doc/Home.md

   1 # Shaarli wiki
   2
   3 Welcome to the [Shaarli](https://github.com/shaarli/Shaarli/) wiki! Here you can find some info on how to use, configure, tweak and solve problems with your Shaarli. For general info, read the [README](https://github.com/shaarli/Shaarli/blob/master/README.md).
   4
   5 If you have any questions or ideas, please join the [chat](https://gitter.im/shaarli/Shaarli) (also reachable via [IRC](https://irc.gitter.im/)), post them in our [general discussion](https://github.com/shaarli/Shaarli/issues/44) or read the current [issues](https://github.com/shaarli/Shaarli/issues). If you've found a bug, please create a [new issue](https://github.com/shaarli/Shaarli/issues/new).
   6
   7 If you'd like a feature added, see if it fits in the list of [Ideas for Plugins](Ideas-for-plugins) and update the corresponding bug report.
   8
   9 _Note: This documentation is available online at https://github.com/shaarli/Shaarli/wiki, and locally in the `doc/` directory of your Shaarli installation._
  10
  11 ----------------------------------------------------------------------------------
  12
  13 <!-- MarkdownTOC depth=3 -->
  14
  15 - [Basic Usage](#basic-usage)
  16         - [Add the sharing button (_bookmarklet_) to your browser](#add-the-sharing-button-_bookmarklet_-to-your-browser)
  17         - [Share links using the _bookmarklet_](#share-links-using-the-_bookmarklet_)
  18 - [Other usage examples](#other-usage-examples)
  19         - [Using Shaarli as a blog, notepad, pastebin...](#using-shaarli-as-a-blog-notepad-pastebin)
  20         - [RSS Feeds or Picture Wall for a specific search/tag](#rss-feeds-or-picture-wall-for-a-specific-searchtag)
  21 - [Configuration](#configuration)
  22         - [Main data/options.php file](#main-dataoptionsphp-file)
  23         - [Changing theme](#changing-theme)
  24         - [Changing template](#changing-template)
  25 - [Backup](#backup)
  26 - [Troubleshooting](#troubleshooting)
  27         - [I forgot my password !](#i-forgot-my-password-)
  28         - [I'm locked out - Login bruteforce protection](#im-locked-out---login-bruteforce-protection)
  29         - [List of all login attempts](#list-of-all-login-attempts)
  30         - [Exporting from Diigo](#exporting-from-diigo)
  31         - [Importing from SemanticScuttle](#importing-from-semanticscuttle)
  32         - [Importing from Mister Wong](#importing-from-mister-wong)
  33         - [Hosting problems](#hosting-problems)
  34         - [Dates are not properly formatted](#dates-are-not-properly-formatted)
  35         - [Problems on CentOS servers](#problems-on-centos-servers)
  36         - [My session expires ! I can't stay logged in](#my-session-expires--i-cant-stay-logged-in)
  37         - [`Sessions do not seem to work correctly on your server`](#sessions-do-not-seem-to-work-correctly-on-your-server)
  38         - [pubsubhubbub support](#pubsubhubbub-support)
  39 - [Notes](#notes)
  40         - [Various hacks](#various-hacks)
  41         - [Changing timestamp for a link](#changing-timestamp-for-a-link)
  42 - [Related software](#related-software)
  43 - [Other links](#other-links)
  44 - [FAQ](#faq)
  45         - [Why did you create Shaarli ?](#why-did-you-create-shaarli-)
  46         - [Why use Shaarli and not Delicious/Diigo ?](#why-use-shaarli-and-not-deliciousdiigo-)
  47         - [What does Shaarli mean ?](#what-does-shaarli-mean-)
  48 - [Technical details](#technical-details)
  49         - [Directory structure](#directory-structure)
  50         - [Why not use a real database ? Files are slow !](#why-not-use-a-real-database--files-are-slow-)
  51 - [Wiki - TODO](#wiki---todo)
  52
  53 <!-- /MarkdownTOC -->
  54
  55
  56
  57 ------------------------------------------------------------------
  58
  59 # Basic Usage
  60
  61 ### Add the sharing button (_bookmarklet_) to your browser
  62
  63  * Open your Shaarli and `Login`
  64  * Click the `Tools` button in the top bar
  65  * Drag the **`✚Shaare link` button**, and drop it to your browser's bookmarks bar.
  66
  67 _This bookmarklet button in compatible with Firefox, Opera, Chrome and Safari. Under Opera, you can't drag'n drop the button: You have to right-click on it and add a bookmark to your personal toolbar._
  68
  69 ![](images/bookmarklet.png)
  70
  71 ### Share links using the _bookmarklet_
  72
  73  * When you are visiting a webpage you would like to share with Shaarli, click the _bookmarklet_ you just added.
  74  * A window opens.
  75   * You can freely edit title, description, tags... to find it later using the text search or tag filtering.
  76   * You will be able to edit this link later using the ![](https://raw.githubusercontent.com/shaarli/Shaarli/master/images/edit_icon.png) edit button.
  77   * You can also check the “Private” box so that the link is saved but only visible to you.
  78  * Click `Save`.**Voila! Your link is now shared.**
  79
  80
  81
  82
  83 # Other usage examples
  84 Shaarli can be used:
  85
  86  * to share, comment and save interesting links and news
  87  * to bookmark useful/frequent personal links (as private links) and share them between computers
  88  * as a minimal blog/microblog/writing platform (no character limit)
  89  * as a read-it-later list (for example items tagged `readlater`)
  90  * to draft and save articles/ideas
  91  * to keep code snippets
  92  * to keep notes and documentation
  93  * as a shared clipboard between machines
  94  * as a todo list
  95  * to store playlists (e.g. with the `music` or `video` tags)
  96  * to keep extracts/comments from webpages that may disappear
  97  * to keep track of ongoing discussions (for example items tagged `discussion`)
  98  * [to feed RSS aggregators](http://shaarli.chassegnouf.net/?9Efeiw) (planets) with specific tags
  99  * to feed other social networks, blogs... using RSS feeds and external services (dlvr.it, ifttt.com ...)
 100
 101 ### Using Shaarli as a blog, notepad, pastebin...
 102
 103  * Go to your Shaarli setup and log in
 104  * Click the `Add Link` button
 105  * To share text only, do not enter any URL in the corresponding input field and click `Add Link`
 106  * Pick a title and enter your article, or note, in the description field; add a few tags; optionally check `Private` then click `Save`
 107  * Voilà!  Your article is now published (privately if you selected that option) and accessible using its permalink.
 108
 109
 110 ### RSS Feeds or Picture Wall for a specific search/tag
 111 It is possible to filter RSS/ATOM feeds and Picture Wall on a Shaarli to **only display results of a specific search, or for a specific tag**. For example, if you want to subscribe only to links tagged `photography`:
 112  * Go to the desired Shaarli instance.
 113  * Search for the `photography` tag in the _Filter by tag_ box. Links tagged `photography` are displayed.
 114  * Click on the `RSS Feed` button.
 115  * You are presented with an RSS feed showing only these links. Subscribe to it to receive only updates with this tag.
 116  * The same method **also works for a full-text search** (_Search_ box) **and for the Picture Wall** (want to only see pictures about `nature`?)
 117  * You can also build the URL manually: `https://my.shaarli.domain/?do=rss&searchtags=nature`, `https://my.shaarli.domain/links/?do=picwall&searchterm=poney`
 118
 119 ![](rss-filter-1.png) ![](rss-filter-2.png)
 120
 121 # Configuration
 122
 123 ### Main data/options.php file
 124
 125 To change the configuration, create the file `data/options.php`, example:
 126 ```
 127     <?php
 128     $GLOBALS['config']['LINKS_PER_PAGE'] = 30;
 129     $GLOBALS['config']['HIDE_TIMESTAMPS'] = true;
 130     $GLOBALS['config']['ENABLE_THUMBNAILS'] = false;
 131     ?>
 132 ```
 133
 134 **Do not edit config options in index.php! Your changes would be lost when you upgrade.** The following parameters are available (parameters (default value)):
 135
 136  * `DATADIR ('data')` : This is the name of the subdirectory where Shaarli stores is data file. You can change it for better security.
 137  * `CONFIG_FILE ($GLOBALS['config']['DATADIR'].'/config.php')` : Name of file which is used to store login/password.
 138  * `DATASTORE ($GLOBALS['config']['DATADIR'].'/datastore.php')` : Name of file which contains the link database.
 139  *  `LINKS_PER_PAGE (20)` : Default number of links per page displayed.
 140  *  `IPBANS_FILENAME ($GLOBALS['config']['DATADIR'].'/ipbans.php')` : Name of file which records login attempts and IP bans.
 141  *  `BAN_AFTER (4)` : An IP address will be banned after this many failed login attempts.
 142  *  `BAN_DURATION (1800)` : Duration of ban (in seconds). (1800 seconds = 30 minutes)
 143  *  `OPEN_SHAARLI (false)` : If you set this option to true, anyone will be able to add/modify/delete/import/exports links without having to login.
 144  *   `HIDE_TIMESTAMPS (false)` : If you set this option to true, the date/time of each link will not be displayed (including in RSS Feed).
 145  *   `ENABLE_THUMBNAILS (true)` : Enable/disable thumbnails.
 146  *   `RAINTPL_TMP (tmp/)` : Raintpl cache directory  (keep the trailing slash!)
 147  *   `RAINTPL_TPL (tpl/) : Raintpl template directory (keep the trailing slash!). Edit this option if you want to change the rendering template (page structure) used by Shaarli. See [Changing template](#changing-template)
 148  *   `CACHEDIR ('cache')` : Directory where the thumbnails are stored.
 149  *   `ENABLE_LOCALCACHE (true)` : If you have a limited quota on your webspace, you can set this option to false: Shaarli will not generate thumbnails which need to be cached locally (vimeo, flickr, etc.). Thumbnails will still be visible for the services which do not use the local cache (youtube.com, imgur.com, dailymotion.com, imageshack.us)
 150  *   `UPDATECHECK_FILENAME ($GLOBALS['config']['DATADIR'].'/lastupdatecheck.txt')` : name of the file used to store available shaarli version.
 151  *   `UPDATECHECK_INTERVAL (86400)` : Delay between new Shaarli version check. 86400 seconds = 24 hours. Note that if you do not login for a week, Shaarli will not check for new version for a week.
 152  * `ENABLE_UPDATECHECK`: Determines whether Shaarli check for new releases at https://github.com/shaarli/Shaarli
 153  * `SHOW_ATOM (false)` : Show an `ATOM Feed` button next to the `Subscribe` (RSS) button. ATOM feeds are available at the address `?do=atom` regardless of this option.
 154  * `ARCHIVE_ORG (false)` : For each link, display a link to an archived version on archive.org
 155  * `ENABLE_RSS_PERMALINKS (true)`: choose whether the RSS item title link points directly to the link, or to the entry on Shaarli (permalink). `true` is the original Shaarli bahevior (point directly to the link)
 156
 157
 158 ### Changing theme
 159  * Shaarli's apparence can be modified by editing CSS rules in `inc/user.css`. This file allows to override rules defined in the main `inc/shaarli.css` (only add changed rules), or define a whole new theme.
 160  * Do not edit `inc/shaarli.css`! Your changes would be overriden when updating Shaarli.
 161  * Some themes are available at https://github.com/shaarli/shaarli-themes.
 162
 163 See also:
 164  * [Download CSS styles for shaarlis listed in an opml file](https://github.com/shaarli/Shaarli/wiki/Download-CSS-styles-for-shaarlis-listed-in-an-opml-file)
 165
 166 ### Changing template
 167
 168 | 💥 |  This feature is currently being worked on and will be improved in the next releases. Experimental.         |
 169 |---------|---------|
 170
 171  * Find the template you'd like to install. See the list of available templates (TODO). Find it's git clone URL or download the zip archive for the template.
 172  * In your Shaarli `tpl/` directory, run `git clone https://url/of/my-template/` or unpack the zip archive. There should now be a `my-template/` directory under the `tpl/` dir, containing directly all the template files.
 173  * Edit `data/options.php` to have Shaarli use this template. Eg.
 174
 175 `$GLOBALS['config']['RAINTPL_TPL'] = 'tpl/my-template/' ;`
 176
 177 You can find a list of compatible templates in [Related Software](#Related-software)
 178
 179 # Backup
 180
 181 You have two ways of backing up your database:
 182 * **Backup the file `data/datastore.php`** (by FTP or SSH). Restore by putting the file back in place.
 183  * Example command: `rsync -avzP my.server.com:/var/www/shaarli/data/datastore.php datastore-$(date +%Y-%m-%d_%H%M).php`
 184 * **Export your links as HTML** (Menu `Tools` > `Export`). Restore by using the `Import` feature.
 185  * This can be done using the [shaarchiver](https://github.com/nodiscc/shaarchiver) tool. Example command: `./export-bookmarks.py --url=https://my.server.com/shaarli --username=myusername --password=mysupersecretpassword --download-dir=./ --type=all`
 186
 187
 188 # Troubleshooting
 189
 190 ### I forgot my password !
 191
 192 Delete the file data/config.php and display the page again. You will be asked for a new login/password.
 193
 194
 195
 196 ### I'm locked out - Login bruteforce protection
 197 Login form is protected against brute force attacks: 4 failed logins will ban the IP address from login for 30 minutes. Banned IPs can still browse links.
 198
 199 To remove the current IP bans, delete the file `data/ipbans.php`
 200
 201 ### List of all login attempts
 202
 203 The file `data/log.txt` shows all logins (successful or failed) and bans/lifted bans.
 204 Search for `failed` in this file to look for unauthorized login attempts.
 205
 206
 207 ### Exporting from Diigo
 208
 209 If you export your bookmark from Diigo, make sure you use the Delicious export, not the Netscape export. (Their Netscape export is broken, and they don't seem to be interested in fixing it.)
 210
 211 ### Importing from SemanticScuttle
 212
 213 To correctly import the tags from a [SemanticScuttle](http://semanticscuttle.sourceforge.net/) HTML export, edit the HTML file before importing and replace all occurences of `tags=` (lowercase) to `TAGS=` (uppercase).
 214
 215 ### Importing from Mister Wong
 216 See [this issue](https://github.com/sebsauvage/Shaarli/issues/146) for import tweaks.
 217
 218
 219 ### Hosting problems
 220  * On **free.fr** : Please note that free uses php 5.1 and thus you will not have autocomplete in tag editing.  Don't forget to create a `sessions` directory at the root of your webspace. Change the file extension to `.php5` or create a `.htaccess` file in the directory where Shaarli is located containing:
 221
 222 ```
 223 php 1
 224 SetEnv PHP_VER 5
 225 ```
 226
 227  * If you have an error such as: `Parse error: syntax error, unexpected '=', expecting '(' in /links/index.php on line xxx`, it means that your host is using php4, not php5. Shaarli requires php 5.1. Try changing the file extension to `.php5`
 228  * On **1and1** : If you add the link from the page (and not from the bookmarklet), Shaarli will no be able to get the title of the page. You will have to enter it manually. (Because they have disabled the ability to download a file through HTTP).
 229  * If you have the error `Warning: file_get_contents() [function.file-get-contents]: URL file-access is disabled in the server configuration in /…/index.php on line xxx`, it means that your host has disabled the ability to fetch a file by HTTP in the php config (Typically in 1and1 hosting). Bad host. Change host. Or comment the following lines:
 230
 231 ```
 232 //list($status,$headers,$data) = getHTTP($url,4); // Short timeout to keep the application responsive.
 233 // FIXME: Decode charset according to charset specified in either 1) HTTP response headers or 2) <head> in html
 234 //if (strpos($status,'200 OK')) $title=html_extract_title($data);
 235 ```
 236
 237  * On hosts which forbid outgoing HTTP requests (such as free.fr), some thumbnails will not work.
 238  * On **lost-oasis**, RSS doesn't work correctly, because of this message at the begining of the RSS/ATOM feed : `<? // tout ce qui est charge ici (generalement des includes et require) est charge en permanence. ?>`. To fix this, remove this message from `php-include/prepend.php`
 239
 240 ### Dates are not properly formatted
 241 Shaarli tries to sniff the language of the browser (using HTTP_ACCEPT_LANGUAGE headers) and choose a date format accordingly. But Shaarli can only use the date formats (and more generaly speaking, the locales) provided by the webserver. So even if you have a browser in French, you may end up with dates in US format (it's the case on sebsauvage.net :-( )
 242
 243 ### Problems on CentOS servers
 244 On **CentOS**/RedHat derivatives, you may need to install the `php-mbstring` package.
 245
 246
 247 ### My session expires ! I can't stay logged in
 248 This can be caused by several things:
 249
 250 * Your php installation may not have a proper directory setup for session files. (eg. on Free.fr you need to create a  `session` directory on the root of your website.) You may need to create the session directory of set it up.
 251 * Most hosts regularly clean the temporary and session directories. Your host may be cleaning those directories too aggressively (eg.OVH hosts), forcing an expire of the session. You may want to set the session directory in your web root. (eg. Create the `sessions` subdirectory and add `ini_set('session.save_path', $_SERVER['DOCUMENT_ROOT'].'/../sessions');`. Make sure this directory is not browsable !)
 252 * If your IP address changes during surfing, Shaarli will force expire your session for security reasons (to prevent session cookie hijacking). This can happen when surfing from WiFi or 3G (you may have switched WiFi/3G access point), or in some corporate/university proxies which use load balancing (and may have proxies with several external IP addresses).
 253 * Some browser addons may interfer with HTTP headers (ipfuck/ipflood/GreaseMonkey…). Try disabling those.
 254 * You may be using OperaTurbo or OperaMini, which use their own proxies which may change from time to time.
 255 * If you have another application on the same webserver where Shaarli is installed, these application may forcefully expire php sessions.
 256
 257 ### `Sessions do not seem to work correctly on your server`
 258 Follow the instructions in the error message. Make sure you are accessing shaarli via a direct IP address or a proper hostname. If you have **no dots** in the hostname (e.g. `localhost` or `http://my-webserver/shaarli/`), some browsers will not store cookies at all (this respects the [HTTP cookie specification](http://curl.haxx.se/rfc/cookie_spec.html)).
 259
 260
 261 ### pubsubhubbub support
 262
 263 Download [publisher.php](https://pubsubhubbub.googlecode.com/git/publisher_clients/php/library/publisher.php) at the root of your Shaarli installation and set `$GLOBALS['config']['PUBSUBHUB_URL']` in your `config.php`
 264
 265 # Notes
 266 ### Various hacks
 267
 268  * [Example patch: add a new "via" field for links](Example-patch---add-new-via-field-for-links)
 269  * [Copy a Shaarli installation over SSH SCP, serve it locally with php cli](Copy-a-Shaarli-installation-over-SSH-SCP,-serve-it-locally-with-php-cli)
 270  * To display the array representing the data saved in datastore.php, use the following snippet (TODO where is it gone?)
 271
 272 ### Changing timestamp for a link
 273  * Look for `<input type="hidden" name="lf_linkdate" value="{$link.linkdate}">` in `tpl/editlink.tpl` (line 14)
 274  * Remove `type="hidden"` from this line
 275  * A new date/time field becomes available in the edit/new link dialog. You can set the timestamp manually by entering it in the format `YYYMMDD_HHMMS`.
 276
 277 ```
 278 $data = "tZNdb9MwFIb... <Commented content inside datastore.php>";
 279 $out = unserialize(gzinflate(base64_decode($data)));
 280 echo "<pre>"; // Pretty printing is love, pretty printing is life
 281 print_r($out);
 282 echo "</pre>";
 283 exit;
 284 ```
 285 This will output the internal representation of the datastore, "unobfuscated" (if this can really be considered obfuscation)
 286
 287
 288 # Related software
 289 Unofficial but relatedd work on Shaarli. If you maintain one of these, please get in touch with us to help us find a way to adapt your work to our fork. **TODO** contact repos owners to see if they'd like to standardize their work for the community fork.
 290
 291  * [shaarchiver](https://github.com/nodiscc/shaarchiver) - Archive your Shaarli bookmarks and their content
 292  * [Shaarli for Android](http://sebsauvage.net/links/?ZAyDzg) - Android application that adds Shaarli as a sharing provider
 293  * [Shaarlier for Android](https://play.google.com/store/apps/details?id=com.dimtion.shaarlier) - Android application to simply add links directly into your Shaarli
 294  * [shaarli-river](https://github.com/mknexen/shaarli-river) - an aggregator for shaarlis with many features
 295  * [Shaarlo](https://github.com/DMeloni/shaarlo) - an aggregator for shaarlis with many features ([Demo](http://shaarli.fr/))
 296  * [kalvn/shaarli-blocks](https://github.com/kalvn/shaarli-blocks) - A template/theme for Shaarli
 297  * [kalvn/Shaarli-Material](https://github.com/kalvn/Shaarli-Material) -
 298 A theme (template) based on Google's Material Design for Shaarli, the superfast delicious clone.
 299  * [Vinm/Blue-theme-for Shaarli](https://github.com/Vinm/Blue-theme-for-Shaarli) - A template/theme for Shaarli ([unmaintained](https://github.com/Vinm/Blue-theme-for-Shaarli/issues/2), compatibility unknown)
 300  * [vivienhaese/shaarlitheme](https://github.com/vivienhaese/shaarlitheme) - A Shaarli fork meant to be run in an openshift instance
 301  * [tt-rss-shaarli](https://github.com/jcsaaddupuy/tt-rss-shaarli) - [TinyTiny RSS](http://tt-rss.org/) plugin that adds support for sharing articles with Shaarli
 302  * [dhoko/ShaarliTemplate](https://github.com/dhoko/ShaarliTemplate) - A template/theme for Shaarli
 303  * [mknexen/shaarli-api](https://github.com/mknexen/shaarli-api) - a REST API for Shaarli
 304  * [Albinomouse](https://github.com/alexisju/albinomouse-template) - A full template for Shaarli
 305  * [Shaarlimages](https://github.com/BoboTiG/shaarlimages) - An image-oriented aggregator for Shaarlis
 306  * [Shaarli Superhero Theme](https://github.com/AkibaTech/Shaarli---SuperHero-Theme) - A template/theme for Shaarli
 307  * [Limonade](https://github.com/misterair/limonade) - A fork of Shaarli with a new template
 308  * [octopress-shaarli](https://github.com/ahmet2mir/octopress-shaarli) - octoprress plugin to retrieve SHaarli links on the sidebara
 309  * [Bookie](https://github.com/bookieio/bookie) - Another self-hostable, Free bookmark sharing software, written in Python
 310  * [Unmark](https://github.com/plainmade/unmark) -  An open source to do app for bookmarks ([Homepage](https://unmark.it/))
 311
 312
 313
 314 # Other links
 315  * [Liens en vrac de sebsauvage](http://sebsauvage.net/links/) - the original Shaarli
 316  * [A large list of Shaarlis](http://porneia.free.fr/pub/links/ou-est-shaarli.html)
 317  * [A list of working Shaarli aggregators](https://raw.githubusercontent.com/Oros42/find_shaarlis/master/annuaires.json)
 318  * [A list of some known Shaarlis](https://github.com/Oros42/shaarlis_list)
 319  * [Adieu Delicious, Diigo et StumbleUpon. Salut Shaarli ! - sebsauvage.net](http://sebsauvage.net/rhaa/index.php?2011/09/16/09/29/58-adieu-delicious-diigo-et-stumbleupon-salut-shaarli-) (fr) _16/09/2011 - the original post about Shaarli_
 320  * [Original ideas/fixme/TODO page](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:ideas)
 321  * [Original discussion page](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:discussion) (fr)
 322  * [Original revisions history](http://sebsauvage.net/wiki/doku.php?id=php:shaarli:history)
 323  * [Shaarli.fr/my](https://www.shaarli.fr/my.php) - Unofficial, unsupported (old fork) hosted Shaarlis provider, courtesy of [DMeloni](https://github.com/DMeloni)
 324  * [Shaarli Communauty](http://shaarferme.etudiant-libre.fr.nf/index.php) - Another unofficial Shaarli hoster (unsupported, old fork), hoster unknown
 325
 326
 327
 328
 329 # FAQ
 330
 331 ### Why did you create Shaarli ?
 332
 333 I was a StumbleUpon user. Then I got fed up with they big toolbar. I switched to delicious, which was lighter, faster and more beautiful. Until Yahoo bought it. Then the export API broke all the time, delicious became slow and was ditched by Yahoo. I switched to Diigo, which is not bad, but does too much. And Diigo is sslllooooowww and their Firefox extension a bit buggy. And… oh… **their Firefox addon sends to Diigo every single URL you visit** (Don't believe me ? Use [Tamper Data](https://addons.mozilla.org/en-US/firefox/addon/tamper-data/) and open any page).
 334
 335 Enough is enough. Saving simple links should not be a complicated heavy thing. I ditched them all and wrote my own: Shaarli. It's simple, but it does the job and does it well. And my data is not hosted on a foreign server, but on my server.
 336
 337 ### Why use Shaarli and not Delicious/Diigo ?
 338
 339 With Shaarli:
 340
 341 *     The data is yours: It's hosted on your server.
 342 *     Never fear of having your data locked-in.
 343 *     Never fear to have your data sold to third party.
 344 *     Your private links are not hosted on a third party server.
 345 *     You are not tracked by browser addons (like Diigo does)
 346 *     You can change the look and feel of the pages if you want.
 347 *     You can change the behaviour of the program.
 348 *     It's magnitude faster than most bookmarking services.
 349
 350 ### What does Shaarli mean ?
 351
 352 Shaarli is for shaaring your links.
 353
 354
 355
 356 # Technical details
 357  * Application is protected against XSRF (Cross-site requests forgery): Forms which act on data (save,delete…) contain a token generated by the server. Any posted form which does not contain a valid token is rejected. Any token can only be used once. Token are attached to the session and cannot be reused in another session.
 358  * Sessions automatically expires after 60 minutes. Sessions are protected against highjacking: The sessionID cannot be used from a different IP address.
 359  * An .htaccess file protects the data file.
 360  * Link database is an associative array which is serialized, compressed (with deflate), base64-encoded and saved as a comment in a .php file. Thus even if the server does not support htaccess files, the data file will still not be readable by URL. The database looks like this:
 361 ```
 362 <?php /* zP1ZjxxJtiYIvvevEPJ2lDOaLrZv7o...
 363 ...ka7gaco/Z+TFXM2i7BlfMf8qxpaSSYfKlvqv/x8= */ ?>
 364 ```
 365
 366 * The password is salted, hashed and stored in the data subdirectory, in a php file, and protected by htaccess. Even if the webserver does not support htaccess, the hash is not readable by URL. Even if the .php file is stolen, the password cannot deduced from the hash. The salt prevents rainbow-tables attacks.
 367 * Shaarli relies on `HTTP_REFERER` for some functions (like redirects and clicking on tags). If you have disabled or masqueraded `HTTP_REFERER` in your browser, some features of Shaarli may not work
 368 * `magic_quotes` is a horrible option of php which is often activated on servers. No serious developer should rely on this horror to secure their code against SQL injections. You should disable it (and Shaarli expects this option to be disabled). Nevertheless, I have added code to cope with magic_quotes on, so you should not be bothered even on crappy hosts.
 369 * Small hashes are used to make a link to an entry in Shaarli. They are unique. In fact, the date of the items (eg.20110923_150523) is hashed with CRC32, then converted to base64 and some characters are replaced. They are always 6 characters longs and use only A-Z a-z 0-9 - _ and @.
 370
 371 ### Directory structure
 372
 373 Here is the directory structure of Shaarli and the purpose of the different files:
 374
 375 ```
 376     index.php : Main program.
 377     COPYING : Shaarli license.
 378     inc/ : Includes (libraries, CSS…)
 379         shaarli.css : Shaarli stylesheet.
 380         jquery.min.js : jQuery javascript library.
 381         jquery-ui.min.js : jQuery-UI javascript library.
 382         jquery-MIT-LICENSE.txt: jQuery license.
 383         jquery.lazyload.min.js: LazyLoad javascript library.
 384         rain.tpl.class.php : RainTPL templating library.
 385     tpl/ : RainTPL templates for Shaarli. They are used to build the pages.
 386     images/ : Images and icons used in Shaarli.
 387     data/ : Directory where data is stored (bookmark database, configuration, logs, banlist…)
 388         config.php : Shaarli configuration (login, password, timezone, title…)
 389         datastore.php : Your link database (compressed).
 390         ipban.php : IP address ban system data.
 391         lastupdatecheck.txt : Update check timestamp file (used to check every 24 hours if a new version of Shaarli is available).
 392         log.txt : login/IPban log.
 393     cache/ : Directory containing the thumbnails cache. This directory is automatically created. You can erase it anytime you want.
 394     tmp/ : Temporary directory for compiled RainTPL templates. This directory is automatically created. You can erase it anytime you want.
 395 ```
 396
 397 ### Why not use a real database ? Files are slow !
 398
 399 Does browsing [this page](http://sebsauvage.net/links/) feel slow ? Try browsing older pages, too.
 400
 401 It's not slow at all, is it ? And don't forget the database contains more than 16000 links, and it's on a shared host, with 32000 visitors/day for my website alone. And it's still damn fast. Why ?
 402
 403 The data file is only 3.7 Mb. It's read 99% of the time, and is probably already in the operation system disk cache. So generating a page involves no I/O at all most of the time.
 404
 405 # Wiki - TODO
 406  * Translate (new page can be called Home.fr, Home.es ...) and linked from Home
 407  * add more screenshots
 408  * add developer documentation (storage architecture, classes and functions, security handling, ...)
 409  * Contact related projects
 410  * Add a Table of Contents to the wiki (can be added to the sidebar)
 411
 412 ...