setup.php

   1 <?php
   2 /**
   3  * Installation script.
   4  *
   5  * Copyright (C) 2016 Roberto Vasquez <robertogagliotta@gmail.com>
   6  *
   7  * LICENSE: This program is free software; you can redistribute it and/or
   8  * modify it under the terms of the GNU General Public License
   9  * as published by the Free Software Foundation; either version 2
  10  * of the License, or (at your option) any later version.
  11  * This program is distributed in the hope that it will be usefull,
  12  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  13  * MERCHANTABILITY OF FITNESS FOR A PARTICULAR PURPOSE, See the
  14  * GNU General Public License for more details.
  15  * You should have received a copy of the CNU General Public License
  16  * along with this program. If not, see <http://opensource.org/Licenses/gpl-license.php>;.
  17  *
  18  * @package OpenEMR
  19  * @author Roberto Vasquez <robertogagliotta@gmail.com>
  20  * @author Scott Wakefield <scott@npclinics.com.au>
  21  * @link http://www.open-emr.org
  22  *
  23 **/
  24
  25 $COMMAND_LINE = php_sapi_name() == 'cli';
  26 require_once (dirname(__FILE__) . '/library/authentication/password_hashing.php');
  27 require_once dirname(__FILE__) . '/library/classes/Installer.class.php';
  28
  29 //turn off PHP compatibility warnings
  30 ini_set("session.bug_compat_warn","off");
  31
  32 $state = isset($_POST["state"]) ? ($_POST["state"]) : '';
  33
  34 // Make this true for IPPF.
  35 $ippf_specific = false;
  36
  37 // If this script was invoked with no site ID, then ask for one.
  38 if (!$COMMAND_LINE && empty($_REQUEST['site'])) {
  39   echo "<html>\n";
  40   echo "<head>\n";
  41   echo "<title>OpenEMR Setup Tool</title>\n";
  42   echo "<link rel='stylesheet' href='interface/themes/style_blue.css'>\n";
  43   echo "</head>\n";
  44   echo "<body>\n";
  45   echo "<p><b>Optional Site ID Selection</b></p>\n";
  46   echo "<p>Most OpenEMR installations support only one site.  If that is " .
  47     "true for you then ignore the rest of this text and just click Continue.</p>\n";
  48   echo "<p>Otherwise please enter a unique Site ID here.</p>\n";
  49   echo "<p>A Site ID is a short identifier with no spaces or special " .
  50     "characters other than periods or dashes. It is case-sensitive and we " .
  51     "suggest sticking to lower case letters for ease of use.</p>\n";
  52   echo "<p>If each site will have its own host/domain name, then use that " .
  53     "name as the Site ID (e.g. www.example.com).</p>\n";
  54   echo "<p>The site ID is used to identify which site you will log in to. " .
  55     "If it is a hostname then it is taken from the hostname in the URL. " .
  56     "Otherwise you must append \"?site=<i>siteid</i>\" to the URL used for " .
  57     "logging in.</p>\n";
  58   echo "<p>It is OK for one of the sites to have \"default\" as its ID. This " .
  59     "is the ID that will be used if it cannot otherwise be determined.</p>\n";
  60   echo "<form method='post'><input type='hidden' name='state' value='0'>" .
  61     "Site ID: <input type='text' name='site' value='default'>&nbsp;" .
  62     "<input type='submit' value='Continue'><br></form><br>\n";
  63   echo "</body></html>\n";
  64   exit();
  65 }
  66
  67 // Support "?site=siteid" in the URL, otherwise assume "default".
  68 $site_id = 'default';
  69 if (!$COMMAND_LINE && !empty($_REQUEST['site'])) {
  70   $site_id = trim($_REQUEST['site']);
  71 }
  72
  73 // Die if site ID is empty or has invalid characters.
  74 if (empty($site_id) || preg_match('/[^A-Za-z0-9\\-.]/', $site_id))
  75   die("Site ID '".htmlspecialchars($site_id,ENT_NOQUOTES)."' contains invalid characters.");
  76
  77 //If having problems with file and directory permission
  78 // checking, then can be manually disabled here.
  79 $checkPermissions = True;
  80
  81 $installer = new Installer( $_REQUEST );
  82 global $OE_SITE_DIR; // The Installer sets this
  83
  84 $docsDirectory = "$OE_SITE_DIR/documents";
  85 $billingDirectory = "$OE_SITE_DIR/edi";
  86 $billingDirectory2 = "$OE_SITE_DIR/era";
  87 $lettersDirectory = "$OE_SITE_DIR/letter_templates";
  88 $gaclWritableDirectory = dirname(__FILE__)."/gacl/admin/templates_c";
  89 $requiredDirectory1 = dirname(__FILE__)."/interface/main/calendar/modules/PostCalendar/pntemplates/compiled";
  90 $requiredDirectory2 = dirname(__FILE__)."/interface/main/calendar/modules/PostCalendar/pntemplates/cache";
  91
  92 $zendModuleConfigFile = dirname(__FILE__)."/interface/modules/zend_modules/config/application.config.php";
  93
  94 //These are files and dir checked before install for
  95 // correct permissions.
  96 if (is_dir($OE_SITE_DIR)) {
  97   $writableFileList = array($installer->conffile,$zendModuleConfigFile);
  98   $writableDirList = array($docsDirectory, $billingDirectory, $billingDirectory2, $lettersDirectory, $gaclWritableDirectory, $requiredDirectory1, $requiredDirectory2);
  99 }
 100 else {
 101   $writableFileList = array();
 102   $writableDirList = array($OE_SITES_BASE, $gaclWritableDirectory, $requiredDirectory1, $requiredDirectory2);
 103 }
 104
 105 // Include the sqlconf file if it exists yet.
 106 $config = 0;
 107 if (file_exists($OE_SITE_DIR)) {
 108   include_once($installer->conffile);
 109 }
 110 else if ($state > 3) {
 111   // State 3 should have created the site directory if it is missing.
 112   die("Internal error, site directory is missing.");
 113 }
 114
 115 ?>
 116 <HTML>
 117 <HEAD>
 118 <TITLE>OpenEMR Setup Tool</TITLE>
 119 <LINK REL=STYLESHEET HREF="interface/themes/style_sky_blue.css">
 120
 121 <style>
 122 .noclone { }
 123 table.phpset { border-collapse:collapse;   }
 124 table.phpset td, table.phpset th { font-size:9pt; border:1px solid gray; padding:2px; }
 125 </style>
 126
 127 <script type="text/javascript" src="library/js/jquery.js"></script>
 128
 129 <script language="javascript">
 130 // onclick handler for "clone database" checkbox
 131 function cloneClicked() {
 132  var cb = document.forms[0].clone_database;
 133  $('.noclone').css('display', cb.checked ? 'none' : 'block');
 134 }
 135 </script>
 136
 137 </HEAD>
 138 <BODY>
 139
 140 <span class="title">OpenEMR Setup</span>
 141 <br><br>
 142 <span class="text">
 143
 144 <?php
 145  if (strtolower(ini_get('register_globals')) != 'off' && (bool) ini_get('register_globals')) {
 146   echo "It appears that you have register_globals enabled in your php.ini\n" .
 147    "configuration file.  This causes unacceptable security risks.  You must\n" .
 148    "turn it off before continuing with installation.\n";
 149   exit(1);
 150  }
 151
 152  if(!extension_loaded("xml")) {
 153    echo "Error: PHP XML extension missing. To continue, install PHP XML extension, then restart web server.";
 154    exit(1);
 155  }
 156  if( !(extension_loaded("mysql") || extension_loaded("mysqlnd") || extension_loaded("mysqli"))   ) {
 157    echo "Error: PHP MySQL extension missing. To continue, install and enable MySQL extension, then restart web server.";
 158    exit(1);
 159  }
 160  if( !(extension_loaded("mbstring") )   ) {
 161    echo "Error: PHP mb_string extension missing. To continue, install and enable mb_string extension, then restart web server.";
 162    exit(1);
 163  }
 164 ?>
 165
 166 <?php
 167  if ($state == 7) {
 168 ?>
 169
 170 <p>Congratulations! OpenEMR is now installed.</p>
 171
 172 <ul>
 173  <li>Access controls (php-GACL) are installed for fine-grained security, and can be administered in
 174      OpenEMR's admin->acl menu.</li>
 175  <li>Reviewing <?php echo $OE_SITE_DIR; ?>/config.php is a good idea. This file
 176      contains some settings that you may want to change.</li>
 177  <li>There's much information and many extra tools bundled within the OpenEMR installation directory.
 178      Please refer to openemr/Documentation. Many forms and other useful scripts can be found at openemr/contrib.</li>
 179  <li>To ensure a consistent look and feel through out the application using
 180      <a href='http://www.mozilla.org/products/firefox/'>Firefox</a> is recommended.</li>
 181  <li>The OpenEMR project home page, documentation, and forums can be found at <a href = "http://www.open-emr.org" target="_blank">http://www.open-emr.org</a></li>
 182  <li>We pursue grants to help fund the future development of OpenEMR.  To apply for these grants, we need to estimate how many times this program is installed and how many practices are evaluating or using this software.  It would be awesome if you would email us at <a href="mailto:president@oemr.org">president@oemr.org</a> if you have installed this software. The more details about your plans with this software, the better, but even just sending us an email stating you just installed it is very helpful.</li>
 183 </ul>
 184 <p>
 185 We recommend you print these instructions for future reference.
 186 </p>
 187 <?php if (empty($installer->clone_database)) {
 188   echo "<p><b>The initial OpenEMR user is '".$installer->iuser."' and the password is '".$installer->iuserpass."'</b></p>";
 189   echo "<p>If you edited the PHP or Apache configuration files during this installation process, then we recommend you restart your Apache server before following below OpenEMR link.</p>";
 190 } ?>
 191 <p>
 192  <a href='./?site=<?php echo $site_id; ?>'>Click here to start using OpenEMR. </a>
 193 </p>
 194
 195 <?php
 196   exit();
 197  }
 198 ?>
 199
 200 <?php
 201
 202 $inst = isset($_POST["inst"]) ? ($_POST["inst"]) : '';
 203
 204
 205 if (($config == 1) && ($state < 4)) {
 206   echo "OpenEMR has already been installed.  If you wish to force re-installation, then edit $installer->conffile (change the 'config' variable to 0), and re-run this script.<br>\n";
 207 }
 208 else {
 209   switch ($state) {
 210
 211   case 1:
 212     echo "<b>Step $state</b><br><br>\n";
 213     echo "Now I need to know whether you want me to create the database on my own or if you have already created the database for me to use.  For me to create the database, you will need to supply the MySQL root password.\n
 214 <span class='title'> <br />NOTE: clicking on \"Continue\" may delete or cause damage to data on your system. Before you continue please backup your data.</span>
 215 <br><br>\n
 216 <FORM METHOD='POST'>\n
 217 <INPUT TYPE='HIDDEN' NAME='state' VALUE='2'>\n
 218 <INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'>\n
 219 <LABEL FOR='inst1'><INPUT TYPE='RADIO' ID='inst1' NAME='inst' VALUE='1' checked>Have setup create the database</label><br>\n
 220 <LABEL FOR='inst2'><INPUT TYPE='RADIO' ID='inst2' NAME='inst' VALUE='2'>I have already created the database</label><br>\n
 221 <br>\n
 222 <INPUT TYPE='SUBMIT' VALUE='Continue'><br></FORM><br>\n";
 223     break;
 224
 225   case 2:
 226     echo "<b>Step $state</b><br><br>\n";
 227     echo "Now you need to supply the MySQL server information and path information. Detailed instructions on each item can be found in the <a href='Documentation/INSTALL' target='_blank'><span STYLE='text-decoration: underline;'>'INSTALL'</span></a> manual file.
 228 <br><br>\n
 229 <FORM METHOD='POST'>
 230 <INPUT TYPE='HIDDEN' NAME='state' VALUE='3'>
 231 <INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'>\n
 232 <INPUT TYPE='HIDDEN' NAME='inst' VALUE='$inst'>
 233 <TABLE>\n
 234 <TR VALIGN='TOP'><TD COLSPAN=2><font color='red'>MYSQL SERVER:</font></TD></TR>
 235 <TR VALIGN='TOP'><TD><span class='text'>Server Host: </span></TD><TD><INPUT TYPE='TEXT' VALUE='localhost' NAME='server' SIZE='30'></TD><TD><span class='text'>(If you run MySQL and Apache/PHP on the same computer, then leave this as 'localhost'. If they are on separate computers, then enter the IP address of the computer running MySQL.)</span><br></TD></TR>
 236 <TR VALIGN='TOP'><TD><span class='text'>Server Port: </span></TD><TD><INPUT TYPE='TEXT' VALUE='3306' NAME='port' SIZE='30'></TD><TD><span class='text'>(This is the MySQL port. The default port for MySQL is 3306.)</span><br></TD></TR>
 237 <TR VALIGN='TOP'><TD><span class='text'>Database Name: </span></TD><TD><INPUT TYPE='TEXT' VALUE='openemr' NAME='dbname' SIZE='30'></TD><TD><span class='text'>(This is the name of the OpenEMR database in MySQL - 'openemr' is the recommended)</span><br></TD></TR>
 238 <TR VALIGN='TOP'><TD><span class='text'>Login Name: </span></TD><TD><INPUT TYPE='TEXT' VALUE='openemr' NAME='login' SIZE='30'></TD><TD><span class='text'>(This is the name of the OpenEMR login name in MySQL - 'openemr' is the recommended)</span><br></TD></TR>
 239 <TR VALIGN='TOP'><TD><span class='text'>Password: </span></TD><TD><INPUT TYPE='PASSWORD' VALUE='' NAME='pass' SIZE='30'></TD><TD><span class='text'>(This is the Login Password for when PHP accesses MySQL - it should be at least 8 characters long and composed of both numbers and letters)</span><br></TD></TR>\n";
 240     if ($inst != 2) {
 241       echo "<TR VALIGN='TOP'><TD><span class='text'>Name for Root Account: </span></TD><TD><INPUT TYPE='TEXT' VALUE='root' NAME='root' SIZE='30'></TD><TD><span class='text'>(This is name for MySQL root account. For localhost, it is usually ok to leave it 'root'.)</span><br></TD></TR>
 242 <TR VALIGN='TOP'><TD><span class='text'>Root Pass: </span></TD><TD><INPUT TYPE='PASSWORD' VALUE='' NAME='rootpass' SIZE='30'></TD><TD><span class='text'>(This is your MySQL root password. For localhost, it is usually ok to leave it blank.)</span><br></TD></TR>\n";
 243       echo "<TR VALIGN='TOP'><TD><span class='text'>User Hostname: </span></TD><TD><INPUT TYPE='TEXT' VALUE='localhost' NAME='loginhost' SIZE='30'></TD><TD><span class='text'>(If you run Apache/PHP and MySQL on the same computer, then leave this as 'localhost'. If they are on separate computers, then enter the IP address of the computer running Apache/PHP.)</span><br></TD></TR>";
 244       echo "<TR VALIGN='TOP'><TD><span class='text'>UTF-8 Collation: </span></TD><TD colspan='2'>" .
 245   "<select name='collate'>" .
 246   "<option value='utf8_bin'          >Bin</option>" .
 247   "<option value='utf8_czech_ci'     >Czech</option>" .
 248   "<option value='utf8_danish_ci'    >Danish</option>" .
 249   "<option value='utf8_esperanto_ci' >Esperanto</option>" .
 250   "<option value='utf8_estonian_ci'  >Estonian</option>" .
 251   "<option value='utf8_general_ci' selected>General</option>" .
 252   "<option value='utf8_hungarian_ci' >Hungarian</option>" .
 253   "<option value='utf8_icelandic_ci' >Icelandic</option>" .
 254   "<option value='utf8_latvian_ci'   >Latvian</option>" .
 255   "<option value='utf8_lithuanian_ci'>Lithuanian</option>" .
 256   "<option value='utf8_persian_ci'   >Persian</option>" .
 257   "<option value='utf8_polish_ci'    >Polish</option>" .
 258   "<option value='utf8_roman_ci'     >Roman</option>" .
 259   "<option value='utf8_romanian_ci'  >Romanian</option>" .
 260   "<option value='utf8_slovak_ci'    >Slovak</option>" .
 261   "<option value='utf8_slovenian_ci' >Slovenian</option>" .
 262   "<option value='utf8_spanish2_ci'  >Spanish2 (Traditional)</option>" .
 263   "<option value='utf8_spanish_ci'   >Spanish (Modern)</option>" .
 264   "<option value='utf8_swedish_ci'   >Swedish</option>" .
 265   "<option value='utf8_turkish_ci'   >Turkish</option>" .
 266   "<option value='utf8_unicode_ci'   >Unicode (German, French, Russian, Armenian, Greek)</option>" .
 267   "<option value=''                  >None (Do not force UTF-8)</option>" .
 268   "</select>" .
 269   "</TD></TR><TR VALIGN='TOP'><TD>&nbsp;</TD><TD colspan='2'><span class='text'>(This is the collation setting for mysql. Leave as 'General' if you are not sure. If the language you are planning to use in OpenEMR is in the menu, then you can select it. Otherwise, just select 'General'.)</span><br></TD></TR>";
 270 }
 271     echo "<TR VALIGN='TOP'><TD>&nbsp;</TD></TR>";
 272
 273     // Include a "source" site ID drop-list and a checkbox to indicate
 274     // if cloning its database.  When checked, do not display initial user
 275     // and group stuff below.
 276     $dh = opendir($OE_SITES_BASE);
 277     if (!$dh) die("Cannot read directory '$OE_SITES_BASE'.");
 278     $siteslist = array();
 279     while (false !== ($sfname = readdir($dh))) {
 280       if (substr($sfname, 0, 1) == '.') continue;
 281       if ($sfname == 'CVS'            ) continue;
 282       if ($sfname == $site_id         ) continue;
 283       $sitedir = "$OE_SITES_BASE/$sfname";
 284       if (!is_dir($sitedir)               ) continue;
 285       if (!is_file("$sitedir/sqlconf.php")) continue;
 286       $siteslist[$sfname] = $sfname;
 287     }
 288     closedir($dh);
 289     // If this is not the first site...
 290     if (!empty($siteslist)) {
 291       ksort($siteslist);
 292       echo "<tr valign='top'>\n";
 293       echo " <td class='text'>Source Site: </td>\n";
 294       echo " <td class='text'><select name='source_site_id'>";
 295       foreach ($siteslist as $sfname) {
 296         echo "<option value='$sfname'";
 297         if ($sfname == 'default') echo " selected";
 298         echo ">$sfname</option>";
 299       }
 300       echo "</select></td>\n";
 301       echo " <td class='text'>(The site directory that will be a model for the new site.)</td>\n";
 302       echo "</tr>\n";
 303       echo "<tr valign='top'>\n";
 304       echo " <td class='text'>Clone Source Database: </td>\n";
 305       echo " <td class='text'><input type='checkbox' name='clone_database' onclick='cloneClicked()' /></td>\n";
 306       echo " <td class='text'>(Clone the source site's database instead of creating a fresh one.)</td>\n";
 307       echo "</tr>\n";
 308     }
 309
 310     echo "<TR VALIGN='TOP' class='noclone'><TD COLSPAN=2><font color='red'>OPENEMR USER:</font></TD></TR>";
 311     echo "<TR VALIGN='TOP' class='noclone'><TD><span class='text'>Initial User:</span></TD><TD><INPUT SIZE='30' TYPE='TEXT' NAME='iuser' VALUE='admin'></TD><TD><span class='text'>(This is the login name of user that will be created for you. Limit this to one word.)</span></TD></TR>
 312 <TR VALIGN='TOP' class='noclone'><TD><span class='text'>Initial User Password:</span></TD><TD><INPUT SIZE='30' TYPE='PASSWORD' NAME='iuserpass' VALUE=''></TD><TD><span class='text'>(This is the password for the initial user account above.)</span></TD></TR>
 313 <TR VALIGN='TOP' class='noclone'><TD><span class='text'>Initial User's First Name:</span></TD><TD><INPUT SIZE='30' TYPE='TEXT' NAME='iufname' VALUE='Administrator'></TD><TD><span class='text'>(This is the First name of the 'initial user'.)</span></TD></TR>
 314 <TR VALIGN='TOP' class='noclone'><TD><span class='text'>Initial User's Last Name:</span></TD><TD><INPUT SIZE='30' TYPE='TEXT' NAME='iuname' VALUE='Administrator'></TD><TD><span class='text'>(This is the Last name of the 'initial user'.)</span></TD></TR>
 315 <TR VALIGN='TOP' class='noclone'><TD><span class='text'>Initial Group:</span></TD><TD><INPUT SIZE='30' TYPE='TEXT' NAME='igroup' VALUE='Default'></TD><TD><span class='text'>(This is the group that will be created for your users.  This should be the name of your practice.)</span></TD></TR>
 316 ";
 317     echo "<TR VALIGN='TOP'><TD>&nbsp;</TD></TR>";
 318
 319     echo "</TABLE>
 320 <br>
 321 <INPUT TYPE='SUBMIT' VALUE='Continue'><br></FORM><br>";
 322     break;
 323
 324   case 3:
 325
 326     // Form Validation
 327     //   (applicable if not cloning from another database)
 328
 329     $pass_step2_validation = TRUE;
 330     $error_step2_message   = "ERROR at ";
 331
 332     if ( ! $installer->char_is_valid($_REQUEST['server'])) {
 333        $pass_step2_validation = FALSE;
 334        $error_step2_message .=  "Database Server Host, ";
 335     }
 336
 337     if ( ! $installer->char_is_valid($_REQUEST['port']))  {
 338         $pass_step2_validation = FALSE;
 339         $error_step2_message .=  "Database Server Port, ";
 340     }
 341     if ( ! $installer->char_is_valid($_REQUEST['dbname']))  {
 342         $pass_step2_validation = FALSE;
 343         $error_step2_message .= "Database Name, ";
 344     }
 345     if ( ! $installer->char_is_valid($_REQUEST['login']))  {
 346         $pass_step2_validation = FALSE;
 347         $error_step2_message .= "Database Login Name, ";
 348     }
 349     if ( ! $installer->char_is_valid($_REQUEST['pass']))  {
 350         $pass_step2_validation = FALSE;
 351         $error_step2_message .= "Database Login Password, ";
 352     }
 353     if (!$pass_step2_validation) {
 354        die($error_step2_message);
 355      }
 356
 357
 358     if (empty($installer->clone_database)) {
 359       if ( ! $installer->login_is_valid() ) {
 360         echo "ERROR. Please pick a proper 'Login Name'.<br>\n";
 361         echo "Click Back in browser to re-enter.<br>\n";
 362         break;
 363       }
 364       if ( ! $installer->iuser_is_valid() ) {
 365         echo "ERROR. The 'Initial User' field can only contain one word and no spaces.<br>\n";
 366         echo "Click Back in browser to re-enter.<br>\n";
 367         break;
 368       }
 369       if ( ! $installer->user_password_is_valid() ) {
 370         echo "ERROR. Please pick a proper 'Initial User Password'.<br>\n";
 371         echo "Click Back in browser to re-enter.<br>\n";
 372         break;
 373       }
 374     }
 375     if ( ! $installer->password_is_valid() ) {
 376       echo "ERROR. Please pick a proper 'Password'.<br>\n";
 377       echo "Click Back in browser to re-enter.<br>\n";
 378       break;
 379     }
 380
 381     echo "<b>Step $state</b><br><br>\n";
 382     echo "Configuring OpenEMR...<br><br>\n";
 383
 384     // Skip below if database shell has already been created.
 385     if ($inst != 2) {
 386
 387       echo "Connecting to MySQL Server...\n";
 388       flush();
 389       if ( ! $installer->root_database_connection() ) {
 390         echo "ERROR.  Check your login credentials.\n";
 391         echo $installer->error_message;
 392         break;
 393       }
 394       else {
 395         echo "OK.<br>\n";
 396         flush();
 397       }
 398     }
 399
 400     // Only pertinent if cloning another installation database
 401     if ( ! empty($installer->clone_database)) {
 402
 403       echo "Dumping source database...";
 404       flush();
 405       if ( ! $installer->create_dumpfiles() ) {
 406         echo $installer->error_message;
 407         break;
 408       }
 409       else {
 410         echo " OK.<br>\n";
 411         flush();
 412       }
 413     }
 414
 415     // Only pertinent if mirroring another installation directory
 416     if ( ! empty($installer->source_site_id)) {
 417
 418       echo "Creating site directory...";
 419       if ( ! $installer->create_site_directory() ) {
 420         echo $installer->error_message;
 421         break;
 422       }
 423       else {
 424         echo "OK.<BR>";
 425         flush();
 426       }
 427     }
 428
 429     // Skip below if database shell has already been created.
 430     if ($inst != 2) {
 431       echo "Creating database...\n";
 432       flush();
 433       if ( ! $installer->create_database() ) {
 434         echo "ERROR.  Check your login credentials.\n";
 435         echo $installer->error_message;
 436         break;
 437       } else {
 438         echo "OK.<br>\n";
 439         flush();
 440       }
 441
 442       echo "Creating user with permissions for database...\n";
 443       flush();
 444       if ( ! $installer->grant_privileges() ) {
 445         echo "ERROR when granting privileges to the specified user.\n";
 446         echo $installer->error_message;
 447         break;
 448       } else {
 449         echo "OK.<br>\n";
 450         flush();
 451       }
 452
 453       echo "Reconnecting as new user...\n";
 454       flush();
 455       $installer->disconnect();
 456     } else {
 457
 458       echo "Connecting to MySQL Server...\n";
 459     }
 460     if ( ! $installer->user_database_connection() ) {
 461       echo "ERROR.  Check your login credentials.\n";
 462       echo $installer->error_message;
 463       break;
 464     }
 465     else {
 466       echo "OK.<br>\n";
 467       flush();
 468     }
 469
 470     // Load the database files
 471     $dump_results = $installer->load_dumpfiles();
 472     if ( ! $dump_results ) {
 473       echo $installer->error_message;
 474       break;
 475     } else {
 476       echo $dump_results;
 477       flush();
 478     }
 479
 480     echo "Writing SQL configuration...\n";
 481     flush();
 482     if ( ! $installer->write_configuration_file() ) {
 483       echo $installer->error_message;
 484       break;
 485     }
 486     else {
 487       echo "OK.<br>\n";
 488       flush();
 489     }
 490
 491     // Only pertinent if not cloning another installation database
 492     if (empty($installer->clone_database)) {
 493
 494       echo "Setting version indicators...\n";
 495       flush();
 496       if ( ! $installer->add_version_info() ) {
 497         echo "ERROR.\n";
 498         echo $installer->error_message;;
 499         break;
 500       }
 501       else {
 502         echo "OK<br>\n";
 503         flush();
 504       }
 505
 506       echo "Writing global configuration defaults...\n";
 507       flush();
 508       if ( ! $installer->insert_globals() ) {
 509         echo "ERROR.\n";
 510         echo $installer->error_message;;
 511         break;
 512       }
 513       else {
 514         echo "OK<br>\n";
 515         flush();
 516       }
 517
 518       echo "Adding Initial User...\n";
 519       flush();
 520       if ( ! $installer->add_initial_user() ) {
 521         echo $installer->error_message;
 522         break;
 523       }
 524       echo "OK<br>\n";
 525       flush();
 526     }
 527
 528     if ( ! empty($installer->clone_database) ) {
 529       // Database was cloned, skip ACL setup.
 530       echo "Click 'continue' for further instructions.";
 531       $next_state = 7;
 532     }
 533     else {
 534       echo "\n<br>Next step will install and configure access controls (php-GACL).<br>\n";
 535       $next_state = 4;
 536     }
 537
 538     echo "
 539 <FORM METHOD='POST'>\n
 540 <INPUT TYPE='HIDDEN' NAME='state' VALUE='$next_state'>
 541 <INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'>\n
 542 <INPUT TYPE='HIDDEN' NAME='iuser' VALUE='$installer->iuser'>
 543 <INPUT TYPE='HIDDEN' NAME='iuserpass' VALUE='$installer->iuserpass'>
 544 <INPUT TYPE='HIDDEN' NAME='iuname' VALUE='$installer->iuname'>
 545 <INPUT TYPE='HIDDEN' NAME='iufname' VALUE='$installer->iufname'>
 546 <INPUT TYPE='HIDDEN' NAME='clone_database' VALUE='$installer->clone_database'>
 547 <br>\n
 548 <INPUT TYPE='SUBMIT' VALUE='Continue'><br></FORM><br>\n";
 549
 550     break;
 551   case 4:
 552     echo "<b>Step $state</b><br><br>\n";
 553     echo "Installing and Configuring Access Controls (php-GACL)...<br><br>";
 554
 555     if ( ! $installer->install_gacl() ) {
 556       echo $installer->error_message;
 557       break;
 558     }
 559     else {
 560       // display the status information for gacl setup
 561       echo $installer->debug_message;
 562     }
 563
 564     echo "Gave the '$installer->iuser' user (password is '$installer->iuserpass') administrator access.<br><br>";
 565
 566     echo "Done installing and configuring access controls (php-GACL).<br>";
 567     echo "Next step will configure PHP.";
 568
 569     echo "<br><FORM METHOD='POST'>\n
 570 <INPUT TYPE='HIDDEN' NAME='state' VALUE='5'>\n
 571 <INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'>\n
 572 <INPUT TYPE='HIDDEN' NAME='iuser' VALUE='$installer->iuser'>\n
 573 <INPUT TYPE='HIDDEN' NAME='iuserpass' VALUE='$installer->iuserpass'>\n
 574 <br>\n
 575 <INPUT TYPE='SUBMIT' VALUE='Continue'><br></FORM><br>\n";
 576
 577     break;
 578
 579   case 5:
 580     echo "<b>Step $state</b><br><br>\n";
 581     echo "Configuration of PHP...<br><br>\n";
 582     echo "We recommend making the following changes to your PHP installation, which can normally be done by editing the php.ini configuration file:\n";
 583     echo "<ul>";
 584     $gotFileFlag = 0;
 585     if (version_compare(PHP_VERSION, '5.2.4', '>=')) {
 586       $phpINIfile = php_ini_loaded_file();
 587       if ($phpINIfile) {
 588         echo "<li><font color='green'>Your php.ini file can be found at ".$phpINIfile."</font></li>\n";
 589         $gotFileFlag = 1;
 590       }
 591     }
 592 echo "<li>","To ensure proper functioning of OpenEMR you must make sure that PHP settings include:";
 593 echo "<table class='phpset'><tr><th>Setting</th><th>Required value</th><th>Current value</th></tr>";
 594 echo "<tr><td>short_open_tag  </td><td>Off</td><td>", ini_get('short_open_tag')?'On':'Off',   "</td></tr>\n";
 595 echo "<tr><td>display_errors  </td><td>Off</td><td>", ini_get('display_errors')?'On':'Off',   "</td></tr>\n";
 596 echo "<tr><td>register_globals   </td><td>Off</td><td>", ini_get('register_globals')?'On':'Off', "</td></tr>\n";
 597 echo "<tr><td>max_input_vars     </td><td>at least 3000</td><td>", ini_get('max_input_vars'), "</td></tr>\n";
 598 echo "<tr><td>max_execution_time </td><td>at least 60</td><td>", ini_get('max_execution_time'), "</td></tr>\n";
 599 echo "<tr><td>max_input_time     </td><td>at least 90</td><td>", ini_get('max_input_time'), "</td></tr>\n";
 600 echo "<tr><td>post_max_size      </td><td>at least 30M</td><td>", ini_get('post_max_size'), "</td></tr>\n";
 601 echo "<tr><td>memory_limit       </td><td>at least 128M</td><td>", ini_get('memory_limit'), "</td></tr>\n";
 602 echo "</table>";
 603 echo "</li>";
 604
 605 echo "<li>In order to take full advantage of the patient documents capability you must make sure that settings in php.ini file include \"file_uploads = On\", that \"upload_max_filesize\" is appropriate for your use and that \"upload_tmp_dir\" is set to a correct value that will work on your system.</li>\n";
 606 if (!$gotFileFlag) {
 607     echo "<li>If you are having difficulty finding your php.ini file, then refer to the <a href='Documentation/INSTALL' target='_blank'><span STYLE='text-decoration: underline;'>'INSTALL'</span></a> manual for suggestions.</li>\n";
 608 }
 609 echo "</ul>";
 610
 611 echo "<br>We recommend you print these instructions for future reference.<br><br>";
 612 echo "Next step will configure Apache web server.";
 613
 614 echo "<br><FORM METHOD='POST'>\n
 615 <INPUT TYPE='HIDDEN' NAME='state' VALUE='6'>\n
 616 <INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'>\n
 617 <INPUT TYPE='HIDDEN' NAME='iuser' VALUE='$installer->iuser'>\n
 618 <INPUT TYPE='HIDDEN' NAME='iuserpass' VALUE='$installer->iuserpass'>\n
 619 <br>\n
 620 <INPUT TYPE='SUBMIT' VALUE='Continue'><br></FORM><br>\n";
 621
 622 break;
 623
 624        case 6:
 625 echo "<b>Step $state</b><br><br>\n";
 626 echo "Configuration of Apache web server...<br><br>\n";
 627 echo "The \"".preg_replace("/${site_id}/","*",realpath($docsDirectory))."\", \"".preg_replace("/${site_id}/","*",realpath($billingDirectory))."\" and \"".preg_replace("/${site_id}/","*",realpath($billingDirectory2))."\" directories contain patient information, and
 628 it is important to secure these directories. Additionally, some settings are required for the Zend Framework to work in OpenEMR. This can be done by pasting the below to end of your apache configuration file:<br>
 629 &nbsp;&nbsp;&lt;Directory \"".realpath(dirname(__FILE__))."\"&gt;<br>
 630 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;AllowOverride FileInfo<br>
 631 &nbsp;&nbsp;&lt;/Directory&gt;<br>
 632 &nbsp;&nbsp;&lt;Directory \"".realpath(dirname(__FILE__))."/sites\"&gt;<br>
 633 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;AllowOverride None<br>
 634 &nbsp;&nbsp;&lt;/Directory&gt;<br>
 635 &nbsp;&nbsp;&lt;Directory \"".preg_replace("/${site_id}/","*",realpath($docsDirectory))."\"&gt;<br>
 636 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;order deny,allow<br>
 637 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Deny from all<br>
 638 &nbsp;&nbsp;&lt;/Directory&gt;<br>
 639 &nbsp;&nbsp;&lt;Directory \"".preg_replace("/${site_id}/","*",realpath($billingDirectory))."\"&gt;<br>
 640 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;order deny,allow<br>
 641 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Deny from all<br>
 642 &nbsp;&nbsp;&lt;/Directory&gt;<br>
 643 &nbsp;&nbsp;&lt;Directory \"".preg_replace("/${site_id}/","*",realpath($billingDirectory2))."\"&gt;<br>
 644 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;order deny,allow<br>
 645 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Deny from all<br>
 646 &nbsp;&nbsp;&lt;/Directory&gt;<br><br>";
 647
 648 echo "If you are having difficulty finding your apache configuration file, then refer to the <a href='Documentation/INSTALL' target='_blank'><span STYLE='text-decoration: underline;'>'INSTALL'</span></a> manual for suggestions.<br><br>\n";
 649 echo "<br>We recommend you print these instructions for future reference.<br><br>";
 650 echo "Click 'continue' for further instructions.";
 651
 652 echo "<br><FORM METHOD='POST'>\n
 653 <INPUT TYPE='HIDDEN' NAME='state' VALUE='7'>\n
 654 <INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'>\n
 655 <INPUT TYPE='HIDDEN' NAME='iuser' VALUE='$installer->iuser'>\n
 656 <INPUT TYPE='HIDDEN' NAME='iuserpass' VALUE='$installer->iuserpass'>\n
 657 <br>\n
 658 <INPUT TYPE='SUBMIT' VALUE='Continue'><br></FORM><br>\n";
 659
 660 break;
 661
 662         case 0:
 663         default:
 664 echo "<p>Welcome to OpenEMR.  This utility will step you through the installation and configuration of OpenEMR for your practice.</p>\n";
 665 echo "<ul><li>Before proceeding, be sure that you have a properly installed and configured MySQL server available, and a PHP configured webserver.</li>\n";
 666
 667 echo "<li>Detailed installation instructions can be found in the <a href='Documentation/INSTALL' target='_blank'><span STYLE='text-decoration: underline;'>'INSTALL'</span></a> manual file.</li>\n";
 668
 669 Echo "<li>If you are upgrading from a previous version, do NOT use this script.  Please read the 'Upgrading' section found in the <a href='Documentation/INSTALL' target='_blank'><span STYLE='text-decoration: underline;'>'INSTALL'</span></a> manual file.</li></ul>";
 670
 671 if ($checkPermissions) {
 672         echo "<p>We will now ensure correct file and directory permissions before starting installation:</p>\n";
 673         echo "<FONT COLOR='green'>Ensuring following files are world-writable...</FONT><br>\n";
 674         $errorWritable = 0;
 675         foreach ($writableFileList as $tempFile) {
 676                 if (is_writable($tempFile)) {
 677                         echo "'".realpath($tempFile)."' file is <FONT COLOR='green'><b>ready</b></FONT>.<br>\n";
 678                 }
 679                 else {
 680                         echo "<p><FONT COLOR='red'>UNABLE</FONT> to open file '".realpath($tempFile)."' for writing.<br>\n";
 681                         echo "(configure file permissions; see below for further instructions)</p>\n";
 682                         $errorWritable = 1;
 683                 }
 684         }
 685         if ($errorWritable) {
 686                 echo "<p><FONT COLOR='red'>You can't proceed until all above files are ready (world-writable).</FONT><br>\n";
 687                 echo "In linux, recommend changing file permissions with the 'chmod 666 filename' command.<br>\n";
 688                 echo "Fix above file permissions and then click the 'Check Again' button to re-check files.<br>\n";
 689     echo "<FORM METHOD='POST'><INPUT TYPE='SUBMIT' VALUE='Check Again'></p>" .
 690       "<INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'></FORM><br>\n";
 691                 break;
 692         }
 693
 694         echo "<br><FONT COLOR='green'>Ensuring following directories have proper permissions...</FONT><br>\n";
 695         $errorWritable = 0;
 696         foreach ($writableDirList as $tempDir) {
 697                 if (is_writable($tempDir)) {
 698                         echo "'".realpath($tempDir)."' directory is <FONT COLOR='green'><b>ready</b></FONT>.<br>\n";
 699                 }
 700                 else {
 701                         echo "<p><FONT COLOR='red'>UNABLE</FONT> to open directory '".realpath($tempDir)."' for writing by web server.<br>\n";
 702                         echo "(configure directory permissions; see below for further instructions)</p>\n";
 703                         $errorWritable = 1;
 704                 }
 705         }
 706         if ($errorWritable) {
 707                 echo "<p><FONT COLOR='red'>You can't proceed until all directories are ready.</FONT><br>\n";
 708                 echo "In linux, recommend changing owners of these directories to the web server. For example, in many linux OS's the web server user is 'apache', 'nobody', or 'www-data'. So if 'apache' were the web server user name, could use the command 'chown -R apache:apache directory_name' command.<br>\n";
 709                 echo "Fix above directory permissions and then click the 'Check Again' button to re-check directories.<br>\n";
 710     echo "<FORM METHOD='POST'><INPUT TYPE='SUBMIT' VALUE='Check Again'></p>" .
 711       "<INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'></FORM><br>\n";
 712                 break;
 713         }
 714
 715         echo "<br>All required files and directories have been verified. Click to continue installation.<br>\n";
 716 }
 717 else {
 718         echo "<br>Click to continue installation.<br>\n";
 719 }
 720
 721 echo "<FORM METHOD='POST'><INPUT TYPE='HIDDEN' NAME='state' VALUE='1'>" .
 722   "<INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'>" .
 723   "<INPUT TYPE='SUBMIT' VALUE='Continue'><br></FORM><br>";
 724
 725 }
 726 }
 727 ?>
 728
 729 </span>
 730
 731 </BODY>
 732 </HTML>