Move index.php file to public directory.main

This allows us to set doculemt root to the public directory, so that
there's less chance for shady actors to access the actual modules of the
system directly.

Just to be on the safe side, I added a new index.php file in the root of
the project, to return a forbidden status in case of a misconfigured
server.

2 files changed, 12 insertions, 2 deletions

diff --git a/index.php b/index.php
index 37ce8a3..8529840 100644
--- a/index.php
+++ b/index.php
@@ -1,8 +1,8 @@
 <?php
+
 // SPDX-FileCopyrightText: 2024 Eilertsens Kodeknekkeri
 // SPDX-FileCopyrightText: 2024 Harald Eilertsen
 //
 // SPDX-License-Identifier: AGPL-3.0-or-later
 
-require __DIR__ . '/vendor/autoload.php';
-require __DIR__ . '/src/process-request.php';
+http_response_code(403);
diff --git a/public/index.php b/public/index.php
new file mode 100644
index 0000000..98e78d3
--- /dev/null
+++ b/public/index.php
@@ -0,0 +1,10 @@
+<?php
+// SPDX-FileCopyrightText: 2024 Eilertsens Kodeknekkeri
+// SPDX-FileCopyrightText: 2024 Harald Eilertsen
+//
+// SPDX-License-Identifier: AGPL-3.0-or-later
+
+define('WEBTRAP_ROOT_DIR', dirname(__DIR__));
+
+require WEBTRAP_ROOT_DIR . '/vendor/autoload.php';
+require WEBTRAP_ROOT_DIR . '/src/process-request.php';