1
0

Bootstrap.php 10 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338
  1. <?php
  2. use PrivateBin\Persistence\ServerSalt;
  3. error_reporting(E_ALL | E_STRICT);
  4. // change this, if your php files and data is outside of your webservers document root
  5. if (!defined('PUBLIC_PATH')) {
  6. define('PUBLIC_PATH', '..');
  7. }
  8. if (!defined('PATH')) {
  9. define('PATH', '..' . DIRECTORY_SEPARATOR);
  10. }
  11. if (!defined('CONF')) {
  12. define('CONF', PATH . 'cfg' . DIRECTORY_SEPARATOR . 'conf.php');
  13. }
  14. if (!defined('CONF_SAMPLE')) {
  15. define('CONF_SAMPLE', PATH . 'cfg' . DIRECTORY_SEPARATOR . 'conf.sample.php');
  16. }
  17. require PATH . 'vendor/autoload.php';
  18. Helper::updateSubresourceIntegrity();
  19. class Helper
  20. {
  21. /**
  22. * example ID of a paste
  23. *
  24. * @var string
  25. */
  26. private static $pasteid = '5e9bc25c89fb3bf9';
  27. /**
  28. * example paste
  29. *
  30. * @var array
  31. */
  32. private static $paste = array(
  33. 'data' => '{"iv":"EN39/wd5Nk8HAiSG2K5AsQ","v":1,"iter":1000,"ks":128,"ts":64,"mode":"ccm","adata":"","cipher":"aes","salt":"QKN1DBXe5PI","ct":"8hA83xDdXjD7K2qfmw5NdA"}',
  34. 'attachment' => '{"iv":"Pd4pOKWkmDTT9uPwVwd5Ag","v":1,"iter":1000,"ks":128,"ts":64,"mode":"ccm","adata":"","cipher":"aes","salt":"ZIUhFTliVz4","ct":"6nOCU3peNDclDDpFtJEBKA"}',
  35. 'attachmentname' => '{"iv":"76MkAtOGC4oFogX/aSMxRA","v":1,"iter":1000,"ks":128,"ts":64,"mode":"ccm","adata":"","cipher":"aes","salt":"ZIUhFTliVz4","ct":"b6Ae/U1xJdsX/+lATud4sQ"}',
  36. 'meta' => array(
  37. 'formatter' => 'plaintext',
  38. 'postdate' => 1344803344,
  39. 'opendiscussion' => true,
  40. ),
  41. );
  42. /**
  43. * example ID of a comment
  44. *
  45. * @var string
  46. */
  47. private static $commentid = '5a52eebf11c4c94b';
  48. /**
  49. * example comment
  50. *
  51. * @var array
  52. */
  53. private static $comment = array(
  54. 'data' => '{"iv":"Pd4pOKWkmDTT9uPwVwd5Ag","v":1,"iter":1000,"ks":128,"ts":64,"mode":"ccm","adata":"","cipher":"aes","salt":"ZIUhFTliVz4","ct":"6nOCU3peNDclDDpFtJEBKA"}',
  55. 'meta' => array(
  56. 'nickname' => '{"iv":"76MkAtOGC4oFogX/aSMxRA","v":1,"iter":1000,"ks":128,"ts":64,"mode":"ccm","adata":"","cipher":"aes","salt":"ZIUhFTliVz4","ct":"b6Ae/U1xJdsX/+lATud4sQ"}',
  57. 'vizhash' => 'data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAIAAACQkWg2AAABGUlEQVQokWOsl5/94983CNKQMjnxaOePf98MeKwPfNjkLZ3AgARab6b9+PeNEVnDj3/ff/z7ZiHnzsDA8Pv7H2TVPJw8EAYLAwb48OaVgIgYKycLsrYv378wMDB8//qdCVMDRA9EKSsnCwRBxNsepaLboMFlyMDAICAi9uHNK24GITQ/MDAwoNhgIGMLtwGrzegaLjw5jMz9+vUdnN17uwDCQDhJgk0O07yvX9+teDX1x79v6DYIsIjgcgMaYGFgYOBg4kJx2JejkAiBxAw+PzAwMNz4dp6wDXDw4MdNNOl0rWYsNkD89OLXI/xmo9sgzatJjAYmBgYGDiauD3/ePP18nVgb4MF89+M5ZX6js293wUMpnr8KTQMAxsCJnJ30apMAAAAASUVORK5CYII=',
  58. 'postdate' => 1344803528,
  59. ),
  60. );
  61. /**
  62. * JS files and their SRI hashes
  63. *
  64. * @var array
  65. */
  66. private static $hashes = array();
  67. /**
  68. * get example paste ID
  69. *
  70. * @return string
  71. */
  72. public static function getPasteId()
  73. {
  74. return self::$pasteid;
  75. }
  76. /**
  77. * get example paste
  78. *
  79. * @return array
  80. */
  81. public static function getPaste($meta = array())
  82. {
  83. $example = self::getPasteWithAttachment($meta);
  84. unset($example['attachment'], $example['attachmentname']);
  85. return $example;
  86. }
  87. /**
  88. * get example paste
  89. *
  90. * @return array
  91. */
  92. public static function getPasteWithAttachment($meta = array())
  93. {
  94. $example = self::$paste;
  95. $example['meta']['salt'] = ServerSalt::generate();
  96. $example['meta'] = array_merge($example['meta'], $meta);
  97. return $example;
  98. }
  99. /**
  100. * get example paste
  101. *
  102. * @return array
  103. */
  104. public static function getPasteAsJson($meta = array())
  105. {
  106. $example = self::getPaste();
  107. // the JSON shouldn't contain the salt
  108. unset($example['meta']['salt']);
  109. if (count($meta)) {
  110. $example['meta'] = $meta;
  111. }
  112. $example['comments'] = array();
  113. $example['comment_count'] = 0;
  114. $example['comment_offset'] = 0;
  115. $example['@context'] = 'js/paste.jsonld';
  116. return json_encode($example);
  117. }
  118. /**
  119. * get example paste ID
  120. *
  121. * @return string
  122. */
  123. public static function getCommentId()
  124. {
  125. return self::$commentid;
  126. }
  127. /**
  128. * get example comment
  129. *
  130. * @return array
  131. */
  132. public static function getComment($meta = array())
  133. {
  134. $example = self::$comment;
  135. $example['meta'] = array_merge($example['meta'], $meta);
  136. return $example;
  137. }
  138. /**
  139. * get example comment
  140. *
  141. * @return array
  142. */
  143. public static function getCommentPost($meta = array())
  144. {
  145. $example = self::getComment($meta);
  146. $example['nickname'] = $example['meta']['nickname'];
  147. unset($example['meta']['nickname']);
  148. return $example;
  149. }
  150. /**
  151. * delete directory and all its contents recursively
  152. *
  153. * @param string $path
  154. * @throws Exception
  155. */
  156. public static function rmDir($path)
  157. {
  158. if (is_dir($path)) {
  159. $path .= DIRECTORY_SEPARATOR;
  160. $dir = dir($path);
  161. while (false !== ($file = $dir->read())) {
  162. if ($file != '.' && $file != '..') {
  163. if (is_dir($path . $file)) {
  164. self::rmDir($path . $file);
  165. } elseif (is_file($path . $file)) {
  166. if (!unlink($path . $file)) {
  167. throw new Exception('Error deleting file "' . $path . $file . '".');
  168. }
  169. }
  170. }
  171. }
  172. $dir->close();
  173. if (!rmdir($path)) {
  174. throw new Exception('Error deleting directory "' . $path . '".');
  175. }
  176. }
  177. }
  178. /**
  179. * create a backup of the config file
  180. *
  181. * @return void
  182. */
  183. public static function confBackup()
  184. {
  185. if (!is_file(CONF . '.bak') && is_file(CONF)) {
  186. rename(CONF, CONF . '.bak');
  187. }
  188. if (!is_file(CONF_SAMPLE . '.bak') && is_file(CONF_SAMPLE)) {
  189. copy(CONF_SAMPLE, CONF_SAMPLE . '.bak');
  190. }
  191. }
  192. /**
  193. * restor backup of the config file
  194. *
  195. * @return void
  196. */
  197. public static function confRestore()
  198. {
  199. if (is_file(CONF . '.bak')) {
  200. rename(CONF . '.bak', CONF);
  201. }
  202. if (is_file(CONF_SAMPLE . '.bak')) {
  203. rename(CONF_SAMPLE . '.bak', CONF_SAMPLE);
  204. }
  205. }
  206. /**
  207. * create ini file
  208. *
  209. * @param string $pathToFile
  210. * @param array $values
  211. */
  212. public static function createIniFile($pathToFile, $values)
  213. {
  214. if (count($values)) {
  215. @unlink($pathToFile);
  216. $ini = fopen($pathToFile, 'a');
  217. foreach ($values as $section => $options) {
  218. fwrite($ini, "[$section]" . PHP_EOL);
  219. foreach ($options as $option => $setting) {
  220. if (is_null($setting)) {
  221. continue;
  222. } elseif (is_string($setting)) {
  223. $setting = '"' . $setting . '"';
  224. } elseif (is_array($setting)) {
  225. foreach ($setting as $key => $value) {
  226. if (is_null($value)) {
  227. $value = 'null';
  228. } elseif (is_string($value)) {
  229. $value = '"' . $value . '"';
  230. } else {
  231. $value = var_export($value, true);
  232. }
  233. fwrite($ini, $option . "[$key] = $value" . PHP_EOL);
  234. }
  235. continue;
  236. } else {
  237. $setting = var_export($setting, true);
  238. }
  239. fwrite($ini, "$option = $setting" . PHP_EOL);
  240. }
  241. fwrite($ini, PHP_EOL);
  242. }
  243. fclose($ini);
  244. }
  245. }
  246. /**
  247. * a var_export that returns arrays without line breaks
  248. * by linus@flowingcreativity.net via php.net
  249. *
  250. * @param mixed $var
  251. * @param bool $return
  252. * @return void|string
  253. */
  254. public static function varExportMin($var, $return = false)
  255. {
  256. if (is_array($var)) {
  257. $toImplode = array();
  258. foreach ($var as $key => $value) {
  259. $toImplode[] = var_export($key, true) . ' => ' . self::varExportMin($value, true);
  260. }
  261. $code = 'array(' . implode(', ', $toImplode) . ')';
  262. if ($return) {
  263. return $code;
  264. } else {
  265. echo $code;
  266. }
  267. } else {
  268. return var_export($var, $return);
  269. }
  270. }
  271. /**
  272. * update all templates with the latest SRI hashes for all JS files
  273. *
  274. * @return void
  275. */
  276. public static function updateSubresourceIntegrity()
  277. {
  278. $dir = dir(PATH . 'js');
  279. while (false !== ($file = $dir->read())) {
  280. if (substr($file, -3) === '.js') {
  281. self::$hashes[$file] = base64_encode(
  282. hash('sha512', file_get_contents(
  283. PATH . 'js' . DIRECTORY_SEPARATOR . $file
  284. ), true)
  285. );
  286. }
  287. }
  288. $dir = dir(PATH . 'tpl');
  289. while (false !== ($file = $dir->read())) {
  290. if (substr($file, -4) === '.php') {
  291. $content = file_get_contents(
  292. PATH . 'tpl' . DIRECTORY_SEPARATOR . $file
  293. );
  294. $content = preg_replace_callback(
  295. '#<script ([^>]+) src="js/([a-z0-9.-]+.js)([^"]*)"( integrity="[^"]+" crossorigin="[^"]+")?></script>#',
  296. function ($matches) {
  297. if (array_key_exists($matches[2], Helper::$hashes)) {
  298. return '<script ' . $matches[1] . ' src="js/' .
  299. $matches[2] . $matches[3] .
  300. '" integrity="sha512-' . Helper::$hashes[$matches[2]] .
  301. '" crossorigin="anonymous"></script>';
  302. } else {
  303. return $matches[0];
  304. }
  305. },
  306. $content
  307. );
  308. file_put_contents(
  309. PATH . 'tpl' . DIRECTORY_SEPARATOR . $file,
  310. $content
  311. );
  312. }
  313. }
  314. }
  315. }