Bootstrap.php 10 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330
  1. <?php
  2. use PrivateBin\Persistence\ServerSalt;
  3. error_reporting(E_ALL | E_STRICT);
  4. // change this, if your php files and data is outside of your webservers document root
  5. if (!defined('PUBLIC_PATH')) {
  6. define('PUBLIC_PATH', '..');
  7. }
  8. if (!defined('PATH')) {
  9. define('PATH', '..' . DIRECTORY_SEPARATOR);
  10. }
  11. if (!defined('CONF')) {
  12. define('CONF', PATH . 'cfg' . DIRECTORY_SEPARATOR . 'conf.ini');
  13. }
  14. if (!is_file(CONF)) {
  15. copy(CONF . '.sample', CONF);
  16. }
  17. require PATH . 'vendor/autoload.php';
  18. Helper::updateSubresourceIntegrity();
  19. class Helper
  20. {
  21. /**
  22. * example ID of a paste
  23. *
  24. * @var string
  25. */
  26. private static $pasteid = '5e9bc25c89fb3bf9';
  27. /**
  28. * example paste
  29. *
  30. * @var array
  31. */
  32. private static $paste = array(
  33. 'data' => '{"iv":"EN39/wd5Nk8HAiSG2K5AsQ","v":1,"iter":1000,"ks":128,"ts":64,"mode":"ccm","adata":"","cipher":"aes","salt":"QKN1DBXe5PI","ct":"8hA83xDdXjD7K2qfmw5NdA"}',
  34. 'attachment' => '{"iv":"Pd4pOKWkmDTT9uPwVwd5Ag","v":1,"iter":1000,"ks":128,"ts":64,"mode":"ccm","adata":"","cipher":"aes","salt":"ZIUhFTliVz4","ct":"6nOCU3peNDclDDpFtJEBKA"}',
  35. 'attachmentname' => '{"iv":"76MkAtOGC4oFogX/aSMxRA","v":1,"iter":1000,"ks":128,"ts":64,"mode":"ccm","adata":"","cipher":"aes","salt":"ZIUhFTliVz4","ct":"b6Ae/U1xJdsX/+lATud4sQ"}',
  36. 'meta' => array(
  37. 'formatter' => 'plaintext',
  38. 'postdate' => 1344803344,
  39. 'opendiscussion' => true,
  40. ),
  41. );
  42. /**
  43. * example ID of a comment
  44. *
  45. * @var string
  46. */
  47. private static $commentid = '5a52eebf11c4c94b';
  48. /**
  49. * example comment
  50. *
  51. * @var array
  52. */
  53. private static $comment = array(
  54. 'data' => '{"iv":"Pd4pOKWkmDTT9uPwVwd5Ag","v":1,"iter":1000,"ks":128,"ts":64,"mode":"ccm","adata":"","cipher":"aes","salt":"ZIUhFTliVz4","ct":"6nOCU3peNDclDDpFtJEBKA"}',
  55. 'meta' => array(
  56. 'nickname' => '{"iv":"76MkAtOGC4oFogX/aSMxRA","v":1,"iter":1000,"ks":128,"ts":64,"mode":"ccm","adata":"","cipher":"aes","salt":"ZIUhFTliVz4","ct":"b6Ae/U1xJdsX/+lATud4sQ"}',
  57. 'vizhash' => 'data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAIAAACQkWg2AAABGUlEQVQokWOsl5/94983CNKQMjnxaOePf98MeKwPfNjkLZ3AgARab6b9+PeNEVnDj3/ff/z7ZiHnzsDA8Pv7H2TVPJw8EAYLAwb48OaVgIgYKycLsrYv378wMDB8//qdCVMDRA9EKSsnCwRBxNsepaLboMFlyMDAICAi9uHNK24GITQ/MDAwoNhgIGMLtwGrzegaLjw5jMz9+vUdnN17uwDCQDhJgk0O07yvX9+teDX1x79v6DYIsIjgcgMaYGFgYOBg4kJx2JejkAiBxAw+PzAwMNz4dp6wDXDw4MdNNOl0rWYsNkD89OLXI/xmo9sgzatJjAYmBgYGDiauD3/ePP18nVgb4MF89+M5ZX6js293wUMpnr8KTQMAxsCJnJ30apMAAAAASUVORK5CYII=',
  58. 'postdate' => 1344803528,
  59. ),
  60. );
  61. /**
  62. * JS files and their SRI hashes
  63. *
  64. * @var array
  65. */
  66. private static $hashes = array();
  67. /**
  68. * get example paste ID
  69. *
  70. * @return string
  71. */
  72. public static function getPasteId()
  73. {
  74. return self::$pasteid;
  75. }
  76. /**
  77. * get example paste
  78. *
  79. * @return array
  80. */
  81. public static function getPaste($meta = array())
  82. {
  83. $example = self::getPasteWithAttachment($meta);
  84. unset($example['attachment'], $example['attachmentname']);
  85. return $example;
  86. }
  87. /**
  88. * get example paste
  89. *
  90. * @return array
  91. */
  92. public static function getPasteWithAttachment($meta = array())
  93. {
  94. $example = self::$paste;
  95. $example['meta']['salt'] = serversalt::generate();
  96. $example['meta'] = array_merge($example['meta'], $meta);
  97. return $example;
  98. }
  99. /**
  100. * get example paste
  101. *
  102. * @return array
  103. */
  104. public static function getPasteAsJson($meta = array())
  105. {
  106. $example = self::getPaste();
  107. // the JSON shouldn't contain the salt
  108. unset($example['meta']['salt']);
  109. if (count($meta)) {
  110. $example['meta'] = $meta;
  111. }
  112. $example['comments'] = array();
  113. $example['comment_count'] = 0;
  114. $example['comment_offset'] = 0;
  115. $example['@context'] = 'js/paste.jsonld';
  116. return json_encode($example);
  117. }
  118. /**
  119. * get example paste ID
  120. *
  121. * @return string
  122. */
  123. public static function getCommentId()
  124. {
  125. return self::$commentid;
  126. }
  127. /**
  128. * get example comment
  129. *
  130. * @return array
  131. */
  132. public static function getComment($meta = array())
  133. {
  134. $example = self::$comment;
  135. $example['meta'] = array_merge($example['meta'], $meta);
  136. return $example;
  137. }
  138. /**
  139. * get example comment
  140. *
  141. * @return array
  142. */
  143. public static function getCommentPost($meta = array())
  144. {
  145. $example = self::getComment($meta);
  146. $example['nickname'] = $example['meta']['nickname'];
  147. unset($example['meta']['nickname']);
  148. return $example;
  149. }
  150. /**
  151. * delete directory and all its contents recursively
  152. *
  153. * @param string $path
  154. * @throws Exception
  155. */
  156. public static function rmDir($path)
  157. {
  158. $path .= DIRECTORY_SEPARATOR;
  159. $dir = dir($path);
  160. while (false !== ($file = $dir->read())) {
  161. if ($file != '.' && $file != '..') {
  162. if (is_dir($path . $file)) {
  163. self::rmDir($path . $file);
  164. } elseif (is_file($path . $file)) {
  165. if (!unlink($path . $file)) {
  166. throw new Exception('Error deleting file "' . $path . $file . '".');
  167. }
  168. }
  169. }
  170. }
  171. $dir->close();
  172. if (!rmdir($path)) {
  173. throw new Exception('Error deleting directory "' . $path . '".');
  174. }
  175. }
  176. /**
  177. * create a backup of the config file
  178. *
  179. * @return void
  180. */
  181. public static function confBackup()
  182. {
  183. if (!is_file(CONF . '.bak') && is_file(CONF)) {
  184. rename(CONF, CONF . '.bak');
  185. }
  186. }
  187. /**
  188. * restor backup of the config file
  189. *
  190. * @return void
  191. */
  192. public static function confRestore()
  193. {
  194. if (is_file(CONF . '.bak')) {
  195. rename(CONF . '.bak', CONF);
  196. }
  197. }
  198. /**
  199. * create ini file
  200. *
  201. * @param string $pathToFile
  202. * @param array $values
  203. */
  204. public static function createIniFile($pathToFile, $values)
  205. {
  206. if (count($values)) {
  207. @unlink($pathToFile);
  208. $ini = fopen($pathToFile, 'a');
  209. foreach ($values as $section => $options) {
  210. fwrite($ini, "[$section]" . PHP_EOL);
  211. foreach ($options as $option => $setting) {
  212. if (is_null($setting)) {
  213. continue;
  214. } elseif (is_string($setting)) {
  215. $setting = '"' . $setting . '"';
  216. } elseif (is_array($setting)) {
  217. foreach ($setting as $key => $value) {
  218. if (is_null($value)) {
  219. $value = 'null';
  220. } elseif (is_string($value)) {
  221. $value = '"' . $value . '"';
  222. } else {
  223. $value = var_export($value, true);
  224. }
  225. fwrite($ini, $option . "[$key] = $value" . PHP_EOL);
  226. }
  227. continue;
  228. } else {
  229. $setting = var_export($setting, true);
  230. }
  231. fwrite($ini, "$option = $setting" . PHP_EOL);
  232. }
  233. fwrite($ini, PHP_EOL);
  234. }
  235. fclose($ini);
  236. }
  237. }
  238. /**
  239. * a var_export that returns arrays without line breaks
  240. * by linus@flowingcreativity.net via php.net
  241. *
  242. * @param mixed $var
  243. * @param bool $return
  244. * @return void|string
  245. */
  246. public static function varExportMin($var, $return = false)
  247. {
  248. if (is_array($var)) {
  249. $toImplode = array();
  250. foreach ($var as $key => $value) {
  251. $toImplode[] = var_export($key, true) . ' => ' . self::varExportMin($value, true);
  252. }
  253. $code = 'array(' . implode(', ', $toImplode) . ')';
  254. if ($return) {
  255. return $code;
  256. } else {
  257. echo $code;
  258. }
  259. } else {
  260. return var_export($var, $return);
  261. }
  262. }
  263. /**
  264. * update all templates with the latest SRI hashes for all JS files
  265. *
  266. * @return void
  267. */
  268. public static function updateSubresourceIntegrity()
  269. {
  270. $dir = dir(PATH . 'js');
  271. while (false !== ($file = $dir->read())) {
  272. if (substr($file, -3) === '.js') {
  273. self::$hashes[$file] = base64_encode(
  274. hash('sha512', file_get_contents(
  275. PATH . 'js' . DIRECTORY_SEPARATOR . $file
  276. ), true)
  277. );
  278. }
  279. }
  280. $dir = dir(PATH . 'tpl');
  281. while (false !== ($file = $dir->read())) {
  282. if (substr($file, -4) === '.php') {
  283. $content = file_get_contents(
  284. PATH . 'tpl' . DIRECTORY_SEPARATOR . $file
  285. );
  286. $content = preg_replace_callback(
  287. '#<script type="text/javascript" src="js/([a-z0-9.-]+.js)([^"]*)"( integrity="[^"]+" crossorigin="[^"]+")?></script>#',
  288. function ($matches) {
  289. if (array_key_exists($matches[1], Helper::$hashes)) {
  290. return '<script type="text/javascript" src="js/' .
  291. $matches[1] . $matches[2] .
  292. '" integrity="sha512-' . Helper::$hashes[$matches[1]] .
  293. '" crossorigin="anonymous"></script>';
  294. } else {
  295. return $matches[0];
  296. }
  297. },
  298. $content
  299. );
  300. file_put_contents(
  301. PATH . 'tpl' . DIRECTORY_SEPARATOR . $file,
  302. $content
  303. );
  304. }
  305. }
  306. }
  307. }