44 lines
1.2 KiB
PHP
44 lines
1.2 KiB
PHP
<?php
|
|
// Configuración del proyecto
|
|
|
|
// Entorno (development o production)
|
|
define('ENVIRONMENT', 'production');
|
|
|
|
// URLs
|
|
define('BASE_URL', 'https://calculos.penki.com.ar');
|
|
define('SITE_NAME', 'Comparador de Precios');
|
|
|
|
// Rutas
|
|
define('ROOT_PATH', __DIR__ . '/..');
|
|
define('DATA_PATH', ROOT_PATH . '/data');
|
|
define('API_PATH', ROOT_PATH . '/api');
|
|
|
|
// Sesiones
|
|
ini_set('session.cookie_httponly', 1);
|
|
ini_set('session.cookie_secure', 1); // Solo HTTPS
|
|
ini_set('session.use_only_cookies', 1);
|
|
ini_set('session.cookie_samesite', 'Strict');
|
|
|
|
// Errores (mostrar solo en desarrollo)
|
|
if (ENVIRONMENT === 'development') {
|
|
error_reporting(E_ALL);
|
|
ini_set('display_errors', 1);
|
|
} else {
|
|
error_reporting(0);
|
|
ini_set('display_errors', 0);
|
|
}
|
|
|
|
// Headers de seguridad
|
|
header('X-Frame-Options: SAMEORIGIN');
|
|
header('X-Content-Type-Options: nosniff');
|
|
header('X-XSS-Protection: 1; mode=block');
|
|
header('Referrer-Policy: strict-origin-when-cross-origin');
|
|
|
|
// CORS (si es necesario)
|
|
if (ENVIRONMENT === 'development') {
|
|
header('Access-Control-Allow-Origin: *');
|
|
header('Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS');
|
|
header('Access-Control-Allow-Headers: Content-Type, Authorization');
|
|
}
|
|
?>
|