Added patterns and made root password optional
Added some validation to install form handler

Use is_email(), is_url(), empty(), preg_match(), etc as needed
Validation for $_POST['install']['connect'] too

Need to determine a way of distinguishing between not set and not valid.
Include ['connect'] validation with the rest of install form
Use radio instead of checkbox for robots.