Bootstrap.php 10 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332
  1. <?php
  2. use PrivateBin\Persistence\ServerSalt;
  3. error_reporting(E_ALL | E_STRICT);
  4. // change this, if your php files and data is outside of your webservers document root
  5. if (!defined('PUBLIC_PATH')) {
  6. define('PUBLIC_PATH', '..');
  7. }
  8. if (!defined('PATH')) {
  9. define('PATH', '..' . DIRECTORY_SEPARATOR);
  10. }
  11. if (!defined('CONF')) {
  12. define('CONF', PATH . 'cfg' . DIRECTORY_SEPARATOR . 'conf.php');
  13. }
  14. if (!is_file(CONF)) {
  15. copy(PATH . 'cfg' . DIRECTORY_SEPARATOR . 'conf.sample.php', CONF);
  16. }
  17. require PATH . 'vendor/autoload.php';
  18. Helper::updateSubresourceIntegrity();
  19. class Helper
  20. {
  21. /**
  22. * example ID of a paste
  23. *
  24. * @var string
  25. */
  26. private static $pasteid = '5e9bc25c89fb3bf9';
  27. /**
  28. * example paste
  29. *
  30. * @var array
  31. */
  32. private static $paste = array(
  33. 'data' => '{"iv":"EN39/wd5Nk8HAiSG2K5AsQ","v":1,"iter":1000,"ks":128,"ts":64,"mode":"ccm","adata":"","cipher":"aes","salt":"QKN1DBXe5PI","ct":"8hA83xDdXjD7K2qfmw5NdA"}',
  34. 'attachment' => '{"iv":"Pd4pOKWkmDTT9uPwVwd5Ag","v":1,"iter":1000,"ks":128,"ts":64,"mode":"ccm","adata":"","cipher":"aes","salt":"ZIUhFTliVz4","ct":"6nOCU3peNDclDDpFtJEBKA"}',
  35. 'attachmentname' => '{"iv":"76MkAtOGC4oFogX/aSMxRA","v":1,"iter":1000,"ks":128,"ts":64,"mode":"ccm","adata":"","cipher":"aes","salt":"ZIUhFTliVz4","ct":"b6Ae/U1xJdsX/+lATud4sQ"}',
  36. 'meta' => array(
  37. 'formatter' => 'plaintext',
  38. 'postdate' => 1344803344,
  39. 'opendiscussion' => true,
  40. ),
  41. );
  42. /**
  43. * example ID of a comment
  44. *
  45. * @var string
  46. */
  47. private static $commentid = '5a52eebf11c4c94b';
  48. /**
  49. * example comment
  50. *
  51. * @var array
  52. */
  53. private static $comment = array(
  54. 'data' => '{"iv":"Pd4pOKWkmDTT9uPwVwd5Ag","v":1,"iter":1000,"ks":128,"ts":64,"mode":"ccm","adata":"","cipher":"aes","salt":"ZIUhFTliVz4","ct":"6nOCU3peNDclDDpFtJEBKA"}',
  55. 'meta' => array(
  56. 'nickname' => '{"iv":"76MkAtOGC4oFogX/aSMxRA","v":1,"iter":1000,"ks":128,"ts":64,"mode":"ccm","adata":"","cipher":"aes","salt":"ZIUhFTliVz4","ct":"b6Ae/U1xJdsX/+lATud4sQ"}',
  57. 'vizhash' => 'data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAIAAACQkWg2AAABGUlEQVQokWOsl5/94983CNKQMjnxaOePf98MeKwPfNjkLZ3AgARab6b9+PeNEVnDj3/ff/z7ZiHnzsDA8Pv7H2TVPJw8EAYLAwb48OaVgIgYKycLsrYv378wMDB8//qdCVMDRA9EKSsnCwRBxNsepaLboMFlyMDAICAi9uHNK24GITQ/MDAwoNhgIGMLtwGrzegaLjw5jMz9+vUdnN17uwDCQDhJgk0O07yvX9+teDX1x79v6DYIsIjgcgMaYGFgYOBg4kJx2JejkAiBxAw+PzAwMNz4dp6wDXDw4MdNNOl0rWYsNkD89OLXI/xmo9sgzatJjAYmBgYGDiauD3/ePP18nVgb4MF89+M5ZX6js293wUMpnr8KTQMAxsCJnJ30apMAAAAASUVORK5CYII=',
  58. 'postdate' => 1344803528,
  59. ),
  60. );
  61. /**
  62. * JS files and their SRI hashes
  63. *
  64. * @var array
  65. */
  66. private static $hashes = array();
  67. /**
  68. * get example paste ID
  69. *
  70. * @return string
  71. */
  72. public static function getPasteId()
  73. {
  74. return self::$pasteid;
  75. }
  76. /**
  77. * get example paste
  78. *
  79. * @return array
  80. */
  81. public static function getPaste($meta = array())
  82. {
  83. $example = self::getPasteWithAttachment($meta);
  84. unset($example['attachment'], $example['attachmentname']);
  85. return $example;
  86. }
  87. /**
  88. * get example paste
  89. *
  90. * @return array
  91. */
  92. public static function getPasteWithAttachment($meta = array())
  93. {
  94. $example = self::$paste;
  95. $example['meta']['salt'] = ServerSalt::generate();
  96. $example['meta'] = array_merge($example['meta'], $meta);
  97. return $example;
  98. }
  99. /**
  100. * get example paste
  101. *
  102. * @return array
  103. */
  104. public static function getPasteAsJson($meta = array())
  105. {
  106. $example = self::getPaste();
  107. // the JSON shouldn't contain the salt
  108. unset($example['meta']['salt']);
  109. if (count($meta)) {
  110. $example['meta'] = $meta;
  111. }
  112. $example['comments'] = array();
  113. $example['comment_count'] = 0;
  114. $example['comment_offset'] = 0;
  115. $example['@context'] = 'js/paste.jsonld';
  116. return json_encode($example);
  117. }
  118. /**
  119. * get example paste ID
  120. *
  121. * @return string
  122. */
  123. public static function getCommentId()
  124. {
  125. return self::$commentid;
  126. }
  127. /**
  128. * get example comment
  129. *
  130. * @return array
  131. */
  132. public static function getComment($meta = array())
  133. {
  134. $example = self::$comment;
  135. $example['meta'] = array_merge($example['meta'], $meta);
  136. return $example;
  137. }
  138. /**
  139. * get example comment
  140. *
  141. * @return array
  142. */
  143. public static function getCommentPost($meta = array())
  144. {
  145. $example = self::getComment($meta);
  146. $example['nickname'] = $example['meta']['nickname'];
  147. unset($example['meta']['nickname']);
  148. return $example;
  149. }
  150. /**
  151. * delete directory and all its contents recursively
  152. *
  153. * @param string $path
  154. * @throws Exception
  155. */
  156. public static function rmDir($path)
  157. {
  158. if (is_dir($path)) {
  159. $path .= DIRECTORY_SEPARATOR;
  160. $dir = dir($path);
  161. while (false !== ($file = $dir->read())) {
  162. if ($file != '.' && $file != '..') {
  163. if (is_dir($path . $file)) {
  164. self::rmDir($path . $file);
  165. } elseif (is_file($path . $file)) {
  166. if (!unlink($path . $file)) {
  167. throw new Exception('Error deleting file "' . $path . $file . '".');
  168. }
  169. }
  170. }
  171. }
  172. $dir->close();
  173. if (!rmdir($path)) {
  174. throw new Exception('Error deleting directory "' . $path . '".');
  175. }
  176. }
  177. }
  178. /**
  179. * create a backup of the config file
  180. *
  181. * @return void
  182. */
  183. public static function confBackup()
  184. {
  185. if (!is_file(CONF . '.bak') && is_file(CONF)) {
  186. rename(CONF, CONF . '.bak');
  187. }
  188. }
  189. /**
  190. * restor backup of the config file
  191. *
  192. * @return void
  193. */
  194. public static function confRestore()
  195. {
  196. if (is_file(CONF . '.bak')) {
  197. rename(CONF . '.bak', CONF);
  198. }
  199. }
  200. /**
  201. * create ini file
  202. *
  203. * @param string $pathToFile
  204. * @param array $values
  205. */
  206. public static function createIniFile($pathToFile, $values)
  207. {
  208. if (count($values)) {
  209. @unlink($pathToFile);
  210. $ini = fopen($pathToFile, 'a');
  211. foreach ($values as $section => $options) {
  212. fwrite($ini, "[$section]" . PHP_EOL);
  213. foreach ($options as $option => $setting) {
  214. if (is_null($setting)) {
  215. continue;
  216. } elseif (is_string($setting)) {
  217. $setting = '"' . $setting . '"';
  218. } elseif (is_array($setting)) {
  219. foreach ($setting as $key => $value) {
  220. if (is_null($value)) {
  221. $value = 'null';
  222. } elseif (is_string($value)) {
  223. $value = '"' . $value . '"';
  224. } else {
  225. $value = var_export($value, true);
  226. }
  227. fwrite($ini, $option . "[$key] = $value" . PHP_EOL);
  228. }
  229. continue;
  230. } else {
  231. $setting = var_export($setting, true);
  232. }
  233. fwrite($ini, "$option = $setting" . PHP_EOL);
  234. }
  235. fwrite($ini, PHP_EOL);
  236. }
  237. fclose($ini);
  238. }
  239. }
  240. /**
  241. * a var_export that returns arrays without line breaks
  242. * by linus@flowingcreativity.net via php.net
  243. *
  244. * @param mixed $var
  245. * @param bool $return
  246. * @return void|string
  247. */
  248. public static function varExportMin($var, $return = false)
  249. {
  250. if (is_array($var)) {
  251. $toImplode = array();
  252. foreach ($var as $key => $value) {
  253. $toImplode[] = var_export($key, true) . ' => ' . self::varExportMin($value, true);
  254. }
  255. $code = 'array(' . implode(', ', $toImplode) . ')';
  256. if ($return) {
  257. return $code;
  258. } else {
  259. echo $code;
  260. }
  261. } else {
  262. return var_export($var, $return);
  263. }
  264. }
  265. /**
  266. * update all templates with the latest SRI hashes for all JS files
  267. *
  268. * @return void
  269. */
  270. public static function updateSubresourceIntegrity()
  271. {
  272. $dir = dir(PATH . 'js');
  273. while (false !== ($file = $dir->read())) {
  274. if (substr($file, -3) === '.js') {
  275. self::$hashes[$file] = base64_encode(
  276. hash('sha512', file_get_contents(
  277. PATH . 'js' . DIRECTORY_SEPARATOR . $file
  278. ), true)
  279. );
  280. }
  281. }
  282. $dir = dir(PATH . 'tpl');
  283. while (false !== ($file = $dir->read())) {
  284. if (substr($file, -4) === '.php') {
  285. $content = file_get_contents(
  286. PATH . 'tpl' . DIRECTORY_SEPARATOR . $file
  287. );
  288. $content = preg_replace_callback(
  289. '#<script type="text/javascript" src="js/([a-z0-9.-]+.js)([^"]*)"( integrity="[^"]+" crossorigin="[^"]+")?></script>#',
  290. function ($matches) {
  291. if (array_key_exists($matches[1], Helper::$hashes)) {
  292. return '<script type="text/javascript" src="js/' .
  293. $matches[1] . $matches[2] .
  294. '" integrity="sha512-' . Helper::$hashes[$matches[1]] .
  295. '" crossorigin="anonymous"></script>';
  296. } else {
  297. return $matches[0];
  298. }
  299. },
  300. $content
  301. );
  302. file_put_contents(
  303. PATH . 'tpl' . DIRECTORY_SEPARATOR . $file,
  304. $content
  305. );
  306. }
  307. }
  308. }
  309. }