'Method not allowed']); exit; } $input = json_decode(file_get_contents('php://input'), true); $username = trim($input['username'] ?? ''); // Validate username if (!preg_match('/^[a-z0-9]{3,32}$/', $username)) { http_response_code(400); echo json_encode(['error' => 'Username must be 3-32 lowercase letters and numbers only']); exit; } // Reserved words blacklist $reserved = ['api','www','mail','admin','root','static','assets','blog','app']; if (in_array($username, $reserved)) { http_response_code(400); echo json_encode(['error' => 'That username is reserved']); exit; } // Connect to SQLite $db = new PDO('sqlite:/data/db/platform.sqlite'); $db->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); // Check if username already exists $stmt = $db->prepare('SELECT id FROM users WHERE username = ?'); $stmt->execute([$username]); if ($stmt->fetch()) { http_response_code(409); echo json_encode(['error' => 'Username already taken']); exit; } // Create the user's site directory $htdocs = "/data/sites/{$username}/htdocs"; if (!mkdir($htdocs, 0755, true)) { http_response_code(500); echo json_encode(['error' => 'Failed to create site directory']); exit; } chown($htdocs, 'www-data'); // Create a default index.php for the user file_put_contents("{$htdocs}/index.php", "Welcome, {$username}!';\necho '

Edit this file to build your site.

';\n"); // Save user to database $stmt = $db->prepare('INSERT INTO users (username) VALUES (?)'); $stmt->execute([$username]); echo json_encode([ 'success' => true, 'username' => $username, 'message' => 'Site created successfully' ]);