Mini CMS - Modern

The point of this project is to practice back-end web developement with PHP, by creating a basic CMS with modern practices:

• OOP and ideally no strictly procedural code (ie: no global helper functions),
• MVC, plus the single index.php front controller and all other .php files outside of the web root ,
• use some of the PHP Standard Components (that I also created myself),
• no framework or non-native libraries (except for my Standard Components of course, as well as Markdown, PHP Mailer and PHPUnit)

An online demo version is available at https://minicmsmodern.florentpoujol.fr.

See also MINI CMS - Old-School - Vanilla, the same kind of project but completely procedural, without specific organisation of files and no libraries.

Install

Require PHP7.0+ (with the CURL and GD extensions), MySQL5.6+.

• Clone the repo or upload and extract the .zip from github's download.
• Make sure the App\views, config and public/uploads folders exists and are writable.
• run composer install.
• Set the root of the virtual host to the public folder.
• Access the site, which redirects you to the install page, fill out the required information (especially the database access), then if there is no error, you are good to go !

If you have any unexpected errors, or something doesn't seem to go right during the installation, make sure to delete the config/config.json file before trying again.

You will be redirected to the login page once the installation is complete.

If you need to update the configuration, you can either access the Config page via the admin menu (only admin users can do that), or directly edit the config/config.json file.

To run the tests, edit the database information in the tests\testsConfig.json file, then run php vendor/bin/phpunit from the root folder.

General features

Users

• 3 roles: admin, writer, commenter
• registering of new users via a public form or by admins
  • emails of new users must be validated via a link sent to their address
  • registering can be turned off globally
• Standard login via username and password
  • forgot password function that sends an email to the user allowing him to access the form to reset the password within 48h
• commenters can only edit their profile
• writers can see all existing users and edit their profile
• admins can see/edit/delete all users
• users can't delete themselves
• admin can ban users
• deleting a user deletes all its comments, reaffects its resources to the user that deleted it

Medias

• upload and deletion of media (images, zip, pdf)

Posts and categories

• standard posts linked to categories
• content is markdown
• only created by admin or writers
• can have comments (comments can be turned of on a per-post basis)
• the blog page show the X last posts
• the blog page show the last posts with a list of the categories in a sidebar

Pages

• content is markdown
• only created by admin or writers
• can have comments (comments can be turned of on a per-page basis)
• can be children of another page (if it isn't itself a child)

Comments

• comments can be added by any registered users on pages and posts where it's allowed
• comments can be turned off globally or on a per-page/post basis
• users can edit their comments in the admin section
• writer can also see and edit the comments attached to their pages and posts
• admins can see/update/delete all comments

Miscellaneous

• secure forms, requests to database and display of data
• full validation of data on the backend side (writers or commenters can't do anything they aren't supposed to do, even when modifying the HTML of a form through the browser's dev tools)
• nice handling of all possible kinds of errors and success messages
• emails can be sent via the local email software or SMTP
• global configuration saved as JSON can be edited via the file or by admins via a form
• must work with PHP7.0+ MySQL5.6+ and not use any deprecated stuff
• works as a subfolder or the root of a domain name
• links to pages, posts, categories and medias can be added in the content via wordpress-like shortcodes. Ie: [link:mdedia:the-media-slug]
• works with or without SSL. All internals links adapt automatically to the protocol used (+ url rewrite or not).
• optional use of Recaptcha on all public forms (set via the secret key in config)
• easy install via a script once put up on an FTP