Split admin/users into 6 separate modules

- They now feature working pagination

src/Module/Admin/Users/Active.php

@@ -0,0 +1,164 @@
+<?php
+/**
+ * @copyright Copyright (C) 2020, Friendica
+ *
+ * @license GNU AGPL version 3 or any later version
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ *
+ */
+
+namespace Friendica\Module\Admin\Users;
+
+use Friendica\Content\Pager;
+use Friendica\Core\Renderer;
+use Friendica\Database\DBA;
+use Friendica\DI;
+use Friendica\Model\User;
+use Friendica\Module\Admin\BaseUsers;
+
+class Active extends BaseUsers
+{
+	public static function post(array $parameters = [])
+	{
+		self::checkAdminAccess();
+
+		self::checkFormSecurityTokenRedirectOnError(DI::baseUrl()->get(true), 'admin_users_active');
+
+		$users = $_POST['user'] ?? [];
+
+		if (!empty($_POST['page_users_block'])) {
+			foreach ($users as $uid) {
+				User::block($uid);
+			}
+			info(DI::l10n()->tt('%s user blocked', '%s users blocked', count($users)));
+		}
+
+		if (!empty($_POST['page_users_delete'])) {
+			foreach ($users as $uid) {
+				if (local_user() != $uid) {
+					User::remove($uid);
+				} else {
+					notice(DI::l10n()->t('You can\'t remove yourself'));
+				}
+			}
+
+			info(DI::l10n()->tt('%s user deleted', '%s users deleted', count($users)));
+		}
+
+		DI::baseUrl()->redirect(DI::args()->getQueryString());
+	}
+
+	public static function content(array $parameters = [])
+	{
+		parent::content($parameters);
+
+		$action = $parameters['action'] ?? '';
+		$uid = $parameters['uid'] ?? 0;
+
+		if ($uid) {
+			$user = User::getById($uid, ['username', 'blocked']);
+			if (!DBA::isResult($user)) {
+				notice(DI::l10n()->t('User not found'));
+				DI::baseUrl()->redirect('admin/users');
+				return ''; // NOTREACHED
+			}
+		}
+
+		switch ($action) {
+			case 'delete':
+				if (local_user() != $uid) {
+					self::checkFormSecurityTokenRedirectOnError('admin/users/active', 'admin_users_active', 't');
+					// delete user
+					User::remove($uid);
+
+					notice(DI::l10n()->t('User "%s" deleted', $user['username']));
+				} else {
+					notice(DI::l10n()->t('You can\'t remove yourself'));
+				}
+
+				DI::baseUrl()->redirect('admin/users');
+				break;
+			case 'block':
+				self::checkFormSecurityTokenRedirectOnError('admin/users/active', 'admin_users_active', 't');
+				User::block($uid);
+				notice(DI::l10n()->t('User "%s" blocked', $user['username']));
+				DI::baseUrl()->redirect(DI::baseUrl()->get(true));
+				break;
+		}
+		$pager = new Pager(DI::l10n(), DI::args()->getQueryString(), 100);
+
+		$valid_orders = [
+			'name',
+			'email',
+			'register_date',
+			'login_date',
+			'last-item',
+			'page-flags'
+		];
+
+		$order = 'name';
+		$order_direction = '+';
+		if (!empty($_GET['o'])) {
+			$new_order = $_GET['o'];
+			if ($new_order[0] === '-') {
+				$order_direction = '-';
+				$new_order = substr($new_order, 1);
+			}
+
+			if (in_array($new_order, $valid_orders)) {
+				$order = $new_order;
+			}
+		}
+
+		$users = User::getList($pager->getStart(), $pager->getItemsPerPage(), 'active', $order, ($order_direction == '-'));
+
+		$users = array_map(self::setupUserCallback(), $users);
+
+		$th_users = array_map(null, [DI::l10n()->t('Name'), DI::l10n()->t('Email'), DI::l10n()->t('Register date'), DI::l10n()->t('Last login'), DI::l10n()->t('Last public item'), DI::l10n()->t('Type')], $valid_orders);
+
+		$count = DBA::count('user', ['blocked' => false, 'account_removed' => false]);
+
+		$t = Renderer::getMarkupTemplate('admin/users/active.tpl');
+		return self::getTabsHTML('active') .	Renderer::replaceMacros($t, [
+			// strings //
+			'$title' => DI::l10n()->t('Administration'),
+			'$page' => DI::l10n()->t('Active Accounts'),
+			'$select_all' => DI::l10n()->t('select all'),
+			'$delete' => DI::l10n()->t('Delete'),
+			'$block' => DI::l10n()->t('Block'),
+			'$blocked' => DI::l10n()->t('User blocked'),
+			'$siteadmin' => DI::l10n()->t('Site admin'),
+			'$accountexpired' => DI::l10n()->t('Account expired'),
+			'$h_newuser' => DI::l10n()->t('Create a new user'),
+
+			'$th_users' => $th_users,
+			'$order_users' => $order,
+			'$order_direction_users' => $order_direction,
+
+			'$confirm_delete_multi' => DI::l10n()->t('Selected users will be deleted!\n\nEverything these users had posted on this site will be permanently deleted!\n\nAre you sure?'),
+			'$confirm_delete' => DI::l10n()->t('The user {0} will be deleted!\n\nEverything this user has posted on this site will be permanently deleted!\n\nAre you sure?'),
+
+			'$form_security_token' => self::getFormSecurityToken('admin_users_active'),
+
+			// values //
+			'$baseurl' => DI::baseUrl()->get(true),
+			'$query_string' => DI::baseUrl()->get(true),
+
+			'$users' => $users,
+			'$count' => $count,
+			'$pager' => $pager->renderFull($count),
+		]);
+	}
+}

src/Module/Admin/Users/Blocked.php

@@ -0,0 +1,164 @@
+<?php
+/**
+ * @copyright Copyright (C) 2020, Friendica
+ *
+ * @license GNU AGPL version 3 or any later version
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ *
+ */
+
+namespace Friendica\Module\Admin\Users;
+
+use Friendica\Content\Pager;
+use Friendica\Core\Renderer;
+use Friendica\Database\DBA;
+use Friendica\DI;
+use Friendica\Model\User;
+use Friendica\Module\Admin\BaseUsers;
+use Friendica\Util\Temporal;
+
+class Blocked extends BaseUsers
+{
+	public static function post(array $parameters = [])
+	{
+		self::checkAdminAccess();
+
+		self::checkFormSecurityTokenRedirectOnError('/admin/users/blocked', 'admin_users_blocked');
+
+		$users = $_POST['user'] ?? [];
+
+		if (!empty($_POST['page_users_unblock'])) {
+			foreach ($users as $uid) {
+				User::block($uid, false);
+			}
+			info(DI::l10n()->tt('%s user unblocked', '%s users unblocked', count($users)));
+		}
+
+		if (!empty($_POST['page_users_delete'])) {
+			foreach ($users as $uid) {
+				if (local_user() != $uid) {
+					User::remove($uid);
+				} else {
+					notice(DI::l10n()->t('You can\'t remove yourself'));
+				}
+			}
+
+			info(DI::l10n()->tt('%s user deleted', '%s users deleted', count($users)));
+		}
+
+		DI::baseUrl()->redirect('admin/users/blocked');
+	}
+
+	public static function content(array $parameters = [])
+	{
+		parent::content($parameters);
+
+		$action = $parameters['action'] ?? '';
+		$uid = $parameters['uid'] ?? 0;
+
+		if ($uid) {
+			$user = User::getById($uid, ['username', 'blocked']);
+			if (!DBA::isResult($user)) {
+				notice(DI::l10n()->t('User not found'));
+				DI::baseUrl()->redirect('admin/users');
+				return ''; // NOTREACHED
+			}
+		}
+
+		switch ($action) {
+			case 'delete':
+				if (local_user() != $uid) {
+					self::checkFormSecurityTokenRedirectOnError('/admin/users/blocked', 'admin_users_blocked', 't');
+					// delete user
+					User::remove($uid);
+
+					notice(DI::l10n()->t('User "%s" deleted', $user['username']));
+				} else {
+					notice(DI::l10n()->t('You can\'t remove yourself'));
+				}
+				DI::baseUrl()->redirect('admin/users/blocked');
+				break;
+			case 'unblock':
+				self::checkFormSecurityTokenRedirectOnError('/admin/users/blocked', 'admin_users_blocked', 't');
+				User::block($uid, false);
+				notice(DI::l10n()->t('User "%s" unblocked', $user['username']));
+				DI::baseUrl()->redirect('admin/users/blocked');
+				break;
+		}
+
+		$pager = new Pager(DI::l10n(), DI::args()->getQueryString(), 100);
+
+		$valid_orders = [
+			'name',
+			'email',
+			'register_date',
+			'login_date',
+			'last-item',
+			'page-flags'
+		];
+
+		$order = 'name';
+		$order_direction = '+';
+		if (!empty($_GET['o'])) {
+			$new_order = $_GET['o'];
+			if ($new_order[0] === '-') {
+				$order_direction = '-';
+				$new_order = substr($new_order, 1);
+			}
+
+			if (in_array($new_order, $valid_orders)) {
+				$order = $new_order;
+			}
+		}
+
+		$users = User::getList($pager->getStart(), $pager->getItemsPerPage(), 'blocked', $order, ($order_direction == '-'));
+
+		$users = array_map(self::setupUserCallback(), $users);
+
+		$th_users = array_map(null, [DI::l10n()->t('Name'), DI::l10n()->t('Email'), DI::l10n()->t('Register date'), DI::l10n()->t('Last login'), DI::l10n()->t('Last public item'), DI::l10n()->t('Type')], $valid_orders);
+
+		$count = DBA::count('user', ['blocked' => true, 'verified' => true]);
+
+		$t = Renderer::getMarkupTemplate('admin/users/blocked.tpl');
+		return self::getTabsHTML('blocked') . Renderer::replaceMacros($t, [
+			// strings //
+			'$title' => DI::l10n()->t('Administration'),
+			'$page' => DI::l10n()->t('Blocked Users'),
+			'$select_all' => DI::l10n()->t('select all'),
+			'$delete' => DI::l10n()->t('Delete'),
+			'$blocked' => DI::l10n()->t('User blocked'),
+			'$unblock' => DI::l10n()->t('Unblock'),
+			'$siteadmin' => DI::l10n()->t('Site admin'),
+			'$accountexpired' => DI::l10n()->t('Account expired'),
+
+			'$th_users' => $th_users,
+			'$order_users' => $order,
+			'$order_direction_users' => $order_direction,
+
+			'$confirm_delete_multi' => DI::l10n()->t('Selected users will be deleted!\n\nEverything these users had posted on this site will be permanently deleted!\n\nAre you sure?'),
+			'$confirm_delete' => DI::l10n()->t('The user {0} will be deleted!\n\nEverything this user has posted on this site will be permanently deleted!\n\nAre you sure?'),
+
+			'$form_security_token' => self::getFormSecurityToken('admin_users_blocked'),
+
+			// values //
+			'$baseurl' => DI::baseUrl()->get(true),
+			'$query_string' => DI::args()->getQueryString(),
+
+			'$users' => $users,
+			'$count' => $count,
+			'$pager' => $pager->renderFull($count)
+		]);
+	}
+}

src/Module/Admin/Users/Create.php

@@ -0,0 +1,76 @@
+<?php
+/**
+ * @copyright Copyright (C) 2020, Friendica
+ *
+ * @license GNU AGPL version 3 or any later version
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ *
+ */
+
+namespace Friendica\Module\Admin\Users;
+
+use Friendica\Core\Renderer;
+use Friendica\DI;
+use Friendica\Model\User;
+use Friendica\Module\Admin\BaseUsers;
+
+class Create extends BaseUsers
+{
+	public static function post(array $parameters = [])
+	{
+		self::checkAdminAccess();
+
+		self::checkFormSecurityTokenRedirectOnError('/admin/users/create', 'admin_users_create');
+
+		$nu_name     = $_POST['new_user_name']     ?? '';
+		$nu_nickname = $_POST['new_user_nickname'] ?? '';
+		$nu_email    = $_POST['new_user_email']    ?? '';
+		$nu_language = DI::config()->get('system', 'language');
+
+		if ($nu_name !== '' && $nu_email !== '' && $nu_nickname !== '') {
+			try {
+				User::createMinimal($nu_name, $nu_email, $nu_nickname, $nu_language);
+				DI::baseUrl()->redirect('admin/users');
+			} catch (\Exception $ex) {
+				notice($ex->getMessage());
+			}
+		}
+
+		DI::baseUrl()->redirect('admin/users/create');
+	}
+
+	public static function content(array $parameters = [])
+	{
+		parent::content($parameters);
+
+		$t = Renderer::getMarkupTemplate('admin/users/create.tpl');
+		return self::getTabsHTML('all') . Renderer::replaceMacros($t, [
+			// strings //
+			'$title' => DI::l10n()->t('Administration'),
+			'$page' => DI::l10n()->t('New User'),
+			'$submit' => DI::l10n()->t('Add User'),
+
+			'$form_security_token' => self::getFormSecurityToken('admin_users_create'),
+
+			// values //
+			'$baseurl' => DI::baseUrl()->get(true),
+			'$query_string' => DI::args()->getQueryString(),
+
+			'$newusername' => ['new_user_name', DI::l10n()->t('Name'), '', DI::l10n()->t('Name of the new user.')],
+			'$newusernickname' => ['new_user_nickname', DI::l10n()->t('Nickname'), '', DI::l10n()->t('Nickname of the new user.')],
+			'$newuseremail' => ['new_user_email', DI::l10n()->t('Email'), '', DI::l10n()->t('Email address of the new user.'), '', '', 'email'],
+		]);
+	}
+}

src/Module/Admin/Users/Deleted.php

@@ -0,0 +1,101 @@
+<?php
+/**
+ * @copyright Copyright (C) 2020, Friendica
+ *
+ * @license GNU AGPL version 3 or any later version
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ *
+ */
+
+namespace Friendica\Module\Admin\Users;
+
+use Friendica\Content\Pager;
+use Friendica\Core\Renderer;
+use Friendica\Database\DBA;
+use Friendica\DI;
+use Friendica\Model\Register;
+use Friendica\Model\User;
+use Friendica\Module\Admin\BaseUsers;
+use Friendica\Module\BaseAdmin;
+use Friendica\Util\Temporal;
+
+class Deleted extends BaseUsers
+{
+	public static function post(array $parameters = [])
+	{
+		self::checkAdminAccess();
+
+		self::checkFormSecurityTokenRedirectOnError('/admin/users/deleted', 'admin_users_deleted');
+
+		// @TODO: Implement user deletion cancellation
+
+		DI::baseUrl()->redirect('admin/users/deleted');
+	}
+
+	public static function content(array $parameters = [])
+	{
+		parent::content($parameters);
+
+		$pager = new Pager(DI::l10n(), DI::args()->getQueryString(), 100);
+
+		$valid_orders = [
+			'name',
+			'email',
+			'register_date',
+			'login_date',
+			'last-item',
+			'page-flags'
+		];
+
+		$order = 'name';
+		$order_direction = '+';
+		if (!empty($_GET['o'])) {
+			$new_order = $_GET['o'];
+			if ($new_order[0] === '-') {
+				$order_direction = '-';
+				$new_order = substr($new_order, 1);
+			}
+
+			if (in_array($new_order, $valid_orders)) {
+				$order = $new_order;
+			}
+		}
+
+		$users = User::getList($pager->getStart(), $pager->getItemsPerPage(), 'removed', $order, ($order_direction == '-'));
+
+		$users = array_map(self::setupUserCallback(), $users);
+
+		$count = DBA::count('user', ['account_removed' => true]);
+
+		$t = Renderer::getMarkupTemplate('admin/users/deleted.tpl');
+		return self::getTabsHTML('deleted') . Renderer::replaceMacros($t, [
+			// strings //
+			'$title' => DI::l10n()->t('Administration'),
+			'$page' => DI::l10n()->t('Users awaiting permanent deletion'),
+
+			'$th_deleted' => [DI::l10n()->t('Name'), DI::l10n()->t('Email'), DI::l10n()->t('Register date'), DI::l10n()->t('Last login'), DI::l10n()->t('Last public item'), DI::l10n()->t('Permanent deletion')],
+
+			'$form_security_token' => self::getFormSecurityToken('admin_users_deleted'),
+
+			// values //
+			'$baseurl' => DI::baseUrl()->get(true),
+			'$query_string' => DI::args()->getQueryString(),
+
+			'$users' => $users,
+			'$count' => $count,
+			'$pager' => $pager->renderFull($count),
+		]);
+	}
+}

src/Module/Admin/Users/Index.php

@@ -0,0 +1,181 @@
+<?php
+/**
+ * @copyright Copyright (C) 2020, Friendica
+ *
+ * @license GNU AGPL version 3 or any later version
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ *
+ */
+
+namespace Friendica\Module\Admin\Users;
+
+use Friendica\Content\Pager;
+use Friendica\Core\Renderer;
+use Friendica\Database\DBA;
+use Friendica\DI;
+use Friendica\Model\User;
+use Friendica\Module\Admin\BaseUsers;
+
+class Index extends BaseUsers
+{
+	public static function post(array $parameters = [])
+	{
+		self::checkAdminAccess();
+
+		self::checkFormSecurityTokenRedirectOnError('admin/users', 'admin_users');
+
+		$users = $_POST['user'] ?? [];
+
+		if (!empty($_POST['page_users_block'])) {
+			foreach ($users as $uid) {
+				User::block($uid);
+			}
+			info(DI::l10n()->tt('%s user blocked', '%s users blocked', count($users)));
+		}
+
+		if (!empty($_POST['page_users_unblock'])) {
+			foreach ($users as $uid) {
+				User::block($uid, false);
+			}
+			info(DI::l10n()->tt('%s user unblocked', '%s users unblocked', count($users)));
+		}
+
+		if (!empty($_POST['page_users_delete'])) {
+			foreach ($users as $uid) {
+				if (local_user() != $uid) {
+					User::remove($uid);
+				} else {
+					notice(DI::l10n()->t('You can\'t remove yourself'));
+				}
+			}
+
+			info(DI::l10n()->tt('%s user deleted', '%s users deleted', count($users)));
+		}
+
+		DI::baseUrl()->redirect(DI::args()->getQueryString());
+	}
+
+	public static function content(array $parameters = [])
+	{
+		parent::content($parameters);
+
+		$action = $parameters['action'] ?? '';
+		$uid = $parameters['uid'] ?? 0;
+
+		if ($uid) {
+			$user = User::getById($uid, ['username', 'blocked']);
+			if (!DBA::isResult($user)) {
+				notice(DI::l10n()->t('User not found'));
+				DI::baseUrl()->redirect('admin/users');
+				return ''; // NOTREACHED
+			}
+		}
+
+		switch ($action) {
+			case 'delete':
+				if (local_user() != $uid) {
+					self::checkFormSecurityTokenRedirectOnError(DI::baseUrl()->get(true), 'admin_users', 't');
+					// delete user
+					User::remove($uid);
+
+					notice(DI::l10n()->t('User "%s" deleted', $user['username']));
+				} else {
+					notice(DI::l10n()->t('You can\'t remove yourself'));
+				}
+
+				DI::baseUrl()->redirect('admin/users');
+				break;
+			case 'block':
+				self::checkFormSecurityTokenRedirectOnError('admin/users', 'admin_users', 't');
+				User::block($uid);
+				notice(DI::l10n()->t('User "%s" blocked', $user['username']));
+				DI::baseUrl()->redirect(DI::baseUrl()->get(true));
+				break;
+			case 'unblock':
+				self::checkFormSecurityTokenRedirectOnError('admin/users', 'admin_users', 't');
+				User::block($uid, false);
+				notice(DI::l10n()->t('User "%s" unblocked', $user['username']));
+				DI::baseUrl()->redirect('admin/users');
+				break;
+		}
+		$pager = new Pager(DI::l10n(), DI::args()->getQueryString(), 100);
+
+		$valid_orders = [
+			'name',
+			'email',
+			'register_date',
+			'login_date',
+			'last-item',
+			'page-flags'
+		];
+
+		$order = 'name';
+		$order_direction = '+';
+		if (!empty($_GET['o'])) {
+			$new_order = $_GET['o'];
+			if ($new_order[0] === '-') {
+				$order_direction = '-';
+				$new_order = substr($new_order, 1);
+			}
+
+			if (in_array($new_order, $valid_orders)) {
+				$order = $new_order;
+			}
+		}
+
+		$users = User::getList($pager->getStart(), $pager->getItemsPerPage(), 'all', $order, ($order_direction == '-'));
+
+		$users = array_map(self::setupUserCallback(), $users);
+
+		$th_users = array_map(null, [DI::l10n()->t('Name'), DI::l10n()->t('Email'), DI::l10n()->t('Register date'), DI::l10n()->t('Last login'), DI::l10n()->t('Last public item'), DI::l10n()->t('Type')], $valid_orders);
+
+		$count = DBA::count('user');
+
+		$t = Renderer::getMarkupTemplate('admin/users/index.tpl');
+		return self::getTabsHTML('all') .	Renderer::replaceMacros($t, [
+			// strings //
+			'$title' => DI::l10n()->t('Administration'),
+			'$page' => DI::l10n()->t('Users'),
+			'$select_all' => DI::l10n()->t('select all'),
+			'$h_deleted' => DI::l10n()->t('User waiting for permanent deletion'),
+			'$delete' => DI::l10n()->t('Delete'),
+			'$block' => DI::l10n()->t('Block'),
+			'$blocked' => DI::l10n()->t('User blocked'),
+			'$unblock' => DI::l10n()->t('Unblock'),
+			'$siteadmin' => DI::l10n()->t('Site admin'),
+			'$accountexpired' => DI::l10n()->t('Account expired'),
+
+			'$h_users' => DI::l10n()->t('Users'),
+			'$h_newuser' => DI::l10n()->t('Create a new user'),
+			'$th_deleted' => [DI::l10n()->t('Name'), DI::l10n()->t('Email'), DI::l10n()->t('Register date'), DI::l10n()->t('Last login'), DI::l10n()->t('Last public item'), DI::l10n()->t('Permanent deletion')],
+			'$th_users' => $th_users,
+			'$order_users' => $order,
+			'$order_direction_users' => $order_direction,
+
+			'$confirm_delete_multi' => DI::l10n()->t('Selected users will be deleted!\n\nEverything these users had posted on this site will be permanently deleted!\n\nAre you sure?'),
+			'$confirm_delete' => DI::l10n()->t('The user {0} will be deleted!\n\nEverything this user has posted on this site will be permanently deleted!\n\nAre you sure?'),
+
+			'$form_security_token' => self::getFormSecurityToken('admin_users'),
+
+			// values //
+			'$baseurl' => DI::baseUrl()->get(true),
+			'$query_string' => DI::baseUrl()->get(true),
+
+			'$users' => $users,
+			'$count' => $count,
+			'$pager' => $pager->renderFull($count),
+		]);
+	}
+}

src/Module/Admin/Users/Pending.php

@@ -0,0 +1,121 @@
+<?php
+/**
+ * @copyright Copyright (C) 2020, Friendica
+ *
+ * @license GNU AGPL version 3 or any later version
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ *
+ */
+
+namespace Friendica\Module\Admin\Users;
+
+use Friendica\Content\Pager;
+use Friendica\Core\Renderer;
+use Friendica\Database\DBA;
+use Friendica\DI;
+use Friendica\Model\Register;
+use Friendica\Model\User;
+use Friendica\Module\Admin\BaseUsers;
+use Friendica\Module\BaseAdmin;
+use Friendica\Util\Temporal;
+
+class Pending extends BaseUsers
+{
+	public static function post(array $parameters = [])
+	{
+		self::checkAdminAccess();
+
+		self::checkFormSecurityTokenRedirectOnError('/admin/users/pending', 'admin_users_pending');
+
+		$pending = $_POST['pending'] ?? [];
+
+		if (!empty($_POST['page_users_approve'])) {
+			foreach ($pending as $hash) {
+				User::allow($hash);
+			}
+			info(DI::l10n()->tt('%s user approved', '%s users approved', count($pending)));
+		}
+
+		if (!empty($_POST['page_users_deny'])) {
+			foreach ($pending as $hash) {
+				User::deny($hash);
+			}
+			info(DI::l10n()->tt('%s registration revoked', '%s registrations revoked', count($pending)));
+		}
+
+		DI::baseUrl()->redirect('admin/users/pending');
+	}
+
+	public static function content(array $parameters = [])
+	{
+		parent::content($parameters);
+
+		$action = $parameters['action'] ?? '';
+		$uid = $parameters['uid'] ?? 0;
+
+		if ($uid) {
+			$user = User::getById($uid, ['username', 'blocked']);
+			if (!DBA::isResult($user)) {
+				notice(DI::l10n()->t('User not found'));
+				DI::baseUrl()->redirect('admin/users');
+				return ''; // NOTREACHED
+			}
+		}
+
+		switch ($action) {
+			case 'allow':
+				self::checkFormSecurityTokenRedirectOnError('/admin/users/pending', 'admin_users_pending', 't');
+				User::allow(Register::getPendingForUser($uid)['hash'] ?? '');
+				notice(DI::l10n()->t('Account approved.'));
+				DI::baseUrl()->redirect('admin/users/pending');
+				break;
+			case 'deny':
+				self::checkFormSecurityTokenRedirectOnError('/admin/users/pending', 'admin_users_pending', 't');
+				User::deny(Register::getPendingForUser($uid)['hash'] ?? '');
+				notice(DI::l10n()->t('Registration revoked'));
+				DI::baseUrl()->redirect('admin/users/pending');
+				break;
+		}
+
+		$pager = new Pager(DI::l10n(), DI::args()->getQueryString(), 100);
+
+		$pending = Register::getPending($pager->getStart(), $pager->getItemsPerPage());
+
+		$count = Register::getPendingCount();
+
+		$t = Renderer::getMarkupTemplate('admin/users/pending.tpl');
+		return self::getTabsHTML('pending') . Renderer::replaceMacros($t, [
+			// strings //
+			'$title' => DI::l10n()->t('Administration'),
+			'$page' => DI::l10n()->t('User registrations awaiting review'),
+			'$select_all' => DI::l10n()->t('select all'),
+			'$th_pending' => [DI::l10n()->t('Request date'), DI::l10n()->t('Name'), DI::l10n()->t('Email')],
+			'$no_pending' => DI::l10n()->t('No registrations.'),
+			'$pendingnotetext' => DI::l10n()->t('Note from the user'),
+			'$approve' => DI::l10n()->t('Approve'),
+			'$deny' => DI::l10n()->t('Deny'),
+
+			'$form_security_token' => self::getFormSecurityToken('admin_users_pending'),
+
+			// values //
+			'$baseurl' => DI::baseUrl()->get(true),
+			'$query_string' => DI::args()->getQueryString(),
+
+			'$pending' => $pending,
+			'$count' => $count,
+			'$pager' => $pager->renderFull($count),
+		]);
+	}
+}