public-mirrors/composer
1
0
Fork 0
mirror of https://github.com/composer/composer synced 2025-05-09 00:22:53 +00:00
Code Activity

Fix grammar and match form of similar questions

Browse source
This commit is contained in:
Nick Booher 2017-05-18 14:15:27 -05:00 • committed by GitHub
parent 5efa503e4e
commit c79d4b6a9f
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

42
doc/faqs/how-to-install-composer-programmatically.md
View file

@ -1,42 +0,0 @@
# How to install Composer programmatically?
As noted on the download page, the installer script contains a
signature which changes when the installer code changes and as such
it should not be relied upon long term.
An alternative is to use this script which only works with unix utils:
```bash
#!/bin/sh
EXPECTED_SIGNATURE=$(wget -q -O - https://composer.github.io/installer.sig)
php -r "copy('https://getcomposer.org/installer', 'composer-setup.php');"
ACTUAL_SIGNATURE=$(php -r "echo hash_file('SHA384', 'composer-setup.php');")
if [ "$EXPECTED_SIGNATURE" != "$ACTUAL_SIGNATURE" ]
then
>&2 echo 'ERROR: Invalid installer signature'
rm composer-setup.php
exit 1
fi
php composer-setup.php --quiet
RESULT=$?
rm composer-setup.php
exit $RESULT
```
The script will exit with 1 in case of failure, or 0 on success, and is quiet
if no error occurs.
Alternatively if you want to rely on an exact copy of the installer you can fetch
a specific version from github's history. The commit hash should be enough to
give it uniqueness and authenticity as long as you can trust the GitHub servers.
For example:
```bash
wget https://raw.githubusercontent.com/composer/getcomposer.org/1b137f8bf6db3e79a38a5bc45324414a6b1f9df2/web/installer -O - -q | php -- --quiet
```
You may replace the commit hash by whatever the last commit hash is on
https://github.com/composer/getcomposer.org/commits/master