setup.php

   1 <?php
   2 // This program is free software; you can redistribute it and/or
   3 // modify it under the terms of the GNU General Public License
   4 // as published by the Free Software Foundation; either version 2
   5 // of the License, or (at your option) any later version.
   6
   7 $COMMAND_LINE = php_sapi_name() == 'cli';
   8 require_once (dirname(__FILE__) . '/library/authentication/password_hashing.php');
   9 require_once dirname(__FILE__) . '/library/classes/Installer.class.php';
  10
  11 //turn off PHP compatibility warnings
  12 ini_set("session.bug_compat_warn","off");
  13
  14 $state = $_POST["state"];
  15
  16 // Make this true for IPPF.
  17 $ippf_specific = false;
  18
  19 // If this script was invoked with no site ID, then ask for one.
  20 if (!$COMMAND_LINE && empty($_REQUEST['site'])) {
  21   echo "<html>\n";
  22   echo "<head>\n";
  23   echo "<title>OpenEMR Setup Tool</title>\n";
  24   echo "<link rel='stylesheet' href='interface/themes/style_blue.css'>\n";
  25   echo "</head>\n";
  26   echo "<body>\n";
  27   echo "<p><b>Optional Site ID Selection</b></p>\n";
  28   echo "<p>Most OpenEMR installations support only one site.  If that is " .
  29     "true for you then ignore the rest of this text and just click Continue.</p>\n";
  30   echo "<p>Otherwise please enter a unique Site ID here.</p>\n";
  31   echo "<p>A Site ID is a short identifier with no spaces or special " .
  32     "characters other than periods or dashes. It is case-sensitive and we " .
  33     "suggest sticking to lower case letters for ease of use.</p>\n";
  34   echo "<p>If each site will have its own host/domain name, then use that " .
  35     "name as the Site ID (e.g. www.example.com).</p>\n";
  36   echo "<p>The site ID is used to identify which site you will log in to. " .
  37     "If it is a hostname then it is taken from the hostname in the URL. " .
  38     "Otherwise you must append \"?site=<i>siteid</i>\" to the URL used for " .
  39     "logging in.</p>\n";
  40   echo "<p>It is OK for one of the sites to have \"default\" as its ID. This " .
  41     "is the ID that will be used if it cannot otherwise be determined.</p>\n";
  42   echo "<form method='post'><input type='hidden' name='state' value='0'>" .
  43     "Site ID: <input type='text' name='site' value='default'>&nbsp;" .
  44     "<input type='submit' value='Continue'><br></form><br>\n";
  45   echo "</body></html>\n";
  46   exit();
  47 }
  48
  49 // Support "?site=siteid" in the URL, otherwise assume "default".
  50 $site_id = 'default';
  51 if (!$COMMAND_LINE && !empty($_REQUEST['site'])) {
  52   $site_id = trim($_REQUEST['site']);
  53 }
  54
  55 // Die if site ID is empty or has invalid characters.
  56 if (empty($site_id) || preg_match('/[^A-Za-z0-9\\-.]/', $site_id))
  57   die("Site ID '$site_id' contains invalid characters.");
  58
  59 //If having problems with file and directory permission
  60 // checking, then can be manually disabled here.
  61 $checkPermissions = True;
  62
  63 $installer = new Installer( $_REQUEST );
  64 global $OE_SITE_DIR; // The Installer sets this
  65
  66 $docsDirectory = "$OE_SITE_DIR/documents";
  67 $billingDirectory = "$OE_SITE_DIR/edi";
  68 $billingDirectory2 = "$OE_SITE_DIR/era";
  69
  70 $billingLogDirectory = dirname(__FILE__)."/library/freeb";
  71 $lettersDirectory = "$OE_SITE_DIR/letter_templates";
  72 $gaclWritableDirectory = dirname(__FILE__)."/gacl/admin/templates_c";
  73 $requiredDirectory1 = dirname(__FILE__)."/interface/main/calendar/modules/PostCalendar/pntemplates/compiled";
  74 $requiredDirectory2 = dirname(__FILE__)."/interface/main/calendar/modules/PostCalendar/pntemplates/cache";
  75
  76 //These are files and dir checked before install for
  77 // correct permissions.
  78 if (is_dir($OE_SITE_DIR)) {
  79   $writableFileList = array($installer->conffile);
  80   $writableDirList = array($docsDirectory, $billingDirectory, $billingDirectory2, $lettersDirectory, $gaclWritableDirectory, $requiredDirectory1, $requiredDirectory2);
  81 }
  82 else {
  83   $writableFileList = array();
  84   $writableDirList = array($OE_SITES_BASE, $gaclWritableDirectory, $requiredDirectory1, $requiredDirectory2);
  85 }
  86
  87 // Include the sqlconf file if it exists yet.
  88 $config = 0;
  89 if (file_exists($OE_SITE_DIR)) {
  90   include_once($installer->conffile);
  91 }
  92 else if ($state > 3) {
  93   // State 3 should have created the site directory if it is missing.
  94   die("Internal error, site directory is missing.");
  95 }
  96
  97 ?>
  98 <HTML>
  99 <HEAD>
 100 <TITLE>OpenEMR Setup Tool</TITLE>
 101 <LINK REL=STYLESHEET HREF="interface/themes/style_sky_blue.css">
 102
 103 <style>
 104 .noclone { }
 105 </style>
 106
 107 <script type="text/javascript" src="library/js/jquery.js"></script>
 108
 109 <script language="javascript">
 110 // onclick handler for "clone database" checkbox
 111 function cloneClicked() {
 112  var cb = document.forms[0].clone_database;
 113  $('.noclone').css('display', cb.checked ? 'none' : 'block');
 114 }
 115 </script>
 116
 117 </HEAD>
 118 <BODY>
 119
 120 <span class="title">OpenEMR Setup</span>
 121 <br><br>
 122 <span class="text">
 123
 124 <?php
 125  if (strtolower(ini_get('register_globals')) != 'off' && (bool) ini_get('register_globals')) {
 126   echo "It appears that you have register_globals enabled in your php.ini\n" .
 127    "configuration file.  This causes unacceptable security risks.  You must\n" .
 128    "turn it off before continuing with installation.\n";
 129   exit();
 130  }
 131 ?>
 132
 133 <?php
 134  if ($state == 7) {
 135 ?>
 136
 137 <p>Congratulations! OpenEMR is now installed.</p>
 138
 139 <ul>
 140  <li>Access controls (php-GACL) are installed for fine-grained security, and can be administered in
 141      OpenEMR's admin->acl menu.</li>
 142  <li>Reviewing <?php echo $OE_SITE_DIR; ?>/config.php is a good idea. This file
 143      contains some settings that you may want to change.</li>
 144  <li>There's much information and many extra tools bundled within the OpenEMR installation directory.
 145      Please refer to openemr/Documentation. Many forms and other useful scripts can be found at openemr/contrib.</li>
 146  <li>To ensure a consistent look and feel through out the application using
 147      <a href='http://www.mozilla.org/products/firefox/'>Firefox</a> is recommended.</li>
 148  <li>The OpenEMR project home page, documentation, and forums can be found at <a href = "http://www.open-emr.org" target="_blank">http://www.open-emr.org</a></li>
 149  <li>We pursue grants to help fund the future development of OpenEMR.  To apply for these grants, we need to estimate how many times this program is installed and how many practices are evaluating or using this software.  It would be awesome if you would email us at <a href="mailto:drbowen@oemr.org">drbowen@oemr.org</a> if you have installed this software. The more details about your plans with this software, the better, but even just sending us an email stating you just installed it is very helpful.</li>
 150 </ul>
 151 <p>
 152 We recommend you print these instructions for future reference.
 153 </p>
 154 <?php if (empty($installer->clone_database)) {
 155   echo "<p><b>The initial OpenEMR user is '".$installer->iuser."' and the password is '".$installer->iuserpass."'</b></p>";
 156   echo "<p>If you edited the PHP or Apache configuration files during this installation process, then we recommend you restart your Apache server before following below OpenEMR link.</p>";
 157 } ?>
 158 <p>
 159  <a href='./?site=<?php echo $site_id; ?>'>Click here to start using OpenEMR. </a>
 160 </p>
 161
 162 <?php
 163   exit();
 164  }
 165 ?>
 166
 167 <?php
 168
 169 $inst = $_POST["inst"];
 170
 171 if (($config == 1) && ($state < 4)) {
 172   echo "OpenEMR has already been installed.  If you wish to force re-installation, then edit $installer->conffile (change the 'config' variable to 0), and re-run this script.<br>\n";
 173 }
 174 else {
 175   switch ($state) {
 176
 177   case 1:
 178     echo "<b>Step $state</b><br><br>\n";
 179     echo "Now I need to know whether you want me to create the database on my own or if you have already created the database for me to use.  For me to create the database, you will need to supply the MySQL root password.\n
 180 <span class='title'> <br />NOTE: clicking on \"Continue\" may delete or cause damage to data on your system. Before you continue please backup your data.</span>
 181 <br><br>\n
 182 <FORM METHOD='POST'>\n
 183 <INPUT TYPE='HIDDEN' NAME='state' VALUE='2'>\n
 184 <INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'>\n
 185 <LABEL FOR='inst1'><INPUT TYPE='RADIO' ID='inst1' NAME='inst' VALUE='1' checked>Have setup create the database</label><br>\n
 186 <LABEL FOR='inst2'><INPUT TYPE='RADIO' ID='inst2' NAME='inst' VALUE='2'>I have already created the database</label><br>\n
 187 <br>\n
 188 <INPUT TYPE='SUBMIT' VALUE='Continue'><br></FORM><br>\n";
 189     break;
 190
 191   case 2:
 192     echo "<b>Step $state</b><br><br>\n";
 193     echo "Now you need to supply the MySQL server information and path information. Detailed instructions on each item can be found in the <a href='INSTALL' target='_blank'><span STYLE='text-decoration: underline;'>'INSTALL'</span></a> manual file.
 194 <br><br>\n
 195 <FORM METHOD='POST'>
 196 <INPUT TYPE='HIDDEN' NAME='state' VALUE='3'>
 197 <INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'>\n
 198 <INPUT TYPE='HIDDEN' NAME='inst' VALUE='$inst'>
 199 <TABLE>\n
 200 <TR VALIGN='TOP'><TD COLSPAN=2><font color='red'>MYSQL SERVER:</font></TD></TR>
 201 <TR VALIGN='TOP'><TD><span class='text'>Server Host: </span></TD><TD><INPUT TYPE='TEXT' VALUE='localhost' NAME='server' SIZE='30'></TD><TD><span class='text'>(If you run MySQL and Apache/PHP on the same computer, then leave this as 'localhost'. If they are on separate computers, then enter the IP address of the computer running MySQL.)</span><br></TD></TR>
 202 <TR VALIGN='TOP'><TD><span class='text'>Server Port: </span></TD><TD><INPUT TYPE='TEXT' VALUE='3306' NAME='port' SIZE='30'></TD><TD><span class='text'>(This is the MySQL port. The default port for MySQL is 3306.)</span><br></TD></TR>
 203 <TR VALIGN='TOP'><TD><span class='text'>Database Name: </span></TD><TD><INPUT TYPE='TEXT' VALUE='openemr' NAME='dbname' SIZE='30'></TD><TD><span class='text'>(This is the name of the OpenEMR database in MySQL - 'openemr' is the recommended)</span><br></TD></TR>
 204 <TR VALIGN='TOP'><TD><span class='text'>Login Name: </span></TD><TD><INPUT TYPE='TEXT' VALUE='openemr' NAME='login' SIZE='30'></TD><TD><span class='text'>(This is the name of the OpenEMR login name in MySQL - 'openemr' is the recommended)</span><br></TD></TR>
 205 <TR VALIGN='TOP'><TD><span class='text'>Password: </span></TD><TD><INPUT TYPE='PASSWORD' VALUE='' NAME='pass' SIZE='30'></TD><TD><span class='text'>(This is the Login Password for when PHP accesses MySQL - it should be at least 8 characters long and composed of both numbers and letters)</span><br></TD></TR>\n";
 206     if ($inst != 2) {
 207       echo "<TR VALIGN='TOP'><TD><span class='text'>Name for Root Account: </span></TD><TD><INPUT TYPE='TEXT' VALUE='root' NAME='root' SIZE='30'></TD><TD><span class='text'>(This is name for MySQL root account. For localhost, it is usually ok to leave it 'root'.)</span><br></TD></TR>
 208 <TR VALIGN='TOP'><TD><span class='text'>Root Pass: </span></TD><TD><INPUT TYPE='PASSWORD' VALUE='' NAME='rootpass' SIZE='30'></TD><TD><span class='text'>(This is your MySQL root password. For localhost, it is usually ok to leave it blank.)</span><br></TD></TR>\n";
 209       echo "<TR VALIGN='TOP'><TD><span class='text'>User Hostname: </span></TD><TD><INPUT TYPE='TEXT' VALUE='localhost' NAME='loginhost' SIZE='30'></TD><TD><span class='text'>(If you run Apache/PHP and MySQL on the same computer, then leave this as 'localhost'. If they are on separate computers, then enter the IP address of the computer running Apache/PHP.)</span><br></TD></TR>";
 210       echo "<TR VALIGN='TOP'><TD><span class='text'>UTF-8 Collation: </span></TD><TD colspan='2'>" .
 211   "<select name='collate'>" .
 212   "<option value='utf8_bin'          >Bin</option>" .
 213   "<option value='utf8_czech_ci'     >Czech</option>" .
 214   "<option value='utf8_danish_ci'    >Danish</option>" .
 215   "<option value='utf8_esperanto_ci' >Esperanto</option>" .
 216   "<option value='utf8_estonian_ci'  >Estonian</option>" .
 217   "<option value='utf8_general_ci' selected>General</option>" .
 218   "<option value='utf8_hungarian_ci' >Hungarian</option>" .
 219   "<option value='utf8_icelandic_ci' >Icelandic</option>" .
 220   "<option value='utf8_latvian_ci'   >Latvian</option>" .
 221   "<option value='utf8_lithuanian_ci'>Lithuanian</option>" .
 222   "<option value='utf8_persian_ci'   >Persian</option>" .
 223   "<option value='utf8_polish_ci'    >Polish</option>" .
 224   "<option value='utf8_roman_ci'     >Roman</option>" .
 225   "<option value='utf8_romanian_ci'  >Romanian</option>" .
 226   "<option value='utf8_slovak_ci'    >Slovak</option>" .
 227   "<option value='utf8_slovenian_ci' >Slovenian</option>" .
 228   "<option value='utf8_spanish2_ci'  >Spanish2 (Traditional)</option>" .
 229   "<option value='utf8_spanish_ci'   >Spanish (Modern)</option>" .
 230   "<option value='utf8_swedish_ci'   >Swedish</option>" .
 231   "<option value='utf8_turkish_ci'   >Turkish</option>" .
 232   "<option value='utf8_unicode_ci'   >Unicode (German, French, Russian, Armenian, Greek)</option>" .
 233   "<option value=''                  >None (Do not force UTF-8)</option>" .
 234   "</select>" .
 235   "</TD></TR><TR VALIGN='TOP'><TD>&nbsp;</TD><TD colspan='2'><span class='text'>(This is the collation setting for mysql. Leave as 'General' if you are not sure. If the language you are planning to use in OpenEMR is in the menu, then you can select it. Otherwise, just select 'General'.)</span><br></TD></TR>";
 236 }
 237     echo "<TR VALIGN='TOP'><TD>&nbsp;</TD></TR>";
 238
 239     // Include a "source" site ID drop-list and a checkbox to indicate
 240     // if cloning its database.  When checked, do not display initial user
 241     // and group stuff below.
 242     $dh = opendir($OE_SITES_BASE);
 243     if (!$dh) die("Cannot read directory '$OE_SITES_BASE'.");
 244     $siteslist = array();
 245     while (false !== ($sfname = readdir($dh))) {
 246       if (substr($sfname, 0, 1) == '.') continue;
 247       if ($sfname == 'CVS'            ) continue;
 248       if ($sfname == $site_id         ) continue;
 249       $sitedir = "$OE_SITES_BASE/$sfname";
 250       if (!is_dir($sitedir)               ) continue;
 251       if (!is_file("$sitedir/sqlconf.php")) continue;
 252       $siteslist[$sfname] = $sfname;
 253     }
 254     closedir($dh);
 255     // If this is not the first site...
 256     if (!empty($siteslist)) {
 257       ksort($siteslist);
 258       echo "<tr valign='top'>\n";
 259       echo " <td class='text'>Source Site: </td>\n";
 260       echo " <td class='text'><select name='source_site_id'>";
 261       foreach ($siteslist as $sfname) {
 262         echo "<option value='$sfname'";
 263         if ($sfname == 'default') echo " selected";
 264         echo ">$sfname</option>";
 265       }
 266       echo "</select></td>\n";
 267       echo " <td class='text'>(The site directory that will be a model for the new site.)</td>\n";
 268       echo "</tr>\n";
 269       echo "<tr valign='top'>\n";
 270       echo " <td class='text'>Clone Source Database: </td>\n";
 271       echo " <td class='text'><input type='checkbox' name='clone_database' onclick='cloneClicked()' /></td>\n";
 272       echo " <td class='text'>(Clone the source site's database instead of creating a fresh one.)</td>\n";
 273       echo "</tr>\n";
 274     }
 275
 276     echo "<TR VALIGN='TOP' class='noclone'><TD COLSPAN=2><font color='red'>OPENEMR USER:</font></TD></TR>";
 277     echo "<TR VALIGN='TOP' class='noclone'><TD><span class='text'>Initial User:</span></TD><TD><INPUT SIZE='30' TYPE='TEXT' NAME='iuser' VALUE='admin'></TD><TD><span class='text'>(This is the login name of user that will be created for you. Limit this to one word.)</span></TD></TR>
 278 <TR VALIGN='TOP' class='noclone'><TD><span class='text'>Initial User Password:</span></TD><TD><INPUT SIZE='30' TYPE='PASSWORD' NAME='iuserpass' VALUE=''></TD><TD><span class='text'>(This is the password for the initial user account above.)</span></TD></TR>
 279 <TR VALIGN='TOP' class='noclone'><TD><span class='text'>Initial User's First Name:</span></TD><TD><INPUT SIZE='30' TYPE='TEXT' NAME='iufname' VALUE='Administrator'></TD><TD><span class='text'>(This is the First name of the 'initial user'.)</span></TD></TR>
 280 <TR VALIGN='TOP' class='noclone'><TD><span class='text'>Initial User's Last Name:</span></TD><TD><INPUT SIZE='30' TYPE='TEXT' NAME='iuname' VALUE='Administrator'></TD><TD><span class='text'>(This is the Last name of the 'initial user'.)</span></TD></TR>
 281 <TR VALIGN='TOP' class='noclone'><TD><span class='text'>Initial Group:</span></TD><TD><INPUT SIZE='30' TYPE='TEXT' NAME='igroup' VALUE='Default'></TD><TD><span class='text'>(This is the group that will be created for your users.  This should be the name of your practice.)</span></TD></TR>
 282 ";
 283     echo "<TR VALIGN='TOP'><TD>&nbsp;</TD></TR>";
 284
 285     echo "</TABLE>
 286 <br>
 287 <INPUT TYPE='SUBMIT' VALUE='Continue'><br></FORM><br>";
 288     break;
 289
 290   case 3:
 291
 292     // Form Validation
 293     //   (applicable if not cloning from another database)
 294     if (empty($installer->clone_database)) {
 295       if ( ! $installer->login_is_valid() ) {
 296         echo "ERROR. Please pick a proper 'Login Name'.<br>\n";
 297         echo "Click Back in browser to re-enter.<br>\n";
 298         break;
 299       }
 300       if ( ! $installer->iuser_is_valid() ) {
 301         echo "ERROR. The 'Initial User' field can only contain one word and no spaces.<br>\n";
 302         echo "Click Back in browser to re-enter.<br>\n";
 303         break;
 304       }
 305       if ( ! $installer->user_password_is_valid() ) {
 306         echo "ERROR. Please pick a proper 'Initial User Password'.<br>\n";
 307         echo "Click Back in browser to re-enter.<br>\n";
 308         break;
 309       }
 310     }
 311     if ( ! $installer->password_is_valid() ) {
 312       echo "ERROR. Please pick a proper 'Password'.<br>\n";
 313       echo "Click Back in browser to re-enter.<br>\n";
 314       break;
 315     }
 316
 317     echo "<b>Step $state</b><br><br>\n";
 318     echo "Configuring OpenEMR...<br><br>\n";
 319
 320     // Skip below if database shell has already been created.
 321     if ($inst != 2) {
 322
 323       echo "Connecting to MySQL Server...\n";
 324       flush();
 325       if ( ! $installer->root_database_connection() ) {
 326         echo "ERROR.  Check your login credentials.\n";
 327         echo $installer->error_message;
 328         break;
 329       }
 330       else {
 331         echo "OK.<br>\n";
 332         flush();
 333       }
 334     }
 335
 336     // Only pertinent if cloning another installation database
 337     if ( ! empty($installer->clone_database)) {
 338
 339       echo "Dumping source database...";
 340       flush();
 341       if ( ! $installer->create_dumpfiles() ) {
 342         echo $installer->error_message;
 343         break;
 344       }
 345       else {
 346         echo " OK.<br>\n";
 347         flush();
 348       }
 349     }
 350
 351     // Only pertinent if mirroring another installation directory
 352     if ( ! empty($installer->source_site_id)) {
 353
 354       echo "Creating site directory...";
 355       if ( ! $installer->create_site_directory() ) {
 356         echo $installer->error_message;
 357         break;
 358       }
 359       else {
 360         echo "OK.<BR>";
 361         flush();
 362       }
 363     }
 364
 365     // Skip below if database shell has already been created.
 366     if ($inst != 2) {
 367       echo "Creating database...\n";
 368       flush();
 369       if ( ! $installer->create_database() ) {
 370         echo "ERROR.  Check your login credentials.\n";
 371         echo $installer->error_message;
 372         break;
 373       } else {
 374         echo "OK.<br>\n";
 375         flush();
 376       }
 377
 378       echo "Creating user with permissions for database...\n";
 379       flush();
 380       if ( ! $installer->grant_privileges() ) {
 381         echo "ERROR when granting privileges to the specified user.\n";
 382         echo $installer->error_message;
 383         break;
 384       } else {
 385         echo "OK.<br>\n";
 386         flush();
 387       }
 388
 389       echo "Reconnecting as new user...\n";
 390       flush();
 391       $installer->disconnect();
 392     } else {
 393
 394       echo "Connecting to MySQL Server...\n";
 395     }
 396     if ( ! $installer->user_database_connection() ) {
 397       echo "ERROR.  Check your login credentials.\n";
 398       echo $installer->error_message;
 399       break;
 400     }
 401     else {
 402       echo "OK.<br>\n";
 403       flush();
 404     }
 405
 406     // Load the database files
 407     $dump_results = $installer->load_dumpfiles();
 408     if ( ! $dump_results ) {
 409       echo $installer->error_message;
 410       break;
 411     } else {
 412       echo $dump_results;
 413       flush();
 414     }
 415
 416     echo "Writing SQL configuration...\n";
 417     flush();
 418     if ( ! $installer->write_configuration_file() ) {
 419       echo $installer->error_message;
 420       break;
 421     }
 422     else {
 423       echo "OK.<br>\n";
 424       flush();
 425     }
 426
 427     // Only pertinent if not cloning another installation database
 428     if (empty($installer->clone_database)) {
 429
 430       echo "Setting version indicators...\n";
 431       flush();
 432       if ( ! $installer->add_version_info() ) {
 433         echo "ERROR.\n";
 434         echo $installer->error_message;;
 435         break;
 436       }
 437       else {
 438         echo "OK<br>\n";
 439         flush();
 440       }
 441
 442       echo "Writing global configuration defaults...\n";
 443       flush();
 444       if ( ! $installer->insert_globals() ) {
 445         echo "ERROR.\n";
 446         echo $installer->error_message;;
 447         break;
 448       }
 449       else {
 450         echo "OK<br>\n";
 451         flush();
 452       }
 453
 454       echo "Adding Initial User...\n";
 455       flush();
 456       if ( ! $installer->add_initial_user() ) {
 457         echo $installer->error_message;
 458         break;
 459       }
 460       echo "OK<br>\n";
 461       flush();
 462     }
 463
 464     if ( ! empty($installer->clone_database) ) {
 465       // Database was cloned, skip ACL setup.
 466       echo "Click 'continue' for further instructions.";
 467       $next_state = 7;
 468     }
 469     else {
 470       echo "\n<br>Next step will install and configure access controls (php-GACL).<br>\n";
 471       $next_state = 4;
 472     }
 473
 474     echo "
 475 <FORM METHOD='POST'>\n
 476 <INPUT TYPE='HIDDEN' NAME='state' VALUE='$next_state'>
 477 <INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'>\n
 478 <INPUT TYPE='HIDDEN' NAME='iuser' VALUE='$installer->iuser'>
 479 <INPUT TYPE='HIDDEN' NAME='iuserpass' VALUE='$installer->iuserpass'>
 480 <INPUT TYPE='HIDDEN' NAME='iuname' VALUE='$installer->iuname'>
 481 <INPUT TYPE='HIDDEN' NAME='iufname' VALUE='$installer->iufname'>
 482 <INPUT TYPE='HIDDEN' NAME='clone_database' VALUE='$installer->clone_database'>
 483 <br>\n
 484 <INPUT TYPE='SUBMIT' VALUE='Continue'><br></FORM><br>\n";
 485
 486     break;
 487   case 4:
 488     echo "<b>Step $state</b><br><br>\n";
 489     echo "Installing and Configuring Access Controls (php-GACL)...<br><br>";
 490
 491     if ( ! $installer->install_gacl() ) {
 492       echo $installer->error_message;
 493       break;
 494     }
 495     else {
 496       // display the status information for gacl setup
 497       echo $installer->debug_message;
 498     }
 499
 500     echo "Gave the '$installer->iuser' user (password is '$installer->iuserpass') administrator access.<br><br>";
 501
 502     echo "Done installing and configuring access controls (php-GACL).<br>";
 503     echo "Next step will configure PHP.";
 504
 505     echo "<br><FORM METHOD='POST'>\n
 506 <INPUT TYPE='HIDDEN' NAME='state' VALUE='5'>\n
 507 <INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'>\n
 508 <INPUT TYPE='HIDDEN' NAME='iuser' VALUE='$installer->iuser'>\n
 509 <INPUT TYPE='HIDDEN' NAME='iuserpass' VALUE='$installer->iuserpass'>\n
 510 <br>\n
 511 <INPUT TYPE='SUBMIT' VALUE='Continue'><br></FORM><br>\n";
 512
 513     break;
 514
 515   case 5:
 516     echo "<b>Step $state</b><br><br>\n";
 517     echo "Configuration of PHP...<br><br>\n";
 518     echo "We recommend making the following changes to your PHP installation, which can normally be done by editing the php.ini configuration file:\n";
 519     echo "<ul>";
 520     $gotFileFlag = 0;
 521     if (version_compare(PHP_VERSION, '5.2.4', '>=')) {
 522       $phpINIfile = php_ini_loaded_file();
 523       if ($phpINIfile) {
 524         echo "<li><font color='green'>Your php.ini file can be found at ".$phpINIfile."</font></li>\n";
 525         $gotFileFlag = 1;
 526       }
 527     }
 528 echo "<li>To ensure proper functioning of OpenEMR you must make sure that settings in php.ini file include  \"short_open_tag = On\", \"display_errors = Off\", \"register_globals = Off\", \"max_execution_time\" set to at least 60, \"max_input_time\" set to at least 90, \"post_max_size\" set to at least 30M, and \"memory_limit\" set to at least \"128M\".</li>\n";
 529 echo "<li>In order to take full advantage of the patient documents capability you must make sure that settings in php.ini file include \"file_uploads = On\", that \"upload_max_filesize\" is appropriate for your use and that \"upload_tmp_dir\" is set to a correct value that will work on your system.</li>\n";
 530 if (!$gotFileFlag) {
 531     echo "<li>If you are having difficulty finding your php.ini file, then refer to the <a href='INSTALL' target='_blank'><span STYLE='text-decoration: underline;'>'INSTALL'</span></a> manual for suggestions.</li>\n";
 532 }
 533 echo "</ul>";
 534
 535 echo "<br>We recommend you print these instructions for future reference.<br><br>";
 536 echo "Next step will configure Apache web server.";
 537
 538 echo "<br><FORM METHOD='POST'>\n
 539 <INPUT TYPE='HIDDEN' NAME='state' VALUE='6'>\n
 540 <INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'>\n
 541 <INPUT TYPE='HIDDEN' NAME='iuser' VALUE='$installer->iuser'>\n
 542 <INPUT TYPE='HIDDEN' NAME='iuserpass' VALUE='$installer->iuserpass'>\n
 543 <br>\n
 544 <INPUT TYPE='SUBMIT' VALUE='Continue'><br></FORM><br>\n";
 545
 546 break;
 547
 548        case 6:
 549 echo "<b>Step $state</b><br><br>\n";
 550 echo "Configuration of Apache web server...<br><br>\n";
 551 echo "The \"".preg_replace("/${site_id}/","*",realpath($docsDirectory))."\", \"".preg_replace("/${site_id}/","*",realpath($billingDirectory))."\" and \"".preg_replace("/${site_id}/","*",realpath($billingDirectory2))."\" directories contain patient information, and
 552 it is important to secure these directories. This can be done by placing pertinent .htaccess
 553 files in these directories or by pasting the below to end of your apache configuration file:<br>
 554 &nbsp;&nbsp;&lt;Directory ".preg_replace("/${site_id}/","*",realpath($docsDirectory))."&gt;<br>
 555 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;order deny,allow<br>
 556 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Deny from all<br>
 557 &nbsp;&nbsp;&lt;/Directory&gt;<br>
 558 &nbsp;&nbsp;&lt;Directory ".preg_replace("/${site_id}/","*",realpath($billingDirectory))."&gt;<br>
 559 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;order deny,allow<br>
 560 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Deny from all<br>
 561 &nbsp;&nbsp;&lt;/Directory&gt;<br>
 562 &nbsp;&nbsp;&lt;Directory ".preg_replace("/${site_id}/","*",realpath($billingDirectory2))."&gt;<br>
 563 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;order deny,allow<br>
 564 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Deny from all<br>
 565 &nbsp;&nbsp;&lt;/Directory&gt;<br><br>";
 566
 567 echo "If you are having difficulty finding your apache configuration file, then refer to the <a href='INSTALL' target='_blank'><span STYLE='text-decoration: underline;'>'INSTALL'</span></a> manual for suggestions.<br><br>\n";
 568 echo "<br>We recommend you print these instructions for future reference.<br><br>";
 569 echo "Click 'continue' for further instructions.";
 570
 571 echo "<br><FORM METHOD='POST'>\n
 572 <INPUT TYPE='HIDDEN' NAME='state' VALUE='7'>\n
 573 <INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'>\n
 574 <INPUT TYPE='HIDDEN' NAME='iuser' VALUE='$installer->iuser'>\n
 575 <INPUT TYPE='HIDDEN' NAME='iuserpass' VALUE='$installer->iuserpass'>\n
 576 <br>\n
 577 <INPUT TYPE='SUBMIT' VALUE='Continue'><br></FORM><br>\n";
 578
 579 break;
 580
 581         case 0:
 582         default:
 583 echo "<p>Welcome to OpenEMR.  This utility will step you through the installation and configuration of OpenEMR for your practice.</p>\n";
 584 echo "<ul><li>Before proceeding, be sure that you have a properly installed and configured MySQL server available, and a PHP configured webserver.</li>\n";
 585
 586 echo "<li>Detailed installation instructions can be found in the <a href='INSTALL' target='_blank'><span STYLE='text-decoration: underline;'>'INSTALL'</span></a> manual file.</li>\n";
 587
 588 Echo "<li>If you are upgrading from a previous version, do NOT use this script.  Please read the 'Upgrading' section found in the <a href='INSTALL' target='_blank'><span STYLE='text-decoration: underline;'>'INSTALL'</span></a> manual file.</li></ul>";
 589
 590 if ($checkPermissions) {
 591         echo "<p>We will now ensure correct file and directory permissions before starting installation:</p>\n";
 592         echo "<FONT COLOR='green'>Ensuring following files are world-writable...</FONT><br>\n";
 593         $errorWritable = 0;
 594         foreach ($writableFileList as $tempFile) {
 595                 if (is_writable($tempFile)) {
 596                         echo "'".realpath($tempFile)."' file is <FONT COLOR='green'><b>ready</b></FONT>.<br>\n";
 597                 }
 598                 else {
 599                         echo "<p><FONT COLOR='red'>UNABLE</FONT> to open file '".realpath($tempFile)."' for writing.<br>\n";
 600                         echo "(configure file permissions; see below for further instructions)</p>\n";
 601                         $errorWritable = 1;
 602                 }
 603         }
 604         if ($errorWritable) {
 605                 echo "<p><FONT COLOR='red'>You can't proceed until all above files are ready (world-writable).</FONT><br>\n";
 606                 echo "In linux, recommend changing file permissions with the 'chmod 666 filename' command.<br>\n";
 607                 echo "Fix above file permissions and then click the 'Check Again' button to re-check files.<br>\n";
 608     echo "<FORM METHOD='POST'><INPUT TYPE='SUBMIT' VALUE='Check Again'></p>" .
 609       "<INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'></FORM><br>\n";
 610                 break;
 611         }
 612
 613         echo "<br><FONT COLOR='green'>Ensuring following directories have proper permissions...</FONT><br>\n";
 614         $errorWritable = 0;
 615         foreach ($writableDirList as $tempDir) {
 616                 if (is_writable($tempDir)) {
 617                         echo "'".realpath($tempDir)."' directory is <FONT COLOR='green'><b>ready</b></FONT>.<br>\n";
 618                 }
 619                 else {
 620                         echo "<p><FONT COLOR='red'>UNABLE</FONT> to open directory '".realpath($tempDir)."' for writing by web server.<br>\n";
 621                         echo "(configure directory permissions; see below for further instructions)</p>\n";
 622                         $errorWritable = 1;
 623                 }
 624         }
 625         if ($errorWritable) {
 626                 echo "<p><FONT COLOR='red'>You can't proceed until all directories are ready.</FONT><br>\n";
 627                 echo "In linux, recommend changing owners of these directories to the web server. For example, in many linux OS's the web server user is 'apache', 'nobody', or 'www-data'. So if 'apache' were the web server user name, could use the command 'chown -R apache:apache directory_name' command.<br>\n";
 628                 echo "Fix above directory permissions and then click the 'Check Again' button to re-check directories.<br>\n";
 629     echo "<FORM METHOD='POST'><INPUT TYPE='SUBMIT' VALUE='Check Again'></p>" .
 630       "<INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'></FORM><br>\n";
 631                 break;
 632         }
 633
 634         echo "<br>All required files and directories have been verified. Click to continue installation.<br>\n";
 635 }
 636 else {
 637         echo "<br>Click to continue installation.<br>\n";
 638 }
 639
 640 echo "<FORM METHOD='POST'><INPUT TYPE='HIDDEN' NAME='state' VALUE='1'>" .
 641   "<INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'>" .
 642   "<INPUT TYPE='SUBMIT' VALUE='Continue'><br></FORM><br>";
 643
 644 }
 645 }
 646 ?>
 647
 648 </span>
 649
 650 </BODY>
 651 </HTML>