<?php
+/**********************************************************************
+ This installer is based on code from the
+ Website Baker Project <http://www.websitebaker.org/>
+ Copyright (C) 2004-2007, Ryan Djurovich.
+ The code is released under GPLv3
+ modified by FrontAcounting, LLC.
+***********************************************************************/
error_reporting(E_ALL);
ini_set("display_errors", "On");
-ini_set("max_execution_time", "120");
+ini_set("max_execution_time", "180");
// Start a session
if(!defined('SESSION_STARTED'))
define('SESSION_STARTED', true);
}
-// Function to set error
-function set_error($message)
+if (!function_exists("_")) {
+ function _($msg) {
+ return $msg;
+ }
+}
+// Installer version of display_error function.
+//
+function display_error($message)
{
- global $_POST;
+ global $_POST, $path_to_root;
+
if(isset($message) AND $message != '')
{
// Copy values entered into session so user doesn't have to re-enter everything
if(isset($_POST['company_name']))
{
$_SESSION['ba_url'] = $_POST['ba_url'];
- if(!isset($_POST['operating_system']))
- {
- $_SESSION['operating_system'] = 'linux';
- }
- else
- {
- $_SESSION['operating_system'] = $_POST['operating_system'];
- }
- if(!isset($_POST['world_writeable']))
- {
- $_SESSION['world_writeable'] = false;
- }
- else
- {
- $_SESSION['world_writeable'] = true;
- }
+ $_SESSION['operating_system'] = isset($_POST['operating_system']);
+ $_SESSION['world_writeable'] = isset($_POST['world_writeable']);
$_SESSION['database_host'] = $_POST['database_host'];
$_SESSION['database_username'] = $_POST['database_username'];
$_SESSION['database_password'] = $_POST['database_password'];
$_SESSION['database_name'] = $_POST['database_name'];
- $_SESSION['table_prefix'] = $_POST['table_prefix'];
- if(!isset($_POST['install_tables']))
- {
- $_SESSION['install_tables'] = false;
- }
- else
- {
- $_SESSION['install_tables'] = true;
- }
+ $_SESSION['demo_data'] = isset($_POST['demo_data']);
+ $_SESSION['table_prefix'] = isset($_POST['table_prefix']);
+ $_SESSION['install_tables'] = isset($_POST['install_tables']);
$_SESSION['company_name'] = $_POST['company_name'];
$_SESSION['admin_email'] = $_POST['admin_email'];
$_SESSION['admin_password'] = $_POST['admin_password'];
// Specify that session support is enabled
$_SESSION['session_support'] = '<font class="good">Enabled</font>';
// Redirect to first page again and exit
+ @unlink($path_to_root."/config.php"); // remove just created config file
header('Location: index.php?sessions_checked=true');
exit();
}
// Set error if no post vars found
if (!isset($_POST['company_name']))
{
- set_error('Please fill-in the form below');
+ display_error('Please fill-in the form below');
}
// End check to see if form was even submitted
// Check if user has entered the installation url
if (!isset($_POST['ba_url']) || $_POST['ba_url'] == '')
{
- set_error('Please enter an absolute URL');
+ display_error('Please enter an absolute URL');
}
else
{
// Get operating system
if (!isset($_POST['operating_system']) || $_POST['operating_system'] != 'linux' && $_POST['operating_system'] != 'windows')
{
- set_error('Please select a valid operating system');
+ display_error('Please select a valid operating system');
}
else
{
// Check if user has entered a database host
if (!isset($_POST['database_host']) || $_POST['database_host'] == '')
{
- set_error('Please enter a database host name');
+ display_error('Please enter a database host name');
}
else
{
// Check if user has entered a database username
if (!isset($_POST['database_username']) || $_POST['database_username'] == '')
{
- set_error('Please enter a database username');
+ display_error('Please enter a database username');
}
else
{
// Check if user has entered a database password
if (!isset($_POST['database_password']))
{
- set_error('Please enter a database password');
+ display_error('Please enter a database password');
}
else
{
// Check if user has entered a database name
if (!isset($_POST['database_name']) || $_POST['database_name'] == '')
{
- set_error('Please enter a database name');
+ display_error('Please enter a database name');
}
else
{
$database_name = $_POST['database_name'];
}
// Get table prefix
-$table_prefix = $_POST['table_prefix'];
+if (isset($_POST['table_prefix']) && $_POST['table_prefix'] == 'true')
+ $table_prefix = "0_";
+else
+ $table_prefix = "";
+
// Find out if the user wants to install tables and data
if (isset($_POST['install_tables']) && $_POST['install_tables'] == 'true')
{
// Get company name
if (!isset($_POST['company_name']) || $_POST['company_name'] == '')
{
- set_error('Please enter a company name');
+ display_error('Please enter a company name');
}
else
{
// End website company name
// Check if the user has entered a correct path
-if (!file_exists($path_to_root.'/sql/en_US-demo.sql'))
+if (!file_exists($path_to_root.'/sql/en_US-'.(isset($_POST['demo_data']) ? 'demo':'new').'.sql'))
{
- set_error('It appears the Absolute path that you entered is incorrect');
+ display_error('It appears the Absolute path that you entered is incorrect');
}
// Get admin email and validate it
if (!isset($_POST['admin_email']) || $_POST['admin_email'] == '')
{
- set_error('Please enter an email for the Administrator account');
+ display_error('Please enter an email for the Administrator account');
}
else
{
- if (eregi("^([0-9a-zA-Z]+[-._+&])*[0-9a-zA-Z]+@([-0-9a-zA-Z]+[.])+[a-zA-Z]{2,6}$", $_POST['admin_email']))
+ if (preg_match("/^([0-9a-zA-Z]+[-._+&])*[0-9a-zA-Z]+@([-0-9a-zA-Z]+[.])+[a-zA-Z]{2,6}$/i", $_POST['admin_email']))
{
$admin_email = $_POST['admin_email'];
}
else
{
- set_error('Please enter a valid email address for the Administrator account');
+ display_error('Please enter a valid email address for the Administrator account');
}
}
// Get the two admin passwords entered, and check that they match
if (!isset($_POST['admin_password']) || $_POST['admin_password'] == '')
{
- set_error('Please enter a password for the Administrator account');
+ display_error('Please enter a password for the Administrator account');
}
else
{
}
if (!isset($_POST['admin_repassword']) || $_POST['admin_repassword'] == '')
{
- set_error('Please make sure you re-enter the password for the Administrator account');
+ display_error('Please make sure you re-enter the password for the Administrator account');
}
else
{
}
if ($admin_password != $admin_repassword)
{
- set_error('Sorry, the two Administrator account passwords you entered do not match');
+ display_error('Sorry, the two Administrator account passwords you entered do not match');
}
// End admin user details code
+copy($path_to_root. "/config.default.php", $path_to_root. "/config.php");
+
include_once($path_to_root . "/includes/db/connect_db.inc");
include_once($path_to_root . "/admin/db/maintenance_db.inc");
-include_once($path_to_root . "/config_db.php");
+
+if (!file_exists($path_to_root . "/installed_extensions.php")) {
+ $next_extension_id = 1;
+ write_extensions(array());
+ write_extensions(array(),0);
+}
+if (!file_exists($path_to_root . "/lang/installed_languages.inc")) {
+ $installed_languages = array (
+ 0 => array ('code' => 'en_GB', 'name' => 'English', 'encoding' => 'iso-8859-1'));
+ $dflt_lang = 'en_GB';
+ write_lang();
+}
+
+if (file_exists($path_to_root . "/config_db.php"))
+ include_once($path_to_root . "/config_db.php");
+ else
+{
+ $def_coy = 0;
+ $tb_pref_counter = 0;
+ $db_connections = array ();
+}
$id = count($db_connections);
if ($table_prefix != "" && $id > 0)
$config_filename = $path_to_root . '/config_db.php';
-$err = write_config_db($table_prefix != "");
-if ($err == -1)
- set_error("Cannot open the configuration file ($config_filename)");
-else if ($err == -2)
- set_error("Cannot write to the configuration file ($config_filename)");
-else if ($err == -3)
- set_error("The configuration file $config_filename is not writable. Change its permissions so it is, then re-run step 4.");
-
// Try connecting to database
$db = mysql_connect($database_host, $database_username, $database_password);
if (!$db)
{
- set_error('Database host name, username and/or password incorrect. MySQL Error:<br />'.mysql_error());
-}
-
-if($install_tables == true)
-{
- if (!mysql_select_db($database_name, $db))
- {
-
- // Try to create the database
- mysql_query('CREATE DATABASE '.$database_name);
- mysql_select_db($database_name, $db);
+ display_error('Database host name, username and/or password incorrect. MySQL Error:<br />'.mysql_error());
+} else {
+ $result = true;
+ if($install_tables == true)
+ {
+ if (!mysql_select_db($database_name, $db))
+ {
+ // Try to create the database
+ if (!($result = mysql_query('CREATE DATABASE '.$database_name))) {
+ display_error(_("Cannot create database").
+ " '$database_name'");
+ } else
+ $result = mysql_select_db($database_name, $db);
+ }
+ if($result) {
+ $import_filename = $path_to_root.'/sql/en_US-'.(isset($_POST['demo_data']) ? 'demo':'new').'.sql';
+ db_import($import_filename, $db_connections[$id]);
+ }
+ }
+ else
+ {
+ $result = mysql_select_db($database_name, $db);
+ }
+ if ($result) {
+ $sql = "UPDATE ".$table_prefix."users SET password = '" . md5($admin_password) . "', email = ".db_escape($admin_email)." WHERE user_id = 'admin'";
+ db_query($sql, "could not update admin account");
+ $sql = "UPDATE ".$table_prefix."company SET coy_name = ".db_escape($company_name)." WHERE coy_code = 1";
+ db_query($sql, "could not update company name. Do it manually later in Setup");
+
+ $err = write_config_db($table_prefix != "");
+ if ($err == -1)
+ display_error("Cannot open the configuration file ($config_filename)");
+ else if ($err == -2)
+ display_error("Cannot write to the configuration file ($config_filename)");
+ else if ($err == -3)
+ display_error("The configuration file $config_filename is not writable. Change its permissions so it is, then re-run step 4.");
}
- $import_filename = $path_to_root."/sql/en_US-demo.sql";
- if (!db_import($import_filename, $db_connections[$id]))
- set_error("Import error, try to import $import_filename manually via phpMyAdmin");
-}
-else
-{
- mysql_select_db($database_name, $db);
}
-$sql = "UPDATE ".$table_prefix."users SET password = '" . md5($admin_password) . "', email = ".db_escape($admin_email)." WHERE user_id = 'admin'";
-db_query($sql, "could not update admin account");
-$sql = "UPDATE ".$table_prefix."company SET coy_name = ".db_escape($company_name)." WHERE coy_code = 1";
-db_query($sql, "could not update company name. Do it manually later in Setup");
session_unset();
+session_regenerate_id();
session_destroy();
$_SESSION = array();