create-berna-stencil 2.6.1 → 2.6.2

package/out/backend/_core/modules/RateLimiter.php

@@ -0,0 +1,31 @@
+<?php
+
+declare(strict_types=1);
+
+class RateLimiter {
+    public static function check(string $ip, int $maxRequests = 60, int $windowSeconds = 60): void {
+        $cacheDir = __DIR__ . '/../../cache';
+        
+        if (!is_dir($cacheDir)) {
+            mkdir($cacheDir, 0755, true);
+        }
+
+        $cacheFile = $cacheDir . '/rl_' . md5($ip) . '.json';
+        $now = time();
+        $data = [];
+
+        if (file_exists($cacheFile)) {
+            $data = json_decode(file_get_contents($cacheFile), true) ?: [];
+        }
+
+        $data = array_filter($data, fn($ts) => $ts > ($now - $windowSeconds));
+        $data[] = $now;
+
+        file_put_contents($cacheFile, json_encode(array_values($data)), LOCK_EX);
+
+        if (count($data) > $maxRequests) {
+            header('Retry-After: ' . $windowSeconds);
+            Response::error('Too Many Requests', 429);
+        }
+    }
+}

package/out/backend/_core/modules/Response.php

@@ -0,0 +1,49 @@
+<?php
+
+declare(strict_types=1);
+
+if (!defined('CORE_ACCESS')) {
+    $errorPage = $_SERVER['DOCUMENT_ROOT'] . '/404.html';
+    http_response_code(404);
+    if (file_exists($errorPage)) {
+        header('Content-Type: text/html; charset=UTF-8');
+        echo file_get_contents($errorPage);
+    } else {
+        echo "404 Not Found";
+    }
+    exit;
+}
+
+class Response
+{
+    public static function success(mixed $data = null, int $code = 200): never
+    {
+        http_response_code($code);
+        echo json_encode([
+            'status' => 'success',
+            'data'   => $data,
+        ], JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
+        exit;
+    }
+
+    public static function error(string $message, int $code = 400, mixed $details = null): never
+    {
+        http_response_code($code);
+        $body = [
+            'status'  => 'error',
+            'message' => $message,
+            'code'    => $code,
+        ];
+        if ($details !== null) {
+            $body['details'] = $details;
+        }
+        echo json_encode($body, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
+        exit;
+    }
+
+    public static function noContent(): never
+    {
+        http_response_code(204);
+        exit;
+    }
+}

package/{src → out}/backend/_core/vendor/composer/installed.php

@@ -3,7 +3,7 @@
         'name' => '__root__',
         'pretty_version' => 'dev-main',
         'version' => 'dev-main',
-        'reference' => '4719f94db95d3c803abf3cf434a4e47e38526a14',
+        'reference' => 'c0fb608d2f28aa6977fa76538d55db9be6530ce4',
         'type' => 'library',
         'install_path' => __DIR__ . '/../../',
         'aliases' => array(),
@@ -13,7 +13,7 @@
         '__root__' => array(
             'pretty_version' => 'dev-main',
             'version' => 'dev-main',
-            'reference' => '4719f94db95d3c803abf3cf434a4e47e38526a14',
+            'reference' => 'c0fb608d2f28aa6977fa76538d55db9be6530ce4',
             'type' => 'library',
             'install_path' => __DIR__ . '/../../',
             'aliases' => array(),

package/out/backend/api/protected/example-protected.php

@@ -0,0 +1,17 @@
+<?php
+declare(strict_types=1);
+
+require_once CORE_PATH . '/modules/Response.php';
+
+if ($method !== 'GET') {
+    Response::error('Method not allowed', 405);
+}
+
+//
+// Your endpoint logic here. You can access route parameters in $requestParams array
+//
+
+Response::success([
+    'message'    => 'Protected endpoint is working',
+    'params'     => $requestParams,
+]);

package/out/backend/api/public/example-public.php

@@ -0,0 +1,17 @@
+<?php
+declare(strict_types=1);
+
+require_once CORE_PATH . '/modules/Response.php';
+
+if ($method !== 'GET') {
+    Response::error('Method not allowed', 405);
+}
+
+//
+// Your endpoint logic here. You can access route parameters in $requestParams array
+//
+
+Response::success([
+    'message'    => 'Public endpoint is working',
+    'params'     => $requestParams,
+]);

package/out/backend/database/Database.php

@@ -0,0 +1,24 @@
+<?php
+declare(strict_types=1);
+
+class Database {
+    private static ?PDO $instance = null;
+
+    private function __construct() {}
+
+    public static function getInstance(): PDO {
+        if (self::$instance === null) {
+            $config = require __DIR__ . '/../config.php';
+            
+            $dsn = "mysql:host={$config['DB_HOST']};dbname={$config['DB_NAME']};charset=utf8mb4";
+            $options = [
+                PDO::ATTR_ERRMODE            => PDO::ERRMODE_EXCEPTION,
+                PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC,
+                PDO::ATTR_EMULATE_PREPARES   => false,
+            ];
+
+            self::$instance = new PDO($dsn, $config['DB_USER'], $config['DB_PASS'], $options);
+        }
+        return self::$instance;
+    }
+}

package/out/backend/database/migrations/create_example_db.sql

@@ -0,0 +1 @@
+CREATE DATABASE example_db CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;

package/out/backend/web.config

@@ -0,0 +1,17 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<configuration>
+    <system.webServer>
+        <rewrite>
+            <rules>
+                <rule name="PassThroughCoreIndex" stopProcessing="true">
+                    <match url="^_core/index\.php$" ignoreCase="true" />
+                    <action type="None" />
+                </rule>
+                <rule name="RewriteToFrontController" stopProcessing="true">
+                    <match url="^(.*)$" ignoreCase="true" />
+                    <action type="Rewrite" url="_core/index.php" appendQueryString="true" />
+                </rule>
+            </rules>
+        </rewrite>
+    </system.webServer>
+</configuration>