update.php | searchcode

/update.php

http://github.com/symphonycms/symphony-2
PHP | 553 lines | 404 code | 118 blank | 31 comment | 47 complexity | 0f4ec1cfb467d8ce0ccede392ae80b69 MD5 | raw file

<?php

	error_reporting(E_ALL ^ E_NOTICE);

	function __errorHandler($errno=NULL, $errstr, $errfile=NULL, $errline=NULL, $errcontext=NULL){
		return;
	}

	function tableContainsField($table, $field){
		$sql = "DESC `{$table}` `{$field}`";
		$results = Frontend::instance()->Database->fetch($sql);

		return (is_array($results) && !empty($results));
	}

	function writeConfig($dest, $conf, $mode){

		$string  = "<?php\n";

		$string .= "\n\t\$settings = array(";
		foreach($conf as $group => $data){
			$string .= "\r\n\r\n\r\n\t\t###### ".strtoupper($group)." ######";
			$string .= "\r\n\t\t'$group' => array(";
			foreach($data as $key => $value){
				$string .= "\r\n\t\t\t'$key' => ".(strlen($value) > 0 ? "'".addslashes($value)."'" : 'NULL').",";
			}
			$string .= "\r\n\t\t),";
			$string .= "\r\n\t\t########";
		}
		$string .= "\r\n\t);\n\n";

		return General::writeFile($dest . '/config.php', $string, $mode);

	}

	function loadOldStyleConfig(){
		$config = preg_replace(array('/^<\?php/i', '/\?>$/i', '/if\(\!defined\([^\r\n]+/i', '/require_once[^\r\n]+/i'), NULL, file_get_contents('manifest/config.php'));

		if(@eval($config) === false){
			throw new Exception('Failed to load existing config');
		}

		return $settings;
	}

	function render($output){
		header('Expires: Mon, 12 Dec 1982 06:14:00 GMT');
		header('Last-Modified: ' . gmdate('D, d M Y H:i:s') . ' GMT');
		header('Cache-Control: no-cache, must-revalidate, max-age=0');
		header('Pragma: no-cache');
		header(sprintf('Content-Length: %d', strlen($output)));

		echo $output;
		exit;
	}

	define('DOCROOT', rtrim(dirname(__FILE__), '/'));
	define('DOMAIN', rtrim(rtrim($_SERVER['HTTP_HOST'], '/') . dirname($_SERVER['PHP_SELF']), '/'));

	require_once(DOCROOT . '/symphony/lib/boot/bundle.php');
	require_once(TOOLKIT . '/class.general.php');

	set_error_handler('__errorHandler');

	define('kVERSION', '2.2.5');
	define('kCHANGELOG', 'http://symphony-cms.com/download/releases/version/2.2.5/');
	define('kINSTALL_ASSET_LOCATION', './symphony/assets/installer');
	define('kINSTALL_FILENAME', basename(__FILE__));

		$shell = '<?xml version="1.0" encoding="utf-8"?>
	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
	<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en">
	<head>
	<title>Update Existing Installation</title>
	<link rel="stylesheet" type="text/css" href="'.kINSTALL_ASSET_LOCATION.'/main.css"/>
	</head>
	<body>
		<form action="" method="post">
	%s
		</form>
	</body>
	</html>';

	if(isset($_GET['action']) && $_GET['action'] == 'remove'){

		if(is_writable(__FILE__)){
			unlink(__FILE__);
			redirect(URL . '/symphony/');
		}

		render(sprintf($shell,
			'<h1>Update Symphony <em>Version '.kVERSION.'</em><em><a href="'.kCHANGELOG.'">change log</a></em></h1>
			<h2>Deletion Failed!</h2>
			<p>Symphony was unable to delete your <code>update.php</code> file. For security reasons, please be sure to delete the file before proceeding.</p>
			<br />
			<p>To continue to the Symphony admin, please <a href="'.URL.'/symphony/">click here</a>.</p>'
		));

	}

	$settings = loadOldStyleConfig();
	$existing_version = $settings['symphony']['version'];

	if(isset($_POST['action']['update'])){

		$settings['symphony']['version'] = kVERSION;
		$settings['general']['useragent'] = 'Symphony/' . kVERSION;

		## Build is no longer used
		unset($settings['symphony']['build']);

		## Remove the old Maintenance Mode setting
		unset($settings['public']['maintenance_mode']);

		## Set the default language
		if(!isset($settings['symphony']['lang'])){
			$settings['symphony']['lang'] = 'en';
		}

		if(writeConfig(DOCROOT . '/manifest', $settings, $settings['file']['write_mode']) === true){

			// build a Frontend page instance to initialise database
			require_once(CORE . '/class.frontend.php');
			$frontend = Frontend::instance();

			if (version_compare($existing_version, '2.0.3', '<=')) {

				// Add Navigation Groups
				if(!tableContainsField('tbl_sections', 'navigation_group')){
					$frontend->Database->query("ALTER TABLE `tbl_sections` ADD `navigation_group` VARCHAR( 50 ) NOT NULL DEFAULT 'Content'");
					$frontend->Database->query("ALTER TABLE `tbl_sections` ADD INDEX (`navigation_group`)");
				}

				// Added support for upload field to handle empty mimetypes.
				$upload_fields = $frontend->Database->fetch("SELECT id FROM tbl_fields WHERE `type` = 'upload'");
				foreach ($upload_fields as $upload_field) {
					$frontend->Database->query("ALTER TABLE `tbl_entries_data_{$upload_field['id']}` CHANGE `mimetype` `mimetype` VARCHAR( 50 ) CHARACTER SET utf8 COLLATE utf8_unicode_ci NULL DEFAULT NULL");
				}
			}

			if (version_compare($existing_version, '2.0.4', '<=')) {
				$date_fields = $frontend->Database->fetch("SELECT id FROM tbl_fields WHERE `type` = 'date'");

				foreach ($date_fields as $field) {
					$frontend->Database->query("ALTER TABLE `tbl_entries_data_{$field['id']}` CHANGE `local` `local` INT(11) DEFAULT NULL;");
					$frontend->Database->query("ALTER TABLE `tbl_entries_data_{$field['id']}` CHANGE `gmt` `gmt` INT(11) DEFAULT NULL;");
				}

				// Update author field table to support the default value checkbox
				if(!tableContainsField('tbl_fields_author', 'default_to_current_user')){
					$frontend->Database->query("ALTER TABLE `tbl_fields_author` ADD `default_to_current_user` ENUM('yes', 'no') NOT NULL");
				}

				## Change .htaccess from `page` to `symphony-page`
				$htaccess = @file_get_contents(DOCROOT . '/.htaccess');

				if($htaccess !== false){
					$htaccess = str_replace('index.php?page=$1&%{QUERY_STRING}', 'index.php?symphony-page=$1&%{QUERY_STRING}', $htaccess);
					@file_put_contents(DOCROOT . '/.htaccess', $htaccess);
				}

			}


			if (version_compare($existing_version, '2.0.5', '<=')) {
				## Rebuild the .htaccess here

				$rewrite_base = trim(dirname($_SERVER['PHP_SELF']), DIRECTORY_SEPARATOR);

				if(strlen($rewrite_base) > 0){
					$rewrite_base .= '/';
				}

				$htaccess = '
### Symphony 2.2.x ###
Options +FollowSymlinks -Indexes

<IfModule mod_rewrite.c>

	RewriteEngine on
	RewriteBase /'.$rewrite_base.'

	### SECURITY - Protect crucial files
	RewriteRule ^manifest/(.*)$ - [F]
	RewriteRule ^workspace/utilities/(.*).xsl$ - [F]
	RewriteRule ^workspace/pages/(.*).xsl$ - [F]
	RewriteRule ^(.*).sql$ - [F]

	### DO NOT APPLY RULES WHEN REQUESTING "favicon.ico"
	RewriteCond %{REQUEST_FILENAME} favicon.ico [NC]
	RewriteRule .* - [S=14]

	### IMAGE RULES
	RewriteRule ^image\/(.+\.(jpg|gif|jpeg|png|bmp))$ extensions/jit_image_manipulation/lib/image.php?param=$1 [L,NC]

	### CHECK FOR TRAILING SLASH - Will ignore files
	RewriteCond %{REQUEST_FILENAME} !-f
	RewriteCond %{REQUEST_URI} !/$
	RewriteCond %{REQUEST_URI} !(.*)/$
	RewriteRule ^(.*)$ $1/ [L,R=301]

	### URL Correction
	RewriteRule ^(symphony/)?index.php(/.*/?) $1$2 [NC]

	### ADMIN REWRITE
	RewriteRule ^symphony\/?$ index.php?mode=administration&%{QUERY_STRING} [NC,L]

	RewriteCond %{REQUEST_FILENAME} !-d
	RewriteCond %{REQUEST_FILENAME} !-f
	RewriteRule ^symphony(\/(.*\/?))?$ index.php?symphony-page=$1&mode=administration&%{QUERY_STRING}	[NC,L]

	### FRONTEND REWRITE - Will ignore files and folders
	RewriteCond %{REQUEST_FILENAME} !-d
	RewriteCond %{REQUEST_FILENAME} !-f
	RewriteRule ^(.*\/?)$ index.php?symphony-page=$1&%{QUERY_STRING}	[L]

</IfModule>
######
';

				@file_put_contents(DOCROOT . '/.htaccess', $htaccess);

				// No longer need symphony/.htaccess
				if(file_exists(DOCROOT . '/symphony/.htaccess') && is_writable(DOCROOT . '/symphony/.htaccess')){
					unlink(DOCROOT . '/symphony/.htaccess');
				}

			}

			if(version_compare($existing_version, '2.0.6', '<=')){
				$frontend->Database->query('ALTER TABLE `tbl_extensions` CHANGE `version` `version` VARCHAR(20) NOT NULL');
			}

			if(version_compare($existing_version, '2.0.7RC1', '<=')){
				$frontend->Database->query('ALTER TABLE `tbl_authors` ADD `language` VARCHAR(15) NULL DEFAULT NULL');

				$settings['symphony']['pages_table_nest_children'] = 'no';
				writeConfig(DOCROOT . '/manifest', $settings, $settings['file']['write_mode']);
			}

			if(version_compare($existing_version, '2.0.8RC1', '<')){
				$frontend->Database->query('ALTER TABLE `tbl_fields_date` DROP `calendar`');
			}

			if(version_compare($existing_version, '2.0.8RC3', '<=')){
				## Add -Indexes to .htaccess
				$htaccess = @file_get_contents(DOCROOT . '/.htaccess');

				if($htaccess !== false && !preg_match('/-Indexes/', $htaccess)){
					$htaccess = str_replace('Options +FollowSymlinks', 'Options +FollowSymlinks -Indexes', $htaccess);
					@file_put_contents(DOCROOT . '/.htaccess', $htaccess);
				}

				## 2.1 uses SHA1 instead of MD5
				// Change the author table to allow 40 character values
				$frontend->Database->query(
					"ALTER TABLE `tbl_authors` CHANGE `password` `password` VARCHAR(40) CHARACTER SET utf8 COLLATE utf8_unicode_ci NOT NULL"
				);

				// Generate a new password for the primary author account
				$new_password = General::generatePassword();
				$username = $frontend->Database->fetchVar('username', 0,
					"SELECT `username` FROM `tbl_authors` WHERE `primary` = 'yes' LIMIT 1"
				);

				$frontend->Database->query(
					sprintf("UPDATE `tbl_authors` SET `password` = SHA1('%s') WHERE `primary` = 'yes' LIMIT 1", $new_password)
				);

				// Purge all sessions, forcing everyone to update their passwords
				$frontend->Database->query( "TRUNCATE TABLE `tbl_sessions`");

				// Update Upload field
				$upload_entry_tables = $frontend->Database->fetchCol("field_id", "SELECT `field_id` FROM `tbl_fields_upload`");

				if(is_array($upload_entry_tables) && !empty($upload_entry_tables)) foreach($upload_entry_tables as $field) {
					$frontend->Database->query(sprintf(
							"ALTER TABLE `tbl_entries_data_%d` CHANGE `size` `size` INT(11) UNSIGNED NULL DEFAULT NULL",
							$field
					));
				}
			}

			if(version_compare($existing_version, '2.1.0', '<=')){
				$frontend->Database->query(
					'ALTER TABLE  `tbl_fields_input` CHANGE  `validator`  `validator` VARCHAR( 255 ) CHARACTER SET utf8 COLLATE utf8_unicode_ci NULL DEFAULT NULL;'
				);

				$frontend->Database->query(
					'ALTER TABLE  `tbl_fields_upload` CHANGE  `validator`  `validator` VARCHAR( 255 ) CHARACTER SET utf8 COLLATE utf8_unicode_ci NULL DEFAULT NULL;'
				);

				$frontend->Database->query(
					'ALTER TABLE  `tbl_fields_taglist` CHANGE  `validator`  `validator` VARCHAR( 255 ) CHARACTER SET utf8 COLLATE utf8_unicode_ci NULL DEFAULT NULL;'
				);
			}

			if(version_compare($existing_version, '2.2.0dev', '<=')){

				if(tableContainsField('tbl_sections_association', 'cascading_deletion')) {
					$frontend->Database->query(
						'ALTER TABLE `tbl_sections_association` CHANGE  `cascading_deletion` `hide_association` enum("yes","no") COLLATE utf8_unicode_ci NOT NULL DEFAULT "no";'
					);

					// Update Select table to include the new association field
					$frontend->Database->query('ALTER TABLE `tbl_fields_select` ADD `show_association` ENUM( "yes", "no" ) COLLATE utf8_unicode_ci NOT NULL DEFAULT "yes"');
				}

				if(tableContainsField('tbl_authors', 'default_section')) {
					// Allow Authors to be set to any area in the backend.
					$frontend->Database->query(
						'ALTER TABLE `tbl_authors` CHANGE `default_section` `default_area` VARCHAR(255) COLLATE utf8_unicode_ci DEFAULT NULL;'
					);
				}
			}

			if(version_compare($existing_version, '2.2.0', '<')){
				$settings['region']['datetime_separator'] = ' ';
				$settings['symphony']['strict_error_handling'] = 'yes';
				writeConfig(DOCROOT . '/manifest', $settings, $settings['file']['write_mode']);

				// We've added UNIQUE KEY indexes to the Author, Checkbox, Date, Input, Textarea and Upload Fields
				// Time to go through the entry tables and make this change as well.
				$author = $frontend->Database->fetchCol("field_id", "SELECT `field_id` FROM `tbl_fields_author`");
				$checkbox = $frontend->Database->fetchCol("field_id", "SELECT `field_id` FROM `tbl_fields_checkbox`");
				$date = $frontend->Database->fetchCol("field_id", "SELECT `field_id` FROM `tbl_fields_date`");
				$input = $frontend->Database->fetchCol("field_id", "SELECT `field_id` FROM `tbl_fields_input`");
				$textarea = $frontend->Database->fetchCol("field_id", "SELECT `field_id` FROM `tbl_fields_textarea`");
				$upload = $frontend->Database->fetchCol("field_id", "SELECT `field_id` FROM `tbl_fields_upload`");

				$field_ids = array_merge($author, $checkbox, $date, $input, $textarea, $upload);

				foreach($field_ids as $id) {
					$table = '`tbl_entries_data_' . $id . '`';

					try {
						$frontend->Database->query("ALTER TABLE " . $table . " DROP INDEX `entry_id`");
					}
					catch (Exception $ex) {}

					try {
						$frontend->Database->query("CREATE UNIQUE INDEX `entry_id` ON " . $table . " (`entry_id`)");
						$frontend->Database->query("OPTIMIZE TABLE " . $table);
					}
					catch (Exception $ex) {}
				}
			}

			if(version_compare($existing_version, '2.2.1 Beta 1', '<')) {
				try {
					$frontend->Database->query('CREATE INDEX `session_expires` ON `tbl_sessions` (`session_expires`)');
					$frontend->Database->query('OPTIMIZE TABLE `tbl_sessions`');
				}
				catch (Exception $ex) {}
			}

			if(version_compare($existing_version, '2.2.1 Beta 2', '<')) {
				// Add Security Rules from 2.2 to .htaccess
				try {
					$htaccess = file_get_contents(DOCROOT . '/.htaccess');

					if($htaccess !== false && !preg_match('/### SECURITY - Protect crucial files/', $htaccess)){
						$security = '
		### SECURITY - Protect crucial files
		RewriteRule ^manifest/(.*)$ - [F]
		RewriteRule ^workspace/utilities/(.*).xsl$ - [F]
		RewriteRule ^workspace/pages/(.*).xsl$ - [F]
		RewriteRule ^(.*).sql$ - [F]
		RewriteRule (^|/)\. - [F]

		### DO NOT APPLY RULES WHEN REQUESTING "favicon.ico"';

						$htaccess = str_replace('### DO NOT APPLY RULES WHEN REQUESTING "favicon.ico"', $security, $htaccess);
						file_put_contents(DOCROOT . '/.htaccess', $htaccess);
					}
				}
				catch (Exception $ex) {}

				// Add correct index to the `tbl_cache`
				try {
					$frontend->Database->query('ALTER TABLE `tbl_cache` DROP INDEX `creation`');
					$frontend->Database->query('CREATE INDEX `expiry` ON `tbl_cache` (`expiry`)');
					$frontend->Database->query('OPTIMIZE TABLE `tbl_cache`');
				}
				catch (Exception $ex) {}

				// Remove Hide Association field from Select Data tables
				$select_tables = $frontend->Database->fetchCol("field_id", "SELECT `field_id` FROM `tbl_fields_select`");

				if(is_array($select_tables) && !empty($select_tables)) foreach($select_tables as $field) {
					if(tableContainsField('tbl_entries_data_' . $field, 'show_association')) {
						$frontend->Database->query(sprintf(
							"ALTER TABLE `tbl_entries_data_%d` DROP `show_association`",
							$field
						));
					}
				}

				// Update Select table to include the sorting option
				if(!tableContainsField('tbl_fields_select', 'sort_options')) {
					$frontend->Database->query('ALTER TABLE `tbl_fields_select` ADD `sort_options` ENUM( "yes", "no" ) COLLATE utf8_unicode_ci NOT NULL DEFAULT "no"');
				}

				// Remove the 'driver' from the Config
				unset($settings['database']['driver']);
				writeConfig(DOCROOT . '/manifest', $settings, $settings['file']['write_mode']);

				// Remove the NOT NULL from the Author tables
				try {
					$author = $frontend->Database->fetchCol("field_id", "SELECT `field_id` FROM `tbl_fields_author`");

					foreach($author as $id) {
						$table = '`tbl_entries_data_' . $id . '`';

						$frontend->Database->query(
							'ALTER TABLE ' . $table . ' CHANGE `author_id` `author_id` int(11) unsigned NULL'
						);
					}
				}
				catch(Exception $ex) {}
			}

			if(version_compare($existing_version, '2.2.2 Beta 1', '<')) {
				// Rename old variations of the query_caching configuration setting
				if(isset($settings['database']['disable_query_caching'])) {
					$settings['database']['query_caching'] = ($settings['database']['disable_query_caching'] == "no") ? "on" : "off";
					unset($settings['database']['disable_query_caching']);
				}

				// Add Session GC collection as a configuration parameter
				$settings['symphony']['session_gc_divisor'] = '10';

				// Save the manifest changes
				writeConfig(DOCROOT . '/manifest', $settings, $settings['file']['write_mode']);
			}

			if(version_compare($existing_version, '2.2.2 Beta 2', '<')) {
				try {
					// Change Textareas to be MEDIUMTEXT columns
					$textarea_tables = $frontend->Database->fetchCol("field_id", "SELECT `field_id` FROM `tbl_fields_textarea`");

					foreach($textarea_tables as $field) {
						$frontend->Database->query(sprintf(
							"ALTER TABLE `tbl_entries_data_%d` CHANGE `value` `value` MEDIUMTEXT, CHANGE `value_formatted` `value_formatted` MEDIUMTEXT",
							$field
						));
						$frontend->Database->query(sprintf('OPTIMIZE TABLE `tbl_entries_data_%d`', $field));
					}
				}
				catch(Exception $ex) {}
			}

			$sbl_version = $frontend->Database->fetchVar('version', 0,
				"SELECT `version` FROM `tbl_extensions` WHERE `name` = 'selectbox_link_field' LIMIT 1"
			);

			$code = sprintf($shell,
'				<h1>Update Symphony <em>Version '.kVERSION.'</em><em><a href="'.kCHANGELOG.'">change log</a></em></h1>
				<h2>Update Complete</h2>
				<p><strong>Post-Installation Steps: </strong></p>
				<br />
				<ol>
				'.

				(version_compare($existing_version, '2.2.1', '<') ? '
				<li>Version <code>2.2.1</code> introduces some improvements and fixes to Static XML Datasources. If you have any Static XML Datasources in your installation, please be sure to re-save them through the Data Source Editor to prevent unexpected results.</li>' : NULL)

				.

				(version_compare($existing_version, '2.1.0', '<') ? '
				<li>The password for user "<code>'.$username.'</code>" is now reset. The new temporary password is "<code>'.$new_password.'</code>". Please login and change it now.</li>' : NULL)

				.

				(file_exists(DOCROOT . '/symphony/.htaccess') ? '<li><strong>WARNING:</strong> The updater tried, but failed, to remove the file <code>symphony/.htaccess</code>. It is vitally important that this file be removed, otherwise the administration area will not function. If you have customisations to this file, you should be able to just remove the Symphony related block, but there are no guarantees.</li>' : NULL)

				.

				(version_compare($existing_version, '2.0.5', '<') ? '<li>Version <code>2.0.5</code> introduced multiple includable elements, in the Data Source Editor, for a single field. After updating from <code>2.0.5</code> or lower, the DS editor will seem to "forget" about any <code>Textarea</code> fields selected when you are editing existing Data Sources. After updating, you must ensure you re-select them before saving. <strong>Note, this will only effect Data Sources that you edit and were created prior to <code>2.0.5</code></strong>. Until that point, the field will still be included in any front-end <code>XML</code></li>' : NULL)

				.

				(version_compare($existing_version, '2.0.5', '<=') ? '<li>As of 2.0.5, Symphony comes pre-packaged with the "Debug Dev Kit" and "Profile Dev Kit" extensions, which replace the built-in functionality. Prior to using them, you must ensure the folder <code>extensions/debugdevkit/lib/bitter/caches/</code> is writable by <code>PHP</code>.</li>' : NULL)

				.

				(version_compare($existing_version, '2.0.2', '<') ? '<li>Since <code>2.0.2</code>, the built-in image manipulation features have been replaced with the <a href="http://github.com/symphonycms/jit_image_manipulation/tree/master">JIT Image Manipulation</a> extension. Should you have uploaded (or cloned) this to your Extensions folder, be sure to <a href="'.URL.'/symphony/system/extensions/">enable it.</a></li>' : NULL)

				.

				(!is_null($sbl_version) && version_compare($sbl_version, '1.22', '<') ? '<li>The "Select Box Link" field extension has been updated to 1.22, however this installation of Symphony appears to be running an older version ('.$sbl_version.'). Versions prior to 1.22 will not work correctly under Symphony <code>'.kVERSION.'</code>. The latest version can be download via the <a href="http://symphony-cms.com/download/extensions/view/20054/">Select Box Link download page</a> on the Symphony site.</li>' : NULL)

				.'</ol>

				<p>This script, <code>update.php</code>, should be removed as a safety precaution. <a href="'.URL.'/update.php?action=remove">Click here</a> to remove this file and proceed to your administration area.</p>');

		}

		else{

			$code = sprintf($shell,
'				<h1>Update Symphony <em>Version '.kVERSION.'</em><em><a href="'.kCHANGELOG.'">change log</a></em></h1>
				<h2>Update Failed!</h2>
				<p>An error occurred while attempting to write to the Symphony configuration, <code>manifest/config.php</code>. Please check it is writable and try again.</p>

				<div class="submit">
					<input type="submit" name="action[update]" value="Update Symphony"/>
				</div>

				');

		}

		render($code);

	}

	// Check if Symphony is already installed
	if(file_exists('manifest/config.php')){

		if(isset($settings['symphony']['version']) && version_compare(kVERSION, $settings['symphony']['version'], '<=')){
			$code = sprintf($shell,
'			<h1>Update Symphony <em>Version '.kVERSION.'</em><em><a href="'.kCHANGELOG.'">change log</a></em></h1>
			<h2>Existing Installation</h2>
			<p>It appears that Symphony has already been installed at this location and is up to date.</p>
			<br />
			<p>This script, <code>update.php</code>, should be removed as a safety precaution. <a href="'.URL.'/update.php?action=remove">Click here</a> to remove this file and proceed to your administration area.</p>');

			render($code);
		}

		$code = sprintf($shell,
'				<h1>Update Symphony <em>Version '.kVERSION.'</em><em><a href="'.kCHANGELOG.'">change log</a></em></h1>
				<h2>Update Existing Installation</h2>
				<p>This script will update your existing Symphony '.$settings['symphony']['version'].' installation to version '.kVERSION.'.</p>
				<br />
				'.(version_compare($existing_version, '2.1.0', '<') ? '<p><strong>Pre-Installation Notes: </strong></p>' : NULL).'
				<br />
				<ol>
				'.(version_compare($existing_version, '2.0.6', '<') ? '
				<li>As of <code>2.0.6</code>, the core <code>.htaccess</code> has changed substantially. As a result, there is no fool proof way to automatically update it. Instead, if you have any customisations to your <code>.htaccess</code>, please back up the existing copy before updating. You will then need to manually migrate the customisations to the new <code>.htaccess</code>.</li>' : NULL) .'

				'.(version_compare($existing_version, '2.1.0', '<') ? '
				<li>As of version <code>2.1</code>, the <a href="http://php.net/sha1"><code>SHA1</code></a> algorithm is used instead of MD5 for generating password data. After updating, the owner\'s login password will be reset. Please also note that all other users\' passwords will no longer be valid and will require a manual reset through Symphony\'s forgotten password feature. Alternatively, as an administrator, you can also change your users\' password on their behalf.</li>' : NULL) .'

				</ol>
				<div class="submit">
					<input type="submit" name="action[update]" value="Update Symphony"/>
				</div>');

		render($code);

	}