--- loncom/interface/lonpreferences.pm	2002/02/15 22:04:39	1.3
+++ loncom/interface/lonpreferences.pm	2004/02/21 01:31:04	1.35
@@ -1,7 +1,7 @@
 # The LearningOnline Network
 # Preferences
 #
-# $Id: lonpreferences.pm,v 1.3 2002/02/15 22:04:39 matthew Exp $
+# $Id: lonpreferences.pm,v 1.35 2004/02/21 01:31:04 matthew Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -49,50 +49,24 @@ use Apache::Constants qw(:common);
 use Apache::File;
 use Crypt::DES;
 use DynaLoader; # for Crypt::DES version
+use Apache::loncommon();
+use Apache::lonhtmlcommon();
+use Apache::lonlocal;
 
-#------------------- forms to be output
-my $passwordform =<<ENDPASSWORDFORM;
-<form name="client" action="/adm/preferences" method="post">
-<input type="hidden" name="action" value="changepass">
-<input type="submit" value="Change password">
-</form>
-ENDPASSWORDFORM
-
-my $environmentform = <<ENDENVIRONMENTFORM;
-<p>
-There are currently no environment variables you can change.
-</p>
-<!----
-    You may set the following environment variables:
-    <table>
-    <tr><th>Environment Setting</th><th>Current Value</th></tr>
-    <tr>
-        <td colspan="2">
-        <font color="#ff0000">No variables currently set up</font>
-        </td>
-    </tr>
-    </table>
- -->
-ENDENVIRONMENTFORM
-#------------------ end of forms to be output
-
-################################################################
-#                       Handler subroutines                    #
-################################################################
 #
 # Write lonnet::passwd to do the call below.
 # Use:
 #   my $answer=reply("encrypt:passwd:$udom:$uname:$upass",$tryserver);
 #
-# I really should write some javascript to check on the client side for
-# mismatched passwords, but other problems are more pressing
-#
 ##################################################
 #          password associated functions         #
 ##################################################
 sub des_keys {
-    # Make a new key for DES encryption
-    # Each key has two parts which are returned seperately
+    # Make a new key for DES encryption.
+    # Each key has two parts which are returned seperately.
+    # Please note:  Each key must be passed through the &hex function
+    # before it is output to the web browser.  The hex versions cannot
+    # be used to decrypt.
     my @hexstr=('0','1','2','3','4','5','6','7',
                 '8','9','a','b','c','d','e','f');
     my $lkey='';
@@ -119,16 +93,353 @@ sub des_decrypt {
 	$cypher->decrypt(unpack("a8",pack("H16",substr($cyphertext,0,16))));
     $plaintext.=
 	$cypher->decrypt(unpack("a8",pack("H16",substr($cyphertext,16,16))));
-    $plaintext=unpack("a8",$plaintext);
-    $plaintext=substr($plaintext,1,ord(substr($plaintext,0,1)));
-    unpack("a8",$plaintext);
+    $plaintext=substr($plaintext,1,ord(substr($plaintext,0,1)) );
     return $plaintext;
 }
 
+################################################################
+#                       Handler subroutines                    #
+################################################################
+
+################################################################
+#         Language Change Subroutines                          #
+################################################################
+sub languagechanger {
+    my $r = shift;
+    my $user       = $ENV{'user.name'};
+    my $domain     = $ENV{'user.domain'};
+    my %userenv = &Apache::lonnet::get
+        ('environment',['languages']);
+    my $language=$userenv{'languages'};
+
+    my $pref=&mt('Preferred language');
+    my %langchoices=('' => 'No language preference');
+    foreach (&Apache::loncommon::languageids()) {
+	if (&Apache::loncommon::supportedlanguagecode($_)) {
+	    $langchoices{&Apache::loncommon::supportedlanguagecode($_)}
+	               = &Apache::loncommon::plainlanguagedescription($_);
+	}
+    }
+    my $selectionbox=&Apache::loncommon::select_form($language,'language',
+						     %langchoices);
+    $r->print(<<ENDLSCREEN);
+<form name="server" action="/adm/preferences" method="post">
+<input type="hidden" name="action" value="verify_and_change_languages" />
+<br />$pref: $selectionbox
+ENDLSCREEN
+    $r->print('<br /><input type="submit" value="'.&mt('Change').'" />');
+}
+
+
+sub verify_and_change_languages {
+    my $r = shift;
+    my $user       = $ENV{'user.name'};
+    my $domain     = $ENV{'user.domain'};
+# Screenname
+    my $newlanguage  = $ENV{'form.language'};
+    $newlanguage=~s/[^\-\w]//g;
+    my $message='';
+    if ($newlanguage) {
+        &Apache::lonnet::put('environment',{'languages' => $newlanguage});
+        &Apache::lonnet::appenv('environment.languages' => $newlanguage);
+        $message='Set new preferred languages to '.$newlanguage;
+    } else {
+        &Apache::lonnet::del('environment',['languages']);
+        &Apache::lonnet::delenv('environment\.languages');
+        $message='Reset preferred language';
+    }
+    $r->print(<<ENDVCSCREEN);
+</p>
+$message
+ENDVCSCREEN
+}
+
+
+################################################################
+#         Anonymous Discussion Name Change Subroutines         #
+################################################################
+sub screennamechanger {
+    my $r = shift;
+    my $user       = $ENV{'user.name'};
+    my $domain     = $ENV{'user.domain'};
+    my %userenv = &Apache::lonnet::get
+        ('environment',['screenname','nickname']);
+    my $screenname=$userenv{'screenname'};
+    my $nickname=$userenv{'nickname'};
+    $r->print(<<ENDSCREEN);
+<form name="server" action="/adm/preferences" method="post">
+<input type="hidden" name="action" value="verify_and_change_screenname" />
+<br />New screenname (shown if you post anonymously):
+<input type="text" size="20" value="$screenname" name="screenname" />
+<br />New nickname (shown if you post non-anonymously):
+<input type="text" size="20" value="$nickname" name="nickname" />
+<input type="submit" value="Change" />
+</form>
+ENDSCREEN
+}
+
+sub verify_and_change_screenname {
+    my $r = shift;
+    my $user       = $ENV{'user.name'};
+    my $domain     = $ENV{'user.domain'};
+# Screenname
+    my $newscreen  = $ENV{'form.screenname'};
+    $newscreen=~s/[^ \w]//g;
+    my $message='';
+    if ($newscreen) {
+        &Apache::lonnet::put('environment',{'screenname' => $newscreen});
+        &Apache::lonnet::appenv('environment.screenname' => $newscreen);
+        $message='Set new screenname to '.$newscreen;
+    } else {
+        &Apache::lonnet::del('environment',['screenname']);
+        &Apache::lonnet::delenv('environment\.screenname');
+        $message='Reset screenname';
+    }
+# Nickname
+    $message.='<br />';
+    $newscreen  = $ENV{'form.nickname'};
+    $newscreen=~s/[^ \w]//g;
+    if ($newscreen) {
+        &Apache::lonnet::put('environment',{'nickname' => $newscreen});
+        &Apache::lonnet::appenv('environment.nickname' => $newscreen);
+        $message.='Set new nickname to '.$newscreen;
+    } else {
+        &Apache::lonnet::del('environment',['nickname']);
+        &Apache::lonnet::delenv('environment\.nickname');
+        $message.='Reset nickname';
+    }
+
+    $r->print(<<ENDVCSCREEN);
+</p>
+$message
+ENDVCSCREEN
+}
+
+################################################################
+#         Message Forward                                      #
+################################################################
+
+sub msgforwardchanger {
+    my $r = shift;
+    my $user       = $ENV{'user.name'};
+    my $domain     = $ENV{'user.domain'};
+    my %userenv = &Apache::lonnet::get('environment',['msgforward','notification','critnotification']);
+    my $msgforward=$userenv{'msgforward'};
+    my $notification=$userenv{'notification'};
+    my $critnotification=$userenv{'critnotification'};
+    my $forwardingHelp = Apache::loncommon::help_open_topic("Prefs_Forwarding",
+							    "What are forwarding ".
+							    "and notification ".
+							    "addresses");
+    my $criticalMessageHelp = Apache::loncommon::help_open_topic("Course_Critical_Message",
+								 "What are critical messages");
+
+    $r->print(<<ENDMSG);
+$forwardingHelp <br />
+<form name="server" action="/adm/preferences" method="post">
+<input type="hidden" name="action" value="verify_and_change_msgforward" />
+New Forwarding Address(es) (<tt>user:domain,user:domain,...</tt>):
+<input type="text" size="40" value="$msgforward" name="msgforward" /><hr />
+New Message Notification Email Address(es) (<tt>joe\@doe.com,jane\@doe.edu,...</tt>):
+<input type="text" size="40" value="$notification" name="notification" /><hr />
+New Critical Message Notification Email Address(es) (<tt>joe\@doe.com,jane\@doe.edu,...</tt>):
+<input type="text" size="40" value="$critnotification" name="critnotification" />$criticalMessageHelp<hr />
+<input type="submit" value="Change" />
+</form>
+ENDMSG
+}
+
+sub verify_and_change_msgforward {
+    my $r = shift;
+    my $user       = $ENV{'user.name'};
+    my $domain     = $ENV{'user.domain'};
+    my $newscreen  = '';
+    my $message='';
+    foreach (split(/\,/,$ENV{'form.msgforward'})) {
+	my ($msuser,$msdomain)=split(/[\@\:]/,$_);
+        $msuser=~s/\W//g;
+        $msdomain=~s/\W//g;
+        if (($msuser) && ($msdomain)) {
+	    if (&Apache::lonnet::homeserver($msuser,$msdomain) ne 'no_host') {
+               $newscreen.=$msuser.':'.$msdomain.',';
+	   } else {
+               $message.='No such user: '.$msuser.':'.$msdomain.'<br>';
+           }
+        }
+    }
+    $newscreen=~s/\,$//;
+    if ($newscreen) {
+        &Apache::lonnet::put('environment',{'msgforward' => $newscreen});
+        &Apache::lonnet::appenv('environment.msgforward' => $newscreen);
+        $message.='Set new message forwarding to '.$newscreen.'<br />';
+    } else {
+        &Apache::lonnet::del('environment',['msgforward']);
+        &Apache::lonnet::delenv('environment\.msgforward');
+        $message.='Reset message forwarding<br />';
+    }
+    my $notification=$ENV{'form.notification'};
+    $notification=~s/\s//gs;
+    if ($notification) {
+        &Apache::lonnet::put('environment',{'notification' => $notification});
+        &Apache::lonnet::appenv('environment.notification' => $notification);
+        $message.='Set message notification address to '.$notification.'<br />';
+    } else {
+        &Apache::lonnet::del('environment',['notification']);
+        &Apache::lonnet::delenv('environment\.notification');
+        $message.='Reset message notification<br />';
+    }
+    my $critnotification=$ENV{'form.critnotification'};
+    $critnotification=~s/\s//gs;
+    if ($critnotification) {
+        &Apache::lonnet::put('environment',{'critnotification' => $critnotification});
+        &Apache::lonnet::appenv('environment.critnotification' => $critnotification);
+        $message.='Set critical message notification address to '.$critnotification;
+    } else {
+        &Apache::lonnet::del('environment',['critnotification']);
+        &Apache::lonnet::delenv('environment\.critnotification');
+        $message.='Reset critical message notification<br />';
+    }
+    $r->print(<<ENDVCMSG);
+</p>
+$message
+ENDVCMSG
+}
+
+################################################################
+#         Colors                                               #
+################################################################
+
+sub colorschanger {
+    my $r = shift;
+# figure out colors
+    my $function='student';
+    if ($ENV{'request.role'}=~/^(cc|in|ta|ep)/) {
+	$function='coordinator';
+    }
+    if ($ENV{'request.role'}=~/^(su|dc|ad|li)/) {
+	$function='admin';
+    }
+    if (($ENV{'request.role'}=~/^(au|ca)/) ||
+	($ENV{'REQUEST_URI'}=~/^(\/priv|\~)/)) {
+	$function='author';
+    }
+    my $domain=&Apache::loncommon::determinedomain();
+    my %colortypes=('pgbg'  => 'Page Background',
+                    'tabbg' => 'Header Background',
+                    'sidebg'=> 'Header Border',
+                    'font'  => 'Font',
+                    'link'  => 'Un-Visited Link',
+                    'vlink' => 'Visited Link',
+                    'alink' => 'Active Link');
+    my $chtable='';
+    foreach my $item (sort(keys(%colortypes))) {
+       my $curcol=&Apache::loncommon::designparm($function.'.'.$item,$domain);
+       $chtable.='<tr><td>'.$colortypes{$item}.'</td><td bgcolor="'.$curcol.
+        '">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td><td><input name="'.$item.
+        '" size="10" value="'.$curcol.
+'" /></td><td><a href="javascript:pjump('."'color_custom','".$colortypes{$item}.
+"','".$curcol."','"
+	    .$item."','parmform.pres','psub'".');">Select</a></td></tr>';
+    }
+    my $pjump_def = &Apache::lonhtmlcommon::pjump_javascript_definition();
+    $r->print(<<ENDCOL);
+<script>
+
+    function pclose() {
+        parmwin=window.open("/adm/rat/empty.html","LONCAPAparms",
+                 "height=350,width=350,scrollbars=no,menubar=no");
+        parmwin.close();
+    }
+
+    $pjump_def
+
+    function psub() {
+        pclose();
+        if (document.parmform.pres_marker.value!='') {
+            if (document.parmform.pres_type.value!='') {
+                eval('document.server.'+
+                     document.parmform.pres_marker.value+
+		     '.value=document.parmform.pres_value.value;');
+	    }
+        } else {
+            document.parmform.pres_value.value='';
+            document.parmform.pres_marker.value='';
+        }
+    }
+
+
+</script>
+<form name="parmform">
+<input type="hidden" name="pres_marker" />
+<input type="hidden" name="pres_type" />
+<input type="hidden" name="pres_value" />
+</form>
+<form name="server" action="/adm/preferences" method="post">
+<input type="hidden" name="action" value="verify_and_change_colors" />
+<table border="2">
+$chtable
+</table>
+<input type="submit" value="Change Custom Colors" />
+<input type="submit" name="resetall" value="Reset All Colors to Default" />
+</form>
+ENDCOL
+}
+
+sub verify_and_change_colors {
+    my $r = shift;
+# figure out colors
+    my $function='student';
+    if ($ENV{'request.role'}=~/^(cc|in|ta|ep)/) {
+	$function='coordinator';
+    }
+    if ($ENV{'request.role'}=~/^(su|dc|ad|li)/) {
+	$function='admin';
+    }
+    if (($ENV{'request.role'}=~/^(au|ca)/) ||
+	($ENV{'REQUEST_URI'}=~/^(\/priv|\~)/)) {
+	$function='author';
+    }
+    my $domain=&Apache::loncommon::determinedomain();
+    my %colortypes=('pgbg'  => 'Page Background',
+                    'tabbg' => 'Header Background',
+                    'sidebg'=> 'Header Border',
+                    'font'  => 'Font',
+                    'link'  => 'Un-Visited Link',
+                    'vlink' => 'Visited Link',
+                    'alink' => 'Active Link');
+
+    my $message='';
+    foreach my $item (keys %colortypes) {
+        my $color=$ENV{'form.'.$item};
+        my $entry='color.'.$function.'.'.$item;
+	if (($color=~/^\#[0-9A-Fa-f]{6}$/) && (!$ENV{'form.resetall'})) {
+	    &Apache::lonnet::put('environment',{$entry => $color});
+	    &Apache::lonnet::appenv('environment.'.$entry => $color);
+	    $message.='Set '.$colortypes{$item}.' to '.$color.'<br />';
+	} else {
+	    &Apache::lonnet::del('environment',[$entry]);
+	    &Apache::lonnet::delenv('environment\.'.$entry);
+	    $message.='Reset '.$colortypes{$item}.'<br />';
+	}
+    }
+    $r->print(<<ENDVCCOL);
+</p>
+$message
+<form name="client" action="/adm/preferences" method="post">
+<input type="hidden" name="action" value="changecolors" />
+</form>
+ENDVCCOL
+}
+
+######################################################
+#            password handler subroutines            #
+######################################################
 sub passwordchanger {
+    # This function is a bit of a mess....
     # Passwords are encrypted using londes.js (DES encryption)
-    #
     my $r = shift;
+    my $errormessage = shift;
+    $errormessage = ($errormessage || '');
     my $user       = $ENV{'user.name'};
     my $domain     = $ENV{'user.domain'};
     my $homeserver = $ENV{'user.home'};
@@ -140,14 +451,14 @@ sub passwordchanger {
     my ($lkey_cpass ,$ukey_cpass ) = &des_keys();
     my ($lkey_npass1,$ukey_npass1) = &des_keys();
     my ($lkey_npass2,$ukey_npass2) = &des_keys();
-    # Store the keys
+    # Store the keys in the log files
     my $lonhost = $r->dir_config('lonHostID');
     my $logtoken=Apache::lonnet::reply('tmpput:'
 				       .$ukey_cpass  . $lkey_cpass .'&'
 				       .$ukey_npass1 . $lkey_npass1.'&'
 				       .$ukey_npass2 . $lkey_npass2,
 				       $lonhost);
-    # Hexify these keys
+    # Hexify the keys for output as javascript variables
     $ukey_cpass = hex($ukey_cpass);
     $lkey_cpass = hex($lkey_cpass);
     $ukey_npass1= hex($ukey_npass1);
@@ -155,22 +466,14 @@ sub passwordchanger {
     $ukey_npass2= hex($ukey_npass2);
     $lkey_npass2= hex($lkey_npass2);
     # Output javascript to deal with passwords
-    $r->print(<<ENDHEADER);
-<html>
-<head>
-<title>The LearningOnline Network with CAPA</title>
-</head>
-ENDHEADER
-   # Output DES javascript
+    # Output DES javascript
+    $r->print("<html><head>");
     {
 	my $include = $r->dir_config('lonIncludes');
 	my $jsh=Apache::File->new($include."/londes.js");
 	$r->print(<$jsh>);
     }
     $r->print(<<ENDFORM);
-
-<body bgcolor="#FFFFFF" onLoad="init();">
-
 <script language="JavaScript">
 
     function send() {
@@ -197,11 +500,8 @@ ENDHEADER
     }
 
 </script>
-<h1>Preferences for $user</h1>
-<h3>$user is a member of domain $domain</h3>
-<p>
-Change password for $user
-</p>
+$errormessage
+
 <p>
 <!-- We seperate the forms into 'server' and 'client' in order to
      ensure that unencrypted passwords will not be sent out by a
@@ -211,23 +511,23 @@ Change password for $user
 <input type="hidden" name="logtoken"    value="$logtoken" />
 <input type="hidden" name="action"      value="verify_and_change_pass" />
 <input type="hidden" name="currentpass" value="" />
-<input type="hidden" name="newpass_1"    value="" />
-<input type="hidden" name="newpass_2"    value="" />
+<input type="hidden" name="newpass_1"   value="" />
+<input type="hidden" name="newpass_2"   value="" />
 </form>
 
 <form name="client" >
 <table>
-<tr><td align="right"> Current password:             </td>
-    <td><input type="password" name="currentpass" /> </td></tr>
-<tr><td align="right"> New password:                 </td>
-    <td><input type="password" name="newpass_1" />    </td></tr>
-<tr><td align="right"> Confirm password:             </td>
-    <td><input type="password" name="newpass_2" />    </td></tr>
+<tr><td align="right"> Current password:                      </td>
+    <td><input type="password" name="currentpass" size="10"/> </td></tr>
+<tr><td align="right"> New password:                          </td>
+    <td><input type="password" name="newpass_1" size="10"  /> </td></tr>
+<tr><td align="right"> Confirm password:                      </td>
+    <td><input type="password" name="newpass_2" size="10"  /> </td></tr>
 <tr><td colspan="2" align="center">
     <input type="button" value="Change Password" onClick="send();">
 </table>
-<input type="hidden" name="ukey_cpass"   value="$ukey_cpass" />
-<input type="hidden" name="lkey_cpass"   value="$lkey_cpass" />
+<input type="hidden" name="ukey_cpass"  value="$ukey_cpass" />
+<input type="hidden" name="lkey_cpass"  value="$lkey_cpass" />
 <input type="hidden" name="ukey_npass1" value="$ukey_npass1" />
 <input type="hidden" name="lkey_npass1" value="$lkey_npass1" />
 <input type="hidden" name="ukey_npass2" value="$ukey_npass2" />
@@ -245,47 +545,103 @@ sub verify_and_change_password {
     my $domain     = $ENV{'user.domain'};
     my $homeserver = $ENV{'user.home'};
     my $currentauth=&Apache::lonnet::queryauthenticate($user,$domain);
+    # Check for authentication types that allow changing of the password.
+    return if ($currentauth !~ /^(unix|internal):/);
     #
-    $r->print("<h1>verify and change password</h1>\n");
+    $r->print(<<ENDHEADER);
+<html>
+<head>
+<title>LON-CAPA Preferences:  Change password for $user</title>
+</head>
+ENDHEADER
     #
     my $currentpass = $ENV{'form.currentpass'}; 
     my $newpass1    = $ENV{'form.newpass_1'}; 
     my $newpass2    = $ENV{'form.newpass_2'};
     my $logtoken    = $ENV{'form.logtoken'};
     # Check for empty data 
-    if (!(defined($currentpass) && 
-	  defined($newpass1)    && 
-	  defined($newpass2))){
-	$r->print("<font color='#ff0000'>ERROR</font> Password data was ".
-		  "blank.\n");
+    unless (defined($currentpass) && 
+	    defined($newpass1)    && 
+	    defined($newpass2)    ){
+	&passwordchanger($r,"<p>\n<font color='#ff0000'>ERROR</font>".
+			 "Password data was blank.\n</p>");
 	return;
     }
     # Get the keys
     my $lonhost = $r->dir_config('lonHostID');
     my $tmpinfo = Apache::lonnet::reply('tmpget:'.$logtoken,$lonhost);
     if (($tmpinfo=~/^error/) || ($tmpinfo eq 'con_lost')) {
+        # I do not a have a better idea about how to handle this
 	$r->print(<<ENDERROR);
 <p>
 <font color="#ff0000">ERROR:</font> Unable to retrieve stored token for
-password decryption.  
+password decryption.  Please log out and try again.
 </p>
 ENDERROR
+        # Probably should log an error here
         return;
     }
     my ($ckey,$n1key,$n2key)=split(/&/,$tmpinfo);
-    # decrypt
-    my $currentpass = &des_decrypt($ckey ,$currentpass);
-    my $newpass1    = &des_decrypt($n1key,$newpass1);
-    my $newpass2    = &des_decrypt($n2key,$newpass2);
-    # Sanity check
+    # 
+    $currentpass = &des_decrypt($ckey ,$currentpass);
+    $newpass1    = &des_decrypt($n1key,$newpass1);
+    $newpass2    = &des_decrypt($n2key,$newpass2);
+    # 
     if ($newpass1 ne $newpass2) {
-	$r->print('<font color="#ff0000">ERROR:</font>The new passwords you '.
-		  'entered do not match.  Please try again.');
-	&passwordchanger($r);
+	&passwordchanger($r,
+			 '<font color="#ff0000">ERROR:</font>'.
+			 'The new passwords you entered do not match.  '.
+			 'Please try again.');
+	return;
+    }
+    if (length($newpass1) < 7) {
+	&passwordchanger($r,
+			 '<font color="#ff0000">ERROR:</font>'.
+			 'Passwords must be a minimum of 7 characters long.  '.
+			 'Please try again.');
 	return;
     }
+    #
+    # Check for bad characters
+    my $badpassword = 0;
+    foreach (split(//,$newpass1)) {
+	$badpassword = 1 if ((ord($_)<32)||(ord($_)>126));
+    }
+    if ($badpassword) {
+	# I can't figure out how to enter bad characters on my browser.
+	&passwordchanger($r,<<ENDERROR);
+<font color="#ff0000">ERROR:</font>
+The password you entered contained illegal characters.<br />
+Valid characters are: space and <br />
+<pre>
+!&quot;\#$%&amp;\'()*+,-./0123456789:;&lt;=&gt;?\@
+ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_\`abcdefghijklmnopqrstuvwxyz{|}~
+</pre>
+ENDERROR
+    }
+    # 
+    # Change the password (finally)
+    my $result = &Apache::lonnet::changepass
+	($user,$domain,$currentpass,$newpass1,$homeserver);
+    # Inform the user the password has (not?) been changed
+    if ($result =~ /^ok$/) {
+	$r->print(<<"ENDTEXT");
+<h2>The password for $user was successfully changed</h2>
+ENDTEXT
+    } else {
+	# error error: run in circles, scream and shout
+        $r->print(<<ENDERROR);
+<h2><font color="#ff0000">The password for $user was not changed</font></h2>
+Please make sure your old password was entered correctly.
+ENDERROR
+    }
+    return;
 }
 
+######################################################
+#            other handler subroutines               #
+######################################################
+
 ################################################################
 #                          Main handler                        #
 ################################################################
@@ -293,38 +649,197 @@ sub handler {
     my $r = shift;
     my $user = $ENV{'user.name'};
     my $domain = $ENV{'user.domain'};
-    $r->content_type('text/html');
+    &Apache::loncommon::content_type($r,'text/html');
+    # Some pages contain DES keys and should not be cached.
+    &Apache::loncommon::no_cache($r);
     $r->send_http_header;
     return OK if $r->header_only;
-    # Spit out the header
-    if ($ENV{'form.action'} eq 'changepass') {
-	&passwordchanger($r);
-    } elsif ($ENV{'form.action'} eq 'verify_and_change_pass') {
-	&verify_and_change_password($r);
-    } else {
-	$r->print(<<ENDHEADER);
+    #
+    &Apache::loncommon::get_unprocessed_cgi($ENV{'QUERY_STRING'},
+                                            ['action']);
+    #
+    &Apache::lonhtmlcommon::clear_breadcrumbs();
+    &Apache::lonhtmlcommon::add_breadcrumb
+        ({href => '/adm/preferences',
+          text => 'Set User Preferences'});
+
+    my @Options;
+    # Determine current authentication method
+    my $currentauth=&Apache::lonnet::queryauthenticate($user,$domain);
+    if ($currentauth =~ /^(unix|internal):/) {
+        push (@Options,({ action   => 'changepass',
+                          linktext => 'Change password',
+                          href     => '/adm/preferences',
+                          help     => 'Change_Password',
+                          subroutine => \&passwordchanger,
+                          breadcrumb => 
+                              { href => '/adm/preferences?action=changepass',
+                                text => 'Change Password'},
+                          },
+                        { action => 'verify_and_change_pass',
+                          subroutine => \&verify_and_change_password,
+                          breadcrumb => 
+                              { href =>'/adm/preferences?action=changepass',
+                                text => 'Change Password'},
+                          printmenu => 'yes',
+                          }));
+    }
+    push (@Options,({ action   => 'changescreenname',
+                      linktext => 'Change Screen Name',
+                      href     => '/adm/preferences',
+                      help     => 'Prefs_Screen_Name_Nickname',
+                      subroutine => \&screennamechanger,
+                      breadcrumb => 
+                          { href => '/adm/preferences?action=changescreenname',
+                            text => 'Change Screen Name'},
+                      },
+                    { action   => 'verify_and_change_screenname',
+                      subroutine => \&verify_and_change_screenname,
+                      breadcrumb => 
+                          { href => '/adm/preferences?action=changescreenname',
+                            text => 'Change Screen Name'},
+                      printmenu => 'yes',
+                      }));
+
+    push (@Options,({ action   => 'changemsgforward',
+                      linktext => 'Change Message Forwarding',
+                      text     => 'and Notification Addresses',
+                      href     => '/adm/preferences',
+                      help     => 'Prefs_Forwarding',
+                      breadcrumb => 
+                          { href => '/adm/preferences?action=changemsgforward',
+                            text => 'Change Message Forwarding'},
+                      subroutine => \&msgforwardchanger,
+                      },
+                    { action => 'verify_and_change_msgforward',
+                      breadcrumb => 
+                          { href => '/adm/preferences?action=changemsgforward',
+                            text => 'Change Message Forwarding'},
+                      printmenu => 'yes',
+                      subroutine => \&verify_and_change_msgforward }));
+    my $aboutmeaction=
+        '/adm/'.$ENV{'user.domain'}.'/'.$ENV{'user.name'}.'/aboutme';
+    push (@Options,{ action => 'none', 
+                     linktext =>
+                         q{Edit the 'About Me' personal information screen},
+                     href => $aboutmeaction});
+    push (@Options,({ action => 'changecolors',
+                      linktext => 'Change Color Scheme',
+                      href => '/adm/preferences',
+                      help => 'Change_Colors',
+                      breadcrumb => 
+                          { href => '/adm/preferences?action=changecolors',
+                            text => 'Change Colors'},
+                      subroutine => \&colorschanger,
+                  },
+                    { action => 'verify_and_change_colors',
+                      breadcrumb => 
+                          { href => '/adm/preferences?action=changecolors',
+                            text => 'Change Colors'},
+                      printmenu => 'yes',
+                      subroutine => \&verify_and_change_colors,
+                      }));
+    push (@Options,({ action => 'changelanguages',
+                      linktext => 'Change Language Prefences',
+                      href => '/adm/preferences',
+                      breadcrumb=>
+                          { href => '/adm/preferences?action=changelanguages',
+                            text => 'Change Language'},
+                      subroutine =>  \&languagechanger,
+                  },
+                    { action => 'verify_and_change_languages',
+                      breadcrumb=>
+                          {href => '/adm/preferences?action=changelanguages',
+                           text => 'Change Language'},
+                      printmenu => 'yes',
+                      subroutine=>\&verify_and_change_languages, }
+                    ));
+    if ($ENV{'user.name'} =~ /^(albertel|koretemey|korte|hallmat3|turtle)$/) {
+        push (@Options,({ action => 'debugtoggle',
+                          printmenu => 'yes',
+                          subroutine => \&toggle_debug,
+                          }));
+    }
+    $r->print(<<ENDHEADER);
 <html>
 <head>
-<title>The LearningOnline Network with CAPA</title>
+<title>LON-CAPA Preferences</title>
 </head>
-<body bgcolor="#FFFFFF" >
-<h1>Preferences for $user</h1>
-<h3>$user is a member of domain $domain</h3>
 ENDHEADER
-	# Determine current authentication method
-	my $currentauth=&Apache::lonnet::queryauthenticate($user,$domain);
-	if ($currentauth =~ /^(unix|internal):/) {
-	    $r->print($passwordform);
-	}
-	$r->print($environmentform);
+    my $call = undef;
+    my $printmenu = 'yes';
+    foreach my $option (@Options) {
+        if ($option->{'action'} eq $ENV{'form.action'}) {
+            &Apache::lonnet::logthis('got action '.$option->{'action'});
+            $call = $option->{'subroutine'};
+            $printmenu = $option->{'printmenu'};
+            if (exists($option->{'breadcrumb'})) {
+                &Apache::lonhtmlcommon::add_breadcrumb
+                    ($option->{'breadcrumb'});
+            }
+        }
+    }
+    $r->print(&Apache::loncommon::bodytag('Change Preferences'));
+    $r->print(&Apache::lonhtmlcommon::breadcrumbs
+              (undef,'Change Preferences'));
+    if (defined($call)) {
+        $call->($r);
+    }
+    if ($printmenu eq 'yes') {
+        my $optionlist = '<table cellpadding="5">';
+        if ($ENV{'user.name'} =~ 
+                         /^(albertel|koretemey|korte|hallmat3|turtle)$/
+            ) {
+            push (@Options,({ action => 'debugtoggle',
+                              linktext => 'Toggle Debug Messages',
+                              text => 'Current Debug status is -'.
+                                  $ENV{'user.debug'}.'-.',
+                              href => '/adm/preferences',
+                              printmenu => 'yes',
+                              subroutine => \&toggle_debug,
+                              }));
+        }
+        foreach my $option(@Options) {
+            my $optiontext = '';
+            if (exists($option->{'href'})) {
+                $optiontext .= 
+                    '<a href="'.$option->{'href'}.
+                    '?action='.$option->{'action'}.'">'.
+                    $option->{'linktext'}.'</a>';
+            }
+            if (exists($option->{'text'})) {
+                $optiontext .= ' '.$option->{'text'};
+            }
+            if ($optiontext ne '') {
+                $optiontext = '<font size="+1">'.$optiontext.'</font>'; 
+                my $helplink = '&nbsp;';
+                if (exists($option->{'help'})) {
+                    $helplink = &Apache::loncommon::help_open_topic
+                                                    ($option->{'help'});
+                }
+                $optionlist .= '<tr>'.
+                    '<td>'.$helplink.'</td>'.
+                    '<td>'.$optiontext.'</td>'.
+                    '</tr>';
+            }
+        }
+        $optionlist .= '</table>';
+        $r->print($optionlist);
     }
-    # Spit out the footer
     $r->print(<<ENDFOOTER);
 </body>
 </html>
 ENDFOOTER
     return OK;
-} 
+}
+
+sub toggle_debug {
+    if ($ENV{'user.debug'}) {
+        &Apache::lonnet::delenv('user\.debug');
+    } else {
+        &Apache::lonnet::appenv('user.debug' => 1);
+    }
+}
 
 1;
 __END__