CodePress CMS v1.8.0: BotGuard security engine, HAProxy docs & ARIA fix

- Implement BotGuard security engine (Bot, AI, Scraper & Empty UA blocking)
- Add Admin Security page (/admin/security) with toggles, rate limiter & block/allowlists
- Add per-IP RateLimiter handoff in index.php with HTTP 429 response
- Add dynamic /robots.txt generation and noai/noimageai meta tags
- Add RequestLogger status column and blocked badges in admin request logs
- Fix ARIAComponents.php syntax errors on lines 67, 137, 262
- Add HAProxy / PFSense bot blocking & IP forwarding guide (docs/haproxy-bot-blocking.md)
- Update version to 1.8.0 with release notes in version.php and guides

public/admin.php

@@ -88,6 +88,10 @@ switch ($route) {
         handleConfig($auth, $appConfig);
         break;
 
+    case 'security':
+        handleSecurity($auth, $appConfig);
+        break;
+
     case 'update':
         handleUpdate($auth, $appConfig);
         break;
@@ -747,6 +751,64 @@ function handleConfig(AdminAuth $auth, array $config): void
     require __DIR__ . '/../admin/templates/layout.php';
 }
 
+function handleSecurity(AdminAuth $auth, array $config): void
+{
+    $user = $auth->getCurrentUser();
+    $csrf = $auth->getCsrfToken();
+    $configJson = $config['config_json'];
+    $message = '';
+    $messageType = '';
+
+    // Load current config
+    $configData = file_exists($configJson) ? json_decode(file_get_contents($configJson), true) : [];
+    if (!is_array($configData)) $configData = [];
+
+    $sec = $configData['security'] ?? [];
+
+    if ($_SERVER['REQUEST_METHOD'] === 'POST') {
+        if (!$auth->verifyCsrf($_POST['csrf_token'] ?? '')) {
+            $message = 'Ongeldige CSRF token.';
+            $messageType = 'danger';
+        } else {
+            $configData['security']['block_ai_bots'] = !empty($_POST['block_ai_bots']);
+            $configData['security']['block_scrapers'] = !empty($_POST['block_scrapers']);
+            $configData['security']['block_search_engines'] = !empty($_POST['block_search_engines']);
+            $configData['security']['block_empty_user_agent'] = !empty($_POST['block_empty_user_agent']);
+            $configData['security']['rate_limit_enabled'] = !empty($_POST['rate_limit_enabled']);
+            $configData['security']['rate_limit_max'] = max(10, min(1000, (int)($_POST['rate_limit_max'] ?? 60)));
+            $configData['security']['rate_limit_window'] = max(10, min(3600, (int)($_POST['rate_limit_window'] ?? 60)));
+
+            $parseLines = function($text) {
+                $lines = explode("\n", str_replace("\r", "", $text));
+                $clean = [];
+                foreach ($lines as $line) {
+                    $item = trim($line);
+                    if ($item !== '') {
+                        $clean[] = $item;
+                    }
+                }
+                return array_values(array_unique($clean));
+            };
+
+            $configData['security']['custom_blocked_agents'] = $parseLines($_POST['custom_blocked_agents'] ?? '');
+            $configData['security']['blocked_ips'] = $parseLines($_POST['blocked_ips'] ?? '');
+            $configData['security']['allowed_ips'] = $parseLines($_POST['allowed_ips'] ?? '');
+
+            file_put_contents($configJson, json_encode($configData, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE));
+            adminLog($config, 'info', $user['username'] . ' wijzigde beveiligingsinstellingen');
+            $message = 'Beveiligingsinstellingen opgeslagen.';
+            $messageType = 'success';
+            $sec = $configData['security'];
+        }
+    }
+
+    require_once __DIR__ . '/../cms/core/class/BotGuard.php';
+    $robotsPreview = BotGuard::generateRobotsTxt($sec);
+
+    $route = 'security';
+    require __DIR__ . '/../admin/templates/layout.php';
+}
+
 function handleTheme(AdminAuth $auth, array $config): void
 {
     $user = $auth->getCurrentUser();