initial commit

public/.htaccess

@@ -0,0 +1,23 @@
+# Necessary to prevent problems when using a controller named "index" and having a root index.php
+# more here: http://httpd.apache.org/docs/2.2/content-negotiation.html
+Options -MultiViews
+
+# Activates URL rewriting (like myproject.com/controller/action/1/2/3)
+RewriteEngine On
+
+# Prevent people from looking directly into folders
+Options -Indexes
+
+# If the following conditions are true, then rewrite the URL:
+# If the requested filename is not a directory,
+RewriteCond %{REQUEST_FILENAME} !-d
+# and if the requested filename is not a regular file that exists,
+RewriteCond %{REQUEST_FILENAME} !-f
+# and if the requested filename is not a symbolic link,
+RewriteCond %{REQUEST_FILENAME} !-l
+# then rewrite the URL in the following way:
+# Take the whole request filename and provide it as the value of a
+# "url" query parameter to index.php. Append any query string from
+# the original URL as further query parameters (QSA), and stop
+# processing this .htaccess file (L).
+RewriteRule ^(.+)$ index.php?url=$1 [QSA,L]

public/avatars/.htaccess

@@ -0,0 +1,9 @@
+# this disallows direct access to the folder listing
+# and disallows access to any executables files (that users may upload)
+# the script allows only .jpg/.png uploads, but we never know...
+Options -Indexes
+Options -ExecCGI
+AddHandler cgi-script .php .php3 .php4 .phtml .pl .py .jsp .asp .htm .shtml .sh .cgi
+# completely disable the PHP engine inside THIS folder, so what ever an attacker will do, PHP code will never run here
+# more info on this: http://www.electrictoolbox.com/disable-php-apache-htaccess/
+php_flag engine off

public/index.php

@@ -0,0 +1,17 @@
+<?php
+
+/**
+ * A super-simple user-authentication solution, embedded into a small framework.
+ *
+ * HUGE
+ *
+ * @link https://github.com/panique/huge
+ * @license http://opensource.org/licenses/MIT MIT License
+ */
+
+// auto-loading the classes (currently only from application/libs) via Composer's PSR-4 auto-loader
+// later it might be useful to use a namespace here, but for now let's keep it as simple as possible
+require '../vendor/autoload.php';
+
+// start our application
+new Application();