test.php

<?php

/*

    Tests if the server meets basic minimum requirements.

    Might want to make the autolock user-selectable.
        Redirect back to page with a get to call it?
*/

$autolock = true;
$lockout = "." . basename(__FILE__, ".php") . "_lockout";

if (is_file($lockout)) {
    exit(); //If the lockout file exists, terminate the script. Disregards autolock status.
} else {
    //These should be the only things changed without knowing what you're doing, everything that uses them is automated.
    $defaults = [ //Default accounts.
                    ['name' => 'admin', 'pass' => 'guest', '_flags' => ['janitor'=>1,'developer'=>1,'janitor_board'=>1,'moderator'=>1,'admin'=>1,'manager'=>1], '_boards' => ['*']]
                ];

    //Point of no return. Casual users shouldn't go past here.
    ini_set('display_errors',1);
    error_reporting(E_ALL & ~E_NOTICE);

    $config_file = 'config.php';
    $min_php = '5.2.0';
    $min_gd = '2.0.0';
    $min_mysql = '4.0.0';

    $success = "<span class='success'>SUCCESS</span><br>";
    $fail = "<span class='fail'>FAIL</span><br>";
    $css = "body { background-color:#EEF2FF; } #title { font-size:xx-large; text-align:center; font-weight:bold; font-style: italic; }
            .extra { /*width:49%; display:inline-block;*/ } .box { background-color:#D6DAF0; padding:10px; border-radius:10px; margin: 2%; }
            ul { margin: 5px 0px; }
            .spoiler { color:#000; background-color:#000; border-radius:8px; padding: 0 5px; }
            .spoiler:hover { color:#fff; }
            .success { color:green;font-weight:bold; }
            .fail { color:#B20;font-weight:bold; }
            .info { border-bottom: 1px dotted; }
            td { padding-right: 10px; }";

    echo "<style>$css</style>";

    //Lock out.
    $mydir = "(" . dirname(__FILE__) . ")";
    $log = "";

    if ($autolock) {
        touch($lockout);
        $log .= "For security, <strong>\"$lockout\"</strong> has been created in the same directory $mydir and this script <strong>will not function again until it is deleted.</strong><br>";
    } else {
        $log .= "Auto-lock is <strong>disabled</strong>. Default account passwords will not be diplayed during creation.<br>";
    }

    $log .= "<br>";

    $mysql_good = false;
    $owner = "<strong>" . get_current_user() ."</strong>";
    $user = "<strong>" . posix_getpwuid(posix_geteuid())['name'] . "</strong>";
    $log .= "This file (<strong>" . basename(__FILE__) . "</strong>) is owned by $owner and running as user $user. Any files/folders created should be owned by $user.<br>";

    $tests = [];

    echo "<div class='box' id='title'>Saguaro Testing and Installation Utility</div>";

    //Check to see if $config_file and others were included properly.
    $loaded = [];
    $loaded['config'] = (bool) include($config_file);
    $loaded['crypt'] = (bool) include(CORE_DIR . "/crypt/legacy.php");
    $loga = "<strong>\"$config_file\"</strong> from the same directory $mydir failed to be included properly, some tests may fail.<br>";
    if ($loaded['config'])
        $loga = "Successfully loaded <strong>\"$config_file\"</strong> from the same directory. $mydir<br>";
        $loaded['config'] = true;

    $log .= $loga;

    echo "<div class='box' id='log'>$log</div>";
    if ($mode == 'uninstall') {
        if ($loaded['config'] == true) {
            $mysqli = new mysqli(SQLHOST, SQLUSER, SQLPASS);

            echo "<div class='box'>";
            if (mysqli_connect_errno()) {
                echo "There was a problem with MySQL, cannot initialize MySQL data. (" . mysqli_connect_errno() . ")";
            } else {
                $tables = [SQLLOG, SQLBANLOG, SQLMODSLOG, SQLDELLOG, SQLMEDIA, SQLREPORTS, SQLRESOURCES];
                mysqli_select_db($mysqli, SQLDB);

                echo "These SQL queries are executed as <strong>" . SQLUSER . "</strong> on the SQL server <strong>" . SQLHOST . "</strong>.<br><br>";
                echo "The following tables will be dropped from database <strong>" . SQLDB . "</strong>: " . join(', ', $tables) . "<br>";
                echo "If the database <strong>" . SQLDB . "</strong> is empty after the tables are dropped, the database itself will be dropped.<br><br>";

                foreach ($tables as $table) {
                    $result = mysqli_query($mysqli, "DROP TABLE IF EXISTS $table");
                    echo "Dropping table <strong>" . $table . "</strong> from database <strong>" . SQLDB . "</strong>... " . str_replace("<br>", "", ($result) ? $success : "(" . mysqli_errno($mysqli) . ") " . $fail) . "<br>";
                }

                $good = (mysqli_num_rows(mysqli_query($mysqli, "select '" . SQLDB . "' from information_schema.tables where table_schema='" . SQLDB . "'")) == 0) ? true : false;
                $result = ($good) ? "<span class='success'>YES</span>" : "<span class='fail'>NO</span>";
                echo "<br>Checking if database <strong>" . SQLDB . "</strong> is empty... " . $result . "<br>";
                if ($good) {
                    $result = mysqli_query($mysqli, "DROP DATABASE IF EXISTS " . SQLDB);
                    echo "Dropping database <strong>" . SQLDB ."</strong>... " . (($result) ? $success : $fail);
                }

            }
            echo "</div>";
        }
    } else { //Default usage, sets up the board.
        //Check PHP version.
        $tests["PHP version"] =
            [
                "current" => phpversion(),
                "valid" => version_compare(phpversion(), $min_php, '>='),
                "min" => $min_php
            ];

        //Check GD version.
        $gd_ver = (function_exists('gd_info')) ? preg_match("/(?:\d\.?)+/", gd_info()["GD Version"], $match) : 0;
        if (function_exists('gd_info')) $gd_ver = $match[0];
        $tests["GD version"] =
            [
                "current" => (function_exists("gd_info")) ? $gd_ver : 0,
                "valid" => (function_exists("gd_info")) ? version_compare($gd_ver, $min_gd, '>=') : 0,
                "min" => $min_gd
            ];

        //Check MySQL version.
        $out = ["current" => 0, "valid" => 0, "min" => $min_mysql];
        if (class_exists('mysqli')) {
            $mysqli = new mysqli(SQLHOST, SQLUSER, SQLPASS);

            if (mysqli_connect_errno()) {
                $log .= "Failed to connect to the MySQL server, version cannot be obtained. <strong>Error:</strong> " . mysqli_connect_errno() . "<br>";
                mysqli_close($mysqli);
            } else {
                $mysql_good = true;
                $mver = mysqli_get_server_info($mysqli);

                $out =
                    [
                        "current" => $mver,
                        "valid" => version_compare($mver, $min_mysql, '>='),
                        "min" => $min_mysql
                    ];
            }
        }
        $tests["MySQL version"] = $out;

        //Output results of tests.
        echo "<div class='box extra' id='tests'>";

        foreach ($tests as $key => $results) {
            $temp = "<strong>$key:</strong> ";
            $color = ($results['valid']) ? "green" : "red";
            $msg = ($results['valid']) ? "PASS" : "FAIL";

            $debug = $results['current'] . (($results['valid']) ? " >= " : " < ") . $results['min'];

            $temp .= "<span style='color:$color;font-weight:bold;'>$msg</span> ($debug)<br>";

            echo $temp;
        }

        echo "</div>";
        
        echo "<div class='box extra' id='dirs'>";
        //Create working directories.
        if (!$loaded['config']) {
            echo "Config was not loaded, cannot validate install files.";
        } else {
            $folders = [RES_DIR, IMG_DIR, THUMB_DIR];

            foreach ($folders as $dir) {
                $fdir = "<strong>$dir</strong>";

                if (!is_dir($dir)) {
                    echo "$fdir does not exist, creating... ";
                    $status = mkdir($dir);
                    echo ($status) ? $success : $fail;
                } else {
                    echo "$fdir already exists.<br>";
                }

                $perms = substr(sprintf('%o', fileperms($dir)), -4);

                if ($perms !== "0777") {
                    echo "Changing $fdir permissions from $perms to 0777... ";
                    $status = chmod($dir, 0777);
                    echo ($status) ? $success : $fail;
                } else {
                    echo "$fdir has the right permissions (0777).<br>";
                }

                clearstatcache();
            }
            
            if (!is_dir(CORE_DIR)) {
                echo "<strong>" . CORE_DIR . "</strong> does not exist or could not be located relative to $mydir. $fail";
            } else {
                echo "<strong>" . CORE_DIR . "</strong> exists.<br>";
            }
        }

        //Create working files.
        if (!$loaded['config']) {
            echo 'Config was not loaded, cannot create working files.';
        } else {
            echo "<br>";

            /*if (!defined(BOARDLIST) && BOARDLIST !== '') {
                $bl = '<strong>BOARDLIST</strong> (' . BOARDLIST . ')';
                $url = rawurlencode(BOARDLIST);

                if (file_exists(BOARDLIST)) {
                    echo "<a href='$url' target='_blank'>$bl</a> already exists, skipping.<br>";
                } else {
                    echo "Creating $bl... ";
                    $test = file_put_contents(BOARDLIST, "[<a href='/a' />a</a> / <a href='/b' />b</a> / <a href='/c' />c</a>]");
                    echo ($test > 0) ? "<a href='$url' target='_blank'>$success</a>" : $fail;
                }
            } else {
                echo "<strong>BOARDLIST</strong> was empty or undefined, skipping.<br>";
            }*/
        }
        }
        echo "</div>";

        //Create MySQL database and tables.
        echo "<div class='box extra' id='mysql'>";
        if (!$loaded['config']) {
            echo "Config was not loaded, cannot initialize MySQL data.";
        } else {
            if (!$mysql_good) {
                echo "There was a problem with MySQL, cannot initialize MySQL data.";
            } else {
                echo "These SQL queries are executed as <strong>" . SQLUSER . "</strong> on the SQL server <strong>" . SQLHOST . "</strong>.<br>";

                $db = SQLDB;
                //mysqli_query($mysqli, "DROP DATABASE `$db`");
                $has_db = mysqli_select_db($mysqli, $db);

                if (!$has_db) {
                    //Create database.

                    echo "<strong>$db</strong> database does not exist, creating... ";
                    $status = mysqli_query($mysqli, "CREATE DATABASE $db");
                    echo ($status) ? $success : $fail;

                    if (!$status) {
                        echo "Unable to create <strong>$db</strong> database (error: " . mysqli_errno($mysqli) . "), cannot proceed to initialize MySQL data.";
                    } else {
                        $has_db = true;
                    }
                } else {
                    echo "<strong>$db</strong> database already exists.<br>";
                }

                if ($has_db) {
                    mysqli_select_db($mysqli, $db);

                    //Create tables.
                    $tables = [
                        //SQLLOG => "primary key(no), no int not null auto_increment, now text, name text, email text, sub text, com text, host text, pwd text, media text, time int, sticky int, permasage int, locked int, last int, modified TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP, resto int, board text",
                        SQLLOG => "`no` int(11) NOT NULL AUTO_INCREMENT,  `now` text,  `name` text,  `email` text,  `sub` text,  `com` text,  `host` text,  `pwd` text,  `media` text,  `time` int(11) DEFAULT NULL,  `sticky` int(1) DEFAULT NULL,  `archived` int(1) DEFAULT NULL,  `permasage` int(1) DEFAULT NULL,  `locked` int(1) DEFAULT NULL,  `last` int(11) DEFAULT NULL,  `modified` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,  `resto` int(11) DEFAULT NULL,  `board` varchar(55),  `capcode` varchar(50) DEFAULT NULL,  `id` varchar(50) DEFAULT NULL,  `country` varchar(4) DEFAULT NULL,  `last_modified` int(25) NOT NULL,  `tripcode` varchar(100) DEFAULT NULL, PRIMARY KEY (`no`,`board`)",                     
                        SQLBANLOG => "board VARCHAR(20), global INT(1), name VARCHAR(200), host VARCHAR(50), com VARCHAR(3000), reason VARCHAR(1000), length INT(25), admin VARCHAR(100), placed INT(25) NOT NULL, PRIMARY KEY (board, placed)",
                        SQLMODSLOG => "user VARCHAR(25), password VARCHAR(250), public_salt VARCHAR(256), perms TEXT, PRIMARY KEY (user), UNIQUE KEY (user)",
                        SQLDELLOG => "admin VARCHAR(250), postno VARCHAR(20) PRIMARY KEY, action VARCHAR(25), board VARCHAR(250), name VARCHAR(50), sub VARCHAR(50), com VARCHAR(" . S_POSTLENGTH . ")", //Why does S_POSTLENGTH start with S_?
                        //SQLBANNOTES => "board VARCHAR(25), host VARCHAR(250), type VARCHAR(50), com VARCHAR(3100), reason VARCHAR(2000), admin VARCHAR(250), PRIMARY KEY (host, com), UNIQUE KEY (com)",
                        SQLMEDIA => "primary key(no), no int not null auto_increment, parent int, resto int, filename text, localname text, localthumbname text, filesize int, extension text, width int, height int, thumb_width int, thumb_height int, hash text, board text",
                        SQLREPORTS => "`active` int(1) NOT NULL,  `no` varchar(25) NOT NULL DEFAULT '',  `board` varchar(250) NOT NULL DEFAULT '',  `count` int(4) NOT NULL,  `rule_count` int(4) DEFAULT NULL,  `spam_count` int(4) DEFAULT NULL,  `illegal_count` int(4) DEFAULT NULL, `cp_count` int(4) DEFAULT NULL,  `global` int(1) NOT NULL,`post` longtext,  `note` longtext NOT NULL,  `ip` varchar(250) NOT NULL DEFAULT '',  `reported` int(12) NOT NULL,  PRIMARY KEY (`no`,`board`,`reported`)",
                        SQLRESOURCES => "`type` varchar(50) NOT NULL, `timestamp` bigint(20) NOT NULL, `message` text NOT NULL, PRIMARY KEY (`timestamp`), KEY `type` (`type`)",
                        "rebuildqueue" => "board char(4) NOT NULL, no int(11) NOT NULL, ownedby int(11) NOT NULL default '0', ts timestamp NOT NULL default CURRENT_TIMESTAMP on update CURRENT_TIMESTAMP, PRIMARY KEY (board,no,ownedby)"
                    ];

                    foreach ($tables as $table => $query) {
                        $sql = "SHOW TABLES LIKE '$table'";
                        $q = mysqli_query($mysqli, $sql);
                        $exists = (mysqli_num_rows($q) > 0) ? true : false;

                        if ($exists) {
                            echo "<strong>$table</strong> table already exists.<br>";
                        } else {
                            echo "<strong>$table</strong> table does not exist, creating... ";
                            $status = mysqli_query($mysqli, "CREATE TABLE $table ($query)");
                            echo ($status) ? $success : "(" . mysqli_errno($mysqli) . ") " . $fail;
                        }

                        mysqli_free_result($q);
                    }

                    if ($loaded['crypt']) {
                        $crypt = new SaguaroCryptLegacy;
                        echo "<br>Creating default accounts:<br>";

                        foreach ($defaults as $account) {
                            $password = $crypt->generate_hash($account['pass']); //Generate password hash and public salt with SaguaroCrypt.

                            //$pass = ($autolock === true) ? "<span class='spoiler'>" . $account['pass'] . "</span>" : "";
                            echo "<strong>" . $account['name'] . "</strong> $pass (<span class='info' title='Privileges'>" . $account['_flags'] . "</span>) ";

                            $permArr = ['_flags' => $account['_flags'], '_boards' => $account['_boards']];
                            $permissions = json_encode($permArr);
                            $status = mysqli_query($mysqli, "INSERT INTO " . SQLMODSLOG . " (user, password, public_salt, perms) VALUES ('{$account['name']}', '{$password['hash']}', '{$password['public_salt']}', '{$permissions}')");
                            $unfail = (mysqli_errno($mysqli) == 1062) ? "<span class='fail'>ALREADY EXISTS</span><br>" : $fail;
                            echo ($status) ? $success : "(" . mysqli_errno($mysqli) . ") " . $unfail;
                        }
                    } else {
                        echo "<br><strong class='info' title='" . CORE_DIR ."/crypt/legacy.php'>SaguaroCrypt</strong> was not loaded, cannot create default accounts. <span class='info' title='SaguaroCrypt is used to encrypt passwords in the database.' style='font-style:italic;'>Why?</span>";
                    }

                }
            }

            mysqli_close($mysqli);
        }

        echo "</div>";

    //Additional edge-case settings we can't easily change.
    $extra = ['short_open_tag', 'file_uploads', 'max_file_uploads', 'upload_max_filesize', 'upload_tmp_dir', 'post_max_size', 'memory_limit'];

    echo "<div class='box'>" .
        "<center><strong>PHP Core Directives</strong></center><table>";

    foreach ($extra as $val) {
        $valc = str_replace("_", "-", $val);
        $right = ini_get("$val");

        if ($val == 'upload_max_filesize') {
            $right .= " (Config MAX_KB: " . MAX_KB . "KB)";
        }
        echo "<tr><td><strong><a href='https://php.net/manual/en/ini.core.php#ini.$valc' target='_blank'>$val</a></strong></td><td>" . $right . "</td></tr>";
    }

    echo "</table></div>";

    //Follow-up links
    echo "<div class='box'>
        <center><!-- <strong>some title</strong><br> -->
        <a href='imgboard.php' target='_blank'>imgboard.php</a> | <a href='admin.php' target='_blank'>admin.php</a>
        </center></div>";

    //Additional resources.
    echo "<div class='box'>" .
        "<center><strong>Additional Resources</strong></center>
            <a href='https://php.net/manual/en/ini.core.php' target='_blank'>PHP Core Directives</a><br>
            MySQL error codes: <ul><li>
                <a href='https://search.oracle.com/search/search?q=Server+Error+codes&group=MySQL' target='_blank'>Server</a> (1000-1999)</li><li>
                <a href='https://search.oracle.com/search/search?q=Client+Error+Codes&group=MySQL' target='_blank'>Client</a> (2000+)</li></ul>" .
        "</div>";
}
?>