egroupware_official/setup/config.php
ralf 1b9c543547 * API: support OpenID Connect for authentication against another OIC IdP
also migrating old fallback auth classes to new auth_fallback parameter and reordering providers a bit / give OIC a prominent position
2023-11-17 10:17:29 +02:00

228 lines
6.4 KiB
PHP

<?php
/**
* EGroupWare Setup - System configuration
*
* @link http://www.egroupware.org
* @package setup
* @author Miles Lott <milos@groupwhere.org>
* @author Ralf Becker <RalfBecker-AT-outdoor-training.de>
* @license http://opensource.org/licenses/gpl-license.php GPL - GNU General Public License
* @version $Id$
*/
use EGroupware\Api;
use EGroupware\Api\Framework;
include('./inc/functions.inc.php');
/*
Authorize the user to use setup app and load the database
Does not return unless user is authorized
*/
if(!$GLOBALS['egw_setup']->auth('Config') || @$_POST['cancel'])
{
Header('Location: index.php');
exit;
}
$tpl_root = $GLOBALS['egw_setup']->html->setup_tpl_dir('setup');
$setup_tpl = new Framework\Template($tpl_root);
$setup_tpl->set_file(array(
'T_head' => 'head.tpl',
'T_footer' => 'footer.tpl',
'T_alert_msg' => 'msg_alert_msg.tpl',
'T_config_pre_script' => 'config_pre_script.tpl',
'T_config_post_script' => 'config_post_script.tpl'
));
$setup_tpl->set_var('hidden_vars', Api\Html::input_hidden('csrf_token', Api\Csrf::token(__FILE__)));
// check CSRF token for POST requests with any content (setup uses empty POST to call it's modules!)
if ($_SERVER['REQUEST_METHOD'] == 'POST' && $_POST)
{
Api\Csrf::validate($_POST['csrf_token'], __FILE__);
}
/* Following to ensure windows file paths are saved correctly */
$GLOBALS['egw_setup']->loaddb();
/* Check api version, use correct table */
$setup_info = $GLOBALS['egw_setup']->detection->get_db_versions();
$newsettings = $_POST['newsettings'];
if(@$_POST['submit'] && @$newsettings)
{
/* Load hook file with functions to validate each config (one/none/all) */
$GLOBALS['egw_setup']->hook('config_validate','setup');
try
{
// allow apps to register hooks throwing Exceptions for errors
Api\Hooks::process([
'location' => 'setup_config',
'newsettings' => &$newsettings,
], [], true);
}
catch (\Exception $e) {
$GLOBALS['error'] .= '<b>'.$e->getMessage()."</b><br />\n";
}
$newsettings['tz_offset'] = date('Z')/3600;
$GLOBALS['egw_setup']->db->transaction_begin();
foreach($newsettings as $setting => $value)
{
if(in_array($setting, (array)$GLOBALS['egw_info']['server']['found_validation_hook']) && function_exists($setting))
{
$setting($newsettings);
if($GLOBALS['config_error'])
{
$GLOBALS['error'] .= '<b>'.$GLOBALS['config_error'] ."</b><br />\n";
$GLOBALS['config_error'] = '';
/* Bail out, stop writing config data */
break;
}
$value = $newsettings[$setting]; // it might be changed by the validation hook
}
/* Don't erase passwords, since we also do not print them below */
if(!empty($value) || !(stristr($setting,'passwd') || stristr($setting,'password') || stristr($setting,'root_pw')))
{
Api\Config::save_value($setting, $value, 'phpgwapi');
}
}
if(!$GLOBALS['error'])
{
$GLOBALS['egw_setup']->db->transaction_commit();
// unset cached config, as this is the primary source for configuration now
Api\Cache::unsetInstance('config', 'configs');
Header('Location: index.php');
exit;
}
}
$GLOBALS['egw_setup']->html->show_header(lang('Configuration'),False,'config',$GLOBALS['egw_setup']->ConfigDomain . '(' . $GLOBALS['egw_domain'][$GLOBALS['egw_setup']->ConfigDomain]['db_type'] . ')');
$current_config = [];
// if we have an validation error, use the new settings made by the user and not the stored config
if($GLOBALS['error'] && is_array($newsettings))
{
$current_config = $newsettings;
}
else
{
foreach($GLOBALS['egw_setup']->db->select($GLOBALS['egw_setup']->config_table,'*',false,__LINE__,__FILE__) as $row)
{
$current_config[$row['config_name']] = $row['config_value'];
}
// migrate old fallback types to auth_fallback="True"
switch ($current_config['auth_type'])
{
case 'fallback':
$current_config['auth_type'] = 'ldap';
$current_config['auth_fallback'] = 'True';
break;
case 'fallbackmail2sql':
$current_config['auth_type'] = 'mail';
$current_config['auth_fallback'] = 'True';
break;
case 'fallbackads2sql':
case 'fallbackad2sql':
$current_config['auth_type'] = 'ads';
$current_config['auth_fallback'] = 'True';
break;
}
}
$setup_tpl->pparse('out','T_config_pre_script');
/* Now parse each of the templates we want to show here */
class egw
{
var $accounts;
var $applications;
var $db;
}
$GLOBALS['egw'] = new egw;
$GLOBALS['egw']->db =& $GLOBALS['egw_setup']->db;
$t = new Framework\Template(Framework\Template::get_dir('setup'));
$t->set_unknowns('keep');
$t->set_file(array('config' => 'config.tpl'));
$t->set_block('config','body','body');
$vars = $t->get_undefined('body');
$GLOBALS['egw_setup']->hook('config','setup');
foreach($vars as $value)
{
$valarray = explode('_',$value);
$type = array_shift($valarray);
$newval = implode(' ',$valarray);
switch ($type)
{
case 'lang':
$t->set_var($value,lang($newval));
break;
case 'value':
$newval = str_replace(' ','_',$newval);
/* Don't show passwords in the form */
if(strpos($value,'passwd') !== false || strpos($value,'password') !== false || strpos($value,'root_pw') !== false)
{
$t->set_var($value,'');
}
else
{
$t->set_var($value, $current_config[$newval]);
}
break;
case 'selected':
case 'checked':
$newvals = explode(' ',$newval);
$setting = array_pop($newvals);
$config = implode('_',$newvals);
/* echo $config . '=' . $current_config[$config]; */
if($current_config[$config] == $setting)
{
$t->set_var($value,' '.$type);
}
else
{
$t->set_var($value,'');
}
break;
case 'hook':
$newval = str_replace(' ','_',$newval);
$t->set_var($value,$newval($current_config));
break;
default:
$t->set_var($value,'');
break;
}
}
if($GLOBALS['error'])
{
if($GLOBALS['error'] == 'badldapconnection')
{
/* Please check the number and dial again :) */
$GLOBALS['egw_setup']->html->show_alert_msg('Error',
lang('There was a problem trying to connect to your LDAP server. <br />'
.'please check your LDAP server configuration') . '.');
}
$GLOBALS['egw_setup']->html->show_alert_msg('Error',$GLOBALS['error'].'<p>');
}
$t->pfp('out','body');
unset($t);
$setup_tpl->set_var('more_configs',lang('Please login to egroupware and run the admin application for additional site configuration') . '.');
$setup_tpl->set_var('lang_submit',lang('Save'));
$setup_tpl->set_var('lang_cancel',lang('Cancel'));
$setup_tpl->pparse('out','T_config_post_script');
$GLOBALS['egw_setup']->html->show_footer();