[RELEASE] Website based on MVC

[[MXD]Takeshi]

Hello everyone, after my last presentation () of how the sites around are obsolete, I want to release a "free" version of my project.

There is not really much, I worked to improve its base, but it is an idea for those who want to try working with this framework.

First of all, we need:

php >=5.6, 
OpenSSL extension, 
PDO extension, 
Intl extension

once you enable these php extensions, we need to fix our database, with small query.

ALTER TABLE PS_UserData.dbo.Users_Master
ADD CONSTRAINT PK_UID PRIMARY KEY (UserUID)

Q. why need add this "PRIMARY KEY"
A. Yii2 working with identity, so need that table have a primary key for idenity user.

then :

ALTER TABLE  PS_UserData.dbo.Users_Master
ALTER COLUMN Enpassword varchar(60)

Q. why use "Enpassword" ?
A. because yii2 uses a level of encryption and decryption, currently the unencrypted password is saved in the database, so the game will work the same.

remember to always change our sqlserver username and password,

Example folder location:
C:\xampp\htdocs\yii-advanced\common\config\main-local.php

edit:
$db_user    = 'sa';
$db_psw     = 'Shaiya123';
$db_host    = '127.0.0.1';

If everything went well, the site should show itself in front of you

I leave some screens of the pages already created.

Yii2 Website

Please leave a comment with your thoughts, advice, suggestions ...

■ Features

• register
• login
• pvpranking
• news
• event
• patch note
• server time
• grb time
• slider image
• information page

ChangeLog:
V1.2:

• News
• Events
• Patch Notes
• Slider image
• Server time
• grb time countdown
• new style pure dark added

V1:

• Login
• Register
• PvP Ranking
• Information page

Download information later

[Wa7dani]

Great work, looking forward to the future

[[MXD]Takeshi]

Originally Posted by Wa7dani

Great work, looking forward to the future

Thanks, I wanted someone to comment on the work, with a first installation experience

[MC Flip]

If you need feeback, I can help you out.

However, you might want to post intructions on what to do with those files, as it is not you typical pages and folders you slap onto a webserver and it works.

With your release I get some frontend, backend, console, vendor, etc folders. What should I do with those to get a functional site?

[[MXD]Takeshi]

Originally Posted by MC Flip

If you need feeback, I can help you out.

However, you might want to post intructions on what to do with those files, as it is not you typical pages and folders you slap onto a webserver and it works.

With your release I get some frontend, backend, console, vendor, etc folders. What should I do with those to get a functional site?

to give an explanation of what the folders are for ....

Directories
The root directory contains the following subdirectories:

backend - backend web application.
common - files common to all applications.
console - console application.
environments - environment configs.
frontend - frontend web application.

inpratica the work project is divided into 2 web applications, * end, which indicate 2 different sites, frontend -> what users will see, backend -> in practice an admin panel ...

common -> is in common among the working groups, here it is good to save our model (database), because so we have the possibility to recall the function both in backend and frontend

above I wrote the php requirements, they are all extensions that need to be enabled.

Set document roots of your web server:

• for frontend /path/to/yii-application/frontend/web/ and using the URL
  
• for backend /path/to/yii-application/backend/web/ and using the URL

For Apache it could be the following:

<VirtualHost *:80>
        ServerName frontend.dev
        DocumentRoot "/path/to/yii-application/frontend/web/"
           
        <Directory "/path/to/yii-application/frontend/web/">
            # use mod_rewrite for pretty URL support
            RewriteEngine on
            # If a directory or a file exists, use the request directly
            RewriteCond %{REQUEST_FILENAME} !-f
            RewriteCond %{REQUEST_FILENAME} !-d
            # Otherwise forward the request to index.php
            RewriteRule . index.php

            # use index.php as index file
            DirectoryIndex index.php

            # ...other settings...
        </Directory>
    </VirtualHost>
       
    <VirtualHost *:80>
        ServerName backend.dev
        DocumentRoot "/path/to/yii-application/backend/web/"
           
        <Directory "/path/to/yii-application/backend/web/">
            # use mod_rewrite for pretty URL support
            RewriteEngine on
            # If a directory or a file exists, use the request directly
            RewriteCond %{REQUEST_FILENAME} !-f
            RewriteCond %{REQUEST_FILENAME} !-d
            # Otherwise forward the request to index.php
            RewriteRule . index.php

            # use index.php as index file
            DirectoryIndex index.php

            # ...other settings...
        </Directory>
    </VirtualHost>

Add the following lines to hosts file:

127.0.0.1 y2aa-frontend.dev
127.0.0.1 y2aa-backend.dev

if there are doubts, or something is wrong, just ask

I had left a documentation of Yii, so I thought these things were a little clear

[SnickQ]

@ You know that people aren't able to use it, right?

[[MXD]Takeshi]

Originally Posted by SnickQ

@ You know that people aren't able to use it, right?

well... good know, if i sell full project and install it, noone can shared....

anyway, have you been able to install it?
what have you seen, thought... more...

[SnickQ]

I was try instal it as normal ASP site and and as normal site. When i clic on any php i have "Connot open this site"
But i put it into iis (7.2 php drives) i dont have xamp

[[MXD]Takeshi]

Originally Posted by SnickQ

I was try instal it as normal ASP site and and as normal site. When i clic on any php i have "Connot open this site"
But i put it into iis (7.2 php drives) i dont have xamp

you do not need XAMPP, I left a configuration for xampp, if you know IIS you can easily confirm it ...

however I would like to see your mistake, and find a solution

[[MXD]Takeshi]

#Bump new features - style

[[Admin]Divi]

I noticed some of the fundamental security flaws that may afflict your PHP application.

To avoid it do the following steps;

• Turn SSL on at all times
• Hide all version numbers
• Always keep your errors in privatelogs and away from the public
• Disable potentially harmful functions

I’ll cover a few more potentially harmful injection attacks that you are susceptible to;

• Shell Injection
• eval() function
• File Inclusion - include() or require()

Storing secure data such as the following should be given a security audit for both the sake of your visitors and for compliance;

• E-mail addresses
• Dates of birth
• Credit reports & Bank account information (donation stuff)
  ... and more

Besides that, great work with that one! Keep it updated.

[[MXD]Takeshi]

Originally Posted by [Admin]Divi

I noticed some of the fundamental security flaws that may afflict your PHP application.

To avoid it do the following steps;

• Turn SSL on at all times
• Hide all version numbers
• Always keep your errors in privatelogs and away from the public
• Disable potentially harmful functions

I’ll cover a few more potentially harmful injection attacks that you are susceptible to;

• Shell Injection
• eval() function
• File Inclusion - include() or require()

Storing secure data such as the following should be given a security audit for both the sake of your visitors and for compliance;

• E-mail addresses
• Dates of birth
• Credit reports & Bank account information (donation stuff)
  ... and more

Besides that, great work with that one! Keep it updated.

Hello and thanks for the reply.

there are different levels of debugging, and we can decide what and when to show it, for example there is a debug bar, which shows the "DEV" requests, used assets, databases in use and much more, I am releasing versions for "DEV" "so I did not remove the debugging levels.

Shell injector is possible in few cases, with the files that have been releasing there is little to inject, to say nothing, shell commands are blocked here.

the "include" or "require" is never used, it is all managed by assets


the data security currently entered is not entered xD data

[copain]

Hello i mange to run the application but i always end up having file directory issue every time i go to any pages ill end up 404 ,

site/login

the folder site does not exist in web folder ..

[[MXD]Takeshi]

Originally Posted by copain

Hello i mange to run the application but i always end up having file directory issue every time i go to any pages ill end up 404 ,

site/login

the folder site does not exist in web folder ..

your website does not point to the right directory

for IIS:
FIRST:
Make sure you have installed URL Rewrite on your IIS7

If you have the web.config configuration, and it is still routing to a physical directory and not to the controller/action route, it almost 100% means that your are missing URL Rewrite. Yes this is an addon that is not necessarily installed.

So go ahead, download and install it on your ISS from



SECOND:
This is the web.config that is actually working. Notice that I ended with: match url=".*" and also notice that I added a line to handle images and other static content.

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
    <configSections>
        <sectionGroup name="system.webServer">
            <sectionGroup name="rewrite">
                <section name="rewriteMaps" overrideModeDefault="Allow" />
                <section name="rules" overrideModeDefault="Allow" />
            </sectionGroup>
        </sectionGroup>
    </configSections>
    <system.webServer>
        <rewrite>
            <rules>
                <rule name="Yii2 Routing that works" stopProcessing="true">
                    <match url=".*" />
                    <conditions  logicalGrouping="MatchAll" trackAllCaptures="false">
                        <add input="{REQUEST_FILENAME}" pattern="css|js|jpg|jpeg|png|gif|ico|htm|html" negate="true" />                            
                        <add input="{REQUEST_FILENAME}" matchType="IsFile" ignoreCase="false" negate="true" />
                        <add input="{REQUEST_FILENAME}" matchType="IsDirectory" ignoreCase="false" negate="true" />
                    </conditions>
                    <action type="Rewrite" url="index.php" />
                </rule>
            </rules>
        </rewrite>
    </system.webServer>
</configuration>

remember to update update code for

C:\webroot****\www\backend\web\web.config
C:\webroot****\www\frontend\web\web.config

[copain]

i am using plesk in windows server 2016 the root dir is htdoc apatche,i have configure the web config to point it on my, db.. which folder or file hadles the page directory?