summaryrefslogtreecommitdiffstats
path: root/core/setup/controller.php
blob: 54bfe14612a581d9aa7995034f8897451435d557 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
<?php

namespace OC\Core\Setup;

class Controller {
	public function run($post) {
		// Check for autosetup:
		$post = $this->loadAutoConfig($post);
		$opts = $this->getSystemInfo();

		if(isset($post['install']) AND $post['install']=='true') {
			// We have to launch the installation process :
			$e = \OC_Setup::install($post);
			$errors = array('errors' => $e);

			if(count($e) > 0) {
				$options = array_merge($post, $opts, $errors);
				$this->display($options);
			}
			else {
				$this->finishSetup();
			}
		}
		else {
			$this->display($opts);
		}
	}

	public function display($post) {
		\OC_Util::addScript('setup');
		\OC_Template::printGuestPage('', 'installation', $post);
	}

	public function finishSetup() {
		header( 'Location: '.\OC_Helper::linkToRoute( 'post_setup_check' ));
		exit();
	}

	public function loadAutoConfig($post) {
		$autosetup_file = \OC::$SERVERROOT.'/config/autoconfig.php';
		if( file_exists( $autosetup_file )) {
			\OC_Log::write('core', 'Autoconfig file found, setting up owncloud...', \OC_Log::INFO);
			include $autosetup_file;
			$post['install'] = 'true';
			$post = array_merge ($post, $AUTOCONFIG);
			unlink($autosetup_file);
		}
		return $post;
	}

	public function getSystemInfo() {
		$hasSQLite = class_exists('SQLite3');
		$hasMySQL = is_callable('mysql_connect');
		$hasPostgreSQL = is_callable('pg_connect');
		$hasOracle = is_callable('oci_connect');
		$hasMSSQL = is_callable('sqlsrv_connect');
		$datadir = \OC_Config::getValue('datadirectory', \OC::$SERVERROOT.'/data');
		$vulnerableToNullByte = false;
		if(@file_exists(__FILE__."\0Nullbyte")) { // Check if the used PHP version is vulnerable to the NULL Byte attack (CVE-2006-7243)
			$vulnerableToNullByte = true;
		} 

		// Protect data directory here, so we can test if the protection is working
		\OC_Setup::protectDataDirectory();

		return array(
			'hasSQLite' => $hasSQLite,
			'hasMySQL' => $hasMySQL,
			'hasPostgreSQL' => $hasPostgreSQL,
			'hasOracle' => $hasOracle,
			'hasMSSQL' => $hasMSSQL,
			'directory' => $datadir,
			'secureRNG' => \OC_Util::secureRNGAvailable(),
			'htaccessWorking' => \OC_Util::isHtAccessWorking(),
			'vulnerableToNullByte' => $vulnerableToNullByte,
			'errors' => array(),
		);
	}
}