install.php ➔ check_functions() - Code Metrics - Inspection of "test the collator fallback always" - splitbrain/dokuwiki - Measure and Improve Code Quality continuously with Scrutinizer

Failed Conditions

Push — pr-3115 ( f9aa34 )

by Andreas

created 2020-08-12 10:23 UTC

install.php ➔ check_functions() B

↳ Parent: Project

Complexity

Conditions	8
Paths	96

Size

Total Lines

Duplication

Lines	0
Ratio	0 %

Importance

Changes

Metric	Value
cc	8
nc	96
nop	0
dl	0
loc	50
rs	7.8464
c	0
b	0
f	0

<?php
/*><div style="width:60%; margin: auto; background-color: #fcc;
                border: 1px solid #faa; padding: 0.5em 1em;">
    <h1 style="font-size: 120%">No PHP Support</h1>

    It seems this server has no PHP support enabled. You will need to
    enable PHP before you can install and run DokuWiki. Contact your hosting
    provider if you're unsure what this means.

</div>*/
/**
 * Dokuwiki installation assistance
 *
 * @author      Chris Smith <[email protected]>
 */

if(!defined('DOKU_INC')) define('DOKU_INC',dirname(__FILE__).'/');
if(!defined('DOKU_CONF')) define('DOKU_CONF',DOKU_INC.'conf/');
if(!defined('DOKU_LOCAL')) define('DOKU_LOCAL',DOKU_INC.'conf/');

// load and initialize the core system
require_once(DOKU_INC.'inc/init.php');

// check for error reporting override or set error reporting to sane values
if (!defined('DOKU_E_LEVEL')) { error_reporting(E_ALL ^ E_NOTICE); }
else { error_reporting(DOKU_E_LEVEL); }

// language strings
require_once(DOKU_INC.'inc/lang/en/lang.php');
if(isset($_REQUEST['l']) && !is_array($_REQUEST['l'])) {
    $LC = preg_replace('/[^a-z\-]+/','',$_REQUEST['l']);
}
if(empty($LC)) $LC = 'en';
if($LC && $LC != 'en' ) {
    require_once(DOKU_INC.'inc/lang/'.$LC.'/lang.php');
}

// initialise variables ...
$error = array();

// begin output
header('Content-Type: text/html; charset=utf-8');
?>
<!DOCTYPE html>
<html lang="<?php echo $LC?>" dir="<?php echo $lang['direction']?>">
<head>
    <meta charset="utf-8" />
    <title><?php echo $lang['i_installer']?></title>
    <style>
        body { width: 90%; margin: 0 auto; font: 84% Verdana, Helvetica, Arial, sans-serif; }
        img { border: none }
        br.cl { clear:both; }
        code { font-size: 110%; color: #800000; }
        fieldset { border: none }
        label { display: block; margin-top: 0.5em; }
        select.text, input.text { width: 30em; margin: 0 0.5em; }
        a {text-decoration: none}
    </style>
    <script>
        function acltoggle(){
            var cb = document.getElementById('acl');
            var fs = document.getElementById('acldep');
            if(!cb || !fs) return;
            if(cb.checked){
                fs.style.display = '';
            }else{
                fs.style.display = 'none';
            }
        }
        window.onload = function(){
            acltoggle();
            var cb = document.getElementById('acl');
            if(cb) cb.onchange = acltoggle;
        };
    </script>
</head>
<body style="">
    <h1 style="float:left">
        <img src="lib/exe/fetch.php?media=wiki:dokuwiki-128.png"
             style="vertical-align: middle;" alt="" height="64" width="64" />
        <?php echo $lang['i_installer']?>
    </h1>
    <div style="float:right; margin: 1em;">
        <?php langsel()?>
    </div>
    <br class="cl" />

    <div style="float: right; width: 34%;">
        <?php
            if(file_exists(DOKU_INC.'inc/lang/'.$LC.'/install.html')){
                include(DOKU_INC.'inc/lang/'.$LC.'/install.html');
            }else{
                print "<div lang=\"en\" dir=\"ltr\">\n";
                include(DOKU_INC.'inc/lang/en/install.html');
                print "</div>\n";
            }
        ?>
        <a style="
                background: transparent
                url(data/dont-panic-if-you-see-this-in-your-logs-it-means-your-directory-permissions-are-correct.png)
                left top no-repeat;
                display: block; width:380px; height:73px; border:none; clear:both;"
           target="_blank"
           href="http://www.dokuwiki.org/security#web_access_security"></a>
    </div>

    <div style="float: left; width: 58%;">
        <?php
            try {
                if(! (check_functions() && check_permissions()) ){
                    echo '<p>'.$lang['i_problems'].'</p>';
                    print_errors();
                    print_retry();
                }elseif(!check_configs()){
                    echo '<p>'.$lang['i_modified'].'</p>';
                    print_errors();
                }elseif(check_data($_REQUEST['d'])){
                    // check_data has sanitized all input parameters
                    if(!store_data($_REQUEST['d'])){
                        echo '<p>'.$lang['i_failure'].'</p>';
                        print_errors();
                    }else{
                        echo '<p>'.$lang['i_success'].'</p>';
                    }
                }else{
                    print_errors();
                    print_form($_REQUEST['d']);
                }
            } catch (Exception $e) {
                echo 'Caught exception: ',  $e->getMessage(), "\n";
            }
        ?>
    </div>


<div style="clear: both">
  <a href="http://dokuwiki.org/"><img src="lib/tpl/dokuwiki/images/button-dw.png" alt="driven by DokuWiki" /></a>
  <a href="http://php.net"><img src="lib/tpl/dokuwiki/images/button-php.gif" alt="powered by PHP" /></a>
</div>
</body>
</html>
<?php

/**
 * Print the input form
 *
 * @param array $d submitted entry 'd' of request data
 */
function print_form($d){
    global $lang;
    global $LC;

    include(DOKU_CONF.'license.php');

    if(!is_array($d)) $d = array();
    $d = array_map('hsc',$d);

    if(!isset($d['acl'])) $d['acl']=1;
    if(!isset($d['pop'])) $d['pop']=1;

    ?>
    <form action="" method="post">
    <input type="hidden" name="l" value="<?php echo $LC ?>" />
    <fieldset>
        <label for="title"><?php echo $lang['i_wikiname']?>
        <input type="text" name="d[title]" id="title" value="<?php echo $d['title'] ?>" style="width: 20em;" />
        </label>

        <fieldset style="margin-top: 1em;">
            <label for="acl">
            <input type="checkbox" name="d[acl]" id="acl" <?php echo(($d['acl'] ? ' checked="checked"' : ''));?> />
            <?php echo $lang['i_enableacl']?></label>

            <fieldset id="acldep">
                <label for="superuser"><?php echo $lang['i_superuser']?></label>
                <input class="text" type="text" name="d[superuser]" id="superuser"
                       value="<?php echo $d['superuser'] ?>" />

                <label for="fullname"><?php echo $lang['fullname']?></label>
                <input class="text" type="text" name="d[fullname]" id="fullname"
                       value="<?php echo $d['fullname'] ?>" />

                <label for="email"><?php echo $lang['email']?></label>
                <input class="text" type="text" name="d[email]" id="email" value="<?php echo $d['email'] ?>" />

                <label for="password"><?php echo $lang['pass']?></label>
                <input class="text" type="password" name="d[password]" id="password" />

                <label for="confirm"><?php echo $lang['passchk']?></label>
                <input class="text" type="password" name="d[confirm]" id="confirm" />

                <label for="policy"><?php echo $lang['i_policy']?></label>
                <select class="text" name="d[policy]" id="policy">
                    <option value="0" <?php echo ($d['policy'] == 0)?'selected="selected"':'' ?>><?php
                        echo $lang['i_pol0']?></option>
                    <option value="1" <?php echo ($d['policy'] == 1)?'selected="selected"':'' ?>><?php
                        echo $lang['i_pol1']?></option>
                    <option value="2" <?php echo ($d['policy'] == 2)?'selected="selected"':'' ?>><?php
                        echo $lang['i_pol2']?></option>
                </select>

                <label for="allowreg">
                    <input type="checkbox" name="d[allowreg]" id="allowreg" <?php
                        echo(($d['allowreg'] ? ' checked="checked"' : ''));?> />
                    <?php echo $lang['i_allowreg']?>
                </label>
            </fieldset>
        </fieldset>

        <fieldset>
            <p><?php echo $lang['i_license']?></p>
            <?php
            array_push($license,array('name' => $lang['i_license_none'], 'url'=>''));
            if(empty($d['license'])) $d['license'] = 'cc-by-sa';
            foreach($license as $key => $lic){
                echo '<label for="lic_'.$key.'">';
                echo '<input type="radio" name="d[license]" value="'.hsc($key).'" id="lic_'.$key.'"'.
                     (($d['license'] === $key)?' checked="checked"':'').'>';
                echo hsc($lic['name']);
                if($lic['url']) echo ' <a href="'.$lic['url'].'" target="_blank"><sup>[?]</sup></a>';
                echo '</label>';
            }
            ?>
        </fieldset>

        <fieldset>
            <p><?php echo $lang['i_pop_field']?></p>
            <label for="pop">
                <input type="checkbox" name="d[pop]" id="pop" <?php
                    echo(($d['pop'] ? ' checked="checked"' : ''));?> />
                <?php echo $lang['i_pop_label']?>
                <a href="http://www.dokuwiki.org/popularity" target="_blank"><sup>[?]</sup></a>
            </label>
        </fieldset>

    </fieldset>
    <fieldset id="process">
        <button type="submit" name="submit"><?php echo $lang['btn_save']?></button>
    </fieldset>
    </form>
    <?php
}

function print_retry() {
    global $lang;
    global $LC;
    ?>
    <form action="" method="get">
      <fieldset>
        <input type="hidden" name="l" value="<?php echo $LC ?>" />
        <button type="submit"><?php echo $lang['i_retry'];?></button>
      </fieldset>
    </form>
    <?php
}

/**
 * Check validity of data
 *
 * @author Andreas Gohr
 *
 * @param array $d
 * @return bool ok?
 */
function check_data(&$d){
    static $form_default = array(
        'title'     => '',
        'acl'       => '1',
        'superuser' => '',
        'fullname'  => '',
        'email'     => '',
        'password'  => '',
        'confirm'   => '',
        'policy'    => '0',
        'allowreg'  => '0',
        'license'   => 'cc-by-sa'
    );
    global $lang;
    global $error;

    if(!is_array($d)) $d = array();
    foreach($d as $k => $v) {
        if(is_array($v))
            unset($d[$k]);
        else
            $d[$k] = (string)$v;
    }

    //autolowercase the username
    $d['superuser'] = isset($d['superuser']) ? strtolower($d['superuser']) : "";

    $ok = false;

    if(isset($_REQUEST['submit'])) {
        $ok = true;

        // check input
        if(empty($d['title'])){
            $error[] = sprintf($lang['i_badval'],$lang['i_wikiname']);
            $ok      = false;
        }
        if(isset($d['acl'])){
            if(!preg_match('/^[a-z0-9_]+$/',$d['superuser'])){
                $error[] = sprintf($lang['i_badval'],$lang['i_superuser']);
                $ok      = false;
            }
            if(empty($d['password'])){
                $error[] = sprintf($lang['i_badval'],$lang['pass']);
                $ok      = false;
            }
            elseif(!isset($d['confirm']) || $d['confirm'] != $d['password']){
                $error[] = sprintf($lang['i_badval'],$lang['passchk']);
                $ok      = false;
            }
            if(empty($d['fullname']) || strstr($d['fullname'],':')){
                $error[] = sprintf($lang['i_badval'],$lang['fullname']);
                $ok      = false;
            }
            if(empty($d['email']) || strstr($d['email'],':') || !strstr($d['email'],'@')){
                $error[] = sprintf($lang['i_badval'],$lang['email']);
                $ok      = false;
            }
        }else{
            // Since default = 1, browser won't send acl=0 when user untick acl
            $d['acl'] = '0';
        }
    }
    $d = array_merge($form_default, $d);
    return $ok;
}

/**
 * Writes the data to the config files
 *
 * @author  Chris Smith <[email protected]>
 *
 * @param array $d
 * @return bool
 */
function store_data($d){
    global $LC;
    $ok = true;
    $d['policy'] = (int) $d['policy'];

    // create local.php
    $now    = gmdate('r');
    $output = <<<EOT
<?php
/**
 * Dokuwiki's Main Configuration File - Local Settings
 * Auto-generated by install script
 * Date: $now
 */

EOT;
    // add any config options set by a previous installer
    $preset = __DIR__.'/install.conf';
    if(file_exists($preset)){
        $output .= "# preset config options\n";
        $output .= file_get_contents($preset);
        $output .= "\n\n";
        $output .= "# options selected in installer\n";
        @unlink($preset);
    }

    $output .= '$conf[\'title\'] = \''.addslashes($d['title'])."';\n";
    $output .= '$conf[\'lang\'] = \''.addslashes($LC)."';\n";
    $output .= '$conf[\'license\'] = \''.addslashes($d['license'])."';\n";
    if($d['acl']){
        $output .= '$conf[\'useacl\'] = 1'.";\n";
        $output .= "\$conf['superuser'] = '@admin';\n";
    }
    if(!$d['allowreg']){
        $output .= '$conf[\'disableactions\'] = \'register\''.";\n";
    }
    $ok = $ok && fileWrite(DOKU_LOCAL.'local.php',$output);

    if ($d['acl']) {
        // hash the password
        $phash = new \dokuwiki\PassHash();
        $pass = $phash->hash_smd5($d['password']);

        // create users.auth.php
        $output = <<<EOT
# users.auth.php
# <?php exit()?>
# Don't modify the lines above
#
# Userfile
#
# Auto-generated by install script
# Date: $now
#
# Format:
# login:passwordhash:Real Name:email:groups,comma,separated

EOT;
        // --- user:SMD5password:Real Name:email:groups,comma,seperated
        $output = $output."\n".join(":",array($d['superuser'], $pass, $d['fullname'], $d['email'], 'admin,user'))."\n";
        $ok = $ok && fileWrite(DOKU_LOCAL.'users.auth.php', $output);

        // create acl.auth.php
        $output = <<<EOT
# acl.auth.php
# <?php exit()?>
# Don't modify the lines above
#
# Access Control Lists
#
# Auto-generated by install script
# Date: $now

EOT;
        if($d['policy'] == 2){
            $output .=  "*               @ALL          0\n";
            $output .=  "*               @user         8\n";
        }elseif($d['policy'] == 1){
            $output .=  "*               @ALL          1\n";
            $output .=  "*               @user         8\n";
        }else{
            $output .=  "*               @ALL          8\n";
        }
        $ok = $ok && fileWrite(DOKU_LOCAL.'acl.auth.php', $output);
    }

    // enable popularity submission
    if($d['pop']){
        @touch(DOKU_INC.'data/cache/autosubmit.txt');
    }

    // disable auth plugins til needed
    $output = <<<EOT
<?php
/*
 * Local plugin enable/disable settings
 *
 * Auto-generated by install script
 * Date: $now
 */

\$plugins['authad']    = 0;
\$plugins['authldap']  = 0;
\$plugins['authmysql'] = 0;
\$plugins['authpgsql'] = 0;

EOT;
    $ok = $ok && fileWrite(DOKU_LOCAL.'plugins.local.php', $output);

    return $ok;
}

/**
 * Write the given content to a file
 *
 * @author  Chris Smith <[email protected]>
 *
 * @param string $filename
 * @param string $data
 * @return bool
 */
function fileWrite($filename, $data) {
    global $error;
    global $lang;

    if (($fp = @fopen($filename, 'wb')) === false) {
        $filename = str_replace($_SERVER['DOCUMENT_ROOT'],'{DOCUMENT_ROOT}/', $filename);
        $error[]  = sprintf($lang['i_writeerr'],$filename);
        return false;
    }

    if (!empty($data)) { fwrite($fp, $data);  }
    fclose($fp);
    return true;
}


/**
 * check installation dependent local config files and tests for a known
 * unmodified main config file
 *
 * @author      Chris Smith <[email protected]>
 *
 * @return bool
 */
function check_configs(){
    global $error;
    global $lang;

    $ok = true;

    $config_files = array(
        'local' => DOKU_LOCAL.'local.php',
        'users' => DOKU_LOCAL.'users.auth.php',
        'auth'  => DOKU_LOCAL.'acl.auth.php'
    );

    // configs shouldn't exist
    foreach ($config_files as $file) {
        if (file_exists($file) && filesize($file)) {
            $file    = str_replace($_SERVER['DOCUMENT_ROOT'],'{DOCUMENT_ROOT}/', $file);
            $error[] = sprintf($lang['i_confexists'],$file);
            $ok      = false;
        }
    }
    return $ok;
}


/**
 * Check other installation dir/file permission requirements
 *
 * @author      Chris Smith <[email protected]>
 *
 * @return bool
 */
function check_permissions(){
    global $error;
    global $lang;

    $dirs = array(
        'conf'        => DOKU_LOCAL,
        'data'        => DOKU_INC.'data',
        'pages'       => DOKU_INC.'data/pages',
        'attic'       => DOKU_INC.'data/attic',
        'media'       => DOKU_INC.'data/media',
        'media_attic' => DOKU_INC.'data/media_attic',
        'media_meta'  => DOKU_INC.'data/media_meta',
        'meta'        => DOKU_INC.'data/meta',
        'cache'       => DOKU_INC.'data/cache',
        'locks'       => DOKU_INC.'data/locks',
        'index'       => DOKU_INC.'data/index',
        'tmp'         => DOKU_INC.'data/tmp'
    );

    $ok = true;
    foreach($dirs as $dir){
        if(!file_exists("$dir/.") || !is_writable($dir)){
            $dir     = str_replace($_SERVER['DOCUMENT_ROOT'],'{DOCUMENT_ROOT}', $dir);
            $error[] = sprintf($lang['i_permfail'],$dir);
            $ok      = false;
        }
    }
    return $ok;
}

/**
 * Check the availability of functions used in DokuWiki and the PHP version
 *
 * @author Andreas Gohr <[email protected]>
 *
 * @return bool
 */
function check_functions(){
    global $error;
    global $lang;
    $ok = true;

    if(version_compare(phpversion(),'5.6.0','<')){
        $error[] = sprintf($lang['i_phpver'],phpversion(),'5.6.0');
        $ok = false;
    }

    if(ini_get('mbstring.func_overload') != 0){
        $error[] = $lang['i_mbfuncoverload'];
        $ok = false;
    }

    try {
        random_bytes(1);
    } catch (\Exception $th) {
        // If an appropriate source of randomness cannot be found, an Exception will be thrown by PHP 7+
        // this exception is also thrown by paragonie/random_compat for PHP 5.6 support
        $error[] = $lang['i_urandom'];
        $ok = false;
    }

    if(ini_get('mbstring.func_overload') != 0){
        $error[] = $lang['i_mbfuncoverload'];
        $ok = false;
    }

    $funcs = explode(' ','addslashes call_user_func chmod copy fgets '.
                         'file file_exists fseek flush filesize ftell fopen '.
                         'glob header ignore_user_abort ini_get mail mkdir '.
                         'ob_start opendir parse_ini_file readfile realpath '.
                         'rename rmdir serialize session_start unlink usleep '.
                         'preg_replace file_get_contents htmlspecialchars_decode '.
                         'spl_autoload_register stream_select fsockopen pack');

    if (!function_exists('mb_substr')) {
        $funcs[] = 'utf8_encode';
        $funcs[] = 'utf8_decode';
    }

    foreach($funcs as $func){
        if(!function_exists($func)){
            $error[] = sprintf($lang['i_funcna'],$func);
            $ok = false;
        }
    }
    return $ok;
}

/**
 * Print language selection
 *
 * @author Andreas Gohr <[email protected]>
 */
function langsel(){
    global $lang;
    global $LC;

    $dir = DOKU_INC.'inc/lang';
    $dh  = opendir($dir);
    if(!$dh) return;

    $langs = array();
    while (($file = readdir($dh)) !== false) {
        if(preg_match('/^[\._]/',$file)) continue;
        if(is_dir($dir.'/'.$file) && file_exists($dir.'/'.$file.'/lang.php')){
            $langs[] = $file;
        }
    }
    closedir($dh);
    sort($langs);

    echo '<form action="">';
    echo $lang['i_chooselang'];
    echo ': <select name="l" onchange="submit()">';
    foreach($langs as $l){
        $sel = ($l == $LC) ? 'selected="selected"' : '';
        echo '<option value="'.$l.'" '.$sel.'>'.$l.'</option>';
    }
    echo '</select> ';
    echo '<button type="submit">'.$lang['btn_update'].'</button>';
    echo '</form>';
}

/**
 * Print global error array
 *
 * @author Andreas Gohr <[email protected]>
 */
function print_errors(){
    global $error;
    if(!empty($error)) {
        echo '<ul>';
        foreach ($error as $err){
            echo "<li>$err</li>";
        }
        echo '</ul>';
    }
}


1			<?php
2			/*><div style="width:60%; margin: auto; background-color: #fcc;
3			border: 1px solid #faa; padding: 0.5em 1em;">
4			<h1 style="font-size: 120%">No PHP Support</h1>
5
6			It seems this server has no PHP support enabled. You will need to
7			enable PHP before you can install and run DokuWiki. Contact your hosting
8			provider if you're unsure what this means.
9
10			</div>*/
11			/**
12			* Dokuwiki installation assistance
13			*
14			* @author Chris Smith <[email protected]>
15			*/
16
17			if(!defined('DOKU_INC')) define('DOKU_INC',dirname(__FILE__).'/');
18			if(!defined('DOKU_CONF')) define('DOKU_CONF',DOKU_INC.'conf/');
19			if(!defined('DOKU_LOCAL')) define('DOKU_LOCAL',DOKU_INC.'conf/');
20
21			// load and initialize the core system
22			require_once(DOKU_INC.'inc/init.php');
23
24			// check for error reporting override or set error reporting to sane values
25			if (!defined('DOKU_E_LEVEL')) { error_reporting(E_ALL ^ E_NOTICE); }
26			else { error_reporting(DOKU_E_LEVEL); }
27
28			// language strings
29			require_once(DOKU_INC.'inc/lang/en/lang.php');
30			if(isset($_REQUEST['l']) && !is_array($_REQUEST['l'])) {
31			$LC = preg_replace('/[^a-z\-]+/','',$_REQUEST['l']);
32			}
33			if(empty($LC)) $LC = 'en';
34			if($LC && $LC != 'en' ) {
35			require_once(DOKU_INC.'inc/lang/'.$LC.'/lang.php');
36			}
37
38			// initialise variables ...
39			$error = array();
40
41			// begin output
42			header('Content-Type: text/html; charset=utf-8');
43			?>
44			<!DOCTYPE html>
45			<html lang="<?php echo $LC?>" dir="<?php echo $lang['direction']?>">
46			<head>
47			<meta charset="utf-8" />
48			<title><?php echo $lang['i_installer']?></title>
49			<style>
50			body { width: 90%; margin: 0 auto; font: 84% Verdana, Helvetica, Arial, sans-serif; }
51			img { border: none }
52			br.cl { clear:both; }
53			code { font-size: 110%; color: #800000; }
54			fieldset { border: none }
55			label { display: block; margin-top: 0.5em; }
56			select.text, input.text { width: 30em; margin: 0 0.5em; }
57			a {text-decoration: none}
58			</style>
59			<script>
60			function acltoggle(){
61			var cb = document.getElementById('acl');
62			var fs = document.getElementById('acldep');
63			if(!cb \|\| !fs) return;
64			if(cb.checked){
65			fs.style.display = '';
66			}else{
67			fs.style.display = 'none';
68			}
69			}
70			window.onload = function(){
71			acltoggle();
72			var cb = document.getElementById('acl');
73			if(cb) cb.onchange = acltoggle;
74			};
75			</script>
76			</head>
77			<body style="">
78			<h1 style="float:left">
79			<img src="lib/exe/fetch.php?media=wiki:dokuwiki-128.png"
80			style="vertical-align: middle;" alt="" height="64" width="64" />
81			<?php echo $lang['i_installer']?>
82			</h1>
83			<div style="float:right; margin: 1em;">
84			<?php langsel()?>
85			</div>
86			<br class="cl" />
87
88			<div style="float: right; width: 34%;">
89			<?php
90			if(file_exists(DOKU_INC.'inc/lang/'.$LC.'/install.html')){
91			include(DOKU_INC.'inc/lang/'.$LC.'/install.html');
92			}else{
93			print "<div lang=\"en\" dir=\"ltr\">\n";
94			include(DOKU_INC.'inc/lang/en/install.html');
95			print "</div>\n";
96			}
97			?>
98			<a style="
99			background: transparent
100			url(data/dont-panic-if-you-see-this-in-your-logs-it-means-your-directory-permissions-are-correct.png)
101			left top no-repeat;
102			display: block; width:380px; height:73px; border:none; clear:both;"
103			target="_blank"
104			href="http://www.dokuwiki.org/security#web_access_security"></a>
105			</div>
106
107			<div style="float: left; width: 58%;">
108			<?php
109			try {
110			if(! (check_functions() && check_permissions()) ){
111			echo '<p>'.$lang['i_problems'].'</p>';
112			print_errors();
113			print_retry();
114			}elseif(!check_configs()){
115			echo '<p>'.$lang['i_modified'].'</p>';
116			print_errors();
117			}elseif(check_data($_REQUEST['d'])){
118			// check_data has sanitized all input parameters
119			if(!store_data($_REQUEST['d'])){
120			echo '<p>'.$lang['i_failure'].'</p>';
121			print_errors();
122			}else{
123			echo '<p>'.$lang['i_success'].'</p>';
124			}
125			}else{
126			print_errors();
127			print_form($_REQUEST['d']);
128			}
129			} catch (Exception $e) {
130			echo 'Caught exception: ', $e->getMessage(), "\n";
131			}
132			?>
133			</div>
134
135
136			<div style="clear: both">
137			<a href="http://dokuwiki.org/"><img src="lib/tpl/dokuwiki/images/button-dw.png" alt="driven by DokuWiki" /></a>
138			<a href="http://php.net"><img src="lib/tpl/dokuwiki/images/button-php.gif" alt="powered by PHP" /></a>
139			</div>
140			</body>
141			</html>
142			<?php
143
144			/**
145			* Print the input form
146			*
147			* @param array $d submitted entry 'd' of request data
148			*/
149			function print_form($d){
150			global $lang;
151			global $LC;
152
153			include(DOKU_CONF.'license.php');
154
155			if(!is_array($d)) $d = array();
156			$d = array_map('hsc',$d);
157
158			if(!isset($d['acl'])) $d['acl']=1;
159			if(!isset($d['pop'])) $d['pop']=1;
160
161			?>
162			<form action="" method="post">
163			<input type="hidden" name="l" value="<?php echo $LC ?>" />
164			<fieldset>
165			<label for="title"><?php echo $lang['i_wikiname']?>
166			<input type="text" name="d[title]" id="title" value="<?php echo $d['title'] ?>" style="width: 20em;" />
167			</label>
168
169			<fieldset style="margin-top: 1em;">
170			<label for="acl">
171			<input type="checkbox" name="d[acl]" id="acl" <?php echo(($d['acl'] ? ' checked="checked"' : ''));?> />
172			<?php echo $lang['i_enableacl']?></label>
173
174			<fieldset id="acldep">
175			<label for="superuser"><?php echo $lang['i_superuser']?></label>
176			<input class="text" type="text" name="d[superuser]" id="superuser"
177			value="<?php echo $d['superuser'] ?>" />
178
179			<label for="fullname"><?php echo $lang['fullname']?></label>
180			<input class="text" type="text" name="d[fullname]" id="fullname"
181			value="<?php echo $d['fullname'] ?>" />
182
183			<label for="email"><?php echo $lang['email']?></label>
184			<input class="text" type="text" name="d[email]" id="email" value="<?php echo $d['email'] ?>" />
185
186			<label for="password"><?php echo $lang['pass']?></label>
187			<input class="text" type="password" name="d[password]" id="password" />
188
189			<label for="confirm"><?php echo $lang['passchk']?></label>
190			<input class="text" type="password" name="d[confirm]" id="confirm" />
191
192			<label for="policy"><?php echo $lang['i_policy']?></label>
193			<select class="text" name="d[policy]" id="policy">
194			<option value="0" <?php echo ($d['policy'] == 0)?'selected="selected"':'' ?>><?php
195			echo $lang['i_pol0']?></option>
196			<option value="1" <?php echo ($d['policy'] == 1)?'selected="selected"':'' ?>><?php
197			echo $lang['i_pol1']?></option>
198			<option value="2" <?php echo ($d['policy'] == 2)?'selected="selected"':'' ?>><?php
199			echo $lang['i_pol2']?></option>
200			</select>
201
202			<label for="allowreg">
203			<input type="checkbox" name="d[allowreg]" id="allowreg" <?php
204			echo(($d['allowreg'] ? ' checked="checked"' : ''));?> />
205			<?php echo $lang['i_allowreg']?>
206			</label>
207			</fieldset>
208			</fieldset>
209
210			<fieldset>
211			<p><?php echo $lang['i_license']?></p>
212			<?php
213			array_push($license,array('name' => $lang['i_license_none'], 'url'=>''));
214			if(empty($d['license'])) $d['license'] = 'cc-by-sa';
215			foreach($license as $key => $lic){
216			echo '<label for="lic_'.$key.'">';
217			echo '<input type="radio" name="d[license]" value="'.hsc($key).'" id="lic_'.$key.'"'.
218			(($d['license'] === $key)?' checked="checked"':'').'>';
219			echo hsc($lic['name']);
220			if($lic['url']) echo ' <a href="'.$lic['url'].'" target="_blank"><sup>[?]</sup></a>';
221			echo '</label>';
222			}
223			?>
224			</fieldset>
225
226			<fieldset>
227			<p><?php echo $lang['i_pop_field']?></p>
228			<label for="pop">
229			<input type="checkbox" name="d[pop]" id="pop" <?php
230			echo(($d['pop'] ? ' checked="checked"' : ''));?> />
231			<?php echo $lang['i_pop_label']?>
232			<a href="http://www.dokuwiki.org/popularity" target="_blank"><sup>[?]</sup></a>
233			</label>
234			</fieldset>
235
236			</fieldset>
237			<fieldset id="process">
238			<button type="submit" name="submit"><?php echo $lang['btn_save']?></button>
239			</fieldset>
240			</form>
241			<?php
242			}
243
244			function print_retry() {
245			global $lang;
246			global $LC;
247			?>
248			<form action="" method="get">
249			<fieldset>
250			<input type="hidden" name="l" value="<?php echo $LC ?>" />
251			<button type="submit"><?php echo $lang['i_retry'];?></button>
252			</fieldset>
253			</form>
254			<?php
255			}
256
257			/**
258			* Check validity of data
259			*
260			* @author Andreas Gohr
261			*
262			* @param array $d
263			* @return bool ok?
264			*/
265			function check_data(&$d){
266			static $form_default = array(
267			'title' => '',
268			'acl' => '1',
269			'superuser' => '',
270			'fullname' => '',
271			'email' => '',
272			'password' => '',
273			'confirm' => '',
274			'policy' => '0',
275			'allowreg' => '0',
276			'license' => 'cc-by-sa'
277			);
278			global $lang;
279			global $error;
280
281			if(!is_array($d)) $d = array();
282			foreach($d as $k => $v) {
283			if(is_array($v))
284			unset($d[$k]);
285			else
286			$d[$k] = (string)$v;
287			}
288
289			//autolowercase the username
290			$d['superuser'] = isset($d['superuser']) ? strtolower($d['superuser']) : "";
291
292			$ok = false;
293
294			if(isset($_REQUEST['submit'])) {
295			$ok = true;
296
297			// check input
298			if(empty($d['title'])){
299			$error[] = sprintf($lang['i_badval'],$lang['i_wikiname']);
300			$ok = false;
301			}
302			if(isset($d['acl'])){
303			if(!preg_match('/^[a-z0-9_]+$/',$d['superuser'])){
304			$error[] = sprintf($lang['i_badval'],$lang['i_superuser']);
305			$ok = false;
306			}
307			if(empty($d['password'])){
308			$error[] = sprintf($lang['i_badval'],$lang['pass']);
309			$ok = false;
310			}
311			elseif(!isset($d['confirm']) \|\| $d['confirm'] != $d['password']){
312			$error[] = sprintf($lang['i_badval'],$lang['passchk']);
313			$ok = false;
314			}
315			if(empty($d['fullname']) \|\| strstr($d['fullname'],':')){
316			$error[] = sprintf($lang['i_badval'],$lang['fullname']);
317			$ok = false;
318			}
319			if(empty($d['email']) \|\| strstr($d['email'],':') \|\| !strstr($d['email'],'@')){
320			$error[] = sprintf($lang['i_badval'],$lang['email']);
321			$ok = false;
322			}
323			}else{
324			// Since default = 1, browser won't send acl=0 when user untick acl
325			$d['acl'] = '0';
326			}
327			}
328			$d = array_merge($form_default, $d);
329			return $ok;
330			}
331
332			/**
333			* Writes the data to the config files
334			*
335			* @author Chris Smith <[email protected]>
336			*
337			* @param array $d
338			* @return bool
339			*/
340			function store_data($d){
341			global $LC;
342			$ok = true;
343			$d['policy'] = (int) $d['policy'];
344
345			// create local.php
346			$now = gmdate('r');
347			$output = <<<EOT
348			<?php
349			/**
350			* Dokuwiki's Main Configuration File - Local Settings
351			* Auto-generated by install script
352			* Date: $now
353			*/
354
355			EOT;
356			// add any config options set by a previous installer
357			$preset = __DIR__.'/install.conf';
358			if(file_exists($preset)){
359			$output .= "# preset config options\n";
360			$output .= file_get_contents($preset);
361			$output .= "\n\n";
362			$output .= "# options selected in installer\n";
363			@unlink($preset);
364			}
365
366			$output .= '$conf[\'title\'] = \''.addslashes($d['title'])."';\n";
367			$output .= '$conf[\'lang\'] = \''.addslashes($LC)."';\n";
368			$output .= '$conf[\'license\'] = \''.addslashes($d['license'])."';\n";
369			if($d['acl']){
370			$output .= '$conf[\'useacl\'] = 1'.";\n";
371			$output .= "\$conf['superuser'] = '@admin';\n";
372			}
373			if(!$d['allowreg']){
374			$output .= '$conf[\'disableactions\'] = \'register\''.";\n";
375			}
376			$ok = $ok && fileWrite(DOKU_LOCAL.'local.php',$output);
377
378			if ($d['acl']) {
379			// hash the password
380			$phash = new \dokuwiki\PassHash();
381			$pass = $phash->hash_smd5($d['password']);
382
383			// create users.auth.php
384			$output = <<<EOT
385			# users.auth.php
386			# <?php exit()?>
387			# Don't modify the lines above
388			#
389			# Userfile
390			#
391			# Auto-generated by install script
392			# Date: $now
393			#
394			# Format:
395			# login:passwordhash:Real Name:email:groups,comma,separated
396
397			EOT;
398			// --- user:SMD5password:Real Name:email:groups,comma,seperated
399			$output = $output."\n".join(":",array($d['superuser'], $pass, $d['fullname'], $d['email'], 'admin,user'))."\n";
400			$ok = $ok && fileWrite(DOKU_LOCAL.'users.auth.php', $output);
401
402			// create acl.auth.php
403			$output = <<<EOT
404			# acl.auth.php
405			# <?php exit()?>
406			# Don't modify the lines above
407			#
408			# Access Control Lists
409			#
410			# Auto-generated by install script
411			# Date: $now
412
413			EOT;
414			if($d['policy'] == 2){
415			$output .= "* @ALL 0\n";
416			$output .= "* @user 8\n";
417			}elseif($d['policy'] == 1){
418			$output .= "* @ALL 1\n";
419			$output .= "* @user 8\n";
420			}else{
421			$output .= "* @ALL 8\n";
422			}
423			$ok = $ok && fileWrite(DOKU_LOCAL.'acl.auth.php', $output);
424			}
425
426			// enable popularity submission
427			if($d['pop']){
428			@touch(DOKU_INC.'data/cache/autosubmit.txt');
429			}
430
431			// disable auth plugins til needed
432			$output = <<<EOT
433			<?php
434			/*
435			* Local plugin enable/disable settings
436			*
437			* Auto-generated by install script
438			* Date: $now
439			*/
440
441			\$plugins['authad'] = 0;
442			\$plugins['authldap'] = 0;
443			\$plugins['authmysql'] = 0;
444			\$plugins['authpgsql'] = 0;
445
446			EOT;
447			$ok = $ok && fileWrite(DOKU_LOCAL.'plugins.local.php', $output);
448
449			return $ok;
450			}
451
452			/**
453			* Write the given content to a file
454			*
455			* @author Chris Smith <[email protected]>
456			*
457			* @param string $filename
458			* @param string $data
459			* @return bool
460			*/
461			function fileWrite($filename, $data) {
462			global $error;
463			global $lang;
464
465			if (($fp = @fopen($filename, 'wb')) === false) {
466			$filename = str_replace($_SERVER['DOCUMENT_ROOT'],'{DOCUMENT_ROOT}/', $filename);
467			$error[] = sprintf($lang['i_writeerr'],$filename);
468			return false;
469			}
470
471			if (!empty($data)) { fwrite($fp, $data); }
472			fclose($fp);
473			return true;
474			}
475
476
477			/**
478			* check installation dependent local config files and tests for a known
479			* unmodified main config file
480			*
481			* @author Chris Smith <[email protected]>
482			*
483			* @return bool
484			*/
485			function check_configs(){
486			global $error;
487			global $lang;
488
489			$ok = true;
490
491			$config_files = array(
492			'local' => DOKU_LOCAL.'local.php',
493			'users' => DOKU_LOCAL.'users.auth.php',
494			'auth' => DOKU_LOCAL.'acl.auth.php'
495			);
496
497			// configs shouldn't exist
498			foreach ($config_files as $file) {
499			if (file_exists($file) && filesize($file)) {
500			$file = str_replace($_SERVER['DOCUMENT_ROOT'],'{DOCUMENT_ROOT}/', $file);
501			$error[] = sprintf($lang['i_confexists'],$file);
502			$ok = false;
503			}
504			}
505			return $ok;
506			}
507
508
509			/**
510			* Check other installation dir/file permission requirements
511			*
512			* @author Chris Smith <[email protected]>
513			*
514			* @return bool
515			*/
516			function check_permissions(){
517			global $error;
518			global $lang;
519
520			$dirs = array(
521			'conf' => DOKU_LOCAL,
522			'data' => DOKU_INC.'data',
523			'pages' => DOKU_INC.'data/pages',
524			'attic' => DOKU_INC.'data/attic',
525			'media' => DOKU_INC.'data/media',
526			'media_attic' => DOKU_INC.'data/media_attic',
527			'media_meta' => DOKU_INC.'data/media_meta',
528			'meta' => DOKU_INC.'data/meta',
529			'cache' => DOKU_INC.'data/cache',
530			'locks' => DOKU_INC.'data/locks',
531			'index' => DOKU_INC.'data/index',
532			'tmp' => DOKU_INC.'data/tmp'
533			);
534
535			$ok = true;
536			foreach($dirs as $dir){
537			if(!file_exists("$dir/.") \|\| !is_writable($dir)){
538			$dir = str_replace($_SERVER['DOCUMENT_ROOT'],'{DOCUMENT_ROOT}', $dir);
539			$error[] = sprintf($lang['i_permfail'],$dir);
540			$ok = false;
541			}
542			}
543			return $ok;
544			}
545
546			/**
547			* Check the availability of functions used in DokuWiki and the PHP version
548			*
549			* @author Andreas Gohr <[email protected]>
550			*
551			* @return bool
552			*/
553			function check_functions(){
554			global $error;
555			global $lang;
556			$ok = true;
557
558			if(version_compare(phpversion(),'5.6.0','<')){
559			$error[] = sprintf($lang['i_phpver'],phpversion(),'5.6.0');
560			$ok = false;
561			}
562
563			if(ini_get('mbstring.func_overload') != 0){
564			$error[] = $lang['i_mbfuncoverload'];
565			$ok = false;
566			}
567
568			try {
569			random_bytes(1);
570			} catch (\Exception $th) {
571			// If an appropriate source of randomness cannot be found, an Exception will be thrown by PHP 7+
572			// this exception is also thrown by paragonie/random_compat for PHP 5.6 support
573			$error[] = $lang['i_urandom'];
574			$ok = false;
575			}
576
577			if(ini_get('mbstring.func_overload') != 0){
578			$error[] = $lang['i_mbfuncoverload'];
579			$ok = false;
580			}
581
582			$funcs = explode(' ','addslashes call_user_func chmod copy fgets '.
583			'file file_exists fseek flush filesize ftell fopen '.
584			'glob header ignore_user_abort ini_get mail mkdir '.
585			'ob_start opendir parse_ini_file readfile realpath '.
586			'rename rmdir serialize session_start unlink usleep '.
587			'preg_replace file_get_contents htmlspecialchars_decode '.
588			'spl_autoload_register stream_select fsockopen pack');
589
590			if (!function_exists('mb_substr')) {
591			$funcs[] = 'utf8_encode';
592			$funcs[] = 'utf8_decode';
593			}
594
595			foreach($funcs as $func){
596			if(!function_exists($func)){
597			$error[] = sprintf($lang['i_funcna'],$func);
598			$ok = false;
599			}
600			}
601			return $ok;
602			}
603
604			/**
605			* Print language selection
606			*
607			* @author Andreas Gohr <[email protected]>
608			*/
609			function langsel(){
610			global $lang;
611			global $LC;
612
613			$dir = DOKU_INC.'inc/lang';
614			$dh = opendir($dir);
615			if(!$dh) return;
616
617			$langs = array();
618			while (($file = readdir($dh)) !== false) {
619			if(preg_match('/^[\._]/',$file)) continue;
620			if(is_dir($dir.'/'.$file) && file_exists($dir.'/'.$file.'/lang.php')){
621			$langs[] = $file;
622			}
623			}
624			closedir($dh);
625			sort($langs);
626
627			echo '<form action="">';
628			echo $lang['i_chooselang'];
629			echo ': <select name="l" onchange="submit()">';
630			foreach($langs as $l){
631			$sel = ($l == $LC) ? 'selected="selected"' : '';
632			echo '<option value="'.$l.'" '.$sel.'>'.$l.'</option>';
633			}
634			echo '</select> ';
635			echo '<button type="submit">'.$lang['btn_update'].'</button>';
636			echo '</form>';
637			}
638
639			/**
640			* Print global error array
641			*
642			* @author Andreas Gohr <[email protected]>
643			*/
644			function print_errors(){
645			global $error;
646			if(!empty($error)) {
647			echo '<ul>';
648			foreach ($error as $err){
649			echo "<li>$err</li>";
650			}
651			echo '</ul>';
652			}
653			}
654

splitbrain / dokuwiki

Push — pr-3115 ( f9aa34 )

install.php ➔ check_functions() B

Complexity

Size

Duplication

Importance

Duplication Side-by-Side

Filter issues like