PageRenderTime 53ms CodeModel.GetById 10ms RepoModel.GetById 0ms app.codeStats 1ms

/install/install.php

https://github.com/Arantor/Elkarte
PHP | 2597 lines | 2029 code | 309 blank | 259 comment | 354 complexity | 335fc139fb3c695b37d92dc462ecc333 MD5 | raw file
Possible License(s): BSD-3-Clause, LGPL-3.0 
    

  1. <?php
    2. 

  2. 

  3. /**
    4. 

  4.  * @name      ElkArte Forum
    5. 

  5.  * @copyright ElkArte Forum contributors
    6. 

  6.  * @license   BSD http://opensource.org/licenses/BSD-3-Clause
    7. 

  7.  *
    8. 

  8.  * This software is a derived product, based on:
    9. 

  9.  *
    10. 

  10.  * Simple Machines Forum (SMF)
    11. 

  11.  * copyright:	2011 Simple Machines (http://www.simplemachines.org)
    12. 

  12.  * license:	BSD, See included LICENSE.TXT for terms and conditions.
    13. 

  13.  *
    14. 

  14.  * @version 1.0 Alpha
    15. 

  15.  *
    16. 

  16.  */
    17. 

  17. 

  18. $GLOBALS['current_version'] = '1.0 Alpha';
    19. 

  19. $GLOBALS['db_script_version'] = '1-0';
    20. 

  20. 

  21. $GLOBALS['required_php_version'] = '5.1.0';
    22. 

  22. 

  23. // Don't have PHP support, do you?
    24. 

  24. // ><html dir="ltr"><head><title>Error!</title></head><body>Sorry, this installer requires PHP!<div style="display: none;">
    25. 

  25. 

  26. // Database info.
    27. 

  27. $databases = array(
    28. 

  28. 	'mysql' => array(
    29. 

  29. 		'name' => 'MySQL',
    30. 

  30. 		'version' => '4.1.0',
    31. 

  31. 		'version_check' => 'return min(mysql_get_server_info(), mysql_get_client_info());',
    32. 

  32. 		'supported' => function_exists('mysql_connect'),
    33. 

  33. 		'default_user' => 'mysql.default_user',
    34. 

  34. 		'default_password' => 'mysql.default_password',
    35. 

  35. 		'default_host' => 'mysql.default_host',
    36. 

  36. 		'default_port' => 'mysql.default_port',
    37. 

  37. 		'utf8_support' => true,
    38. 

  38. 		'utf8_version' => '4.1.0',
    39. 

  39. 		'utf8_version_check' => 'return mysql_get_server_info();',
    40. 

  40. 		'alter_support' => true,
    41. 

  41. 		'validate_prefix' => create_function('&$value', '
    42. 

  42. 			$value = preg_replace(\'~[^A-Za-z0-9_\$]~\', \'\', $value);
    43. 

  43. 			return true;
    44. 

  44. 		'),
    45. 

  45. 	),
    46. 

  46. 	'postgresql' => array(
    47. 

  47. 		'name' => 'PostgreSQL',
    48. 

  48. 		'version' => '8.0',
    49. 

  49. 		'function_check' => 'pg_connect',
    50. 

  50. 		'version_check' => '$request = pg_query(\'SELECT version()\'); list ($version) = pg_fetch_row($request); list($pgl, $version) = explode(" ", $version); return $version;',
    51. 

  51. 		'supported' => function_exists('pg_connect'),
    52. 

  52. 		'always_has_db' => true,
    53. 

  53. 		'utf8_support' => true,
    54. 

  54. 		'utf8_version' => '8.0',
    55. 

  55. 		'utf8_version_check' => '$request = pg_query(\'SELECT version()\'); list ($version) = pg_fetch_row($request); list($pgl, $version) = explode(" ", $version); return $version;',
    56. 

  56. 		'validate_prefix' => create_function('&$value', '
    57. 

  57. 			$value = preg_replace(\'~[^A-Za-z0-9_\$]~\', \'\', $value);
    58. 

    59. 

  59. 			// Is it reserved?
    60. 

  60. 			if ($value == \'pg_\')
    61. 

  61. 				return $txt[\'error_db_prefix_reserved\'];
    62. 

    63. 

  63. 			// Is the prefix numeric?
    64. 

  64. 			if (preg_match(\'~^\d~\', $value))
    65. 

  65. 				return $txt[\'error_db_prefix_numeric\'];
    66. 

    67. 

  67. 			return true;
    68. 

  68. 		'),
    69. 

  69. 	),
    70. 

  70. 	'sqlite' => array(
    71. 

  71. 		'name' => 'SQLite',
    72. 

  72. 		'version' => '1',
    73. 

  73. 		'function_check' => 'sqlite_open',
    74. 

  74. 		'version_check' => 'return 1;',
    75. 

  75. 		'supported' => function_exists('sqlite_open'),
    76. 

  76. 		'always_has_db' => true,
    77. 

  77. 		'utf8_support' => false,
    78. 

  78. 		'validate_prefix' => create_function('&$value', '
    79. 

  79. 			global $incontext, $txt;
    80. 

  80. 

  81. 			$value = preg_replace(\'~[^A-Za-z0-9_\$]~\', \'\', $value);
    82. 

    83. 

  83. 			// Is it reserved?
    84. 

  84. 			if ($value == \'sqlite_\')
    85. 

  85. 				return $txt[\'error_db_prefix_reserved\'];
    86. 

    87. 

  87. 			// Is the prefix numeric?
    88. 

  88. 			if (preg_match(\'~^\d~\', $value))
    89. 

  89. 				return $txt[\'error_db_prefix_numeric\'];
    90. 

    91. 

  91. 			return true;
    92. 

  92. 		'),
    93. 

  93. 	),
    94. 

  94. );
    95. 

  95. 

  96. // Initialize everything and load the language files.
    97. 

  97. initialize_inputs();
    98. 

  98. load_lang_file();
    99. 

  99. 

  100. // This is what we are.
    101. 

  101. $installurl = $_SERVER['PHP_SELF'];
    102. 

  102. 

  103. // This is where home is.
    104. 

  104. $oursite = 'http://www.elkarte.net/';
    105. 

  105. 

  106. // All the steps in detail.
    107. 

  107. // Number,Name,Function,Progress Weight.
    108. 

  108. $incontext['steps'] = array(
    109. 

  109. 	0 => array(1, $txt['install_step_welcome'], 'action_welcome', 0),
    110. 

  110. 	1 => array(2, $txt['install_step_writable'], 'action_checkFilesWritable', 10),
    111. 

  111. 	2 => array(3, $txt['install_step_databaseset'], 'action_databaseSettings', 15),
    112. 

  112. 	3 => array(4, $txt['install_step_forum'], 'action_forumSettings', 40),
    113. 

  113. 	4 => array(5, $txt['install_step_databasechange'], 'action_databasePopulation', 15),
    114. 

  114. 	5 => array(6, $txt['install_step_admin'], 'action_adminAccount', 20),
    115. 

  115. 	6 => array(7, $txt['install_step_delete'], 'action_deleteInstall', 0),
    116. 

  116. );
    117. 

  117. 

  118. // Default title...
    119. 

  119. $incontext['page_title'] = $txt['installer'];
    120. 

  120. 

  121. // What step are we on?
    122. 

  122. $incontext['current_step'] = isset($_GET['step']) ? (int) $_GET['step'] : 0;
    123. 

  123. 

  124. // Loop through all the steps doing each one as required.
    125. 

  125. $incontext['overall_percent'] = 0;
    126. 

  126. foreach ($incontext['steps'] as $num => $step)
    127. 

  127. {
    128. 

  128. 	if ($num >= $incontext['current_step'])
    129. 

  129. 	{
    130. 

  130. 		// The current weight of this step in terms of overall progress.
    131. 

  131. 		$incontext['step_weight'] = $step[3];
    132. 

  132. 

  133. 		// Make sure we reset the skip button.
    134. 

  134. 		$incontext['skip'] = false;
    135. 

  135. 

  136. 		// Call the step and if it returns false that means pause!
    137. 

  137. 		if (function_exists($step[2]) && $step[2]() === false)
    138. 

  138. 			break;
    139. 

  139. 		elseif (function_exists($step[2]))
    140. 

  140. 			$incontext['current_step']++;
    141. 

  141. 

  142. 		// No warnings pass on.
    143. 

  143. 		$incontext['warning'] = '';
    144. 

  144. 	}
    145. 

  145. 	$incontext['overall_percent'] += $step[3];
    146. 

  146. }
    147. 

  147. 

  148. // Actually do the template stuff.
    149. 

  149. installExit();
    150. 

  150. 

  151. /**
    152. 

  152.  * Initialization step. Called at each request.
    153. 

  153.  * It either sets up variables for other steps, or handle a few requests on its own.
    154. 

  154.  */
    155. 

  155. function initialize_inputs()
    156. 

  156. {
    157. 

  157. 	global $databases, $incontext;
    158. 

  158. 

  159. 	// Just so people using older versions of PHP aren't left in the cold.
    160. 

  160. 	if (!isset($_SERVER['PHP_SELF']))
    161. 

  161. 		$_SERVER['PHP_SELF'] = isset($GLOBALS['HTTP_SERVER_VARS']['PHP_SELF']) ? $GLOBALS['HTTP_SERVER_VARS']['PHP_SELF'] : 'install.php';
    162. 

  162. 

  163. 	// Turn off magic quotes runtime and enable error reporting.
    164. 

  164. 	if (function_exists('set_magic_quotes_runtime'))
    165. 

  165. 		@set_magic_quotes_runtime(0);
    166. 

  166. 	error_reporting(E_ALL);
    167. 

  167. 

  168. 	// Fun.  Low PHP version...
    169. 

  169. 	if (!isset($_GET))
    170. 

  170. 	{
    171. 

  171. 		$GLOBALS['_GET']['step'] = 0;
    172. 

  172. 		return;
    173. 

  173. 	}
    174. 

  174. 

  175. 	if (!isset($_GET['obgz']))
    176. 

  176. 	{
    177. 

  177. 		ob_start();
    178. 

  178. 

  179. 		if (ini_get('session.save_handler') == 'user')
    180. 

  180. 			@ini_set('session.save_handler', 'files');
    181. 

  181. 		if (function_exists('session_start'))
    182. 

  182. 			@session_start();
    183. 

  183. 	}
    184. 

  184. 	else
    185. 

  185. 	{
    186. 

  186. 		ob_start('ob_gzhandler');
    187. 

  187. 

  188. 		if (ini_get('session.save_handler') == 'user')
    189. 

  189. 			@ini_set('session.save_handler', 'files');
    190. 

  190. 		session_start();
    191. 

  191. 

  192. 		if (!headers_sent())
    193. 

  193. 			echo '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
    194. 

  194. <html xmlns="http://www.w3.org/1999/xhtml">
    195. 

  195. 	<head>
    196. 

  196. 		<title>', htmlspecialchars($_GET['pass_string']), '</title>
    197. 

  197. 	</head>
    198. 

  198. 	<body style="background-color: #d4d4d4; margin-top: 16%; text-align: center; font-size: 16pt;">
    199. 

  199. 		<strong>', htmlspecialchars($_GET['pass_string']), '</strong>
    200. 

  200. 	</body>
    201. 

  201. </html>';
    202. 

  202. 		exit;
    203. 

  203. 	}
    204. 

  204. 

  205. 	// Are we calling the backup css file?
    206. 

  206. 	if (isset($_GET['infile_css']))
    207. 

  207. 	{
    208. 

  208. 		header('Content-Type: text/css');
    209. 

  209. 		template_css();
    210. 

  210. 		exit;
    211. 

  211. 	}
    212. 

  212. 

  213. 	// Add slashes, as long as they aren't already being added.
    214. 

  214. 	if (!function_exists('get_magic_quotes_gpc') || @get_magic_quotes_gpc() == 0)
    215. 

  215. 	{
    216. 

  216. 		foreach ($_POST as $k => $v)
    217. 

  217. 			if (strpos($k, 'password') === false)
    218. 

  218. 				$_POST[$k] = addslashes($v);
    219. 

  219. 	}
    220. 

  220. 

  221. 	// This is really quite simple; if ?delete is on the URL, delete the installer...
    222. 

  222. 	if (isset($_GET['delete']))
    223. 

  223. 		action_deleteInstaller();
    224. 

  224. 

  225. 	// PHP 5 might cry if we don't do this now.
    226. 

  226. 	if (function_exists('date_default_timezone_set'))
    227. 

  227. 	{
    228. 

  228. 		$server_offset = @mktime(0, 0, 0, 1, 1, 1970);
    229. 

  229. 		date_default_timezone_set('Etc/GMT' . ($server_offset > 0 ? '+' : '') . ($server_offset / 3600));
    230. 

  230. 	}
    231. 

  231. 

  232. 	// Force an integer step, defaulting to 0.
    233. 

  233. 	$_GET['step'] = isset($_GET['step']) ? (int) $_GET['step'] : 0;
    234. 

  234. }
    235. 

  235. 

  236. /**
    237. 

  237.  * Load the list of language files, and the current language file.
    238. 

  238.  */
    239. 

  239. function load_lang_file()
    240. 

  240. {
    241. 

  241. 	global $txt, $incontext;
    242. 

  242. 

  243. 	$incontext['detected_languages'] = array();
    244. 

  244. 

  245. 	// Make sure the languages directory actually exists.
    246. 

  246. 	if (file_exists(dirname(__FILE__) . '/themes/default/languages'))
    247. 

  247. 	{
    248. 

  248. 		// Find all the "Install" language files in the directory.
    249. 

  249. 		$dir = dir(dirname(__FILE__) . '/themes/default/languages');
    250. 

  250. 		while ($entry = $dir->read())
    251. 

  251. 		{
    252. 

  252. 			if (substr($entry, 0, 8) == 'Install.' && substr($entry, -4) == '.php')
    253. 

  253. 				$incontext['detected_languages'][$entry] = ucfirst(substr($entry, 8, strlen($entry) - 12));
    254. 

  254. 		}
    255. 

  255. 		$dir->close();
    256. 

  256. 	}
    257. 

  257. 

  258. 	// Didn't find any, show an error message!
    259. 

  259. 	if (empty($incontext['detected_languages']))
    260. 

  260. 	{
    261. 

  261. 		// Let's not cache this message, eh?
    262. 

  262. 		header('Expires: Mon, 26 Jul 1997 05:00:00 GMT');
    263. 

  263. 		header('Last-Modified: ' . gmdate('D, d M Y H:i:s') . ' GMT');
    264. 

  264. 		header('Cache-Control: no-cache');
    265. 

  265. 

  266. 		echo '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
    267. 

  267. <html xmlns="http://www.w3.org/1999/xhtml">
    268. 

  268. 	<head>
    269. 

  269. 		<title>Installer: Error!</title>
    270. 

  270. 	</head>
    271. 

  271. 	<body style="font-family: sans-serif;">
    272. 

  272. 	<div style="width: 600px;">
    273. 

  273. 		<h1 style="font-size: 14pt;">A critical error has occurred.</h1>
    274. 

  274. 

  275. 		<p>This installer was unable to find the installer\'s language file or files.  They should be found under:</p>
    276. 

    277. 

  277. 		<div style="margin: 1ex; font-family: monospace; font-weight: bold;">', dirname($_SERVER['PHP_SELF']) != '/' ? dirname($_SERVER['PHP_SELF']) : '', '/themes/default/languages</div>
    278. 

  278. 

  279. 		<p>In some cases, FTP clients do not properly upload files with this many folders.  Please double check to make sure you <span style="font-weight: 600;">have uploaded all the files in the distribution</span>.</p>
    280. 

  280. 		<p>If that doesn\'t help, please make sure this install.php file is in the same place as the themes folder.</p>
    281. 

    282. 

  282. 		<p>If you continue to get this error message, feel free to <a href="http://www.elkarte.net/">look to us for support</a>.</p>
    283. 

  283. 	</div>
    284. 

  284. 	</body>
    285. 

  285. </html>';
    286. 

  286. 		die;
    287. 

  287. 	}
    288. 

  288. 

  289. 	// Override the language file?
    290. 

  290. 	if (isset($_GET['lang_file']))
    291. 

  291. 		$_SESSION['installer_temp_lang'] = $_GET['lang_file'];
    292. 

  292. 	elseif (isset($GLOBALS['HTTP_GET_VARS']['lang_file']))
    293. 

  293. 		$_SESSION['installer_temp_lang'] = $GLOBALS['HTTP_GET_VARS']['lang_file'];
    294. 

  294. 

  295. 	// Make sure it exists, if it doesn't reset it.
    296. 

  296. 	if (!isset($_SESSION['installer_temp_lang']) || preg_match('~[^\\w_\\-.]~', $_SESSION['installer_temp_lang']) === 1 || !file_exists(dirname(__FILE__) . '/themes/default/languages/' . $_SESSION['installer_temp_lang']))
    297. 

  297. 	{
    298. 

  298. 		// Use the first one...
    299. 

  299. 		list ($_SESSION['installer_temp_lang']) = array_keys($incontext['detected_languages']);
    300. 

  300. 

  301. 		// If we have english and some other language, use the other language.  We Americans hate english :P.
    302. 

  302. 		if ($_SESSION['installer_temp_lang'] == 'Install.english.php' && count($incontext['detected_languages']) > 1)
    303. 

  303. 			list (, $_SESSION['installer_temp_lang']) = array_keys($incontext['detected_languages']);
    304. 

  304. 	}
    305. 

  305. 

  306. 	// And now include the actual language file itself.
    307. 

  307. 	require_once(dirname(__FILE__) . '/themes/default/languages/' . $_SESSION['installer_temp_lang']);
    308. 

  308. }
    309. 

  309. 

  310. /**
    311. 

  311.  * This handy function loads some settings and the like.
    312. 

  312.  */
    313. 

  313. function load_database()
    314. 

  314. {
    315. 

  315. 	global $db_prefix, $db_connection, $db_character_set, $language;
    316. 

  316. 	global $smcFunc, $mbname, $scripturl, $boardurl, $modSettings, $db_type, $db_name, $db_user;
    317. 

  317. 

  318. 	if (!defined('SOURCEDIR'))
    319. 

  319. 		define('SOURCEDIR', dirname(__FILE__) . '/sources');
    320. 

  320. 

  321. 	// Need this to check whether we need the database password.
    322. 

  322. 	require(dirname(__FILE__) . '/Settings.php');
    323. 

  323. 	if (!defined('ELKARTE'))
    324. 

  324. 		define('ELKARTE', 1);
    325. 

  325. 	if (empty($smcFunc))
    326. 

  326. 		$smcFunc = array();
    327. 

  327. 

  328. 	$modSettings['disableQueryCheck'] = true;
    329. 

  329. 

  330. 	// Connect the database.
    331. 

  331. 	if (!$db_connection)
    332. 

  332. 	{
    333. 

  333. 		require_once(SOURCEDIR . '/database/Db-' . $db_type . '.subs.php');
    334. 

  334. 

  335. 		if (!$db_connection)
    336. 

  336. 			$db_connection = smf_db_initiate($db_server, $db_name, $db_user, $db_passwd, $db_prefix, array('persist' => $db_persist));
    337. 

  337. 	}
    338. 

  338. }
    339. 

  339. 

  340. /**
    341. 

  341.  * This is called upon exiting the installer, for template etc.
    342. 

  342.  * @param bool $fallThrough
    343. 

  343.  */
    344. 

  344. function installExit($fallThrough = false)
    345. 

  345. {
    346. 

  346. 	global $incontext, $installurl, $txt;
    347. 

  347. 

  348. 	// Send character set.
    349. 

  349. 	header('Content-Type: text/html; charset=UTF-8');
    350. 

  350. 

  351. 	// We usually dump our templates out.
    352. 

  352. 	if (!$fallThrough)
    353. 

  353. 	{
    354. 

  354. 		// The top install bit.
    355. 

  355. 		template_install_above();
    356. 

  356. 

  357. 		// Call the template.
    358. 

  358. 		if (isset($incontext['sub_template']))
    359. 

  359. 		{
    360. 

  360. 			$incontext['form_url'] = $installurl . '?step=' . $incontext['current_step'];
    361. 

  361. 

  362. 			call_user_func('template_' . $incontext['sub_template']);
    363. 

  363. 		}
    364. 

  364. 		// @todo REMOVE THIS!!
    365. 

  365. 		else
    366. 

  366. 		{
    367. 

  367. 			if (function_exists('doStep' . $_GET['step']))
    368. 

  368. 				call_user_func('doStep' . $_GET['step']);
    369. 

  369. 		}
    370. 

  370. 		// Show the footer.
    371. 

  371. 		template_install_below();
    372. 

  372. 	}
    373. 

  373. 

  374. 	// Bang - gone!
    375. 

  375. 	die();
    376. 

  376. }
    377. 

  377. 

  378. /**
    379. 

  379.  * Welcome screen.
    380. 

  380.  * It makes a few basic checks for compatibility
    381. 

  381.  * and informs the user if there are problems.
    382. 

  382.  */
    383. 

  383. function action_welcome()
    384. 

  384. {
    385. 

  385. 	global $incontext, $txt, $databases, $installurl;
    386. 

  386. 

  387. 	$incontext['page_title'] = $txt['install_welcome'];
    388. 

  388. 	$incontext['sub_template'] = 'welcome_message';
    389. 

  389. 

  390. 	// Done the submission?
    391. 

  391. 	if (isset($_POST['contbutt']))
    392. 

  392. 		return true;
    393. 

  393. 

  394. 	// Check the PHP version.
    395. 

  395. 	if ((!function_exists('version_compare') || version_compare($GLOBALS['required_php_version'], PHP_VERSION, '>')))
    396. 

  396. 	{
    397. 

  397. 		$incontext['warning'] = $txt['error_php_too_low'];
    398. 

  398. 	}
    399. 

  399. 

  400. 	// See if we think they have already installed it?
    401. 

  401. 	if (is_readable(dirname(__FILE__) . '/Settings.php'))
    402. 

  402. 	{
    403. 

  403. 		$probably_installed = 0;
    404. 

  404. 		foreach (file(dirname(__FILE__) . '/Settings.php') as $line)
    405. 

  405. 		{
    406. 

  406. 			if (preg_match('~^\$db_passwd\s=\s\'([^\']+)\';$~', $line))
    407. 

  407. 				$probably_installed++;
    408. 

  408. 			if (preg_match('~^\$boardurl\s=\s\'([^\']+)\';~', $line) && !preg_match('~^\$boardurl\s=\s\'http://127\.0\.0\.1/elkarte\';~', $line))
    409. 

  409. 				$probably_installed++;
    410. 

  410. 		}
    411. 

  411. 

  412. 		if ($probably_installed == 2)
    413. 

  413. 			$incontext['warning'] = $txt['error_already_installed'];
    414. 

  414. 	}
    415. 

  415. 

  416. 	// Is some database support even compiled in?
    417. 

  417. 	$incontext['supported_databases'] = array();
    418. 

  418. 	foreach ($databases as $key => $db)
    419. 

  419. 	{
    420. 

  420. 		if ($db['supported'])
    421. 

  421. 		{
    422. 

  422. 			if (!file_exists(dirname(__FILE__) . '/install_' . $GLOBALS['db_script_version'] . '_' . $key . '.sql'))
    423. 

  423. 			{
    424. 

  424. 				$databases[$key]['supported'] = false;
    425. 

  425. 				$notFoundSQLFile = true;
    426. 

  426. 				$txt['error_db_script_missing'] = sprintf($txt['error_db_script_missing'], 'install_' . $GLOBALS['db_script_version'] . '_' . $key . '.sql');
    427. 

  427. 			}
    428. 

  428. 			else
    429. 

  429. 			{
    430. 

  430. 				$db_type = $key;
    431. 

  431. 				$incontext['supported_databases'][] = $db;
    432. 

  432. 			}
    433. 

  433. 		}
    434. 

  434. 	}
    435. 

  435. 

  436. 	if (empty($incontext['supported_databases']))
    437. 

  437. 		$error = empty($notFoundSQLFile) ? 'error_db_missing' : 'error_db_script_missing';
    438. 

  438. 	// How about session support?  Some crazy sysadmin remove it?
    439. 

  439. 	elseif (!function_exists('session_start'))
    440. 

  440. 		$error = 'error_session_missing';
    441. 

  441. 	// Make sure they uploaded all the files.
    442. 

  442. 	elseif (!file_exists(dirname(__FILE__) . '/index.php'))
    443. 

  443. 		$error = 'error_missing_files';
    444. 

  444. 	// Very simple check on the session.save_path for Windows.
    445. 

  445. 	// @todo Move this down later if they don't use database-driven sessions?
    446. 

  446. 	elseif (@ini_get('session.save_path') == '/tmp' && substr(__FILE__, 1, 2) == ':\\')
    447. 

  447. 		$error = 'error_session_save_path';
    448. 

  448. 

  449. 	// Since each of the three messages would look the same, anyway...
    450. 

  450. 	if (isset($error))
    451. 

  451. 		$incontext['error'] = $txt[$error];
    452. 

  452. 

  453. 	// Mod_security blocks everything that smells funny. Let us handle security.
    454. 

  454. 	if (!fixModSecurity() && !isset($_GET['overmodsecurity']))
    455. 

  455. 		$incontext['error'] = $txt['error_mod_security'] . '<br /><br /><a href="' . $installurl . '?overmodsecurity=true">' . $txt['error_message_click'] . '</a> ' . $txt['error_message_bad_try_again'];
    456. 

  456. 

  457. 	return false;
    458. 

  458. }
    459. 

  459. 

  460. /**
    461. 

  461.  * Verify and try to make writable the files and folders that need to be.
    462. 

  462.  */
    463. 

  463. function action_checkFilesWritable()
    464. 

  464. {
    465. 

  465. 	global $txt, $incontext;
    466. 

  466. 

  467. 	$incontext['page_title'] = $txt['ftp_checking_writable'];
    468. 

  468. 	$incontext['sub_template'] = 'chmod_files';
    469. 

  469. 

  470. 	$writable_files = array(
    471. 

  471. 		'attachments',
    472. 

  472. 		'avatars',
    473. 

  473. 		'cache',
    474. 

  474. 		'packages',
    475. 

  475. 		'packages/installed.list',
    476. 

  476. 		'smileys',
    477. 

  477. 		'themes',
    478. 

  478. 		'agreement.txt',
    479. 

  479. 		'Settings.php',
    480. 

  480. 		'Settings_bak.php',
    481. 

  481. 		'db_last_error.php'
    482. 

  482. 	);
    483. 

  483. 	foreach ($incontext['detected_languages'] as $lang => $temp)
    484. 

  484. 		$extra_files[] = 'themes/default/languages/' . $lang;
    485. 

  485. 

  486. 	// With mod_security installed, we could attempt to fix it with .htaccess.
    487. 

  487. 	if (function_exists('apache_get_modules') && in_array('mod_security', apache_get_modules()))
    488. 

  488. 		$writable_files[] = file_exists(dirname(__FILE__) . '/.htaccess') ? '.htaccess' : '.';
    489. 

  489. 

  490. 	$failed_files = array();
    491. 

  491. 

  492. 	// On linux, it's easy - just use is_writable!
    493. 

  493. 	if (substr(__FILE__, 1, 2) != ':\\')
    494. 

  494. 	{
    495. 

  495. 		foreach ($writable_files as $file)
    496. 

  496. 		{
    497. 

  497. 			if (!is_writable(dirname(__FILE__) . '/' . $file))
    498. 

  498. 			{
    499. 

  499. 				@chmod(dirname(__FILE__) . '/' . $file, 0755);
    500. 

  500. 

  501. 				// Well, 755 hopefully worked... if not, try 777.
    502. 

  502. 				if (!is_writable(dirname(__FILE__) . '/' . $file) && !@chmod(dirname(__FILE__) . '/' . $file, 0777))
    503. 

  503. 					$failed_files[] = $file;
    504. 

  504. 			}
    505. 

  505. 		}
    506. 

  506. 		foreach ($extra_files as $file)
    507. 

  507. 			@chmod(dirname(__FILE__) . (empty($file) ? '' : '/' . $file), 0777);
    508. 

  508. 	}
    509. 

  509. 	// Windows is trickier.  Let's try opening for r+...
    510. 

  510. 	else
    511. 

  511. 	{
    512. 

  512. 		foreach ($writable_files as $file)
    513. 

  513. 		{
    514. 

  514. 			// Folders can't be opened for write... but the index.php in them can ;)
    515. 

  515. 			if (is_dir(dirname(__FILE__) . '/' . $file))
    516. 

  516. 				$file .= '/index.php';
    517. 

  517. 

  518. 			// Funny enough, chmod actually does do something on windows - it removes the read only attribute.
    519. 

  519. 			@chmod(dirname(__FILE__) . '/' . $file, 0777);
    520. 

  520. 			$fp = @fopen(dirname(__FILE__) . '/' . $file, 'r+');
    521. 

  521. 

  522. 			// Hmm, okay, try just for write in that case...
    523. 

  523. 			if (!is_resource($fp))
    524. 

  524. 				$fp = @fopen(dirname(__FILE__) . '/' . $file, 'w');
    525. 

  525. 

  526. 			if (!is_resource($fp))
    527. 

  527. 				$failed_files[] = $file;
    528. 

  528. 

  529. 			@fclose($fp);
    530. 

  530. 		}
    531. 

  531. 		foreach ($extra_files as $file)
    532. 

  532. 			@chmod(dirname(__FILE__) . (empty($file) ? '' : '/' . $file), 0777);
    533. 

  533. 	}
    534. 

  534. 

  535. 	$failure = count($failed_files) >= 1;
    536. 

  536. 

  537. 	if (!isset($_SERVER))
    538. 

  538. 		return !$failure;
    539. 

  539. 

  540. 	// Put the list into context.
    541. 

  541. 	$incontext['failed_files'] = $failed_files;
    542. 

  542. 

  543. 	// It's not going to be possible to use FTP on windows to solve the problem...
    544. 

  544. 	if ($failure && substr(__FILE__, 1, 2) == ':\\')
    545. 

  545. 	{
    546. 

  546. 		$incontext['error'] = $txt['error_windows_chmod'] . '
    547. 

  547. 					<ul style="margin: 2.5ex; font-family: monospace;">
    548. 

  548. 						<li>' . implode('</li>
    549. 

  549. 						<li>', $failed_files) . '</li>
    550. 

  550. 					</ul>';
    551. 

    552. 

  552. 		return false;
    553. 

  553. 	}
    554. 

  554. 	// We're going to have to use... FTP!
    555. 

  555. 	elseif ($failure)
    556. 

  556. 	{
    557. 

  557. 		// Load any session data we might have...
    558. 

  558. 		if (!isset($_POST['ftp_username']) && isset($_SESSION['installer_temp_ftp']))
    559. 

  559. 		{
    560. 

  560. 			$_POST['ftp_server'] = $_SESSION['installer_temp_ftp']['server'];
    561. 

  561. 			$_POST['ftp_port'] = $_SESSION['installer_temp_ftp']['port'];
    562. 

  562. 			$_POST['ftp_username'] = $_SESSION['installer_temp_ftp']['username'];
    563. 

  563. 			$_POST['ftp_password'] = $_SESSION['installer_temp_ftp']['password'];
    564. 

  564. 			$_POST['ftp_path'] = $_SESSION['installer_temp_ftp']['path'];
    565. 

  565. 		}
    566. 

  566. 

  567. 		$incontext['ftp_errors'] = array();
    568. 

  568. 

  569. 		if (isset($_POST['ftp_username']))
    570. 

  570. 		{
    571. 

  571. 			$ftp = new Ftp_Connection($_POST['ftp_server'], $_POST['ftp_port'], $_POST['ftp_username'], $_POST['ftp_password']);
    572. 

  572. 

  573. 			if ($ftp->error === false)
    574. 

  574. 			{
    575. 

  575. 				// Try it without /home/abc just in case they messed up.
    576. 

  576. 				if (!$ftp->chdir($_POST['ftp_path']))
    577. 

  577. 				{
    578. 

  578. 					$incontext['ftp_errors'][] = $ftp->last_message;
    579. 

  579. 					$ftp->chdir(preg_replace('~^/home[2]?/[^/]+?~', '', $_POST['ftp_path']));
    580. 

  580. 				}
    581. 

  581. 			}
    582. 

  582. 		}
    583. 

  583. 

  584. 		if (!isset($ftp) || $ftp->error !== false)
    585. 

  585. 		{
    586. 

  586. 			if (!isset($ftp))
    587. 

  587. 				$ftp = new Ftp_Connection(null);
    588. 

  588. 			// Save the error so we can mess with listing...
    589. 

  589. 			elseif ($ftp->error !== false && empty($incontext['ftp_errors']) && !empty($ftp->last_message))
    590. 

  590. 				$incontext['ftp_errors'][] = $ftp->last_message;
    591. 

  591. 

  592. 			list ($username, $detect_path, $found_path) = $ftp->detect_path(dirname(__FILE__));
    593. 

  593. 

  594. 			if (empty($_POST['ftp_path']) && $found_path)
    595. 

  595. 				$_POST['ftp_path'] = $detect_path;
    596. 

  596. 

  597. 			if (!isset($_POST['ftp_username']))
    598. 

  598. 				$_POST['ftp_username'] = $username;
    599. 

  599. 

  600. 			// Set the username etc, into context.
    601. 

  601. 			$incontext['ftp'] = array(
    602. 

  602. 				'server' => isset($_POST['ftp_server']) ? $_POST['ftp_server'] : 'localhost',
    603. 

  603. 				'port' => isset($_POST['ftp_port']) ? $_POST['ftp_port'] : '21',
    604. 

  604. 				'username' => isset($_POST['ftp_username']) ? $_POST['ftp_username'] : '',
    605. 

  605. 				'path' => isset($_POST['ftp_path']) ? $_POST['ftp_path'] : '/',
    606. 

  606. 				'path_msg' => !empty($found_path) ? $txt['ftp_path_found_info'] : $txt['ftp_path_info'],
    607. 

  607. 			);
    608. 

  608. 

  609. 			return false;
    610. 

  610. 		}
    611. 

  611. 		else
    612. 

  612. 		{
    613. 

  613. 			$_SESSION['installer_temp_ftp'] = array(
    614. 

  614. 				'server' => $_POST['ftp_server'],
    615. 

  615. 				'port' => $_POST['ftp_port'],
    616. 

  616. 				'username' => $_POST['ftp_username'],
    617. 

  617. 				'password' => $_POST['ftp_password'],
    618. 

  618. 				'path' => $_POST['ftp_path']
    619. 

  619. 			);
    620. 

  620. 

  621. 			$failed_files_updated = array();
    622. 

  622. 

  623. 			foreach ($failed_files as $file)
    624. 

  624. 			{
    625. 

  625. 				if (!is_writable(dirname(__FILE__) . '/' . $file))
    626. 

  626. 					$ftp->chmod($file, 0755);
    627. 

  627. 				if (!is_writable(dirname(__FILE__) . '/' . $file))
    628. 

  628. 					$ftp->chmod($file, 0777);
    629. 

  629. 				if (!is_writable(dirname(__FILE__) . '/' . $file))
    630. 

  630. 				{
    631. 

  631. 					$failed_files_updated[] = $file;
    632. 

  632. 					$incontext['ftp_errors'][] = rtrim($ftp->last_message) . ' -> ' . $file . "\n";
    633. 

  633. 				}
    634. 

  634. 			}
    635. 

  635. 

  636. 			$ftp->close();
    637. 

  637. 

  638. 			// Are there any errors left?
    639. 

  639. 			if (count($failed_files_updated) >= 1)
    640. 

  640. 			{
    641. 

  641. 				// Guess there are...
    642. 

  642. 				$incontext['failed_files'] = $failed_files_updated;
    643. 

  643. 

  644. 				// Set the username etc, into context.
    645. 

  645. 				$incontext['ftp'] = $_SESSION['installer_temp_ftp'] += array(
    646. 

  646. 					'path_msg' => $txt['ftp_path_info'],
    647. 

  647. 				);
    648. 

  648. 

  649. 				return false;
    650. 

  650. 			}
    651. 

  651. 		}
    652. 

  652. 	}
    653. 

  653. 

  654. 	return true;
    655. 

  655. }
    656. 

  656. 

  657. /**
    658. 

  658.  * Ask for database settings, verify and save them.
    659. 

  659.  */
    660. 

  660. function action_databaseSettings()
    661. 

  661. {
    662. 

  662. 	global $txt, $databases, $incontext, $smcFunc;
    663. 

  663. 

  664. 	$incontext['sub_template'] = 'database_settings';
    665. 

  665. 	$incontext['page_title'] = $txt['db_settings'];
    666. 

  666. 	$incontext['continue'] = 1;
    667. 

  667. 

  668. 	// Set up the defaults.
    669. 

  669. 	$incontext['db']['server'] = 'localhost';
    670. 

  670. 	$incontext['db']['user'] = '';
    671. 

  671. 	$incontext['db']['name'] = '';
    672. 

  672. 	$incontext['db']['pass'] = '';
    673. 

  673. 	$incontext['db']['type'] = '';
    674. 

  674. 	$incontext['supported_databases'] = array();
    675. 

  675. 

  676. 	$foundOne = false;
    677. 

  677. 	foreach ($databases as $key => $db)
    678. 

  678. 	{
    679. 

  679. 		// Override with the defaults for this DB if appropriate.
    680. 

  680. 		if ($db['supported'])
    681. 

  681. 		{
    682. 

  682. 			$incontext['supported_databases'][$key] = $db;
    683. 

  683. 

  684. 			if (!$foundOne)
    685. 

  685. 			{
    686. 

  686. 				if (isset($db['default_host']))
    687. 

  687. 					$incontext['db']['server'] = ini_get($db['default_host']) or $incontext['db']['server'] = 'localhost';
    688. 

  688. 				if (isset($db['default_user']))
    689. 

  689. 				{
    690. 

  690. 					$incontext['db']['user'] = ini_get($db['default_user']);
    691. 

  691. 					$incontext['db']['name'] = ini_get($db['default_user']);
    692. 

  692. 				}
    693. 

  693. 				if (isset($db['default_password']))
    694. 

  694. 					$incontext['db']['pass'] = ini_get($db['default_password']);
    695. 

  695. 				if (isset($db['default_port']))
    696. 

  696. 					$db_port = ini_get($db['default_port']);
    697. 

  697. 

  698. 				$incontext['db']['type'] = $key;
    699. 

  699. 				$foundOne = true;
    700. 

  700. 			}
    701. 

  701. 		}
    702. 

  702. 	}
    703. 

  703. 

  704. 	// Override for repost.
    705. 

  705. 	if (isset($_POST['db_user']))
    706. 

  706. 	{
    707. 

  707. 		$incontext['db']['user'] = $_POST['db_user'];
    708. 

  708. 		$incontext['db']['name'] = $_POST['db_type'] == 'sqlite' && isset($_POST['db_filename']) ? $_POST['db_filename'] : $_POST['db_name'];
    709. 

  709. 		$incontext['db']['server'] = $_POST['db_server'];
    710. 

  710. 		$incontext['db']['prefix'] = $_POST['db_prefix'];
    711. 

  711. 	}
    712. 

  712. 	else
    713. 

  713. 	{
    714. 

  714. 		$incontext['db']['prefix'] = 'elkarte_';
    715. 

  715. 

  716. 		// Should we use a non standard port?
    717. 

  717. 		if (!empty($db_port))
    718. 

  718. 			$incontext['db']['server'] .= ':' . $db_port;
    719. 

  719. 	}
    720. 

  720. 

  721. 	// Are we submitting?
    722. 

  722. 	if (isset($_POST['db_type']))
    723. 

  723. 	{
    724. 

  724. 		if (isset($_POST['db_filename']))
    725. 

  725. 		{
    726. 

  726. 			// You better enter enter a database name for SQLite.
    727. 

  727. 			if (trim($_POST['db_filename']) == '')
    728. 

  728. 			{
    729. 

  729. 				$incontext['error'] = $txt['error_db_filename'];
    730. 

  730. 				return false;
    731. 

  731. 			}
    732. 

  732. 

  733. 			// Duplicate name in the same dir?  Can't do that with SQLite.  Weird things happen.
    734. 

  734. 			if (file_exists($_POST['db_filename'] . (substr($_POST['db_filename'], -3) != '.db' ? '.db' : '')))
    735. 

  735. 			{
    736. 

  736. 				$incontext['error'] = $txt['error_db_filename_exists'];
    737. 

  737. 				return false;
    738. 

  738. 			}
    739. 

  739. 		}
    740. 

  740. 

  741. 		// What type are they trying?
    742. 

  742. 		$db_type = preg_replace('~[^A-Za-z0-9]~', '', $_POST['db_type']);
    743. 

  743. 		$db_prefix = $_POST['db_prefix'];
    744. 

  744. 

  745. 		// Validate the prefix.
    746. 

  746. 		$valid_prefix = $databases[$db_type]['validate_prefix']($db_prefix);
    747. 

  747. 		if ($valid_prefix !== true)
    748. 

  748. 		{
    749. 

  749. 			$incontext['error'] = $valid_prefix;
    750. 

  750. 			return false;
    751. 

  751. 		}
    752. 

  752. 

  753. 		// Take care of these variables...
    754. 

  754. 		$vars = array(
    755. 

  755. 			'db_type' => $db_type,
    756. 

  756. 			'db_name' => $_POST['db_type'] == 'sqlite' && isset($_POST['db_filename']) ? $_POST['db_filename'] : $_POST['db_name'],
    757. 

  757. 			'db_user' => $_POST['db_user'],
    758. 

  758. 			'db_passwd' => isset($_POST['db_passwd']) ? $_POST['db_passwd'] : '',
    759. 

  759. 			'db_server' => $_POST['db_server'],
    760. 

  760. 			'db_prefix' => $db_prefix,
    761. 

  761. 			// The cookiename is special; we want it to be the same if it ever needs to be reinstalled with the same info.
    762. 

  762. 			'cookiename' => 'ELKARTECookie' . abs(crc32($_POST['db_name'] . preg_replace('~[^A-Za-z0-9_$]~', '', $_POST['db_prefix'])) % 1000),
    763. 

  763. 		);
    764. 

  764. 

  765. 		// God I hope it saved!
    766. 

  766. 		if (!updateSettingsFile($vars) && substr(__FILE__, 1, 2) == ':\\')
    767. 

  767. 		{
    768. 

  768. 			$incontext['error'] = $txt['error_windows_chmod'];
    769. 

  769. 			return false;
    770. 

  770. 		}
    771. 

  771. 

  772. 		// Make sure it works.
    773. 

  773. 		require(dirname(__FILE__) . '/Settings.php');
    774. 

  774. 

  775. 		if (!defined('SOURCEDIR'))
    776. 

  776. 			define('SOURCEDIR', dirname(__FILE__) . '/sources');
    777. 

  777. 

  778. 		// Better find the database file!
    779. 

  779. 		if (!file_exists(SOURCEDIR . '/database/Db-' . $db_type . '.subs.php'))
    780. 

  780. 		{
    781. 

  781. 			$incontext['error'] = sprintf($txt['error_db_file'], 'Db-' . $db_type . '.subs.php');
    782. 

  782. 			return false;
    783. 

  783. 		}
    784. 

  784. 

  785. 		// Now include it for database functions!
    786. 

  786. 		define('ELKARTE', 1);
    787. 

  787. 		$modSettings['disableQueryCheck'] = true;
    788. 

  788. 		if (empty($smcFunc))
    789. 

  789. 			$smcFunc = array();
    790. 

  790. 

  791. 		require_once(SOURCEDIR . '/database/Db-' . $db_type . '.subs.php');
    792. 

  792. 

  793. 		// Attempt a connection.
    794. 

  794. 		$needsDB = !empty($databases[$db_type]['always_has_db']);
    795. 

  795. 		$db_connection = smf_db_initiate($db_server, $db_name, $db_user, $db_passwd, $db_prefix, array('non_fatal' => true, 'dont_select_db' => !$needsDB));
    796. 

  796. 

  797. 		// No dice?  Let's try adding the prefix they specified, just in case they misread the instructions ;)
    798. 

  798. 		if ($db_connection == null)
    799. 

  799. 		{
    800. 

  800. 			$db_error = @$smcFunc['db_error']();
    801. 

  801. 

  802. 			$db_connection = smf_db_initiate($db_server, $db_name, $_POST['db_prefix'] . $db_user, $db_passwd, $db_prefix, array('non_fatal' => true, 'dont_select_db' => !$needsDB));
    803. 

  803. 			if ($db_connection != null)
    804. 

  804. 			{
    805. 

  805. 				$db_user = $_POST['db_prefix'] . $db_user;
    806. 

  806. 				updateSettingsFile(array('db_user' => $db_user));
    807. 

  807. 			}
    808. 

  808. 		}
    809. 

  809. 

  810. 		// Still no connection?  Big fat error message :P.
    811. 

  811. 		if (!$db_connection)
    812. 

  812. 		{
    813. 

  813. 			$incontext['error'] = $txt['error_db_connect'] . '<div style="margin: 2.5ex; font-family: monospace;"><strong>' . $db_error . '</strong></div>';
    814. 

  814. 			return false;
    815. 

  815. 		}
    816. 

  816. 

  817. 		// Do they meet the install requirements?
    818. 

  818. 		// @todo Old client, new server?
    819. 

  819. 		if (version_compare($databases[$db_type]['version'], preg_replace('~^\D*|\-.+?$~', '', eval($databases[$db_type]['version_check']))) > 0)
    820. 

  820. 		{
    821. 

  821. 			$incontext['error'] = $txt['error_db_too_low'];
    822. 

  822. 			return false;
    823. 

  823. 		}
    824. 

  824. 

  825. 		// Let's try that database on for size... assuming we haven't already lost the opportunity.
    826. 

  826. 		if ($db_name != '' && !$needsDB)
    827. 

  827. 		{
    828. 

  828. 			$smcFunc['db_query']('', "
    829. 

  829. 				CREATE DATABASE IF NOT EXISTS `$db_name`",
    830. 

  830. 				array(
    831. 

  831. 					'security_override' => true,
    832. 

  832. 					'db_error_skip' => true,
    833. 

  833. 				),
    834. 

  834. 				$db_connection
    835. 

  835. 			);
    836. 

  836. 

  837. 			// Okay, let's try the prefix if it didn't work...
    838. 

  838. 			if (!$smcFunc['db_select_db']($db_name, $db_connection) && $db_name != '')
    839. 

  839. 			{
    840. 

  840. 				$smcFunc['db_query']('', "
    841. 

  841. 					CREATE DATABASE IF NOT EXISTS `$_POST[db_prefix]$db_name`",
    842. 

  842. 					array(
    843. 

  843. 						'security_override' => true,
    844. 

  844. 						'db_error_skip' => true,
    845. 

  845. 					),
    846. 

  846. 					$db_connection
    847. 

  847. 				);
    848. 

  848. 

  849. 				if ($smcFunc['db_select_db']($_POST['db_prefix'] . $db_name, $db_connection))
    850. 

  850. 				{
    851. 

  851. 					$db_name = $_POST['db_prefix'] . $db_name;
    852. 

  852. 					updateSettingsFile(array('db_name' => $db_name));
    853. 

  853. 				}
    854. 

  854. 			}
    855. 

  855. 

  856. 			// Okay, now let's try to connect...
    857. 

  857. 			if (!$smcFunc['db_select_db']($db_name, $db_connection))
    858. 

  858. 			{
    859. 

  859. 				$incontext['error'] = sprintf($txt['error_db_database'], $db_name);
    860. 

  860. 				return false;
    861. 

  861. 			}
    862. 

  862. 		}
    863. 

  863. 

  864. 		return true;
    865. 

  865. 	}
    866. 

  866. 

  867. 	return false;
    868. 

  868. }
    869. 

  869. 

  870. /**
    871. 

  871.  * Basic forum type settings.
    872. 

  872.  */
    873. 

  873. function action_forumSettings()
    874. 

  874. {
    875. 

  875. 	global $txt, $incontext, $databases, $smcFunc, $db_connection, $db_type;
    876. 

  876. 

  877. 	$incontext['sub_template'] = 'forum_settings';
    878. 

  878. 	$incontext['page_title'] = $txt['install_settings'];
    879. 

  879. 

  880. 	// Let's see if we got the database type correct.
    881. 

  881. 	if (isset($_POST['db_type'], $databases[$_POST['db_type']]))
    882. 

  882. 		$db_type = $_POST['db_type'];
    883. 

  883. 

  884. 	// Else we'd better be able to get the connection.
    885. 

  885. 	else
    886. 

  886. 		load_database();
    887. 

  887. 

  888. 	$db_type = isset($_POST['db_type']) ? $_POST['db_type'] : $db_type;
    889. 

  889. 

  890. 	// What host and port are we on?
    891. 

  891. 	$host = empty($_SERVER['HTTP_HOST']) ? $_SERVER['SERVER_NAME'] . (empty($_SERVER['SERVER_PORT']) || $_SERVER['SERVER_PORT'] == '80' ? '' : ':' . $_SERVER['SERVER_PORT']) : $_SERVER['HTTP_HOST'];
    892. 

  892. 

  893. 	// Now, to put what we've learned together... and add a path.
    894. 

  894. 	$incontext['detected_url'] = 'http' . (!empty($_SERVER['HTTPS']) && strtolower($_SERVER['HTTPS']) == 'on' ? 's' : '') . '://' . $host . substr($_SERVER['PHP_SELF'], 0, strrpos($_SERVER['PHP_SELF'], '/'));
    895. 

  895. 

  896. 	// Check if the database sessions will even work.
    897. 

  897. 	$incontext['test_dbsession'] = ini_get('session.auto_start') != 1;
    898. 

  898. 	$incontext['continue'] = 1;
    899. 

  899. 

  900. 	// Submitting?
    901. 

  901. 	if (isset($_POST['boardurl']))
    902. 

  902. 	{
    903. 

  903. 		if (substr($_POST['boardurl'], -10) == '/index.php')
    904. 

  904. 			$_POST['boardurl'] = substr($_POST['boardurl'], 0, -10);
    905. 

  905. 		elseif (substr($_POST['boardurl'], -1) == '/')
    906. 

  906. 			$_POST['boardurl'] = substr($_POST['boardurl'], 0, -1);
    907. 

  907. 

  908. 		if (substr($_POST['boardurl'], 0, 7) != 'http://' && substr($_POST['boardurl'], 0, 7) != 'file://' && substr($_POST['boardurl'], 0, 8) != 'https://')
    909. 

  909. 			$_POST['boardurl'] = 'http://' . $_POST['boardurl'];
    910. 

  910. 

  911. 		// Save these variables.
    912. 

  912. 		$vars = array(
    913. 

  913. 			'boardurl' => $_POST['boardurl'],
    914. 

  914. 			'boarddir' => addslashes(dirname(__FILE__)),
    915. 

  915. 			'sourcedir' => addslashes(dirname(__FILE__)) . '/sources',
    916. 

  916. 			'cachedir' => addslashes(dirname(__FILE__)) . '/cache',
    917. 

  917. 			'mbname' => strtr($_POST['mbname'], array('\"' => '"')),
    918. 

  918. 			'language' => substr($_SESSION['installer_temp_lang'], 8, -4),
    919. 

  919. 			'extdir' => addslashes(dirname(__FILE__)) . '/sources/subs',
    920. 

  920. 		);
    921. 

  921. 

  922. 		// Must save!
    923. 

  923. 		if (!updateSettingsFile($vars) && substr(__FILE__, 1, 2) == ':\\')
    924. 

  924. 		{
    925. 

  925. 			$incontext['error'] = $txt['error_windows_chmod'];
    926. 

  926. 			return false;
    927. 

  927. 		}
    928. 

  928. 

  929. 		// Make sure it works.
    930. 

  930. 		require(dirname(__FILE__) . '/Settings.php');
    931. 

  931. 

  932. 		// UTF-8 requires a setting to override any language charset.
    933. 

  933. 		if (!empty($databases[$db_type]['utf8_version_check']) && version_compare($databases[$db_type]['utf8_version'], preg_replace('~\-.+?$~', '', eval($databases[$db_type]['utf8_version_check'])), '>'))
    934. 

  934. 		{
    935. 

  935. 			// our uft-8 check support on the db failed ....
    936. 

  936. 			$incontext['error'] = sprintf($txt['error_utf8_version'], $databases[$db_type]['utf8_version']);
    937. 

  937. 			return false;
    938. 

  938. 		}
    939. 

  939. 		else
    940. 

  940. 			// Set our db character_set to utf8
    941. 

  941. 			updateSettingsFile(array('db_character_set' => 'utf8'));
    942. 

  942. 

  943. 		// Good, skip on.
    944. 

  944. 		return true;
    945. 

  945. 	}
    946. 

  946. 

  947. 	return false;
    948. 

  948. }
    949. 

  949. 

  950. /**
    951. 

  951.  * Step one. Populate database.
    952. 

  952.  */
    953. 

  953. function action_databasePopulation()
    954. 

  954. {
    955. 

  955. 	global $db_character_set, $txt, $db_connection, $smcFunc, $databases, $modSettings, $db_type, $db_prefix, $incontext, $db_name, $boardurl;
    956. 

  956. 

  957. 	$incontext['sub_template'] = 'populate_database';
    958. 

  958. 	$incontext['page_title'] = $txt['db_populate'];
    959. 

  959. 	$incontext['continue'] = 1;
    960. 

  960. 

  961. 	// Already done?
    962. 

  962. 	if (isset($_POST['pop_done']))
    963. 

  963. 		return true;
    964. 

  964. 

  965. 	// Reload settings.
    966. 

  966. 	require(dirname(__FILE__) . '/Settings.php');
    967. 

  967. 	load_database();
    968. 

  968. 

  969. 	// Before running any of the queries, let's make sure another version isn't already installed.
    970. 

  970. 	$result = $smcFunc['db_query']('', '
    971. 

  971. 		SELECT variable, value
    972. 

  972. 		FROM {db_prefix}settings',
    973. 

  973. 		array(
    974. 

  974. 			'db_error_skip' => true,
    975. 

  975. 		)
    976. 

  976. 	);
    977. 

  977. 	$modSettings = array();
    978. 

  978. 	if ($result !== false)
    979. 

  979. 	{
    980. 

  980. 		while ($row = $smcFunc['db_fetch_assoc']($result))
    981. 

  981. 			$modSettings[$row['variable']] = $row['value'];
    982. 

  982. 		$smcFunc['db_free_result']($result);
    983. 

  983. 

  984. 		// Do they match?  If so, this is just a refresh so charge on!
    985. 

  985. 		if (!isset($modSettings['elkVersion']) || $modSettings['elkVersion'] != $GLOBALS['current_version'])
    986. 

  986. 		{
    987. 

  987. 			$incontext['error'] = $txt['error_versions_do_not_match'];
    988. 

  988. 			return false;
    989. 

  989. 		}
    990. 

  990. 	}
    991. 

  991. 	$modSettings['disableQueryCheck'] = true;
    992. 

  992. 

  993. 	// Since we are UTF8, select it. PostgreSQL requires passing it as a string...
    994. 

  994. 	$smcFunc['db_query']('', '
    995. 

  995. 		SET NAMES {'. ($db_type == 'postgresql' ? 'string' : 'raw') . ':utf8}',
    996. 

  996. 		array(
    997. 

  997. 			'db_error_skip' => true,
    998. 

  998. 			'utf8' => 'utf8',
    999. 

  999. 		)
    1000. 

  1000. 	);
    1001. 

  1001. 

  1002. 	$replaces = array(
    1003. 

  1003. 		'{$db_prefix}' => $db_prefix,
    1004. 

  1004. 		'{BOARDDIR}' => $smcFunc['db_escape_string'](dirname(__FILE__)),
    1005. 

  1005. 		'{$boardurl}' => $boardurl,
    1006. 

  1006. 		'{$enableCompressedOutput}' => isset($_POST['compress']) ? '1' : '0',
    1007. 

  1007. 		'{$databaseSession_enable}' => isset($_POST['dbsession']) ? '1' : '0',
    1008. 

  1008. 		'{$current_version}' => $GLOBALS['current_version'],
    1009. 

  1009. 		'{$current_time}' => time(),
    1010. 

  1010. 		'{$sched_task_offset}' => 82800 + mt_rand(0, 86399),
    1011. 

  1011. 	);
    1012. 

  1012. 

  1013. 	foreach ($txt as $key => $value)
    1014. 

  1014. 	{
    1015. 

  1015. 		if (substr($key, 0, 8) == 'default_')
    1016. 

  1016. 			$replaces['{$' . $key . '}'] = $smcFunc['db_escape_string']($value);
    1017. 

  1017. 	}
    1018. 

  1018. 	$replaces['{$default_reserved_names}'] = strtr($replaces['{$default_reserved_names}'], array('\\\\n' => '\\n'));
    1019. 

  1019. 

  1020. 	// If the UTF-8 setting was enabled, add it to the table definitions.
    1021. 

  1021. 	if (!empty($databases[$db_type]['utf8_support']))
    1022. 

  1022. 		$replaces[') ENGINE=MyISAM;'] = ') ENGINE=MyISAM DEFAULT CHARSET=utf8 COLLATE=utf8_general_ci;';
    1023. 

  1023. 

  1024. 	// Read in the SQL.  Turn this on and that off... internationalize... etc.
    1025. 

  1025. 	$sql_lines = explode("\n", strtr(implode(' ', file(dirname(__FILE__) . '/install_' . $GLOBALS['db_script_version'] . '_' . $db_type . '.sql')), $replaces));
    1026. 

  1026. 

  1027. 	// Execute the SQL.
    1028. 

  1028. 	$current_statement = '';
    1029. 

  1029. 	$exists = array();
    1030. 

  1030. 	$incontext['failures'] = array();
    1031. 

  1031. 	$incontext['sql_results'] = array(
    1032. 

  1032. 		'tables' => 0,
    1033. 

  1033. 		'inserts' => 0,
    1034. 

  1034. 		'table_dups' => 0,
    1035. 

  1035. 		'insert_dups' => 0,
    1036. 

  1036. 	);
    1037. 

  1037. 

  1038. 	foreach ($sql_lines as $count => $line)
    1039. 

  1039. 	{
    1040. 

  1040. 		// No comments allowed!
    1041. 

  1041. 		if (substr(trim($line), 0, 1) != '#')
    1042. 

  1042. 			$current_statement .= "\n" . rtrim($line);
    1043. 

  1043. 

  1044. 		// Is this the end of the query string?
    1045. 

  1045. 		if (empty($current_statement) || (preg_match('~;[\s]*$~s', $line) == 0 && $count != count($sql_lines)))
    1046. 

  1046. 			continue;
    1047. 

  1047. 

  1048. 		// Does this table already exist?  If so, don't insert more data into it!
    1049. 

  1049. 		if (preg_match('~^\s*INSERT INTO ([^\s\n\r]+?)~', $current_statement, $match) != 0 && in_array($match[1], $exists))
    1050. 

  1050. 		{
    1051. 

  1051. 			$incontext['sql_results']['insert_dups']++;
    1052. 

  1052. 			$current_statement = '';
    1053. 

  1053. 			continue;
    1054. 

  1054. 		}
    1055. 

  1055. 

  1056. 		if ($smcFunc['db_query']('', $current_statement, array('security_override' => true, 'db_error_skip' => true), $db_connection) === false)
    1057. 

  1057. 		{
    1058. 

  1058. 			// Error 1050: Table already exists!
    1059. 

  1059. 			// @todo Needs to be made better!
    1060. 

  1060. 			if (($db_type != 'mysql' || mysql_errno($db_connection) === 1050) && preg_match('~^\s*CREATE TABLE ([^\s\n\r]+?)~', $current_statement, $match) == 1)
    1061. 

  1061. 			{
    1062. 

  1062. 				$exists[] = $match[1];
    1063. 

  1063. 				$incontext['sql_results']['table_dups']++;
    1064. 

  1064. 			}
    1065. 

  1065. 			// Don't error on duplicate indexes (or duplicate operators in PostgreSQL.)
    1066. 

  1066. 			elseif (!preg_match('~^\s*CREATE( UNIQUE)? INDEX ([^\n\r]+?)~', $current_statement, $match) && !($db_type == 'postgresql' && preg_match('~^\s*CREATE OPERATOR (^\n\r]+?)~', $current_statement, $match)))
    1067. 

  1067. 			{
    1068. 

  1068. 				$incontext['failures'][$count] = $smcFunc['db_error']();
    1069. 

  1069. 			}
    1070. 

  1070. 		}
    1071. 

  1071. 		else
    1072. 

  1072. 		{
    1073. 

  1073. 			if (preg_match('~^\s*CREATE TABLE ([^\s\n\r]+?)~', $current_statement, $match) == 1)
    1074. 

  1074. 				$incontext['sql_results']['tables']++;
    1075. 

  1075. 			else
    1076. 

  1076. 			{
    1077. 

  1077. 				preg_match_all('~\)[,;]~', $current_statement, $matches);
    1078. 

  1078. 				if (!empty($matches[0]))
    1079. 

  1079. 					$incontext['sql_results']['inserts'] += count($matches[0]);
    1080. 

  1080. 				else
    1081. 

  1081. 					$incontext['sql_results']['inserts']++;
    1082. 

  1082. 			}
    1083. 

  1083. 		}
    1084. 

  1084. 

  1085. 		$current_statement = '';
    1086. 

  1086. 	}
    1087. 

  1087. 

  1088. 	// Sort out the context for the SQL.
    1089. 

  1089. 	foreach ($incontext['sql_results'] as $key => $number)
    1090. 

  1090. 	{
    1091. 

  1091. 		if ($number == 0)
    1092. 

  1092. 			unset($incontext['sql_results'][$key]);
    1093. 

  1093. 		else
    1094. 

  1094. 			$incontext['sql_results'][$key] = sprintf($txt['db_populate_' . $key], $number);
    1095. 

  1095. 	}
    1096. 

  1096. 

  1097. 	// Make sure UTF will be used globally.
    1098. 

  1098. 	$smcFunc['db_insert']('replace',
    1099. 

  1099. 		$db_prefix . 'settings',
    1100. 

  1100. 		array(
    1101. 

  1101. 			'variable' => 'string-255', 'value' => 'string-65534',
    1102. 

  1102. 		),
    1103. 

  1103. 		array(
    1104. 

  1104. 			'global_character_set', 'UTF-8',
    1105. 

  1105. 		),
    1106. 

  1106. 		array('variable')
    1107. 

  1107. 	);
    1108. 

  1108. 

  1109. 	// Maybe we can auto-detect better cookie settings?
    1110. 

  1110. 	preg_match('~^http[s]?://([^\.]+?)([^/]*?)(/.*)?$~', $boardurl, $matches);
    1111. 

  1111. 	if (!empty($matches))
    1112. 

  1112. 	{
    1113. 

  1113. 		// Default = both off.
    1114. 

  1114. 		$localCookies = false;
    1115. 

  1115. 		$globalCookies = false;
    1116. 

  1116. 

  1117. 		// Okay... let's see.  Using a subdomain other than www.? (not a perfect check.)
    1118. 

  1118. 		if ($matches[2] != '' && (strpos(substr($matches[2], 1), '.') === false || in_array($matches[1], array('forum', 'board', 'community', 'forums', 'support', 'chat', 'help', 'talk', 'boards', 'www'))))
    1119. 

  1119. 			$globalCookies = true;
    1120. 

  1120. 

  1121. 		// If there's a / in the middle of the path, or it starts with ~... we want local.
    1122. 

  1122. 		if (isset($matches[3]) && strlen($matches[3]) > 3 && (substr($matches[3], 0, 2) == '/~' || strpos(substr($matches[3], 1), '/') !== false))
    1123. 

  1123. 			$localCookies = true;
    1124. 

  1124. 

  1125. 		if ($globalCookies)
    1126. 

  1126. 			$rows[] = array('globalCookies', '1');
    1127. 

  1127. 		if ($localCookies)
    1128. 

  1128. 			$rows[] = array('localCookies', '1');
    1129. 

  1129. 

  1130. 		if (!empty($rows))
    1131. 

  1131. 		{
    1132. 

  1132. 			$smcFunc['db_insert']('replace',
    1133. 

  1133. 				$db_prefix . 'settings',
    1134. 

  1134. 				array('variable' => 'string-255', 'value' => 'string-65534'),
    1135. 

  1135. 				$rows,
    1136. 

  1136. 				array('variable')
    1137. 

  1137. 			);
    1138. 

  1138. 		}
    1139. 

  1139. 	}
    1140. 

  1140. 

  1141. 	// As of PHP 5.1, setting a timezone is required.
    1142. 

  1142. 	if (!isset($modSettings['default_timezone']) && function_exists('date_default_timezone_set'))
    1143. 

  1143. 	{
    1144. 

  1144. 		$server_offset = mktime(0, 0, 0, 1, 1, 1970);
    1145. 

  1145. 		$timezone_id = 'Etc/GMT' . ($server_offset > 0 ? '+' : '') . ($server_offset / 3600);
    1146. 

  1146. 		if (date_default_timezone_set($timezone_id))
    1147. 

  1147. 			$smcFunc['db_insert']('',
    1148. 

  1148. 				$db_prefix . 'settings',
    1149. 

  1149. 				array(
    1150. 

  1150. 					'variable' => 'string-255', 'value' => 'string-65534',
    1151. 

  1151. 				),
    1152. 

  1152. 				array(
    1153. 

  1153. 					'default_timezone', $timezone_id,
    1154. 

  1154. 				),
    1155. 

  1155. 				array('variable')
    1156. 

  1156. 			);
    1157. 

  1157. 	}
    1158. 

  1158. 

  1159. 	// Let's optimize those new tables.
    1160. 

  1160. 	db_extend();
    1161. 

  1161. 	$tables = $smcFunc['db_list_tables']($db_name, $db_prefix . '%');
    1162. 

  1162. 	foreach ($tables as $table)
    1163. 

  1163. 	{
    1164. 

  1164. 		$smcFunc['db_optimize_table']($table) != -1 or $db_messed = true;
    1165. 

  1165. 

  1166. 		// Optimizing one sqlite table, optimizes them all
    1167. 

  1167. 		if ($db_type == 'sqlite')
    1168. 

  1168. 			break;
    1169. 

  1169. 

  1170. 		if (!empty($db_messed))
    1171. 

  1171. 		{
    1172. 

  1172. 			$incontext['failures'][-1] = $smcFunc['db_error']();
    1173. 

  1173. 			break;
    1174. 

  1174. 		}
    1175. 

  1175. 	}
    1176. 

  1176. 

  1177. 	// Check for the ALTER privilege.
    1178. 

  1178. 	if (!empty($databases[$db_type]['alter_support']) && $smcFunc['db_query']('', "ALTER TABLE {$db_prefix}boards ORDER BY id_board", array('security_override' => true, 'db_error_skip' => true)) === false)
    1179. 

  1179. 	{
    1180. 

  1180. 		$incontext['error'] = $txt['error_db_alter_priv'];
    1181. 

  1181. 		return false;
    1182. 

  1182. 	}
    1183. 

  1183. 

  1184. 	if (!empty($exists))
    1185. 

  1185. 	{
    1186. 

  1186. 		$incontext['page_title'] = $txt['user_refresh_install'];
    1187. 

  1187. 		$incontext['was_refresh'] = true;
    1188. 

  1188. 	}
    1189. 

  1189. 

  1190. 	return false;
    1191. 

  1191. }
    1192. 

  1192. 

  1193. /**
    1194. 

  1194.  * Ask for the administrator login information.
    1195. 

  1195.  */
    1196. 

  1196. function action_adminAccount()
    1197. 

  1197. {
    1198. 

  1198. 	global $txt, $db_type, $db_connection, $databases, $smcFunc, $incontext, $db_prefix, $db_passwd;
    1199. 

  1199. 

  1200. 	$incontext['sub_template'] = 'admin_account';
    1201. 

  1201. 	$incontext['page_title'] = $txt['user_settings'];
    1202. 

  1202. 	$incontext['continue'] = 1;
    1203. 

  1203. 

  1204. 	// Skipping?
    1205. 

  1205. 	if (!empty($_POST['skip']))
    1206. 

  1206. 		return true;
    1207. 

  1207. 

  1208. 	// Need this to check whether we need the database password.
    1209. 

  1209. 	require(dirname(__FILE__) . '/Settings.php');
    1210. 

  1210. 	load_database();
    1211. 

  1211. 

  1212. 	if (!isset($_POST['username']))
    1213. 

  1213. 		$_POST['username'] = '';
    1214. 

  1214. 	if (!isset($_POST['email']))
    1215. 

  1215. 		$_POST['email'] = '';
    1216. 

  1216. 

  1217. 	$incontext['username'] = htmlspecialchars(stripslashes($_POST['username']));
    1218. 

  1218. 	$incontext['email'] = htmlspecialchars(stripslashes($_POST['email']));
    1219. 

  1219. 

  1220. 	$incontext['require_db_confirm'] = empty($db_type) || $db_type != 'sqlite';
    1221. 

  1221. 

  1222. 	// Only allow skipping if we think they already have an account setup.
    1223. 

  1223. 	$request = $smcFunc['db_query']('', '
    1224. 

  1224. 		SELECT id_member
    1225. 

  1225. 		FROM {db_prefix}members
    1226. 

  1226. 		WHERE id_group = {int:admin_group} OR FIND_IN_SET({int:admin_group}, additional_groups) != 0
    1227. 

  1227. 		LIMIT 1',
    1228. 

  1228. 		array(
    1229. 

  1229. 			'db_error_skip' => true,
    1230. 

  1230. 			'admin_group' => 1,
    1231. 

  1231. 		)
    1232. 

  1232. 	);
    1233. 

  1233. 	if ($smcFunc['db_num_rows']($request) != 0)
    1234. 

  1234. 		$incontext['skip'] = 1;
    1235. 

  1235. 	$smcFunc['db_free_result']($request);
    1236. 

  1236. 

  1237. 	// Trying to create an account?
    1238. 

  1238. 	if (isset($_POST['password1']) && !empty($_POST['contbutt']))
    1239. 

  1239. 	{
    1240. 

  1240. 		// Wrong password?
    1241. 

  1241. 		if ($incontext['require_db_confirm'] && $_POST['password3'] != $db_passwd)
    1242. 

  1242. 		{
    1243. 

  1243. 			$incontext['error'] = $txt['error_db_connect'];
    1244. 

  1244. 			return false;
    1245. 

  1245. 		}
    1246. 

  1246. 

  1247. 		// Not matching passwords?
    1248. 

  1248. 		if ($_POST['password1'] != $_POST['password2'])
    1249. 

  1249. 		{
    1250. 

  1250. 			$incontext['error'] = $txt['error_user_settings_again_match'];
    1251. 

  1251. 			return false;
    1252. 

  1252. 		}
    1253. 

  1253. 

  1254. 		// No password?
    1255. 

  1255. 		if (strlen($_POST['password1']) < 4)
    1256. 

  1256. 		{
    1257. 

  1257. 			$incontext['error'] = $txt['error_user_settings_no_password'];
    1258. 

  1258. 			return false;
    1259. 

  1259. 		}
    1260. 

  1260. 

  1261. 		if (!file_exists(SOURCEDIR . '/Subs.php'))
    1262. 

  1262. 		{
    1263. 

  1263. 			$incontext['error'] = $txt['error_subs_missing'];
    1264. 

  1264. 			return false;
    1265. 

  1265. 		}
    1266. 

  1266. 

  1267. 		// Update the main contact email?
    1268. 

  1268. 		if (!empty($_POST['email']) && (empty($webmaster_email) || $webmaster_email == 'noreply@myserver.com'))
    1269. 

  1269. 			updateSettingsFile(array('webmaster_email' => $_POST['email']));
    1270. 

  1270. 

  1271. 		// Work out whether we're going to have dodgy characters and remove them.
    1272. 

  1272. 		$invalid_characters = preg_match('~[<>&"\'=\\\]~', $_POST['username']) != 0;
    1273. 

  1273. 		$_POST['username'] = preg_replace('~[<>&"\'=\\\]~', '', $_POST['username']);
    1274. 

  1274. 

  1275. 		$result = $smcFunc['db_query']('', '
    1276. 

  1276. 			SELECT id_member, password_salt
    1277. 

  1277. 			FROM {db_prefix}members
    1278. 

  1278. 			WHERE member_name = {string:username} OR email_address = {string:email}
    1279. 

  1279. 			LIMIT 1',
    1280. 

  1280. 			array(
    1281. 

  1281. 				'username' => stripslashes($_POST['username']),
    1282. 

  1282. 				'email' => stripslashes($_POST['email']),
    1283. 

  1283. 				'db_error_skip' => true,
    1284. 

  1284. 			)
    1285. 

  1285. 		);
    1286. 

  1286. 

  1287. 		if ($smcFunc['db_num_rows']($result) != 0)
    1288. 

  1288. 		{
    1289. 

  1289. 			list ($incontext['member_id'], $incontext['member_salt']) = $smcFunc['db_fetch_row']($result);
    1290. 

  1290. 			$smcFunc['db_free_result']($result);
    1291. 

  1291. 

  1292. 			$incontext['account_existed'] = $txt['error_user_settings_taken'];
    1293. 

  1293. 		}
    1294. 

  1294. 		elseif ($_POST['username'] == '' || strlen($_POST['username']) > 25)
    1295. 

  1295. 		{
    1296. 

  1296. 			// Try the previous step again.
    1297. 

  1297. 			$incontext['error'] = $_POST['username'] == '' ? $txt['error_username_left_empty'] : $txt['error_username_too_long'];
    1298. 

  1298. 			return false;
    1299. 

  1299. 		}
    1300. 

  1300. 		elseif ($invalid_characters || $_POST['username'] == '_' || $_POST['username'] == '|' || strpos($_POST['username'], '[code') !== false || strpos($_POST['username'], '[/code') !== false)
    1301. 

  1301. 		{
    1302. 

  1302. 			// Try the previous step again.
    1303. 

  1303. 			$incontext['error'] = $txt['error_invalid_characters_username'];
    1304. 

  1304. 			return false;
    1305. 

  1305. 		}
    1306. 

  1306. 		elseif (empty($_POST['email']) || preg_match('~^[0-9A-Za-z=_+\-/][0-9A-Za-z=_\'+\-/\.]*@[\w\-]+(\.[\w\-]+)*(\.[\w]{2,6})$~', stripslashes($_POST['email'])) === 0 || strlen(stripslashes($_POST['email'])) > 255)
    1307. 

  1307. 		{
    1308. 

  1308. 			// One step back, this time fill out a proper email address.
    1309. 

  1309. 			$incontext['error'] = sprintf($txt['error_valid_email_needed'], $_POST['username']);
    1310. 

  1310. 			return false;
    1311. 

  1311. 		}
    1312. 

  1312. 		elseif ($_POST['username'] != '')
    1313. 

  1313. 		{
    1314. 

  1314. 			$incontext['member_salt'] = substr(md5(mt_rand()), 0, 4);
    1315. 

  1315. 

  1316. 			// Format the username properly.
    1317. 

  1317. 			$_POST['username'] = preg_replace('~[\t\n\r\x0B\0\xA0]+~', ' ', $_POST['username']);
    1318. 

  1318. 			$ip = isset($_SERVER['REMOTE_ADDR']) ? substr($_SERVER['REMOTE_ADDR'], 0, 255) : '';
    1319. 

  1319. 

  1320. 			$request = $smcFunc['db_insert']('',
    1321. 

  1321. 				$db_prefix . 'members',
    1322. 

  1322. 				array(
    1323. 

  1323. 					'member_name' => 'string-25', 'real_name' => 'string-25', 'passwd' => 'string', 'email_address' => 'string',
    1324. 

  1324. 					'id_group' => 'int', 'posts' => 'int', 'date_registered' => 'int', 'hide_email' => 'int',
    1325. 

  1325. 					'password_salt' => 'string', 'lngfile' => 'string', 'personal_text' => 'string', 'avatar' => 'string',
    1326. 

  1326. 					'member_ip' => 'string', 'member_ip2' => 'string', 'buddy_list' => 'string', 'pm_ignore_list' => 'string',
    1327. 

  1327. 					'message_labels' => 'string', 'website_title' => 'string', 'website_url' => 'string', 'location' => 'string',
    1328. 

  1328. 					'signature' => 'string', 'usertitle' => 'string', 'secret_question' => 'string',
    1329. 

  1329. 					'additional_groups' => 'string', 'ignore_boards' => 'string', 'openid_uri' => 'string',
    1330. 

  1330. 				),
    1331. 

  1331. 				array(
    1332. 

  1332. 					stripslashes($_POST['username']), stripslashes($_POST['username']), sha1(strtolower(stripslashes($_POST['username'])) . stripslashes($_POST['password1'])), stripslashes($_POST['email']),
    1333. 

  1333. 					1, 0, time(), 0,
    1334. 

  1334. 					$incontext['member_salt'], '', '', '',
    1335. 

  1335. 					$ip, $ip, '', '',
    1336. 

  1336. 					'', '', '', '',
    1337. 

  1337. 					'', '', '',
    1338. 

  1338. 					'', '', '',
    1339. 

  1339. 				),
    1340. 

  1340. 				array('id_member')
    1341. 

  1341. 			);
    1342. 

  1342. 

  1343. 			// Awww, crud!
    1344. 

  1344. 			if ($request === false)
    1345. 

  1345. 			{
    1346. 

  1346. 				$incontext['error'] = $txt['error_user_settings_query'] . '<br />
    1347. 

  1347. 				<div style="margin: 2ex;">' . nl2br(htmlspecialchars($smcFunc['db_error']($db_connection))) . '</div>';
    1348. 

  1348. 				return false;
    1349. 

  1349. 			}
    1350. 

  1350. 

  1351. 			$incontext['member_id'] = $smcFunc['db_insert_id']("{$db_prefix}members", 'id_member');
    1352. 

  1352. 		}
    1353. 

  1353. 

  1354. 		// If we're here we're good.
    1355. 

  1355. 		return true;
    1356. 

  1356. 	}
    1357. 

  1357. 

  1358. 	return false;
    1359. 

  1359. }
    1360. 

  1360. 

  1361. /**
    1362. 

  1362.  * Final step, clean up and a complete message!
    1363. 

  1363.  */
    1364. 

  1364. function action_deleteInstall()
    1365. 

  1365. {
    1366. 

  1366. 	global $txt, $db_prefix, $db_connection, $HTTP_SESSION_VARS, $cookiename, $incontext;
    1367. 

  1367. 	global $smcFunc, $db_character_set, $mbname, $context, $scripturl, $boardurl;
    1368. 

  1368. 	global $current_version, $databases, $forum_version, $modSettings, $user_info, $language, $db_type;
    1369. 

  1369. 

  1370. 	$incontext['page_title'] = $txt['congratulations'];
    1371. 

  1371. 	$incontext['sub_template'] = 'delete_install';
    1372. 

  1372. 	$incontext['continue'] = 0;
    1373. 

  1373. 

  1374. 	require(dirname(__FILE__) . '/Settings.php');
    1375. 

  1375. 	load_database();
    1376. 

  1376. 

  1377. 	if (!defined('SUBSDIR'))
    1378. 

  1378. 		define('SUBSDIR', dirname(__FILE__) . '/sources/subs');
    1379. 

  1379. 

  1380. 	chdir(dirname(__FILE__));
    1381. 

  1381. 

  1382. 	require_once(SOURCEDIR . '/Errors.php');
    1383. 

  1383. 	require_once(SOURCEDIR . '/Logging.php');
    1384. 

  1384. 	require_once(SOURCEDIR . '/Subs.php');
    1385. 

  1385. 	require_once(SOURCEDIR . '/Load.php');
    1386. 

  1386. 	require_once(SUBSDIR . '/Cache.subs.php');
    1387. 

  1387. 	require_once(SOURCEDIR . '/Security.php');
    1388. 

  1388. 	require_once(SUBSDIR . '/Auth.subs.php');
    1389. 

  1389. 

  1390. 	// Bring a warning over.
    1391. 

  1391. 	if (!empty($incontext['account_existed']))
    1392. 

  1392. 		$incontext['warning'] = $incontext['account_existed'];
    1393. 

  1393. 

  1394. 	if (!empty($db_character_set) && !empty($databases[$db_type]['utf8_support']))
    1395. 

  1395. 		$smcFunc['db_query']('', '
    1396. 

  1396. 			SET NAMES {raw:db_character_set}',
    1397. 

  1397. 			array(
    1398. 

  1398. 				'db_character_set' => $db_character_set,
    1399. 

  1399. 				'db_error_skip' => true,
    1400. 

  1400. 			)
    1401. 

  1401. 		);
    1402. 

  1402. 

  1403. 	// As track stats is by default enabled let's add some activity.
    1404. 

  1404. 	$smcFunc['db_insert']('ignore',
    1405. 

  1405. 		'{db_prefix}log_activity',
    1406. 

  1406. 		array('date' => 'date', 'topics' => 'int', 'posts' => 'int', 'registers' => 'int'),
    1407. 

  1407. 		array(strftime('%Y-%m-%d', time()), 1, 1, (!empty($incontext['member_id']) ? 1 : 0)),
    1408. 

  1408. 		array('date')
    1409. 

  1409. 	);
    1410. 

  1410. 

  1411. 	// We're going to want our lovely $modSettings now.
    1412. 

  1412. 	$request = $smcFunc['db_query']('', '
    1413. 

  1413. 		SELECT variable, value
    1414. 

  1414. 		FROM {db_prefix}settings',
    1415. 

  1415. 		array(
    1416. 

  1416. 			'db_error_skip' => true,
    1417. 

  1417. 		)
    1418. 

  1418. 	);
    1419. 

  1419. 	// Only proceed if we can load the data.
    1420. 

  1420. 	if ($request)
    1421. 

  1421. 	{
    1422. 

  1422. 		while ($row = $smcFunc['db_fetch_row']($request))
    1423. 

  1423. 			$modSettings[$row[0]] = $row[1];
    1424. 

  1424. 		$smcFunc['db_free_result']($request);
    1425. 

  1425. 	}
    1426. 

  1426. 

  1427. 	// Automatically log them in ;)
    1428. 

  1428. 	if (isset($incontext['member_id']) && isset($incontext['member_salt']))
    1429. 

  1429. 		setLoginCookie(3153600 * 60, $incontext['member_id'], sha1(sha1(strtolower($_POST['username']) . $_POST['password1']) . $incontext['member_salt']));
    1430. 

  1430. 

  1431. 	$result = $smcFunc['db_query']('', '
    1432. 

  1432. 		SELECT value
    1433. 

  1433. 		FROM {db_prefix}settings
    1434. 

  1434. 		WHERE variable = {string:db_sessions}',
    1435. 

  1435. 		array(
    1436. 

  1436. 			'db_sessions' => 'databaseSession_enable',
    1437. 

  1437. 			'db_error_skip' => true,
    1438. 

  1438. 		)
    1439. 

  1439. 	);
    1440. 

  1440. 	if ($smcFunc['db_num_rows']($result) != 0)
    1441. 

  1441. 		list ($db_sessions) = $smcFunc['db_fetch_row']($result);
    1442. 

  1442. 	$smcFunc['db_free_result']($result);
    1443. 

  1443. 

  1444. 	if (empty($db_sessions))
    1445. 

  1445. 		$_SESSION['admin_time'] = time();
    1446. 

  1446. 	else
    1447. 

  1447. 	{
    1448. 

  1448. 		$_SERVER['HTTP_USER_AGENT'] = substr($_SERVER['HTTP_USER_AGENT'], 0, 211);
    1449. 

  1449. 

  1450. 		$smcFunc['db_insert']('replace',
    1451. 

  1451. 			'{db_prefix}sessions',
    1452. 

  1452. 			array(
    1453. 

  1453. 				'session_id' => 'string', 'last_update' => 'int', 'data' => 'string',
    1454. 

  1454. 			),
    1455. 

  1455. 			array(
    1456. 

  1456. 				session_id(), time(), 'USER_AGENT|s:' . strlen($_SERVER['HTTP_USER_AGENT']) . ':"' . $_SERVER['HTTP_USER_AGENT'] . '";admin_time|i:' . time() . ';',
    1457. 

  1457. 			),
    1458. 

  1458. 			array('session_id')
    1459. 

  1459. 		);
    1460. 

  1460. 	}
    1461. 

  1461. 

  1462. 	updateStats('member');
    1463. 

  1463. 	updateStats('message');
    1464. 

  1464. 	updateStats('topic');
    1465. 

  1465. 

  1466. 	// This function is needed to do the updateStats('subject') call.
    1467. 

  1467. 	$smcFunc['strtolower'] = create_function('$string', '
    1468. 

  1468. 		return $string;');
    1469. 

    1470. 

  1470. 	$request = $smcFunc['db_query']('', '
    1471. 

  1471. 		SELECT id_msg
    1472. 

  1472. 		FROM {db_prefix}messages
    1473. 

  1473. 		WHERE id_msg = 1
    1474. 

  1474. 			AND modified_time = 0
    1475. 

  1475. 		LIMIT 1',
    1476. 

  1476. 		array(
    1477. 

  1477. 			'db_error_skip' => true,
    1478. 

  1478. 		)
    1479. 

  1479. 	);
    1480. 

  1480. 	if ($smcFunc['db_num_rows']($request) > 0)
    1481. 

  1481. 		updateStats('subject', 1, htmlspecialchars($txt['default_topic_subject']));
    1482. 

  1482. 	$smcFunc['db_free_result']($request);
    1483. 

  1483. 

  1484. 	// Now is the perfect time to fetch the SM files.
    1485. 

  1485. 	require_once(SOURCEDIR . '/ScheduledTasks.php');
    1486. 

  1486. 

  1487. 	// Sanity check that they loaded earlier!
    1488. 

  1488. 	if (isset($modSettings['recycle_board']))
    1489. 

  1489. 	{
    1490. 

  1490. 		// The variable is usually defined in index.php so lets just use our variable to do it for us.
    1491. 

  1491. 		$forum_version = $current_version;
    1492. 

  1492. 		// Now go get those files!
    1493. 

  1493. 		scheduled_fetchFiles();
    1494. 

  1494. 		// We've just installed!
    1495. 

  1495. 		$user_info['ip'] = $_SERVER['REMOTE_ADDR'];
    1496. 

  1496. 		$user_info['id'] = isset($incontext['member_id']) ? $incontext['member_id'] : 0;
    1497. 

  1497. 		logAction('install', array('version' => $forum_version), 'admin');
    1498. 

  1498. 	}
    1499. 

  1499. 

  1500. 	// Check if we need some stupid MySQL fix.
    1501. 

  1501. 	$server_version = $smcFunc['db_server_info']();
    1502. 

  1502. 	if ($db_type == 'mysql' && in_array(substr($server_version, 0, 6), array('5.0.50', '5.0.51')))
    1503. 

  1503. 		updateSettings(array('db_mysql_group_by_fix' => '1'));
    1504. 

  1504. 

  1505. 	// Some final context for the template.
    1506. 

  1506. 	$incontext['dir_still_writable'] = is_writable(dirname(__FILE__)) && substr(__FILE__, 1, 2) != ':\\';
    1507. 

  1507. 	$incontext['probably_delete_install'] = isset($_SESSION['installer_temp_ftp']) || is_writable(dirname(__FILE__)) || is_writable(__FILE__);
    1508. 

  1508. 

  1509. 	return false;
    1510. 

  1510. }
    1511. 

  1511. 

  1512. /**
    1513. 

  1513.  * FTP connection class.
    1514. 

  1514.  * The installer will try to use this when it needs writable files
    1515. 

  1515.  *  and it fails to make them writable otherwise.
    1516. 

  1516.  *
    1517. 

  1517.  * Credit: http://www.faqs.org/rfcs/rfc959.html
    1518. 

  1518.  */
    1519. 

  1519. class Ftp_Connection
    1520. 

  1520. {
    1521. 

  1521. 	var $connection = 'no_connection', $error = false, $last_message, $pasv = array();
    1522. 

  1522. 

  1523. 	// Create a new FTP connection...
    1524. 

  1524. 	function ftp_connection($ftp_server, $ftp_port = 21, $ftp_user = 'anonymous', $ftp_pass = 'ftpclient@yourdomain.org')
    1525. 

  1525. 	{
    1526. 

  1526. 		if ($ftp_server !== null)
    1527. 

  1527. 			$this->connect($ftp_server, $ftp_port, $ftp_user, $ftp_pass);
    1528. 

  1528. 	}
    1529. 

  1529. 

  1530. 	function connect($ftp_server, $ftp_port = 21, $ftp_user = 'anonymous', $ftp_pass = 'ftpclient@yourdomain.org')
    1531. 

  1531. 	{
    1532. 

  1532. 		if (substr($ftp_server, 0, 6) == 'ftp://')
    1533. 

  1533. 			$ftp_server = substr($ftp_server, 6);
    1534. 

  1534. 		elseif (substr($ftp_server, 0, 7) == 'ftps://')
    1535. 

  1535. 			$ftp_server = 'ssl://' . substr($ftp_server, 7);
    1536. 

  1536. 		if (substr($ftp_server, 0, 7) == 'http://')
    1537. 

  1537. 			$ftp_server = substr($ftp_server, 7);
    1538. 

  1538. 		$ftp_server = strtr($ftp_server, array('/' => '', ':' => '', '@' => ''));
    1539. 

  1539. 

  1540. 		// Connect to the FTP server.
    1541. 

  1541. 		$this->connection = @fsockopen($ftp_server, $ftp_port, $err, $err, 5);
    1542. 

  1542. 		if (!$this->connection)
    1543. 

  1543. 		{
    1544. 

  1544. 			$this->error = 'bad_server';
    1545. 

  1545. 			return;
    1546. 

  1546. 		}
    1547. 

  1547. 

  1548. 		// Get the welcome message...
    1549. 

  1549. 		if (!$this->check_response(220))
    1550. 

  1550. 		{
    1551. 

  1551. 			$this->error = 'bad_response';
    1552. 

  1552. 			return;
    1553. 

  1553. 		}
    1554. 

  1554. 

  1555. 		// Send the username, it should ask for a password.
    1556. 

  1556. 		fwrite($this->connection, 'USER ' . $ftp_user . "\r\n");
    1557. 

  1557. 		if (!$this->check_response(331))
    1558. 

  1558. 		{
    1559. 

  1559. 			$this->error = 'bad_username';
    1560. 

  1560. 			return;
    1561. 

  1561. 		}
    1562. 

  1562. 

  1563. 		// Now send the password... and hope it goes okay.
    1564. 

  1564. 		fwrite($this->connection, 'PASS ' . $ftp_pass . "\r\n");
    1565. 

  1565. 		if (!$this->check_response(230))
    1566. 

  1566. 		{
    1567. 

  1567. 			$this->error = 'bad_password';
    1568. 

  1568. 			return;
    1569. 

  1569. 		}
    1570. 

  1570. 	}
    1571. 

  1571. 

  1572. 	function chdir($ftp_path)
    1573. 

  1573. 	{
    1574. 

  1574. 		if (!is_resource($this->connection))
    1575. 

  1575. 			return false;
    1576. 

  1576. 

  1577. 		// No slash on the end, please...
    1578. 

  1578. 		if (substr($ftp_path, -1) == '/')
    1579. 

  1579. 			$ftp_path = substr($ftp_path, 0, -1);
    1580. 

  1580. 

  1581. 		fwrite($this->connection, 'CWD ' . $ftp_path . "\r\n");
    1582. 

  1582. 		if (!$this->check_response(250))
    1583. 

  1583. 		{
    1584. 

  1584. 			$this->error = 'bad_path';
    1585. 

  1585. 			return false;
    1586. 

  1586. 		}
    1587. 

  1587. 

  1588. 		return true;
    1589. 

  1589. 	}
    1590. 

  1590. 

  1591. 	function chmod($ftp_file, $chmod)
    1592. 

  1592. 	{
    1593. 

  1593. 		if (!is_resource($this->connection))
    1594. 

  1594. 			return false;
    1595. 

  1595. 

  1596. 		// Convert the chmod value from octal (0777) to text ("777")
    1597. 

  1597. 		fwrite($this->connection, 'SITE CHMOD ' . decoct($chmod) . ' ' . $ftp_file . "\r\n");
    1598. 

  1598. 		if (!$this->check_response(200))
    1599. 

  1599. 		{
    1600. 

  1600. 			$this->error = 'bad_file';
    1601. 

  1601. 			return false;
    1602. 

  1602. 		}
    1603. 

  1603. 

  1604. 		return true;
    1605. 

  1605. 	}
    1606. 

  1606. 

  1607. 	function unlink($ftp_file)
    1608. 

  1608. 	{
    1609. 

  1609. 		// We are actually connected, right?
    1610. 

  1610. 		if (!is_resource($this->connection))
    1611. 

  1611. 			return false;
    1612. 

  1612. 

  1613. 		// Delete file X.
    1614. 

  1614. 		fwrite($this->connection, 'DELE ' . $ftp_file . "\r\n");
    1615. 

  1615. 		if (!$this->check_response(250))
    1616. 

  1616. 		{
    1617. 

  1617. 			fwrite($this->connection, 'RMD ' . $ftp_file . "\r\n");
    1618. 

  1618. 

  1619. 			// Still no love?
    1620. 

  1620. 			if (!$this->check_response(250))
    1621. 

  1621. 			{
    1622. 

  1622. 				$this->error = 'bad_file';
    1623. 

  1623. 				return false;
    1624. 

  1624. 			}
    1625. 

  1625. 		}
    1626. 

  1626. 

  1627. 		return true;
    1628. 

  1628. 	}
    1629. 

  1629. 

  1630. 	function check_response($desired)
    1631. 

  1631. 	{
    1632. 

  1632. 		// Wait for a response that isn't continued with -, but don't wait too long.
    1633. 

  1633. 		$time = time();
    1634. 

  1634. 		do
    1635. 

  1635. 			$this->last_message = fgets($this->connection, 1024);
    1636. 

  1636. 		while (substr($this->last_message, 3, 1) != ' ' && time() - $time < 5);
    1637. 

  1637. 

  1638. 		// Was the desired response returned?
    1639. 

  1639. 		return is_array($desired) ? in_array(substr($this->last_message, 0, 3), $desired) : substr($this->last_message, 0, 3) == $desired;
    1640. 

  1640. 	}
    1641. 

  1641. 

  1642. 	function passive()
    1643. 

  1643. 	{
    1644. 

  1644. 		// We can't create a passive data connection without a primary one first being there.
    1645. 

  1645. 		if (!is_resource($this->connection))
    1646. 

  1646. 			return false;
    1647. 

  1647. 

  1648. 		// Request a passive connection - this means, we'll talk to you, you don't talk to us.
    1649. 

  1649. 		@fwrite($this->connection, "PASV\r\n");
    1650. 

  1650. 		$time = time();
    1651. 

  1651. 		do
    1652. 

  1652. 			$response = fgets($this->connection, 1024);
    1653. 

  1653. 		while (substr($response, 3, 1) != ' ' && time() - $time < 5);
    1654. 

  1654. 

  1655. 		// If it's not 227, we weren't given an IP and port, which means it failed.
    1656. 

  1656. 		if (substr($response, 0, 4) != '227 ')
    1657. 

  1657. 		{
    1658. 

  1658. 			$this->error = 'bad_response';
    1659. 

  1659. 			return false;
    1660. 

  1660. 		}
    1661. 

  1661. 

  1662. 		// Snatch the IP and port information, or die horribly trying...
    1663. 

  1663. 		if (preg_match('~\((\d+),\s*(\d+),\s*(\d+),\s*(\d+),\s*(\d+)(?:,\s*(\d+))\)~', $response, $match) == 0)
    1664. 

  1664. 		{
    1665. 

  1665. 			$this->error = 'bad_response';
    1666. 

  1666. 			return false;
    1667. 

  1667. 		}
    1668. 

  1668. 

  1669. 		// This is pretty simple - store it for later use ;)
    1670. 

  1670. 		$this->pasv = array('ip' => $match[1] . '.' . $match[2] . '.' . $match[3] . '.' . $match[4], 'port' => $match[5] * 256 + $match[6]);
    1671. 

  1671. 

  1672. 		return true;
    1673. 

  1673. 	}
    1674. 

  1674. 

  1675. 	function create_file($ftp_file)
    1676. 

  1676. 	{
    1677. 

  1677. 		// First, we have to be connected... very important.
    1678. 

  1678. 		if (!is_resource($this->connection))
    1679. 

  1679. 			return false;
    1680. 

  1680. 

  1681. 		// I'd like one passive mode, please!
    1682. 

  1682. 		if (!$this->passive())
    1683. 

  1683. 			return false;
    1684. 

  1684. 

  1685. 		// Seems logical enough, so far...
    1686. 

  1686. 		fwrite($this->connection, 'STOR ' . $ftp_file . "\r\n");
    1687. 

  1687. 

  1688. 		// Okay, now we connect to the data port.  If it doesn't work out, it's probably "file already exists", etc.
    1689. 

  1689. 		$fp = @fsockopen($this->pasv['ip'], $this->pasv['port'], $err, $err, 5);
    1690. 

  1690. 		if (!$fp || !$this->check_response(150))
    1691. 

  1691. 		{
    1692. 

  1692. 			$this->error = 'bad_file';
    1693. 

  1693. 			@fclose($fp);
    1694. 

  1694. 			return false;
    1695. 

  1695. 		}
    1696. 

  1696. 

  1697. 		// This may look strange, but we're just closing it to indicate a zero-byte upload.
    1698. 

  1698. 		fclose($fp);
    1699. 

  1699. 		if (!$this->check_response(226))
    1700. 

  1700. 		{
    1701. 

  1701. 			$this->error = 'bad_response';
    1702. 

  1702. 			return false;
    1703. 

  1703. 		}
    1704. 

  1704. 

  1705. 		return true;
    1706. 

  1706. 	}
    1707. 

  1707. 

  1708. 	function list_dir($ftp_path = '', $search = false)
    1709. 

  1709. 	{
    1710. 

  1710. 		// Are we even connected...?
    1711. 

  1711. 		if (!is_resource($this->connection))
    1712. 

  1712. 			return false;
    1713. 

  1713. 

  1714. 		// Passive... non-agressive...
    1715. 

  1715. 		if (!$this->passive())
    1716. 

  1716. 			return false;
    1717. 

  1717. 

  1718. 		// Get the listing!
    1719. 

  1719. 		fwrite($this->connection, 'LIST -1' . ($search ? 'R' : '') . ($ftp_path == '' ? '' : ' ' . $ftp_path) . "\r\n");
    1720. 

  1720. 

  1721. 		// Connect, assuming we've got a connection.
    1722. 

  1722. 		$fp = @fsockopen($this->pasv['ip'], $this->pasv['port'], $err, $err, 5);
    1723. 

  1723. 		if (!$fp || !$this->check_response(array(150, 125)))
    1724. 

  1724. 		{
    1725. 

  1725. 			$this->error = 'bad_response';
    1726. 

  1726. 			@fclose($fp);
    1727. 

  1727. 			return false;
    1728. 

  1728. 		}
    1729. 

  1729. 

  1730. 		// Read in the file listing.
    1731. 

  1731. 		$data = '';
    1732. 

  1732. 		while (!feof($fp))
    1733. 

  1733. 			$data .= fread($fp, 4096);
    1734. 

  1734. 		fclose($fp);
    1735. 

  1735. 

  1736. 		// Everything go okay?
    1737. 

  1737. 		if (!$this->check_response(226))
    1738. 

  1738. 		{
    1739. 

  1739. 			$this->error = 'bad_response';
    1740. 

  1740. 			return false;
    1741. 

  1741. 		}
    1742. 

  1742. 

  1743. 		return $data;
    1744. 

  1744. 	}
    1745. 

  1745. 

  1746. 	function locate($file, $listing = null)
    1747. 

  1747. 	{
    1748. 

  1748. 		if ($listing === null)
    1749. 

  1749. 			$listing = $this->list_dir('', true);
    1750. 

  1750. 		$listing = explode("\n", $listing);
    1751. 

  1751. 

  1752. 		@fwrite($this->connection, "PWD\r\n");
    1753. 

  1753. 		$time = time();
    1754. 

  1754. 		do
    1755. 

  1755. 			$response = fgets($this->connection, 1024);
    1756. 

  1756. 		while (substr($response, 3, 1) != ' ' && time() - $time < 5);
    1757. 

  1757. 

  1758. 		// Check for 257!
    1759. 

  1759. 		if (preg_match('~^257 "(.+?)" ~', $response, $match) != 0)
    1760. 

  1760. 			$current_dir = strtr($match[1], array('""' => '"'));
    1761. 

  1761. 		else
    1762. 

  1762. 			$current_dir = '';
    1763. 

  1763. 

  1764. 		for ($i = 0, $n = count($listing); $i < $n; $i++)
    1765. 

  1765. 		{
    1766. 

  1766. 			if (trim($listing[$i]) == '' && isset($listing[$i + 1]))
    1767. 

  1767. 			{
    1768. 

  1768. 				$current_dir = substr(trim($listing[++$i]), 0, -1);
    1769. 

  1769. 				$i++;
    1770. 

  1770. 			}
    1771. 

  1771. 

  1772. 			// Okay, this file's name is:
    1773. 

  1773. 			$listing[$i] = $current_dir . '/' . trim(strlen($listing[$i]) > 30 ? strrchr($listing[$i], ' ') : $listing[$i]);
    1774. 

  1774. 

  1775. 			if (substr($file, 0, 1) == '*' && substr($listing[$i], -(strlen($file) - 1)) == substr($file, 1))
    1776. 

  1776. 				return $listing[$i];
    1777. 

  1777. 			if (substr($file, -1) == '*' && substr($listing[$i], 0, strlen($file) - 1) == substr($file, 0, -1))
    1778. 

  1778. 				return $listing[$i];
    1779. 

  1779. 			if (basename($listing[$i]) == $file || $listing[$i] == $file)
    1780. 

  1780. 				return $listing[$i];
    1781. 

  1781. 		}
    1782. 

  1782. 

  1783. 		return false;
    1784. 

  1784. 	}
    1785. 

  1785. 

  1786. 	function create_dir($ftp_dir)
    1787. 

  1787. 	{
    1788. 

  1788. 		// We must be connected to the server to do something.
    1789. 

  1789. 		if (!is_resource($this->connection))
    1790. 

  1790. 			return false;
    1791. 

  1791. 

  1792. 		// Make this new beautiful directory!
    1793. 

  1793. 		fwrite($this->connection, 'MKD ' . $ftp_dir . "\r\n");
    1794. 

  1794. 		if (!$this->check_response(257))
    1795. 

  1795. 		{
    1796. 

  1796. 			$this->error = 'bad_file';
    1797. 

  1797. 			return false;
    1798. 

  1798. 		}
    1799. 

  1799. 

  1800. 		return true;
    1801. 

  1801. 	}
    1802. 

  1802. 

  1803. 	function detect_path($filesystem_path, $lookup_file = null)
    1804. 

  1804. 	{
    1805. 

  1805. 		$username = '';
    1806. 

  1806. 

  1807. 		if (isset($_SERVER['DOCUMENT_ROOT']))
    1808. 

  1808. 		{
    1809. 

  1809. 			if (preg_match('~^/home[2]?/([^/]+?)/public_html~', $_SERVER['DOCUMENT_ROOT'], $match))
    1810. 

  1810. 			{
    1811. 

  1811. 				$username = $match[1];
    1812. 

  1812. 

  1813. 				$path = strtr($_SERVER['DOCUMENT_ROOT'], array('/home/' . $match[1] . '/' => '', '/home2/' . $match[1] . '/' => ''));
    1814. 

  1814. 

  1815. 				if (substr($path, -1) == '/')
    1816. 

  1816. 					$path = substr($path, 0, -1);
    1817. 

  1817. 

  1818. 				if (strlen(dirname($_SERVER['PHP_SELF'])) > 1)
    1819. 

  1819. 					$path .= dirname($_SERVER['PHP_SELF']);
    1820. 

  1820. 			}
    1821. 

  1821. 			elseif (substr($filesystem_path, 0, 9) == '/var/www/')
    1822. 

  1822. 				$path = substr($filesystem_path, 8);
    1823. 

  1823. 			else
    1824. 

  1824. 				$path = strtr(strtr($filesystem_path, array('\\' => '/')), array($_SERVER['DOCUMENT_ROOT'] => ''));
    1825. 

  1825. 		}
    1826. 

  1826. 		else
    1827. 

  1827. 			$path = '';
    1828. 

  1828. 

  1829. 		if (is_resource($this->connection) && $this->list_dir($path) == '')
    1830. 

  1830. 		{
    1831. 

  1831. 			$data = $this->list_dir('', true);
    1832. 

  1832. 

  1833. 			if ($lookup_file === null)
    1834. 

  1834. 				$lookup_file = $_SERVER['PHP_SELF'];
    1835. 

  1835. 

  1836. 			$found_path = dirname($this->locate('*' . basename(dirname($lookup_file)) . '/' . basename($lookup_file), $data));
    1837. 

  1837. 			if ($found_path == false)
    1838. 

  1838. 				$found_path = dirname($this->locate(basename($lookup_file)));
    1839. 

  1839. 			if ($found_path != false)
    1840. 

  1840. 				$path = $found_path;
    1841. 

  1841. 		}
    1842. 

  1842. 		elseif (is_resource($this->connection))
    1843. 

  1843. 			$found_path = true;
    1844. 

  1844. 

  1845. 		return array($username, $path, isset($found_path));
    1846. 

  1846. 	}
    1847. 

  1847. 

  1848. 	function close()
    1849. 

  1849. 	{
    1850. 

  1850. 		// Goodbye!
    1851. 

  1851. 		fwrite($this->connection, "QUIT\r\n");
    1852. 

  1852. 		fclose($this->connection);
    1853. 

  1853. 

  1854. 		return true;
    1855. 

  1855. 	}
    1856. 

  1856. }
    1857. 

  1857. 

  1858. /**
    1859. 

  1859.  * Write out the contents of Settings.php file.
    1860. 

  1860.  * This function will add the variables passed to it in $vars,
    1861. 

  1861.  * to the Settings.php file.
    1862. 

  1862.  *
    1863. 

  1863.  * @param array $vars the configuration variables to write out.
    1864. 

  1864.  */
    1865. 

  1865. function updateSettingsFile($vars)
    1866. 

  1866. {
    1867. 

  1867. 	// Modify Settings.php.
    1868. 

  1868. 	$settingsArray = file(dirname(__FILE__) . '/Settings.php');
    1869. 

  1869. 

  1870. 	// @todo Do we just want to read the file in clean, and split it this way always?
    1871. 

  1871. 	if (count($settingsArray) == 1)
    1872. 

  1872. 		$settingsArray = preg_split('~[\r\n]~', $settingsArray[0]);
    1873. 

  1873. 

  1874. 	for ($i = 0, $n = count($settingsArray); $i < $n; $i++)
    1875. 

  1875. 	{
    1876. 

  1876. 		// Remove the redirect...
    1877. 

  1877. 		if (trim($settingsArray[$i]) == 'if (file_exists(dirname(__FILE__) . \'/install.php\'))' && trim($settingsArray[$i + 1]) == '{' && trim($settingsArray[$i + 3]) == '}')
    1878. 

  1878. 		{
    1879. 

  1879. 			// Get the four lines to nothing.
    1880. 

  1880. 			$settingsArray[$i] = '';
    1881. 

  1881. 			$settingsArray[++$i] = '';
    1882. 

  1882. 			$settingsArray[++$i] = '';
    1883. 

  1883. 			$settingsArray[++$i] = '';
    1884. 

  1884. 			continue;
    1885. 

  1885. 		}
    1886. 

  1886. 

  1887. 		// Don't trim or bother with it if it's not a variable.
    1888. 

  1888. 		if (substr($settingsArray[$i], 0, 1) != '$')
    1889. 

  1889. 			continue;
    1890. 

  1890. 

  1891. 		$settingsArray[$i] = rtrim($settingsArray[$i]) . "\n";
    1892. 

  1892. 

  1893. 		foreach ($vars as $var => $val)
    1894. 

  1894. 			if (strncasecmp($settingsArray[$i], '$' . $var, 1 + strlen($var)) == 0)
    1895. 

  1895. 			{
    1896. 

  1896. 				$comment = strstr($settingsArray[$i], '#');
    1897. 

  1897. 				$settingsArray[$i] = '$' . $var . ' = \'' . $val . '\';' . ($comment != '' ? "\t\t" . $comment : "\n");
    1898. 

  1898. 				unset($vars[$var]);
    1899. 

  1899. 			}
    1900. 

  1900. 	}
    1901. 

  1901. 

  1902. 	// Uh oh... the file wasn't empty... was it?
    1903. 

  1903. 	if (!empty($vars))
    1904. 

  1904. 	{
    1905. 

  1905. 		$settingsArray[$i++] = '';
    1906. 

  1906. 		foreach ($vars as $var => $val)
    1907. 

  1907. 			$settingsArray[$i++] = '$' . $var . ' = \'' . $val . '\';' . "\n";
    1908. 

  1908. 	}
    1909. 

  1909. 

  1910. 	// Blank out the file - done to fix a oddity with some servers.
    1911. 

  1911. 	$fp = @fopen(dirname(__FILE__) . '/Settings.php', 'w');
    1912. 

  1912. 	if (!$fp)
    1913. 

  1913. 		return false;
    1914. 

  1914. 	fclose($fp);
    1915. 

  1915. 

  1916. 	$fp = fopen(dirname(__FILE__) . '/Settings.php', 'r+');
    1917. 

  1917. 

  1918. 	// Gotta have one of these ;)
    1919. 

  1919. 	if (trim($settingsArray[0]) != '<?php')
    1920. 

  1920. 		fwrite($fp, "<?php\n");
    1921. 

  1921. 

  1922. 	$lines = count($settingsArray);
    1923. 

  1923. 	for ($i = 0; $i < $lines; $i++)
    1924. 

  1924. 	{
    1925. 

  1925. 		// Don't just write a bunch of blank lines.
    1926. 

  1926. 		if ($settingsArray[$i] != '' || @$settingsArray[$i - 1] != '')
    1927. 

  1927. 			fwrite($fp, strtr($settingsArray[$i], "\r", ''));
    1928. 

  1928. 	}
    1929. 

  1929. 	fclose($fp);
    1930. 

  1930. 

  1931. 	return true;
    1932. 

  1932. }
    1933. 

  1933. 

  1934. /**
    1935. 

  1935.  * Write the db_last_error file.
    1936. 

  1936.  */
    1937. 

  1937. function updateDbLastError()
    1938. 

  1938. {
    1939. 

  1939. 	// Write out the db_last_error file with the error timestamp
    1940. 

  1940. 	file_put_contents(dirname(__FILE__) . '/db_last_error.php', '<' . '?' . "php\n" . '$db_last_error = 0;');
    1941. 

  1941. 	return true;
    1942. 

  1942. }
    1943. 

  1943. 

  1944. /**
    1945. 

  1945.  * Create an .htaccess file to prevent mod_security.
    1946. 

  1946.  * Elkarte has filtering built-in.
    1947. 

  1947.  */
    1948. 

  1948. function fixModSecurity()
    1949. 

  1949. {
    1950. 

  1950. 	$htaccess_addition = '
    1951. 

  1951. <IfModule mod_security.c>
    1952. 

  1952. 	# Turn off mod_security filtering.  We don\'t need our hands held.
    1953. 

  1953. 	SecFilterEngine Off
    1954. 

  1954. 

  1955. 	# The below probably isn\'t needed, but better safe than sorry.
    1956. 

  1956. 	SecFilterScanPOST Off
    1957. 

  1957. </IfModule>';
    1958. 

    1959. 

  1959. 	if (!function_exists('apache_get_modules') || !in_array('mod_security', apache_get_modules()))
    1960. 

  1960. 		return true;
    1961. 

  1961. 	elseif (file_exists(dirname(__FILE__) . '/.htaccess') && is_writable(dirname(__FILE__) . '/.htaccess'))
    1962. 

  1962. 	{
    1963. 

  1963. 		$current_htaccess = implode('', file(dirname(__FILE__) . '/.htaccess'));
    1964. 

  1964. 

  1965. 		// Only change something if mod_security hasn't been addressed yet.
    1966. 

  1966. 		if (strpos($current_htaccess, '<IfModule mod_security.c>') === false)
    1967. 

  1967. 		{
    1968. 

  1968. 			if ($ht_handle = fopen(dirname(__FILE__) . '/.htaccess', 'a'))
    1969. 

  1969. 			{
    1970. 

  1970. 				fwrite($ht_handle, $htaccess_addition);
    1971. 

  1971. 				fclose($ht_handle);
    1972. 

  1972. 				return true;
    1973. 

  1973. 			}
    1974. 

  1974. 			else
    1975. 

  1975. 				return false;
    1976. 

  1976. 		}
    1977. 

  1977. 		else
    1978. 

  1978. 			return true;
    1979. 

  1979. 	}
    1980. 

  1980. 	elseif (file_exists(dirname(__FILE__) . '/.htaccess'))
    1981. 

  1981. 		return strpos(implode('', file(dirname(__FILE__) . '/.htaccess')), '<IfModule mod_security.c>') !== false;
    1982. 

  1982. 	elseif (is_writable(dirname(__FILE__)))
    1983. 

  1983. 	{
    1984. 

  1984. 		if ($ht_handle = fopen(dirname(__FILE__) . '/.htaccess', 'w'))
    1985. 

  1985. 		{
    1986. 

  1986. 			fwrite($ht_handle, $htaccess_addition);
    1987. 

  1987. 			fclose($ht_handle);
    1988. 

  1988. 			return true;
    1989. 

  1989. 		}
    1990. 

  1990. 		else
    1991. 

  1991. 			return false;
    1992. 

  1992. 	}
    1993. 

  1993. 	else
    1994. 

  1994. 		return false;
    1995. 

  1995. }
    1996. 

  1996. 

  1997. /**
    1998. 

  1998.  * Delete the installer and its additional files.
    1999. 

  1999.  * Called by ?delete
    2000. 

  2000.  */
    2001. 

  2001. function action_deleteInstaller()
    2002. 

  2002. {
    2003. 

  2003. 	if (isset($_SESSION['installer_temp_ftp']))
    2004. 

  2004. 	{
    2005. 

  2005. 		$ftp = new Ftp_Connection($_SESSION['installer_temp_ftp']['server'], $_SESSION['installer_temp_ftp']['port'], $_SESSION['installer_temp_ftp']['username'], $_SESSION['installer_temp_ftp']['password']);
    2006. 

  2006. 		$ftp->chdir($_SESSION['installer_temp_ftp']['path']);
    2007. 

  2007. 

  2008. 		$ftp->unlink('install.php');
    2009. 

  2009. 		$ftp->unlink('webinstall.php');
    2010. 

  2010. 

  2011. 		foreach ($databases as $key => $dummy)
    2012. 

  2012. 			$ftp->unlink('install_' . $GLOBALS['db_script_version'] . '_' . $key . '.sql');
    2013. 

  2013. 

  2014. 		$ftp->close();
    2015. 

  2015. 

  2016. 		unset($_SESSION['installer_temp_ftp']);
    2017. 

  2017. 	}
    2018. 

  2018. 	else
    2019. 

  2019. 	{
    2020. 

  2020. 		@unlink(__FILE__);
    2021. 

  2021. 		@unlink(dirname(__FILE__) . '/webinstall.php');
    2022. 

  2022. 

  2023. 		foreach ($databases as $key => $dummy)
    2024. 

  2024. 			@unlink(dirname(__FILE__) . '/install_' . $GLOBALS['db_script_version'] . '_' . $key . '.sql');
    2025. 

  2025. 	}
    2026. 

  2026. 

  2027. 	// Now just redirect to a blank.png...
    2028. 

  2028. 	header('Location: http://' . (isset($_SERVER['HTTP_HOST']) ? $_SERVER['HTTP_HOST'] : $_SERVER['SERVER_NAME'] . ':' . $_SERVER['SERVER_PORT']) . dirname($_SERVER['PHP_SELF']) . '/themes/default/images/blank.png');
    2029. 

  2029. 	exit;
    2030. 

  2030. }
    2031. 

  2031. 

  2032. function template_install_above()
    2033. 

  2033. {
    2034. 

  2034. 	global $incontext, $txt, $oursite, $installurl;
    2035. 

  2035. 

  2036. 	echo '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
    2037. 

  2037. <html xmlns="http://www.w3.org/1999/xhtml"', !empty($txt['lang_rtl']) ? ' dir="rtl"' : '', '>
    2038. 

  2038. 	<head>
    2039. 

  2039. 		<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    2040. 

  2040. 		<meta name="robots" content="noindex" />
    2041. 

  2041. 		<title>', $txt['installer'], '</title>
    2042. 

  2042. 		<link rel="stylesheet" type="text/css" href="themes/default/css/index.css?alp10" />
    2043. 

  2043. 		<link rel="stylesheet" type="text/css" href="themes/default/css/install.css?alp10" />
    2044. 

  2044. 		<script type="text/javascript" src="themes/default/scripts/script.js"></script>
    2045. 

  2045. 	</head>
    2046. 

  2046. 	<body>
    2047. 

  2047. 		<div id="header">
    2048. 

  2048. 			<div class="frame">
    2049. 

  2049. 				<h1 class="forumtitle">', $txt['installer'], '</h1>
    2050. 

  2050. 				<img id="logo" src="themes/default/images/logo.png" alt="Elkarte Community" title="Elkarte Community" />
    2051. 

  2051. 			</div>
    2052. 

  2052. 		</div>
    2053. 

  2053. 		<div id="wrapper">
    2054. 

  2054. 			<div id="upper_section">
    2055. 

  2055. 				<div id="inner_section">
    2056. 

  2056. 					<div id="inner_wrap">';
    2057. 

    2058. 

  2058. 	// Have we got a language drop down - if so do it on the first step only.
    2059. 

  2059. 	if (!empty($incontext['detected_languages']) && count($incontext['detected_languages']) > 1 && $incontext['current_step'] == 0)
    2060. 

  2060. 	{
    2061. 

  2061. 		echo '
    2062. 

  2062. 						<div class="news">
    2063. 

  2063. 							<form action="', $installurl, '" method="get">
    2064. 

  2064. 								<label for="installer_language">', $txt['installer_language'], ':</label>
    2065. 

  2065. 								<select id="installer_language" name="lang_file" onchange="location.href = \'', $installurl, '?lang_file=\' + this.options[this.selectedIndex].value;">';
    2066. 

    2067. 

  2067. 		foreach ($incontext['detected_languages'] as $lang => $name)
    2068. 

  2068. 			echo '
    2069. 

  2069. 									<option', isset($_SESSION['installer_temp_lang']) && $_SESSION['installer_temp_lang'] == $lang ? ' selected="selected"' : '', ' value="', $lang, '">', $name, '</option>';
    2070. 

    2071. 

  2071. 		echo '
    2072. 

  2072. 								</select>
    2073. 

  2073. 								<noscript><input type="submit" value="', $txt['installer_language_set'], '" class="button_submit" /></noscript>
    2074. 

  2074. 							</form>
    2075. 

  2075. 						</div>
    2076. 

  2076. 						<hr class="clear" />';
    2077. 

  2077. 	}
    2078. 

  2078. 

  2079. 	echo '
    2080. 

  2080. 					</div>
    2081. 

  2081. 				</div>
    2082. 

  2082. 			</div>
    2083. 

  2083. 			<div id="content_section">
    2084. 

  2084. 				<div id="main_content_section">
    2085. 

  2085. 					<div id="main_steps">
    2086. 

  2086. 						<h2>', $txt['upgrade_progress'], '</h2>
    2087. 

  2087. 						<ul>';
    2088. 

    2089. 

  2089. 	foreach ($incontext['steps'] as $num => $step)
    2090. 

  2090. 		echo '
    2091. 

  2091. 							<li class="', $num < $incontext['current_step'] ? 'stepdone' : ($num == $incontext['current_step'] ? 'stepcurrent' : 'stepwaiting'), '">', $txt['upgrade_step'], ' ', $step[0], ': ', $step[1], '</li>';
    2092. 

    2093. 

  2093. 	echo '
    2094. 

  2094. 						</ul>
    2095. 

  2095. 					</div>
    2096. 

  2096. 					<div id="progress_bar">
    2097. 

  2097. 						<div id="overall_text">', $incontext['overall_percent'], '%</div>
    2098. 

  2098. 						<div id="overall_progress" style="width: ', $incontext['overall_percent'], '%;">&nbsp;</div>
    2099. 

  2099. 						<div class="overall_progress">', $txt['upgrade_overall_progress'], '</div>
    2100. 

  2100. 					</div>
    2101. 

  2101. 					<div id="main_screen" class="clear">
    2102. 

  2102. 						<h2>', $incontext['page_title'], '</h2>
    2103. 

  2103. 						<div class="panel">';
    2104. 

  2104. }
    2105. 

  2105. 

  2106. function template_install_below()
    2107. 

  2107. {
    2108. 

  2108. 	global $incontext, $txt;
    2109. 

  2109. 

  2110. 	if (!empty($incontext['continue']) || !empty($incontext['skip']))
    2111. 

  2111. 	{
    2112. 

  2112. 		echo '
    2113. 

  2113. 								<div class="clear">';
    2114. 

    2115. 

  2115. 		if (!empty($incontext['continue']))
    2116. 

  2116. 			echo '
    2117. 

  2117. 									<input type="submit" id="contbutt" name="contbutt" value="', $txt['upgrade_continue'], '" onclick="return submitThisOnce(this);" class="button_submit" />';
    2118. 

  2118. 		if (!empty($incontext['skip']))
    2119. 

  2119. 			echo '
    2120. 

  2120. 									<input type="submit" id="skip" name="skip" value="', $txt['upgrade_skip'], '" onclick="return submitThisOnce(this);" class="button_submit" />';
    2121. 

  2121. 		echo '
    2122. 

  2122. 								</div>';
    2123. 

  2123. 	}
    2124. 

  2124. 

  2125. 	// Show the closing form tag and other data only if not in the last step
    2126. 

  2126. 	if (count($incontext['steps']) - 1 !== (int) $incontext['current_step'])
    2127. 

  2127. 		echo '
    2128. 

  2128. 							</form>';
    2129. 

    2130. 

  2130. 	echo '
    2131. 

  2131. 						</div>
    2132. 

  2132. 					</div>
    2133. 

  2133. 				</div>
    2134. 

  2134. 			</div>
    2135. 

  2135. 		</div>
    2136. 

  2136. 		<div id="footer_section">
    2137. 

  2137. 			<div class="frame">
    2138. 

  2138. 				<ul class="reset">
    2139. 

  2139. 					<li class="copyright"><a href="http://www.elkarte.net/" title="Elkarte Community" target="_blank" class="new_win">Elkarte &copy; 2012, Elkarte Community</a></li>
    2140. 

  2140. 				</ul>
    2141. 

  2141. 			</div>
    2142. 

  2142. 		</div>
    2143. 

  2143. 	</body>
    2144. 

  2144. </html>';
    2145. 

  2145. }
    2146. 

  2146. 

  2147. /**
    2148. 

  2148.  * Welcome them to the wonderful world of Elkarte!
    2149. 

  2149.  */
    2150. 

  2150. function template_welcome_message()
    2151. 

  2151. {
    2152. 

  2152. 	global $incontext, $installurl, $txt;
    2153. 

  2153. 

  2154. 	echo '
    2155. 

  2155. 	<script type="text/javascript" src="http://www.spudsdesign.com/site/current-version.js?version=' . $GLOBALS['current_version'] . '"></script>
    2156. 

  2156. 	<form action="', $incontext['form_url'], '" method="post">
    2157. 

  2157. 		<p>', sprintf($txt['install_welcome_desc'], $GLOBALS['current_version']), '</p>
    2158. 

  2158. 		<div id="version_warning" style="margin: 2ex; padding: 2ex; border: 2px dashed #a92174; color: black; background-color: #fbbbe2; display: none;">
    2159. 

  2159. 			<div style="float: left; width: 2ex; font-size: 2em; color: red;">!!</div>
    2160. 

  2160. 			<strong style="text-decoration: underline;">', $txt['error_warning_notice'], '</strong><br />
    2161. 

  2161. 			<div style="padding-left: 6ex;">
    2162. 

  2162. 				', sprintf($txt['error_script_outdated'], '<em id="ourVersion" style="white-space: nowrap;">??</em>', '<em id="yourVersion" style="white-space: nowrap;">' . $GLOBALS['current_version'] . '</em>'), '
    2163. 

  2163. 			</div>
    2164. 

  2164. 		</div>';
    2165. 

    2166. 

  2166. 	// Show the warnings, or not.
    2167. 

  2167. 	if (template_warning_divs())
    2168. 

  2168. 		echo '
    2169. 

  2169. 		<h3>', $txt['install_all_lovely'], '</h3>';
    2170. 

    2171. 

  2171. 	// Say we want the continue button!
    2172. 

  2172. 	if (empty($incontext['error']))
    2173. 

  2173. 		$incontext['continue'] = 1;
    2174. 

  2174. 

  2175. 	// For the latest version stuff.
    2176. 

  2176. 	echo '
    2177. 

  2177. 		<script type="text/javascript"><!-- // --><![CDATA[
    2178. 

  2178. 			// Latest version?
    2179. 

  2179. 			function ourCurrentVersion()
    2180. 

  2180. 			{
    2181. 

  2181. 				var ourVer, yourVer;
    2182. 

  2182. 

  2183. 				if (!(\'ourVersion\' in window))
    2184. 

  2184. 					return;
    2185. 

  2185. 

  2186. 				window.ourVersion = window.ourVersion.replace(/ELKARTE\s?/g, \'\');
    2187. 

    2188. 

  2188. 				ourVer = document.getElementById("ourVersion");
    2189. 

  2189. 				yourVer = document.getElementById("yourVersion");
    2190. 

  2190. 

  2191. 				setInnerHTML(ourVer, window.ourVersion);
    2192. 

  2192. 

  2193. 				var currentVersion = getInnerHTML(yourVer);
    2194. 

  2194. 				if (currentVersion < window.ourVersion)
    2195. 

  2195. 					document.getElementById(\'version_warning\').style.display = \'\';
    2196. 

  2196. 			}
    2197. 

  2197. 			addLoadEvent(CurrentVersion);
    2198. 

  2198. 		// ]]></script>';
    2199. 

  2199. }
    2200. 

  2200. 

  2201. /**
    2202. 

  2202.  * A shortcut for any warning stuff.
    2203. 

  2203.  */
    2204. 

  2204. function template_warning_divs()
    2205. 

  2205. {
    2206. 

  2206. 	global $txt, $incontext;
    2207. 

  2207. 

  2208. 	// Errors are very serious..
    2209. 

  2209. 	if (!empty($incontext['error']))
    2210. 

  2210. 		echo '
    2211. 

  2211. 		<div class="errorbox">
    2212. 

  2212. 			<strong style="text-decoration: underline;">', $txt['upgrade_critical_error'], '</strong><br />
    2213. 

  2213. 			<div>
    2214. 

  2214. 				', $incontext['error'], '
    2215. 

  2215. 			</div>
    2216. 

  2216. 		</div>';
    2217. 

  2217. 	// A warning message?
    2218. 

  2218. 	elseif (!empty($incontext['warning']))
    2219. 

  2219. 		echo '
    2220. 

  2220. 		<div class="noticebox">
    2221. 

  2221. 			<strong style="text-decoration: underline;">', $txt['upgrade_warning'], '</strong><br />
    2222. 

  2222. 			<div>
    2223. 

  2223. 				', $incontext['warning'], '
    2224. 

  2224. 			</div>
    2225. 

  2225. 		</div>';
    2226. 

    2227. 

  2227. 	return empty($incontext['error']) && empty($incontext['warning']);
    2228. 

  2228. }
    2229. 

  2229. 

  2230. function template_chmod_files()
    2231. 

  2231. {
    2232. 

  2232. 	global $txt, $incontext;
    2233. 

  2233. 

  2234. 	echo '
    2235. 

  2235. 		<p>', $txt['ftp_setup_why_info'], '</p>
    2236. 

  2236. 		<ul style="margin: 2.5ex; font-family: monospace;">
    2237. 

  2237. 			<li>', implode('</li>
    2238. 

  2238. 			<li>', $incontext['failed_files']), '</li>
    2239. 

  2239. 		</ul>';
    2240. 

    2241. 

  2241. 	// This is serious!
    2242. 

  2242. 	if (!template_warning_divs())
    2243. 

  2243. 		return;
    2244. 

  2244. 

  2245. 	echo '
    2246. 

  2246. 		<hr />
    2247. 

  2247. 		<p>', $txt['ftp_setup_info'], '</p>';
    2248. 

    2249. 

  2249. 	if (!empty($incontext['ftp_errors']))
    2250. 

  2250. 		echo '
    2251. 

  2251. 		<div class="errorbox">
    2252. 

  2252. 			<div style="color: red;">
    2253. 

  2253. 				', $txt['error_ftp_no_connect'], '<br />
    2254. 

  2254. 				<br />
    2255. 

  2255. 				<code>', implode('<br />', $incontext['ftp_errors']), '</code>
    2256. 

  2256. 			</div>
    2257. 

  2257. 		</div>
    2258. 

  2258. 		<br />';
    2259. 

    2260. 

  2260. 	echo '
    2261. 

  2261. 		<form action="', $incontext['form_url'], '" method="post">
    2262. 

  2262. 			<table width="520" cellspacing="0" cellpadding="0" border="0" align="center" style="margin: 1em 0;">
    2263. 

  2263. 				<tr>
    2264. 

  2264. 					<td width="26%" valign="top" class="textbox"><label for="ftp_server">', $txt['ftp_server'], ':</label></td>
    2265. 

  2265. 					<td>
    2266. 

  2266. 						<div style="float: ', empty($txt['lang_rtl']) ? 'right' : 'left', '; margin-', empty($txt['lang_rtl']) ? 'right' : 'left', ': 1px;"><label for="ftp_port" class="textbox"><strong>', $txt['ftp_port'], ':&nbsp;</strong></label> <input type="text" size="3" name="ftp_port" id="ftp_port" value="', $incontext['ftp']['port'], '" class="input_text" /></div>
    2267. 

  2267. 						<input type="text" size="30" name="ftp_server" id="ftp_server" value="', $incontext['ftp']['server'], '" style="width: 70%;" class="input_text" />
    2268. 

  2268. 						<div style="font-size: smaller; margin-bottom: 2ex;">', $txt['ftp_server_info'], '</div>
    2269. 

  2269. 					</td>
    2270. 

  2270. 				</tr><tr>
    2271. 

  2271. 					<td width="26%" valign="top" class="textbox"><label for="ftp_username">', $txt['ftp_username'], ':</label></td>
    2272. 

  2272. 					<td>
    2273. 

  2273. 						<input type="text" size="50" name="ftp_username" id="ftp_username" value="', $incontext['ftp']['username'], '" style="width: 99%;" class="input_text" />
    2274. 

  2274. 						<div style="font-size: smaller; margin-bottom: 2ex;">', $txt['ftp_username_info'], '</div>
    2275. 

  2275. 					</td>
    2276. 

  2276. 				</tr><tr>
    2277. 

  2277. 					<td width="26%" valign="top" class="textbox"><label for="ftp_password">', $txt['ftp_password'], ':</label></td>
    2278. 

  2278. 					<td>
    2279. 

  2279. 						<input type="password" size="50" name="ftp_password" id="ftp_password" style="width: 99%;" class="input_password" />
    2280. 

  2280. 						<div style="font-size: smaller; margin-bottom: 3ex;">', $txt['ftp_password_info'], '</div>
    2281. 

  2281. 					</td>
    2282. 

  2282. 				</tr><tr>
    2283. 

  2283. 					<td width="26%" valign="top" class="textbox"><label for="ftp_path">', $txt['ftp_path'], ':</label></td>
    2284. 

  2284. 					<td style="padding-bottom: 1ex;">
    2285. 

  2285. 						<input type="text" size="50" name="ftp_path" id="ftp_path" value="', $incontext['ftp']['path'], '" style="width: 99%;" class="input_text" />
    2286. 

  2286. 						<div style="font-size: smaller; margin-bottom: 2ex;">', $incontext['ftp']['path_msg'], '</div>
    2287. 

  2287. 					</td>
    2288. 

  2288. 				</tr>
    2289. 

  2289. 			</table>
    2290. 

  2290. 			<div style="margin: 1ex; margin-top: 1ex; text-align: ', empty($txt['lang_rtl']) ? 'right' : 'left', ';"><input type="submit" value="', $txt['ftp_connect'], '" onclick="return submitThisOnce(this);" class="button_submit" /></div>
    2291. 

  2291. 		</form>
    2292. 

  2292. 		<a href="', $incontext['form_url'], '">', $txt['error_message_click'], '</a> ', $txt['ftp_setup_again'];
    2293. 

  2293. }
    2294. 

  2294. 

  2295. /**
    2296. 

  2296.  * Template for the database settings form.
    2297. 

  2297.  */
    2298. 

  2298. function template_database_settings()
    2299. 

  2299. {
    2300. 

  2300. 	global $incontext, $installurl, $txt;
    2301. 

  2301. 

  2302. 	echo '
    2303. 

  2303. 	<form action="', $incontext['form_url'], '" method="post">
    2304. 

  2304. 		<p>', $txt['db_settings_info'], '</p>';
    2305. 

    2306. 

  2306. 	template_warning_divs();
    2307. 

  2307. 

  2308. 	echo '
    2309. 

  2309. 		<table width="100%" cellpadding="0" cellspacing="0" border="0" style="margin: 1em 0;">';
    2310. 

    2311. 

  2311. 	// More than one database type?
    2312. 

  2312. 	if (count($incontext['supported_databases']) > 1)
    2313. 

  2313. 	{
    2314. 

  2314. 		echo '
    2315. 

  2315. 			<tr>
    2316. 

  2316. 				<td width="20%" valign="top" class="textbox"><label for="db_type_input">', $txt['db_settings_type'], ':</label></td>
    2317. 

  2317. 				<td>
    2318. 

  2318. 					<select name="db_type" id="db_type_input" onchange="toggleDBInput();">';
    2319. 

    2320. 

  2320. 	foreach ($incontext['supported_databases'] as $key => $db)
    2321. 

  2321. 			echo '
    2322. 

  2322. 						<option value="', $key, '"', isset($_POST['db_type']) && $_POST['db_type'] == $key ? ' selected="selected"' : '', '>', $db['name'], '</option>';
    2323. 

    2324. 

  2324. 	echo '
    2325. 

  2325. 					</select><div id="db_sqlite_warning" style="color: blue; display: none;" class="smalltext">', $txt['db_sqlite_warning'], '</div>
    2326. 

  2326. 					<div style="font-size: smaller; margin-bottom: 2ex;">', $txt['db_settings_type_info'], '</div>
    2327. 

  2327. 				</td>
    2328. 

  2328. 			</tr>';
    2329. 

  2329. 	}
    2330. 

  2330. 	else
    2331. 

  2331. 	{
    2332. 

  2332. 		echo '
    2333. 

  2333. 			<tr style="display: none;">
    2334. 

  2334. 				<td>
    2335. 

  2335. 					<input type="hidden" name="db_type" value="', $incontext['db']['type'], '" />
    2336. 

  2336. 				</td>
    2337. 

  2337. 			</tr>';
    2338. 

  2338. 	}
    2339. 

  2339. 

  2340. 	echo '
    2341. 

  2341. 			<tr id="db_server_contain">
    2342. 

  2342. 				<td width="20%" valign="top" class="textbox"><label for="db_server_input">', $txt['db_settings_server'], ':</label></td>
    2343. 

  2343. 				<td>
    2344. 

  2344. 					<input type="text" name="db_server" id="db_server_input" value="', $incontext['db']['server'], '" size="30" class="input_text" /><br />
    2345. 

  2345. 					<div style="font-size: smaller; margin-bottom: 2ex;">', $txt['db_settings_server_info'], '</div>
    2346. 

  2346. 				</td>
    2347. 

  2347. 			</tr><tr id="db_user_contain">
    2348. 

  2348. 				<td valign="top" class="textbox"><label for="db_user_input">', $txt['db_settings_username'], ':</label></td>
    2349. 

  2349. 				<td>
    2350. 

  2350. 					<input type="text" name="db_user" id="db_user_input" value="', $incontext['db']['user'], '" size="30" class="input_text" /><br />
    2351. 

  2351. 					<div style="font-size: smaller; margin-bottom: 2ex;">', $txt['db_settings_username_info'], '</div>
    2352. 

  2352. 				</td>
    2353. 

  2353. 			</tr><tr id="db_passwd_contain">
    2354. 

  2354. 				<td valign="top" class="textbox"><label for="db_passwd_input">', $txt['db_settings_password'], ':</label></td>
    2355. 

  2355. 				<td>
    2356. 

  2356. 					<input type="password" name="db_passwd" id="db_passwd_input" value="', $incontext['db']['pass'], '" size="30" class="input_password" /><br />
    2357. 

  2357. 					<div style="font-size: smaller; margin-bottom: 2ex;">', $txt['db_settings_password_info'], '</div>
    2358. 

  2358. 				</td>
    2359. 

  2359. 			</tr><tr id="db_name_contain">
    2360. 

  2360. 				<td valign="top" class="textbox"><label for="db_name_input">', $txt['db_settings_database'], ':</label></td>
    2361. 

  2361. 				<td>
    2362. 

  2362. 					<input type="text" name="db_name" id="db_name_input" value="', empty($incontext['db']['name']) ? 'elkarte' : $incontext['db']['name'], '" size="30" class="input_text" /><br />
    2363. 

  2363. 					<div style="font-size: smaller; margin-bottom: 2ex;">', $txt['db_settings_database_info'], '
    2364. 

  2364. 					<span id="db_name_info_warning">', $txt['db_settings_database_info_note'], '</span></div>
    2365. 

  2365. 				</td>
    2366. 

  2366. 			</tr><tr id="db_filename_contain" style="display: none;">
    2367. 

  2367. 				<td valign="top" class="textbox"><label for="db_filename_input">', $txt['db_settings_database_file'], ':</label></td>
    2368. 

  2368. 				<td>
    2369. 

  2369. 					<input type="text" name="db_filename" id="db_filename_input" value="', empty($incontext['db']['name']) ? dirname(__FILE__) . '/elkarte_' . substr(md5(microtime()), 0, 10) : stripslashes($incontext['db']['name']), '" size="30" class="input_text" /><br />
    2370. 

  2370. 					<div style="font-size: smaller; margin-bottom: 2ex;">', $txt['db_settings_database_file_info'], '</div>
    2371. 

  2371. 				</td>
    2372. 

  2372. 			</tr><tr>
    2373. 

  2373. 				<td valign="top" class="textbox"><label for="db_prefix_input">', $txt['db_settings_prefix'], ':</label></td>
    2374. 

  2374. 				<td>
    2375. 

  2375. 					<input type="text" name="db_prefix" id="db_prefix_input" value="', $incontext['db']['prefix'], '" size="30" class="input_text" /><br />
    2376. 

  2376. 					<div style="font-size: smaller; margin-bottom: 2ex;">', $txt['db_settings_prefix_info'], '</div>
    2377. 

  2377. 				</td>
    2378. 

  2378. 			</tr>
    2379. 

  2379. 		</table>';
    2380. 

    2381. 

  2381. 	// Allow the toggling of input boxes for SQLite etc.
    2382. 

  2382. 	echo '
    2383. 

  2383. 	<script type="text/javascript"><!-- // --><![CDATA[
    2384. 

  2384. 		function toggleDBInput()
    2385. 

  2385. 		{
    2386. 

  2386. 			// What state is it?';
    2387. 

  2387. 

  2388. 	if (!isset($incontext['supported_databases']['sqlite']))
    2389. 

  2389. 		echo '
    2390. 

  2390. 			var showAll = true;';
    2391. 

  2391. 	elseif (count($incontext['supported_databases']) < 2)
    2392. 

  2392. 		echo '
    2393. 

  2393. 			var showAll = false;';
    2394. 

  2394. 	// If we have more than one DB including SQLite, what should we be doing?
    2395. 

  2395. 	else
    2396. 

  2396. 		echo '
    2397. 

  2397. 			var showAll = document.getElementById(\'db_type_input\').value == \'sqlite\' ? false : true;';
    2398. 

  2398. 

  2399. 	echo '
    2400. 

  2400. 			document.getElementById(\'db_passwd_contain\').style.display = showAll ? \'\' : \'none\';
    2401. 

  2401. 			document.getElementById(\'db_server_contain\').style.display = showAll ? \'\' : \'none\';
    2402. 

  2402. 			document.getElementById(\'db_user_contain\').style.display = showAll ? \'\' : \'none\';
    2403. 

  2403. 			document.getElementById(\'db_name_contain\').style.display = showAll ? \'\' : \'none\';
    2404. 

  2404. 			document.getElementById(\'db_filename_contain\').style.display = !showAll ? \'\' : \'none\';
    2405. 

  2405. 			document.getElementById(\'db_sqlite_warning\').style.display = !showAll ? \'\' : \'none\';
    2406. 

  2406. 			if (document.getElementById(\'db_type_input\').value == \'postgresql\')
    2407. 

  2407. 				document.getElementById(\'db_name_info_warning\').style.display = \'none\';
    2408. 

  2408. 			else
    2409. 

  2409. 				document.getElementById(\'db_name_info_warning\').style.display = \'\';
    2410. 

  2410. 		}
    2411. 

  2411. 		toggleDBInput();
    2412. 

  2412. 	// ]]></script>';
    2413. 

  2413. }
    2414. 

  2414. 

  2415. /**
    2416. 

  2416.  * Stick in their forum settings.
    2417. 

  2417.  */
    2418. 

  2418. function template_forum_settings()
    2419. 

  2419. {
    2420. 

  2420. 	global $incontext, $installurl, $txt;
    2421. 

  2421. 

  2422. 	echo '
    2423. 

  2423. 	<form action="', $incontext['form_url'], '" method="post">
    2424. 

  2424. 		<h3>', $txt['install_settings_info'], '</h3>';
    2425. 

    2426. 

  2426. 	template_warning_divs();
    2427. 

  2427. 

  2428. 	echo '
    2429. 

  2429. 		<table width="100%" cellpadding="0" cellspacing="0" border="0" style="margin: 1em 0;">
    2430. 

  2430. 			<tr>
    2431. 

  2431. 				<td width="20%" valign="top" class="textbox"><label for="mbname_input">', $txt['install_settings_name'], ':</label></td>
    2432. 

  2432. 				<td>
    2433. 

  2433. 					<input type="text" name="mbname" id="mbname_input" value="', $txt['install_settings_name_default'], '" size="65" class="input_text" />
    2434. 

  2434. 					<div style="font-size: smaller; margin-bottom: 2ex;">', $txt['install_settings_name_info'], '</div>
    2435. 

  2435. 				</td>
    2436. 

  2436. 			</tr>
    2437. 

  2437. 			<tr>
    2438. 

  2438. 				<td valign="top" class="textbox"><label for="boardurl_input">', $txt['install_settings_url'], ':</label></td>
    2439. 

  2439. 				<td>
    2440. 

  2440. 					<input type="text" name="boardurl" id="boardurl_input" value="', $incontext['detected_url'], '" size="65" class="input_text" /><br />
    2441. 

  2441. 					<div style="font-size: smaller; margin-bottom: 2ex;">', $txt['install_settings_url_info'], '</div>
    2442. 

  2442. 				</td>
    2443. 

  2443. 			</tr>
    2444. 

  2444. 			<tr>
    2445. 

  2445. 				<td valign="top" class="textbox">', $txt['install_settings_compress'], ':</td>
    2446. 

  2446. 				<td>
    2447. 

  2447. 					<input type="checkbox" name="compress" id="compress_check" checked="checked" class="input_check" /> <label for="compress_check">', $txt['install_settings_compress_title'], '</label><br />
    2448. 

  2448. 					<div style="font-size: smaller; margin-bottom: 2ex;">', $txt['install_settings_compress_info'], '</div>
    2449. 

  2449. 				</td>
    2450. 

  2450. 			</tr>
    2451. 

  2451. 			<tr>
    2452. 

  2452. 				<td valign="top" class="textbox">', $txt['install_settings_dbsession'], ':</td>
    2453. 

  2453. 				<td>
    2454. 

  2454. 					<input type="checkbox" name="dbsession" id="dbsession_check" checked="checked" class="input_check" /> <label for="dbsession_check">', $txt['install_settings_dbsession_title'], '</label><br />
    2455. 

  2455. 					<div style="font-size: smaller; margin-bottom: 2ex;">', $incontext['test_dbsession'] ? $txt['install_settings_dbsession_info1'] : $txt['install_settings_dbsession_info2'], '</div>
    2456. 

  2456. 				</td>
    2457. 

  2457. 			</tr>
    2458. 

  2458. 		</table>';
    2459. 

  2459. }
    2460. 

  2460. 

  2461. /**
    2462. 

  2462.  * Show results of the database population.
    2463. 

  2463.  */
    2464. 

  2464. function template_populate_database()
    2465. 

  2465. {
    2466. 

  2466. 	global $incontext, $installurl, $txt;
    2467. 

  2467. 

  2468. 	echo '
    2469. 

  2469. 	<form action="', $incontext['form_url'], '" method="post">
    2470. 

  2470. 		<p>', !empty($incontext['was_refresh']) ? $txt['user_refresh_install_desc'] : $txt['db_populate_info'], '</p>';
    2471. 

    2472. 

  2472. 	if (!empty($incontext['sql_results']))
    2473. 

  2473. 	{
    2474. 

  2474. 		echo '
    2475. 

  2475. 		<ul>
    2476. 

  2476. 			<li>', implode('</li><li>', $incontext['sql_results']), '</li>
    2477. 

  2477. 		</ul>';
    2478. 

  2478. 	}
    2479. 

  2479. 

  2480. 	if (!empty($incontext['failures']))
    2481. 

  2481. 	{
    2482. 

  2482. 		echo '
    2483. 

  2483. 				<div class="errorbox">', $txt['error_db_queries'], '
    2484. 

  2484. 					<ul>';
    2485. 

    2486. 

  2486. 		foreach ($incontext['failures'] as $line => $fail)
    2487. 

  2487. 			echo '
    2488. 

  2488. 						<li><strong>', $txt['error_db_queries_line'], $line + 1, ':</strong> ', nl2br(htmlspecialchars($fail)), '</li>';
    2489. 

    2490. 

  2490. 		echo '
    2491. 

  2491. 					</ul>
    2492. 

  2492. 				</div>';
    2493. 

  2493. 	}
    2494. 

  2494. 

  2495. 	echo '
    2496. 

  2496. 		<p>', $txt['db_populate_info2'], '</p>';
    2497. 

    2498. 

  2498. 	template_warning_divs();
    2499. 

  2499. 

  2500. 	echo '
    2501. 

  2501. 	<input type="hidden" name="pop_done" value="1" />';
    2502. 

  2502. }
    2503. 

  2503. 

  2504. /**
    2505. 

  2505.  * Template for the form to create the admin account.
    2506. 

  2506.  */
    2507. 

  2507. function template_admin_account()
    2508. 

  2508. {
    2509. 

  2509. 	global $incontext, $installurl, $txt;
    2510. 

  2510. 

  2511. 	echo '
    2512. 

  2512. 	<form action="', $incontext['form_url'], '" method="post">
    2513. 

  2513. 		<p>', $txt['user_settings_info'], '</p>';
    2514. 

    2515. 

  2515. 	template_warning_divs();
    2516. 

  2516. 

  2517. 	echo '
    2518. 

  2518. 		<table width="100%" cellspacing="0" cellpadding="0" border="0" style="margin: 2em 0;">
    2519. 

  2519. 			<tr>
    2520. 

  2520. 				<td width="18%" valign="top" class="textbox"><label for="username">', $txt['user_settings_username'], ':</label></td>
    2521. 

  2521. 				<td>
    2522. 

  2522. 					<input type="text" name="username" id="username" value="', $incontext['username'], '" size="40" class="input_text" />
    2523. 

  2523. 					<div style="font-size: smaller; margin-bottom: 2ex;">', $txt['user_settings_username_info'], '</div>
    2524. 

  2524. 				</td>
    2525. 

  2525. 			</tr><tr>
    2526. 

  2526. 				<td valign="top" class="textbox"><label for="password1">', $txt['user_settings_password'], ':</label></td>
    2527. 

  2527. 				<td>
    2528. 

  2528. 					<input type="password" name="password1" id="password1" size="40" class="input_password" />
    2529. 

  2529. 					<div style="font-size: smaller; margin-bottom: 2ex;">', $txt['user_settings_password_info'], '</div>
    2530. 

  2530. 				</td>
    2531. 

  2531. 			</tr><tr>
    2532. 

  2532. 				<td valign="top" class="textbox"><label for="password2">', $txt['user_settings_again'], ':</label></td>
    2533. 

  2533. 				<td>
    2534. 

  2534. 					<input type="password" name="password2" id="password2" size="40" class="input_password" />
    2535. 

  2535. 					<div style="font-size: smaller; margin-bottom: 2ex;">', $txt['user_settings_again_info'], '</div>
    2536. 

  2536. 				</td>
    2537. 

  2537. 			</tr><tr>
    2538. 

  2538. 				<td valign="top" class="textbox"><label for="email">', $txt['user_settings_email'], ':</label></td>
    2539. 

  2539. 				<td>
    2540. 

  2540. 					<input type="text" name="email" id="email" value="', $incontext['email'], '" size="40" class="input_text" />
    2541. 

  2541. 					<div style="font-size: smaller; margin-bottom: 2ex;">', $txt['user_settings_email_info'], '</div>
    2542. 

  2542. 				</td>
    2543. 

  2543. 			</tr>
    2544. 

  2544. 		</table>';
    2545. 

    2546. 

  2546. 	if ($incontext['require_db_confirm'])
    2547. 

  2547. 		echo '
    2548. 

  2548. 		<h2>', $txt['user_settings_database'], '</h2>
    2549. 

  2549. 		<p>', $txt['user_settings_database_info'], '</p>
    2550. 

  2550. 

  2551. 		<div style="margin-bottom: 2ex; padding-', empty($txt['lang_rtl']) ? 'left' : 'right', ': 50px;">
    2552. 

  2552. 			<input type="password" name="password3" size="30" class="input_password" />
    2553. 

  2553. 		</div>';
    2554. 

  2554. }
    2555. 

  2555. 

  2556. /**
    2557. 

  2557.  * Tell them it's done, and to delete.
    2558. 

  2558.  */
    2559. 

  2559. function template_delete_install()
    2560. 

  2560. {
    2561. 

  2561. 	global $incontext, $installurl, $txt, $boardurl;
    2562. 

  2562. 

  2563. 	echo '
    2564. 

  2564. 		<p>', $txt['congratulations_help'], '</p>';
    2565. 

    2566. 

  2566. 	template_warning_divs();
    2567. 

  2567. 

  2568. 	// Install directory still writable?
    2569. 

  2569. 	if ($incontext['dir_still_writable'])
    2570. 

  2570. 		echo '
    2571. 

  2571. 		<em>', $txt['still_writable'], '</em><br />
    2572. 

  2572. 		<br />';
    2573. 

    2574. 

  2574. 	// Don't show the box if it's like 99% sure it won't work :P.
    2575. 

  2575. 	if ($incontext['probably_delete_install'])
    2576. 

  2576. 		echo '
    2577. 

  2577. 		<div style="margin: 1ex; font-weight: bold;">
    2578. 

  2578. 			<label for="delete_self"><input type="checkbox" id="delete_self" onclick="doTheDelete();" class="input_check" /> ', $txt['delete_installer'], !isset($_SESSION['installer_temp_ftp']) ? ' ' . $txt['delete_installer_maybe'] : '', '</label>
    2579. 

  2579. 		</div>
    2580. 

  2580. 		<script type="text/javascript"><!-- // --><![CDATA[
    2581. 

  2581. 			function doTheDelete()
    2582. 

  2582. 			{
    2583. 

  2583. 				var theCheck = document.getElementById ? document.getElementById("delete_self") : document.all.delete_self;
    2584. 

  2584. 				var tempImage = new Image();
    2585. 

  2585. 

  2586. 				tempImage.src = "', $installurl, '?delete=1&ts_" + (new Date().getTime());
    2587. 

  2587. 				tempImage.width = 0;
    2588. 

  2588. 				theCheck.disabled = true;
    2589. 

  2589. 			}
    2590. 

  2590. 		// ]]></script>
    2591. 

  2591. 		<br />';
    2592. 

    2593. 

  2593. 	echo '
    2594. 

  2594. 		', sprintf($txt['go_to_your_forum'], $boardurl . '/index.php'), '<br />
    2595. 

  2595. 		<br />
    2596. 

  2596. 		', $txt['good_luck'];
    2597. 

  2597. }
    2598.