Tul xxx Tul

Viewing: index.php

<?php
require_once __DIR__ . '/config.php';

$cookieParams = session_get_cookie_params();
$sessionPath = APP_BASE_PATH !== '' ? APP_BASE_PATH . '/admin/' : '/admin/';
session_set_cookie_params([
    'lifetime' => 0,
    'path' => $sessionPath,
    'domain' => soyEnv('SOY_SESSION_DOMAIN', $cookieParams['domain'] ?? ''),
    'secure' => SESSION_SECURE,
    'httponly' => true,
    'samesite' => SESSION_SAMESITE,
]);

session_start();

require_once __DIR__ . '/core/Database.php';

// Rutas base del panel
define('ADMIN_ROOT', __DIR__);
define('CORE_PATH', ADMIN_ROOT . '/core');
define('CONTROLLER_PATH', ADMIN_ROOT . '/controllers');
define('VIEW_PATH', ADMIN_ROOT . '/views');
define('MODEL_PATH', ADMIN_ROOT . '/models');

// Autoloader sencillo
spl_autoload_register(function ($class) {
    $paths = [
        CORE_PATH . "/{$class}.php",
        CONTROLLER_PATH . "/{$class}.php",
        MODEL_PATH . "/{$class}.php",
    ];
    foreach ($paths as $file) {
        if (is_file($file)) { require_once $file; return; }
    }
});

 // Polyfill para PHP < 8 (str_starts_with)
 if (!function_exists('str_starts_with')) {
     function str_starts_with(string $haystack, string $needle): bool {
         return $needle === '' || strncmp($haystack, $needle, strlen($needle)) === 0;
     }
 }

// Enrutamiento básico tipo: ?r=controller/action
$route = isset($_GET['r']) ? trim($_GET['r']) : '';

// Redirección a login si no autenticado (permitir API pública de servicios)
if (!Session::isAuthenticated()) {
    // Permitir el endpoint público para el sitio principal
    if ($route === 'servicios/api') {
        // sin cambio de ruta
    } elseif ($route === '' || !str_starts_with($route, 'auth/')) {
        $route = 'auth/login';
    }
} else {
    if ($route === '' || $route === '/') {
        $route = Session::isRole('cliente') ? 'clienteDashboard/index' : 'dashboard/index';
    }
}

// Parseo
$parts = explode('/', $route);
$controller = !empty($parts[0]) ? $parts[0] : 'dashboard';
$action = $parts[1] ?? 'index';
$class = ucfirst($controller) . 'Controller';

if (Session::isAuthenticated() && Session::isRole('cliente')) {
    $allowedControllers = ['auth', 'clienteDashboard', 'clienteDiagnosticos'];
    if (!in_array($controller, $allowedControllers, true)) {
        header('Location: index.php?r=clienteDashboard/index');
        exit;
    }
}

if (!class_exists($class)) {
    http_response_code(404);
    echo '<h1>404</h1><p>Controlador no encontrado.</p>';
    exit;
}

$instance = new $class();
if (!method_exists($instance, $action)) {
    http_response_code(404);
    echo '<h1>404</h1><p>Acción no encontrada.</p>';
    exit;
}

// Ejecutar acción
$instance->$action();
User / IP	: 216.73.216.183
Host / Server	: 45.84.207.204 / aircan.me
System	: Linux lt-bnk-web1726.main-hosting.eu 5.14.0-611.36.1.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Tue Mar 3 11:23:52 EST 2026 x86_64