Project

General

Profile

1
<?php
2
/**
3
 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
4
 *
5
 * This program is free software: you can redistribute it and/or modify
6
 * it under the terms of the GNU General Public License as published by
7
 * the Free Software Foundation, either version 3 of the License, or
8
 * (at your option) any later version.
9
 *
10
 * This program is distributed in the hope that it will be useful,
11
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
12
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
13
 * GNU General Public License for more details.
14
 *
15
 * You should have received a copy of the GNU General Public License
16
 * along with this program.  If not, see <http://www.gnu.org/licenses/>.
17
 */
18

    
19
/**
20
 * save.php
21
 * 
22
 * @category     Core
23
 * @package      Core_Environment
24
 * @subpackage   Installer
25
 * @author       Dietmar Wöllbrink <dietmar.woellbrink@websitebaker.org>
26
 * @copyright    Werner v.d.Decken <wkl@isteam.de>
27
 * @license      http://www.gnu.org/licenses/gpl.html   GPL License
28
 * @version      0.0.2
29
 * @revision     $Revision: 2070 $
30
 * @link         $HeadURL: svn://isteam.dynxs.de/wb-archiv/branches/2.8.x/wb/install/save.php $
31
 * @lastmodified $Date: 2014-01-03 02:21:42 +0100 (Fri, 03 Jan 2014) $
32
 * @since        File available since 2012-04-01
33
 * @description  xyz
34
 */
35

    
36
$debug = true;
37
if(!defined('DEBUG')) { define('DEBUG', true); }
38

    
39
include(dirname(dirname(__FILE__)).'/framework/globalExceptionHandler.php'); 
40
include(dirname(dirname(__FILE__)).'/framework/WbAutoloader.php');
41
WbAutoloader::doRegister(array('admin'=>'a', 'modules'=>'m'));
42

    
43
function errorLogs($error_str)
44
{
45
	$log_error = true;
46
	if ( ! function_exists('error_log') ) { $log_error = false; }
47
	$log_file = @ini_get('error_log');
48
	if ( !empty($log_file) && ('syslog' != $log_file) && !@is_writable($log_file) ) {
49
		$log_error = false;
50
	}
51
	if ( $log_error ) {@error_log($error_str, 0);}
52
}
53

    
54
/**
55
 * Read DB settings from configuration file
56
 * @return string
57
 * @throws RuntimeException
58
 * 
59
 */
60
	function _readConfiguration($sRetvalType = 'url') {
61
		// check for valid file request. Becomes more stronger in next version
62
		$x = debug_backtrace();
63
		$bValidRequest = false;
64
		if(sizeof($x) != 0) {
65
			foreach($x as $aStep) {
66
				// define the scripts which can read the configuration
67
				if(preg_match('/(save.php|index.php|config.php|upgrade-script.php)$/si', $aStep['file'])) {
68
					$bValidRequest = true;
69
					break;
70
				}
71
			}
72
		}else {
73
			$bValidRequest = true;
74
		}
75
		if(!$bValidRequest) {
76
			throw new RuntimeException('illegal function request!'); 
77
		}
78
		$aRetval = array();
79
		$sSetupFile = dirname(dirname(__FILE__)).'/setup.ini.php';
80
		if(is_readable($sSetupFile)) {
81
			$aCfg = parse_ini_file($sSetupFile, true);
82
			foreach($aCfg['Constants'] as $key=>$value) {
83
				switch($key):
84
					case 'DEBUG':
85
						$value = filter_var($value, FILTER_VALIDATE_BOOLEAN);
86
						break;
87
					case 'WB_URL':
88
					case 'AppUrl':
89
						$value = trim(str_replace('\\', '/', $value), '/'); 
90
						if(!defined('WB_URL')) { define('WB_URL', $value); }
91
						break;
92
					case 'ADMIN_DIRECTORY':
93
					case 'AcpDir':
94
						$value = trim(str_replace('\\', '/', $value), '/'); 
95
						if(!defined('ADMIN_DIRECTORY')) { define('ADMIN_DIRECTORY', $value); }
96
						break;
97
					default:
98
						if(!defined($key)) { define($key, $value); }
99
						break;
100
				endswitch;
101
			}
102
			$db = $aCfg['DataBase'];
103
			$db['type'] = isset($db['type']) ? $db['type'] : 'mysql';
104
			$db['user'] = isset($db['user']) ? $db['user'] : 'foo';
105
			$db['pass'] = isset($db['pass']) ? $db['pass'] : 'bar';
106
			$db['host'] = isset($db['host']) ? $db['host'] : 'localhost';
107
			$db['port'] = isset($db['port']) ? $db['port'] : '3306';
108
			$db['port'] = ($db['port'] != '3306') ? $db['port'] : '';
109
			$db['name'] = isset($db['name']) ? $db['name'] : 'dummy';
110
			$db['charset'] = isset($db['charset']) ? $db['charset'] : 'utf8';
111
			$db['table_prefix'] = (isset($db['table_prefix']) ? $db['table_prefix'] : '');
112
			if(!defined('TABLE_PREFIX')) {define('TABLE_PREFIX', $db['table_prefix']);}
113
			if($sRetvalType == 'dsn') {
114
				$aRetval[0] = $db['type'].':dbname='.$db['name'].';host='.$db['host'].';'
115
				            . ($db['port'] != '' ? 'port='.(int)$db['port'].';' : '');
116
				$aRetval[1] = array('CHARSET' => $db['charset'], 'TABLE_PREFIX' => $db['table_prefix']);
117
				$aRetval[2] = array( 'user' => $db['user'], 'pass' => $db['pass']);
118
			}else { // $sRetvalType == 'url'
119
				$aRetval[0] = $db['type'].'://'.$db['user'].':'.$db['pass'].'@'
120
				            . $db['host'].($db['port'] != '' ? ':'.$db['port'] : '').'/'.$db['name']
121
				            . '?Charset='.$db['charset'].'&TablePrefix='.$db['table_prefix'];
122
			}
123
			unset($db, $aCfg);
124
			return $aRetval;
125
		}
126
		throw new RuntimeException('unable to read setup.ini.php');
127
	}
128

    
129
if (true === $debug) {
130
	ini_set('display_errors', 1);
131
	error_reporting(E_ALL);
132
}
133
// Start a session
134
if(!defined('SESSION_STARTED')) {
135
	session_name('wb_session_id');
136
	session_start();
137
	define('SESSION_STARTED', true);
138
}
139
// get random-part for session_name()
140
list($usec,$sec) = explode(' ',microtime());
141
srand((float)$sec+((float)$usec*100000));
142
$session_rand = rand(1000,9999);
143

    
144
// Function to set error
145
function set_error($message, $field_name = '') {
146
	global $_POST;
147
	if(isset($message) AND $message != '') {
148
		// Copy values entered into session so user doesn't have to re-enter everything
149
		if(isset($_POST['website_title'])) {
150
			$_SESSION['website_title'] = $_POST['website_title'];
151
			$_SESSION['default_timezone'] = $_POST['default_timezone'];
152
			$_SESSION['default_language'] = $_POST['default_language'];
153
			if(!isset($_POST['operating_system'])) {
154
				$_SESSION['operating_system'] = 'linux';
155
			} else {
156
				$_SESSION['operating_system'] = $_POST['operating_system'];
157
			}
158
			if(!isset($_POST['world_writeable'])) {
159
				$_SESSION['world_writeable'] = false;
160
			} else {
161
				$_SESSION['world_writeable'] = true;
162
			}
163
			$_SESSION['database_host'] = $_POST['database_host'];
164
			$_SESSION['database_username'] = $_POST['database_username'];
165
			$_SESSION['database_password'] = '';
166
			$_SESSION['database_name'] = $_POST['database_name'];
167
			$_SESSION['table_prefix'] = $_POST['table_prefix'];
168
			if(!isset($_POST['install_tables'])) {
169
				$_SESSION['install_tables'] = true;
170
			} else {
171
				$_SESSION['install_tables'] = true;
172
			}
173
			$_SESSION['website_title'] = $_POST['website_title'];
174
			$_SESSION['admin_username'] = $_POST['admin_username'];
175
			$_SESSION['admin_email'] = $_POST['admin_email'];
176
			$_SESSION['admin_password'] = '';
177
			$_SESSION['admin_repassword'] = '';
178
		}
179
		// Set the message
180
		$_SESSION['message'] = $message;
181
		// Set the element(s) to highlight
182
		if($field_name != '') {
183
			$_SESSION['ERROR_FIELD'] = $field_name;
184
		}
185
		// Specify that session support is enabled
186
		$_SESSION['session_support'] = '<font class="good">Enabled</font>';
187
		// Redirect to first page again and exit
188
		header('Location: index.php?sessions_checked=true');
189
		exit();
190
	}
191
}
192
/* */
193

    
194
// Function to workout what the default permissions are for files created by the webserver
195
function default_file_mode($temp_dir) {
196
	$v = explode(".",PHP_VERSION);
197
	$v = $v[0].$v[1];
198
	if($v > 41 AND is_writable($temp_dir)) {
199
		$filename = $temp_dir.'/test_permissions.txt';
200
		$handle = fopen($filename, 'w');
201
		fwrite($handle, 'This file is to get the default file permissions');
202
		fclose($handle);
203
		$default_file_mode = '0'.substr(sprintf('%o', fileperms($filename)), -3);
204
		unlink($filename);
205
	} else {
206
		$default_file_mode = '0666';
207
	}
208
	return $default_file_mode;
209
}
210

    
211
// Function to workout what the default permissions are for directories created by the webserver
212
function default_dir_mode($temp_dir) {
213
	$v = explode(".",PHP_VERSION);
214
	$v = $v[0].$v[1];
215
	if($v > 41 AND is_writable($temp_dir)) {
216
		$dirname = $temp_dir.'/test_permissions/';
217
		mkdir($dirname);
218
		$default_dir_mode = '0'.substr(sprintf('%o', fileperms($dirname)), -3);
219
		rmdir($dirname);
220
	} else {
221
		$default_dir_mode = '0777';
222
	}
223
	return $default_dir_mode;
224
}
225

    
226
function add_slashes($input) {
227
	if ( get_magic_quotes_gpc() || ( !is_string($input) ) ) {
228
		return $input;
229
	}
230
	$output = addslashes($input);
231
	return $output;
232
}
233

    
234
// Begin check to see if form was even submitted
235
// Set error if no post vars found
236
if(!isset($_POST['website_title'])) {
237
	set_error('Please fill-in the wesite title below');
238
}
239
// End check to see if form was even submitted
240

    
241
// Begin path and timezone details code
242

    
243
// Check if user has entered the installation url
244
if(!isset($_POST['wb_url']) OR $_POST['wb_url'] == '') {
245
	set_error('Please enter an absolute URL', 'wb_url');
246
} else {
247
	$wb_url = $_POST['wb_url'];
248
}
249
// Remove any slashes at the end of the URL
250
$wb_url = trim(str_replace('\\', '/', $wb_url), '/').'/';
251
// Get the default time zone
252
if(!isset($_POST['default_timezone']) OR !is_numeric($_POST['default_timezone'])) {
253
	set_error('Please select a valid default timezone', 'default_timezone');
254
} else {
255
	$default_timezone = $_POST['default_timezone']*60*60;
256
}
257
// End path and timezone details code
258

    
259
// Get the default language
260
$allowed_languages = array('BG','CA', 'CS', 'DA', 'DE', 'EN', 'ES', 'ET', 'FI', 'FR', 'HR', 'HU', 'IT', 'LV', 'NL', 'NO', 'PL', 'PT', 'RU','SE','SK','TR');
261
if(!isset($_POST['default_language']) OR !in_array($_POST['default_language'], $allowed_languages)) {
262
	set_error('Please select a valid default backend language','default_language');
263
} else {
264
	$default_language = $_POST['default_language'];
265
	// make sure the selected language file exists in the language folder
266
	if(!file_exists('../languages/' .$default_language .'.php')) {
267
		set_error('The language file: \'' .$default_language .'.php\' is missing. Upload file to language folder or choose another language','default_language');
268
	}
269
}
270
// End default language details code
271

    
272
// Begin operating system specific code
273
// Get operating system
274
if(!isset($_POST['operating_system']) OR $_POST['operating_system'] != 'linux' AND $_POST['operating_system'] != 'windows') {
275
	set_error('Please select a valid operating system');
276
} else {
277
	$operating_system = $_POST['operating_system'];
278
}
279
// Work-out file permissions
280
if($operating_system == 'windows') {
281
	$file_mode = '0777';
282
	$dir_mode = '0666';
283
} elseif(isset($_POST['world_writeable']) AND $_POST['world_writeable'] == 'true') {
284
	$file_mode = '0666';
285
	$dir_mode = '0777';
286
} else {
287
	$file_mode = default_file_mode('../temp');
288
	$dir_mode = default_dir_mode('../temp');
289
}
290
// End operating system specific code
291

    
292
// Begin database details code
293
// Check if user has entered a database host
294
if(!isset($_POST['database_host']) OR $_POST['database_host'] == '') {
295
	set_error('Please enter a database host name', 'database_host');
296
} else {
297
	$database_host = $_POST['database_host'];
298
 }
299
// Check if user has entered a database name
300
if(!isset($_POST['database_name']) OR $_POST['database_name'] == '') {
301
	set_error('Please enter a database name', 'database_name');
302
} else {
303
	// make sure only allowed characters are specified
304
	if(!preg_match('/^[a-z0-9_-]*$/i', $_POST['database_name'])) {
305
		// contains invalid characters (only a-z, A-Z, 0-9 and _ allowed to avoid problems with table/field names)
306
		set_error('Only characters a-z, A-Z, 0-9, - and _ allowed in database name.', 'database_name');
307
	}
308
	$database_name = $_POST['database_name'];
309
}
310
// Get table prefix
311
if(!preg_match('/^[a-z0-9_]*$/i', $_POST['table_prefix'])) {
312
	// contains invalid characters (only a-z, A-Z, 0-9 and _ allowed to avoid problems with table/field names)
313
	set_error('Only characters a-z, A-Z, 0-9 and _ allowed in table_prefix.', 'table_prefix');
314
} else {
315
	$table_prefix = $_POST['table_prefix'];
316
}
317

    
318
// Check if user has entered a database username
319
if(!isset($_POST['database_username']) OR $_POST['database_username'] == '') {
320
	set_error('Please enter a database username','database_username');
321
} else {
322
	$database_username = $_POST['database_username'];
323
}
324
// Check if user has entered a database password
325
if(!isset($_POST['database_password'])&& ($_POST['database_password']==='') ) {
326
	set_error('Please enter a database password', 'database_password');
327
} else {
328
	$database_password = $_POST['database_password'];
329
}
330

    
331
// Find out if the user wants to install tables and data
332
$install_tables = ((isset($_POST['install_tables']) AND $_POST['install_tables'] == 'true'));
333
// End database details code
334

    
335
// Begin website title code
336
// Get website title
337
if(!isset($_POST['website_title']) OR $_POST['website_title'] == '') {
338
	set_error('Please enter a website title', 'website_title');
339
} else {
340
	$website_title = add_slashes($_POST['website_title']);
341
}
342
// End website title code
343

    
344
// Begin admin user details code
345
// Get admin username
346
if(!isset($_POST['admin_username']) OR $_POST['admin_username'] == '') {
347
	set_error('Please enter a username for the Administrator account','admin_username');
348
} else {
349
	$admin_username = $_POST['admin_username'];
350
}
351
// Get admin email and validate it
352
if(!isset($_POST['admin_email']) OR $_POST['admin_email'] == '') {
353
	set_error('Please enter an email for the Administrator account','admin_email');
354
} else {
355
	if(preg_match('/^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[a-z0-9-]+(\.[a-z0-9-]+)*(\.[a-z]{2,4})$/i', $_POST['admin_email'])) {
356
		$admin_email = $_POST['admin_email'];
357
	} else {
358
		set_error('Please enter a valid email address for the Administrator account','admin_email');
359
	}
360
}
361
// Get the two admin passwords entered, and check that they match
362
if(!isset($_POST['admin_password']) OR $_POST['admin_password'] == '') {
363
	set_error('Please enter a password for the Administrator account','admin_password');
364
} else {
365
	$admin_password = $_POST['admin_password'];
366
}
367
if(!isset($_POST['admin_repassword']) OR $_POST['admin_repassword'] == '') {
368
	set_error('Please make sure you re-enter the password for the Administrator account','admin_repassword');
369
} else {
370
	$admin_repassword = $_POST['admin_repassword'];
371
}
372
if($admin_password != $admin_repassword) {
373
	set_error('Sorry, the two Administrator account passwords you entered do not match','admin_repassword');
374
}
375
// End admin user details code
376

    
377
// Try and write settings to config file
378
$sConfigContent = 
379
 ";<?php die('sorry, illegal file access'); ?>#####\n"
380
.";################################################\n"
381
."; WebsiteBaker configuration file\n"
382
."; auto generated ".date('Y-m-d h:i:s A e ')."\n"
383
.";################################################\n"
384
."[Constants]\n"
385
."DEBUG   = false\n"
386
."AppUrl  = \"".$wb_url."\"\n"
387
."AcpDir  = \"admin/\"\n"
388
.";##########\n"
389
."[DataBase]\n"
390
."type    = \"mysql\"\n"
391
."user    = \"".$database_username."\"\n"
392
."pass    = \"".$database_password."\"\n"
393
."host    = \"".$database_host."\"\n"
394
."port    = \"3306\"\n"
395
."name    = \"".$database_name."\"\n"
396
."charset = \"utf8\"\n"
397
."table_prefix = \"".$table_prefix."\"\n"
398
.";\n"
399
.";################################################\n";
400
$sConfigFile = realpath('../setup.ini.php');
401
$sConfigName = basename($sConfigFile);
402
// Check if the file exists and is writable first.
403
if(file_exists($sConfigFile) && is_writable($sConfigFile)) {
404
	if(!$handle = fopen($sConfigFile, 'w')) {
405
		set_error("Cannot open the configuration file ($sConfigName)");
406
	} else {
407
		if (fwrite($handle, $sConfigContent) === FALSE) {
408
			set_error("Cannot write to the configuration file ($sConfigName)");
409
		}
410
		// Close file
411
		fclose($handle);
412
	}
413
} else {
414
	set_error("The configuration file $sConfigName is not writable. Change its permissions so it is, then re-run step 4.");
415
}
416

    
417
//_SetInstallPathConstants();
418
if(!defined('WB_INSTALL_PROCESS')){ define('WB_INSTALL_PROCESS', true ); }
419
if(!defined('WB_URL')){ define('WB_URL', trim( $wb_url,'/' )); }
420
if(!defined('WB_PATH')){ define('WB_PATH', dirname(dirname(__FILE__))); }
421
if(!defined('ADMIN_URL')){ define('ADMIN_URL', WB_URL.'/admin'); }
422
if(!defined('ADMIN_PATH')){ define('ADMIN_PATH', WB_PATH.'/admin'); }
423
// load db configuration ---
424
$sDbConnectType = 'url'; // depending from class WbDatabase it can be 'url' or 'dsn'
425
$aSqlData = _readConfiguration($sDbConnectType);
426

    
427
if(!file_exists(WB_PATH.'/framework/class.admin.php')) {
428
	set_error('It appears the Absolute path that you entered is incorrect');
429
}
430

    
431
$database = WbDatabase::getInstance();
432
try{
433
	if($sDbConnectType == 'dsn') {
434
		$bTmp = @$database->doConnect($aSqlData[0], $aSqlData[1]['user'], $aSqlData[1]['pass'], $aSqlData[2]);
435
	}else {
436
		$bTmp = @$database->doConnect($aSqlData[0], TABLE_PREFIX);
437
	}
438
} catch (WbDatabaseException $e) {
439
	if(!file_put_contents($sConfigFile,"<?php\n")) {
440
		set_error("Cannot write to the configuration file ($sSetupFile)");
441
	}
442
	set_error($e->getMessage()); 
443
}
444

    
445
unset($aSqlData);
446
// write the config.php
447
$sConfigContent = "<?php\n"
448
    ."/* this file is for backward compatibility only */\n"
449
    ."/* never put any code in this file! */\n"
450
    ."include_once(dirname(__FILE__).'/framework/initialize.php');\n";
451
$sSetupFile = WB_PATH.'/config.php';
452
if(!file_put_contents($sSetupFile,$sConfigContent)) {
453
	set_error("Cannot write to the configuration file ($sSetupFile)");
454
}
455
$sSecMod = (defined('SECURE_FORM_MODULE') && SECURE_FORM_MODULE != '') ? '.'.SECURE_FORM_MODULE : '';
456
$sSecMod = WB_PATH.'/framework/SecureForm'.$sSecMod.'.php';
457
require_once($sSecMod);
458
require_once(WB_PATH.'/framework/class.admin.php');
459

    
460
// Dummy class to allow modules' install scripts to call $admin->print_error
461
	class admin_dummy extends admin
462
	{
463
		var $error='';
464
		function print_error($message, $link = 'index.php', $auto_footer = true)
465
		{
466
			$this->error=$message;
467
		}
468
	}
469

    
470
//  core tables only structure
471
	$sSqlFileName = dirname(__FILE__).'/sql/websitebaker.sql';
472
	if(!$database->SqlImport($sSqlFileName,TABLE_PREFIX, false)) { set_error($database->get_error()); }
473

    
474
	require(ADMIN_PATH.'/interface/version.php');
475

    
476
	$sql = 'INSERT INTO `'.TABLE_PREFIX.'settings` (`name`, `value`) VALUES '
477
	     . '(\'wb_version\', \''.VERSION.'\'), '
478
	     . '(\'website_title\', \''.$website_title.'\'), '
479
	     . '(\'website_description\', \'\'), '
480
	     . '(\'website_keywords\', \'\'), '
481
	     . '(\'website_header\', \'\'), '
482
	     . '(\'website_footer\', \'\'), '
483
	     . '(\'wysiwyg_style\', \'font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px;\'), '
484
	     . '(\'er_level\', \'0\'), '
485
	     . '(\'default_language\', \''.$default_language.'\'), '
486
	     . '(\'app_name\', \'wb_'.$session_rand.'\'), '
487
	     . '(\'sec_anchor\', \'Sec\'), '
488
	     . '(\'server_timezone\', \'UTC\'), '
489
	     . '(\'default_timezone\', \''.$default_timezone.'\'), '
490
	     . '(\'default_date_format\', \'Y-m-d\'), '
491
	     . '(\'default_time_format\', \'h:i A\'), '
492
	     . '(\'redirect_timer\', \'1500\'), '
493
	     . '(\'home_folders\', \'false\'), '
494
	     . '(\'warn_page_leave\', \'1\'), '
495
	     . '(\'default_template\', \'round\'), '
496
	     . '(\'default_theme\', \'wb_theme\'), '
497
	     . '(\'default_charset\', \'utf-8\'), '
498
	     . '(\'multiple_menus\', \'true\'), '
499
	     . '(\'page_level_limit\', \'6\'), '
500
	     . '(\'intro_page\', \'false\'), '
501
	     . '(\'page_trash\', \'inline\'), '
502
	     . '(\'homepage_redirection\', \'false\'), '
503
	     . '(\'page_languages\', \'false\'), '
504
	     . '(\'wysiwyg_editor\', \'fckeditor\'), '
505
	     . '(\'manage_sections\', \'true\'), '
506
	     . '(\'section_blocks\', \'false\'), '
507
	     . '(\'smart_login\', \'false\'), '
508
	     . '(\'frontend_login\', \'false\'), '
509
	     . '(\'frontend_signup\', \'false\'), '
510
	     . '(\'search\', \'public\'), '
511
	     . '(\'page_extension\', \'.php\'), '
512
	     . '(\'page_spacer\', \'-\'), '
513
	     . '(\'pages_directory\', \'/pages\'), '
514
	     . '(\'rename_files_on_upload\', \'ph.*?,cgi,pl,pm,exe,com,bat,pif,cmd,src,asp,aspx,js,txt\'), '
515
	     . '(\'media_directory\', \'/media\'), '
516
	     . '(\'operating_system\', \''.$operating_system.'\'), '
517
	     . '(\'string_file_mode\', \''.$file_mode.'\'), '
518
	     . '(\'string_dir_mode\', \''.$dir_mode.'\'), '
519
	     . '(\'wbmailer_routine\', \'phpmail\'), '
520
	     . '(\'server_email\', \''.$admin_email.'\'), '
521
	     . '(\'wbmailer_default_sendername\', \'WebsiteBaker Mailer\'), '
522
	     . '(\'wbmailer_smtp_host\', \'\'), '
523
	     . '(\'wbmailer_smtp_auth\', \'\'), '
524
	     . '(\'wbmailer_smtp_username\', \'\'), '
525
	     . '(\'wbmailer_smtp_password\', \'\'), '
526
	     . '(\'fingerprint_with_ip_octets\', \'2\'), '
527
	     . '(\'secure_form_module\', \'\'), '
528
	     . '(\'mediasettings\', \'\'), '
529
	     . '(\'wb_revision\', \''.REVISION.'\'), '
530
 	     . '(\'wb_sp\', \''.SP.'\'), '
531
	     . '(\'page_icon_dir\', \'/templates/*/title_images\'), '
532
	     . '(\'dev_infos\', \'false\'), '
533
	     . '(\'groups_updated\', \''.time().'\'), '
534
	     . '(\'wbmail_signature\', \'\'), '
535
	     . '(\'confirmed_registration\', \'1\'), '
536
	     . '(\'page_extendet\', \'true\'), '
537
	     . '(\'system_locked\', \'0\'), '
538
	     . '(\'password_crypt_loops\', \'12\'), '
539
	     . '(\'password_hash_type\', \'false\'), '
540
	     . '(\'password_length\', \'10\'), '
541
		 . '(\'password_use_types\', \''.(int)0xFFFF.'\') '
542
	     . '';
543
	if(!$database->query($sql)) { set_error($database->get_error()); }
544

    
545
	// Admin group
546
	$full_system_permissions  = 'access,addons,admintools,admintools_view,groups,groups_add,groups_delete,'
547
	                          . 'groups_modify,groups_view,languages,languages_install,languages_uninstall,'
548
	                          . 'languages_view,media,media_create,media_delete,media_rename,media_upload,'
549
	                          . 'media_view,modules,modules_advanced,modules_install,modules_uninstall,'
550
	                          . 'modules_view,pages,pages_add,pages_add_l0,pages_delete,pages_intro,'
551
	                          . 'pages_modify,pages_settings,pages_view,preferences,preferences_view,'
552
	                          . 'settings,settings_advanced,settings_basic,settings_view,templates,'
553
	                          . 'templates_install,templates_uninstall,templates_view,users,users_add,'
554
	                          . 'users_delete,users_modify,users_view';
555
	$sql = 'INSERT INTO `'.TABLE_PREFIX.'groups` '
556
	     . 'SET `group_id` =1,'
557
	     .     '`name`=\'Administrators\','
558
		 .     '`system_permissions`=\''.$full_system_permissions.'\','
559
		 .     '`module_permissions`=\'\','
560
		 .     '`template_permissions`=\'\'';
561
	if(!$database->query($sql)) { set_error($database->get_error()); }
562

    
563
// Admin user
564
	$insert_admin_user = "INSERT INTO `".TABLE_PREFIX."users` VALUES (1, 1, '1', 1, '$admin_username', '".md5($admin_password)."', '', 0, '', 0, 'Administrator', '$admin_email', $default_timezone, '', '', '$default_language', '', 0, '');";
565
	if(!$database->query($insert_admin_user)) { set_error($database->get_error()); }
566

    
567
// Search layout default data
568
	$sSqlFileName = dirname(__FILE__).'/sql/wb_search_data.sql';
569
	if(!$database->SqlImport($sSqlFileName,TABLE_PREFIX, false)) { set_error($database->get_error()); }
570

    
571
	require_once(WB_PATH.'/framework/initialize.php');
572
// 
573
// Include WB functions file
574
	require_once(WB_PATH.'/framework/functions.php');
575
// Re-connect to the database, this time using in-build database class
576
	require_once(WB_PATH.'/framework/class.login.php');
577
	// Include the PclZip class file (thanks to
578
	require_once(WB_PATH.'/include/pclzip/pclzip.lib.php');
579
	// Install add-ons
580
	if(file_exists(WB_PATH.'/install/modules')) {
581
		// Unpack pre-packaged modules
582
	}
583
	if(file_exists(WB_PATH.'/install/templates')) {
584
		// Unpack pre-packaged templates
585
	}
586
	if(file_exists(WB_PATH.'/install/languages')) {
587
		// Unpack pre-packaged languages
588
	}
589

    
590
	$admin=new admin_dummy('Start','',false,false);
591
	// Load addons into DB
592
	$dirs['modules'] = WB_PATH.'/modules/';
593
	$dirs['templates'] = WB_PATH.'/templates/';
594
	$dirs['languages'] = WB_PATH.'/languages/';
595

    
596
	foreach($dirs AS $type => $dir) {
597
		if(($handle = opendir($dir))) {
598
			while(false !== ($file = readdir($handle))) {
599
				if($file != '' AND substr($file, 0, 1) != '.' AND $file != 'admin.php' AND $file != 'index.php') {
600
					// Get addon type
601
					if($type == 'modules') {
602
						load_module($dir.'/'.$file, true);
603
						// Pretty ugly hack to let modules run $admin->set_error
604
						// See dummy class definition admin_dummy above
605
						if ($admin->error!='') {
606
							set_error($admin->error);
607
						}
608
					} elseif($type == 'templates') {
609
						load_template($dir.'/'.$file);
610
					} elseif($type == 'languages') {
611
						load_language($dir.'/'.$file);
612
					}
613
				}
614
			}
615
			closedir($handle);
616
		}
617
	}
618

    
619
// Check if there was a database error
620
	if($database->is_error()) {
621
		set_error($database->get_error());
622
	}
623

    
624
	if ( sizeof(createFolderProtectFile( WB_PATH.MEDIA_DIRECTORY )) ) {  }
625
	if ( sizeof(createFolderProtectFile( WB_PATH.MEDIA_DIRECTORY.'/home' )) ) {  }
626
	if ( sizeof(createFolderProtectFile( WB_PATH.PAGES_DIRECTORY )) ) {  }
627

    
628
// end of if install_tables
629

    
630
$ThemeUrl = WB_URL.$admin->correct_theme_source('warning.html');
631
// Setup template object, parse vars to it, then parse it
632
$ThemePath = realpath(WB_PATH.$admin->correct_theme_source('loginBox.htt'));
633

    
634
// Log the user in and go to Website Baker Administration
635
$thisApp = new Login(
636
	array(
637
			"MAX_ATTEMPS" => "50",
638
			"WARNING_URL" => $ThemeUrl."/warning.html",
639
			"USERNAME_FIELDNAME" => 'admin_username',
640
			"PASSWORD_FIELDNAME" => 'admin_password',
641
			"REMEMBER_ME_OPTION" => SMART_LOGIN,
642
			"MIN_USERNAME_LEN" => "2",
643
			"MIN_PASSWORD_LEN" => "3",
644
			"MAX_USERNAME_LEN" => "30",
645
			"MAX_PASSWORD_LEN" => "30",
646
			'LOGIN_URL' => ADMIN_URL."/login/index.php",
647
			'DEFAULT_URL' => ADMIN_URL."/start/index.php",
648
			'TEMPLATE_DIR' => $ThemePath,
649
			'TEMPLATE_FILE' => 'loginBox.htt',
650
			'FRONTEND' => false,
651
			'FORGOTTEN_DETAILS_APP' => ADMIN_URL."/login/forgot/index.php",
652
			'USERS_TABLE' => TABLE_PREFIX."users",
653
			'GROUPS_TABLE' => TABLE_PREFIX."groups",
654
	)
655
);
(4-4/5)