count(INSTALL_STEPS)) {
$step = 1;
}
// No jumping ahead: the later steps depend on what the earlier ones collected.
if ($locked === '' && $step > install_max_step()) {
$step = install_max_step();
}
if ($locked === '' && ($_SERVER['REQUEST_METHOD'] ?? 'GET') === 'POST' && !install_csrf_validate()) {
install_error('Invalid or expired form token. Please refresh the page and try again.');
header('Location: ' . install_url($step));
exit;
}
// A step handles its own POST and either advances or sets an error.
$stepFile = __DIR__ . '/steps/' . $step . '.php';
ob_start();
if ($locked === '') {
if (is_file($stepFile)) {
include $stepFile;
} else {
echo '