bolt/bolt

Bolt is a simple CMS written in PHP. It is based on Silex and Symfony components, uses Twig and either SQLite, MySQL or PostgreSQL.

⚠️ Note - Not the latest version
This is the repository for Bolt 3. Please know that Bolt 5 has been released. If you are starting a new project, please use the following:
- Bolt 5 installation instructions
- Bolt 5 Core repository

Bolt

A Sophisticated, lightweight & simple CMS released under the open source MIT-license.

Bolt is a tool for Content Management, which strives to be as simple and straightforward as possible.

It is quick to set up, easy to configure, uses elegant templates, and above all, it's a joy to use!

Bolt is created using modern open source libraries, and is best suited to build sites in HTML5 with modern markup.

Installation

Detailed instructions can be found in the official documentation.

NOTE: Cloning the repository directly is only supported for development of the core of Bolt, see the link above for various supported options to suit your needs.

Reporting issues

See our Contributing to Bolt guide.

Support

Have a question? Want to chat? Run into a problem? See our community page.

Development

The ongoing Bolt development and maintenance takes place under the care of:

• Two Kings – Artisinal Web Development

Sponsors:

• Webforward, Richard Leishman
• → You and/or your company's name on this list? Become a sponsor.

---

bolt's Issues

Feature request: Support for wildcards in NiceUrls extension.

See: http://forum.pivotx.net/viewtopic.php?f=17&t=3123&p=15602#p15602

Full text search for the frontend.

It should be possible to use full text search on the frontend of the website.
In my opinion, it should be a text-input + button (coming from a template, like _sub_searchbox.twig or something similar, so it can be easily overridden).
It should search through all available contenttypes and return those records that are published. The results should be displayed, also using either a default template, or a template that is overridden in the theme or by the user.

Searching itself should be implemented in such a way that it will work, regardless of the chosen Database-type. If i'm correct, that means we can't just use Full-text search, because MySQL's InnoDB doesn't support it.
(which, imho, is really stupid, more info )

The .htaccess in files/ isn't working properly. Why not?

Images should easily be editable in an online image-editor.

incomplete documentation example for thumbnail

At http://docs.bolt.cm/templatetags#modifier-thumbnail the example should explicitly show how and where the crop parameter is used.

{{ content.image|thumbnail(320, 240, "r") }}

Validator text

When trying to register a (first) user 'Admin' with password 'admin', the password is too short (because of the minimum length of 6 characters). The error messages I get aren't nice:

snippet
8<---------------------------------

Password
This value is too short. It should have {{ limit }} characters or more.
This value is too short. It should have 6 characters or more.

Password (confirmation)
This value is too short. It should have {{ limit }} characters or more.

8<----------------------------------
end of snippet

When upgrading, the config.yml files shouldn't be overwritten.

Geolocation field is not displayed in 'default content' template..

Codemirror editor issue

The editor shows some annoying behavior when editing yml files in CMS. (Bob knows about it)
Please update to 3.0:)

Errors in Bolt 0.8.4 (latest) editor

I got myself some error messages in the editor. The message below appears when I start typing in a field of a new item, wich makes it unable to use for now.

Maybe I did something wrong myself so I did a clean install for testing purposes. Checked the folder rights. Same error appears. Something wrong in this release?

==== (I changed the pathname, privacy etc.) ====

Error!
•
• Message: The controller must return a response (null given). Did you forget to add a return statement somewhere in your controller?
•
• Class: LogicException
•
• Code: 0

            Symfony\Component\HttpKernel\HttpKernel->handleRaw()
            /path/vendor/symfony/http-kernel/Symfony/Component/HttpKernel/HttpKernel.php, line 73                            

            Symfony\Component\HttpKernel\HttpKernel->handle()
            /path/vendor/silex/silex/src/Silex/Application.php, line 469                            

            Silex\Application->handle()
            /path/vendor/silex/silex/src/Silex/Application.php, line 446                            

            Silex\Application->run()
            /path/index.php, line 6    

Remove Full Path Disclosure

Hi,

if you request a route that isn't defined, you get

Message: No route found for "GET /whatever" 
Class: Symfony\Component\HttpKernel\Exception\NotFoundHttpException 
Code: 0 

followed by a full PHP backtrace where each function call disclose the full path. This is considered a security issue.

This behavior needs to be changed so that the backtrace is only displayed to logged in users.

Allow for links/joins between contenttypes, creating relations.

New Fieldtype: We need an 'imagelist' field type.

So we can make galleries and sliders and such.

There is no built-in field for geo-data (latitude / longitude / minimap)

Better RSS item links

Links in the RSS items are not built in a nice way. Now the canonical ones are used, but these aren't guaranteed to be correct (e.g. when not changed in the config.yml).
There should be put a little more info in the template to ensure correct links.

"Duplicate" option in 'overview' screens is broken.

Use tagging for Packagist

Use tagging in the repository so the project can be added to packagist. This way the install can be done through composer as well by requiring a particular version. Updating will also be taken care off then.

For docs on how to do this, see the 'Managing package versions' section at https://packagist.org/about

Snippet extensions

Unit Tests

I really like this idea but I didn't see any tests.
I work with many websites made with Wordpress and the biggest problem for me is when they release an update and I have to check all my sites to verify that it is working. Nowadays, given the quantity of lines of code, write these tests for Wordpress is very close to impossible.
Another standpoint is for contributions on code. I need to verify what is working correctly before I add some codes and verify that it still works after this.
What do you think about it?

Show random content in a loop

It would be handy if there was some kind of "random" sort option in a loop: get random items of a contenttype and exclude the active one.

URI changes when altering title

If you change the title of a saved item, the URI also changes..

Twig_Error_Loader - appearing the first time we display the website

Hi,

I have a strange error with my website using bolt.

The first time I display the website in a new computer there is no problem with the home page, but when i try to go to an another page there is a strange error :

Error !
Class : Twig_Error_Loader
Message : Template "contact.twig" is not defined()
Code : 0

The url of this new page is also weird. Instead of "www.website.com/page/contact" I got "www.website.com/page/contact?bolt_session=a0eg3......"

I don't understand this error. My template is well configured and exist.
After that, if I go back to the home page and i wait just a while, I can go to the contact page and other page with no problem. The error doesn't appears anymore in the same computer, even if I clear the cache...

I hope you can help me !
If you need, i can give you the url of the website.

Thank you !

unpredictable menu links in menu.yml

A link in menu.yml to listings like "pages/" automatically switches to a random page like "page/about"

The same if you try to link to "pages"

(bolt 0.8)

The 'r' and 'f' parameters in thumbnail are swapped. Fix this.

Translation of special characters (e g "&auml;")

There is a problem in content.php. The function "htmlspecialchars" in row 501 in bolt/app/src/Bolt/Content.php makes some special characters often used in some western european countries (e g Germany) disappear. This makes the RSS-feed impossible to use in Germany and Scandinavia and probably some other countries.

Allow minifying JS and CSS on the fly.

Using either:

• Munee: https://github.com/meenie/munee
• Minify: http://code.google.com/p/minify/

Write documentation for extensions.

Default record.twig is missing the {{ video }} option

Thumbnail doesn't display

If you install Bolt outside the document root, timthumb doesn't work.

Patch:

diff --git a/app/timthumb.php b/app/timthumb.php
index 37daddd..9c62148 100644
--- a/app/timthumb.php
+++ b/app/timthumb.php
@@ -34,9 +34,9 @@ if (empty($matches[1]) || empty($matches[2]) || empty($matches[4])) {
     //die("Malformed thumbnail URL. Should look like '/thumbs/320x240c/filename.jpg'.");
 }

-
-
-$_GET['src'] = "../files/".urldecode($matches[4]);
+// Bolt specific
+define('LOCAL_FILE_BASE_DIRECTORY', dirname(dirname(__FILE__)));
+$_GET['src'] = "files/".urldecode($matches[4]);
 $_GET['src'] = str_replace("/files/files/", "/files/", $_GET['src']);

 $_GET['w'] = $matches[1];

This is bullet proof - even handling Bolt installations when UserDir is used.

View Preview should work

Allow {% setcontent %} to parse variables

The setcontent tag doesn't parse variables. This will give an error:

{% set current = '!' ~ record.id %}
{% setcontent entries = "entries" where { id: current } limit 10 %}

Message: An exception has been thrown during the compilation of a template ("Attribute "value" does
not exist for Node "Twig_Node_Expression_Name".") in "index.twig".

This needs to be fixed in convertToViewArguments() in SetcontentTokenParser.php.

Enforce different userlevels

Make sure that users with different userlevels actually have different priviliges in the backend.

Feeds should disable the debugbar.

I couldn't test this, but I think de RSS/XML feeds also add a debugbar to the output.

If not, the code should at least be updated to use the new 'debugbar' property in the application object (and set it to false).

Error when trying to manage extensions

In the latest code, I get an error when I try to go to my extensions page:

Class: Twig_Error_Runtime
Message: An exception has been thrown during the rendering of a template ("The "readme" route has some missing mandatory parameters ("key").") in "extensions.twig" at line 17.
Code: 0

Does this provide enough information or is more info required?

Add { field: "<now" } to docs for selecting dates.

Keep Bolt lightweight & simple

Hi,

I'm following the development of Bolt and it's progressing nicely. It will definitely be a nice replacement for PivotX (PivotX 2). However, you shouldn't forget the slogan - "Sophisticated, lightweight & simple CMS". He-he.

Write documentation for text/narrow and other new fields

Fatal error on installation if app/database isn't writable

If you forget

chmod -R 777 files/ app/database/ app/cache/ app/config/ theme/

or

chown -R apacheuser files/ app/database/ app/cache/ app/config/ theme/

when installing, Bolt wil tell you nicely that app/cache and app/config needs to be writable. However, when those are fixed, you get an ugly fatal error instead of a nice message about app/database.

Edit button doesn't work

Clicking the Edit button (in the Actions column) on the entries or pages overview doesn't work - JS error. Clicking the title of the page/entry of course works.

Author changes on save

When saving an item owned by another author, the author changes.

util::var_dump() suggestion

Hey Bob, I was checking out the bolt screenshots and noticed the print() function's output. If interested, you can take a look at my take on the same goal. Feel free to incorporate it or just close the issue otherwise :)

demo: http://o-0.me/dump_r/
repo: https://github.com/leeoniya/dump_r.php

cheers!
leon

Twig settings are unsafe by default.

Autoescape seems to be 'false' by default.

Twig itself defaults to 'true', which is a sane default from a good security standpoint. Shouldn't Bolt adhere to this as well?

I didn't make a pull request because a lot of things might break and rather only do the work when we all agree it's better.

Languages

Are you interested in translate the documentation to other languages? Now, it is translated to English and Dutch, and I can translate it to Spanish.

following guide i get DB errors

app does not take me thru wizard -- just throws DB error about missing tables.
is there a step i'm missing?

Fixed path to dashboard in prefill

See attached patch (if I can do that here in fork-and-pull land)

Refactor users/logins.

No it's just a simple session. We need to do this better.

RSS Feeds

Is this something we want/need, in 2012?

Template "entry.twig" is not defined ().

Hi ! and thanks for making Bolt a wonderfull CMS !

I got a weird problem while loading an entry. I've got two entries in database (contenttype: entry). One is loading fine. The other (which was written before) display this error :

Class: Twig_Error_Loader
Message: Template "entry.twig" is not defined ().
Code: 0

Cache cleared (through interface and manually)

Got any idea ?
Thanks

File manager

It would be awesome if there'd be some way to manage the files in the files/ directory. This can then be used for stuff like downloads folders without having to upload it to the folder manually.

Research implementing Bootstrap WYSIHTML5

http://jhollingworth.github.com/bootstrap-wysihtml5/

Looks like the simplicity would fit very well with Bolt.

P.S. I'm the same guy on Twitter ;-)