- Implement BotGuard security engine (Bot, AI, Scraper & Empty UA blocking) - Add Admin Security page (/admin/security) with toggles, rate limiter & block/allowlists - Add per-IP RateLimiter handoff in index.php with HTTP 429 response - Add dynamic /robots.txt generation and noai/noimageai meta tags - Add RequestLogger status column and blocked badges in admin request logs - Fix ARIAComponents.php syntax errors on lines 67, 137, 262 - Add HAProxy / PFSense bot blocking & IP forwarding guide (docs/haproxy-bot-blocking.md) - Update version to 1.8.0 with release notes in version.php and guides
89 lines
3.2 KiB
PHP
89 lines
3.2 KiB
PHP
<?php
|
|
|
|
// Simple configuration loader
|
|
$configJsonPath = __DIR__ . '/../../config.json';
|
|
$configExamplePath = __DIR__ . '/../../config.json.example';
|
|
|
|
// Auto-create config.json if it does not exist
|
|
if (!file_exists($configJsonPath)) {
|
|
if (file_exists($configExamplePath)) {
|
|
@copy($configExamplePath, $configJsonPath);
|
|
} else {
|
|
$defaultConfig = [
|
|
'site_title' => 'CodePress',
|
|
'content_dir' => 'content',
|
|
'templates_dir' => 'cms/templates',
|
|
'active_theme' => 'default',
|
|
'default_page' => 'auto',
|
|
'language' => [
|
|
'default' => 'nl',
|
|
'available' => ['nl', 'en']
|
|
],
|
|
'seo' => [
|
|
'description' => 'CodePress CMS - Lightweight file-based content management system',
|
|
'keywords' => 'cms, php, content management, file-based'
|
|
],
|
|
'author' => [
|
|
'name' => 'E. Noorlander',
|
|
'website' => 'https://noorlander.info'
|
|
],
|
|
'show_version' => true,
|
|
'enabled_plugins' => ['MQTTTracker', 'HTMLBlock'],
|
|
'features' => [
|
|
'auto_link_pages' => true,
|
|
'search_enabled' => true,
|
|
'breadcrumbs_enabled' => true
|
|
],
|
|
'security' => [
|
|
'block_ai_bots' => true,
|
|
'block_scrapers' => true,
|
|
'block_search_engines' => false,
|
|
'block_empty_user_agent' => true,
|
|
'rate_limit_enabled' => true,
|
|
'rate_limit_max' => 60,
|
|
'rate_limit_window' => 60,
|
|
'custom_blocked_agents' => [],
|
|
'blocked_ips' => [],
|
|
'allowed_ips' => []
|
|
]
|
|
];
|
|
@file_put_contents($configJsonPath, json_encode($defaultConfig, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE));
|
|
}
|
|
}
|
|
|
|
if (file_exists($configJsonPath)) {
|
|
$jsonContent = file_get_contents($configJsonPath);
|
|
$config = json_decode($jsonContent, true);
|
|
|
|
if (json_last_error() === JSON_ERROR_NONE && is_array($config)) {
|
|
// Convert relative paths to absolute
|
|
$projectRoot = __DIR__ . '/../../';
|
|
if (isset($config['content_dir']) && strpos($config['content_dir'], '/') !== 0) {
|
|
$config['content_dir'] = $projectRoot . $config['content_dir'];
|
|
}
|
|
if (isset($config['templates_dir']) && strpos($config['templates_dir'], '/') !== 0) {
|
|
$config['templates_dir'] = $projectRoot . $config['templates_dir'];
|
|
}
|
|
|
|
// Load active theme
|
|
$activeTheme = $config['active_theme'] ?? 'default';
|
|
$themeDir = __DIR__ . '/../../themes/' . $activeTheme;
|
|
$themeFile = $themeDir . '/theme.json';
|
|
if (file_exists($themeFile)) {
|
|
$themeConfig = json_decode(file_get_contents($themeFile), true);
|
|
$config['theme'] = $themeConfig;
|
|
} else {
|
|
$config['theme'] = [];
|
|
}
|
|
|
|
return $config;
|
|
}
|
|
}
|
|
|
|
// Fallback to minimal config
|
|
return [
|
|
'site_title' => 'CodePress',
|
|
'content_dir' => __DIR__ . '/../../content',
|
|
'templates_dir' => __DIR__ . '/../templates',
|
|
'default_page' => 'auto'
|
|
]; |