- Dynamic loader –
loader.jsfetches pages from thepages/directory so routes remain simple and content is not duplicated. - Animated hero interface with snow effects and a responsive card grid.
- Status badge embedded in the footer showing simulated node and user counts from PHP endpoints.
- Login form protected by Cloudflare Turnstile CAPTCHA, verified both client and server-side.
- Self destruct when the user opens DevTools to inspect page structure or execute code.
- Reusable modal system and embedded footer.
Most endpoints are intended for back‑end consumption. They all return JSON.
| Endpoint | Method | Description |
|---|---|---|
/api/status | GET | Public endpoint that reports current status information. |
/api/login/ | POST | Validate credentials and start a session. |
/api/register/ | POST | Create a new user. Requires a registration token and is normally called from trusted services. |
/api/logs/ | POST | Write an entry to the server logs. Intended for internal use. |
- Passwords are stored using PHP's
password_hashwith the default algorithm. - Sessions use secure, HTTP‑only cookies with the
SameSite=Laxpolicy. - Cloudflare Turnstile protects the login form from bots.
- API responses are JSON encoded and all input is validated server side.
- Logs are kept per day in
database/logsfor auditing.
- Modern ES modules organised into small self‑contained scripts.
- Responsive CSS using custom fonts and a small set of utility classes.
- PHP 8 code following strict types and returning structured JSON.
The project is intentionally minimal and up to date with current industry practices such as secure password handling and CAPTCHA verification.



