<?php
/*******************************************************************************************************************
| Software Name        : EasyStream
| Software Description : High End YouTube Clone Script with Videos, Shorts, Streams, Images, Audio, Documents, Blogs
| Software Author      : (c) Sami Ahmed
|*******************************************************************************************************************
|
|*******************************************************************************************************************
| This source file is subject to the EasyStream Proprietary License Agreement.
| 
| By using this software, you acknowledge having read this Agreement and agree to be bound thereby.
|*******************************************************************************************************************
| Copyright (c) 2025 Sami Ahmed. All rights reserved.
|*******************************************************************************************************************/

defined('_ISVALID') or header("Location: /error");
/*
---- edit
 */
$COOKIE_VALIDATION = false; //BETA feature in testing phase, keep disabled for now
$COOKIE_DOMAIN     = ''; // Empty string allows cookies to work with any domain (localhost, IP, domain name)
$COOKIE_WHITELIST  = array('127.0.0.1');
/*
---- end edit
 *
 */

/* set error reporting */
ini_set("error_reporting", E_ALL & ~E_STRICT & ~E_NOTICE & ~E_DEPRECATED);

/* set include path */
$main_dir = realpath(dirname(__FILE__) . '/../');
set_include_path($main_dir);

/* start defines */
if (!defined('_INCLUDE')) {
    define('_INCLUDE', true);
}

define('REM_ADDR', (isset($_SERVER["HTTP_X_FORWARDED_FOR"]) ? 'HTTP_X_FORWARDED_FOR' : 'REMOTE_ADDR'));

define('ENC_FIRSTKEY', '4xR5Zlcwo8uUxyrdA5ykgFUXXQFV32o7abJiv+SBzBqXLCAmPq+ciq2ik1M32aGx8f/PZuNxHZ3uckPF/8BL2w==');

define('ENC_SECONDKEY', 'sH7ZuZ0jsiq9DKvjHHzQWAJaB1Ypav17v1rXVxyXpJSCI0untO8B1BUaUT7jxN2YlnyLy2e/JPJO3hMPSneJhhfQbV+ifrWIgD9JmubK+8PDTzB4gM9C0lV1g5R00KQmHWJ0iScv/oXldB0y6nMnLjiVhnTGNwf6gq1JEvukfac=');
// define('CA_CERT', '/etc/ssl/certs/cacert.pm');

define('COOKIE_VALIDATION', $COOKIE_VALIDATION);

define('COOKIE_DOMAIN', $COOKIE_DOMAIN);

define('COOKIE_VALIDATION_WHITELIST', $COOKIE_WHITELIST);

define('COOKIE_LOG', $main_dir . '/f_data/data_logs/log_error/log_cookie/' . date("Ymd") . "-cookie.log");

define('REQUEST_LOG', $main_dir . '/f_data/data_logs/log_error/log_request/' . date("Ymd") . "-request.log");

define('LIVE_AUTH_LOG', $main_dir . '/f_data/data_logs/log_error/log_live/' . date("Ymd") . "-auth.log");

define('LIVE_DONE_LOG', $main_dir . '/f_data/data_logs/log_error/log_live/' . date("Ymd") . "-done.log");

define('LIVE_REC_LOG', $main_dir . '/f_data/data_logs/log_error/log_live/' . date("Ymd") . "-rec.log");

// Detect HTTPS (supports reverse proxies) to decide secure cookies dynamically
$IS_HTTPS = (
    (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') ||
    (isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && strtolower($_SERVER['HTTP_X_FORWARDED_PROTO']) === 'https') ||
    (isset($_SERVER['REQUEST_SCHEME']) && strtolower($_SERVER['REQUEST_SCHEME']) === 'https')
);

// Environment-based SameSite policy: Strict on HTTPS in production, Lax in development
$APP_ENV = getenv('APP_ENV') ?: ((isset($_SERVER['HTTP_HOST']) && preg_match('/(localhost|127\.0\.0\.1)$/', $_SERVER['HTTP_HOST'])) ? 'development' : 'production');
$SAMESITE_POLICY = ($APP_ENV === 'production' && $IS_HTTPS) ? 'Strict' : 'Lax';

define('SET_COOKIE_OPTIONS', array(
    'expires'  => time() + 60 * 60 * 24 * 10, //10 days
    'path'     => '/',
    'domain'   => COOKIE_DOMAIN, // leading dot for compatibility or use subdomain
    'secure'   => $IS_HTTPS, // secure only over HTTPS
    'httponly' => true,
    'samesite' => $SAMESITE_POLICY,
));

define('DEL_COOKIE_OPTIONS', array(
    'expires'  => time() - 60 * 60 * 24 * 10, //10 days
    'path'     => '/',
    'domain'   => COOKIE_DOMAIN, // leading dot for compatibility or use subdomain
    'secure'   => $IS_HTTPS, // secure only over HTTPS
    'httponly' => true,
    'samesite' => $SAMESITE_POLICY,
));

define('SK_INC', (int) 0);
?>