| SquirrelMail version: | " . $version . " |
| SquirrelMail version: | " . SM_VERSION . " |
| Config file version: | ' . $config_version . " |
| Config file last modified: | ' .
date ('d F Y H:i:s', filemtime(SM_PATH . 'config/config.php')) .
@@ -173,6 +185,9 @@ if ($config_version!='1.5.0') {
do_err('Configuration file version does not match required version. Please update your configuration file.');
}
+
+/* checking PHP specs */
+
echo "Checking PHP configuration... \n"; if(!check_php_version(4,1,0)) { @@ -180,11 +195,64 @@ if(!check_php_version(4,1,0)) { } echo $IND . 'PHP version ' . PHP_VERSION . ' OK. (You have: ' . phpversion() . ". Minimum: 4.1.0) \n"; -/* test for boolean false and any string that is not equal to 'off' */ + +/* register_globals check: test for boolean false and any string that is not equal to 'off' */ + if ((bool) ini_get('register_globals') && strtolower(ini_get('register_globals'))!='off') { do_err('You have register_globals turned on. This is not an error, but it CAN be a security hazard. Consider turning register_globals off.', false); } + + +/* variables_order check */ + +// FIXME(?): Hmm, how do we distinguish between when an ini setting is +// not available (ini_set() returns empty string) and when +// the administrator set the value to an empty string? The +// latter is sure to be highly rare, so for now, just assume +// that empty value means the setting isn't even available +// (could also check PHP version when this setting was implemented) +// although, we'll also warn the user if it is empty, with +// a non-fatal error +$variables_order = strtoupper(ini_get('variables_order')); +if (empty($variables_order)) + do_err('Your variables_order setting seems to be empty. Make sure it is undefined in any PHP ini files, .htaccess files, etc. and not specifically set to an empty value or SquirrelMail may not function correctly', false); +else if (strpos($variables_order, 'G') === FALSE + || strpos($variables_order, 'P') === FALSE + || strpos($variables_order, 'C') === FALSE + || strpos($variables_order, 'S') === FALSE) { + do_err('Your variables_order setting is insufficient for SquirrelMail to function. It needs at least "GPCS", but you have it set to "' . htmlspecialchars($variables_order) . '"', true); +} else { + echo $IND . "variables_order OK: $variables_order. \n"; +} + + +/* gpc_order check (removed from PHP as of v5.0) */ + +if (!check_php_version(5)) { + // FIXME(?): Hmm, how do we distinguish between when an ini setting is + // not available (ini_set() returns empty string) and when + // the administrator set the value to an empty string? The + // latter is sure to be highly rare, so for now, just assume + // that empty value means the setting isn't even available + // (could also check PHP version when this setting was implemented) + // although, we'll also warn the user if it is empty, with + // a non-fatal error + $gpc_order = strtoupper(ini_get('gpc_order')); + if (empty($gpc_order)) + do_err('Your gpc_order setting seems to be empty. Make sure it is undefined in any PHP ini files, .htaccess files, etc. and not specifically set to an empty value or SquirrelMail may not function correctly', false); + else if (strpos($gpc_order, 'G') === FALSE + || strpos($gpc_order, 'P') === FALSE + || strpos($gpc_order, 'C') === FALSE) { + do_err('Your gpc_order setting is insufficient for SquirrelMail to function. It needs to be set to "GPC", but you have it set to "' . htmlspecialchars($gpc_order) . '"', true); + } else { + echo $IND . "gpc_order OK: $gpc_order. \n"; + } +} + + +/* check PHP extensions */ + $php_exts = array('session','pcre'); $diff = array_diff($php_exts, get_loaded_extensions()); if(count($diff)) { @@ -209,6 +277,21 @@ if (function_exists('mb_internal_encoding') && do_err($mb_error); } +/** + * Do not use SquirrelMail with magic_quotes_* on. + */ +if ( get_magic_quotes_runtime() || get_magic_quotes_gpc() || + ( (bool) ini_get('magic_quotes_sybase') && ini_get('magic_quotes_sybase') != 'off' ) + ) { + $magic_quotes_warning='You have enabled any one of magic_quotes_runtime, ' + .'magic_quotes_gpc or magic_quotes_sybase in your PHP ' + .'configuration. We recommend all those settings to be off. SquirrelMail ' + .'may work with them on, but when experiencing stray backslashes in your mail ' + .'or other strange behaviour, it may be advisable to turn them off.'; + do_err($magic_quotes_warning,false); +} + + /* checking paths */ echo "Checking paths... \n"; @@ -267,6 +350,8 @@ if($data_dir == $attachment_dir) { } +echo "Checking plugins... \n"; + /* check plugins and themes */ //FIXME: check requirements given in plugin _info() function, such // as required PHP extensions, Pear packages, other plugins, SM version, etc @@ -323,15 +408,38 @@ if (isset($plugins[0])) { ob_end_clean(); // if plugins output more than newlines and spacing, stop script execution. if (!empty($output)) { - $plugin_load_error = 'Some output is produced when plugins are loaded.' - .' Usually it means error. Output said: '.htmlspecialchars($output); + $plugin_load_error = 'Some output is produced when plugins are loaded. Usually this means there is an error in one of the plugin setup or configuration files. The output was: '.htmlspecialchars($output); do_err($plugin_load_error); } + /** + * Print plugin versions + */ + echo $IND . "Plugin versions... \n"; + foreach ($plugins as $name) { + $plugin_version = get_plugin_version($name); + echo $IND . $IND . $name . ' ' . (empty($plugin_version) ? '??' : $plugin_version) . " \n"; + + // check if this plugin has any other plugin + // dependencies and if they are satisfied + // + $failed_dependencies = check_plugin_dependencies($name); + if ($failed_dependencies === SQ_INCOMPATIBLE) { + do_err($name . ' is NOT COMPATIBLE with this version of SquirrelMail', FALSE); + } + else if (is_array($failed_dependencies)) { + $missing_plugins = ''; + foreach ($failed_dependencies as $depend_name => $depend_requirements) { + $missing_plugins .= ', ' . $depend_name . ' (version ' . $depend_requirements['version'] . ', ' . ($depend_requirements['activate'] ? 'must be activated' : 'need not be activated') . ')'; + } + do_err($name . ' is missing some dependencies: ' . trim($missing_plugins, ', '), FALSE); + } + + } /** - * Hook is added in 1.5.2. Plugins should print error message and return true - * if there is an error in plugin. + * This hook was added in 1.5.2 and 1.4.10. Each plugins should print an error + * message and return TRUE if there are any errors in its setup/configuration. */ - $plugin_err = boolean_hook_function('configtest'); + $plugin_err = boolean_hook_function('configtest', $null, 1); if($plugin_err) { do_err('Some plugin tests failed.'); } else { @@ -815,4 +923,3 @@ if ($warnings) { EOF; echo $footer; } -?> |