Gecko [ v3.cesa.co.za ]

Name	Size	Permission	Date	Action
bootstrap.php	1.88 KB	-rw-r--r--	2026-06-03 05:55
error_handler.php	25.1 KB	-rw-r--r--	2026-08-24 10:24

Rename

<?php

/**
 * CESA Site Bootstrap File
 * 
 * This file should be included at the very beginning of any PHP file
 * to enable comprehensive error handling across the entire site.
 * 
 * Usage:
 * include_once($_SERVER['DOCUMENT_ROOT'] . '/includes/bootstrap.php');
 */

// Prevent direct access
if (!defined('CESA_BOOTSTRAP_LOADED')) {
    define('CESA_BOOTSTRAP_LOADED', true);
}

// Include the comprehensive error handler
require_once($_SERVER['DOCUMENT_ROOT'] . '/php/includes/error_handling/error_handler.php');

// Set up basic security headers
if (!headers_sent()) {
    // Security headers
    header('X-Content-Type-Options: nosniff');
    header('X-Frame-Options: SAMEORIGIN');
    header('X-XSS-Protection: 1; mode=block');

// Only set HSTS in production (plain HTTP local dev: http://cesa.local must not receive HSTS)
    $host = $_SERVER['HTTP_HOST'] ?? '';
    $isLocalHttpDev = (
        $host === 'cesa.local'
        || strpos($host, 'localhost') !== false
        || strpos($host, '127.0.0.1') !== false
        || strpos($host, 'devstage') !== false
    );
    if (!$isLocalHttpDev) {
        header('Strict-Transport-Security: max-age=31536000; includeSubDomains');
    }
}

// Set timezone
if (!ini_get('date.timezone')) {
    date_default_timezone_set('Africa/Johannesburg');
}

// Enable output buffering for better error handling
if (!ob_get_level()) {
    ob_start();
}

// Define common constants if not already defined
if (!defined('CESA_SITE_ROOT')) {
    define('CESA_SITE_ROOT', $_SERVER['DOCUMENT_ROOT']);
}

if (!defined('CESA_SITE_URL')) {
    $protocol = isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on' ? 'https' : 'http';
    define('CESA_SITE_URL', $protocol . '://' . ($_SERVER['HTTP_HOST'] ?? 'localhost'));
}

// Log successful bootstrap
if (function_exists('error_log')) {
    error_log("CESA Bootstrap loaded successfully for: " . ($_SERVER['REQUEST_URI'] ?? 'CLI'), 0);
}