Changeset 19854 for branches/version-2_5-dev/html/install/index.php

Timestamp:

2011/01/08 03:11:29 (13 years ago)

Author:

tao

Message:

#841 インストール画面に管理画面のディレクトリ、SSL制限、IP制限を追加。管理画面でのアクセス制限も追加

File:

• branches/version-2_5-dev/html/install/index.php (modified) (9 diffs)

branches/version-2_5-dev/html/install/index.php

@@ -32 +32 @@
 $INSTALL_DIR = realpath(dirname( __FILE__));
 require_once(DATA_REALDIR . "module/Request.php");
+require_once(DATA_REALDIR . "install.php");
 
 define("INSTALL_LOG", "./temp/install.log");
@@ -112 +113 @@
         // 設定ファイルの生成
         lfMakeConfigFile();
-        $objPage = lfDispStep3($objPage);
+        if(!renameAdminDir($objWebParam->getValue('admin_dir'))){
+            $objPage->arrErr["all"] .= "管理者ディレクトリのリネームに失敗しました。権限を確認してください。";
+            $objPage = lfDispStep2($objPage);
+        }else{
+            $objPage = lfDispStep3($objPage);
+        }
     } else {
         $objPage = lfDispStep2($objPage);
@@ -399 +405 @@
         DATA_REALDIR . "downloads/",
         DATA_REALDIR . "upload/",
+        HTML_REALDIR . "admin/"
     );
 
@@ -646 +653 @@
         }
     }
+    
+    //管理画面のディレクトリ名を取得（再インストール時）
+    if(defined("ADMIN_DIR")){
+        $admin_dir = ADMIN_DIR;
+    }
 
     $objWebParam->addParam("店名", "shop_name", MTEXT_LEN, "", array("EXIST_CHECK","MAX_LENGTH_CHECK"), $shop_name);
@@ -651 +663 @@
     $objWebParam->addParam("管理者：ログインID", "login_id", ID_MAX_LEN, "", array("EXIST_CHECK","SPTAB_CHECK", "ALNUM_CHECK"));
     $objWebParam->addParam("管理者：パスワード", "login_pass", ID_MAX_LEN, "", array("EXIST_CHECK","SPTAB_CHECK", "ALNUM_CHECK"));
+    $objWebParam->addParam("管理画面：ディレクトリ", "admin_dir", ID_MAX_LEN, "a", array("EXIST_CHECK","SPTAB_CHECK", "ALNUM_CHECK"),$admin_dir);
+    $objWebParam->addParam("管理画面：SSL制限", "admin_force_ssl", 1, "n", array("SPTAB_CHECK", "NUM_CHECK","MAX_LENGTH_CHECK"));
+    $objWebParam->addParam("管理画面：IP制限", "admin_allow_hosts", LTEXT_LEN, "an", array("IP_CHECK","MAX_LENGTH_CHECK"));
     $objWebParam->addParam("URL(通常)", "normal_url", MTEXT_LEN, "", array("EXIST_CHECK","URL_CHECK","MAX_LENGTH_CHECK"), $normal_url);
     $objWebParam->addParam("URL(セキュア)", "secure_url", MTEXT_LEN, "", array("EXIST_CHECK","URL_CHECK","MAX_LENGTH_CHECK"), $secure_url);
@@ -721 +736 @@
 
     // パスワードのチェック
-    $objErr->doFunc( array("管理者：パスワード",'login_pass',ID_MIN_LEN ,ID_MAX_LEN ) ,array("SPTAB_CHECK" ,"NUM_RANGE_CHECK" ));
+    $objErr->doFunc( array("管理者：パスワード",'login_pass',PASSWORD_LEN1 ,PASSWORD_LEN2 ) ,array("SPTAB_CHECK" ,"NUM_RANGE_CHECK" ));
 
     return $objErr->arrErr;
@@ -902 +917 @@
 
     $filepath = DATA_REALDIR . "install.php";
-
+    
+    //管理画面SSL制限
+    $force_ssl = FALSE;
+    if($objWebParam->getValue('admin_force_ssl') == 1){
+        $force_ssl = TRUE;
+    }
+    //管理画面IP制限
+    $allow_hosts = array();
+    $hosts = $objWebParam->getValue('admin_allow_hosts');
+    if(!empty($hosts)){
+        $hosts = str_replace("\r","",$hosts);
+        if(strpos("\n",$hosts) === false){
+            $hosts .= "\n";
+        }
+        $hosts = explode("\n",$hosts);
+        foreach($hosts as $key=>$host){
+            $host = trim($host);
+            if(strlen($host) >= 8) {
+                $allow_hosts[] = $host;
+            }
+        }
+    }
     $config_data =
     "<?php\n".
@@ -916 +952 @@
     "    define ('DB_NAME', '" . $objDBParam->getValue('db_name') . "');\n" .
     "    define ('DB_PORT', '" . $objDBParam->getValue('db_port') .  "');\n" .
-    "?>";
+    "    define ('ADMIN_DIR', '" . $objWebParam->getValue('admin_dir') .  "/');\n" .
+    "    define ('ADMIN_FORCE_SSL', " . $force_ssl .  ");\n";
+    if(count($allow_hosts) > 0){
+        $config_data .= "    define ('ADMIN_ALLOW_HOSTS', '".serialize($allow_hosts)."');\n";
+    }
+    $config_data .= "?>";
 
     if($fp = fopen($filepath,"w")) {
@@ -988 +1029 @@
                  array("dtb_trackback", "trackback_id"));
 }
+
+
+/**
+ * 管理画面のディレクトリ名の変更
+ *
+ * @param string 設定する管理画面のディレクトリ名
+ */
+function renameAdminDir($admin_dir){
+    $old_dir = "admin/";
+    if(defined("ADMIN_DIR")){
+        $old_dir = ADMIN_DIR;
+    }
+    if(!rename(HTML_REALDIR.$old_dir,HTML_REALDIR.$admin_dir)){
+        return FALSE;
+    }
+    if(!rename(USER_TEMPLATE_REALDIR.$old_dir,USER_TEMPLATE_REALDIR.$admin_dir)){
+        return FALSE;
+    }
+    return TRUE;
+}
 ?>