From 59cd40235bf4746a119421609b25d7e9b7f65f83 Mon Sep 17 00:00:00 2001
From: Geo Halkiadakis <gchalkiadakis@sklavenitis.co.gr>
Date: Mon, 15 May 2023 18:15:37 +0300
Subject: refactoring framework defaults

---
 public/app/config/app_constants.php     | 708 --------------------------------
 public/app/config/setup-application.php | 478 +++++++++++++++++++++
 public/app/config/setup-framework.php   | 469 +++++++++++++++++++++
 public/app/routes/api.php               |  46 +--
 public/app/routes/frontend.php          |   6 +
 5 files changed, 974 insertions(+), 733 deletions(-)
 delete mode 100644 public/app/config/app_constants.php
 create mode 100644 public/app/config/setup-application.php
 create mode 100644 public/app/config/setup-framework.php

(limited to 'public/app')

diff --git a/public/app/config/app_constants.php b/public/app/config/app_constants.php
deleted file mode 100644
index 6974bd8..0000000
--- a/public/app/config/app_constants.php
+++ /dev/null
@@ -1,708 +0,0 @@
-<?php
-/** Custom Application Constants
- * -----------------------------------------------------------------------------
- * 
- * Constants defined for your current application:
- * 
- * 1. Main constants (Names, Labels, securoty defaults, etc)
- * 
- * 2. Credentials and sub-configuration of main services
- * 
- * 3. Other custom constants
- * 
- * -----------------------------------------------------------------------------
- */
-
-/** Preload environmental file
- * Setting up main constants via en envoronment file is HIGHLY RECOMMENDED;
- * 
- * read ini file if exist
- */
-if (file_exists("../core/auth/.env")) {
-  $env = parse_ini_file("../core/auth/.env");
-}
-
-
-
-
-
-## -----------------------------------------------------------------------------
-##
-##        - - - -- -- ---  M A I N  C O N S T A N T S  --- -- -- - - -
-##    Main constants (names, labels, default roles, security defaults, etc
-##
-## -----------------------------------------------------------------------------
-
-
-
-/** Main default constants / strings / names / etc
- * -----------------------------------------------------------------------------
- */
-
-define('SITE_TITLE', 'schoolGov');      // Site Title (the end-users' title)
-
-
-
-/** Autoload paths 
- * -----------------------------------------------------------------------------
- * 
- * CLASSPATHS : array of paths where classes are saved
- * 
- * NOTE:
- * if the custom autoloader is used (instead of composer's)
- * then you need to defing CLASSPATHS constant-array too;
- * 
- * In most cases you won't need this,
- * so comment the next lines out of the code-base
- * 
- * -----------------------------------------------------------------------------
- */
-# define('CLASSPATHS', array(
-#     '/../core/classes/',      // core classes
-#     '/app/controllers/',      // controller classes
-#     '/app/models/',           // model classes
-#     '/app/extends/',          // extending core classes
-#     '/../vendor/'             // vendor/dependency classes
-#   )
-# );
-
-
-
-/** FileSession Path
- * --- -- -- - - -
- * if FileSession is selected, a path for session-files is needed
- * 
- * TODO:
- * also, the hybrid sessioning (in progress) will need this setting
- * 
- * NOTE:
- * DefaultSession is also file-based but to not need a file-path setting
- * (php will handle any file-needed actions to the file-system)
- */
-
-# define('FILESESSION_PATH', '../storage/session');
-
-
-
-/** Session and cookie names
- * --- -- -- - - -
- */
-define('SESSION_NAME', 'offticket');    // cookie for session (office ticket)
-define('CONNECTION_COOKIE', 'con');     // cookie for connection
-define('MAX_SESSION_LIFE', 2*60*60);    // maximum session lifetime (2 hours)
-
-
-
-/** SECURITY SETTINGS ///////////////////////////////////////////////////////////
- * -----------------------------------------------------------------------------
- * 
- * Cross Site Request Forgery
- * ---
- * Enables a CSRF cookie token to be set. When set to TRUE, token will be
- * checked on a submitted form. If you are accepting user data, it is strongly
- * recommended CSRF protection be enabled.
- * -----------------------------------------------------------------------------
- */
-
-define('CSRF_PROTECTION', false);
-
-define('CSRF_TOKEN_NAME', 'csrf_test_name');        // token name
-
-define('CSRF_COOKIE_NAME', 'csrf_cookie_name');     // cookie name
-
-define('CSRF_EXPIRE', 7200);            // The number in seconds the token should expire.
-
-define('CSRF_REGENERATE', TRUE);        // Regenerate token on every submission
-
-define('CSRF_EXCLUDE_URIS', array());   // Array of URIs which ignore CSRF checks
- 
-
-
-
-## -----------------------------------------------------------------------------
-##
-## - - - -- -- ---  C O N N E C T I O N   C R E D E N T I A L S  --- -- -- - - -
-##
-## -----------------------------------------------------------------------------
-
-
-
-/** SERVICE PARAMETRES
- * -----------------------------------------------------------------------------
- * 
- * Connection parametres and credentials for accssing services 
- * needed by the application; Such services may be..
- * 
- * - RDBMS
- *   -- MySQL
- *   -- PotgresSQL
- * 
- * - Caching services
- *   -- Redis
- *   -- MemCached
- * 
- * Edit only the constants needed by the application;
- * Comment those you do not need;
- * 
- * /////////////////////////////////////////////////////////////////////////////
- */
-
-/** DATABASE CONNECTION PARAMETRES
- * -----------------------------------------------------------------------------
- * Production and staging environments may use different databases.
- * 
- * A safe practice is to keep credentials outside plain files like this one
- * in environmental variable or other secret file etc.
- * 
- * Uncomment/enable each group of definitions suits your case to define
- * the credentials needed for accessing the database
- */
-
-define('DB_NAME', $ini['DB_NAME']);
- 
-define('DB_USER', $ini['DB_USER']);
-  
-define('DB_PASS', $ini['DB_PASS']);
-  
-/** NOTE:
- * PDO_HOST can be a hostname/port combination -or- a unix socket
- * 
- * ...examples:
- * define('PDO_HOST', 'host=/localhost')    ## hostname case
- * define('PDO_HOST', 'host=/localhost;port=3456')    ## hostname/port case
- * define('PDO_HOST', 'unix_socket=/sql/ex123:europe:some-db');   ## unix socket
- * define('PDO_HOST', 'unix_socket=/cloudsql/name-123456:europe-west4:name-db-eu');
- */
- 
-define('PDO_HOST', $ini['PDO_HOST']);
-  
-define('DB_TIMEZONE', "SET time_zone = 'Europe/Athens'");
- 
- 
- 
- 
-/** CACHED SERVICES
- * 
- * impemented services:
- * 
- * - File Cache
- * - Redis
- * - Memcached
- * 
- * NOTE:
- * Both Redis and Memcached configurations are given as a template to work on;
- * In most cases the default values should do the job -- of course you need to
- * read the README file (check the project's root);
- * As these caching services are not fully tested you may need to ochestrate
- * the services in detail or edit the connection strings into the core classes
- * (hosted under the '/core/classes/cacher' folder)
- */
-
- define('FILECACHE_PATH', APP_ROOT.'/../storage/cache/');     // if CACHE_DRIVER is set to 'FileCache'
-
- define('MEDIA_STORAGE_ROOT', APP_ROOT.'/../storage/uploads/');    // Media files root directory
- 
- 
- 
- # define('MEMCAHCED_SERVER', '127.0.0.1');        // if CACHE_DRIVER is set to 'MemCached'
- 
-/** REDIS SERVICE
- * -----------------------------------------------------------------------------
- * Most of the times Redis is running on 'localhost' (host = '127.0.0.1')
- * When implemented via anom's docker-composer (redis via bridge) then you need
- * do declare the hostname as 'redis'
- */
-
-# define('REDIS_HOST', '127.0.0.1');    // if CACHE_DRIVER is set to 'RedisCache'
-# if (!defined('REDIS_HOST'))           define('REDIS_HOST', 'redis');
-# 
-# if (!defined('REDIS_PORT'))           define('REDIS_PORT', 6379);
-# 
-# if (!defined('REDIS_PASS'))           define('REDIS_PASS', null);
- 
- 
-/** MEMCACHED
- * -----------------------------------------------------------------------------
- * Memcached looks very much like Redis (plus, both are serving from RAM)
- * Usualy Memcashed is running localy so host is 'localhost' ('127.0.0.1')
- * If you use the framework's docker-composer implementation then
- * the hostname is 'anomemcached'
- */
-
-# if (!defined('MEMCACHE_HOST'))  define('MEMCACHE_HOST', 'anomemcached');
- 
-
-
-
-
-
-/** email setup
- * --- -- -- - - -
- */
-   // SMTP
-define('MAIL_MAILER', $env['MAIL_MAILER']);
-define('MAIL_HOST', $env['MAIL_HOST']);
-define('MAIL_PORT', $env['MAIL_PORT']);
-define('MAIL_USERNAME', $env['MAIL_USERNAME']);
-define('MAIL_PASSWORD', $env['MAIL_PASSWORD']);
-define('MAIL_ENCRYPTION', $env['MAIL_ENCRYPTION']);
-   // Mailjet
-define('MAILJET_APIKEY', $env['MAILJET_APIKEY']);   // apikey
-define('MAILJET_SECRET', $env['MAILJET_SECRET']);   // secret
-define('MAILJET_TICKET', $env['MAILJET_TICKET']);   // apikey:secret
-   // sender info
-define('MAIL_FROM_NAME', $env['MAIL_FROM_NAME']);
-define('NO_REPLY_EMAIL', $env['NO_REPLY_EMAIL']);
-define('REPLY_TO_EMAIL', $env['REPLY_TO_EMAIL']);
-
-// default mail service; options so far: [ mailjet | phpmailer ]
-define('DEFAULT_MAIL_SERVICE', 'mailjet');
-
-
-// DEFAULT VALUES //////////////////////////////////////////////////////////////
-// -----------------------------------------------------------------------------
-
-// default privileges (for the subscribed user)
-// (array of privilege aliases)
-// --- -- -- - - -
-define('DEFAULT_PRIVILEGES', [
-    1,      // economics, level 1
-    5       // programming. level 1
-]);
-
-
-// User Roles
-// --- -- -- - - -
-define('Admin', 1);
-define('Secretary', 2);
-define('Teacher', 3);
-
-
-// ACCESS HISTORY //////////////////////////////////////////////////////////////
-// -----------------------------------------------------------------------------
-// (user-)access types
-
-define('TRACK_LOGIN', 1);       // login / logout
-define('TRACK_ACCOUNT', 2);     // create user / activate account / modidy profile
-define('TRACK_REQUESTS', 4);    // order / payment / refund etc...
-
-// access type strings
-// ---
-define('USER_ACCESS_TYPE', [
-    1 => 'Login',
-    2 => 'Account',
-    3 => 'Request'
-]);
-
-
-
-// ERRORS AND ERROR MESSAGES ///////////////////////////////////////////////////
-// -----------------------------------------------------------------------------
-
-define('EMPTY_REQUIRED_FIELDS', 'Δεν έχουν συμπληρωθεί όλα τα υποχρεωτικά πεδία');
-
-
-
-// ASSETS: PATHS USED HEAVILY //////////////////////////////////////////////////
-// -----------------------------------------------------------------------------
-// these paths are used in order to easily find and autoload useful elemets
-
-
-// JAVASCRIPT LIBRARY PATHS
-// -----------------------------------------------------------------------------
-define('JS_DIR', '/content/');      // <base> path to contruct link
-
-
-
-// CSS ASSET PATHS
-// -----------------------------------------------------------------------------
-define('CSS_DIR', '/content/css/');    // <base> path to contruct link
-define('CSS_FILES', array(            // path after <base> to the actual file
-  'main' => 'main.min.css',
-  'filter' => 'filter.css',
-  'overides' => 'overides.css',
-  )
-);
-
-
-
-// Mesagges ////////////////////////////////////////////////////////////////////
-// -----------------------------------------------------------------------------
-
-// 404
-// ---
-define('PAGE_404_TITLE', '404: Not Found');
-
-// registration
-// ---
-define('REGISTRATION_SUCCESS', "<h3>Επιτυχής Εγγραφή</h3>
-  <p>
-      Παρακαλώ ελέγξτε το email σας και ακολουθήστε το σύνδεσμο ενεργοποίησης
-      που σας 'εχει αποσταλεί, ώστε να έχετε πρόσβαση σε επιπλέον περιεχόμενο του site
-  </p>"
-);
-define ('REGISTRATION_USER_EXISTS', "<h3>Αποτυχία Εγγραφής</h3>
-  <p>
-      Υπάρχει ήδη χρήστης με αυτό το email. Αν δεν θυμάστε το password
-      μπορείτε να κάνετε επαναφορά του ακολουθώντας
-      <a href='/reset-password'>αυτό το σύνδεσμο</a>.
-  </p>"
-);
-
-
-// activation
-// ---
-define('ACCOUNT_ACTIVATED_TITLE', 'Ο λογαριασμός σας έχει ενεργοποιηθεί');
-define('ACCOUNT_ACTIVATED_MESSAGE', 'Τώρα μπορείτε να
-  <a href="/login">συνδεθείτε στο σύστημα</a>.');
-define('NOT_VALID_ACTIVATION_TITLE', 'Σφάλμα!');
-define('NOT_VALID_ACTIVATION_MESSAGE', 'Ο λογαριασμός δεν έχει ενεργοποιηθεί.
-    Ξαναδοκιμάστε αργότερα κι αν το σφάλμα επιμείνει, επικοινωνήστε με την υπεύθυνη του προγράμμαρος.');
-
-define ('PETITION_TYPE', [
-    1 => 'common',
-    2 => 'penalty'
-]);
-
-
-
-// forms
-// --- -- -- - - -
-
-// registration/activation form (from invitation)
-// ---
-define('REGISTRATION_FORM', [
-    'defaults' => [
-        'outer_class' => 'col-12',
-        'inner_class' => 'form-control',
-        'type' => 'text',
-        'source' => '\app\controllers\User::current'
-    ],
-    'form' => [
-        [
-            'name' => 'first_name',
-            'label' => 'Όνομα',
-            'value' => 'auto',
-            'attributes' => ['required']
-        ],
-        [
-            'name' => 'last_name',
-            'label' => 'Επίθετο',
-            'value' => 'auto',
-            'attributes' => ['required']
-        ],
-        [
-            'name' => 'email',
-            'label' => 'Email',
-            'type' => 'email',
-            'value' => 'auto',
-            'attributes' => ['required']
-        ],
-        [
-            'name' => 'father_name',
-            'label' => 'Πατρώνυμο',
-            'value' => 'auto',
-            'attributes' => ['required']
-        ],
-        [
-            'name' => 'registration_number',
-            'label' => 'Αριθμός μητρώου',
-            'class' => 'col-8',
-            'value' => 'auto',
-            'attributes' => ['required']
-        ],
-        [
-            'name' => 'sector',
-            'label' => 'Κλάδος / Ειδικότητα',
-            'value' => 'auto',
-            'type' => 'select',
-            'attributes' => ['required'],
-            'options' => [
-                'ΠΕ01 ΘΕΟΛΟΓΟΙ',
-                'ΠΕ02 ΦΙΛΟΛΟΓΟΙ',
-                'ΠΕ02.50 ΦΙΛΟΛΟΓΟΙ ΕΙΔΙΚΗΣ ΑΓΩΓΗΣ',
-                'ΠΕ03 ΜΑΘΗΜΑΤΙΚΟΙ',
-                'ΠΕ03.50 ΜΑΘΗΜΑΤΙΚΟΙ ΕΙΔΙΚΗΣ ΑΓΩΓΗΣ',
-                'ΠΕ04.01 ΦΥΣΙΚΟΙ',
-                'ΠΕ04.01.50 ΦΥΣΙΚΟΙ ΕΙΔΙΚΗΣ ΑΓΩΓΗΣ',
-                'ΠΕ04.02 ΧΗΜΙΚΟΙ',
-                'ΠΕ04.04 ΒΙΟΛΟΓΟΙ',
-                'ΠΕ05 ΓΑΛΛΙΚΗΣ ΦΙΛΟΛΟΓΙΑΣ',
-                'ΠΕ06 ΑΓΓΛΙΚΗΣ ΦΙΛΟΛΟΓΙΑΣ',
-                'ΠΕ07 ΓΕΡΜΑΝΙΚΗΣ ΦΙΛΟΛΟΓΙΑΣ',
-                'ΠΕ08 ΚΑΛΛΙΤΕΧΝΙΚΩΝ',
-                'ΠΕ11 ΦΥΣΙΚΗΣ ΑΓΩΓΗΣ',
-                'ΠΕ23-ΣΔΕΥ ΨΥΧΟΛΟΓΟΙ',
-                'ΠΕ30-ΣΔΕΥ ΚΟΙΝΩΝΙΚΟΙ ΛΕΙΤΟΥΡΓΟΙ',
-                'ΠΕ78 ΚΟΙΝΩΝΙΚΩΝ ΕΠΙΣΤΗΜΩΝ',
-                'ΠΕ79.01 ΜΟΥΣΙΚΗΣ ΕΠΙΣΤΗΜΗΣ',
-                'ΠΕ80 ΟΙΚΟΝΟΜΙΑΣ',
-                'ΠΕ81 ΠΟΛ.ΜΗΧΑΝΙΚΩΝ-ΑΡΧΙΤΕΚΤΟΝΩΝ',
-                'ΠΕ82 ΜΗΧΑΝΟΛΟΓΩΝ',
-                'ΠΕ86 ΠΛΗΡΟΦΟΡΙΚΗΣ',
-                'ΠΕ88.01 ΓΕΩΠΟΝΟΙ'
-            ]
-        ],
-        [
-            'name' => 'belonging_school',
-            'label' => 'Σχολείο τοποθέτησης',
-            'value' => 'auto',
-            'attributes' => ['required']
-        ],
-        // [    // working school = (obviously) is the current school
-        //     'name' => 'working_school',
-        //     'label' => 'Σχολείο εργασίας',
-        //     'attributes' => ['required']
-        // ],
-        [
-            'name' => 'position',
-            'label' => 'Θέση',
-            'type' => 'select',
-            'value' => 'auto',
-            'attributes' => ['required'],
-            'options' => []
-        ],
-        [
-            'name' => 'phone',
-            'label' => 'Τηλέφωνο',
-            'class' => 'col-8',
-            'value' => 'auto',
-            'attributes' => ['required']
-        ],
-        [
-            'name' => 'password',
-            'label' => 'Κωδικός πρόσβασης',
-            'type' => 'password',
-            'class' => 'col-8',
-            'attributes' => ['required']
-        ],
-        [
-            'name' => 'confirm_password',
-            'label' => 'Επαλήθευση κωδικού πρόσβασης',
-            'type' => 'password',
-            'class' => 'col-8',
-            'attributes' => ['required']
-        ]
-    ]
-]);
-
-// common requesy form (for any application)
-// ---
-define('COMMON_REQUEST_FORM', [
-    'defaults' => [
-        'outer_class' => 'col-12',
-        'inner_class' => 'form-control',
-        'type' => 'text',
-        'source' => '\app\controllers\User::current'
-    ],
-    'form' => [
-        [
-            'name' => 'subject',
-            'label' => 'Θέμα (χαρακτηριστικός τίτλος για αναφορά)',
-            'attributes' => ['required']
-        ],
-        [
-            'name' => 'first_name',
-            'label' => 'Όνομα',
-            'attributes' => ['auto']
-        ],
-        [
-            'name' => 'last_name',
-            'label' => 'Επίθετο',
-            'attributes' => ['auto']
-        ],
-        [
-            'name' => 'email',
-            'label' => 'e-mail',
-            'type' => 'email',
-            'attributes' => ['auto']
-        ],
-        [
-            'name' => 'father_name',
-            'label' => 'Πατρώνυμο',
-            'attributes' => ['auto']
-        ],
-        [
-            'name' => 'registration_number',
-            'label' => 'Αριθμός μητρώου',
-            'class' => 'col-5',
-            'attributes' => ['auto']
-        ],
-        [
-            'name' => 'sector',
-            'label' => 'Κλάδος / Ειδικότητα',
-            'attributes' => ['auto']
-        ],
-        [
-            'name' => 'belonging_school',
-            'label' => 'Σχολείο τοποθέτησης',
-            'attributes' => ['required']
-        ],
-        [
-            'name' => 'working_school',
-            'label' => 'Σχολείο εργασίας',
-            'attributes' => ['required']
-        ],
-        [
-            'name' => 'position',
-            'label' => 'Θέση',
-            'type' => 'select',
-            'source' => 'positions',
-            'attributes' => ['required']
-        ],
-        [
-            'name' => 'phone',
-            'label' => 'Τηλέφωνο',
-            'attributes' => ['required']
-        ],
-        [
-            'name' => 'request',
-            'label' => 'Αίτημα (πχ, Παρακαλώ να μου χορηγήσετε ...)',
-            'type' => 'textarea',
-            'attributes' => ['required']
-        ],
-        [
-            'name' => 'date',
-            'label' => 'Ημερομηνία αίτησης',
-            'type' => 'date',
-            'attributes' => ['required']
-        ]
-    ]
-]);
-
-// penalty form
-// ---
-
-define('PENALTY_FORM', [
-  'defaults' => [
-      'outer_class' => 'col-12',
-      'inner_class' => 'form-control',
-      'type' => 'text',
-      'source' => 'user'
-  ],
-  'form' => [
-      [
-          'name' => 'subject',
-          'label' => 'Θέμα (χαρακτηριστικός τίτλος για αναφορά)',
-          'attributes' => ['required']
-      ],
-      [
-          'label' => '',
-          'type' => 'label'
-      ],
-      [
-          'label' => 'Πειθαρχική υπόθεση',
-          'type' => 'label'
-      ],
-      [
-        'name' => 'of_article',
-        'label' => 'του/της/των...',
-        'type' => 'select',
-        'options' => [
-            'του μαθητή',
-            'της μαθήτριας',
-            'των μαθητών',
-            'των μαθητριών'
-        ],
-        'class' => 'col-md-4',
-        'attributes' => ['required']
-      ],
-      [
-          'name' => 'student_names',
-          'label' => '(ονοματεπώνυ-μο/μα, πτώση γενική)',
-          'type' => 'textarea',
-          'class' => 'col-md-8',
-          'attributes' => ['required']
-      ],
-      [
-          'name' => 'of_department',
-          'label' => 'του τμήματος...',
-          'class' => 'col-md-4',
-          'attributes' => ['required']
-      ],
-      [
-          'name' => 'date',
-          'label' => 'Ημερομηνία',
-          'type' => 'date',
-          'class' => 'col-md-4',
-          'attributes' => ['required']
-      ],
-      [
-          'name' => 'time',
-          'label' => 'Ώρα',
-          'class' => 'col-md-4',
-          'attributes' => ['required']
-      ],
-      [
-          'name' => 'place',
-          'label' => 'Τόπος',
-          'type' => 'select',
-          'options' => [
-              'Γραφείο Διευθηντή',
-              'Γραφείο Καθηγητών'
-          ],
-          'attributes' => ['required']
-      ],
-      [
-          'name' => 'rapporteur',
-          'label' => 'εισηγητής',
-          'type' => 'select',
-          'source' => '\app\extends\Cache_service::all_users',
-          'attributes' => ['required']
-      ],
-      [
-          'name' => 'charge',
-          'label' => 'Περιγραφή συμβάντος:',
-          'type' => 'textarea',
-          'attributes' => ['required']
-      ],
-      [
-          'name' => 'apology',
-          'label' => 'Απολογία: (μαθητή/-των)',  // + of_student
-          'type' => 'textarea',
-          'attributes' => []
-      ],
-      [
-          'name' => 'decision_reasoning',
-          'label' => 'Αιτιολογία απόφασης (πχ. Επειδή...)',
-          'type' => 'textarea',
-          'attributes' => []
-      ],
-      [
-          'label' => 'Το Πειθαρχικό Συμβούλιο',
-          'type' => 'label'
-      ],
-      [
-          'name' => 'decision',
-          'label' => 'Αποφασίζει',
-          'type' => 'select',
-          'options' => [
-              'προφορική επίπληξη',
-              'ωριαία αποβολή',
-              'ημερήσια αποβολή'
-          ],
-          'attributes' => []
-      ],
-      [
-          'name' => 'decision_more',
-          'label' => '(μη τυποποιημένο κείμενο απόφασης)',
-          'attributes' => []
-      ],
-      [
-          'name' => 'president',
-          'label' => 'Πρόεδρος συνεδρίασης',
-          'type' => 'select',
-          'source' => '\app\extends\Cache_service::all_users',
-          'attributes' => ['required']
-      ],
-      [
-          'name' => 'members',
-          'label' => 'Μέλη',
-          'type' => 'select',
-          'attributes' => ['required', 'multiple'],
-          'source' => '\app\extends\Cache_service::all_users'
-      ]
-  ]
-]);
-
-
diff --git a/public/app/config/setup-application.php b/public/app/config/setup-application.php
new file mode 100644
index 0000000..ec9a7bb
--- /dev/null
+++ b/public/app/config/setup-application.php
@@ -0,0 +1,478 @@
+<?php
+/** SETUP APPLICATION
+ * -----------------------------------------------------------------------------
+ *
+ * Define application specific constants
+ * 
+ * ----------------------------------------------------------------------------- 
+ */
+
+
+// email setup /////////////////////////////////////////////////////////////////
+// -----------------------------------------------------------------------------
+
+    // SMTP
+define('MAIL_MAILER', $env['MAIL_MAILER']);
+define('MAIL_HOST', $env['MAIL_HOST']);
+define('MAIL_PORT', $env['MAIL_PORT']);
+define('MAIL_USERNAME', $env['MAIL_USERNAME']);
+define('MAIL_PASSWORD', $env['MAIL_PASSWORD']);
+define('MAIL_ENCRYPTION', $env['MAIL_ENCRYPTION']);
+    // Mailjet
+define('MAILJET_APIKEY', $env['MAILJET_APIKEY']);   // apikey
+define('MAILJET_SECRET', $env['MAILJET_SECRET']);   // secret
+define('MAILJET_TICKET', $env['MAILJET_TICKET']);   // apikey:secret
+    // sender info
+define('MAIL_FROM_NAME', $env['MAIL_FROM_NAME']);
+define('NO_REPLY_EMAIL', $env['NO_REPLY_EMAIL']);
+define('REPLY_TO_EMAIL', $env['REPLY_TO_EMAIL']);
+
+// default mail service; options so far: [ mailjet | phpmailer ]
+define('DEFAULT_MAIL_SERVICE', 'mailjet');
+
+
+// DEFAULT VALUES //////////////////////////////////////////////////////////////
+// -----------------------------------------------------------------------------
+
+// default privileges (for the subscribed user)
+// (array of privilege aliases)
+// --- -- -- - - -
+define('DEFAULT_PRIVILEGES', [
+    1,      // economics, level 1
+    5       // programming. level 1
+]);
+
+
+// User Roles
+// --- -- -- - - -
+define('Admin', 1);
+define('Secretary', 2);
+define('Teacher', 3);
+
+
+// ACCESS HISTORY //////////////////////////////////////////////////////////////
+// -----------------------------------------------------------------------------
+// (user-)access types
+
+define('TRACK_LOGIN', 1);       // login / logout
+define('TRACK_ACCOUNT', 2);     // create user / activate account / modidy profile
+define('TRACK_REQUESTS', 4);    // order / payment / refund etc...
+
+// access type strings
+// ---
+define('USER_ACCESS_TYPE', [
+    1 => 'Login',
+    2 => 'Account',
+    3 => 'Request'
+]);
+
+
+
+// ERRORS AND ERROR MESSAGES ///////////////////////////////////////////////////
+// -----------------------------------------------------------------------------
+
+define('EMPTY_REQUIRED_FIELDS', 'Δεν έχουν συμπληρωθεί όλα τα υποχρεωτικά πεδία');
+
+
+
+// ASSETS: PATHS USED HEAVILY //////////////////////////////////////////////////
+// -----------------------------------------------------------------------------
+// these paths are used in order to easily find and autoload useful elemets
+
+
+// JAVASCRIPT LIBRARY PATHS
+// -----------------------------------------------------------------------------
+define('JS_DIR', '/content/');      // <base> path to contruct link
+
+
+
+// CSS ASSET PATHS
+// -----------------------------------------------------------------------------
+define('CSS_DIR', '/content/css/');    // <base> path to contruct link
+define('CSS_FILES', array(            // path after <base> to the actual file
+  'main' => 'main.min.css',
+  'filter' => 'filter.css',
+  'overides' => 'overides.css',
+  )
+);
+
+
+
+// Mesagges ////////////////////////////////////////////////////////////////////
+// -----------------------------------------------------------------------------
+
+// 404
+// ---
+define('PAGE_404_TITLE', '404: Not Found');
+
+// registration
+// ---
+define('REGISTRATION_SUCCESS', "<h3>Επιτυχής Εγγραφή</h3>
+  <p>
+      Παρακαλώ ελέγξτε το email σας και ακολουθήστε το σύνδεσμο ενεργοποίησης
+      που σας 'εχει αποσταλεί, ώστε να έχετε πρόσβαση σε επιπλέον περιεχόμενο του site
+  </p>"
+);
+define ('REGISTRATION_USER_EXISTS', "<h3>Αποτυχία Εγγραφής</h3>
+  <p>
+      Υπάρχει ήδη χρήστης με αυτό το email. Αν δεν θυμάστε το password
+      μπορείτε να κάνετε επαναφορά του ακολουθώντας
+      <a href='/reset-password'>αυτό το σύνδεσμο</a>.
+  </p>"
+);
+
+
+// activation
+// ---
+define('ACCOUNT_ACTIVATED_TITLE', 'Ο λογαριασμός σας έχει ενεργοποιηθεί');
+define('ACCOUNT_ACTIVATED_MESSAGE', 'Τώρα μπορείτε να
+  <a href="/login">συνδεθείτε στο σύστημα</a>.');
+define('NOT_VALID_ACTIVATION_TITLE', 'Σφάλμα!');
+define('NOT_VALID_ACTIVATION_MESSAGE', 'Ο λογαριασμός δεν έχει ενεργοποιηθεί.
+    Ξαναδοκιμάστε αργότερα κι αν το σφάλμα επιμείνει, επικοινωνήστε με την υπεύθυνη του προγράμμαρος.');
+
+define ('PETITION_TYPE', [
+    1 => 'common',
+    2 => 'penalty'
+]);
+
+
+
+// the forms ///////////////////////////////////////////////////////////////////
+// -----------------------------------------------------------------------------
+
+// registration/activation form (from invitation)
+// ---
+define('REGISTRATION_FORM', [
+    'defaults' => [
+        'outer_class' => 'col-12',
+        'inner_class' => 'form-control',
+        'type' => 'text',
+        'source' => '\app\controllers\User::current'
+    ],
+    'form' => [
+        [
+            'name' => 'first_name',
+            'label' => 'Όνομα',
+            'value' => 'auto',
+            'attributes' => ['required']
+        ],
+        [
+            'name' => 'last_name',
+            'label' => 'Επίθετο',
+            'value' => 'auto',
+            'attributes' => ['required']
+        ],
+        [
+            'name' => 'email',
+            'label' => 'Email',
+            'type' => 'email',
+            'value' => 'auto',
+            'attributes' => ['required']
+        ],
+        [
+            'name' => 'father_name',
+            'label' => 'Πατρώνυμο',
+            'value' => 'auto',
+            'attributes' => ['required']
+        ],
+        [
+            'name' => 'registration_number',
+            'label' => 'Αριθμός μητρώου',
+            'class' => 'col-8',
+            'value' => 'auto',
+            'attributes' => ['required']
+        ],
+        [
+            'name' => 'sector',
+            'label' => 'Κλάδος / Ειδικότητα',
+            'value' => 'auto',
+            'type' => 'select',
+            'attributes' => ['required'],
+            'options' => [
+                'ΠΕ01 ΘΕΟΛΟΓΟΙ',
+                'ΠΕ02 ΦΙΛΟΛΟΓΟΙ',
+                'ΠΕ02.50 ΦΙΛΟΛΟΓΟΙ ΕΙΔΙΚΗΣ ΑΓΩΓΗΣ',
+                'ΠΕ03 ΜΑΘΗΜΑΤΙΚΟΙ',
+                'ΠΕ03.50 ΜΑΘΗΜΑΤΙΚΟΙ ΕΙΔΙΚΗΣ ΑΓΩΓΗΣ',
+                'ΠΕ04.01 ΦΥΣΙΚΟΙ',
+                'ΠΕ04.01.50 ΦΥΣΙΚΟΙ ΕΙΔΙΚΗΣ ΑΓΩΓΗΣ',
+                'ΠΕ04.02 ΧΗΜΙΚΟΙ',
+                'ΠΕ04.04 ΒΙΟΛΟΓΟΙ',
+                'ΠΕ05 ΓΑΛΛΙΚΗΣ ΦΙΛΟΛΟΓΙΑΣ',
+                'ΠΕ06 ΑΓΓΛΙΚΗΣ ΦΙΛΟΛΟΓΙΑΣ',
+                'ΠΕ07 ΓΕΡΜΑΝΙΚΗΣ ΦΙΛΟΛΟΓΙΑΣ',
+                'ΠΕ08 ΚΑΛΛΙΤΕΧΝΙΚΩΝ',
+                'ΠΕ11 ΦΥΣΙΚΗΣ ΑΓΩΓΗΣ',
+                'ΠΕ23-ΣΔΕΥ ΨΥΧΟΛΟΓΟΙ',
+                'ΠΕ30-ΣΔΕΥ ΚΟΙΝΩΝΙΚΟΙ ΛΕΙΤΟΥΡΓΟΙ',
+                'ΠΕ78 ΚΟΙΝΩΝΙΚΩΝ ΕΠΙΣΤΗΜΩΝ',
+                'ΠΕ79.01 ΜΟΥΣΙΚΗΣ ΕΠΙΣΤΗΜΗΣ',
+                'ΠΕ80 ΟΙΚΟΝΟΜΙΑΣ',
+                'ΠΕ81 ΠΟΛ.ΜΗΧΑΝΙΚΩΝ-ΑΡΧΙΤΕΚΤΟΝΩΝ',
+                'ΠΕ82 ΜΗΧΑΝΟΛΟΓΩΝ',
+                'ΠΕ86 ΠΛΗΡΟΦΟΡΙΚΗΣ',
+                'ΠΕ88.01 ΓΕΩΠΟΝΟΙ'
+            ]
+        ],
+        [
+            'name' => 'belonging_school',
+            'label' => 'Σχολείο τοποθέτησης',
+            'value' => 'auto',
+            'attributes' => ['required']
+        ],
+        // [    // working school = (obviously) is the current school
+        //     'name' => 'working_school',
+        //     'label' => 'Σχολείο εργασίας',
+        //     'attributes' => ['required']
+        // ],
+        [
+            'name' => 'position',
+            'label' => 'Θέση',
+            'type' => 'select',
+            'value' => 'auto',
+            'attributes' => ['required'],
+            'options' => []
+        ],
+        [
+            'name' => 'phone',
+            'label' => 'Τηλέφωνο',
+            'class' => 'col-8',
+            'value' => 'auto',
+            'attributes' => ['required']
+        ],
+        [
+            'name' => 'password',
+            'label' => 'Κωδικός πρόσβασης',
+            'type' => 'password',
+            'class' => 'col-8',
+            'attributes' => ['required']
+        ],
+        [
+            'name' => 'confirm_password',
+            'label' => 'Επαλήθευση κωδικού πρόσβασης',
+            'type' => 'password',
+            'class' => 'col-8',
+            'attributes' => ['required']
+        ]
+    ]
+]);
+
+// common requesy form (for any application)
+// ---
+define('COMMON_REQUEST_FORM', [
+    'defaults' => [
+        'outer_class' => 'col-12',
+        'inner_class' => 'form-control',
+        'type' => 'text',
+        'source' => '\app\controllers\User::current'
+    ],
+    'form' => [
+        [
+            'name' => 'subject',
+            'label' => 'Θέμα (χαρακτηριστικός τίτλος για αναφορά)',
+            'attributes' => ['required']
+        ],
+        [
+            'name' => 'first_name',
+            'label' => 'Όνομα',
+            'attributes' => ['auto']
+        ],
+        [
+            'name' => 'last_name',
+            'label' => 'Επίθετο',
+            'attributes' => ['auto']
+        ],
+        [
+            'name' => 'email',
+            'label' => 'e-mail',
+            'type' => 'email',
+            'attributes' => ['auto']
+        ],
+        [
+            'name' => 'father_name',
+            'label' => 'Πατρώνυμο',
+            'attributes' => ['auto']
+        ],
+        [
+            'name' => 'registration_number',
+            'label' => 'Αριθμός μητρώου',
+            'class' => 'col-5',
+            'attributes' => ['auto']
+        ],
+        [
+            'name' => 'sector',
+            'label' => 'Κλάδος / Ειδικότητα',
+            'attributes' => ['auto']
+        ],
+        [
+            'name' => 'belonging_school',
+            'label' => 'Σχολείο τοποθέτησης',
+            'attributes' => ['required']
+        ],
+        [
+            'name' => 'working_school',
+            'label' => 'Σχολείο εργασίας',
+            'attributes' => ['required']
+        ],
+        [
+            'name' => 'position',
+            'label' => 'Θέση',
+            'type' => 'select',
+            'source' => 'positions',
+            'attributes' => ['required']
+        ],
+        [
+            'name' => 'phone',
+            'label' => 'Τηλέφωνο',
+            'attributes' => ['required']
+        ],
+        [
+            'name' => 'request',
+            'label' => 'Αίτημα (πχ, Παρακαλώ να μου χορηγήσετε ...)',
+            'type' => 'textarea',
+            'attributes' => ['required']
+        ],
+        [
+            'name' => 'date',
+            'label' => 'Ημερομηνία αίτησης',
+            'type' => 'date',
+            'attributes' => ['required']
+        ]
+    ]
+]);
+
+// penalty form
+// ---
+
+define('PENALTY_FORM', [
+  'defaults' => [
+      'outer_class' => 'col-12',
+      'inner_class' => 'form-control',
+      'type' => 'text',
+      'source' => 'user'
+  ],
+  'form' => [
+      [
+          'name' => 'subject',
+          'label' => 'Θέμα (χαρακτηριστικός τίτλος για αναφορά)',
+          'attributes' => ['required']
+      ],
+      [
+          'label' => '',
+          'type' => 'label'
+      ],
+      [
+          'label' => 'Πειθαρχική υπόθεση',
+          'type' => 'label'
+      ],
+      [
+        'name' => 'of_article',
+        'label' => 'του/της/των...',
+        'type' => 'select',
+        'options' => [
+            'του μαθητή',
+            'της μαθήτριας',
+            'των μαθητών',
+            'των μαθητριών'
+        ],
+        'class' => 'col-md-4',
+        'attributes' => ['required']
+      ],
+      [
+          'name' => 'student_names',
+          'label' => '(ονοματεπώνυ-μο/μα, πτώση γενική)',
+          'type' => 'textarea',
+          'class' => 'col-md-8',
+          'attributes' => ['required']
+      ],
+      [
+          'name' => 'of_department',
+          'label' => 'του τμήματος...',
+          'class' => 'col-md-4',
+          'attributes' => ['required']
+      ],
+      [
+          'name' => 'date',
+          'label' => 'Ημερομηνία',
+          'type' => 'date',
+          'class' => 'col-md-4',
+          'attributes' => ['required']
+      ],
+      [
+          'name' => 'time',
+          'label' => 'Ώρα',
+          'class' => 'col-md-4',
+          'attributes' => ['required']
+      ],
+      [
+          'name' => 'place',
+          'label' => 'Τόπος',
+          'type' => 'select',
+          'options' => [
+              'Γραφείο Διευθηντή',
+              'Γραφείο Καθηγητών'
+          ],
+          'attributes' => ['required']
+      ],
+      [
+          'name' => 'rapporteur',
+          'label' => 'εισηγητής',
+          'type' => 'select',
+          'source' => '\app\extends\Cache_service::all_users',
+          'attributes' => ['required']
+      ],
+      [
+          'name' => 'charge',
+          'label' => 'Περιγραφή συμβάντος:',
+          'type' => 'textarea',
+          'attributes' => ['required']
+      ],
+      [
+          'name' => 'apology',
+          'label' => 'Απολογία: (μαθητή/-των)',  // + of_student
+          'type' => 'textarea',
+          'attributes' => []
+      ],
+      [
+          'name' => 'decision_reasoning',
+          'label' => 'Αιτιολογία απόφασης (πχ. Επειδή...)',
+          'type' => 'textarea',
+          'attributes' => []
+      ],
+      [
+          'label' => 'Το Πειθαρχικό Συμβούλιο',
+          'type' => 'label'
+      ],
+      [
+          'name' => 'decision',
+          'label' => 'Αποφασίζει',
+          'type' => 'select',
+          'options' => [
+              'προφορική επίπληξη',
+              'ωριαία αποβολή',
+              'ημερήσια αποβολή'
+          ],
+          'attributes' => []
+      ],
+      [
+          'name' => 'decision_more',
+          'label' => '(μη τυποποιημένο κείμενο απόφασης)',
+          'attributes' => []
+      ],
+      [
+          'name' => 'president',
+          'label' => 'Πρόεδρος συνεδρίασης',
+          'type' => 'select',
+          'source' => '\app\extends\Cache_service::all_users',
+          'attributes' => ['required']
+      ],
+      [
+          'name' => 'members',
+          'label' => 'Μέλη',
+          'type' => 'select',
+          'attributes' => ['required', 'multiple'],
+          'source' => '\app\extends\Cache_service::all_users'
+      ]
+  ]
+]);
diff --git a/public/app/config/setup-framework.php b/public/app/config/setup-framework.php
new file mode 100644
index 0000000..63eb486
--- /dev/null
+++ b/public/app/config/setup-framework.php
@@ -0,0 +1,469 @@
+<?php
+/** CONFIGURATION PARAMETRES
+ * -----------------------------------------------------------------------------
+ * 
+ * Here you can find all the setup paramaters that define
+ * key-decisions of your application;
+ * 
+ * ex. Session driver, Cache driver, Cookies Policy etc;
+ * 
+ * Other supplamentary constants according to your application's logic
+ * shall be defined at the end of this file, or in some extra file(s),
+ * ex: ~/public/app/config/setup-application.php
+ * 
+ * 
+ * NOTE:
+ * You may rewrite the defines setting any values manualy;
+ * SETTING anom CONSTANTS VIA an `.env` FILE IS HIGHLY RECOMMENDED;
+ * The default `.env` file is saved into project's root
+ *  
+ * -----------------------------------------------------------------------------
+ */
+
+
+/** Preload environmental file
+ * -----------------------------------------------------------------------------
+ * 
+ * Setting up main constants via en envoronment file is HIGHLY RECOMMENDED;
+ * read ini file if exist
+ * 
+ * -----------------------------------------------------------------------------
+ */
+if (file_exists(APP_ROOT ."/.env")) {
+  $env = parse_ini_file(APP_ROOT. "/.env");
+}
+
+
+
+
+## -----------------------------------------------------------------------------
+##
+##       - - - -- -- ---  M A I N  C O N S T A N T S  --- -- -- - - -
+##  Main constants (names, labels, security options, optimzation defaults etc)
+##
+## -----------------------------------------------------------------------------
+
+
+
+/** ENVIRONMENT constant
+ * -----------------------------------------------------------------------------
+ * 
+ * define application's environment stage; [PRODUCTION|staging|develpment|testing|*]
+ * seting this constant to 'PRODUCTION' eliminates debuggin comments;
+ * 
+ * DO NOT FORGET to change this setting when deploying to a different stage
+ * 
+ * -----------------------------------------------------------------------------
+ */
+
+define('PRODUCTION', ($env['ENVIRONMENT'] == 'PRODUCTION') );
+
+
+
+
+/** APPLICATION NAMES AND URL DEFAULTS
+ * -----------------------------------------------------------------------------
+ * 
+ * NOTE:
+ * if the `.env` file exists ... do not touch anything
+ * else ... replace $env[*] values with your setup/defaults
+ * 
+ * -----------------------------------------------------------------------------
+ */
+
+    // Application Name (how developer refers to it)
+define('APP_NAME', $env['APP_NAME'] ?? 'anom.App');
+
+    // Site Title (the end-users' title)
+define('SITE_TITLE', 'schoolGov');      
+
+    // Application version (major_version + subversion_class) keep it simple
+define('APP_VERSION', $env['APP_VERSION']);     // ex: '1.alfa' -or- '2.rc' etc.
+
+    // root url of the web app
+define('SITE_URL', $env['ANOM_HOSTNAME']);      
+
+
+
+
+/** APPLICATION PATHS
+ * -----------------------------------------------------------------------------
+ * 
+ * Obligarory:
+ * These are needed in order to run the bare minimum MVC system
+ * They also make code easier to read
+ * 
+ * NOTE:
+ * most likely you do not need to change any of these subsection defines;
+ * 
+ * -----------------------------------------------------------------------------
+ */
+
+define('URL_ROOT', '/');
+
+define('INIT_APPLICATION', APP_ROOT.'/core/config/init.php');
+ 
+define('VIEWS_DIRECTORY', $env['VIEWS_DIRECTORY'] ?? (WEB_ROOT.'/app/views/'));
+ 
+define('TESTS_DIRECTORY', $env['TESTS_DIRECTORY'] ?? (APP_ROOT."/tests/"));
+
+
+
+
+/** AUTOLOADER /////////////////////////////////////////////////////////////////
+ * -----------------------------------------------------------------------------
+ * 
+ * An autoloader for classes is required;
+ * 
+ * 
+ ** OPTION 1: COMPOSER
+ * -----------------------------------------------------------------------------
+ * Composer is recommended and makes much more than simple autoloding
+ * -----------------------------------------------------------------------------
+ */
+
+define('AUTOLOADER' , APP_ROOT.'/vendor/autoload.php');
+
+/** OPTION 2: Custom Autoloader
+ * -----------------------------------------------------------------------------
+ * If Composer is not supported, another autoloading proccess required
+ * Comment/Disable the 1st option and uncomment/Enable the next line
+ * -----------------------------------------------------------------------------
+ * 
+ * NOTE: if the custom autoloadet is used
+ * then you need to defing CLASSPATHS constant-array too;
+ */
+
+# define('AUTOLOADER' , '../core/helpers/autoload.php');
+ 
+/** Autoload paths 
+ * -----------------------------------------------------------------------------
+ * 
+ * CLASSPATHS : array of paths where classes are saved
+ * 
+ * NOTE:
+ * if the custom autoloader is used (instead of composer's)
+ * then you need to defing CLASSPATHS constant-array too;
+ * 
+ * In most cases you won't need this,
+ * so comment the next lines out of the code-base
+ * 
+ * -----------------------------------------------------------------------------
+ */
+# define('CLASSPATHS', array(
+#     APP_ROOT .'/core/classes/',       // core classes
+#     WEB_ROOT .'/app/controllers/',    // controller classes
+#     WEB_ROOT .'/app/models/',         // model classes
+#     WEB_ROOT .'/app/extends/',        // extending core classes
+#     APP_ROOT .'/vendor/'              // vendor/dependency classes
+#   )
+# );
+
+
+
+
+/** SESSION HANDLING
+ * -----------------------------------------------------------------------------
+ * 
+ * there are several session drivers for session handling:
+ *    
+ * 'DefaultSession'  : uses the default (file-based) php session management
+ * 'FileSession'     : defines a custom file-based session mechanism
+ * 'DatabaseSession' : mechanism that stores Session data into a DataBase
+ * -----------------------------------------------------------------------------
+ */
+
+define('SESSION_DRIVER', $env['SESSION_DRIVER'] ?? 'DefaultSession');
+
+
+
+/** FileSession Path
+ * --- -- -- - - -
+ * if FileSession is selected, a path for session-files is needed
+ * 
+ * TODO:
+ * also, the hybrid sessioning (in progress) will need this setting
+ * 
+ * NOTE:
+ * DefaultSession is also file-based but to not need a file-path setting
+ * (php will handle any file-needed actions to the file-system)
+ */
+
+# define('FILESESSION_PATH', '../storage/session');
+
+
+
+/** COOKIE SETTINGS
+ * -----------------------------------------------------------------------------
+ * 
+ * Define cookie policy (cookie sharing and securing)
+ * 
+ * recomended values for production environment:
+ * COOKIE_SECURE=true
+ * COOKIE_SAMESITE='Strict'
+ * 
+ * NOTE:
+ * on development environment COOKIE_SECURE has to be false
+ * in order for the test server to use them from http://locahost
+ * 
+ * for more info about cookie policy read:
+ * https://www.php.net/manual/en/function.session-set-cookie-params.php
+ * 
+ * -----------------------------------------------------------------------------
+ */
+
+define('COOKIE_SECURE', PRODUCTION);    // Secure cookie policy [true|false]
+
+define('COOKIE_SAMESITE', $env['COOKIE_SAMESITE'] ?? 'Strict');    // SameSite cookie policy [Strict|Lax|None]
+     
+# define('COOKIE_DOMAIN', $env['ANOM_HOSTNAME']);   // domain to be visible on
+
+
+
+
+/** Session and cookie names
+ * -----------------------------------------------------------------------------
+ */
+define('SESSION_NAME', 'offticket');    // cookie for session (office ticket)
+define('CONNECTION_COOKIE', 'con');     // cookie for connection
+define('MAX_SESSION_LIFE', 2*60*60);    // maximum session lifetime (2 hours)
+
+
+
+/** SECURITY SETTINGS ///////////////////////////////////////////////////////////
+ * -----------------------------------------------------------------------------
+ * 
+ * Cross Site Request Forgery
+ * ---
+ * Enables a CSRF cookie token to be set. When set to TRUE, token will be
+ * checked on a submitted form. If you are accepting user data, it is strongly
+ * recommended CSRF protection be enabled.
+ * -----------------------------------------------------------------------------
+ */
+
+define('CSRF_PROTECTION', false);
+
+define('CSRF_TOKEN_NAME', 'csrf_test_name');        // token name
+
+define('CSRF_COOKIE_NAME', 'csrf_cookie_name');     // cookie name
+
+define('CSRF_EXPIRE', 7200);            // The number in seconds the token should expire.
+
+define('CSRF_REGENERATE', TRUE);        // Regenerate token on every submission
+
+define('CSRF_EXCLUDE_URIS', array());   // Array of URIs which ignore CSRF checks
+
+
+
+
+/* ADVANCED OPTIMIZATION ///////////////////////////////////////////////////////
+ * -----------------------------------------------------------------------------
+ *
+ * APP_CACHE defines the cache-driver;
+ * accepted values are the name of the Cache-interface impementations (the exact
+ * names of the classes)
+ *
+ * 'FileCache'  : caching in filesystem; fair if caching on HDD; great on SSD
+ * 'RedisCache' : caching in Redis server; generally recommended if available
+ * 'MemCachedCache' : caching in Memcached server; recommended if available
+ *
+ * NOTE: FileCache on a NVMe SDD is the fastest option;
+ * Redis and Memcached are really-fast caching options and are available for
+ * scaling horizontaly your application (eache one has it's own strngths;
+ * study, then choose the one that fulfills your needs;
+ * -----------------------------------------------------------------------------
+ */
+  
+define('CACHE_DRIVER', $env['CACHE_DRIVER'] ?? 'FileCache');
+
+
+ 
+
+
+## -----------------------------------------------------------------------------
+##
+## - - - -- -- ---  C O N N E C T I O N   C R E D E N T I A L S  --- -- -- - - -
+##
+## -----------------------------------------------------------------------------
+
+
+
+/** SERVICE PARAMETRES
+ * -----------------------------------------------------------------------------
+ * 
+ * Connection parametres and credentials for accssing services 
+ * needed by the application; Such services may be..
+ * 
+ * - RDBMS
+ *   -- MySQL
+ *   -- PotgresSQL
+ * 
+ * - Caching services
+ *   -- Redis
+ *   -- MemCached
+ * 
+ * Edit only the constants needed by the application;
+ * Comment those you do not need;
+ * 
+ * /////////////////////////////////////////////////////////////////////////////
+ */
+
+/** DATABASE CONNECTION PARAMETRES
+ * -----------------------------------------------------------------------------
+ * Production and staging environments may use different databases.
+ * 
+ * A safe practice is to keep credentials outside plain files like this one
+ * in environmental variable or other secret file etc.
+ * 
+ * Uncomment/enable each group of definitions suits your case to define
+ * the credentials needed for accessing the database
+ */
+
+define('DB_NAME', $env['DB_NAME']);
+ 
+define('DB_USER', $env['DB_USER']);
+  
+define('DB_PASS', $env['DB_PASS']);
+  
+/** NOTE:
+ * PDO_HOST can be a hostname/port combination -or- a unix socket
+ * 
+ * ...examples:
+ * define('PDO_HOST', 'host=/localhost')    ## hostname case
+ * define('PDO_HOST', 'host=/localhost;port=3456')    ## hostname/port case
+ * define('PDO_HOST', 'unix_socket=/sql/ex123:europe:some-db');   ## unix socket
+ * define('PDO_HOST', 'unix_socket=/cloudsql/name-123456:europe-west4:name-db-eu');
+ */
+ 
+define('PDO_HOST', $env['PDO_HOST']);
+  
+define('DB_TIMEZONE', "SET time_zone = 'Europe/Athens'");
+ 
+ 
+ 
+ 
+/** CACHED SERVICES
+ * -----------------------------------------------------------------------------
+ * 
+ * impemented services:
+ * - File Cache
+ * - Redis
+ * - Memcached
+ * 
+ * NOTE:
+ * Both Redis and Memcached configurations are given as a template to work on;
+ * In most cases the default values should do the job -- of course you need to
+ * read the README file (check the project's root);
+ * As these caching services are not fully tested you may need to ochestrate
+ * the services in detail or edit the connection strings into the core classes
+ * (hosted under the '/core/classes/cacher' folder)
+ * 
+ * -----------------------------------------------------------------------------
+ */
+
+define('FILECACHE_PATH', APP_ROOT.'/storage/cache/');     // if CACHE_DRIVER is set to 'FileCache'
+
+define('MEDIA_STORAGE_ROOT', APP_ROOT.'/storage/uploads/');    // Media files root directory
+ 
+
+// CONNECTIONS (if Redis or Memcached is selected) ...
+ 
+
+# define('REDIS_HOST', '127.0.0.1');              // if CACHE_DRIVER is set to 'RedisCache'
+ 
+# define('MEMCAHCED_SERVER', '127.0.0.1');        // if CACHE_DRIVER is set to 'MemCached'
+ 
+ 
+ # define('MEMCAHCED_SERVER', '127.0.0.1');        // if CACHE_DRIVER is set to 'MemCached'
+ 
+/** REDIS SERVICE
+ * -----------------------------------------------------------------------------
+ * Most of the times Redis is running on 'localhost' (host = '127.0.0.1')
+ * When implemented via anom's docker-composer (redis via bridge) then you need
+ * do declare the hostname as 'redis'
+ */
+
+# define('REDIS_HOST', '127.0.0.1');    // if CACHE_DRIVER is set to 'RedisCache'
+# if (!defined('REDIS_HOST'))           define('REDIS_HOST', 'redis');
+# 
+# if (!defined('REDIS_PORT'))           define('REDIS_PORT', 6379);
+# 
+# if (!defined('REDIS_PASS'))           define('REDIS_PASS', null);
+ 
+ 
+/** MEMCACHED
+ * -----------------------------------------------------------------------------
+ * Memcached looks very much like Redis (plus, both are serving from RAM)
+ * Usualy Memcashed is running localy so host is 'localhost' ('127.0.0.1')
+ * If you use the framework's docker-composer implementation then
+ * the hostname is 'anomemcached'
+ */
+
+# if (!defined('MEMCACHE_HOST'))  define('MEMCACHE_HOST', 'anomemcached');
+ 
+
+
+
+
+
+
+
+/** General Scope Constants
+ * -----------------------------------------------------------------------------
+ * 
+ * needed by the framework for common tasks
+ * 
+ * Anom suggests:
+ * + Common Content Types, and
+ * + Proxy flags 
+ * 
+ * -----------------------------------------------------------------------------
+ */
+
+/** COMMON CONTENT TYPES
+ * -----------------------------------------------------------------------------
+ */
+define('COMMON_CONTENT_TYPES', array(
+        // text,css
+    'text/html; charset=UTF-8', 'text/css',
+        // json
+    'application/json; charset=utf-8',
+        // javascript
+    'application/javascript; charset=utf-8',
+        // images    
+    'image/png', 'image/jpeg', 'image/web',
+        // pdf
+    'application/pdf',
+        // word
+    'application/msword', 'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
+        // excel
+    'application/vnd.ms-excel', 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',
+        // rar
+    'application/vnd.rar', 'application/x-rar-compressed', 'application/octet-stream',
+        // zip
+    'application/zip', 'application/x-zip-compressed', 'multipart/x-zip', 'application/octet-stream',
+  )
+);
+
+
+/** PROXY_FLAGS
+ * -----------------------------------------------------------------------------
+ * These options represend altered/non-default behaviour
+ * and will be resolved bitwise, so use powers of 2
+ * -----------------------------------------------------------------------------
+ */
+define('PROXY_CACHE_ERRORS', 1);  // cache result even if error
+define('PROXY_IGNORE_CACHE', 2);  // ignore cache if exist
+define('PROXY_DO_NOT_CACHE', 4);  // do not cache result
+
+
+
+/** need even more constants?
+ * -----------------------------------------------------------------------------
+ * 
+ * Append them here,
+ * or require an extra `constants definition` file
+ * 
+ * -----------------------------------------------------------------------------
+ */
+require_once WEB_ROOT.'/app/config/setup-application.php';
\ No newline at end of file
diff --git a/public/app/routes/api.php b/public/app/routes/api.php
index 94ae2a6..dd0fecf 100644
--- a/public/app/routes/api.php
+++ b/public/app/routes/api.php
@@ -12,33 +12,29 @@ use app\controllers\api\Doc_api;
  */
 
 
-// api: tree of product-categories 
-Route::add('/api/tree',
-    function() {     Doc_api::tree(); },
-    'get'
-);
+// depricated: (not needed)
 
 // api: database documentation
-Route::add('/api/doc',
-    function() {     Doc_api::dbDoc(); },
-    'get'
-);
-
-Route::add('/api/url/([0-9a-zA-Z-_\/]*)',
-    function($url) {            Common_api::category_by_url($url); }
-);
-
-// route: /api/table
-Route::add('/api/([0-9a-zA-Z-_]*)',
-    function($table) {          Common_api::table($table); },
-    'get'
-);
-
-// route: /api/table/{id}
-Route::add('/api/([0-9a-zA-Z-_]*)/([0-9]*)',
-    function($table, $id) {     Common_api::record($table, $id); },
-    'get'
-);
+// Route::add('/api/doc',
+//     function() {     Doc_api::dbDoc(); },
+//     'get'
+// );
+// 
+// Route::add('/api/url/([0-9a-zA-Z-_\/]*)',
+//     function($url) {            Common_api::category_by_url($url); }
+// );
+// 
+// // route: /api/table
+// Route::add('/api/([0-9a-zA-Z-_]*)',
+//     function($table) {          Common_api::table($table); },
+//     'get'
+// );
+// 
+// // route: /api/table/{id}
+// Route::add('/api/([0-9a-zA-Z-_]*)/([0-9]*)',
+//     function($table, $id) {     Common_api::record($table, $id); },
+//     'get'
+// );
 
 
 
diff --git a/public/app/routes/frontend.php b/public/app/routes/frontend.php
index b0e064b..f10f29d 100644
--- a/public/app/routes/frontend.php
+++ b/public/app/routes/frontend.php
@@ -17,10 +17,16 @@ Route::add('/invitation/([0-9]*)', function($id) {
     Auth::invitation($id);
 });
 
+// new petition
 Route::add('/petition/([0-9a-z\-_]*)', function($tag) {
     Office::request_petition($tag);
 });
 
+// existing petition
+Route::add('/petition/([0-9a-z\-_]*)/([0-9a-f]*)', function($tag) {
+    Office::filter_request_petition($tag, $id);
+});
+
 // Error pages
 ////////////////////////////////////////////////////////////////////////////////
 
-- 
cgit v1.2.3