PEAK XOOPS - A powerful installer for web applications in englishin japanese

Archive | RSS |
XOOPS
XOOPS : A powerful installer for web applications
Poster : GIJOE on 2008-10-09 17:45:23 (15006 reads)

in englishin japanese

= Introduction =

It is hard to upload massive files into shared hosting services via FTP, as you know.
It often causes some missing uploading easily, and you will get many troubles after installing.

But, CGI will run with suExec under such shared hosting services.
This fact offers you to extract any archives via CGI.
You are always ower of extracted files.

And you can get the archive via wget.
(Note: the URI should not be depended on requests against the CGI. If you make such a CGI, it causes serious security holes)

Then, I've written a installer "Hodajuku Distribution for XCL2.1" (HD-1.0.2).
You can get it from here
http://www.peak.ne.jp/support/xoops/hd_installer.zip

= How to use =

- extract the zip
- upload hd_installer.cgi into DocumentRoot or its subfolder
- chmod 755 hd_installer.cgi
- access via web browser eg) http://www.example.com/hd_installer.cgi

It looks quite smooth.
You are free from:
- downloading the archive into your local computer
- uploading massive files into the server via ftp
- chmod uploads/cache/templates_c/mainfile.php

Note(1):
You must test the CGI at shared servers.
Because the CGI cannot run with almost local environment.
eg)
xampp: there is no bash
local linux: suExec disabled (perhaps)

Note(2):
You never forget removing hd_installer.cgi just after installation.

= Examination =

If you are interested this kind of installer, try to hack hd_installer.cgi
I wrote the script easy to hack as possible.

Just by modifying some lines of 'declare' in the top of the script, you can make "ImpressCMS Installer" or "XOOPS2.3 Installer".

The script is under licensed "New BSD".

This system must be really useful as "updater" of modules or the core.
As the updater can use information from mainfile.php, it might be moderately secure.

I'll make such a updating CGI by bash


Related articles
Printer friendly page Send this story to a friend

Comments list

GIJOE  Posted on 2008/10/14 17:48
hi gigamaster.

Quote:

It made me remember some script installer I tried with Mikhail on some free hosts ans shared hosting accounts.
What kind of "script"?

The point of my idea is to write the script by "bash".
Because "bash" must be installed into all Unix/Linux system.

Try it at your hosting server.
You can find this script's value, easily
GIJOE  Posted on 2008/10/14 17:42
Quote:

tohokuaiki wrotes:
ロリポはwgetが無いのか、
cannot download http://downloads.sourceforge.net/hodajuku/hd_full_1_0_2.tar.gz
と言われました。
*追記
which curlしたら/usr/bin/curl だったので、curlはあるようです。fetchするプログラムを分岐すると対応サーバが増えそうです。
/*追記
wgetのない環境なんてあるんですね。
さっそくwgetでダメだった時に、curlを試すコードにしてみました。
しかし wget がダメなら curl を試す、とか、まんまyumっぽいですね(笑)。

Quote:
sakuraは/usr/local/bin/bashだったようで、これを書き直したら問題なく行
けました。私が試したのはhttp://www.sakura.ne.jp/rentalserver/pro/
の高めのコースですが。
sakuraは、それはそれで特別なんですよね。
PHPも、ユーザ権限でのみ動作しているわけで。

sakuraみたいなサーバばかりなら、それこそ普通にPHPでも、Webアプリケーションのファイル群を展開するインストーラが書けてしまいますね。(だとしたらどんなに楽か)
gigamaster  Posted on 2008/10/13 21:11
It made me remember some script installer I tried with Mikhail on some free hosts ans shared hosting accounts.
Finally we gave up due to security and server configs
issues.

But still very interesting solution ^^
wikeyIMS  Posted on 2008/10/11 20:42
Very nice! Now you can create your special flavoured CMS Installer!

Thanks a lot for GIJOE being a really generous part of the XOOPS Community!
tohokuaiki  Posted on 2008/10/10 10:55 | Last modified
GREAT!!!!!

これは、すごい。XREAで試してみました。O.Kでした。

ロリポはwgetが無いのか、
cannot download http://downloads.sourceforge.net/hodajuku/hd_full_1_0_2.tar.gz
と言われました。
*追記
which curlしたら/usr/bin/curl だったので、curlはあるようです。fetchするプログラムを分岐すると対応サーバが増えそうです。
/*追記

sakuraは/usr/local/bin/bashだったようで、これを書き直したら問題なく行けました。私が試したのは
http://www.sakura.ne.jp/rentalserver/pro/
の高めのコースですが。

これは本当に素晴らしいです。
Login
Username or e-mail:

Password:

Remember Me

Lost Password?

Register now!