cloverstudio/spika-server

Server backend system for Spika

Spika-Server

We've stopped matain this version of Spika.

But we are developing new version of Spika right now. Please visit http://www.spikaapp.com and add your email address to our mailing list. We will launch new version in August 2015.

About new version of Spika

• Easy to setup backend.
• Easy to integrate to your existing app/web.
• Focused on only chat feature
• Easy to customise

If you are looking for messenger for companies or for any size of organisation, please visit https://www.spikaent.com

spika-server's Issues

I cant install !!!

I've posted this project a success.
However, after entering the installation address of the page does not open and the following error appears.
Warning: require_once(/var/www/Spika-Server/etc/../vendor/autoload.php): failed to open stream: No such file or directory in /var/www/Spika-Server/etc/app.php on line 17 Call Stack: 0.0002 316216 1. {main}() /var/www/Spika-Server/wwwroot/api.php:0 0.0007 363180 2. require('/var/www/Spika-Server/etc/app.php') /var/www/Spika-Server/wwwroot/api.php:3 Fatal error: require_once(): Failed opening required '/var/www/Spika-Server/etc/../vendor/autoload.php' (include_path='.:/usr/share/php:/usr/share/pear') in /var/www/Spika-Server/etc/app.php on line 17 Call Stack: 0.0002 316216 1. {main}() /var/www/Spika-Server/wwwroot/api.php:0 0.0007 363180 2. require('/var/www/Spika-Server/etc/app.php') /var/www/Spika-Server/wwwroot/api.php:3

Not able to call any API of spika server

Hi

I am using spika server but after installation i am not able to call any API from postman, giving me below error

NotFoundHttpException: No route found for "GET /createUser"

I am hitting the url as /localhost/Skipa-Server/wwwroot/api/createUser.

Subscribe same group more than once

I tried to subscribe same group with the same group_id more than once and I receive json response from the server as below:
..."favorite_groups":["1","1","1","1","1"],"...
It probably because I have inserted duplicate data into database. I think the database might not check entity integrity before inserting data.

OPEN CHAT is not working

At 'Spika Web Admin'
I click 'Open Chat' button, but nothing occurred.
What is the function of this button?

Emoticons not updating

I uploaded new emoticons but in android app it still shows the old ones, how do i update/add new emoticons ?

Server Modules

Hi
I'm running this code on my server

php -m

and
I received a list of installed modules

---

[PHP Modules]
bcmath
bz2
calendar
Core
ctype
curl
date
dba
dom
ereg
exif
fileinfo
filter
ftp
gd
gettext
hash
iconv
json
libxml
mbstring
mhash
mysql
mysqli
openssl
pcntl
pcre
PDO
pdo_mysql
Phar
posix
readline
Reflection
session
shmop
SimpleXML
soap
sockets
SPL
standard
sysvmsg
sysvsem
sysvshm
tokenizer
wddx
xdebug
xml
xmlreader
xmlwriter
zip
zlib

[Zend Modules]
Xdebug

---

What module does not exist?
Because I'm getting these messages in Spika-Android

Or why I get this error?

Push Notifications

Should I use the provided Push Notification file or should I create my own? And how do I get it to work?

Add Friend

How can i make it so that you have to add the person as a friend before you can start sending messages?

Viewing videos/sounds files crashes app

When ever i send a video or sound clip to anyone, they cannot view or i cannot view my own video, the app closes and says lost internet, tried this over 20times with same error.

wwwroot/installer doesn't exists

i did everything on the build tutorial but i don't get the url

Why movie, sound, location function don't work?

my Spika messenger gives error for playing movie, and sound
also for registering location

what is the solution?

Use photo from gallery don't work on Android 19 - Kitkat

thank you for this great open source ,
i have one comment i tried to fix and help with regards to great team work on this project

the code
Uri selected_image = data.getData();
String selected_image_path = getImagePath(selected_image);
onPhotoTaken(selected_image_path);
shall be have if(statment now )

smth like
if (Build.VERSION.SDK_INT <19){ /// old code ! } else {
new code !
}

and video too !

Error running Installer

Warning: require_once(/var/www/Spika-Server/etc/../vendor/autoload.php): failed to open stream: No such file or directory in /var/www/Spika-Server/etc/app.php on line 17 Call Stack: 0.0005 634768 1. {main}() /var/www/Spika-Server/wwwroot/index.php:0 0.0019 709712 2. require('/var/www/Spika-Server/etc/app.php') /var/www/Spika-Server/wwwroot/index.php:3 Fatal error: require_once(): Failed opening required '/var/www/Spika-Server/etc/../vendor/autoload.php' (include_path='.:/usr/share/php:/usr/share/pear') in /var/www/Spika-Server/etc/app.php on line 17 Call Stack: 0.0005 634768 1. {main}() /var/www/Spika-Server/wwwroot/index.php:0 0.0019 709712 2. require('/var/www/Spika-Server/etc/app.php') /var/www/Spika-Server/wwwroot/index.php:3

Errors on entering API page

Hi everybody! I tried to install the server, but on last (## confirm database is working) step I got this error:

2/2NotFoundHttpException: No route found for "GET /api"
in /vagrant_data/vendor/symfony/http-kernel/Symfony/Component/HttpKernel/EventListener/RouterListener.php line 116
at RouterListener->onKernelRequest(object(GetResponseEvent))
at call_user_func(array(object(RouterListener), 'onKernelRequest'), object(GetResponseEvent)) in /vagrant_data/vendor/symfony/event-dispatcher/Symfony/Component/EventDispatcher/EventDispatcher.php line 164
at EventDispatcher->doDispatch(array(array(object(RouterListener), 'onKernelRequest'), array(object(LocaleListener), 'onKernelRequest'), object(Closure), array(object(MiddlewareListener), 'onKernelRequest')), 'kernel.request', object(GetResponseEvent)) in /vagrant_data/vendor/symfony/event-dispatcher/Symfony/Component/EventDispatcher/EventDispatcher.php line 53
at EventDispatcher->dispatch('kernel.request', object(GetResponseEvent)) in /vagrant_data/vendor/symfony/http-kernel/Symfony/Component/HttpKernel/HttpKernel.php line 98
at HttpKernel->handleRaw(object(Request), '1') in /vagrant_data/vendor/symfony/http-kernel/Symfony/Component/HttpKernel/HttpKernel.php line 61
at HttpKernel->handle(object(Request), '1', true) in /vagrant_data/vendor/silex/silex/src/Silex/Application.php line 511
at Application->handle(object(Request)) in /vagrant_data/vendor/silex/silex/src/Silex/Application.php line 488
at Application->run() in /vagrant_data/wwwroot/api.php line 5

1/2ResourceNotFoundException:
in /vagrant_data/vendor/symfony/routing/Symfony/Component/Routing/Matcher/UrlMatcher.php line 91
at UrlMatcher->match('/api') in /vagrant_data/vendor/symfony/routing/Symfony/Component/Routing/Matcher/RedirectableUrlMatcher.php line 30
at RedirectableUrlMatcher->match('/api') in /vagrant_data/vendor/silex/silex/src/Silex/LazyUrlMatcher.php line 51
at LazyUrlMatcher->match('/api') in /vagrant_data/vendor/symfony/http-kernel/Symfony/Component/HttpKernel/EventListener/RouterListener.php line 102
at RouterListener->onKernelRequest(object(GetResponseEvent))
at call_user_func(array(object(RouterListener), 'onKernelRequest'), object(GetResponseEvent)) in /vagrant_data/vendor/symfony/event-dispatcher/Symfony/Component/EventDispatcher/EventDispatcher.php line 164
at EventDispatcher->doDispatch(array(array(object(RouterListener), 'onKernelRequest'), array(object(LocaleListener), 'onKernelRequest'), object(Closure), array(object(MiddlewareListener), 'onKernelRequest')), 'kernel.request', object(GetResponseEvent)) in /vagrant_data/vendor/symfony/event-dispatcher/Symfony/Component/EventDispatcher/EventDispatcher.php line 53
at EventDispatcher->dispatch('kernel.request', object(GetResponseEvent)) in /vagrant_data/vendor/symfony/http-kernel/Symfony/Component/HttpKernel/HttpKernel.php line 98
at HttpKernel->handleRaw(object(Request), '1') in /vagrant_data/vendor/symfony/http-kernel/Symfony/Component/HttpKernel/HttpKernel.php line 61
at HttpKernel->handle(object(Request), '1', true) in /vagrant_data/vendor/silex/silex/src/Silex/Application.php line 511
at Application->handle(object(Request)) in /vagrant_data/vendor/silex/silex/src/Silex/Application.php line 488
at Application->run() in /vagrant_data/wwwroot/api.php line 5

Fatal error

Hi

I ran this commands in putty

$ sudo apt-get update

$ sudo DEBIAN_FRONTEND=noninteractive apt-get install -y php5 php5-curl phpunit curl git-core php5-xdebug postfix mysql-server php5-mysql php5-gd

$ cd /var/www

$ sudo git clone https://github.com/cloverstudio/Spika-Server.git

$ cd Spika-Server

$ sudo mkdir logs

$ sudo mkdir uploads

$ sudo chmod -R 777 logs

$ sudo chmod -R 777 uploads

---

but in this command

$ sudo php /var/www/Spika-Server/composer.phar install -d /var/www/Spika-Server/

I keep getting this message

Fatal error: Class 'Phar' not found in /var/www/Spika-Server/composer.phar on line 13

can anyone help me?

Email Header Injection脆弱性

• 問題のコード
  • https://github.com/cloverstudio/Spika-Server/blob/develop/src/Spika/Controller/SendPasswordController.php#L44
  • https://github.com/cloverstudio/Spika-Server/blob/develop/src/Spika/Controller/CreateUserController.php#L49
• 再現方法
  • emailに、

    "Subject:Mail%20Injection%0ABcc:[email protected]%0AFrom:A%20Random%20Guy%0ASecure%20your%20mail%20function"

    を挿入する

emailに改行コードを含めてしまい、mail関数を生で使って閉まっています。"\n\n"を含めてしまえば再現方法のccだけでなくbody部分も含めて全てのメールを乗っ取ることが可能なため、From: AdministratorEmail で spamやフィッシングメールを送り放題です。

全てのユーザー入力文字からは改行コードを含めない用にvalidationし、
createUser時に、emailは正しいフォーマットかどうかのvalidationが必要です。
また、mail関数の利用廃止が必要です。

このあたりが参考になるかと思います。
http://www.unixuser.org/~haruyama/security/SecurityPolicySample/web_procedures/php.html
http://www.asahi-net.or.jp/~wv7y-kmr/memo/php_security.html#PHP_Email_header_injection

working with my own server

Can you please tell me how can i setup this the code with my own server not on a local server

GCM_API_KEY

GCM_API_KEY Dont work !
Hello can someone explain how to set up the gcm api key please ?
and what i have to do, to make push working !

THANKS

Cannt Install at all

After Installing the vender as it was given in the comment

i got this error
can pls anyone tell me proper steps to install in on a shared hosting with cloudlinux and cpanel on TMDHosting.

CouchDBへの無制限のアクセスが可能

• 問題のコード
  • https://github.com/cloverstudio/Spika-Server/blob/develop/src/Spika/Controller/GeneralAPIHandlerController.php#L28
• 再現方法
  • http://spikademo2.clover-studio.com/api/_all_docs
  • http://spikademo2.clover-studio.com/api/9b396ef6f2ea68ff9eee2263881db977

CouchDBでquery_stringをvalidationしないでアクセスを許可するのは非常に危険です。
TokenChecker によるCouchDBへのアクセス認証を作成しても、_all_docsへアクセス出来てしまうと全てのDBが抜かれてしまいます。
DBは細かくドキュメントを分けて構造化し、CouchDBへ渡すパラメータは全てvalidationをすると良いと思います。

video file transfer error...

video file transfer error...
3gp File Transfer Success
mp4 File Transfer Fail

.............................................................................
Spika Server use yahoo yui library ?

Installing on remote server

Hello!

I have been trying to get a Spika backend set up on my remote server all night. I've got it to install, but when I try to login at http://[serveraddress]/wwwroot/login, it sends me to http://localhost:8080/wwwroot/admin/login. How do I login on a remote server?

Also, is there a way to get Spika to run through a privileged MySQL user rather than root? On a local Vagrant install, I tried creating a user spika_admin who had all permissions in spiked, but no where else.

Many thanks for any help here.

Push Notification Not working. i know where it stucks. But don't know how to fix. :(

I don't know why notifications are not sent from server, I made a sample notification script, which works properly.

But it does not works from the Spika App.

What i can see is in the file Spika-Server/src/Spika/Provider/PushNotificationProvider.php
it never enters any of this conditions. Please help.

    $app['sendProdAPN'] = $app->protect(function($tokens,$payload) use ($self,$app) {
        $app['monolog']->addDebug("-----------Sending Production------------");
        $self->sendAPN($app['pushnotification.options']['APNProdPem'],$tokens,$payload,'ssl://gateway.push.apple.com:2195',$app);
    });

    $app['sendDevAPN'] = $app->protect(function($tokens,$payload) use ($self,$app) {           
        $app['monolog']->addDebug("-----------Sending DEV------------");
        $self->sendAPN($app['pushnotification.options']['APNDevPem'],$tokens,$payload,'ssl://gateway.sandbox.push.apple.com:2195',$app);
    });

    $app['sendGCM'] = $app->protect(function($payload) use ($self,$app) {           
        $app['monolog']->addDebug("-----------ANDROID------------");
        $self->sendGCM($app['pushnotification.options']['GCMAPIKey'],$payload,$app);
    });

And it is not even coming under, Spika-Server/src/Spika/Controller/AsyncTaskController.php

    $controllers->post('/notifyNewDirectMessage', function (Request $request) use ($self,$app) {
        $app['monolog']->addDebug("-----------Sending Step 0------------");
    }

Here is the log for reference,
[2014-07-06 10:10:15] myapp.DEBUG: -----------Started------------ [] []
[2014-07-06 10:10:15] myapp.INFO: Matched route "_api_POST_sendMessageToUser" (parameters: "_controller": "{}", "_route": "_api_POST_sendMessageToUser") [] []
[2014-07-06 10:10:15] myapp.INFO: > POST /api/sendMessageToUser [] []
[2014-07-06 10:10:15] myapp.DEBUG: write from : 3, to : 5 [] []
[2014-07-06 10:10:15] myapp.DEBUG: http://api.mydomain.com/api/notifyNewDirectMessage [] []
[2014-07-06 10:10:15] myapp.INFO: < 200 [] []
[2014-07-06 10:10:15] myapp.DEBUG: -----------Started------------ [] []
[2014-07-06 10:10:15] myapp.INFO: Matched route "_api_GET_userMessages_toUserId_count_offset" (parameters: "_controller": "{}", "toUserId": "5", "count": "20", "offset": "0", "_route": "_api_GET_userMessages_toUserId_count_offset") [] []
[2014-07-06 10:10:15] myapp.INFO: > GET /api/userMessages/5/20/0 [] []
[2014-07-06 10:10:15] myapp.DEBUG: read from : 3, to : 5 [] []
[2014-07-06 10:10:15] myapp.DEBUG: touser : 3 , type : direct_messages , fieldkey : 5 [] []
[2014-07-06 10:10:15] myapp.INFO: < 200 [] []

Please help.

Max Contacts

how to change default Max Contacts?

default is 20,

Push Notificaion

Push dont work. I die everything linke in the tutorial #35 but no result. Please need help.

Update

Hi, noticed over the past few hours and days there have been a few files that have either been changed or updated, how do i update them on my end ?

Cheers

Connection Refused

I added below lines it is showing the Connection refused by the localhost , Can you please check and help plzzzz
public static final String BASE_URL = "http://localhost:90/spika/wwwroot/api.php";
public static final String INFORMATION_URL = "http://localhost:90/spika/wwwroot/page/information/";
public static final String LIST_SERVERS_URL = BASE_URL + "/" + Const.API_FOLDER + "servers";

readme file missing

It seems that the readme page is not available

Does it have another tutorial about server setting?

thanks

I cannot install Spika-Server

Not exist installer!!
Please Help

Last login: Thu Oct 30 15:19:28 2014 from kd124213072204.ppp-bb.dion.ne.jp
ubuntu@ip-172-31-14-240:~$ cd /var/www/html/Spika-Server/
ubuntu@ip-172-31-14-240:/var/www/html/Spika-Server$ ls
composer.json composer.phar etc install logs phpunit.xml.dist src uploads Vagrantfile.backup vendor
composer.lock config files LICENSE phpclient README.md tests Vagrantfile Vagrantfile.digitalocean wwwroot
ubuntu@ip-172-31-14-240:/var/www/html/Spika-Server$ cd wwwroot
ubuntu@ip-172-31-14-240:/var/www/html/Spika-Server/wwwroot$ ls
api.php assets index.php

Unable to install spika on windows vista

I followed instruction from http://www.spikaapp.com/en/build/server/windows this page to install Spika server on my Windows desktop.

FYI this page http://www.spikaapp.com/install-backend.php gives a 404 error.

I am using WAMP instead of XAMPP. Upto step 9 everything worked fine. When I tried to open the installer in browser (step 10) [http://localhost/Spika-Server-master/wwwroot/installer], 404 Not Found error was shown.

Where did I go wrong??

I changed init.php page to my settings.

I would love to hear a response ASAP. Thanks.

I have stored the files downloaded from github in www folder. Path : C:\wamp\www\Spika-Server-master

Spika Server INstaller Fatal Error

hi i'm using Ubuntu and get this error :
( ! ) Fatal error: Call to undefined function Symfony\Component\HttpKernel\EventListener\json_encode() in /var/www/Spika-Server/vendor/symfony/http-kernel/Symfony/Component/HttpKernel/EventListener/RouterListener.php on line 156

Push Notifications : apns-dev.pem apns-prod.pem expiered on 31 Jan 2015

Hi All !
today , 1-Feb-2014 , push notifications on iOS SPIKA app stopped to work ,
files from git distr .../files/apns-dev.pem ../apns-prod.pem have expired certificates.

Email Sending Local smtp

Hallow there

i`ve already configure with postfix and dovecot at my server, when i use send email method by local smtp is not work, but when i use google as smtp is work.

is there any configuration with local smtp.? like username and password or else.?

"Failed to install Spika backend. Please start again from here." failed in step 3 running installer

Hi there,

I am installing spika-server on ubuntu 14.04, following the instructions in http://www.spikaapp.com/en/build/server.

When running http://server-ip/wwwroot/installer in a browser, it's ok

As shown in the pictures, it failed in step 3, "Create Initial Data".

Can anybody help me?

Hey guys, why my video clip playing gives error?

I can record video and it uploaded successfully
but whenever I play it, some critical error occures then it crashs Spika
voice playing is fine only video playing gives error
why it crashs my Spika?

Web Chat not updating

Not sure if this is down to me not having push notifications but if i was to chat with a friend who is using the app and im using the web chat interface is still does not update and i have to manually refresh the webpage for his messages to appear.

Cheers

Real time Chat

The chats are not real time....can you fix this?

Installer Troubleshooting

I can seem to put the right database information into the web installer i have tried all the host addresses as shown in the screenshot, every time all i get is "Please provide correct information".

Note: i am not using Vagrant

Spika install Fatal error

Hi everybody! I tried to install the server, but this step I got this error:

Fatal error: Class 'Spika\Db\MySQL' not found in /var/www/Spika-Server/src/Spika/Provider/SpikaDbServiceProvider.php on line 24

Call Stack:
0.0001 632864 1. {main}() /var/www/Spika-Server/wwwroot/api.php:0
0.0002 677312 2. require('/var/www/Spika-Server/etc/app.php') /var/www/Spika-Server/wwwroot/api.php:3
0.0104 2558624 3. Silex\Application->mount() /var/www/Spika-Server/etc/app.php:63
0.0104 2558624 4. Spika\Controller\ReportController->connect() /var/www/Spika-Server/vendor/silex/silex/src/Silex/Application.php:465
0.0105 2569088 5. Pimple->offsetGet() /var/www/Spika-Server/vendor/pimple/pimple/lib/Pimple.php:0
0.0105 2569168 6. {closure}() /var/www/Spika-Server/vendor/pimple/pimple/lib/Pimple.php:83
0.0105 2569248 7. Spika\Provider{closure}() /var/www/Spika-Server/vendor/pimple/pimple/lib/Pimple.php:122
0.0107 2591192 8. Pimple->offsetGet() /var/www/Spika-Server/vendor/pimple/pimple/lib/Pimple.php:0
0.0107 2591272 9. {closure}() /var/www/Spika-Server/vendor/pimple/pimple/lib/Pimple.php:83
0.0107 2591352 10. Spika\Provider{closure}() /var/www/Spika-Server/vendor/pimple/pimple/lib/Pimple.php:122

this code can't install

Directory Travasal脆弱性

• 問題のコード
• https://github.com/cloverstudio/Spika-Server/blob/develop/src/Spika/Controller/FileController.php#L36

$filePath = __DIR__.'/../'.FileController::$fileDirName."/".$fileID;

• 再現方法
• http://spikademo2.clover-studio.com/api/filedownloader.php?file=/../logs/debug.log

ユーザーが入力できる文字列は全てvalidationしたほうがいいと思います。
また、ファイルを触る場合は[\w].pngなどでパスに/や..などを含まないようにしたほうが良いかと思います。
取り急ぎ脆弱性を防ぐだけなら以下のようにすればいいと思います。

$filePath = __DIR__.'/../'.FileController::$fileDirName."/".basename($fileID);

Issues Notifications & Install

Getting a load of errors, had an issue with videos not working, now nothings working, keep getting error "Whoops, looks like something went wrong."

If @TTMTT or someone else can install this for me, with working videos and notifications ill pay.

Cheers

パスワードを生で保存している

パスワードは万が一漏れた場合の事を考えて、SHA256ハッシュなどの形式でDBに保存しておくのがよいと思います。
また、メールにパスワードを含めることは、パスワードを生のままで保存していることを宣言してしまっているので、一定期間だけ有効なパスワードリセットURLを送る方式が良いと思います。

このあたりが参考になるかと思います。
http://d.hatena.ne.jp/ryster/20110615/p1
http://www.amazon.co.jp/gp/product/4797361190

Push Notifications problem could someone help me?

I configured all things in serverside and clientside.
so everything is ok, but only push messege dosen't come.

@TTMTT could you help me?
I followed your guide in #35, but still not works

Installer Doesn't Exist

Hi there,

I've tried for hours on end now. I've followed this tutorial EXACTLY : http://www.spikaapp.com/en/build/server

but can't seem to make it work. I keep getting a 404 on the installer. The root is here : http://163.47.75.46/Spika-Server/

Please help me out as this is urgent :)

problems with loggin on spika server installer

Hi..
Iḿ trying to install Spika backend manually in Ubuntu 14.04...in step 6, using the installer, on "Create Initial Data", I click on "Open Spika Admin" button, and it sends me to this url:

http://localhost:8080/wwwroot/admin/login

but FireFox cannot conect to server in localhost:8080...so I changed it to:

http://localhost/Spika-Server/wwwroot/admin/login

an it works, but when I try to login with the default username and password, it sends again to http://localhost:8080/wwwroot/admin/login and again FireFox cannot conect to server in localhost:8080...what can I do?

Need to fresh page or app to view new messages on Spika

hi
i have installed spika-server on Ubuntu 14, everything is working fine but every time when i send a message between phone and web-browser i need to fresh manually to check new messages

please can anybody fix it

Admin, cannot delete a user

Hi,

When in the admin panel, i am not able to delete any users it pops up saying i don't have permissions however i am logging in as the main administrator

API issue.

Hello. When I get to http://localhost:8080/wwwroot/api. I get the following.

I'm new to development and any help would be appreciated. I've also seen this #24 but the answer wasn't clear enough.

Push Notifications

Hello people,

Can some one give a hand to make push notification work? I installed the backend and all dependencies on windows server. App works ok (sing up, join, gropus, friends, chats) but push notifications are not. I setup a new project in google console and try to make it work on spika but there is no way. Google maps works fine with my new project data and keys.

Maybe we can work together to make it work, becaus we don`t have company support at all

Best regards