From e51305b200fc0508f1cc72dee2edc2500d9478e9 Mon Sep 17 00:00:00 2001 From: Edwin Noorlander Date: Tue, 28 Jul 2026 14:51:55 +0200 Subject: [PATCH] Add request logging, bot blocking, and admin log viewer --- admin/config/app.php | 1 + admin/templates/layout.php | 8 +++ admin/templates/pages/logs.php | 96 ++++++++++++++++++++++++++++++++ cms/core/class/RequestLogger.php | 93 +++++++++++++++++++++++++++++++ public/admin.php | 64 +++++++++++++++++++++ public/index.php | 22 ++++++++ 6 files changed, 284 insertions(+) create mode 100644 admin/templates/pages/logs.php create mode 100644 cms/core/class/RequestLogger.php diff --git a/admin/config/app.php b/admin/config/app.php index 6377267..7d7e397 100644 --- a/admin/config/app.php +++ b/admin/config/app.php @@ -15,4 +15,5 @@ return [ 'assets_dir' => __DIR__ . '/../../content/-assets/', 'admin_config' => __DIR__ . '/admin.json', 'log_file' => __DIR__ . '/../storage/logs/admin.log', + 'request_log' => __DIR__ . '/../storage/logs/requests.log', ]; diff --git a/admin/templates/layout.php b/admin/templates/layout.php index 1b52bfb..c092622 100644 --- a/admin/templates/layout.php +++ b/admin/templates/layout.php @@ -81,6 +81,11 @@ $layoutSidebarColor = $layoutThemeConfig['header_color'] ?? '#0a369d'; Handleiding +
  • + + Logs + +
  • Website bekijken @@ -160,6 +165,9 @@ $layoutSidebarColor = $layoutThemeConfig['header_color'] ?? '#0a369d'; case 'guide': require __DIR__ . '/pages/guide.php'; break; + case 'logs': + require __DIR__ . '/pages/logs.php'; + break; } ?> diff --git a/admin/templates/pages/logs.php b/admin/templates/pages/logs.php new file mode 100644 index 0000000..f5597a0 --- /dev/null +++ b/admin/templates/pages/logs.php @@ -0,0 +1,96 @@ +

    Logs

    + + + +
    + +
    +
    + regels + +
    +
    +
    + +

    Geen activiteiten geregistreerd.

    + + + + + + + + + + + + + + + + + + + + +
    TijdNiveauIPBericht
    + +
    +
    +
    + + +
    +
    + regels + +
    +
    +
    + +

    Geen requests geregistreerd.

    + + + + + + + + + + + + + + + + + + + + + + + + + + +
    TijdIPPaginaDomeinTaalUser agentReferrer
    60 ? '…' : '' ?> 40 ? '…' : '' ?>
    + +
    +
    +
    +
    \ No newline at end of file diff --git a/cms/core/class/RequestLogger.php b/cms/core/class/RequestLogger.php new file mode 100644 index 0000000..c1529db --- /dev/null +++ b/cms/core/class/RequestLogger.php @@ -0,0 +1,93 @@ +logFile = $logFile; + } + + public function log(string $page, string $ip, string $userAgent, string $referrer, string $host, string $acceptLanguage): void + { + $dir = dirname($this->logFile); + if (!is_dir($dir)) { + @mkdir($dir, 0755, true); + } + + $timestamp = date('Y-m-d H:i:s'); + $ua = substr(preg_replace('/[[:cntrl:]]/', '', $userAgent), 0, 500); + $ref = substr(preg_replace('/[[:cntrl:]]/', '', $referrer), 0, 500); + $line = "[{$timestamp}] [{$ip}] [{$host}] [{$acceptLanguage}] [{$page}] [{$ua}] [{$ref}]\n"; + @file_put_contents($this->logFile, $line, FILE_APPEND | LOCK_EX); + } + + public static function detectBot(): ?string + { + $ua = $_SERVER['HTTP_USER_AGENT'] ?? ''; + if (empty($ua)) return null; + + $bots = [ + 'AI' => [ + 'GPTBot', 'ChatGPT-User', 'Claude-Web', 'ClaudeBot', + 'anthropic-ai', 'Google-Extended', 'CCBot', + 'PerplexityBot', 'Amazonbot', 'cohere-ai', + 'OAI-SearchBot', 'Bytespider', 'FacebookBot', + 'Applebot-Extended', + ], + 'Search' => [ + 'Googlebot', 'Bingbot', 'BingPreview', 'Slurp', + 'DuckDuckBot', 'Baiduspider', 'YandexBot', + 'Sogou', 'Exabot', 'facebot', + ], + 'Scraper' => [ + 'HTTrack', 'wget', 'curl', 'python-requests', + 'python-httpx', 'Go-http-client', 'okhttp', + 'Scrapy', 'Apache-HttpClient', 'Java/', + 'ruby', 'PhantomJS', 'HeadlessChrome', + ], + 'Aggregator' => [ + 'Feedly', 'Feedbin', 'FeedReader', 'Inoreader', + 'Flipboard', 'Pocket', 'Pinterest', + ], + ]; + + foreach ($bots as $category => $patterns) { + foreach ($patterns as $pattern) { + if (stripos($ua, $pattern) !== false) { + return $category; + } + } + } + + return null; + } + + public function getLogs(int $lines = 100): array + { + if (!file_exists($this->logFile)) { + return []; + } + + $content = file($this->logFile); + $content = array_slice($content, -$lines); + $logs = []; + + foreach ($content as $line) { + if (preg_match('/^\[([^\]]+)\] \[([^\]]+)\] \[([^\]]+)\] \[([^\]]*)\] \[([^\]]+)\] \[([^\]]*)\] \[([^\]]*)\]$/', trim($line), $m)) { + $logs[] = [ + 'time' => $m[1], + 'ip' => $m[2], + 'host' => $m[3], + 'lang' => $m[4], + 'page' => $m[5], + 'ua' => $m[6], + 'referrer' => $m[7], + ]; + } + } + + return array_reverse($logs); + } +} diff --git a/public/admin.php b/public/admin.php index 706ae79..04b754b 100644 --- a/public/admin.php +++ b/public/admin.php @@ -131,6 +131,10 @@ switch ($route) { handleGuide($auth, $appConfig); break; + case 'logs': + handleLogs($auth, $appConfig); + break; + case 'users': handleUsers($auth, $appConfig); break; @@ -1451,6 +1455,66 @@ function handleGuide(AdminAuth $auth, array $config): void require __DIR__ . '/../admin/templates/layout.php'; } +function handleLogs(AdminAuth $auth, array $config): void +{ + $user = $auth->getCurrentUser(); + $csrf = $auth->getCsrfToken(); + + $activeTab = $_GET['tab'] ?? 'admin'; + if (!in_array($activeTab, ['admin', 'requests'])) $activeTab = 'admin'; + + $adminLogFile = $config['log_file']; + $requestLogFile = $config['request_log']; + + // Clear + if (isset($_GET['clear'])) { + $target = $activeTab === 'admin' ? $adminLogFile : $requestLogFile; + @file_put_contents($target, ''); + $message = $activeTab === 'admin' ? 'Activiteitenlog gewist.' : 'Requestlog gewist.'; + header('Location: /admin/logs?tab=' . $activeTab); + exit; + } + + // Download + if (isset($_GET['download'])) { + $target = $activeTab === 'admin' ? $adminLogFile : $requestLogFile; + $filename = $activeTab === 'admin' ? 'admin.log' : 'requests.log'; + if (file_exists($target)) { + header('Content-Type: text/plain'); + header('Content-Disposition: attachment; filename="' . $filename . '"'); + header('Content-Length: ' . filesize($target)); + readfile($target); + } + exit; + } + + // Read admin log + $adminLogs = []; + if (file_exists($adminLogFile)) { + $lines = file($adminLogFile); + $lines = array_slice($lines, -200); + foreach ($lines as $line) { + if (preg_match('/^\[([^\]]+)\] \[([^\]]+)\] \[([^\]]+)\] (.+)$/', trim($line), $m)) { + $adminLogs[] = [ + 'time' => $m[1], + 'level' => strtolower($m[2]), + 'ip' => $m[3], + 'message' => $m[4], + ]; + } + } + $adminLogs = array_reverse($adminLogs); + } + + // Read request log + require_once __DIR__ . '/../cms/core/class/RequestLogger.php'; + $requestLogger = new RequestLogger($requestLogFile); + $requestLogs = $requestLogger->getLogs(200); + + $route = 'logs'; + require __DIR__ . '/../admin/templates/layout.php'; +} + // --- Frontmatter helpers --- function parseFrontmatterField(string $content, string $key, string $default = ''): string diff --git a/public/index.php b/public/index.php index b299324..7a787cb 100644 --- a/public/index.php +++ b/public/index.php @@ -89,5 +89,27 @@ if (strpos($path, '/content/') === 0) { exit; } +// Bot detection — block known bots/AI scrapers early +if (RequestLogger::detectBot() !== null) { + http_response_code(403); + echo '403 Forbidden

    403 Forbidden

    Access denied.

    '; + exit; +} + $cms = new CodePressCMS($config); + +// Log page view (not for media/assets) +if (!str_starts_with($path, '/-media/') && !str_starts_with($path, '/-assets/')) { + $requestLogFile = dirname(__DIR__) . '/admin/storage/logs/requests.log'; + $logger = new RequestLogger($requestLogFile); + $logger->log( + $_GET['page'] ?? $config['default_page'] ?? 'index', + $_SERVER['HTTP_X_FORWARDED_FOR'] ?? $_SERVER['HTTP_X_REAL_IP'] ?? $_SERVER['REMOTE_ADDR'] ?? 'cli', + $_SERVER['HTTP_USER_AGENT'] ?? '', + $_SERVER['HTTP_REFERER'] ?? '', + $_SERVER['HTTP_HOST'] ?? '', + $_SERVER['HTTP_ACCEPT_LANGUAGE'] ?? '' + ); +} + $cms->render(); \ No newline at end of file