mirror of
https://git.sr.ht/~iwakuralain/text0Nly
synced 2025-07-27 15:36:11 +00:00
first commit
This commit is contained in:
Lain Iwakura
commit
7d1a184952
13
configs/apache.conf
Normal file
13
configs/apache.conf
Normal file
@ -0,0 +1,13 @@
|
|||||||
|
<VirtualHost *:80>
|
||||||
|
ServerName messenger.local
|
||||||
|
DocumentRoot /var/www/html/main
|
||||||
|
|
||||||
|
<Directory /var/www/html/main>
|
||||||
|
Options Indexes FollowSymLinks
|
||||||
|
AllowOverride All
|
||||||
|
Require all granted
|
||||||
|
</Directory>
|
||||||
|
|
||||||
|
ErrorLog ${APACHE_LOG_DIR}/error.log
|
||||||
|
CustomLog ${APACHE_LOG_DIR}/access.log combined
|
||||||
|
</VirtualHost>
|
||||||
39
main/api.php
Normal file
39
main/api.php
Normal file
@ -0,0 +1,39 @@
|
|||||||
|
<?php
|
||||||
|
header('Content-Type: application/json');
|
||||||
|
header('X-Content-Type-Options: nosniff');
|
||||||
|
header('X-Frame-Options: DENY');
|
||||||
|
header('X-XSS-Protection: 1; mode=block');
|
||||||
|
header('Content-Security-Policy: default-src \'self\'');
|
||||||
|
|
||||||
|
$db = new PDO('mysql:host=localhost;dbname=messenger', 'root', '');
|
||||||
|
$db->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
|
||||||
|
|
||||||
|
if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
|
||||||
|
http_response_code(405);
|
||||||
|
die(json_encode(['error' => 'Method not allowed']));
|
||||||
|
}
|
||||||
|
|
||||||
|
$input = json_decode(file_get_contents('php://input'), true);
|
||||||
|
if (!$input) {
|
||||||
|
http_response_code(400);
|
||||||
|
die(json_encode(['error' => 'Invalid JSON']));
|
||||||
|
}
|
||||||
|
|
||||||
|
$username = filter_var($input['username'] ?? '', FILTER_SANITIZE_STRING);
|
||||||
|
$message = $input['message'] ?? '';
|
||||||
|
$signature = $input['signature'] ?? '';
|
||||||
|
$is_encrypted = !empty($input['encrypted']);
|
||||||
|
|
||||||
|
if (!$username || !$message) {
|
||||||
|
http_response_code(400);
|
||||||
|
die(json_encode(['error' => 'Missing required fields']));
|
||||||
|
}
|
||||||
|
|
||||||
|
try {
|
||||||
|
$stmt = $db->prepare('INSERT INTO messages (username, message, signature, is_encrypted) VALUES (?, ?, ?, ?)');
|
||||||
|
$stmt->execute([$username, $message, $signature, $is_encrypted]);
|
||||||
|
echo json_encode(['success' => true]);
|
||||||
|
} catch (Exception $e) {
|
||||||
|
http_response_code(500);
|
||||||
|
echo json_encode(['error' => 'Server error']);
|
||||||
|
}
|
||||||
22
main/db.sql
Normal file
22
main/db.sql
Normal file
@ -0,0 +1,22 @@
|
|||||||
|
CREATE TABLE messages (
|
||||||
|
id INT AUTO_INCREMENT PRIMARY KEY,
|
||||||
|
username VARCHAR(50) NOT NULL,
|
||||||
|
message TEXT NOT NULL,
|
||||||
|
created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
|
||||||
|
signature TEXT,
|
||||||
|
is_encrypted BOOLEAN DEFAULT FALSE
|
||||||
|
);
|
||||||
|
|
||||||
|
CREATE TABLE users (
|
||||||
|
id INT AUTO_INCREMENT PRIMARY KEY,
|
||||||
|
username VARCHAR(50) NOT NULL UNIQUE,
|
||||||
|
password VARCHAR(255) NOT NULL,
|
||||||
|
pgp_key TEXT,
|
||||||
|
created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
|
||||||
|
);
|
||||||
|
|
||||||
|
CREATE TABLE registrations (
|
||||||
|
id INT AUTO_INCREMENT PRIMARY KEY,
|
||||||
|
ip VARCHAR(45) NOT NULL,
|
||||||
|
created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
|
||||||
|
);
|
||||||
102
main/index.php
Normal file
102
main/index.php
Normal file
@ -0,0 +1,102 @@
|
|||||||
|
<?php
|
||||||
|
header('X-Content-Type-Options: nosniff');
|
||||||
|
header('X-Frame-Options: DENY');
|
||||||
|
header('X-XSS-Protection: 1; mode=block');
|
||||||
|
header('Content-Security-Policy: default-src \'self\'');
|
||||||
|
|
||||||
|
$db = new PDO('mysql:host=localhost;dbname=messenger', 'root', '');
|
||||||
|
$db->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
|
||||||
|
|
||||||
|
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
|
||||||
|
$username = filter_input(INPUT_POST, 'username', FILTER_SANITIZE_STRING);
|
||||||
|
$message = filter_input(INPUT_POST, 'message', FILTER_SANITIZE_STRING);
|
||||||
|
$signature = $_POST['signature'] ?? '';
|
||||||
|
$is_encrypted = isset($_POST['encrypted']);
|
||||||
|
|
||||||
|
if ($username && $message) {
|
||||||
|
$stmt = $db->prepare('INSERT INTO messages (username, message, signature, is_encrypted) VALUES (?, ?, ?, ?)');
|
||||||
|
$stmt->execute([$username, $message, $signature, $is_encrypted]);
|
||||||
|
}
|
||||||
|
header('Location: ' . $_SERVER['PHP_SELF']);
|
||||||
|
exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
$stmt = $db->query('SELECT * FROM messages ORDER BY created_at DESC LIMIT 50');
|
||||||
|
$messages = $stmt->fetchAll(PDO::FETCH_ASSOC);
|
||||||
|
?>
|
||||||
|
<!DOCTYPE html>
|
||||||
|
<html>
|
||||||
|
<head>
|
||||||
|
<meta charset="utf-8">
|
||||||
|
<title>Text0Nly</title>
|
||||||
|
<style>
|
||||||
|
body { font-family: Arial, sans-serif; max-width: 800px; margin: 0 auto; padding: 20px; }
|
||||||
|
.message { margin: 10px 0; padding: 10px; border: 1px solid #ddd; border-radius: 5px; }
|
||||||
|
.username { font-weight: bold; color: #2196F3; }
|
||||||
|
.time { color: #666; font-size: 0.8em; }
|
||||||
|
.encrypted { color: #4CAF50; }
|
||||||
|
.signature { color: #FF9800; font-size: 0.8em; }
|
||||||
|
form { margin: 20px 0; }
|
||||||
|
textarea { width: 100%; height: 100px; margin: 10px 0; }
|
||||||
|
input[type="text"] { width: 200px; }
|
||||||
|
.register-link { position: fixed; top: 20px; right: 20px; }
|
||||||
|
.api-info { margin: 20px 0; padding: 10px; background: #f5f5f5; border-radius: 5px; }
|
||||||
|
</style>
|
||||||
|
</head>
|
||||||
|
<body>
|
||||||
|
<div class="register-link">
|
||||||
|
<a href="register.php">Register</a>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<h1>Text0Nly</h1>
|
||||||
|
|
||||||
|
<div class="api-info">
|
||||||
|
<h3>Message API:</h3>
|
||||||
|
<pre>curl -X POST http://localhost/api.php -H "Content-Type: application/json" -d '{
|
||||||
|
"username": "name",
|
||||||
|
"message": "text",
|
||||||
|
"signature": "pgp_signature",
|
||||||
|
"encrypted": true
|
||||||
|
}'</pre>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<form method="post">
|
||||||
|
<input type="text" name="username" placeholder="Your username" required maxlength="50">
|
||||||
|
<textarea name="message" placeholder="Your message" required></textarea>
|
||||||
|
<textarea name="signature" placeholder="PGP signature (optional)"></textarea>
|
||||||
|
<div>
|
||||||
|
<input type="checkbox" name="encrypted" id="encrypted">
|
||||||
|
<label for="encrypted">Message is encrypted</label>
|
||||||
|
</div>
|
||||||
|
<button type="submit">Send</button>
|
||||||
|
</form>
|
||||||
|
|
||||||
|
<div id="messages">
|
||||||
|
<?php foreach ($messages as $msg): ?>
|
||||||
|
<div class="message">
|
||||||
|
<span class="username"><?= htmlspecialchars($msg['username']) ?>:</span>
|
||||||
|
<div><?= nl2br(htmlspecialchars($msg['message'])) ?></div>
|
||||||
|
<?php if ($msg['is_encrypted']): ?>
|
||||||
|
<span class="encrypted">[Encrypted]</span>
|
||||||
|
<?php endif; ?>
|
||||||
|
<?php if ($msg['signature']): ?>
|
||||||
|
<div class="signature">Signature: <?= htmlspecialchars($msg['signature']) ?></div>
|
||||||
|
<?php endif; ?>
|
||||||
|
<span class="time"><?= $msg['created_at'] ?></span>
|
||||||
|
</div>
|
||||||
|
<?php endforeach; ?>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<script>
|
||||||
|
setInterval(() => {
|
||||||
|
fetch(window.location.href)
|
||||||
|
.then(response => response.text())
|
||||||
|
.then(html => {
|
||||||
|
const parser = new DOMParser();
|
||||||
|
const doc = parser.parseFromString(html, 'text/html');
|
||||||
|
document.getElementById('messages').innerHTML = doc.getElementById('messages').innerHTML;
|
||||||
|
});
|
||||||
|
}, 5000);
|
||||||
|
</script>
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
85
main/register.php
Normal file
85
main/register.php
Normal file
@ -0,0 +1,85 @@
|
|||||||
|
<?php
|
||||||
|
session_start();
|
||||||
|
header('X-Content-Type-Options: nosniff');
|
||||||
|
header('X-Frame-Options: DENY');
|
||||||
|
header('X-XSS-Protection: 1; mode=block');
|
||||||
|
header('Content-Security-Policy: default-src \'self\'');
|
||||||
|
|
||||||
|
$db = new PDO('mysql:host=localhost;dbname=messenger', 'root', '');
|
||||||
|
$db->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
|
||||||
|
|
||||||
|
$error = '';
|
||||||
|
$success = '';
|
||||||
|
|
||||||
|
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
|
||||||
|
$username = filter_input(INPUT_POST, 'username', FILTER_SANITIZE_STRING);
|
||||||
|
$password = $_POST['password'] ?? '';
|
||||||
|
$pgp_key = $_POST['pgp_key'] ?? '';
|
||||||
|
$ip = $_SERVER['REMOTE_ADDR'];
|
||||||
|
|
||||||
|
if ($username && $password) {
|
||||||
|
if (strlen($username) > 50 || strlen($password) < 8) {
|
||||||
|
$error = 'Invalid data';
|
||||||
|
} else {
|
||||||
|
$stmt = $db->prepare('SELECT COUNT(*) FROM registrations WHERE ip = ? AND created_at > DATE_SUB(NOW(), INTERVAL 1 HOUR)');
|
||||||
|
$stmt->execute([$ip]);
|
||||||
|
$count = $stmt->fetchColumn();
|
||||||
|
|
||||||
|
if ($count >= 5) {
|
||||||
|
$error = 'Registration limit exceeded for your IP';
|
||||||
|
} else {
|
||||||
|
try {
|
||||||
|
$stmt = $db->prepare('INSERT INTO users (username, password, pgp_key) VALUES (?, ?, ?)');
|
||||||
|
$stmt->execute([$username, password_hash($password, PASSWORD_DEFAULT), $pgp_key]);
|
||||||
|
|
||||||
|
$stmt = $db->prepare('INSERT INTO registrations (ip) VALUES (?)');
|
||||||
|
$stmt->execute([$ip]);
|
||||||
|
|
||||||
|
$success = 'Registration successful';
|
||||||
|
} catch (PDOException $e) {
|
||||||
|
$error = 'Username already exists';
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
?>
|
||||||
|
<!DOCTYPE html>
|
||||||
|
<html>
|
||||||
|
<head>
|
||||||
|
<meta charset="utf-8">
|
||||||
|
<title>Text0Nly - Registration</title>
|
||||||
|
<style>
|
||||||
|
body { font-family: Arial, sans-serif; max-width: 400px; margin: 20px auto; padding: 20px; }
|
||||||
|
.form-group { margin: 10px 0; }
|
||||||
|
input, textarea { width: 100%; padding: 8px; margin: 5px 0; }
|
||||||
|
textarea { height: 100px; }
|
||||||
|
button { width: 100%; padding: 10px; background: #2196F3; color: white; border: none; cursor: pointer; }
|
||||||
|
.error { color: red; }
|
||||||
|
.success { color: green; }
|
||||||
|
</style>
|
||||||
|
</head>
|
||||||
|
<body>
|
||||||
|
<h2>Registration</h2>
|
||||||
|
<?php if ($error): ?>
|
||||||
|
<div class="error"><?= htmlspecialchars($error) ?></div>
|
||||||
|
<?php endif; ?>
|
||||||
|
<?php if ($success): ?>
|
||||||
|
<div class="success"><?= htmlspecialchars($success) ?></div>
|
||||||
|
<?php endif; ?>
|
||||||
|
|
||||||
|
<form method="post">
|
||||||
|
<div class="form-group">
|
||||||
|
<input type="text" name="username" placeholder="Username" required maxlength="50">
|
||||||
|
</div>
|
||||||
|
<div class="form-group">
|
||||||
|
<input type="password" name="password" placeholder="Password (min 8 characters)" required minlength="8">
|
||||||
|
</div>
|
||||||
|
<div class="form-group">
|
||||||
|
<textarea name="pgp_key" placeholder="PGP key (optional)"></textarea>
|
||||||
|
</div>
|
||||||
|
<button type="submit">Register</button>
|
||||||
|
</form>
|
||||||
|
<p><a href="index.php">Back to chat</a></p>
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
Loading…
x
Reference in New Issue
Block a user