<?php

/*

 * Enano - an open-source CMS capable of wiki functions, Drupal-like sidebar blocks, and everything in between

 * Version 1.1.1

 * Copyright (C) 2006-2007 Dan Fuhry

 * install.php - handles everything related to installation and initial configuration

 *

 * This program is Free Software; you can redistribute and/or modify it under the terms of the GNU General Public License

 * as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

 *

 * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied

 * warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for details.

 */

@include('config.php');

if( ( defined('ENANO_INSTALLED') || defined('MIDGET_INSTALLED') ) && ((isset($_GET['mode']) && ($_GET['mode']!='finish' && $_GET['mode']!='css')) || !isset($_GET['mode'])))

{

  $_GET['title'] = 'Enano:Installation_locked';

  require('includes/common.php');

  die_friendly('Installation locked', '<p>The Enano installer has found a Enano installation in this directory. You MUST delete config.php if you want to re-install Enano.</p><p>If you wish to upgrade an older Enano installation to this version, please use the <a href="upgrade.php">upgrade script</a>.</p>');

  exit;

}

define('IN_ENANO_INSTALL', 'true');

define('ENANO_VERSION', '1.1.1');

// In beta versions, define ENANO_BETA_VERSION here

if(!defined('scriptPath')) {

  $sp = dirname($_SERVER['REQUEST_URI']);

  if($sp == '/' || $sp == '\\') $sp = '';

  define('scriptPath', $sp);

}

if(!defined('contentPath')) {

  $sp = dirname($_SERVER['REQUEST_URI']);

  if($sp == '/' || $sp == '\\') $sp = '';

  define('contentPath', $sp);

}

global $_starttime, $this_page, $sideinfo;

$_starttime = microtime(true);

// Determine directory (special case for development servers)

if ( strpos(__FILE__, '/repo/') && file_exists('.enanodev') )

{

  $filename = str_replace('/repo/', '/', __FILE__);

}

else

{

  $filename = __FILE__;

}

define('ENANO_ROOT', dirname($filename));

function is_page($p)

{

  return true;

}

require('includes/wikiformat.php');

require('includes/constants.php');

require('includes/rijndael.php');

require('includes/functions.php');

strip_magic_quotes_gpc();

//die('Key size: ' . AES_BITS . '<br />Block size: ' . AES_BLOCKSIZE);

if(!function_exists('wikiFormat'))

{

  function wikiFormat($message, $filter_links = true)

  {

    $wiki = & Text_Wiki::singleton('Mediawiki');

    $wiki->setRenderConf('Xhtml', 'code', 'css_filename', 'codefilename');

    $wiki->setRenderConf('Xhtml', 'wikilink', 'view_url', contentPath);

    $result = $wiki->transform($message, 'Xhtml');

    // HTML fixes

    $result = preg_replace('#<tr>([\s]*?)<\/tr>#is', '', $result);

    $result = preg_replace('#<p>([\s]*?)<\/p>#is', '', $result);

    $result = preg_replace('#<br />([\s]*?)<table#is', '<table', $result);

    return $result;

  }

}

global $failed, $warned;

$failed = false;

$warned = false;

function not($var)

{

  if($var)

  {

    return false;

  } 

  else

  {

    return true;

  }

}

function run_test($code, $desc, $extended_desc, $warn = false)

{

  global $failed, $warned;

  static $cv = true;

  $cv = not($cv);

  $val = eval($code);

  if($val)

  {

    if($cv) $color='CCFFCC'; else $color='AAFFAA';

    echo "<tr><td style='background-color: #$color; width: 500px;'>$desc</td><td style='padding-left: 10px;'><img alt='Test passed' src='images/good.gif' /></td></tr>";

  } elseif(!$val && $warn) {

    if($cv) $color='FFFFCC'; else $color='FFFFAA';

    echo "<tr><td style='background-color: #$color; width: 500px;'>$desc<br /><b>$extended_desc</b></td><td style='padding-left: 10px;'><img alt='Test passed with warning' src='images/unknown.gif' /></td></tr>";

    $warned = true;

  } else {

    if($cv) $color='FFCCCC'; else $color='FFAAAA';

    echo "<tr><td style='background-color: #$color; width: 500px;'>$desc<br /><b>$extended_desc</b></td><td style='padding-left: 10px;'><img alt='Test failed' src='images/bad.gif' /></td></tr>";

    $failed = true;

  }

}

function is_apache() { $r = strstr($_SERVER['SERVER_SOFTWARE'], 'Apache') ? true : false; return $r; }

require_once('includes/template.php');

if(!isset($_GET['mode'])) $_GET['mode'] = 'welcome';

switch($_GET['mode'])

{

  case 'mysql_test':

    error_reporting(0);

    $dbhost     = rawurldecode($_POST['host']);

    $dbname     = rawurldecode($_POST['name']);

    $dbuser     = rawurldecode($_POST['user']);

    $dbpass     = rawurldecode($_POST['pass']);

    $dbrootuser = rawurldecode($_POST['root_user']);

    $dbrootpass = rawurldecode($_POST['root_pass']);

    if($dbrootuser != '')

    {

      $conn = mysql_connect($dbhost, $dbrootuser, $dbrootpass);

      if(!$conn)

      {

        $e = mysql_error();

        if(strstr($e, "Lost connection"))

          die('host'.$e);

        else

          die('root'.$e);

      }

      $rsp = 'good';

      $q = mysql_query('USE '.$dbname, $conn);

      if(!$q)

      {

        $e = mysql_error();

        if(strstr($e, 'Unknown database'))

        {

          $rsp .= '_creating_db';

        }

      }

      mysql_close($conn);

      $conn = mysql_connect($dbhost, $dbuser, $dbpass);

      if(!$conn)

      {

        $e = mysql_error();

        if(strstr($e, "Lost connection"))

          die('host'.$e);

        else

          $rsp .= '_creating_user';

      }

      mysql_close($conn);

      die($rsp);

    }

    else

    {

      $conn = mysql_connect($dbhost, $dbuser, $dbpass);

      if(!$conn)

      {

        $e = mysql_error();

        if(strstr($e, "Lost connection"))

          die('host'.$e);

        else

          die('auth'.$e);

      }

      $q = mysql_query('USE '.$dbname, $conn);

      if(!$q)

      {

        $e = mysql_error();

        if(strstr($e, 'Unknown database'))

        {

          die('name'.$e);

        }

        else

        {

          die('perm'.$e);

        }

      }

    }

    $v = mysql_get_server_info();

    if(version_compare($v, '4.1.17', '<')) die('vers'.$v);

    mysql_close($conn);

    die('good');

    break;

  case 'pophelp':

    $topic = ( isset($_GET['topic']) ) ? $_GET['topic'] : 'invalid';

    switch($topic)

    {

      case 'admin_embed_php':

        $title = 'Allow administrators to embed PHP';

        $content = '<p>This option allows you to control whether anything between the standard &lt;?php and ?&gt; tags will be treated as

                        PHP code by Enano. If this option is enabled, and members of the Administrators group use these tags, Enano will

                        execute that code when the page is loaded. There are obvious potential security implications here, which should

                        be carefully considered before enabling this option.</p>

                    <p>If you are the only administrator of this site, or if you have a high level of trust for those will be administering

                       the site with you, you should enable this to allow extreme customization of pages.</p>

                    <p>Leave this option off if you are at all concerned about security – if your account is compromised and PHP embedding

                       is enabled, an attacker can run arbitrary code on your server! Enabling this will also allow administrators to

                       embed Javascript and arbitrary HTML and CSS.</p>

                    <p>If you don\'t have experience coding in PHP, you can safely disable this option. You may change this at any time

                       using the ACL editor by selecting the Administrators group and This Entire Website under the scope selection. <!-- , or by

                       using the "embedded PHP kill switch" in the administration panel. --></p>';

        break;

      default:

        $title = 'Invalid topic';

        $content = 'Invalid help topic.';

        break;

    }

    echo <<<EOF

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">

<html>

  <head>

    <title>Enano installation quick help &bull; {$title}</title>

    <meta http-equiv="Content-type" content="text/html; charset=utf-8" />

    <style type="text/css">

      body {

        font-family: trebuchet ms, verdana, arial, helvetica, sans-serif;

        font-size: 9pt;

      }

      h2          { border-bottom: 1px solid #90B0D0; margin-bottom: 0; }

      h3          { font-size: 11pt; font-weight: bold; }

      li          { list-style: url(../images/bullet.gif); }

      p           { margin: 1.0em; }

      blockquote  { background-color: #F4F4F4; border: 1px dotted #406080; margin: 1em; padding: 10px; max-height: 250px; overflow: auto; }

      a           { color: #7090B0; }

      a:hover     { color: #90B0D0; }

    </style>

  </head>

  <body>

    <h2>{$title}</h2>

    {$content}

    <p style="text-align: right;">

      <a href="#" onclick="window.close(); return false;">Close window</a>

    </p>

  </body>

</html>

EOF;

    exit;

    break;

  default:

    break;

}

$template = new template_nodb();

$template->load_theme('stpatty', 'shamrock', false);

$modestrings = Array(

              'welcome' => 'Welcome',

              'license' => 'License Agreement',

              'sysreqs' => 'Server requirements',

              'database'=> 'Database information',

              'website' => 'Website configuration',

              'login'   => 'Administration login',

              'confirm' => 'Confirm installation',

              'install' => 'Database installation',

              'finish'  => 'Installation complete'

            );

$sideinfo = '';

$vars = $template->extract_vars('elements.tpl');

$p = $template->makeParserText($vars['sidebar_button']);

foreach ( $modestrings as $id => $str )

{

  if ( $_GET['mode'] == $id )

  {

    $flags = 'style="font-weight: bold; text-decoration: underline;"';

    $this_page = $str;

  }

  else

  {

    $flags = '';

  }

  $p->assign_vars(Array(

      'HREF' => '#',

      'FLAGS' => $flags . ' onclick="return false;"',

      'TEXT' => $str

    ));

  $sideinfo .= $p->run();

}

$template->init_vars();

if(isset($_GET['mode']) && $_GET['mode'] == 'css')

{

  header('Content-type: text/css');

  echo $template->get_css();

  exit;

}

$template->header();

if(!isset($_GET['mode'])) $_GET['mode'] = 'license';

switch($_GET['mode'])

{ 

  default:

  case 'welcome':

    ?>

    <div style="text-align: center; margin-top: 10px;">

      <img alt="[ Enano CMS Project logo ]" src="images/enano-artwork/installer-greeting-green.png" style="display: block; margin: 0 auto; padding-left: 100px;" />

      <h2>Welcome to Enano</h2>

      <h3>version 1.1.1 &ndash; unstable</h3>

      <?php

      if ( file_exists('./_nightly.php') )

      {

        echo '<div class="warning-box" style="text-align: left; margin: 10px 0;"><b>You are about to install a NIGHTLY BUILD of Enano.</b><br />Nightly builds are NOT upgradeable and may contain serious flaws, security problems, or extraneous debugging information. Installing this version of Enano on a production site is NOT recommended.</div>';

      }

      ?>

      <form action="install.php?mode=license" method="post">

        <input type="submit" value="Start installation" />

      </form>

    </div>

    <?php

    break;

  case "license":

    ?>

    <h3>Welcome to the Enano installer.</h3>

     <p>Thank you for choosing Enano as your CMS. You've selected the finest in design, the strongest in security, and the latest in Web 2.0 toys. Trust us, you'll like it.</p>

     <p>To get started, please read and accept the following license agreement. You've probably seen it before.</p>

     <div style="height: 500px; clip: rect(0px,auto,500px,auto); overflow: auto; padding: 10px; border: 1px dashed #456798; margin: 1em;">

       <h2>GNU General Public License</h2>

       <h3>Declaration of license usage</h3>

       <p>Enano is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.</p>

       <p>This program is distributed in the hope that it will be useful, but <u>without any warranty</u>; without even the implied warranty of <u>merchantability</u> or <u>fitness for a particular purpose</u>. See the GNU General Public License (below) for more details.</p>

       <p><b>By clicking the button below or otherwise continuing the installation, you indicate your acceptance of this license agreement.</b></p>

       <h3>Human-readable version</h3>

       <p>Enano is distributed under certain licensing terms that we believe make it of the greatest possible use to the public. The license we distribute it under, the GNU General Public License, provides certain terms and conditions that, rather than limit your use of Enano, allow you to get the most out of it. If you would like to read the full text, it can be found below. Here is a human-readable version that we think is a little easier to understand.</p>

       <ul>

       <li>You may to run Enano for any purpose.</li>

       <li>You may study how Enano works and adapt it to your needs.</li>

       <li>You may redistribute copies so you can help your neighbor.</li>

       <li>You may improve Enano and release your improvements to the public, so that the whole community benefits.</li>

       </ul>

       <p>You may exercise the freedoms specified here provided that you comply with the express conditions of this license. The principal conditions are:</p>

       <ul>

       <li>You must conspicuously and appropriately publish on each copy distributed an appropriate copyright notice and disclaimer of warranty and keep intact all the notices that refer to this License and to the absence of any warranty; and give any other recipients of Enano a copy of the GNU General Public License along with Enano. Any translation of the GNU General Public License must be accompanied by the GNU General Public License.</li>

       <li>If you modify your copy or copies of Enano or any portion of it, or develop a program based upon it, you may distribute the resulting work provided you do so under the GNU General Public License. Any translation of the GNU General Public License must be accompanied by the GNU General Public License.</li>

       <li>If you copy or distribute Enano, you must accompany it with the complete corresponding machine-readable source code or with a written offer, valid for at least three years, to furnish the complete corresponding machine-readable source code.</li>

       </ul>

       <p><b>Disclaimer</b>: The above text is not a license. It is simply a handy reference for understanding the Legal Code (the full license) &ndash; it is a human-readable expression of some of its key terms. Think of it as the user-friendly interface to the Legal Code beneath. The above text itself has no legal value, and its contents do not appear in the actual license.<br /><span style="color: #CCC">Text copied from the <a href="http://creativecommons.org/licenses/GPL/2.0/">Creative Commons GPL Deed page</a></span></p>

       <?php

       if ( defined('ENANO_BETA_VERSION') )

       {

         ?>

         <h3>Notice for prerelease versions</h3>

         <p>This version of Enano is designed only for testing and evaluation purposes. <b>It is not yet completely stable, and should not be used on production websites.</b> As with any Enano version, Dan Fuhry and the Enano team cannot be responsible for any damage, physical or otherwise, to any property as a result of the use of Enano. While security is a number one priority, sometimes things slip through.</p>

         <?php

       }

       ?>

       <h3>Lawyer-readable version</h3>

       <?php echo wikiFormat(file_get_contents(ENANO_ROOT . '/GPL')); ?>

     </div>

     <div class="pagenav">

       <form action="install.php?mode=sysreqs" method="post">

         <table border="0">

         <tr>

         <td><input type="submit" value="I agree to the license terms" /></td><td><p><span style="font-weight: bold;">Before clicking continue:</span><br />&bull; Ensure that you agree with the terms of the license<br />&bull; Have your database host, name, username, and password available</p></td>

         </tr>

         </table>

       </form>