boilercraft 1.0.0

package/templates/raw-php-mysql/config/Env.php

@@ -0,0 +1,30 @@
+<?php
+namespace App\Config;
+
+class Env {
+    public static function load(string $path): void {
+        if (!file_exists($path)) {
+            return;
+        }
+
+        $lines = file($path, FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES);
+        foreach ($lines as $line) {
+            $line = trim($line);
+            if (empty($line) || str_starts_with($line, '#')) {
+                continue;
+            }
+
+            if (str_contains($line, '=')) {
+                [$key, $value] = explode('=', $line, 2);
+                $key = trim($key);
+                $value = trim($value, " \t\n\r\0\x0B\"'");
+
+                if (!array_key_exists($key, $_SERVER) && !array_key_exists($key, $_ENV)) {
+                    putenv("{$key}={$value}");
+                    $_ENV[$key] = $value;
+                    $_SERVER[$key] = $value;
+                }
+            }
+        }
+    }
+}

package/templates/raw-php-mysql/config/Middleware.php

@@ -0,0 +1,53 @@
+<?php
+namespace App\Config;
+
+class Middleware {
+    /**
+     * Authentication Guard (Blocks guest users)
+     */
+    public static function auth(): void {
+        if (!Auth::check()) {
+            if (self::isAjax()) {
+                http_response_code(401);
+                header('Content-Type: application/json');
+                echo json_encode(['success' => false, 'error' => 'Unauthorized. Please login.']);
+                exit;
+            }
+            header('Location: /login');
+            exit;
+        }
+    }
+
+    /**
+     * Guest Guard (Redirects logged-in users away from login/register)
+     */
+    public static function guest(): void {
+        if (Auth::check()) {
+            header('Location: /dashboard');
+            exit;
+        }
+    }
+
+    /**
+     * Role-based Authorization Guard (e.g. 'admin', 'moderator')
+     */
+    public static function role(string|array $roles): void {
+        self::auth(); // Must be logged in first
+
+        if (!Auth::hasRole($roles)) {
+            if (self::isAjax()) {
+                http_response_code(403);
+                header('Content-Type: application/json');
+                echo json_encode(['success' => false, 'error' => 'Forbidden. You lack sufficient permissions.']);
+                exit;
+            }
+            http_response_code(403);
+            die("<h1>403 Forbidden</h1><p>You do not have permission to access this area.</p>");
+        }
+    }
+
+    private static function isAjax(): bool {
+        return (!empty($_SERVER['HTTP_X_REQUESTED_WITH']) && strtolower($_SERVER['HTTP_X_REQUESTED_WITH']) == 'xmlhttprequest')
+            || (isset($_SERVER['HTTP_ACCEPT']) && str_contains($_SERVER['HTTP_ACCEPT'], 'application/json'));
+    }
+}

package/templates/raw-php-mysql/config/QueryBuilder.php

@@ -0,0 +1,109 @@
+<?php
+namespace App\Config;
+
+class QueryBuilder {
+    protected string $table = '';
+    protected array $fields = ['*'];
+    protected array $wheres = [];
+    protected array $bindings = [];
+    protected string $orderBy = '';
+    protected ?int $limitNum = null;
+
+    public static function table(string $table): self {
+        $qb = new self();
+        $qb->table = $table;
+        return $qb;
+    }
+
+    public function select(array|string $fields = ['*']): self {
+        $this->fields = is_array($fields) ? $fields : func_get_args();
+        return $this;
+    }
+
+    public function where(string $column, mixed $operatorOrValue, mixed $value = null): self {
+        if ($value === null) {
+            $value = $operatorOrValue;
+            $operator = '=';
+        } else {
+            $operator = $operatorOrValue;
+        }
+
+        $paramKey = ":p_" . count($this->bindings);
+        $this->wheres[] = "{$column} {$operator} {$paramKey}";
+        $this->bindings[$paramKey] = $value;
+        return $this;
+    }
+
+    public function orderBy(string $column, string $direction = 'ASC'): self {
+        $this->orderBy = "ORDER BY {$column} " . strtoupper($direction);
+        return $this;
+    }
+
+    public function limit(int $limit): self {
+        $this->limitNum = $limit;
+        return $this;
+    }
+
+    public function get(): array {
+        $sql = "SELECT " . implode(', ', $this->fields) . " FROM {$this->table}";
+        if (!empty($this->wheres)) {
+            $sql .= " WHERE " . implode(' AND ', $this->wheres);
+        }
+        if (!empty($this->orderBy)) {
+            $sql .= " {$this->orderBy}";
+        }
+        if ($this->limitNum !== null) {
+            $sql .= " LIMIT {$this->limitNum}";
+        }
+
+        return Database::query($sql, $this->bindings);
+    }
+
+    public function first(): ?array {
+        $this->limit(1);
+        $results = $this->get();
+        return $results[0] ?? null;
+    }
+
+    public function insert(array $data): bool {
+        $columns = implode(', ', array_keys($data));
+        $placeholders = [];
+        $params = [];
+
+        foreach ($data as $k => $v) {
+            $param = ":ins_{$k}";
+            $placeholders[] = $param;
+            $params[$param] = $v;
+        }
+
+        $sql = "INSERT INTO {$this->table} ({$columns}) VALUES (" . implode(', ', $placeholders) . ")";
+        return Database::execute($sql, $params);
+    }
+
+    public function update(array $data): bool {
+        $sets = [];
+        $params = [];
+
+        foreach ($data as $k => $v) {
+            $param = ":upd_{$k}";
+            $sets[] = "{$k} = {$param}";
+            $params[$param] = $v;
+        }
+
+        $sql = "UPDATE {$this->table} SET " . implode(', ', $sets);
+        if (!empty($this->wheres)) {
+            $sql .= " WHERE " . implode(' AND ', $this->wheres);
+            $params = array_merge($params, $this->bindings);
+        }
+
+        return Database::execute($sql, $params);
+    }
+
+    public function delete(): bool {
+        $sql = "DELETE FROM {$this->table}";
+        if (!empty($this->wheres)) {
+            $sql .= " WHERE " . implode(' AND ', $this->wheres);
+        }
+        return Database::execute($sql, $this->bindings);
+    }
+}

package/templates/raw-php-mysql/config/Router.php

@@ -0,0 +1,33 @@
+<?php
+namespace App\Config;
+
+class Router {
+    private array $routes = [];
+
+    public function get(string $path, callable|array $handler): void {
+        $this->routes['GET'][$path] = $handler;
+    }
+
+    public function post(string $path, callable|array $handler): void {
+        $this->routes['POST'][$path] = $handler;
+    }
+
+    public function dispatch(): void {
+        $method = $_SERVER['REQUEST_METHOD'];
+        $uri = parse_url($_SERVER['REQUEST_URI'], PHP_URL_PATH);
+
+        if (isset($this->routes[$method][$uri])) {
+            $handler = $this->routes[$method][$uri];
+            if (is_callable($handler)) {
+                call_user_func($handler);
+            } elseif (is_array($handler)) {
+                [$class, $action] = $handler;
+                $controller = new $class();
+                $controller->$action();
+            }
+        } else {
+            http_response_code(404);
+            require __DIR__ . '/../app/Views/404.php';
+        }
+    }
+}

package/templates/raw-php-mysql/public/index.php

@@ -0,0 +1,57 @@
+<?php
+// Autoloader
+spl_autoload_register(function ($class) {
+    $prefix = 'App\\';
+    $base_dir = __DIR__ . '/../app/';
+
+    $len = strlen($prefix);
+    if (strncmp($prefix, $class, $len) !== 0) {
+        return;
+    }
+
+    $relative_class = substr($class, $len);
+    if (strpos($relative_class, 'Config\\') === 0) {
+        $file = __DIR__ . '/../' . str_replace('\\', '/', $relative_class) . '.php';
+    } else {
+        $file = $base_dir . str_replace('\\', '/', $relative_class) . '.php';
+    }
+
+    if (file_exists($file)) {
+        require $file;
+    }
+});
+
+use App\Config\Env;
+use App\Config\Router;
+use App\Config\Middleware;
+use App\Controllers\HomeController;
+use App\Controllers\AuthController;
+
+Env::load(__DIR__ . '/../.env');
+
+$router = new Router();
+
+// Public Routes
+$router->get('/', [HomeController::class, 'index']);
+$router->get('/login', [AuthController::class, 'showLogin']);
+$router->get('/register', [AuthController::class, 'showRegister']);
+$router->get('/logout', [AuthController::class, 'logout']);
+
+// AJAX Auth Endpoints
+$router->post('/api/login', [AuthController::class, 'login']);
+$router->post('/api/register', [AuthController::class, 'register']);
+$router->get('/api/health', [HomeController::class, 'apiHealth']);
+
+// Protected Routes (Guarded by Middleware)
+$router->get('/dashboard', function() {
+    Middleware::auth(); // Protect route: must be logged in
+    require __DIR__ . '/../app/Views/dashboard.php';
+});
+
+$router->get('/admin', function() {
+    Middleware::role('admin'); // Protect route: only admin role allowed
+    require __DIR__ . '/../app/Views/dashboard.php';
+});
+
+// Dispatch request
+$router->dispatch();