-
Notifications
You must be signed in to change notification settings - Fork 0
/
index.php
313 lines (277 loc) · 11.7 KB
/
index.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
<?php
/**
*
* 好商城V3 instller
*
*
*/
error_reporting (0);
define('InShopNC',true);
// 设置最大执行时间
set_time_limit(0);
error_reporting(E_ALL & ~E_NOTICE);
define('ROOT_PATH', dirname(dirname(__FILE__)));
define('DBCHARSET','UTF8');//编码 分为 UTF8 GBK
input($_GET);input($_POST);
if(function_exists('date_default_timezone_set')){
date_default_timezone_set('Asia/Shanghai');
}
function input(&$data){
foreach ((array)$data as $key => $value) {
if (is_string($value)) {
if (!get_magic_quotes_gpc()) {
$value = htmlentities($value, ENT_NOQUOTES);
$value = addslashes(trim($value));
}
}else{
$data[$key] = input($value);
}
}
}
//Detection identifies the file exists, if it exists, then stop the installation
if (file_exists('lock') && $_GET['step'] != 5){
@header("Content-type: text/html; charset=UTF-8");
echo "系统已经安装过了，如果要重新安装，那么请删除install目录下的lock文件";
exit;
}
//define variable
$html_title = '33hao.com 好商城V3 最新版 安装程序';
$html_header = <<<EOF
<div class="header">
<div class="layout">
<div class="title">
<h5>33hao.com 好商城V3 最新版 安装程序</h5>
<h2>系统安装向导</h2>
</div>
<div class="version">版本: 2015.2</div>
</div>
</div>
EOF;
$html_footer = <<<EOF
<div class="footer">
<h6><a href="http://www.33hao.com" target="_blank">程序来源于 bbs.33hao.com</a></h6>
</div>
EOF;
require('./include/function.php');
if (!in_array($_GET['step'],array(1,2,3,4,5))) $_GET['step'] = 0;
switch ($_GET['step']) {
case 1:
require('./include/var.php');
env_check($env_items);
dirfile_check($dirfile_items);
function_check($func_items);
break;
case 3:
$install_error = '';
$install_recover = '';
$demo_data = file_exists('./data/utf8_add.sql') ? true : false;
step3($install_error,$install_recover);
break;
case 4:
step4();
break;
case 5:
$sitepath = strtolower(substr($_SERVER['PHP_SELF'], 0, strrpos($_SERVER['PHP_SELF'], '/')));
$sitepath = str_replace('/shop/install',"",$sitepath);
$auto_site_url = strtolower('http://'.$_SERVER['HTTP_HOST'].$sitepath);
break;
default:
break;
}
function step3(&$install_error,&$install_recover){
global $html_title,$html_header,$html_footer;
if ($_POST['submitform'] != 'submit') return;
$db_host = $_POST['db_host'];
$db_port = $_POST['db_port'];
$db_user = $_POST['db_user'];
$db_pwd = $_POST['db_pwd'];
$db_name = $_POST['db_name'];
$db_prefix = $_POST['db_prefix'];
$admin = $_POST['admin'];
$password = $_POST['password'];
if (!$db_host || !$db_port || !$db_user || !$db_pwd || !$db_name || !$db_prefix || !$admin || !$password){
$install_error = '输入不完整，请检查';
}
if(strpos($db_prefix, '.') !== false) {
$install_error .= '数据表前缀为空，或者格式错误，请检查';
}
if(strlen($admin) > 15 || preg_match("/^$|^c:\\con\\con$| |[,\"\s\t\<\>&]|^游客|^Guest/is", $admin)) {
$install_error .= '非法用户名，用户名长度不应当超过 15 个英文字符，且不能包含特殊字符，一般是中文，字母或者数字';
}
if ($install_error != '') reutrn;
if(!@mysql_connect($db_host.":".$db_port, $db_user, $db_pwd)) {
$install_error = '数据库连接失败';return;
}
if(mysql_get_server_info() > '5.0') {
mysql_query("CREATE DATABASE IF NOT EXISTS `$db_name` DEFAULT CHARACTER SET ".DBCHARSET);
} else {
$install_error = '数据库必须为MySQL5.0版本以上';return;
}
if(mysql_errno()) {
$install_error = mysql_error();return ;
}
if($_POST['install_recover'] != 'yes' && ($query = mysql_query("SHOW TABLES FROM $db_name"))) {
while($row = mysql_fetch_row($query)) {
if(preg_match("/^$db_prefix/", $row[0])) {
$install_error = '数据表已存在，继续安装将会覆盖已有数据';
$install_recover = 'yes';
return;
}
}
}
require ('step_4.php');
$sitepath = strtolower(substr($_SERVER['PHP_SELF'], 0, strrpos($_SERVER['PHP_SELF'], '/')));
$sitepath = str_replace('/install',"",$sitepath);
$auto_site_url = strtolower('http://'.$_SERVER['HTTP_HOST'].$sitepath);
write_config($auto_site_url);
//execute sql
$db = new db;
$db->connect($db_host.":".$db_port, $db_user, $db_pwd, $db_name, DBCHARSET);
if (strtoupper(DBCHARSET) == 'GBK'){
$_charset = 'gbk';
}else{
$_charset = 'utf8';
}
$sql = file_get_contents("data/{$_charset}.sql");
$sql .= "\r\n".file_get_contents("data/{$_charset}_cms.sql");
$sql .= "\r\n".file_get_contents("data/{$_charset}_circle.sql");
$sql .= "\r\n".file_get_contents("data/{$_charset}_microshop.sql");
if ($_POST['demo_data'] == '1'){
$sql .= file_get_contents("data/{$_charset}_add.sql");
}
$sql = str_replace("\r\n", "\n", $sql);
runquery($sql,$db_prefix,$db);
showjsmessage('初始化数据 ... 成功 ');
/**
* 转码
*/
if (strtoupper(DBCHARSET) == 'GBK'){
$sitename = iconv('UTF-8','GBK',$_POST['site_name']);
$username = iconv('UTF-8','GBK',$_POST['admin']);
$password = iconv('UTF-8','GBK',$_POST['password']);
$store_name = iconv('UTF-8', 'GBK', $_POST['store_name']);
$member_name = iconv('UTF-8', 'GBK', $_POST['member_name']);
$seller_name = iconv('UTF-8', 'GBK', $_POST['seller_name']);
$member_password = iconv('UTF-8', 'GBK', $_POST['member_password']);
}else{
$sitename = $_POST['site_name'];
$username = $_POST['admin'];
$password = $_POST['password'];
$store_name = $_POST['store_name'];
$member_name = $_POST['member_name'];
$seller_name = $_POST['seller_name'];
$member_password = $_POST['member_password'];
}
/**
* 产生随机的md5_key，来替换系统默认的md5_key值
*/
$md5_key = md5(random(4).substr(md5($_SERVER['SERVER_ADDR'].$_SERVER['HTTP_USER_AGENT'].$db_host.$db_user.$db_pwd.$db_name.substr(time(), 0, 6)), 8, 6).random(10));
$db->query("UPDATE {$db_prefix}setting SET value='".$sitename."' WHERE name='site_name'");
$db->query("UPDATE {$db_prefix}setting SET value='".$md5_key."' WHERE name='md5_key'");
//管理员帐号密码
$db->query("INSERT INTO {$db_prefix}admin (`admin_id`,`admin_name`,`admin_password`,`admin_login_time`,`admin_login_num`,`admin_is_super`) VALUES ('1','$username','". md5($password) ."', '".time()."' ,'0',1);");
// 创建店铺
$db->query("INSERT INTO {$db_prefix}member (`member_id`,`member_name`,`member_passwd`,`member_email`,`member_time`,`member_login_time`,`member_old_login_time`) VALUES ('1', '{$member_name}','". md5($member_password) ."', '', '". time() ."', '". time() ."', '". time() ."')");
$db->query("INSERT INTO {$db_prefix}member_common (`member_id`) VALUES ('1')");
$db->query("INSERT INTO {$db_prefix}store (`store_id`,`store_name`,`grade_id`,`member_id`,`member_name`,`seller_name`,`store_state`,`store_time`) VALUES ('1','{$store_name}','1','1','{$member_name}','{$seller_name}','1', '". time() ."')");
$db->query("INSERT INTO {$db_prefix}store_joinin (`member_id`,`member_name`,`seller_name`,`store_name`,`joinin_state`) VALUES ('1', '{$member_name}', '{$seller_name}', '{$store_name}', '40')");
$db->query("INSERT INTO {$db_prefix}seller (`seller_id`,`seller_name`,`member_id`,`seller_group_id`,`store_id`,`is_admin`) VALUES ('1', '{$seller_name}', '1', '0', '1', '1')");
$db->query("UPDATE `{$db_prefix}navigation` SET nav_url=CONCAT('{$auto_site_url}/',nav_url)");
$db->query("UPDATE `{$db_prefix}cms_navigation` SET navigation_link=CONCAT('{$auto_site_url}/',navigation_link)");
if ($_POST['demo_data'] == '1'){
$db->query("UPDATE {$db_prefix}store SET `live_store_name`='俏江南',`live_store_address`='天津市南开区南门外大街2号大悦城购物中心北区4L-27',`live_store_tel`='022-87288577',`live_store_bus`='829路、832路、837路、855路、841路、860路 地铁2号线' WHERE `store_id`=1");
$db->query("UPDATE `{$db_prefix}goods` SET `store_name` = '{$store_name}'");
$db->query("UPDATE `{$db_prefix}goods_common` SET `store_name` = '{$store_name}'");
$db->query("UPDATE `{$db_prefix}groupbuy` SET `store_name` = '{$store_name}'");
$db->query("UPDATE `{$db_prefix}groupbuy_quota` SET `member_name` = '{$member_name}' ,`store_name` = '{$store_name}';");
$db->query("UPDATE `{$db_prefix}p_xianshi` SET `member_name` = '{$member_name}' ,`store_name` = '{$store_name}';");
$db->query("UPDATE `{$db_prefix}p_xianshi_quota` SET `member_name` = '{$member_name}' ,`store_name` = '{$store_name}';");
}
//新增一个标识文件，用来屏蔽重新安装
$fp = @fopen('lock','wb+');
@fclose($fp);
exit("<script type=\"text/javascript\">document.getElementById('install_process').innerHTML = '安装完成，下一步...';document.getElementById('install_process').href='index.php?step=5&sitename={$sitename}&username={$username}&password={$password}';</script>");
exit();
}
include ("step_{$_GET['step']}.php");
//execute sql
function runquery($sql, $db_prefix, $db) {
// global $lang, $tablepre, $db;
if(!isset($sql) || empty($sql)) return;
$sql = str_replace("\r", "\n", str_replace('#__', $db_prefix, $sql));
$ret = array();
$num = 0;
foreach(explode(";\n", trim($sql)) as $query) {
$ret[$num] = '';
$queries = explode("\n", trim($query));
foreach($queries as $query) {
$ret[$num] .= (isset($query[0]) && $query[0] == '#') || (isset($query[1]) && isset($query[1]) && $query[0].$query[1] == '--') ? '' : $query;
}
$num++;
}
unset($sql);
foreach($ret as $query) {
$query = trim($query);
if($query) {
if(substr($query, 0, 12) == 'CREATE TABLE') {
$line = explode('`',$query);
$data_name = $line[1];
showjsmessage('数据表 '.$data_name.' ... 创建成功');
$db->query(droptable($data_name));
/**
* 转码
*/
if (strtoupper(DBCHARSET) == 'GBK'){
$query = iconv('GBK','UTF-8',$query);
}
$db->query($query);
unset($line,$data_name);
} else {
$db->query($query);
}
}
}
}
//抛出JS信息
function showjsmessage($message) {
echo '<script type="text/javascript">showmessage(\''.addslashes($message).' \');</script>'."\r\n";
flush();
ob_flush();
}
//写入config文件
function write_config($url) {
extract($GLOBALS, EXTR_SKIP);
$config = 'data/config.ini.php';
$configfile = @file_get_contents($config);
$configfile = trim($configfile);
$configfile = substr($configfile, -2) == '?>' ? substr($configfile, 0, -2) : $configfile;
if (strtoupper(DBCHARSET) == 'GBK'){
$charset = 'GBK';
}else {
$charset = 'UTF-8';
}
$db_host = $_POST['db_host'];
$db_port = $_POST['db_port'];
$db_user = $_POST['db_user'];
$db_pwd = $_POST['db_pwd'];
$db_name = $_POST['db_name'];
$db_prefix = $_POST['db_prefix'];
$admin = $_POST['admin'];
$password = $_POST['password'];
$db_type = (extension_loaded('mysqli')) ? 'mysqli' : 'mysql';
$cookie_pre = strtoupper(substr(md5(random(6).substr($_SERVER['HTTP_USER_AGENT'].md5($_SERVER['SERVER_ADDR'].$db_host.$db_user.$db_pwd.$db_name.substr(time(), 0, 6)), 8, 6).random(5)),0,4)).'_';
$configfile = str_replace("===url===", $url, $configfile);
$configfile = str_replace("===node_ip===", $_SERVER["SERVER_ADDR"], $configfile);
$configfile = str_replace("===db_prefix===", $db_prefix, $configfile);
$configfile = str_replace("===db_driver===", $db_type, $configfile);
$configfile = str_replace("===db_charset===", $charset, $configfile);
$configfile = str_replace("===db_host===", $db_host, $configfile);
$configfile = str_replace("===db_user===", $db_user, $configfile);
$configfile = str_replace("===db_pwd===", $db_pwd, $configfile);
$configfile = str_replace("===db_name===", $db_name, $configfile);
$configfile = str_replace("===db_port===", $db_port, $configfile);
$configfile = str_replace("===setup_date===", date("Y-m-d H:i:s",time()), $configfile);
$configfile = str_replace("===cookie_pre===", $cookie_pre, $configfile);
@file_put_contents('../data/config/config.ini.php', $configfile);
}
?>