<?php
// SECURITY MEASURE DO NOT REMOVE!!
defined('_VALID_SETUP') or die('Restricted Access');
 
include(RAIDER_BASE_PATH.'authentication'.DIRECTORY_SEPARATOR.'phpbb3'.DIRECTORY_SEPARATOR.'phpbb3.configure.php');
include(RAIDER_BASE_PATH.'configuration.php');
 
// add to database
$link = mysql_connect($pConfig['db_server'], $pConfig['db_user'], $pConfig['db_pass']);
 
if(!$link) {
	$output .= '<font color=red>Unable to connect to database.</font><br>';
	$error = 1;
}
 
if(!mysql_select_db($pConfig['db_name']))
	$output .= '<font color=red>Unable to select database.</font><br>';
else
	$output .= '<font color=green>Database selected.</font><br>';
 
$result = mysql_query("SELECT * FROM {$pConfig['db_prefix']}profile");
$count = mysql_num_rows($result);
 
// setup output
$output = '<form method="post" action="install.php?option='.$i.'">';
 
if($count == 0)
	$output .= '<strong>THE FIRST USER TO VISIT PHPRAIDER AFTER LOGGING INTO THE FORUMS WILL BE SET AS AN ADMINISTRATOR!!!</strong><br><br>';
 
// each field for configuration
$output .= "<div class=contentHeader>Setup Authentication Method</div><br>
				<div class=contentBody>
					<div align=center>
						<table width=100% cellpadding=3 cellspacing=1 border=0>";
 
for($j=0; $j<count($auth_option); $j++) {
	if(empty($_POST[$auth_option[$j]['variable']])) {
		$name = $auth_option[$j]['text'];
	} else {
		$name = $_POST[$auth_option[$j]['variable']];
	}
 
	$output .= '<tr>
					<td width="30%" valign="top"><div align="right"><strong>'.$auth_option[$j]['text'].':</strong><br>'.$auth_option[$j]['description'].'</div></td>
					<td width="70%" valign="top">
						<div align="left">
							<input type="text" name="'.$auth_option[$j]['variable'].'" value="'.$auth_option[$j]['value'].'" class="post" style="width:200px">
						</div>
					</td>
				</tr>';
}
 
$output .= "</table></div><br></div><div align=center><br><input type=submit name=submit value=Submit class=mainoption></div>";
 
// introduction file
if($task == '') {
	if(empty($_POST)) {
		$p->assign($_POST);
		$p->assign('output', $output);
 
		// display form
		$p->display($option.'.tpl');
	} else {
		// add to database
		$link = mysql_connect($pConfig['db_server'], $pConfig['db_user'], $pConfig['db_pass']);
 
		if(!$link) {
			$output .= '<font color=red>Unable to connect to database.</font><br>';
			$error = 1;
		}
 
		if(!mysql_select_db($pConfig['db_name']))
			$output .= '<font color=red>Unable to select database.</font><br>';
		else
			$output .= '<font color=green>Database selected.</font><br>';
 
		// do the auth options
		for($j=0;$j<count($auth_option);$j++) {
			$sql = sprintf("INSERT INTO %sconfig_auth"
				. "\n (`name`, `value`)"
				. "\n VALUES ('%s','%s');"
				,$pConfig['db_prefix'],$auth_option[$j]['variable'],(get_magic_quotes_gpc())?$_POST[$auth_option[$j]['variable']]:addslashes($_POST[$auth_option[$j]['variable']]));
			mysql_query($sql) or die(mysql_error());
		}
 
		// do the auth required
		foreach($auth_default as $key=>$value) {
			$sql = sprintf("INSERT INTO %sconfig_auth"
				. "\n (`name`, `value`)"
				. "\n  VALUES ('%s','%s');"
				,$pConfig['db_prefix'],$key,$value);
			mysql_query($sql) or die(mysql_error());
		}
 
		mysql_close($link);
 
		header('Location: install.php?option='.$next_option);
		exit;
	}
} else {
	printError($pLang['invalidOption']);
}
?>

<?php
	// options for the user to change
	// users will have control over these variables
	$auth_option = array(
						array(
							'text'=>'Registration URL',
							'description'=>'URL of register file',
							'variable'=>'register_url',
							'value'=>'http://'.$_SERVER['HTTP_HOST'].'/phpbb3/ucp.php?mode=register'),
						array(
							'text'=>'phpBB Path',
							'description'=>'Path to your installed phpBB3 forum, including trailing slash!',
							'variable'=>'phpbb_path',
							'value'=>RAIDER_BASE_PATH.'phpBB3'.DIRECTORY_SEPARATOR),
						array(
							'text'=>'phpBB URL',
							'description'=>'Including trailing slash!',
							'variable'=>'phpbb_url',
							'value'=>'http://'.$_SERVER['HTTP_HOST'].'/phpbb3/'),
					);
 
	// hard coded options specific to the login script
	// users will not have control over these variables
	$auth_default = array(
						'use_login'=>0
					);
?>

<?php
/***************************************************************************
 *                                 auth_phpbb3.php
 *                            -------------------
 *   begin                : June 6, 2007
 *   copyright            : (C) 2005 Kyle Spraggs - mod for phpBB3 keldrak@gmail.com
 *   email                : spiffyjr@gmail.com
 *
 ***************************************************************************/
 
/***************************************************************************
 *
 *   This program is free software; you can redistribute it and/or modify
 *   it under the terms of the GNU General Public License as published by
 *   the Free Software Foundation; either version 2 of the License, or
 *   (at your option) any later version.
 *
 ***************************************************************************/
 
// no direct access
defined('_VALID_RAID') or die('Restricted Access');
 
// check profile
// Specific to phpBB authentication only. Checks to see if a profile exists
// for phpBB user and if not, creates one.
function pVerify($user) {
	global $db_raid, $pConfig, $pConfig_auth;
 
	$userdata = array();
 
	// Check that it's not an anonymous user or a bot that's authenticated by phpBB3
	if ($user->data['user_id'] != '1' && $user->data['is_registered'] == 1 && $user->data['username'] != 'Anonymous' && empty($user->data['is_bot'])) {
		$sql['SELECT'] = '*';
		$sql['FROM'] = 'profile';
		if (empty($pConfig_auth['phpbb_bridge_on_id'])) {
			$sql['WHERE'] = 'user_email = '.$db_raid->quote_smart(utf8_decode($user->data['user_email']));
		} else {
			$sql['WHERE'] = 'profile_id='.intval($user->data['user_id']);
		}
 
		$result = $db_raid->set_query('select', $sql, __FILE__, __LINE__);
		unset($sql);
 
		// if nothing returns we need to create profile
		// otherwise they have a profile so let's set their ID
		// we'll just use the phpBB user id as the profile ID to simplify things
		if(($db_raid->sql_numrows($result) == 0)) {
			// are they a super user?
			$sql['SELECT'] = '*';
			$sql['FROM'] = 'profile';
			$sql['WHERE'] = 'profile_id>0';
 
			$check = $db_raid->set_query('select', $sql, __FILE__, __LINE__);
 
			// nothing returned, create profile
			$sql['INSERT'] = 'profile';
			$sql['VALUES'] = array(
								'profile_id'=>$user->data['user_id'],
								'user_email'=>utf8_decode($user->data['user_email']),
								'password'=>'',
								'group_id'=>(($db_raid->sql_numrows($check) == 0)?1:$pConfig['default_group']),
								'username'=>utf8_decode($user->data['username']),
								'join_date'=>time());
			$db_raid->set_query('insert', $sql, __FILE__, __LINE__);
			$userdata['group_id'] = $sql['VALUES']['group_id'];
		} else {
			// profile exists set group
			$data = $db_raid->sql_fetchrow($result);
			$userdata['group_id'] = $data['group_id'];
		}
		// setup session information
		$userdata['profile_id'] = $user->data['user_id'];
		$userdata['session_logged_in'] = 1;
		$userdata['username'] = utf8_decode($user->data['username']);
		$userdata['user_email'] = utf8_decode($user->data['user_email']);
		$userdata['timezone'] = '';
		$userdata['dst'] = '';
	}
	return $userdata;
}
 
// login function for phpBB3
function pLogin()
{
	global $pConfig_auth;
 
	// redirect to phpbb3's login form, with a return to this page.
	header("Location: " . $pConfig_auth['phpbb_url'].'/ucp.php?mode=login&redirect='.$_SERVER['PHP_SELF']);
	exit;
}
 
// logout function for phpBB
function pLogout()
{
	global $user;
// unset the session and remove all cookies
	foreach($_SESSION as $key=>$value)
		unset($_SESSION[$key]);
 
//    phpbb3 session kill
	$user->session_kill();
}
 
// define our auth type
if( isset( $_GET["phpbb_root_path"] ) || isset( $_POST["phpbb_root_path"]) || isset($_GET['pConfig_auth[phpbb_path]']) || isset($_POST['pConfig_auth[phpbb_path]']) ) {
	log_hack();
	die('Hack attempt.');
} else {
	$phpbb_root_path = $pConfig_auth['phpbb_path'];
	$phpEx = substr(strrchr(__FILE__, '.'), 1);
 
	// setup phpBB user integration
	define('IN_PHPBB', true);
 
	include_once($pConfig_auth['phpbb_path'].'common.php');
 
	global $user_group_table;
	$user_group_table = $table_prefix . "user_group";
 
	// Start session management - phpBB3
	$user->session_begin();
	$auth->acl($user->data);
	$user->setup();
 
	// remove the phpbb3 template variable.
	unset($template);
	$db_raid->sql_query('SET NAMES DEFAULT');
	$db_raid->sql_query('SET SESSION sql_mode=DEFAULT');
 
	$pMain = new Mainframe(pVerify($user));
}
?>