Initial Release v1.0.0: Full feature set with Docker automation, Nginx/Alpine stack

2026-01-26 05:25:42 +07:00 · 2026-01-16 11:21:32 +07:00
commit 45623973a8
139 changed files with 24302 additions and 0 deletions
--- a/app/Core/Middleware.php
+++ b/app/Core/Middleware.php
@@ -0,0 +1,41 @@
+<?php
+
+namespace App\Core;
+
+class Middleware {
+    public static function auth() {
+        // Assume session is started in index.php
+        if (!isset($_SESSION['user_id'])) {
+            header('Location: /login');
+            exit;
+        }
+    }
+
+    public static function cors() {
+        $origin = $_SERVER['HTTP_ORIGIN'] ?? '';
+        if (empty($origin)) return;
+
+        $db = Database::getInstance();
+        // Check for specific origin or wildcard '*'
+        $stmt = $db->query("SELECT * FROM api_cors WHERE origin = ? OR origin = '*' LIMIT 1", [$origin]);
+        $rule = $stmt->fetch();
+
+        if ($rule) {
+            header("Access-Control-Allow-Origin: " . ($rule['origin'] === '*' ? '*' : $origin));
+            
+            $methods = json_decode($rule['methods'], true) ?: ['GET', 'POST'];
+            header("Access-Control-Allow-Methods: " . implode(', ', $methods));
+
+            $headers = json_decode($rule['headers'], true) ?: ['*'];
+            header("Access-Control-Allow-Headers: " . implode(', ', $headers));
+
+            header("Access-Control-Max-Age: " . ($rule['max_age'] ?? 3600));
+
+            // Handle preflight requests
+            if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') {
+                http_response_code(200);
+                exit();
+            }
+        }
+    }
+}