update.php 15 KB
Newer Older
1
<?php
Dries's avatar
   
Dries committed
2
// $Id$
Dries's avatar
   
Dries committed
3

4
5
6
/**
 * Root directory of Drupal installation.
 */
7
define('DRUPAL_ROOT', getcwd());
8

Dries's avatar
   
Dries committed
9
10
11
12
/**
 * @file
 * Administrative page for handling updates from one Drupal version to another.
 *
13
 * Point your browser to "http://www.example.com/update.php" and follow the
Dries's avatar
   
Dries committed
14
15
 * instructions.
 *
16
17
18
19
20
 * If you are not logged in using either the site maintenance account or an
 * account with the "Administer software updates" permission, you will need to
 * modify the access check statement inside your settings.php file. After
 * finishing the upgrade, be sure to open settings.php again, and change it
 * back to its original state!
Dries's avatar
   
Dries committed
21
 */
Dries's avatar
   
Dries committed
22

23
24
25
26
27
28
/**
 * Global flag to identify update.php run, and so avoid various unwanted
 * operations, such as hook_init() and hook_exit() invokes, css/js preprocessing
 * and translation, and solve some theming issues. This flag is checked on several
 * places in Drupal code (not just update.php).
 */
29
30
define('MAINTENANCE_MODE', 'update');

31
function update_selection_page() {
32
  drupal_set_title('Drupal database update');
33
  $output = drupal_render(drupal_get_form('update_script_selection_form'));
34

35
36
  update_task_list('select');

37
38
39
  return $output;
}

40
function update_script_selection_form($form, &$form_state) {
41
  $count = 0;
42
  $form['start'] = array(
43
44
45
    '#tree' => TRUE,
    '#type' => 'fieldset',
    '#collapsed' => TRUE,
46
    '#collapsible' => TRUE,
47
  );
48
49
50
51

  // Ensure system.module's updates appear first
  $form['start']['system'] = array();

52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
  $updates = update_get_update_list();
  foreach ($updates as $module => $update) {
    if (!isset($update['start'])) {
      $form['start'][$module] = array(
        '#title' => $module,
        '#item'  => $update['warning'],
        '#prefix' => '<div class="warning">',
        '#suffix' => '</div>',
      );
      continue;
    }
    if (!empty($update['pending'])) {
      $form['start'][$module] = array(
        '#type' => 'hidden',
        '#value' => $update['start'],
      );
      $form['start'][$module . '_updates'] = array(
69
        '#markup' => theme('item_list', array('items' => $update['pending'], 'title' => $module . ' module')),
70
71
72
73
      );
    }
    if (isset($update['pending'])) {
      $count = $count + count($update['pending']);
74
75
76
    }
  }

77
  if (empty($count)) {
78
79
80
    drupal_set_message(t('No pending updates.'));
    unset($form);
    $form['links'] = array(
81
      '#markup' => theme('item_list', array('items' => update_helpful_links())),
82
83
84
85
86
87
88
    );
  }
  else {
    $form['help'] = array(
      '#markup' => '<p>The version of Drupal you are updating from has been automatically detected.</p>',
      '#weight' => -5,
    );
89
    $form['start']['#title'] = format_plural($count, '1 pending update', '@count pending updates');
90
91
92
93
94
95
    $form['has_js'] = array(
      '#type' => 'hidden',
      '#default_value' => FALSE,
    );
    $form['submit'] = array(
      '#type' => 'submit',
96
      '#value' => 'Apply pending updates',
97
98
    );
  }
99
  return $form;
100
101
}

102
function update_helpful_links() {
103
  // NOTE: we can't use l() here because the URL would point to 'update.php?q=admin'.
104
  $links[] = '<a href="' . base_path() . '">Front page</a>';
105
  $links[] = '<a href="' . base_path() . '?q=admin">Administration pages</a>';
106
107
108
109
110
111
  return $links;
}

function update_results_page() {
  drupal_set_title('Drupal database update');
  $links = update_helpful_links();
112

113
  update_task_list();
114
  // Report end result
115
  if (module_exists('dblog')) {
116
    $log_message = ' All errors have been <a href="' . base_path() . '?q=admin/reports/dblog">logged</a>.';
117
118
119
120
121
  }
  else {
    $log_message = ' All errors have been logged.';
  }

122
  if ($_SESSION['update_success']) {
123
    $output = '<p>Updates were attempted. If you see no failures below, you may proceed happily to the <a href="' . base_path() . '?q=admin">administration pages</a>. Otherwise, you may need to update your database manually.' . $log_message . '</p>';
124
125
  }
  else {
126
    list($module, $version) = array_pop(reset($_SESSION['updates_remaining']));
127
    $output = '<p class="error">The update process was aborted prematurely while running <strong>update #' . $version . ' in ' . $module . '.module</strong>.' . $log_message;
128
129
130
131
    if (module_exists('dblog')) {
      $output .= ' You may need to check the <code>watchdog</code> database table manually.';
    }
    $output .= '</p>';
132
133
  }

134
135
  if (!empty($GLOBALS['update_free_access'])) {
    $output .= "<p><strong>Reminder: don't forget to set the <code>\$update_free_access</code> value in your <code>settings.php</code> file back to <code>FALSE</code>.</strong></p>";
136
  }
137

138
  $output .= theme('item_list', array('items' => $links));
139
140

  // Output a list of queries executed
141
  if (!empty($_SESSION['update_results'])) {
142
    $output .= '<div id="update-results">';
143
    $output .= '<h2>The following updates returned messages</h2>';
144
    foreach ($_SESSION['update_results'] as $module => $updates) {
145
      $output .= '<h3>' . $module . ' module</h3>';
146
      foreach ($updates as $number => $queries) {
147
        if ($number != '#abort') {
148
          $messages = array();
149
          foreach ($queries as $query) {
150
151
152
153
            // If there is no message for this update, don't show anything.
            if (empty($query['query'])) {
              continue;
            }
154
            if ($query['success']) {
155
              $messages[] = '<li class="success">' . $query['query'] . '</li>';
156
157
            }
            else {
158
              $messages[] = '<li class="failure"><strong>Failed:</strong> ' . $query['query'] . '</li>';
159
            }
160
          }
161
162
163
164

          if ($messages) {
            $output .= '<h4>Update #' . $number . "</h4>\n";
            $output .= '<ul>' . implode("\n", $messages) . "</ul>\n";
165
166
167
168
169
170
171
          }
        }
        $output .= '</ul>';
      }
    }
    $output .= '</div>';
  }
172
173
  unset($_SESSION['update_results']);
  unset($_SESSION['update_success']);
174

175
  return $output;
176
177
}

178
function update_info_page() {
179
180
  // Change query-strings on css/js files to enforce reload for all users.
  _drupal_flush_css_js();
181
182
  // Flush the cache of all data for the update status module.
  if (db_table_exists('cache_update')) {
183
    cache_clear_all('*', 'cache_update', TRUE);
184
  }
185

186
  update_task_list('info');
Steven Wittens's avatar
Steven Wittens committed
187
  drupal_set_title('Drupal database update');
188
  $token = drupal_get_token('update');
189
190
191
192
  $output = '<p>Use this utility to update your database whenever a new release of Drupal or a module is installed.</p><p>For more detailed information, see the <a href="http://drupal.org/node/258">Installation and upgrading handbook</a>. If you are unsure what these terms mean you should probably contact your hosting provider.</p>';
  $output .= "<ol>\n";
  $output .= "<li><strong>Back up your database</strong>. This process will change your database values and in case of emergency you may need to revert to a backup.</li>\n";
  $output .= "<li><strong>Back up your code</strong>. Hint: when backing up module code, do not leave that backup in the 'modules' or 'sites/*/modules' directories as this may confuse Drupal's auto-discovery mechanism.</li>\n";
193
  $output .= '<li>Put your site into <a href="' . base_path() . '?q=admin/config/development/maintenance">maintenance mode</a>.</li>' . "\n";
194
195
196
  $output .= "<li>Install your new files in the appropriate location, as described in the handbook.</li>\n";
  $output .= "</ol>\n";
  $output .= "<p>When you have performed the steps above, you may proceed.</p>\n";
197
  $output .= '<form method="post" action="update.php?op=selection&amp;token=' . $token . '"><p><input type="submit" value="Continue" class="form-submit" /></p></form>';
198
  $output .= "\n";
199
200
201
202
  return $output;
}

function update_access_denied_page() {
203
204
  drupal_add_http_header('403 Forbidden');
  watchdog('access denied', 'update.php', NULL, WATCHDOG_WARNING);
205
  drupal_set_title('Access denied');
206
  return '<p>Access denied. You are not authorized to access this page. Log in using either an account with the <em>administer software updates</em> permission or the site maintenance account (the account you created during installation). If you cannot log in, you will have to edit <code>settings.php</code> to bypass this access check. To do this:</p>
207
<ol>
208
209
210
 <li>With a text editor find the settings.php file on your system. From the main Drupal directory that you installed all the files into, go to <code>sites/your_site_name</code> if such directory exists, or else to <code>sites/default</code> which applies otherwise.</li>
 <li>There is a line inside your settings.php file that says <code>$update_free_access = FALSE;</code>. Change it to <code>$update_free_access = TRUE;</code>.</li>
 <li>As soon as the update.php script is done, you must change the settings.php file back to its original form with <code>$update_free_access = FALSE;</code>.</li>
211
 <li>To avoid having this problem in the future, remember to log in to your website using either an account with the <em>administer software updates</em> permission or the site maintenance account (the account you created during installation) before you backup your database at the beginning of the update process.</li>
212
</ol>';
213
}
214

215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
/**
 * Determines if the current user is allowed to run update.php.
 *
 * @return
 *   TRUE if the current user should be granted access, or FALSE otherwise.
 */
function update_access_allowed() {
  global $update_free_access, $user;

  // Allow the global variable in settings.php to override the access check.
  if (!empty($update_free_access)) {
    return TRUE;
  }
  // Calls to user_access() might fail during the Drupal 6 to 7 update process,
  // so we fall back on requiring that the user be logged in as user #1.
  try {
    require_once drupal_get_path('module', 'user') . '/user.module';
    return user_access('administer software updates');
  }
  catch (Exception $e) {
    return ($user->uid == 1);
  }
}

239
240
241
242
243
244
/**
 * Add the update task list to the current page.
 */
function update_task_list($active = NULL) {
  // Default list of tasks.
  $tasks = array(
245
    'requirements' => 'Verify requirements',
246
    'info' => 'Overview',
247
    'select' => 'Review updates',
248
249
250
251
    'run' => 'Run updates',
    'finished' => 'Review log',
  );

252
  drupal_add_region_content('sidebar_first', theme('task_list', array('items' => $tasks, 'active' => $active)));
253
254
}

255
/**
256
257
 * Returns (and optionally stores) extra requirements that only apply during
 * particular parts of the update.php process.
258
 */
259
260
261
262
function update_extra_requirements($requirements = NULL) {
  static $extra_requirements = array();
  if (isset($requirements)) {
    $extra_requirements += $requirements;
263
  }
264
  return $extra_requirements;
265
266
267
}

/**
268
 * Check update requirements and report any errors.
269
 */
270
271
272
273
274
275
276
277
278
279
function update_check_requirements() {
  // Check the system module and update.php requirements only.
  $requirements = module_invoke('system', 'requirements', 'update');
  $requirements += update_extra_requirements();
  $severity = drupal_requirements_severity($requirements);

  // If there are issues, report them.
  if ($severity == REQUIREMENT_ERROR) {
    update_task_list('requirements');
    drupal_set_title('Requirements problem');
280
    $status_report = theme('status_report', array('requirements' => $requirements));
281
    $status_report .= 'Check the error messages and <a href="' . check_url(request_uri()) . '">try again</a>.';
282
    print theme('update_page', array('content' => $status_report));
283
    exit();
284
  }
285
286
}

287
// Some unavoidable errors happen because the database is not yet up-to-date.
288
// Our custom error handler is not yet installed, so we just suppress them.
289
290
ini_set('display_errors', FALSE);

291
292
// We prepare a minimal bootstrap for the update requirements check to avoid
// reaching the PHP memory limit.
293
require_once DRUPAL_ROOT . '/includes/bootstrap.inc';
294
require_once DRUPAL_ROOT . '/includes/update.inc';
295
296
require_once DRUPAL_ROOT . '/includes/common.inc';
require_once DRUPAL_ROOT . '/includes/entity.inc';
297
require_once DRUPAL_ROOT . '/includes/unicode.inc';
298
update_prepare_d7_bootstrap();
299

300
301
// Determine if the current user has access to run update.php.
drupal_bootstrap(DRUPAL_BOOTSTRAP_SESSION);
302

303
304
305
306
// Only allow the requirements check to proceed if the current user has access
// to run updates (since it may expose sensitive information about the site's
// configuration).
$op = isset($_REQUEST['op']) ? $_REQUEST['op'] : '';
307
if (empty($op) && update_access_allowed()) {
308
309
310
  require_once DRUPAL_ROOT . '/includes/install.inc';
  require_once DRUPAL_ROOT . '/includes/file.inc';
  require_once DRUPAL_ROOT . '/modules/system/system.install';
311
312

  // Load module basics.
313
  include_once DRUPAL_ROOT . '/includes/module.inc';
314
  $module_list['system']['filename'] = 'modules/system/system.module';
315
  module_list(TRUE, FALSE, FALSE, $module_list);
316
317
  drupal_load('module', 'system');

318
319
320
321
  // Reset the module_implements() cache so that any new hook implementations
  // in updated code are picked up.
  module_implements('', FALSE, TRUE);

322
  // Set up $language, since the installer components require it.
323
  drupal_language_initialize();
324
325
326
327
328

  // Set up theme system for the maintenance page.
  drupal_maintenance_theme();

  // Check the update requirements for Drupal.
329
  update_check_requirements();
330

331
  // Redirect to the update information page if all requirements were met.
332
333
  install_goto('update.php?op=info');
}
334

335
336
337
338
339
340
341
342
343
344
// update_fix_d7_requirements() needs to run before bootstrapping beyond path.
// So bootstrap to DRUPAL_BOOTSTRAP_LANGUAGE then include unicode.inc.

drupal_bootstrap(DRUPAL_BOOTSTRAP_LANGUAGE);
include_once DRUPAL_ROOT . '/includes/unicode.inc';

update_fix_d7_requirements();

// Now proceed with a full bootstrap.

345
drupal_bootstrap(DRUPAL_BOOTSTRAP_FULL);
Steven Wittens's avatar
Steven Wittens committed
346
drupal_maintenance_theme();
347

348
349
350
351
// Turn error reporting back on. From now on, only fatal errors (which are
// not passed through the error handler) will cause a message to be printed.
ini_set('display_errors', TRUE);

352
// Only proceed with updates if the user is allowed to run them.
353
if (update_access_allowed()) {
354

355
356
  include_once DRUPAL_ROOT . '/includes/install.inc';
  include_once DRUPAL_ROOT . '/includes/batch.inc';
357
  drupal_load_updates();
Dries's avatar
   
Dries committed
358

359
  update_fix_compatibility();
360

361
362
  $op = isset($_REQUEST['op']) ? $_REQUEST['op'] : '';
  switch ($op) {
363
    // update.php ops
364

365
    case 'selection':
366
367
368
369
      if (isset($_GET['token']) && $_GET['token'] == drupal_get_token('update')) {
        $output = update_selection_page();
        break;
      }
370

371
    case 'Apply pending updates':
372
      if (isset($_GET['token']) && $_GET['token'] == drupal_get_token('update')) {
373
        update_batch($_POST['start'], $base_url . '/update.php?op=results', $base_url . '/update.php');
374
375
376
377
378
        break;
      }

    case 'info':
      $output = update_info_page();
379
380
      break;

381
382
    case 'results':
      $output = update_results_page();
383
384
      break;

385
    // Regular batch ops : defer to batch processing API
386
    default:
387
388
      update_task_list('run');
      $output = _batch_page();
389
      break;
Kjartan's avatar
Kjartan committed
390
391
392
  }
}
else {
393
  $output = update_access_denied_page();
394
}
395
if (isset($output) && $output) {
396
397
  // Explictly start a session so that the update.php token will be accepted.
  drupal_session_start();
398
399
  // We defer the display of messages until all updates are done.
  $progress_page = ($batch = batch_get()) && isset($batch['running']);
400
  print theme('update_page', array('content' => $output, 'show_messages' => !$progress_page));
401
}