diff --git a/.dockerignore b/.dockerignore index 4a602da..e9162d1 100644 --- a/.dockerignore +++ b/.dockerignore @@ -1,6 +1,11 @@ -.git/ +# IDE-related folders .idea/ -.dockerignore + +# Git +.git/ .gitignore -notes.txt + +# Others +.dockerignore *.md +*.lnk diff --git a/.gitignore b/.gitignore index 087c184..d9f9099 100644 --- a/.gitignore +++ b/.gitignore @@ -8,3 +8,5 @@ resources/FontAwesomePro/ # Others *.pdn +*.min.json +*.lnk diff --git a/.htaccess b/.htaccess index 1299ca4..422199c 100644 --- a/.htaccess +++ b/.htaccess @@ -1,24 +1,8 @@ # Prevent access to .htaccess - ## Apache 2.2 - Order allow,deny - Deny from all - ## Apache 2.4 - # Require all denied + Require all denied -## Deny access to some common leftovers -# -# ## Apache 2.2 -# Order allow,deny -# Deny from all -# Satisfy All -# ## Apache 2.4 -# # Require all denied -# - -ServerSignature Off - # Redirecting HTTP traffic to HTTPS. (Keep commented on localhost !) # This is handled other services, but it should still be enabled in production just to be safe. #RewriteEngine On @@ -26,8 +10,9 @@ ServerSignature Off #RewriteRule ^(.*)$ https://nibblepoker.lu/$1 [R,L] # Correcting some default options for security and language/content redirection. -# FollowSymlinks is on since it required for "mod_rewrite" and the server is jailed. +# FollowSymlinks is also on since it's required for "mod_rewrite" and the server is jailed. Options -Indexes +FollowSymlinks -ExecCGI +ServerSignature Off # Custom error pages. ErrorDocument 403 /403.php @@ -36,15 +21,12 @@ ErrorDocument 404 /404.php # Setting some headers for security. Header always set X-Detected-Country "NK" Header always set X-Frame-Options "deny" -# Prevents CloudFlare from injecting some JS code through their hidden apps... Header always set Content-Security-Policy "default-src 'self'; object-src 'none'; child-src 'self'; frame-ancestors 'none'; upgrade-insecure-requests; block-all-mixed-content" Header always set X-XSS-Protection " 1; mode=block" Header always set Referrer-Policy "no-referrer" Header always set X-Content-Type-Options "nosniff" Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Header always set Cache-Control "max-age=300, public" -# Remark: Apparently, the 'Permissions-Policy' header is not properly formatted, IDK why... -Header always set Permissions-Policy "accelerometer=(),autoplay=(),camera=(),display-capture=(),document-domain=(),encrypted-media=(),fullscreen=(),geolocation=(),gyroscope=(),magnetometer=(),microphone=(),midi=(),payment=(),picture-in-picture=(),publickey-credentials-get=(),screen-wake-lock=(),sync-xhr=(self),usb=(),web-share=(),xr-spatial-tracking=()" Header always set Access-Control-Allow-Origin "*" Header unset X-Powered-By Header always set X-Powered-By "Amiga 1200, Kickstart 3.1" @@ -52,6 +34,11 @@ Header always set X-Powered-By "Amiga 1200, Kickstart 3.1" # Handling all other redirections. RewriteEngine On +# Languages. (Does not work with a regex) +RewriteRule ^en/(.*)$ /$1 [QSA] +RewriteRule ^fr/(.*)$ /$1 [QSA] +RewriteRule ^lb/(.*)$ /$1 [QSA] + # Sending a 404 for git and IDEs folders just in case they ever get copied to the web server, # or if one of the honeypot files is acessed directly. # A 404 is preferred to prevent further scanning of this folder and from raising some flags. @@ -59,11 +46,6 @@ RewriteEngine On #RedirectMatch 404 ^.*\.?(git|vs(code)|idea).* #RedirectMatch 404 ^.*honeypot.* -# Languages. (Does not work with a regex) -RewriteRule ^en/(.*)$ /$1 [QSA] -RewriteRule ^fr/(.*)$ /$1 [QSA] -RewriteRule ^lb/(.*)$ /$1 [QSA] - # Internal redirections for scanning and exploit attempts. # These rules are here since they're easier to implement in the .htaccess. #RewriteRule ^.*(install|xmlrpc)\.php.*$ /honeypot/file-php.php [QSA] diff --git a/about/index.php b/about/index.php index 52e3096..bb3a22b 100644 --- a/about/index.php +++ b/about/index.php @@ -48,7 +48,7 @@ include_once 'langs.php';
- rounded image + rounded image
diff --git a/commons/body-root.php b/commons/body-root.php index 71e2c11..75ad9b9 100644 --- a/commons/body-root.php +++ b/commons/body-root.php @@ -1,5 +1,6 @@ '); + ' mr-15"').'>'); // Adding content. processStandardContentSubNode($elementNode); diff --git a/commons/footer.php b/commons/footer.php index 4de4e55..aefde4e 100644 --- a/commons/footer.php +++ b/commons/footer.php @@ -1,4 +1,10 @@ - +