' .
date ('d F Y H:i:s', filemtime(SM_PATH . 'config/config.php')) .
"
\n
\n\n\n";
/* check $config_version */
-if ($config_version!='1.4.0') {
+if ($config_version!='1.5.0') {
do_err('Configuration file version does not match required version. Please update your configuration file.');
}
+
+/* checking PHP specs */
+
echo "Checking PHP configuration... \n";
if(!check_php_version(4,1,0)) {
@@ -116,11 +192,54 @@ if(!check_php_version(4,1,0)) {
}
echo $IND . 'PHP version ' . PHP_VERSION . ' OK. (You have: ' . phpversion() . ". Minimum: 4.1.0) \n";
-/* test for boolean false and any string that is not equal to 'off' */
+
+/* register_globals check: test for boolean false and any string that is not equal to 'off' */
+
if ((bool) ini_get('register_globals') &&
strtolower(ini_get('register_globals'))!='off') {
- do_err('You have register_globals turned on. This is not an error, but it CAN be a security hazard. Consider turning register_globals off.', false);
+ do_err('You have register_globals turned on. This is not an error, but it CAN be a security hazard. Consider turning register_globals off.', false);
}
+
+
+/* variables_order check */
+
+// FIXME(?): Hmm, how do we distinguish between when an ini setting is
+// not available (ini_set() returns empty string) and when
+// the administrator set the value to an empty string? The
+// latter is sure to be highly rare, so for now, just assume
+// that empty value means the setting isn't even available
+// (could also check PHP version when this setting was implemented)
+$variables_order = ini_get('variables_order');
+if (!empty($variables_order) && (strpos($variables_order, 'G') === FALSE
+ || strpos($variables_order, 'P') === FALSE
+ || strpos($variables_order, 'C') === FALSE
+ || strpos($variables_order, 'S') === FALSE)) {
+ do_err('Your variables_order setting is insufficient for SquirrelMail to function. It needs at least "GPCS", but you have it set to "' . $variables_order . '"', true);
+} else {
+ echo $IND . "variables_order OK: $variables_order. \n";
+}
+
+
+/* gpc_order check */
+
+// FIXME(?): Hmm, how do we distinguish between when an ini setting is
+// not available (ini_set() returns empty string) and when
+// the administrator set the value to an empty string? The
+// latter is sure to be highly rare, so for now, just assume
+// that empty value means the setting isn't even available
+// (could also check PHP version when this setting was implemented)
+$gpc_order = ini_get('gpc_order');
+if (!empty($gpc_order) && (strpos($gpc_order, 'G') === FALSE
+ || strpos($gpc_order, 'P') === FALSE
+ || strpos($gpc_order, 'C') === FALSE)) {
+ do_err('Your gpc_order setting is insufficient for SquirrelMail to function. It needs to be set to "GPC", but you have it set to "' . $gpc_order . '"', true);
+} else {
+ echo $IND . "gpc_order OK: $gpc_order. \n";
+}
+
+
+/* check PHP extensions */
+
$php_exts = array('session','pcre');
$diff = array_diff($php_exts, get_loaded_extensions());
if(count($diff)) {
@@ -145,6 +264,21 @@ if (function_exists('mb_internal_encoding') &&
do_err($mb_error);
}
+/**
+ * Do not use SquirrelMail with magic_quotes_* on.
+ */
+if ( get_magic_quotes_runtime() || get_magic_quotes_gpc() ||
+ ( (bool) ini_get('magic_quotes_sybase') && ini_get('magic_quotes_sybase') != 'off' )
+ ) {
+ $magic_quotes_warning='You have enabled any one of magic_quotes_runtime, '
+ .'magic_quotes_gpc or magic_quotes_sybase in your PHP '
+ .'configuration. We recommend all those settings to be off. SquirrelMail '
+ .'may work with them on, but when experiencing stray backslashes in your mail '
+ .'or other strange behaviour, it may be advisable to turn them off.';
+ do_err($magic_quotes_warning,false);
+}
+
+
/* checking paths */
echo "Checking paths... \n";
@@ -203,7 +337,12 @@ if($data_dir == $attachment_dir) {
}
+echo "Checking plugins... \n";
+
/* check plugins and themes */
+//FIXME: check requirements given in plugin _info() function, such
+// as required PHP extensions, Pear packages, other plugins, SM version, etc
+// see development docs for list of returned info from that function
$bad_plugins = array(
'attachment_common', // Integrated into SquirrelMail 1.2 core
'auto_prune_sent', // Obsolete: See Proon Automatic Folder Pruning plugin
@@ -256,15 +395,35 @@ if (isset($plugins[0])) {
ob_end_clean();
// if plugins output more than newlines and spacing, stop script execution.
if (!empty($output)) {
- $plugin_load_error = 'Some output is produced when plugins are loaded.'
- .' Usually it means error. Output said: '.htmlspecialchars($output);
+ $plugin_load_error = 'Some output is produced when plugins are loaded. Usually this means there is an error in one of the plugin setup or configuration files. The output was: '.htmlspecialchars($output);
do_err($plugin_load_error);
}
+ /**
+ * Print plugin versions
+ */
+ echo $IND . "Plugin versions... \n";
+ foreach ($plugins as $name) {
+ $plugin_version = get_plugin_version($name);
+ echo $IND . $IND . $name . ' ' . (empty($plugin_version) ? '??' : $plugin_version) . " \n";
+
+ // check if this plugin has any other plugin
+ // dependencies and if they are satisfied
+ //
+ $failed_dependencies = check_plugin_dependencies($name);
+ if (is_array($failed_dependencies)) {
+ $missing_plugins = '';
+ foreach ($failed_dependencies as $depend_name => $depend_requirements) {
+ $missing_plugins .= ', ' . $depend_name . ' (version ' . $depend_requirements['version'] . ', ' . ($depend_requirements['activate'] ? 'must be activated' : 'need not be activated') . ')';
+ }
+ do_err($name . ' is missing some dependencies: ' . trim($missing_plugins, ', '), FALSE);
+ }
+
+ }
/**
- * Hook is added in 1.5.2. Plugins should print error message and return true
- * if there is an error in plugin.
+ * This hook was added in 1.5.2 and 1.4.10. Each plugins should print an error
+ * message and return TRUE if there are any errors in its setup/configuration.
*/
- $plugin_err = boolean_hook_function('configtest');
+ $plugin_err = boolean_hook_function('configtest', $null, 1);
if($plugin_err) {
do_err('Some plugin tests failed.');
} else {