X-Git-Url: https://vcs.fsf.org/?a=blobdiff_plain;f=src%2Fconfigtest.php;h=7b2049d0b5e27545cb65a539343d6a62485ea844;hb=2cbaf68d7c33d85dce89a5156704fcb664118e48;hp=6756a96120477619252284779ffaf8f3775fbd29;hpb=69792446ecffd56c41d2884e3eff93fdc8f7acd8;p=squirrelmail.git diff --git a/src/configtest.php b/src/configtest.php index 6756a961..7b2049d0 100644 --- a/src/configtest.php +++ b/src/configtest.php @@ -3,7 +3,7 @@ /** * SquirrelMail configtest script * - * @copyright © 2003-2006 The SquirrelMail Project Team + * @copyright © 2003-2007 The SquirrelMail Project Team * @license http://opensource.org/licenses/gpl-license.php GNU Public License * @version $Id$ * @package squirrelmail @@ -17,8 +17,54 @@ // This script could really use some restructuring as it has grown quite rapidly // but is not very 'clean'. Feel free to get some structure into this thing. -$warnings = 0; +/** force verbose error reporting and turn on display of errors */ +error_reporting(E_ALL); +ini_set('display_errors',1); + +/** Blockcopy from init.php. Cleans globals. */ +if ((bool) ini_get('register_globals') && + strtolower(ini_get('register_globals'))!='off') { + /** + * Remove all globals that are not reserved by PHP + * 'value' and 'key' are used by foreach. Don't unset them inside foreach. + */ + foreach ($GLOBALS as $key => $value) { + switch($key) { + case 'HTTP_POST_VARS': + case '_POST': + case 'HTTP_GET_VARS': + case '_GET': + case 'HTTP_COOKIE_VARS': + case '_COOKIE': + case 'HTTP_SERVER_VARS': + case '_SERVER': + case 'HTTP_ENV_VARS': + case '_ENV': + case 'HTTP_POST_FILES': + case '_FILES': + case '_REQUEST': + case 'HTTP_SESSION_VARS': + case '_SESSION': + case 'GLOBALS': + case 'key': + case 'value': + break; + default: + unset($GLOBALS[$key]); + } + } + // Unset variables used in foreach + unset($GLOBALS['key']); + unset($GLOBALS['value']); +} + + +/** + * Displays error messages and warnings + * @param string $str message + * @param boolean $fatal fatal error or only warning + */ function do_err($str, $fatal = TRUE) { global $IND, $warnings; $level = $fatal ? 'FATAL ERROR:' : 'WARNING:'; @@ -31,26 +77,54 @@ function do_err($str, $fatal = TRUE) { } } -$IND = str_repeat(' ',4); - ob_implicit_flush(); /** @ignore */ define('SM_PATH', '../'); +/** load minimal function set */ +require(SM_PATH . 'include/constants.php'); +require(SM_PATH . 'functions/global.php'); +require(SM_PATH . 'functions/strings.php'); +$SQM_INTERNAL_VERSION = preg_split('/\./', SM_VERSION, 3); +$SQM_INTERNAL_VERSION[2] = intval($SQM_INTERNAL_VERSION[2]); -/* set default value in order to block remote access to script */ +/** set default value in order to block remote access */ $allow_remote_configtest=false; -/* - * Load config before output begins. functions/strings.php depends on - * functions/globals.php. functions/global.php needs to be run before - * any html output starts. If config.php is missing, error will be displayed - * later. - */ +/** Load all configuration files before output begins */ + +/* load default configuration */ +require(SM_PATH . 'config/config_default.php'); +/* reset arrays in default configuration */ +$ldap_server = array(); +$plugins = array(); +$fontsets = array(); +$theme = array(); +$theme[0]['PATH'] = SM_PATH . 'themes/default_theme.php'; +$theme[0]['NAME'] = 'Default'; +$aTemplateSet = array(); +$aTemplateSet[0]['ID'] = 'default'; +$aTemplateSet[0]['NAME'] = 'Default'; +/* load site configuration */ if (file_exists(SM_PATH . 'config/config.php')) { - require(SM_PATH . 'config/config.php'); + require(SM_PATH . 'config/config.php'); +} +/* load local configuration overrides */ +if (file_exists(SM_PATH . 'config/config_local.php')) { + require(SM_PATH . 'config/config_local.php'); } -require(SM_PATH . 'functions/global.php'); -require(SM_PATH . 'functions/strings.php'); + +/** Load plugins */ +global $disable_plugins; +$squirrelmail_plugin_hooks = array(); +if (!$disable_plugins && file_exists(SM_PATH . 'config/plugin_hooks.php')) { + require(SM_PATH . 'config/plugin_hooks.php'); +} + +/** Warning counter */ +$warnings = 0; + +/** indent */ +$IND = str_repeat(' ',4); /** * get_location starts session and must be run before output is started. @@ -98,14 +172,14 @@ if (! $allow_remote_configtest) { } /* checking PHP specs */ -echo "

\n\n" . +echo "

SquirrelMail version:" . $version . "
\n\n" . '\n" . '\n
SquirrelMail version:" . SM_VERSION . "
Config file version:' . $config_version . "
Config file last modified:' . date ('d F Y H:i:s', filemtime(SM_PATH . 'config/config.php')) . "
\n

\n\n"; /* check $config_version */ -if ($config_version!='1.4.0') { +if ($config_version!='1.5.0') { do_err('Configuration file version does not match required version. Please update your configuration file.'); } @@ -119,7 +193,7 @@ echo $IND . 'PHP version ' . PHP_VERSION . ' OK. (You have: ' . phpversion() . " /* test for boolean false and any string that is not equal to 'off' */ if ((bool) ini_get('register_globals') && strtolower(ini_get('register_globals'))!='off') { - do_err('You have register_globals turned on. This is not an error, but it CAN be a security hazard. Consider turning register_globals off.', false); + do_err('You have register_globals turned on. This is not an error, but it CAN be a security hazard. Consider turning register_globals off.', false); } $php_exts = array('session','pcre'); $diff = array_diff($php_exts, get_loaded_extensions()); @@ -145,6 +219,21 @@ if (function_exists('mb_internal_encoding') && do_err($mb_error); } +/** + * Do not use SquirrelMail with magic_quotes_* on. + */ +if ( get_magic_quotes_runtime() || get_magic_quotes_gpc() || + ( (bool) ini_get('magic_quotes_sybase') && ini_get('magic_quotes_sybase') != 'off' ) + ) { + $magic_quotes_warning='You have enabled any one of magic_quotes_runtime, ' + .'magic_quotes_gpc or magic_quotes_sybase in your PHP ' + .'configuration. We recommend all those settings to be off. SquirrelMail ' + .'may work with them on, but when experiencing stray backslashes in your mail ' + .'or other strange behaviour, it may be advisable to turn them off.'; + do_err($magic_quotes_warning,false); +} + + /* checking paths */ echo "Checking paths...
\n"; @@ -203,7 +292,12 @@ if($data_dir == $attachment_dir) { } +echo "Checking plugins...
\n"; + /* check plugins and themes */ +//FIXME: check requirements given in plugin _info() function, such +// as required PHP extensions, Pear packages, other plugins, SM version, etc +// see development docs for list of returned info from that function $bad_plugins = array( 'attachment_common', // Integrated into SquirrelMail 1.2 core 'auto_prune_sent', // Obsolete: See Proon Automatic Folder Pruning plugin @@ -256,15 +350,36 @@ if (isset($plugins[0])) { ob_end_clean(); // if plugins output more than newlines and spacing, stop script execution. if (!empty($output)) { - $plugin_load_error = 'Some output is produced when plugins are loaded.' - .' Usually it means error. Output said: '.htmlspecialchars($output); + $plugin_load_error = 'Some output is produced when plugins are loaded. Usually this means there is an error in one of the plugin setup or configuration files. The output was: '.htmlspecialchars($output); do_err($plugin_load_error); } + /** + * Print plugin versions + */ + echo $IND . "Plugin versions...
\n"; + foreach ($plugins as $name) { + $plugin_version = get_plugin_version($name); + if (!empty($plugin_version)) + echo $IND . $IND . $name . ' ' . $plugin_version . "
\n"; + + // check if this plugin has any other plugin + // dependencies and if they are satisfied + // + $failed_dependencies = check_plugin_dependencies($name); + if (is_array($failed_dependencies)) { + $missing_plugins = ''; + foreach ($failed_dependencies as $depend_name => $depend_version) { + $missing_plugins .= ', ' . $depend_name . ' (version ' . $depend_version . ')'; + } + do_err($name . ' is missing some dependencies: ' . trim($missing_plugins, ', '), FALSE); + } + + } /** - * Hook is added in 1.5.2. Plugins should print error message and return true - * if there is an error in plugin. + * This hook was added in 1.5.2 and 1.4.10. Each plugins should print an error + * message and return TRUE if there are any errors in its setup/configuration. */ - $plugin_err = boolean_hook_function('configtest'); + $plugin_err = boolean_hook_function('configtest', $null, 1); if($plugin_err) { do_err('Some plugin tests failed.'); } else { @@ -301,7 +416,9 @@ if ( $squirrelmail_default_language != 'en_US' ) { echo $IND . "Default language OK.
\n"; } -echo $IND . "Base URL detected as: " . htmlspecialchars($test_location) . "
\n"; +echo $IND . "Base URL detected as: " . htmlspecialchars($test_location) . + " (location base " . (empty($config_location_base) ? 'autodetected' : 'set to ' . + htmlspecialchars($config_location_base)."") . ")
\n"; /* check minimal requirements for other security options */ @@ -502,6 +619,27 @@ if($imap_auth_mech == 'login' && stristr($capline, 'LOGINDISABLED') !== FALSE) { 'in the SquirrelMail configuration.', FALSE); } +if (stristr($capline, 'XMAGICTRASH') !== false) { + $magic_trash = 'It looks like IMAP_MOVE_EXPUNGE_TO_TRASH option is turned on ' + .'in your Courier IMAP configuration. Courier does not provide tools that ' + .'allow to detect folder used for Trash or commands are not documented. ' + .'SquirrelMail can\'t detect special trash folder. SquirrelMail manages ' + .'all message deletion or move operations internally and ' + .'IMAP_MOVE_EXPUNGE_TO_TRASH option can cause errors in message and ' + .'folder management operations. Please turn off IMAP_MOVE_EXPUNGE_TO_TRASH ' + .'option in Courier imapd configuration.'; + do_err($magic_trash,false); +} + +/* add warning about IMAP delivery */ +if (stristr($capline, 'XCOURIEROUTBOX') !== false) { + $courier_outbox = 'OUTBOX setting is enabled in your Courier imapd ' + .'configuration. SquirrelMail uses standard SMTP protocol or sendmail ' + .'binary to send emails. Courier IMAP delivery method is not supported' + .' and can create duplicate email messages.'; + do_err($courier_outbox,false); +} + /** OK, close connection */ fputs($stream, "A004 LOGOUT\r\n"); fclose($stream); @@ -515,7 +653,7 @@ if (function_exists('gettext')) { /* optional setlocale() tests. Should work only on glibc systems. */ if (sqgetGlobalVar('testlocales',$testlocales,SQ_GET)) { - include_once(SM_PATH . 'functions/i18n.php'); + include_once(SM_PATH . 'include/languages.php'); echo $IND . $IND . 'Testing translations:
'; foreach ($languages as $lang_code => $lang_data) { /* don't test aliases */ @@ -588,9 +726,9 @@ if (function_exists('iconv')) { } else { echo "Iconv functions are unavailable.
\n"; } -// same test as in include/validate.php +// same test as in include/init.php + date_default_timezone_set check echo "$IND timezone - "; -if ( (!ini_get('safe_mode')) || +if ( (!ini_get('safe_mode')) || function_exists('date_default_timezone_set') || !strcmp(ini_get('safe_mode_allowed_env_vars'),'') || preg_match('/^([\w_]+,)*TZ/', ini_get('safe_mode_allowed_env_vars')) ) { echo "Webmail users can change their time zone settings. \n";