' . $lang_update_php['update_completed'] . '
'; echo ''; printf($lang_update_php['check_versions'], '', ''); echo '. '; printf($lang_update_php['start_page'], '', ''); echo '.
';
}
// --------------------- SELECT NEW DATABASE ACCESS METHOD --------------------- //
// if a different dbase method is selected, we have to change the config and reload
// the page to get to the correct dbase class
if ($superCage->post->keyExists('action') && $superCage->post->getAlpha('action') == 'dbselect') {
set_config_dbtype($superCage->post->getRaw('db_type'));
if ($errors) {
html_error($errors);
} else {
header('Location: update.php?dbswitch=1');
}
exit;
}
if ($superCage->get->keyExists('dbswitch') && $superCage->get->getInt('dbswitch')) {
define('SKIP_AUTHENTICATION', true);
}
// ---------------------------- AUTHENTICATION --------------------------- //
// SKIP_AUTHENTICATION is a constant that can be defined for users who can't retrieve any kind of password
if (!defined('SKIP_AUTHENTICATION') && !$_SESSION['auth']) {
html_header($lang_update_php['title']);
if (!$superCage->post->keyExists('method')) {
//first try to connect to the db to see if we can authenticate the admin
test_sql_connection();
if ($errors != '') {
//we could not establish an sql connection, so update can't be done (and user can't be autenticated)
html_error($errors);
} else {
//echo a box for admin autentication
html_auth_box('admin');
}
} elseif ($superCage->post->getAlpha('method') == 'admin') {
//try to autenticate the admin
test_sql_connection();
$user = $superCage->post->getEscaped('user');
$pass = $superCage->post->getEscaped('pass');
// Check if column 'user_password_salt' exists in user table
$result = cpg_db_query("SELECT * FROM {$CONFIG['TABLE_PREFIX']}users LIMIT 1");
$row = $result->fetchAssoc(true);
$col_user_password_salt_exists = isset($row['user_password_salt']) ? true : false;
if ($col_user_password_salt_exists) {
require 'include/passwordhash.inc.php';
$sql = "SELECT user_password, user_password_salt, user_password_hash_algorithm, user_password_iterations FROM {$CONFIG['TABLE_PREFIX']}users WHERE user_group = 1 AND user_name = '$user'";
$result = cpg_db_query($sql);
$password_params = $result->fetchAssoc(true);
}
if (!$col_user_password_salt_exists || !$password_params['user_password_salt']) {
$sql = "SELECT user_active FROM {$CONFIG['TABLE_PREFIX']}users WHERE user_group = 1 AND user_name = '$user' AND (user_password = '$pass' OR user_password = '".md5($pass)."')";
$result = cpg_db_query($sql);
if (!$result->numRows()) {
//not authenticated, try mysql account details
html_auth_box('MySQL');
die();
}
} elseif (!cpg_password_validate($pass, $password_params)) {
//not authenticated, try mysql account details
html_auth_box('MySQL');
die();
}
//authenticated, do the update
$_SESSION['auth'] = true;
start_update();
} else {
//try to autenticate via MySQL details (in configuration)
if ($superCage->post->getEscaped('user') == $CONFIG['dbuser'] && $superCage->post->getEscaped('pass') == $CONFIG['dbpass']) {
//authenticated, do the update
$_SESSION['auth'] = true;
start_update();
} else {
//no go, try again
html_error($lang_update_php['could_not_authenticate'] . ' - ' . $lang_update_php['try_again'] .'');
}
}
html_footer();
} else {
html_header($lang_update_php['title']);
$_SESSION['auth'] = true;
start_update();
html_footer();
}
// function definitions --- start
// ------------------------- HTML OUTPUT FUNCTIONS ------------------------- //
function html_header($title, $charset = 'iso8859-1')
{
if (function_exists('pageheader') && defined('COPPERMINE_VERSION') && GALLERY_ADMIN_MODE) {
pageheader($title);
} else {
echo <<< EOT
EOT;
}
}
function html_error($error_msg = '')
{
global $lang_update_php, $help;
echo <<< EOT
{$lang_update_php['welcome_updater']}{$help} |
|
| • • • ERROR • • • | |
|
{$lang_update_php['errors_encountered']}: |
|
| {$error_msg} |
'; printf($lang_update_php['check_versions'], '', ''); echo '. '; printf($lang_update_php['start_page'], '', ''); echo '.
|
{$lang_update_php['newDbMethod']} |
|
| Database Type | |
', $CPGDB->getError(), '
';
}
// --------------------- SELECT NEW DATABASE ACCESS METHOD --------------------- //
// if a different dbase method is selected, we have to change the config and reload
// the page to get to the correct dbase class
if ($superCage->post->keyExists('action') && $superCage->post->getAlpha('action') == 'dbselect') {
set_config_dbtype($superCage->post->getRaw('db_type'));
if ($errors) {
html_error($errors);
} else {
header('Location: update.php?dbswitch=1');
}
exit;
}
if ($superCage->get->keyExists('dbswitch') && $superCage->get->getInt('dbswitch')) {
define('SKIP_AUTHENTICATION', true);
}
// ---------------------------- AUTHENTICATION --------------------------- //
// SKIP_AUTHENTICATION is a constant that can be defined for users who can't retrieve any kind of password
if (!defined('SKIP_AUTHENTICATION') && !$_SESSION['auth']) {
html_header($lang_update_php['title']);
if (!$superCage->post->keyExists('method')) {
//first try to connect to the db to see if we can authenticate the admin
test_sql_connection();
if ($errors != '') {
//we could not establish an sql connection, so update can't be done (and user can't be autenticated)
html_error($errors);
} else {
//echo a box for admin autentication
html_auth_box('admin');
}
} elseif ($superCage->post->getAlpha('method') == 'admin') {
//try to autenticate the admin
test_sql_connection();
$user = $superCage->post->getEscaped('user');
$pass = $superCage->post->getEscaped('pass');
// Check if column 'user_password_salt' exists in user table
$result = cpg_db_query("SELECT * FROM {$CONFIG['TABLE_PREFIX']}users LIMIT 1");
$row = $result->fetchAssoc(true);
$col_user_password_salt_exists = isset($row['user_password_salt']) ? true : false;
if ($col_user_password_salt_exists) {
require 'include/passwordhash.inc.php';
$sql = "SELECT user_password, user_password_salt, user_password_hash_algorithm, user_password_iterations FROM {$CONFIG['TABLE_PREFIX']}users WHERE user_group = 1 AND user_name = '$user'";
$result = cpg_db_query($sql);
$password_params = $result->fetchAssoc(true);
}
if (!$col_user_password_salt_exists || !$password_params['user_password_salt']) {
$sql = "SELECT user_active FROM {$CONFIG['TABLE_PREFIX']}users WHERE user_group = 1 AND user_name = '$user' AND (user_password = '$pass' OR user_password = '".md5($pass)."')";
$result = cpg_db_query($sql);
if (!$result->numRows()) {
//not authenticated, try mysql account details
html_auth_box('MySQL');
die();
}
} elseif (!cpg_password_validate($pass, $password_params)) {
//not authenticated, try mysql account details
html_auth_box('MySQL');
die();
}
//authenticated, do the update
$_SESSION['auth'] = true;
start_update();
} else {
//try to autenticate via MySQL details (in configuration)
if ($superCage->post->getEscaped('user') == $CONFIG['dbuser'] && $superCage->post->getEscaped('pass') == $CONFIG['dbpass']) {
//authenticated, do the update
$_SESSION['auth'] = true;
start_update();
} else {
//no go, try again
html_error($lang_update_php['could_not_authenticate'] . ' - ' . $lang_update_php['try_again'] .'');
}
}
html_footer();
} else {
html_header($lang_update_php['title']);
$_SESSION['auth'] = true;
start_update();
html_footer();
}
// function definitions --- start
// ------------------------- HTML OUTPUT FUNCTIONS ------------------------- //
function html_header($title, $charset = 'iso8859-1')
{
if (function_exists('pageheader') && defined('COPPERMINE_VERSION') && GALLERY_ADMIN_MODE) {
pageheader($title);
} else {
echo <<< EOT
EOT;
}
}
function html_error($error_msg = '')
{
global $lang_update_php, $help;
echo <<< EOT
{$lang_update_php['welcome_updater']}{$help} |
|
| • • • ERROR • • • | |
|
{$lang_update_php['errors_encountered']}: |
|
| {$error_msg} |
'; printf($lang_update_php['check_versions'], '', ''); echo '. '; printf($lang_update_php['start_page'], '', ''); echo '.
|
{$lang_update_php['newDbMethod']} |
|
| Database Type | |
', $CPGDB->getError(), '
{{overview}}