setup.php

<?php
// This program is free software; you can redistribute it and/or
// modify it under the terms of the GNU General Public License
// as published by the Free Software Foundation; either version 2
// of the License, or (at your option) any later version.

$COMMAND_LINE = php_sapi_name() == 'cli';
require_once (dirname(__FILE__) . '/library/authentication/password_hashing.php');
require_once dirname(__FILE__) . '/library/classes/Installer.class.php';

//turn off PHP compatibility warnings
ini_set("session.bug_compat_warn","off");

$state = $_POST["state"];

// Make this true for IPPF.
$ippf_specific = false;

// If this script was invoked with no site ID, then ask for one.
if (!$COMMAND_LINE && empty($_REQUEST['site'])) {
  echo "<html>\n";
  echo "<head>\n";
  echo "<title>LibreHealth EHR Setup Tool</title>\n";
  echo "<link rel='stylesheet' href='interface/themes/style_blue.css'>\n";
  echo "</head>\n";
  echo "<body>\n";
  echo "<p><b>Optional Site ID Selection</b></p>\n";
  echo "<p>Most LibreHealth EHR installations support only one site.  If that is " .
    "true for you then ignore the rest of this text and just click Continue.</p>\n";
  echo "<p>Otherwise please enter a unique Site ID here.</p>\n";
  echo "<p>A Site ID is a short identifier with no spaces or special " .
    "characters other than periods or dashes. It is case-sensitive and we " .
    "suggest sticking to lower case letters for ease of use.</p>\n";
  echo "<p>If each site will have its own host/domain name, then use that " .
    "name as the Site ID (e.g. www.example.com).</p>\n";
  echo "<p>The site ID is used to identify which site you will log in to. " .
    "If it is a hostname then it is taken from the hostname in the URL. " .
    "Otherwise you must append \"?site=<i>siteid</i>\" to the URL used for " .
    "logging in.</p>\n";
  echo "<p>It is OK for one of the sites to have \"default\" as its ID. This " .
    "is the ID that will be used if it cannot otherwise be determined.</p>\n";
  echo "<form method='post'><input type='hidden' name='state' value='0'>" .
    "Site ID: <input type='text' name='site' value='default'>&nbsp;" .
    "<input type='submit' value='Continue'><br></form><br>\n";
  echo "</body></html>\n";
  exit();
}

// Support "?site=siteid" in the URL, otherwise assume "default".
$site_id = 'default';
if (!$COMMAND_LINE && !empty($_REQUEST['site'])) {
  $site_id = trim($_REQUEST['site']);
}

// Die if site ID is empty or has invalid characters.
if (empty($site_id) || preg_match('/[^A-Za-z0-9\\-.]/', $site_id))
  die("Site ID '".htmlspecialchars($site_id,ENT_NOQUOTES)."' contains invalid characters.");

//If having problems with file and directory permission
// checking, then can be manually disabled here.
$checkPermissions = True;

$installer = new Installer( $_REQUEST );
global $OE_SITE_DIR; // The Installer sets this

$docsDirectory = "$OE_SITE_DIR/documents";
$billingDirectory = "$OE_SITE_DIR/edi";
$billingDirectory2 = "$OE_SITE_DIR/era";

$billingLogDirectory = "$OE_SITE_DIR/logs";
$lettersDirectory = "$OE_SITE_DIR/letter_templates";
$gaclWritableDirectory = dirname(__FILE__)."/gacl/admin/templates_c";
$requiredDirectory1 = dirname(__FILE__)."/interface/main/calendar/modules/PostCalendar/pntemplates/compiled";
$requiredDirectory2 = dirname(__FILE__)."/interface/main/calendar/modules/PostCalendar/pntemplates/cache";

$zendModuleConfigFile = dirname(__FILE__)."/interface/modules/zend_modules/config/application.config.php";

//These are files and dir checked before install for
// correct permissions.
if (is_dir($OE_SITE_DIR)) {
  $writableFileList = array($installer->conffile,$zendModuleConfigFile);
  $writableDirList = array($docsDirectory, $billingDirectory, $billingDirectory2, $lettersDirectory, $gaclWritableDirectory, $requiredDirectory1, $requiredDirectory2);
}
else {
  $writableFileList = array();
  $writableDirList = array($OE_SITES_BASE, $gaclWritableDirectory, $requiredDirectory1, $requiredDirectory2);
}

// Include the sqlconf file if it exists yet.
$config = 0;
if (file_exists($OE_SITE_DIR)) {
  include_once($installer->conffile);
}
else if ($state > 3) {
  // State 3 should have created the site directory if it is missing.
  die("Internal error, site directory is missing.");
}

?>
<HTML>
<HEAD>
<TITLE>LibreHealth EHR Setup Tool</TITLE>
<LINK REL=STYLESHEET HREF="interface/themes/style_sky_blue.css">

<style>
.noclone { }
</style>

<script type="text/javascript" src="library/js/jquery.js"></script>

<script language="javascript">
// onclick handler for "clone database" checkbox
function cloneClicked() {
 var cb = document.forms[0].clone_database;
 $('.noclone').css('display', cb.checked ? 'none' : 'block');
}
</script>

</HEAD>
<BODY>

<span class="title">LibreHealth EHR Setup</span>
<br><br>
<span class="text">

<?php
 if (strtolower(ini_get('register_globals')) != 'off' && (bool) ini_get('register_globals')) {
  echo "It appears that you have register_globals enabled in your php.ini\n" .
   "configuration file.  This causes unacceptable security risks.  You must\n" .
   "turn it off before continuing with installation.\n";
  exit();
 }
?>

<?php
 if ($state == 7) {
?>

<p>Congratulations! LibreHealth EHR is now installed.</p>

<ul>
 <li>Access controls (php-GACL) are installed for fine-grained security, and can be administered in
     LibreHealth EHR's admin->acl menu.</li>
 <li>Reviewing <?php echo $OE_SITE_DIR; ?>/config.php is a good idea. This file
     contains some settings that you may want to change.</li>
 <li>There's much information and many extra tools bundled within the LibreHealth EHR installation directory. 
     Please refer to LibreHealth EHR/Documentation. Many forms and other useful scripts can be found at LibreHealth EHR/contrib.</li>
 <li>To ensure a consistent look and feel through out the application using
     <a href='http://www.mozilla.org/products/firefox/'>Firefox</a> is recommended.</li>
 <li>The LibreHealth EHR project home page, documentation, and forums can be found at <a href = "https://forums.librehealth.io/c/7-support" target="_blank">LibreHealth EHR</a></li>
 <li>We pursue grants to help fund the future development of LibreHealth EHR.  Please contact us via our website to let us know how you use LibreHealth EHR.  This information is valuable for evaluating the benefits of LibreHealth EHR to the medical community worldwide, and serves as a great way for you to advise us on how to serve you better.</li>
</ul>
<p>
We recommend you print these instructions for future reference.
</p>
<?php if (empty($installer->clone_database)) {
  echo "<p><b>The initial LibreHealth EHR user is '".$installer->iuser."' and the password is '".$installer->iuserpass."'</b></p>";
  echo "<p>If you edited the PHP or Apache configuration files during this installation process, then we recommend you restart your Apache server before following below LibreHealth EHR link.</p>";
} ?>
<p>
 <a href='./?site=<?php echo $site_id; ?>'>Click here to start using LibreHealth EHR. </a>
</p>

<?php
  exit();
 }
?>

<?php

$inst = $_POST["inst"];

if (($config == 1) && ($state < 4)) {
  echo "LibreHealth EHR has already been installed.  If you wish to force re-installation, then edit $installer->conffile (change the 'config' variable to 0), and re-run this script.<br>\n";
}
else {
  switch ($state) {
    
  case 1:
    echo "<b>Step $state</b><br><br>\n";
    echo "Now I need to know whether you want me to create the database on my own or if you have already created the database for me to use.  For me to create the database, you will need to supply the MySQL root password.\n
<span class='title'> <br />NOTE: clicking on \"Continue\" may delete or cause damage to data on your system. Before you continue please backup your data.</span>
<br><br>\n
<FORM METHOD='POST'>\n
<INPUT TYPE='HIDDEN' NAME='state' VALUE='2'>\n
<INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'>\n
<LABEL FOR='inst1'><INPUT TYPE='RADIO' ID='inst1' NAME='inst' VALUE='1' checked>Have setup create the database</label><br>\n
<LABEL FOR='inst2'><INPUT TYPE='RADIO' ID='inst2' NAME='inst' VALUE='2'>I have already created the database</label><br>\n
<br>\n
<INPUT TYPE='SUBMIT' VALUE='Continue'><br></FORM><br>\n";
    break;
    
  case 2:
    echo "<b>Step $state</b><br><br>\n";
    echo "Now you need to supply the MySQL server information and path information. Detailed instructions on each item can be found in the <a href='INSTALL' target='_blank'><span STYLE='text-decoration: underline;'>'INSTALL'</span></a> manual file.
<br><br>\n
<FORM METHOD='POST'>
<INPUT TYPE='HIDDEN' NAME='state' VALUE='3'>
<INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'>\n
<INPUT TYPE='HIDDEN' NAME='inst' VALUE='$inst'>
<TABLE>\n
<TR VALIGN='TOP'><TD COLSPAN=2><font color='red'>MYSQL SERVER:</font></TD></TR>
<TR VALIGN='TOP'><TD><span class='text'>Server Host: </span></TD><TD><INPUT TYPE='TEXT' VALUE='localhost' NAME='server' SIZE='30'></TD><TD><span class='text'>(If you run MySQL and Apache/PHP on the same computer, then leave this as 'localhost'. If they are on separate computers, then enter the IP address of the computer running MySQL.)</span><br></TD></TR>
<TR VALIGN='TOP'><TD><span class='text'>Server Port: </span></TD><TD><INPUT TYPE='TEXT' VALUE='3306' NAME='port' SIZE='30'></TD><TD><span class='text'>(This is the MySQL port. The default port for MySQL is 3306.)</span><br></TD></TR>
<TR VALIGN='TOP'><TD><span class='text'>Database Name: </span></TD><TD><INPUT TYPE='TEXT' VALUE='libreehr' NAME='dbname' SIZE='30'></TD><TD><span class='text'>(This is the name of the LibreHealth EHR database in MySQL - 'LibreHealth EHR' is the recommended)</span><br></TD></TR>
<TR VALIGN='TOP'><TD><span class='text'>Login Name: </span></TD><TD><INPUT TYPE='TEXT' VALUE='libreehr' NAME='login' SIZE='30'></TD><TD><span class='text'>(This is the name of the LibreHealth EHR login name in MySQL - 'libreehr' is the recommended)</span><br></TD></TR>
<TR VALIGN='TOP'><TD><span class='text'>Password: </span></TD><TD><INPUT TYPE='PASSWORD' VALUE='' NAME='pass' SIZE='30'></TD><TD><span class='text'>(This is the Login Password for when PHP accesses MySQL - it should be at least 8 characters long and composed of both numbers and letters)</span><br></TD></TR>\n";
    if ($inst != 2) {
      echo "<TR VALIGN='TOP'><TD><span class='text'>Name for Root Account: </span></TD><TD><INPUT TYPE='TEXT' VALUE='root' NAME='root' SIZE='30'></TD><TD><span class='text'>(This is name for MySQL root account. For localhost, it is usually ok to leave it 'root'.)</span><br></TD></TR>
<TR VALIGN='TOP'><TD><span class='text'>Root Pass: </span></TD><TD><INPUT TYPE='PASSWORD' VALUE='' NAME='rootpass' SIZE='30'></TD><TD><span class='text'>(This is your MySQL root password. For localhost, it is usually ok to leave it blank.)</span><br></TD></TR>\n";
      echo "<TR VALIGN='TOP'><TD><span class='text'>User Hostname: </span></TD><TD><INPUT TYPE='TEXT' VALUE='localhost' NAME='loginhost' SIZE='30'></TD><TD><span class='text'>(If you run Apache/PHP and MySQL on the same computer, then leave this as 'localhost'. If they are on separate computers, then enter the IP address of the computer running Apache/PHP.)</span><br></TD></TR>";
      echo "<TR VALIGN='TOP'><TD><span class='text'>UTF-8 Collation: </span></TD><TD colspan='2'>" .
  "<select name='collate'>" .
  "<option value='utf8_bin'          >Bin</option>" .
  "<option value='utf8_czech_ci'     >Czech</option>" .
  "<option value='utf8_danish_ci'    >Danish</option>" .
  "<option value='utf8_esperanto_ci' >Esperanto</option>" .
  "<option value='utf8_estonian_ci'  >Estonian</option>" .
  "<option value='utf8_general_ci' selected>General</option>" .
  "<option value='utf8_hungarian_ci' >Hungarian</option>" .
  "<option value='utf8_icelandic_ci' >Icelandic</option>" .
  "<option value='utf8_latvian_ci'   >Latvian</option>" .
  "<option value='utf8_lithuanian_ci'>Lithuanian</option>" .
  "<option value='utf8_persian_ci'   >Persian</option>" .
  "<option value='utf8_polish_ci'    >Polish</option>" .
  "<option value='utf8_roman_ci'     >Roman</option>" .
  "<option value='utf8_romanian_ci'  >Romanian</option>" .
  "<option value='utf8_slovak_ci'    >Slovak</option>" .
  "<option value='utf8_slovenian_ci' >Slovenian</option>" .
  "<option value='utf8_spanish2_ci'  >Spanish2 (Traditional)</option>" .
  "<option value='utf8_spanish_ci'   >Spanish (Modern)</option>" .
  "<option value='utf8_swedish_ci'   >Swedish</option>" .
  "<option value='utf8_turkish_ci'   >Turkish</option>" .
  "<option value='utf8_unicode_ci'   >Unicode (German, French, Russian, Armenian, Greek)</option>" .
  "<option value=''                  >None (Do not force UTF-8)</option>" .
  "</select>" .
  "</TD></TR><TR VALIGN='TOP'><TD>&nbsp;</TD><TD colspan='2'><span class='text'>(This is the collation setting for mysql. Leave as 'General' if you are not sure. If the language you are planning to use in LibreHealth EHR is in the menu, then you can select it. Otherwise, just select 'General'.)</span><br></TD></TR>";
}
    echo "<TR VALIGN='TOP'><TD>&nbsp;</TD></TR>";

    // Include a "source" site ID drop-list and a checkbox to indicate
    // if cloning its database.  When checked, do not display initial user
    // and group stuff below.
    $dh = opendir($OE_SITES_BASE);
    if (!$dh) die("Cannot read directory '$OE_SITES_BASE'.");
    $siteslist = array();
    while (false !== ($sfname = readdir($dh))) {
      if (substr($sfname, 0, 1) == '.') continue;
      if ($sfname == 'CVS'            ) continue;
      if ($sfname == $site_id         ) continue;
      $sitedir = "$OE_SITES_BASE/$sfname";
      if (!is_dir($sitedir)               ) continue;
      if (!is_file("$sitedir/sqlconf.php")) continue;
      $siteslist[$sfname] = $sfname;
    }
    closedir($dh);
    // If this is not the first site...
    if (!empty($siteslist)) {
      ksort($siteslist);
      echo "<tr valign='top'>\n";
      echo " <td class='text'>Source Site: </td>\n";
      echo " <td class='text'><select name='source_site_id'>";
      foreach ($siteslist as $sfname) {
	echo "<option value='$sfname'";
	if ($sfname == 'default') echo " selected";
	echo ">$sfname</option>";
      }
      echo "</select></td>\n";
      echo " <td class='text'>(The site directory that will be a model for the new site.)</td>\n";
      echo "</tr>\n";
      echo "<tr valign='top'>\n";
      echo " <td class='text'>Clone Source Database: </td>\n";
      echo " <td class='text'><input type='checkbox' name='clone_database' onclick='cloneClicked()' /></td>\n";
      echo " <td class='text'>(Clone the source site's database instead of creating a fresh one.)</td>\n";
      echo "</tr>\n";
    }
    
    echo "<TR VALIGN='TOP' class='noclone'><TD COLSPAN=2><font color='red'>LibreHealth EHR USER:</font></TD></TR>";
    echo "<TR VALIGN='TOP' class='noclone'><TD><span class='text'>Initial User:</span></TD><TD><INPUT SIZE='30' TYPE='TEXT' NAME='iuser' VALUE='admin'></TD><TD><span class='text'>(This is the login name of user that will be created for you. Limit this to one word.)</span></TD></TR>
<TR VALIGN='TOP' class='noclone'><TD><span class='text'>Initial User Password:</span></TD><TD><INPUT SIZE='30' TYPE='PASSWORD' NAME='iuserpass' VALUE=''></TD><TD><span class='text'>(This is the password for the initial user account above.)</span></TD></TR>
<TR VALIGN='TOP' class='noclone'><TD><span class='text'>Initial User's First Name:</span></TD><TD><INPUT SIZE='30' TYPE='TEXT' NAME='iufname' VALUE='Administrator'></TD><TD><span class='text'>(This is the First name of the 'initial user'.)</span></TD></TR>
<TR VALIGN='TOP' class='noclone'><TD><span class='text'>Initial User's Last Name:</span></TD><TD><INPUT SIZE='30' TYPE='TEXT' NAME='iuname' VALUE='Administrator'></TD><TD><span class='text'>(This is the Last name of the 'initial user'.)</span></TD></TR>
<TR VALIGN='TOP' class='noclone'><TD><span class='text'>Initial Group:</span></TD><TD><INPUT SIZE='30' TYPE='TEXT' NAME='igroup' VALUE='Default'></TD><TD><span class='text'>(This is the group that will be created for your users.  This should be the name of your practice.)</span></TD></TR>
";
    echo "<TR VALIGN='TOP'><TD>&nbsp;</TD></TR>";

    echo "</TABLE>
<br>
<INPUT TYPE='SUBMIT' VALUE='Continue'><br></FORM><br>";
    break;

  case 3:

    // Form Validation
    //   (applicable if not cloning from another database)
    if (empty($installer->clone_database)) { 
      if ( ! $installer->login_is_valid() ) {
        echo "ERROR. Please pick a proper 'Login Name'.<br>\n";
        echo "Click Back in browser to re-enter.<br>\n";
        break;
      }
      if ( ! $installer->iuser_is_valid() ) {
        echo "ERROR. The 'Initial User' field can only contain one word and no spaces.<br>\n";
        echo "Click Back in browser to re-enter.<br>\n";
        break;
      }
      if ( ! $installer->user_password_is_valid() ) {
        echo "ERROR. Please pick a proper 'Initial User Password'.<br>\n";
        echo "Click Back in browser to re-enter.<br>\n";
        break;
      }
    }
    if ( ! $installer->password_is_valid() ) {
      echo "ERROR. Please pick a proper 'Password'.<br>\n";
      echo "Click Back in browser to re-enter.<br>\n";
      break;
    }
    
    echo "<b>Step $state</b><br><br>\n";
    echo "Configuring LibreHealth EHR...<br><br>\n";

    // Skip below if database shell has already been created.
    if ($inst != 2) {

      echo "Connecting to MySQL Server...\n";
      flush();
      if ( ! $installer->root_database_connection() ) {
	echo "ERROR.  Check your login credentials.\n";
	echo $installer->error_message;
	break;
      }
      else {
	echo "OK.<br>\n";
        flush();
      }
    }

    // Only pertinent if cloning another installation database
    if ( ! empty($installer->clone_database)) {

      echo "Dumping source database...";
      flush();
      if ( ! $installer->create_dumpfiles() ) {
        echo $installer->error_message;
        break;
      }
      else {
        echo " OK.<br>\n";
        flush();
      }
    }

    // Only pertinent if mirroring another installation directory
    if ( ! empty($installer->source_site_id)) {

      echo "Creating site directory...";
      if ( ! $installer->create_site_directory() ) {
        echo $installer->error_message;
        break;
      }
      else {
        echo "OK.<BR>";
        flush();
      }
    }

    // Skip below if database shell has already been created.
    if ($inst != 2) {
      echo "Creating database...\n";
      flush();
      if ( ! $installer->create_database() ) {
        echo "ERROR.  Check your login credentials.\n";
        echo $installer->error_message;
        break;
      } else {
        echo "OK.<br>\n";
        flush();
      }

      echo "Creating user with permissions for database...\n";
      flush();
      if ( ! $installer->grant_privileges() ) {
	echo "ERROR when granting privileges to the specified user.\n";
	echo $installer->error_message;
	break;
      } else {
	echo "OK.<br>\n";
        flush();
      }

      echo "Reconnecting as new user...\n";
      flush();
      $installer->disconnect();
    } else {

      echo "Connecting to MySQL Server...\n";
    }
    if ( ! $installer->user_database_connection() ) {
      echo "ERROR.  Check your login credentials.\n";
      echo $installer->error_message;
      break;
    }
    else {
      echo "OK.<br>\n";
      flush();
    }
    
    // Load the database files
    $dump_results = $installer->load_dumpfiles();
    if ( ! $dump_results ) {
      echo $installer->error_message;
      break;
    } else {
      echo $dump_results;
      flush();
    }

    echo "Writing SQL configuration...\n";
    flush();
    if ( ! $installer->write_configuration_file() ) {
      echo $installer->error_message;
      break;
    }
    else {
      echo "OK.<br>\n";
      flush();
    }

    // Only pertinent if not cloning another installation database
    if (empty($installer->clone_database)) {

      echo "Setting version indicators...\n";
      flush();
      if ( ! $installer->add_version_info() ) {
        echo "ERROR.\n";
        echo $installer->error_message;;
        break;
      }
      else {
        echo "OK<br>\n";
        flush();
      }

      echo "Writing global configuration defaults...\n";
      flush();
      if ( ! $installer->insert_globals() ) {
        echo "ERROR.\n";
        echo $installer->error_message;;
        break;
      }
      else {
        echo "OK<br>\n";
        flush();
      }

      echo "Adding Initial User...\n";
      flush();
      if ( ! $installer->add_initial_user() ) {
        echo $installer->error_message;
        break;
      }
      echo "OK<br>\n";
      flush();
    }
    
    if ( ! empty($installer->clone_database) ) {
      // Database was cloned, skip ACL setup.
      echo "Click 'continue' for further instructions.";
      $next_state = 7;
    }
    else {
      echo "\n<br>Next step will install and configure access controls (php-GACL).<br>\n";
      $next_state = 4; 
    }
    
    echo "
<FORM METHOD='POST'>\n
<INPUT TYPE='HIDDEN' NAME='state' VALUE='$next_state'>
<INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'>\n
<INPUT TYPE='HIDDEN' NAME='iuser' VALUE='$installer->iuser'>
<INPUT TYPE='HIDDEN' NAME='iuserpass' VALUE='$installer->iuserpass'>
<INPUT TYPE='HIDDEN' NAME='iuname' VALUE='$installer->iuname'>
<INPUT TYPE='HIDDEN' NAME='iufname' VALUE='$installer->iufname'>
<INPUT TYPE='HIDDEN' NAME='clone_database' VALUE='$installer->clone_database'>
<br>\n
<INPUT TYPE='SUBMIT' VALUE='Continue'><br></FORM><br>\n";

    break;
  case 4:
    echo "<b>Step $state</b><br><br>\n";
    echo "Installing and Configuring Access Controls (php-GACL)...<br><br>";
    
    if ( ! $installer->install_gacl() ) {
      echo $installer->error_message;
      break;
    }
    else {
      // display the status information for gacl setup
      echo $installer->debug_message;
    }

    echo "Gave the '$installer->iuser' user (password is '$installer->iuserpass') administrator access.<br><br>";
    
    echo "Done installing and configuring access controls (php-GACL).<br>";
    echo "Next step will configure PHP.";
    
    echo "<br><FORM METHOD='POST'>\n
<INPUT TYPE='HIDDEN' NAME='state' VALUE='5'>\n
<INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'>\n
<INPUT TYPE='HIDDEN' NAME='iuser' VALUE='$installer->iuser'>\n
<INPUT TYPE='HIDDEN' NAME='iuserpass' VALUE='$installer->iuserpass'>\n	
<br>\n
<INPUT TYPE='SUBMIT' VALUE='Continue'><br></FORM><br>\n";

    break;
    
  case 5:
    echo "<b>Step $state</b><br><br>\n";
    echo "Configuration of PHP...<br><br>\n";
    echo "We recommend making the following changes to your PHP installation, which can normally be done by editing the php.ini configuration file:\n";
    echo "<ul>";
    $gotFileFlag = 0;
    if (version_compare(PHP_VERSION, '5.2.4', '>=')) {
      $phpINIfile = php_ini_loaded_file();
      if ($phpINIfile) {
        echo "<li><font color='green'>Your php.ini file can be found at ".$phpINIfile."</font></li>\n";
        $gotFileFlag = 1;
      }
    }
echo "<li>To ensure proper functioning of LibreHealth EHR you must make sure that settings in php.ini file include  \"short_open_tag = On\", \"display_errors = Off\", \"register_globals = Off\", \"max_execution_time\" set to at least 60, \"max_input_time\" set to at least 90, \"post_max_size\" set to at least 30M, and \"memory_limit\" set to at least \"128M\".</li>\n";
echo "<li>In order to take full advantage of the patient documents capability you must make sure that settings in php.ini file include \"file_uploads = On\", that \"upload_max_filesize\" is appropriate for your use and that \"upload_tmp_dir\" is set to a correct value that will work on your system.</li>\n";
if (!$gotFileFlag) {
    echo "<li>If you are having difficulty finding your php.ini file, then refer to the <a href='INSTALL' target='_blank'><span STYLE='text-decoration: underline;'>'INSTALL'</span></a> manual for suggestions.</li>\n";
}
echo "</ul>";

echo "<br>We recommend you print these instructions for future reference.<br><br>";
echo "Next step will configure Apache web server.";

echo "<br><FORM METHOD='POST'>\n
<INPUT TYPE='HIDDEN' NAME='state' VALUE='6'>\n
<INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'>\n
<INPUT TYPE='HIDDEN' NAME='iuser' VALUE='$installer->iuser'>\n
<INPUT TYPE='HIDDEN' NAME='iuserpass' VALUE='$installer->iuserpass'>\n
<br>\n
<INPUT TYPE='SUBMIT' VALUE='Continue'><br></FORM><br>\n";

break;

       case 6:
echo "<b>Step $state</b><br><br>\n";
echo "Configuration of Apache web server...<br><br>\n";
echo "The \"".preg_replace("/${site_id}/","*",realpath($docsDirectory))."\", \"".preg_replace("/${site_id}/","*",realpath($billingDirectory))."\" and \"".preg_replace("/${site_id}/","*",realpath($billingDirectory2))."\" directories contain patient information, and
it is important to secure these directories. Additionally, some settings are required for the Zend Framework to work in LibreHealth EHR. This can be done by pasting the below to end of your apache configuration file:<br>
&nbsp;&nbsp;&lt;Directory \"".realpath(dirname(__FILE__))."\"&gt;<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;AllowOverride FileInfo<br>
&nbsp;&nbsp;&lt;/Directory&gt;<br>
&nbsp;&nbsp;&lt;Directory \"".realpath(dirname(__FILE__))."/sites\"&gt;<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;AllowOverride None<br>
&nbsp;&nbsp;&lt;/Directory&gt;<br>
&nbsp;&nbsp;&lt;Directory \"".preg_replace("/${site_id}/","*",realpath($docsDirectory))."\"&gt;<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;order deny,allow<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Deny from all<br>
&nbsp;&nbsp;&lt;/Directory&gt;<br>
&nbsp;&nbsp;&lt;Directory \"".preg_replace("/${site_id}/","*",realpath($billingDirectory))."\"&gt;<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;order deny,allow<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Deny from all<br>
&nbsp;&nbsp;&lt;/Directory&gt;<br>
&nbsp;&nbsp;&lt;Directory \"".preg_replace("/${site_id}/","*",realpath($billingDirectory2))."\"&gt;<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;order deny,allow<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Deny from all<br>
&nbsp;&nbsp;&lt;/Directory&gt;<br><br>";

echo "If you are having difficulty finding your apache configuration file, then refer to the <a href='INSTALL' target='_blank'><span STYLE='text-decoration: underline;'>'INSTALL'</span></a> manual for suggestions.<br><br>\n";
echo "<br>We recommend you print these instructions for future reference.<br><br>";
echo "Click 'continue' for further instructions.";

echo "<br><FORM METHOD='POST'>\n
<INPUT TYPE='HIDDEN' NAME='state' VALUE='7'>\n
<INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'>\n
<INPUT TYPE='HIDDEN' NAME='iuser' VALUE='$installer->iuser'>\n
<INPUT TYPE='HIDDEN' NAME='iuserpass' VALUE='$installer->iuserpass'>\n
<br>\n
<INPUT TYPE='SUBMIT' VALUE='Continue'><br></FORM><br>\n";

break;

	case 0:
	default:
echo "<p>Welcome to LibreHealth EHR.  This utility will step you through the installation and configuration of LibreHealth EHR for your practice.</p>\n";
echo "<ul><li>Before proceeding, be sure that you have a properly installed and configured MySQL server available, and a PHP configured webserver.</li>\n";

echo "<li>Detailed installation instructions can be found in the <a href='INSTALL' target='_blank'><span STYLE='text-decoration: underline;'>'INSTALL'</span></a> manual file.</li>\n";

Echo "<li>If you are upgrading from a previous version, do NOT use this script.  Please read the 'Upgrading' section found in the <a href='INSTALL' target='_blank'><span STYLE='text-decoration: underline;'>'INSTALL'</span></a> manual file.</li></ul>";

if ($checkPermissions) {
	echo "<p>We will now ensure correct file and directory permissions before starting installation:</p>\n";
	echo "<FONT COLOR='green'>Ensuring following files are world-writable...</FONT><br>\n";
	$errorWritable = 0;
	foreach ($writableFileList as $tempFile) {
		if (is_writable($tempFile)) {
	        	echo "'".realpath($tempFile)."' file is <FONT COLOR='green'><b>ready</b></FONT>.<br>\n";
		}
		else {
	        	echo "<p><FONT COLOR='red'>UNABLE</FONT> to open file '".realpath($tempFile)."' for writing.<br>\n";
	        	echo "(configure file permissions; see below for further instructions)</p>\n";
	        	$errorWritable = 1;
		}
	}
	if ($errorWritable) {
		echo "<p><FONT COLOR='red'>You can't proceed until all above files are ready (world-writable).</FONT><br>\n";	
		echo "In linux, recommend changing file permissions with the 'chmod 666 filename' command.<br>\n";
		echo "Fix above file permissions and then click the 'Check Again' button to re-check files.<br>\n";
    echo "<FORM METHOD='POST'><INPUT TYPE='SUBMIT' VALUE='Check Again'></p>" .
      "<INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'></FORM><br>\n";
		break;
	}

	echo "<br><FONT COLOR='green'>Ensuring following directories have proper permissions...</FONT><br>\n";
	$errorWritable = 0;
	foreach ($writableDirList as $tempDir) {
		if (is_writable($tempDir)) {
	        	echo "'".realpath($tempDir)."' directory is <FONT COLOR='green'><b>ready</b></FONT>.<br>\n";
		}
		else {
		        echo "<p><FONT COLOR='red'>UNABLE</FONT> to open directory '".realpath($tempDir)."' for writing by web server.<br>\n";
		       	echo "(configure directory permissions; see below for further instructions)</p>\n";
	 	   	$errorWritable = 1;
		}
	}
	if ($errorWritable) {
		echo "<p><FONT COLOR='red'>You can't proceed until all directories are ready.</FONT><br>\n";
		echo "In linux, recommend changing owners of these directories to the web server. For example, in many linux OS's the web server user is 'apache', 'nobody', or 'www-data'. So if 'apache' were the web server user name, could use the command 'chown -R apache:apache directory_name' command.<br>\n";
	        echo "Fix above directory permissions and then click the 'Check Again' button to re-check directories.<br>\n";
    echo "<FORM METHOD='POST'><INPUT TYPE='SUBMIT' VALUE='Check Again'></p>" .
      "<INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'></FORM><br>\n";
		break;
	}

	echo "<br>All required files and directories have been verified. Click to continue installation.<br>\n";
}
else {
	echo "<br>Click to continue installation.<br>\n";
}

echo "<FORM METHOD='POST'><INPUT TYPE='HIDDEN' NAME='state' VALUE='1'>" .
  "<INPUT TYPE='HIDDEN' NAME='site' VALUE='$site_id'>" .
  "<INPUT TYPE='SUBMIT' VALUE='Continue'><br></FORM><br>";

}
}
?>

</span>

</BODY>
</HTML>