5.3.'; error_log('[ERROR] '.$errorText, 0); exit($errorText); } // Check PHP modules $modulesRequired = array('mbstring', 'json', 'gd', 'dom'); $modulesRequiredExit = false; $modulesRequiredMissing = ''; foreach ($modulesRequired as $module) { if (!extension_loaded($module)) { $errorText = 'PHP module '.$module.' is not installed.'; error_log('[ERROR] '.$errorText, 0); $modulesRequiredExit = true; $modulesRequiredMissing .= $errorText.PHP_EOL; } } if ($modulesRequiredExit) { echo 'PHP modules missing:'; echo $modulesRequiredMissing; echo ''; echo 'Please read Bludit requirements.'; exit(0); } // Security constant define('BLUDIT', true); // Directory separator define('DS', DIRECTORY_SEPARATOR); // PHP paths define('PATH_ROOT', __DIR__.DS); define('PATH_CONTENT', PATH_ROOT.'bl-content'.DS); define('PATH_KERNEL', PATH_ROOT.'bl-kernel'.DS); define('PATH_LANGUAGES', PATH_ROOT.'bl-languages'.DS); define('PATH_UPLOADS', PATH_CONTENT.'uploads'.DS); define('PATH_TMP', PATH_CONTENT.'tmp'.DS); define('PATH_PAGES', PATH_CONTENT.'pages'.DS); define('PATH_DATABASES', PATH_CONTENT.'databases'.DS); define('PATH_PLUGINS_DATABASES',PATH_CONTENT.'databases'.DS.'plugins'.DS); define('PATH_UPLOADS_PROFILES', PATH_UPLOADS.'profiles'.DS); define('PATH_UPLOADS_THUMBNAILS',PATH_UPLOADS.'thumbnails'.DS); define('PATH_HELPERS', PATH_KERNEL.'helpers'.DS); define('PATH_ABSTRACT', PATH_KERNEL.'abstract'.DS); // Protecting against Symlink attacks define('CHECK_SYMBOLIC_LINKS', TRUE); // Filename for pages define('FILENAME', 'index.txt'); // Domain and protocol define('DOMAIN', $_SERVER['HTTP_HOST']); if (!empty($_SERVER['HTTPS'])) { define('PROTOCOL', 'https://'); } else { define('PROTOCOL', 'http://'); } // Base URL // Change the base URL or leave it empty if you want to Bludit try to detect the base URL. $base = ''; if (!empty($_SERVER['DOCUMENT_ROOT']) && !empty($_SERVER['SCRIPT_NAME']) && empty($base)) { $base = str_replace($_SERVER['DOCUMENT_ROOT'], '', $_SERVER['SCRIPT_NAME']); $base = dirname($base); } elseif (empty($base)) { $base = empty( $_SERVER['SCRIPT_NAME'] ) ? $_SERVER['PHP_SELF'] : $_SERVER['SCRIPT_NAME']; $base = dirname($base); } if (strpos($_SERVER['REQUEST_URI'], $base)!==0) { $base = '/'; } elseif ($base!=DS) { $base = trim($base, '/'); $base = '/'.$base.'/'; } else { // Workaround for Windows Web Servers $base = '/'; } define('HTML_PATH_ROOT', $base); // Log separator define('LOG_SEP', ' | '); // JSON if (!defined('JSON_PRETTY_PRINT')) { define('JSON_PRETTY_PRINT', 128); } // Database format date define('DB_DATE_FORMAT', 'Y-m-d H:i:s'); // Charset, default UTF-8. define('CHARSET', 'UTF-8'); // Default language file define('DEFAULT_LANGUAGE_FILE', 'en.json'); // Set internal character encoding mb_internal_encoding(CHARSET); // Set HTTP output character encoding mb_http_output(CHARSET); // Directory permissions define('DIR_PERMISSIONS', 0755); // --- PHP Classes --- include(PATH_ABSTRACT.'dbjson.class.php'); include(PATH_HELPERS.'sanitize.class.php'); include(PATH_HELPERS.'valid.class.php'); include(PATH_HELPERS.'text.class.php'); include(PATH_HELPERS.'log.class.php'); include(PATH_HELPERS.'date.class.php'); include(PATH_KERNEL.'dblanguage.class.php'); // --- LANGUAGE and LOCALE --- // Try to detect the language from browser or headers $languageFromHTTP = 'en'; $localeFromHTTP = 'en_US'; if (isset($_GET['language'])) { $languageFromHTTP = Sanitize::html($_GET['language']); } else { // Try to detect the language browser $languageFromHTTP = substr($_SERVER['HTTP_ACCEPT_LANGUAGE'], 0, 2); // Try to detect the locale if (function_exists('locale_accept_from_http')) { $localeFromHTTP = locale_accept_from_http($_SERVER['HTTP_ACCEPT_LANGUAGE']); } } $finalLanguage = 'en'; $languageFiles = getLanguageList(); foreach ($languageFiles as $fname=>$native) { if ( ($languageFromHTTP==$fname) || ($localeFromHTTP==$fname) ) { $finalLanguage = $fname; } } $Language = new Language($finalLanguage); // Set locale setlocale(LC_ALL, $localeFromHTTP); // --- TIMEZONE --- // Check if timezone is defined in php.ini $iniDate = ini_get('date.timezone'); if (empty($iniDate)) { // Timezone not defined in php.ini, then set UTC as default. date_default_timezone_set('UTC'); } // ============================================================================ // FUNCTIONS // ============================================================================ // Returns an array with all languages function getLanguageList() { $files = glob(PATH_LANGUAGES.'*.json'); $tmp = array(); foreach ($files as $file) { $t = new dbJSON($file, false); $native = $t->db['language-data']['native']; $locale = basename($file, '.json'); $tmp[$locale] = $native; } return $tmp; } // Check if Bludit is installed function alreadyInstalled() { return file_exists(PATH_DATABASES.'site.php'); } // Check write permissions and .htaccess file function checkSystem() { $output = array(); // Try to create .htaccess $htaccessContent = 'AddDefaultCharset UTF-8 # Enable rewrite rules RewriteEngine on # Base directory RewriteBase '.HTML_PATH_ROOT.' # Deny direct access to .txt files RewriteRule ^bl-content/(.*)\.txt$ - [R=404,L] # All URL process by index.php RewriteCond %{REQUEST_FILENAME} !-f RewriteRule ^(.*) index.php [PT,L] '; if (!file_put_contents(PATH_ROOT.'.htaccess', $htaccessContent)) { if (!empty($_SERVER['SERVER_SOFTWARE'])) { $webserver = Text::lowercase($_SERVER['SERVER_SOFTWARE']); if (Text::stringContains($webserver, 'apache') || Text::stringContains($webserver, 'litespeed')) { $errorText = 'Missing file, upload the file .htaccess'; error_log('[ERROR] '.$errorText, 0); array_push($output, $errorText); } } } // Check mod_rewrite module if (function_exists('apache_get_modules') ) { if (!in_array('mod_rewrite', apache_get_modules())) { $errorText = 'Module mod_rewrite is not installed or loaded.'; error_log('[ERROR] '.$errorText, 0); array_push($output, $errorText); } } // Try to create the directory content @mkdir(PATH_CONTENT, DIR_PERMISSIONS, true); // Check if the directory content is writeable. if (!is_writable(PATH_CONTENT)) { $errorText = 'Writing test failure, check directory "bl-content" permissions.'; error_log('[ERROR] '.$errorText, 0); array_push($output, $errorText); } return $output; } // Install Bludit function install($adminPassword, $timezone) { global $L; if (!date_default_timezone_set($timezone)) { date_default_timezone_set('UTC'); } $currentDate = Date::current(DB_DATE_FORMAT); // ============================================================================ // Create directories // ============================================================================ // Directories for initial pages $pagesToInstall = array('example-page-1-slug', 'example-page-2-slug', 'example-page-3-slug', 'example-page-4-slug'); foreach ($pagesToInstall as $page) { if (!mkdir(PATH_PAGES.$L->get($page), DIR_PERMISSIONS, true)) { $errorText = 'Error when trying to created the directory=>'.PATH_PAGES.$L->get($page); error_log('[ERROR] '.$errorText, 0); } } // Directories for initial plugins $pluginsToInstall = array('simplemde', 'tags', 'about', 'simple-stats', 'robots'); foreach ($pluginsToInstall as $plugin) { if (!mkdir(PATH_PLUGINS_DATABASES.$plugin, DIR_PERMISSIONS, true)) { $errorText = 'Error when trying to created the directory=>'.PATH_PLUGINS_DATABASES.$plugin; error_log('[ERROR] '.$errorText, 0); } } // Directories for upload files if (!mkdir(PATH_UPLOADS_PROFILES, DIR_PERMISSIONS, true)) { $errorText = 'Error when trying to created the directory=>'.PATH_UPLOADS_PROFILES; error_log('[ERROR] '.$errorText, 0); } if (!mkdir(PATH_UPLOADS_THUMBNAILS, DIR_PERMISSIONS, true)) { $errorText = 'Error when trying to created the directory=>'.PATH_UPLOADS_THUMBNAILS; error_log('[ERROR] '.$errorText, 0); } if (!mkdir(PATH_TMP, DIR_PERMISSIONS, true)) { $errorText = 'Error when trying to created the directory=>'.PATH_TMP; error_log('[ERROR] '.$errorText, 0); } // ============================================================================ // Create files // ============================================================================ $dataHead = "".PHP_EOL; $data = array(); foreach ($pagesToInstall as $page) { $slug = $page; $title = Text::replace('slug','title', $slug); $content = Text::replace('slug','content', $slug); $data[$L->get($slug)]= array( 'title'=>$L->get($title), 'description'=>'', 'username'=>'admin', 'tags'=>array(), 'type'=>(($slug=='example-page-4-slug')?'static':'published'), 'date'=>$currentDate, 'dateModified'=>'', 'allowComments'=>true, 'position'=>1, 'coverImage'=>'', 'md5file'=>'', 'category'=>'', 'uuid'=>md5(uniqid()), 'parent'=>'', 'template'=>'', 'noindex'=>false, 'nofollow'=>false, 'noarchive'=>false ); file_put_contents(PATH_PAGES.$L->get($slug).DS.FILENAME, $L->get($content), LOCK_EX); } file_put_contents(PATH_DATABASES.'pages.php', $dataHead.json_encode($data, JSON_PRETTY_PRINT), LOCK_EX); // File site.php // If Bludit is not installed inside a folder, the URL doesn't need finish with / // Example (root): https://domain.com // Example (inside a folder): https://domain.com/folder/ if (HTML_PATH_ROOT=='/') { $siteUrl = PROTOCOL.DOMAIN; } else { $siteUrl = PROTOCOL.DOMAIN.HTML_PATH_ROOT; } $data = array( 'title'=>'BLUDIT', 'slogan'=>$L->get('welcome-to-bludit'), 'description'=>$L->get('congratulations-you-have-successfully-installed-your-bludit'), 'footer'=>'Copyright © '.Date::current('Y'), 'itemsPerPage'=>6, 'language'=>$L->currentLanguage(), 'locale'=>$L->locale(), 'timezone'=>$timezone, 'theme'=>'alternative', 'adminTheme'=>'booty', 'homepage'=>'', 'pageNotFound'=>'', 'uriPage'=>'/', 'uriTag'=>'/tag/', 'uriCategory'=>'/category/', 'uriBlog'=>'', 'url'=>$siteUrl, 'emailFrom'=>'no-reply@'.DOMAIN, 'orderBy'=>'date', 'currentBuild'=>'0', 'twitter'=>'https://twitter.com/bludit', 'facebook'=>'https://www.facebook.com/bluditcms', 'codepen'=>'', 'googlePlus'=>'https://plus.google.com/+Bluditcms', 'github'=> 'https://github.com/bludit', 'instagram'=>'', 'gitlab'=>'', 'linkedin'=>'', 'dateFormat'=>'F j, Y', 'extremeFriendly'=>true, 'autosaveInterval'=>2, 'titleFormatHomepage'=>'{{site-slogan}} | {{site-title}}', 'titleFormatPages'=>'{{page-title}} | {{site-title}}', 'titleFormatCategory'=>'{{category-name}} | {{site-title}}', 'titleFormatTag'=>'{{tag-name}} | {{site-title}}' ); file_put_contents(PATH_DATABASES.'site.php', $dataHead.json_encode($data, JSON_PRETTY_PRINT), LOCK_EX); // File users.php $salt = uniqid(); $passwordHash = sha1($adminPassword.$salt); $tokenAuth = md5( uniqid().time().DOMAIN ); $data = array( 'admin'=>array( 'nickname'=>'Admin', 'firstName'=>$L->get('Administrator'), 'lastName'=>'', 'role'=>'admin', 'password'=>$passwordHash, 'salt'=>$salt, 'email'=>'', 'registered'=>$currentDate, 'tokenRemember'=>'', 'tokenAuth'=>$tokenAuth, 'tokenAuthTTL'=>'2009-03-15 14:00', 'twitter'=>'', 'facebook'=>'', 'googlePlus'=>'', 'instagram'=>'', 'codepen'=>'', 'linkedin'=>'', 'github'=>'', 'gitlab'=>'' ) ); file_put_contents(PATH_DATABASES.'users.php', $dataHead.json_encode($data, JSON_PRETTY_PRINT), LOCK_EX); // File syslog.php $data = array( array( 'date'=>$currentDate, 'dictionaryKey'=>'welcome-to-bludit', 'notes'=>'', 'idExecution'=>uniqid(), 'method'=>'POST', 'username'=>'admin' )); file_put_contents(PATH_DATABASES.'syslog.php', $dataHead.json_encode($data, JSON_PRETTY_PRINT), LOCK_EX); // File security.php $data = array( 'minutesBlocked'=>5, 'numberFailuresAllowed'=>10, 'blackList'=>array() ); file_put_contents(PATH_DATABASES.'security.php', $dataHead.json_encode($data, JSON_PRETTY_PRINT), LOCK_EX); // File categories.php $data = array( 'general'=>array('name'=>'General', 'description'=>'', 'template'=>'', 'list'=>array()), 'music'=>array('name'=>'Music', 'description'=>'', 'template'=>'', 'list'=>array()), 'videos'=>array('name'=>'Videos', 'description'=>'', 'template'=>'', 'list'=>array()) ); file_put_contents(PATH_DATABASES.'categories.php', $dataHead.json_encode($data, JSON_PRETTY_PRINT), LOCK_EX); // File tags.php $data = array( 'bludit'=>array('name'=>'Bludit', 'description'=>'', 'template'=>'', 'list'=>array('welcome')), 'cms'=>array('name'=>'CMS', 'description'=>'', 'template'=>'', 'list'=>array('welcome')), 'flat-files'=>array('name'=>'Flat files', 'description'=>'', 'template'=>'', 'list'=>array('welcome')) ); file_put_contents(PATH_DATABASES.'tags.php', $dataHead.json_encode($data, JSON_PRETTY_PRINT), LOCK_EX); // File plugins/about/db.php file_put_contents( PATH_PLUGINS_DATABASES.'about'.DS.'db.php', $dataHead.json_encode( array( 'position'=>1, 'label'=>$L->get('About'), 'text'=>$L->get('this-is-a-brief-description-of-yourself-our-your-site') ), JSON_PRETTY_PRINT), LOCK_EX ); // File plugins/tags/db.php file_put_contents( PATH_PLUGINS_DATABASES.'tags'.DS.'db.php', $dataHead.json_encode( array( 'position'=>2, 'label'=>$L->get('Tags') ), JSON_PRETTY_PRINT), LOCK_EX ); // File plugins/simple-stats/db.php file_put_contents( PATH_PLUGINS_DATABASES.'simple-stats'.DS.'db.php', $dataHead.json_encode( array( 'numberOfDays'=>7, 'label'=>$L->get('Visits'), 'excludeAdmins'=>false, 'position'=>1 ), JSON_PRETTY_PRINT), LOCK_EX ); // File plugins/simplemde/db.php file_put_contents( PATH_PLUGINS_DATABASES.'simplemde'.DS.'db.php', $dataHead.json_encode( array( 'position'=>1, 'toolbar'=>'"bold", "italic", "heading", "|", "quote", "unordered-list", "|", "link", "image", "code", "horizontal-rule", "|", "preview", "side-by-side", "fullscreen"', 'autosave'=>false, 'spellChecker'=>true, 'tabSize'=>2 ), JSON_PRETTY_PRINT), LOCK_EX ); // File plugins/robots/db.php file_put_contents( PATH_PLUGINS_DATABASES.'robots'.DS.'db.php', $dataHead.json_encode( array( 'position'=>1 ), JSON_PRETTY_PRINT), LOCK_EX ); return true; } function redirect($url) { if (!headers_sent()) { header("Location:".$url, TRUE, 302); exit; } exit(''); } // ============================================================================ // MAIN // ============================================================================ if (alreadyInstalled()) { $errorText = 'Bludit is already installed ;)'; error_log('[ERROR] '.$errorText, 0); exit($errorText); } // Install a demo, just call the install.php?demo=true if (isset($_GET['demo'])) { install('demo123', 'UTC'); redirect(HTML_PATH_ROOT); } // Install by POST method if ($_SERVER['REQUEST_METHOD'] == 'POST') { install($_POST['password'], $_POST['timezone']); redirect(HTML_PATH_ROOT); } ?> <?php echo $L->get('Bludit Installer') ?>

get('Bludit Installer') ?>

'; echo '
FAIL
'; echo '

'.$values['title'].'

'; echo $values['errorText']; echo '
'; } } elseif (isset($_GET['language'])) { ?>

get('Choose a password for the username admin') ?>

p('Show password') ?>