mirror of
https://github.com/YunoHost-Apps/piwigo_ynh.git
synced 2024-09-03 20:06:03 +02:00
325 lines
No EOL
9 KiB
PHP
325 lines
No EOL
9 KiB
PHP
<?php
|
|
// +-----------------------------------------------------------------------+
|
|
// | Piwigo - a PHP based photo gallery |
|
|
// +-----------------------------------------------------------------------+
|
|
// | Copyright(C) 2008-2014 Piwigo Team http://piwigo.org |
|
|
// | Copyright(C) 2003-2008 PhpWebGallery Team http://phpwebgallery.net |
|
|
// | Copyright(C) 2002-2003 Pierrick LE GALL http://le-gall.net/pierrick |
|
|
// +-----------------------------------------------------------------------+
|
|
// | This program is free software; you can redistribute it and/or modify |
|
|
// | it under the terms of the GNU General Public License as published by |
|
|
// | the Free Software Foundation |
|
|
// | |
|
|
// | This program is distributed in the hope that it will be useful, but |
|
|
// | WITHOUT ANY WARRANTY; without even the implied warranty of |
|
|
// | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU |
|
|
// | General Public License for more details. |
|
|
// | |
|
|
// | You should have received a copy of the GNU General Public License |
|
|
// | along with this program; if not, write to the Free Software |
|
|
// | Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, |
|
|
// | USA. |
|
|
// +-----------------------------------------------------------------------+
|
|
|
|
function check_upgrade()
|
|
{
|
|
if (defined('PHPWG_IN_UPGRADE'))
|
|
{
|
|
return PHPWG_IN_UPGRADE;
|
|
}
|
|
return false;
|
|
}
|
|
|
|
// concerning upgrade, we use the default tables
|
|
function prepare_conf_upgrade()
|
|
{
|
|
global $prefixeTable;
|
|
|
|
// $conf is not used for users tables
|
|
// define cannot be re-defined
|
|
define('CATEGORIES_TABLE', $prefixeTable.'categories');
|
|
define('COMMENTS_TABLE', $prefixeTable.'comments');
|
|
define('CONFIG_TABLE', $prefixeTable.'config');
|
|
define('FAVORITES_TABLE', $prefixeTable.'favorites');
|
|
define('GROUP_ACCESS_TABLE', $prefixeTable.'group_access');
|
|
define('GROUPS_TABLE', $prefixeTable.'groups');
|
|
define('HISTORY_TABLE', $prefixeTable.'history');
|
|
define('HISTORY_SUMMARY_TABLE', $prefixeTable.'history_summary');
|
|
define('IMAGE_CATEGORY_TABLE', $prefixeTable.'image_category');
|
|
define('IMAGES_TABLE', $prefixeTable.'images');
|
|
define('SESSIONS_TABLE', $prefixeTable.'sessions');
|
|
define('SITES_TABLE', $prefixeTable.'sites');
|
|
define('USER_ACCESS_TABLE', $prefixeTable.'user_access');
|
|
define('USER_GROUP_TABLE', $prefixeTable.'user_group');
|
|
define('USERS_TABLE', $prefixeTable.'users');
|
|
define('USER_INFOS_TABLE', $prefixeTable.'user_infos');
|
|
define('USER_FEED_TABLE', $prefixeTable.'user_feed');
|
|
define('RATE_TABLE', $prefixeTable.'rate');
|
|
define('USER_CACHE_TABLE', $prefixeTable.'user_cache');
|
|
define('USER_CACHE_CATEGORIES_TABLE', $prefixeTable.'user_cache_categories');
|
|
define('CADDIE_TABLE', $prefixeTable.'caddie');
|
|
define('UPGRADE_TABLE', $prefixeTable.'upgrade');
|
|
define('SEARCH_TABLE', $prefixeTable.'search');
|
|
define('USER_MAIL_NOTIFICATION_TABLE', $prefixeTable.'user_mail_notification');
|
|
define('TAGS_TABLE', $prefixeTable.'tags');
|
|
define('IMAGE_TAG_TABLE', $prefixeTable.'image_tag');
|
|
define('PLUGINS_TABLE', $prefixeTable.'plugins');
|
|
define('OLD_PERMALINKS_TABLE', $prefixeTable.'old_permalinks');
|
|
define('THEMES_TABLE', $prefixeTable.'themes');
|
|
define('LANGUAGES_TABLE', $prefixeTable.'languages');
|
|
}
|
|
|
|
// Deactivate all non-standard plugins
|
|
function deactivate_non_standard_plugins()
|
|
{
|
|
global $page;
|
|
|
|
$standard_plugins = array(
|
|
'AdminTools',
|
|
'TakeATour',
|
|
'language_switch',
|
|
'LocalFilesEditor'
|
|
);
|
|
|
|
$query = '
|
|
SELECT id
|
|
FROM '.PREFIX_TABLE.'plugins
|
|
WHERE state = \'active\'
|
|
AND id NOT IN (\'' . implode('\',\'', $standard_plugins) . '\')
|
|
;';
|
|
|
|
$result = pwg_query($query);
|
|
$plugins = array();
|
|
while ($row = pwg_db_fetch_assoc($result))
|
|
{
|
|
$plugins[] = $row['id'];
|
|
}
|
|
|
|
if (!empty($plugins))
|
|
{
|
|
$query = '
|
|
UPDATE '.PREFIX_TABLE.'plugins
|
|
SET state=\'inactive\'
|
|
WHERE id IN (\'' . implode('\',\'', $plugins) . '\')
|
|
;';
|
|
pwg_query($query);
|
|
|
|
$page['infos'][] = l10n('As a precaution, following plugins have been deactivated. You must check for plugins upgrade before reactiving them:')
|
|
.'<p><i>'.implode(', ', $plugins).'</i></p>';
|
|
}
|
|
}
|
|
|
|
// Deactivate all non-standard themes
|
|
function deactivate_non_standard_themes()
|
|
{
|
|
global $page, $conf;
|
|
|
|
$standard_themes = array(
|
|
'clear',
|
|
'Sylvia',
|
|
'dark',
|
|
'elegant',
|
|
'smartpocket',
|
|
);
|
|
|
|
$query = '
|
|
SELECT
|
|
id,
|
|
name
|
|
FROM '.PREFIX_TABLE.'themes
|
|
WHERE id NOT IN (\''.implode("','", $standard_themes).'\')
|
|
;';
|
|
$result = pwg_query($query);
|
|
$theme_ids = array();
|
|
$theme_names = array();
|
|
while ($row = pwg_db_fetch_assoc($result))
|
|
{
|
|
$theme_ids[] = $row['id'];
|
|
$theme_names[] = $row['name'];
|
|
}
|
|
|
|
if (!empty($theme_ids))
|
|
{
|
|
$query = '
|
|
DELETE
|
|
FROM '.PREFIX_TABLE.'themes
|
|
WHERE id IN (\''.implode("','", $theme_ids).'\')
|
|
;';
|
|
pwg_query($query);
|
|
|
|
$page['infos'][] = l10n('As a precaution, following themes have been deactivated. You must check for themes upgrade before reactiving them:')
|
|
.'<p><i>'.implode(', ', $theme_names).'</i></p>';
|
|
|
|
// what is the default theme?
|
|
$query = '
|
|
SELECT theme
|
|
FROM '.PREFIX_TABLE.'user_infos
|
|
WHERE user_id = '.$conf['default_user_id'].'
|
|
;';
|
|
list($default_theme) = pwg_db_fetch_row(pwg_query($query));
|
|
|
|
// if the default theme has just been deactivated, let's set another core theme as default
|
|
if (in_array($default_theme, $theme_ids))
|
|
{
|
|
$query = '
|
|
UPDATE '.PREFIX_TABLE.'user_infos
|
|
SET theme = \'elegant\'
|
|
WHERE user_id = '.$conf['default_user_id'].'
|
|
;';
|
|
pwg_query($query);
|
|
}
|
|
}
|
|
}
|
|
|
|
// Deactivate all templates
|
|
function deactivate_templates()
|
|
{
|
|
$query = '
|
|
UPDATE '.PREFIX_TABLE.'config
|
|
SET value = \''. array() .'\'
|
|
WHERE param = \'extents_for_templates\';';
|
|
}
|
|
|
|
// Check access rights
|
|
function check_upgrade_access_rights()
|
|
{
|
|
global $conf, $page, $current_release;
|
|
|
|
if (version_compare($current_release, '2.0', '>=') and isset($_COOKIE[session_name()]))
|
|
{
|
|
// Check if user is already connected as webmaster
|
|
session_start();
|
|
if (!empty($_SESSION['pwg_uid']))
|
|
{
|
|
$query = '
|
|
SELECT status
|
|
FROM '.USER_INFOS_TABLE.'
|
|
WHERE user_id = '.$_SESSION['pwg_uid'].'
|
|
;';
|
|
pwg_query($query);
|
|
|
|
$row = pwg_db_fetch_assoc(pwg_query($query));
|
|
if (isset($row['status']) and $row['status'] == 'webmaster')
|
|
{
|
|
define('PHPWG_IN_UPGRADE', true);
|
|
return;
|
|
}
|
|
}
|
|
}
|
|
|
|
if (!isset($_POST['username']) or !isset($_POST['password']))
|
|
{
|
|
return;
|
|
}
|
|
|
|
$username = $_POST['username'];
|
|
$password = $_POST['password'];
|
|
|
|
if(!@get_magic_quotes_gpc())
|
|
{
|
|
$username = pwg_db_real_escape_string($username);
|
|
}
|
|
|
|
if (version_compare($current_release, '2.0', '<'))
|
|
{
|
|
$username = utf8_decode($username);
|
|
$password = utf8_decode($password);
|
|
}
|
|
|
|
if (version_compare($current_release, '1.5', '<'))
|
|
{
|
|
$query = '
|
|
SELECT password, status
|
|
FROM '.USERS_TABLE.'
|
|
WHERE username = \''.$username.'\'
|
|
;';
|
|
}
|
|
else
|
|
{
|
|
$query = '
|
|
SELECT u.password, ui.status
|
|
FROM '.USERS_TABLE.' AS u
|
|
INNER JOIN '.USER_INFOS_TABLE.' AS ui
|
|
ON u.'.$conf['user_fields']['id'].'=ui.user_id
|
|
WHERE '.$conf['user_fields']['username'].'=\''.$username.'\'
|
|
;';
|
|
}
|
|
$row = pwg_db_fetch_assoc(pwg_query($query));
|
|
|
|
if (!$conf['password_verify']($password, $row['password']))
|
|
{
|
|
$page['errors'][] = l10n('Invalid password!');
|
|
}
|
|
elseif ($row['status'] != 'admin' and $row['status'] != 'webmaster')
|
|
{
|
|
$page['errors'][] = l10n('You do not have access rights to run upgrade');
|
|
}
|
|
else
|
|
{
|
|
define('PHPWG_IN_UPGRADE', true);
|
|
}
|
|
}
|
|
|
|
/**
|
|
* which upgrades are available ?
|
|
*
|
|
* @return array
|
|
*/
|
|
function get_available_upgrade_ids()
|
|
{
|
|
$upgrades_path = PHPWG_ROOT_PATH.'install/db';
|
|
|
|
$available_upgrade_ids = array();
|
|
|
|
if ($contents = opendir($upgrades_path))
|
|
{
|
|
while (($node = readdir($contents)) !== false)
|
|
{
|
|
if (is_file($upgrades_path.'/'.$node)
|
|
and preg_match('/^(.*?)-database\.php$/', $node, $match))
|
|
{
|
|
$available_upgrade_ids[] = $match[1];
|
|
}
|
|
}
|
|
}
|
|
natcasesort($available_upgrade_ids);
|
|
|
|
return $available_upgrade_ids;
|
|
}
|
|
|
|
|
|
/**
|
|
* returns true if there are available upgrade files
|
|
*/
|
|
function check_upgrade_feed()
|
|
{
|
|
// retrieve already applied upgrades
|
|
$query = '
|
|
SELECT id
|
|
FROM '.UPGRADE_TABLE.'
|
|
;';
|
|
$applied = array_from_query($query, 'id');
|
|
|
|
// retrieve existing upgrades
|
|
$existing = get_available_upgrade_ids();
|
|
|
|
// which upgrades need to be applied?
|
|
return (count(array_diff($existing, $applied)) > 0);
|
|
}
|
|
|
|
function upgrade_db_connect()
|
|
{
|
|
global $conf;
|
|
|
|
try
|
|
{
|
|
pwg_db_connect($conf['db_host'], $conf['db_user'],
|
|
$conf['db_password'], $conf['db_base']);
|
|
pwg_db_check_version();
|
|
}
|
|
catch (Exception $e)
|
|
{
|
|
my_error(l10n($e->getMessage()), true);
|
|
}
|
|
}
|
|
?>
|