setup.php

   1 <?php
   2 //required for normal operation because of recent changes in PHP:
   3 extract($_GET);
   4 extract($_POST);
   5 //turn off PHP compatibility warnings
   6 ini_set("session.bug_compat_warn","off");
   7
   8 $url = "";
   9 $upgrade = 0;
  10 $state = $_POST["state"];
  11
  12 //If having problems with file and directory permission
  13 // checking, then can be manually disabled here.
  14 $checkPermissions = "TRUE";
  15
  16 //Below section is only for variables that require a path.
  17 // The $manualPath variable can be edited by 3rd party
  18 // installation scripts to manually set path. (this will
  19 // allow straightforward use of this script by 3rd party
  20 // installers)
  21 $manualPath = "";
  22 $dumpfile = $manualPath."sql/database.sql";
  23 $icd9 = $manualPath."sql/icd9.sql";
  24 $conffile = $manualPath."library/sqlconf.php";
  25 $conffile2 = $manualPath."interface/globals.php";
  26 $gaclConfigFile1 = $manualPath."gacl/gacl.ini.php";
  27 $gaclConfigFile2 = $manualPath."gacl/gacl.class.php";
  28 $docsDirectory = $manualPath."documents";
  29 $billingDirectory = $manualPath."edi";
  30 $billingDirectory2 = $manualPath."era";
  31 $billingLogDirectory = $manualPath."library/freeb";
  32 $lettersDirectory = $manualPath."custom/letter_templates";
  33 $gaclWritableDirectory = $manualPath."gacl/admin/templates_c";
  34 $requiredDirectory1 = $manualPath."interface/main/calendar/modules/PostCalendar/pntemplates/compiled";
  35 $requiredDirectory2 = $manualPath."interface/main/calendar/modules/PostCalendar/pntemplates/cache";
  36 $gaclSetupScript1 = $manualPath."gacl/setup.php";
  37 $gaclSetupScript2 = $manualPath."acl_setup.php";
  38
  39 //These are files and dir checked before install for
  40 // correct permissions.
  41 $writableFileList = array($conffile, $conffile2, $gaclConfigFile1, $gaclConfigFile2);
  42 $writableDirList = array($docsDirectory, $billingDirectory, $billingDirectory2, $billingLogDirectory, $lettersDirectory, $gaclWritableDirectory, $requiredDirectory1, $requiredDirectory2);
  43
  44
  45 include_once($conffile);
  46 ?>
  47 <HTML>
  48 <HEAD>
  49 <TITLE>OpenEMR Setup Tool</TITLE>
  50 <LINK REL=STYLESHEET HREF="interface/themes/style_blue.css">
  51 </HEAD>
  52 <BODY>
  53
  54 <span class="title">OpenEMR Setup</span>
  55 <br><br>
  56 <span class="text">
  57
  58 <?php
  59  if (strtolower(ini_get('register_globals')) != 'off' && (bool) ini_get('register_globals')) {
  60   echo "It appears that you have register_globals enabled in your php.ini\n" .
  61    "configuration file.  This causes unacceptable security risks.  You must\n" .
  62    "turn it off before continuing with installation.\n";
  63   exit();
  64  }
  65 ?>
  66
  67 <?php
  68  if ($state == 7) {
  69 ?>
  70
  71 <p>Congratulations! OpenEMR is now installed.</p>
  72
  73 <ul>
  74  <li>If applicable, please restore secure permissions on the four configuration files: /openemr/interface/globals.php,
  75      /openemr/library/sqlconf.php, /openemr/gacl/gacl.ini.php, and /openemr/gacl/gacl.class.php files.
  76      In linux, recommend changing file permissions with the 'chmod 644 filename' command.</li>
  77  <li>Access controls (php-GACL) are installed for fine-grained security, and can be administered in
  78      OpenEMR's admin->acl menu.</li>
  79  <li>Reading openemr/includes/config.php and openemr/interface/globals.php is a good idea. These files
  80      contain many options to choose from including themes.</li>
  81  <li>There's much information and many extra tools bundled within the OpenEMR installation directory.
  82      Please refer to openemr/Documentation. Many forms and other useful scripts can be found at openemr/contrib.</li>
  83  <li>To ensure a consistent look and feel through out the application using
  84      <a href='http://www.mozilla.org/products/firefox/'>Firefox</a> is recommended.</li>
  85  <li>The OpenEMR project home page and wiki can be found at <a href = "http://www.oemr.org" target="_blank">http://www.oemr.org</a></li>
  86  <li>The OpenEMR forums can be found at <a href = "http://sourceforge.net/projects/openemr" target="_blank">http://sourceforge.net/projects/openemr</a></li>
  87  <li>We pursue grants to help fund the future development of OpenEMR.  To apply for these grants, we need to estimate how many times this program is installed and how many practices are evaluating or using this software.  It would be awesome if you would email us at <a href="mailto:drbowen@charter.net">drbowen@charter.net</a> if you have installed this software. The more details about your plans with this software, the better, but even just sending us an email stating you just installed it is very helpful.</li>
  88 </ul>
  89 <p>
  90 We recommend you print these instructions for future reference.
  91 </p>
  92 <p>
  93 <b>The initial OpenEMR user is "<?php echo $iuser; ?>" and the password is "pass".</b>
  94 You should change this password!
  95 </p>
  96 <p>
  97 If you edited the PHP or Apache configuration files during this installation process, then we recommend you restart your Apache server before following below OpenEMR link.
  98 </p>
  99 <p>
 100  <a href='./'>Click here to start using OpenEMR. </a>
 101 </p>
 102
 103 <?php
 104   exit();
 105  }
 106 ?>
 107
 108 <?php
 109
 110         $server = $_POST["server"];
 111         $port = $_POST["port"];
 112         $dbname = $_POST["dbname"];
 113         $root = $_POST["root"];
 114         $login = $_POST["login"];
 115         $pass = $_POST["pass"];
 116         $loginhost = $_POST["loginhost"];
 117         $rootpass = $_POST["rootpass"];
 118         $iuser = $_POST["iuser"];
 119         $iuname = $_POST["iuname"];
 120         $igroup = $_POST["igroup"];
 121         $openemrBasePath = $_POST["openemrBasePath"];
 122         $openemrWebPath = $_POST["openemrWebPath"];
 123         //END POST VARIABLES
 124
 125
 126 if (($config == 1) && ($state < 4)) {
 127         echo "OpenEMR has already been installed.  If you wish to force re-installation, then edit $conffile(change the 'config' variable to 0), and re-run this script.<br>\n";
 128 }
 129 else {
 130 switch ($state) {
 131
 132         case 1:
 133 echo "<b>Step $state</b><br><br>\n";
 134 echo "Now I need to know whether you want me to create the database on my own or if you have already created the database for me to use.  For me to create the database, you will need to supply the MySQL root password.\n
 135 <span class='title'> <br />NOTE: clicking on \"Continue\" may delete or cause damage to data on your system. Before you continue please backup your data.</span>
 136 <br><br>\n
 137 <FORM METHOD='POST'>\n
 138 <INPUT TYPE='HIDDEN' NAME='state' VALUE='2'>\n
 139 <INPUT TYPE='RADIO' NAME='inst' VALUE='1' checked>Have setup create the database<br>\n
 140 <INPUT TYPE='RADIO' NAME='inst' VALUE='2'>I have already created the database<br>\n
 141 <br>\n
 142 <INPUT TYPE='SUBMIT' VALUE='Continue'><br></FORM><br>\n";
 143 break;
 144
 145         case 2:
 146 echo "<b>Step $state</b><br><br>\n";
 147 echo "Now you need to supply the MySQL server information and path information. Detailed instructions on each item can be found in the <a href='INSTALL' target='_blank'><span STYLE='text-decoration: underline;'>'INSTALL'</span></a> manual file.
 148 <br><br>\n
 149 <FORM METHOD='POST'>
 150 <INPUT TYPE='HIDDEN' NAME='state' VALUE='3'>
 151 <INPUT TYPE='HIDDEN' NAME='inst' VALUE='$inst'>
 152 <TABLE>\n
 153 <TR VALIGN='TOP'><TD COLSPAN=2><font color='red'>MYSQL SERVER:</font></TD></TR>
 154 <TR VALIGN='TOP'><TD><span class='text'>Server Host: </span></TD><TD><INPUT TYPE='TEXT' VALUE='localhost' NAME='server' SIZE='30'></TD><TD><span class='text'>(If you run MySQL and Apache/PHP on the same computer, then leave this as 'localhost'. If they are on separate computers, then enter the IP address of the computer running MySQL.)</span><br></TD></TR>
 155 <TR VALIGN='TOP'><TD><span class='text'>Server Port: </span></TD><TD><INPUT TYPE='TEXT' VALUE='3306' NAME='port' SIZE='30'></TD><TD><span class='text'>(This is the MySQL port. The default port for MySQL is 3306.)</span><br></TD></TR>
 156 <TR VALIGN='TOP'><TD><span class='text'>Database Name: </span></TD><TD><INPUT TYPE='TEXT' VALUE='openemr' NAME='dbname' SIZE='30'></TD><TD><span class='text'>(This is the name of the OpenEMR database in MySQL - 'openemr' is the recommended)</span><br></TD></TR>
 157 <TR VALIGN='TOP'><TD><span class='text'>Login Name: </span></TD><TD><INPUT TYPE='TEXT' VALUE='openemr' NAME='login' SIZE='30'></TD><TD><span class='text'>(This is the name of the OpenEMR login name in MySQL - 'openemr' is the recommended)</span><br></TD></TR>
 158 <TR VALIGN='TOP'><TD><span class='text'>Password: </span></TD><TD><INPUT TYPE='PASSWORD' VALUE='' NAME='pass' SIZE='30'></TD><TD><span class='text'>(This is the Login Password for when PHP accesses MySQL - it should be at least 8 characters long and composed of both numbers and letters)</span><br></TD></TR>\n";
 159 if ($inst != 2) {
 160 echo "<TR VALIGN='TOP'><TD><span class='text'>Name for Root Account: </span></TD><TD><INPUT TYPE='TEXT' VALUE='root' NAME='root' SIZE='30'></TD><TD><span class='text'>(This is name for MySQL root account. For localhost, it is usually ok to leave it 'root'.)</span><br></TD></TR>
 161 <TR VALIGN='TOP'><TD><span class='text'>Root Pass: </span></TD><TD><INPUT TYPE='PASSWORD' VALUE='' NAME='rootpass' SIZE='30'></TD><TD><span class='text'>(This is your MySQL root password. For localhost, it is usually ok to leave it blank.)</span><br></TD></TR>\n";
 162 echo "<TR VALIGN='TOP'><TD><span class='text'>User Hostname: </span></TD><TD><INPUT TYPE='TEXT' VALUE='localhost' NAME='loginhost' SIZE='30'></TD><TD><span class='text'>(If you run Apache/PHP and MySQL on the same computer, then leave this as 'localhost'. If they are on separate computers, then enter the IP address of the computer running Apache/PHP.)</span><br></TD></TR>";
 163 }
 164 echo "<TR VALIGN='TOP'><TD>&nbsp;</TD></TR>";
 165 echo "<TR VALIGN='TOP'><TD COLSPAN=2><font color='red'>OPENEMR USER:</font></TD></TR>";
 166 echo "<TR VALIGN='TOP'><TD><span class='text'>Initial User:</span></TD><TD><INPUT SIZE='30' TYPE='TEXT' NAME='iuser' VALUE='admin'></TD><TD><span class='text'>(This is the login name of user that will be created for you. Limit this to one word.)</span></TD></TR>
 167 <TR VALIGN='TOP'><TD><span class='text'>Initial User's Name:</span></TD><TD><INPUT SIZE='30' TYPE='TEXT' NAME='iuname' VALUE='Administrator'></TD><TD><span class='text'>(This is the real name of the 'initial user'.)</span></TD></TR>
 168 <TR VALIGN='TOP'><TD><span class='text'>Initial Group:</span></TD><TD><INPUT SIZE='30' TYPE='TEXT' NAME='igroup' VALUE='Default'></TD><TD><span class='text'>(This is the group that will be created for your users.  This should be the name of your practice.)</span></TD></TR>
 169 ";
 170 echo "<TR VALIGN='TOP'><TD>&nbsp;</TD></TR>";
 171 echo "<TR VALIGN='TOP'><TD COLSPAN=2><font color='red'>OPENEMR PATHS:</font></TD></TR>";
 172 echo "<TR VALIGN='TOP'><TD COLSPAN=3></TD></TR>
 173 <TR VALIGN='TOP'><TD><span class='text'>Absolute Path:</span></TD><TD><INPUT SIZE='30' TYPE='TEXT' NAME='openemrBasePath' VALUE='".realpath('./')."'></TD><TD><span class='text'>(This is the full absolute directory path to openemr. The value here is automatically created, and should not need to be modified. Do not worry about direction of slashes; they will be automatically corrected.)</span></TD></TR>
 174 <TR VALIGN='TOP'><TD><span class='text'>Relative HTML Path:</span></TD><TD><INPUT SIZE='30' TYPE='TEXT' NAME='openemrWebPath' VALUE='/openemr'></TD><TD><span class='text'>(Set this to the relative html path, ie. what you would type into the web browser after the server address to get to OpenEMR. For example, if you type 'http://127.0.0.1/clinic/openemr/ to load OpenEMR, set this to '/clinic/openemr' without the trailing slash. Do not worry about direction of slashes; they will be automatically corrected.)</span></TD></TR>
 175 ";
 176 echo "</TABLE>
 177 <br>
 178 <INPUT TYPE='SUBMIT' VALUE='Continue'><br></FORM><br>";
 179
 180 break;
 181
 182
 183         case 3:
 184
 185         if ($login == "" || !isset($login)) {
 186                 echo "ERROR. Please pick a proper 'Login Name'.<br>\n";
 187                 echo "Click Back in browser to re-enter.<br>\n";
 188                 break;
 189         }
 190         if (strpos($iuser, " ")) {
 191                 echo "ERROR. The 'Initial User' field can only contain one word and no spaces.<br>\n";
 192                 echo "Click Back in browser to re-enter.<br>\n";
 193                 break;
 194         }
 195         if ($pass == "" || !isset($pass)) {
 196                 echo "ERROR. Please pick a proper 'Password'.<br>\n";
 197                 echo "Click Back in browser to re-enter.<br>\n";
 198                 break;
 199         }
 200
 201 echo "<b>Step $state</b><br><br>\n";
 202 echo "Configuring OpenEMR...<br><br>\n";
 203
 204
 205 if ($inst != 2) {
 206         echo "Connecting to MySQL Server...\n";
 207         flush();
 208         if ($server == "localhost")
 209                 $dbh = mysql_connect("$server","$root","$rootpass");
 210         else
 211                 $dbh = mysql_connect("$server:$port","$root","$rootpass");
 212         if ($dbh == FALSE) {
 213                 echo "ERROR.  Check your login credentials.\n";
 214                 echo "<p>".mysql_error()." (#".mysql_errno().")\n";
 215                 break;
 216         }
 217         else
 218                 echo "OK.<br>\n";
 219         echo "Creating database...\n";
 220         flush();
 221         if (mysql_query("create database $dbname",$dbh) == FALSE) {
 222                 echo "ERROR.  Check your login credentials.\n";
 223                 echo "<p>".mysql_error()." (#".mysql_errno().")\n";
 224                 break;
 225         }
 226         else
 227                 echo "OK.<br>\n";
 228         echo "Creating user with permissions for database...\n";
 229         flush();
 230         if (mysql_query("GRANT ALL PRIVILEGES ON $dbname.* TO '$login'@'$loginhost' IDENTIFIED BY '$pass'",$dbh) == FALSE) {
 231                 echo "ERROR when granting privileges to the specified user.\n";
 232       echo "<p>".mysql_error()." (#".mysql_errno().")\n";
 233                 echo "ERROR.\n";
 234                 break;
 235         }
 236         else
 237                 echo "OK.<br>\n";
 238         echo "Reconnecting as new user...\n";
 239         mysql_close($dbh);
 240 }
 241 else
 242         echo "Connecting to MySQL Server...\n";
 243
 244 if ($server == "localhost")
 245         $dbh = mysql_connect("$server","$login","$pass");
 246 else
 247         $dbh = mysql_connect("$server:$port","$login","$pass");
 248
 249 if ($dbh == FALSE) {
 250         echo "ERROR.  Check your login credentials.\n";
 251         echo "<p>".mysql_error()." (#".mysql_errno().")\n";
 252         break;
 253 }
 254 else
 255         echo "OK.<br>\n";
 256 echo "Opening database...";
 257 flush();
 258 if (mysql_select_db("$dbname",$dbh) == FALSE) {
 259         echo "ERROR.  Check your login credentials.\n";
 260         echo "<p>".mysql_error()." (#".mysql_errno().")\n";
 261         break;
 262 }
 263 else
 264         echo "OK.<br>\n";
 265         flush();
 266 if ($upgrade != 1) {
 267         echo "Creating initial tables...\n";
 268         mysql_query("USE $dbname",$dbh);
 269         flush();
 270         $fd = fopen($dumpfile, 'r');
 271         if ($fd == FALSE) {
 272                 echo "ERROR.  Could not open dumpfile '$dumpfile'.\n";
 273                 flush();
 274                 break;
 275         }
 276         $query = "";
 277         $line = "";
 278         while (!feof ($fd)){
 279                 $line = fgets($fd,1024);
 280                 $line = rtrim($line);
 281                 if (substr($line,0,2) == "--") // Kill comments
 282                         continue;
 283                 if (substr($line,0,1) == "#") // Kill comments
 284                         continue;
 285                 if ($line == "")
 286                         continue;
 287                 $query = $query.$line;          // Check for full query
 288                 $chr = substr($query,strlen($query)-1,1);
 289                 if ($chr == ";") { // valid query, execute
 290                         $query = rtrim($query,";");
 291                         mysql_query("$query",$dbh);
 292                         $query = "";
 293                 }
 294         }
 295         echo "OK<br>\n";
 296         fclose($fd);
 297         flush();
 298         echo "Adding Initial User...\n";
 299         flush();
 300         //echo "INSERT INTO groups VALUES (1,'$igroup','$iuser')<br>\n";
 301         if (mysql_query("INSERT INTO groups (id, name, user) VALUES (1,'$igroup','$iuser')") == FALSE) {
 302                 echo "ERROR.  Could not run queries.\n";
 303                 echo "<p>".mysql_error()." (#".mysql_errno().")\n";
 304                 flush();
 305                 break;
 306         }
 307         if (mysql_query("INSERT INTO users (id, username, password, authorized, lname,fname) VALUES (1,'$iuser','1a1dc91c907325c69271ddf0c944bc72',1,'$iuname','')") == FALSE) {
 308                 echo "ERROR.  Could not run queries.\n";
 309                 echo "<p>".mysql_error()." (#".mysql_errno().")\n";
 310                 flush();
 311                 break;
 312         }
 313         echo "OK<br>\n";
 314         flush();
 315 /*      echo "Inserting ICD-9-CM Codes into Database...\n";
 316         flush();
 317         $fd = fopen($icd9, 'r');
 318         if ($fd == FALSE) {
 319                 echo "ERROR.  Could not open dumpfile.\n";
 320                                          echo "<p>".mysql_error()." (#".mysql_errno().")\n";
 321                 flush();
 322                 break;
 323         }
 324         $query = "";
 325         $line = "";
 326         while (!feof ($fd)){
 327                 $line = fgets($fd,1024);
 328                 $line = rtrim($line);
 329                 if (substr($line,0,2) == "--") // Kill comments
 330                         continue;
 331                 if (substr($line,0,1) == "#") // Kill comments
 332                         continue;
 333                 if ($line == "")
 334                         continue;
 335                 $query = $query.$line;          // Check for full query
 336                 $chr = substr($query,strlen($query)-1,1);
 337                 if ($chr == ";") { // valid query, execute
 338                         $query = rtrim($query,";");
 339                         mysql_query("$query",$dbh);
 340                         $query = "";
 341                 }
 342         }
 343         echo "OK\n";
 344         fclose($fd);*/
 345         flush();
 346 }
 347
 348 echo "<br>Writing SQL Configuration...<br>";
 349 @touch($conffile); // php bug
 350 $fd = @fopen($conffile, 'w');
 351 $string = "<?php
 352 //  OpenEMR
 353 //  MySQL Config
 354 //  Referenced from sql.inc
 355
 356 ";
 357
 358 $it_died = 0;   //fmg: variable keeps running track of any errors
 359
 360 fwrite($fd,$string) or $it_died++;
 361 fwrite($fd,"\$host\t= '$server';\n") or $it_died++;
 362 fwrite($fd,"\$port\t= '$port';\n") or $it_died++;
 363 fwrite($fd,"\$login\t= '$login';\n") or $it_died++;
 364 fwrite($fd,"\$pass\t= '$pass';\n") or $it_died++;
 365 fwrite($fd,"\$dbase\t= '$dbname';\n") or $it_died++;
 366
 367
 368 $string = '
 369
 370 $sqlconf = array();
 371 $sqlconf["host"]= $host;
 372 $sqlconf["port"] = $port;
 373 $sqlconf["login"] = $login;
 374 $sqlconf["pass"] = $pass;
 375 $sqlconf["dbase"] = $dbase;
 376 //////////////////////////
 377 //////////////////////////
 378 //////////////////////////
 379 //////DO NOT TOUCH THIS///
 380 $config = 1; /////////////
 381 //////////////////////////
 382 //////////////////////////
 383 //////////////////////////
 384 ?>
 385 ';
 386 ?><?php // done just for coloring
 387
 388 fwrite($fd,$string) or $it_died++;
 389
 390 //it's rather irresponsible to not report errors when writing this file.
 391 if ($it_died != 0) {
 392         echo "ERROR. Couldn't write $it_died lines to config file '$conffile'.\n";
 393         flush();
 394         break;
 395 }
 396 fclose($fd);
 397
 398 echo "Successfully wrote SQL configuration.<BR><br>";
 399
 400 echo "Writing OpenEMR webserver paths to config file...<br>";
 401 //edit interface/globals.php
 402 //first, ensure slashes are in correct direction (windows specific fix)
 403 $openemrBasePath = str_replace('\\\\', '/', $openemrBasePath);
 404 $openemrBasePath = str_replace('\\', '/', $openemrBasePath);
 405 $openemrWebPath = str_replace('\\\\', '/', $openemrWebPath);
 406 $openemrWebPath = str_replace('\\', '/', $openemrWebPath);
 407 //second, edit file
 408 $data = file($conffile2) or die("Could not read ".$conffile2." file.");
 409 $finalData = "";
 410 $isCount = 0;
 411 foreach ($data as $line) {
 412         $isHit = 0;
 413         if ((strpos($line,"\$webserver_root = \"")) === false) {
 414         }
 415         else {
 416                 $isHit = 1;
 417                 $isCount += 1;
 418                 $finalData .= "\$webserver_root = \"$openemrBasePath\";\n";
 419         }
 420         if ((strpos($line,"\$web_root = \"")) === false) {
 421         }
 422         else {
 423                 $isHit = 1;
 424                 $isCount += 1;
 425                 $finalData .= "\$web_root = \"$openemrWebPath\";\n";
 426         }
 427         if (!$isHit) {
 428                 $finalData .= $line;
 429         }
 430 }
 431 $fd = @fopen($conffile2, 'w') or die("Could not open ".$conffile2." file.");
 432 fwrite($fd, $finalData);
 433 fclose($fd);
 434 if ($isCount == 2) {
 435         echo "Successfully wrote OpenEMR webserver paths to config file<br><br>";
 436 }
 437 else {
 438         echo "<FONT COLOR='red'>ERROR</FONT> writing openemr webserver root paths to config file ($conffile2). ($isCount)<br><br>\n";
 439 }
 440
 441 echo "\n<br>Next step will install and configure access controls (php-GACL).<br>\n";
 442
 443 echo "
 444 <FORM METHOD='POST'>\n
 445 <INPUT TYPE='HIDDEN' NAME='state' VALUE='4'>
 446 <INPUT TYPE='HIDDEN' NAME='server' VALUE='$server'>
 447 <INPUT TYPE='HIDDEN' NAME='dbname' VALUE='$dbname'>
 448 <INPUT TYPE='HIDDEN' NAME='port' VALUE='$port'>
 449 <INPUT TYPE='HIDDEN' NAME='login' VALUE='$login'>
 450 <INPUT TYPE='HIDDEN' NAME='pass' VALUE='$pass'>
 451 <INPUT TYPE='HIDDEN' NAME='iuser' VALUE='$iuser'>
 452 <INPUT TYPE='HIDDEN' NAME='iuname' VALUE='$iuname'>
 453 <br>\n
 454 <INPUT TYPE='SUBMIT' VALUE='Continue'><br></FORM><br>\n";
 455
 456
 457 break;
 458
 459         case 4:
 460 echo "<b>Step $state</b><br><br>\n";
 461 echo "Installing and Configuring Access Controls (php-GACL)...<br><br>";
 462
 463 //first, edit two gacl config files
 464 echo "Writing php-GACL configuration settings to config files...<br>";
 465 // edit gacl.ini.php
 466 $data = file($gaclConfigFile1) or die("Could not read ".$gaclConfigFile1." file.");
 467 $finalData = "";
 468 foreach ($data as $line) {
 469         $isHit = 0;
 470         if ((strpos($line,"db_host")) === false) {
 471         }
 472         else {
 473                 $isHit = 1;
 474                 if ($server == "localhost") {
 475                     $finalData .= "db_host = \"${server}\"\n";
 476                 }
 477                 else {
 478                     $finalData .= "db_host = \"${server}:${port}\"\n";
 479                 }
 480         }
 481         if ((strpos($line,"db_user")) === false) {
 482         }
 483         else {
 484                 $isHit = 1;
 485                 $finalData .= "db_user = \"${login}\"\n";
 486         }
 487         if ((strpos($line,"db_password")) === false) {
 488         }
 489         else {
 490                 $isHit = 1;
 491                 $finalData .= "db_password = \"${pass}\"\n";
 492         }
 493         if ((strpos($line,"db_name")) === false) {
 494         }
 495         else {
 496                 $isHit = 1;
 497                 $finalData .= "db_name = \"${dbname}\"\n";
 498         }
 499         if (!$isHit) {
 500                 $finalData .= $line;
 501         }
 502 }
 503 $fd = @fopen($gaclConfigFile1, 'w') or die("Could not open ".$gaclConfigFile1." file.");
 504 fwrite($fd, $finalData);
 505 fclose($fd);
 506
 507 // edit gacl.class.php
 508 $data = file($gaclConfigFile2) or die("Could not read ".$gaclConfigFile2." file.");
 509 $finalData = "";
 510 foreach ($data as $line) {
 511         $isHit = 0;
 512         if ((strpos($line,"var \$_db_host = ")) === false) {
 513         }
 514         else {
 515                 $isHit = 1;
 516                 if ($server == "localhost") {
 517                     $finalData .= "var \$_db_host = '$server';\n";
 518                 }
 519                 else {
 520                     $finalData .= "var \$_db_host = '$server:$port';\n";
 521                 }
 522         }
 523         if ((strpos($line,"var \$_db_user = ")) === false) {
 524         }
 525         else {
 526                 $isHit = 1;
 527                 $finalData .= "var \$_db_user = '$login';\n";
 528         }
 529         if ((strpos($line,"var \$_db_password = ")) === false) {
 530         }
 531         else {
 532                 $isHit = 1;
 533                 $finalData .= "var \$_db_password = '$pass';\n";
 534         }
 535         if ((strpos($line,"var \$_db_name = ")) === false) {
 536         }
 537         else {
 538                 $isHit = 1;
 539                 $finalData .= "var \$_db_name = '$dbname';\n";
 540         }
 541         if (!$isHit) {
 542                 $finalData .= $line;
 543         }
 544 }
 545 $fd = @fopen($gaclConfigFile2, 'w') or die("Could not open ".$gaclConfigFile2." file.");
 546 fwrite($fd, $finalData);
 547 fclose($fd);
 548 echo "Finished writing php-GACL configuration settings to config files.<br><br>";
 549
 550 //second, run gacl config scripts
 551 require $gaclSetupScript1;
 552 require $gaclSetupScript2;
 553 echo "<br>";
 554
 555 //third, give the administrator user admin priviledges
 556 $groupArray = array("Administrators");
 557 set_user_aro($groupArray,$iuser,$iuname,"","");
 558 echo "Gave the '$iuser' user (password is 'pass') administrator access.<br><br>";
 559
 560 echo "Done installing and configuring access controls (php-GACL).<br>";
 561 echo "Next step will configure PHP.";
 562
 563 echo "<br><FORM METHOD='POST'>\n
 564 <INPUT TYPE='HIDDEN' NAME='state' VALUE='5'>\n
 565 <INPUT TYPE='HIDDEN' NAME='iuser' VALUE='$iuser'>\n
 566 <br>\n
 567 <INPUT TYPE='SUBMIT' VALUE='Continue'><br></FORM><br>\n";
 568
 569 break;
 570
 571         case 5:
 572 echo "<b>Step $state</b><br><br>\n";
 573 echo "Configuration of PHP...<br><br>\n";
 574 echo "We recommend making the following changes to your PHP installation, which can normally be done by editing the php.ini configuration file:\n";
 575 echo "<ul>";
 576 $gotFileFlag = 0;
 577 if (version_compare(PHP_VERSION, '5.2.4', '>=')) {
 578     $phpINIfile = php_ini_loaded_file();
 579     if ($phpINIfile) {
 580         echo "<li><font color='green'>Your php.ini file can be found at ".$phpINIfile."</font></li>\n";
 581         $gotFileFlag = 1;
 582     }
 583 }
 584 echo "<li>To ensure proper functioning of OpenEMR you must make sure that settings in php.ini file include  \"short_open_tag = On\", \"display_errors = Off\", \"register_globals = Off\", \"magic_quotes_gpc = On\", \"max_execution_time\" set to at least 60, \"max_input_time\" set to at least 90, and \"memory_limit\" set to at least \"128M\".</li>\n";
 585 echo "<li>In order to take full advantage of the patient documents capability you must make sure that settings in php.ini file include \"file_uploads = On\", that \"upload_max_filesize\" is appropriate for your use and that \"upload_tmp_dir\" is set to a correct value that will work on your system.</li>\n";
 586 if (!$gotFileFlag) {
 587     echo "<li>If you are having difficulty finding your php.ini file, then refer to the <a href='INSTALL' target='_blank'><span STYLE='text-decoration: underline;'>'INSTALL'</span></a> manual for suggestions.</li>\n";
 588 }
 589 echo "</ul>";
 590
 591 echo "<br>We recommend you print these instructions for future reference.<br><br>";
 592 echo "Next step will configure Apache web server.";
 593
 594 echo "<br><FORM METHOD='POST'>\n
 595 <INPUT TYPE='HIDDEN' NAME='state' VALUE='6'>\n
 596 <INPUT TYPE='HIDDEN' NAME='iuser' VALUE='$iuser'>\n
 597 <br>\n
 598 <INPUT TYPE='SUBMIT' VALUE='Continue'><br></FORM><br>\n";
 599
 600 break;
 601
 602        case 6:
 603 echo "<b>Step $state</b><br><br>\n";
 604 echo "Configuration of Apache web server...<br><br>\n";
 605 echo "The \"".realpath($docsDirectory)."\", \"".realpath($billingDirectory)."\" and \"".realpath($billingDirectory2)."\" directories contain patient information, and
 606 it is important to secure these directories. This can be done by placing pertinent .htaccess
 607 files in these directories or by pasting the below to end of your apache configuration file:<br>
 608 &nbsp;&nbsp;&lt;Directory ".realpath($docsDirectory)."&gt;<br>
 609 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;order deny,allow<br>
 610 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Deny from all<br>
 611 &nbsp;&nbsp;&lt;/Directory&gt;<br>
 612 &nbsp;&nbsp;&lt;Directory ".realpath($billingDirectory)."&gt;<br>
 613 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;order deny,allow<br>
 614 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Deny from all<br>
 615 &nbsp;&nbsp;&lt;/Directory&gt;<br>
 616 &nbsp;&nbsp;&lt;Directory ".realpath($billingDirectory2)."&gt;<br>
 617 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;order deny,allow<br>
 618 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Deny from all<br>
 619 &nbsp;&nbsp;&lt;/Directory&gt;<br><br>";
 620
 621 echo "If you are having difficulty finding your apache configuration file, then refer to the <a href='INSTALL' target='_blank'><span STYLE='text-decoration: underline;'>'INSTALL'</span></a> manual for suggestions.<br><br>\n";
 622 echo "<br>We recommend you print these instructions for future reference.<br><br>";
 623 echo "Click 'continue' for further instructions.";
 624
 625 echo "<br><FORM METHOD='POST'>\n
 626 <INPUT TYPE='HIDDEN' NAME='state' VALUE='7'>\n
 627 <INPUT TYPE='HIDDEN' NAME='iuser' VALUE='$iuser'>\n
 628 <br>\n
 629 <INPUT TYPE='SUBMIT' VALUE='Continue'><br></FORM><br>\n";
 630
 631 break;
 632
 633         case 0:
 634         default:
 635 echo "<p>Welcome to OpenEMR.  This utility will step you through the installation and configuration of OpenEMR for your practice.</p>\n";
 636 echo "<ul><li>Before proceeding, be sure that you have a properly installed and configured MySQL server available, and a PHP configured webserver.</li>\n";
 637
 638 echo "<li>Detailed installation instructions can be found in the <a href='INSTALL' target='_blank'><span STYLE='text-decoration: underline;'>'INSTALL'</span></a> manual file.</li>\n";
 639
 640 Echo "<li>If you are upgrading from a previous version, do NOT use this script.  Please read the 'Upgrading' section found in the <a href='INSTALL' target='_blank'><span STYLE='text-decoration: underline;'>'INSTALL'</span></a> manual file.</li></ul>";
 641
 642 if ($checkPermissions == "TRUE") {
 643         echo "<p>We will now ensure correct file and directory permissions before starting installation:</p>\n";
 644         echo "<FONT COLOR='green'>Ensuring following files are world-writable...</FONT><br>\n";
 645         $errorWritable = 0;
 646         foreach ($writableFileList as $tempFile) {
 647                 if (is_writable($tempFile)) {
 648                         echo "'".realpath($tempFile)."' file is <FONT COLOR='green'><b>ready</b></FONT>.<br>\n";
 649                 }
 650                 else {
 651                         echo "<p><FONT COLOR='red'>UNABLE</FONT> to open file '".realpath($tempFile)."' for writing.<br>\n";
 652                         echo "(configure file permissions; see below for further instructions)</p>\n";
 653                         $errorWritable = 1;
 654                 }
 655         }
 656         if ($errorWritable) {
 657                 echo "<p><FONT COLOR='red'>You can't proceed until all above files are ready (world-writable).</FONT><br>\n";
 658                 echo "In linux, recommend changing file permissions with the 'chmod 666 filename' command.<br>\n";
 659                 echo "Fix above file permissions and then click the 'Check Again' button to re-check files.<br>\n";
 660                 echo "<FORM METHOD='POST'><INPUT TYPE='SUBMIT' VALUE='Check Again'></p></FORM><br>\n";
 661                 break;
 662         }
 663
 664         echo "<br><FONT COLOR='green'>Ensuring following directories have proper permissions...</FONT><br>\n";
 665         $errorWritable = 0;
 666         foreach ($writableDirList as $tempDir) {
 667                 if (is_writable($tempDir)) {
 668                         echo "'".realpath($tempDir)."' directory is <FONT COLOR='green'><b>ready</b></FONT>.<br>\n";
 669                 }
 670                 else {
 671                         echo "<p><FONT COLOR='red'>UNABLE</FONT> to open directory '".realpath($tempDir)."' for writing by web server.<br>\n";
 672                         echo "(configure directory permissions; see below for further instructions)</p>\n";
 673                         $errorWritable = 1;
 674                 }
 675         }
 676         if ($errorWritable) {
 677                 echo "<p><FONT COLOR='red'>You can't proceed until all directories are ready.</FONT><br>\n";
 678                 echo "In linux, recommend changing owners of these directories to the web server. For example, in many linux OS's the web server user is 'apache', 'nobody', or 'www-data'. So if 'apache' were the web server user name, could use the command 'chown -R apache:apache directory_name' command.<br>\n";
 679                 echo "Fix above directory permissions and then click the 'Check Again' button to re-check directories.<br>\n";
 680                 echo "<FORM METHOD='POST'><INPUT TYPE='SUBMIT' VALUE='Check Again'></p></FORM><br>\n";
 681                 break;
 682         }
 683
 684         echo "<br>All required files and directories have been verified. Click to continue installation.<br>\n";
 685 }
 686 else {
 687         echo "<br>Click to continue installation.<br>\n";
 688 }
 689
 690 echo "<FORM METHOD='POST'><INPUT TYPE='HIDDEN' NAME='state' VALUE='1'><INPUT TYPE='SUBMIT' VALUE='Continue'><br></FORM><br>";
 691
 692
 693 }
 694 }
 695 ?>
 696
 697 </span>
 698
 699 </BODY>
 700 </HTML>