chengdulittlea
/
LaMDWikiV4


			
							123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132
							<html>
<head>
<title>
Setup Selfauth
</title>
<style>
h1{text-align:center;margin-top:5%;}
h2{text-align:center;}
.instructions{text-align:center;}
.message{margin-top:20px;text-align:center;font-size:1.2em;font-weight:bold;}
pre {width:400px; margin-left:auto; margin-right:auto;margin-bottom:50px;}
form{ 
margin-left:auto;
width:300px;
margin-right:auto;
text-align:center;
margin-top:20px;
border:solid 1px black;
padding:20px;
}
.form-line{ margin-top:5px;}
.submit{width:100%}
</style>
</head>
<body>
<h1>Setup Selfauth</h1>
<div>
<?php
define('RANDOM_BYTE_COUNT', 32);

$app_url = 'http' . (isset($_SERVER['HTTPS']) ? 's' : '') . '://' . $_SERVER['HTTP_HOST']
  . str_replace('setup.php', '', $_SERVER['REQUEST_URI']);

if (function_exists('random_bytes')) {
    $bytes = random_bytes(RANDOM_BYTE_COUNT);
    $strong_crypto = true;
} elseif (function_exists('openssl_random_pseudo_bytes')) {
    $bytes = openssl_random_pseudo_bytes(RANDOM_BYTE_COUNT, $strong_crypto);
} else {
    $bytes = '';
    for ($i=0; $i < RANDOM_BYTE_COUNT; $i++) {
        $bytes .= chr(mt_rand(0, 255));
    }
    $strong_crypto = false;
}
$app_key = bin2hex($bytes);

$configfile= __DIR__ . '/config.php';

$configured = true;

if (file_exists($configfile)) {
    include_once $configfile;

    if ((!defined('APP_URL') || APP_URL == '')
        || (!defined('APP_KEY') || APP_KEY == '')
        || (!defined('USER_HASH') || USER_HASH == '')
        || (!defined('USER_URL') || USER_URL == '')
    ) {
        $configured = false;
    }
} else {
    $configured = false;
}

if ($configured) : ?>
    <h2>System already configured</h2>
    <div class="instructions">
        If you with to reconfigure, please remove config.php and reload this page.
    </div>

<?php else : ?>
    <?php if ($strong_crypto === false) : ?>
        <h2>
           WARNING: this version of PHP does not support functions 'random_bytes' or 'openssl_random_pseudo_bytes'. 
           This means your application is not as secure as it could be.  You may continues, but it is strongly recommended you upgrade PHP.
        </h2> 
    <?php endif; ?>

    <div class="instructions">In order to configure Selfauth, you need to fill in a few values, this page helps generate those options.</div>
    <?php if (isset($_POST['username'])) : ?>
    <div>
    <?php
    $app_url = 'http' . (isset($_SERVER['HTTPS']) ? 's' : '') . '://' . $_SERVER['HTTP_HOST'] . str_replace('setup.php', '', $_SERVER['REQUEST_URI']);

    $user = $_POST['username'];

    $user_tmp = trim(preg_replace('/^https?:\/\//', '', $_POST['username']), '/');
    $pass = md5($user_tmp . $_POST['password'] . $app_key);

    $config_file_contents = "<?php
define('APP_URL', '$app_url');
define('APP_KEY', '$app_key');
define('USER_HASH', '$pass');
define('USER_URL', '$user');";

    $file_written = false;

    if (is_writeable($configfile) && !$configured) {
        $handle = fopen($configfile, 'w');

        if ($handle) {
            $result = fwrite($handle, $config_file_contents);
            if ($result !== false) {
                $file_written = true;
            }
        }

        fclose($handle);
    }else{
    }


    if ($file_written) {
        echo '<div class="message">config.php was successfully written to disk</div>';
    } else {
        echo '<div class="message">Fill in the file config.php with the following content</div>';
        echo '<pre>';
        echo htmlentities($config_file_contents);
        echo '</pre>';
    }
?>
    </div>
    <?php endif ?>
    <form method="POST" action="">
    <div class="form-line"><label>Login Url:</label> <input name='username' /></div>
    <div class="form-line"><label>Password:</label> <input type='password' name='password' /></div>
    <div class="form-line"><input class="submit" type="submit" name="submit" value="Generate Config"/></div>
    </form>
<?php endif; ?>
</body>
</html>