| SquirrelMail version: | " . $version . " |
| SquirrelMail version: | " . SM_VERSION . " |
| Config file version: | ' . $config_version . " |
| Config file last modified: | ' .
date ('d F Y H:i:s', filemtime(SM_PATH . 'config/config.php')) .
@@ -173,6 +182,9 @@ if ($config_version!='1.5.0') {
do_err('Configuration file version does not match required version. Please update your configuration file.');
}
+
+/* checking PHP specs */
+
echo "Checking PHP configuration... \n"; if(!check_php_version(4,1,0)) { @@ -180,11 +192,54 @@ if(!check_php_version(4,1,0)) { } echo $IND . 'PHP version ' . PHP_VERSION . ' OK. (You have: ' . phpversion() . ". Minimum: 4.1.0) \n"; -/* test for boolean false and any string that is not equal to 'off' */ + +/* register_globals check: test for boolean false and any string that is not equal to 'off' */ + if ((bool) ini_get('register_globals') && strtolower(ini_get('register_globals'))!='off') { do_err('You have register_globals turned on. This is not an error, but it CAN be a security hazard. Consider turning register_globals off.', false); } + + +/* variables_order check */ + +// FIXME(?): Hmm, how do we distinguish between when an ini setting is +// not available (ini_set() returns empty string) and when +// the administrator set the value to an empty string? The +// latter is sure to be highly rare, so for now, just assume +// that empty value means the setting isn't even available +// (could also check PHP version when this setting was implemented) +$variables_order = ini_get('variables_order'); +if (!empty($variables_order) && (strpos($variables_order, 'G') === FALSE + || strpos($variables_order, 'P') === FALSE + || strpos($variables_order, 'C') === FALSE + || strpos($variables_order, 'S') === FALSE)) { + do_err('Your variables_order setting is insufficient for SquirrelMail to function. It needs at least "GPCS", but you have it set to "' . $variables_order . '"', true); +} else { + echo $IND . "variables_order OK: $variables_order. \n"; +} + + +/* gpc_order check */ + +// FIXME(?): Hmm, how do we distinguish between when an ini setting is +// not available (ini_set() returns empty string) and when +// the administrator set the value to an empty string? The +// latter is sure to be highly rare, so for now, just assume +// that empty value means the setting isn't even available +// (could also check PHP version when this setting was implemented) +$gpc_order = ini_get('gpc_order'); +if (!empty($gpc_order) && (strpos($gpc_order, 'G') === FALSE + || strpos($gpc_order, 'P') === FALSE + || strpos($gpc_order, 'C') === FALSE)) { + do_err('Your gpc_order setting is insufficient for SquirrelMail to function. It needs to be set to "GPC", but you have it set to "' . $gpc_order . '"', true); +} else { + echo $IND . "gpc_order OK: $gpc_order. \n"; +} + + +/* check PHP extensions */ + $php_exts = array('session','pcre'); $diff = array_diff($php_exts, get_loaded_extensions()); if(count($diff)) { @@ -209,6 +264,21 @@ if (function_exists('mb_internal_encoding') && do_err($mb_error); } +/** + * Do not use SquirrelMail with magic_quotes_* on. + */ +if ( get_magic_quotes_runtime() || get_magic_quotes_gpc() || + ( (bool) ini_get('magic_quotes_sybase') && ini_get('magic_quotes_sybase') != 'off' ) + ) { + $magic_quotes_warning='You have enabled any one of magic_quotes_runtime, ' + .'magic_quotes_gpc or magic_quotes_sybase in your PHP ' + .'configuration. We recommend all those settings to be off. SquirrelMail ' + .'may work with them on, but when experiencing stray backslashes in your mail ' + .'or other strange behaviour, it may be advisable to turn them off.'; + do_err($magic_quotes_warning,false); +} + + /* checking paths */ echo "Checking paths... \n"; @@ -267,7 +337,12 @@ if($data_dir == $attachment_dir) { } +echo "Checking plugins... \n"; + /* check plugins and themes */ +//FIXME: check requirements given in plugin _info() function, such +// as required PHP extensions, Pear packages, other plugins, SM version, etc +// see development docs for list of returned info from that function $bad_plugins = array( 'attachment_common', // Integrated into SquirrelMail 1.2 core 'auto_prune_sent', // Obsolete: See Proon Automatic Folder Pruning plugin @@ -320,15 +395,38 @@ if (isset($plugins[0])) { ob_end_clean(); // if plugins output more than newlines and spacing, stop script execution. if (!empty($output)) { - $plugin_load_error = 'Some output is produced when plugins are loaded.' - .' Usually it means error. Output said: '.htmlspecialchars($output); + $plugin_load_error = 'Some output is produced when plugins are loaded. Usually this means there is an error in one of the plugin setup or configuration files. The output was: '.htmlspecialchars($output); do_err($plugin_load_error); } + /** + * Print plugin versions + */ + echo $IND . "Plugin versions... \n"; + foreach ($plugins as $name) { + $plugin_version = get_plugin_version($name); + echo $IND . $IND . $name . ' ' . (empty($plugin_version) ? '??' : $plugin_version) . " \n"; + + // check if this plugin has any other plugin + // dependencies and if they are satisfied + // + $failed_dependencies = check_plugin_dependencies($name); + if ($failed_dependencies === 'INCOMPATIBLE') { + do_err($name . ' is NOT COMPATIBLE with this version of SquirrelMail', FALSE); + } + else if (is_array($failed_dependencies)) { + $missing_plugins = ''; + foreach ($failed_dependencies as $depend_name => $depend_requirements) { + $missing_plugins .= ', ' . $depend_name . ' (version ' . $depend_requirements['version'] . ', ' . ($depend_requirements['activate'] ? 'must be activated' : 'need not be activated') . ')'; + } + do_err($name . ' is missing some dependencies: ' . trim($missing_plugins, ', '), FALSE); + } + + } /** - * Hook is added in 1.5.2. Plugins should print error message and return true - * if there is an error in plugin. + * This hook was added in 1.5.2 and 1.4.10. Each plugins should print an error + * message and return TRUE if there are any errors in its setup/configuration. */ - $plugin_err = boolean_hook_function('configtest'); + $plugin_err = boolean_hook_function('configtest', $null, 1); if($plugin_err) { do_err('Some plugin tests failed.'); } else { |