UserSpice 5.0

README.md

@@ -1 +1,12 @@
-# UserSpice5
+# UserSpice5
+ +UserSpice 5 is a tool for quickly developing PHP applications. 
+ +
+ +Ideally the git repository is for tracking changes.  All downloads should probably go through UserSpice.com where they are properly packaged for installtion.
+ +
+ +What makes UserSpice different from almost any other PHP User Management Framework is that it has been designed from the beginning to get out of your way so you can spend your time working on your project. Other systems may force you to use their rewriting rules, template engines, frameworks, etc. UserSpice doesn't. You can use as much of it or as little as you choose. It just sits there and does its job.
+ +
+ +In most cases, UserSpice can control access to your existing pages with a single line of code. From there, we provide an incredible set of PHP Classes and Functions that you can choose to use or not use. Don't like the look? It's built using Bootstrap. You can change the look and feel of your site in seconds with a new css file and some well-documented tweaks.
+ +
+ +Most importantly, UserSpice is constantly in development. It's constantly getting better and more secure while maintaining the goal of getting out of the way. As additional major features are added, they will be in the form of plugins to keep things modular.
+ +
+ +So you can get on with the business of designing your project. All while being Bootstrap compatible so you can easily change the look and feel of your project. The goal of UserSpice is to strike a balance of being feature-rich without being bloated.

index.php

@@ -0,0 +1,38 @@
+<?php
+if(file_exists("install/index.php")){
+	//perform redirect if installer files exist
+	//this if{} block may be deleted once installed
+	header("Location: install/index.php");
+}
+
+require_once 'users/init.php';
+require_once $abs_us_root.$us_url_root.'users/includes/template/prep.php';
+if(isset($user) && $user->isLoggedIn()){
+}
+?>
+<div id="page-wrapper">
+	<div class="container">
+		<div class="jumbotron">
+			<h1 align="center"><?=lang("JOIN_SUC");?> <?php echo $settings->site_name;?></h1>
+			<p align="center" class="text-muted"><?=lang("MAINT_OPEN")?></p>
+			<p align="center">
+				<?php
+				if($user->isLoggedIn()){?>
+					<a class="btn btn-primary" href="users/account.php" role="button"><?=lang("ACCT_HOME");?> &raquo;</a>
+				<?php }else{?>
+					<a class="btn btn-warning" href="users/login.php" role="button"><?=lang("SIGNIN_TEXT");?> &raquo;</a>
+					<a class="btn btn-info" href="users/join.php" role="button"><?=lang("SIGNUP_TEXT");?> &raquo;</a>
+				<?php }?>
+			</p>
+			<br>
+			<p align="center"><?=lang("MAINT_PLEASE");?></p>
+			<h4 align="center"><a href="https://userspice.com/getting-started/">https://userspice.com/getting-started/</a></h4>
+		</div>
+<?php  languageSwitcher();?> 
+	</div>
+</div>
+
+<!-- Place any per-page javascript here -->
+
+
+<?php require_once $abs_us_root . $us_url_root . 'users/includes/html_footer.php'; ?>

install/cleanup.php

@@ -0,0 +1,38 @@
+<p align="center"><?php
+include("install/includes/install_settings.php");
+foreach ($files as $file) {
+	if (!unlink($file)) {
+		echo ("Error deleting $file<br>");
+	}else{
+		echo ("Deleted $file<br>");
+	}
+}
+
+function rrmdir($dir) {
+  if (is_dir($dir)) {
+    $objects = scandir($dir);
+    foreach ($objects as $object) {
+      if ($object != "." && $object != "..") {
+        if (is_dir($dir."/".$object))
+          rrmdir($dir."/".$object);
+        else
+          unlink($dir."/".$object);
+      }
+    }
+    rmdir($dir);
+  }
+}
+rrmdir("install");
+?>
+</p>
+<p align="center">If you made it this far, everything SHOULD be good to go. If you see any errors above, you will want to navigate to the install folder, and delete it manually.  Don't forget to check out UserSpice.com if you need any help. Click the button below to make sure you have the latest updates to your database.</p>
+
+
+<h3 align="center"><a class="button" href="../users/update.php">Update Database and Login!</a></h3>
+
+<?php
+//this is a temporary fix
+require_once("../users/classes/Redirect.php");
+Redirect::to("../users/update.php?installer=1");
+
+?>

install/index.php

@@ -0,0 +1,250 @@
+<?php require_once("install/includes/header.php");
+include "../users/includes/user_spice_ver.php";
+ ?>
+
+<div class="container">
+    <div class="row justify-content-center mt-4">
+        <div class="col-6">
+            <div class="list-group list-group-horizontal-xl">
+                <a href="#" class="list-group-item list-group-item-action active">
+                    <div class="d-flex w-100 justify-content-between">
+                        <h5 class="mb-1">Step 1</h5>
+                    </div>
+                    <p class="mb-1"><?= $step1 ?></p>
+                </a>
+                <a href="#" class="list-group-item list-group-item-action">
+                    <div class="d-flex w-100 justify-content-between">
+                        <h5 class="mb-1">Step 2</h5>
+                    </div>
+                    <p class="mb-1"><?= $step2 ?></p>
+                </a>
+                <a href="#" class="list-group-item list-group-item-action">
+                    <div class="d-flex w-100 justify-content-between">
+                        <h5 class="mb-1">Step 3</h5>
+                    </div>
+                    <p class="mb-1"><?= $step3 ?></p>
+                </a>
+            </div>
+        </div>
+    </div>
+
+    <div class="row mt-4">
+        <div class="col-12">
+          <h1>Welcome to <?= $app_name . " " . $user_spice_ver ?></h1>
+          <?php
+          define('REMOTE_VERSION', 'http://userspice.com/version/version.txt');
+          $remoteVersion=trim(file_get_contents(REMOTE_VERSION));
+          if(version_compare($remoteVersion, $user_spice_ver) ==  1){ ?>
+            <strong><font color="red">This is not the latest version.</font></strong>  The latest version is <strong><?=$remoteVersion?></strong>.  You are free to install this version, but you can also download the latest version at
+            <a href='https://www.userspice.com'>UserSpice.com</a><br><br>
+        <?php   }  ?>
+            <p>This program will walk you through the entire process of configuring <?= $app_name ?>. Before you
+                proceed, you might want to make sure that you're ready to do the install.</p>
+            <p>If you have not already created a new <font color="red"><strong>database</strong></font>, please do so
+                at this time. Make sure that you have the Host Name, Username, Password, and Database name handy, as you
+                will need them to complete the install. Note that if your database user has permission to create
+                databases on your server, the installer can create the database for you in the next step.</p>
+
+            <h3 class="mt-5">System Requirement Check</h3>
+            <?php
+            // Check to make sure php is version is good enough
+            // Set your required PHP version in the install_settings file
+            if (version_compare(phpversion(), $php_ver, '<')) {
+                // php version isn't high enough
+                //The system is designed to do a full stop of you don't meet the minimum PHP version
+                ?>
+                <div class="alert alert-danger" role="alert">We're sorry, but your PHP version is out of date. Please update to PHP <?= $php_ver ?> or later to
+                    continue. <a href='http://php.net/' target='_blank'>PHP Website</a></div>
+                <?php
+            } else {
+            ?>
+            <p>Your PHP version meets the minimum system requirements of <?= $php_ver ?> or later, but you need to
+                make sure your system meets all the rest of the requirements. If you see any red in the table below,
+                please correct those issues before installing.</p>
+
+            <table class="table table-striped">
+                <thead class="thead-dark">
+                <tr>
+                    <th width="50%">Requirement</th>
+                    <th width="50%">State</th>
+                </tr>
+                </thead>
+                <tbody>
+                <tr>
+                    <td>
+                        PHP version >= <?= $php_ver ?>
+                    </td>
+                    <td class="font-weight-bold">
+                        <?php if (phpversion() < $php_ver) {
+                            echo '<span class="text-danger">No</span>';
+                            $errors = 1;
+                        } else {
+                            echo '<span class="text-success">Yes</span>';
+                            $errors = 0;
+                        } ?>
+                    </td>
+                </tr>
+                <tr>
+                    <td>
+                        XML support
+                    </td>
+                    <td class="font-weight-bold">
+                        <?php if (extension_loaded('xml')) {
+                            echo '<span class="text-success">Available</span>';
+                            $errors = 0;
+                        } else {
+                            echo '<span class="text-danger">Unavailable</span>';
+                            $errors = 1;
+                        } ?>
+                    </td>
+                </tr>
+                <tr>
+                    <td>
+                        MySQLi support
+                    </td>
+                    <td class="font-weight-bold">
+                        <?php if (function_exists('mysqli_connect')) {
+                            echo '<span class="text-success">Available</span>';
+                            $errors = 0;
+                        } else {
+                            echo '<span class="text-danger">Unavailable</span>';
+                            $errors = 1;
+                        } ?>
+                    </td>
+                </tr>
+                <tr>
+                    <td>
+                        PDO support
+                    </td>
+                    <td class="font-weight-bold">
+                        <?php if (class_exists('PDO')) {
+                            echo '<span class="text-success">Available</span>';
+                            $errors = 0;
+                        } else {
+                            echo '<span class="text-danger">Unavailable</span>';
+                            $errors = 1;
+                        } ?>
+                    </td>
+                </tr>
+                <tr>
+                    <td>
+                        Is <?= $config_file ?> writeable?
+                    </td>
+                    <td class="font-weight-bold">
+                        <?php
+                        clearstatcache();
+                        if (@file_exists($config_file) && @is_writable($config_file)) {
+                            echo '<span class="text-success">Writeable</span>';
+                        } else {
+                            $errors = 1;
+                            ?>
+                            <span class="text-danger">Unwriteable</span><br>
+                            It is really important that you be able to write to the init file! If you don't know
+                            how to chmod your init file, <a href="//userspice.com/installation-issues/" target="_blank">please read this guide
+                                at UserSpice.com.</a>
+                        <?php } ?>
+                    </td>
+                </tr>
+                </tbody>
+            </table>
+            <?php } ?>
+
+            <h3 class="mt-5">Additional Recommended Settings</h3>
+
+            <p>
+                <?= $app_name ?> Will most likely work regardless of the settings below, however these settings are
+                suggested.
+            </p>
+            <table class="table table-striped" width="100%">
+                <thead class="thead-dark">
+                <tr>
+                    <th width="50%">Setting</th>
+                    <th width="25%">Recommended</th>
+                    <th width="25%">Actual</th>
+                </tr>
+                </thead>
+                <tbody>
+                <?php
+
+                function get_php_setting($val) {
+                    $r = (ini_get($val) == '1' ? 1 : 0);
+                    return $r ? 'ON' : 'OFF';
+                }
+
+                $php_recommended_settings = array(
+                    array('Safe Mode', 'safe_mode', 'OFF'),
+                    array('Display Errors', 'display_errors', 'ON'),
+                    array('File Uploads', 'file_uploads', 'ON'),
+                    array('Register Globals', 'register_globals', 'OFF'),
+                    array('Output Buffering', 'output_buffering', 'OFF'),
+                    array('Session Auto Start', 'session.auto_start', 'OFF'),
+                );
+
+                foreach ($php_recommended_settings as $phprec) {
+                    ?>
+                    <tr>
+                        <td>
+                            <?= $phprec[0]; ?>
+                        </td>
+                        <td>
+                            <?= $phprec[2]; ?>
+                        </td>
+                        <td class="font-weight-bold">
+                            <?php if (get_php_setting($phprec[1]) == $phprec[2]) {
+                                echo '<span class="text-success">' . get_php_setting($phprec[1]) . '</span>';
+                            } else {
+                                echo '<span class="text-danger">' . get_php_setting($phprec[1]) . '</span>';
+                            } ?>
+                        </td>
+                    </tr>
+                    <?php
+                }
+                ?>
+                <tr>
+                    <td>PHP > 7.1.0</td>
+                    <td>Yes</td>
+                    <td class="font-weight-bold">
+                        <?php if (version_compare(phpversion(), '7.1.0', '<')) {
+                            echo '<span class="text-danger">No</span>';
+                            $phpWarn = 1;
+                        } else {
+                            echo '<span class="text-success">Yes</span>';
+                            $phpWarn = 0;
+                        } ?>
+                    </td>
+                </tr>
+                </tbody>
+            </table>
+        </div>
+    </div>
+    <?php if ($errors === 0) { ?>
+        <div class="row mt-4 mb-5">
+            <div class="col-12">
+                  <p class="text-center">
+                    <strong>By clicking continue, you agree with the terms of the <a href="license.php" target="_blank"><?= $app_name ?> License.</a></strong>
+                  </p>
+                  <p class="text-center"><a href="step2.php" class="btn btn-success">Continue</a></p>
+                </div>
+            </div>
+        </div>
+    <?php } elseif ($errors === 1) { ?>
+        <div class="alert alert-danger" role="alert">
+            You have errors listed in the System Requirement Check that must be corrected
+            before continuing. If you have an unwritable <?= $config_file ?>, it is suggested that you chmod
+            that file to 666 for installation and then chmod it to 644 after installation. <a
+                    href="//userspice.com/installation-issues/" target="_blank">please read this guide</a>, or if
+            you are comfortable importing a SQL dump and editing an init.php file manually, you can follow
+            the "if install fails" instructions in the root folder.
+        </div>
+    <?php } ?>
+
+    <?php if ($phpWarn === 1) { ?>
+        <div class="alert alert-primary" role="alert">Your PHP is out of date and you are using an unsupported version.
+            UserSpice will work fine, but if you have the option to update to 7.1 or greater, it is strongly
+            suggested that you do.
+        </div>
+    <?php } ?>
+
+</div>
+
+<?php require_once("install/includes/footer.php");

install/install/chunks/chunk1.php

@@ -0,0 +1,41 @@
+),
+'remember'        => array(
+  'cookie_name'   => 'pmqesoxiw318374csb',
+  'cookie_expiry' => 604800  //One week, feel free to make it longer
+),
+'session' => array(
+  'session_name' => 'user',
+  'token_name' => 'token',
+)
+);
+
+//If you changed your UserSpice or UserCake database prefix
+//put it here.
+$db_table_prefix = "uc_";  //Old database prefix
+
+//adding more ids to this array allows people to access everything, whether offline or not. Use caution.
+$master_account = [1];
+
+$currentPage = currentPage();
+
+//Check to see if user has a remember me cookie
+if(Cookie::exists(Config::get('remember/cookie_name')) && !Session::exists(Config::get('session/session_name'))){
+	$hash = Cookie::get(Config::get('remember/cookie_name'));
+	$hashCheck = DB::getInstance()->query("SELECT * FROM users_session WHERE hash = ? AND uagent = ?",array($hash,Session::uagent_no_version()));
+
+	if ($hashCheck->count()) {
+		$user = new User($hashCheck->first()->user_id);
+		$user->login();
+
+	}
+}
+
+//Check to see that user is logged in on a temporary password
+$user = new User();
+
+//Check to see that user is verified
+if($user->isLoggedIn()){
+	if($user->data()->email_verified == 0 && $currentPage != 'verify.php' && $currentPage != 'logout.php' && $currentPage != 'verify_thankyou.php'){
+		Redirect::to('users/verify.php');
+	}
+}

install/install/chunks/chunk2.php

@@ -0,0 +1 @@
+date_default_timezone_set($timezone_string);