Project

General

Profile

1
<?php
2

    
3
// $Id: save.php 223 2005-11-19 20:40:44Z stefan $
4

    
5
/*
6

    
7
 Website Baker Project <http://www.websitebaker.org/>
8
 Copyright (C) 2004-2005, Ryan Djurovich
9

    
10
 Website Baker is free software; you can redistribute it and/or modify
11
 it under the terms of the GNU General Public License as published by
12
 the Free Software Foundation; either version 2 of the License, or
13
 (at your option) any later version.
14

    
15
 Website Baker is distributed in the hope that it will be useful,
16
 but WITHOUT ANY WARRANTY; without even the implied warranty of
17
 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
18
 GNU General Public License for more details.
19

    
20
 You should have received a copy of the GNU General Public License
21
 along with Website Baker; if not, write to the Free Software
22
 Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
23

    
24
*/
25

    
26
// Start a session
27
if(!defined('SESSION_STARTED')) {
28
	session_name('wb_session_id');
29
	session_start();
30
	define('SESSION_STARTED', true);
31
}
32

    
33
// Function to set error
34
function set_error($message) {
35
	global $_POST;
36
	if(isset($message) AND $message != '') {
37
		// Copy values entered into session so user doesn't have to re-enter everything
38
		if(isset($_POST['website_title'])) {
39
			$_SESSION['wb_url'] = $_POST['wb_url'];
40
			$_SESSION['wb_path'] = $_POST['wb_path'];
41
			$_SESSION['default_timezone'] = $_POST['default_timezone'];
42
			if(!isset($_POST['operating_system'])) {
43
				$_SESSION['operating_system'] = 'linux';
44
			} else {
45
				$_SESSION['operating_system'] = $_POST['operating_system'];
46
			}
47
			if(!isset($_POST['world_writeable'])) {
48
				$_SESSION['world_writeable'] = false;
49
			} else {
50
				$_SESSION['world_writeable'] = true;
51
			}
52
			$_SESSION['database_host'] = $_POST['database_host'];
53
			$_SESSION['database_username'] = $_POST['database_username'];
54
			$_SESSION['database_password'] = $_POST['database_password'];
55
			$_SESSION['database_name'] = $_POST['database_name'];
56
			$_SESSION['table_prefix'] = $_POST['table_prefix'];
57
			if(!isset($_POST['install_tables'])) {
58
				$_SESSION['install_tables'] = false;
59
			} else {
60
				$_SESSION['install_tables'] = true;
61
			}
62
			$_SESSION['website_title'] = $_POST['website_title'];
63
			$_SESSION['admin_username'] = $_POST['admin_username'];
64
			$_SESSION['admin_email'] = $_POST['admin_email'];
65
			$_SESSION['admin_password'] = $_POST['admin_password'];
66
		}
67
		// Set the message
68
		$_SESSION['message'] = $message;
69
		// Specify that session support is enabled
70
		$_SESSION['session_support'] = '<font class="good">Enabled</font>';
71
		// Redirect to first page again and exit
72
		header('Location: index.php?sessions_checked=true');
73
		exit();
74
	}
75
}
76

    
77
// Function to workout what the default permissions are for files created by the webserver
78
function default_file_mode($temp_dir) {
79
	$v = explode(".",PHP_VERSION);
80
	$v = $v[0].$v[1];
81
	if($v > 41 AND is_writable($temp_dir)) {
82
		$filename = $temp_dir.'/test_permissions.txt';
83
		$handle = fopen($filename, 'w');
84
		fwrite($handle, 'This file is to get the default file permissions');
85
		fclose($handle);
86
		$default_file_mode = '0'.substr(sprintf('%o', fileperms($filename)), -3);
87
		unlink($filename);
88
	} else {
89
		$default_file_mode = '0777';
90
	}
91
	return $default_file_mode;
92
}
93

    
94
// Function to workout what the default permissions are for directories created by the webserver
95
function default_dir_mode($temp_dir) {
96
	$v = explode(".",PHP_VERSION);
97
	$v = $v[0].$v[1];
98
	if($v > 41 AND is_writable($temp_dir)) {
99
		$dirname = $temp_dir.'/test_permissions/';
100
		mkdir($dirname);
101
		$default_dir_mode = '0'.substr(sprintf('%o', fileperms($dirname)), -3);
102
		rmdir($dirname);
103
	} else {
104
		$default_dir_mode = '0777';
105
	}
106
	return $default_dir_mode;
107
}
108

    
109
function add_slashes($input) {
110
		if ( get_magic_quotes_gpc() || ( !is_string($input) ) ) {
111
			return $input;
112
		}
113
		$output = addslashes($input);
114
		return $output;
115
	}
116

    
117
// Begin check to see if form was even submitted
118
// Set error if no post vars found
119
if(!isset($_POST['website_title'])) {
120
	set_error('Please fill-in the form below');
121
}
122
// End check to see if form was even submitted
123

    
124
// Begin path and timezone details code
125

    
126
// Check if user has entered the installation url
127
if(!isset($_POST['wb_url']) OR $_POST['wb_url'] == '') {
128
	set_error('Please enter an absolute URL');
129
} else {
130
	$wb_url = $_POST['wb_url'];
131
}
132
// Remove any slashes at the end of the URL
133
if(substr($wb_url, strlen($wb_url)-1, 1) == "/") {
134
	$wb_url = substr($wb_url, 0, strlen($wb_url)-1);
135
}
136
if(substr($wb_url, strlen($wb_url)-1, 1) == "\\") {
137
	$wb_url = substr($wb_url, 0, strlen($wb_url)-1);
138
}
139
if(substr($wb_url, strlen($wb_url)-1, 1) == "/") {
140
	$wb_url = substr($wb_url, 0, strlen($wb_url)-1);
141
}
142
if(substr($wb_url, strlen($wb_url)-1, 1) == "\\") {
143
	$wb_url = substr($wb_url, 0, strlen($wb_url)-1);
144
}
145
// Get the default time zone
146
if(!isset($_POST['default_timezone']) OR !is_numeric($_POST['default_timezone'])) {
147
	set_error('Please select a valid default timezone');
148
} else {
149
	$default_timezone = $_POST['default_timezone']*60*60;
150
}
151
// End path and timezone details code
152

    
153
// Begin operating system specific code
154
// Get operating system
155
if(!isset($_POST['operating_system']) OR $_POST['operating_system'] != 'linux' AND $_POST['operating_system'] != 'windows') {
156
	set_error('Please select a valid operating system');
157
} else {
158
	$operating_system = $_POST['operating_system'];
159
}
160
// Work-out file permissions
161
if($operating_system == 'windows') {
162
	$file_mode = '0777';
163
	$dir_mode = '0777';
164
} elseif(isset($_POST['world_writeable']) AND $_POST['world_writeable'] == 'true') {
165
	$file_mode = '0777';
166
	$dir_mode = '0777';
167
} else {
168
	$file_mode = default_file_mode('../temp');
169
	$dir_mode = default_dir_mode('../temp');
170
}
171
// End operating system specific code
172

    
173
// Begin database details code
174
// Check if user has entered a database host
175
if(!isset($_POST['database_host']) OR $_POST['database_host'] == '') {
176
	set_error('Please enter a database host name');
177
} else {
178
	$database_host = $_POST['database_host'];
179
}
180
// Check if user has entered a database username
181
if(!isset($_POST['database_username']) OR $_POST['database_username'] == '') {
182
	set_error('Please enter a database username');
183
} else {
184
	$database_username = $_POST['database_username'];
185
}
186
// Check if user has entered a database password
187
if(!isset($_POST['database_password'])) {
188
	set_error('Please enter a database password');
189
} else {
190
	$database_password = $_POST['database_password'];
191
}
192
// Check if user has entered a database name
193
if(!isset($_POST['database_name']) OR $_POST['database_name'] == '') {
194
	set_error('Please enter a database name');
195
} else {
196
	$database_name = $_POST['database_name'];
197
}
198
// Get table prefix
199
$table_prefix = $_POST['table_prefix'];
200
// Find out if the user wants to install tables and data
201
if(isset($_POST['install_tables']) AND $_POST['install_tables'] == 'true') {
202
	$install_tables = true;
203
} else {
204
	$install_tables = false;
205
}
206
// End database details code
207

    
208
// Begin website title code
209
// Get website title
210
if(!isset($_POST['website_title']) OR $_POST['website_title'] == '') {
211
	set_error('Please enter a website title');
212
} else {
213
	$website_title = add_slashes($_POST['website_title']);
214
}
215
// End website title code
216

    
217
// Begin admin user details code
218
// Get admin username
219
if(!isset($_POST['admin_username']) OR $_POST['admin_username'] == '') {
220
	set_error('Please enter a username for the Administrator account');
221
} else {
222
	$admin_username = $_POST['admin_username'];
223
}
224
// Get admin email and validate it
225
if(!isset($_POST['admin_email']) OR $_POST['admin_email'] == '') {
226
	set_error('Please enter an email for the Administrator account');
227
} else {
228
	if(eregi("^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[a-z0-9-]+(\.[a-z0-9-]+)*(\.[a-z]{2,3})$", $_POST['admin_email'])) {
229
		$admin_email = $_POST['admin_email'];
230
	} else {
231
		set_error('Please enter a valid email address for the Administrator account');
232
	}
233
}
234
// Get the two admin passwords entered, and check that they match
235
if(!isset($_POST['admin_password']) OR $_POST['admin_password'] == '') {
236
	set_error('Please enter a password for the Administrator account');
237
} else {
238
	$admin_password = $_POST['admin_password'];
239
}
240
if(!isset($_POST['admin_repassword']) OR $_POST['admin_repassword'] == '') {
241
	set_error('Please make sure you re-enter the password for the Administrator account');
242
} else {
243
	$admin_repassword = $_POST['admin_repassword'];
244
}
245
if($admin_password != $admin_repassword) {
246
	set_error('Sorry, the two Administrator account passwords you entered do not match');
247
}
248
// End admin user details code
249

    
250
// Try and write settings to config file
251
$config_content = "" .
252
"<?php\n".
253
"\n".
254
"define('DB_TYPE', 'mysql');\n".
255
"define('DB_HOST', '$database_host');\n".
256
"define('DB_USERNAME', '$database_username');\n".
257
"define('DB_PASSWORD', '$database_password');\n".
258
"define('DB_NAME', '$database_name');\n".
259
"define('TABLE_PREFIX', '$table_prefix');\n".
260
"\n".
261
"define('WB_PATH', dirname(__FILE__));\n".
262
"define('WB_URL', '$wb_url');\n".
263
"define('ADMIN_PATH', WB_PATH.'/admin');\n".
264
"define('ADMIN_URL', '$wb_url/admin');\n".
265
"\n".
266
"require_once(WB_PATH.'/framework/initialize.php');\n".
267
"\n".
268
"?>";
269

    
270
$config_filename = '../config.php';
271

    
272
// Check if the file exists and is writable first.
273
if(file_exists($config_filename) AND is_writable($config_filename)) {
274
	if(!$handle = fopen($config_filename, 'w')) {
275
		set_error("Cannot open the configuration file ($config_filename)");
276
	} else {
277
		if (fwrite($handle, $config_content) === FALSE) {
278
			set_error("Cannot write to the configuration file ($config_filename)");
279
		}
280
		// Close file
281
		fclose($handle);
282
	}
283
} else {
284
	set_error("The configuration file $config_filename is not writable. Change its permissions so it is, then re-run step 4.");
285
}
286

    
287
// Define configuration vars
288
define('DB_TYPE', 'mysql');
289
define('DB_HOST', $database_host);
290
define('DB_USERNAME', $database_username);
291
define('DB_PASSWORD', $database_password);
292
define('DB_NAME', $database_name);
293
define('TABLE_PREFIX', $table_prefix);
294
define('WB_PATH', str_replace(array('/install','\install'), '',dirname(__FILE__)));
295
define('WB_URL', $wb_url);
296
define('ADMIN_PATH', WB_PATH.'/admin');
297
define('ADMIN_URL', $wb_url.'/admin');
298

    
299
// Check if the user has entered a correct path
300
if(!file_exists(WB_PATH.'/framework/class.admin.php')) {
301
	set_error('It appears the Absolute path that you entered is incorrect');
302
}
303

    
304
// Try connecting to database	
305
if(!mysql_connect(DB_HOST, DB_USERNAME, DB_PASSWORD)) {
306
	set_error('Database host name, username and/or password incorrect. MySQL Error:<br />'.mysql_error());
307
}
308

    
309
// Try to create the database
310
mysql_query('CREATE DATABASE '.$database_name);
311

    
312
// Close the mysql connection
313
mysql_close();
314

    
315
// Include WB functions file
316
require_once(WB_PATH.'/framework/functions.php');
317

    
318
// Re-connect to the database, this time using in-build database class
319
require_once(WB_PATH.'/framework/class.login.php');
320
$database=new database();
321

    
322
// Check if we should install tables
323
if($install_tables == true) {
324
	
325
	// Remove tables if they exist
326

    
327
	// Pages table
328
	$pages = "DROP TABLE IF EXISTS `".TABLE_PREFIX."pages`";
329
	$database->query($pages);
330
	// Sections table
331
	$sections = "DROP TABLE IF EXISTS `".TABLE_PREFIX."sections`";
332
	$database->query($sections);
333
	// Settings table
334
	$settings = "DROP TABLE IF EXISTS `".TABLE_PREFIX."settings`";
335
	$database->query($settings);
336
	// Users table
337
	$users = "DROP TABLE IF EXISTS `".TABLE_PREFIX."users`";
338
	$database->query($users);
339
	// Groups table
340
	$groups = "DROP TABLE IF EXISTS `".TABLE_PREFIX."groups`";
341
	$database->query($groups);
342
	// Search table
343
	$search = "DROP TABLE IF EXISTS `".TABLE_PREFIX."search`";
344
	$database->query($search);
345
	// Addons table
346
	$addons = "DROP TABLE IF EXISTS `".TABLE_PREFIX."addons`";
347
	$database->query($addons);
348
				
349
	// Try installing tables
350
	
351
	// Pages table
352
	$pages = 'CREATE TABLE `'.TABLE_PREFIX.'pages` ( `page_id` INT NOT NULL auto_increment,'
353
	       . ' `parent` INT NOT NULL ,'
354
	       . ' `root_parent` INT NOT NULL ,'
355
	       . ' `level` INT NOT NULL ,'
356
	       . ' `link` TEXT NOT NULL ,'
357
	       . ' `target` VARCHAR( 7 ) NOT NULL ,'
358
	       . ' `page_title` VARCHAR( 255 ) NOT NULL ,'
359
	       . ' `menu_title` VARCHAR( 255 ) NOT NULL ,'
360
	       . ' `description` TEXT NOT NULL ,'
361
	       . ' `keywords` TEXT NOT NULL ,'
362
	       . ' `page_trail` TEXT NOT NULL ,'
363
	       . ' `template` VARCHAR( 255 ) NOT NULL ,'
364
	       . ' `visibility` VARCHAR( 255 ) NOT NULL ,'
365
	       . ' `position` INT NOT NULL ,'
366
	       . ' `menu` INT NOT NULL ,'
367
	       . ' `language` VARCHAR( 5 ) NOT NULL ,'
368
	       . ' `searching` INT NOT NULL ,'
369
	       . ' `admin_groups` TEXT NOT NULL ,'
370
	       . ' `admin_users` TEXT NOT NULL ,'
371
	       . ' `viewing_groups` TEXT NOT NULL ,'
372
	       . ' `viewing_users` TEXT NOT NULL ,'
373
	       . ' `modified_when` INT NOT NULL ,'
374
	       . ' `modified_by` INT NOT NULL ,'
375
	       . ' PRIMARY KEY ( `page_id` ) )'
376
	       . ' ';
377
	$database->query($pages);
378
	
379
	// Sections table
380
	$pages = 'CREATE TABLE `'.TABLE_PREFIX.'sections` ( `section_id` INT NOT NULL auto_increment,'
381
	       . ' `page_id` INT NOT NULL ,'
382
	       . ' `position` INT NOT NULL ,'
383
	       . ' `module` VARCHAR( 255 ) NOT NULL ,'
384
	       . ' `block` VARCHAR( 255 ) NOT NULL ,'
385
	       . ' PRIMARY KEY ( `section_id` ) )'
386
	       . ' ';
387
	$database->query($pages);
388
	
389
	require(WB_PATH.'/admin/interface/version.php');
390
	
391
	// Settings table
392
	$settings="CREATE TABLE `".TABLE_PREFIX."settings` ( `setting_id` INT NOT NULL auto_increment,
393
		`name` VARCHAR( 255 ) NOT NULL ,
394
		`value` TEXT NOT NULL ,
395
		PRIMARY KEY ( `setting_id` ) )";
396
	$database->query($settings);
397
	$settings_rows=	"INSERT INTO `".TABLE_PREFIX."settings` VALUES "
398
	." ('', 'wb_version', '".VERSION."'),"
399
	." ('', 'website_title', '$website_title'),"
400
	." ('', 'website_description', ''),"
401
	." ('', 'website_keywords', ''),"
402
	." ('', 'website_header', ''),"
403
	." ('', 'website_footer', ''),"
404
	." ('', 'wysiwyg_style', 'font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px;'),"
405
	." ('', 'rename_files_on_upload', 'php,asp,phpx,aspx'),"
406
	." ('', 'er_level', ''),"
407
	." ('', 'default_language', 'EN'),"
408
	." ('', 'app_name', 'wb'),"
409
	." ('', 'default_timezone', '$default_timezone'),"
410
	." ('', 'default_date_format', 'M d Y'),"
411
	." ('', 'default_time_format', 'g:i A'),"
412
	." ('', 'home_folders', 'true'),"
413
	." ('', 'default_template', 'round'),"
414
	." ('', 'multiple_menus', 'false'),"
415
	." ('', 'page_level_limit', '4'),"
416
	." ('', 'intro_page', 'false'),"
417
	." ('', 'page_trash', 'disabled'),"
418
	." ('', 'homepage_redirection', 'false'),"
419
	." ('', 'page_languages', 'false'),"
420
	." ('', 'wysiwyg_editor', 'htmlarea'),"
421
	." ('', 'manage_sections', 'true'),"
422
	." ('', 'section_blocks', 'false'),"
423
	." ('', 'smart_login', 'false'),"
424
	." ('', 'frontend_login', 'false'),"
425
	." ('', 'frontend_signup', 'false'),"
426
	." ('', 'server_email', '$admin_email'),"
427
	." ('', 'search', 'public'),"
428
	." ('', 'page_extension', '.php'),"
429
	." ('', 'page_spacer', '-'),"
430
	." ('', 'pages_directory', '/pages'),"
431
	." ('', 'media_directory', '/media'),"
432
	." ('', 'operating_system', '$operating_system'),"
433
	." ('', 'string_file_mode', '$file_mode'),"
434
	." ('', 'string_dir_mode', '$dir_mode');";
435
	$database->query($settings_rows);
436
	
437
	
438
	// Users table
439
	$users = 'CREATE TABLE `'.TABLE_PREFIX.'users` ( `user_id` INT NOT NULL auto_increment,'
440
	       . ' `group_id` INT NOT NULL ,'
441
	       . ' `active` INT NOT NULL ,'
442
	       . ' `username` VARCHAR( 255 ) NOT NULL ,'
443
	       . ' `password` VARCHAR( 255 ) NOT NULL ,'
444
	       . ' `remember_key` VARCHAR( 255 ) NOT NULL ,'
445
	       . ' `last_reset` INT NOT NULL ,'
446
	       . ' `display_name` VARCHAR( 255 ) NOT NULL ,'
447
	       . ' `email` TEXT NOT NULL ,'
448
	       . ' `timezone` INT NOT NULL ,'
449
	       . ' `date_format` VARCHAR( 255 ) NOT NULL ,'
450
	       . ' `time_format` VARCHAR( 255 ) NOT NULL ,'
451
	       . ' `language` VARCHAR( 5 ) NOT NULL ,'
452
	       . ' `home_folder` TEXT NOT NULL ,'
453
	       . ' `login_when` INT NOT NULL ,'
454
	       . ' `login_ip` VARCHAR( 15 ) NOT NULL ,'
455
	       . ' PRIMARY KEY ( `user_id` ) )'
456
	       . ' ';
457
	$database->query($users);
458
	
459
	// Groups table
460
	$groups = 'CREATE TABLE `'.TABLE_PREFIX.'groups` ( `group_id` INT NOT NULL auto_increment,'
461
	        . ' `name` VARCHAR( 255 ) NOT NULL ,'
462
	        . ' `system_permissions` TEXT NOT NULL ,'
463
	        . ' `module_permissions` TEXT NOT NULL ,'
464
	        . ' `template_permissions` TEXT NOT NULL ,'
465
	        . ' PRIMARY KEY ( `group_id` ) )'
466
	        . ' ';
467
	$database->query($groups);
468
	
469
	// Search settings table
470
	$search = 'CREATE TABLE `'.TABLE_PREFIX.'search` ( `search_id` INT NOT NULL auto_increment,'
471
	        . ' `name` VARCHAR( 255 ) NOT NULL ,'
472
	        . ' `value` TEXT NOT NULL ,'
473
	        . ' `extra` TEXT NOT NULL ,'
474
	        . ' PRIMARY KEY ( `search_id` ) )'
475
	        . ' ';
476
	$database->query($search);
477
	
478
	// Addons table
479
	$addons = 'CREATE TABLE `'.TABLE_PREFIX.'addons` ( '
480
			.'`addon_id` INT NOT NULL auto_increment ,'
481
			.'`type` VARCHAR( 255 ) NOT NULL ,'
482
			.'`directory` VARCHAR( 255 ) NOT NULL ,'
483
			.'`name` VARCHAR( 255 ) NOT NULL ,'
484
			.'`description` TEXT NOT NULL ,'
485
			.'`function` VARCHAR( 255 ) NOT NULL ,'
486
			.'`version` VARCHAR( 255 ) NOT NULL ,'
487
			.'`platform` VARCHAR( 255 ) NOT NULL ,'
488
			.'`author` VARCHAR( 255 ) NOT NULL ,'
489
			.'`license` VARCHAR( 255 ) NOT NULL ,'
490
			.' PRIMARY KEY ( `addon_id` ) ); ';
491
	$database->query($addons);
492

    
493
	// Insert default data
494
	
495
	// Admin group
496
	$full_system_permissions = 'pages,pages_view,pages_add,pages_add_l0,pages_settings,pages_modify,pages_intro,pages_delete,media,media_view,media_upload,media_rename,media_delete,media_create,addons,modules,modules_view,modules_install,modules_uninstall,templates,templates_view,templates_install,templates_uninstall,languages,languages_view,languages_install,languages_uninstall,settings,settings_basic,settings_advanced,access,users,users_view,users_add,users_modify,users_delete,groups,groups_view,groups_add,groups_modify,groups_delete';
497
	$insert_admin_group = "INSERT INTO `".TABLE_PREFIX."groups` VALUES ('1', 'Administrators', '$full_system_permissions', '', '')";
498
	$database->query($insert_admin_group);
499
	// Admin user
500
	$insert_admin_user = "INSERT INTO `".TABLE_PREFIX."users` (user_id,group_id,active,username,password,email,display_name) VALUES ('1','1','1','$admin_username','".md5($admin_password)."','$admin_email','Administrator')";
501
	$database->query($insert_admin_user);
502
	
503
	// Search header
504
	$search_header = addslashes('
505
<h1>Search</h1>
506

    
507
<form name="search" action="[WB_URL]/search/index[PAGE_EXTENSION]" method="post">
508
<table cellpadding="3" cellspacing="0" border="0" width="500">
509
<tr>
510
<td>
511
<input type="text" name="string" value="[SEARCH_STRING]" style="width: 100%;" />
512
</td>
513
<td width="150">
514
<input type="submit" value="[TEXT_SEARCH]" style="width: 100%;" />
515
</td>
516
</tr>
517
<tr>
518
<td colspan="2">
519
<input type="radio" name="match" id="match_all" value="all"[ALL_CHECKED] />
520
<a href="javascript: toggle_radio(\'match_all\');">[TEXT_ALL_WORDS]</a>
521
<input type="radio" name="match" id="match_any" value="any"[ANY_CHECKED] />
522
<a href="javascript: toggle_radio(\'match_any\');">[TEXT_ANY_WORDS]</a>
523
<input type="radio" name="match" id="match_exact" value="exact"[EXACT_CHECKED] />
524
<a href="javascript: toggle_radio(\'match_exact\');">[TEXT_EXACT_MATCH]</a>
525
</td>
526
</tr>
527
</table>
528

    
529
</form>
530

    
531
<hr />
532
	');
533
	$insert_search_header = "INSERT INTO `".TABLE_PREFIX."search` VALUES ('', 'header', '$search_header', '')";
534
	$database->query($insert_search_header);
535
	// Search footer
536
	$search_footer = addslashes('');
537
	$insert_search_footer = "INSERT INTO `".TABLE_PREFIX."search` VALUES ('', 'footer', '$search_footer', '')";
538
	$database->query($insert_search_footer);
539
	// Search results header
540
	$search_results_header = addslashes(''.
541
'[TEXT_RESULTS_FOR] \'<b>[SEARCH_STRING]</b>\':
542
<table cellpadding="2" cellspacing="0" border="0" width="100%" style="padding-top: 10px;">');
543
	$insert_search_results_header = "INSERT INTO `".TABLE_PREFIX."search` VALUES ('', 'results_header', '$search_results_header', '')";
544
	$database->query($insert_search_results_header);
545
	// Search results loop
546
	$search_results_loop = addslashes(''.
547
'<tr style="background-color: #F0F0F0;">
548
<td><a href="[LINK]">[TITLE]</a></td>
549
<td align="right">[TEXT_LAST_UPDATED_BY] [DISPLAY_NAME] ([USERNAME]) [TEXT_ON] [DATE]</td>
550
</tr>
551
<tr><td colspan="2" style="text-align: justify; padding-bottom: 10px;">[DESCRIPTION]</td></tr>');
552

    
553
	$insert_search_results_loop = "INSERT INTO `".TABLE_PREFIX."search` VALUES ('', 'results_loop', '$search_results_loop', '')";
554
	$database->query($insert_search_results_loop);
555
	// Search results footer
556
	$search_results_footer = addslashes("</table>");
557
	$insert_search_results_footer = "INSERT INTO `".TABLE_PREFIX."search` VALUES ('', 'results_footer', '$search_results_footer', '')";
558
	$database->query($insert_search_results_footer);
559
	// Search no results
560
	$search_no_results = addslashes('<br />No results found');
561
	$insert_search_no_results = "INSERT INTO `".TABLE_PREFIX."search` VALUES ('', 'no_results', '$search_no_results', '')";
562
	$database->query($insert_search_no_results);
563
	// Search template
564
	$database->query("INSERT INTO `".TABLE_PREFIX."search` (name) VALUES ('template')");
565
		
566
	require_once(WB_PATH.'/framework/initialize.php');
567
	$admin = new admin('dummy');
568
	
569
	// Include the PclZip class file (thanks to 
570
	require_once(WB_PATH.'/include/pclzip/pclzip.lib.php');
571
			
572
	// Install add-ons
573
	if(file_exists(WB_PATH.'/install/modules')) {
574
		// Unpack pre-packaged modules
575
			
576
	}
577
	if(file_exists(WB_PATH.'/install/templates')) {
578
		// Unpack pre-packaged templates
579
		
580
	}
581
	if(file_exists(WB_PATH.'/install/languages')) {
582
		// Unpack pre-packaged languages
583
		
584
	}
585
	// Load addons into DB
586
	$dirs['modules'] = WB_PATH.'/modules/';
587
	$dirs['templates'] = WB_PATH.'/templates/';
588
	$dirs['languages'] = WB_PATH.'/languages/';
589
	foreach($dirs AS $type => $dir) {
590
		if($handle = opendir($dir)) {
591
			while(false !== ($file = readdir($handle))) {
592
				if($file != '' AND substr($file, 0, 1) != '.' AND $file != 'admin.php' AND $file != 'index.php') {
593
					// Get addon type
594
					if($type == 'modules') {
595
						load_module($dir.'/'.$file, true);
596
					} elseif($type == 'templates') {
597
						load_template($dir.'/'.$file);
598
					} elseif($type == 'languages') {
599
						load_language($dir.'/'.$file);
600
					}
601
				}
602
			}
603
		closedir($handle);
604
		}
605
	}
606
	
607
	// Check if there was a database error
608
	if($database->is_error()) {
609
		set_error($database->get_error());
610
	}
611
	
612
}
613

    
614
// Log the user in and go to Website Baker Administration
615
$thisApp = new Login(
616
							array(
617
									"MAX_ATTEMPS" => "50",
618
									"WARNING_URL" => ADMIN_URL."/login/warning.html",
619
									"USERNAME_FIELDNAME" => 'admin_username',
620
									"PASSWORD_FIELDNAME" => 'admin_password',
621
									"REMEMBER_ME_OPTION" => SMART_LOGIN,
622
									"MIN_USERNAME_LEN" => "2",
623
									"MIN_PASSWORD_LEN" => "2",
624
									"MAX_USERNAME_LEN" => "30",
625
									"MAX_PASSWORD_LEN" => "30",
626
									'LOGIN_URL' => ADMIN_URL."/login/index.php",
627
									'DEFAULT_URL' => ADMIN_URL."/start/index.php",
628
									'TEMPLATE_DIR' => ADMIN_PATH."/login",
629
									'TEMPLATE_FILE' => "template.html",
630
									'FRONTEND' => false,
631
									'FORGOTTEN_DETAILS_APP' => ADMIN_URL."/login/forgot/index.php",
632
									'USERS_TABLE' => TABLE_PREFIX."users",
633
									'GROUPS_TABLE' => TABLE_PREFIX."groups",
634
							)
635
					);
636

    
637
?>=======
638
<?php
639

    
640
// $Id: save.php 223 2005-11-19 20:40:44Z stefan $
641

    
642
/*
643

    
644
 Website Baker Project <http://www.websitebaker.org/>
645
 Copyright (C) 2004-2005, Ryan Djurovich
646

    
647
 Website Baker is free software; you can redistribute it and/or modify
648
 it under the terms of the GNU General Public License as published by
649
 the Free Software Foundation; either version 2 of the License, or
650
 (at your option) any later version.
651

    
652
 Website Baker is distributed in the hope that it will be useful,
653
 but WITHOUT ANY WARRANTY; without even the implied warranty of
654
 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
655
 GNU General Public License for more details.
656

    
657
 You should have received a copy of the GNU General Public License
658
 along with Website Baker; if not, write to the Free Software
659
 Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
660

    
661
*/
662

    
663
// Start a session
664
if(!defined('SESSION_STARTED')) {
665
	session_name('wb_session_id');
666
	session_start();
667
	define('SESSION_STARTED', true);
668
}
669

    
670
// Function to set error
671
function set_error($message) {
672
	global $_POST;
673
	if(isset($message) AND $message != '') {
674
		// Copy values entered into session so user doesn't have to re-enter everything
675
		if(isset($_POST['website_title'])) {
676
			$_SESSION['wb_url'] = $_POST['wb_url'];
677
			$_SESSION['wb_path'] = $_POST['wb_path'];
678
			$_SESSION['default_timezone'] = $_POST['default_timezone'];
679
			if(!isset($_POST['operating_system'])) {
680
				$_SESSION['operating_system'] = 'linux';
681
			} else {
682
				$_SESSION['operating_system'] = $_POST['operating_system'];
683
			}
684
			if(!isset($_POST['world_writeable'])) {
685
				$_SESSION['world_writeable'] = false;
686
			} else {
687
				$_SESSION['world_writeable'] = true;
688
			}
689
			$_SESSION['database_host'] = $_POST['database_host'];
690
			$_SESSION['database_username'] = $_POST['database_username'];
691
			$_SESSION['database_password'] = $_POST['database_password'];
692
			$_SESSION['database_name'] = $_POST['database_name'];
693
			$_SESSION['table_prefix'] = $_POST['table_prefix'];
694
			if(!isset($_POST['install_tables'])) {
695
				$_SESSION['install_tables'] = false;
696
			} else {
697
				$_SESSION['install_tables'] = true;
698
			}
699
			$_SESSION['website_title'] = $_POST['website_title'];
700
			$_SESSION['admin_username'] = $_POST['admin_username'];
701
			$_SESSION['admin_email'] = $_POST['admin_email'];
702
			$_SESSION['admin_password'] = $_POST['admin_password'];
703
		}
704
		// Set the message
705
		$_SESSION['message'] = $message;
706
		// Specify that session support is enabled
707
		$_SESSION['session_support'] = '<font class="good">Enabled</font>';
708
		// Redirect to first page again and exit
709
		header('Location: index.php?sessions_checked=true');
710
		exit();
711
	}
712
}
713

    
714
// Function to workout what the default permissions are for files created by the webserver
715
function default_file_mode($temp_dir) {
716
	$v = explode(".",PHP_VERSION);
717
	$v = $v[0].$v[1];
718
	if($v > 41 AND is_writable($temp_dir)) {
719
		$filename = $temp_dir.'/test_permissions.txt';
720
		$handle = fopen($filename, 'w');
721
		fwrite($handle, 'This file is to get the default file permissions');
722
		fclose($handle);
723
		$default_file_mode = '0'.substr(sprintf('%o', fileperms($filename)), -3);
724
		unlink($filename);
725
	} else {
726
		$default_file_mode = '0777';
727
	}
728
	return $default_file_mode;
729
}
730

    
731
// Function to workout what the default permissions are for directories created by the webserver
732
function default_dir_mode($temp_dir) {
733
	$v = explode(".",PHP_VERSION);
734
	$v = $v[0].$v[1];
735
	if($v > 41 AND is_writable($temp_dir)) {
736
		$dirname = $temp_dir.'/test_permissions/';
737
		mkdir($dirname);
738
		$default_dir_mode = '0'.substr(sprintf('%o', fileperms($dirname)), -3);
739
		rmdir($dirname);
740
	} else {
741
		$default_dir_mode = '0777';
742
	}
743
	return $default_dir_mode;
744
}
745

    
746
function add_slashes($input) {
747
		if ( get_magic_quotes_gpc() || ( !is_string($input) ) ) {
748
			return $input;
749
		}
750
		$output = addslashes($input);
751
		return $output;
752
	}
753

    
754
// Begin check to see if form was even submitted
755
// Set error if no post vars found
756
if(!isset($_POST['website_title'])) {
757
	set_error('Please fill-in the form below');
758
}
759
// End check to see if form was even submitted
760

    
761
// Begin path and timezone details code
762

    
763
// Check if user has entered the installation url
764
if(!isset($_POST['wb_url']) OR $_POST['wb_url'] == '') {
765
	set_error('Please enter an absolute URL');
766
} else {
767
	$wb_url = $_POST['wb_url'];
768
}
769
// Remove any slashes at the end of the URL
770
if(substr($wb_url, strlen($wb_url)-1, 1) == "/") {
771
	$wb_url = substr($wb_url, 0, strlen($wb_url)-1);
772
}
773
if(substr($wb_url, strlen($wb_url)-1, 1) == "\\") {
774
	$wb_url = substr($wb_url, 0, strlen($wb_url)-1);
775
}
776
if(substr($wb_url, strlen($wb_url)-1, 1) == "/") {
777
	$wb_url = substr($wb_url, 0, strlen($wb_url)-1);
778
}
779
if(substr($wb_url, strlen($wb_url)-1, 1) == "\\") {
780
	$wb_url = substr($wb_url, 0, strlen($wb_url)-1);
781
}
782
// Get the default time zone
783
if(!isset($_POST['default_timezone']) OR !is_numeric($_POST['default_timezone'])) {
784
	set_error('Please select a valid default timezone');
785
} else {
786
	$default_timezone = $_POST['default_timezone']*60*60;
787
}
788
// End path and timezone details code
789

    
790
// Begin operating system specific code
791
// Get operating system
792
if(!isset($_POST['operating_system']) OR $_POST['operating_system'] != 'linux' AND $_POST['operating_system'] != 'windows') {
793
	set_error('Please select a valid operating system');
794
} else {
795
	$operating_system = $_POST['operating_system'];
796
}
797
// Work-out file permissions
798
if($operating_system == 'windows') {
799
	$file_mode = '0777';
800
	$dir_mode = '0777';
801
} elseif(isset($_POST['world_writeable']) AND $_POST['world_writeable'] == 'true') {
802
	$file_mode = '0777';
803
	$dir_mode = '0777';
804
} else {
805
	$file_mode = default_file_mode('../temp');
806
	$dir_mode = default_dir_mode('../temp');
807
}
808
// End operating system specific code
809

    
810
// Begin database details code
811
// Check if user has entered a database host
812
if(!isset($_POST['database_host']) OR $_POST['database_host'] == '') {
813
	set_error('Please enter a database host name');
814
} else {
815
	$database_host = $_POST['database_host'];
816
}
817
// Check if user has entered a database username
818
if(!isset($_POST['database_username']) OR $_POST['database_username'] == '') {
819
	set_error('Please enter a database username');
820
} else {
821
	$database_username = $_POST['database_username'];
822
}
823
// Check if user has entered a database password
824
if(!isset($_POST['database_password'])) {
825
	set_error('Please enter a database password');
826
} else {
827
	$database_password = $_POST['database_password'];
828
}
829
// Check if user has entered a database name
830
if(!isset($_POST['database_name']) OR $_POST['database_name'] == '') {
831
	set_error('Please enter a database name');
832
} else {
833
	$database_name = $_POST['database_name'];
834
}
835
// Get table prefix
836
$table_prefix = $_POST['table_prefix'];
837
// Find out if the user wants to install tables and data
838
if(isset($_POST['install_tables']) AND $_POST['install_tables'] == 'true') {
839
	$install_tables = true;
840
} else {
841
	$install_tables = false;
842
}
843
// End database details code
844

    
845
// Begin website title code
846
// Get website title
847
if(!isset($_POST['website_title']) OR $_POST['website_title'] == '') {
848
	set_error('Please enter a website title');
849
} else {
850
	$website_title = add_slashes($_POST['website_title']);
851
}
852
// End website title code
853

    
854
// Begin admin user details code
855
// Get admin username
856
if(!isset($_POST['admin_username']) OR $_POST['admin_username'] == '') {
857
	set_error('Please enter a username for the Administrator account');
858
} else {
859
	$admin_username = $_POST['admin_username'];
860
}
861
// Get admin email and validate it
862
if(!isset($_POST['admin_email']) OR $_POST['admin_email'] == '') {
863
	set_error('Please enter an email for the Administrator account');
864
} else {
865
	if(eregi("^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[a-z0-9-]+(\.[a-z0-9-]+)*(\.[a-z]{2,3})$", $_POST['admin_email'])) {
866
		$admin_email = $_POST['admin_email'];
867
	} else {
868
		set_error('Please enter a valid email address for the Administrator account');
869
	}
870
}
871
// Get the two admin passwords entered, and check that they match
872
if(!isset($_POST['admin_password']) OR $_POST['admin_password'] == '') {
873
	set_error('Please enter a password for the Administrator account');
874
} else {
875
	$admin_password = $_POST['admin_password'];
876
}
877
if(!isset($_POST['admin_repassword']) OR $_POST['admin_repassword'] == '') {
878
	set_error('Please make sure you re-enter the password for the Administrator account');
879
} else {
880
	$admin_repassword = $_POST['admin_repassword'];
881
}
882
if($admin_password != $admin_repassword) {
883
	set_error('Sorry, the two Administrator account passwords you entered do not match');
884
}
885
// End admin user details code
886

    
887
// Try and write settings to config file
888
$config_content = "" .
889
"<?php\n".
890
"\n".
891
"define('DB_TYPE', 'mysql');\n".
892
"define('DB_HOST', '$database_host');\n".
893
"define('DB_USERNAME', '$database_username');\n".
894
"define('DB_PASSWORD', '$database_password');\n".
895
"define('DB_NAME', '$database_name');\n".
896
"define('TABLE_PREFIX', '$table_prefix');\n".
897
"\n".
898
"define('WB_PATH', dirname(__FILE__));\n".
899
"define('WB_URL', '$wb_url');\n".
900
"define('ADMIN_PATH', WB_PATH.'/admin');\n".
901
"define('ADMIN_URL', '$wb_url/admin');\n".
902
"\n".
903
"require_once(WB_PATH.'/framework/initialize.php');\n".
904
"\n".
905
"?>";
906

    
907
$config_filename = '../config.php';
908

    
909
// Check if the file exists and is writable first.
910
if(file_exists($config_filename) AND is_writable($config_filename)) {
911
	if(!$handle = fopen($config_filename, 'w')) {
912
		set_error("Cannot open the configuration file ($config_filename)");
913
	} else {
914
		if (fwrite($handle, $config_content) === FALSE) {
915
			set_error("Cannot write to the configuration file ($config_filename)");
916
		}
917
		// Close file
918
		fclose($handle);
919
	}
920
} else {
921
	set_error("The configuration file $config_filename is not writable. Change its permissions so it is, then re-run step 4.");
922
}
923

    
924
// Define configuration vars
925
define('DB_TYPE', 'mysql');
926
define('DB_HOST', $database_host);
927
define('DB_USERNAME', $database_username);
928
define('DB_PASSWORD', $database_password);
929
define('DB_NAME', $database_name);
930
define('TABLE_PREFIX', $table_prefix);
931
define('WB_PATH', str_replace(array('/install','\install'), '',dirname(__FILE__)));
932
define('WB_URL', $wb_url);
933
define('ADMIN_PATH', WB_PATH.'/admin');
934
define('ADMIN_URL', $wb_url.'/admin');
935

    
936
// Check if the user has entered a correct path
937
if(!file_exists(WB_PATH.'/framework/class.admin.php')) {
938
	set_error('It appears the Absolute path that you entered is incorrect');
939
}
940

    
941
// Try connecting to database	
942
if(!mysql_connect(DB_HOST, DB_USERNAME, DB_PASSWORD)) {
943
	set_error('Database host name, username and/or password incorrect. MySQL Error:<br />'.mysql_error());
944
}
945

    
946
// Try to create the database
947
mysql_query('CREATE DATABASE '.$database_name);
948

    
949
// Close the mysql connection
950
mysql_close();
951

    
952
// Include WB functions file
953
require_once(WB_PATH.'/framework/functions.php');
954

    
955
// Re-connect to the database, this time using in-build database class
956
require_once(WB_PATH.'/framework/class.login.php');
957
$database=new database();
958

    
959
// Check if we should install tables
960
if($install_tables == true) {
961
	
962
	// Remove tables if they exist
963

    
964
	// Pages table
965
	$pages = "DROP TABLE IF EXISTS `".TABLE_PREFIX."pages`";
966
	$database->query($pages);
967
	// Sections table
968
	$sections = "DROP TABLE IF EXISTS `".TABLE_PREFIX."sections`";
969
	$database->query($sections);
970
	// Settings table
971
	$settings = "DROP TABLE IF EXISTS `".TABLE_PREFIX."settings`";
972
	$database->query($settings);
973
	// Users table
974
	$users = "DROP TABLE IF EXISTS `".TABLE_PREFIX."users`";
975
	$database->query($users);
976
	// Groups table
977
	$groups = "DROP TABLE IF EXISTS `".TABLE_PREFIX."groups`";
978
	$database->query($groups);
979
	// Search table
980
	$search = "DROP TABLE IF EXISTS `".TABLE_PREFIX."search`";
981
	$database->query($search);
982
	// Addons table
983
	$addons = "DROP TABLE IF EXISTS `".TABLE_PREFIX."addons`";
984
	$database->query($addons);
985
				
986
	// Try installing tables
987
	
988
	// Pages table
989
	$pages = 'CREATE TABLE `'.TABLE_PREFIX.'pages` ( `page_id` INT NOT NULL auto_increment,'
990
	       . ' `parent` INT NOT NULL ,'
991
	       . ' `root_parent` INT NOT NULL ,'
992
	       . ' `level` INT NOT NULL ,'
993
	       . ' `link` TEXT NOT NULL ,'
994
	       . ' `target` VARCHAR( 7 ) NOT NULL ,'
995
	       . ' `page_title` VARCHAR( 255 ) NOT NULL ,'
996
	       . ' `menu_title` VARCHAR( 255 ) NOT NULL ,'
997
	       . ' `description` TEXT NOT NULL ,'
998
	       . ' `keywords` TEXT NOT NULL ,'
999
	       . ' `page_trail` TEXT NOT NULL ,'
1000
	       . ' `template` VARCHAR( 255 ) NOT NULL ,'
1001
	       . ' `visibility` VARCHAR( 255 ) NOT NULL ,'
1002
	       . ' `position` INT NOT NULL ,'
1003
	       . ' `menu` INT NOT NULL ,'
1004
	       . ' `language` VARCHAR( 5 ) NOT NULL ,'
1005
	       . ' `searching` INT NOT NULL ,'
1006
	       . ' `admin_groups` TEXT NOT NULL ,'
1007
	       . ' `admin_users` TEXT NOT NULL ,'
1008
	       . ' `viewing_groups` TEXT NOT NULL ,'
1009
	       . ' `viewing_users` TEXT NOT NULL ,'
1010
	       . ' `modified_when` INT NOT NULL ,'
1011
	       . ' `modified_by` INT NOT NULL ,'
1012
	       . ' PRIMARY KEY ( `page_id` ) )'
1013
	       . ' ';
1014
	$database->query($pages);
1015
	
1016
	// Sections table
1017
	$pages = 'CREATE TABLE `'.TABLE_PREFIX.'sections` ( `section_id` INT NOT NULL auto_increment,'
1018
	       . ' `page_id` INT NOT NULL ,'
1019
	       . ' `position` INT NOT NULL ,'
1020
	       . ' `module` VARCHAR( 255 ) NOT NULL ,'
1021
	       . ' `block` VARCHAR( 255 ) NOT NULL ,'
1022
	       . ' PRIMARY KEY ( `section_id` ) )'
1023
	       . ' ';
1024
	$database->query($pages);
1025
	
1026
	require(WB_PATH.'/admin/interface/version.php');
1027
	
1028
	// Settings table
1029
	$settings="CREATE TABLE `".TABLE_PREFIX."settings` ( `setting_id` INT NOT NULL auto_increment,
1030
		`name` VARCHAR( 255 ) NOT NULL ,
1031
		`value` TEXT NOT NULL ,
1032
		PRIMARY KEY ( `setting_id` ) )";
1033
	$database->query($settings);
1034
	$settings_rows=	"INSERT INTO `".TABLE_PREFIX."settings` VALUES "
1035
	." ('', 'wb_version', '".VERSION."'),"
1036
	." ('', 'website_title', '$website_title'),"
1037
	." ('', 'website_description', ''),"
1038
	." ('', 'website_keywords', ''),"
1039
	." ('', 'website_header', ''),"
1040
	." ('', 'website_footer', ''),"
1041
	." ('', 'wysiwyg_style', 'font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px;'),"
1042
	." ('', 'rename_files_on_upload', 'php,asp,phpx,aspx'),"
1043
	." ('', 'er_level', ''),"
1044
	." ('', 'default_language', 'EN'),"
1045
	." ('', 'app_name', 'wb'),"
1046
	." ('', 'default_timezone', '$default_timezone'),"
1047
	." ('', 'default_date_format', 'M d Y'),"
1048
	." ('', 'default_time_format', 'g:i A'),"
1049
	." ('', 'home_folders', 'true'),"
1050
	." ('', 'default_template', 'round'),"
1051
	." ('', 'multiple_menus', 'false'),"
1052
	." ('', 'page_level_limit', '4'),"
1053
	." ('', 'intro_page', 'false'),"
1054
	." ('', 'page_trash', 'disabled'),"
1055
	." ('', 'homepage_redirection', 'false'),"
1056
	." ('', 'page_languages', 'false'),"
1057
	." ('', 'wysiwyg_editor', 'htmlarea'),"
1058
	." ('', 'manage_sections', 'true'),"
1059
	." ('', 'section_blocks', 'false'),"
1060
	." ('', 'smart_login', 'false'),"
1061
	." ('', 'frontend_login', 'false'),"
1062
	." ('', 'frontend_signup', 'false'),"
1063
	." ('', 'server_email', '$admin_email'),"
1064
	." ('', 'search', 'public'),"
1065
	." ('', 'page_extension', '.php'),"
1066
	." ('', 'page_spacer', '-'),"
1067
	." ('', 'pages_directory', '/pages'),"
1068
	." ('', 'media_directory', '/media'),"
1069
	." ('', 'operating_system', '$operating_system'),"
1070
	." ('', 'string_file_mode', '$file_mode'),"
1071
	." ('', 'string_dir_mode', '$dir_mode');";
1072
	$database->query($settings_rows);
1073
	
1074
	
1075
	// Users table
1076
	$users = 'CREATE TABLE `'.TABLE_PREFIX.'users` ( `user_id` INT NOT NULL auto_increment,'
1077
	       . ' `group_id` INT NOT NULL ,'
1078
	       . ' `active` INT NOT NULL ,'
1079
	       . ' `username` VARCHAR( 255 ) NOT NULL ,'
1080
	       . ' `password` VARCHAR( 255 ) NOT NULL ,'
1081
	       . ' `remember_key` VARCHAR( 255 ) NOT NULL ,'
1082
	       . ' `last_reset` INT NOT NULL ,'
1083
	       . ' `display_name` VARCHAR( 255 ) NOT NULL ,'
1084
	       . ' `email` TEXT NOT NULL ,'
1085
	       . ' `timezone` INT NOT NULL ,'
1086
	       . ' `date_format` VARCHAR( 255 ) NOT NULL ,'
1087
	       . ' `time_format` VARCHAR( 255 ) NOT NULL ,'
1088
	       . ' `language` VARCHAR( 5 ) NOT NULL ,'
1089
	       . ' `home_folder` TEXT NOT NULL ,'
1090
	       . ' `login_when` INT NOT NULL ,'
1091
	       . ' `login_ip` VARCHAR( 15 ) NOT NULL ,'
1092
	       . ' PRIMARY KEY ( `user_id` ) )'
1093
	       . ' ';
1094
	$database->query($users);
1095
	
1096
	// Groups table
1097
	$groups = 'CREATE TABLE `'.TABLE_PREFIX.'groups` ( `group_id` INT NOT NULL auto_increment,'
1098
	        . ' `name` VARCHAR( 255 ) NOT NULL ,'
1099
	        . ' `system_permissions` TEXT NOT NULL ,'
1100
	        . ' `module_permissions` TEXT NOT NULL ,'
1101
	        . ' `template_permissions` TEXT NOT NULL ,'
1102
	        . ' PRIMARY KEY ( `group_id` ) )'
1103
	        . ' ';
1104
	$database->query($groups);
1105
	
1106
	// Search settings table
1107
	$search = 'CREATE TABLE `'.TABLE_PREFIX.'search` ( `search_id` INT NOT NULL auto_increment,'
1108
	        . ' `name` VARCHAR( 255 ) NOT NULL ,'
1109
	        . ' `value` TEXT NOT NULL ,'
1110
	        . ' `extra` TEXT NOT NULL ,'
1111
	        . ' PRIMARY KEY ( `search_id` ) )'
1112
	        . ' ';
1113
	$database->query($search);
1114
	
1115
	// Addons table
1116
	$addons = 'CREATE TABLE `'.TABLE_PREFIX.'addons` ( '
1117
			.'`addon_id` INT NOT NULL auto_increment ,'
1118
			.'`type` VARCHAR( 255 ) NOT NULL ,'
1119
			.'`directory` VARCHAR( 255 ) NOT NULL ,'
1120
			.'`name` VARCHAR( 255 ) NOT NULL ,'
1121
			.'`description` TEXT NOT NULL ,'
1122
			.'`function` VARCHAR( 255 ) NOT NULL ,'
1123
			.'`version` VARCHAR( 255 ) NOT NULL ,'
1124
			.'`platform` VARCHAR( 255 ) NOT NULL ,'
1125
			.'`author` VARCHAR( 255 ) NOT NULL ,'
1126
			.'`license` VARCHAR( 255 ) NOT NULL ,'
1127
			.' PRIMARY KEY ( `addon_id` ) )';
1128
	$database->query($addons);
1129

    
1130
	// Insert default data
1131
	
1132
	// Admin group
1133
	$full_system_permissions = 'pages,pages_view,pages_add,pages_add_l0,pages_settings,pages_modify,pages_intro,pages_delete,media,media_view,media_upload,media_rename,media_delete,media_create,addons,modules,modules_view,modules_install,modules_uninstall,templates,templates_view,templates_install,templates_uninstall,languages,languages_view,languages_install,languages_uninstall,settings,settings_basic,settings_advanced,access,users,users_view,users_add,users_modify,users_delete,groups,groups_view,groups_add,groups_modify,groups_delete';
1134
	$insert_admin_group = "INSERT INTO `".TABLE_PREFIX."groups` VALUES ('1', 'Administrators', '$full_system_permissions', '', '')";
1135
	$database->query($insert_admin_group);
1136
	// Admin user
1137
	$insert_admin_user = "INSERT INTO `".TABLE_PREFIX."users` (user_id,group_id,active,username,password,email,display_name) VALUES ('1','1','1','$admin_username','".md5($admin_password)."','$admin_email','Administrator')";
1138
	$database->query($insert_admin_user);
1139
	
1140
	// Search header
1141
	$search_header = addslashes('
1142
<h1>Search</h1>
1143

    
1144
<form name="search" action="[WB_URL]/search/index[PAGE_EXTENSION]" method="post">
1145
<table cellpadding="3" cellspacing="0" border="0" width="500">
1146
<tr>
1147
<td>
1148
<input type="text" name="string" value="[SEARCH_STRING]" style="width: 100%;" />
1149
</td>
1150
<td width="150">
1151
<input type="submit" value="[TEXT_SEARCH]" style="width: 100%;" />
1152
</td>
1153
</tr>
1154
<tr>
1155
<td colspan="2">
1156
<input type="radio" name="match" id="match_all" value="all"[ALL_CHECKED] />
1157
<a href="javascript: toggle_radio(\'match_all\');">[TEXT_ALL_WORDS]</a>
1158
<input type="radio" name="match" id="match_any" value="any"[ANY_CHECKED] />
1159
<a href="javascript: toggle_radio(\'match_any\');">[TEXT_ANY_WORDS]</a>
1160
<input type="radio" name="match" id="match_exact" value="exact"[EXACT_CHECKED] />
1161
<a href="javascript: toggle_radio(\'match_exact\');">[TEXT_EXACT_MATCH]</a>
1162
</td>
1163
</tr>
1164
</table>
1165

    
1166
</form>
1167

    
1168
<hr />
1169
	');
1170
	$insert_search_header = "INSERT INTO `".TABLE_PREFIX."search` VALUES ('', 'header', '$search_header', '')";
1171
	$database->query($insert_search_header);
1172
	// Search footer
1173
	$search_footer = addslashes('');
1174
	$insert_search_footer = "INSERT INTO `".TABLE_PREFIX."search` VALUES ('', 'footer', '$search_footer', '')";
1175
	$database->query($insert_search_footer);
1176
	// Search results header
1177
	$search_results_header = addslashes(''.
1178
'[TEXT_RESULTS_FOR] \'<b>[SEARCH_STRING]</b>\':
1179
<table cellpadding="2" cellspacing="0" border="0" width="100%" style="padding-top: 10px;">');
1180
	$insert_search_results_header = "INSERT INTO `".TABLE_PREFIX."search` VALUES ('', 'results_header', '$search_results_header', '')";
1181
	$database->query($insert_search_results_header);
1182
	// Search results loop
1183
	$search_results_loop = addslashes(''.
1184
'<tr style="background-color: #F0F0F0;">
1185
<td><a href="[LINK]">[TITLE]</a></td>
1186
<td align="right">[TEXT_LAST_UPDATED_BY] [DISPLAY_NAME] ([USERNAME]) [TEXT_ON] [DATE]</td>
1187
</tr>
1188
<tr><td colspan="2" style="text-align: justify; padding-bottom: 10px;">[DESCRIPTION]</td></tr>');
1189
$insert_search_results_loop = "INSERT INTO `".TABLE_PREFIX."search` VALUES ('', 'results_loop', '$search_results_loop', '')";
1190
$database->query($insert_search_results_loop);
1191
// Search results footer
1192
$search_results_footer = addslashes("</table>");
1193
$insert_search_results_footer = "INSERT INTO `".TABLE_PREFIX."search` VALUES ('', 'results_footer', '$search_results_footer', '')";
1194
$database->query($insert_search_results_footer);
1195
// Search no results
1196
$search_no_results = addslashes('<br />No results found');
1197
	$insert_search_no_results = "INSERT INTO `".TABLE_PREFIX."search` VALUES ('', 'no_results', '$search_no_results', '')";
1198
	$database->query($insert_search_no_results);
1199
	// Search template
1200
	$database->query("INSERT INTO `".TABLE_PREFIX."search` (name) VALUES ('template')");
1201
	
1202
	require_once(WB_PATH.'/framework/initialize.php');
1203
	$wb = new wb();
1204
	
1205
	// Install add-ons
1206
	if(file_exists(WB_PATH.'/install/modules')) {
1207
		// Unpack pre-packaged modules
1208
		
1209
	}
1210
	if(file_exists(WB_PATH.'/install/templates')) {
1211
		// Unpack pre-packaged templates
1212
		
1213
	}
1214
	if(file_exists(WB_PATH.'/install/languages')) {
1215
		// Unpack pre-packaged languages
1216
		
1217
	}
1218
	// Load addons into DB
1219
	$dirs['modules'] = WB_PATH.'/modules/';
1220
	$dirs['templates'] = WB_PATH.'/templates/';
1221
	$dirs['languages'] = WB_PATH.'/languages/';
1222
	foreach($dirs AS $type => $dir) {
1223
		if($handle = opendir($dir)) {
1224
			while(false !== ($file = readdir($handle))) {
1225
				if($file != '' AND substr($file, 0, 1) != '.' AND $file != 'admin.php' AND $file != 'index.php') {
1226
					// Get addon type
1227
					if($type == 'modules') {
1228
						load_module($dir.'/'.$file, true);
1229
					} elseif($type == 'templates') {
1230
						load_template($dir.'/'.$file);
1231
					} elseif($type == 'languages') {
1232
						load_language($dir.'/'.$file);
1233
					}
1234
				}
1235
			}
1236
		closedir($handle);
1237
		}
1238
	}
1239
	
1240
	// Check if there was a database error
1241
	if($database->is_error()) {
1242
		set_error($database->get_error());
1243
	}
1244
	
1245
}
1246

    
1247
// Log the user in and go to Website Baker Administration
1248
$thisApp = new Login(
1249
							array(
1250
									"MAX_ATTEMPS" => "50",
1251
									"WARNING_URL" => ADMIN_URL."/login/warning.html",
1252
									"USERNAME_FIELDNAME" => 'admin_username',
1253
									"PASSWORD_FIELDNAME" => 'admin_password',
1254
									"REMEMBER_ME_OPTION" => SMART_LOGIN,
1255
									"MIN_USERNAME_LEN" => "2",
1256
									"MIN_PASSWORD_LEN" => "2",
1257
									"MAX_USERNAME_LEN" => "30",
1258
									"MAX_PASSWORD_LEN" => "30",
1259
									'LOGIN_URL' => ADMIN_URL."/login/index.php",
1260
									'DEFAULT_URL' => ADMIN_URL."/start/index.php",
1261
									'TEMPLATE_DIR' => ADMIN_PATH."/login",
1262
									'TEMPLATE_FILE' => "template.html",
1263
									'FRONTEND' => false,
1264
									'FORGOTTEN_DETAILS_APP' => ADMIN_URL."/login/forgot/index.php",
1265
									'USERS_TABLE' => TABLE_PREFIX."users",
1266
									'GROUPS_TABLE' => TABLE_PREFIX."groups",
1267
							)
1268
					);
1269

    
1270
?>
(2-2/3)