Harwinder Sekhon
59fab56359
Course metadata: a scan now gives every course a course_meta row from the downloader's sidecar JSON when the folder has one, else from catalog_courses matched by the folder name the downloader would create (folderKeyFor, a port of ine.py's sanitize_name). tools/build-catalog-seed.php turns the INE export into seeds/ine_catalog.sql, an idempotent patch that creates its own table and upserts by id, so it can be applied to the live server before or after the code and re-run freely. Course pages show the blurb, difficulty, vendor and tags; search matches tags and blurbs; Settings reports how each course got its details. Against the live library 163 of 179 courses match. Course advisor, off by default: api/advisor.php answers "which course should I take to learn X / what comes before Y" with courses from the library, in order, plus vendor courses not yet downloaded. includes/ai_client.php is a small curl wrapper for any OpenAI-format chat endpoint (DeepSeek V4 Flash by default, no composer); the prompt is a byte-stable catalogue of the library so the provider's prefix cache covers it. Every course id the model returns is validated server-side, a bad JSON reply gets one retry then a plain-text fallback, and a per-user daily cap with token counts lives in advisor_requests. With AI_ENABLED false the app makes no outbound requests and the box does not appear; users can also hide it per browser. Claude-Session: https://claude.ai/code/session_012enquL2RZdjy3D5AcKP5yx
23 lines
893 B
ApacheConf
23 lines
893 B
ApacheConf
# Apache: keep non-public files out of reach. Nginx setups need the
|
|
# equivalent location blocks (see README, Production notes).
|
|
|
|
Options -Indexes
|
|
|
|
# The video library is served only through stream.php (auth + Range); the
|
|
# quiz/caption sources only through their endpoints. Direct URLs would
|
|
# bypass login entirely.
|
|
#
|
|
# RedirectMatch always sees the full URL path, even from a .htaccess, so the
|
|
# pattern must not assume the app lives at "/" — anchored to the root it
|
|
# silently stops matching (and stops protecting) an install under
|
|
# "/coursehub/" or any other prefix.
|
|
RedirectMatch 404 (^|/)videos/
|
|
|
|
# App internals — nothing under these is meant to be fetched.
|
|
RedirectMatch 404 (^|/)includes/
|
|
RedirectMatch 404 (^|/)seeds/
|
|
RedirectMatch 404 (^|/)tools/
|
|
<FilesMatch "^(config\.php|config\.example\.php|schema\.sql|\.install\.lock|\.gitignore)$">
|
|
Require all denied
|
|
</FilesMatch>
|