Changeset 513

Timestamp:

Feb 16, 2013, 7:58:18 PM (11 years ago)

Author:

chronos

Message:

• Přidáno: Zabezpečení správy instalace heslem.

Location:

trunk/admin

Files:

• DefaultConfig.php (modified) (1 diff)
• install.php (modified) (9 diffs)

trunk/admin/DefaultConfig.php

@@ -37 +37 @@
   'MaxExportPerUser' => 10,
   'AoWoWExportId' => 1,
+  'SystemPassword' => '',
 );
 

trunk/admin/install.php

@@ -21 +21 @@
     'Verze databáze: '.$UpdateManager->GetDbVersion().'<br/>';
   $Output .= 'Verze kódu: '.$UpdateManager->Revision.'<br/>'.
-    '<form action="?" method="post">';
+    '<form action="" method="post">';
   if($UpdateManager->IsInstalled())
   {
     if(!$UpdateManager->IsUpToDate())
-      $Output .= '<input type="submit" name="update" value="Aktualizovat"/>';
-    $Output .= '<input type="submit" name="uninstall" value="Odinstalovat"/>';
-  } else $Output .= '<input type="submit" name="install" value="Instalovat"/>';
-  $Output .= '<input type="submit" name="configure" value="Nastavit"/>';
+      $Output .= '<input type="submit" name="update" value="Aktualizovat"/> ';
+    $Output .= '<input type="submit" name="uninstall" value="Odinstalovat"/> ';
+  } else $Output .= '<input type="submit" name="install" value="Instalovat"/> ';
+  $Output .= '<input type="submit" name="configure" value="Nastavit"/> ';
+  $Output .= '<input type="submit" name="logout" value="Odhlásit"/> ';
   $Output .= '</form>';
   return($Output);
@@ -35 +36 @@
 function PrepareConfig($Config)
 {
-  $Output = '<h3>Nastavení systému</h3>'.
+        $Output = '';
+  if(!file_exists('../includes/config.php') and !is_writable('../includes'))
+        $Output .= 'Varování: Konfigurační soubor nebude možné zapsat, protože složka includes není povolená pro zápis!';
+  if(file_exists('../includes/config.php') and !is_writable('../includes/config.php'))
+        $Output .= 'Varování: Konfigurační soubor nebude možné zapsat, protože soubor config.php není povolen pro zápis!';
+  $Output .= '<h3>Nastavení systému</h3>'.
     '<form action="" method="post">'.
     '<table>'.  
+    '<tr><td>Systémové heslo:</td><td> <input type="password" name="SystemPassword" value=""/></td></tr>'.
     '<tr><td>Adresa serveru:</td><td> <input type="text" name="Host" value="'.$Config['Database']['Host'].'"/></td></tr>'.
     '<tr><td>Přihlašovací jméno:</td><td> <input type="text" name="User" value="'.$Config['Database']['User'].'"/></td></tr>'.
@@ -57 +64 @@
 {
   $Config = $DefaultConfig;
+  if(array_key_exists('SystemPassword', $_POST) and ($_POST['SystemPassword'] != '')) 
+        $Config['SystemPassword'] = sha1($_POST['SystemPassword']);
   if(array_key_exists('Host', $_POST)) $Config['Database']['Host'] = $_POST['Host'];
   if(array_key_exists('User', $_POST)) $Config['Database']['User'] = $_POST['User'];
-  if(array_key_exists('Password', $_POST) and ($_POST['Password'] != '')) $Config['Database']['Password'] = $_POST['Password'];
+  if(array_key_exists('Password', $_POST) and ($_POST['Password'] != '')) 
+        $Config['Database']['Password'] = $_POST['Password'];
   if(array_key_exists('Schema', $_POST)) $Config['Database']['Database'] = $_POST['Schema'];
   if(array_key_exists('Title', $_POST)) $Config['Web']['Title'] = $_POST['Title'];
@@ -68 +78 @@
   $ConfigText = CreateConfig($Config);
   file_put_contents('../includes/config.php', $ConfigText);
-  $Output .= 'Konfigurace nastavena';
+  $Output .= 'Konfigurace nastavena<br/>';
   return($Output);      
 }
@@ -112 +122 @@
   'MaxExportPerUser' => 10,
   'AoWoWExportId' => 1,
+  'SystemPassword' => '".$Config['SystemPassword']."',
 );
 
@@ -117 +128 @@
   return($Output);
 }
+
+function LoginPanel()
+{
+        $Output = '<h3>Přihlášení k instalaci</h3>'.
+                        '<form action="" method="post">'.
+                        '<table>'.
+                        '<tr><td>Systémové heslo:</td><td> <input type="password" name="SystemPassword" value=""/></td></tr>'.
+                        '</table>'.
+                        '<input type="submit" name="login" value="Přihlásit"/>'.
+                        '</form>';      
+        return($Output);
+}
+
+session_start();
 
 $Output = '<?xml version="1.0" encoding="utf-8"?>
@@ -127 +152 @@
 if(isset($Config))
 {
+        if(!array_key_exists('SystemPassword', $_SESSION)) $_SESSION['SystemPassword'] = '';
+        if(array_key_exists('login', $_POST)) $_SESSION['SystemPassword'] = $_POST['SystemPassword'];
+        if(sha1($_SESSION['SystemPassword']) != $Config['SystemPassword'])
+        {
+                $Output .= LoginPanel();
+        } else 
+        {
   $System = new System();
   $System->Init();
@@ -135 +167 @@
   $UpdateManager->InstallMethod = 'FullInstall';
 
+if(array_key_exists('logout', $_POST))
+{
+        $_SESSION['SystemPassword'] = '';
+        $Output .= 'Odhlášen';
+  $Output .= LoginPanel();
+} else
 if(array_key_exists('update', $_POST))
 {
@@ -165 +203 @@
   $Output .= ControlPanel();    
 }
+        }
 } else 
 {
   if(array_key_exists('configure_save', $_POST))
   {
-    $Output .= PrepareConfig($Config);
-    $Output .= ControlPanel();  
+    $Output .= ConfigSave($DefaultConfig);
+    $Output .= 'Pokračujte k přihlášení <a href="">zde</a>';    
   } else {
         $Output .= PrepareConfig($DefaultConfig);