From 239762fd3a6757187132435785da6265f55fa724 Mon Sep 17 00:00:00 2001 From: Edwin Noorlander Date: Wed, 29 Jul 2026 14:26:48 +0200 Subject: [PATCH] CodePress CMS v1.8.0: BotGuard security engine, HAProxy docs & ARIA fix - Implement BotGuard security engine (Bot, AI, Scraper & Empty UA blocking) - Add Admin Security page (/admin/security) with toggles, rate limiter & block/allowlists - Add per-IP RateLimiter handoff in index.php with HTTP 429 response - Add dynamic /robots.txt generation and noai/noimageai meta tags - Add RequestLogger status column and blocked badges in admin request logs - Fix ARIAComponents.php syntax errors on lines 67, 137, 262 - Add HAProxy / PFSense bot blocking & IP forwarding guide (docs/haproxy-bot-blocking.md) - Update version to 1.8.0 with release notes in version.php and guides --- TODO.md | 2 +- admin/templates/layout.php | 8 ++ admin/templates/pages/logs.php | 18 ++- admin/templates/pages/security.php | 114 +++++++++++++++++ cms/core/class/ARIAComponents.php | 6 +- cms/core/class/BotGuard.php | 189 +++++++++++++++++++++++++++++ cms/core/class/CodePressCMS.php | 2 + cms/core/class/RequestLogger.php | 134 ++++++-------------- cms/core/config.php | 12 ++ cms/core/index.php | 3 + cms/templates/layout.mustache | 7 ++ config.json.example | 12 ++ docs/haproxy-bot-blocking.md | 67 ++++++++++ guide/en.codepress.md | 2 + guide/nl.codepress.md | 1 + public/admin.php | 62 ++++++++++ public/index.php | 77 ++++++++++-- version.php | 19 ++- 18 files changed, 618 insertions(+), 117 deletions(-) create mode 100644 admin/templates/pages/security.php create mode 100644 cms/core/class/BotGuard.php create mode 100644 docs/haproxy-bot-blocking.md diff --git a/TODO.md b/TODO.md index 351274b..bcc6799 100644 --- a/TODO.md +++ b/TODO.md @@ -87,4 +87,4 @@ - [ ] **Keyboard shortcuts** — Ctrl+S om op te slaan in editor, Ctrl+N voor nieuw bestand - [ ] **Dark mode** — Admin panel dark mode toggle - [ ] **Responsive admin** — Admin sidebar inklapbaar op mobiel (nu is het gestacked) -- [ ] **ARIAComponents.php parse error** — Bestaande PHP parse error op regel 67 (`syntax error, unexpected double-quote mark`) +- [x] **ARIAComponents.php parse error** — Bestaande PHP parse error op regel 67 opgelost (`'UTF-8)` -> `'UTF-8')`) diff --git a/admin/templates/layout.php b/admin/templates/layout.php index 1653113..6cf2b9d 100644 --- a/admin/templates/layout.php +++ b/admin/templates/layout.php @@ -66,6 +66,11 @@ $layoutSidebarColor = $layoutThemeConfig['header_color'] ?? '#0a369d'; Configuratie +
  • + + Beveiliging + +
  • Plugins @@ -135,6 +140,9 @@ $layoutSidebarColor = $layoutThemeConfig['header_color'] ?? '#0a369d'; case 'config': require __DIR__ . '/pages/config.php'; break; + case 'security': + require __DIR__ . '/pages/security.php'; + break; # Media route (removed from menu) // Uncomment if media functionality is needed elsewhere // require __DIR__ . '/pages/media.php'; diff --git a/admin/templates/pages/logs.php b/admin/templates/pages/logs.php index 632d8db..7f4b6d5 100644 --- a/admin/templates/pages/logs.php +++ b/admin/templates/pages/logs.php @@ -70,6 +70,7 @@ IP Pagina Type / Gebruiker + Status Taal User agent Referrer @@ -77,7 +78,7 @@ - + @@ -86,9 +87,20 @@ + + + + Geblokkeerd + + + + OK + + + - 60 ? '…' : '' ?> - 40 ? '…' : '' ?> + 50 ? '…' : '' ?> + 30 ? '…' : '' ?> diff --git a/admin/templates/pages/security.php b/admin/templates/pages/security.php new file mode 100644 index 0000000..4abe1f8 --- /dev/null +++ b/admin/templates/pages/security.php @@ -0,0 +1,114 @@ +

    Beveiliging & Bot Bescherming

    + +
    + + +
    +
    + Bot, AI & Scraper Blokkering +
    +
    +
    + > + +
    Blokkeert bekende AI-bots zoals GPTBot, ChatGPT-User, ClaudeBot, PerplexityBot, CCBot, Google-Extended, Bytespider, Applebot-Extended, etc.
    +
    + +
    + > + +
    Blokkeert automatische scraping tools zoals HTTrack, Scrapy, PhantomJS, HeadlessChrome, cURL, Wget, Python-requests, libwww-perl, etc.
    +
    + +
    + > + +
    Veel eenvoudige bots en aanvalscripts sturen geen User-Agent header mee.
    +
    + +
    + > + +
    Let op: Schakel dit alleen in als je wilt dat de hele site niet in zoekmachines (zoals Google en Bing) verschijnt.
    +
    +
    +
    + +
    +
    + Snelheidsbeperking (Rate Limiting per IP) +
    +
    +
    + > + +
    Voorkomt dat scrapers of bots de site overbelasten door tientallen verzoeken per seconde uit te voeren. Overschrijding geeft HTTP 429.
    +
    + +
    +
    + + + Aanbevolen: 60 verzoeken. +
    +
    + + + Aanbevolen: 60 seconden (1 minuut). +
    +
    +
    +
    + +
    +
    + Eigen Filters & IP-Lijsten +
    +
    +
    + + +
    Verzoeken waarvan de User-Agent dit patroon bevat krijgen een 403 Forbidden.
    +
    + +
    +
    + + +
    IP's op de whitelist worden nooit geblokkeerd door bot-filters of rate limiting.
    +
    +
    + + +
    IP's op de blocklist krijgen altijd direct een HTTP 403 Forbidden.
    +
    +
    +
    +
    + + +
    + +
    +
    + Dynamische robots.txt Preview +
    +
    +
    +
    +
    +
    +
    + Deze robots.txt wordt automatisch geserveerd op /robots.txt en past zich aan je instellingen aan. +
    +
    diff --git a/cms/core/class/ARIAComponents.php b/cms/core/class/ARIAComponents.php index db2d3cd..7912067 100644 --- a/cms/core/class/ARIAComponents.php +++ b/cms/core/class/ARIAComponents.php @@ -64,7 +64,7 @@ class ARIAComponents { $label = $options['aria-label'] ?? 'Hoofdmenu'; $orientation = $options['orientation'] ?? 'horizontal'; - $html = '