200,
'DEFAULT_TRASHBIN_DELAY' => 60*60*24*30,
'STORAGE_PATH' => __DIR__ . '/../data/%s',
'DB_FILE' => __DIR__ . '/../data/db.sqlite',
'WOPI_DISCOVERY_URL' => null,
'ACCESS_CONTROL_ALL' => false,
'LOG_FILE' => null,
'ENABLE_XSENDFILE' => false,
'DISABLE_SLOW_OPERATIONS' => false,
'ERRORS_SHOW' => true,
'ERRORS_EMAIL' => null,
'ERRORS_LOG' => __DIR__ . '/../data/error.log',
'ERRORS_REPORT_URL' => null,
'AUTH_CALLBACK' => null,
'LDAP_HOST' => null,
'LDAP_PORT' => null,
'LDAP_SECURE' => null,
'LDAP_LOGIN' => null,
'LDAP_BASE' => null,
'LDAP_DISPLAY_NAME' => null,
'LDAP_FIND_USER' => null,
'LDAP_FIND_IS_ADMIN' => null,
];
foreach ($defaults as $const => $value) {
if (!defined('KaraDAV\\' . $const)) {
define('KaraDAV\\' . $const, $value);
}
}
if (!ERRORS_SHOW) {
ErrorManager::enable(ErrorManager::PRODUCTION);
}
else {
ErrorManager::enable(ErrorManager::DEVELOPMENT);
}
if (ERRORS_EMAIL) {
ErrorManager::setEmail(ERRORS_EMAIL);
}
if (ERRORS_LOG) {
ErrorManager::setLogFile(ERRORS_LOG);
}
elseif (is_writeable(__DIR__ . '/../data/error.log')) {
ErrorManager::setLogFile(__DIR__ . '/../data/error.log');
}
if (ERRORS_REPORT_URL) {
ErrorManager::setRemoteReporting(ERRORS_REPORT_URL, true);
}
// Create random secret key
if (!defined('KaraDAV\SECRET_KEY')) {
$cfg = file_exists($cfg_file) ? file_get_contents($cfg_file) : "Configuration missing";
echo "KaraDAV cannot write to config.local.php
";
echo "Please append the following code to the config.local.php file:
";
printf('', htmlspecialchars($c));
exit(1);
}
$cfg = preg_replace('/\?>\s*$|$/', $c, $cfg, 1);
file_put_contents($cfg_file, $cfg);
define('KaraDAV\SECRET_KEY', $secret);
unset($secret, $cfg_file, $cfg);
}
}
if (!defined('KaraDAV\WWW_URL')) {
$https = (!empty($_SERVER['HTTPS']) || $_SERVER['SERVER_PORT'] == 443) ? 's' : '';
$name = $_SERVER['SERVER_NAME'];
$port = !in_array($_SERVER['SERVER_PORT'], [80, 443]) ? ':' . $_SERVER['SERVER_PORT'] : '';
$root = '/';
define('KaraDAV\WWW_URL', sprintf('http%s://%s%s%s', $https, $name, $port, $root));
}
// Init database
if (!file_exists(DB_FILE)) {
$parent = dirname(DB_FILE);
if (!file_exists($parent)) {
@mkdir($parent, 0777, true);
}
if (!is_writable($parent)) {
throw new \RuntimeException('Cannot create database in directory: ' . $parent);
}
$db = DB::getInstance();
$db->exec('BEGIN;');
$db->exec(file_get_contents(__DIR__ . '/../schema.sql'));
if (!LDAP::enabled()) {
$users = new Users;
$p = 'karadavdemo';
$users->create('demo', $p, 10, true);
$users->login('demo', $p);
$_SESSION['install_password'] = $p;
}
$db->exec('END;');
}
function html_head(string $title): void
{
$title = htmlspecialchars($title);
echo <<
{$title}
{$title}
EOF;
if (isset($_SESSION['install_password'])) {
printf('Your server has been installed with a user named demo and the password %s, please change it.
This message will disappear when you log out.
', htmlspecialchars($_SESSION['install_password']));
}
}
function html_foot(): void
{
echo '
';
}
function format_bytes(int $bytes, string $unit = 'B'): string
{
if ($bytes >= 1024*1024*1024) {
return round($bytes / (1024*1024*1024), 1) . ' G' . $unit;
}
elseif ($bytes >= 1024*1024) {
return round($bytes / (1024*1024), 1) . ' M' . $unit;
}
elseif ($bytes >= 1024) {
return round($bytes / 1024, 1) . ' K' . $unit;
}
else {
return $bytes . ' ' . $unit;
}
}
function http_log(string $message, ...$params): void
{
if (!LOG_FILE) {
return;
}
$msg = vsprintf($message, $params) . "\n\n";
if (LOG_FILE) {
file_put_contents(LOG_FILE, $msg, FILE_APPEND);
}
}
function html_csrf()
{
$expire = time() + 1800;
$random = random_bytes(10);
$action = $_SERVER['REQUEST_URI'];
$token = hash_hmac('sha256', $expire . $random . $action, STORAGE_PATH . session_id());
return sprintf('', $token, base64_encode($random), $expire);
}
function csrf_check(): bool
{
if (empty($_POST['_c_'])) {
return false;
}
$verify = strtok($_POST['_c_'], ':');
$random = base64_decode(strtok(':'));
$expire = strtok(false);
if ($expire < time()) {
return false;
}
$action = $_SERVER['REQUEST_URI'];
$token = hash_hmac('sha256', $expire . $random . $action, STORAGE_PATH . session_id());
return hash_equals($token, $verify);
}
function html_csrf_error()
{
if (empty($_POST['_c_'])) {
return;
}
if (!csrf_check()) {
echo 'Sorry, but the form expired, please submit it again.
';
}
}