From c24d6a52b6c10c0f058d42a731d1031dbcc9183f Mon Sep 17 00:00:00 2001
From: Bram Prieshof <bram@bprieshof.nl>
Date: Tue, 13 Aug 2019 18:55:13 +0000
Subject: [PATCH] Bestanden uploaden naar ''

---
 SYSDesk.sql       |  13 ++++
 config.php.sample |  16 ++++
 setup.php         | 183 ++++++++++++++++++++++++++++++++++++++++++++++
 3 files changed, 212 insertions(+)
 create mode 100644 SYSDesk.sql
 create mode 100644 config.php.sample
 create mode 100644 setup.php

diff --git a/SYSDesk.sql b/SYSDesk.sql
new file mode 100644
index 0000000..0ba7c32
--- /dev/null
+++ b/SYSDesk.sql
@@ -0,0 +1,13 @@
+-- phpMyAdmin SQL Dump
+-- version 4.9.0.1
+-- https://www.phpmyadmin.net/
+--
+-- Host: localhost
+-- Generation Time: Aug 13, 2019 at 05:16 PM
+-- Server version: 10.2.25-MariaDB-cll-lve
+-- PHP Version: 5.5.38
+
+SET SQL_MODE = "NO_AUTO_VALUE_ON_ZERO";
+SET AUTOCOMMIT = 0;
+START TRANSACTION;
+SET time_zone = "+00:00";
diff --git a/config.php.sample b/config.php.sample
new file mode 100644
index 0000000..0791e7f
--- /dev/null
+++ b/config.php.sample
@@ -0,0 +1,16 @@
+<?php
+/* Database credentials. Assuming you are running MySQL
+server with default setting (user 'root' with no password) */
+define('DB_SERVER', 'localhost');
+define('DB_NAME', 'DBName');
+define('DB_USERNAME', 'DBUser');
+define('DB_PASSWORD', 'DBPass');
+ 
+/* Attempt to connect to MySQL database */
+$link = mysqli_connect(DB_SERVER, DB_USERNAME, DB_PASSWORD, DB_NAME);
+ 
+// Check connection
+if($link === false){
+    die("ERROR: Could not connect. " . mysqli_connect_error());
+}
+?>
\ No newline at end of file
diff --git a/setup.php b/setup.php
new file mode 100644
index 0000000..c921c9e
--- /dev/null
+++ b/setup.php
@@ -0,0 +1,183 @@
+<?php
+//NOTE That sample file need to be in the same folder and be called "config.php.sample"
+
+//seting Vars
+
+
+//Location of new config file
+$configfilePath  = 'config.php';
+//name of SQL File
+$sqlfileName =  'SYSDesk.sql';
+
+if(isset($_POST['submits1'])) 
+{ 
+    //You have to get the form data
+    $DBName = $_POST["DBName"]; 
+    $DBUser = $_POST["DBUser"];
+    $DBPass = $_POST["DBPassword"];
+    
+    echo "$DBname";
+    echo "$DBUser";
+    echo "$DBpass";
+    //Open your .txt file
+    $filecontent = file_get_contents("config.php.sample");
+    $filecontent = str_replace("DBName","$DBName",$filecontent);
+    $filecontent = str_replace("DBUser","$DBUser",$filecontent);
+    $filecontent = str_replace("DBPass","$DBPass",$filecontent);
+    $file = fopen("$configfilePath", 'w+'); 
+    ftruncate($file, 0);
+    fwrite($file , $filecontent);
+    fclose($file);
+    die(header("Location: setup.php?step=2"));
+}
+
+
+if(isset($_POST['submits2'])) 
+{ 
+require_once "$configfilePath";
+ $username = $password = $confirm_password = "";
+$username_err = $password_err = $confirm_password_err = "";
+    // Validate username
+    if(empty(trim($_POST["username"]))){
+        $username_err = "Please enter a username.";
+    } else{
+        // Prepare a select statement
+        $sql = "SELECT id FROM users WHERE username = ?";
+        
+        if($stmt = mysqli_prepare($link, $sql)){
+            // Bind variables to the prepared statement as parameters
+            mysqli_stmt_bind_param($stmt, "s", $param_username);
+            
+            // Set parameters
+            $param_username = trim($_POST["username"]);
+            
+            // Attempt to execute the prepared statement
+            if(mysqli_stmt_execute($stmt)){
+                /* store result */
+                mysqli_stmt_store_result($stmt);
+                
+                if(mysqli_stmt_num_rows($stmt) == 1){
+                    $username_err = "This username is already taken.";
+                } else{
+                    $username = trim($_POST["username"]);
+                }
+            } else{
+                echo "Oops! Something went wrong. Please try again later.";
+            }
+        }
+         
+        // Close statement
+        mysqli_stmt_close($stmt);
+    }
+    
+    // Validate password
+    if(empty(trim($_POST["password"]))){
+        $password_err = "Please enter a password.";     
+    } elseif(strlen(trim($_POST["password"])) < 6){
+        $password_err = "Password must have atleast 6 characters.";
+    } else{
+        $password = trim($_POST["password"]);
+    }
+    
+    // Validate confirm password
+    if(empty(trim($_POST["confirm_password"]))){
+        $confirm_password_err = "Please confirm password.";     
+    } else{
+        $confirm_password = trim($_POST["confirm_password"]);
+        if(empty($password_err) && ($password != $confirm_password)){
+            $confirm_password_err = "Password did not match.";
+        }
+    }
+    if(empty($username_err) && empty($password_err) && empty($confirm_password_err)){
+        $sql = "INSERT INTO users (username, password) VALUES (?, ?)";
+        if($stmt = mysqli_prepare($link, $sql)){
+            mysqli_stmt_bind_param($stmt, "ss", $param_username, $param_password);
+            $param_username = $username;
+            $param_password = password_hash($password, PASSWORD_DEFAULT);
+            if(mysqli_stmt_execute($stmt)){
+                header("location: setup.php?step=5");
+            } else{
+                echo "Something went wrong. Please try again later.";
+            }
+        }
+        mysqli_stmt_close($stmt);
+    }
+    mysqli_close($link);
+}
+
+
+$step = isset( $_GET['step'] ) ? (int) $_GET['step'] : 1;
+?>
+
+<?php
+$serv = $_SERVER['PHP_SELF'];
+
+if ($step == '1') {
+echo"Setup Database connection";
+echo"<form method='post' action='$serv'>";
+    echo "DBName:<br><input type='text' name='DBName' ><br>";
+        echo "DBUser:<br><input type='text' name='DBUser' ><br>";
+    echo "DBPassword:<br><input type='text' name='DBPassword' ><br>";
+   echo "<input type='submit' name='submits1' value='Create config' ><br>";
+echo "</form>";
+}
+
+if ($step == '2') {
+echo "<a href='setup.php?step=1'>If conection faild click here</a><br>";
+require_once "$configfilePath";
+mysqli_close($link);
+header("Location: setup.php?step=3");
+}
+
+
+if ($step == '3') {
+echo "Populating DB";
+require_once "$configfilePath";
+    $templine = '';
+    $lines = file($sqlfileName);
+    $error = '';
+    foreach ($lines as $line){
+        if(substr($line, 0, 2) == '--' || $line == ''){
+            continue;
+        }
+        $templine .= $line;
+        if (substr(trim($line), -1, 1) == ';'){
+            if(!$link->query($templine)){
+                $error .= 'Error performing query "<b>' . $templine . '</b>": ' . $link->error . '<br /><br />';
+            }
+            $templine = '';
+        }
+    }
+header("Location: setup.php?step=4");
+}
+
+
+if ($step == '4') {
+echo"<p>Please fill this form to create an account.</p>";
+echo"<form method='post' action='setup.php?step=4'>";
+            echo"<div class='form-group ''>";
+                echo"<label>Username</label><br>";
+                echo"<input type='text' name='username' class='form-control' value='$username'>";
+                echo"<span class='help-block'> $username_err </span>";
+            echo"</div>";
+            echo"<div class='form-group (!empty($password_err)) ? 'has-error' : '''>";
+                echo"<label>Password</label><br>";
+                echo"<input type='password' name='password' class='form-control' value='$password'>";
+                echo"<span class='help-block'> $password_err</span>";
+            echo"</div>";
+            echo"<div class='form-group  (!empty($confirm_password_err)) 'has-error' : '''>";
+                echo"<label>Confirm Password</label><br>";
+                echo "<input type='password' name='confirm_password' class='form-control' value='$confirm_password'>";
+                echo"<span class='help-block'> $confirm_password_err </span>";
+            echo"</div>";
+                echo "<input type='submit' name='submits2' value='Create User' ><br>";
+echo "</form>";
+}
+
+if ($step == '5') {
+echo "Setup done !";
+echo"<br>";
+echo "Please remove setup.php, config.php.sample and your .SQL file";
+}
+
+?>
\ No newline at end of file