XBackBone/install/index.php

<?php
(PHP_MAJOR_VERSION >= 7 && PHP_MINOR_VERSION >= 1) ?: die('Sorry, PHP 7.1 or above is required to run XBackBone.');
require __DIR__ . '/../vendor/autoload.php';

use App\Database\DB;
use App\Web\Session;
use Slim\App;
use Slim\Container;
use Slim\Http\Environment;
use Slim\Http\Request;
use Slim\Http\Response;
use Slim\Http\Uri;
use Slim\Views\Twig;

define('PLATFORM_VERSION', json_decode(file_get_contents(__DIR__ . '/../composer.json'))->version);

$config = [
	'base_url' => isset($_SERVER['HTTPS']) ? 'https://' . $_SERVER['HTTP_HOST'] : 'http://' . $_SERVER['HTTP_HOST'],
	'storage_dir' => 'storage',
	'displayErrorDetails' => true,
	'db' => [
		'connection' => 'sqlite',
		'dsn' => 'resources/database/xbackbone.db',
		'username' => null,
		'password' => null,
	],
];

$container = new Container(['settings' => $config]);

$container['session'] = function ($container) {
	return new Session('xbackbone_session');
};

$container['view'] = function ($container) use (&$config) {
	$view = new Twig([__DIR__ . '/templates', __DIR__ . '/../resources/templates'], [
		'cache' => false,
		'autoescape' => 'html',
		'debug' => $config['displayErrorDetails'],
		'auto_reload' => $config['displayErrorDetails'],
	]);

	// Instantiate and add Slim specific extension
	$router = $container->get('router');
	$uri = Uri::createFromEnvironment(new Environment($_SERVER));
	$view->addExtension(new Slim\Views\TwigExtension($router, $uri));

	$view->getEnvironment()->addGlobal('config', $config);
	$view->getEnvironment()->addGlobal('request', $container->get('request'));
	$view->getEnvironment()->addGlobal('alerts', $container->get('session')->getAlert());
	$view->getEnvironment()->addGlobal('session', $container->get('session')->all());
	$view->getEnvironment()->addGlobal('PLATFORM_VERSION', PLATFORM_VERSION);
	return $view;
};

function migrate($config)
{
	$firstMigrate = false;
	if ($config['db']['connection'] === 'sqlite' && !file_exists(__DIR__ . '/../' . $config['db']['dsn'])) {
		touch(__DIR__ . '/../' . $config['db']['dsn']);
		$firstMigrate = true;
	}

	try {
		DB::doQuery('SELECT 1 FROM `migrations` LIMIT 1');
	} catch (PDOException $exception) {
		$firstMigrate = true;
	}

	if ($firstMigrate) {
		DB::raw()->exec(file_get_contents(__DIR__ . '/../resources/schemas/migrations.sql'));
	}

	$files = glob(__DIR__ . '/../resources/schemas/' . DB::driver() . '/*.sql');

	$names = array_map(function ($path) {
		return basename($path);
	}, $files);

	$in = str_repeat('?, ', count($names) - 1) . '?';

	$inMigrationsTable = DB::doQuery("SELECT * FROM `migrations` WHERE `name` IN ($in)", $names)->fetchAll();


	foreach ($files as $file) {

		$continue = false;
		$exists = false;

		foreach ($inMigrationsTable as $migration) {
			if (basename($file) === $migration->name && $migration->migrated) {
				$continue = true;
				break;
			} else if (basename($file) === $migration->name && !$migration->migrated) {
				$exists = true;
				break;
			}
		}
		if ($continue) continue;

		$sql = file_get_contents($file);
		try {
			DB::raw()->exec($sql);
			if (!$exists) {
				DB::doQuery('INSERT INTO `migrations` VALUES (?,?)', [basename($file), 1]);
			} else {
				DB::doQuery('UPDATE `migrations` SET `migrated`=? WHERE `name`=?', [1, basename($file)]);
			}
		} catch (PDOException $exception) {
			if (!$exists) {
				DB::doQuery('INSERT INTO `migrations` VALUES (?,?)', [basename($file), 0]);
			}
			throw $exception;
		}
	}
}

$app = new App($container);

$app->get('/', function (Request $request, Response $response) {

	if (!is_writable(__DIR__ . '/../resources/cache')) {
		$this->session->alert('The cache folder is not writable (' . __DIR__ . '/../resources/cache' . ')', 'danger');
	}

	if (!is_writable(__DIR__ . '/../resources/database')) {
		$this->session->alert('The database folder is not writable (' . __DIR__ . '/../resources/database' . ')', 'danger');
	}

	if (!is_writable(__DIR__ . '/../resources/sessions')) {
		$this->session->alert('The sessions folder is not writable (' . __DIR__ . '/../resources/sessions' . ')', 'danger');
	}

	$installed = file_exists(__DIR__ . '/../config.php');

	return $this->view->render($response, 'install.twig', ['installed' => $installed]);
});

$app->post('/', function (Request $request, Response $response) use (&$config) {
	$installed = true;
	if (!file_exists(__DIR__ . '/../config.php')) {
		$installed = false;

		$config['base_url'] = $request->getParam('base_url');
		$config['storage_dir'] = $request->getParam('storage_dir');
		unset($config['displayErrorDetails']);
		$config['db']['connection'] = $request->getParam('connection');
		$config['db']['dsn'] = $request->getParam('dsn');
		$config['db']['username'] = $request->getParam('db_user');
		$config['db']['password'] = $request->getParam('db_password');

		try {
			storage($config['storage_dir']);
		} catch (LogicException $exception) {
			$this->session->alert('The storage folder is not readable (' . $config['storage_dir'] . ')', 'danger');
			return redirect($response, './');
		} finally {
			if (!is_writable($config['storage_dir'])) {
				$this->session->alert('The storage folder is not writable (' . $config['storage_dir'] . ')', 'danger');
				return redirect($response, './');
			}
		}

		$ret = file_put_contents(__DIR__ . '/../config.php', '<?php' . PHP_EOL . 'return ' . var_export($config, true) . ';');
		if ($ret === false) {
			$this->session->alert('The config folder is not writable (' . __DIR__ . '/../config.php' . ')', 'danger');
			return redirect($response, './');
		}
	} else {
		$config = require __DIR__ . '/../config.php';
	}

	$dsn = $config['db']['connection'] === 'sqlite' ? __DIR__ . '/../' . $config['db']['dsn'] : $config['db']['dsn'];

	try {
		DB::setDsn($config['db']['connection'] . ':' . $dsn, $config['db']['username'], $config['db']['password']);

		migrate($config);
	} catch (PDOException $exception) {
		$this->session->alert("Cannot connect to the database: {$exception->getMessage()} [{$exception->getCode()}]", 'danger');
		return redirect($response, './');
	}

	if (!$installed) {
		DB::doQuery("INSERT INTO `users` (`email`, `username`, `password`, `is_admin`, `user_code`) VALUES (?, 'admin', ?, 1, ?)", [$request->getParam('email'), password_hash($request->getParam('password'), PASSWORD_DEFAULT), substr(md5(microtime()), rand(0, 26), 5)]);
	}

	cleanDirectory(__DIR__ . '/../resources/cache');
	cleanDirectory(__DIR__ . '/../resources/sessions');

	removeDirectory(__DIR__ . '/../install');

	if ($installed) {
		unset($config['maintenance']);

		$ret = file_put_contents(__DIR__ . '/../config.php', '<?php' . PHP_EOL . 'return ' . var_export($config, true) . ';');
		if ($ret === false) {
			$this->session->alert('The config folder is not writable (' . __DIR__ . '/../config.php' . ')', 'danger');
			return redirect($response, './');
		}
	}

	return $response->withRedirect('../?afterInstall=true');
});

$app->run();