feat: Add comprehensive documentation suite and reorganize project structure
- Created complete documentation in docs/ directory - Added PROJECT_OVERVIEW.md with feature highlights and getting started guide - Added ARCHITECTURE.md with system design and technical details - Added SECURITY.md with comprehensive security implementation guide - Added DEVELOPMENT.md with development workflows and best practices - Added DEPLOYMENT.md with production deployment instructions - Added API.md with complete REST API documentation - Added CONTRIBUTING.md with contribution guidelines - Added CHANGELOG.md with version history and migration notes - Reorganized all documentation files into docs/ directory for better organization - Updated README.md with proper documentation links and quick navigation - Enhanced project structure with professional documentation standards
This commit is contained in:
86
fingerprint_handler.php
Normal file
86
fingerprint_handler.php
Normal file
@@ -0,0 +1,86 @@
|
||||
<?php
|
||||
/*******************************************************************************************************************
|
||||
| Fingerprint Handler - Receives and processes browser fingerprints
|
||||
|*******************************************************************************************************************/
|
||||
|
||||
define('_ISVALID', true);
|
||||
include_once 'f_core/config.core.php';
|
||||
|
||||
// Only accept POST requests
|
||||
if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
|
||||
http_response_code(405);
|
||||
exit;
|
||||
}
|
||||
|
||||
// Rate limiting for fingerprint submissions
|
||||
$client_ip = VIPaccess::getUserIP();
|
||||
if (!VSecurity::checkRateLimit('fingerprint_' . $client_ip, 10, 60)) {
|
||||
http_response_code(429);
|
||||
exit('Rate limit exceeded');
|
||||
}
|
||||
|
||||
try {
|
||||
// Get JSON data
|
||||
$json_data = file_get_contents('php://input');
|
||||
$fingerprint_data = json_decode($json_data, true);
|
||||
|
||||
if (!$fingerprint_data) {
|
||||
http_response_code(400);
|
||||
exit('Invalid JSON data');
|
||||
}
|
||||
|
||||
// Generate fingerprint hash
|
||||
$fingerprint_hash = VFingerprint::generateFingerprint($fingerprint_data);
|
||||
|
||||
// Check if fingerprint is banned
|
||||
$ban_info = VFingerprint::isBanned($fingerprint_hash);
|
||||
if ($ban_info) {
|
||||
// Log banned fingerprint attempt
|
||||
VIPTracker::logActivity('banned_fingerprint_access', [
|
||||
'fingerprint' => substr($fingerprint_hash, 0, 16) . '...',
|
||||
'ban_reason' => $ban_info['reason']
|
||||
]);
|
||||
|
||||
http_response_code(403);
|
||||
exit('Access denied');
|
||||
}
|
||||
|
||||
// Track the fingerprint
|
||||
VFingerprint::trackFingerprint($fingerprint_hash, [
|
||||
'client_data' => $fingerprint_data,
|
||||
'page_url' => $_SERVER['HTTP_REFERER'] ?? ''
|
||||
]);
|
||||
|
||||
// Store fingerprint in session for future checks
|
||||
$_SESSION['browser_fingerprint'] = $fingerprint_hash;
|
||||
|
||||
// Check for threats and auto-ban if necessary
|
||||
$threats = VFingerprint::detectFingerprintThreats($fingerprint_hash);
|
||||
if ($threats['threat_level'] >= 5) {
|
||||
VFingerprint::autoBanFingerprint($fingerprint_hash);
|
||||
|
||||
// Log the auto-ban
|
||||
VIPTracker::logActivity('fingerprint_auto_banned', [
|
||||
'fingerprint' => substr($fingerprint_hash, 0, 16) . '...',
|
||||
'threats' => $threats['threats'],
|
||||
'threat_level' => $threats['threat_level']
|
||||
]);
|
||||
|
||||
http_response_code(403);
|
||||
exit('Access denied - suspicious activity detected');
|
||||
}
|
||||
|
||||
// Return success response
|
||||
http_response_code(200);
|
||||
echo json_encode([
|
||||
'status' => 'success',
|
||||
'fingerprint_id' => substr($fingerprint_hash, 0, 16) . '...',
|
||||
'threat_level' => $threats['risk_assessment']
|
||||
]);
|
||||
|
||||
} catch (Exception $e) {
|
||||
error_log("Fingerprint handler error: " . $e->getMessage());
|
||||
http_response_code(500);
|
||||
exit('Internal server error');
|
||||
}
|
||||
?>
|
||||
Reference in New Issue
Block a user