Просмотр файла setup/index.php

Конкурс дизайнеров на 15000 рублей
Реклама ваших сайтов
Размер файла: 10.55Kb 
  1. <?php
  2. /**********************************
  3. *	@package: PerfCMS			  *
  4. *	@year: 2012					  *
  5. *	@author: Artas				  *
  6. *	@link: http://perfcms.ru	  *
  7. **********************************/
  8. session_name('PSID');
  9. session_start();
  10. error_reporting(0);
  11. define('SYS', realpath(dirname(__FILE__)).'/system');
  12. $ver = parse_ini_file('../system/ini/system_info.ini');
  13. ?>
  14. <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
  15.     "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
  16. <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="uk" lang="uk">
  17. <head>
  18. <title>Installing PerfCMS <?=$ver['perfcms_ver'];?></title>
  19. <link href="/template/themes/wap/default/style.css" rel="stylesheet" type="text/css" />
  20. </head>
  21. <body>
  22. <div class="main">
  23. <div class="panel">Installing PerfCMS <?=$ver['perfcms_ver'];?></div>
  24. <?
  25. if(file_exists('../system/ini/db.ini') && !file_exists('../system/ini/install.txt')) {
  26. 	echo '<div class="post">
  27. 			PerfCMS already installed!
  28. 		</div>
  29. 		<div class="block">
  30. 			<a href="/">Home Page</a>
  31. 		</div>';
  32. 	} else {
  33. if(!isset($_GET['lang'])) {
  34. echo '<div class="post">
  35. 	Choose Installing language:<br/>
  36. 	<a href="/setup/?lang=uk">Українська</a><br/>
  37. 	<a href="/setup/?lang=ru">Русский</a><br/>
  38. 	<a href="/setup/?lang=en">English</a><br/>
  39. 	</div>';
  40. 	} 
  41. else
  42. 	{
  43. 	if(file_exists('lang/'. trim($_GET['lang']).'.ini')) {
  44. 		$lang = parse_ini_file('lang/'. trim($_GET['lang']).'.ini');
  45. 		$lng = trim($_GET['lang']);
  46. 	} else {
  47. 		$lang = parse_ini_file('lang/en.ini');
  48. 		$lng = 'en';
  49. 	}
  50. if(isset($_GET['lang']) && !isset($_GET['act'])) {
  51. echo '<div class="post">'. $lang['welcome'] .'<br/>
  52. 		[ <a href="/setup/?act=start&amp;lang='. $lng .'">'. $lang['agree'] .'</a> | <a href="/setup/">'. $lang['nagree'] .'</a> ]</div>';
  53. 	} 
  54. elseif(isset($_GET['lang']) && $_GET['act'] == 'start')
  55. 	{
  56. 		$chmods =  array('../cache/', '../cache/downloads_images/', '../cache/downloads_jad/', '../files/', '../files/share/', '../files/avatars/', '../files/forum/', '../files/preview/', '../files/downloads/', '../files/downloads_screens/', '../system/ini/', '../system/lang/', '../system/lang/uk/', '../system/lang/en/', '../system/lang/ru/', '../tmp/');
  57. 		echo '<div class="post">
  58. 		<table>
  59. 		<tr>
  60. 		<td><b>'. $lang['fdir'] .'</b></td>
  61. 		<td><b>'. $lang['chmods'] .'</b></td>
  62. 		</tr>
  63. 		<tr>';
  64. 		 foreach ($chmods as $chmod) {
  65.         echo '<tr>
  66.         <td>'. str_replace('../', '', $chmod) .'</td>';
  67.         
  68.         if (is_writable(trim($chmod))) {
  69.           echo '<td><span style="color: green"><b>OK (777)</b></span></td>';
  70. 		  $err = false;
  71.         } else {
  72.           echo '<td><span style="color: red">'.$lang['must_chmods'].' 777</span></td>';
  73.                     
  74.           $err = TRUE;
  75.         }
  76.         echo '</tr>';
  77.       }
  78.       echo '</tr>
  79.       </table>
  80.       '. ($err == TRUE?'<a href="?act=start&amp;lang='. $lng .'">'.$lang['refresh'].'</a>':'<a href="?act=db&amp;lang='. $lng .'">'.$lang['next'].'</a>') .'    
  81.       </div>
  82.       <div class="block">
  83.       <a href="?lang='. $lng .'">'.$lang['back'].'</a>
  84.       </div>';
  85. 	} 
  86. elseif(isset($_GET['lang']) && $_GET['act'] == 'db')
  87. 	{
  88. 	if (isset($_POST['go'])) {
  89.         $host = @htmlspecialchars(trim($_POST['host']));
  90.         $user = @htmlspecialchars(trim($_POST['user']));
  91.         $pass = @htmlspecialchars(trim($_POST['pass']));
  92.         $base = @htmlspecialchars(trim($_POST['base']));
  93.         
  94.         if (empty($host)) $err .= $lang['empty_host'].'<br />';
  95.         if (empty($user)) $err .= $lang['empty_user'].'<br />';
  96.         if (empty($base)) $err .= $lang['empty_base'].'<br />';
  97.         if(!isset($err)) {
  98.         try {
  99. 				$db = new PDO('mysql:dbname='.$_POST['base'].';host='. $_POST['host'], $_POST['user'], $_POST['pass']);
  100. 			} catch (PDOException $e) {
  101. 					echo 'Connection failed: ' . $e->getMessage();
  102. 			}
  103.         }
  104.         if (!isset($err)) {
  105.           $db->query("SET NAMES utf8");
  106.           $cini =    "host = \"$host\";\n"	
  107. 					."user = \"$user\";\n"
  108. 					."pass = \"$pass\";\n"
  109. 					."base = \"$base\";\n";
  110. 			file_put_contents('../system/ini/db.ini', $cini);
  111. 			$dump = file_get_contents('./setup.sql');
  112. 			$queryes = explode('-- --------------------------------------------------------', $dump);
  113. 			foreach($queryes as $query) {
  114.                 	$db->query(trim($query));
  115.                	}
  116.           
  117.           echo '<div class="title">'.$lang['c_create'].'</div>
  118.           <div class="menu">
  119.           '.$lang['after_t'].'<br />
  120.           <a href="?act=admin&amp;lang='. $lng .'">'.$lang['next'].'</a>
  121.           </div>
  122.           
  123.           <div class="block">
  124.           <a href="?act=db&amp;lang='. $lng .'">'.$lang['back'].'</a>
  125.           </div>
  126.           <div class="footer">PerfCMS '.$ver['perfcms_ver'].', 2012</div>
  127. </div>
  128. </body>
  129. </html>';
  130.     
  131.           exit();
  132.         }
  133.       }
  134.       
  135.       if (isset($err)) echo '<div class="error">'. $err .'</div>';
  136.     
  137.       echo '<form method="post" action="?act=db&amp;lang='. $lng .'">
  138.       <div class="title">'.$lang['connection'].'</div>
  139.       <div class="menu">
  140.       '.$lang['host'].':<br />
  141.       <input type="text" name="host" value="localhost" /><br />
  142.       '.$lang['user'].':<br />
  143.       <input type="text" name="user" /><br />
  144.       '.$lang['pass'].':<br />
  145.       <input type="password" name="pass" /><br />
  146.       '.$lang['base'].':<br />
  147.       <input type="text" name="base" /><br />
  148.       <input type="submit" name="go" value="'.$lang['send'].'" />
  149.       </div>
  150.       </form>
  151.       
  152.       <div class="block">
  153.       <a href="?act=start&amp;lang='. $lng .'">'.$lang['back'].'</a>
  154.       </div>';
  155. 	}
  156. elseif(isset($_GET['lang']) && $_GET['act'] == 'admin')
  157. 	{
  158. 	if (isset($_POST['reg_admin'])) {
  159.         $nick = htmlspecialchars(trim($_POST['nick']));
  160.         $name = htmlspecialchars(trim($_POST['name']));
  161.         $email = htmlspecialchars(trim($_POST['email']));
  162.         $password = htmlspecialchars(trim($_POST['password']));
  163.         $password2 = htmlspecialchars(trim($_POST['password2']));
  164.         
  165.         if (empty($nick)) $err .= $lang['no_nick'].'<br />';
  166.         if (empty($name)) $err .= $lang['no_name'].'<br />';
  167.         if (empty($email)) $err .= $lang['no_email'].'<br />';
  168.         if (empty($password)) $err .= $lang['no_pass'].'<br />';
  169.         if (empty($password2)) $err .= $lang['no_pass2'].'<br />';
  170.         
  171.         if (!empty($nick) && (mb_strlen($nick, 'UTF-8') < 3 || mb_strlen($nick, 'UTF-8') > 32)) $err .= $lang['e_nick'].'<br />';        
  172.         if (!empty($nick) && !preg_match("#^([A-zА-я0-9\-\_\ ])+$#ui", $nick)) $err .= $lang['b_nick'].'<br />';        
  173.         if (!empty($name) && (mb_strlen($name, 'UTF-8') > 32)) $err .= $lang['e_name'].'<br />';        
  174.         if (!empty($email) && (mb_strlen($email, 'UTF-8') < 3 || mb_strlen($email, 'UTF-8') > 72)) $err .= $lang['b_mail'].'<br />';
  175.         if (!empty($email) && !preg_match('|^([a-z0-9_\.\-]{1,20})@([a-z0-9\.\-]{1,20})\.([a-z]{2,4})$|ius', $email)) $err .= $lang['e_email'].'<br />';        
  176.         if (!empty($password) && (mb_strlen($password, 'UTF-8') < 5 || mb_strlen($password, 'UTF-8') > 64)) $err .= $lang['e_pass'].'<br />';        
  177.         if (!empty($password) && !empty($password2) && $password != $password2) $err .= $lang['e_pass2'].'<br />';        
  178.         if (!isset($err)) {
  179.  
  180.           function crypto($var) {
  181.             return md5(base64_encode($var) .'_PerfCMS_');
  182.           }
  183.         
  184.           # Кодуємо пароль
  185.           $password = crypto($password);
  186.           
  187.           $mysql = parse_ini_file('../system/ini/db.ini');
  188. 			try {
  189. 				$db = new PDO('mysql:dbname='.$mysql['base'].';host='. $mysql['host'], $mysql['user'], $mysql['pass']);
  190. 			} catch (PDOException $e) {
  191. 					echo 'Connection failed: ' . $e->getMessage();
  192. 			}
  193.           $db->query("SET NAMES utf8");
  194.         
  195. 		function escape($inp)
  196. 	{ 
  197.      if(is_array($inp)) 
  198.          return array_map(__METHOD__, $inp); 
  199.  
  200.      if(!empty($inp) && is_string($inp)) { 
  201.          return str_replace(array('\\', "\0", "\n", "\r", "'", '"', "\x1a"), array('\\', '\0', '\n', '\r', "\'", '\"', '\Z'), $inp); 
  202.      } 
  203.  
  204.      return $inp; 
  205. 	}
  206. 		
  207.           # Запит на реєстрацію
  208.           $db->query("INSERT INTO `users` SET `name` = '". escape(trim($name)) ."', `nick` = '". escape(trim($nick)) ."', `password` = '". escape(trim($password)) ."', `reg_time` = '". time() ."', `time` = '". time() ."', `email` = '". escape(trim($email)) ."', `level` = '7', `gender`='0'");
  209. 		  $language = $lng;
  210. 		  $db->query("INSERT INTO `settings` SET `user_id` = '". $db->lastInsertId() ."', `lang` = '". $language ."', `ames` = '10', `theme` = 'default', `web_theme` = 'default', `fast_mess` = 'no', `view_profile` = 'all', `show_email` = 'no', `timezone` = 'Europe/Kiev'");
  211. 		  $db->query("UPDATE `system` SET `lang` = '$language'");
  212. 		  // print_r($db->errorInfo());
  213.           unlink('../system/ini/install.txt');
  214.           session_destroy();
  215.           
  216.           echo '<div class="title">'.$lang['end_i'].'</div>
  217.           <div class="menu">
  218.           '.$lang['end_i_t'].' <b>/setup/</b>.<br />
  219.           <a href="/sign_in/?nick='. $nick .'&amp;password='. $password2 .'">'.$lang['go_site'].'</a>
  220.           </div>
  221.           
  222.           <div class="block">
  223.           <a href="?act=admin&amp;lang='. $lng .'">'.$lang['back'].'</a>
  224.           </div>          
  225.           </div>
  226. 		  <div class="footer">PerfCMS '.$ver['perfcms_ver'].', 2012</div>
  227. </div>
  228. </body>
  229. </html>';
  230.     
  231.           exit();
  232.         }         
  233.       }
  234.     
  235.       if (isset($err)) echo '<div class="err">'. $err .'</div>';
  236.       
  237.       echo '<form method="post" action="?act=admin&amp;lang='. $lng .'">
  238.       <div class="title">Administration Registration</div>
  239.       <div class="menu">
  240.       '.$lang['nick'].':<br />
  241.       <input type="text" name="nick" value="'. htmlspecialchars($_POST['nick']) .'" /><br />
  242.       '.$lang['name'].':<br />
  243.       <input type="text" name="name" value="'. htmlspecialchars($_POST['name']) .'" /><br />
  244.       E-Mail:<br />
  245.       <input type="text" name="email" value="'. htmlspecialchars($_POST['email']) .'" /><br />
  246.       '.$lang['password'].':<br />
  247.       <input type="password" name="password" /><br />
  248.       '.$lang['password2'].':<br />
  249.       <input type="password" name="password2" /><br />
  250.       <input type="submit" name="reg_admin" value="'.$lang['sign_up'].'" />
  251.       </div>
  252.       </form>
  253.       
  254.       <div class="block">
  255.       <a href="?act=db&amp;lang='. $lng .'">'.$lang['back'].'</a>
  256.       </div>';
  257.  
  258.   }
  259. }
  260. }
  261. ?>
  262. <div class="footer">PerfCMS <?=$ver['perfcms_ver'];?>, 2012</div>
  263. </div>
  264. </body>
  265. </html>