<?php
if(!defined("MCR")){ exit("Hacking Attempt!"); }
class module{
private $core, $db, $cfg, $lng, $lng_m, $user;
public function __construct($core){
$this->core = $core;
$this->db = $core->db;
$this->user = $core->user;
$this->cfg = $core->cfg;
$this->lng = $core->lng;
$this->lng_m = $core->lng_m;
$this->core->title = $this->lng_m['mod_name'].' — '.$this->lng_m['step_3'];
$bc = array(
$this->lng_m['mod_name'] => BASE_URL."install/",
$this->lng_m['step_3'] => BASE_URL."install/?mode=step_3"
);
$this->core->bc = $this->core->gen_bc($bc);
}
public function content(){
if(!isset($_SESSION['step_2'])){ $this->core->notify('', '', 4, 'install/?mode=step_2'); }
if(isset($_SESSION['step_3'])){ $this->core->notify('', '', 4, 'install/?mode=settings'); }
if(!isset($_SESSION['f_login'])){
$_SESSION['f_login'] = 'admin';
$_SESSION['f_email'] = '';
$_SESSION['f_pass'] = '';
$_SESSION['f_repass'] = '';
}
$time = time();
if($_SERVER['REQUEST_METHOD']=='POST'){
$method = (intval(@$_POST['method'])<0 || intval(@$_POST['method'])>15) ? 0 : intval(@$_POST['method']);
$_SESSION['f_login'] = $this->db->HSC(@$_POST['login']);
$_SESSION['f_email'] = $this->db->HSC(@$_POST['email']);
$_SESSION['f_pass'] = $this->db->HSC(@$_POST['password']);
$_SESSION['f_repass'] = $this->db->HSC(@$_POST['repassword']);
if(!preg_match("/^[\w\-]{3,}$/i", @$_POST['login'])){
$this->core->notify($this->lng['e_msg'], $this->lng_m['e_login_format'], 2, 'install/?mode=step_3');
}
if(mb_strlen(@$_POST['password'], "UTF-8")<6){
$this->core->notify($this->lng['e_msg'], $this->lng_m['e_pass_len'], 2, 'install/?mode=step_3');
}
if(@$_POST['password'] !== @$_POST['repassword']){
$this->core->notify($this->lng['e_msg'], $this->lng_m['e_pass_match'], 2, 'install/?mode=step_3');
}
if(!filter_var(@$_POST['email'], FILTER_VALIDATE_EMAIL)){
$this->core->notify($this->lng['e_msg'], $this->lng_m['e_email_format'], 2, 'install/?mode=step_3');
}
$login = $this->db->safesql(@$_POST['login']);
$email = $this->db->safesql(@$_POST['email']);
$salt = $this->db->safesql($this->core->random());
$password = $this->core->gen_password(@$_POST['password'], $salt, $method);
$password = $this->db->safesql($password);
$uuid = $this->db->safesql($this->user->logintouuid(@$_POST['login']));
$ip = $this->user->ip;
$tables = file(MCR_ROOT.'install/tables.sql');
$ctables = $this->cfg->db['tables'];
$ug_f = $ctables['ugroups']['fields'];
$ic_f = $ctables['iconomy']['fields'];
$logs_f = $ctables['logs']['fields'];
$us_f = $ctables['users']['fields'];
$string = "";
$search = array(
'~ug~',
'~ug_id~', '~ug_title~', '~ug_text~', '~ug_color~', '~ug_perm~',
'~ic~',
'~ic_id~', '~ic_login~', '~ic_money~', '~ic_rc~', '~ic_bank~',
'~logs~',
'~logs_id~', '~logs_uid~', '~logs_msg~', '~logs_date~',
'~us~',
'~us_id~', '~us_gid~', '~us_login~', '~us_email~', '~us_pass~', '~us_uuid~', '~us_salt~', '~us_tmp~', '~us_is_skin~', '~us_is_cloak~', '~us_ip_create~', '~us_ip_last~', '~us_color~', '~us_date_reg~', '~us_date_last~', '~us_fname~', '~us_lname~', '~us_gender~', '~us_bday~', '~us_ban_server~',
'~base_url~',
);
$replace = array(
$this->cfg->tabname('ugroups'),
$ug_f['id'], $ug_f['title'], $ug_f['text'], $ug_f['color'], $ug_f['perm'],
$this->cfg->tabname('iconomy'),
$ic_f['id'], $ic_f['login'], $ic_f['money'], $ic_f['rm'], $ic_f['bank'],
$this->cfg->tabname('logs'),
$logs_f['id'], $logs_f['uid'], $logs_f['msg'], $logs_f['date'],
$this->cfg->tabname('users'),
$us_f['id'], $us_f['group'], $us_f['login'], $us_f['email'], $us_f['pass'], $us_f['uuid'], $us_f['salt'], $us_f['tmp'], $us_f['is_skin'], $us_f['is_cloak'], $us_f['ip_create'], $us_f['ip_last'], $us_f['color'], $us_f['date_reg'], $us_f['date_last'], $us_f['fname'], $us_f['lname'], $us_f['gender'], $us_f['bday'], $us_f['ban_server'],
BASE_URL,
);
foreach($tables as $key => $value){
$value = trim($value);
if($value=='#line'){
$string = trim($string);
@$this->db->obj->query($string);
$string = "";
continue;
}
$value = str_replace($search, $replace, $value);
$string .= $value;
}
$sql1 = $this->db->query("INSERT INTO `{$this->cfg->tabname('users')}`
(`{$us_f['group']}`, `{$us_f['login']}`, `{$us_f['email']}`, `{$us_f['pass']}`, `{$us_f['uuid']}`, `{$us_f['salt']}`, `{$us_f['ip_create']}`, `{$us_f['ip_last']}`, `{$us_f['date_reg']}`, `{$us_f['date_last']}`, `{$us_f['fname']}`, `{$us_f['lname']}`)
VALUES
('3', '$login', '$email', '$password', '$uuid', '$salt', '$ip', '$ip', '$time', '$time', '', '')");
if(!$sql1){ $this->core->notify($this->lng['e_msg'], $this->lng_m['e_add_admin'], 2, 'install/?mode=step_3'); }
$url = substr($_SERVER['PHP_SELF'], 0, strpos($_SERVER['PHP_SELF'], 'install'));
$sql2 = $this->db->query("INSERT INTO `{$this->cfg->tabname('iconomy')}`
(`{$ic_f['login']}`, `{$ic_f['money']}`, `{$ic_f['rm']}`, `{$ic_f['bank']}`)
VALUES
('$login', 0, 0, 0)");
if(!$sql2){ $this->core->notify($this->lng['e_msg'], $this->lng_m['e_add_economy'], 2, 'install/?mode=step_3'); }
$sql9 = $this->db->query("UPDATE `{$this->cfg->tabname('ugroups')}` SET `{$ug_f['id']}`='0' WHERE `{$ug_f['id']}`='4'");
if(!$sql9){ $this->core->notify($this->lng['e_msg'], $this->lng_m['e_upd_group'], 2, 'install/?mode=step_3'); }
$sql10 = $this->db->query("ALTER TABLE `{$this->cfg->tabname('ugroups')}` AUTO_INCREMENT=0");
if(!$sql10){ $this->core->notify($this->lng['e_msg'], $this->lng_m['e_upd_group'], 2, 'install/?mode=step_3'); }
$this->cfg->main['crypt'] = $method;
if(!$this->cfg->savecfg($this->cfg->main, 'main.php', 'main')){
$this->core->notify($this->lng['e_msg'], $this->lng_m['e_settings'], 2, 'install/?mode=step_3');
}
$_SESSION['step_3'] = true;
@file_get_contents("http://api.webmcr.com/?do=install&domain=".$_SERVER['SERVER_NAME']);
$this->core->notify($this->lng_m['finish'], $this->lng_m['mod_name'], 4, 'install/?mode=settings');
}
return $this->core->sp(MCR_ROOT."install/theme/step_3.html");
}
}
?>