"; } return ""; } function urlForPage($page = '') : string { if (!PP_MOD_REWRITE) { $page .= '.php'; } return (isset($_SERVER['HTTPS']) ? 'https://' : 'http://') . $_SERVER['HTTP_HOST'] . rtrim(dirname($_SERVER['PHP_SELF']), '/\\') . '/' . $page; } function urlForPaste(Paste $paste) : string { if (PP_MOD_REWRITE) { return "/{$paste->id}"; } return "/paste.php?id={$paste->id}"; } function urlForMember(User $user) : string { if (PP_MOD_REWRITE) { return '/user/' . urlencode($user->username); } return '/user.php?name=' . urlencode($user->username); } /** * @throws Exception if the names and values aren't the same length */ function optionsForSelect(array $displays, array $values, string $currentSelection = null) : string { $size = count($displays); if (count($values) !== $size) { throw new Exception('Option names and option values must be the same count'); } $html = ''; for ($i = 0; $i < $size; $i++) { $html .= ''; } return $html; } /** * @throws Exception if the flash level is invalid */ function flash(string $level, string $message) { if (!isset($_SESSION['flashes'])) { $_SESSION['flashes'] = [ 'success' => [], 'warning' => [], 'error' => [] ]; } if (!array_key_exists($level, $_SESSION['flashes'])) { throw new Exception('Invalid flash level ' . $level); } $_SESSION['flashes'][$level][] = $message; } function flashError(string $message) { flash('error', $message); } function flashWarning(string $message) { flash('warning', $message); } function flashSuccess(string $message) { flash('success', $message); } function getFlashes() { if (!isset($_SESSION['flashes'])) { return ['success' => [], 'warning' => [], 'error' => []]; } $flashes = $_SESSION['flashes']; unset($_SESSION['flashes']); return $flashes; } /* Database functions */ function getSiteInfo() : array { return require(__DIR__ . '/../config/site.php'); } /** * Specialization of `htmlentities()` that avoids double escaping and uses UTF-8. * * @param string $unescaped String to escape * @return string HTML-escaped string */ function pp_html_escape(string $unescaped) : string { return htmlspecialchars($unescaped, ENT_QUOTES, 'UTF-8', false); } /* I think there is one row for each day, and in that row, tpage = non-unique, tvisit = unique page views for that day */ function updatePageViews() : void { global $redis; $ip = $_SERVER['REMOTE_ADDR']; $date = date('jS F Y'); $last_page_view = PageView::orderBy('id', 'desc')->limit(1)->first(); if ($last_page_view && $last_page_view->date == $date) { if (!$redis->sIsMember('page_view_ips', $ip)) { $last_page_view->tvisit++; $redis->sAdd('page_view_ips', $ip); } $last_page_view->tpage++; $last_page_view->save(); } else { $redis->del('page_view_ips'); // New date is created $new_page_view = new PageView(['date' => $date]); $new_page_view->save(); $redis->sAdd('page_view_ips', $ip); } } function setupCsrfToken() : string { if (isset($_SESSION[SessionHelper::CSRF_TOKEN_KEY])) { return $_SESSION[SessionHelper::CSRF_TOKEN_KEY]; } $token = pp_random_token(); $_SESSION[SessionHelper::CSRF_TOKEN_KEY] = $token; return $token; } function verifyCsrfToken($token = null) : bool { if ($token === null) { $token = $_POST[SessionHelper::CSRF_TOKEN_KEY]; } if (empty($token) || empty($_SESSION[SessionHelper::CSRF_TOKEN_KEY])) { return false; } $success = hash_equals($_SESSION[SessionHelper::CSRF_TOKEN_KEY], $token); unset($_SESSION[SessionHelper::CSRF_TOKEN_KEY]); return $success; } session_start(); /* Set up the database and Eloquent ORM */ $capsule = new Capsule(); $capsule->addConnection([ 'driver' => 'mysql', 'host' => $db_host, 'database' => $db_schema, 'username' => $db_user, 'password' => $db_pass , 'charset' => 'utf8mb4', 'prefix' => '' ]); $capsule->setAsGlobal(); $capsule->bootEloquent(); // Check if IP is banned $ip = $_SERVER['REMOTE_ADDR']; if (IPBan::where('ip', $ip)->first()) { die('You have been banned.'); } /* Set up Redis */ $redis = new Redis(); $redis->pconnect(PP_REDIS_HOST); // Setup site info $site_info = getSiteInfo(); $global_site_info = $site_info['site_info']; $row = $site_info['site_info']; $title = trim($row['title']); $baseurl = trim($row['baseurl']); $site_name = trim($row['site_name']); $email = trim($row['email']); $additional_scripts = trim($row['additional_scripts']); // Setup theme $default_theme = 'bulma'; // Site permissions $site_permissions = $site_info['permissions']; $site_is_private = false; $site_disable_guests = false; if ($site_permissions) { $site_is_private = (bool) $site_permissions['private']; $site_disable_guests = (bool) $site_permissions['disable_guest']; } // CAPTCHA configuration $captcha_config = $site_info['captcha']; $captcha_enabled = (bool) $captcha_config['enabled']; $total_pastes = Paste::count(); $total_page_views = PageView::select('tpage')->orderBy('id', 'desc')->first()->tpage; $total_unique_views = PageView::select('tvisit')->orderBy('id', 'desc')->first()->tvisit; $current_user = SessionHelper::currentUser(); function can(string $action, mixed $subject) : bool { global $current_user; static $current_ability = null; if ($current_ability === null) { $current_ability = new AbilityHelper($current_user); } return $current_ability->can($action, $subject); } $script_bundles = []; /* Security headers */ header('X-Frame-Options: SAMEORIGIN'); header('X-Content-Type-Options: nosniff');