$hasSQLite, 'hasMySQL' => $hasMySQL, 'hasPostgreSQL' => $hasPostgreSQL, 'directory' => $datadir, 'errors' => array(), ); if(isset($_POST['install']) AND $_POST['install']=='true') { // We have to launch the installation process : $e = OC_Setup::install($_POST); $errors = array('errors' => $e); if(count($e) > 0) { //OC_Template::printGuestPage("", "error", array("errors" => $errors)); $options = array_merge($_POST, $opts, $errors); OC_Template::printGuestPage("", "installation", $options); } else { header("Location: ".OC::$WEBROOT.'/'); exit(); } } else { OC_Template::printGuestPage("", "installation", $opts); } class OC_Setup { public static function install($options) { $error = array(); $dbtype = $options['dbtype']; if(empty($options['adminlogin'])) { $error[] = 'Set an admin username.'; } if(empty($options['adminpass'])) { $error[] = 'Set an admin password.'; } if(empty($options['directory'])) { $error[] = 'Specify a data folder.'; } if($dbtype=='mysql' or $dbtype=='pgsql') { //mysql and postgresql needs more config options if($dbtype=='mysql') $dbprettyname = 'MySQL'; else $dbprettyname = 'PostgreSQL'; if(empty($options['dbuser'])) { $error[] = "$dbprettyname enter the database username."; } if(empty($options['dbpass'])) { $error[] = "$dbprettyname enter the database password."; } if(empty($options['dbname'])) { $error[] = "$dbprettyname enter the database name."; } if(empty($options['dbhost'])) { $error[] = "$dbprettyname set the database host."; } } if(count($error) == 0) { //no errors, good $username = htmlspecialchars_decode($options['adminlogin']); $password = htmlspecialchars_decode($options['adminpass']); $datadir = htmlspecialchars_decode($options['directory']); //use sqlite3 when available, otherise sqlite2 will be used. if($dbtype=='sqlite' and class_exists('SQLite3')){ $dbtype='sqlite3'; } //write the config file OC_Config::setValue('datadirectory', $datadir); OC_Config::setValue('dbtype', $dbtype); OC_Config::setValue('version',implode('.',OC_Util::getVersion())); if($dbtype == 'mysql') { $dbuser = $options['dbuser']; $dbpass = $options['dbpass']; $dbname = $options['dbname']; $dbhost = $options['dbhost']; $dbtableprefix = 'oc_'; OC_Config::setValue('dbname', $dbname); OC_Config::setValue('dbhost', $dbhost); OC_Config::setValue('dbtableprefix', 'oc_'); //check if the database user has admin right $connection = @mysql_connect($dbhost, $dbuser, $dbpass); if(!$connection) { $error[] = array( 'error' => 'MySQL username and/or password not valid', 'hint' => 'You need to enter either an existing account or the administrator.' ); } else { $query="SELECT user FROM mysql.user WHERE user='$dbuser'"; //this should be enough to check for admin rights in mysql if(mysql_query($query, $connection)) { //use the admin login data for the new database user //add prefix to the mysql user name to prevent collissions $dbusername=substr('oc_mysql_'.$username,0,16); //hash the password so we don't need to store the admin config in the config file $dbpassword=md5(time().$password); self::createDBUser($dbusername, $dbpassword, $connection); OC_Config::setValue('dbuser', $dbusername); OC_Config::setValue('dbpassword', $dbpassword); //create the database self::createDatabase($dbname, $dbusername, $connection); } else { OC_Config::setValue('dbuser', $dbuser); OC_Config::setValue('dbpassword', $dbpass); //create the database self::createDatabase($dbname, $dbuser, $connection); } //fill the database if needed $query="SELECT * FROM $dbname.{$dbtableprefix}users"; $result = mysql_query($query,$connection); if(!$result) { OC_DB::createDbFromStructure('db_structure.xml'); } mysql_close($connection); } } elseif($dbtype == 'pgsql') { $dbuser = $options['dbuser']; $dbpass = $options['dbpass']; $dbname = $options['dbname']; $dbhost = $options['dbhost']; $dbtableprefix = $options['dbtableprefix']; OC_CONFIG::setValue('dbname', $dbname); OC_CONFIG::setValue('dbhost', $dbhost); OC_CONFIG::setValue('dbtableprefix', $dbtableprefix); //check if the database user has admin right $connection_string = "host=$dbhost dbname=postgres user=$dbuser password=$dbpass"; $connection = @pg_connect($connection_string); if(!$connection) { $error[] = array( 'error' => 'PostgreSQL username and/or password not valid', 'hint' => 'You need to enter either an existing account or the administrator.' ); } else { //check for roles creation rights in postgresql $query="SELECT 1 FROM pg_roles WHERE rolcreaterole=TRUE AND rolname='$dbuser'"; $result = pg_query($connection, $query); if($result and pg_num_rows($result) > 0) { //use the admin login data for the new database user //add prefix to the postgresql user name to prevent collissions $dbusername='oc_'.$username; //hash the password so we don't need to store the admin config in the config file $dbpassword=md5(time().$password); self::pg_createDBUser($dbusername, $dbpassword, $connection); OC_CONFIG::setValue('dbuser', $dbusername); OC_CONFIG::setValue('dbpassword', $dbpassword); //create the database self::pg_createDatabase($dbname, $dbusername, $connection); } else { OC_CONFIG::setValue('dbuser', $dbuser); OC_CONFIG::setValue('dbpassword', $dbpass); //create the database self::pg_createDatabase($dbname, $dbuser, $connection); } //fill the database if needed $query="SELECT * FROM {$dbtableprefix}users"; $result = pg_query($connection, $query); if(!$result) { OC_DB::createDbFromStructure('db_structure.xml'); } pg_close($connection); } } else { //delete the old sqlite database first, might cause infinte loops otherwise if(file_exists("$datadir/owncloud.db")){ unlink("$datadir/owncloud.db"); } //in case of sqlite, we can always fill the database OC_DB::createDbFromStructure('db_structure.xml'); } if(count($error) == 0) { //create the user and group OC_User::createUser($username, $password); OC_Group::createGroup('admin'); OC_Group::addToGroup($username, 'admin'); OC_User::login($username, $password); //guess what this does OC_Installer::installShippedApps(); //create htaccess files for apache hosts if (strstr($_SERVER['SERVER_SOFTWARE'], 'Apache')) { self::createHtaccess(); } //and we are done OC_Config::setValue('installed', true); } } return $error; } public static function createDatabase($name,$user,$connection) { //we cant user OC_BD functions here because we need to connect as the administrative user. $query = "CREATE DATABASE IF NOT EXISTS `$name`"; $result = mysql_query($query, $connection); if(!$result) { $entry='DB Error: "'.mysql_error($connection).'"
'; $entry.='Offending command was: '.$query.'
'; echo($entry); } $query="GRANT ALL PRIVILEGES ON `$name` . * TO '$user'"; $result = mysql_query($query, $connection); //this query will fail if there aren't the right permissons, ignore the error } private static function createDBUser($name,$password,$connection) { // we need to create 2 accounts, one for global use and one for local user. if we don't specify the local one, // the anonymous user would take precedence when there is one. $query = "CREATE USER '$name'@'localhost' IDENTIFIED BY '$password'"; $result = mysql_query($query, $connection); $query = "CREATE USER '$name'@'%' IDENTIFIED BY '$password'"; $result = mysql_query($query, $connection); } public static function pg_createDatabase($name,$user,$connection) { //we cant user OC_BD functions here because we need to connect as the administrative user. $query = "CREATE DATABASE $name OWNER $user"; $result = pg_query($connection, $query); if(!$result) { $entry='DB Error: "'.pg_last_error($connection).'"
'; $entry.='Offending command was: '.$query.'
'; echo($entry); } $query = "REVOKE ALL PRIVILEGES ON DATABASE $name FROM PUBLIC"; $result = pg_query($connection, $query); } private static function pg_createDBUser($name,$password,$connection) { $query = "CREATE USER $name CREATEDB PASSWORD '$password';"; $result = pg_query($connection, $query); if(!$result) { $entry='DB Error: "'.pg_last_error($connection).'"
'; $entry.='Offending command was: '.$query.'
'; echo($entry); } } /** * create .htaccess files for apache hosts */ private static function createHtaccess() { $content = "ErrorDocument 404 ".OC::$WEBROOT."/core/templates/404.php\n";//custom 404 error page $content.= "\n"; $content.= "php_value upload_max_filesize 512M\n";//upload limit $content.= "php_value post_max_size 512M\n"; $content.= "SetEnv htaccessWorking true\n"; $content.= "\n"; $content.= "Options -Indexes\n"; @file_put_contents(OC::$SERVERROOT.'/.htaccess', $content); //supress errors in case we don't have permissions for it $content = "deny from all\n"; $content.= "IndexIgnore *"; file_put_contents(OC_Config::getValue('datadirectory', OC::$SERVERROOT.'/data').'/.htaccess', $content); file_put_contents(OC_Config::getValue('datadirectory', OC::$SERVERROOT.'/data').'/index.html', ''); } } ?>