<?php
// request_logger_central.php
// Central request logger — appends one line per request to central app-access.log
// Writes only POST keys (not values) to avoid storing sensitive data.

$centralLog = '/home/u915722082/domains/thedotstudios.com/public_html/logs/app-access.log';

// Ensure timezone
if (!ini_get('date.timezone')) {
    date_default_timezone_set('Asia/Kolkata');
}

$time    = date('Y-m-d H:i:s');
$ip      = $_SERVER['REMOTE_ADDR'] ?? '-';
$method  = $_SERVER['REQUEST_METHOD'] ?? '-';
$uri     = $_SERVER['REQUEST_URI'] ?? '-';
$host    = $_SERVER['HTTP_HOST'] ?? '-';
$referer = $_SERVER['HTTP_REFERER'] ?? '-';
$ua      = $_SERVER['HTTP_USER_AGENT'] ?? '-';

// Log only POST keys (names) to avoid capturing sensitive values
$postKeys = '';
if ($method === 'POST' && !empty($_POST)) {
    $keys = array_map(function($k){
        // sanitize keys: keep alnum, underscore, hyphen
        return preg_replace('/[^a-zA-Z0-9_\-]/', '', (string)$k);
    }, array_keys($_POST));
    $postKeys = ' POST_KEYS=' . implode(',', $keys);
}

// Compose a single-line log entry
$line = sprintf("[%s] %s %s %s Host:%s Referer:%s UA:%s%s\n",
    $time, $ip, $method, $uri, $host, $referer, $ua, $postKeys
);

// Append with exclusive lock; suppress warnings if any
@file_put_contents($centralLog, $line, FILE_APPEND | LOCK_EX);