup('{tr}Remove link with OpenID for this user?{/tr}', '{ticket mode=get}')">
                                                                    {icon name="link" _menu_text='y' _menu_icon='y' alt="{tr}Remove link with OpenID account{/tr}"}
                                                                </a>
                                                            </action>
                                                        {/if}
                                                    {/strip}
                                                {/actions}
                                        </tr>
                                    {/if}
                                {sectionelse}
                                    {norecords _colspan=8 _text="No user records found"}
                                {/section}
                            </tbody>
                        </table>
                        {jq}
                            $document.on("show.bs.popover", function ( e ) {
                                var itemId = $(e.target).data("itemid");
                                if (itemId) {
                                    $.get($.service("tracker", "view", {id: itemId}), function (data) {
                                        data = data.replace(/<h[\s\S]*?<\/h.*?>/mgi, "");    // remove headings
                                        $(".popover-body", ".popover.show").empty().append(data);
                                    });
                                }
                            });
                        {/jq}
                    {if !$ts.ajax}
                    </div>
                    {if $users}
                        <div class="input-group col-sm-8">
                            <select class="form-select" name="action">
                                <option value="no_action" selected="selected">
                                    {tr}Select action to perform with checked{/tr}...
                                </option>
                                <option value="remove_users">
                                    {tr}Remove users...{/tr}
                                </option>
                                {if $prefs.feature_banning == 'y'}
                                    <option value="ban_ips">
                                        {tr}Ban IPs{/tr}
                                    </option>
                                {/if}
                                <option value="manage_groups">
                                    {tr}Change group assignments{/tr}
                                </option>
                                <option value="default_groups">
                                    {tr}Set default groups{/tr}
                                </option>
                                {if $prefs.feature_wiki == 'y'}
                                    <option value="email_wikipage">
                                        {tr}Send wiki page content by email{/tr}
                                    </option>
                                {/if}
                            </select>
                            <button
                                type="submit"
                                formaction="{bootstrap_modal controller=user}"
                                class="btn btn-primary"
                                onclick="confirmPopup()"
                            >
                                {tr}OK{/tr}
                            </button>
                        </div>
                    {/if}
                </div>
                <input type="hidden" name="find" value="{$find|escape}">
                <input type="hidden" name="numrows" value="{$numrows|escape}">
                <input type="hidden" name="sort_mode" value="{$sort_mode|escape}">
            </form>

            <form id='form_switch_user' action='tiki-login.php' method='post'>
                {ticket}
                <input type="hidden" name="su" value="1" class="form-control" />
                <input type="hidden" name="username" id="login-switchuser_1" value="" class="form-control" />
            </form>


        {if !$ts.enabled}
            {pagination_links cant=$cant step=$numrows offset=$offset}{/pagination_links}
        {/if}
    {/if}
        {/tab}
    {if !$ts.ajax}

        {* ---------------------- tab with form -------------------- *}
        <a id="tab2" ></a>
        {if isset($userinfo.userId) && $userinfo.userId}
            {capture assign=add_edit_user_tablabel}{tr}Edit user{/tr} <i>{$userinfo.login|escape}</i>{/capture}
        {else}
            {assign var=add_edit_user_tablabel value="{tr}Add a New User{/tr}"}
        {/if}

        {tab name="{$add_edit_user_tablabel}"}
            {if $prefs.feature_user_encryption eq 'y'}
                {remarksbox type="warning" title="{tr}Warning: User Encryption is Active{/tr}"}
                {tr}The feature User Encryption stores encrypted user information, such as password used to connect to externalsystems.
                    If the password is changed, it will destroy the user's decryption key, and make the data unreadable.
                    The user will be forced to re-enter the passwords and other data that may be encrypted.{/tr}</a>.
                {/remarksbox}
            {/if}
            {if isset($userinfo.userId) && $userinfo.userId}
                <h2>{tr}Edit user{/tr} {$userinfo.login|escape}</h2>
                {assign var=thisloginescaped value=$userinfo.login|escape:'url'}
                {if $userinfo.login ne 'admin' and $userinfo.editable}
                    {button href="tiki-assignuser.php?assign_user=$thisloginescaped" _text="{tr}Assign user to Groups{/tr}" _icon_name='group'}
                {/if}
                {if $userinfo.waiting eq 'a'}
                    {$thispassescaped = $userinfo.valid|escape:'url'}
                    {if empty($thispassescaped)}{$thispassescaped = 0}{/if}
                    {button href='tiki-login_validate.php?user='|cat:$thisloginescaped|cat:'&pass='|cat:$thispassescaped _text="{tr}Validate user{/tr}" _icon_name='ok'}
                {/if}
            {else}
                <h2>{tr}Add a New User{/tr}</h2>
            {/if}
            {if $prefs.feature_intertiki eq 'y' and not empty($prefs.feature_intertiki_mymaster)}
                {remarksbox type="info" title="{tr}Intertiki Enabled{/tr}"}
                {tr _0=$prefs.feature_intertiki_mymaster|escape}This Tiki is an Intertiki Client so user information must be edited on the Intertiki Master "%0"{/tr}</a>.
                {/remarksbox}
            {elseif $userinfo.editable}
                <form action="tiki-adminusers.php" method="post" enctype="multipart/form-data" name="RegForm" autocomplete="off">
                    {ticket}
                    <div class="mb-3 row">
                        <label class="col-sm-3 col-md-2 col-form-label" for="login">{if $prefs.login_is_email eq 'y'}{tr}Email{/tr}{else}{tr}User{/tr}{/if}</label>
                        <div class="col-sm-7 col-md-6">
                            {if $userinfo.login neq 'admin'}
                                <input type="text" id='login' class="form-control" name='login' value="{$userinfo.login|escape}">
                                {if $prefs.login_is_email eq 'y'}
                                    <br>
                                    <em>{tr}Use the email as username{/tr}.</em>
                                {elseif $prefs.lowercase_username eq 'y'}
                                    <br>
                                    <em>{tr}Lowercase only{/tr}</em>.
                                {elseif $prefs.login_autogenerate eq 'y'}
                                    <br>

                                    {icon name='warning' alt="{tr}Warning{/tr}" style="vertical-align:middle"}
                                    <em>{tr}The username will be an autogenerated number based on the user ID if no actual username is provided when the user is created. Do not change these numeric usernames.{/tr}</em>
                                {/if}
                                {if not empty($userinfo.userId) and $prefs.feature_intertiki eq 'y'}
                                    <p>
                                        {icon name='warning' alt="{tr}Warning{/tr}" style="vertical-align:middle"}
                                        <em>{tr}Changing username is disabled for Intertiki sites{/tr}</em>
                                    </p>
                                {/if}
                            {else}
                                <input type="hidden" class="form-control" name='login' value="{$userinfo.login|escape}">{$userinfo.login}
                            {/if}
                        </div>
                    </div>

                    {*
                        No need to specify user password or to ask him to change it, if :
                        --> Tiki is using the Tiki + PEAR Auth systems
                        --> AND Tiki won't create the user in the Tiki auth system
                        --> AND Tiki won't create the user in the ldap
                    *}
                    {if $prefs.auth_method eq 'ldap' and ( $prefs.ldap_create_user_tiki eq 'n' or $prefs.ldap_skip_admin eq 'y' ) and $prefs.ldap_create_user_ldap eq 'n' and $userinfo.login neq 'admin' and $auth_ldap_permit_tiki_users eq 'n'}
                        <div class="mb-3 row">
                            <div class="offset-sm-2">
                                <b>{tr}No password is required{/tr}</b>
                                <br>
                                <i>{tr}Tiki is configured to delegate the password managment to LDAP.{/tr}</i>
                            </div>
                        </div>
                    {else}
                        {include file='password_jq.tpl' ignorejq='y'}
                        <div class="mb-3 row">
                            <label class="col-sm-3 col-md-2 col-form-label" for="pass1">{if isset($userinfo.userId)}{tr}New password{/tr}{else}{tr}Password{/tr}{/if}</label>
                            <div class="col-sm-7 col-md-6">
                                <input type="password" class="form-control" placeholder="{tr}Password{/tr}" name="pass" id="pass1" autocomplete="new-password">
                                <div style="margin-left:5px;">
                                    <div id="mypassword_text">{icon name='ok' istyle='display:none'}{icon name='error' istyle='display:none' } <span id="mypassword_text_inner"></span></div>
                                    <div id="mypassword_bar" style="font-size: 5px; height: 2px; width: 0px;"></div>
                                </div>
                                <div style="margin-top:5px">
                                    {include file='password_help.tpl'}
                                </div>
                            </div>
                        </div>
                        <div class="mb-3 row">
                            <label class="col-sm-3 col-md-2 col-form-label" for="pass2">{if isset($userinfo.userId)}{tr}Confirm new password{/tr}{else}{tr}Confirm password{/tr}{/if}</label>
                            <div class="col-sm-7 col-md-6">
                                <input type="password" class="form-control" name="passAgain" id="pass2" placeholder="{tr}Password{/tr}" autocomplete="new-password">
                                <div id="mypassword2_text">
                                    <div id="match" style="display:none">
                                        {icon name='ok' istyle='color:#0ca908'} {tr}Passwords match{/tr}
                                    </div>
                                    <div id="nomatch" style="display:none">
                                        {icon name='error' istyle='color:#ff0000'} {tr}Passwords do not match{/tr}
                                    </div>
                                </div>
                            </div>
                        </div>
                        {if $prefs.generate_password eq 'y' and not ( $prefs.auth_method eq 'ldap' and ( $prefs.ldap_create_user_tiki eq 'n' or $prefs.ldap_skip_admin eq 'y' ) and $prefs.ldap_create_user_ldap eq 'n')}
                            <div class="mb-3 row">
                                <div class="col-sm-3 offset-sm-3 col-md-3 offset-md-2">
                                    <span id="genPass">{button href="#" _text="{tr}Generate a password{/tr}"}</span>
                                </div>
                                <div class="col-sm-3 col-md-3">
                                    <input id='genepass' class="form-control" name="genepass" type="text" tabindex="0" style="display:none">
                                </div>
                            </div>
                        {/if}
                        {if $userinfo.login neq 'admin' && $prefs.change_password neq 'n'}
                            <div class="mb-3 row">
                                <div class="col-sm-9 offset-sm-3 col-md-10 offset-md-2">
                                    <div class="form-check">
                                        <label class="form-check-label">
                                            <input class="form-check-input" type="checkbox" name="pass_first_login"{if isset($userinfo.pass_confirm) && $userinfo.pass_confirm eq '0'} checked="checked"{/if}>
                                            {tr}User must change password at next login{/tr}
                                        </label>
                                    </div>
                                </div>
                            </div>
                        {/if}
                    {/if}
                    {if $prefs.login_is_email neq 'y'}
                        <div class="mb-3 row">
                            <label class="col-sm-3 col-md-2 col-form-label" for="pass1">{tr}Email{/tr}</label>
                            <div class="col-sm-7 col-md-6">
                                <input type="text" class="form-control" id="email" name="email" size="30" value="{$userinfo.email|escape}">
                            </div>
                        </div>
                    {/if}
                    {if $userinfo.login neq 'admin' and ($prefs.validateUsers eq 'y' or $prefs.validateRegistration eq 'y')}
                        <div class="mb-3 row">
                            <div class="col-sm-9 offset-sm-3 col-md-10 offset-md-2">
                                <div class="form-check">
                                    <label class="form-check-label">
                                        <input class="form-check-input" type="checkbox" name="need_email_validation" {if ($userinfo.login eq '' and ($prefs.validateUsers eq 'y' or $prefs.validateRegistration eq 'y')) or $userinfo.provpass neq '' or $userinfo.valid neq ''}checked="checked"{/if}>
                                        {tr}Send an email to the user to enable him or her to validate their account.{/tr}
                                    </label>
                                    {if empty($prefs.sender_email)}
                                        <div class="alert alert-warning highlight">{tr}You need to set <a href="tiki-admin.php?page=general" class="alert-link">Sender Email</a>{/tr}</div>
                                    {/if}
                                </div>
                            </div>
                        </div>
                    {/if}
                    {if $prefs.userTracker eq 'y' and $userinfo.login eq ''}
                        <div class="mb-3 row">
                            <div class="col-sm-9 offset-sm-3 col-md-10 offset-md-2">
                                <div class="form-check">
                                    <label class="form-check-label">
                                        <input class="form-check-input" type="checkbox" name="insert_user_tracker_item">
                                        {tr}Add a user tracker item for this user{/tr}
                                    </label>
                                </div>
                            </div>
                        </div>
                    {/if}

                    {if $prefs.userTracker eq 'y' and $userstrackerid}
                        <div class="mb-3 row">
                            <label class="col-md-2 col-form-label">
                                {tr}User tracker{/tr}
                            </label>

                            <div class="col-md-10">
                                {if $usersitemid}
                                    <a href="{bootstrap_modal controller=tracker action=update_item trackerId=$userstrackerid itemId=$usersitemid}" onclick="$('[data-bs-toggle=popover]').popover('hide');" class="btn btn-primary edit-usertracker">
                                        {tr}Edit Item{/tr}
                                    </a>
                                    <a href="{bootstrap_modal controller=tracker action=view id=$usersitemid}" class="btn btn-info">
                                        {tr}View item{/tr}
                                    </a>
                                {else}
                                    <a href="{bootstrap_modal controller=tracker action=insert_item trackerId=$userstrackerid forced=$usersTrackerForced}" onclick="$('[data-bs-toggle=popover]').popover('hide');" class="btn btn-primary insert-usertracker">
                                        {tr}Create Item{/tr}
                                    </a>
                                {/if}
                            </div>
                        </div>
                    {/if}

                    <div class="mb-3 row">
                        <div class="col-sm-9 offset-sm-3 col-md-10 offset-md-2">
                            {if isset($userinfo.userId) && $userinfo.userId}
                                <input type="hidden" name="user" value="{$userinfo.userId|escape}">
                                <input type="hidden" name="edituser" value="1">
                                <input
                                    type="submit"
                                    class="btn btn-primary"
                                    name="save"
                                    value="{tr}Save{/tr}"
                                    onclick="confirmPopup('{tr}Modify this user\'s data?{/tr}')"
                                >
                            {else}
                                <input
                                    type="submit"
                                    class="btn btn-primary"
                                    name="newuser"
                                    value="{tr}Add{/tr}"
                                >
                            {/if}
                        </div>
                    </div>
                    {if isset($userinfo.userId) && $userinfo.userId != 0}
                        <table class="table table-striped table-condensed small">

                            {if $userinfo.created neq $userinfo.registrationDate}
                                <tr>
                                    <td>{tr}Created{/tr}</td>
                                    <td>{$userinfo.created|tiki_long_datetime}</td>
                                </tr>
                            {/if}
                            <tr>
                                <td>{tr}Registered{/tr}</td><td>{if $userinfo.registrationDate}{$userinfo.registrationDate|tiki_long_datetime}{/if}</td>
                            </tr>
                            <tr>
                                <td>{tr}Pass confirmed{/tr}</td><td>{if isset($userinfo.pass_confirm) && $userinfo.pass_confirm}{$userinfo.pass_confirm|tiki_long_datetime|default:'Never'}{/if}</td>
                            </tr>

                            {if $prefs.email_due > 0}
                                <tr>
                                    <td style="white-space: nowrap;">{tr}Email confirmed{/tr}</td>
                                    <td>
                                        {if $userinfo.email_confirm}
                                            ({tr _0=$userinfo.daysSinceEmailConfirm}%0 days ago{/tr})
                                        {else}
                                            {tr}Never{/tr}
                                        {/if}
                                    </td>
                                </tr>
                            {/if}
                            <tr>
                                <td>{tr}Current Login{/tr}</td>
                                <td>{if $userinfo.currentLogin}{$userinfo.currentLogin|tiki_long_datetime|default:'Never'}{/if}</td>
                            </tr>
                            <tr>
                                <td>{tr}Last Login{/tr}</td>
                                <td>{if $userinfo.lastLogin}{$userinfo.lastLogin|tiki_long_datetime|default:'Never'}{/if}</td>
                            </tr>
                        </table>
                    {/if}

                </form>
            {else}
                {tr}You do not have permission to edit this user{/tr}
            {/if}
        {/tab}

        {* ---------------------- tab with upload -------------------- *}
        {tab name="{tr}Import{/tr}"}
            <h2>{tr}Batch upload (CSV file){/tr}{help url="Users"}</h2>

            <form action="tiki-adminusers.php" method="post" enctype="multipart/form-data">
                {ticket}
                <div class="mb-3 row">
                    <label for="csvlist" class="col-form-label col-md-3">{tr}CSV File{/tr}</label>
                    <div class="col-md-9">
                        <input type="file" id="csvlist" name="csvlist" class="form-control">
                        <small class="form-text">
                            {tr}Your file should contain in the first row (first entry) the following fields:{/tr}
                            <span class="font-weight-bold">login</span>, <span class="font-weight-bold">password</span>, <span class="font-weight-bold">email</span>, groups, default_group,realName.<br><br>
                            <span class="font-italic">{tr}Example:{/tr}</span><br>
                            login,password,email,groups,default_group,realName<br>
                            {tr}user1,pass1,email1,group1,group1{/tr}<br>
                            {tr}user2,pass2,email2,"group1,group2",group1{/tr}<br><br>
                            {tr}Only login, password, email are mandatory. Use an empty password for automatic password generation. Use same login and email if the login use email. Groups are separated by comma. With group name with comma, double the comma.{/tr}<br>
                            {tr}On most server with default setting importing 250 users should be fine. If you have a long list you can split it or change the server settings to allow longer execution time.{/tr}
                            {tr}Please also note that the data should match your Tiki setting. IE: if special characters or space are not permit for the username of your Tiki then your data in the CSV file for username should not contain any.{/tr}
                        </small>
                    </div>
                </div>
                <div class="mb-3 row">
                    <label class="col-md-3 col-form-label">{tr}Existing Users{/tr}</label>
                    <div class="col-md-9">
                        <label>
                            <input type="radio" name="overwrite" value="y">
                            {tr}Overwrite{/tr}
                        </label>
                        <label>
                            <input type="radio" name="overwrite" value="n" checked>
                            {tr}Don't overwrite{/tr}
                        </label>
                    </div>
                </div>
                <div class="mb-3 row">
                    <div class="col-md-9 offset-md-3">
                        <div class="form-check">
                            <label class="form-check-label">
                                <input class="form-check-input" type="checkbox" name="overwriteGroup">
                                {tr}Overwrite groups{/tr}{help url="Users"  desc="{tr}Select this if you want the groups to be overwritten{/tr}"}
                            </label>
                        </div>
                    </div>
                </div>
                <div class="mb-3 row">
                    <div class="col-md-9 offset-md-3">
                        <div class="form-check">
                            <label class="form-check-label">
                                <input class="form-check-input" type="checkbox" name="createGroup">
                                {tr}Create groups{/tr}{help url="Users" desc="{tr}Select this if you want the new groups indicated in the csv file to be created{/tr}"}
                            </label>
                        </div>
                    </div>
                </div>
                {if $prefs.change_password neq 'n'}
                    <div class="mb-3 row">
                        <div class="col-md-9 offset-md-3">
                            <div class="form-check">
                                <label class="form-check-label">
                                    <input class="form-check-input" type="checkbox" name="forcePasswordChange">
                                    {tr}The user must change his or her password the first time they log in{/tr}{help url="Users" desc="{tr}Select this if you want to force the user to change their passwords the first time that they log in to Tiki site{/tr}"}
                                </label>
                            </div>
                        </div>
                    </div>
                {/if}
                <div class="mb-3 row">
                    <div class="col-md-9 offset-md-3">
                        <div class="form-check">
                            <label class="form-check-label">
                                <input class="form-check-input" type="checkbox" name="notification">
                                {tr}Send an email to the user to enable him or her to validate their account.{/tr}{help url="Users" desc="{tr}Select this if you want to require users to validate first their email account prior to their first login.{/tr}"}
                            </label>
                        </div>
                    </div>
                </div>
                <div class="mb-3 row">
                    <div class="col-md-9 offset-md-3">
                        <input type="submit" class="btn btn-secondary" name="batch" value="{tr}Add{/tr}">
                    </div>
                </div>
            </form>
            {if $tiki_p_admin eq 'y'} {* only full admins can manage groups, not tiki_p_admin_users *}
                {remarksbox type="tip" title="{tr}Tip{/tr}"}{tr}You can export users of a group by clicking on that group at <a href="tiki-admingroups.php" class="alert-link">admin->groups</a>{/tr}{/remarksbox}
            {/if}
        {/tab}

        {tab name="{tr}Temporary Users{/tr}"}
            <h2>{tr}Invite new temporary user(s){/tr}</h2>
            {$temp_users_enabled = true}
            {if $prefs['auth_token_access'] != 'y'}
                {remarksbox type="warning" title="{tr}Token Access Feature Dependency{/tr}"}
                    {tr}The token access feature is needed for Temporary Users to login.{/tr}
                    <a href="tiki-admin.php?lm_criteria=auth_token_access&exact" class="alert-link">{tr}Turn it on here.{/tr}</a>
                {/remarksbox}
                {$temp_users_enabled = false}
            {/if}
            {if $prefs['login_is_email'] === 'y'}
                {remarksbox type="warning" title="{tr}Feature Conflict{/tr}"}
                    {tr}This feature currently is incompatible with the "Use email as username" feature{/tr}
                    <a href="tiki-admin.php?lm_criteria=login_is_email&exact" class="alert-link">{tr}Turn it off here.{/tr}</a>
                {/remarksbox}
                {$temp_users_enabled = false}
            {/if}
            {if $prefs['user_unique_email'] === 'y'}
                {remarksbox type="warning" title="{tr}Feature Conflict{/tr}"}
                    {tr}This feature currently is incompatible with the "The email address of each user must be unique." feature{/tr}
                    <a href="tiki-admin.php?lm_criteria=user_unique_email&exact" class="alert-link">{tr}Turn it off here.{/tr}</a>
                {/remarksbox}
                {$temp_users_enabled = false}
            {/if}
            {if $temp_users_enabled}
                {remarksbox type="info" title="{tr}Temporary Users{/tr}"}
                    <p>{tr}Temporary users cannot login the usual way but instead do so via an autologin URL that is associated with a token.{/tr} {tr}An email will be sent out to invited users containing this URL. You will receive a copy of the email yourself.{/tr}</p>
                    <p>{tr}These temporary users will be deleted (but can be set to be preserved in Admin Tokens) once the validity period is over. Normally, these users should have read-only access. Nevertheless, if you are allowing these users to submit information, e.g. fill in a tracker form, make sure to ask for their information again in those forms.{/tr}</p>
                    <p>{tr}Please do not assign temporary users to Groups that can access any security sensitive information, since access to these accounts is relatively easy to obtain, for example by intercepting or otherwise getting access to these emails.{/tr}</p>
                {/remarksbox}
                {remarksbox type="info" title="{tr}Revoking Access{/tr}"}
                    {tr}To revoke access before validity expires or to review who has access, please see:{/tr} <a href="tiki-admin_tokens.php" class="alert-link">{tr}Admin Tokens{/tr}</a>
                {/remarksbox}
                <form name="tempuser" id="tempuser" method="post" action="{service controller=user action=invite_tempuser}">
                    <div class="mb-3 row">
                        <label class="col-sm-4 col-md-4 col-form-label" for="tempuser_emails">{tr}Email addresses (comma-separated){/tr}</label>
                        <div class="col-sm-8 col-md-8">
                            <input type="text" class="form-control" name="tempuser_emails" id="tempuser_emails" />
                        </div>
                    </div>
                    <div class="mb-3 row">
                        <label class="col-sm-4 col-md-4 col-form-label" for="tempuser_groups">{tr}Groups (comma-separated){/tr}</label>
                        <div class="col-sm-8 col-md-8">
                            <input type="text" class="form-control" name="tempuser_groups" id="tempuser_groups" />
                            {autocomplete element='#tempuser_groups' type='groupname'}
                        </div>
                    </div>
                    <div class="mb-3 row">
                        <label class="col-sm-4 col-md-4 col-form-label" for="tempuser_expiry">{tr}Valid for days (use -1 for forever){/tr}</label>
                        <div class="col-sm-8 col-md-8">
                            <input type="text" class="form-control" name="tempuser_expiry" id="tempuser_expiry" />
                        </div>
                    </div>
                    <div class="mb-3 row">
                        <label class="col-sm-4 col-md-4 col-form-label" for="tempuser_prefix">{tr}Username prefix{/tr}</label>
                        <div class="col-sm-8 col-md-8">
                            <input type="text" class="form-control" name="tempuser_prefix" id="tempuser_prefix" placeholder="guest"/>
                        </div>
                    </div>
                    <div class="mb-3 row">
                        <label class="col-sm-4 col-md-4 col-form-label" for="tempuser_path">{tr}Autologin (non-SEFURL) path{/tr}</label>
                        <div class="col-sm-8 col-md-8">
                            <input type="text" class="form-control" name="tempuser_path" id="tempuser_path" placeholder="index.php"/>
                        </div>
                    </div>
                    <div class="mb-3 row">
                        <div class="col-sm-10 offset-sm-4 col-md-10 offset-md-4">
                            <input
                                type="submit"
                                class="btn btn-secondary"
                                value="{tr}Invite{/tr}"
                                onclick="postForm()"
                            >
                        </div>
                    </div>
                </form>
            {/if}
        {/tab}
    {/if}
{/tabset}