Failed Conditions
Push — slika ( 514bb6...d2bd34 )
by Andreas
06:39 queued 03:20
created

install.php ➔ check_functions()   C

Complexity

Conditions 10
Paths 288

Size

Total Lines 60

Duplication

Lines 0
Ratio 0 %

Importance

Changes 0
Metric Value
cc 10
nc 288
nop 0
dl 0
loc 60
rs 5.4593
c 0
b 0
f 0

How to fix   Long Method    Complexity   

Long Method

Small methods make your code easier to understand, in particular if combined with a good name. Besides, if your method is small, finding a good name is usually much easier.

For example, if you find yourself adding comments to a method's body, this is usually a good sign to extract the commented part to a new method, and use the comment as a starting point when coming up with a good name for this new method.

Commonly applied refactorings include:

1
<?php
2
/*><div style="width:60%; margin: auto; background-color: #fcc;
3
                border: 1px solid #faa; padding: 0.5em 1em;">
4
    <h1 style="font-size: 120%">No PHP Support</h1>
5
6
    It seems this server has no PHP support enabled. You will need to
7
    enable PHP before you can install and run DokuWiki. Contact your hosting
8
    provider if you're unsure what this means.
9
10
</div>*/
11
/**
12
 * Dokuwiki installation assistance
13
 *
14
 * @author      Chris Smith <[email protected]>
15
 */
16
17
if(!defined('DOKU_INC')) define('DOKU_INC',dirname(__FILE__).'/');
18
if(!defined('DOKU_CONF')) define('DOKU_CONF',DOKU_INC.'conf/');
19
if(!defined('DOKU_LOCAL')) define('DOKU_LOCAL',DOKU_INC.'conf/');
20
21
// load and initialize the core system
22
require_once(DOKU_INC.'inc/init.php');
23
24
// check for error reporting override or set error reporting to sane values
25
if (!defined('DOKU_E_LEVEL')) { error_reporting(E_ALL ^ E_NOTICE); }
26
else { error_reporting(DOKU_E_LEVEL); }
27
28
// language strings
29
require_once(DOKU_INC.'inc/lang/en/lang.php');
30
if(isset($_REQUEST['l']) && !is_array($_REQUEST['l'])) {
31
    $LC = preg_replace('/[^a-z\-]+/','',$_REQUEST['l']);
32
}
33
if(empty($LC)) $LC = 'en';
34
if($LC && $LC != 'en' ) {
35
    require_once(DOKU_INC.'inc/lang/'.$LC.'/lang.php');
36
}
37
38
// initialise variables ...
39
$error = array();
40
41
// begin output
42
header('Content-Type: text/html; charset=utf-8');
43
?>
44
<!DOCTYPE html>
45
<html lang="<?php echo $LC?>" dir="<?php echo $lang['direction']?>">
46
<head>
47
    <meta charset="utf-8" />
48
    <title><?php echo $lang['i_installer']?></title>
49
    <style>
50
        body { width: 90%; margin: 0 auto; font: 84% Verdana, Helvetica, Arial, sans-serif; }
51
        img { border: none }
52
        br.cl { clear:both; }
53
        code { font-size: 110%; color: #800000; }
54
        fieldset { border: none }
55
        label { display: block; margin-top: 0.5em; }
56
        select.text, input.text { width: 30em; margin: 0 0.5em; }
57
        a {text-decoration: none}
58
    </style>
59
    <script>
60
        function acltoggle(){
61
            var cb = document.getElementById('acl');
62
            var fs = document.getElementById('acldep');
63
            if(!cb || !fs) return;
64
            if(cb.checked){
65
                fs.style.display = '';
66
            }else{
67
                fs.style.display = 'none';
68
            }
69
        }
70
        window.onload = function(){
71
            acltoggle();
72
            var cb = document.getElementById('acl');
73
            if(cb) cb.onchange = acltoggle;
74
        };
75
    </script>
76
</head>
77
<body style="">
78
    <h1 style="float:left">
79
        <img src="lib/exe/fetch.php?media=wiki:dokuwiki-128.png"
80
             style="vertical-align: middle;" alt="" height="64" width="64" />
81
        <?php echo $lang['i_installer']?>
82
    </h1>
83
    <div style="float:right; margin: 1em;">
84
        <?php langsel()?>
85
    </div>
86
    <br class="cl" />
87
88
    <div style="float: right; width: 34%;">
89
        <?php
90
            if(file_exists(DOKU_INC.'inc/lang/'.$LC.'/install.html')){
91
                include(DOKU_INC.'inc/lang/'.$LC.'/install.html');
92
            }else{
93
                print "<div lang=\"en\" dir=\"ltr\">\n";
94
                include(DOKU_INC.'inc/lang/en/install.html');
95
                print "</div>\n";
96
            }
97
        ?>
98
        <a style="
99
                background: transparent
100
                url(data/dont-panic-if-you-see-this-in-your-logs-it-means-your-directory-permissions-are-correct.png)
101
                left top no-repeat;
102
                display: block; width:380px; height:73px; border:none; clear:both;"
103
           target="_blank"
104
           href="http://www.dokuwiki.org/security#web_access_security"></a>
105
    </div>
106
107
    <div style="float: left; width: 58%;">
108
        <?php
109
            try {
110
                if(! (check_functions() && check_permissions()) ){
111
                    echo '<p>'.$lang['i_problems'].'</p>';
112
                    print_errors();
113
                    print_retry();
114
                }elseif(!check_configs()){
115
                    echo '<p>'.$lang['i_modified'].'</p>';
116
                    print_errors();
117
                }elseif(check_data($_REQUEST['d'])){
118
                    // check_data has sanitized all input parameters
119
                    if(!store_data($_REQUEST['d'])){
120
                        echo '<p>'.$lang['i_failure'].'</p>';
121
                        print_errors();
122
                    }else{
123
                        echo '<p>'.$lang['i_success'].'</p>';
124
                    }
125
                }else{
126
                    print_errors();
127
                    print_form($_REQUEST['d']);
128
                }
129
            } catch (Exception $e) {
130
                echo 'Caught exception: ',  $e->getMessage(), "\n";
131
            }
132
        ?>
133
    </div>
134
135
136
<div style="clear: both">
137
  <a href="http://dokuwiki.org/"><img src="lib/tpl/dokuwiki/images/button-dw.png" alt="driven by DokuWiki" /></a>
138
  <a href="http://php.net"><img src="lib/tpl/dokuwiki/images/button-php.gif" alt="powered by PHP" /></a>
139
</div>
140
</body>
141
</html>
142
<?php
143
144
/**
145
 * Print the input form
146
 *
147
 * @param array $d submitted entry 'd' of request data
148
 */
149
function print_form($d){
150
    global $lang;
151
    global $LC;
152
153
    include(DOKU_CONF.'license.php');
154
155
    if(!is_array($d)) $d = array();
156
    $d = array_map('hsc',$d);
157
158
    if(!isset($d['acl'])) $d['acl']=1;
159
    if(!isset($d['pop'])) $d['pop']=1;
160
161
    ?>
162
    <form action="" method="post">
163
    <input type="hidden" name="l" value="<?php echo $LC ?>" />
164
    <fieldset>
165
        <label for="title"><?php echo $lang['i_wikiname']?>
166
        <input type="text" name="d[title]" id="title" value="<?php echo $d['title'] ?>" style="width: 20em;" />
167
        </label>
168
169
        <fieldset style="margin-top: 1em;">
170
            <label for="acl">
171
            <input type="checkbox" name="d[acl]" id="acl" <?php echo(($d['acl'] ? ' checked="checked"' : ''));?> />
172
            <?php echo $lang['i_enableacl']?></label>
173
174
            <fieldset id="acldep">
175
                <label for="superuser"><?php echo $lang['i_superuser']?></label>
176
                <input class="text" type="text" name="d[superuser]" id="superuser"
177
                       value="<?php echo $d['superuser'] ?>" />
178
179
                <label for="fullname"><?php echo $lang['fullname']?></label>
180
                <input class="text" type="text" name="d[fullname]" id="fullname"
181
                       value="<?php echo $d['fullname'] ?>" />
182
183
                <label for="email"><?php echo $lang['email']?></label>
184
                <input class="text" type="text" name="d[email]" id="email" value="<?php echo $d['email'] ?>" />
185
186
                <label for="password"><?php echo $lang['pass']?></label>
187
                <input class="text" type="password" name="d[password]" id="password" />
188
189
                <label for="confirm"><?php echo $lang['passchk']?></label>
190
                <input class="text" type="password" name="d[confirm]" id="confirm" />
191
192
                <label for="policy"><?php echo $lang['i_policy']?></label>
193
                <select class="text" name="d[policy]" id="policy">
194
                    <option value="0" <?php echo ($d['policy'] == 0)?'selected="selected"':'' ?>><?php
195
                        echo $lang['i_pol0']?></option>
196
                    <option value="1" <?php echo ($d['policy'] == 1)?'selected="selected"':'' ?>><?php
197
                        echo $lang['i_pol1']?></option>
198
                    <option value="2" <?php echo ($d['policy'] == 2)?'selected="selected"':'' ?>><?php
199
                        echo $lang['i_pol2']?></option>
200
                </select>
201
202
                <label for="allowreg">
203
                    <input type="checkbox" name="d[allowreg]" id="allowreg" <?php
204
                        echo(($d['allowreg'] ? ' checked="checked"' : ''));?> />
205
                    <?php echo $lang['i_allowreg']?>
206
                </label>
207
            </fieldset>
208
        </fieldset>
209
210
        <fieldset>
211
            <p><?php echo $lang['i_license']?></p>
212
            <?php
213
            array_push($license,array('name' => $lang['i_license_none'], 'url'=>''));
214
            if(empty($d['license'])) $d['license'] = 'cc-by-sa';
215
            foreach($license as $key => $lic){
216
                echo '<label for="lic_'.$key.'">';
217
                echo '<input type="radio" name="d[license]" value="'.hsc($key).'" id="lic_'.$key.'"'.
218
                     (($d['license'] === $key)?' checked="checked"':'').'>';
219
                echo hsc($lic['name']);
220
                if($lic['url']) echo ' <a href="'.$lic['url'].'" target="_blank"><sup>[?]</sup></a>';
221
                echo '</label>';
222
            }
223
            ?>
224
        </fieldset>
225
226
        <fieldset>
227
            <p><?php echo $lang['i_pop_field']?></p>
228
            <label for="pop">
229
                <input type="checkbox" name="d[pop]" id="pop" <?php
230
                    echo(($d['pop'] ? ' checked="checked"' : ''));?> />
231
                <?php echo $lang['i_pop_label']?>
232
                <a href="http://www.dokuwiki.org/popularity" target="_blank"><sup>[?]</sup></a>
233
            </label>
234
        </fieldset>
235
236
    </fieldset>
237
    <fieldset id="process">
238
        <button type="submit" name="submit"><?php echo $lang['btn_save']?></button>
239
    </fieldset>
240
    </form>
241
    <?php
242
}
243
244
function print_retry() {
245
    global $lang;
246
    global $LC;
247
    ?>
248
    <form action="" method="get">
249
      <fieldset>
250
        <input type="hidden" name="l" value="<?php echo $LC ?>" />
251
        <button type="submit"><?php echo $lang['i_retry'];?></button>
252
      </fieldset>
253
    </form>
254
    <?php
255
}
256
257
/**
258
 * Check validity of data
259
 *
260
 * @author Andreas Gohr
261
 *
262
 * @param array $d
263
 * @return bool ok?
264
 */
265
function check_data(&$d){
266
    static $form_default = array(
267
        'title'     => '',
268
        'acl'       => '1',
269
        'superuser' => '',
270
        'fullname'  => '',
271
        'email'     => '',
272
        'password'  => '',
273
        'confirm'   => '',
274
        'policy'    => '0',
275
        'allowreg'  => '0',
276
        'license'   => 'cc-by-sa'
277
    );
278
    global $lang;
279
    global $error;
280
281
    if(!is_array($d)) $d = array();
282
    foreach($d as $k => $v) {
283
        if(is_array($v))
284
            unset($d[$k]);
285
        else
286
            $d[$k] = (string)$v;
287
    }
288
289
    //autolowercase the username
290
    $d['superuser'] = isset($d['superuser']) ? strtolower($d['superuser']) : "";
291
292
    $ok = false;
293
294
    if(isset($_REQUEST['submit'])) {
295
        $ok = true;
296
297
        // check input
298
        if(empty($d['title'])){
299
            $error[] = sprintf($lang['i_badval'],$lang['i_wikiname']);
300
            $ok      = false;
301
        }
302
        if(isset($d['acl'])){
303
            if(!preg_match('/^[a-z0-9_]+$/',$d['superuser'])){
304
                $error[] = sprintf($lang['i_badval'],$lang['i_superuser']);
305
                $ok      = false;
306
            }
307
            if(empty($d['password'])){
308
                $error[] = sprintf($lang['i_badval'],$lang['pass']);
309
                $ok      = false;
310
            }
311
            elseif(!isset($d['confirm']) || $d['confirm'] != $d['password']){
312
                $error[] = sprintf($lang['i_badval'],$lang['passchk']);
313
                $ok      = false;
314
            }
315
            if(empty($d['fullname']) || strstr($d['fullname'],':')){
316
                $error[] = sprintf($lang['i_badval'],$lang['fullname']);
317
                $ok      = false;
318
            }
319
            if(empty($d['email']) || strstr($d['email'],':') || !strstr($d['email'],'@')){
320
                $error[] = sprintf($lang['i_badval'],$lang['email']);
321
                $ok      = false;
322
            }
323
        }else{
324
            // Since default = 1, browser won't send acl=0 when user untick acl
325
            $d['acl'] = '0';
326
        }
327
    }
328
    $d = array_merge($form_default, $d);
329
    return $ok;
330
}
331
332
/**
333
 * Writes the data to the config files
334
 *
335
 * @author  Chris Smith <[email protected]>
336
 *
337
 * @param array $d
338
 * @return bool
339
 */
340
function store_data($d){
341
    global $LC;
342
    $ok = true;
343
    $d['policy'] = (int) $d['policy'];
344
345
    // create local.php
346
    $now    = gmdate('r');
347
    $output = <<<EOT
348
<?php
349
/**
350
 * Dokuwiki's Main Configuration File - Local Settings
351
 * Auto-generated by install script
352
 * Date: $now
353
 */
354
355
EOT;
356
    // add any config options set by a previous installer
357
    $preset = __DIR__.'/install.conf';
358
    if(file_exists($preset)){
359
        $output .= "# preset config options\n";
360
        $output .= file_get_contents($preset);
361
        $output .= "\n\n";
362
        $output .= "# options selected in installer\n";
363
        @unlink($preset);
364
    }
365
366
    $output .= '$conf[\'title\'] = \''.addslashes($d['title'])."';\n";
367
    $output .= '$conf[\'lang\'] = \''.addslashes($LC)."';\n";
368
    $output .= '$conf[\'license\'] = \''.addslashes($d['license'])."';\n";
369
    if($d['acl']){
370
        $output .= '$conf[\'useacl\'] = 1'.";\n";
371
        $output .= "\$conf['superuser'] = '@admin';\n";
372
    }
373
    if(!$d['allowreg']){
374
        $output .= '$conf[\'disableactions\'] = \'register\''.";\n";
375
    }
376
    $ok = $ok && fileWrite(DOKU_LOCAL.'local.php',$output);
377
378
    if ($d['acl']) {
379
        // hash the password
380
        $phash = new \dokuwiki\PassHash();
381
        $pass = $phash->hash_bcrypt($d['password']);
382
383
        // create users.auth.php
384
        $output = <<<EOT
385
# users.auth.php
386
# <?php exit()?>
387
# Don't modify the lines above
388
#
389
# Userfile
390
#
391
# Auto-generated by install script
392
# Date: $now
393
#
394
# Format:
395
# login:passwordhash:Real Name:email:groups,comma,separated
396
397
EOT;
398
        // --- user:bcryptpasswordhash:Real Name:email:groups,comma,seperated
399
        $output = $output."\n".join(":",array($d['superuser'], $pass, $d['fullname'], $d['email'], 'admin,user'))."\n";
400
        $ok = $ok && fileWrite(DOKU_LOCAL.'users.auth.php', $output);
401
402
        // create acl.auth.php
403
        $output = <<<EOT
404
# acl.auth.php
405
# <?php exit()?>
406
# Don't modify the lines above
407
#
408
# Access Control Lists
409
#
410
# Auto-generated by install script
411
# Date: $now
412
413
EOT;
414
        if($d['policy'] == 2){
415
            $output .=  "*               @ALL          0\n";
416
            $output .=  "*               @user         8\n";
417
        }elseif($d['policy'] == 1){
418
            $output .=  "*               @ALL          1\n";
419
            $output .=  "*               @user         8\n";
420
        }else{
421
            $output .=  "*               @ALL          8\n";
422
        }
423
        $ok = $ok && fileWrite(DOKU_LOCAL.'acl.auth.php', $output);
424
    }
425
426
    // enable popularity submission
427
    if($d['pop']){
428
        @touch(DOKU_INC.'data/cache/autosubmit.txt');
429
    }
430
431
    // disable auth plugins til needed
432
    $output = <<<EOT
433
<?php
434
/*
435
 * Local plugin enable/disable settings
436
 *
437
 * Auto-generated by install script
438
 * Date: $now
439
 */
440
441
\$plugins['authad']    = 0;
442
\$plugins['authldap']  = 0;
443
\$plugins['authmysql'] = 0;
444
\$plugins['authpgsql'] = 0;
445
446
EOT;
447
    $ok = $ok && fileWrite(DOKU_LOCAL.'plugins.local.php', $output);
448
449
    return $ok;
450
}
451
452
/**
453
 * Write the given content to a file
454
 *
455
 * @author  Chris Smith <[email protected]>
456
 *
457
 * @param string $filename
458
 * @param string $data
459
 * @return bool
460
 */
461
function fileWrite($filename, $data) {
462
    global $error;
463
    global $lang;
464
465
    if (($fp = @fopen($filename, 'wb')) === false) {
466
        $filename = str_replace($_SERVER['DOCUMENT_ROOT'],'{DOCUMENT_ROOT}/', $filename);
467
        $error[]  = sprintf($lang['i_writeerr'],$filename);
468
        return false;
469
    }
470
471
    if (!empty($data)) { fwrite($fp, $data);  }
472
    fclose($fp);
473
    return true;
474
}
475
476
477
/**
478
 * check installation dependent local config files and tests for a known
479
 * unmodified main config file
480
 *
481
 * @author      Chris Smith <[email protected]>
482
 *
483
 * @return bool
484
 */
485
function check_configs(){
486
    global $error;
487
    global $lang;
488
489
    $ok = true;
490
491
    $config_files = array(
492
        'local' => DOKU_LOCAL.'local.php',
493
        'users' => DOKU_LOCAL.'users.auth.php',
494
        'auth'  => DOKU_LOCAL.'acl.auth.php'
495
    );
496
497
    // configs shouldn't exist
498
    foreach ($config_files as $file) {
499
        if (file_exists($file) && filesize($file)) {
500
            $file    = str_replace($_SERVER['DOCUMENT_ROOT'],'{DOCUMENT_ROOT}/', $file);
501
            $error[] = sprintf($lang['i_confexists'],$file);
502
            $ok      = false;
503
        }
504
    }
505
    return $ok;
506
}
507
508
509
/**
510
 * Check other installation dir/file permission requirements
511
 *
512
 * @author      Chris Smith <[email protected]>
513
 *
514
 * @return bool
515
 */
516
function check_permissions(){
517
    global $error;
518
    global $lang;
519
520
    $dirs = array(
521
        'conf'        => DOKU_LOCAL,
522
        'data'        => DOKU_INC.'data',
523
        'pages'       => DOKU_INC.'data/pages',
524
        'attic'       => DOKU_INC.'data/attic',
525
        'media'       => DOKU_INC.'data/media',
526
        'media_attic' => DOKU_INC.'data/media_attic',
527
        'media_meta'  => DOKU_INC.'data/media_meta',
528
        'meta'        => DOKU_INC.'data/meta',
529
        'cache'       => DOKU_INC.'data/cache',
530
        'locks'       => DOKU_INC.'data/locks',
531
        'index'       => DOKU_INC.'data/index',
532
        'tmp'         => DOKU_INC.'data/tmp'
533
    );
534
535
    $ok = true;
536
    foreach($dirs as $dir){
537
        if(!file_exists("$dir/.") || !is_writable($dir)){
538
            $dir     = str_replace($_SERVER['DOCUMENT_ROOT'],'{DOCUMENT_ROOT}', $dir);
539
            $error[] = sprintf($lang['i_permfail'],$dir);
540
            $ok      = false;
541
        }
542
    }
543
    return $ok;
544
}
545
546
/**
547
 * Check the availability of functions used in DokuWiki and the PHP version
548
 *
549
 * @author Andreas Gohr <[email protected]>
550
 *
551
 * @return bool
552
 */
553
function check_functions(){
554
    global $error;
555
    global $lang;
556
    $ok = true;
557
558
    if(version_compare(phpversion(),'5.6.0','<')){
559
        $error[] = sprintf($lang['i_phpver'],phpversion(),'5.6.0');
560
        $ok = false;
561
    }
562
563
    if(ini_get('mbstring.func_overload') != 0){
564
        $error[] = $lang['i_mbfuncoverload'];
565
        $ok = false;
566
    }
567
568
    try {
569
        random_bytes(1);
570
    } catch (\Exception $th) {
571
        // If an appropriate source of randomness cannot be found, an Exception will be thrown by PHP 7+
572
        // this exception is also thrown by paragonie/random_compat for PHP 5.6 support
573
        $error[] = $lang['i_urandom'];
574
        $ok = false;
575
    }
576
577
    if(ini_get('mbstring.func_overload') != 0){
578
        $error[] = $lang['i_mbfuncoverload'];
579
        $ok = false;
580
    }
581
582
    $funcs = explode(' ','addslashes call_user_func chmod copy fgets '.
583
                         'file file_exists fseek flush filesize ftell fopen '.
584
                         'glob header ignore_user_abort ini_get mkdir '.
585
                         'ob_start opendir parse_ini_file readfile realpath '.
586
                         'rename rmdir serialize session_start unlink usleep '.
587
                         'preg_replace file_get_contents htmlspecialchars_decode '.
588
                         'spl_autoload_register stream_select fsockopen pack xml_parser_create');
589
590
    if (!function_exists('mb_substr')) {
591
        $funcs[] = 'utf8_encode';
592
        $funcs[] = 'utf8_decode';
593
    }
594
595
    if(!function_exists('mail')){
596
        if(strpos(ini_get('disable_functions'),'mail') !== false) {
597
            $disabled = $lang['i_disabled'];
598
        }
599
        else {
600
            $disabled = "";
601
        }
602
        $error[] = sprintf($lang['i_funcnmail'],$disabled);
603
    }
604
605
    foreach($funcs as $func){
606
        if(!function_exists($func)){
607
            $error[] = sprintf($lang['i_funcna'],$func);
608
            $ok = false;
609
        }
610
    }
611
    return $ok;
612
}
613
614
/**
615
 * Print language selection
616
 *
617
 * @author Andreas Gohr <[email protected]>
618
 */
619
function langsel(){
620
    global $lang;
621
    global $LC;
622
623
    $dir = DOKU_INC.'inc/lang';
624
    $dh  = opendir($dir);
625
    if(!$dh) return;
626
627
    $langs = array();
628
    while (($file = readdir($dh)) !== false) {
629
        if(preg_match('/^[\._]/',$file)) continue;
630
        if(is_dir($dir.'/'.$file) && file_exists($dir.'/'.$file.'/lang.php')){
631
            $langs[] = $file;
632
        }
633
    }
634
    closedir($dh);
635
    sort($langs);
636
637
    echo '<form action="">';
638
    echo $lang['i_chooselang'];
639
    echo ': <select name="l" onchange="submit()">';
640
    foreach($langs as $l){
641
        $sel = ($l == $LC) ? 'selected="selected"' : '';
642
        echo '<option value="'.$l.'" '.$sel.'>'.$l.'</option>';
643
    }
644
    echo '</select> ';
645
    echo '<button type="submit">'.$lang['btn_update'].'</button>';
646
    echo '</form>';
647
}
648
649
/**
650
 * Print global error array
651
 *
652
 * @author Andreas Gohr <[email protected]>
653
 */
654
function print_errors(){
655
    global $error;
656
    if(!empty($error)) {
657
        echo '<ul>';
658
        foreach ($error as $err){
659
            echo "<li>$err</li>";
660
        }
661
        echo '</ul>';
662
    }
663
}
664