<?php namespace ProcessWire;

/**

* ProcessWire Installer

*

* Because this installer runs before PW is installed, it is largely self contained.

* It's a quick-n-simple single purpose script that's designed to run once, and it should be deleted after installation.

* This file self-executes using code found at the bottom of the file, under the Installer class.

*

* Note that it creates this file once installation is completed: /site/assets/installed.php

* If that file exists, the installer will not run. So if you need to re-run this installer for any

* reason, then you'll want to delete that file. This was implemented just in case someone doesn't delete the installer.

*

* ProcessWire 3.x, Copyright 2026 by Ryan Cramer

* https://processwire.com

*

* @todo 3.0.190: provide option for command-line options to install

* @todo have installer set session name

*

*/

define("PROCESSWIRE_INSTALL", "3.x");

/**

* class Installer

*

* Self contained class to install ProcessWire 3.x

*

*/

class Installer {

/**

* Whether or not we force installed files to be copied.

*

* If false, we attempt a faster rename of directories instead.

*

*/

const FORCE_COPY = true;

/**

* Replace existing database tables if already present?

*

*/

const REPLACE_DB = true;

/**

* Minimum required PHP version to install ProcessWire

*

*/

const MIN_REQUIRED_PHP_VERSION = '7.1.0';

/**

* Test mode for installer development, non destructive

*

*/

const TEST_MODE = false;

/**

* Default profile name

*

*/

const DEFAULT_PROFILE = 'site-blank';

/**

* Session key containing the token that identifies the active installer

*

*/

const INSTALL_TOKEN_KEY = 'ProcessWireInstallToken';

/**

* File permissions, determined in the dbConfig function

*

* Below are worst case scenario, last resort defaults

*

*/

protected $chmodDir = "0777";

protected $chmodFile = "0666";

/**

* Token that identifies the active web installer

*

* @var string

*

*/

protected $installToken = '';

/**

* Number of errors that occurred during the request

*

*/

protected $numErrors = 0;

/**

* True when we are in a section

*

* @var bool

*

*/

protected $inSection = false;

/**

* Execution controller

*

*/

public function execute() {

if(self::TEST_MODE) {

error_reporting(E_ALL);

ini_set('display_errors', 1);

}

// these two vars used by install-head.inc

$title = "ProcessWire " . PROCESSWIRE_INSTALL . " Installer";

$formAction = "./install.php";

$step = $this->post('step');

$this->initInstallSession($step);

if($step !== null && is_file($this->installLockFile())) {

$this->checkInstallLock();

} else if($step === '5' && !self::TEST_MODE) {

die("Unable to continue: installer session is not valid.");

}

if($step === '5') require('./index.php');

require("./wire/modules/AdminTheme/AdminThemeUikit/install-head.inc");

echo "<input type='hidden' name='install_token' value='" .

htmlentities($this->installToken, ENT_QUOTES, "UTF-8") . "' />";

if($step === null) {

$this->welcome();

} else {

$step = (int) $step;

switch($step) {

case 0: $this->initProfile(); break;

case 1: $this->compatibilityCheck(); break;

case 2: $this->dbConfig(); break;

case 4: $this->dbSaveConfig(); break;

case 5:

/** @var ProcessWire $wire */

$wire->modules->refresh();

$this->adminAccountSave($wire);

break;

default:

$this->welcome();

}

}

require("./wire/modules/AdminTheme/AdminThemeUikit/install-foot.inc");

}

/**

* Initialize and validate the session used by the web installer

*

* @param mixed $step

*

*/

protected function initInstallSession($step) {

if(session_status() !== PHP_SESSION_ACTIVE) {

ini_set('session.use_strict_mode', '1');

session_name('ProcessWireInstaller');

if(!session_start()) die("Unable to start installer session.");

}

if(empty($_SESSION[self::INSTALL_TOKEN_KEY])) {

$_SESSION[self::INSTALL_TOKEN_KEY] = function_exists('random_bytes')

? bin2hex(random_bytes(32))

: sha1(mt_rand() . microtime(true) . __FILE__);

}

$this->installToken = $_SESSION[self::INSTALL_TOKEN_KEY];

if($step !== null) {

$postToken = $this->post('install_token');

$postToken = is_string($postToken) ? trim($postToken) : '';

if(!strlen($postToken) || !$this->hashEquals($this->installToken, $postToken)) {

die("Unable to continue: installer session is not valid.");

}

}

session_write_close();

}

/**

* Timing-safe string comparison

*

* The fallback applies only to PHP versions prior to 5.6, which ProcessWire does not

* support. It exists so that those versions can still reach the installer's PHP version

* warning rather than failing with an undefined function error.

*

* @param string $known

* @param string $user

* @return bool

*

*/

protected function hashEquals($known, $user) {

if(function_exists('hash_equals')) return hash_equals($known, $user);

return $known === $user;

}

/**

* Return the filename used to lock an installation to one browser session

*

* @return string

*

*/

protected function installLockFile() {

return __DIR__ . '/site/assets/install.lock';

}

/**

* Atomically claim this installation for the current browser session

*

*/

protected function createInstallLock() {

if(self::TEST_MODE) return;

$file = $this->installLockFile();

$hash = hash('sha256', $this->installToken);

$fp = @fopen($file, 'x');

if($fp === false) {

if(is_file($file)) {

$this->checkInstallLock();

return;

}

die("Unable to create /site/assets/install.lock. Verify that /site/assets/ exists and is writable.");

}

$result = fwrite($fp, $hash);

fclose($fp);

if($result !== strlen($hash)) {

@unlink($file);

die("Unable to create /site/assets/install.lock. Verify that /site/assets/ exists and is writable.");

}

}

/**

* Require the current browser session to own the installation lock

*

*/

protected function checkInstallLock() {

if(self::TEST_MODE) return;

$hash = @file_get_contents($this->installLockFile());

$expected = hash('sha256', $this->installToken);

if(!is_string($hash) || !$this->hashEquals($expected, trim($hash))) {

die(

"Installation is active in another browser session. If that session is no longer " .

"available, delete /site/assets/install.lock and restart the installer."

);

}

}

/**

* Welcome/Intro screen

*

*/

protected function welcome() {

$this->h("Welcome. This tool will guide you through the installation process.");

$this->p(

"Thanks for choosing ProcessWire! " .

"If you downloaded this copy of ProcessWire from somewhere other than " .

"<a target='_blank' href='https://processwire.com/'>processwire.com</a> or " .

"<a href='https://github.com/processwire/processwire' target='_blank'>our GitHub page</a>, " .

"please download a fresh copy before installing. " .

"If you need help or have questions during installation, please stop by our " .

"<a href='https://processwire.com/talk/' target='_blank'>support board</a> and we'll be glad to help."

);

$this->btn("Get Started", array('icon' => 'sign-in'));

}

/**

* Check if the given function $name exists and report OK or fail with $label

*

* @param string $name

* @param string $label

*

*/

protected function checkFunction($name, $label) {

if(function_exists($name)) {

$this->ok("$label");

} else {

$this->err("Fail: $label");

}

}

/**

* Find all profile directories (site-*) in the current dir and return info array for each

*

* @return array

*

*/

protected function findProfiles() {

$profiles = array(

//'site-blank' => null,

//'site-default' => null, // preferred starting order

//'site-beginner' => null,

//'site-languages' => null,

);

$dirTests = array(

'install',

'templates',

'assets',

);

$fileTests = array(

'config.php',

'templates/admin.php',

'install/install.sql',

);

foreach(new \DirectoryIterator(dirname(__FILE__)) as $dir) {

if($dir->isDot() || !$dir->isDir()) continue;

$name = $dir->getBasename();

$path = rtrim($dir->getPathname(), '/') . '/';

if(strpos($name, 'site-') !== 0 && $name !== 'site') continue;

$passed = true;

foreach($dirTests as $test) if(!is_dir($path . $test)) $passed = false;

foreach($fileTests as $test) if(!file_exists($path . $test)) $passed = false;

if(!$passed) continue;

$profile = array('name' => str_replace('site-', '', $name));

$infoFile = $path . 'install/info.php';

if(file_exists($infoFile)) {

/** @noinspection PhpIncludeInspection */

include($infoFile);

if(isset($info) && is_array($info)) {

$profile = array_merge($profile, $info);

}

}

$profiles[$name] = $profile;

}

// remove any preferred starting order profiles that weren't present

foreach($profiles as $name => $profile) {

if(is_null($profile)) unset($profiles[$name]);

}

return $profiles;

}

/**

* Select profile

*

*/

protected function selectProfile() {

$options = '';

$out = '';

$profiles = $this->findProfiles();

if(!count($profiles)) $this->err("No profiles found!");

foreach($profiles as $name => $profile) {

$title = empty($profile['title']) ? ucfirst($profile['name']) : $profile['title'];

$options .= "<option value='$name'>$title</option>";

$out .= "<div class='profile-preview' id='$name' style='display: none;'>";

if(!empty($profile['summary'])) $out .= "<p>$profile[summary]</p>";

else $out .= "<p class='detail'>No summary.</p>";

if(!empty($profile['screenshot'])) {

$file = $profile['screenshot'];

if(strpos($file, '/') === false) $file = "$name/install/$file";

$out .= "<p><img src='$file' alt='$name screenshot' style='max-width: 100%;' /></p>";

} else {

$out .= "<p class='detail'>No screenshot.</p>";

}

$out .= "</div>";

}

$path = rtrim(str_replace('install.php', '', $_SERVER['REQUEST_URI']), '/') . '/';

$url = htmlspecialchars($path, ENT_QUOTES, 'UTF-8') . 'site-name/';

$angleUpIcon = $this->icon('angle-up', false);

echo "

<p>

A site installation profile is a ready-to-use and modify site for ProcessWire.

</p>

<p>

If you want something other than the included “blank” profile, please

<a target='_blank' href='https://processwire.com/download/site-profiles/'>download another site profile</a>,

unzip and place its files in <code>$url</code> (replacing <code>name</code> with the profile name)

and click the “Refresh” button to make it available here.

</p>

<p style='width: 240px;'>

<select class='uk-select' name='profile' id='select-profile'>

<option value=''>Installation Profiles</option>

$options

</select>

</p>

<p class='detail'>

$angleUpIcon

Select an installation profile to see more information.

</p>

$out

<script type='text/javascript'>

$('#select-profile').change(function() {

$('.profile-preview').hide();

$('#' + $(this).val()).fadeIn('fast');

}).change();

</script>

";

}

/**

* Step 1a: Determine profile

*

*/

protected function initProfile() {

$this->h('Site Installation Profile', 'building-o');

if(is_file("./site/install/install.sql")) {

$this->alertOk("Found installation profile in /site/install/");

} else if(is_dir("./site/")) {

$this->alertOk("Found /site/ — already installed? ");

} else if($this->post('profile') && $this->post('step') !== '000') {

$profiles = $this->findProfiles();

$profile = $this->post('profile', 'name');

if(empty($profile) || !isset($profiles[$profile]) || !is_dir(dirname(__FILE__) . "/$profile")) {

$this->alertErr("Profile not found");

$this->selectProfile();

$this->btnContinue();

return;

}

if(@rename("./$profile", "./site")) {

$this->alertOk("Renamed /$profile => /site");

} else {

$this->alertErr("File system is not writable by this installer. Before continuing, please rename '/$profile' to '/site'");

$this->btnContinue();

return;

}

} else {

if($this->post('step') === '000') $this->alertOk('Refreshed profiles');

$this->selectProfile();

$this->btn('Refresh', array('value' => '000', 'icon' => 'refresh', 'secondary' => true, 'float' => true));

$this->btnContinue();

return;

}

$this->compatibilityCheck();

}

/**

* Step 1b: Check for ProcessWire compatibility

*

*/

protected function compatibilityCheck() {

$this->sectionStart('fa-gears Compatibility Check');

if(version_compare(PHP_VERSION, self::MIN_REQUIRED_PHP_VERSION) >= 0) {

$this->ok("PHP version " . PHP_VERSION);

} else {

$this->err("ProcessWire requires PHP version " . self::MIN_REQUIRED_PHP_VERSION . " or newer. You are running PHP " . PHP_VERSION);

}

if(extension_loaded('pdo_mysql')) {

$this->ok("PDO (mysql) database");

} else {

$this->err("PDO (pdo_mysql) is required (for MySQL database)");

}

if(self::TEST_MODE) {

$this->err("Example error message for test mode");

$this->warn("Example warning message for test mode");

}

$this->checkFunction("filter_var", "Filter functions (filter_var)");

$this->checkFunction("mysqli_connect", "MySQLi (not used by core, but may still be used by some older 3rd party modules)");

$this->checkFunction("imagecreatetruecolor", "GD 2.0 or newer");

$this->checkFunction("json_encode", "JSON support");

$this->checkFunction("preg_match", "PCRE support");

$this->checkFunction("ctype_digit", "CTYPE support");

$this->checkFunction("iconv", "ICONV support");

$this->checkFunction("session_save_path", "SESSION support");

$this->checkFunction("hash", "HASH support");

$this->checkFunction("spl_autoload_register", "SPL support");

if(function_exists('apache_get_modules')) {

if(in_array('mod_rewrite', apache_get_modules())) $this->ok("Found Apache module: mod_rewrite");

else $this->err("Apache 'mod_rewrite' module does not appear to be installed and is required by ProcessWire.");

} else {

// apache_get_modules doesn't work on a cgi installation.

// check for environment var set in htaccess file, as submitted by jmarjie.

$mod_rewrite = getenv('HTTP_MOD_REWRITE') == 'On' || getenv('REDIRECT_HTTP_MOD_REWRITE') == 'On' ? true : false;

if($mod_rewrite) {

$this->ok("Found Apache module (cgi): mod_rewrite");

} else {

$this->err(

"Unable to determine if Apache mod_rewrite (required by ProcessWire) is installed. " .

"On some servers, we may not be able to detect it until your .htaccess file is place. " .

"Please click the 'check again' button at the bottom of this screen, if you haven't already."

);

}

}

if(class_exists('\ZipArchive')) {

$this->ok("ZipArchive support");

} else {

$this->warn("ZipArchive support was not found. This is recommended, but not required to complete installation.");

}

$memoryLimit = $this->getMemoryLimit('M');

$memoryLimitLabel = "PHP memory_limit is set to $memoryLimit MB";

if($memoryLimit < 64) {

$this->err("$memoryLimitLabel - At least 64 MB is strongly recommended but 128 MB or more is best");

} else if($memoryLimit < 128) {

$this->warn("$memoryLimitLabel - OK to continue, but at least 128 MB is recommended");

} else {

$this->ok("$memoryLimitLabel");

}

$dirs = array(

// directory => required?

'./site/assets/' => true,

'./site/modules/' => false,

);

foreach($dirs as $dir => $required) {

$d = ltrim($dir, '.');

if(!file_exists($dir)) {

$this->err("Directory $d does not exist! Please create this and make it writable before continuing.");

} else if(is_writable($dir)) {

$this->ok("$d is writable");

} else if($required) {

$this->err("Directory $d must be writable. Please adjust the server permissions before continuing.");

} else {

$this->warn("Consider making directory $d writable, at least during development.");

}

}

if(file_exists("./site/config.php")) {

if(is_writable("./site/config.php")) {

$this->ok("/site/config.php is writable");

} else {

$this->err("/site/config.php must be writable during installation. Please adjust the server permissions before continuing.");

}

} else {

$this->err("Site profile is missing a /site/config.php file.");

}

if(!is_file("./.htaccess") || !is_readable("./.htaccess")) {

if(@rename("./htaccess.txt", "./.htaccess")) {

$this->ok("Installed .htaccess");

} else {

$this->err("/.htaccess doesn't exist. Before continuing, you should rename the included htaccess.txt file to be .htaccess (with the period in front of it, and no '.txt' at the end).");

}

} else if(!strpos(file_get_contents("./.htaccess"), "PROCESSWIRE")) {

$this->err("/.htaccess file exists, but is not for ProcessWire. Please overwrite or combine it with the provided /htaccess.txt file (i.e. rename /htaccess.txt to /.htaccess, with the period in front).");

} else {

$this->ok(".htaccess looks good");

}

$this->sectionStop();

if($this->numErrors) {

$this->p("One or more errors were found above. We recommend you correct these issues before proceeding or <a href='https://processwire.com/talk/'>contact ProcessWire support</a> if you have questions or think the error is incorrect. But if you want to proceed anyway, click Continue below.");

$this->btn("Check Again", array('value' => 1, 'icon' => 'refresh', 'float' => true));

$this->btn("Continue to Next Step", array('value' => 2, 'icon' => 'angle-right', 'secondary' => true));

} else {

$this->btn("Continue to Next Step", array('value' => 2, 'icon' => 'angle-right'));

}

}

/**

* Step 2: Configure the database and file permission settings

*

* @param array $values

* @param int $hasNumTables

*

*/

protected function dbConfig($values = array(), $hasNumTables = 0) {

if(!is_file("./site/install/install.sql")) die(

"There is no installation profile in /site/. Please place one there before continuing. " .

"You can get it at https://processwire.com/download/"

);

if($hasNumTables) {

$this->sectionStart('fa-database Existing tables action');

// select($name, $label, $value, array $options) {

$this->p("What would you like to do with the existing database tables that are present?");

$this->select('dbTablesAction', '', 0, array(

'0' => "Click to select tables action",

'ignore' => "Ignore tables*",

'remove' => "Remove tables",

), 0);

$this->p("*When choosing “Ignore tables”, existing tables having the same name as newly imported tables will still be deleted.", 'detail');

$this->sectionStop();

}

$this->sectionStart('fa-database MySQL Database');

$this->p(

"Please specify a MySQL 5.x+ database and user account on your server. If the database does not exist, " .

"we will attempt to create it. If the database already exists, the user account should have full read, " .

"write and delete permissions on the database (recommended permissions are select, insert, update, delete, " .

"create, alter, index, drop, create temporary tables, and lock tables)."

);

if(!isset($values['dbName'])) $values['dbName'] = '';

// @todo: are there PDO equivalents for the ini_get()s below?

if(!isset($values['dbHost'])) $values['dbHost'] = ini_get("mysqli.default_host");

if(!isset($values['dbPort'])) $values['dbPort'] = ini_get("mysqli.default_port");

if(!isset($values['dbUser'])) $values['dbUser'] = ini_get("mysqli.default_user");

if(!isset($values['dbPass'])) $values['dbPass'] = ini_get("mysqli.default_pw");

if(!isset($values['dbEngine'])) $values['dbEngine'] = 'InnoDB';

if(!isset($values['dbSocket'])) $values['dbSocket'] = ini_get("mysqli.default_socket");

if(!isset($values['dbCon'])) $values['dbCon'] = 'Hostname';

if(!$values['dbHost']) $values['dbHost'] = 'localhost';

if(!$values['dbPort']) $values['dbPort'] = 3306;

if(empty($values['dbCharset'])) $values['dbCharset'] = 'utf8mb4';

if($values['dbCharset'] != 'utf8mb4') $values['dbCharset'] = 'utf8';

if($values['dbEngine'] != 'InnoDB') $values['dbEngine'] = 'MyISAM';

foreach($values as $key => $value) {

if(strpos($key, 'chmod') === 0) {

$values[$key] = (int) $value;

} else if($key != 'httpHosts') {

$values[$key] = htmlspecialchars($value, ENT_QUOTES, 'UTF-8');

}

}

$this->input('dbName', 'DB Name', $values['dbName']);

$this->input('dbUser', 'DB User', $values['dbUser']);

$this->input('dbPass', 'DB Pass', $values['dbPass'], array('type' => 'password', 'required' => false));

$this->select('dbCon', 'Connection', $values['dbCon'], array('Hostname', 'Socket'));

$this->clear();

$this->input('dbHost', 'DB Host', $values['dbHost']);

$this->input('dbPort', 'DB Port', $values['dbPort']);

$this->input('dbSocket', 'DB Socket', $values['dbSocket'], array('width' => 300));

$this->select('dbCharset', 'DB Charset', $values['dbCharset'], array('utf8mb4', 'utf8'));

$this->select('dbEngine', 'DB Engine', $values['dbEngine'], array('InnoDB', 'MyISAM'));

$this->clear();

// automatic required states for host, port and socket

echo "

<script>

jQuery(document).ready(function($) {

let ho = $('input[name=dbHost]'), po = $('input[name=dbPort]'),

so = $('input[name=dbSocket]'), co = $('select[name=dbCon]');

co.on('change', function() {

if(co.val() === 'Hostname') {

ho.prop('required', true).closest('p').show();

po.prop('required', true).closest('p').show();

so.prop('required', false).closest('p').hide();

} else {

ho.prop('required', false).closest('p').hide();

po.prop('required', false).closest('p').hide();

so.prop('required', true).closest('p').show();

}

}).change();

});

</script>

";

$this->p(

"The DB Engine option “InnoDB” requires MySQL 5.6.4 or newer.",

array('class' => 'detail', 'style' => 'margin-top:0')

);

$this->sectionStop();

$cgi = false;

$defaults = array();

if(is_writable(__FILE__)) {

$defaults['chmodDir'] = "755";

$defaults['chmodFile'] = "644";

$cgi = true;

} else {

$defaults['chmodDir'] = "777";

$defaults['chmodFile'] = "666";

}

$timezone = isset($values['timezone']) ? $values['timezone'] : date_default_timezone_get();

$timezones = $this->timezones();

if(!$timezone || !in_array($timezone, $timezones)) {

$timezone = ini_get('date.timezone');

if(!$timezone || !in_array($timezone, $timezones)) $timezone = 'America/New_York';

}

$defaults['timezone'] = $timezone;

$defaults['httpHosts'] = strtolower(filter_var($_SERVER['HTTP_HOST'], FILTER_SANITIZE_URL));

if(strpos($defaults['httpHosts'], 'www.') === 0) {

$defaults['httpHosts'] .= "\n" . substr($defaults['httpHosts'], 4);

} else if(substr_count($defaults['httpHosts'], '.') == 1) {

$defaults['httpHosts'] .= "\n" . "www.$defaults[httpHosts]";

}

if($_SERVER['SERVER_NAME'] && $_SERVER['SERVER_NAME'] != $_SERVER['HTTP_HOST']) {

$defaults['httpHosts'] .= "\n" . $_SERVER['SERVER_NAME'];

}

if(isset($values['httpHosts']) && is_array($values['httpHosts'])) $values['httpHosts'] = implode("\n", $values['httpHosts']);

$values = array_merge($defaults, $values);

$this->sectionStart('fa-globe Time Zone');

$this->p('The time zone selection should be consistent with the time zone of the web server you are installing to.');

$this->selectTimezone($values['timezone']);

$this->sectionStop();

$this->sectionStart("fa-key File Permissions");

$this->p(

"When ProcessWire creates directories or files, it assigns permissions to them. " .

"Enter the most restrictive permissions possible that give ProcessWire (and you) read and write access to the web server (Apache). " .

"The safest setting to use varies from server to server. " .

"If you are not on a dedicated or private server, or are in any kind of shared environment, you may want to contact your web host to advise on what are the best permissions to use in your environment. " .

"<a target='_blank' href='https://processwire.com/docs/security/file-permissions/'>Read more about securing file permissions</a>"

);

$this->p("Permissions must be 3 digits each. Should you opt to use the defaults provided, you can also adjust these permissions later if desired by editing <u>/site/config.php</u>.", "detail");

$this->input('chmodDir', 'Directories', $values['chmodDir']);

$this->input('chmodFile', 'Files', $values['chmodFile'], array('clear' => true));

if($cgi) {

$this->p(

"We detected that this file (install.php) is writable. That means Apache may be running as your user account. Given that, we populated the permissions above (755 &amp; 644) as possible starting point.",

array('class' => 'detail', 'style' => 'margin-top:0')

);

} else {

$this->p(

"WARNING: 777 and 666 permissions mean that directories and files are readable and writable to everyone on the server (and thus not particularly safe). If in any kind of shared hosting environment, please consult your web host for their recommended permission settings for Apache readable/writable directories and files before proceeding. " .

"<a target='_blank' href='https://processwire.com/docs/security/file-permissions/'>More</a>",

array('class' => 'detail', 'style' => 'margin-top:0')

);

}

$this->sectionStop();

$this->sectionStart('fa-server HTTP Host Names');

$this->p(

"What host names will this installation run on now and in the future? Please enter one host per line. " .

"You can also modify this setting later by editing the <code>\$config->httpHosts</code> setting in the <u>/site/config.php</u> file."

);

$rows = substr_count($values['httpHosts'], "\n") + 2;

$this->textarea('httpHosts', '', $values['httpHosts'], $rows);

$this->sectionStop();

$this->sectionStart('fa-bug Debug mode?');

$this->p(

"When debug mode is enabled, errors and exceptions are visible in ProcessWire’s output. This is helpful when developing a website or testing ProcessWire. " .

"When debug mode is NOT enabled, fatal errors/exceptions halt the request with an ambiguous http 500 error, and non-fatal errors are not shown. " .

"Regardless of debug mode, fatal errors are always logged and always visible to superusers. " .

"Debug mode should not be enabled for live or production sites, but at this stage (installation) it is worthwhile to have it enabled. "

);

$noChecked = empty($values['debugMode']) ? "checked='checked'" : "";

$yesChecked = empty($noChecked) ? "checked='checked'" : "";

$this->p(

"<label>" .

"<input type='radio' class='uk-radio' name='debugMode' $yesChecked value='1'> <strong>ON:</strong> " .

"<span>Recommended while site is in development or while testing ProcessWire.</span>" .

"</label><br />" .

"<label>" .

"<input type='radio' class='uk-radio' name='debugMode' $noChecked value='0'> <strong>OFF:</strong> " .

"<span>Recommended once a site goes live or becomes publicly accessible.</span>" .

"</label> "

);

$this->p(

"You can also enable or disable debug mode at any time by editing the <u>/site/config.php</u> file and setting " .

"<code>\$config->debug = true;</code> or <code>\$config->debug = false;</code>"

);

$this->sectionStop();

$this->sectionStart('fa-smile-o Admin Appearance');

$themeName = isset($values['themeName']) ? $values['themeName'] : 'default';

$defaultChecked = $themeName === 'default' ? ' checked' : '';

$originalChecked = $themeName === 'original' ? ' checked' : '';

$this->p(

"<label>" .

"<input type='radio' class='uk-radio' name='themeName' $defaultChecked value='default'> <strong>Konkat Default:</strong> " .

"<span>Modern with light and dark modes, customizable main colors, made by Konkat Studio.</span>" .

"</label><br />" .

"<label>" .

"<input type='radio' class='uk-radio' name='themeName' $originalChecked value='original'> <strong>Core Original:</strong> " .

"<span>Classic ProcessWire with colors like this installer, widely used and very stable.</span>" .

"</label> "

);

$this->p(

"Not sure which to choose? Select either and you can always change it later. " .

"After installation, login to the admin and go to <code>Modules &gt; Configure &gt; AdminThemeUikit</code> " .

"and experiment with the different options there."

);

$this->sectionStop();

$this->btnContinue(array('value' => 4));

$this->p("Note: After you click the button above, be patient &hellip; it may take a minute.", "detail");

}

/**

* Step 3: Save database configuration, then begin profile import

*

*/

protected function dbSaveConfig() {

$values = array();

$database = null;

// file permissions

$fields = array('chmodDir', 'chmodFile');

foreach($fields as $field) {

$value = $this->post($field, 'int');

if(strlen("$value") !== 3) {

$this->alertErr("Value for '$field' is invalid");

} else {

$this->$field = "0$value";

}

$values[$field] = $value;

}

// timezone

$timezone = $this->post('timezone', 'int');

$timezones = $this->timezones();

if(isset($timezones[$timezone])) {

$value = $timezones[$timezone];

if(strpos($value, '|')) {

list($label, $value) = explode('|', $value);

if($label) {} // ignore

}

$values['timezone'] = $value;

} else {

$values['timezone'] = 'America/New_York';

}

// http hosts

$values['httpHosts'] = array();

$httpHosts = $this->post('httpHosts', 'textarea');

if(strlen($httpHosts)) {

$httpHosts = str_replace(array("'", '"'), '', $httpHosts);

$httpHosts = explode("\n", $httpHosts);

foreach($httpHosts as $key => $host) {

$host = strtolower(trim(filter_var($host, FILTER_SANITIZE_URL)));

$httpHosts[$key] = $host;

}

$values['httpHosts'] = $httpHosts;

}

// debug mode

$values['debugMode'] = $this->post('debugMode', 'int');

// db configuration

$fields = array('dbUser', 'dbName', 'dbPass', 'dbHost', 'dbPort', 'dbSocket', 'dbEngine', 'dbCharset', 'dbCon');

foreach($fields as $field) {

$value = $this->post($field, 'string');

$value = substr($value, 0, 255);

if($field != 'dbPass') $value = str_replace(array(';', '..', '=', '<', '>', '&', '"', "\t", "\n", "\r"), '', $value);

$values[$field] = trim($value);

}

$values['dbCharset'] = ($values['dbCharset'] === 'utf8mb4' ? 'utf8mb4' : 'utf8');

$values['dbEngine'] = ($values['dbEngine'] === 'InnoDB' ? 'InnoDB' : 'MyISAM');

if(empty($values['dbUser']) || empty($values['dbName'])) {

$this->alertErr("Missing database user and/or name");

} else if($values['dbCon'] === 'Socket' && empty($values['dbSocket'])) {

$this->alertErr("Missing database socket");

} else if($values['dbCon'] === 'Hostname' && (empty($values['dbHost']) || empty($values['dbPort']))) {

$this->alertErr("Missing database host and/or port");

} else {

error_reporting(0);

if($values['dbCon'] === 'Socket') {

$dsn = "mysql:unix_socket=$values[dbSocket];dbname=$values[dbName]";

} else {

$dsn = "mysql:dbname=$values[dbName];host=$values[dbHost];port=$values[dbPort]";

}

if(defined("\\Pdo\\Mysql::ATTR_INIT_COMMAND")) {

$initCommand = constant("\\PDO\\Mysql::ATTR_INIT_COMMAND");

} else {

$initCommand = constant("\\PDO::MYSQL_ATTR_INIT_COMMAND");

}

$driver_options = array(

$initCommand => "SET NAMES 'UTF8'",

\PDO::ATTR_ERRMODE => \PDO::ERRMODE_EXCEPTION

);

try {

$database = new \PDO($dsn, $values['dbUser'], $values['dbPass'], $driver_options);

} catch(\Exception $e) {

if($e->getCode() == 1049) {

// If schema does not exist, try to create it

$database = $this->dbCreateDatabase($dsn, $values, $driver_options);

} else {

$this->alertErr("Database connection information did not work.");

$this->alertErr(htmlentities($e->getMessage(), ENT_QUOTES, 'UTF-8'));

}

}

}

// Uikit admin theme name

$themeName = $this->post('themeName');

if($themeName !== 'default' && $themeName !== 'original') $themeName = 'default';

$values['themeName'] = $themeName;

if($this->numErrors || !$database) {

$this->dbConfig($values);

return;

}

$this->h("fa-database Test Database and Save Configuration");

$this->alertOk("Database connection successful to " . htmlspecialchars($values['dbName']));

// prevent another browser session from changing configuration or completing the installation

$this->createInstallLock();

$options = array(

'dbCharset' => strtolower($values['dbCharset']),

'dbEngine' => $values['dbEngine']

);

// check if MySQL is new enough to support InnoDB with fulltext indexes

if($options['dbEngine'] == 'InnoDB') {

$query = $database->query("SELECT VERSION()");

list($dbVersion) = $query->fetch(\PDO::FETCH_NUM);

if(version_compare($dbVersion, "5.6.4", "<")) {

$options['dbEngine'] = 'MyISAM';

$values['dbEngine'] = 'MyISAM';

$this->alertErr("Your MySQL version is $dbVersion and InnoDB requires 5.6.4 or newer. Engine changed to MyISAM.");

}

}

// check if database already has tables present

$query = $database->query("SHOW TABLES");

$tables = $query->fetchAll(\PDO::FETCH_COLUMN);

$numTables = count($tables);

$dbTablesAction = $this->post('dbTablesAction', 'string');

if($numTables && $dbTablesAction) {

if($dbTablesAction === 'remove') {

// remove

foreach($tables as $table) {

$database->exec("DROP TABLE `$table`");

}

$this->alertOk("Dropped $numTables existing table(s)");

$numTables = 0;

} else if($dbTablesAction === 'ignore') {

// ignore

$this->alertOk('Existing tables will be ignored');

} else {

$dbTablesAction = '';

}

}

if($numTables && empty($dbTablesAction)) {

$this->alertErr(

"<strong>Database already has $numTables table(s) present:</strong> " .

implode(', ', $tables) . ". " .

"<strong>Please select below what you would like to do with these tables.</strong>"

);

$this->dbConfig($values, $numTables);

} else if($this->dbSaveConfigFile($values)) {

$this->profileImport($database, $options);

} else {

$this->dbConfig($values);

}

}

/**

* Create database

*

* Note: only handles database names that stick to ascii _a-zA-Z0-9.

* For database names falling outside that set, they should be created

* ahead of time.

*

* Contains contributions from @plauclair PR #950

*

* @param string $dsn

* @param array $values

* @param array $driver_options

* @return \PDO|null

*

*/

protected function dbCreateDatabase($dsn, $values, $driver_options) {

$dbCharset = preg_replace('/[^a-z0-9]/', '', strtolower(substr($values['dbCharset'], 0, 64)));

$dbName = preg_replace('/[^_a-zA-Z0-9]/', '', substr($values['dbName'], 0, 64));

$dbNameTest = str_replace('_', '', $dbName);

if(ctype_alnum($dbNameTest) && $dbName === $values['dbName']

&& ctype_alnum($dbCharset) && $dbCharset === $values['dbCharset']) {