update.php

<?php
/*
    This file is part of OTSCMS (http://www.otscms.com/) project.

    Copyright (C) 2005 - 2008 Wrzasq (wrzasq@gmail.com)

    This program is free software; you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
    the Free Software Foundation; either version 2 of the License, or
    (at your option) any later version.

    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    GNU General Public License for more details.

    You should have received a copy of the GNU General Public License
    along with this program; if not, write to the Free Software
    Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
*/

// to make sure OTSCMS will run correctly on various PHP configurations
include('compat.php');

// loads system configuration
include('config.php');

// loads system core
include($config['directories']['classes'] . 'OTSCMS.php');

$config = OTSCMS::getResource('Config');

// database connection
$db = $config['db'];
$db = new SQL($db['host'], $db['user'], $db['password'], $db['database'], $db['cms_prefix'], $db['ots_prefix']);
OTSCMS::setResource('DB', $db);

// loads system configuration
foreach( $db->query('SELECT `name`, `content` FROM [settings]') as $setting)
{
    $config[ $setting['name'] ] = $setting['content'];
}

// sets current skin
if( InputData::read('skin') )
{
    // on _GET and/or _POST method (support url link and form sending)
    // sets cookie with recived skin
    Cookies::write('skin', InputData::read('skin') );
    // sets session for skin
    Session::write('skin', InputData::read('skin') );
    // sets user configuration
    $config['site.skin'] = InputData::read('skin');
}
elseif( Session::read('skin') )
{
    // if no new skin has been send tries to set it up from current session
    $config['site.skin'] = Session::read('skin');
}
elseif( Cookies::read('skin') )
{
    // if there is no session then tries to find cookie on user's computer
    $config['site.skin'] = Cookies::read('skin');
}

// interface objects
$language = new OTSTranslation($config['directories.languages'] . $config['site.language'] . '/');
OTSCMS::setResource('Language', $language);
$template = new OTSTemplate($config['directories.skins'] . $config['site.skin'] . '/');
OTSCMS::setResource('Template', $template);

$template['languages'] = array();
$template['skins'] = array();
$template['links'] = array();
$template['onlines'] = array();

// to prevent multiple calls
$driver = $db->getAttribute(PDO::ATTR_DRIVER_NAME);

// execute update
switch($config['version'])
{
    // only 3.0.0 didn't have version config
    default:
        // usefull trick from http://www.perturb.org/display/entry/645/ to evaluate ALTER TABLE DROP on SQLite
        $db->exec('CREATE TEMPORARY TABLE [settings_temporary] (`name` VARCHAR(255), `content` TEXT, UNIQUE(`name`) )');
        $db->exec('INSERT INTO [settings_temporary] SELECT `name`, `content` FROM [settings]');
        $db->exec('DROP TABLE [settings]');
        $db->exec('CREATE TABLE [settings] (`name` VARCHAR(255), `content` TEXT, UNIQUE(`name`) )');
        $db->exec('INSERT INTO [settings] SELECT `name`, `content` FROM [settings_temporary]');
        $db->exec('DROP TABLE [settings_temporary]');

        $query = $db->prepare('INSERT INTO [settings] (`name`, `content`) VALUES (:name, :content)');
        $query->execute( array(':name' => 'version', ':content' => '3.0.1') );
        $query->execute( array(':name' => 'mail.from', ':content' => 'you@example.com') );
        $query->execute( array(':name' => 'mail.smtp.host', ':content' => 'localhost') );
        $query->execute( array(':name' => 'mail.smtp.port', ':content' => '25') );
        $query->execute( array(':name' => 'mail.smtp.use_auth', ':content' => '0') );
        $query->execute( array(':name' => 'mail.smtp.user', ':content' => '') );
        $query->execute( array(':name' => 'mail.smtp.password', ':content' => '') );
        $query->execute( array(':name' => 'site.home', ':content' => file_get_contents('__home') ) );
        unlink($config['directories.modules'] . 'Account/password.php');
        unlink('__home');

    // 3.0.1 and up
    case '3.0.1':
        // session now use same prefix as cookies
        $db->exec('DELETE FROM [settings] WHERE `name` = \'session.prefix\'');

        // updates system version
        $db->exec('UPDATE [settings] SET `content` = \'3.0.2\' WHERE `name` = \'version\'');

        // deletes User module
        $dir = new DirectoryIterator($config['directories.modules'] . 'User');
        foreach($dir as $file)
        {
            // finding all subdirectories except . and .. symbols
            if( !$dir->isDot() )
            {
                unlink($config['directories.modules'] . 'User/' . $dir->getFilename() );
            }
        }

        rmdir($config['directories.modules'] . 'User');
        $db->exec('DELETE FROM [access] WHERE `name` LIKE \'User.%\'');

        foreach( Toolbox::subDirs($config['directories.languages']) as $language)
        {
            unlink($config['directories.languages'] . '/' . $langauge . '/Modules/User.php');
        }

        // new Account module command
        $db->exec('INSERT INTO [access] (`name`, `content`) VALUES (\'Account.save\', 0)');

    // 3.0.2 and up
    case '3.0.2':
        // updates system version
        $db->exec('UPDATE [settings] SET `content` = \'3.0.3\' WHERE `name` = \'version\'');

    // 3.0.3 and up
    case '3.0.3':
        // updates system version
        $db->exec('UPDATE [settings] SET `content` = \'3.0.4\' WHERE `name` = \'version\'');

        // characters limit
        $db->exec('INSERT INTO [settings] (`name`, `content`) VALUES (\'system.account_limit\', \'5\')');

    // 3.0.4 and up
    case '3.0.4':
        // updates system version
        $db->exec('UPDATE [settings] SET `content` = \'3.0.5\' WHERE `name` = \'version\'');

        // adds loss fields
        $db->exec('ALTER TABLE [profiles] ADD `loss_experience` INT');
        $db->exec('ALTER TABLE [profiles] ADD `loss_mana` INT');
        $db->exec('ALTER TABLE [profiles] ADD `loss_skills` INT');

    // 3.0.5 and up
    case '3.0.5':
        // updates system version
        $db->exec('UPDATE [settings] SET `content` = \'3.1.0\' WHERE `name` = \'version\'');

        // not used anymore
        $db->exec('DROP VIEW [guild_members]');

        // guides table
        switch($driver)
        {
            case 'mysql':
                $db->query('CREATE TABLE [sites] (`id` INT NOT NULL AUTO_INCREMENT, `name` VARCHAR(255), `content` LONGTEXT, `is_home` BOOLEAN DEFAULT FALSE, PRIMARY KEY (`id`) )');
                break;

            case 'sqlite':
                $db->query('CREATE TABLE [sites] (`id` INTEGER PRIMARY KEY, `name` VARCHAR(255), `content` TEXT, `is_home` INT DEFAULT 0)');
                break;
        }

        // moves home website into guides
        $content = $db->query('SELECT `content` FROM [settings] WHERE `name` = \'site.home\'')->fetch();
        $query = $db->prepare('INSERT INTO [sites] (`name`, `content`, `is_home`) VALUES (\'Main\', :content, 1)');
        $query->execute( array(':content' => $content['content']) );
        $db->exec('DELETE FROM [settings] WHERE `name` = \'site.home\'');

        // access rights for Sites modules
        $query = $db->prepare('INSERT INTO [access] (`name`, `content`) VALUES (:name, :content)');

        $query->execute( array(':name' => 'Sites.*', ':content' => 3) );
        $query->execute( array(':name' => 'Sites.display', ':content' => -1) );
        $query->execute( array(':name' => 'Sites.list', ':content' => -1) );

        // URLs table
        $db->exec('CREATE TABLE [urls] (`name` VARCHAR(255), `content` VARCHAR(255), `order` INT) ENGINE = InnoDB');

        $query = $db->prepare('INSERT INTO [urls] (`name`, `content`, `order`) VALUES (:name, :content, :order)');

        $query->execute( array(':name' => '^.*$', ':content' => 'module=News&command=home', ':order' => 100) );
        $query->execute( array(':name' => '^admin/?(.*)$', ':content' => '$1', ':order' => 10) );
        $query->execute( array(':name' => '^logout/?$', ':content' => 'module=Account&command=account&userlogout=1', ':order' => 50) );
        $query->execute( array(':name' => '^vote/?$', ':content' => 'module=Poll&command=vote', ':order' => 50) );
        $query->execute( array(':name' => '^library/?$', ':content' => 'module=Library&command=main', ':order' => 50) );
        $query->execute( array(':name' => '^download/?$', ':content' => 'module=Download&command=list', ':order' => 50) );
        $query->execute( array(':name' => '^gallery/?$', ':content' => 'module=Gallery&command=list', ':order' => 50) );
        $query->execute( array(':name' => '^signup/?$', ':content' => 'module=Account&command=signup', ':order' => 50) );
        $query->execute( array(':name' => '^signup/submit$', ':content' => 'module=Account&command=create', ':order' => 20) );
        $query->execute( array(':name' => '^password/forgot$', ':content' => 'module=Account&command=forgot', ':order' => 20) );
        $query->execute( array(':name' => '^password/remind$', ':content' => 'module=Account&command=remind', ':order' => 20) );
        $query->execute( array(':name' => '^password/change$', ':content' => 'module=Account&command=change', ':order' => 20) );
        $query->execute( array(':name' => '^account/?$', ':content' => 'module=Account&command=account', ':order' => 50) );
        $query->execute( array(':name' => '^account/save$', ':content' => 'module=Account&command=save', ':order' => 20) );
        $query->execute( array(':name' => '^account/suspend$', ':content' => 'module=Account&command=suspend', ':order' => 20) );
        $query->execute( array(':name' => '^archive/?$', ':content' => 'module=News&command=archive', ':order' => 50) );
        $query->execute( array(':name' => '^news/?$', ':content' => 'module=News&command=list', ':order' => 50) );
        $query->execute( array(':name' => '^news/([0-9]+)$', ':content' => 'module=News&command=display&id=$1', ':order' => 30) );
        $query->execute( array(':name' => '^spells/?$', ':content' => 'module=Library&command=spells', ':order' => 50) );
        $query->execute( array(':name' => '^spells/(.+)$', ':content' => 'module=Library&command=spell&name=$1', ':order' => 40) );
        $query->execute( array(':name' => '^monsters/?$', ':content' => 'module=Library&command=monsters', ':order' => 50) );
        $query->execute( array(':name' => '^monsters/(.+)$', ':content' => 'module=Library&command=monster&name=$1', ':order' => 40) );
        $query->execute( array(':name' => '^characters/?$', ':content' => 'module=Character&command=display', ':order' => 50) );
        $query->execute( array(':name' => '^characters/([0-9]+)/delete$', ':content' => 'module=Character&command=delete&id=$1', ':order' => 10) );
        $query->execute( array(':name' => '^characters/([0-9]+)/change$', ':content' => 'module=Character&command=change&id=$1', ':order' => 10) );
        $query->execute( array(':name' => '^characters/([0-9]+)/save$', ':content' => 'module=Character&command=save&id=$1', ':order' => 10) );
        $query->execute( array(':name' => '^characters/create$', ':content' => 'module=Character&command=create', ':order' => 20) );
        $query->execute( array(':name' => '^characters/insert$', ':content' => 'module=Character&command=insert', ':order' => 20) );
        $query->execute( array(':name' => '^characters/(.+)$', ':content' => 'module=Character&command=display&name=$1', ':order' => 40) );
        $query->execute( array(':name' => '^characters/(.+)/message$', ':content' => 'module=PM&command=new&to=$1', ':order' => 30) );
        $query->execute( array(':name' => '^statistics/?$', ':content' => 'module=Statistics&command=census', ':order' => 50) );
        $query->execute( array(':name' => '^statistics/(.*)$', ':content' => 'module=Statistics&command=highscores&list=$1', ':order' => 40) );
        $query->execute( array(':name' => '^statistics/(.*)/page([0-9]+)$', ':content' => 'module=Statistics&command=highscores&list=$1&page=$2', ':order' => 30) );
        $query->execute( array(':name' => '^guild/quit$', ':content' => 'module=Guilds&command=quit', ':order' => 20) );
        $query->execute( array(':name' => '^guild/add$', ':content' => 'module=Guilds&command=add', ':order' => 20) );
        $query->execute( array(':name' => '^guild/insert$', ':content' => 'module=Guilds&command=insert', ':order' => 20) );
        $query->execute( array(':name' => '^guild/create$', ':content' => 'module=Guilds&command=create', ':order' => 20) );
        $query->execute( array(':name' => '^guilds/?$', ':content' => 'module=Guilds&command=list', ':order' => 50) );
        $query->execute( array(':name' => '^guilds/([0-9]+)$', ':content' => 'module=Guilds&command=display&id=$1', ':order' => 30) );
        $query->execute( array(':name' => '^guides/?$', ':content' => 'module=Sites&command=list', ':order' => 50) );
        $query->execute( array(':name' => '^guides/([0-9]+)$', ':content' => 'module=Sites&command=display&id=$1', ':order' => 40) );
        $query->execute( array(':name' => '^forum/?$', ':content' => 'module=Forum&command=board&id=0', ':order' => 50) );
        $query->execute( array(':name' => '^forum/([0-9]+)$', ':content' => 'module=Forum&command=board&id=$1', ':order' => 40) );
        $query->execute( array(':name' => '^forum/([0-9]+)/page([0-9]+)$', ':content' => 'module=Forum&command=board&id=$1&page=$2', ':order' => 30) );
        $query->execute( array(':name' => '^forum/([0-9]+)/reply$', ':content' => 'module=Topic&command=new&boardid=$1', ':order' => 20) );
        $query->execute( array(':name' => '^posts/([0-9]+)$', ':content' => 'module=Topic&command=view&id=$1', ':order' => 40) );
        $query->execute( array(':name' => '^posts/([0-9]+)/page([0-9]+)$', ':content' => 'module=Topic&command=view&id=$1&page=$2', ':order' => 30) );
        $query->execute( array(':name' => '^posts/([0-9]+)/reply$', ':content' => 'module=Topic&command=new&topicid=$1', ':order' => 20) );
        $query->execute( array(':name' => '^posts/([0-9]+)/quote/([0-9]+)$', ':content' => 'module=Topic&command=new&topicid=$1&quoteid=$2', ':order' => 10) );
        $query->execute( array(':name' => '^poll/?$', ':content' => 'module=Poll&command=latest', ':order' => 60) );
        $query->execute( array(':name' => '^polls/?$', ':content' => 'module=Poll&command=list', ':order' => 50) );
        $query->execute( array(':name' => '^polls/([0-9]+)$', ':content' => 'module=Poll&command=display&id=$1', ':order' => 40) );
        $query->execute( array(':name' => '^inbox/?$', ':content' => 'module=PM&command=inbox', ':order' => 50) );
        $query->execute( array(':name' => '^outbox/?$', ':content' => 'module=PM&command=sent', ':order' => 50) );
        $query->execute( array(':name' => '^message/([0-9]+)$', ':content' => 'module=PM&command=display&id=$1', ':order' => 30) );
        $query->execute( array(':name' => '^message/([0-9]+)/delete$', ':content' => 'module=PM&command=delete&id=$1', ':order' => 20) );
        $query->execute( array(':name' => '^message/([0-9]+)/reply$', ':content' => 'module=PM&command=reply&id=$1', ':order' => 20) );
        $query->execute( array(':name' => '^message/([0-9]+)/forward$', ':content' => 'module=PM&command=fw&id=$1', ':order' => 20) );
        $query->execute( array(':name' => '^message/new$', ':content' => 'module=PM&command=new', ':order' => 20) );
        $query->execute( array(':name' => '^send/?$', ':content' => 'module=PM&command=send', ':order' => 50) );

        // changes directories paths
        $query = $db->prepare('UPDATE [settings] SET `content` = :content WHERE `name` = :name');
        $query->execute( array(':name' => 'directories.languages', ':content' => 'languages/') );
        $query->execute( array(':name' => 'directories.modules', ':content' => 'modules/') );
        $query->execute( array(':name' => 'directories.skins', ':content' => 'skins/') );
        $query->execute( array(':name' => 'directories.images', ':content' => 'images/') );

        // rename directories
        rename('lng', 'languages');
        rename('mod', 'modules');
        rename('lay', 'skins');
        rename('img', 'images');
        rename('cls', 'classes');

        // overwrite configuration file
        file_put_contents('config.php', str_replace($config['directories.classes'], 'classes/', file_get_contents('config.php') ) );

        // runtime configuration change

        $config['directories.classes'] = 'classes/';
        $config['directories.skins'] = 'skins/';
        $config['directories.languages'] = 'languages/';

        OTSCMS::init( array('version' => $config['version'], 'directories' => $config['directories'], 'system' => $config['system'], 'site' => $config['site']) );

        $config = OTSCMS::getResource('Config');

        $language = new OTSTranslation($config['directories.languages'] . $config['site.language'] . '/');
        OTSCMS::setResource('Language', $language);
        $template = new OTSTemplate($config['directories.skins'] . $config['site.skin'] . '/');
        OTSCMS::setResource('Template', $template);

        $template['languages'] = array();
        $template['skins'] = array();
        $template['links'] = array();
        $template['onlines'] = array();

    // 3.1.0 and up
    case '3.1.0':
        // updates system version
        $db->exec('UPDATE [settings] SET `content` = \'3.1.1\' WHERE `name` = \'version\'');

        // creates cache table
        switch($driver)
        {
            case 'mysql':
                $db->exec('CREATE TABLE [cache] (`key` VARCHAR(32), `id` INT, `name` INT, `content` BLOB, `parent` INT, `previous` INT) ENGINE = InnoDB CHARSET = utf8');
                $db->exec('CREATE TABLE [items] ( `key` VARCHAR(32), `id` INT, `name` VARCHAR(255), `group` INT, `type` INT) ENGINE = InnoDB CHARSET = utf8');
                break;

            case 'sqlite':
            case 'pgsql':
                $db->exec('CREATE TABLE [cache] (`key` VARCHAR(32), `id` INT, `name` INT, `content` BLOB, `parent` INT, `previous` INT)');
                $db->exec('CREATE TABLE [items] (`key` VARCHAR(32), `id` INT, `name` VARCHAR(255), `group` INT, `type` INT)');
                break;
        }

        $query = $sql->prepare('INSERT INTO [urls] (`name`, `content`, `order`) VALUES (:name, :content, :order)');

        // updates spells library links
        $query->execute( array(':name' => '^spells/instants/(.+)$', ':content' => 'module=Library&command=spell&name=$1&type=' . OTS_SpellsList::SPELL_INSTANT, ':order' => 20) );
        $query->execute( array(':name' => '^spells/runes/(.+)$', ':content' => 'module=Library&command=spell&name=$1&type=' . OTS_SpellsList::SPELL_RUNE, ':order' => 20) );
        $query->execute( array(':name' => '^spells/conjures/(.+)$', ':content' => 'module=Library&command=spell&name=$1&type=' . OTS_SpellsList::SPELL_CONJURE, ':order' => 20) );

        $db->exec('DELETE FROM [urls] WHERE `name` = \'^spells/(.+)$\' AND `content` = \'module=Library&command=spell&name=$1\'');

    // 3.1.1 and up
    case '3.1.1':
        // updates system version
        $db->exec('UPDATE [settings] SET `content` = \'3.1.2\' WHERE `name` = \'version\'');

        // deletes obsolete MD5 setting
        $db->exec('DELETE FROM [settings] WHERE `name` = \'system.md5\'');

        // new passwords type setting
        $db->exec('INSERT INTO [settings] (`name`, `content`) VALUES (\'system.passwords\', \'' . ($config['system.md5'] ? 'md5' : 'plain') . '\')');

    // 3.1.2 and up
    case '3.1.2':
        // updates system version
        $db->exec('UPDATE [settings] SET `content` = \'3.1.3\' WHERE `name` = \'version\'');

        // adds new character profile fields
        $db->exec('ALTER TABLE [profiles] ADD `balance` INT');
        $db->exec('ALTER TABLE [profiles] ADD `loss_items` INT');

        // creates OTAdmin connections list
        switch($driver)
        {
            case 'mysql':
                $db->exec('CREATE TABLE [otadmin] (`id` SERIAL, `name` VARCHAR(255), `content` VARCHAR(255), `port` INT, `password` VARCHAR(255), PRIMARY KEY (`id`) ) ENGINE = InnoDB CHARSET = utf8');
                break;

            case 'sqlite':
                $db->exec('CREATE TABLE [otadmin] (`id` SERIAL, `name` VARCHAR(255), `content` VARCHAR(255), `port` INT, `password` VARCHAR(255), PRIMARY KEY (`id`) )');
                break;

            case 'pgsql':
                $db->exec('CREATE TABLE [otadmin] (`id` INTEGER PRIMARY KEY, `name` VARCHAR(255), `content` VARCHAR(255), `port` INT, `password` VARCHAR(255) )');
                break;
        }

        // OTAdmin module access restrictions
        $db->exec('INSERT INTO [access] (`name`, `content`) VALUES (\'OTAdmin.*\', 3)');

        // guild table extensions
        $db->exec('ALTER TABLE {guilds} ADD `icon` VARCHAR(255)');
        $db->exec('ALTER TABLE {guilds} ADD `content` TEXT');
}

$raw = $template->createComponent('RAW');
$raw['content'] = '<p>System updated.</p>';

// outputs update results
$template->display('Install', 'update');

?>