diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..8fb962b --- /dev/null +++ b/.gitignore @@ -0,0 +1,20 @@ +# ---> CodeIgniter +*/config/development +*/logs/log-*.php +!*/logs/index.html +*/cache/* +!system/cache/* +!*/cache/index.html +!*/cache/.htaccess + +user_guide_src/build/* +user_guide_src/cilexer/build/* +user_guide_src/cilexer/dist/* +user_guide_src/cilexer/pycilexer.egg-info/* + +#codeigniter 3 +application/logs/* +!application/logs/index.html +!application/logs/.htaccess +/vendor/ + diff --git a/DATABASE.md b/DATABASE.md new file mode 100644 index 0000000..1a06afe --- /dev/null +++ b/DATABASE.md @@ -0,0 +1,108 @@ +// SQL-compatible database + +CREATE TABLE item +(itemId INT UNSIGNED NOT NULL AUTO_INCREMENT, +image VARCHAR(256) NOT NULL, +title VARCHAR(128) NOT NULL, +price DECIMAL(7,3) NOT NULL, +description TEXT NOT NULL, +PRIMARY KEY (itemId), +UNIQUE KEY (title) +); + +CREATE TABLE comment +(commentId INT UNSIGNED NOT NULL AUTO_INCREMENT, +usernameId INT UNSIGNED NOT NULL, +itemId INT UNSIGNED NOT NULL, +comment TEXT, +PRIMARY KEY (commentId), +FOREIGN KEY (usernameId) REFERENCES user(usernameId), +FOREIGN KEY (itemId) REFERENCES item(itemId) +); + +CREATE TABLE star +(starId INT UNSIGNED NOT NULL AUTO_INCREMENT, +usernameId INT UNSIGNED NOT NULL, +itemId INT UNSIGNED NOT NULL, +star DECIMAL(2,2) UNSIGNED, +PRIMARY KEY (starId), +FOREIGN KEY (usernameId) REFERENCES user(usernameId), +FOREIGN KEY (itemId) REFERENCES item(itemId) +); + +CREATE TABLE user +(usernameId INT UNSIGNED NOT NULL AUTO_INCREMENT, +username VARCHAR(16) NOT NULL, +PRIMARY KEY (usernameId), +UNIQUE KEY (username) +); + + +// SAMPLE DATA + +// Users (to be honest, a FAKE user.) +// Sample +// INSERT user(usernameId, username) VALUES(1,'Diskette'); + +INSERT user VALUES +(1,'Diskette'), +(2,'NorthEatGrass'), +(3,'KPJR'), +(4,'DuckyWay'), +(5,'Tacklezaza'), +(6,'NuRedFox'), +(7,'Dan'), +(8,'LinesOfCodes'), +(9,'IcePha'), +(10,'Ind') +; + +// Items/Product, whatever you call it +// Sample +// INSERT item(itemId, image, title, description, price) VALUES(1,'icecream.png','nICE CREAM','The patent pending nICE CREAM is really really good Ice Cream product, its so good that you'll even forget what it was',25) + +INSERT item(itemId, image, title, description, price) VALUES +(1,'icecream.png','nICE CREAM','The patent pending nICE CREAM is really really good Ice Cream product, its so good that you\'ll even forget what it was',25.00), +(2,'deathknife.png','Death Knife','Instant kill knife, not recommended near kids and children. This knife is from the hit-game, UNDERTALE. With the functional killer blade that will murder any victim instantly. Please note that we are not responsible for the damages caused by the usage of this knife',9999.99), +(3,'weaklaptop.png','TrashBook 9000','This laptop is equipped with Incel Celery 9000m low-end with 512MiB of DDR2 memory and 240p web camera. Suitable for home schooling',6000.00), +(4,'chattop.png','ChadBook T12000','This laptop is equipped with AMB Riser 10-9990k with 64GiB of DDR6L memory and gaming keyboard that will bind your eyes. Suitable for multiple VM workloads',50000.00), +(5,'console.png','Gaming console Pro Max','Super hyper ultra pro max retina XDR gaming console with 128GiB of memory, runs at 8GHz with super-hyper threading and it can render 16k resolution at 1 frames per second',35000.00), +(6,'portablepc.png','Portable PC','Portable mini computer for use anywhere, with it using Incel Core n5-9000m with Novideo Forces 9800m 512MiB of VRAM',10000.00), +(7,'processor.png','Core Super m9-19990kxt','A super high performance ultra super duper retina XDR product thingy, I\'m just typing here because I do not have a placeholder. Oh wait, I do. Notice that the keyword INTO was added here. This is optional and has no effect on MariaDB. It\'s only a matter of grammatical preference. In this example we not only name the columns, but we list them in a different order. This is acceptable to MariaDB. Just be sure to list the values in the same order. An INSERT statement takes priority over read statements (i.e., SELECT statements). An INSERT will lock the table and force other clients to wait until it\'s finished. On a busy MariaDB server that has many simultaneous requests for data, this could cause users to experience delays when you run a script that performs a series of INSERT statements',90000.00); + +// Star +// Sample +// INSERT star(starId, usernameId, itemId, star) VALUES(1,1,1,5.0); + +INSERT star(starId, usernameId, itemId, star) VALUES +(1,1,1,5.0), +(2,5,1,4.0), +(3,2,1,1.0), +(4,5,2,4.5), +(5,6,2,1.0), +(6,7,3,2.5), +(7,4,3,5.0), +(8,8,4,4.0), +(9,2,4,1.0), +(10,3,5,4.5), +(11,9,6,1.0), +(12,10,6,2.5), +(13,4,7,5.0); + +INSERT star(starId, usernameId, itemId, star) VALUES +(1,1,1,5), +(2,5,1,4), +(3,2,1,1), +(4,5,2,4.5), +(5,6,2,1), +(6,7,3,2.5), +(7,4,3,5), +(8,8,4,4), +(9,2,4,1), +(10,3,5,4.5), +(11,9,6,1), +(12,10,6,2.5), +(13,4,7,5); + + + diff --git a/app/.htaccess b/app/.htaccess new file mode 100644 index 0000000..3462048 --- /dev/null +++ b/app/.htaccess @@ -0,0 +1,6 @@ + + Require all denied + + + Deny from all + diff --git a/app/Common.php b/app/Common.php new file mode 100644 index 0000000..95f5544 --- /dev/null +++ b/app/Common.php @@ -0,0 +1,15 @@ + + */ + public array $allowedHostnames = []; + + /** + * -------------------------------------------------------------------------- + * Index File + * -------------------------------------------------------------------------- + * + * Typically, this will be your `index.php` file, unless you've renamed it to + * something else. If you have configured your web server to remove this file + * from your site URIs, set this variable to an empty string. + */ + public string $indexPage = 'index.php'; + + /** + * -------------------------------------------------------------------------- + * URI PROTOCOL + * -------------------------------------------------------------------------- + * + * This item determines which server global should be used to retrieve the + * URI string. The default setting of 'REQUEST_URI' works for most servers. + * If your links do not seem to work, try one of the other delicious flavors: + * + * 'REQUEST_URI': Uses $_SERVER['REQUEST_URI'] + * 'QUERY_STRING': Uses $_SERVER['QUERY_STRING'] + * 'PATH_INFO': Uses $_SERVER['PATH_INFO'] + * + * WARNING: If you set this to 'PATH_INFO', URIs will always be URL-decoded! + */ + public string $uriProtocol = 'REQUEST_URI'; + + /* + |-------------------------------------------------------------------------- + | Allowed URL Characters + |-------------------------------------------------------------------------- + | + | This lets you specify which characters are permitted within your URLs. + | When someone tries to submit a URL with disallowed characters they will + | get a warning message. + | + | As a security measure you are STRONGLY encouraged to restrict URLs to + | as few characters as possible. + | + | By default, only these are allowed: `a-z 0-9~%.:_-` + | + | Set an empty string to allow all characters -- but only if you are insane. + | + | The configured value is actually a regular expression character group + | and it will be used as: '/\A[]+\z/iu' + | + | DO NOT CHANGE THIS UNLESS YOU FULLY UNDERSTAND THE REPERCUSSIONS!! + | + */ + public string $permittedURIChars = 'a-z 0-9~%.:_\-'; + + /** + * -------------------------------------------------------------------------- + * Default Locale + * -------------------------------------------------------------------------- + * + * The Locale roughly represents the language and location that your visitor + * is viewing the site from. It affects the language strings and other + * strings (like currency markers, numbers, etc), that your program + * should run under for this request. + */ + public string $defaultLocale = 'en'; + + /** + * -------------------------------------------------------------------------- + * Negotiate Locale + * -------------------------------------------------------------------------- + * + * If true, the current Request object will automatically determine the + * language to use based on the value of the Accept-Language header. + * + * If false, no automatic detection will be performed. + */ + public bool $negotiateLocale = false; + + /** + * -------------------------------------------------------------------------- + * Supported Locales + * -------------------------------------------------------------------------- + * + * If $negotiateLocale is true, this array lists the locales supported + * by the application in descending order of priority. If no match is + * found, the first locale will be used. + * + * IncomingRequest::setLocale() also uses this list. + * + * @var list + */ + public array $supportedLocales = ['en']; + + /** + * -------------------------------------------------------------------------- + * Application Timezone + * -------------------------------------------------------------------------- + * + * The default timezone that will be used in your application to display + * dates with the date helper, and can be retrieved through app_timezone() + * + * @see https://www.php.net/manual/en/timezones.php for list of timezones + * supported by PHP. + */ + public string $appTimezone = 'UTC'; + + /** + * -------------------------------------------------------------------------- + * Default Character Set + * -------------------------------------------------------------------------- + * + * This determines which character set is used by default in various methods + * that require a character set to be provided. + * + * @see http://php.net/htmlspecialchars for a list of supported charsets. + */ + public string $charset = 'UTF-8'; + + /** + * -------------------------------------------------------------------------- + * Force Global Secure Requests + * -------------------------------------------------------------------------- + * + * If true, this will force every request made to this application to be + * made via a secure connection (HTTPS). If the incoming request is not + * secure, the user will be redirected to a secure version of the page + * and the HTTP Strict Transport Security (HSTS) header will be set. + */ + public bool $forceGlobalSecureRequests = false; + + /** + * -------------------------------------------------------------------------- + * Reverse Proxy IPs + * -------------------------------------------------------------------------- + * + * If your server is behind a reverse proxy, you must whitelist the proxy + * IP addresses from which CodeIgniter should trust headers such as + * X-Forwarded-For or Client-IP in order to properly identify + * the visitor's IP address. + * + * You need to set a proxy IP address or IP address with subnets and + * the HTTP header for the client IP address. + * + * Here are some examples: + * [ + * '10.0.1.200' => 'X-Forwarded-For', + * '192.168.5.0/24' => 'X-Real-IP', + * ] + * + * @var array + */ + public array $proxyIPs = []; + + /** + * -------------------------------------------------------------------------- + * Content Security Policy + * -------------------------------------------------------------------------- + * + * Enables the Response's Content Secure Policy to restrict the sources that + * can be used for images, scripts, CSS files, audio, video, etc. If enabled, + * the Response object will populate default values for the policy from the + * `ContentSecurityPolicy.php` file. Controllers can always add to those + * restrictions at run time. + * + * For a better understanding of CSP, see these documents: + * + * @see http://www.html5rocks.com/en/tutorials/security/content-security-policy/ + * @see http://www.w3.org/TR/CSP/ + */ + public bool $CSPEnabled = false; +} diff --git a/app/Config/Autoload.php b/app/Config/Autoload.php new file mode 100644 index 0000000..9a92824 --- /dev/null +++ b/app/Config/Autoload.php @@ -0,0 +1,92 @@ +|string> + */ + public $psr4 = [ + APP_NAMESPACE => APPPATH, + ]; + + /** + * ------------------------------------------------------------------- + * Class Map + * ------------------------------------------------------------------- + * The class map provides a map of class names and their exact + * location on the drive. Classes loaded in this manner will have + * slightly faster performance because they will not have to be + * searched for within one or more directories as they would if they + * were being autoloaded through a namespace. + * + * Prototype: + * $classmap = [ + * 'MyClass' => '/path/to/class/file.php' + * ]; + * + * @var array + */ + public $classmap = []; + + /** + * ------------------------------------------------------------------- + * Files + * ------------------------------------------------------------------- + * The files array provides a list of paths to __non-class__ files + * that will be autoloaded. This can be useful for bootstrap operations + * or for loading functions. + * + * Prototype: + * $files = [ + * '/path/to/my/file.php', + * ]; + * + * @var list + */ + public $files = []; + + /** + * ------------------------------------------------------------------- + * Helpers + * ------------------------------------------------------------------- + * Prototype: + * $helpers = [ + * 'form', + * ]; + * + * @var list + */ + public $helpers = []; +} diff --git a/app/Config/Boot/development.php b/app/Config/Boot/development.php new file mode 100644 index 0000000..a868447 --- /dev/null +++ b/app/Config/Boot/development.php @@ -0,0 +1,34 @@ + + */ + public array $file = [ + 'storePath' => WRITEPATH . 'cache/', + 'mode' => 0640, + ]; + + /** + * ------------------------------------------------------------------------- + * Memcached settings + * ------------------------------------------------------------------------- + * + * Your Memcached servers can be specified below, if you are using + * the Memcached drivers. + * + * @see https://codeigniter.com/user_guide/libraries/caching.html#memcached + * + * @var array + */ + public array $memcached = [ + 'host' => '127.0.0.1', + 'port' => 11211, + 'weight' => 1, + 'raw' => false, + ]; + + /** + * ------------------------------------------------------------------------- + * Redis settings + * ------------------------------------------------------------------------- + * + * Your Redis server can be specified below, if you are using + * the Redis or Predis drivers. + * + * @var array + */ + public array $redis = [ + 'host' => '127.0.0.1', + 'password' => null, + 'port' => 6379, + 'timeout' => 0, + 'database' => 0, + ]; + + /** + * -------------------------------------------------------------------------- + * Available Cache Handlers + * -------------------------------------------------------------------------- + * + * This is an array of cache engine alias' and class names. Only engines + * that are listed here are allowed to be used. + * + * @var array> + */ + public array $validHandlers = [ + 'dummy' => DummyHandler::class, + 'file' => FileHandler::class, + 'memcached' => MemcachedHandler::class, + 'predis' => PredisHandler::class, + 'redis' => RedisHandler::class, + 'wincache' => WincacheHandler::class, + ]; + + /** + * -------------------------------------------------------------------------- + * Web Page Caching: Cache Include Query String + * -------------------------------------------------------------------------- + * + * Whether to take the URL query string into consideration when generating + * output cache files. Valid options are: + * + * false = Disabled + * true = Enabled, take all query parameters into account. + * Please be aware that this may result in numerous cache + * files generated for the same page over and over again. + * ['q'] = Enabled, but only take into account the specified list + * of query parameters. + * + * @var bool|list + */ + public $cacheQueryString = false; +} diff --git a/app/Config/Constants.php b/app/Config/Constants.php new file mode 100644 index 0000000..fb56bb1 --- /dev/null +++ b/app/Config/Constants.php @@ -0,0 +1,79 @@ +|string|null + */ + public $defaultSrc; + + /** + * Lists allowed scripts' URLs. + * + * @var list|string + */ + public $scriptSrc = 'self'; + + /** + * Lists allowed stylesheets' URLs. + * + * @var list|string + */ + public $styleSrc = 'self'; + + /** + * Defines the origins from which images can be loaded. + * + * @var list|string + */ + public $imageSrc = 'self'; + + /** + * Restricts the URLs that can appear in a page's `` element. + * + * Will default to self if not overridden + * + * @var list|string|null + */ + public $baseURI; + + /** + * Lists the URLs for workers and embedded frame contents + * + * @var list|string + */ + public $childSrc = 'self'; + + /** + * Limits the origins that you can connect to (via XHR, + * WebSockets, and EventSource). + * + * @var list|string + */ + public $connectSrc = 'self'; + + /** + * Specifies the origins that can serve web fonts. + * + * @var list|string + */ + public $fontSrc; + + /** + * Lists valid endpoints for submission from `
` tags. + * + * @var list|string + */ + public $formAction = 'self'; + + /** + * Specifies the sources that can embed the current page. + * This directive applies to ``, `