<?php
/**
 * class.Installer.php
 * @package workflow.engine.ProcessMaker
 *
 * ProcessMaker Open Source Edition
 * Copyright (C) 2004 - 2011 Colosa Inc.
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as
 * published by the Free Software Foundation, either version 3 of the
 * License, or (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public License
 * along with this program.  If not, see <http://www.gnu.org/licenses/>.
 *
 * For more information, contact Colosa Inc, 2566 Le Jeune Rd.,
 * Coral Gables, FL, 33134, USA, or email info@colosa.com.
 *
 */
//
// It works with the table CONFIGURATION in a WF dataBase
//
// Copyright (C) 2007 COLOSA
//
// License: LGPL, see LICENSE
////////////////////////////////////////////////////

/**
 * Processmaker Installer
 * @package workflow.engine.ProcessMaker
 * @author maborak
 * @copyright 2008 COLOSA
 */

class Installer
{
  public  $options = Array();
  public  $result  = Array();
  public  $error   = Array();
  public  $report  = Array();
  private $connection_database;
  
  /**
   * construct of insert
   *
   * @param  string    $pPRO_UID  
   * @return void
   */  
  function __construct()
  {
  }
  
  /**
   * create_site
   *
   * @param  array    $config
   * @param  boolean  $confirmed
   * @return void
   */  
  public function create_site($config = Array(), $confirmed = false)
  {
    $this->options=G::array_concat(Array(
      'isset'=>false,
      'password'  =>G::generate_password(12),
      'path_data' =>@PATH_DATA,
      'path_compiled' =>@PATH_C,
      'name'=>$config['name'],
      'database'=>Array(),
      'admin'=>Array('username'=>'admin','password'=>'admin'),
      'advanced'=>Array(
        'ao_db_wf'=>'wf_'.$config['name'],
        'ao_db_rb'=>'rb_'.$config['name'],
        'ao_db_rp'=>'rp_'.$config['name'],
        'ao_db_drop'=>false
      )
    ),$config);
    $a = @explode(SYSTEM_HASH,G::decrypt(HASH_INSTALLATION,SYSTEM_HASH));
    $this->options['database']=G::array_concat(Array(
      'username'=>@$a[1],
      'password'=>@$a[2],
      'hostname'=>@$a[0]
    ),$this->options['database']);
    return ($confirmed===true)?$this->make_site():$this->create_site_test();
  }
  
  /**
   * isset_site
   *
   * @param  string   $name  Default value "workflow"
   * @return string   file_exists(PATH_DATA."sites/".$name);
   */  
  public function isset_site($name = "workflow")
  {
    return file_exists(PATH_DATA."sites/".$name);
  }

  /**
   * create_site_test
   *
   * @return void 
   */  
  private function create_site_test()
  {
    $name = (preg_match('/^[\w]+$/i',trim($this->options['name'])))?true:false;
    $result=Array(
      'path_data' =>$this->is_dir_writable($this->options['path_data']),
      'path_compiled' =>$this->is_dir_writable($this->options['path_compiled']),
      'database'  =>$this->check_connection(),
      'access_level'=>$this->cc_status,
      'isset'=>($this->options['isset']==true)?$this->isset_site($this->options['name']):false,
      'microtime'=>microtime(),
      'workspace'=>$this->options['name'],
      'name'=>array(
        'status'=>$name,
        'message'=>($name)?'PASSED':'Workspace name invalid'
      ),
      'admin'=>array(
          'username'=>(preg_match('/^[\w@\.-]+$/i',trim($this->options['admin']['username'])))?true:false,
          'password'=>((trim($this->options['admin']['password'])=='')?false:true)
        )
    );
    $result['name']['message'] = ($result['isset'])?'Workspace already exist':$result['name']['message'];
    $result['name']['status']  = ($result['isset'])?false:$result['name']['status'];
    //print_r($result);
    return Array(
        'created'=>G::var_compare(
        true,
        $result['path_data'],
        $result['database']['connection'],
        $result['name']['status'],
        $result['database']['version'],
        $result['database']['ao']['ao_db_wf']['status'],
        $result['database']['ao']['ao_db_rb']['status'],
        $result['database']['ao']['ao_db_rp']['status'],
        $result['admin']['username'],
        (($result['isset'])?false:true),
        $result['admin']['password']),
        'result'=>$result
    );
  }
  
  /**
   * make_site
   *
   * @return array  $test
   */  
  private function make_site()
  {
    $test = $this->create_site_test();
    
    if($test["created"] == true || $this->options["advanced"]["ao_db_drop"] == true)
    {
      /* Check if the hostname is local (localhost or 127.0.0.1) */
      $islocal = (strcmp(substr($this->options['database']['hostname'], 0, strlen('localhost')),'localhost')===0) ||
	         (strcmp(substr($this->options['database']['hostname'], 0, strlen('127.0.0.1')),'127.0.0.1')===0);

      $this->wf_site_name = $wf = $this->options['advanced']['ao_db_wf'];

      $this->rbac_site_name   = $rb = $this->options['advanced']['ao_db_rb'];
      $this->report_site_name = $rp = $this->options['advanced']['ao_db_rp'];

      $schema = "schema.sql";
      $values = "insert.sql";
      
      if($this->options['advanced']['ao_db_drop']===true) {
        //Delete workspace directory if exists
        
        //Drop databases
        $this->run_query("DROP DATABASE IF EXISTS ".$wf, "Drop database $wf");
        $this->run_query("DROP DATABASE IF EXISTS ".$rb, "Drop database $rb");
        $this->run_query("DROP DATABASE IF EXISTS ".$rp, "Drop database $rp");
      }

      $this->run_query("CREATE DATABASE IF NOT EXISTS ".$wf." DEFAULT CHARACTER SET utf8 COLLATE utf8_general_ci",
        "Create database $wf");
      $this->run_query("CREATE DATABASE IF NOT EXISTS ".$rb." DEFAULT CHARACTER SET utf8 COLLATE utf8_general_ci",
        "Create database $rb");
      $this->run_query("CREATE DATABASE IF NOT EXISTS ".$rp." DEFAULT CHARACTER SET utf8 COLLATE utf8_general_ci",
        "Create database $rp");

      if($this->cc_status==1) {
        $host = ($islocal) ? "localhost" : "%";
        $this->run_query("GRANT ALL PRIVILEGES ON `$wf`.* TO $wf@'$host' IDENTIFIED BY '{$this->options['password']}' WITH GRANT OPTION",
          "Grant privileges for user $wf on database $wf");
        $this->run_query("GRANT ALL PRIVILEGES ON `$rb`.* TO $rb@'$host' IDENTIFIED BY '{$this->options['password']}' WITH GRANT OPTION",
          "Grant privileges for user $rb on database $rb");
        $this->run_query("GRANT ALL PRIVILEGES ON `$rp`.* TO $rp@'$host' IDENTIFIED BY '{$this->options['password']}' WITH GRANT OPTION",
          "Grant privileges for user $rp on database $rp");
      }

      /* Dump schema workflow && data  */

      $this->log("Import database schema:\n");
      $myPortA = explode(":",$this->options['database']['hostname']);
      if(count($myPortA)<2) {
        $myPortA[1]="3306";
      }
      $myPort = $myPortA[1];
      $this->options['database']['hostname'] = $myPortA[0];

      mysql_select_db($wf,$this->connection_database);
      $pws = PATH_WORKFLOW_MYSQL_DATA.$schema;
      $qws = $this->query_sql_file(PATH_WORKFLOW_MYSQL_DATA.$schema,$this->connection_database);
      $this->log($qws, isset($qws['errors']));
      $qwv = $this->query_sql_file(PATH_WORKFLOW_MYSQL_DATA.$values,$this->connection_database);
      $this->log($qwv, isset($qwv['errors']));


      /* Dump schema rbac && data  */
      $pws = PATH_RBAC_MYSQL_DATA.$schema;
      mysql_select_db($rb,$this->connection_database);
      $qrs = $this->query_sql_file(PATH_RBAC_MYSQL_DATA.$schema,$this->connection_database);
      $this->log($qrs, isset($qrs['errors']));
      $qrv = $this->query_sql_file(PATH_RBAC_MYSQL_DATA.$values,$this->connection_database);
      $this->log($qrv, isset($qrv['errors']));

      mysql_select_db($wf,$this->connection_database);
      
      require_once("propel/Propel.php");
      require_once('classes/model/AppCacheView.php');
      
      $appCache = new AppCacheView();
      $appCache->setPathToAppCacheFiles ( PATH_METHODS . 'setup/setupSchemas/' );
      $triggers = $appCache->getTriggers("en");
      $this->log("Create 'cases list cache' triggers");
      foreach ($triggers as $triggerName => $trigger) {
        $this->run_query($trigger, "-> Trigger $triggerName");
      }

      $path_site  = $this->options['path_data']."/sites/".$this->options['name']."/";
      $db_file    = $path_site."db.php";
      @mkdir($path_site,0777,true);
      @mkdir($path_site."files/",0777,true);
      @mkdir($path_site."mailTemplates/",0777,true);
      @mkdir($path_site."public/",0777,true);
      @mkdir($path_site."reports/",0777,true);
      @mkdir($path_site."xmlForms",0777,true);

      $db_text = "<?php\n" .
                 "// Processmaker configuration\n" .
                 "define ('DB_ADAPTER', 'mysql' );\n" .
                 "define ('DB_HOST', '" . $this->options['database']['hostname'] . ":".$myPort."' );\n" .
                 "define ('DB_NAME', '" . $wf. "' );\n" .
                 "define ('DB_USER', '" . (($this->cc_status==1)?$wf:$this->options['database']['username']). "' );\n" .
                 "define ('DB_PASS', '" . (($this->cc_status==1)?$this->options['password']:$this->options['database']['password']). "' );\n" .
                 "define ('DB_RBAC_HOST', '". $this->options['database']['hostname'] .":".$myPort."' );\n" .
                 "define ('DB_RBAC_NAME', '". $rb . "' );\n" .
                 "define ('DB_RBAC_USER', '".(($this->cc_status==1)?$rb:$this->options['database']['username']) . "' );\n" .
                 "define ('DB_RBAC_PASS', '". (($this->cc_status==1)?$this->options['password']:$this->options['database']['password']) . "' );\n" .
                 "define ('DB_REPORT_HOST', '". $this->options['database']['hostname'] .":".$myPort."' );\n" .
                 "define ('DB_REPORT_NAME', '". $rp . "' );\n" .
                 "define ('DB_REPORT_USER', '".(($this->cc_status==1)?$rp:$this->options['database']['username']) . "' );\n" .
                 "define ('DB_REPORT_PASS', '". (($this->cc_status==1)?$this->options['password']:$this->options['database']['password']) . "' );\n" .
                 "?>";
      $fp =  @fopen($db_file, "w");
      $this->log("Create: ".$db_file."  => ".((!$fp)?$fp:"OK")."\n", $fp === FALSE);
      $ff =  @fputs( $fp, $db_text, strlen($db_text));
      $this->log("Write: ".$db_file."  => ".((!$ff)?$ff:"OK")."\n", $ff === FALSE);

      fclose( $fp );
      $this->set_admin();
    }
    return $test;
  }
  
  /**
   * set_admin
   *
   * @return void
   */  
  public function set_admin()
  {
    mysql_select_db($this->wf_site_name,$this->connection_database);
    //  The mysql_escape_string function has been DEPRECATED as of PHP 5.3.0.
    //  $this->run_query('UPDATE USERS SET USR_USERNAME = \''.mysql_escape_string($this->options['admin']['username']).'\', `USR_PASSWORD` = \''.md5($this->options['admin']['password']).'\' WHERE `USR_UID` = \'00000000000000000000000000000001\' LIMIT 1',
    //    "Add 'admin' user in ProcessMaker (wf)");
    $this->run_query('UPDATE USERS SET USR_USERNAME = \'' . mysql_real_escape_string($this->options['admin']['username']) . '\', ' .
                     '  `USR_PASSWORD` = \'' . md5($this->options['admin']['password']) . '\' ' .
                     '  WHERE `USR_UID` = \'00000000000000000000000000000001\' LIMIT 1',
                     "Add 'admin' user in ProcessMaker (wf)");
    mysql_select_db($this->rbac_site_name,$this->connection_database);
    // The mysql_escape_string function has been DEPRECATED as of PHP 5.3.0.
    // $this->run_query('UPDATE USERS SET USR_USERNAME = \''.mysql_escape_string($this->options['admin']['username']).'\', `USR_PASSWORD` = \''.md5($this->options['admin']['password']).'\' WHERE `USR_UID` = \'00000000000000000000000000000001\' LIMIT 1',
    //   "Add 'admin' user in ProcessMaker (rb)");
    $this->run_query('UPDATE USERS SET USR_USERNAME = \'' . mysql_real_escape_string($this->options['admin']['username']) . '\', ' .
                     '  `USR_PASSWORD` = \'' . md5($this->options['admin']['password']) . '\' ' .
                     '  WHERE `USR_UID` = \'00000000000000000000000000000001\' LIMIT 1',
                     "Add 'admin' user in ProcessMaker (rb)");
  }

  /**
   * Run a mysql query on the current database and take care of logging and
   * error handling.
   *
   * @param string $query SQL command
   * @param string $description Description to log instead of $query
   */
  private function run_query($query, $description = NULL) {
    $result = @mysql_query($query, $this->connection_database);
    $error = ($result) ? false : mysql_error();
    $this->log(($description ? $description : $query) . " => " . (($error) ? $error : "OK") . "\n",
      $error);
  }

  /**
   * query_sql_file
   *
   * @param   string  $file
   * @param   string  $connection
   * @return  array   $report
   */
  public function query_sql_file($file, $connection)
  {
    $lines = file($file);
    $previous = NULL;
    $errors = '';
    @mysql_query("SET NAMES 'utf8';");
    foreach ($lines as $j => $line) {
      $line = trim($line); // Remove comments from the script
      
      if (strpos($line, "--") === 0) {
        $line = substr($line, 0, strpos($line, "--"));
      }

      if (empty($line)) {
        continue;
      }

      if (strpos($line, "#") === 0) {
        $line = substr($line, 0, strpos($line, "#"));
      }

      if (empty($line)) {
        continue;
      }

      // Concatenate the previous line, if any, with the current
      if ($previous) {
        $line = $previous . " " . $line;
      }
      $previous = NULL;
      
      // If the current line doesnt end with ; then put this line together
      // with the next one, thus supporting multi-line statements.
      if (strrpos($line, ";") != strlen($line) - 1) {
        $previous = $line;
        continue;
      }
      
      $line = substr($line, 0, strrpos($line, ";"));
      @mysql_query($line, $connection);
    } 
  }

  /**
   * check_path
   *
   * @return  void
   * @todo  Empty function
   */  
  private function check_path()
  {

  }

  /**
   * function find_root_path
   *
   * @param   string  $path
   * @return  string  $path
   */  
  private function find_root_path($path)
  {
    $i = 0; //prevent loop inifinity
    while(!is_dir($path) && ($path = dirname($path)) && ((strlen($path)>1) && $i<10)) {
      $i++;
    }
    return $path;
  }
  
  /**
   * file_permisions
   *
   * @param   string  $file
   * @param   integer $def default value 777
   * @return  integer $def
   */  
  public function file_permisions($file, $def = 777)
  {
    if ( PHP_OS == 'WINNT' )
      return $def;
    else
      return (int)substr(sprintf('%o',@fileperms($file)),-4);
  }

  /**
   * is_dir_writable
   *
   * @param   string  $dir  default value empty
   * @return  string  $path
   */  
  public function is_dir_writable($dir = '')
  {
    if (PHP_OS=='WINNT') {
        $dir = $this->find_root_path($dir);
        return file_exists ( $dir );
    }
    else {
      $dir = $this->find_root_path($dir);
        return (is_writable($dir) && is_readable($dir));
    }
  }

  /**
   * getDirectoryFiles
   *
   * @param   string  $dir  default value empty
   * @return  string  $path
   */  
  public function getDirectoryFiles($dir,$extension){
    $filesArray=array();
    if (file_exists($dir)) {
      if ($handle = opendir($dir)) {
          while (false !== ($file = readdir($handle))) {
              $fileParts=explode(".",$file);
              if($fileParts[count($fileParts)-1]==$extension) {
                $filesArray[]=$file;
              }
          }
          closedir($handle);
      }
    }
    return $filesArray;
  }

  /**
   * check_db_empty
   *
   * @param   string   $dbName  
   * @return  boolean  true or false
   */  
  public function check_db_empty($dbName)
  {
    $a = @mysql_select_db($dbName,$this->connection_database);
    if(!$a) {
      return true;
    }
    $q = @mysql_query('SHOW TABLES',$this->connection_database);
    return (@mysql_num_rows($q)>0)?false:true;
  }
  
  /**
   * check_db
   *
   * @param   string  $dbName  
   * @return  Array   Array('status' => true or false,'message' => string)
   */  
  public function check_db($dbName)
  {
    if(!$this->connection_database) {
      //erik: new verification if the mysql extension is enabled
      $error = class_exists('mysql_error') ? mysql_error() : 'Mysql Module for PHP is not enabled!';
      return Array('status' => false, 'message' => $error);
    }
    else  {
      if(!mysql_select_db($dbName,$this->connection_database) && $this->cc_status!=1) {
        return Array('status' => false, 'message' => mysql_error());
      }
      else {
/*        var_dump($this->options['advanced']['ao_db_drop'],$this->cc_status,$this->check_db_empty($dbName));
        if(($this->options['advanced']['ao_db_drop']===false && $this->cc_status!=1 && !$this->check_db_empty($dbName)) )
        {
          return Array('status'=>false,'message'=>'Database is not empty');
        }
        else
        {
          return Array('status'=>true,'message'=>'OK');
        }*/
        if($this->options['advanced']['ao_db_drop']===true || $this->check_db_empty($dbName)) {
          return Array('status' => true,  'message' => 'PASSED');
        }
        else {
          return Array('status' => false, 'message' => 'Database is not empty');
        }
      }
    }
  }
  
  /**
   * check_connection
   *
   * @return  Array   $rt
   */  
  private function check_connection()
  {
    if(!function_exists("mysql_connect")) {
      $this->cc_status = 0;
      $rt = Array(
        'connection' => false,
        'grant'      => 0,
        'version'    => false,
        'message'    => "ERROR: Mysql Module for PHP is not enabled, try install <b>php-mysql</b> package.",
        'ao'=>Array(
          'ao_db_wf' => false,
          'ao_db_rb' => false,
          'ao_db_rp' => false 
        )
      );
    }
    else {
      $this->connection_database = @mysql_connect($this->options['database']['hostname'],$this->options['database']['username'],$this->options['database']['password']);
      $rt = Array(
          'version' => false,
          'ao'=>Array(
              'ao_db_wf' => false,
              'ao_db_rb' => false,
              'ao_db_rp' => false
            )
        );
      if(!$this->connection_database) {
        $this->cc_status  = 0;
        $rt['connection'] = false;
        $rt['grant']      = 0;
        $rt['message']    = "Mysql error: ".mysql_error();
      }
      else {
        preg_match('@[0-9]+\.[0-9]+\.[0-9]+@',mysql_get_server_info($this->connection_database),$version);
        $rt['version']    = version_compare(@$version[0],"4.1.0",">=");
        $rt['connection'] = true;

        $dbNameTest = "PROCESSMAKERTESTDC";
        $db = @mysql_query("CREATE DATABASE ".$dbNameTest,$this->connection_database);
        if(!$db) {
          $this->cc_status = 3;
          $rt['grant']     = 3;
          //$rt['message'] = "Db GRANTS error:  ".mysql_error();
          $rt['message']   = "Successful connection";
        }
        else {

          //@mysql_drop_db("processmaker_testGA");
          $usrTest = "wfrbtest";
          $chkG    = "GRANT ALL PRIVILEGES ON `".$dbNameTest."`.* TO ".$usrTest."@'%' IDENTIFIED BY 'sample' WITH GRANT OPTION";
          $ch      = @mysql_query($chkG,$this->connection_database);
          if(!$ch) {
            $this->cc_status = 2;
            $rt['grant']     = 2;
            //$rt['message'] = "USER PRIVILEGES ERROR";
            $rt['message']   = "Successful connection";
          }
          else {
            $this->cc_status = 1;
            @mysql_query("DROP USER ".$usrTest."@'%'",$this->connection_database);
            $rt['grant']   = 1;
            $rt['message'] = "Successful connection";
          }
          @mysql_query("DROP DATABASE ".$dbNameTest,$this->connection_database);

        }
//        var_dump($wf,$rb,$rp);
      }
    }
    $rt['ao']['ao_db_wf'] = $this->check_db($this->options['advanced']['ao_db_wf']);
    $rt['ao']['ao_db_rb'] = $this->check_db($this->options['advanced']['ao_db_rb']);
    $rt['ao']['ao_db_rp'] = $this->check_db($this->options['advanced']['ao_db_rp']);
    return $rt;
  }
  
  /**
   * log
   *
   * @param   string $text
   * @return  void
   */  
  public function log($text, $failed = NULL)
  {
    array_push($this->report,$text);
    if ($failed)
      throw new Exception(is_string($text) ? $text : var_export($text, true));
  }
}
?>