'; foreach ($available_lang as $code => $displayname) { $selected = ( strtolower($default) == strtolower($code) ) ? ' selected="selected"' : ''; $lang_select .= '' . ucwords($displayname) . ''; } $lang_select .= ''; return $lang_select; } /** * loads an sql file and executes all queries * * Before executing a query, $replaced is... replaced by $replacing. This is * useful when the SQL file contains generic words. Drop table queries are * not executed. * * @param string filepath * @param string replaced * @param string replacing * @return void */ function execute_sqlfile($filepath, $replaced, $replacing) { $sql_lines = file($filepath); $query = ''; foreach ($sql_lines as $sql_line) { $sql_line = trim($sql_line); if (preg_match('/(^--|^$)/', $sql_line)) { continue; } $query.= ' '.$sql_line; // if we reached the end of query, we execute it and reinitialize the // variable "query" if (preg_match('/;$/', $sql_line)) { $query = trim($query); $query = str_replace($replaced, $replacing, $query); // we don't execute "DROP TABLE" queries if (!preg_match('/^DROP TABLE/i', $query)) { mysql_query($query); } $query = ''; } } } set_magic_quotes_runtime(0); // Disable magic_quotes_runtime // // addslashes to vars if magic_quotes_gpc is off this is a security // precaution to prevent someone trying to break out of a SQL statement. // if( !get_magic_quotes_gpc() ) { if( is_array($_POST) ) { while( list($k, $v) = each($_POST) ) { if( is_array($_POST[$k]) ) { while( list($k2, $v2) = each($_POST[$k]) ) { $_POST[$k][$k2] = addslashes($v2); } @reset($_POST[$k]); } else { $_POST[$k] = addslashes($v); } } @reset($_POST); } if( is_array($_GET) ) { while( list($k, $v) = each($_GET) ) { if( is_array($_GET[$k]) ) { while( list($k2, $v2) = each($_GET[$k]) ) { $_GET[$k][$k2] = addslashes($v2); } @reset($_GET[$k]); } else { $_GET[$k] = addslashes($v); } } @reset($_GET); } if( is_array($_COOKIE) ) { while( list($k, $v) = each($_COOKIE) ) { if( is_array($_COOKIE[$k]) ) { while( list($k2, $v2) = each($_COOKIE[$k]) ) { $_COOKIE[$k][$k2] = addslashes($v2); } @reset($_COOKIE[$k]); } else { $_COOKIE[$k] = addslashes($v); } } @reset($_COOKIE); } } //----------------------------------------------------- variable initialization define('DEFAULT_PREFIX_TABLE', 'phpwebgallery_'); // Obtain various vars $dbhost = (!empty($_POST['dbhost'])) ? $_POST['dbhost'] : 'localhost'; $dbuser = (!empty($_POST['dbuser'])) ? $_POST['dbuser'] : ''; $dbpasswd = (!empty($_POST['dbpasswd'])) ? $_POST['dbpasswd'] : ''; $dbname = (!empty($_POST['dbname'])) ? $_POST['dbname'] : ''; if (isset($_POST['install'])) { $table_prefix = $_POST['prefix']; } else { $table_prefix = DEFAULT_PREFIX_TABLE; } $admin_name = (!empty($_POST['admin_name'])) ? $_POST['admin_name'] : ''; $admin_pass1 = (!empty($_POST['admin_pass1'])) ? $_POST['admin_pass1'] : ''; $admin_pass2 = (!empty($_POST['admin_pass2'])) ? $_POST['admin_pass2'] : ''; $admin_mail = (!empty($_POST['admin_mail'])) ? $_POST['admin_mail'] : ''; $infos = array(); $errors = array(); // Open config.php ... if it exists $config_file = PHPWG_ROOT_PATH.'include/mysql.inc.php'; if (@file_exists($config_file)) { include($config_file); // Is PhpWebGallery already installed ? if (defined("PHPWG_INSTALLED")) { die('PhpWebGallery is already installed'); } } $prefixeTable = $table_prefix; include(PHPWG_ROOT_PATH . 'include/config_default.inc.php'); @include(PHPWG_ROOT_PATH. 'include/config_local.inc.php'); include(PHPWG_ROOT_PATH . 'include/constants.php'); include(PHPWG_ROOT_PATH . 'include/functions.inc.php'); include(PHPWG_ROOT_PATH . 'admin/include/functions.php'); include(PHPWG_ROOT_PATH . 'admin/include/functions_upgrade.php'); include(PHPWG_ROOT_PATH . 'include/template.php'); // Create empty local files to avoid log errors create_empty_local_files(); if ( isset( $_POST['language'] )) { $language = strip_tags($_POST['language']); } elseif ( isset( $_GET['language'] )) { $language = strip_tags($_GET['language']); } else { $language = guess_lang(); } if (!file_exists(PHPWG_ROOT_PATH.'language/'.$language.'/install.lang.php')) { $language = 'en_UK.iso-8859-1'; } include( './language/'.$language.'/common.lang.php' ); // Never: @include( './language/'.$language.'/local.lang.php' ); include( './language/'.$language.'/admin.lang.php' ); include( './language/'.$language.'/install.lang.php' ); //----------------------------------------------------- template initialization $template=setup_style('yoga'); $template->set_filenames( array('install'=>'install.tpl') ); $step = 1; //---------------------------------------------------------------- form analyze if ( isset( $_POST['install'] )) { if ( @mysql_connect( $_POST['dbhost'], $_POST['dbuser'], $_POST['dbpasswd'] ) ) { if ( @mysql_select_db($_POST['dbname'] ) ) { array_push( $infos, $lang['step1_confirmation'] ); } else { array_push( $errors, $lang['step1_err_db'] ); } } else { array_push( $errors, $lang['step1_err_server'] ); } $webmaster = trim(preg_replace( '/\s{2,}/', ' ', $admin_name )); if ( empty($webmaster)) array_push( $errors, $lang['step2_err_login1'] ); else if ( preg_match( '/[\'"]/', $webmaster ) ) array_push( $errors, $lang['step2_err_login3'] ); if ( $admin_pass1 != $admin_pass2 || empty($admin_pass1) ) array_push( $errors, $lang['step2_err_pass'] ); if ( empty($admin_mail)) array_push( $errors, $lang['reg_err_mail_address'] ); else { $error_mail_address = validate_mail_address(null, $admin_mail); if (!empty($error_mail_address)) array_push( $errors, $error_mail_address ); } if ( count( $errors ) == 0 ) { $step = 2; $file_content = ''; @umask(0111); // writing the configuration file if ( !($fp = @fopen( $config_file, 'w' ))) { $html_content = htmlentities( $file_content, ENT_QUOTES ); $html_content = nl2br( $html_content ); $template->assign_block_vars( 'error_copy', array( 'FILE_CONTENT' => $html_content, ) ); } @fputs($fp, $file_content, strlen($file_content)); @fclose($fp); // tables creation, based on phpwebgallery_structure.sql execute_sqlfile( PHPWG_ROOT_PATH.'install/phpwebgallery_structure.sql', DEFAULT_PREFIX_TABLE, $table_prefix ); // We fill the tables with basic informations execute_sqlfile( PHPWG_ROOT_PATH.'install/config.sql', DEFAULT_PREFIX_TABLE, $table_prefix ); // fill $conf global array load_conf_from_db(); $insert = array( 'id' => 1, 'galleries_url' => PHPWG_ROOT_PATH.'galleries/', ); mass_inserts(SITES_TABLE, array_keys($insert), array($insert)); // webmaster admin user $inserts = array( array( 'id' => 1, 'username' => $admin_name, 'password' => md5($admin_pass1), 'mail_address' => $admin_mail, ), array( 'id' => 2, 'username' => 'guest', ), ); mass_inserts(USERS_TABLE, array_keys($inserts[0]), $inserts); create_user_infos(array(1,2), array('language' => $language)); // Available upgrades must be ignored after a fresh installation. To // make PWG avoid upgrading, we must tell it upgrades have already been // made. list($dbnow) = mysql_fetch_row(pwg_query('SELECT NOW();')); define('CURRENT_DATE', $dbnow); $datas = array(); foreach (get_available_upgrade_ids() as $upgrade_id) { array_push( $datas, array( 'id' => $upgrade_id, 'applied' => CURRENT_DATE, 'description' => 'upgrade included in installation', ) ); } mass_inserts( UPGRADE_TABLE, array_keys($datas[0]), $datas ); } } $template->assign_vars( array( 'RELEASE'=>PHPWG_VERSION, 'L_BASE_TITLE'=>$lang['Initial_config'], 'L_LANG_TITLE'=>$lang['Default_lang'], 'L_DB_TITLE'=>$lang['step1_title'], 'L_DB_HOST'=>$lang['step1_host'], 'L_DB_HOST_INFO'=>$lang['step1_host_info'], 'L_DB_USER'=>$lang['step1_user'], 'L_DB_USER_INFO'=>$lang['step1_user_info'], 'L_DB_PASS'=>$lang['step1_pass'], 'L_DB_PASS_INFO'=>$lang['step1_pass_info'], 'L_DB_NAME'=>$lang['step1_database'], 'L_DB_NAME_INFO'=>$lang['step1_database_info'], 'L_DB_PREFIX'=>$lang['step1_prefix'], 'L_DB_PREFIX_INFO'=>$lang['step1_prefix_info'], 'L_ADMIN_TITLE'=>$lang['step2_title'], 'L_ADMIN'=>$lang['install_webmaster'], 'L_ADMIN_INFO'=>$lang['install_webmaster_info'], 'L_ADMIN_PASSWORD'=>$lang['step2_pwd'], 'L_ADMIN_PASSWORD_INFO'=>$lang['step2_pwd_info'], 'L_ADMIN_CONFIRM_PASSWORD'=>$lang['step2_pwd_conf'], 'L_ADMIN_CONFIRM_PASSWORD_INFO'=>$lang['step2_pwd_conf_info'], 'L_ADMIN_EMAIL'=>$lang['conf_mail_webmaster'], 'L_ADMIN_EMAIL_INFO'=>$lang['conf_mail_webmaster_info'], 'L_SUBMIT'=>$lang['Start_Install'], 'L_INSTALL_HELP'=>sprintf($lang['install_help'], 'http://forum.'.PHPWG_DOMAIN.'/'), 'L_ERR_COPY'=>$lang['step1_err_copy'], 'L_END_TITLE'=>$lang['install_end_title'], 'L_END_MESSAGE'=>$lang['install_end_message'], 'F_ACTION'=>'install.php', 'F_DB_HOST'=>$dbhost, 'F_DB_USER'=>$dbuser, 'F_DB_NAME'=>$dbname, 'F_DB_PREFIX' => ( $table_prefix != DEFAULT_PREFIX_TABLE ? $table_prefix : DEFAULT_PREFIX_TABLE ), 'F_ADMIN'=>$admin_name, 'F_ADMIN_EMAIL'=>$admin_mail, 'F_LANG_SELECT'=>language_select($language), 'T_CONTENT_ENCODING' => $lang_info['charset'] )); //------------------------------------------------------ errors & infos display if ( sizeof( $errors ) != 0 ) { $template->assign_block_vars('errors',array()); for ( $i = 0; $i < sizeof( $errors ); $i++ ) { $template->assign_block_vars('errors.error',array('ERROR'=>$errors[$i])); } } if ( sizeof( $infos ) != 0 ) { $template->assign_block_vars('infos',array()); for ( $i = 0; $i < sizeof( $infos ); $i++ ) { $template->assign_block_vars('infos.info',array('INFO'=>$infos[$i])); } } if ($step ==1) { $template->assign_block_vars('install',array()); } else { $template->assign_block_vars('install_end',array()); } //----------------------------------------------------------- html code display $template->pparse('install'); ?>