2015-09-22 21:21:31 +00:00
|
|
|
<?php
|
|
|
|
/**
|
2016-07-11 09:58:15 +00:00
|
|
|
* PrivateBin
|
2015-09-22 21:21:31 +00:00
|
|
|
*
|
|
|
|
* a zero-knowledge paste bin
|
|
|
|
*
|
2016-07-11 09:58:15 +00:00
|
|
|
* @link https://github.com/PrivateBin/PrivateBin
|
2015-09-22 21:21:31 +00:00
|
|
|
* @copyright 2012 Sébastien SAUVAGE (sebsauvage.net)
|
2016-07-19 11:56:52 +00:00
|
|
|
* @license https://www.opensource.org/licenses/zlib-license.php The zlib/libpng License
|
2019-09-22 17:42:04 +00:00
|
|
|
* @version 1.3.1
|
2015-09-22 21:21:31 +00:00
|
|
|
*/
|
2016-12-12 17:43:23 +00:00
|
|
|
|
2016-12-12 17:50:00 +00:00
|
|
|
namespace PrivateBin;
|
2016-07-21 15:09:48 +00:00
|
|
|
|
|
|
|
use Exception;
|
|
|
|
use PDO;
|
2017-10-08 17:23:33 +00:00
|
|
|
use PrivateBin\Persistence\DataStore;
|
2016-07-21 15:09:48 +00:00
|
|
|
|
2015-09-22 21:21:31 +00:00
|
|
|
/**
|
2016-08-09 09:54:42 +00:00
|
|
|
* Configuration
|
2015-09-22 21:21:31 +00:00
|
|
|
*
|
|
|
|
* parses configuration file, ensures default values present
|
|
|
|
*/
|
2016-08-09 09:54:42 +00:00
|
|
|
class Configuration
|
2015-09-22 21:21:31 +00:00
|
|
|
{
|
|
|
|
/**
|
|
|
|
* parsed configuration
|
|
|
|
*
|
|
|
|
* @var array
|
|
|
|
*/
|
|
|
|
private $_configuration;
|
|
|
|
|
|
|
|
/**
|
|
|
|
* default configuration
|
|
|
|
*
|
|
|
|
* @var array
|
|
|
|
*/
|
2016-07-11 12:15:20 +00:00
|
|
|
private static $_defaults = array(
|
2015-09-22 21:21:31 +00:00
|
|
|
'main' => array(
|
2017-01-01 15:33:11 +00:00
|
|
|
'name' => 'PrivateBin',
|
2016-10-29 08:24:08 +00:00
|
|
|
'discussion' => true,
|
|
|
|
'opendiscussion' => false,
|
|
|
|
'password' => true,
|
|
|
|
'fileupload' => false,
|
2015-09-22 21:21:31 +00:00
|
|
|
'burnafterreadingselected' => false,
|
2016-10-29 08:24:08 +00:00
|
|
|
'defaultformatter' => 'plaintext',
|
|
|
|
'syntaxhighlightingtheme' => null,
|
2019-09-20 05:04:26 +00:00
|
|
|
'sizelimit' => 10485760,
|
2016-10-29 08:24:08 +00:00
|
|
|
'template' => 'bootstrap',
|
|
|
|
'notice' => '',
|
|
|
|
'languageselection' => false,
|
|
|
|
'languagedefault' => '',
|
|
|
|
'urlshortener' => '',
|
2017-12-25 13:59:15 +00:00
|
|
|
'qrcode' => true,
|
2016-10-29 08:24:08 +00:00
|
|
|
'icon' => 'identicon',
|
2019-08-18 02:17:35 +00:00
|
|
|
'cspheader' => 'default-src \'none\'; manifest-src \'self\'; connect-src * blob:; script-src \'self\' \'unsafe-eval\'; style-src \'self\'; font-src \'self\'; img-src \'self\' data: blob:; media-src blob:; object-src blob:; sandbox allow-same-origin allow-scripts allow-forms allow-popups allow-modals',
|
2016-10-29 08:24:08 +00:00
|
|
|
'zerobincompatibility' => false,
|
2019-06-17 19:40:37 +00:00
|
|
|
'httpwarning' => true,
|
2019-06-23 17:45:40 +00:00
|
|
|
'compression' => 'zlib',
|
2015-09-22 21:21:31 +00:00
|
|
|
),
|
|
|
|
'expire' => array(
|
|
|
|
'default' => '1week',
|
|
|
|
),
|
|
|
|
'expire_options' => array(
|
2016-10-29 08:24:08 +00:00
|
|
|
'5min' => 300,
|
|
|
|
'10min' => 600,
|
|
|
|
'1hour' => 3600,
|
|
|
|
'1day' => 86400,
|
|
|
|
'1week' => 604800,
|
2015-09-22 21:21:31 +00:00
|
|
|
'1month' => 2592000,
|
2016-10-29 08:24:08 +00:00
|
|
|
'1year' => 31536000,
|
|
|
|
'never' => 0,
|
2015-09-22 21:21:31 +00:00
|
|
|
),
|
|
|
|
'formatter_options' => array(
|
2016-10-29 08:24:08 +00:00
|
|
|
'plaintext' => 'Plain Text',
|
2015-09-22 21:21:31 +00:00
|
|
|
'syntaxhighlighting' => 'Source Code',
|
2016-10-29 08:24:08 +00:00
|
|
|
'markdown' => 'Markdown',
|
2015-09-22 21:21:31 +00:00
|
|
|
),
|
|
|
|
'traffic' => array(
|
2016-10-29 08:24:08 +00:00
|
|
|
'limit' => 10,
|
2015-09-22 21:21:31 +00:00
|
|
|
'header' => null,
|
2016-10-29 08:24:08 +00:00
|
|
|
'dir' => 'data',
|
2015-09-22 21:21:31 +00:00
|
|
|
),
|
2016-07-15 15:02:59 +00:00
|
|
|
'purge' => array(
|
2016-10-29 08:24:08 +00:00
|
|
|
'limit' => 300,
|
2016-07-15 15:02:59 +00:00
|
|
|
'batchsize' => 10,
|
2016-10-29 08:24:08 +00:00
|
|
|
'dir' => 'data',
|
2016-07-15 15:02:59 +00:00
|
|
|
),
|
2015-09-22 21:21:31 +00:00
|
|
|
'model' => array(
|
2016-08-09 09:54:42 +00:00
|
|
|
'class' => 'Filesystem',
|
2015-09-22 21:21:31 +00:00
|
|
|
),
|
|
|
|
'model_options' => array(
|
|
|
|
'dir' => 'data',
|
|
|
|
),
|
|
|
|
);
|
|
|
|
|
|
|
|
/**
|
|
|
|
* parse configuration file and ensure default configuration values are present
|
|
|
|
*
|
|
|
|
* @throws Exception
|
|
|
|
*/
|
|
|
|
public function __construct()
|
|
|
|
{
|
2016-08-15 14:45:47 +00:00
|
|
|
$config = array();
|
2019-12-20 10:42:59 +00:00
|
|
|
$basePath = PATH . 'cfg' . DIRECTORY_SEPARATOR;
|
2019-12-19 09:49:59 +00:00
|
|
|
$configIni = $basePath . 'conf.ini';
|
2019-12-24 18:50:49 +00:00
|
|
|
$configFile = $basePath . 'conf.php';
|
2019-12-19 09:49:59 +00:00
|
|
|
|
|
|
|
if (getenv('CONFIG_PATH') !== false) {
|
|
|
|
$configFile = getenv('CONFIG_PATH');
|
2019-12-24 18:50:49 +00:00
|
|
|
|
|
|
|
// Rename INI files to avoid configuration leakage
|
|
|
|
if (
|
|
|
|
strtolower(substr($configFile, -3, 3)) == 'ini' &&
|
|
|
|
is_readable($configFile) &&
|
|
|
|
is_writable(dirname($configFile))
|
|
|
|
) {
|
|
|
|
$oldConfigFile = $configFile;
|
|
|
|
$configFile = substr($configFile, 0, -3) . 'php';
|
|
|
|
DataStore::prependRename($oldConfigFile, $configFile, ';');
|
|
|
|
}
|
2019-12-19 09:49:59 +00:00
|
|
|
}
|
2017-10-04 19:55:03 +00:00
|
|
|
|
|
|
|
// rename INI files to avoid configuration leakage
|
|
|
|
if (is_readable($configIni)) {
|
2017-10-08 17:16:09 +00:00
|
|
|
DataStore::prependRename($configIni, $configFile, ';');
|
2017-10-04 19:55:03 +00:00
|
|
|
|
|
|
|
// cleanup sample, too
|
2017-10-08 17:16:09 +00:00
|
|
|
$configIniSample = $configIni . '.sample';
|
2017-10-04 19:55:03 +00:00
|
|
|
if (is_readable($configIniSample)) {
|
2019-12-19 09:49:59 +00:00
|
|
|
DataStore::prependRename($configIniSample, $basePath . 'conf.sample.php', ';');
|
2017-10-04 19:55:03 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2016-07-26 06:19:35 +00:00
|
|
|
if (is_readable($configFile)) {
|
2015-10-22 19:13:15 +00:00
|
|
|
$config = parse_ini_file($configFile, true);
|
2016-07-13 07:41:45 +00:00
|
|
|
foreach (array('main', 'model', 'model_options') as $section) {
|
2015-10-22 19:13:15 +00:00
|
|
|
if (!array_key_exists($section, $config)) {
|
2016-08-09 09:54:42 +00:00
|
|
|
throw new Exception(I18n::_('PrivateBin requires configuration section [%s] to be present in configuration file.', $section), 2);
|
2015-10-22 19:13:15 +00:00
|
|
|
}
|
2015-09-22 21:21:31 +00:00
|
|
|
}
|
|
|
|
}
|
2017-10-04 19:55:03 +00:00
|
|
|
|
2015-10-24 06:44:17 +00:00
|
|
|
$opts = '_options';
|
2016-07-26 06:19:35 +00:00
|
|
|
foreach (self::getDefaults() as $section => $values) {
|
2015-10-24 06:44:17 +00:00
|
|
|
// fill missing sections with default values
|
2016-07-26 06:19:35 +00:00
|
|
|
if (!array_key_exists($section, $config) || count($config[$section]) == 0) {
|
2015-10-24 06:44:17 +00:00
|
|
|
$this->_configuration[$section] = $values;
|
2016-07-26 06:19:35 +00:00
|
|
|
if (array_key_exists('dir', $this->_configuration[$section])) {
|
2015-09-22 21:21:31 +00:00
|
|
|
$this->_configuration[$section]['dir'] = PATH . $this->_configuration[$section]['dir'];
|
|
|
|
}
|
|
|
|
continue;
|
|
|
|
}
|
2015-09-27 01:03:55 +00:00
|
|
|
// provide different defaults for database model
|
2016-07-13 07:41:45 +00:00
|
|
|
elseif (
|
|
|
|
$section == 'model_options' && in_array(
|
|
|
|
$this->_configuration['model']['class'],
|
2016-08-09 09:54:42 +00:00
|
|
|
array('Database', 'privatebin_db', 'zerobin_db')
|
2016-07-13 07:41:45 +00:00
|
|
|
)
|
2016-07-26 06:19:35 +00:00
|
|
|
) {
|
2015-09-27 01:03:55 +00:00
|
|
|
$values = array(
|
2016-08-09 09:54:42 +00:00
|
|
|
'dsn' => 'sqlite:' . PATH . 'data' . DIRECTORY_SEPARATOR . 'db.sq3',
|
2015-09-27 01:03:55 +00:00
|
|
|
'tbl' => null,
|
|
|
|
'usr' => null,
|
|
|
|
'pwd' => null,
|
|
|
|
'opt' => array(PDO::ATTR_PERSISTENT => true),
|
|
|
|
);
|
|
|
|
}
|
2015-10-24 06:44:17 +00:00
|
|
|
|
|
|
|
// "*_options" sections don't require all defaults to be set
|
|
|
|
if (
|
|
|
|
$section !== 'model_options' &&
|
|
|
|
($from = strlen($section) - strlen($opts)) >= 0 &&
|
|
|
|
strpos($section, $opts, $from) !== false
|
2016-07-26 06:19:35 +00:00
|
|
|
) {
|
|
|
|
if (is_int(current($values))) {
|
2015-10-24 06:44:17 +00:00
|
|
|
$config[$section] = array_map('intval', $config[$section]);
|
2015-09-22 21:21:31 +00:00
|
|
|
}
|
2015-10-24 06:44:17 +00:00
|
|
|
$this->_configuration[$section] = $config[$section];
|
|
|
|
}
|
|
|
|
// check for missing keys and set defaults if necessary
|
2016-07-26 06:19:35 +00:00
|
|
|
else {
|
|
|
|
foreach ($values as $key => $val) {
|
|
|
|
if ($key == 'dir') {
|
2015-10-24 06:44:17 +00:00
|
|
|
$val = PATH . $val;
|
2015-09-22 21:21:31 +00:00
|
|
|
}
|
2015-10-24 06:44:17 +00:00
|
|
|
$result = $val;
|
2016-07-26 06:19:35 +00:00
|
|
|
if (array_key_exists($key, $config[$section])) {
|
|
|
|
if ($val === null) {
|
2015-10-24 06:44:17 +00:00
|
|
|
$result = $config[$section][$key];
|
2016-07-26 06:19:35 +00:00
|
|
|
} elseif (is_bool($val)) {
|
2015-10-24 06:44:17 +00:00
|
|
|
$val = strtolower($config[$section][$key]);
|
2016-07-26 06:19:35 +00:00
|
|
|
if (in_array($val, array('true', 'yes', 'on'))) {
|
2015-10-24 06:44:17 +00:00
|
|
|
$result = true;
|
2016-07-26 06:19:35 +00:00
|
|
|
} elseif (in_array($val, array('false', 'no', 'off'))) {
|
2015-10-24 06:44:17 +00:00
|
|
|
$result = false;
|
2016-07-26 06:19:35 +00:00
|
|
|
} else {
|
2015-10-24 06:44:17 +00:00
|
|
|
$result = (bool) $config[$section][$key];
|
|
|
|
}
|
2016-07-26 06:19:35 +00:00
|
|
|
} elseif (is_int($val)) {
|
2015-10-24 06:44:17 +00:00
|
|
|
$result = (int) $config[$section][$key];
|
2016-07-26 06:19:35 +00:00
|
|
|
} elseif (is_string($val) && !empty($config[$section][$key])) {
|
2015-10-24 06:44:17 +00:00
|
|
|
$result = (string) $config[$section][$key];
|
2015-09-22 21:21:31 +00:00
|
|
|
}
|
|
|
|
}
|
2015-10-24 06:44:17 +00:00
|
|
|
$this->_configuration[$section][$key] = $result;
|
2015-09-22 21:21:31 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
2015-10-24 06:44:17 +00:00
|
|
|
|
2016-07-22 13:31:42 +00:00
|
|
|
// support for old config file format, before the fork was renamed and PSR-4 introduced
|
2016-07-13 07:41:45 +00:00
|
|
|
$this->_configuration['model']['class'] = str_replace(
|
|
|
|
'zerobin_', 'privatebin_',
|
|
|
|
$this->_configuration['model']['class']
|
|
|
|
);
|
|
|
|
|
2016-07-22 13:31:42 +00:00
|
|
|
$this->_configuration['model']['class'] = str_replace(
|
|
|
|
array('privatebin_data', 'privatebin_db'),
|
2016-08-09 09:54:42 +00:00
|
|
|
array('Filesystem', 'Database'),
|
2016-07-22 13:31:42 +00:00
|
|
|
$this->_configuration['model']['class']
|
|
|
|
);
|
|
|
|
|
2015-10-24 06:44:17 +00:00
|
|
|
// ensure a valid expire default key is set
|
2016-07-26 06:19:35 +00:00
|
|
|
if (!array_key_exists($this->_configuration['expire']['default'], $this->_configuration['expire_options'])) {
|
2015-10-24 06:44:17 +00:00
|
|
|
$this->_configuration['expire']['default'] = key($this->_configuration['expire_options']);
|
|
|
|
}
|
2015-09-22 21:21:31 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* get configuration as array
|
|
|
|
*
|
2018-05-27 13:18:25 +00:00
|
|
|
* @return array
|
2015-09-22 21:21:31 +00:00
|
|
|
*/
|
|
|
|
public function get()
|
|
|
|
{
|
|
|
|
return $this->_configuration;
|
|
|
|
}
|
|
|
|
|
2016-07-11 12:15:20 +00:00
|
|
|
/**
|
|
|
|
* get default configuration as array
|
|
|
|
*
|
2018-05-27 13:18:25 +00:00
|
|
|
* @return array
|
2016-07-11 12:15:20 +00:00
|
|
|
*/
|
|
|
|
public static function getDefaults()
|
|
|
|
{
|
|
|
|
return self::$_defaults;
|
|
|
|
}
|
2015-09-22 21:21:31 +00:00
|
|
|
|
|
|
|
/**
|
|
|
|
* get a key from the configuration, typically the main section or all keys
|
|
|
|
*
|
|
|
|
* @param string $key
|
|
|
|
* @param string $section defaults to main
|
|
|
|
* @throws Exception
|
2018-05-27 13:18:25 +00:00
|
|
|
* @return mixed
|
2015-09-22 21:21:31 +00:00
|
|
|
*/
|
|
|
|
public function getKey($key, $section = 'main')
|
|
|
|
{
|
|
|
|
$options = $this->getSection($section);
|
2016-07-26 06:19:35 +00:00
|
|
|
if (!array_key_exists($key, $options)) {
|
2016-08-09 09:54:42 +00:00
|
|
|
throw new Exception(I18n::_('Invalid data.') . " $section / $key", 4);
|
2015-09-22 21:21:31 +00:00
|
|
|
}
|
|
|
|
return $this->_configuration[$section][$key];
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
2016-07-06 12:12:14 +00:00
|
|
|
* get a section from the configuration, must exist
|
2015-09-22 21:21:31 +00:00
|
|
|
*
|
2016-07-06 12:12:14 +00:00
|
|
|
* @param string $section
|
2015-09-22 21:21:31 +00:00
|
|
|
* @throws Exception
|
2018-05-27 13:18:25 +00:00
|
|
|
* @return mixed
|
2015-09-22 21:21:31 +00:00
|
|
|
*/
|
|
|
|
public function getSection($section)
|
|
|
|
{
|
2016-07-26 06:19:35 +00:00
|
|
|
if (!array_key_exists($section, $this->_configuration)) {
|
2017-01-01 15:33:11 +00:00
|
|
|
throw new Exception(I18n::_('%s requires configuration section [%s] to be present in configuration file.', I18n::_($this->getKey('name')), $section), 3);
|
2015-09-22 21:21:31 +00:00
|
|
|
}
|
|
|
|
return $this->_configuration[$section];
|
|
|
|
}
|
|
|
|
}
|