Kliqqi is an open source content management system focused on creating an online social community. So you can create your own community site like facebook or twitter.
Formerly known as Pligg CMS, Kliqqi comes with a lot of core features like modules, templates, comments, language support, groups and SEO.
Kliqqi uses Smarty template system with built-in auto-caching to keep code separated from design.
We also allowed to extend Kliqqi functionality by creating module for Kliqqi.
You can learn more about Kliqqi from Kliqqi website.
Objective
In this tutorial we’ll learn how-to install Kliqqi on Ubuntu 14.04. We will also install and configure its prerequisites.
Prerequisites
We will install Kliqqi in fresh installation of Ubuntu Server 14.04.
We also need these application to be able to run Kliqqi:
- Apache 2
- MySQL >= 5.1
- PHP >= 5.4
Update Base System
Before we install Kliqqi, let’s update the system to the latest update.
$ sudo apt-get update
$ sudo apt-get -y upgrade
Install Apache 2
After applying latest update to our base system, let’s start installing Apache 2 and its required libraries.
$ sudo apt-get -y install apache2 apache2-bin apache2-data apache2-mpm-prefork libaio1 libapache2-mod-php5 libapr1 libaprutil1 libdbd-mysql-perl libdbi-perl libhtml-template-perl libmysqlclient18 libterm-readkey-perl libwrap0 ssl-cert tcpd
We can check Apache 2 service status using command below:
sudo service apache2 status
* apache2 is running
Install MySQL 5.6
We will install and use MySQL 5.6 as database for Kliqqi.
We will use MySQL Server 5.6 since MySQL 5.6 is the most up to date version of MySQL shipped with Ubuntu 14.04 Trusty Tahr.
$ sudo apt-get -y install mysql-server-5.6
We need to setup MySQL root password. Please input password for MySQL root user.
HP_NO_IMG/data/uploads/users/c7027ac0-7e31-4da4-a9ef-3dfe937a36f3/1622588448.png” alt=”” />
Verify root password.
HP_NO_IMG/data/uploads/users/c7027ac0-7e31-4da4-a9ef-3dfe937a36f3/320459047.png” alt=”” />
Securing MySQL Installation
We will secure MySQL installation by running mysql_secure_installation.
Enter root password that we set on installation:
$ mysql_secure_installation
NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MySQL
SERVERS IN PRODUCTION USE! PLEASE READ EACH STEP CAREFULLY!
In order to log into MySQL to secure it, we'll need the current
password for the root user. If you've just installed MySQL, and
you haven't set the root password yet, the password will be blank,
so you should just press enter here.
Enter current password for root (enter for none):
OK, successfully used password, moving on...
Since we already have a root password set, answer this part with n.
Setting the root password ensures that nobody can log into the MySQL
root user without the proper authorisation.
You already have a root password set, so you can safely answer 'n'.
Change the root password? [Y/n] n
... skipping.
Remove the anonymous user to improve security. This will make sure people or application have correct username and password to login to MySQL. Answer with Y.
By default, a MySQL installation has an anonymous user, allowing anyone
to log into MySQL without having to have a user account created for
them. This is intended only for testing, and to make the installation
go a bit smoother. You should remove them before moving into a
production environment.
Remove anonymous users? [Y/n] Y
... Success!
We also want remove the root login from remote machine. Answer with Y:
Normally, root should only be allowed to connect from 'localhost'. This
ensures that someone cannot guess at the root password from the network.
Disallow root login remotely? [Y/n] Y
... Success!
Previously the test database wa created automatically by MySQL installation, but MySQL 5.6 does not create test database. We can still choose Y, it will throw error but that’s fine.
By default, MySQL comes with a database named 'test' that anyone can
access. This is also intended only for testing, and should be removed
before moving into a production environment.
Remove test database and access to it? [Y/n] Y
- Dropping test database...
ERROR 1008 (HY000) at line 1: Can't drop database 'test'; database doesn't exist
... Failed! Not critical, keep moving...
- Removing privileges on test database...
... Success!
Last step is to reload MySQL privilege table.
Reloading the privilege tables will ensure that all changes made so far
will take effect immediately.
Reload privilege tables now? [Y/n] Y
... Success!
All done! If you've completed all of the above steps, your MySQL
installation should now be secure.
Thanks for using MySQL!
Cleaning up...
Create Database for kliqqi
Now we have a secure MySQL installation, time to create database and user for kliqqi itself.
Login to MySQL using root credential.
$ mysql -u root -p
Enter password:
Welcome to the MySQL monitor. Commands end with ; or \g.
Your MySQL connection id is 58
Server version: 5.6.30-0ubuntu0.14.04.1 (Ubuntu)
Copyright (c) 2000, 2016, Oracle and/or its affiliates. All rights reserved.
Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners.
Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
mysql>
Create new database named kliqqi using command below:
mysql> CREATE DATABASE kliqqi;
Query OK, 1 row affected (0.00 sec)
Create user for kliqqi
Database for kliqqi is ready, let’s create username and password and grant privileges to kliqqi database.
Don’t forget to change the password kliqqi123secret below with better password.
mysql> GRANT ALL PRIVILEGES ON `kliqqi`.* TO 'kliqqi'@'localhost' IDENTIFIED BY 'kliqqi123secret';
Query OK, 0 rows affected (0.00 sec)
We need to run FLUSH PRIVILEGES command so that the privileges table will be reloaded by MySQL and we can use new credential.
mysql> FLUSH PRIVILEGES;
Query OK, 0 rows affected (0.00 sec)
Exit from MySQL console by typing \q
mysql> \q
Install PHP 5
Last component that we have to install before we can install kliqqi is PHP 5. We will install PHP 5 and several common PHP libraries.
$ sudo apt-get -y install php5-cli php5-common php5-json php5-mysql php5-readline
Install additional php libraries:
$ sudo apt-get -y install php5-gd php5-mcrypt php5-curl
We will disable php5 opcache module and enable mcrypt module
$ sudo php5dismod opcache
$ sudo php5enmod mcrypt
Restart Apache 2 process so the changes will be applied
$ sudo service apache2 restart
Install kliqqi
All prerequisites is already installed. We’re ready to install kliqqi. The latest stable version of kliqqi is available Kliqqi download page.
At the time of this writing, the latest stable version is version 3.5.2, let’s download kliqqi compressed file using wget.
$ wget -c https://www.kliqqi.com/download/2268/ -O Kliqqi1112017.zip
Extract the downloaded file using unzip. If your system don’t have unzip yet, you can install unzip using command below:
$ sudo apt-get -y install unzip
Extract kliqqi using unzip
$ unzip Kliqqi1112017.zip
Move Kliqqi1112017 directory to Apache directory as kliqqi.
$ sudo mv Kliqqi1112017 /var/www/kliqqi
Change ownership of kliqqi directory to www-data user and group.
$ sudo chown -R www-data:www-data /var/www/kliqqi
The kliqqi files are ready, now let’s create Apache Virtual Host configuration to serve kliqqi.
Configure Apache Virtual Host for http Only
Create new apache configuration file on /etc/apache2/sites-available/kliqqi.conf with contents below.
<VirtualHost *:80>
ServerName kliqqi.exampleserver.xyz
DocumentRoot /var/www/kliqqi
<Directory /var/www/kliqqi>
Options -Indexes +FollowSymLinks +MultiViews
AllowOverride All
Require all granted
</Directory>
ErrorLog ${APACHE_LOG_DIR}/kliqqi.exampleserver.xyz-error.log
CustomLog ${APACHE_LOG_DIR}/kliqqi.exampleserver.xyz-access.log combined
</VirtualHost>
Don’t forget to change kliqqi.exampleserver.xyz above with the domain name that you use for your kliqqi installation.
Enable the site using a2ensite command.
$ sudo a2ensite kliqqi
Reload the apache2 process so it read the new virtualhost configuration:
$ sudo service apache2 reload
Kliqqi Installation Wizard
Now point our browser to Kliqqi installation URL : http://kliqqi.exampleserver.xyz/install/install.php
First step is language select, choose English
HP_NO_IMG/data/uploads/users/c56372e4-3a35-467a-96d1-a014d4b49bcf/2046240205.png” alt=”” />
Step one contain installation step information. Click Next step
HP_NO_IMG/data/uploads/users/c56372e4-3a35-467a-96d1-a014d4b49bcf/1111397540.png” alt=”” />
Step 2 is configuring database for Kliqqi. Enter database name and credentials that we created for Kliqqi before. Click Check Settings
HP_NO_IMG/data/uploads/users/c56372e4-3a35-467a-96d1-a014d4b49bcf/1081018662.png” alt=”” />
Step 3 the installer will update configuration file for database. Click Next step.
HP_NO_IMG/data/uploads/users/c56372e4-3a35-467a-96d1-a014d4b49bcf/857520467.png” alt=”” />
Step 4 will create database database schema for us. In this step we will also create admin credentials for Kliqqi.
HP_NO_IMG/data/uploads/users/c56372e4-3a35-467a-96d1-a014d4b49bcf/760778330.png” alt=”” />
Installation is complete we will have to do post install task to secure our Kliqqi installation, we will do this on next section
HP_NO_IMG/data/uploads/users/c56372e4-3a35-467a-96d1-a014d4b49bcf/634946929.png” alt=”” />
When we click login to dashboard link we will get login page. We can login using admin credential we created on step 4.
HP_NO_IMG/data/uploads/users/c56372e4-3a35-467a-96d1-a014d4b49bcf/349295767.png” alt=”” />
After successfully login we will go to Kliqqi administration dashboard where we can manage Kliqqi settings.
HP_NO_IMG/data/uploads/users/c56372e4-3a35-467a-96d1-a014d4b49bcf/2013816074.png” alt=”” />
Secure Kliqqi Installation
We have do two post install tasks, change file permission for database configuration and also remove install directory.
$ cd /var/www/kliqqi
$ chmod 644 /libs/dbconnect.php
$ rm -rf install
Configure https only site for kliqqi
Secure connection is now a requirement for web application. Last step that we will do in this tutorial is changing the connection to only use https.
We assume that you already have SSL certificate and private key.
Let’s create new apache virtual host configuration on /etc/apache2/sites-available/kliqqi-ssl.conf with contents below.
Don’t forget to change:
ServerNameSSLCertificateFileSSLCertificateChainFileSSLCertificateKeyFile
<VirtualHost *:80>
ServerName kliqqi.exampleserver.xyz
Redirect permanent / https://kliqqi.exampleserver.xyz/
</VirtualHost>
<VirtualHost *:443>
ServerName kliqqi.exampleserver.xyz
DocumentRoot /var/www/kliqqi
<Directory /var/www/kliqqi>
Options -Indexes +FollowSymLinks +MultiViews
AllowOverride All
Require all granted
</Directory>
ErrorLog ${APACHE_LOG_DIR}/kliqqi.exampleserver.xyz-error.log
CustomLog ${APACHE_LOG_DIR}/kliqqi.exampleserver.xyz-access.log combined
SSLEngine on
SSLCertificateFile /etc/apache2/ssl/kliqqi.exampleserver.xyz.crt
SSLCertificateChainFile /etc/apache2/ssl/kliqqi.exampleserver.xyz.crt
SSLCertificateKeyFile /etc/apache2/ssl/kliqqi.exampleserver.xyz.key
Header always set Strict-Transport-Security "max-age=15768000"
</VirtualHost>
# intermediate configuration, tweak to your needs
SSLProtocol all -SSLv2 -SSLv3
SSLCipherSuite ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS
SSLHonorCipherOrder on
We will also disable kliqqi http only virtual host and enable the new virtual host config.
$ sudo a2dissite kliqqi
$ sudo a2ensite kliqqi-ssl
The new virtual host configuration need Apache mod_ssl and mod_headers modules. We need to enable those modules.
$ sudo a2enmod ssl
$ sudo a2enmod headers
Now, restart Apache 2 service so it will reload its configuration. We need to restart instead of reload since we enable new module.
$ sudo service apache2 restart
We also need to change settings.php to enable https on our site.
Open settings.php.
find
$my_base_url = 'http://kliqqi.exampleserver.xyz';
replace http with https.
$my_base_url = 'https://kliqqi.exampleserver.xyz';
Now our Kliqqi site is fully run on https.
Summary
In this tutorial we learned how-to install kliqqi on Ubuntu 14.04.
We installed all the prerequisites, create user and database on MySQL for Kliqqi and also configure Apache 2 virtual hosts to be able to serve kliqqi.
We also configured https settings for kliqqi so people can access our community site securely.
Share this Article!
