Skip to content

Latest commit

 

History

13 Commits

Folders and files

NameName
Last commit message
Last commit date
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

mystic logo

A minimalist, interactive, and animated web-portal demo.

Features

  • Dynamic loaderloader.js fetches pages from the pages/ directory so routes remain simple and content is not duplicated.
  • Animated hero interface with snow effects and a responsive card grid.
  • Status badge embedded in the footer showing simulated node and user counts from PHP endpoints.
  • Login form protected by Cloudflare Turnstile CAPTCHA, verified both client and server-side.
  • Self destruct when the user opens DevTools to inspect page structure or execute code.
  • Reusable modal system and embedded footer.

Screenshots

Home

Modal Popup

Login

API Endpoints

Most endpoints are intended for back‑end consumption. They all return JSON.

EndpointMethodDescription
/api/statusGETPublic endpoint that reports current status information.
/api/login/POSTValidate credentials and start a session.
/api/register/POSTCreate a new user. Requires a registration token and is normally called from trusted services.
/api/logs/POSTWrite an entry to the server logs. Intended for internal use.

Security

  • Passwords are stored using PHP's password_hash with the default algorithm.
  • Sessions use secure, HTTP‑only cookies with the SameSite=Lax policy.
  • Cloudflare Turnstile protects the login form from bots.
  • API responses are JSON encoded and all input is validated server side.
  • Logs are kept per day in database/logs for auditing.

Technology

    No high-level frameworks are used. Made with JS, CSS, HTML, and PHP.

  • Modern ES modules organised into small self‑contained scripts.
  • Responsive CSS using custom fonts and a small set of utility classes.
  • PHP 8 code following strict types and returning structured JSON.

The project is intentionally minimal and up to date with current industry practices such as secure password handling and CAPTCHA verification.