gnh1201/reasonableframework
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge branch 'master' of https://github.com/gnh1201/reasonableframework

Browse Source
This commit is contained in:
Namhyeon Go 2019-06-17 17:21:37 +09:00
commit fd9a18aa02
3 changed files with 5 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
SECURITY.md
View File

@ -6,10 +6,7 @@ Even if you do not use a sponsor-only security module, the default security in o
Please note that this program is for those who want better security than the default. Please note that this program is for those who want better security than the default.
## Related files ## Related files
- helper/sec-fw.lnk.php - helper/securitytool.lnk.php
- helper/sec-ddos.lnk.php
- helper/sec-ws.lnk.php
- helper/sec-scc.lnk.php
## Minimum tier ## Minimum tier
- 4 USD/monthly (Special thanks + Up to contributors) - 4 USD/monthly (Special thanks + Up to contributors)

1
cli.php
View File

@ -12,6 +12,7 @@ define("_DEF_VSPF_", true); // compatible to VSPF
define("_DEF_RSF_", true); // compatible to RSF define("_DEF_RSF_", true); // compatible to RSF
define("APP_DEVELOPMENT", false); // set the status of development define("APP_DEVELOPMENT", false); // set the status of development
define("DOC_EOL", "\r\n"); // set the 'end of line' commonly define("DOC_EOL", "\r\n"); // set the 'end of line' commonly
define("SECURITY_VENDOR", false); // advanced security: set security vendor(company) code
// check if current status is development // check if current status is development
if(APP_DEVELOPMENT == true) { if(APP_DEVELOPMENT == true) {

6
index.php
View File

@ -13,7 +13,7 @@ define("_DEF_VSPF_", true); // compatible to VSPF
define("_DEF_RSF_", true); // compatible to RSF define("_DEF_RSF_", true); // compatible to RSF
define("APP_DEVELOPMENT", false); // set the status of development define("APP_DEVELOPMENT", false); // set the status of development
define("DOC_EOL", "\r\n"); // set the 'end of line' commonly define("DOC_EOL", "\r\n"); // set the 'end of line' commonly
define("CORS_DOMAINS", false); // common security: allow origin domains define("CORS_DOMAIN", false); // common security: allow origin domains
define("SECURITY_VENDOR", false); // advanced security: set security vendor(company) code define("SECURITY_VENDOR", false); // advanced security: set security vendor(company) code
// check if current status is development // check if current status is development
@ -23,8 +23,8 @@ if(APP_DEVELOPMENT == true) {
} }
// CORS Security (https or http) // CORS Security (https or http)
if(CORS_DOMAINS !== false) { if(CORS_DOMAIN !== false) {
$domains = explode(",", CORS_DOMAINS); $domains = explode(",", CORS_DOMAIN);
$_origin = array_key_exists("HTTP_ORIGIN", $_SERVER) ? $_SERVER['HTTP_ORIGIN'] : ""; $_origin = array_key_exists("HTTP_ORIGIN", $_SERVER) ? $_SERVER['HTTP_ORIGIN'] : "";
$origins = array(); $origins = array();
if(!in_array("*", $domains)) { if(!in_array("*", $domains)) {