Stikked is an Open-Source PHP Pastebin, with the aim of keeping a simple and easy to use user interface.
This is the stikked-fit version that has been forked from Stikked 0.14.0 in January 2023 as the repository from Claude Hohl became stale for three years.
Please check Faster IT GmbH if you want to support a code review of Stikked and are interested in continued maintenance.
Stikked allows you to easily share code with anyone you wish. Based on the original Stikked with lots of bugfixes and improvements.
Here are some features:
- Easy setup
- Syntax highlighting for many languages, including live syntax highlighting with CodeMirror
- Paste replies
- Diff view between the original paste and the reply
- An API
- Search pastes
- Trending pastes
- Encrypted pastes
- Burn on reading
- Anti-Spam features
- Themes support ("default" and "bootstrap" are the ones supporting all current functionality)
- Multilanguage support
- Stikked client with support for client side encryption/decryption: gostikkit
- Another CLI tool requiring only curl program: pbin
- And many more. View this review
https://paste.scratchbook.ch/ (defunct)
See an encrypted paste: https://paste.scratchbook.ch/view/1427473f#iP7p05DRH0BC72qQjxv01BjUeOmNV073 (defunct)
- A web server: Apache, Lighttpd, Nginx, Cherokee.
- A database: MySQL / MariaDB, Postgres. OR a writable folder on your filesystem for SQLite.
- PHP version 7.0 or newer is required.
- PHP-GD for the creation of QR-codes.
- Git clone stikked-fit
- Create a user and database for Stikked
- Copy application/config/stikked.php.dist to application/config/stikked.php
- Edit configuration settings in application/config/stikked.php - everything is described there
- You're done!
- The database structure will be created automatically if it doesn't exist.
- No special file permissions are needed by default. Optional: If you want to have the JavaScript- and CSS-files minified, the static/asset/ folder has to be writable.
- To ensure that pastes with an expiration set get cleaned up, define the cron key in the config and set up a cronjob, for example:
*/5 * * * * curl --silent http://yoursite.com/cron/[key]
- If you encounter errors with stylesheets and paths, make sure your base_url config value is not empty (see here).
- Be sure to also copy the .htaccess file when you move files around. This is a hidden file and easily overlooked.
Note The docker-compose.yml and docker/php/Dockerfile are quite outdated. You will have to update them to make it work. PRs accepted :)
docker-compose up
This automatically builds the docker-image and fires up nginx, php and mariadb. Access your Stikked instance at http://localhost/.
All files are served directly; the Stikked-configuration for Docker resides in docker/stikked.php
In the folder doc/, you will find:
- Webserver example configurations for Apache, Nginx, Lighttpd, Cherokee
- A troubleshooting guide
- How to create your own theme
- How to translate Stikked into your language
- How to contribute and improve Stikked
Copy your htdocs/application/stikked.php config file away. Upload the new version. Copy it back.
- Fix some issues in the API [Daniel Lange/FIT]
- Make replying more robust in case of expired pastes [Daniel Lange/FIT]
- Fix the bootstrap theme [Daniel Lange/FIT]
- Fix captcha_helper for PHP 8.0+ compliance [Daniel Lange/FIT]
- Fix JSMin PHP 8.0+ errors [Daniel Lange/FIT]
- Fix Carabiner PHP 8.0+ error [Daniel Lange/FIT]
- Update GeSHi to v1.0.9.1 [Daniel Lange/FIT]
- Update Codeigniter to v3.1.13 [Daniel Lange/FIT]
- Hide shorturl checkbox when disabled [Krayon]
- Corrected XSS vuln in title param [Krayon]
- Rewritten the Docker setup to be simple and clean:
- switch to nginx-alpine, php-fpm-alpine and mariadb
- docker-compose: autobuild php-image for stikked
- serve all files directly (htdocs is mounted instead of copied)
- stikked-configuration for docker resides in docker/stikked.php
- force private-flag when a previously encrypted paste gets pasted public
- Fixed a critical bug that allowed pasting despite captcha
- Various bugfixes and improvements
- Updated CodeIgniter to 3.1.9
- Various improvements in the Docker setup
- An automated Docker-build: https://hub.docker.com/r/claudehohl/stikked/
- Reverted the "intelligent language switcher" back to a fixed language setting because of too many side-effects
- Fixed encodings and decryption functionality in various themes
- Various bugfixes and improvements
Copy your htdocs/application/stikked.php config file away. Upload the new version. Copy it back.
The language setting in config/stikked.php is back, you can set a fixed language:
$config['language'] = 'english';New config option: Content expiration.
Sets the "Expires:"-header to make use of browser-caching
Format: http://php.net/manual/en/function.strtotime.php
Examples: '+10 seconds', '+1 year', '-1 week'
Browser-caching is disabled when this option is not set.
$config['content_expiration'] = '+1 week';- Updates ensuring the compatibility with PHP7:
- Updated CodeIgniter to 3.1.5
- Updated GeSHi to 1.0.9.0
- Ability to run Stikked in Docker
- Small security fixes regarding XSS and LDAP
- Various bugfixes and improvements
Copy your htdocs/application/stikked.php config file away. Upload the new version. Copy it back.
If you want to keep QR codes being displayed, add the following line in config/stikked.php:
$config['qr_enabled'] = true;- Upgrade to CodeIgniter 3.1.0
- Added ACE editor
- Ability to select JS editor (CodeMirror, ACE or none)
- Insert paste text via drag & drop
- BBCode support
- Improved Spamadmin; ability to delete single and multiple pastes at once
- Soft api key
- Lots of bugfixes and improvements
Copy your htdocs/application/stikked.php config file away. Upload the new version. Copy it back.
Add and set the base_url in htdocs/application/config/stikked.php
- Upgrade to CodeIgniter 3.0.1 and with it, lots of improvements:
- SQLite support (yay!)
- Lots of "Error 500" and blank screens fixed
- New theme: i386
- New translations: Lithuanian, Danish, Polish
- Automatic language detection
- Support for the new ReCaptcha API
- Support for Goo.gl and Bit.ly URL shorteners
- Display expiration time if set
- XSS fixes
- Word wrap for looong words in paste display
- And many more
Copy your htdocs/application/stikked.php config file away. Upload the new version.
Append the $config['expires'] part at the bottom of application/config/stikked.php.dist to your config.
Copy it back.
- New translations: Japanese, Chinese-Simplified, Chinese-Traditional, Russian
- New themes: Stikkedizr, Cleanwhite
- Display QR code in paste
- Multiline highlighter
- Encrypted pastes (yeah!) - see it in action: http://paste.scratchbook.ch/view/1427473f#iP7p05DRH0BC72qQjxv01BjUeOmNV073
- Added "burn on reading" as expiration
- Search function - search in recent and trending pastes
- Added mockingjay to word list for unknown posters - let the revolution begin!
- Bugfixes and improvements
Copy your htdocs/application/stikked.php config file away. Upload the new version. Copy it back.
- New translations: Portuguese, Norwegian, Turkish, French
- New theme: Snowkat
- YOURLS support (http://yourls.org/)
- There is now a stikked.php.dist. You may copy that to config.php and have your own settings
- The API has more possibilities, see API doc
- Captcha must be entered only once, no more for further pastes
- Bugfixes and improvements
Copy your htdocs/application/stikked.php config file away. Upload the new version. Copy it back.
- Themes! Configure a different theme in config/stikked.php - or create your own
- Multilanguage support. Configure a different language in config/stikked.php
- Diff view for paste replies! View differences between the original paste and its reply
- see it in action: http://paste.scratchbook.ch/view/de81a093/diff
- Possibility to set default expiration time
- Updated GeSHi to version 1.0.8.11
- Updated CodeMirror to version 3.11
- Lots of minor fixes and improvements
- Added guides for troubleshooting, development, translation and creating themes
- Added webserver example configurations
- Added reCaptcha integration for better antispam
The following lines must be present config/stikked.php
$config['theme'] = 'default';You can choose between default, bootstrap, gabdark, gabdark3 and a fancy geocities theme ;)
Create you own theme. See doc/CREATING_THEMES.md
$config['language'] = 'english';You can choose between english, german and swissgerman ;)
Help translating Stikked into your language! See doc/TRANSLATING_STIKKED.md
$config['recaptcha_publickey'] = '';
$config['recaptcha_privatekey'] = '';If these lines are filled, reCaptcha will be used. Get a key from https://www.google.com/recaptcha/admin/create
- Trending pastes: http://paste.scratchbook.ch/trends
- LDAP authentication (thanks to Daniel, https://github.com/lightswitch05)
- Blocked words; maintain a comma separated list in your config, e.g. '.es.tl, mycraft.com, yourbadword' - pastes with this words will never get pasted
- Spam trap for bots
- Bugfix: Remove_invisible_characters removing legitimate paste content (claudehohl#28)
- Possibility to manually set the paste's displayed URL (used with mod_rewrite configurations)
- Print layout for pastes
- Updated to CodeIgniter version 2.1.3
- From now on, IPs get logged in the DB
- Added spamadmin:
- Enter credentials in config/stikked.php
- Visit /spamadmin, login
- Click on an IP to list all pastes belonging to it
- You can remove all the pastes listed, and optionally block the IP range
- Updated to CodeIgniter version 2.1.2
- Database optimizations: Pastes use less space (if you upgrade from a previous version, execute this SQL statement: "ALTER TABLE pastes DROP paste;"
- Anti spam features:
- Option to disable recent pastes
- Option to require the user to enter a captcha
- Cleaner options
- Valid RSS feed
- Simpler API response (non-JSON)
- Favicon
- gw.gd URL shortener (replaces bit.ly)
- Minor fixes
- Added backup function (yoursite.com/backup; set credentials in stikked.php config)
- Added pagination to the replies table
- Added RSS-Feeds to recent pastes and paste replies
- Embeddable pastes
- GeSHi updated to version 1.0.8.10
- Codemirror turned off by default
- Codemirror: Syntax changes dynamically with selection in language dropdown
- An API (see http://paste.scratchbook.ch/api)
- Integration of Codemirror (http://codemirror.net)
- The language-selection was broken; the dropdown now features all the languages that GeSHi supports
- Updated to CodeIgniter version 2.1.0
- Creation of bit.ly-URLs (instead of snipurl)
- Fixed download link
- Paste downloads as a .txt file
- No need to have PHP short tags enabled
- Automatic creation of all necessary MySQL tables
- Raw-mode is now like the raw-mode on pastebin.com
- Minification and concatenation of CSS and JavaScript files (can be turned on/off)
- Breached the license by removing the nasty copyright footer
- Paste Replies
- Fluid width pastes
- Auto copying paste url to clipboard.
- Paste expiration.
- Fully standards compliant css and xhtml.
- Random generating names for anonymous users
- Paste downloading