setup.php

   1 <?php
   2 /**
   3  * Installation script.
   4  *
   5  * Copyright (C) 2016 Roberto Vasquez <robertogagliotta@gmail.com>
   6  *
   7  * LICENSE: This program is free software; you can redistribute it and/or
   8  * modify it under the terms of the GNU General Public License
   9  * as published by the Free Software Foundation; either version 2
  10  * of the License, or (at your option) any later version.
  11  * This program is distributed in the hope that it will be usefull,
  12  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  13  * MERCHANTABILITY OF FITNESS FOR A PARTICULAR PURPOSE, See the
  14  * GNU General Public License for more details.
  15  * You should have received a copy of the CNU General Public License
  16  * along with this program. If not, see <http://opensource.org/Licenses/gpl-license.php>;.
  17  *
  18  * @package OpenEMR
  19  * @author Roberto Vasquez <robertogagliotta@gmail.com>
  20  * @author Scott Wakefield <scott@npclinics.com.au>
  21  * @link http://www.open-emr.org
  22  *
  23 **/
  24
  25 $COMMAND_LINE = php_sapi_name() == 'cli';
  26 require_once (dirname(__FILE__) . '/library/authentication/password_hashing.php');
  27 require_once dirname(__FILE__) . '/library/classes/Installer.class.php';
  28
  29 //turn off PHP compatibility warnings
  30 ini_set("session.bug_compat_warn","off");
  31
  32 $state = isset($_POST["state"]) ? ($_POST["state"]) : '';
  33
  34 // Make this true for IPPF.
  35 $ippf_specific = false;
  36
  37 // If this script was invoked with no site ID, then ask for one.
  38 if (!$COMMAND_LINE && empty($_REQUEST['site'])) {
  39   echo "<html>\n";
  40   echo "<head>\n";
  41   echo "<title>OpenEMR Setup Tool</title>\n";
  42   echo "<link rel='stylesheet' href='interface/themes/style_blue.css'>\n";
  43   echo "</head>\n";
  44   echo "<body>\n";
  45   echo "<p><b>Optional Site ID Selection</b></p>\n";
  46   echo "<p>Most OpenEMR installations support only one site.  If that is " .
  47     "true for you then ignore the rest of this text and just click Continue.</p>\n";
  48   echo "<p>Otherwise please enter a unique Site ID here.</p>\n";
  49   echo "<p>A Site ID is a short identifier with no spaces or special " .
  50     "characters other than periods or dashes. It is case-sensitive and we " .
  51     "suggest sticking to lower case letters for ease of use.</p>\n";
  52   echo "<p>If each site will have its own host/domain name, then use that " .
  53     "name as the Site ID (e.g. www.example.com).</p>\n";
  54   echo "<p>The site ID is used to identify which site you will log in to. " .
  55     "If it is a hostname then it is taken from the hostname in the URL. " .
  56     "Otherwise you must append \"?site=<i>siteid</i>\" to the URL used for " .
  57     "logging in.</p>\n";
  58   echo "<p>It is OK for one of the sites to have \"default\" as its ID. This " .
  59     "is the ID that will be used if it cannot otherwise be determined.</p>\n";
  60   echo "<form method='post'><input type='hidden' name='state' value='0'>" .
  61     "Site ID: <input type='text' name='site' value='default'>&nbsp;" .
  62     "<input type='submit' value='Continue'><br></form><br>\n";
  63   echo "</body></html>\n";
  64   exit();
  65 }
  66
  67 // Support "?site=siteid" in the URL, otherwise assume "default".
  68 $site_id = 'default';
  69 if (!$COMMAND_LINE && !empty($_REQUEST['site'])) {
  70   $site_id = trim($_REQUEST['site']);
  71 }
  72
  73 // Die if site ID is empty or has invalid characters.
  74 if (empty($site_id) || preg_match('/[^A-Za-z0-9\\-.]/', $site_id))
  75   die("Site ID '".htmlspecialchars($site_id,ENT_NOQUOTES)."' contains invalid characters.");
  76
  77 //If having problems with file and directory permission
  78 // checking, then can be manually disabled here.
  79 $checkPermissions = True;
  80
  81 $installer = new Installer( $_REQUEST );
  82 global $OE_SITE_DIR; // The Installer sets this
  83
  84 $docsDirectory = "$OE_SITE_DIR/documents";
  85 $billingDirectory = "$OE_SITE_DIR/edi";
  86 $billingDirectory2 = "$OE_SITE_DIR/era";
  87
  88 $billingLogDirectory = dirname(__FILE__)."/library/freeb";
  89 $lettersDirectory = "$OE_SITE_DIR/letter_templates";
  90 $gaclWritableDirectory = dirname(__FILE__)."/gacl/admin/templates_c";
  91 $requiredDirectory1 = dirname(__FILE__)."/interface/main/calendar/modules/PostCalendar/pntemplates/compiled";
  92 $requiredDirectory2 = dirname(__FILE__)."/interface/main/calendar/modules/PostCalendar/pntemplates/cache";
  93
  94 $zendModuleConfigFile = dirname(__FILE__)."/interface/modules/zend_modules/config/application.config.php";
  95
  96 //These are files and dir checked before install for
  97 // correct permissions.
  98 if (is_dir($OE_SITE_DIR)) {
  99   $writableFileList = array($installer->conffile,$zendModuleConfigFile);
 100   $writableDirList = array($docsDirectory, $billingDirectory, $billingDirectory2, $lettersDirectory, $gaclWritableDirectory, $requiredDirectory1, $requiredDirectory2);
 101 }
 102 else {
 103   $writableFileList = array();
 104   $writableDirList = array($OE_SITES_BASE, $gaclWritableDirectory, $requiredDirectory1, $requiredDirectory2);
 105 }
 106
 107 // Include the sqlconf file if it exists yet.
 108 $config = 0;
 109 if (file_exists($OE_SITE_DIR)) {
 110   include_once($installer->conffile);
 111 }
 112 else if ($state > 3) {
 113   // State 3 should have created the site directory if it is missing.
 114   die("Internal error, site directory is missing.");
 115 }
 116
 117 ?>
 118 <HTML>
 119 <HEAD>
 120 <TITLE>OpenEMR Setup Tool</TITLE>
 121 <LINK REL=STYLESHEET HREF="interface/themes/style_sky_blue.css">
 122
 123 <style>
 124 .noclone { }
 125 table.phpset { border-collapse:collapse;   }
 126 table.phpset td, table.phpset th { font-size:9pt; border:1px solid gray; padding:2px; }
 127 </style>
 128
 129 <script type="text/javascript" src="library/js/jquery.js"></script>
 130
 131 <script language="javascript">
 132 // onclick handler for "clone database" checkbox
 133 function cloneClicked() {
 134  var cb = document.forms[0].clone_database;
 135  $('.noclone').css('display', cb.checked ? 'none' : 'block');
 136 }
 137 </script>
 138
 139 </HEAD>
 140 <BODY>
 141
 142 <span class="title">OpenEMR Setup</span>
 143 <br><br>
 144 <span class="text">
 145
 146 <?php
 147  if (strtolower(ini_get('register_globals')) != 'off' && (bool) ini_get('register_globals')) {
 148   echo "It appears that you have register_globals enabled in your php.ini\n" .
 149    "configuration file.  This causes unacceptable security risks.  You must\n" .
 150    "turn it off before continuing with installation.\n";
 151   exit(1);
 152  }
 153
 154  if(!extension_loaded("xml")) {
 155    echo "Error: PHP XML extension missing. To continue, install PHP XML extension, then restart web server.";
 156    exit(1);
 157  }
 158  if( !(extension_loaded("mysql") || extension_loaded("mysqlnd") || extension_loaded("mysqli"))   ) {
 159    echo "Error: PHP MySQL extension missing. To continue, install and enable MySQL extension, then restart web server.";
 160    exit(1);
 161  }
 162  if( !(extension_loaded("mbstring") )   ) {
 163    echo "Error: PHP mb_string extension missing. To continue, install and enable mb_string extension, then restart web server.";
 164    exit(1);
 165  }
 166 ?>
 167
 168 <?php
 169  if ($state == 7) {
 170 ?>
 171
 172 <p>Congratulations! OpenEMR is now installed.</p>
 173
 174 <ul>
 175  <li>Access controls (php-GACL) are installed for fine-grained security, and can be administered in
 176      OpenEMR's admin->acl menu.</li>
 177  <li>Reviewing <?php echo $OE_SITE_DIR; ?>/config.php is a good idea. This file
 178      contains some settings that you may want to change.</li>
 179  <li>There's much information and many extra tools bundled within the OpenEMR installation directory.
 180      Please refer to openemr/Documentation. Many forms and other useful scripts can be found at openemr/contrib.</li>
 181  <li>To ensure a consistent look and feel through out the application using
 182      <a href='http://www.mozilla.org/products/firefox/'>Firefox</a> is recommended.</li>
 183  <li>The OpenEMR project home page, documentation, and forums can be found at <a href = "http://www.open-emr.org" target="_blank">http://www.open-emr.org</a></li>
 184  <li>We pursue grants to help fund the future development of OpenEMR.  To apply for these grants, we need to estimate how many times this program is installed and how many practices are evaluating or using this software.  It would be awesome if you would email us at <a href="mailto:president@oemr.org">president@oemr.org</a> if you have installed this software. The more details about your plans with this software, the better, but even just sending us an email stating you just installed it is very helpful.</li>
 185 </ul>
 186 <p>
 187 We recommend you print these instructions for future reference.
 188 </p>
 189 <?php if (empty($installer->clone_database)) {
 190   echo "<p><b>The initial OpenEMR user is '".$installer->iuser."' and the password is '".$installer->iuserpass."'</b></p>";
 191   echo "<p>If you edited the PHP or Apache configuration files during this installation process, then we recommend you restart your Apache server before following below OpenEMR link.</p>";
 192 } ?>
 193 <p>
 194  <a href='./?site=<?php echo $site_id; ?>'>Click here to start using OpenEMR. </a>
 195 </p>
 196
 197 <?php
 198   exit();
 199  }
 200 ?>
 201
 202 <?php
 203
 204 $inst = isset($_POST["inst"]) ? ($_POST["inst"]) : '';
 205
 206
 207 if (($config == 1) && ($state < 4)) {
 208   echo "OpenEMR has already been installed.  If you wish to force re-installation, then edit $installer->conffile (change the 'config' variable to 0), and re-run this script.<br>\n";
 209 }
 210 else {
 211   switch ($state) {
 212
 213   case 1:
 214     echo "<b>Step $state</b><br><br>\n";
 215     echo "Now I need to know whether you want me to create the database on my own or if you have already created the database for me to use.  For me to create the database, you will need to supply the MySQL root password.\n
 216 <span class='title'> <br />NOTE: clicking on \"Continue\" may delete or cause damage to data on your system. Before you continue please backup your data.</span>
 217 <br><br>\n
 218 <FORM METHOD='POST'>\n
 219 <INPUT TYPE='HIDDEN' NAME='state' VALUE='2'>\n
 220 <INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'>\n
 221 <LABEL FOR='inst1'><INPUT TYPE='RADIO' ID='inst1' NAME='inst' VALUE='1' checked>Have setup create the database</label><br>\n
 222 <LABEL FOR='inst2'><INPUT TYPE='RADIO' ID='inst2' NAME='inst' VALUE='2'>I have already created the database</label><br>\n
 223 <br>\n
 224 <INPUT TYPE='SUBMIT' VALUE='Continue'><br></FORM><br>\n";
 225     break;
 226
 227   case 2:
 228     echo "<b>Step $state</b><br><br>\n";
 229     echo "Now you need to supply the MySQL server information and path information. Detailed instructions on each item can be found in the <a href='Documentation/INSTALL' target='_blank'><span STYLE='text-decoration: underline;'>'INSTALL'</span></a> manual file.
 230 <br><br>\n
 231 <FORM METHOD='POST'>
 232 <INPUT TYPE='HIDDEN' NAME='state' VALUE='3'>
 233 <INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'>\n
 234 <INPUT TYPE='HIDDEN' NAME='inst' VALUE='$inst'>
 235 <TABLE>\n
 236 <TR VALIGN='TOP'><TD COLSPAN=2><font color='red'>MYSQL SERVER:</font></TD></TR>
 237 <TR VALIGN='TOP'><TD><span class='text'>Server Host: </span></TD><TD><INPUT TYPE='TEXT' VALUE='localhost' NAME='server' SIZE='30'></TD><TD><span class='text'>(If you run MySQL and Apache/PHP on the same computer, then leave this as 'localhost'. If they are on separate computers, then enter the IP address of the computer running MySQL.)</span><br></TD></TR>
 238 <TR VALIGN='TOP'><TD><span class='text'>Server Port: </span></TD><TD><INPUT TYPE='TEXT' VALUE='3306' NAME='port' SIZE='30'></TD><TD><span class='text'>(This is the MySQL port. The default port for MySQL is 3306.)</span><br></TD></TR>
 239 <TR VALIGN='TOP'><TD><span class='text'>Database Name: </span></TD><TD><INPUT TYPE='TEXT' VALUE='openemr' NAME='dbname' SIZE='30'></TD><TD><span class='text'>(This is the name of the OpenEMR database in MySQL - 'openemr' is the recommended)</span><br></TD></TR>
 240 <TR VALIGN='TOP'><TD><span class='text'>Login Name: </span></TD><TD><INPUT TYPE='TEXT' VALUE='openemr' NAME='login' SIZE='30'></TD><TD><span class='text'>(This is the name of the OpenEMR login name in MySQL - 'openemr' is the recommended)</span><br></TD></TR>
 241 <TR VALIGN='TOP'><TD><span class='text'>Password: </span></TD><TD><INPUT TYPE='PASSWORD' VALUE='' NAME='pass' SIZE='30'></TD><TD><span class='text'>(This is the Login Password for when PHP accesses MySQL - it should be at least 8 characters long and composed of both numbers and letters)</span><br></TD></TR>\n";
 242     if ($inst != 2) {
 243       echo "<TR VALIGN='TOP'><TD><span class='text'>Name for Root Account: </span></TD><TD><INPUT TYPE='TEXT' VALUE='root' NAME='root' SIZE='30'></TD><TD><span class='text'>(This is name for MySQL root account. For localhost, it is usually ok to leave it 'root'.)</span><br></TD></TR>
 244 <TR VALIGN='TOP'><TD><span class='text'>Root Pass: </span></TD><TD><INPUT TYPE='PASSWORD' VALUE='' NAME='rootpass' SIZE='30'></TD><TD><span class='text'>(This is your MySQL root password. For localhost, it is usually ok to leave it blank.)</span><br></TD></TR>\n";
 245       echo "<TR VALIGN='TOP'><TD><span class='text'>User Hostname: </span></TD><TD><INPUT TYPE='TEXT' VALUE='localhost' NAME='loginhost' SIZE='30'></TD><TD><span class='text'>(If you run Apache/PHP and MySQL on the same computer, then leave this as 'localhost'. If they are on separate computers, then enter the IP address of the computer running Apache/PHP.)</span><br></TD></TR>";
 246       echo "<TR VALIGN='TOP'><TD><span class='text'>UTF-8 Collation: </span></TD><TD colspan='2'>" .
 247   "<select name='collate'>" .
 248   "<option value='utf8_bin'          >Bin</option>" .
 249   "<option value='utf8_czech_ci'     >Czech</option>" .
 250   "<option value='utf8_danish_ci'    >Danish</option>" .
 251   "<option value='utf8_esperanto_ci' >Esperanto</option>" .
 252   "<option value='utf8_estonian_ci'  >Estonian</option>" .
 253   "<option value='utf8_general_ci' selected>General</option>" .
 254   "<option value='utf8_hungarian_ci' >Hungarian</option>" .
 255   "<option value='utf8_icelandic_ci' >Icelandic</option>" .
 256   "<option value='utf8_latvian_ci'   >Latvian</option>" .
 257   "<option value='utf8_lithuanian_ci'>Lithuanian</option>" .
 258   "<option value='utf8_persian_ci'   >Persian</option>" .
 259   "<option value='utf8_polish_ci'    >Polish</option>" .
 260   "<option value='utf8_roman_ci'     >Roman</option>" .
 261   "<option value='utf8_romanian_ci'  >Romanian</option>" .
 262   "<option value='utf8_slovak_ci'    >Slovak</option>" .
 263   "<option value='utf8_slovenian_ci' >Slovenian</option>" .
 264   "<option value='utf8_spanish2_ci'  >Spanish2 (Traditional)</option>" .
 265   "<option value='utf8_spanish_ci'   >Spanish (Modern)</option>" .
 266   "<option value='utf8_swedish_ci'   >Swedish</option>" .
 267   "<option value='utf8_turkish_ci'   >Turkish</option>" .
 268   "<option value='utf8_unicode_ci'   >Unicode (German, French, Russian, Armenian, Greek)</option>" .
 269   "<option value=''                  >None (Do not force UTF-8)</option>" .
 270   "</select>" .
 271   "</TD></TR><TR VALIGN='TOP'><TD>&nbsp;</TD><TD colspan='2'><span class='text'>(This is the collation setting for mysql. Leave as 'General' if you are not sure. If the language you are planning to use in OpenEMR is in the menu, then you can select it. Otherwise, just select 'General'.)</span><br></TD></TR>";
 272 }
 273     echo "<TR VALIGN='TOP'><TD>&nbsp;</TD></TR>";
 274
 275     // Include a "source" site ID drop-list and a checkbox to indicate
 276     // if cloning its database.  When checked, do not display initial user
 277     // and group stuff below.
 278     $dh = opendir($OE_SITES_BASE);
 279     if (!$dh) die("Cannot read directory '$OE_SITES_BASE'.");
 280     $siteslist = array();
 281     while (false !== ($sfname = readdir($dh))) {
 282       if (substr($sfname, 0, 1) == '.') continue;
 283       if ($sfname == 'CVS'            ) continue;
 284       if ($sfname == $site_id         ) continue;
 285       $sitedir = "$OE_SITES_BASE/$sfname";
 286       if (!is_dir($sitedir)               ) continue;
 287       if (!is_file("$sitedir/sqlconf.php")) continue;
 288       $siteslist[$sfname] = $sfname;
 289     }
 290     closedir($dh);
 291     // If this is not the first site...
 292     if (!empty($siteslist)) {
 293       ksort($siteslist);
 294       echo "<tr valign='top'>\n";
 295       echo " <td class='text'>Source Site: </td>\n";
 296       echo " <td class='text'><select name='source_site_id'>";
 297       foreach ($siteslist as $sfname) {
 298         echo "<option value='$sfname'";
 299         if ($sfname == 'default') echo " selected";
 300         echo ">$sfname</option>";
 301       }
 302       echo "</select></td>\n";
 303       echo " <td class='text'>(The site directory that will be a model for the new site.)</td>\n";
 304       echo "</tr>\n";
 305       echo "<tr valign='top'>\n";
 306       echo " <td class='text'>Clone Source Database: </td>\n";
 307       echo " <td class='text'><input type='checkbox' name='clone_database' onclick='cloneClicked()' /></td>\n";
 308       echo " <td class='text'>(Clone the source site's database instead of creating a fresh one.)</td>\n";
 309       echo "</tr>\n";
 310     }
 311
 312     echo "<TR VALIGN='TOP' class='noclone'><TD COLSPAN=2><font color='red'>OPENEMR USER:</font></TD></TR>";
 313     echo "<TR VALIGN='TOP' class='noclone'><TD><span class='text'>Initial User:</span></TD><TD><INPUT SIZE='30' TYPE='TEXT' NAME='iuser' VALUE='admin'></TD><TD><span class='text'>(This is the login name of user that will be created for you. Limit this to one word.)</span></TD></TR>
 314 <TR VALIGN='TOP' class='noclone'><TD><span class='text'>Initial User Password:</span></TD><TD><INPUT SIZE='30' TYPE='PASSWORD' NAME='iuserpass' VALUE=''></TD><TD><span class='text'>(This is the password for the initial user account above.)</span></TD></TR>
 315 <TR VALIGN='TOP' class='noclone'><TD><span class='text'>Initial User's First Name:</span></TD><TD><INPUT SIZE='30' TYPE='TEXT' NAME='iufname' VALUE='Administrator'></TD><TD><span class='text'>(This is the First name of the 'initial user'.)</span></TD></TR>
 316 <TR VALIGN='TOP' class='noclone'><TD><span class='text'>Initial User's Last Name:</span></TD><TD><INPUT SIZE='30' TYPE='TEXT' NAME='iuname' VALUE='Administrator'></TD><TD><span class='text'>(This is the Last name of the 'initial user'.)</span></TD></TR>
 317 <TR VALIGN='TOP' class='noclone'><TD><span class='text'>Initial Group:</span></TD><TD><INPUT SIZE='30' TYPE='TEXT' NAME='igroup' VALUE='Default'></TD><TD><span class='text'>(This is the group that will be created for your users.  This should be the name of your practice.)</span></TD></TR>
 318 ";
 319     echo "<TR VALIGN='TOP'><TD>&nbsp;</TD></TR>";
 320
 321     echo "</TABLE>
 322 <br>
 323 <INPUT TYPE='SUBMIT' VALUE='Continue'><br></FORM><br>";
 324     break;
 325
 326   case 3:
 327
 328     // Form Validation
 329     //   (applicable if not cloning from another database)
 330
 331     $pass_step2_validation = TRUE;
 332     $error_step2_message   = "ERROR at ";
 333
 334     if ( ! $installer->char_is_valid($_REQUEST['server'])) {
 335        $pass_step2_validation = FALSE;
 336        $error_step2_message .=  "Database Server Host, ";
 337     }
 338
 339     if ( ! $installer->char_is_valid($_REQUEST['port']))  {
 340         $pass_step2_validation = FALSE;
 341         $error_step2_message .=  "Database Server Port, ";
 342     }
 343     if ( ! $installer->char_is_valid($_REQUEST['dbname']))  {
 344         $pass_step2_validation = FALSE;
 345         $error_step2_message .= "Database Name, ";
 346     }
 347     if ( ! $installer->char_is_valid($_REQUEST['login']))  {
 348         $pass_step2_validation = FALSE;
 349         $error_step2_message .= "Database Login Name, ";
 350     }
 351     if ( ! $installer->char_is_valid($_REQUEST['pass']))  {
 352         $pass_step2_validation = FALSE;
 353         $error_step2_message .= "Database Login Password, ";
 354     }
 355     if (!$pass_step2_validation) {
 356        die($error_step2_message);
 357      }
 358
 359
 360     if (empty($installer->clone_database)) {
 361       if ( ! $installer->login_is_valid() ) {
 362         echo "ERROR. Please pick a proper 'Login Name'.<br>\n";
 363         echo "Click Back in browser to re-enter.<br>\n";
 364         break;
 365       }
 366       if ( ! $installer->iuser_is_valid() ) {
 367         echo "ERROR. The 'Initial User' field can only contain one word and no spaces.<br>\n";
 368         echo "Click Back in browser to re-enter.<br>\n";
 369         break;
 370       }
 371       if ( ! $installer->user_password_is_valid() ) {
 372         echo "ERROR. Please pick a proper 'Initial User Password'.<br>\n";
 373         echo "Click Back in browser to re-enter.<br>\n";
 374         break;
 375       }
 376     }
 377     if ( ! $installer->password_is_valid() ) {
 378       echo "ERROR. Please pick a proper 'Password'.<br>\n";
 379       echo "Click Back in browser to re-enter.<br>\n";
 380       break;
 381     }
 382
 383     echo "<b>Step $state</b><br><br>\n";
 384     echo "Configuring OpenEMR...<br><br>\n";
 385
 386     // Skip below if database shell has already been created.
 387     if ($inst != 2) {
 388
 389       echo "Connecting to MySQL Server...\n";
 390       flush();
 391       if ( ! $installer->root_database_connection() ) {
 392         echo "ERROR.  Check your login credentials.\n";
 393         echo $installer->error_message;
 394         break;
 395       }
 396       else {
 397         echo "OK.<br>\n";
 398         flush();
 399       }
 400     }
 401
 402     // Only pertinent if cloning another installation database
 403     if ( ! empty($installer->clone_database)) {
 404
 405       echo "Dumping source database...";
 406       flush();
 407       if ( ! $installer->create_dumpfiles() ) {
 408         echo $installer->error_message;
 409         break;
 410       }
 411       else {
 412         echo " OK.<br>\n";
 413         flush();
 414       }
 415     }
 416
 417     // Only pertinent if mirroring another installation directory
 418     if ( ! empty($installer->source_site_id)) {
 419
 420       echo "Creating site directory...";
 421       if ( ! $installer->create_site_directory() ) {
 422         echo $installer->error_message;
 423         break;
 424       }
 425       else {
 426         echo "OK.<BR>";
 427         flush();
 428       }
 429     }
 430
 431     // Skip below if database shell has already been created.
 432     if ($inst != 2) {
 433       echo "Creating database...\n";
 434       flush();
 435       if ( ! $installer->create_database() ) {
 436         echo "ERROR.  Check your login credentials.\n";
 437         echo $installer->error_message;
 438         break;
 439       } else {
 440         echo "OK.<br>\n";
 441         flush();
 442       }
 443
 444       echo "Creating user with permissions for database...\n";
 445       flush();
 446       if ( ! $installer->grant_privileges() ) {
 447         echo "ERROR when granting privileges to the specified user.\n";
 448         echo $installer->error_message;
 449         break;
 450       } else {
 451         echo "OK.<br>\n";
 452         flush();
 453       }
 454
 455       echo "Reconnecting as new user...\n";
 456       flush();
 457       $installer->disconnect();
 458     } else {
 459
 460       echo "Connecting to MySQL Server...\n";
 461     }
 462     if ( ! $installer->user_database_connection() ) {
 463       echo "ERROR.  Check your login credentials.\n";
 464       echo $installer->error_message;
 465       break;
 466     }
 467     else {
 468       echo "OK.<br>\n";
 469       flush();
 470     }
 471
 472     // Load the database files
 473     $dump_results = $installer->load_dumpfiles();
 474     if ( ! $dump_results ) {
 475       echo $installer->error_message;
 476       break;
 477     } else {
 478       echo $dump_results;
 479       flush();
 480     }
 481
 482     echo "Writing SQL configuration...\n";
 483     flush();
 484     if ( ! $installer->write_configuration_file() ) {
 485       echo $installer->error_message;
 486       break;
 487     }
 488     else {
 489       echo "OK.<br>\n";
 490       flush();
 491     }
 492
 493     // Only pertinent if not cloning another installation database
 494     if (empty($installer->clone_database)) {
 495
 496       echo "Setting version indicators...\n";
 497       flush();
 498       if ( ! $installer->add_version_info() ) {
 499         echo "ERROR.\n";
 500         echo $installer->error_message;;
 501         break;
 502       }
 503       else {
 504         echo "OK<br>\n";
 505         flush();
 506       }
 507
 508       echo "Writing global configuration defaults...\n";
 509       flush();
 510       if ( ! $installer->insert_globals() ) {
 511         echo "ERROR.\n";
 512         echo $installer->error_message;;
 513         break;
 514       }
 515       else {
 516         echo "OK<br>\n";
 517         flush();
 518       }
 519
 520       echo "Adding Initial User...\n";
 521       flush();
 522       if ( ! $installer->add_initial_user() ) {
 523         echo $installer->error_message;
 524         break;
 525       }
 526       echo "OK<br>\n";
 527       flush();
 528     }
 529
 530     if ( ! empty($installer->clone_database) ) {
 531       // Database was cloned, skip ACL setup.
 532       echo "Click 'continue' for further instructions.";
 533       $next_state = 7;
 534     }
 535     else {
 536       echo "\n<br>Next step will install and configure access controls (php-GACL).<br>\n";
 537       $next_state = 4;
 538     }
 539
 540     echo "
 541 <FORM METHOD='POST'>\n
 542 <INPUT TYPE='HIDDEN' NAME='state' VALUE='$next_state'>
 543 <INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'>\n
 544 <INPUT TYPE='HIDDEN' NAME='iuser' VALUE='$installer->iuser'>
 545 <INPUT TYPE='HIDDEN' NAME='iuserpass' VALUE='$installer->iuserpass'>
 546 <INPUT TYPE='HIDDEN' NAME='iuname' VALUE='$installer->iuname'>
 547 <INPUT TYPE='HIDDEN' NAME='iufname' VALUE='$installer->iufname'>
 548 <INPUT TYPE='HIDDEN' NAME='clone_database' VALUE='$installer->clone_database'>
 549 <br>\n
 550 <INPUT TYPE='SUBMIT' VALUE='Continue'><br></FORM><br>\n";
 551
 552     break;
 553   case 4:
 554     echo "<b>Step $state</b><br><br>\n";
 555     echo "Installing and Configuring Access Controls (php-GACL)...<br><br>";
 556
 557     if ( ! $installer->install_gacl() ) {
 558       echo $installer->error_message;
 559       break;
 560     }
 561     else {
 562       // display the status information for gacl setup
 563       echo $installer->debug_message;
 564     }
 565
 566     echo "Gave the '$installer->iuser' user (password is '$installer->iuserpass') administrator access.<br><br>";
 567
 568     echo "Done installing and configuring access controls (php-GACL).<br>";
 569     echo "Next step will configure PHP.";
 570
 571     echo "<br><FORM METHOD='POST'>\n
 572 <INPUT TYPE='HIDDEN' NAME='state' VALUE='5'>\n
 573 <INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'>\n
 574 <INPUT TYPE='HIDDEN' NAME='iuser' VALUE='$installer->iuser'>\n
 575 <INPUT TYPE='HIDDEN' NAME='iuserpass' VALUE='$installer->iuserpass'>\n
 576 <br>\n
 577 <INPUT TYPE='SUBMIT' VALUE='Continue'><br></FORM><br>\n";
 578
 579     break;
 580
 581   case 5:
 582     echo "<b>Step $state</b><br><br>\n";
 583     echo "Configuration of PHP...<br><br>\n";
 584     echo "We recommend making the following changes to your PHP installation, which can normally be done by editing the php.ini configuration file:\n";
 585     echo "<ul>";
 586     $gotFileFlag = 0;
 587     if (version_compare(PHP_VERSION, '5.2.4', '>=')) {
 588       $phpINIfile = php_ini_loaded_file();
 589       if ($phpINIfile) {
 590         echo "<li><font color='green'>Your php.ini file can be found at ".$phpINIfile."</font></li>\n";
 591         $gotFileFlag = 1;
 592       }
 593     }
 594 echo "<li>","To ensure proper functioning of OpenEMR you must make sure that PHP settings include:";
 595 echo "<table class='phpset'><tr><th>Setting</th><th>Required value</th><th>Current value</th></tr>";
 596 echo "<tr><td>short_open_tag  </td><td>Off</td><td>", ini_get('short_open_tag')?'On':'Off',   "</td></tr>\n";
 597 echo "<tr><td>display_errors  </td><td>Off</td><td>", ini_get('display_errors')?'On':'Off',   "</td></tr>\n";
 598 echo "<tr><td>register_globals   </td><td>Off</td><td>", ini_get('register_globals')?'On':'Off', "</td></tr>\n";
 599 echo "<tr><td>max_input_vars     </td><td>at least 3000</td><td>", ini_get('max_input_vars'), "</td></tr>\n";
 600 echo "<tr><td>max_execution_time </td><td>at least 60</td><td>", ini_get('max_execution_time'), "</td></tr>\n";
 601 echo "<tr><td>max_input_time     </td><td>at least 90</td><td>", ini_get('max_input_time'), "</td></tr>\n";
 602 echo "<tr><td>post_max_size      </td><td>at least 30M</td><td>", ini_get('post_max_size'), "</td></tr>\n";
 603 echo "<tr><td>memory_limit       </td><td>at least 128M</td><td>", ini_get('memory_limit'), "</td></tr>\n";
 604 echo "</table>";
 605 echo "</li>";
 606
 607 echo "<li>In order to take full advantage of the patient documents capability you must make sure that settings in php.ini file include \"file_uploads = On\", that \"upload_max_filesize\" is appropriate for your use and that \"upload_tmp_dir\" is set to a correct value that will work on your system.</li>\n";
 608 if (!$gotFileFlag) {
 609     echo "<li>If you are having difficulty finding your php.ini file, then refer to the <a href='Documentation/INSTALL' target='_blank'><span STYLE='text-decoration: underline;'>'INSTALL'</span></a> manual for suggestions.</li>\n";
 610 }
 611 echo "</ul>";
 612
 613 echo "<br>We recommend you print these instructions for future reference.<br><br>";
 614 echo "Next step will configure Apache web server.";
 615
 616 echo "<br><FORM METHOD='POST'>\n
 617 <INPUT TYPE='HIDDEN' NAME='state' VALUE='6'>\n
 618 <INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'>\n
 619 <INPUT TYPE='HIDDEN' NAME='iuser' VALUE='$installer->iuser'>\n
 620 <INPUT TYPE='HIDDEN' NAME='iuserpass' VALUE='$installer->iuserpass'>\n
 621 <br>\n
 622 <INPUT TYPE='SUBMIT' VALUE='Continue'><br></FORM><br>\n";
 623
 624 break;
 625
 626        case 6:
 627 echo "<b>Step $state</b><br><br>\n";
 628 echo "Configuration of Apache web server...<br><br>\n";
 629 echo "The \"".preg_replace("/${site_id}/","*",realpath($docsDirectory))."\", \"".preg_replace("/${site_id}/","*",realpath($billingDirectory))."\" and \"".preg_replace("/${site_id}/","*",realpath($billingDirectory2))."\" directories contain patient information, and
 630 it is important to secure these directories. Additionally, some settings are required for the Zend Framework to work in OpenEMR. This can be done by pasting the below to end of your apache configuration file:<br>
 631 &nbsp;&nbsp;&lt;Directory \"".realpath(dirname(__FILE__))."\"&gt;<br>
 632 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;AllowOverride FileInfo<br>
 633 &nbsp;&nbsp;&lt;/Directory&gt;<br>
 634 &nbsp;&nbsp;&lt;Directory \"".realpath(dirname(__FILE__))."/sites\"&gt;<br>
 635 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;AllowOverride None<br>
 636 &nbsp;&nbsp;&lt;/Directory&gt;<br>
 637 &nbsp;&nbsp;&lt;Directory \"".preg_replace("/${site_id}/","*",realpath($docsDirectory))."\"&gt;<br>
 638 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;order deny,allow<br>
 639 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Deny from all<br>
 640 &nbsp;&nbsp;&lt;/Directory&gt;<br>
 641 &nbsp;&nbsp;&lt;Directory \"".preg_replace("/${site_id}/","*",realpath($billingDirectory))."\"&gt;<br>
 642 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;order deny,allow<br>
 643 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Deny from all<br>
 644 &nbsp;&nbsp;&lt;/Directory&gt;<br>
 645 &nbsp;&nbsp;&lt;Directory \"".preg_replace("/${site_id}/","*",realpath($billingDirectory2))."\"&gt;<br>
 646 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;order deny,allow<br>
 647 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Deny from all<br>
 648 &nbsp;&nbsp;&lt;/Directory&gt;<br><br>";
 649
 650 echo "If you are having difficulty finding your apache configuration file, then refer to the <a href='Documentation/INSTALL' target='_blank'><span STYLE='text-decoration: underline;'>'INSTALL'</span></a> manual for suggestions.<br><br>\n";
 651 echo "<br>We recommend you print these instructions for future reference.<br><br>";
 652 echo "Click 'continue' for further instructions.";
 653
 654 echo "<br><FORM METHOD='POST'>\n
 655 <INPUT TYPE='HIDDEN' NAME='state' VALUE='7'>\n
 656 <INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'>\n
 657 <INPUT TYPE='HIDDEN' NAME='iuser' VALUE='$installer->iuser'>\n
 658 <INPUT TYPE='HIDDEN' NAME='iuserpass' VALUE='$installer->iuserpass'>\n
 659 <br>\n
 660 <INPUT TYPE='SUBMIT' VALUE='Continue'><br></FORM><br>\n";
 661
 662 break;
 663
 664         case 0:
 665         default:
 666 echo "<p>Welcome to OpenEMR.  This utility will step you through the installation and configuration of OpenEMR for your practice.</p>\n";
 667 echo "<ul><li>Before proceeding, be sure that you have a properly installed and configured MySQL server available, and a PHP configured webserver.</li>\n";
 668
 669 echo "<li>Detailed installation instructions can be found in the <a href='Documentation/INSTALL' target='_blank'><span STYLE='text-decoration: underline;'>'INSTALL'</span></a> manual file.</li>\n";
 670
 671 Echo "<li>If you are upgrading from a previous version, do NOT use this script.  Please read the 'Upgrading' section found in the <a href='Documentation/INSTALL' target='_blank'><span STYLE='text-decoration: underline;'>'INSTALL'</span></a> manual file.</li></ul>";
 672
 673 if ($checkPermissions) {
 674         echo "<p>We will now ensure correct file and directory permissions before starting installation:</p>\n";
 675         echo "<FONT COLOR='green'>Ensuring following files are world-writable...</FONT><br>\n";
 676         $errorWritable = 0;
 677         foreach ($writableFileList as $tempFile) {
 678                 if (is_writable($tempFile)) {
 679                         echo "'".realpath($tempFile)."' file is <FONT COLOR='green'><b>ready</b></FONT>.<br>\n";
 680                 }
 681                 else {
 682                         echo "<p><FONT COLOR='red'>UNABLE</FONT> to open file '".realpath($tempFile)."' for writing.<br>\n";
 683                         echo "(configure file permissions; see below for further instructions)</p>\n";
 684                         $errorWritable = 1;
 685                 }
 686         }
 687         if ($errorWritable) {
 688                 echo "<p><FONT COLOR='red'>You can't proceed until all above files are ready (world-writable).</FONT><br>\n";
 689                 echo "In linux, recommend changing file permissions with the 'chmod 666 filename' command.<br>\n";
 690                 echo "Fix above file permissions and then click the 'Check Again' button to re-check files.<br>\n";
 691     echo "<FORM METHOD='POST'><INPUT TYPE='SUBMIT' VALUE='Check Again'></p>" .
 692       "<INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'></FORM><br>\n";
 693                 break;
 694         }
 695
 696         echo "<br><FONT COLOR='green'>Ensuring following directories have proper permissions...</FONT><br>\n";
 697         $errorWritable = 0;
 698         foreach ($writableDirList as $tempDir) {
 699                 if (is_writable($tempDir)) {
 700                         echo "'".realpath($tempDir)."' directory is <FONT COLOR='green'><b>ready</b></FONT>.<br>\n";
 701                 }
 702                 else {
 703                         echo "<p><FONT COLOR='red'>UNABLE</FONT> to open directory '".realpath($tempDir)."' for writing by web server.<br>\n";
 704                         echo "(configure directory permissions; see below for further instructions)</p>\n";
 705                         $errorWritable = 1;
 706                 }
 707         }
 708         if ($errorWritable) {
 709                 echo "<p><FONT COLOR='red'>You can't proceed until all directories are ready.</FONT><br>\n";
 710                 echo "In linux, recommend changing owners of these directories to the web server. For example, in many linux OS's the web server user is 'apache', 'nobody', or 'www-data'. So if 'apache' were the web server user name, could use the command 'chown -R apache:apache directory_name' command.<br>\n";
 711                 echo "Fix above directory permissions and then click the 'Check Again' button to re-check directories.<br>\n";
 712     echo "<FORM METHOD='POST'><INPUT TYPE='SUBMIT' VALUE='Check Again'></p>" .
 713       "<INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'></FORM><br>\n";
 714                 break;
 715         }
 716
 717         echo "<br>All required files and directories have been verified. Click to continue installation.<br>\n";
 718 }
 719 else {
 720         echo "<br>Click to continue installation.<br>\n";
 721 }
 722
 723 echo "<FORM METHOD='POST'><INPUT TYPE='HIDDEN' NAME='state' VALUE='1'>" .
 724   "<INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'>" .
 725   "<INPUT TYPE='SUBMIT' VALUE='Continue'><br></FORM><br>";
 726
 727 }
 728 }
 729 ?>
 730
 731 </span>
 732
 733 </BODY>
 734 </HTML>