mirror of
https://github.com/itflow-org/itflow
synced 2026-08-05 15:17:17 +00:00
ae468d6cee
Backups are now AES-256 encrypted zips in three types (full, database only, master key), catalogued in a new backups table, built by cron rather than the web request, and kept under uploads/backups with retention in the nightly job. The encryption key is one value per install held in config.php, never in the database and never in the file name. Restore is shared by the setup wizard and the new scripts/restore_cli.php, which is the only path without an upload size limit. It verifies the key and unpacks the archive before dropping anything, and dumps the current database first so a failed import is rolled back. A backup dumps, zips and encrypts for minutes without issuing a query, so on a server with a short wait_timeout the connection is closed underneath it and the UPDATE marking the backup complete is what fails - long after the archive was written correctly. The connection is now held open for the job and re-established before any write that follows long file work, including the database phase of a restore. Retention recovers rows a dropped connection left behind: still Running after six hours becomes Complete if the archive is on disk, Failed if it is not. cron.php's own failure path is hardened to match. It recorded job failures through the same connection the failing job had just killed, so an uncaught exception ended the dispatch and no trace of the original error survived. Failures now also echo to stdout, so cron mails something useful when the database is unreachable. Security: the setup wizard's restore step is now closed on any install that has users, whatever config.php says. $config_enable_setup defaulted to enabled when the flag was absent, and the flag is only written at the end of a successful install, so an install abandoned partway left an unauthenticated endpoint that would drop every table, import an attacker-supplied archive, and overwrite uploads/ including the .htaccess that stops PHP running there. Affects 26.07 and earlier. Restoring over a live install is now CLI only.
1551 lines
87 KiB
PHP
1551 lines
87 KiB
PHP
<?php
|
|
|
|
if (file_exists("../config.php")) {
|
|
include "../config.php";
|
|
|
|
}
|
|
|
|
include "../functions.php"; // Global Functions
|
|
include "../includes/database_version.php";
|
|
|
|
$mysqli_available = isset($mysqli) && $mysqli instanceof mysqli;
|
|
$can_show_restore = false;
|
|
$should_skip_to_user = false;
|
|
|
|
/*
|
|
* An install with users in it is a live install, and setup is closed on one whatever
|
|
* config.php says.
|
|
*
|
|
* This used to default $config_enable_setup to 1 when the flag was absent, which fails the
|
|
* wrong way: config.php is written when the database step completes but the flag is only
|
|
* appended at the very end of a successful run, so an install abandoned in between - or one
|
|
* where that final append failed - left the restore below reachable with no authentication
|
|
* at all. That endpoint drops every table and imports whatever archive it is handed, and it
|
|
* rewrites the uploads directory, including the .htaccess that stops PHP running there.
|
|
*/
|
|
$install_is_live = false;
|
|
|
|
if (file_exists("../config.php") && $mysqli_available) {
|
|
$table_result = mysqli_query($mysqli, "SHOW TABLES LIKE 'users'");
|
|
if ($table_result && mysqli_num_rows($table_result) > 0) {
|
|
$should_skip_to_user = true;
|
|
|
|
$user_count_result = mysqli_query($mysqli, "SELECT COUNT(*) AS user_count FROM users");
|
|
if ($user_count_result) {
|
|
$user_count_row = mysqli_fetch_assoc($user_count_result);
|
|
if (intval($user_count_row['user_count']) > 0) {
|
|
$install_is_live = true;
|
|
}
|
|
} else {
|
|
// Cannot prove the install is empty, so treat it as live
|
|
$install_is_live = true;
|
|
}
|
|
}
|
|
|
|
// Restore needs a database connection and an empty install. A populated one restores
|
|
// from the command line instead - scripts/restore_cli.php.
|
|
if (!$install_is_live) {
|
|
$all_tables = mysqli_query($mysqli, "SHOW TABLES");
|
|
if ($all_tables && mysqli_num_rows($all_tables) > 0) {
|
|
$can_show_restore = true;
|
|
}
|
|
}
|
|
}
|
|
|
|
if (!isset($config_enable_setup)) {
|
|
$config_enable_setup = $install_is_live ? 0 : 1;
|
|
}
|
|
|
|
if ($config_enable_setup == 0 || $install_is_live) {
|
|
header("Location: /login.php");
|
|
exit;
|
|
}
|
|
|
|
include_once "../includes/settings_localization_array.php";
|
|
$errorLog = ini_get('error_log') ?: "Debian/Ubuntu default is usually /var/log/apache2/error.log";
|
|
|
|
// Get a list of all available timezones
|
|
$timezones = DateTimeZone::listIdentifiers();
|
|
|
|
if (isset($_POST['add_database'])) {
|
|
|
|
// Check if database has been set up already. If it has, direct user to edit directly instead.
|
|
if (file_exists('../config.php')) {
|
|
$_SESSION['alert_message'] = "Database already configured. Any further changes should be made by editing the config.php file.";
|
|
header("Location: ?user");
|
|
exit;
|
|
}
|
|
|
|
$host = filter_var(trim($_POST['host']), FILTER_SANITIZE_STRING);
|
|
$database = filter_var(trim($_POST['database']), FILTER_SANITIZE_STRING);
|
|
$username = filter_var(trim($_POST['username']), FILTER_SANITIZE_STRING);
|
|
$password = filter_var(trim($_POST['password']), FILTER_SANITIZE_STRING);
|
|
$config_base_url = $_SERVER['HTTP_HOST'];
|
|
|
|
$installation_id = randomString(32);
|
|
|
|
// Ensure variables meet specific criteria (very basic examples)
|
|
if (!preg_match('/^[a-zA-Z0-9.-]+$/', $host)) {
|
|
die('Invalid host format.');
|
|
}
|
|
|
|
// Test database connection before writing it to config.php
|
|
|
|
$conn = mysqli_connect($host, $username, $password, $database);
|
|
if (!$conn) {
|
|
exit("<b>Database connection failed - please check and try again</b> <br> <br>" . mysqli_connect_error());
|
|
}
|
|
|
|
$new_config = "<?php\n\n";
|
|
$new_config .= "\$dbhost = " . var_export($host, true) . ";\n";
|
|
$new_config .= "\$dbusername = " . var_export($username, true) . ";\n";
|
|
$new_config .= "\$dbpassword = " . var_export($password, true) . ";\n";
|
|
$new_config .= "\$database = " . var_export($database, true) . ";\n";
|
|
$new_config .= "\$mysqli = mysqli_connect(\$dbhost, \$dbusername, \$dbpassword, \$database) or die('Database Connection Failed');\n";
|
|
$new_config .= "\$config_app_name = 'ITFlow';\n";
|
|
$new_config .= sprintf("\$config_base_url = '%s';\n", addslashes($config_base_url));
|
|
$new_config .= "\$config_https_only = TRUE;\n";
|
|
$new_config .= "\$repo_branch = 'master';\n";
|
|
$new_config .= "\$installation_id = '$installation_id';\n";
|
|
|
|
if (file_put_contents("../config.php", $new_config) !== false && file_exists('../config.php')) {
|
|
|
|
include "../config.php";
|
|
|
|
|
|
// Name of the file
|
|
$filename = '../db.sql';
|
|
// Temporary variable, used to store current query
|
|
$templine = '';
|
|
// Read in entire file
|
|
$lines = file($filename);
|
|
// Loop through each line
|
|
foreach ($lines as $line) {
|
|
// Skip it if it's a comment
|
|
if (substr($line, 0, 2) == '--' || $line == '')
|
|
continue;
|
|
|
|
// Add this line to the current segment
|
|
$templine .= $line;
|
|
// If it has a semicolon at the end, it's the end of the query
|
|
if (substr(trim($line), -1, 1) == ';') {
|
|
// Perform the query
|
|
mysqli_query($mysqli, $templine);
|
|
// Reset temp variable to empty
|
|
$templine = '';
|
|
}
|
|
}
|
|
|
|
$_SESSION['alert_message'] = "Database successfully added, now lets add a user.";
|
|
header("Location: ?user");
|
|
exit;
|
|
|
|
} else {
|
|
// There was an error writing the file
|
|
// Display an error message and redirect to the setup page
|
|
$_SESSION['alert_message'] = "Did not successfully write the config.php file to the filesystem, Please Input the database information again.";
|
|
header("Location: ?database");
|
|
exit;
|
|
}
|
|
|
|
}
|
|
|
|
if (isset($_POST['restore'])) {
|
|
|
|
// Belt and braces: the page-level gate above already sends a live install to the login
|
|
// page, but this handler is the destructive one, so it re-checks rather than trusting
|
|
// that it was only reached through the form.
|
|
if ($install_is_live || !$can_show_restore) {
|
|
$_SESSION['alert_message'] = "This install already has users. Restore over it from the command line instead: php scripts/restore_cli.php --file=/path/to/backup.zip";
|
|
header("Location: ?restore");
|
|
exit;
|
|
}
|
|
|
|
// An upload larger than post_max_size arrives with $_FILES and $_POST both empty, so
|
|
// PHP cannot tell us which field failed - it is worth naming, because a real full
|
|
// backup is usually bigger than the limit and the old message just said the upload
|
|
// failed.
|
|
$max_upload_bytes = backupMaxUploadBytes();
|
|
$content_length = intval($_SERVER['CONTENT_LENGTH'] ?? 0);
|
|
|
|
$too_large = false;
|
|
if (!isset($_FILES['backup_zip']) && $content_length > 0 && $max_upload_bytes > 0 && $content_length > $max_upload_bytes) {
|
|
$too_large = true;
|
|
} elseif (isset($_FILES['backup_zip']) && in_array($_FILES['backup_zip']['error'], [UPLOAD_ERR_INI_SIZE, UPLOAD_ERR_FORM_SIZE], true)) {
|
|
$too_large = true;
|
|
}
|
|
|
|
if ($too_large) {
|
|
$_SESSION['alert_message'] = "That backup is too large to upload through a browser (this server accepts up to "
|
|
. backupFormatBytes($max_upload_bytes)
|
|
. "). Restore it from the command line instead - there is no size limit there. Copy the backup onto this server and run: php "
|
|
. dirname(__DIR__) . "/scripts/restore_cli.php --file=/path/to/backup.zip";
|
|
header("Location: ?restore");
|
|
exit;
|
|
}
|
|
|
|
if (!isset($_FILES['backup_zip']) || $_FILES['backup_zip']['error'] !== UPLOAD_ERR_OK) {
|
|
$_SESSION['alert_message'] = "No backup file was uploaded, or the upload failed.";
|
|
header("Location: ?restore");
|
|
exit;
|
|
}
|
|
|
|
if (strtolower(pathinfo($_FILES['backup_zip']['name'], PATHINFO_EXTENSION)) !== 'zip') {
|
|
$_SESSION['alert_message'] = "Only .zip backup archives can be restored.";
|
|
header("Location: ?restore");
|
|
exit;
|
|
}
|
|
|
|
// The key belongs to the install that MADE the backup, which on a rebuilt server is not
|
|
// this one, so it is asked for rather than read from config.php.
|
|
$restore_key = trim($_POST['backup_key'] ?? '');
|
|
if ($restore_key === '') {
|
|
$restore_key = $config_backup_key ?? '';
|
|
}
|
|
|
|
if ($restore_key === '') {
|
|
$_SESSION['alert_message'] = "Enter the backup encryption key. It is shown in Settings > Backup on the install that made this archive.";
|
|
header("Location: ?restore");
|
|
exit;
|
|
}
|
|
|
|
$temp_zip = tempnam(sys_get_temp_dir(), "itflow_restore_upload_");
|
|
if (!move_uploaded_file($_FILES['backup_zip']['tmp_name'], $temp_zip)) {
|
|
@unlink($temp_zip);
|
|
$_SESSION['alert_message'] = "Could not save the uploaded backup file.";
|
|
header("Location: ?restore");
|
|
exit;
|
|
}
|
|
@chmod($temp_zip, 0600);
|
|
|
|
$restore_error = null;
|
|
$restored = backupRestoreArchive($mysqli, $temp_zip, $restore_key, $restore_error);
|
|
|
|
@unlink($temp_zip);
|
|
|
|
if (!$restored) {
|
|
$_SESSION['alert_message'] = $restore_error;
|
|
header("Location: ?restore");
|
|
exit;
|
|
}
|
|
|
|
// Close setup behind us. The gate above would now do this on its own because the
|
|
// restored database has users, but the flag is what stops the wizard being reachable
|
|
// at all.
|
|
$config_path = __DIR__ . "/../config.php";
|
|
if (@file_put_contents($config_path, "\n\$config_enable_setup = 0;\n\n", FILE_APPEND | LOCK_EX) === false) {
|
|
$_SESSION['alert_message'] = "Backup restored, but config.php could not be updated - please set \$config_enable_setup = 0 in it by hand.";
|
|
} else {
|
|
$_SESSION['alert_message'] = "Backup restored. Log in with the credentials that were in use when the backup was taken.";
|
|
}
|
|
|
|
header("Location: ../login.php");
|
|
exit;
|
|
}
|
|
|
|
if (isset($_POST['add_user'])) {
|
|
$user_count = mysqli_num_rows(mysqli_query($mysqli,"SELECT COUNT(*) FROM users"));
|
|
if ($user_count < 0) {
|
|
$_SESSION['alert_message'] = "Users already exist in the database. Clear them to reconfigure here.";
|
|
header("Location: ?company");
|
|
exit;
|
|
}
|
|
|
|
$name = escapeSql($_POST['name']);
|
|
$email = escapeSql($_POST['email']);
|
|
$password = password_hash(trim($_POST['password']), PASSWORD_DEFAULT);
|
|
|
|
//Generate master encryption key
|
|
$site_encryption_master_key = randomString();
|
|
|
|
//Generate user specific key
|
|
$user_specific_encryption_ciphertext = setupFirstUserSpecificKey(trim($_POST['password']), $site_encryption_master_key);
|
|
|
|
mysqli_query($mysqli,"INSERT INTO users SET user_name = '$name', user_email = '$email', user_password = '$password', user_specific_encryption_ciphertext = '$user_specific_encryption_ciphertext', user_role_id = 3");
|
|
|
|
mkdirMissing("../uploads/users/1");
|
|
|
|
//Check to see if a file is attached
|
|
if ($_FILES['file']['tmp_name'] != '') {
|
|
|
|
// get details of the uploaded file
|
|
$file_error = 0;
|
|
$file_tmp_path = $_FILES['file']['tmp_name'];
|
|
$file_name = $_FILES['file']['name'];
|
|
$file_size = $_FILES['file']['size'];
|
|
$file_type = $_FILES['file']['type'];
|
|
$file_extension = strtolower(end(explode('.',$_FILES['file']['name'])));
|
|
|
|
// sanitize file-name
|
|
$new_file_name = md5(time() . $file_name) . '.' . $file_extension;
|
|
|
|
// check if file has one of the following extensions
|
|
$allowed_file_extensions = array('jpg', 'jpeg', 'gif', 'png', 'webp');
|
|
|
|
if (in_array($file_extension,$allowed_file_extensions) === false) {
|
|
$file_error = 1;
|
|
}
|
|
|
|
//Check File Size
|
|
if ($file_size > 2097152) {
|
|
$file_error = 1;
|
|
}
|
|
|
|
if ($file_error == 0) {
|
|
// directory in which the uploaded file will be moved
|
|
$upload_file_dir = "../uploads/users/1/";
|
|
$dest_path = $upload_file_dir . $new_file_name;
|
|
|
|
move_uploaded_file($file_tmp_path, $dest_path);
|
|
|
|
//Set Avatar
|
|
mysqli_query($mysqli,"UPDATE users SET user_avatar = '$new_file_name' WHERE user_id = 1");
|
|
|
|
$_SESSION['alert_message'] = 'File successfully uploaded.';
|
|
} else {
|
|
|
|
$_SESSION['alert_message'] = 'There was an error moving the file to upload directory. Please make sure the upload directory is writable by web server.';
|
|
}
|
|
}
|
|
|
|
//Create Settings
|
|
mysqli_query($mysqli,"INSERT INTO user_settings SET user_id = 1");
|
|
|
|
$_SESSION['alert_message'] = "User <strong>$name</strong> created";
|
|
|
|
header("Location: ?company");
|
|
exit;
|
|
|
|
}
|
|
|
|
if (isset($_POST['add_company_settings'])) {
|
|
|
|
$name = escapeSql($_POST['name']);
|
|
$country = escapeSql($_POST['country']);
|
|
$address = escapeSql($_POST['address']);
|
|
$city = escapeSql($_POST['city']);
|
|
$state = escapeSql($_POST['state']);
|
|
$zip = escapeSql($_POST['zip']);
|
|
$phone = preg_replace("/[^0-9]/", '',$_POST['phone']);
|
|
$email = escapeSql($_POST['email']);
|
|
$website = escapeSql($_POST['website']);
|
|
$tax_id = escapeSql($_POST['tax_id']);
|
|
|
|
mysqli_query($mysqli,"INSERT INTO companies SET company_name = '$name', company_address = '$address', company_city = '$city', company_state = '$state', company_zip = '$zip', company_country = '$country', company_phone = '$phone', company_email = '$email', company_website = '$website', company_tax_id = '$tax_id'");
|
|
|
|
//Check to see if a file is attached
|
|
if ($_FILES['file']['tmp_name'] != '') {
|
|
|
|
// get details of the uploaded file
|
|
$file_error = 0;
|
|
$file_tmp_path = $_FILES['file']['tmp_name'];
|
|
$file_name = $_FILES['file']['name'];
|
|
$file_size = $_FILES['file']['size'];
|
|
$file_type = $_FILES['file']['type'];
|
|
$file_extension = strtolower(end(explode('.',$_FILES['file']['name'])));
|
|
|
|
// sanitize file-name
|
|
$new_file_name = md5(time() . $file_name) . '.' . $file_extension;
|
|
|
|
// check if file has one of the following extensions
|
|
$allowed_file_extensions = array('jpg', 'jpeg', 'png');
|
|
|
|
if (in_array($file_extension,$allowed_file_extensions) === false) {
|
|
$file_error = 1;
|
|
}
|
|
|
|
//Check File Size
|
|
if ($file_size > 2097152) {
|
|
$file_error = 1;
|
|
}
|
|
|
|
if ($file_error == 0) {
|
|
// directory in which the uploaded file will be moved
|
|
$upload_file_dir = "../uploads/settings/";
|
|
$dest_path = $upload_file_dir . $new_file_name;
|
|
|
|
move_uploaded_file($file_tmp_path, $dest_path);
|
|
|
|
mysqli_query($mysqli,"UPDATE companies SET company_logo = '$new_file_name' WHERE company_id = 1");
|
|
|
|
$_SESSION['alert_message'] = 'File successfully uploaded.';
|
|
} else {
|
|
|
|
$_SESSION['alert_message'] = 'There was an error moving the file to upload directory. Please make sure the upload directory is writable by web server.';
|
|
}
|
|
}
|
|
|
|
$latest_database_version = LATEST_DATABASE_VERSION;
|
|
mysqli_query($mysqli,"INSERT INTO settings SET company_id = 1, config_current_database_version = '$latest_database_version', config_invoice_prefix = 'INV-', config_invoice_next_number = 1, config_recurring_invoice_prefix = 'REC-', config_invoice_overdue_reminders = '1,3,7', config_quote_prefix = 'QUO-', config_quote_next_number = 1, config_default_net_terms = 30, config_ticket_next_number = 1, config_ticket_prefix = 'TCK-'");
|
|
|
|
// Create Categories
|
|
// Expense Categories Examples
|
|
mysqli_query($mysqli,"INSERT INTO categories SET category_name = 'Office Supplies', category_type = 'Expense', category_color = 'blue'");
|
|
mysqli_query($mysqli,"INSERT INTO categories SET category_name = 'Travel', category_type = 'Expense', category_color = 'purple'");
|
|
mysqli_query($mysqli,"INSERT INTO categories SET category_name = 'Advertising', category_type = 'Expense', category_color = 'orange'");
|
|
mysqli_query($mysqli,"INSERT INTO categories SET category_name = 'Processing Fee', category_type = 'Expense', category_color = 'gray'");
|
|
mysqli_query($mysqli,"INSERT INTO categories SET category_name = 'Shipping and Postage', category_type = 'Expense', category_color = 'teal'");
|
|
mysqli_query($mysqli,"INSERT INTO categories SET category_name = 'Software', category_type = 'Expense', category_color = 'lightblue'");
|
|
mysqli_query($mysqli,"INSERT INTO categories SET category_name = 'Bank Fees', category_type = 'Expense', category_color = 'yellow'");
|
|
mysqli_query($mysqli,"INSERT INTO categories SET category_name = 'Payroll', category_type = 'Expense', category_color = 'green'");
|
|
mysqli_query($mysqli,"INSERT INTO categories SET category_name = 'Professional Services', category_type = 'Expense', category_color = 'darkblue'");
|
|
mysqli_query($mysqli,"INSERT INTO categories SET category_name = 'Contractor', category_type = 'Expense', category_color = 'brown'");
|
|
mysqli_query($mysqli,"INSERT INTO categories SET category_name = 'Insurance', category_type = 'Expense', category_color = 'red'");
|
|
mysqli_query($mysqli,"INSERT INTO categories SET category_name = 'Infrastructure', category_type = 'Expense', category_color = 'darkgreen'");
|
|
mysqli_query($mysqli,"INSERT INTO categories SET category_name = 'Equipment', category_type = 'Expense', category_color = 'gray'");
|
|
mysqli_query($mysqli,"INSERT INTO categories SET category_name = 'Education', category_type = 'Expense', category_color = 'lightyellow'");
|
|
|
|
// Income Categories Examples
|
|
mysqli_query($mysqli,"INSERT INTO categories SET category_name = 'Managed Services', category_type = 'Income', category_color = 'green'");
|
|
mysqli_query($mysqli,"INSERT INTO categories SET category_name = 'Consulting', category_type = 'Income', category_color = 'blue'");
|
|
mysqli_query($mysqli,"INSERT INTO categories SET category_name = 'Projects', category_type = 'Income', category_color = 'purple'");
|
|
mysqli_query($mysqli,"INSERT INTO categories SET category_name = 'Hardware Sales', category_type = 'Income', category_color = 'silver'");
|
|
mysqli_query($mysqli,"INSERT INTO categories SET category_name = 'Software Sales', category_type = 'Income', category_color = 'lightblue'");
|
|
mysqli_query($mysqli,"INSERT INTO categories SET category_name = 'Cloud Services', category_type = 'Income', category_color = 'skyblue'");
|
|
mysqli_query($mysqli,"INSERT INTO categories SET category_name = 'Support', category_type = 'Income', category_color = 'yellow'");
|
|
mysqli_query($mysqli,"INSERT INTO categories SET category_name = 'Training', category_type = 'Income', category_color = 'lightyellow'");
|
|
mysqli_query($mysqli,"INSERT INTO categories SET category_name = 'Telecom Services', category_type = 'Income', category_color = 'orange'");
|
|
mysqli_query($mysqli,"INSERT INTO categories SET category_name = 'Backup', category_type = 'Income', category_color = 'darkblue'");
|
|
mysqli_query($mysqli,"INSERT INTO categories SET category_name = 'Security', category_type = 'Income', category_color = 'red'");
|
|
mysqli_query($mysqli,"INSERT INTO categories SET category_name = 'Licensing', category_type = 'Income', category_color = 'green'");
|
|
mysqli_query($mysqli,"INSERT INTO categories SET category_name = 'Monitoring', category_type = 'Income', category_color = 'teal'");
|
|
|
|
// Referral Examples
|
|
mysqli_query($mysqli,"INSERT INTO categories SET category_name = 'Friend', category_type = 'Referral', category_color = 'blue'");
|
|
mysqli_query($mysqli,"INSERT INTO categories SET category_name = 'Search', category_type = 'Referral', category_color = 'orange'");
|
|
mysqli_query($mysqli,"INSERT INTO categories SET category_name = 'Social Media', category_type = 'Referral', category_color = 'green'");
|
|
mysqli_query($mysqli,"INSERT INTO categories SET category_name = 'Email', category_type = 'Referral', category_color = 'yellow'");
|
|
mysqli_query($mysqli,"INSERT INTO categories SET category_name = 'Partner', category_type = 'Referral', category_color = 'purple'");
|
|
mysqli_query($mysqli,"INSERT INTO categories SET category_name = 'Event', category_type = 'Referral', category_color = 'red'");
|
|
mysqli_query($mysqli,"INSERT INTO categories SET category_name = 'Affiliate', category_type = 'Referral', category_color = 'pink'");
|
|
mysqli_query($mysqli,"INSERT INTO categories SET category_name = 'Client', category_type = 'Referral', category_color = 'lightblue'");
|
|
|
|
// Payment Methods
|
|
mysqli_query($mysqli,"INSERT INTO payment_methods SET payment_method_name = 'Cash'");
|
|
mysqli_query($mysqli,"INSERT INTO payment_methods SET payment_method_name = 'Check'");
|
|
mysqli_query($mysqli,"INSERT INTO payment_methods SET payment_method_name = 'Bank Transfer'");
|
|
mysqli_query($mysqli,"INSERT INTO payment_methods SET payment_method_name = 'Credit Card'");
|
|
|
|
// Default Calendar
|
|
mysqli_query($mysqli,"INSERT INTO calendars SET calendar_name = 'Default', calendar_color = 'blue'");
|
|
|
|
// Add default ticket statuses
|
|
mysqli_query($mysqli, "INSERT INTO ticket_statuses SET ticket_status_name = 'New', ticket_status_color = '#dc3545'"); // Default ID for new tickets is 1
|
|
mysqli_query($mysqli, "INSERT INTO ticket_statuses SET ticket_status_name = 'Open', ticket_status_color = '#007bff'"); // 2
|
|
mysqli_query($mysqli, "INSERT INTO ticket_statuses SET ticket_status_name = 'On Hold', ticket_status_color = '#28a745'"); // 3
|
|
mysqli_query($mysqli, "INSERT INTO ticket_statuses SET ticket_status_name = 'Resolved', ticket_status_color = '#343a40'"); // 4 (was auto-close)
|
|
mysqli_query($mysqli, "INSERT INTO ticket_statuses SET ticket_status_name = 'Closed', ticket_status_color = '#343a40'"); // 5
|
|
|
|
// Add default modules
|
|
mysqli_query($mysqli, "INSERT INTO modules SET module_name = 'module_client', module_description = 'General client & contact management'");
|
|
mysqli_query($mysqli, "INSERT INTO modules SET module_name = 'module_support', module_description = 'Access to ticketing, assets and documentation'");
|
|
mysqli_query($mysqli, "INSERT INTO modules SET module_name = 'module_credential', module_description = 'Access to client credentials - usernames, passwords and 2FA codes'");
|
|
mysqli_query($mysqli, "INSERT INTO modules SET module_name = 'module_sales', module_description = 'Access to quotes, invoices and products'");
|
|
mysqli_query($mysqli, "INSERT INTO modules SET module_name = 'module_financial', module_description = 'Access to payments, accounts, expenses and budgets'");
|
|
mysqli_query($mysqli, "INSERT INTO modules SET module_name = 'module_reporting', module_description = 'Access to all reports'");
|
|
|
|
// Add default roles
|
|
mysqli_query($mysqli, "INSERT INTO user_roles SET role_id = 1, role_name = 'Accountant', role_description = 'Built-in - Limited access to financial-focused modules'");
|
|
mysqli_query($mysqli, "INSERT INTO user_role_permissions SET user_role_id = 1, module_id = 1, user_role_permission_level = 1"); // Read clients
|
|
mysqli_query($mysqli, "INSERT INTO user_role_permissions SET user_role_id = 1, module_id = 2, user_role_permission_level = 1"); // Read support
|
|
mysqli_query($mysqli, "INSERT INTO user_role_permissions SET user_role_id = 1, module_id = 4, user_role_permission_level = 1"); // Read sales
|
|
mysqli_query($mysqli, "INSERT INTO user_role_permissions SET user_role_id = 1, module_id = 5, user_role_permission_level = 2"); // Modify financial
|
|
mysqli_query($mysqli, "INSERT INTO user_role_permissions SET user_role_id = 1, module_id = 6, user_role_permission_level = 1"); // Read reports
|
|
|
|
mysqli_query($mysqli, "INSERT INTO user_roles SET role_id = 2, role_name = 'Technician', role_description = 'Built-in - Limited access to technical-focused modules'");
|
|
mysqli_query($mysqli, "INSERT INTO user_role_permissions SET user_role_id = 2, module_id = 1, user_role_permission_level = 2"); // Modify clients
|
|
mysqli_query($mysqli, "INSERT INTO user_role_permissions SET user_role_id = 2, module_id = 2, user_role_permission_level = 2"); // Modify support
|
|
mysqli_query($mysqli, "INSERT INTO user_role_permissions SET user_role_id = 2, module_id = 3, user_role_permission_level = 2"); // Modify credentials
|
|
mysqli_query($mysqli, "INSERT INTO user_role_permissions SET user_role_id = 2, module_id = 4, user_role_permission_level = 2"); // Modify sales
|
|
|
|
mysqli_query($mysqli, "INSERT INTO user_roles SET role_id = 3, role_name = 'Administrator', role_description = 'Built-in - Full administrative access to all modules (including user management)', role_is_admin = 1");
|
|
|
|
// Custom Links
|
|
mysqli_query($mysqli,"INSERT INTO custom_links SET custom_link_name = 'Docs', custom_link_uri = 'https://docs.itflow.org', custom_link_new_tab = 1, custom_link_icon = 'question-circle'");
|
|
|
|
// network_interfaces
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'Ethernet', category_type = 'network_interface', category_order = 1"); // 1
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'SFP', category_type = 'network_interface', category_order = 2"); // 2
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'SFP+', category_type = 'network_interface', category_order = 3"); // 3
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'QSFP28', category_type = 'network_interface', category_order = 4"); // 4
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'QSFP-DD', category_type = 'network_interface', category_order = 5"); // 5
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'Coaxial', category_type = 'network_interface', category_order = 6"); // 6
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'Fiber', category_type = 'network_interface', category_order = 7"); // 7
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'WiFi', category_type = 'network_interface', category_order = 8"); // 8
|
|
|
|
// Asset statuses
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'Ready to Deploy', category_description = 'Asset is configured and ready to be assigned', category_type = 'asset_status', category_order = 1"); // 1
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'Deployed', category_description = 'Asset is actively in use and assigned to a client or location', category_type = 'asset_status', category_order = 2"); // 2
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'Out for Repair', category_description = 'Asset has been sent out for servicing or repair', category_type = 'asset_status', category_order = 3"); // 3
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'Lost', category_description = 'Asset location is unknown and cannot be accounted for', category_type = 'asset_status', category_order = 4"); // 4
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'Stolen', category_description = 'Asset has been reported stolen', category_type = 'asset_status', category_order = 5"); // 5
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'Retired', category_description = 'Asset has been decommissioned and is no longer in service', category_type = 'asset_status', category_order = 6"); // 6
|
|
|
|
// Contact note types
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'Call', category_description = 'Phone call with a client or contact', category_icon = 'fa-phone-alt', category_type = 'contact_note_type', category_order = 1"); // 1
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'Email', category_description = 'Email correspondence with a client or contact', category_icon = 'fa-envelope', category_type = 'contact_note_type', category_order = 2"); // 2
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'Meeting', category_description = 'Scheduled meeting with a client or contact', category_icon = 'fa-handshake', category_type = 'contact_note_type', category_order = 3"); // 3
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'In Person', category_description = 'In person visit or on-site interaction', category_icon = 'fa-people-arrows', category_type = 'contact_note_type', category_order = 4"); // 4
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'Note', category_description = 'General note or internal comment', category_icon = 'fa-sticky-note', category_type = 'contact_note_type', category_order = 5"); // 5
|
|
|
|
// Asset note types
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'Maintenance', category_description = 'Routine or scheduled maintenance performed on the asset', category_icon = 'fa-tools', category_type = 'asset_note_type', category_order = 1"); // 1
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'Repair', category_description = 'Repair work or hardware replacement', category_icon = 'fa-wrench', category_type = 'asset_note_type', category_order = 2"); // 2
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'Configuration', category_description = 'Configuration or settings change made to the asset', category_icon = 'fa-sliders-h', category_type = 'asset_note_type', category_order = 3"); // 3
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'Upgrade', category_description = 'Hardware or software upgrade', category_icon = 'fa-arrow-circle-up', category_type = 'asset_note_type', category_order = 4"); // 4
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'Inspection', category_description = 'Physical inspection or audit of the asset', category_icon = 'fa-clipboard-check', category_type = 'asset_note_type', category_order = 5"); // 5
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'Note', category_description = 'General note or internal comment', category_icon = 'fa-sticky-note', category_type = 'asset_note_type', category_order = 6"); // 6
|
|
|
|
// Rack Types
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = '2-Post Open Frame', category_description = 'Two-post open frame rack for patch panels and lightweight equipment', category_type = 'rack_type', category_order = 1"); // 1
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = '4-Post Open Frame', category_description = 'Four-post open frame rack for servers and heavier equipment', category_type = 'rack_type', category_order = 2"); // 2
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = '4-Post Enclosed Cabinet', category_description = 'Four-post enclosed cabinet with doors and sides for secure equipment housing', category_type = 'rack_type', category_order = 3"); // 3
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'Wall-Mount Open', category_description = 'Open frame rack mounted directly to a wall for small deployments', category_type = 'rack_type', category_order = 4"); // 4
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'Wall-Mount Enclosed', category_description = 'Enclosed cabinet rack mounted to a wall with a locking door', category_type = 'rack_type', category_order = 5"); // 5
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'Other', category_description = 'Rack type does not fit any standard category', category_type = 'rack_type', category_order = 6"); // 6
|
|
|
|
// Software Types
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'Software as a Service (SaaS)', category_description = 'Cloud-hosted software accessed via a web browser or API', category_type = 'software_type', category_order = 1"); // 1
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'Productivity Suite', category_description = 'Bundled office and collaboration tools such as Microsoft 365 or Google Workspace', category_type = 'software_type', category_order = 2"); // 2
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'Web Application', category_description = 'Application hosted on a web server and accessed through a browser', category_type = 'software_type', category_order = 3"); // 3
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'Desktop Application', category_description = 'Application installed and run locally on a workstation or laptop', category_type = 'software_type', category_order = 4"); // 4
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'Mobile Application', category_description = 'Application installed and run on a mobile device or tablet', category_type = 'software_type', category_order = 5"); // 5
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'Security Software', category_description = 'Software providing antivirus, endpoint protection, or security monitoring', category_type = 'software_type', category_order = 6"); // 6
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'System Software', category_description = 'Low-level software managing hardware resources and system operations', category_type = 'software_type', category_order = 7"); // 7
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'Operating System', category_description = 'Core software managing hardware and providing a platform for applications', category_type = 'software_type', category_order = 8"); // 8
|
|
mysqli_query($mysqli, "INSERT INTO categories SET category_name = 'Other', category_description = 'Software type does not fit any standard category', category_type = 'software_type', category_order = 9"); // 9
|
|
|
|
$_SESSION['alert_message'] = "Company <strong>$name</strong> created";
|
|
|
|
header("Location: ?localization");
|
|
|
|
}
|
|
|
|
if (isset($_POST['add_localization_settings'])) {
|
|
|
|
$locale = escapeSql($_POST['locale']);
|
|
$currency_code = escapeSql($_POST['currency_code']);
|
|
$timezone = escapeSql($_POST['timezone']);
|
|
|
|
mysqli_query($mysqli,"UPDATE companies SET company_locale = '$locale', company_currency = '$currency_code' WHERE company_id = 1");
|
|
|
|
mysqli_query($mysqli,"UPDATE settings SET config_timezone = '$timezone' WHERE company_id = 1");
|
|
|
|
// Create Default Cash Account
|
|
mysqli_query($mysqli,"INSERT INTO accounts SET account_name = 'Cash', account_currency_code = '$currency_code'");
|
|
|
|
|
|
$_SESSION['alert_message'] = "Localization Info saved";
|
|
|
|
header("Location: ?telemetry");
|
|
|
|
}
|
|
|
|
if (isset($_POST['add_telemetry'])) {
|
|
|
|
if (isset($_POST['share_data']) && $_POST['share_data'] == 1) {
|
|
|
|
mysqli_query($mysqli,"UPDATE settings SET config_telemetry = 2");
|
|
|
|
$comments = escapeSql($_POST['comments']);
|
|
|
|
$sql = mysqli_query($mysqli,"SELECT * FROM companies WHERE company_id = 1");
|
|
$row = mysqli_fetch_assoc($sql);
|
|
|
|
$company_name = $row['company_name'];
|
|
$website = $row['company_website'];
|
|
$city = $row['company_city'];
|
|
$state = $row['company_state'];
|
|
$country = $row['company_country'];
|
|
$currency = $row['company_currency'];
|
|
|
|
$postdata = http_build_query(
|
|
array(
|
|
'installation_id' => "$installation_id",
|
|
'company_name' => "$company_name",
|
|
'website' => "$website",
|
|
'city' => "$city",
|
|
'state' => "$state",
|
|
'country' => "$country",
|
|
'currency' => "$currency",
|
|
'comments' => "$comments",
|
|
'collection_method' => 1
|
|
)
|
|
);
|
|
|
|
$opts = array('http' =>
|
|
array(
|
|
'method' => 'POST',
|
|
'header' => 'Content-type: application/x-www-form-urlencoded',
|
|
'content' => $postdata
|
|
)
|
|
);
|
|
|
|
$context = stream_context_create($opts);
|
|
|
|
$result = file_get_contents('https://telemetry.itflow.org', false, $context);
|
|
|
|
echo $result;
|
|
|
|
}
|
|
|
|
//final setup stages
|
|
$myfile = fopen("../config.php", "a");
|
|
|
|
$txt = "\$config_enable_setup = 0;\n\n";
|
|
|
|
fwrite($myfile, $txt);
|
|
|
|
fclose($myfile);
|
|
|
|
header("Location: ../login.php");
|
|
exit;
|
|
|
|
}
|
|
|
|
?>
|
|
|
|
<!DOCTYPE html>
|
|
<html lang="en">
|
|
|
|
<head>
|
|
<meta charset="utf-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1">
|
|
<meta http-equiv="x-ua-compatible" content="ie=edge">
|
|
|
|
<title>ITFlow Setup</title>
|
|
|
|
<!-- Font Awesome Icons -->
|
|
<link rel="stylesheet" href="/libs/fontawesome-free/css/all.min.css">
|
|
<!-- Theme style -->
|
|
<link rel="stylesheet" href="/libs/adminlte/css/adminlte.min.css">
|
|
<!-- Custom Style Sheet -->
|
|
<link href="/libs/select2/css/select2.min.css" rel="stylesheet" type="text/css">
|
|
<link href="/libs/select2-bootstrap4-theme/select2-bootstrap4.min.css" rel="stylesheet" type="text/css">
|
|
|
|
</head>
|
|
|
|
<body class="hold-transition sidebar-mini">
|
|
|
|
<div class="wrapper text-sm">
|
|
|
|
<!-- Navbar -->
|
|
<nav class="main-header navbar navbar-expand navbar-primary navbar-dark">
|
|
|
|
<!-- Left navbar links -->
|
|
<ul class="navbar-nav">
|
|
<li class="nav-item">
|
|
<a class="nav-link" data-widget="pushmenu" href="#"><i class="fas fa-bars"></i></a>
|
|
</li>
|
|
</ul>
|
|
|
|
<!-- Right navbar links -->
|
|
<ul class="navbar-nav">
|
|
</ul>
|
|
</nav>
|
|
<!-- /.navbar -->
|
|
|
|
<!-- Main Sidebar Container -->
|
|
<aside class="main-sidebar sidebar-dark-primary elevation-4">
|
|
|
|
<!-- Brand Logo -->
|
|
<a href="https://itflow.org" class="brand-link">
|
|
<h3 class="brand-text font-weight-light"><i class="fas fa-paper-plane text-primary mr-2"></i><span class="text-primary text-bold">IT</span>Flow</h3>
|
|
</a>
|
|
|
|
<!-- Sidebar -->
|
|
<div class="sidebar">
|
|
|
|
<!-- Sidebar Menu -->
|
|
<nav class="mt-2">
|
|
<ul class="nav nav-pills nav-sidebar flex-column" data-widget="treeview" role="menu" data-accordion="false">
|
|
<li class="nav-item">
|
|
<a href="index.php" class="nav-link <?php if (!isset($_GET) || empty($_GET)) { echo 'active'; } ?>">
|
|
<i class="nav-icon fas fa-home text-info"></i>
|
|
<p>1 - Welcome</p>
|
|
</a>
|
|
</li>
|
|
|
|
<li class="nav-item">
|
|
<a href="?checks" class="nav-link <?php if (isset($_GET['checks'])) { echo "active"; } ?>">
|
|
<i class="nav-icon fas fa-check"></i>
|
|
<p>2 - Checks</p>
|
|
</a>
|
|
</li>
|
|
|
|
<li class="nav-item">
|
|
<a href="?database" class="nav-link <?php if (isset($_GET['database'])) { echo "active"; } ?>">
|
|
<i class="nav-icon fas fa-database"></i>
|
|
<p>3 - Database</p>
|
|
</a>
|
|
</li>
|
|
|
|
<li class="nav-item">
|
|
<a href="?user" class="nav-link <?php if (isset($_GET['user'])) { echo "active"; } ?>">
|
|
<i class="nav-icon fas fa-user"></i>
|
|
<p>4 - User</p>
|
|
</a>
|
|
</li>
|
|
<li class="nav-item">
|
|
<a href="?company" class="nav-link <?php if (isset($_GET['company'])) { echo "active"; } ?>">
|
|
<i class="nav-icon fas fa-briefcase"></i>
|
|
<p>5 - Company</p>
|
|
</a>
|
|
</li>
|
|
<li class="nav-item">
|
|
<a href="?localization" class="nav-link <?php if (isset($_GET['localization'])) { echo "active"; } ?>">
|
|
<i class="nav-icon fas fa-globe-americas"></i>
|
|
<p>6 - Localization</p>
|
|
</a>
|
|
</li>
|
|
<li class="nav-item">
|
|
<a href="?telemetry" class="nav-link <?php if (isset($_GET['telemetry'])) { echo "active"; } ?>">
|
|
<i class="nav-icon fas fa-share-alt"></i>
|
|
<p>7 - Telemetry</p>
|
|
</a>
|
|
</li>
|
|
|
|
<li class="nav-header">Utilities</li>
|
|
|
|
<li class="nav-item">
|
|
<a href="?restore" class="nav-link <?php if (isset($_GET['restore'])) { echo "active"; } ?>">
|
|
<i class="nav-icon fas fa-upload text-warning"></i>
|
|
<p>Restore Backup</p>
|
|
</a>
|
|
</li>
|
|
</ul>
|
|
</nav>
|
|
</div>
|
|
</aside>
|
|
|
|
<!-- Content Wrapper. Contains page content -->
|
|
<div class="content-wrapper">
|
|
|
|
<!-- Main content -->
|
|
<div class="content mt-3">
|
|
<div class="container-fluid">
|
|
|
|
<?php
|
|
//Alert Feedback
|
|
if (!empty($_SESSION['alert_message'])) {
|
|
?>
|
|
<div class="alert alert-info" id="alert">
|
|
<?= escapeHtml($_SESSION['alert_message']) ?>
|
|
<button class='close' data-dismiss='alert'>×</button>
|
|
</div>
|
|
<?php
|
|
$_SESSION['alert_type'] = '';
|
|
$_SESSION['alert_message'] = '';
|
|
}
|
|
?>
|
|
|
|
<?php if (isset($_GET['checks'])) {
|
|
|
|
$checks = [];
|
|
|
|
// Section: PHP Extensions
|
|
$phpExtensions = [];
|
|
$extensions = [
|
|
'php-mysqli' => 'mysqli',
|
|
'php-intl' => 'intl',
|
|
'php-curl' => 'curl',
|
|
'php-mbstring' => 'mbstring',
|
|
'php-gd' => 'gd',
|
|
'php-xml' => 'xml',
|
|
];
|
|
|
|
foreach ($extensions as $name => $ext) {
|
|
$loaded = extension_loaded($ext);
|
|
$phpExtensions[] = [
|
|
'name' => "$name installed",
|
|
'passed' => $loaded,
|
|
'value' => $loaded ? 'Installed' : 'Not Installed',
|
|
];
|
|
}
|
|
|
|
// Section: PHP Configuration
|
|
$phpConfig = [];
|
|
|
|
// Check if shell_exec is enabled
|
|
$disabled_functions = explode(',', ini_get('disable_functions'));
|
|
$disabled_functions = array_map('trim', $disabled_functions);
|
|
$shell_exec_enabled = !in_array('shell_exec', $disabled_functions);
|
|
|
|
$phpConfig[] = [
|
|
'name' => 'shell_exec is enabled',
|
|
'passed' => $shell_exec_enabled,
|
|
'value' => $shell_exec_enabled ? 'Enabled' : 'Disabled',
|
|
];
|
|
|
|
// Check upload_max_filesize and post_max_size >= 500M
|
|
function toBytes($val) {
|
|
$val = trim($val);
|
|
$unit = strtolower(substr($val, -1));
|
|
$num = (float)$val;
|
|
switch ($unit) {
|
|
case 'g':
|
|
$num *= 1024;
|
|
case 'm':
|
|
$num *= 1024;
|
|
case 'k':
|
|
$num *= 1024;
|
|
}
|
|
return $num;
|
|
}
|
|
|
|
$required_bytes = 500 * 1024 * 1024; // 500M in bytes
|
|
|
|
$upload_max_filesize = ini_get('upload_max_filesize');
|
|
$post_max_size = ini_get('post_max_size');
|
|
|
|
$upload_passed = toBytes($upload_max_filesize) >= $required_bytes;
|
|
$post_passed = toBytes($post_max_size) >= $required_bytes;
|
|
|
|
$phpConfig[] = [
|
|
'name' => 'upload_max_filesize >= 500M',
|
|
'passed' => $upload_passed,
|
|
'value' => $upload_max_filesize,
|
|
];
|
|
|
|
$phpConfig[] = [
|
|
'name' => 'post_max_size >= 500M',
|
|
'passed' => $post_passed,
|
|
'value' => $post_max_size,
|
|
];
|
|
|
|
// Check PHP version >= 8.2.0
|
|
$php_version = PHP_VERSION;
|
|
$php_passed = version_compare($php_version, '8.2.0', '>=');
|
|
|
|
$phpConfig[] = [
|
|
'name' => 'PHP version >= 8.2.0',
|
|
'passed' => $php_passed,
|
|
'value' => $php_version,
|
|
];
|
|
|
|
// Section: Shell Commands
|
|
$shellCommands = [];
|
|
|
|
if ($shell_exec_enabled) {
|
|
$commands = ['git'];
|
|
|
|
foreach ($commands as $command) {
|
|
$which = trim(shell_exec("which $command 2>/dev/null"));
|
|
$exists = !empty($which);
|
|
$shellCommands[] = [
|
|
'name' => "Command '$command' available",
|
|
'passed' => $exists,
|
|
'value' => $exists ? $which : 'Not Found',
|
|
];
|
|
}
|
|
} else {
|
|
// If shell_exec is disabled, mark commands as unavailable
|
|
foreach (['whois', 'dig', 'git'] as $command) {
|
|
$shellCommands[] = [
|
|
'name' => "Command '$command' available",
|
|
'passed' => false,
|
|
'value' => 'shell_exec Disabled',
|
|
];
|
|
}
|
|
}
|
|
|
|
// Section: SSL Checks
|
|
$sslChecks = [];
|
|
|
|
// Check if accessing via HTTPS
|
|
$https = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') || $_SERVER['SERVER_PORT'] == 443;
|
|
$sslChecks[] = [
|
|
'name' => 'Accessing via HTTPS',
|
|
'passed' => $https,
|
|
'value' => $https ? 'Yes' : 'No',
|
|
];
|
|
|
|
// SSL Certificate Validity Check
|
|
if ($https) {
|
|
$streamContext = stream_context_create(["ssl" => ["capture_peer_cert" => true]]);
|
|
$socket = @stream_socket_client("ssl://{$_SERVER['HTTP_HOST']}:443", $errno, $errstr, 30, STREAM_CLIENT_CONNECT, $streamContext);
|
|
|
|
if ($socket) {
|
|
$params = stream_context_get_params($socket);
|
|
$cert = $params['options']['ssl']['peer_certificate'];
|
|
$certInfo = openssl_x509_parse($cert);
|
|
|
|
$validFrom = $certInfo['validFrom_time_t'];
|
|
$validTo = $certInfo['validTo_time_t'];
|
|
$currentTime = time();
|
|
|
|
$certValid = ($currentTime >= $validFrom && $currentTime <= $validTo);
|
|
|
|
$sslChecks[] = [
|
|
'name' => 'SSL Certificate is valid',
|
|
'passed' => $certValid,
|
|
'value' => $certValid ? 'Valid' : 'Invalid or Expired',
|
|
];
|
|
} else {
|
|
$sslChecks[] = [
|
|
'name' => 'SSL Certificate is valid',
|
|
'passed' => false,
|
|
'value' => 'Unable to retrieve certificate',
|
|
];
|
|
}
|
|
} else {
|
|
$sslChecks[] = [
|
|
'name' => 'SSL Certificate is valid',
|
|
'passed' => false,
|
|
'value' => 'Not using HTTPS',
|
|
];
|
|
}
|
|
|
|
// Section: Domain Checks
|
|
$domainChecks = [];
|
|
|
|
// Check if the site has a valid FQDN
|
|
$fqdn = $_SERVER['HTTP_HOST'];
|
|
$isValidFqdn = (bool) filter_var('http://' . $fqdn, FILTER_VALIDATE_URL) && preg_match('/^[a-z0-9.-]+\.[a-z]{2,}$/i', $fqdn);
|
|
|
|
$domainChecks[] = [
|
|
'name' => 'Site has a valid FQDN',
|
|
'passed' => $isValidFqdn,
|
|
'value' => $fqdn,
|
|
];
|
|
|
|
// Section: File Permissions
|
|
$filePermissions = [];
|
|
|
|
// Check if web user has write access to webroot directory
|
|
$webroot = $_SERVER['DOCUMENT_ROOT'];
|
|
$writable = is_writable($webroot);
|
|
$filePermissions[] = [
|
|
'name' => 'Web user has write access to webroot directory',
|
|
'passed' => $writable,
|
|
'value' => $webroot,
|
|
];
|
|
?>
|
|
|
|
<div class="card card-dark">
|
|
<div class="card-header">
|
|
<h3 class="card-title"><i class="fas fa-fw fa-check mr-2"></i>Step 1 - Setup Checks</h3>
|
|
</div>
|
|
<div class="card-body">
|
|
<table class="table table-sm table-bordered">
|
|
<tbody>
|
|
<!-- PHP Extensions Section -->
|
|
<tr class="bg-light">
|
|
<th colspan="3">PHP Extensions</th>
|
|
</tr>
|
|
<?php foreach ($phpExtensions as $check): ?>
|
|
<tr>
|
|
<td><?= htmlspecialchars($check['name']); ?></td>
|
|
<td style="width: 50px; text-align: center;">
|
|
<?php if ($check['passed']): ?>
|
|
<i class="fa fa-check" style="color:green"></i>
|
|
<?php else: ?>
|
|
<i class="fa fa-times" style="color:red"></i>
|
|
<?php endif; ?>
|
|
</td>
|
|
<td><?= htmlspecialchars($check['value']); ?></td>
|
|
</tr>
|
|
<?php endforeach; ?>
|
|
|
|
<!-- PHP Configuration Section -->
|
|
<tr class="bg-light">
|
|
<th colspan="3">PHP Configuration</th>
|
|
</tr>
|
|
<?php foreach ($phpConfig as $check): ?>
|
|
<tr>
|
|
<td><?= htmlspecialchars($check['name']); ?></td>
|
|
<td style="width: 50px; text-align: center;">
|
|
<?php if ($check['passed']): ?>
|
|
<i class="fa fa-check" style="color:green"></i>
|
|
<?php else: ?>
|
|
<i class="fa fa-times" style="color:red"></i>
|
|
<?php endif; ?>
|
|
</td>
|
|
<td><?= htmlspecialchars($check['value']); ?></td>
|
|
</tr>
|
|
<?php endforeach; ?>
|
|
|
|
<!-- Shell Commands Section -->
|
|
<tr class="bg-light">
|
|
<th colspan="3">Shell Commands</th>
|
|
</tr>
|
|
<?php foreach ($shellCommands as $check): ?>
|
|
<tr>
|
|
<td><?= htmlspecialchars($check['name']); ?></td>
|
|
<td style="width: 50px; text-align: center;">
|
|
<?php if ($check['passed']): ?>
|
|
<i class="fa fa-check" style="color:green"></i>
|
|
<?php else: ?>
|
|
<i class="fa fa-times" style="color:red"></i>
|
|
<?php endif; ?>
|
|
</td>
|
|
<td><?= htmlspecialchars($check['value']); ?></td>
|
|
</tr>
|
|
<?php endforeach; ?>
|
|
|
|
<!-- SSL Checks Section -->
|
|
<tr class="bg-light">
|
|
<th colspan="3">SSL Checks</th>
|
|
</tr>
|
|
<?php foreach ($sslChecks as $check): ?>
|
|
<tr>
|
|
<td><?= htmlspecialchars($check['name']); ?></td>
|
|
<td style="width: 50px; text-align: center;">
|
|
<?php if ($check['passed']): ?>
|
|
<i class="fa fa-check" style="color:green"></i>
|
|
<?php else: ?>
|
|
<i class="fa fa-times" style="color:red"></i>
|
|
<?php endif; ?>
|
|
</td>
|
|
<td><?= htmlspecialchars($check['value']); ?></td>
|
|
</tr>
|
|
<?php endforeach; ?>
|
|
|
|
<!-- Domain Checks Section -->
|
|
<tr class="bg-light">
|
|
<th colspan="3">Domain Checks</th>
|
|
</tr>
|
|
<?php foreach ($domainChecks as $check): ?>
|
|
<tr>
|
|
<td><?= htmlspecialchars($check['name']); ?></td>
|
|
<td style="width: 50px; text-align: center;">
|
|
<?php if ($check['passed']): ?>
|
|
<i class="fa fa-check" style="color:green"></i>
|
|
<?php else: ?>
|
|
<i class="fa fa-times" style="color:red"></i>
|
|
<?php endif; ?>
|
|
</td>
|
|
<td><?= htmlspecialchars($check['value']); ?></td>
|
|
</tr>
|
|
<?php endforeach; ?>
|
|
|
|
<!-- File Permissions Section -->
|
|
<tr class="bg-light">
|
|
<th colspan="3">File Permissions</th>
|
|
</tr>
|
|
<?php foreach ($filePermissions as $check): ?>
|
|
<tr>
|
|
<td><?= htmlspecialchars($check['name']); ?></td>
|
|
<td style="width: 50px; text-align: center;">
|
|
<?php if ($check['passed']): ?>
|
|
<i class="fa fa-check" style="color:green"></i>
|
|
<?php else: ?>
|
|
<i class="fa fa-times" style="color:red"></i>
|
|
<?php endif; ?>
|
|
</td>
|
|
<td><?= htmlspecialchars($check['value']); ?></td>
|
|
</tr>
|
|
<?php endforeach; ?>
|
|
</tbody>
|
|
</table>
|
|
|
|
<hr>
|
|
|
|
<a href="?database" class="btn btn-primary text-bold">Next (Database)<i class="fa fa-fw fa-arrow-circle-right ml-2"></i></a>
|
|
</div>
|
|
</div>
|
|
|
|
<?php } elseif (isset($_GET['database'])) { ?>
|
|
|
|
<div class="card card-dark">
|
|
<div class="card-header">
|
|
<h3 class="card-title"><i class="fas fa-fw fa-database mr-2"></i>Step 2 - Connect your Database</h3>
|
|
</div>
|
|
<div class="card-body">
|
|
<?php
|
|
if (file_exists('../config.php')) {
|
|
|
|
echo "<p>Database is already configured. Any further changes should be made by editing the <code>config.php</code> file.</p>";
|
|
|
|
if (@$mysqli) {
|
|
echo "<a href='?user' class='btn btn-success text-bold mt-3'>Next Step (User Setup) <i class='fa fa-fw fa-arrow-circle-right ml-2'></i></a>";
|
|
} else {
|
|
echo "<div class='alert alert-danger mt-3'>Database connection failed. Check <code>config.php</code>.</div>";
|
|
}
|
|
|
|
} else {
|
|
?>
|
|
<form method="post" autocomplete="off">
|
|
|
|
<h5>Database Connection Details</h5>
|
|
|
|
<div class="form-group">
|
|
<label>Database Name <strong class="text-danger">*</strong></label>
|
|
<div class="input-group">
|
|
<div class="input-group-prepend">
|
|
<span class="input-group-text"><i class="fa fa-fw fa-database"></i></span>
|
|
</div>
|
|
<input type="text" class="form-control" name="database" placeholder="Database name" autofocus required>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="form-group">
|
|
<label>Database Host <strong class="text-danger">*</strong></label>
|
|
<div class="input-group">
|
|
<div class="input-group-prepend">
|
|
<span class="input-group-text"><i class="fa fa-fw fa-server"></i></span>
|
|
</div>
|
|
<input type="text" class="form-control" name="host" value="localhost" placeholder="Database Host" required>
|
|
</div>
|
|
</div>
|
|
|
|
<br>
|
|
<h5>Database Authentication Details</h5>
|
|
|
|
<div class="form-group">
|
|
<label>Database User <strong class="text-danger">*</strong></label>
|
|
<div class="input-group">
|
|
<div class="input-group-prepend">
|
|
<span class="input-group-text"><i class="fa fa-fw fa-user"></i></span>
|
|
</div>
|
|
<input type="text" class="form-control" name="username" placeholder="Database user account" required>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="form-group">
|
|
<label>Database Password <strong class="text-danger">*</strong></label>
|
|
<div class="input-group">
|
|
<div class="input-group-prepend">
|
|
<span class="input-group-text"><i class="fa fa-fw fa-lock"></i></span>
|
|
</div>
|
|
<input type="password" class="form-control" data-toggle="password" name="password" placeholder="Database user password" autocomplete="new-password" required>
|
|
<div class="input-group-append">
|
|
<span class="input-group-text"><i class="fa fa-fw fa-eye"></i></span>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<hr>
|
|
<button type="submit" name="add_database" class="btn btn-primary text-bold">
|
|
Next (First User)<i class="fas fa-fw fa-arrow-circle-right ml-2"></i>
|
|
</button>
|
|
</form>
|
|
<?php } ?>
|
|
</div>
|
|
</div>
|
|
|
|
<?php } elseif (isset($_GET['restore'])) { ?>
|
|
|
|
<?php if (!$can_show_restore) { ?>
|
|
<div class="card card-danger">
|
|
<div class="card-header">
|
|
<h3 class="card-title"><i class="fas fa-exclamation-triangle mr-2"></i>Database Not Ready</h3>
|
|
</div>
|
|
<div class="card-body text-center">
|
|
<p>You must configure the database before restoring a backup.</p>
|
|
<a href="?database" class="btn btn-primary text-bold">
|
|
Go to Database Setup <i class="fas fa-arrow-right ml-2"></i>
|
|
</a>
|
|
</div>
|
|
</div>
|
|
<?php } else { ?>
|
|
<div class="card card-dark">
|
|
<div class="card-header">
|
|
<h3 class="card-title"><i class="fas fa-fw fa-database mr-2"></i>Restore from Backup</h3>
|
|
</div>
|
|
<div class="card-body">
|
|
<?php $setup_max_upload = backupMaxUploadBytes(); ?>
|
|
|
|
<form method="post" enctype="multipart/form-data" autocomplete="off">
|
|
<div class="form-group">
|
|
<label>ITFlow backup archive (.zip)</label>
|
|
<input type="file" name="backup_zip" accept=".zip" class="form-control-file" required>
|
|
</div>
|
|
<div class="form-group">
|
|
<label>Backup encryption key</label>
|
|
<input type="text" name="backup_key" class="form-control" placeholder="The key from the install that made this backup" autocomplete="off" required>
|
|
<small class="text-muted">Shown in Settings > Backup on that install. The archive cannot be opened without it.</small>
|
|
</div>
|
|
|
|
<div class="alert alert-warning mb-0">
|
|
<strong>This server accepts uploads up to <?= escapeHtml(backupFormatBytes($setup_max_upload)) ?>.</strong>
|
|
A full backup is usually larger than that. If yours is, copy it onto the server and restore from the
|
|
command line instead - there is no size limit there:
|
|
<pre class="bg-dark text-white p-2 mt-2 mb-0"><?= escapeHtml("php " . dirname(__DIR__) . "/scripts/restore_cli.php --file=/path/to/backup.zip") ?></pre>
|
|
</div>
|
|
|
|
<p class="text-muted mt-2 mb-0"><small>The restore replaces the database and the uploads folder. Large restores take several minutes - do not close this page.</small></p>
|
|
<hr>
|
|
<button type="submit" name="restore" class="btn btn-primary text-bold">
|
|
Restore Backup<i class="fas fa-fw fa-upload ml-2"></i>
|
|
</button>
|
|
</form>
|
|
</div>
|
|
</div>
|
|
<?php } ?>
|
|
|
|
<?php } elseif (isset($_GET['user'])) { ?>
|
|
|
|
<div class="card card-dark">
|
|
<div class="card-header">
|
|
<h3 class="card-title"><i class="fas fa-fw fa-user mr-2"></i>Step 3 - Create your first user</h3>
|
|
</div>
|
|
<div class="card-body">
|
|
|
|
<form method="post" enctype="multipart/form-data" autocomplete="off">
|
|
<div class="form-group">
|
|
<label>Name <strong class="text-danger">*</strong></label>
|
|
<div class="input-group">
|
|
<div class="input-group-prepend">
|
|
<span class="input-group-text"><i class="fa fa-fw fa-user"></i></span>
|
|
</div>
|
|
<input type="text" class="form-control" name="name" placeholder="Full Name" autofocus required>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="form-group">
|
|
<label>Email <strong class="text-danger">*</strong></label>
|
|
<div class="input-group">
|
|
<div class="input-group-prepend">
|
|
<span class="input-group-text"><i class="fa fa-fw fa-envelope"></i></span>
|
|
</div>
|
|
<input type="email" class="form-control" name="email" placeholder="Email Address" required>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="form-group">
|
|
<label>Password <strong class="text-danger">*</strong></label>
|
|
<div class="input-group">
|
|
<div class="input-group-prepend">
|
|
<span class="input-group-text"><i class="fa fa-fw fa-lock"></i></span>
|
|
</div>
|
|
<input type="password" class="form-control" data-toggle="password" name="password" placeholder="Enter a Password" autocomplete="new-password" required minlength="8">
|
|
<div class="input-group-append">
|
|
<span class="input-group-text"><i class="fa fa-fw fa-eye"></i></span>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="form-group">
|
|
<label>Avatar</label>
|
|
<input type="file" class="form-control-file" accept="image/*;capture=camera" name="file">
|
|
</div>
|
|
|
|
<hr>
|
|
|
|
<button type="submit" name="add_user" class="btn btn-primary text-bold">Next (Company details) <i class="fa fa-fw fa-arrow-circle-right"></i></button>
|
|
</form>
|
|
</div>
|
|
</div>
|
|
|
|
<?php } elseif (isset($_GET['company'])) { ?>
|
|
|
|
<div class="card card-dark">
|
|
<div class="card-header">
|
|
<h3 class="card-title"><i class="fas fa-fw fa-briefcase mr-2"></i>Step 4 - Company Details</h3>
|
|
</div>
|
|
<div class="card-body">
|
|
<form method="post" enctype="multipart/form-data" autocomplete="off">
|
|
|
|
<div class="form-group">
|
|
<label>Company Name <strong class="text-danger">*</strong></label>
|
|
<div class="input-group">
|
|
<div class="input-group-prepend">
|
|
<span class="input-group-text"><i class="fa fa-fw fa-building"></i></span>
|
|
</div>
|
|
<input type="text" class="form-control" name="name" placeholder="Company Name" autofocus required>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="form-group">
|
|
<label>Logo</label>
|
|
<input type="file" class="form-control-file" name="file" accept=".jpg, .jpeg, .png">
|
|
</div>
|
|
|
|
<div class="form-group">
|
|
<label>Address</label>
|
|
<div class="input-group">
|
|
<div class="input-group-prepend">
|
|
<span class="input-group-text"><i class="fa fa-fw fa-map-marker-alt"></i></span>
|
|
</div>
|
|
<input type="text" class="form-control" name="address" placeholder="Street Address">
|
|
</div>
|
|
</div>
|
|
|
|
<div class="form-group">
|
|
<label>City</label>
|
|
<div class="input-group">
|
|
<div class="input-group-prepend">
|
|
<span class="input-group-text"><i class="fa fa-fw fa-city"></i></span>
|
|
</div>
|
|
<input type="text" class="form-control" name="city" placeholder="City">
|
|
</div>
|
|
</div>
|
|
|
|
<div class="form-group">
|
|
<label>State / Province</label>
|
|
<div class="input-group">
|
|
<div class="input-group-prepend">
|
|
<span class="input-group-text"><i class="fa fa-fw fa-flag"></i></span>
|
|
</div>
|
|
<input type="text" class="form-control" name="state" placeholder="State or Province">
|
|
</div>
|
|
</div>
|
|
|
|
<div class="form-group">
|
|
<label>Postal Code</label>
|
|
<div class="input-group">
|
|
<div class="input-group-prepend">
|
|
<span class="input-group-text"><i class="fab fa-fw fa-usps"></i></span>
|
|
</div>
|
|
<input type="text" class="form-control" name="zip" placeholder="Zip or Postal Code">
|
|
</div>
|
|
</div>
|
|
|
|
<div class="form-group">
|
|
<label>Country <strong class="text-danger">*</strong></label>
|
|
<div class="input-group">
|
|
<div class="input-group-prepend">
|
|
<span class="input-group-text"><i class="fa fa-fw fa-globe-americas"></i></span>
|
|
</div>
|
|
<select class="form-control select2" name="country" required>
|
|
<option value="">- Country -</option>
|
|
<?php foreach($countries_array as $country_name) { ?>
|
|
<option><?= $country_name ?></option>
|
|
<?php } ?>
|
|
</select>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="form-group">
|
|
<label>Phone</label>
|
|
<div class="input-group">
|
|
<div class="input-group-prepend">
|
|
<span class="input-group-text"><i class="fa fa-fw fa-phone"></i></span>
|
|
</div>
|
|
<input type="tel" class="form-control" name="phone" placeholder="Phone Number">
|
|
</div>
|
|
</div>
|
|
|
|
<div class="form-group">
|
|
<label>Email</label>
|
|
<div class="input-group">
|
|
<div class="input-group-prepend">
|
|
<span class="input-group-text"><i class="fa fa-fw fa-envelope"></i></span>
|
|
</div>
|
|
<input type="email" class="form-control" name="email" placeholder="Company Email address eg: info@company.com">
|
|
</div>
|
|
</div>
|
|
|
|
<div class="form-group">
|
|
<label>Website</label>
|
|
<div class="input-group">
|
|
<div class="input-group-prepend">
|
|
<span class="input-group-text"><i class="fa fa-fw fa-globe"></i></span>
|
|
</div>
|
|
<input type="text" class="form-control" name="website" placeholder="Website address">
|
|
</div>
|
|
</div>
|
|
|
|
<div class="form-group">
|
|
<label>Tax ID</label>
|
|
<div class="input-group">
|
|
<div class="input-group-prepend">
|
|
<span class="input-group-text"><i class="fa fa-fw fa-balance-scale"></i></span>
|
|
</div>
|
|
<input type="text" class="form-control" name="tax_id" placeholder="Tax ID" maxlength="200">
|
|
</div>
|
|
</div>
|
|
|
|
<hr>
|
|
|
|
<button type="submit" name="add_company_settings" class="btn btn-primary text-bold">
|
|
Next (Localization)<i class="fas fa-fw fa-arrow-circle-right ml-2"></i>
|
|
</button>
|
|
|
|
</form>
|
|
</div>
|
|
</div>
|
|
|
|
<?php } elseif (isset($_GET['localization'])) { ?>
|
|
|
|
<div class="card card-dark">
|
|
<div class="card-header">
|
|
<h3 class="card-title"><i class="fas fa-fw fa-globe-americas mr-2"></i>Step 5 - Region and Language</h3>
|
|
</div>
|
|
<div class="card-body">
|
|
<form method="post" autocomplete="off">
|
|
|
|
<div class="form-group">
|
|
<label>Language <strong class="text-danger">*</strong></label>
|
|
<div class="input-group">
|
|
<div class="input-group-prepend">
|
|
<span class="input-group-text"><i class="fa fa-fw fa-language"></i></span>
|
|
</div>
|
|
<select class="form-control select2" name="locale" required>
|
|
<option value="">- Select a Language -</option>
|
|
<?php foreach($locales_array as $locale_code => $locale_name) { ?>
|
|
<option value="<?= $locale_code ?>"><?= $locale_name ?></option>
|
|
<?php } ?>
|
|
</select>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="form-group">
|
|
<label>Currency <strong class="text-danger">*</strong></label>
|
|
<div class="input-group">
|
|
<div class="input-group-prepend">
|
|
<span class="input-group-text"><i class="fa fa-fw fa-money-bill"></i></span>
|
|
</div>
|
|
<select class="form-control select2" name="currency_code" required>
|
|
<option value="">- Select a Currency -</option>
|
|
<?php foreach($currencies_array as $currency_code => $currency_name) { ?>
|
|
<option value="<?= $currency_code ?>"><?= "$currency_code - $currency_name" ?></option>
|
|
<?php } ?>
|
|
</select>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="form-group">
|
|
<label>Timezone <strong class="text-danger">*</strong></label>
|
|
<div class="input-group">
|
|
<div class="input-group-prepend">
|
|
<span class="input-group-text"><i class="fa fa-fw fa-business-time"></i></span>
|
|
</div>
|
|
<select class="form-control select2" name="timezone" required>
|
|
<option value="">- Select a Timezone -</option>
|
|
<?php foreach ($timezones as $tz) { ?>
|
|
<option value="<?= $tz ?>"><?= $tz ?></option>
|
|
<?php } ?>
|
|
</select>
|
|
</div>
|
|
</div>
|
|
|
|
<hr>
|
|
|
|
<button type="submit" name="add_localization_settings" class="btn btn-primary text-bold">
|
|
Next (Telemetry Settings)<i class="fas fa-fw fa-arrow-circle-right ml-2"></i>
|
|
</button>
|
|
|
|
</form>
|
|
</div>
|
|
</div>
|
|
|
|
|
|
<?php } elseif (isset($_GET['telemetry'])) { ?>
|
|
|
|
<div class="card card-dark">
|
|
<div class="card-header">
|
|
<h3 class="card-title"><i class="fas fa-fw fa-broadcast-tower mr-2"></i>Step 6 - Telemetry</h3>
|
|
</div>
|
|
<div class="card-body">
|
|
<form method="post" autocomplete="off">
|
|
<h5>Would you like to share some data with us?</h5>
|
|
|
|
<hr>
|
|
|
|
<div class="form-check">
|
|
<input type="checkbox" class="form-check-input" name="share_data" value="1">
|
|
<label class="form-check-label ml-2">Share <small class="form-text"><a href="https://docs.itflow.org/telemetry" target="_blank">Click Here for additional details regarding the information we gather <i class="fas fa-external-link-alt"></i></a></small></label>
|
|
</div>
|
|
|
|
<br>
|
|
|
|
<div class="form-group">
|
|
<label>Comments</label>
|
|
<textarea class="form-control" rows="4" name="comments" placeholder="Any Comments?"></textarea>
|
|
</div>
|
|
|
|
<hr>
|
|
|
|
<h5>Post installation steps: </h5>
|
|
<p>A few <a href="https://docs.itflow.org/installation#post-installation_essential_housekeeping">housekeeping steps</a> are required to ensure everything runs smoothly, namely:</p>
|
|
<ul>
|
|
<li><a href="https://docs.itflow.org/backups">Setup backups</a></li>
|
|
<li>
|
|
<a href="https://docs.itflow.org/cron">Setup cron</a> - ITFlow needs one entry, which runs
|
|
every job on the schedule set in Settings > Cron. Add it to the crontab of the user that
|
|
owns the ITFlow files:
|
|
<pre class="bg-dark text-white p-2 mt-2"><?= escapeHtml("* * * * * php " . dirname(__DIR__) . "/cron/cron.php >/dev/null") ?></pre>
|
|
*If installing via the script this is set up for you.
|
|
</li>
|
|
<li>Star ITFlow on <a href="https://github.com/itflow-org/itflow">Github</a> :)</li>
|
|
</ul>
|
|
|
|
<hr>
|
|
|
|
<button type="submit" name="add_telemetry" class="btn btn-primary text-bold">
|
|
Finish and Sign in<i class="fas fa-fw fa-check-circle ml-2"></i>
|
|
</button>
|
|
|
|
</form>
|
|
|
|
</div>
|
|
</div>
|
|
|
|
<?php } else { ?>
|
|
|
|
<div class="card card-dark">
|
|
<div class="card-header">
|
|
<h3 class="card-title"><i class="fas fa-fw fa-cube mr-2"></i>ITFlow Setup</h3>
|
|
</div>
|
|
<div class="card-body">
|
|
<h2><b>Thank you</b> for choosing to try ITFlow!</h2>
|
|
<p>This is the start of your journey towards amazing client management </p>
|
|
<p>A few tips:</p>
|
|
<ul>
|
|
<li>Please take a look over the install <a href="https://docs.itflow.org/installation">docs</a>, if you haven't already</li>
|
|
<li>Don't hesitate to reach out on the <a href="https://forum.itflow.org/t/support" target="_blank">forums</a> if you need any assistance</li>
|
|
<li><i>Apache/PHP Error log: <?= $errorLog ?></i></li>
|
|
</ul>
|
|
<br><p>A database must be created before proceeding - click on the button below to get started.</p>
|
|
<br><hr>
|
|
<p class="text-muted">ITFlow is <b>free software</b>: you can redistribute and/or modify it under the terms of the <a href="https://www.gnu.org/licenses/gpl-3.0.en.html" target="_blank">GNU General Public License</a>. <br> It is distributed in the hope that it will be useful, but <b>without any warranty</b>; without even the implied warranty of merchantability or fitness for a particular purpose.</p>
|
|
<?php
|
|
// Check that there is access to write to the current directory
|
|
if (!is_writable('.')) {
|
|
echo "<div class='alert alert-danger'>Warning: The current directory is not writable. Ensure the webserver process has write access (chmod/chown). Check the <a href='https://docs.itflow.org/installation'>docs</a> for info.</div>";
|
|
}
|
|
?>
|
|
<hr>
|
|
<div class="text-center">
|
|
<?php if ($should_skip_to_user): ?>
|
|
<a href="?user" class="btn btn-primary text-bold mr-2">
|
|
Create First User <i class="fas fa-fw fa-user ml-2"></i>
|
|
</a>
|
|
<?php endif; ?>
|
|
|
|
<?php if ($can_show_restore): ?>
|
|
<a href="?restore" class="btn btn-warning text-bold">
|
|
Restore from Backup <i class="fas fa-fw fa-upload ml-2"></i>
|
|
</a>
|
|
<?php endif; ?>
|
|
|
|
<?php if (!$should_skip_to_user && !$can_show_restore): ?>
|
|
<a href="?checks" class="btn btn-primary text-bold">
|
|
Begin Setup <i class="fas fa-fw fa-arrow-alt-circle-right ml-2"></i>
|
|
</a>
|
|
<?php endif; ?>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<?php } ?>
|
|
|
|
</div><!-- /.container-fluid -->
|
|
</div>
|
|
<!-- /.content -->
|
|
</div>
|
|
<!-- /.content-wrapper -->
|
|
</div>
|
|
<!-- ./wrapper -->
|
|
|
|
<!-- REQUIRED SCRIPTS -->
|
|
|
|
<!-- jQuery -->
|
|
<script src="/libs/jquery/jquery.min.js"></script>
|
|
<!-- Bootstrap 4 -->
|
|
<script src="/libs/bootstrap/js/bootstrap.bundle.min.js"></script>
|
|
<!-- Custom js-->
|
|
<script src='/libs/select2/js/select2.min.js'></script>
|
|
<script src="/libs/Show-Hide-Passwords-Bootstrap-4/bootstrap-show-password.min.js"></script>
|
|
<!-- AdminLTE App -->
|
|
<script src="/libs/adminlte/js/adminlte.min.js"></script>
|
|
|
|
<!-- Custom js-->
|
|
<script src="/js/app.js"></script>
|
|
|
|
</body>
|
|
|
|
</html>
|