andreandClaude Opus 4.8
e68d357177
Plain-PHP fleet platform with id.andmore.pt SSO. Wires shared/platform-tools as a submodule (platform_update, backups, git/migration tools) like the other platforms. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
65 lines
2.6 KiB
PHP
65 lines
2.6 KiB
PHP
<?php
|
|
require_once __DIR__ . '/env.php';
|
|
env_load(__DIR__ . '/../.env');
|
|
|
|
// The legacy CI4 front controller ran from the web root, so some ported view
|
|
// partials use root-relative paths (e.g. gallery's glob('uploads/gallery/...')).
|
|
// Pin the CWD to the project root so those keep resolving regardless of which
|
|
// script Apache invoked.
|
|
@chdir(dirname(__DIR__));
|
|
|
|
// ─── Bootstrap failure helper ────────────────────────────────────────────────
|
|
// Renders a generic 500 page. Never echoes exception details — they often
|
|
// contain the host:port, DB name, and (worst case) credentials. Real details
|
|
// land in logs/db_error.log; the page just says "something went wrong".
|
|
function _bootstrap_fail(string $logMsg): void {
|
|
@mkdir(__DIR__ . '/../logs', 0775, true);
|
|
@error_log('[' . date('c') . '] ' . $logMsg . "\n", 3, __DIR__ . '/../logs/db_error.log');
|
|
error_log('[fotografia bootstrap] ' . $logMsg);
|
|
http_response_code(500);
|
|
header('Content-Type: text/html; charset=utf-8');
|
|
$tpl = __DIR__ . '/../templates/error_500.php';
|
|
if (is_file($tpl)) {
|
|
require $tpl;
|
|
} else {
|
|
echo '<!doctype html><meta charset="utf-8"><title>Erro</title>'
|
|
. '<p style="font-family:sans-serif;text-align:center;margin:80px auto;">Algo correu mal. Tente novamente em instantes.</p>';
|
|
}
|
|
exit(1);
|
|
}
|
|
|
|
// Required env vars — fail loud if any is missing. Hard-coded fallback creds
|
|
// (especially `root` / `admin`) were a footgun: a missing .env would let the
|
|
// app boot with the wrong identity instead of refusing to start.
|
|
foreach (['DB_NAME', 'DB_USER'] as $req) {
|
|
if (getenv($req) === false || getenv($req) === '') {
|
|
_bootstrap_fail("required env var {$req} is not set");
|
|
}
|
|
}
|
|
if (getenv('DB_PASS') === false) {
|
|
_bootstrap_fail('required env var DB_PASS is not set (empty string is allowed)');
|
|
}
|
|
|
|
$host = env('DB_HOST', '127.0.0.1');
|
|
$port = (int) env('DB_PORT', 3306);
|
|
$db = env('DB_NAME');
|
|
$user = env('DB_USER');
|
|
$pass = env('DB_PASS');
|
|
|
|
$dsn = "mysql:host=$host;port=$port;dbname=$db;charset=utf8mb4";
|
|
|
|
try {
|
|
$pdo = new PDO($dsn, $user, $pass);
|
|
$pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
|
|
} catch (PDOException $e) {
|
|
_bootstrap_fail('PDO connect failed: ' . $e->getMessage());
|
|
}
|
|
|
|
// Distinct session cookie per app so installs that share a host (e.g.
|
|
// development.andmore.pt/id.andmore.pt/ and /fitme3070.pt/) don't overwrite
|
|
// each other's PHPSESSID. Must run before session_start().
|
|
if (session_status() === PHP_SESSION_NONE) {
|
|
session_name('FIT_SESS');
|
|
session_start();
|
|
}
|