E.Noorlander
caa335a319
- Add .htaccess rewrite rules for clean URLs (/nl/page, /admin/route) - Add PHP dev server router with clean URL support - Update admin template asset paths to absolute for clean URL compat - All pentest fixes verified: CSRF on login, directory listing disabled, secure cookies, backup/sourcemap files removed, version disclosure off
53 lines
1.4 KiB
PHP
53 lines
1.4 KiB
PHP
<?php
|
|
// Router file for PHP development server - clean URL support + static file serving
|
|
|
|
$requestUri = $_SERVER['REQUEST_URI'];
|
|
$parsedUrl = parse_url($requestUri);
|
|
$path = $parsedUrl['path'] ?? '/';
|
|
$path = rtrim($path, '/') ?: '/';
|
|
$publicDir = __DIR__ . '/../public';
|
|
|
|
$mimeTypes = [
|
|
'css' => 'text/css',
|
|
'js' => 'application/javascript',
|
|
'svg' => 'image/svg+xml',
|
|
'png' => 'image/png',
|
|
'jpg' => 'image/jpeg',
|
|
'ico' => 'image/x-icon',
|
|
'woff' => 'font/woff',
|
|
'woff2' => 'font/woff2',
|
|
'json' => 'application/json',
|
|
];
|
|
|
|
// Serve static files from public/
|
|
$filePath = $publicDir . $path;
|
|
if (is_file($filePath)) {
|
|
$ext = strtolower(pathinfo($filePath, PATHINFO_EXTENSION));
|
|
if (isset($mimeTypes[$ext])) {
|
|
header('Content-Type: ' . $mimeTypes[$ext]);
|
|
}
|
|
readfile($filePath);
|
|
return true;
|
|
}
|
|
|
|
// Admin routes: /admin/login → admin.php?route=login
|
|
if (preg_match('#^/admin(?:/(.+))?$#', $path, $m)) {
|
|
$_GET['route'] = $m[1] ?? 'dashboard';
|
|
require $publicDir . '/admin.php';
|
|
return true;
|
|
}
|
|
|
|
// Language-prefixed routes: /nl/page/path → index.php?lang=nl&page=page/path
|
|
if (preg_match('#^/(nl|en)(?:/(.+))?$#', $path, $m)) {
|
|
$_GET['lang'] = $m[1];
|
|
$_GET['page'] = $m[2] ?? 'index';
|
|
if ($_GET['page'] === 'guide') {
|
|
$_GET['guide'] = '1';
|
|
}
|
|
require $publicDir . '/index.php';
|
|
return true;
|
|
}
|
|
|
|
// Root or unknown → index.php
|
|
require $publicDir . '/index.php';
|
|
return true; |