]>
Commit | Line | Data |
---|---|---|
1 | # Uguu | |
2 | ||
3 | Uguu is a simple temporary file uploading and sharing platform where files get deleted after 24 hours. | |
4 | ||
5 | ## Features | |
6 | ||
7 | - One click uploading, no registration required | |
8 | - A minimal, modern web interface | |
9 | - Drag & drop supported | |
10 | - Upload API with multiple response choices | |
11 | - JSON | |
12 | - HTML | |
13 | - Text | |
14 | - CSV | |
15 | - Supports [ShareX](https://getsharex.com/) and other screenshot tools | |
16 | ||
17 | ### Demo | |
18 | ||
19 | See the real world example at [uguu.se](https://uguu.se). | |
20 | ||
21 | ## Requirements | |
22 | ||
23 | Original development environment is Nginx + PHP5.3 + SQLite, but is confirmed to | |
24 | work with Apache 2.4 and newer PHP versions like PHP7.3. | |
25 | ||
26 | ## Install | |
27 | ||
28 | For the purposes of this guide, we won't cover setting up Nginx, PHP, SQLite, | |
29 | Node, or NPM. So we'll just assume you already have them all running well. | |
30 | ||
31 | ### Compiling | |
32 | ||
33 | First you must get a copy of the uguu code. To do so, clone this git repo. | |
34 | ```bash | |
35 | git clone https://github.com/nokonoko/uguu | |
36 | ``` | |
37 | ||
38 | Assuming you already have Node and NPM working, compilation is easy. | |
39 | ||
40 | Run the following commands to do so, please configure `dist.json` before you compile. | |
41 | ```bash | |
42 | cd uguu/ | |
43 | make | |
44 | make install | |
45 | ``` | |
46 | OR | |
47 | ```bash | |
48 | make install DESTDIR=/desired/path/for/site | |
49 | ``` | |
50 | After this, the uguu site is now compressed and set up inside `dist/`, or, if specified, `DESTDIR`. | |
51 | ||
52 | ## Configuring | |
53 | ||
54 | Front-end related settings, such as the name of the site, and maximum allowable | |
55 | file size, are found in `dist.json`. Changes made here will | |
56 | only take effect after rebuilding the site pages. This may be done by running | |
57 | `make` from the root of the site directory. | |
58 | ||
59 | Back-end related settings, such as database configuration, and path for uploaded files, are found in `static/php/includes/settings.inc.php`. Changes made here take effect immediately. Change the following settings: | |
60 | ```php | |
61 | define('UGUU_DB_CONN', 'sqlite:/path/to/db/uguu.sq3'); | |
62 | define('UGUU_FILES_ROOT', '/path/to/file/'); | |
63 | define('UGUU_URL', 'https://subdomainforyourfiles.your.site'); | |
64 | ``` | |
65 | ||
66 | If you intend to allow uploading files larger than 2 MB, you may also need to | |
67 | increase POST size limits in `php.ini` and webserver configuration. For PHP, | |
68 | modify `upload_max_filesize` and `post_max_size` values. The configuration | |
69 | option for nginx webserver is `client_max_body_size`. | |
70 | ||
71 | Edit checkdb.sh and checkfiles.sh to the proper paths: | |
72 | ```bash | |
73 | sqlite3 /path/to/db/uguu.sq3 "DELETE FROM files WHERE date <= strftime('%s', datetime('now', '-1 day'));" | |
74 | ``` | |
75 | ```bash | |
76 | find /path/to/files/ -mmin +1440 -exec rm -f {} \; | |
77 | ``` | |
78 | Then add them to your crontab: | |
79 | ```bash | |
80 | 0,30 * * * * bash /path/to/checkfiles.sh | |
81 | 0,30 * * * * bash /path/to/checkdb.sh | |
82 | ``` | |
83 | ||
84 | These scripts check if DB entries and files are older then 24 hours and if they are deletes them. | |
85 | ||
86 | ## MIME/EXT Blocking | |
87 | ||
88 | Blocking certain filetypes from being uploaded can be changed by editing the following settings in `static/php/includes/settings.inc.php`: | |
89 | ```php | |
90 | define('CONFIG_BLOCKED_EXTENSIONS', serialize(['exe', 'scr', 'com', 'vbs', 'bat', 'cmd', 'htm', 'html', 'jar', 'msi', 'apk', 'phtml'])); | |
91 | define('CONFIG_BLOCKED_MIME', serialize(['application/msword', 'text/html', 'application/x-dosexec', 'application/java', 'application/java-archive', 'application/x-executable', 'application/x-mach-binary'])); | |
92 | ``` | |
93 | ||
94 | By default the most common malicious filetypes are blocked. | |
95 | ||
96 | ## Using SQLite as DB engine | |
97 | ||
98 | We need to create the SQLite database before it may be used by uguu. | |
99 | Fortunately, this is incredibly simple. | |
100 | ||
101 | First create a directory for the database, e.g. `mkdir /var/db/uguu`. | |
102 | Then, create a new SQLite database from the schema, e.g. `sqlite3 /var/db/uguu/uguu.sq3 -init /home/uguu/sqlite_schema.sql`. | |
103 | Then, finally, ensure the permissions are correct, e.g. | |
104 | ```bash | |
105 | chown www-data:www-data /var/db/uguu | |
106 | chmod 0750 /var/db/uguu | |
107 | chmod 0640 /var/db/uguu/uguu.sq3 | |
108 | ``` | |
109 | ||
110 | Finally, edit `php/includes/settings.inc.php` to indicate this is the database engine you would like to use. Make the changes outlined below | |
111 | ```php | |
112 | define('UGUU_DB_CONN', '[stuff]'); ---> define('UGUU_DB_CONN', 'sqlite:/var/db/uguu/uguu.sq3'); | |
113 | define('UGUU_DB_USER', '[stuff]'); ---> define('UGUU_DB_USER', null); | |
114 | define('UGUU_DB_PASS', '[stuff]'); ---> define('UGUU_DB_PASS', null); | |
115 | ``` | |
116 | ||
117 | *NOTE: The directory where the SQLite database is stored, must be writable by the web server user* | |
118 | ||
119 | ### Nginx/Apache | |
120 | ||
121 | I won't cover settings everything up, however do NOT allow PHP scripts to be executed on your subdomain serving the files or someone will just upload a PHP shell and PwN you. | |
122 | ||
123 | ## Getting help | |
124 | ||
125 | Hit me up at [@nekunekus](https://twitter.com/nekunekus) or email me at neku@pomf.se | |
126 | ||
127 | ## Credits | |
128 | ||
129 | Uguu is based off [Pomf](http://github.com/pomf/pomf). | |
130 | ||
131 | ## License | |
132 | ||
133 | Uguu is free software, and is released under the terms of the Expat license. See | |
134 | `LICENSE`. |