5.3. (ERR_202)'); } // Security constant define('BLUDIT', true); // Directory separator define('DS', DIRECTORY_SEPARATOR); // PHP paths define('PATH_ROOT', __DIR__.DS); define('PATH_CONTENT', PATH_ROOT.'content'.DS); define('PATH_POSTS', PATH_CONTENT.'posts'.DS); define('PATH_UPLOADS', PATH_CONTENT.'uploads'.DS); define('PATH_UPLOADS_PROFILES', PATH_UPLOADS.'profiles'.DS); define('PATH_UPLOADS_THUMBNAILS',PATH_UPLOADS.'thumbnails'.DS); define('PATH_PAGES', PATH_CONTENT.'pages'.DS); define('PATH_DATABASES', PATH_CONTENT.'databases'.DS); define('PATH_PLUGINS_DATABASES',PATH_CONTENT.'databases'.DS.'plugins'.DS); define('PATH_KERNEL', PATH_ROOT.'kernel'.DS); define('PATH_HELPERS', PATH_KERNEL.'helpers'.DS); define('PATH_LANGUAGES', PATH_ROOT.'languages'.DS); define('PATH_ABSTRACT', PATH_KERNEL.'abstract'.DS); define('DOMAIN', $_SERVER['HTTP_HOST']); // HTML PATHs //$base = empty( $_SERVER['SCRIPT_NAME'] ) ? $_SERVER['PHP_SELF'] : $_SERVER['SCRIPT_NAME']; //$base = dirname($base); $base = empty($_SERVER['REQUEST_URI']) ? dirname($_SERVER['SCRIPT_NAME']) : dirname($_SERVER['REQUEST_URI']); if($base!=DS) { $base = $base.'/'; } else { // Workaround for Windows Web Servers $base = '/'; } define('HTML_PATH_ROOT', $base); // Log separator define('LOG_SEP', ' | '); // JSON if(!defined('JSON_PRETTY_PRINT')) { define('JSON_PRETTY_PRINT', 128); } // Check if JSON encode and decode are enabled. define('JSON', function_exists('json_encode')); // Database format date define('DB_DATE_FORMAT', 'Y-m-d H:i'); // Charset, default UTF-8. define('CHARSET', 'UTF-8'); // Multibyte string extension loaded. define('MB_STRING', extension_loaded('mbstring')); if(MB_STRING) { // Set internal character encoding. mb_internal_encoding(CHARSET); // Set HTTP output character encoding. mb_http_output(CHARSET); } // --- PHP Classes --- include(PATH_HELPERS.'sanitize.class.php'); include(PATH_HELPERS.'valid.class.php'); include(PATH_HELPERS.'text.class.php'); include(PATH_ABSTRACT.'dbjson.class.php'); include(PATH_KERNEL.'dblanguage.class.php'); include(PATH_HELPERS.'log.class.php'); include(PATH_HELPERS.'date.class.php'); // --- LANGUAGE --- // Try to detect language from HTTP $explode = explode(',', $_SERVER['HTTP_ACCEPT_LANGUAGE']); $localeFromHTTP = empty($explode[0])?'en_US':str_replace('-', '_', $explode[0]); if(isset($_GET['language'])) { $localeFromHTTP = Sanitize::html($_GET['language']); } $Language = new dbLanguage($localeFromHTTP); // --- LOCALE --- setlocale(LC_ALL, $localeFromHTTP); // --- TIMEZONE --- // Check if timezone is defined in php.ini $iniDate = ini_get('date.timezone'); if(empty($iniDate)) { // Timezone not defined in php.ini, then UTC as default. date_default_timezone_set('UTC'); } // ============================================================================ // FUNCTIONS // ============================================================================ // Returns an array with all languages function getLanguageList() { $files = glob(PATH_LANGUAGES.'*.json'); $tmp = array(); foreach($files as $file) { $t = new dbJSON($file, false); $native = $t->db['language-data']['native']; $locale = basename($file, '.json'); $tmp[$locale] = $native; } return $tmp; } // Server detection function checkServer($serveur) { $server = ''; /** * Whether the server software is Apache or something else */ if( strpos($_SERVER['SERVER_SOFTWARE'], 'Apache') !== false || strpos($_SERVER['SERVER_SOFTWARE'], 'LiteSpeed') !== false ) $server = '# secure htaccess file order allow,deny deny from all AddDefaultCharset UTF-8 # Enable rewrite rules RewriteEngine on # Deny direct access to .txt files RewriteRule ^content/(.*)\.txt$ - [R=404,L] # All URL process by index.php RewriteCond %{REQUEST_FILENAME} !-f RewriteRule ^(.*) index.php [PT,L] '; /** * Whether the server software is Nginx or something else */ if( strpos($_SERVER['SERVER_SOFTWARE'], 'nginx') !== false ) $server = '# nginx configuration charset utf-8; location / { if (!-e $request_filename){ rewrite ^/(.*) /index.php break; } } location /.htaccess { deny all; }'; /** * Whether the server software is Hiawatha or something else http://forum.bludit.com/viewtopic.php?f=6&t=138 */ if( strpos($_SERVER['SERVER_SOFTWARE'], 'hiawatha') !== false ) $server = 'UrlToolkit { ToolkitID = bludit RequestURI exists Return Match (.*)\?(.*) Rewrite $1&$2 Continue Match ^/(.*) Rewrite /index.php?url=$1 }'; /** * Whether the server software is Cherokee/Lighttpd or something else http://forum.bludit.com/viewtopic.php?f=6&t=121#p670) */ if( strpos($_SERVER['SERVER_SOFTWARE'], 'cherokee') !== false || strpos($_SERVER['SERVER_SOFTWARE'], 'Lighttpd') !== false ) $server = 'url.rewrite-once = ( ".*\.(txt)$" => "/", ) url.rewrite-if-not-file = ( ".*\?(.*)" => "index.php?$1", "." => "index.php" )'; return $server; } // Write .htaccess function writeht($serveur) { $ht = checkServer($serveur); $fp = fopen('.htaccess','a+'); if($fp) { fwrite($fp, $ht); fclose($fp); } } // Generate a random string. // Thanks, http://stackoverflow.com/questions/4356289/php-random-string-generator function getRandomString($length = 10) { return substr(str_shuffle("0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ"), 0, $length); } // Check if Bludit is installed. function alreadyInstalled() { return file_exists(PATH_DATABASES.'site.php'); } // Check the system, permissions, php version, modules, etc. // Returns an array with the problems otherwise empty array. function checkSystem() { $stdOut = array(); $dirpermissions = 0755; $phpModules = array(); if(function_exists('get_loaded_extensions')) { $phpModules = get_loaded_extensions(); } /* if(!file_exists(PATH_ROOT.'.htaccess')) { $errorText = 'Missing file, upload the file .htaccess (ERR_201)'; error_log($errorText, 0); $tmp['title'] = 'File .htaccess'; $tmp['errorText'] = $errorText; array_push($stdOut, $tmp); } */ if(!in_array('dom', $phpModules)) { $errorText = 'PHP module DOM is not installed. (ERR_203)'; error_log($errorText, 0); $tmp['title'] = 'PHP module'; $tmp['errorText'] = $errorText; array_push($stdOut, $tmp); } if(!in_array('json', $phpModules)) { $errorText = 'PHP module JSON is not installed. (ERR_204)'; error_log($errorText, 0); $tmp['title'] = 'PHP module'; $tmp['errorText'] = $errorText; array_push($stdOut, $tmp); } if(!is_writable(PATH_CONTENT)) { $errorText = 'Writing test failure, check directory content permissions. (ERR_205)'; error_log($errorText, 0); $tmp['title'] = 'PHP permissions'; $tmp['errorText'] = $errorText; array_push($stdOut, $tmp); } return $stdOut; } // Finish with the installation. function install($adminPassword, $email, $timezoneOffset) { global $Language; $stdOut = array(); $timezone = timezone_name_from_abbr('', $timezoneOffset, 0); if($timezone === false) { $timezone = timezone_name_from_abbr('', $timezoneOffset, 0); } // Workaround bug #44780 date_default_timezone_set($timezone); $currentDate = Date::current(DB_DATE_FORMAT); // ============================================================================ // Create directories // ============================================================================ // 7=read,write,execute | 5=read,execute $dirpermissions = 0755; $firstPostSlug = 'first-post'; if(!mkdir(PATH_POSTS.$firstPostSlug, $dirpermissions, true)) { $errorText = 'Error when trying to created the directory=>'.PATH_POSTS.$firstPostSlug; error_log($errorText, 0); } if(!mkdir(PATH_PAGES.'error', $dirpermissions, true)) { $errorText = 'Error when trying to created the directory=>'.PATH_PAGES.'error'; error_log($errorText, 0); } if(!mkdir(PATH_PAGES.'about', $dirpermissions, true)) { $errorText = 'Error when trying to created the directory=>'.PATH_PAGES.'about'; error_log($errorText, 0); } if(!mkdir(PATH_PLUGINS_DATABASES.'pages', $dirpermissions, true)) { $errorText = 'Error when trying to created the directory=>'.PATH_PLUGINS_DATABASES.'pages'; error_log($errorText, 0); } if(!mkdir(PATH_PLUGINS_DATABASES.'simplemde', $dirpermissions, true)) { $errorText = 'Error when trying to created the directory=>'.PATH_PLUGINS_DATABASES.'simplemde'; error_log($errorText, 0); } if(!mkdir(PATH_PLUGINS_DATABASES.'tags', $dirpermissions, true)) { $errorText = 'Error when trying to created the directory=>'.PATH_PLUGINS_DATABASES.'tags'; error_log($errorText, 0); } if(!mkdir(PATH_PLUGINS_DATABASES.'about', $dirpermissions, true)) { $errorText = 'Error when trying to created the directory=>'.PATH_PLUGINS_DATABASES.'about'; error_log($errorText, 0); } if(!mkdir(PATH_UPLOADS_PROFILES, $dirpermissions, true)) { $errorText = 'Error when trying to created the directory=>'.PATH_UPLOADS_PROFILES; error_log($errorText, 0); } if(!mkdir(PATH_UPLOADS_THUMBNAILS, $dirpermissions, true)) { $errorText = 'Error when trying to created the directory=>'.PATH_UPLOADS_THUMBNAILS; error_log($errorText, 0); } // ============================================================================ // Create files // ============================================================================ $dataHead = "".PHP_EOL; // File pages.php $data = array( 'error'=>array( 'description'=>'Error page', 'username'=>'admin', 'tags'=>array(), 'status'=>'published', 'date'=>$currentDate, 'position'=>0 ), 'about'=>array( 'description'=>$Language->get('About your site or yourself'), 'username'=>'admin', 'tags'=>array(), 'status'=>'published', 'date'=>$currentDate, 'position'=>1 ) ); file_put_contents(PATH_DATABASES.'pages.php', $dataHead.json_encode($data, JSON_PRETTY_PRINT), LOCK_EX); // File posts.php $data = array( $firstPostSlug=>array( 'description'=>$Language->get('Welcome to Bludit'), 'username'=>'admin', 'status'=>'published', 'tags'=>array('bludit'=>'Bludit','cms'=>'CMS','flat-files'=>'Flat files'), 'allowComments'=>'false', 'date'=>$currentDate ) ); file_put_contents(PATH_DATABASES.'posts.php', $dataHead.json_encode($data, JSON_PRETTY_PRINT), LOCK_EX); // File site.php $data = array( 'title'=>'BLUDIT', 'slogan'=>'CMS', 'description'=>'', 'footer'=>'Copyright © '.Date::current('Y'), 'language'=>$Language->getCurrentLocale(), 'locale'=>$Language->getCurrentLocale(), 'timezone'=>$timezone, 'theme'=>'pure', 'adminTheme'=>'default', 'homepage'=>'', 'postsperpage'=>'6', 'uriPost'=>'/post/', 'uriPage'=>'/', 'uriTag'=>'/tag/', 'url'=>'http://'.DOMAIN.HTML_PATH_ROOT, 'cliMode'=>'true', 'emailFrom'=>'no-reply@'.DOMAIN ); file_put_contents(PATH_DATABASES.'site.php', $dataHead.json_encode($data, JSON_PRETTY_PRINT), LOCK_EX); // File users.php $salt = getRandomString(); $passwordHash = sha1($adminPassword.$salt); $data = array( 'admin'=>array( 'firstName'=>$Language->get('Administrator'), 'lastName'=>'', 'twitter'=>'', 'role'=>'admin', 'password'=>$passwordHash, 'salt'=>$salt, 'email'=>$email, 'registered'=>$currentDate ) ); file_put_contents(PATH_DATABASES.'users.php', $dataHead.json_encode($data, JSON_PRETTY_PRINT), LOCK_EX); // File security.php $randomKey = getRandomString(); $randomKey = sha1($randomKey); $data = array( 'key1'=>$randomKey, 'minutesBlocked'=>5, 'numberFailuresAllowed'=>10, 'blackList'=>array() ); file_put_contents(PATH_DATABASES.'security.php', $dataHead.json_encode($data, JSON_PRETTY_PRINT), LOCK_EX); // File tags.php file_put_contents( PATH_DATABASES.'tags.php', $dataHead.json_encode( array( 'postsIndex'=>array( 'bludit'=>array('name'=>'Bludit', 'posts'=>array('first-post')), 'cms'=>array('name'=>'CMS', 'posts'=>array('first-post')), 'flat-files'=>array('name'=>'Flat files', 'posts'=>array('first-post')) ), 'pagesIndex'=>array() ), JSON_PRETTY_PRINT), LOCK_EX ); // PLUGINS // File plugins/pages/db.php file_put_contents( PATH_PLUGINS_DATABASES.'pages'.DS.'db.php', $dataHead.json_encode( array( 'position'=>0, 'homeLink'=>true, 'label'=>$Language->get('Pages') ), JSON_PRETTY_PRINT), LOCK_EX ); // File plugins/about/db.php file_put_contents( PATH_PLUGINS_DATABASES.'about'.DS.'db.php', $dataHead.json_encode( array( 'position'=>0, 'label'=>$Language->get('About'), 'text'=>$Language->get('this-is-a-brief-description-of-yourself-our-your-site') ), JSON_PRETTY_PRINT), LOCK_EX ); // File plugins/simplemde/db.php file_put_contents( PATH_PLUGINS_DATABASES.'simplemde'.DS.'db.php', $dataHead.json_encode( array( 'position'=>0, 'tabSize'=>4, 'toolbar'=>'"bold", "italic", "heading", "|", "quote", "unordered-list", "|", "link", "image", "code", "horizontal-rule", "|", "preview", "side-by-side", "fullscreen", "guide"' ), JSON_PRETTY_PRINT), LOCK_EX ); // File plugins/tags/db.php file_put_contents( PATH_PLUGINS_DATABASES.'tags'.DS.'db.php', $dataHead.json_encode( array( 'position'=>0, 'label'=>$Language->get('Tags') ), JSON_PRETTY_PRINT), LOCK_EX ); // File index.txt for error page $data = 'Title: '.$Language->get('Error').' Content: '.$Language->get('The page has not been found'); file_put_contents(PATH_PAGES.'error'.DS.'index.txt', $data, LOCK_EX); // File index.txt for about page $data = 'Title: '.$Language->get('About').' Content: '.$Language->get('the-about-page-is-very-important').' '.$Language->get('change-this-pages-content-on-the-admin-panel'); file_put_contents(PATH_PAGES.'about'.DS.'index.txt', $data, LOCK_EX); // File index.txt for welcome post $data = 'Title: '.$Language->get('First post').' Content: ## '.$Language->get('Whats next').' - '.$Language->get('Manage your Bludit from the admin panel').' - '.$Language->get('Follow Bludit on').' [Twitter](https://twitter.com/bludit) / [Facebook](https://www.facebook.com/bluditcms) / [Google+](https://plus.google.com/+Bluditcms) - '.$Language->get('Chat with developers and users on Gitter').' - '.$Language->get('Visit the support forum').' - '.$Language->get('Read the documentation for more information').' - '.$Language->get('Share with your friends and enjoy'); file_put_contents(PATH_POSTS.$firstPostSlug.DS.'index.txt', $data, LOCK_EX); writeht(); return true; } // Check form's parameters and finish Bludit installation. function checkPOST($args) { global $Language; // Check empty password if( strlen($args['password']) < 6 ) { return '
'.$Language->g('Password must be at least 6 characters long').'
'; } // Check invalid email if( !Valid::email($args['email']) && ($args['noCheckEmail']=='0') ) { return '
'.$Language->g('Your email address is invalid').'
'.$Language->g('Proceed anyway').'
'; } // Sanitize email $email = sanitize::email($args['email']); // Install Bludit install($args['password'], $email, $args['timezone']); return true; } // ============================================================================ // MAIN // ============================================================================ $error = ''; if( alreadyInstalled() ) { exit('Bludit already installed'); } if( $_SERVER['REQUEST_METHOD'] == 'POST' ) { $error = checkPOST($_POST); if($error===true) { if(!headers_sent()) { header("Location:".HTML_PATH_ROOT, TRUE, 302); exit; } exit(''); } } ?> <?php echo $Language->get('Bludit Installer') ?>

get('Bludit Installer') ?>

'; echo '
FAIL
'; echo '

'.$values['title'].'

'; echo $values['errorText']; echo '
'; } } // Second step elseif(isset($_GET['language'])) { ?>

get('Complete the form choose a password for the username admin') ?>

'.$error.'
'; } ?>
p('Show password') ?>

get('Choose your language') ?>