$value) { if(is_string($value)){ if(!get_magic_quotes_gpc()){ $value = htmlentities($value, ENT_NOQUOTES); $value = addslashes(trim($value)); } }else{ $data[$key] = input($value); } } } //判断是否安装过程序 if(is_file('lock') && $_GET['step'] != 5){ @header("Content-type: text/html; charset=UTF-8"); echo "系统已经安装过了，如果要重新安装，那么请删除install目录下的lock文件"; exit; } $html_title = 'Timely客服系统安装向导'; $html_header = <<
Timely客服安装向导

系统安装向导

版本: v1.0.1
EOF; $html_footer = <<
Powered by Timely
版权所有 2019-2020 © Timely
EOF; require('./include/function.php'); if(!in_array($_GET['step'], array(1,2,3,4,5))){ $_GET['step'] = 0; } switch ($_GET['step']) { case 1: require('./include/var.php'); env_check($env_items); dirfile_check($dirfile_items); function_check($func_items); break; case 3: $install_error = ''; $install_recover = ''; $demo_data = file_exists('./data/utf8_add.sql') ? true : false; step3($install_error,$install_recover); break; case 4: break; case 5: $sitepath = strtolower(substr($_SERVER['PHP_SELF'], 0, strrpos($_SERVER['PHP_SELF'], '/'))); $sitepath = str_replace('install',"",$sitepath); $auto_site_url = strtolower('http://'.$_SERVER['HTTP_HOST'].$sitepath); break; default: # code... break; } include ("step_{$_GET['step']}.php"); function step3(&$install_error,&$install_recover){ global $html_title,$html_header,$html_footer; if ($_POST['submitform'] != 'submit') return; $db_host = $_POST['db_host']; $db_port = $_POST['db_port']; $db_user = $_POST['db_user']; $db_pwd = $_POST['db_pwd']; $db_name = $_POST['db_name']; $db_prefix = $_POST['db_prefix']; $admin = $_POST['admin']; $password = $_POST['password']; if (!$db_host || !$db_port || !$db_user || !$db_pwd || !$db_name || !$db_prefix || !$admin || !$password){ $install_error = '输入不完整，请检查'; } if(strpos($db_prefix, '.') !== false) { $install_error .= '数据表前缀为空，或者格式错误，请检查'; } if(strlen($admin) > 15 || preg_match("/^$|^c:\\con\\con$|　|[,\"\s\t\<\>&]|^游客|^Guest/is", $admin)) { $install_error .= '非法用户名，用户名长度不应当超过 15 个英文字符，且不能包含特殊字符，一般是中文，字母或者数字'; } if ($install_error != '') $mysqli = @ new mysqli($db_host, $db_user, $db_pwd, '', $db_port); if($mysqli->connect_error) { $install_error = '数据库连接失败';return; } if($mysqli->get_server_info()> '5.0') { $mysqli->query("CREATE DATABASE IF NOT EXISTS `$db_name` DEFAULT CHARACTER SET ".DBCHARSET); } else { $install_error = '数据库必须为MySQL5.0版本以上';return; } if($mysqli->error) { $install_error = $mysqli->error;return ; } if($_POST['install_recover'] != 'yes' && ($query = $mysqli->query("SHOW TABLES FROM $db_name"))) { while($row = mysqli_fetch_array($query)) { if(preg_match("/^$db_prefix/", $row[0])) { $install_error = '数据表已存在，继续安装将会覆盖已有数据'; $install_recover = 'yes'; return; } } } require ('step_4.php'); $sitepath = strtolower(substr($_SERVER['PHP_SELF'], 0, strrpos($_SERVER['PHP_SELF'], '/'))); $sitepath = str_replace('install',"",$sitepath); $auto_site_url = strtolower('http://'.$_SERVER['HTTP_HOST'].$sitepath); write_config($auto_site_url); $_charset = strtolower(DBCHARSET); $mysqli->select_db($db_name); $mysqli->set_charset($_charset); $sql = file_get_contents("data/{$_charset}.sql"); //判断是否安装测试数据 if ($_POST['demo_data'] == '1'){ $sql .= file_get_contents("data/{$_charset}_add.sql"); } $sql = str_replace("\r\n", "\n", $sql); runquery($sql,$db_prefix,$mysqli); showjsmessage('初始化数据 ... 成功 '); //测试数据 if ($_POST['demo_data'] == '1'){ $sql .= file_get_contents("data/{$_charset}_add.sql"); } //新增一个标识文件，用来屏蔽重新安装 $fp = @fopen('lock','wb+'); @fclose($fp); exit(""); exit(); } //execute sql function runquery($sql, $db_prefix, $mysqli) { // global $lang, $tablepre, $db; if(!isset($sql) || empty($sql)) return; $sql = str_replace("\r", "\n", str_replace('#__', $db_prefix, $sql)); $ret = array(); $num = 0; foreach(explode(";\n", trim($sql)) as $query) { $ret[$num] = ''; $queries = explode("\n", trim($query)); foreach($queries as $query) { $ret[$num] .= (isset($query[0]) && $query[0] == '#') || (isset($query[1]) && isset($query[1]) && $query[0].$query[1] == '--') ? '' : $query; } $num++; } unset($sql); foreach($ret as $query) { $query = trim($query); if($query) { if(substr($query, 0, 12) == 'CREATE TABLE') { $line = explode('`',$query); $data_name = $line[1]; showjsmessage('数据表 '.$data_name.' ... 创建成功'); $mysqli->query(droptable($data_name)); $mysqli->query($query); unset($line,$data_name); } else { $mysqli->query($query); } } } } //抛出JS信息 function showjsmessage($message) { echo ''."\r\n"; flush(); ob_flush(); } //写入config文件 function write_config($url) { extract($GLOBALS, EXTR_SKIP); $config = 'data/database.php'; $configfile = @file_get_contents($config); $configfile = trim($configfile); $configfile = substr($configfile, -2) == '?>' ? substr($configfile, 0, -2) : $configfile; $charset = 'UTF-8'; $db_host = $_POST['db_host']; $db_port = $_POST['db_port']; $db_user = $_POST['db_user']; $db_pwd = $_POST['db_pwd']; $db_name = $_POST['db_name']; $db_prefix = $_POST['db_prefix']; $admin = $_POST['admin']; $password = $_POST['password']; $db_type = 'mysql'; $cookie_pre = strtoupper(substr(md5(random(6).substr($_SERVER['HTTP_USER_AGENT'].md5($_SERVER['SERVER_ADDR'].$db_host.$db_user.$db_pwd.$db_name.substr(time(), 0, 6)), 8, 6).random(5)),0,4)).'_'; $configfile = str_replace("===url===", $url, $configfile); $configfile = str_replace("===db_prefix===", $db_prefix, $configfile); $configfile = str_replace("===db_charset===", $charset, $configfile); $configfile = str_replace("===db_host===", $db_host, $configfile); $configfile = str_replace("===db_user===", $db_user, $configfile); $configfile = str_replace("===db_pwd===", $db_pwd, $configfile); $configfile = str_replace("===db_name===", $db_name, $configfile); $configfile = str_replace("===db_port===", $db_port, $configfile); @file_put_contents('../../config/database.php', $configfile); }