15 |
16 |
50 |
51 |
52 |
58 |
59 |
60 |
61 |
--------------------------------------------------------------------------------
/vendor/fatfree/db/jig/session.php:
--------------------------------------------------------------------------------
1 | .
20 |
21 | */
22 |
23 | namespace DB\Jig;
24 |
25 | use ReturnTypeWillChange;
26 | use SessionAdapter;
27 |
28 | //! Jig-managed session handler
29 | class Session extends Mapper {
30 |
31 | protected
32 | //! Session ID
33 | $sid,
34 | //! Anti-CSRF token
35 | $_csrf,
36 | //! User agent
37 | $_agent,
38 | //! IP,
39 | $_ip,
40 | //! Suspect callback
41 | $onsuspect;
42 |
43 | /**
44 | * Open session
45 | * @return TRUE
46 | * @param $path string
47 | * @param $name string
48 | **/
49 | function open(string $path, string $name): bool
50 | {
51 | return TRUE;
52 | }
53 |
54 | /**
55 | * Close session
56 | * @return TRUE
57 | **/
58 | function close(): bool
59 | {
60 | $this->reset();
61 | $this->sid=NULL;
62 | return TRUE;
63 | }
64 |
65 | /**
66 | * Return session data in serialized format
67 | * @return string|false
68 | * @param $id string
69 | **/
70 | #[ReturnTypeWillChange]
71 | function read($id)
72 | {
73 | $this->load(['@session_id=?',$this->sid=$id]);
74 | if ($this->dry())
75 | return '';
76 | if ($this->get('ip')!=$this->_ip || $this->get('agent')!=$this->_agent) {
77 | $fw=\Base::instance();
78 | if (!isset($this->onsuspect) ||
79 | $fw->call($this->onsuspect,[$this,$id])===FALSE) {
80 | // NB: `session_destroy` can't be called at that stage;
81 | // `session_start` not completed
82 | $this->destroy($id);
83 | $this->close();
84 | unset($fw->{'COOKIE.'.session_name()});
85 | $fw->error(403);
86 | }
87 | }
88 | return $this->get('data');
89 | }
90 |
91 | /**
92 | * Write session data
93 | * @return TRUE
94 | * @param $id string
95 | * @param $data string
96 | **/
97 | function write(string $id, string $data): bool
98 | {
99 | $this->set('session_id',$id);
100 | $this->set('data',$data);
101 | $this->set('ip',$this->_ip);
102 | $this->set('agent',$this->_agent);
103 | $this->set('stamp',time());
104 | $this->save();
105 | return TRUE;
106 | }
107 |
108 | /**
109 | * Destroy session
110 | * @return TRUE
111 | * @param $id string
112 | **/
113 | function destroy($id): bool
114 | {
115 | $this->erase(['@session_id=?',$id]);
116 | return TRUE;
117 | }
118 |
119 | /**
120 | * Garbage collector
121 | **/
122 | #[ReturnTypeWillChange]
123 | function gc(int $max_lifetime): int
124 | {
125 | return (int) $this->erase(['@stamp+?sid;
134 | }
135 |
136 | /**
137 | * Return anti-CSRF token
138 | * @return string
139 | **/
140 | function csrf() {
141 | return $this->_csrf;
142 | }
143 |
144 | /**
145 | * Return IP address
146 | * @return string
147 | **/
148 | function ip() {
149 | return $this->_ip;
150 | }
151 |
152 | /**
153 | * Return Unix timestamp
154 | * @return string|FALSE
155 | **/
156 | function stamp() {
157 | if (!$this->sid)
158 | session_start();
159 | return $this->dry()?FALSE:$this->get('stamp');
160 | }
161 |
162 | /**
163 | * Return HTTP user agent
164 | * @return string|FALSE
165 | **/
166 | function agent() {
167 | return $this->_agent;
168 | }
169 |
170 | /**
171 | * Instantiate class
172 | * @param $db \DB\Jig
173 | * @param $file string
174 | * @param $onsuspect callback
175 | * @param $key string
176 | **/
177 | function __construct(\DB\Jig $db,$file='sessions',$onsuspect=NULL,$key=NULL) {
178 | parent::__construct($db,$file);
179 | $this->onsuspect=$onsuspect;
180 | if (version_compare(PHP_VERSION, '8.4.0')>=0) {
181 | // TODO: remove this when php7 support is dropped
182 | session_set_save_handler(new SessionAdapter($this));
183 | } else {
184 | session_set_save_handler(
185 | [$this,'open'],
186 | [$this,'close'],
187 | [$this,'read'],
188 | [$this,'write'],
189 | [$this,'destroy'],
190 | [$this,'gc']
191 | );
192 | }
193 | register_shutdown_function('session_commit');
194 | $fw=\Base::instance();
195 | $headers=$fw->HEADERS;
196 | $this->_csrf=$fw->hash($fw->SEED.
197 | extension_loaded('openssl')?
198 | implode(unpack('L',openssl_random_pseudo_bytes(4))):
199 | mt_rand()
200 | );
201 | if ($key)
202 | $fw->$key=$this->_csrf;
203 | $this->_agent=isset($headers['User-Agent'])?$headers['User-Agent']:'';
204 | $this->_ip=$fw->IP;
205 | }
206 |
207 | }
208 |
--------------------------------------------------------------------------------
/vendor/fatfree/db/mongo/session.php:
--------------------------------------------------------------------------------
1 | .
20 |
21 | */
22 |
23 | namespace DB\Mongo;
24 |
25 | use ReturnTypeWillChange;
26 | use SessionAdapter;
27 |
28 | //! MongoDB-managed session handler
29 | class Session extends Mapper {
30 |
31 | protected
32 | //! Session ID
33 | $sid,
34 | //! Anti-CSRF token
35 | $_csrf,
36 | //! User agent
37 | $_agent,
38 | //! IP,
39 | $_ip,
40 | //! Suspect callback
41 | $onsuspect;
42 |
43 | /**
44 | * Open session
45 | * @return TRUE
46 | * @param $path string
47 | * @param $name string
48 | **/
49 | function open(string $path, string $name): bool
50 | {
51 | return TRUE;
52 | }
53 |
54 | /**
55 | * Close session
56 | * @return TRUE
57 | **/
58 | function close(): bool
59 | {
60 | $this->reset();
61 | $this->sid=NULL;
62 | return TRUE;
63 | }
64 |
65 | /**
66 | * Return session data in serialized format
67 | * @return string
68 | * @param $id string
69 | **/
70 | #[ReturnTypeWillChange]
71 | function read(string $id)
72 | {
73 | $this->load(['session_id'=>$this->sid=$id]);
74 | if ($this->dry())
75 | return '';
76 | if ($this->get('ip')!=$this->_ip || $this->get('agent')!=$this->_agent) {
77 | $fw=\Base::instance();
78 | if (!isset($this->onsuspect) ||
79 | $fw->call($this->onsuspect,[$this,$id])===FALSE) {
80 | // NB: `session_destroy` can't be called at that stage;
81 | // `session_start` not completed
82 | $this->destroy($id);
83 | $this->close();
84 | unset($fw->{'COOKIE.'.session_name()});
85 | $fw->error(403);
86 | }
87 | }
88 | return $this->get('data');
89 | }
90 |
91 | /**
92 | * Write session data
93 | * @return TRUE
94 | * @param $id string
95 | * @param $data string
96 | **/
97 | function write(string $id, string $data): bool
98 | {
99 | $this->set('session_id',$id);
100 | $this->set('data',$data);
101 | $this->set('ip',$this->_ip);
102 | $this->set('agent',$this->_agent);
103 | $this->set('stamp',time());
104 | $this->save();
105 | return TRUE;
106 | }
107 |
108 | /**
109 | * Destroy session
110 | * @return TRUE
111 | * @param $id string
112 | **/
113 | function destroy($id): bool
114 | {
115 | $this->erase(['session_id'=>$id]);
116 | return TRUE;
117 | }
118 |
119 | /**
120 | * Garbage collector
121 | **/
122 | #[ReturnTypeWillChange]
123 | function gc(int $max_lifetime): int
124 | {
125 | return (int) $this->erase(['$where'=>'this.stamp+'.$max_lifetime.'<'.time()]);
126 | }
127 |
128 | /**
129 | * Return session id (if session has started)
130 | * @return string|NULL
131 | **/
132 | function sid() {
133 | return $this->sid;
134 | }
135 |
136 | /**
137 | * Return anti-CSRF token
138 | * @return string
139 | **/
140 | function csrf() {
141 | return $this->_csrf;
142 | }
143 |
144 | /**
145 | * Return IP address
146 | * @return string
147 | **/
148 | function ip() {
149 | return $this->_ip;
150 | }
151 |
152 | /**
153 | * Return Unix timestamp
154 | * @return string|FALSE
155 | **/
156 | function stamp() {
157 | if (!$this->sid)
158 | session_start();
159 | return $this->dry()?FALSE:$this->get('stamp');
160 | }
161 |
162 | /**
163 | * Return HTTP user agent
164 | * @return string
165 | **/
166 | function agent() {
167 | return $this->_agent;
168 | }
169 |
170 | /**
171 | * Instantiate class
172 | * @param $db \DB\Mongo
173 | * @param $table string
174 | * @param $onsuspect callback
175 | * @param $key string
176 | **/
177 | function __construct(\DB\Mongo $db,$table='sessions',$onsuspect=NULL,$key=NULL) {
178 | parent::__construct($db,$table);
179 | $this->onsuspect=$onsuspect;
180 | if (version_compare(PHP_VERSION, '8.4.0')>=0) {
181 | // TODO: remove this when php7 support is dropped
182 | session_set_save_handler(new SessionAdapter($this));
183 | } else {
184 | session_set_save_handler(
185 | [$this,'open'],
186 | [$this,'close'],
187 | [$this,'read'],
188 | [$this,'write'],
189 | [$this,'destroy'],
190 | [$this,'gc']
191 | );
192 | }
193 | register_shutdown_function('session_commit');
194 | $fw=\Base::instance();
195 | $headers=$fw->HEADERS;
196 | $this->_csrf=$fw->hash($fw->SEED.
197 | extension_loaded('openssl')?
198 | implode(unpack('L',openssl_random_pseudo_bytes(4))):
199 | mt_rand()
200 | );
201 | if ($key)
202 | $fw->$key=$this->_csrf;
203 | $this->_agent=isset($headers['User-Agent'])?$headers['User-Agent']:'';
204 | $this->_ip=$fw->IP;
205 | }
206 |
207 | }
208 |
--------------------------------------------------------------------------------
/public/css/app.css:
--------------------------------------------------------------------------------
1 | #container-pages {
2 | overflow: auto;
3 | }
4 |
5 | #sidebarTools {
6 | width: 350px;
7 | }
8 |
9 | #sidebarTools .list-item-add label:hover {
10 | background: #e8ebed;
11 | border: 1px solid #505050;
12 | }
13 |
14 | #sidebarTools .list-item-add label:active, #sidebarTools .list-item-add label.active, #sidebarTools .list-item-add .btn-check:active + .btn-outline-secondary, #sidebarTools .list-item-add .btn-check:checked + .btn-outline-secondary {
15 | background: #c9d1d8;
16 | border: 1px solid #000;
17 | box-shadow: 0 .25rem .5rem rgba(0,0,0,.075) !important;
18 | }
19 |
20 | #top_bar {
21 | z-index: 10000;
22 | }
23 |
24 | #search_tools::placeholder {
25 | opacity: 0.65;
26 | }
27 |
28 | #modalFichier {
29 | z-index: 10001;
30 | }
31 |
32 | #input-text-signature:dir(ltr) {
33 | font-family: Caveat;
34 | font-size: 48px;
35 | }
36 |
37 | #input-text-signature:dir(rtl) {
38 | font-family: Tajawal;
39 | font-size: 48px;
40 | }
41 |
42 | #img-upload {
43 | max-width: 460px;
44 | max-height: 200px;
45 | }
46 |
47 | .btn-svg-list-suppression {
48 | top: 2px;
49 | }
50 |
51 | .btn-svg-list-suppression:dir(ltr) {
52 | right: 6px;
53 | }
54 |
55 | .btn-svg-list-suppression:dir(rtl) {
56 | left: 6px;
57 | }
58 |
59 | #color-picker {
60 | display: block; position: fixed; height:28px; width: 28px; border-radius: 24px; background: #000; top: 14px; right: 366px; border: 2px solid #fff; color: #fff; font-size: 10px; text-align: center; line-height: 20px; opacity: 0.25;
61 | }
62 |
63 | #color-picker:hover {
64 | opacity: 1;
65 | }
66 |
67 | #watermark-color-picker {
68 | display: inline-block; position: absolute; height:28px; width: 28px; border-radius: 24px; top: 5px; right: 6px; z-index: 20;
69 | }
70 |
71 | #watermark-color-picker::-moz-color-swatch, #watermark-color-picker::-webkit-color-swatch {
72 | border-radius: 24px;
73 | }
74 |
75 | #toolbox div {
76 | cursor: pointer;
77 | padding: 1px;
78 | display: inline-block;
79 | padding-left: .25rem;
80 | padding-right: .25rem;
81 | }
82 |
83 | #toolbox div + div {
84 | border-left: 1px solid #CCC;
85 | }
86 |
87 | #toolbox .dropdown-menu {
88 | padding-top: 0;
89 | padding-bottom: 0;
90 | border-radius: 0;
91 | }
92 |
93 | .canvas-container .btn-drag, .canvas-container .btn-rotate, .canvas-container .btn-delete, .canvas-container .btn-select, .canvas-container .btn-download, .canvas-container .btn-restore, .canvas-container .btn-drag-here, .canvas-container .btn-drag-here_mobile, .canvas-container .btn-cancel {
94 | font-size: 30px;
95 | cursor: move;
96 | background: rgb(255,255,255,0.6);
97 | }
98 |
99 | .canvas-container .btn-drag-here, .canvas-container .btn-drag-here_mobile, .canvas-container .btn-cancel {
100 | cursor: pointer;
101 | z-index: 9999;
102 | }
103 |
104 | .canvas-container .btn-rotate, .canvas-container .btn-delete, .canvas-container .btn-select, .canvas-container .btn-download, .canvas-container .btn-restore, .canvas-container .btn-drag-here {
105 | cursor: pointer;
106 | font-size: 25px;
107 | }
108 |
109 | .canvas-container .btn-rotate:hover, .canvas-container .btn-delete:hover, .canvas-container .btn-select:hover, .canvas-container .btn-download:hover, .canvas-container .btn-restore:hover, .canvas-container .btn-drag:hover {
110 | background: rgb(255, 255, 255, 1);
111 | box-shadow: 0 .5rem 1rem rgba(0,0,0,.15) !important;
112 | }
113 |
114 | .canvas-container .btn-cancel {
115 | font-size: 20px;
116 | }
117 |
118 | .border-transparent {
119 | border-color: transparent !important;
120 | }
121 |
122 | .delete-metadata {
123 | display: none;
124 | cursor: pointer;
125 | position: absolute;
126 | right: 10px;
127 | top: 0;
128 | font-size: 1.2rem;
129 | user-select: none;
130 | }
131 |
132 | .input-metadata > label {
133 | width: 110%;
134 | }
135 |
136 | .input-metadata:hover > .delete-metadata {
137 | display: block;
138 | }
139 |
140 | #page-metadata #container-main {
141 | width: 55%;
142 | }
143 |
144 | #page-metadata #sidebarTools {
145 | width: 45%;
146 | }
147 |
148 | #page-metadata #bottom_bar {
149 | z-index: 3;
150 | }
151 |
152 | @media (max-width: 1500px) {
153 | #page-metadata #container-main {
154 | width: 50%;
155 | }
156 | #page-metadata #sidebarTools {
157 | width: 50%;
158 | }
159 | }
160 |
161 | @media (max-width: 575.98px) {
162 | #page-metadata #container-main {
163 | width: 100%;
164 | }
165 | #page-metadata #sidebarTools {
166 | display:none;
167 | width: 100%;
168 | }
169 | }
170 | @media (max-width: 480px) {
171 | .subtitle {
172 | font-size: .875em
173 | }
174 | }
175 |
176 | html.ltr .decalage-pdf-div {
177 | padding-right: 350px;
178 | }
179 |
180 | html.rtl .decalage-pdf-div {
181 | padding-left: 350px;
182 | }
183 |
184 | #container-btn-zoom {
185 | top: 6px;
186 | }
187 |
188 | html.ltr #container-btn-zoom {
189 | right: 368px;
190 | }
191 |
192 | html.rtl #container-btn-zoom {
193 | left: 357px;
194 | }
195 |
196 | html.ltr .file-list-checkbox {
197 | right: 10px;
198 | }
199 |
200 | html.rtl .file-list-checkbox {
201 | left: 10px;
202 | }
203 |
204 | .fullpage {
205 | min-height: calc(100dvh - 95px);
206 | }
207 |
208 | .clamp-2-lines {
209 | display: -webkit-box;
210 | -webkit-box-orient: vertical;
211 | -webkit-line-clamp: 2;
212 | overflow: hidden;
213 | text-overflow: ellipsis;
214 | }
215 |
--------------------------------------------------------------------------------
/vendor/fatfree/utf.php:
--------------------------------------------------------------------------------
1 | .
20 |
21 | */
22 |
23 | //! Unicode string manager
24 | class UTF extends Prefab {
25 |
26 | /**
27 | * Get string length
28 | * @return int
29 | * @param $str string
30 | **/
31 | function strlen($str) {
32 | preg_match_all('/./us',$str,$parts);
33 | return count($parts[0]);
34 | }
35 |
36 | /**
37 | * Reverse a string
38 | * @return string
39 | * @param $str string
40 | **/
41 | function strrev($str) {
42 | preg_match_all('/./us',$str,$parts);
43 | return implode('',array_reverse($parts[0]));
44 | }
45 |
46 | /**
47 | * Find position of first occurrence of a string (case-insensitive)
48 | * @return int|FALSE
49 | * @param $stack string
50 | * @param $needle string
51 | * @param $ofs int
52 | **/
53 | function stripos($stack,$needle,$ofs=0) {
54 | return $this->strpos($stack,$needle,$ofs,TRUE);
55 | }
56 |
57 | /**
58 | * Find position of first occurrence of a string
59 | * @return int|FALSE
60 | * @param $stack string
61 | * @param $needle string
62 | * @param $ofs int
63 | * @param $case bool
64 | **/
65 | function strpos($stack,$needle,$ofs=0,$case=FALSE) {
66 | return preg_match('/^(.{'.$ofs.'}.*?)'.
67 | preg_quote($needle,'/').'/us'.($case?'i':''),$stack,$match)?
68 | $this->strlen($match[1]):FALSE;
69 | }
70 |
71 | /**
72 | * Returns part of haystack string from the first occurrence of
73 | * needle to the end of haystack (case-insensitive)
74 | * @return string|FALSE
75 | * @param $stack string
76 | * @param $needle string
77 | * @param $before bool
78 | **/
79 | function stristr($stack,$needle,$before=FALSE) {
80 | return $this->strstr($stack,$needle,$before,TRUE);
81 | }
82 |
83 | /**
84 | * Returns part of haystack string from the first occurrence of
85 | * needle to the end of haystack
86 | * @return string|FALSE
87 | * @param $stack string
88 | * @param $needle string
89 | * @param $before bool
90 | * @param $case bool
91 | **/
92 | function strstr($stack,$needle,$before=FALSE,$case=FALSE) {
93 | if (!$needle)
94 | return FALSE;
95 | preg_match('/^(.*?)'.preg_quote($needle,'/').'/us'.($case?'i':''),
96 | $stack,$match);
97 | return isset($match[1])?
98 | ($before?
99 | $match[1]:
100 | $this->substr($stack,$this->strlen($match[1]))):
101 | FALSE;
102 | }
103 |
104 | /**
105 | * Return part of a string
106 | * @return string|FALSE
107 | * @param $str string
108 | * @param $start int
109 | * @param $len int
110 | **/
111 | function substr($str,$start,$len=0) {
112 | if ($start<0)
113 | $start=$this->strlen($str)+$start;
114 | if (!$len)
115 | $len=$this->strlen($str)-$start;
116 | return preg_match('/^.{'.$start.'}(.{0,'.$len.'})/us',$str,$match)?
117 | $match[1]:FALSE;
118 | }
119 |
120 | /**
121 | * Count the number of substring occurrences
122 | * @return int
123 | * @param $stack string
124 | * @param $needle string
125 | **/
126 | function substr_count($stack,$needle) {
127 | preg_match_all('/'.preg_quote($needle,'/').'/us',$stack,
128 | $matches,PREG_SET_ORDER);
129 | return count($matches);
130 | }
131 |
132 | /**
133 | * Strip whitespaces from the beginning of a string
134 | * @return string
135 | * @param $str string
136 | **/
137 | function ltrim($str) {
138 | return preg_replace('/^[\pZ\pC]+/u','',$str);
139 | }
140 |
141 | /**
142 | * Strip whitespaces from the end of a string
143 | * @return string
144 | * @param $str string
145 | **/
146 | function rtrim($str) {
147 | return preg_replace('/[\pZ\pC]+$/u','',$str);
148 | }
149 |
150 | /**
151 | * Strip whitespaces from the beginning and end of a string
152 | * @return string
153 | * @param $str string
154 | **/
155 | function trim($str) {
156 | return preg_replace('/^[\pZ\pC]+|[\pZ\pC]+$/u','',$str);
157 | }
158 |
159 | /**
160 | * Return UTF-8 byte order mark
161 | * @return string
162 | **/
163 | function bom() {
164 | return chr(0xef).chr(0xbb).chr(0xbf);
165 | }
166 |
167 | /**
168 | * Convert code points to Unicode symbols
169 | * @return string
170 | * @param $str string
171 | **/
172 | function translate($str) {
173 | return html_entity_decode(
174 | preg_replace('/\\\\u([[:xdigit:]]+)/i','&#x\1;',$str));
175 | }
176 |
177 | /**
178 | * Translate emoji tokens to Unicode font-supported symbols
179 | * @return string
180 | * @param $str string
181 | **/
182 | function emojify($str) {
183 | $map=[
184 | ':('=>'\u2639', // frown
185 | ':)'=>'\u263a', // smile
186 | '<3'=>'\u2665', // heart
187 | ':D'=>'\u1f603', // grin
188 | 'XD'=>'\u1f606', // laugh
189 | ';)'=>'\u1f609', // wink
190 | ':P'=>'\u1f60b', // tongue
191 | ':,'=>'\u1f60f', // think
192 | ':/'=>'\u1f623', // skeptic
193 | '8O'=>'\u1f632', // oops
194 | ]+Base::instance()->EMOJI;
195 | return $this->translate(str_replace(array_keys($map),
196 | array_values($map),$str));
197 | }
198 |
199 | }
200 |
--------------------------------------------------------------------------------
/vendor/fatfree/web/pingback.php:
--------------------------------------------------------------------------------
1 | .
20 |
21 | */
22 |
23 | namespace Web;
24 |
25 | //! Pingback 1.0 protocol (client and server) implementation
26 | class Pingback extends \Prefab {
27 |
28 | protected
29 | //! Transaction history
30 | $log;
31 |
32 | /**
33 | * Return TRUE if URL points to a pingback-enabled resource
34 | * @return bool
35 | * @param $url
36 | **/
37 | protected function enabled($url) {
38 | $web=\Web::instance();
39 | $req=$web->request($url);
40 | $found=FALSE;
41 | if ($req['body']) {
42 | // Look for pingback header
43 | foreach ($req['headers'] as $header)
44 | if (preg_match('/^X-Pingback:\h*(.+)/',$header,$href)) {
45 | $found=$href[1];
46 | break;
47 | }
48 | if (!$found &&
49 | // Scan page for pingback link tag
50 | preg_match('/
17 |
47 |
48 |
49 |
16 |
17 |
31 |
32 |
33 |
34 |
79 | true, 'pdf.js' => true]; include('components/common.html.php'); ?>
80 |
83 |
84 |
85 |
86 |
--------------------------------------------------------------------------------
/public/logo.svg:
--------------------------------------------------------------------------------
1 |
2 |
111 |
--------------------------------------------------------------------------------
/vendor/fatfree/db/sql/session.php:
--------------------------------------------------------------------------------
1 | .
20 |
21 | */
22 |
23 | namespace DB\SQL;
24 |
25 | use ReturnTypeWillChange;
26 | use SessionAdapter;
27 |
28 | //! SQL-managed session handler
29 | class Session extends Mapper {
30 |
31 | protected
32 | //! Session ID
33 | $sid,
34 | //! Anti-CSRF token
35 | $_csrf,
36 | //! User agent
37 | $_agent,
38 | //! IP,
39 | $_ip,
40 | //! Suspect callback
41 | $onsuspect;
42 |
43 | /**
44 | * Open session
45 | * @return TRUE
46 | * @param $path string
47 | * @param $name string
48 | **/
49 | function open(string $path, string $name): bool
50 | {
51 | return TRUE;
52 | }
53 |
54 | /**
55 | * Close session
56 | * @return TRUE
57 | **/
58 | function close(): bool
59 | {
60 | $this->reset();
61 | $this->sid=NULL;
62 | return TRUE;
63 | }
64 |
65 | /**
66 | * Return session data in serialized format
67 | * @return string|false
68 | * @param $id string
69 | **/
70 | #[ReturnTypeWillChange]
71 | function read(string $id)
72 | {
73 | $this->load(['session_id=?',$this->sid=$id]);
74 | if ($this->dry())
75 | return '';
76 | if ($this->get('ip')!=$this->_ip || $this->get('agent')!=$this->_agent) {
77 | $fw=\Base::instance();
78 | if (!isset($this->onsuspect) ||
79 | $fw->call($this->onsuspect,[$this,$id])===FALSE) {
80 | //NB: `session_destroy` can't be called at that stage (`session_start` not completed)
81 | $this->destroy($id);
82 | $this->close();
83 | unset($fw->{'COOKIE.'.session_name()});
84 | $fw->error(403);
85 | }
86 | }
87 | return $this->get('data');
88 | }
89 |
90 | /**
91 | * Write session data
92 | * @return TRUE
93 | * @param $id string
94 | * @param $data string
95 | **/
96 | function write(string $id, string $data): bool
97 | {
98 | $this->set('session_id',$id);
99 | $this->set('data',$data);
100 | $this->set('ip',$this->_ip);
101 | $this->set('agent',$this->_agent);
102 | $this->set('stamp',time());
103 | $this->save();
104 | return TRUE;
105 | }
106 |
107 | /**
108 | * Destroy session
109 | * @return TRUE
110 | * @param $id string
111 | **/
112 | function destroy($id): bool
113 | {
114 | $this->erase(['session_id=?',$id]);
115 | return TRUE;
116 | }
117 |
118 | /**
119 | * Garbage collector
120 | **/
121 | #[ReturnTypeWillChange]
122 | function gc(int $max_lifetime): int
123 | {
124 | return (int) $this->erase(['stamp+?sid;
133 | }
134 |
135 | /**
136 | * Return anti-CSRF token
137 | * @return string
138 | **/
139 | function csrf() {
140 | return $this->_csrf;
141 | }
142 |
143 | /**
144 | * Return IP address
145 | * @return string
146 | **/
147 | function ip() {
148 | return $this->_ip;
149 | }
150 |
151 | /**
152 | * Return Unix timestamp
153 | * @return string|FALSE
154 | **/
155 | function stamp() {
156 | if (!$this->sid)
157 | session_start();
158 | return $this->dry()?FALSE:$this->get('stamp');
159 | }
160 |
161 | /**
162 | * Return HTTP user agent
163 | * @return string
164 | **/
165 | function agent() {
166 | return $this->_agent;
167 | }
168 |
169 | /**
170 | * Instantiate class
171 | * @param $db \DB\SQL
172 | * @param $table string
173 | * @param $force bool
174 | * @param $onsuspect callback
175 | * @param $key string
176 | * @param $type string, column type for data field
177 | **/
178 | function __construct(\DB\SQL $db,$table='sessions',$force=TRUE,$onsuspect=NULL,$key=NULL,$type='TEXT') {
179 | if ($force) {
180 | $eol="\n";
181 | $tab="\t";
182 | $sqlsrv=preg_match('/mssql|sqlsrv|sybase/',$db->driver());
183 | $db->exec(
184 | ($sqlsrv?
185 | ('IF NOT EXISTS (SELECT * FROM sysobjects WHERE '.
186 | 'name='.$db->quote($table).' AND xtype=\'U\') '.
187 | 'CREATE TABLE dbo.'):
188 | ('CREATE TABLE IF NOT EXISTS '.
189 | ((($name=$db->name())&&$db->driver()!='pgsql')?
190 | ($db->quotekey($name,FALSE).'.'):''))).
191 | $db->quotekey($table,FALSE).' ('.$eol.
192 | ($sqlsrv?$tab.$db->quotekey('id').' INT IDENTITY,'.$eol:'').
193 | $tab.$db->quotekey('session_id').' VARCHAR(255),'.$eol.
194 | $tab.$db->quotekey('data').' '.$type.','.$eol.
195 | $tab.$db->quotekey('ip').' VARCHAR(45),'.$eol.
196 | $tab.$db->quotekey('agent').' VARCHAR(300),'.$eol.
197 | $tab.$db->quotekey('stamp').' INTEGER,'.$eol.
198 | $tab.'PRIMARY KEY ('.$db->quotekey($sqlsrv?'id':'session_id').')'.$eol.
199 | ($sqlsrv?',CONSTRAINT [UK_session_id] UNIQUE(session_id)':'').
200 | ');'
201 | );
202 | }
203 | parent::__construct($db,$table);
204 | $this->onsuspect=$onsuspect;
205 | if (version_compare(PHP_VERSION, '8.4.0')>=0) {
206 | // TODO: remove this when php7 support is dropped
207 | session_set_save_handler(new SessionAdapter($this));
208 | } else {
209 | session_set_save_handler(
210 | [$this,'open'],
211 | [$this,'close'],
212 | [$this,'read'],
213 | [$this,'write'],
214 | [$this,'destroy'],
215 | [$this,'gc']
216 | );
217 | }
218 | register_shutdown_function('session_commit');
219 | $fw=\Base::instance();
220 | $headers=$fw->HEADERS;
221 | $this->_csrf=$fw->hash($fw->SEED.
222 | extension_loaded('openssl')?
223 | implode(unpack('L',openssl_random_pseudo_bytes(4))):
224 | mt_rand()
225 | );
226 | if ($key)
227 | $fw->$key=$this->_csrf;
228 | $this->_agent=isset($headers['User-Agent'])?$headers['User-Agent']:'';
229 | if (strlen($this->_agent) > 300) {
230 | $this->_agent = substr($this->_agent, 0, 300);
231 | }
232 | $this->_ip=$fw->IP;
233 | }
234 |
235 | }
236 |
--------------------------------------------------------------------------------
/public/logo-small.svg:
--------------------------------------------------------------------------------
1 |
2 |
123 |
--------------------------------------------------------------------------------
/installation.md:
--------------------------------------------------------------------------------
1 | # Installation
2 |
3 | ## [Debian/Ubuntu](#debian-ubuntu)
4 |
5 | Dependencies:
6 |
7 | - php >= 5.6
8 | - librsvg2-bin (rsvg-convert)
9 | - pdftk
10 | - imagemagick
11 | - potrace
12 | - ghostcript
13 | - gpg
14 |
15 | Installing dependencies:
16 | ```
17 | sudo apt-get install php librsvg2-bin pdftk imagemagick potrace ghostscript locales gpg
18 | ```
19 |
20 | Getting the source code:
21 |
22 | ```
23 | git clone https://github.com/24eme/signaturepdf.git
24 | ```
25 |
26 | To run it:
27 |
28 | ```
29 | php -S localhost:8000 -t public
30 | ```
31 |
32 | ### PHP Configuration
33 |
34 | ```
35 | upload_max_filesize = 24M # Maximum size of the PDF file to sign
36 | post_max_size = 24M # Maximum size of the PDF file to sign
37 | max_file_uploads = 201 # Maximum number of pages in the PDF, here 200 pages + the original PDF
38 | ```
39 |
40 | ### Apache Configuration
41 |
42 | ```
43 | DocumentRoot /path/to/signaturepdf/public
44 |
35 |
53 |
54 |
36 |
37 |
52 |
38 |
39 |
51 |
55 | " style="position: absolute; top: 2px; right: 2px; font-size: 10px;" href="/metadata">
56 |
72 |
57 |
61 | 58 | 59 |
60 |
62 |
65 |
63 |
64 |
66 |
71 |
67 |
68 |
69 |
70 |
73 |
78 |
74 |
75 |
76 |
77 |
16 |
77 |
78 |
79 |
80 |
81 |
82 |
102 |
103 |
104 |
--------------------------------------------------------------------------------
Signature PDF
18 | 19 |
20 |
27 |
76 |
21 |
26 |
22 |
23 | ">
24 |
25 |