Flat-File PHP Forum Mimarisi ve Geliştirme Rehberi

<?php

declare(strict_types=1);

final class Storage
{
    private static string $storagePath = __DIR__ . '/../storage/';

    /**
     * Belirtilen JSON dosyasını okur ve diziye dönüştürür.
     *
     * @param string $filename
     * @param array<string, mixed> $default
     * @return array<string, mixed>
     */
    public static function readJson(string $filename, array $default = []): array
    {
        $filePath = self::$storagePath . ltrim($filename, '/');
        if (!is_file($filePath)) {
            return $default;
        }

        $content = @file_get_contents($filePath);
        if ($content === false || trim($content) === '') {
            return $default;
        }

        $data = json_decode($content, true, 512, JSON_THROW_ON_ERROR | JSON_UNESCAPED_UNICODE);
        return is_array($data) ? $data : $default;
    }

    /**
     * Dosyayı kilitler, değiştirici fonksiyonu uygular ve diske yazar.
     *
     * @param string $filename
     * @param callable(array<string, mixed>): array<string, mixed> $modifier
     * @return bool
     */
    public static function updateJson(string $filename, callable $modifier): bool
    {
        $filePath = self::$storagePath . ltrim($filename, '/');
        $fp = @fopen($filePath, 'c+');
        if (!$fp) {
            return false;
        }

        if (flock($fp, LOCK_EX)) {
            $fileSize = filesize($filePath);
            $raw = $fileSize > 0 ? (string) fread($fp, $fileSize) : '{}';
            $data = json_decode($raw, true) ?: [];

            $modifiedData = $modifier($data);
            $jsonOutput = json_encode($modifiedData, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE);

            ftruncate($fp, 0);
            rewind($fp);
            fwrite($fp, $jsonOutput);
            fflush($fp);
            flock($fp, LOCK_UN);
            fclose($fp);
            return true;
        }

        fclose($fp);
        return false;
    }
}

<?php

declare(strict_types=1);

final class Plugin
{
    /** @var array<string, array<int, array<int, callable>>> */
    private static array $actions = [];

    /** @var array<string, array<int, array<int, callable>>> */
    private static array $filters = [];

    public static function addAction(string $hook, callable $callback, int $priority = 10): void
    {
        self::$actions[$hook][$priority][] = $callback;
    }

    public static function doAction(string $hook, mixed ...$args): void
    {
        if (empty(self::$actions[$hook])) {
            return;
        }
        ksort(self::$actions[$hook]);
        foreach (self::$actions[$hook] as $callbacks) {
            foreach ($callbacks as $cb) {
                $cb(...$args);
            }
        }
    }

    public static function addFilter(string $hook, callable $callback, int $priority = 10): void
    {
        self::$filters[$hook][$priority][] = $callback;
    }

    public static function applyFilters(string $hook, mixed $value, mixed ...$args): mixed
    {
        if (empty(self::$filters[$hook])) {
            return $value;
        }
        ksort(self::$filters[$hook]);
        foreach (self::$filters[$hook] as $callbacks) {
            foreach ($callbacks as $cb) {
                $value = $cb($value, ...$args);
            }
        }
        return $value;
    }
}

<?php

declare(strict_types=1);

/**
 * Plugin Name: Kod Kopyalama Butonu
 * Description: Mesajlardaki pre etiketlerine bağımsız kopyalama butonu ekler.
 * Version: 1.0.0
 */

Plugin::addAction('theme_footer_after', static function (): void {
    ?>
    <style id="ff-plugin-code-copy-style">
    .code-block-wrapper { position: relative; margin: 1rem 0; }
    .code-copy-btn {
        position: absolute; top: 0.5rem; right: 0.5rem;
        background: #1e293b; color: #cbd5e1; border: 1px solid #334155;
        border-radius: 4px; padding: 0.25rem 0.5rem; font-size: 0.75rem;
        cursor: pointer; transition: all 0.15s ease;
    }
    .code-copy-btn.copied { background: #16a34a; color: #ffffff; }
    </style>

    <script id="ff-plugin-code-copy-script">
    (function() {
        document.querySelectorAll('.post-body pre').forEach(function(block) {
            if (block.closest('.code-block-wrapper')) return;

            var wrapper = document.createElement('div');
            wrapper.className = 'code-block-wrapper';
            block.parentNode.insertBefore(wrapper, block);
            wrapper.appendChild(block);

            var btn = document.createElement('button');
            btn.type = 'button';
            btn.className = 'code-copy-btn';
            btn.textContent = 'Kopyala';

            btn.addEventListener('click', function() {
                var codeText = block.innerText.replace('Kopyala', '').trim();
                navigator.clipboard.writeText(codeText).then(function() {
                    btn.classList.add('copied');
                    btn.textContent = 'Kopyalandı! ✓';
                    setTimeout(function() {
                        btn.classList.remove('copied');
                        btn.textContent = 'Kopyala';
                    }, 2000);
                });
            });
            wrapper.appendChild(btn);
        });
    })();
    </script>
    <?php
});

<?php

declare(strict_types=1);

final class EmbedParser
{
    public static function buildEmbedHtml(string $url): ?string
    {
        // 1. YouTube Shorts (Dikey 9:16 Oynatıcı)
        if (preg_match('/youtube\.com\/shorts\/([a-zA-Z0-9_-]{11})/i', $url, $matches)) {
            $videoId = htmlspecialchars($matches[1], ENT_QUOTES, 'UTF-8');
            return '<div class="embed-center-wrap">'
                . '<div class="embed-responsive embed-shorts" style="max-width:340px;aspect-ratio:9/16;margin:0 auto;">'
                . '<iframe src="[https://www.youtube.com/embed/](https://www.youtube.com/embed/)' . $videoId . '" loading="lazy" allowfullscreen></iframe>'
                . '</div></div>';
        }

        // 2. Standart YouTube (Yatay 16:9 Oynatıcı)
        if (preg_match('/(?:youtube\.com\/watch\?v=|youtu\.be\/)([a-zA-Z0-9_-]{11})/i', $url, $matches)) {
            $videoId = htmlspecialchars($matches[1], ENT_QUOTES, 'UTF-8');
            return '<div class="embed-center-wrap">'
                . '<div class="embed-responsive embed-youtube" style="aspect-ratio:16/9;width:100%;">'
                . '<iframe src="[https://www.youtube.com/embed/](https://www.youtube.com/embed/)' . $videoId . '" loading="lazy" allowfullscreen></iframe>'
                . '</div></div>';
        }

        // 3. Facebook Reels ve Normal Video Ayrımı
        if (preg_match('/facebook\.com\/(reel|videos|watch)/i', $url)) {
            $isReel = (bool) preg_match('/facebook\.com\/reel/i', $url);
            $ratioStyle = $isReel ? 'max-width:340px;aspect-ratio:9/16;margin:0 auto;' : 'aspect-ratio:16/9;width:100%;';
            $encoded = urlencode($url);

            return '<div class="embed-center-wrap">'
                . '<div class="embed-responsive" style="' . $ratioStyle . '">'
                . '<iframe src="[https://www.facebook.com/plugins/video.php?href=](https://www.facebook.com/plugins/video.php?href=)' . $encoded . '&show_text=false" loading="lazy" allowfullscreen></iframe>'
                . '</div></div>';
        }

        // 4. Spotify Oynatıcı (Şarkı: 152px, Çalma Listesi: 352px Dinamik Yükseklik)
        if (preg_match('/open\.spotify\.com\/(track|album|playlist)\/([a-zA-Z0-9]+)/i', $url, $matches)) {
            $type = strtolower($matches[1]);
            $spotifyId = htmlspecialchars($matches[2], ENT_QUOTES, 'UTF-8');
            $height = ($type === 'track') ? '152' : '352';

            return '<div class="embed-center-wrap" style="width:100%;max-width:680px;">'
                . '<iframe src="[https://open.spotify.com/embed/](https://open.spotify.com/embed/)' . $type . '/' . $spotifyId . '" height="' . $height . '" style="width:100%;border-radius:12px;border:0;" loading="lazy"></iframe>'
                . '</div>';
        }

        return null;
    }
}

<?php

declare(strict_types=1);

final class ThreadRoutingController
{
    public static function resolveThread(int $threadId): void
    {
        $thread = Storage::readJson('threads/' . $threadId . '.json', []);

        // Konu dosyası mevcut değilse yönlendirme tablosunu tara
        if (empty($thread)) {
            $redirects = Storage::readJson('redirects.json', []);
            $targetThreadId = (int) ($redirects[(string) $threadId] ?? 0);

            if ($targetThreadId > 0) {
                $targetUrl = '/konu/' . $targetThreadId . '/';
                http_response_code(301);
                header('Location: ' . $targetUrl);
                exit;
            }

            // Haritada da yoksa standart 404 sayfasına yönlendir
            http_response_code(404);
            require __DIR__ . '/../themes/default/404.php';
            exit;
        }

        // Konu bulunduysa sayfayı oluştur
        require __DIR__ . '/../themes/default/thread.php';
    }
}

<?php

declare(strict_types=1);

final class FavoriteService
{
    public static function toggle(int $threadId, int $userId): bool
    {
        if ($threadId <= 0 || $userId <= 0) {
            return false;
        }

        $isFavorited = false;

        // 1. Kullanıcı profilindeki favori listesini güncelle
        Storage::updateJson('users/' . $userId . '.json', static function (array $user) use ($threadId, &$isFavorited): array {
            $favs = array_map('intval', (array) ($user['favorites'] ?? []));
            if (in_array($threadId, $favs, true)) {
                $favs = array_values(array_filter($favs, static fn(int $id): bool => $id !== $threadId));
                $isFavorited = false;
            } else {
                $favs[] = $threadId;
                $isFavorited = true;
            }
            $user['favorites'] = array_unique($favs);
            return $user;
        });

        // 2. threads_index.json dosyasını senkronize et
        Storage::updateJson('threads_index.json', static function (array $index) use ($threadId, $userId, $isFavorited): array {
            foreach ($index as $k => $item) {
                if ((int) ($item['id'] ?? 0) === $threadId) {
                    $favs = array_map('intval', (array) ($item['favorites'] ?? []));
                    if ($isFavorited) {
                        $favs[] = $userId;
                    } else {
                        $favs = array_values(array_filter($favs, static fn(int $id): bool => $id !== $userId));
                    }
                    $index[$k]['favorites'] = array_values(array_unique($favs));
                    break;
                }
            }
            return $index;
        });

        return $isFavorited;
    }
}

<?php
declare(strict_types=1);

$currentUserId = 1; // Aktif oturum açmış kullanıcı ID
$userFavThreadIds = [12, 45, 89]; // Kullanıcının oturumundaki favori ID listesi
?>

<!-- Konu Listeleme Döngüsü -->
<?php foreach ($threads as $t): ?>
    <?php
    $tId = (int) ($t['id'] ?? 0);
    $isFav = in_array($tId, $userFavThreadIds, true);
    ?>
    <article class="thread-item <?= $isFav ? 'is-favorited-thread' : '' ?>">
        <h2 class="thread-title">
            <a href="/konu/<?= $tId ?>/"><?= htmlspecialchars((string)$t['title'], ENT_QUOTES, 'UTF-8') ?></a>
        </h2>
    </article>
<?php endforeach; ?>

<style>
.thread-item.is-favorited-thread {
    background: #eff6ff !important;
    border-left: 3px solid #3b82f6 !important;
}
</style>

// YANLIŞ: Eşzamanlı isteklerde dosyayı bozar
$data = json_decode(file_get_contents('threads.json'), true);
$data[] = $newThread;
file_put_contents('threads.json', json_encode($data));

// DOĞRU: Atomik dosya kilidiyle okuma ve yazma koruması
Storage::updateJson('threads.json', static function(array $data) use ($newThread): array {
    $data[] = $newThread;
    return $data;
});

// YANLIŞ: Aşırı katı ve port değişikliklerinde başarısız olan doğrulama
if ($_SERVER['HTTP_ORIGIN'] !== '[https://example.com](https://example.com)') {
    throw new Exception('CSRF origin mismatch');
}

// DOĞRU: Kriptografik oturum tokenini doğrulayan güvenli kontrol
if (!hash_equals($_SESSION['csrf_token'] ?? '', $_POST['csrf_token'] ?? '')) {
    throw new Exception('Geçersiz güvenlik bileti.');
}