]> scripts.mit.edu Git - wizard.git/blob - wizard/app/wordpress.py
Properly register salt values as random.
[wizard.git] / wizard / app / wordpress.py
1 import os
2 import re
3 import logging
4 import distutils
5 import distutils.version
6 import urlparse
7 import hashlib
8 import sqlalchemy.exc
9
10 from wizard import app, install, resolve, sql, util
11 from wizard.app import php
12
13 def make_filename_regex_define(var):
14     """See :ref:`versioning config <seed>` for more information."""
15     return 'wp-config.php', php.re_define(var)
16
17 seed = util.dictmap(make_filename_regex_define, {
18     # these funny names are due to convention set by MediaWiki
19     'WIZARD_DBSERVER': 'DB_HOST',
20     'WIZARD_DBNAME': 'DB_NAME',
21     'WIZARD_DBUSER': 'DB_USER',
22     'WIZARD_DBPASSWORD': 'DB_PASSWORD',
23     'WIZARD_SECRETKEY': 'SECRET_KEY',
24     'WIZARD_AUTH_KEY': 'AUTH_KEY',
25     'WIZARD_SECURE_AUTH_KEY': 'SECURE_AUTH_KEY',
26     'WIZARD_LOGGED_IN_KEY': 'LOGGED_IN_KEY',
27     'WIZARD_NONCE_KEY': 'NONCE_KEY',
28     'WIZARD_AUTH_SALT': 'AUTH_SALT',
29     'WIZARD_SECURE_AUTH_SALT': 'SECURE_AUTH_SALT',
30     'WIZARD_LOGGED_IN_SALT': 'LOGGED_IN_SALT',
31     'WIZARD_NONCE_SALT': 'NONCE_SALT',
32     })
33
34 class Application(app.Application):
35     database = "mysql"
36     parametrized_files = ['wp-config.php'] + php.parametrized_files
37     extractors = app.make_extractors(seed)
38     extractors.update(php.extractors)
39     substitutions = app.make_substitutions(seed)
40     substitutions.update(php.substitutions)
41     install_schema = install.ArgSchema("db", "admin", "email", "title")
42     deprecated_keys = set(['WIZARD_SECRETKEY'])
43     random_keys = set([
44         'WIZARD_SECRETKEY',
45         'WIZARD_AUTH_KEY',
46         'WIZARD_SECURE_AUTH_KEY',
47         'WIZARD_LOGGED_IN_KEY',
48         'WIZARD_NONCE_KEY',
49         'WIZARD_AUTH_SALT',
50         'WIZARD_SECURE_AUTH_SALT',
51         'WIZARD_LOGGED_IN_SALT',
52         'WIZARD_NONCE_SALT',
53         ])
54     random_blacklist = set(['put your unique phrase here'])
55     def urlFromExtract(self, deployment):
56         try:
57             meta = sql.connect(deployment.dsn)
58             wp_options = meta.tables["wp_options"]
59             query = wp_options.select(wp_options.c.option_name == 'home')
60             return query.execute().fetchone()['option_value']
61         except sqlalchemy.exc.OperationalError:
62             return None
63     def download(self, version):
64         return "http://wordpress.org/wordpress-%s.tar.gz" % version
65     def checkConfig(self, deployment):
66         return os.path.isfile("wp-config.php")
67     def checkWeb(self, deployment):
68         return self.checkWebPage(deployment, "",
69                 outputs=["<html", "WordPress", "feed"],
70                 exclude=["Error establishing a database connection"])
71     def detectVersion(self, deployment):
72         return self.detectVersionFromFile("wp-includes/version.php", php.re_var("wp_version"))
73     def install(self, version, options):
74         util.soft_unlink("wp-config.php")
75
76         post_setup_config = {
77                 'dbhost': options.dsn.host,
78                 'uname': options.dsn.username,
79                 'dbname': options.dsn.database,
80                 'pwd': options.dsn.password,
81                 'prefix': '',
82                 'submit': 'Submit',
83                 'step': '2',
84                 }
85         post_install = {
86                 'weblog_title': options.title,
87                 'admin_email': options.email,
88                 'submit': 'Continue',
89                 'step': '2',
90                 # Version >= 3.0
91                 'user_name': options.admin_name,
92                 'admin_password': options.admin_password,
93                 'admin_password2': options.admin_password,
94                 }
95         old_mode = os.stat(".").st_mode
96         os.chmod(".", 0777) # XXX: squick squick
97
98         # we need to disable the wp_mail function in wp-includes/pluggable[-functions].php
99         pluggable_path = os.path.exists('wp-includes/pluggable.php') and 'wp-includes/pluggable.php' or 'wp-includes/pluggable-functions.php'
100         pluggable = open(pluggable_path, 'r').read()
101         wp_mail_noop = "<?php function wp_mail( $to, $subject, $message, $headers = '', $attachments = array() ) { /*noop*/ } ?> \n\n"
102         pluggable_file = open(pluggable_path,'w')
103         pluggable_file.write(wp_mail_noop)
104         pluggable_file.write(pluggable)
105         pluggable_file.close()
106
107         result = install.fetch(options, "wp-admin/setup-config.php?step=2", post_setup_config)
108         logging.debug("setup-config.php output\n\n" + result)
109         result = install.fetch(options, "wp-admin/install.php?step=2", post_install)
110         logging.debug("install.php output\n\n" + result)
111         os.chmod(".", old_mode)
112         if "Finished" not in result and "Success" not in result:
113             raise app.InstallFailure()
114
115         # not sure what to do about this
116         meta = sql.connect(options.dsn)
117         wp_options = meta.tables["wp_options"]
118         wp_options.update().where(wp_options.c.option_name == 'siteurl').values(option_value=options.web_path).execute()
119         wp_options.update().where(wp_options.c.option_name == 'home').values(option_value="http://%s%s" % (options.web_host, options.web_path)).execute() # XXX: what if missing leading slash; this should be put in a function
120
121         if version < distutils.version.LooseVersion("3.0"):
122             wp_users = meta.tables["wp_users"]
123             hashed_pass = hashlib.md5(options.admin_password).hexdigest()
124             wp_users.update().where(wp_users.c.ID == 1).values(user_login=options.admin_name,user_nicename=options.admin_name,display_name=options.admin_name,user_pass=hashed_pass).execute()
125             wp_usermeta = meta.tables["wp_usermeta"]
126             wp_usermeta.delete().where(wp_usermeta.c.user_id==1 and wp_usermeta.c.meta_key == "default_password_nag").execute()
127
128         # now we can restore the wp_mail function in wp-includes/pluggable[-functions].php
129         pluggable_file = open(pluggable_path,'w')
130         pluggable_file.write(pluggable)
131         pluggable_file.close()
132
133         # replace random variable stubs with real values
134         old_config = open('wp-config.php').read()
135         def replace_with_random(s):
136             return s.replace('put your unique phrase here', util.random_key(), 1)
137         config = replace_with_random(old_config)
138         while config != old_config:
139             old_config = config
140             config = replace_with_random(config)
141         open('wp-config.php', 'w').write(config)
142
143         php.ini_replace_vars()
144     def upgrade(self, d, version, options):
145         result = d.fetch("wp-admin/upgrade.php?step=1")
146         if "Upgrade Complete" not in result and "No Upgrade Required" not in result:
147             raise app.UpgradeFailure(result)
148     def backup(self, deployment, backup_dir, options):
149         app.backup_database(backup_dir, deployment)
150     def restore(self, deployment, backup_dir, options):
151         app.restore_database(backup_dir, deployment)
152     def remove(self, deployment, options):
153         app.remove_database(deployment)
154
155 Application.resolutions = {
156 'wp-config.php': [
157     ("""
158 <<<<<<<
159
160 /** WordPress absolute path to the Wordpress directory. */
161 |||||||
162 /** WordPress absolute path to the Wordpress directory. */
163 =======
164 /** Absolute path to the WordPress directory. */
165 >>>>>>>
166 """, [0])
167 ],
168 }