21 Commits

Author SHA1 Message Date
renovate[bot]
0efe142ea0 Update docker Docker tag to v20.10.22 (#160)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-12-17 20:33:54 +00:00
5eba9d705c Create sonar-project.properties 2022-10-21 23:59:03 +01:00
1319d59c8c Add Coverage 2022-10-21 23:57:39 +01:00
05e12dde69 Sonar: phpsecurity:S5131 2022-10-21 23:53:08 +01:00
a0035707b8 Sonar: phpsecurity:S5131 2022-10-21 23:51:31 +01:00
renovate[bot]
cdaf096965 Update docker Docker tag to v20.10.20 (#159)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-10-19 07:24:40 +01:00
renovate[bot]
46263f3195 Update docker Docker tag to v20.10.19 (#158)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-10-16 18:25:00 +01:00
renovate[bot]
3c4efa15c2 Update docker Docker tag to v20.10.18 (#156)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-10-01 11:24:37 +01:00
renovate[bot]
a24d001d98 Update actions/stale action to v6 (#157)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-10-01 11:22:53 +01:00
renovate[bot]
107988a5b3 Update actions/stale action to v5 (#149)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: Luke Tainton <ltainton@cisco.com>
2022-04-13 14:47:09 +01:00
dependabot[bot]
ae82b926f6 ⬆️ Bump guzzlehttp/psr7 from 1.6.1 to 1.8.5 in /app (#150)
Bumps [guzzlehttp/psr7](https://github.com/guzzle/psr7) from 1.6.1 to 1.8.5.
- [Release notes](https://github.com/guzzle/psr7/releases)
- [Changelog](https://github.com/guzzle/psr7/blob/1.8.5/CHANGELOG.md)
- [Commits](https://github.com/guzzle/psr7/compare/1.6.1...1.8.5)

---
updated-dependencies:
- dependency-name: guzzlehttp/psr7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-04-13 14:46:49 +01:00
renovate[bot]
b12134b1c0 Update dependency docker to v20 (#152)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2022-04-13 14:46:39 +01:00
renovate[bot]
c56e16206b Update actions/checkout action to v3 (#148)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2022-04-13 14:45:12 +01:00
Luke Tainton
06a4e56ee7 Move back to GitHub 2022-04-13 14:42:05 +01:00
c00037d3f6 Migrate to GitLab 2022-03-11 16:43:49 +00:00
renovate[bot]
c6a578b5bb Update actions/stale action to v4 (#146)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-10-18 20:41:29 +01:00
dependabot[bot]
f7ce7cd401 ⬆️ Bump phpseclib/phpseclib from 2.0.28 to 2.0.31 in /app (#142)
Bumps [phpseclib/phpseclib](https://github.com/phpseclib/phpseclib) from 2.0.28 to 2.0.31.
- [Release notes](https://github.com/phpseclib/phpseclib/releases)
- [Changelog](https://github.com/phpseclib/phpseclib/blob/master/CHANGELOG.md)
- [Commits](https://github.com/phpseclib/phpseclib/compare/2.0.28...2.0.31)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-04-20 22:26:31 +01:00
18cdccb63e Update Docker registry 2021-03-06 16:46:10 +00:00
bb3143c7c8 Update Docker registry 2021-03-06 16:44:29 +00:00
80679499e1 Update docker-compose config location (#141) 2020-10-23 10:37:55 +01:00
renovate[bot]
23bf431c74 Update actions/stale action to v3 (#139)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-10-23 10:27:16 +01:00
9 changed files with 205 additions and 125 deletions

64
.github/workflows/build.yml vendored Normal file
View File

@@ -0,0 +1,64 @@
name: Deploy
on:
push:
branches: main
jobs:
tests:
name: Tests
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v2
with:
fetch-depth: 0
- name: Setup PHP with Xdebug
uses: shivammathur/setup-php@v2
with:
php-version: '8.1'
coverage: xdebug
- name: Install dependencies with composer
run: composer update --no-ansi --no-interaction --no-progress
- name: Run tests with phpunit/phpunit
run: vendor/bin/phpunit --coverage-clover=coverage.xml
- name: Fix code coverage paths
run: sed -i 's@'$GITHUB_WORKSPACE'@/github/workspace/@g' coverage.xml
- name: SonarCloud Scan
uses: SonarSource/sonarcloud-github-action@master
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
release-on-push:
runs-on: ubuntu-latest
outputs:
ver: ${{ steps.release.outputs.version }}
tag: ${{ steps.release.outputs.tag_name }}
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
steps:
- name: Get Release
id: release
uses: rymndhng/release-on-push-action@master
with:
bump_version_scheme: patch
- name: Check Release Output
id: rop-check
run: |
echo "Got tag name ${{ steps.release.outputs.tag_name }}"
echo "Got release version ${{ steps.release.outputs.version }}"
build:
name: GitHub Container Registry
runs-on: ubuntu-latest
needs: [tests, release-on-push]
steps:
- uses: actions/checkout@v3
- name: Login to GitHub Container Registry
run: echo ${{ secrets.PAT }} | docker login ghcr.io -u luketainton --password-stdin
- name: Build image for GitHub Container Registry
run: docker build . --file Dockerfile --tag ghcr.io/luketainton/fhed:${{ needs.release-on-push.outputs.ver }} --tag ghcr.io/luketainton/fhed:latest
- name: Push image to GitHub Container Registry
run: |
docker push ghcr.io/luketainton/fhed:latest
docker push ghcr.io/luketainton/fhed:${{ needs.release-on-push.outputs.ver }}

View File

@@ -1,67 +0,0 @@
name: Deploy
on:
push:
branches: main
jobs:
release-on-push:
runs-on: ubuntu-latest
outputs:
ver: ${{ steps.release.outputs.version }}
tag: ${{ steps.release.outputs.tag_name }}
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
steps:
- id: release
uses: rymndhng/release-on-push-action@master
with:
bump_version_scheme: patch
- name: Check Output Parameters
run: |
echo "Got tag name ${{ steps.release.outputs.tag_name }}"
echo "Got release version ${{ steps.release.outputs.version }}"
docker-dh:
name: Push to Docker Hub
needs: [release-on-push]
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- name: Login to DockerHub Registry
run: echo ${{ secrets.DOCKERHUB_PASSWORD }} | docker login -u ${{ secrets.DOCKERHUB_USERNAME }} --password-stdin
- name: Build image for Docker Hub
run: docker build . --file Dockerfile --build-arg VERSION=${{ needs.release-on-push.outputs.ver }} --tag luketainton/fhed:${{ needs.release-on-push.outputs.tag }} --tag luketainton/fhed:latest
- name: Push image to Docker Hub
run: |
docker push luketainton/fhed:${{ needs.release-on-push.outputs.tag }} &&
docker push luketainton/fhed:latest
docker-ghr:
name: Push to GitHub Package Registry
needs: [release-on-push]
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- name: Login to DockerHub Registry
run: echo ${{ secrets.GITHUB_TOKEN }} | docker login https://docker.pkg.github.com -u luketainton --password-stdin
- name: Build image for GitHub Package Registry
run: docker build . --file Dockerfile --build-arg VERSION=${{ needs.release-on-push.outputs.ver }} --tag docker.pkg.github.com/luketainton/fhed/fhed:latest --tag docker.pkg.github.com/luketainton/fhed/fhed:${{ needs.release-on-push.outputs.tag }}
- name: Push image to GitHub Package Registry
run: |
docker push docker.pkg.github.com/luketainton/fhed/fhed:${{ needs.release-on-push.outputs.tag }} &&
docker push docker.pkg.github.com/luketainton/fhed/fhed:latest
deploy:
name: Update Docker image on server
runs-on: ubuntu-latest
needs: [docker-dh]
steps:
- name: Update image on server
uses: garygrossgarten/github-action-ssh@release
with:
command: cd /docker/active/fhed && docker-compose pull && docker-compose up -d
host: ${{ secrets.SSH_HOST }}
port: ${{ secrets.SSH_PORT }}
username: ${{ secrets.SSH_USERNAME }}
privateKey: ${{ secrets.SSH_SSHKEY }}

View File

@@ -10,7 +10,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- uses: actions/stale@v1
- uses: actions/stale@v6
with:
repo-token: ${{ secrets.GITHUB_TOKEN }}
stale-issue-message: 'This issue has been marked as stale due to inactivity. If this issue is still ongoing, please leave a comment.'

View File

@@ -0,0 +1,18 @@
stages:
- build
build:
stage: build
only:
- tags
image: docker:20.10.22
services:
- docker:20.10.22-dind
variables:
IMAGE_TAG: "$CI_REGISTRY_IMAGE:$CI_COMMIT_TAG"
script:
- docker login -u $CI_REGISTRY_USER -p $CI_REGISTRY_PASSWORD $CI_REGISTRY
- docker build -t $CI_REGISTRY_IMAGE:latest -t $IMAGE_TAG .
- docker build -t $IMAGE_TAG -t $CI_REGISTRY_IMAGE:latest .
- docker push $IMAGE_TAG
- docker push $CI_REGISTRY_IMAGE:latest

View File

@@ -4,6 +4,7 @@ RUN composer --working-dir=/srv install
FROM php:apache
LABEL maintainer="Luke Tainton <luke@tainton.uk>"
LABEL org.opencontainers.image.source="https://github.com/luketainton/fhed"
ARG VERSION
RUN docker-php-ext-install pdo_mysql && a2enmod rewrite remoteip
COPY vhost.conf /etc/apache2/sites-enabled/000-default.conf

158
app/composer.lock generated
View File

@@ -63,12 +63,12 @@
"version": "v1.4.1",
"source": {
"type": "git",
"url": "https://github.com/clue/php-stream-filter.git",
"url": "https://github.com/clue/stream-filter.git",
"reference": "5a58cc30a8bd6a4eb8f856adf61dd3e013f53f71"
},
"dist": {
"type": "zip",
"url": "https://api.github.com/repos/clue/php-stream-filter/zipball/5a58cc30a8bd6a4eb8f856adf61dd3e013f53f71",
"url": "https://api.github.com/repos/clue/stream-filter/zipball/5a58cc30a8bd6a4eb8f856adf61dd3e013f53f71",
"reference": "5a58cc30a8bd6a4eb8f856adf61dd3e013f53f71",
"shasum": ""
},
@@ -80,12 +80,12 @@
},
"type": "library",
"autoload": {
"psr-4": {
"Clue\\StreamFilter\\": "src/"
},
"files": [
"src/functions_include.php"
]
],
"psr-4": {
"Clue\\StreamFilter\\": "src/"
}
},
"notification-url": "https://packagist.org/downloads/",
"license": [
@@ -108,6 +108,16 @@
"stream_filter_append",
"stream_filter_register"
],
"funding": [
{
"url": "https://clue.engineering/support",
"type": "custom"
},
{
"url": "https://github.com/clue",
"type": "github"
}
],
"time": "2019-04-09T12:31:48+00:00"
},
{
@@ -268,12 +278,12 @@
}
},
"autoload": {
"psr-4": {
"GuzzleHttp\\Promise\\": "src/"
},
"files": [
"src/functions_include.php"
]
],
"psr-4": {
"GuzzleHttp\\Promise\\": "src/"
}
},
"notification-url": "https://packagist.org/downloads/",
"license": [
@@ -294,16 +304,16 @@
},
{
"name": "guzzlehttp/psr7",
"version": "1.6.1",
"version": "1.8.5",
"source": {
"type": "git",
"url": "https://github.com/guzzle/psr7.git",
"reference": "239400de7a173fe9901b9ac7c06497751f00727a"
"reference": "337e3ad8e5716c15f9657bd214d16cc5e69df268"
},
"dist": {
"type": "zip",
"url": "https://api.github.com/repos/guzzle/psr7/zipball/239400de7a173fe9901b9ac7c06497751f00727a",
"reference": "239400de7a173fe9901b9ac7c06497751f00727a",
"url": "https://api.github.com/repos/guzzle/psr7/zipball/337e3ad8e5716c15f9657bd214d16cc5e69df268",
"reference": "337e3ad8e5716c15f9657bd214d16cc5e69df268",
"shasum": ""
},
"require": {
@@ -316,37 +326,58 @@
},
"require-dev": {
"ext-zlib": "*",
"phpunit/phpunit": "~4.8.36 || ^5.7.27 || ^6.5.8"
"phpunit/phpunit": "~4.8.36 || ^5.7.27 || ^6.5.14 || ^7.5.20 || ^8.5.8 || ^9.3.10"
},
"suggest": {
"zendframework/zend-httphandlerrunner": "Emit PSR-7 responses"
"laminas/laminas-httphandlerrunner": "Emit PSR-7 responses"
},
"type": "library",
"extra": {
"branch-alias": {
"dev-master": "1.6-dev"
"dev-master": "1.7-dev"
}
},
"autoload": {
"psr-4": {
"GuzzleHttp\\Psr7\\": "src/"
},
"files": [
"src/functions_include.php"
]
],
"psr-4": {
"GuzzleHttp\\Psr7\\": "src/"
}
},
"notification-url": "https://packagist.org/downloads/",
"license": [
"MIT"
],
"authors": [
{
"name": "Graham Campbell",
"email": "hello@gjcampbell.co.uk",
"homepage": "https://github.com/GrahamCampbell"
},
{
"name": "Michael Dowling",
"email": "mtdowling@gmail.com",
"homepage": "https://github.com/mtdowling"
},
{
"name": "George Mponos",
"email": "gmponos@gmail.com",
"homepage": "https://github.com/gmponos"
},
{
"name": "Tobias Nyholm",
"email": "tobias.nyholm@gmail.com",
"homepage": "https://github.com/Nyholm"
},
{
"name": "Márk Sági-Kazár",
"email": "mark.sagikazar@gmail.com",
"homepage": "https://github.com/sagikazarmark"
},
{
"name": "Tobias Schultze",
"email": "webmaster@tubo-world.de",
"homepage": "https://github.com/Tobion"
}
],
@@ -361,7 +392,21 @@
"uri",
"url"
],
"time": "2019-07-01T23:21:34+00:00"
"funding": [
{
"url": "https://github.com/GrahamCampbell",
"type": "github"
},
{
"url": "https://github.com/Nyholm",
"type": "github"
},
{
"url": "https://tidelift.com/funding/github/packagist/guzzlehttp/psr7",
"type": "tidelift"
}
],
"time": "2022-03-20T21:51:18+00:00"
},
{
"name": "http-interop/http-factory-guzzle",
@@ -787,12 +832,12 @@
}
},
"autoload": {
"psr-4": {
"Http\\Message\\": "src/"
},
"files": [
"src/filters.php"
]
],
"psr-4": {
"Http\\Message\\": "src/"
}
},
"notification-url": "https://packagist.org/downloads/",
"license": [
@@ -983,16 +1028,16 @@
},
{
"name": "phpseclib/phpseclib",
"version": "2.0.28",
"version": "2.0.31",
"source": {
"type": "git",
"url": "https://github.com/phpseclib/phpseclib.git",
"reference": "d1ca58cf33cb21046d702ae3a7b14fdacd9f3260"
"reference": "233a920cb38636a43b18d428f9a8db1f0a1a08f4"
},
"dist": {
"type": "zip",
"url": "https://api.github.com/repos/phpseclib/phpseclib/zipball/d1ca58cf33cb21046d702ae3a7b14fdacd9f3260",
"reference": "d1ca58cf33cb21046d702ae3a7b14fdacd9f3260",
"url": "https://api.github.com/repos/phpseclib/phpseclib/zipball/233a920cb38636a43b18d428f9a8db1f0a1a08f4",
"reference": "233a920cb38636a43b18d428f9a8db1f0a1a08f4",
"shasum": ""
},
"require": {
@@ -1000,8 +1045,7 @@
},
"require-dev": {
"phing/phing": "~2.7",
"phpunit/phpunit": "^4.8.35|^5.7|^6.0",
"sami/sami": "~2.0",
"phpunit/phpunit": "^4.8.35|^5.7|^6.0|^9.4",
"squizlabs/php_codesniffer": "~2.0"
},
"suggest": {
@@ -1085,7 +1129,7 @@
"type": "tidelift"
}
],
"time": "2020-07-08T09:08:33+00:00"
"time": "2021-04-06T13:56:45+00:00"
},
{
"name": "psr/container",
@@ -1496,12 +1540,12 @@
}
},
"autoload": {
"psr-4": {
"Ramsey\\Uuid\\": "src/"
},
"files": [
"src/functions.php"
]
],
"psr-4": {
"Ramsey\\Uuid\\": "src/"
}
},
"notification-url": "https://packagist.org/downloads/",
"license": [
@@ -1518,6 +1562,10 @@
{
"url": "https://github.com/ramsey",
"type": "github"
},
{
"url": "https://tidelift.com/funding/github/packagist/ramsey/uuid",
"type": "tidelift"
}
],
"time": "2020-03-29T20:13:32+00:00"
@@ -2001,12 +2049,12 @@
}
},
"autoload": {
"psr-4": {
"Symfony\\Polyfill\\Ctype\\": ""
},
"files": [
"bootstrap.php"
]
],
"psr-4": {
"Symfony\\Polyfill\\Ctype\\": ""
}
},
"notification-url": "https://packagist.org/downloads/",
"license": [
@@ -2077,12 +2125,12 @@
}
},
"autoload": {
"psr-4": {
"Symfony\\Polyfill\\Mbstring\\": ""
},
"files": [
"bootstrap.php"
]
],
"psr-4": {
"Symfony\\Polyfill\\Mbstring\\": ""
}
},
"notification-url": "https://packagist.org/downloads/",
"license": [
@@ -2151,12 +2199,12 @@
}
},
"autoload": {
"psr-4": {
"Symfony\\Polyfill\\Php73\\": ""
},
"files": [
"bootstrap.php"
],
"psr-4": {
"Symfony\\Polyfill\\Php73\\": ""
},
"classmap": [
"Resources/stubs"
]
@@ -2227,12 +2275,12 @@
}
},
"autoload": {
"psr-4": {
"Symfony\\Polyfill\\Php80\\": ""
},
"files": [
"bootstrap.php"
],
"psr-4": {
"Symfony\\Polyfill\\Php80\\": ""
},
"classmap": [
"Resources/stubs"
]
@@ -2311,12 +2359,12 @@
}
},
"autoload": {
"psr-4": {
"Symfony\\Polyfill\\Uuid\\": ""
},
"files": [
"bootstrap.php"
]
],
"psr-4": {
"Symfony\\Polyfill\\Uuid\\": ""
}
},
"notification-url": "https://packagist.org/downloads/",
"license": [

View File

@@ -6,6 +6,8 @@
$updates = get_updates($db, $request);
$authorised_users = get_subscribers($db, $request);
$is_authorised = isAuthorised($_SESSION['uuid'], $authorised_users, $request);
$rid = htmlspecialchars($_GET['rid'])
?>
@@ -131,7 +133,7 @@
<div class="form-group" style="margin: 2%;">
<textarea type="text" class="form-control" id="msg" name="msg" rows="3"></textarea>
<button type="submit" class="btn btn-primary" style="margin-top: 2%;">Submit</button>
<a href="/view?rid=<?php echo($_GET['rid']); ?>" class="btn btn-danger" style="margin-top: 2%;">Cancel</a>
<a href="/view?rid=<?php echo($rid); ?>" class="btn btn-danger" style="margin-top: 2%;">Cancel</a>
</div>
</form>
</div>

View File

@@ -6,6 +6,8 @@
$updates = get_updates($db, $request);
$authorised_users = get_subscribers($db, $request);
$is_authorised = isAuthorised($_SESSION['uuid'], $authorised_users, $request);
$rid = htmlspecialchars($_GET['rid']);
?>
@@ -131,7 +133,7 @@
<div class="form-group" style="margin: 2%;">
<input type="file" class="form-control-file" id="file" name="file">
<button type="submit" class="btn btn-primary" style="margin-top: 2%;">Submit</button>
<a href="/view?rid=<?php echo($_GET['rid']); ?>" class="btn btn-danger" style="margin-top: 2%;">Cancel</a>
<a href="/view?rid=<?php echo($rid); ?>" class="btn btn-danger" style="margin-top: 2%;">Cancel</a>
</div>
</form>
</div>

12
sonar-project.properties Normal file
View File

@@ -0,0 +1,12 @@
sonar.projectKey=luketainton_FHeD
sonar.organization=luketainton
# This is the name and version displayed in the SonarCloud UI.
#sonar.projectName=FHeD
#sonar.projectVersion=1.0
# Path is relative to the sonar-project.properties file. Replace "\" by "/" on Windows.
#sonar.sources=.
# Encoding of the source code. Default is default system encoding
#sonar.sourceEncoding=UTF-8