install.php

<?php
ini_set("allow_url_fopen", 1);
session_start();
error_reporting(E_ALL); //Désactive les erreur

if (isset($_SESSION["user_id"])) {
	$depedencies = 0;
}

// On récupère l'ip
if (!empty($_SERVER['HTTP_CLIENT_IP'])) {
    $ip = $_SERVER['HTTP_CLIENT_IP'];
} elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) {
    $ip = $_SERVER['HTTP_X_FORWARDED_FOR'];
} else {
    $ip = $_SERVER['REMOTE_ADDR'];
}

if (isset($_GET["session"])) {
	$json = file_get_contents("https://api.vbcms.net/auth/v1/checkToken/?token=".$_GET["session"]."&ip=".urlencode($ip));
	$jsonData = json_decode($json);
	foreach ($jsonData as $key => $value) {
		$_SESSION[$key] = $value;
	}
	header('Location: install.php');
} elseif (isset($_GET["testBdd"]) AND !empty($_GET["testBdd"])) {
	$bddInfos = json_decode($_GET["testBdd"]);
	$bddHost = $bddInfos[0]; //Adresse du serveur MySQL
	$bddName = $bddInfos[1]; //Nom de la base de donnée
	$bddUser = $bddInfos[2]; //Utilisateur
	$bddMdp = $bddInfos[3]; //Mot de passe

	$bddError = false;
	try {
	    $bddConn = new PDO("mysql:host=$bddHost;dbname=$bddName", $bddUser, $bddMdp); //Test de la connexion
	} catch (PDOException $e) {
		$bddError = true;
		print "Erreur !: " . $e->getMessage();
		die();
	}
	if (!$bddError) {
		$savedParameters = file_get_contents("tempInstallConfig");
		if ($savedParameters) {
			$savedParameters = json_decode($savedParameters);
			$savedParameters[0] = $bddInfos[0];
			$savedParameters[1] = $bddInfos[1];
			$savedParameters[2] = $bddInfos[2];
			$savedParameters[3] = $bddInfos[3];
			file_put_contents("tempInstallConfig", json_encode($savedParameters));
		} else {
			file_put_contents("tempInstallConfig", json_encode($bddInfos));
		}
	}
} elseif (isset($_GET["saveWebsiteConfig"]) AND !empty($_GET["saveWebsiteConfig"])){
	$websiteConfig = json_decode($_GET["saveWebsiteConfig"]);
	$savedParameters = file_get_contents("tempInstallConfig");
	$savedParameters = json_decode($savedParameters);
	$savedParameters[4] = $websiteConfig[0];
	$savedParameters[5] = $websiteConfig[1];
	$savedParameters[6] = $websiteConfig[2];
	$savedParameters[7] = $websiteConfig[3];
	file_put_contents("tempInstallConfig", json_encode($savedParameters));

} elseif (isset($_GET["download"])){
	if (file_exists(".htaccess")) {
		echo "finished";
	} else {
		$versionInfos = file_get_contents("https://api.vbcms.net/updater/lastest?serverId=".$_SESSION["serverId"]."&key=".$_SESSION["liscenceKey"]."&canal=dev");
		$versionInfos = json_decode($versionInfos, true);
		//echo $versionInfos["downloadLink"]."?serverId=".$_SESSION["serverId"]."&key=".$_SESSION["liscenceKey"];