%define drupaldatadir %{_datadir}/%{name}
%define drupalsysconfdir %{_sysconfdir}/%{name}
%define drupalstatedir %{_localstatedir}/lib/%{name}
%define drupaltmpdir %{drupalstatedir}/tmp
%define drupaldocdir %{_defaultdocdir}/%{name}

Name:       drupal
Version:    7.41
%define subrel 1
Release:    %mkrel 1
Epoch:      0
Summary:    Open source content management platform
License:    GPLv2+
Group:      Networking/WWW
Url:        http://www.drupal.org/
BuildArch:  noarch

Source0:    http://ftp.drupal.org/files/projects/%{name}-%{version}.tar.gz
Source1:    README.urpmi
Source2:    %{name}.conf

Patch0:     %{name}-7.4-baseurl.patch
Patch1:     %{name}-7.8-scripts-remove-shebang.patch
Patch3:     %{name}-7.14-fc-fix-path-disclosure-vulnerability.patch

BuildRequires: php-cli

Requires:   apache
Requires:   apache-mod_php
Requires:   php-xml
Requires:   php-mbstring
Requires:   php-gd
Recommends:   php-uploadprogress
Requires:   %{name}-database-storage = %{version}-%{release}

%description
Drupal is a free software package that allows an individual or a 
community of users to easily publish, manage and organize a wide variety 
of content on a website. Tens of thousands of people and organizations 
have used Drupal to power scores of different web sites, including

    * Community web portals
    * Discussion sites
    * Corporate web sites
    * Intranet applications
    * Personal web sites or blogs
    * Aficionado sites
    * E-commerce applications
    * Resource directories
    * Social Networking sites

%package mysql
Summary:    mysql storage for drupal
Group:      Networking/WWW
Provides:   %{name}-database-storage = %{version}-%{release}
Requires:   %{name} = %{epoch}:%{version}-%{release}
Requires:   php-pdo_mysql
Obsoletes:  %{name}-mysqli < 0:7.10

%description mysql
This package requires needed packages for using mysql as storage backend
for drupal.

%package postgresql
Summary:    postgresql storage for drupal
Group:      Networking/WWW
Provides:   %{name}-database-storage = %{version}-%{release}
Requires:   %{name} = %{epoch}:%{version}-%{release}
Requires:   php-pdo_pgsql

%description postgresql
This package requires needed packages for using postgresql as storage backend
for drupal.

%package sqlite
Summary:    sqlite storage for drupal
Group:      Networking/WWW
Provides:   %{name}-database-storage = %{version}-%{release}
Requires:   %{name} = %{epoch}:%{version}-%{release}
Requires:   php-pdo_sqlite

%description sqlite
This package requires needed packages for using sqlite as storage backend
for drupal.

%prep
%setup -q
%patch0 -p0
%patch1 -p0 -b .remove_shebang
%patch3 -p1

chmod -x scripts/drupal.sh
chmod -x scripts/password-hash.sh
chmod -x scripts/run-tests.sh

%install
mkdir -p %{buildroot}%{drupaldatadir}
mkdir -p %{buildroot}%{drupalsysconfdir}
cp -a * %{buildroot}%{drupaldatadir}
rm -f %{buildroot}%{drupaldatadir}/*.txt %{buildroot}%{drupaldatadir}/web.config

cp -a robots.txt %{buildroot}%{drupalsysconfdir}
(cd %{buildroot}%{drupaldatadir}
ln -s ../../..%{drupalsysconfdir}/robots.txt .
cd -)

install -D -m 644 %{SOURCE2} %{buildroot}%{_webappconfdir}/%{name}.conf

mv %{buildroot}%{drupaldatadir}/sites %{buildroot}%{drupalsysconfdir}
(cd %{buildroot}%{drupaldatadir}
ln -s ../../..%{drupalsysconfdir}/sites .
cd -)

mkdir -p %{buildroot}%{drupalstatedir}/files/default
(cd %{buildroot}%{drupaldatadir}/sites/default
ln -s ../../../../..%{drupalstatedir}/files/default files
cd -)
cat > %{buildroot}%{drupalstatedir}/files/default/.htaccess << EOF
# Turn off all options we don't need.
Options None
Options +FollowSymLinks

# Set the catch-all handler to prevent scripts from being executed.
SetHandler Drupal_Security_Do_Not_Remove_See_SA_2006_006
<Files *>
  # Override the handler again if we're run later in the evaluation list.
  SetHandler Drupal_Security_Do_Not_Remove_See_SA_2013_003
</Files>

# If we know how to do it safely, disable the PHP engine entirely.
<IfModule mod_php.c>
  php_flag engine off
</IfModule>
EOF

mkdir -p %{buildroot}%{drupaltmpdir}
cat > %{buildroot}%{drupaltmpdir}/.htaccess << EOF
<Directory %{drupaltmpdir}>

    <IfModule mod_authz_core.c>
	# Apache 2.4
	<RequireAny>
	    Require all denied
	</RequireAny>
    </IfModule>
    <IfModule !mod_authz_core.c>
	# Apache 2.2
	Order Deny,Allow
	Deny from All
	Allow from None
    </IfModule>

    # Turn off all options we don't need.
    Options None
    Options +FollowSymLinks

    # Set the catch-all handler to prevent scripts from being executed.
    SetHandler Drupal_Security_Do_Not_Remove_See_SA_2006_006
    <Files *>
      # Override the handler again if we're run later in the evaluation list.
      SetHandler Drupal_Security_Do_Not_Remove_See_SA_2013_003
    </Files>

    # If we know how to do it safely, disable the PHP engine entirely.
    <IfModule mod_php.c>
      php_flag engine off
    </IfModule>

</Directory>
EOF

cat >> %{buildroot}%{drupalsysconfdir}/sites/default/default.settings.php << EOF

/** preset file_temporary_path so it's under apache acl (SA-CORE-2013-003) **/
\$conf['file_temporary_path'] = '%{drupaltmpdir}';
EOF

install -m0644 %SOURCE1 .

%files
%doc *.txt README.urpmi
%dir %{_datadir}/%{name}
%{_datadir}/%{name}/includes
%{_datadir}/%{name}/misc
%{_datadir}/%{name}/modules
%{_datadir}/%{name}/profiles
%{_datadir}/%{name}/scripts
%{_datadir}/%{name}/themes
%{_datadir}/%{name}/*php
%{_datadir}/%{name}/sites
%{_datadir}/%{name}/robots.txt
%dir %{drupalstatedir}
%dir %{drupalstatedir}/files
%attr(0755,apache,apache) %dir %{drupalstatedir}/files/default
%config(noreplace) %attr(0644,apache,apache) %{drupalstatedir}/files/default/.htaccess
%attr(0755,apache,apache) %dir %{drupaltmpdir}
%config(noreplace) %attr(0644,apache,apache) %{drupaltmpdir}/.htaccess
%attr(710,root,apache) %dir %{_sysconfdir}/%{name}
%attr(-,apache,apache) %{_sysconfdir}/%{name}/sites
%config(noreplace) %{_webappconfdir}/%{name}.conf
%config(noreplace) %{_sysconfdir}/%{name}/robots.txt

%files mysql

%files postgresql

%files sqlite


%changelog
* Mon Nov 02 2015 luigiwalser <luigiwalser> 0:7.41-1.1.mga5
+ Revision: 897443
- fix permissions of /etc/drupal/sites
- 7.41
- add 7.40 htaccess change to add nosniff header to prevent IE problem
- 7.39
- 7.38

* Fri Mar 20 2015 luigiwalser <luigiwalser> 0:7.35-1.mga5
+ Revision: 818988
- 7.35

* Thu Nov 20 2014 luigiwalser <luigiwalser> 0:7.34-1.mga5
+ Revision: 797946
- 7.34

* Wed Oct 15 2014 luigiwalser <luigiwalser> 0:7.32-1.mga5
+ Revision: 756838
- 7.32 (fixes CVE-2014-3704)

  + umeabot <umeabot>
    - Second Mageia 5 Mass Rebuild

* Fri Sep 26 2014 tv <tv> 0:7.31-3.mga5
+ Revision: 725051
- rebuild for bogus file deps

* Tue Sep 16 2014 umeabot <umeabot> 0:7.31-2.mga5
+ Revision: 678866
- Mageia 5 Mass Rebuild

  + tv <tv>
    - s/uggests:/Recommends:/

* Thu Aug 07 2014 luigiwalser <luigiwalser> 0:7.31-1.mga5
+ Revision: 660874
- 7.31 (fixes xml-rpc DoS)

* Tue Jul 22 2014 luigiwalser <luigiwalser> 0:7.29-1.mga5
+ Revision: 655591
- 7.29

* Sat May 17 2014 tmb <tmb> 0:7.28-1.mga5
+ Revision: 623158
- update to 7.28
- BR php-cli

* Sun Jan 26 2014 luigiwalser <luigiwalser> 0:7.26-1.mga4
+ Revision: 568345
- 7.26 (fixes CVE-2014-1475 and CVE-2014-1476)

* Fri Nov 29 2013 oden <oden> 0:7.24-3.mga4
+ Revision: 554054
- whoops! php5/php

* Wed Nov 27 2013 oden <oden> 0:7.24-2.mga4
+ Revision: 553751
- files in /tmp or /var/tmp is forbidden, so putting tmp in /var/lib/drupal/tmp (which is wrong imo)
- obey rpmlint
- more SA-CORE-2013-003 fixes
- more fixes according to SA-CORE-2013-003

* Sat Nov 23 2013 fwang <fwang> 0:7.24-1.mga4
+ Revision: 552509
- set as config file
- new version 7.24

* Sat Oct 19 2013 umeabot <umeabot> 0:7.22-2.mga4
+ Revision: 528411
- Mageia 4 Mass Rebuild

* Wed Jun 19 2013 fwang <fwang> 0:7.22-1.mga4
+ Revision: 444859
- new version 7.22

  + pterjan <pterjan>
    - Fix typos / improve summaries and descriptions

* Thu Feb 21 2013 fwang <fwang> 0:7.20-1.mga3
+ Revision: 399591
- new version 7.20

* Fri Jan 18 2013 fwang <fwang> 0:7.19-1.mga3
+ Revision: 389388
- new version 7.19

* Fri Jan 11 2013 umeabot <umeabot> 0:7.18-2.mga3
+ Revision: 349124
- Mass Rebuild - https://wiki.mageia.org/en/Feature:Mageia3MassRebuild

* Thu Dec 20 2012 fwang <fwang> 0:7.18-1.mga3
+ Revision: 332918
- new version 7.18

* Sun Nov 18 2012 fwang <fwang> 0:7.17-1.mga3
+ Revision: 319403
- new version 7.17

* Fri Oct 19 2012 fwang <fwang> 0:7.16-1.mga3
+ Revision: 308274
- new version 7.16

* Fri Oct 05 2012 obgr_seneca <obgr_seneca> 0:7.15-3.mga3
+ Revision: 302850
- removed dependancies for the database servers

* Sat Sep 08 2012 guillomovitch <guillomovitch> 0:7.15-2.mga3
+ Revision: 290493
- make configuration file compatible with apache 2.4
- ship configuration file as an additional source

* Thu Aug 02 2012 fwang <fwang> 0:7.15-1.mga3
+ Revision: 277813
- new version 7.15

* Fri Jul 13 2012 fwang <fwang> 0:7.14-4.mga3
+ Revision: 270576
- rebuild for missing packages

* Tue Jul 03 2012 obgr_seneca <obgr_seneca> 0:7.14-3.mga3
+ Revision: 266967
- Fix README.urpmi

* Fri Jun 15 2012 obgr_seneca <obgr_seneca> 0:7.14-2.mga3
+ Revision: 260802
- Fix path disclosure vulnerability CVE-2012-2922 (Mga Bug #5844)

* Fri May 04 2012 fwang <fwang> 0:7.14-1.mga3
+ Revision: 234693
- new version 7.14

* Sun Feb 12 2012 fwang <fwang> 0:7.12-2.mga2
+ Revision: 207927
- fix requires on epoch
- new version 7.12

* Sun Dec 11 2011 fwang <fwang> 0:7.10-2.mga2
+ Revision: 180683
- fix obsoleted version

* Sun Dec 11 2011 fwang <fwang> 0:7.10-1.mga2
+ Revision: 180676
- new version 5.10

* Fri Nov 25 2011 obgr_seneca <obgr_seneca> 0:7.9-1.mga2
+ Revision: 171867
- fixed htacces patch
- new version 7.9

* Wed Oct 12 2011 obgr_seneca <obgr_seneca> 0:7.8-3.mga2
+ Revision: 154121
- removed .htaccess and added functiuonality to http conf file

* Wed Oct 12 2011 obgr_seneca <obgr_seneca> 0:7.8-2.mga2
+ Revision: 154101
- fixed typo in htaccess patch

* Wed Oct 12 2011 obgr_seneca <obgr_seneca> 0:7.8-1.mga2
+ Revision: 154096
- new version 7.8
- changed installation paths conforming to web app policy
- added patches for .htaccess and shebang removal
- added pdo packages as Requires to database sub packages

* Mon Jul 04 2011 kharec <kharec> 0:7.4-2.mga2
+ Revision: 118307
- bump rel
- add patch for fix base url

* Mon Jul 04 2011 kharec <kharec> 0:7.4-1.mga2
+ Revision: 118130
- new version 7.4

* Mon Jul 04 2011 kharec <kharec> 0:7.2-1.mga2
+ Revision: 118114
- drop p0
- new version 7.2

* Thu Apr 14 2011 tv <tv> 0:7.0-1.mga1
+ Revision: 85228
- cleanups
- imported package drupal