Cardinal Engine 4.5

.gitignore

@@ -0,0 +1 @@
+!/version/

.htaccess

@@ -0,0 +1,330 @@
+AddDefaultCharset UTF-8
+ServerSignature Off
+FileETag None
+
+<FilesMatch "\.(md|exe|sh|bak|inc|pot|po|mo|log|sql)$">
+	Order allow,deny
+	Deny from all
+</FilesMatch>
+
+<IfModule mod_autoindex.c>
+	Options -Indexes
+</IfModule>
+<IfModule mod_php5.c>
+	php_value always_populate_raw_post_data -1
+	php_value upload_max_filesize 200M
+	php_value post_max_size 200M
+	php_value memory_limit 200M
+	php_value mbstring.func_overload 4
+	php_value max_file_uploads 80
+	<IfModule mod_env.c>
+		SetEnv htaccessWorking true
+	</IfModule>
+</IfModule>
+<IfModule mod_php7.c>
+	php_value always_populate_raw_post_data -1
+	php_value upload_max_filesize 200M
+	php_value post_max_size 200M
+	php_value memory_limit 200M
+	php_value mbstring.func_overload 4
+	php_value max_file_uploads 80
+	<IfModule mod_env.c>
+		SetEnv htaccessWorking true
+	</IfModule>
+</IfModule>
+
+<IfModule mod_dir.c>
+	DirectoryIndex index.php index.html
+</IfModule>
+
+# Prevent viewing of .htaccess file
+<Files .htaccess>
+	order allow,deny
+	deny from all
+</Files>
+
+# Send the CORS header for images when browsers request it.
+<IfModule mod_setenvif.c>
+	<IfModule mod_headers.c>
+		<FilesMatch "\.(bmp|cur|gif|ico|jpe?g|png|svgz?|webp)$">
+			SetEnvIf Origin ":" IS_CORS
+			Header set Access-Control-Allow-Origin "*" env=IS_CORS
+		</FilesMatch>
+	</IfModule>
+</IfModule>
+
+<IfModule mod_mime.c>
+	AddCharset utf-8 .atom .css .js .json .manifest .rdf .rss .vtt .webapp .webmanifest .xml
+	# Data interchange
+	AddType application/atom+xml                        atom
+	AddType application/json                            json map topojson
+	AddType application/ld+json                         jsonld
+	AddType application/rss+xml                         rss
+	AddType application/vnd.geo+json                    geojson
+	AddType application/xml                             rdf xml
+
+	# JavaScript
+	AddType application/javascript                      js
+
+	# Manifest files
+	AddType application/manifest+json                   webmanifest
+	AddType application/x-web-app-manifest+json         webapp
+	AddType text/cache-manifest                         appcache cache
+
+	# Media files
+
+	AddType audio/mp4                                   f4a f4b m4a
+	AddType audio/ogg                                   oga ogg opus
+	AddType image/bmp                                   bmp
+	AddType image/svg+xml                               svg svgz
+	AddType image/webp                                  webp
+	AddType video/mp4                                   f4v f4p m4v mp4
+	AddType video/ogg                                   ogv
+	AddType video/webm                                  webm
+	AddType video/x-flv                                 flv
+	AddType image/x-icon                                cur ico
+
+	# Web fonts
+	AddType application/font-woff                       woff
+	AddType application/font-woff2                      woff2
+	AddType application/vnd.ms-fontobject               eot
+	AddType application/x-font-ttf                      ttc ttf
+	AddType font/opentype                               otf
+
+	# Other
+	AddType application/octet-stream                    safariextz
+	AddType application/x-bb-appworld                   bbaw
+	AddType application/x-chrome-extension              crx
+	AddType application/x-opera-extension               oex
+	AddType application/x-xpinstall                     xpi
+	AddType text/vcard                                  vcard vcf
+	AddType text/vnd.rim.location.xloc                  xloc
+	AddType text/vtt                                    vtt
+	AddType text/x-component                            htc
+</IfModule>
+
+<IfModule mod_expires.c>
+    ExpiresActive on
+    ExpiresDefault                                      "access plus 1 month"
+  # CSS
+    ExpiresByType text/css                              "access plus 1 year"
+  # Data interchange
+    ExpiresByType application/atom+xml                  "access plus 1 hour"
+    ExpiresByType application/rdf+xml                   "access plus 1 hour"
+    ExpiresByType application/rss+xml                   "access plus 1 hour"
+
+    ExpiresByType application/json                      "access plus 0 seconds"
+    ExpiresByType application/ld+json                   "access plus 0 seconds"
+    ExpiresByType application/schema+json               "access plus 0 seconds"
+    ExpiresByType application/vnd.geo+json              "access plus 0 seconds"
+    ExpiresByType application/xml                       "access plus 0 seconds"
+    ExpiresByType text/xml                              "access plus 0 seconds"
+  # Favicon (cannot be renamed!) and cursor images
+    ExpiresByType image/vnd.microsoft.icon              "access plus 1 week"
+    ExpiresByType image/x-icon                          "access plus 1 week"
+  # HTML
+    ExpiresByType text/html                             "access plus 0 seconds"
+  # JavaScript
+    ExpiresByType application/javascript                "access plus 1 year"
+    ExpiresByType application/x-javascript              "access plus 1 year"
+    ExpiresByType text/javascript                       "access plus 1 year"
+  # Manifest files
+    ExpiresByType application/manifest+json             "access plus 1 week"
+    ExpiresByType application/x-web-app-manifest+json   "access plus 0 seconds"
+    ExpiresByType text/cache-manifest                   "access plus 0 seconds"
+  # Media files
+    ExpiresByType audio/ogg                             "access plus 1 month"
+    ExpiresByType image/bmp                             "access plus 1 month"
+    ExpiresByType image/gif                             "access plus 1 month"
+    ExpiresByType image/jpeg                            "access plus 1 month"
+    ExpiresByType image/png                             "access plus 1 month"
+    ExpiresByType image/svg+xml                         "access plus 1 hour"
+    ExpiresByType image/webp                            "access plus 1 month"
+    ExpiresByType video/mp4                             "access plus 1 month"
+    ExpiresByType video/ogg                             "access plus 1 month"
+    ExpiresByType video/webm                            "access plus 1 month"
+  # Web fonts
+    # Embedded OpenType (EOT)
+    ExpiresByType application/vnd.ms-fontobject         "access plus 1 month"
+    ExpiresByType font/eot                              "access plus 1 month"
+  # OpenType
+    ExpiresByType font/opentype                         "access plus 1 month"
+  # TrueType
+    ExpiresByType application/x-font-ttf                "access plus 1 month"
+  # Web Open Font Format (WOFF) 1.0
+    ExpiresByType application/font-woff                 "access plus 1 month"
+    ExpiresByType application/x-font-woff               "access plus 1 month"
+    ExpiresByType font/woff                             "access plus 1 month"
+  # Web Open Font Format (WOFF) 2.0
+    ExpiresByType application/font-woff2                "access plus 1 month"
+  # Other
+    ExpiresByType text/x-cross-domain-policy            "access plus 1 week"
+  # Force no caching for dynamic files
+	<FilesMatch "\.(php|cgi|pl|htm|manifest)$">
+		ExpiresActive Off
+	</FilesMatch>
+</IfModule>
+
+<IfModule mod_headers.c>
+	Header unset X-Powered-By
+	Header unset ETag
+	Header set X-Content-Type-Options "nosniff"
+	#Header set X-XSS-Protection "1; mode=block"
+	Header set X-UA-Compatible "IE=edge"
+	<IfModule mod_env.c>
+		SetEnv modHeadersAvailable true
+	</IfModule>
+	<FilesMatch "\.(appcache|atom|bbaw|bmp|crx|css|cur|eot|f4[abpv]|flv|geojson|gif|htc|ico|jpe?g|js|json(ld)?|m4[av]|manifest|map|mp4|oex|og[agv]|opus|otf|pdf|png|rdf|rss|safariextz|svgz?|swf|topojson|tt[cf]|txt|vcard|vcf|vtt|webapp|web[mp]|webmanifest|woff2?|xloc|xml|xpi)$">
+		Header unset X-XSS-Protection
+	</FilesMatch>
+	<FilesMatch "\.(appcache|atom|bbaw|bmp|crx|css|cur|eot|f4[abpv]|flv|geojson|gif|htc|ico|jpe?g|js|json(ld)?|m4[av]|manifest|map|mp4|oex|og[agv]|opus|otf|pdf|png|rdf|rss|safariextz|svgz?|swf|topojson|tt[cf]|txt|vcard|vcf|vtt|webapp|web[mp]|webmanifest|woff2?|xloc|xml|xpi)$">
+		Header unset X-UA-Compatible
+	</FilesMatch>
+	# Set up caching on media files for 1 year (forever?)
+	<FilesMatch "\.(flv|ico|pdf|avi|mov|ppt|doc|mp3|wmv|wav)$">
+		Header append Cache-Control "public"
+	</FilesMatch>
+	# Set up caching on media files for 1 week
+	<FilesMatch "\.(gif|jpg|jpeg|png|swf|webp|js|css)$">
+		Header append Cache-Control "public"
+	</FilesMatch>
+	# Set up 2 Hour caching on commonly updated files
+	<FilesMatch "\.(xml|txt|html)$">
+		Header append Cache-Control "proxy-revalidate"
+	</FilesMatch>
+	# Force no caching for dynamic files
+	<FilesMatch "\.(php|cgi|pl|htm|manifest|webmanifest)$">
+		Header set Cache-Control "private, no-cache, no-store, proxy-revalidate, no-transform"
+		Header set Pragma "no-cache"
+	</FilesMatch>
+	<FilesMatch "\.(eot|otf|tt[cf]|woff2?)$">
+		Header set Access-Control-Allow-Origin "*"
+	</FilesMatch>
+</ifModule>
+
+<IfModule mod_gzip.c>
+	mod_gzip_on Yes
+	mod_gzip_dechunk Yes
+	mod_gzip_item_include file \.(html?|txt|css|js|php|pl)$ 
+	mod_gzip_item_include handler ^cgi-script$
+	mod_gzip_item_include mime ^text\.*
+	mod_gzip_item_include mime ^application/x-javascript.*
+	mod_gzip_item_exclude mime ^image\.*
+	mod_gzip_item_exclude rspheader ^Content-Encoding:.*gzip.* 
+</IfModule>
+
+<IfModule mod_deflate.c>
+	# Force compression for mangled `Accept-Encoding` request headers
+	<IfModule mod_setenvif.c>
+		<IfModule mod_headers.c>
+			SetEnvIfNoCase ^(Accept-EncodXng|X-cept-Encoding|X{15}|~{15}|-{15})$ ^((gzip|deflate)\s*,?\s*)+|[X~-]{4,13}$ HAVE_Accept-Encoding
+			RequestHeader append Accept-Encoding "gzip,deflate" env=HAVE_Accept-Encoding
+		</IfModule>
+		BrowserMatch ^Mozilla/4 gzip-only-text/html
+		BrowserMatch ^Mozilla/4\.0[678] no-gzip
+		BrowserMatch \bMSIE !no-gzip !gzip-only-text/html
+	</IfModule>
+	<FilesMatch "\.(js|css|html|htm|php|xml|ttf|otf|eot|svg)$">
+		SetOutputFilter DEFLATE
+	</FilesMatch>
+	<IfModule mod_filter.c>
+	AddOutputFilterByType DEFLATE application/javascript
+	AddOutputFilterByType DEFLATE text/javascript
+	AddOutputFilterByType DEFLATE text/css
+	AddOutputFilterByType DEFLATE text/html
+	AddOutputFilterByType DEFLATE text/plain
+	AddOutputFilterByType DEFLATE text/xml
+	AddOutputFilterByType DEFLATE text/x-component
+	AddOutputFilterByType DEFLATE application/xhtml+xml
+	AddOutputFilterByType DEFLATE application/xml+rss
+	AddOutputFilterByType DEFLATE application/rss+xml
+	AddOutputFilterByType DEFLATE application/xml
+	AddOutputFilterByType DEFLATE application/x-javascript
+	AddOutputFilterByType DEFLATE application/msword
+	AddOutputFilterByType DEFLATE application/msexcel
+	AddOutputFilterByType DEFLATE application/mspowerpoint
+	AddOutputFilterByType DEFLATE application/msaccess
+	AddOutputFilterByType DEFLATE application/mshelp
+	AddOutputFilterByType DEFLATE application/pdf
+	AddOutputFilterByType DEFLATE application/postscript
+	AddOutputFilterByType DEFLATE audio/x-wav
+	AddOutputFilterByType DEFLATE text/rtf
+	AddOutputFilterByType DEFLATE text/comma-separated-values
+	AddOutputFilterByType DEFLATE text/tab-separated-values
+	AddOutputFilterByType DEFLATE text/vnd.wap.wml
+	AddOutputFilterByType DEFLATE text/vnd.wap.wmlscript
+	AddOutputFilterByType DEFLATE text/vnd.wap.wmlscript
+	AddOutputFilterByType DEFLATE application/vnd.wap.wmlc
+	AddOutputFilterByType DEFLATE text/x-setext
+	AddOutputFilterByType DEFLATE text/x-sgml
+	AddOutputFilterByType DEFLATE text/x-speech
+	AddOutputFilterByType DEFLATE application/x-sh
+	AddOutputFilterByType DEFLATE application/x-latex
+	AddOutputFilterByType DEFLATE application/x-httpd-php-source
+	AddOutputFilterByType DEFLATE application/vnd.ms-fontobject
+	AddOutputFilterByType DEFLATE font/ttf
+	AddOutputFilterByType DEFLATE font/otf
+	AddOutputFilterByType DEFLATE font/x-woff
+	AddOutputFilterByType DEFLATE image/svg+xml
+	AddOutputFilterByType DEFLATE application/vnd.ms-word.document.macroEnabled.12
+	AddOutputFilterByType DEFLATE application/vnd.openxmlformats-officedocument.wordprocessingml.document
+	AddOutputFilterByType DEFLATE application/vnd.ms-word.template.macroEnabled.12
+	AddOutputFilterByType DEFLATE application/vnd.openxmlformats-officedocument.wordprocessingml.template
+	AddOutputFilterByType DEFLATE application/vnd.ms-powerpoint.template.macroEnabled.12
+	AddOutputFilterByType DEFLATE application/vnd.openxmlformats-officedocument.presentationml.template
+	AddOutputFilterByType DEFLATE application/vnd.ms-powerpoint.addin.macroEnabled.12
+	AddOutputFilterByType DEFLATE application/vnd.ms-powerpoint.slideshow.macroEnabled.12
+	AddOutputFilterByType DEFLATE application/vnd.openxmlformats-officedocument.presentationml.slideshow
+	AddOutputFilterByType DEFLATE application/vnd.ms-powerpoint.presentation.macroEnabled.12
+	AddOutputFilterByType DEFLATE application/vnd.openxmlformats-officedocument.presentationml.presentation
+	AddOutputFilterByType DEFLATE application/vnd.ms-excel.addin.macroEnabled.12
+	AddOutputFilterByType DEFLATE application/vnd.ms-excel.sheet.binary.macroEnabled.12
+	AddOutputFilterByType DEFLATE application/vnd.ms-excel.sheet.macroEnabled.12
+	AddOutputFilterByType DEFLATE application/vnd.openxmlformats-officedocument.spreadsheetml.sheet
+	AddOutputFilterByType DEFLATE application/vnd.ms-excel.template.macroEnabled.12
+	AddOutputFilterByType DEFLATE application/vnd.openxmlformats-officedocument.spreadsheetml.template
+	</IfModule>
+</IfModule>
+
+<IfModule mod_rewrite.c>
+	RewriteEngine On
+	RewriteCond %{HTTP_HOST} ^www\.(.*)$
+	RewriteRule ^(.*)$ http://%1/$1 [L,R=301]
+	RewriteRule ^index\.php$ - [L]
+	RewriteRule ^(.*)index\.(php|html|phtml|htm|php3|php4|php5|phps|pl|cgi?)$ /$1 [R=301,NC,L]
+	<IfModule brotli_module.c>
+		# Serve brotli compressed CSS files if they exist
+		# and the client accepts brotli.
+		RewriteCond "%{HTTP:Accept-encoding}" "brotli"
+		RewriteCond "%{REQUEST_FILENAME}\.br" "-s"
+		RewriteRule "^(.*)\.css"              "$1\.css\.br" [QSA]
+		# Serve brotli compressed JS files if they exist
+		# and the client accepts brotli.
+		RewriteCond "%{HTTP:Accept-encoding}" "brotli"
+		RewriteCond "%{REQUEST_FILENAME}\.br" "-s"
+		RewriteRule "^(.*)\.js"               "$1\.js\.br" [QSA]
+		# Serve correct content types, and prevent mod_brotli double brotli.
+		RewriteRule "\.css\.gz$" "-" [T=text/css,E=no-brotli:1]
+		RewriteRule "\.js\.gz$"  "-" [T=text/javascript,E=no-brotli:1]
+		<FilesMatch "(\.js\.gz|\.css\.gz)$">
+			<IfModule mod_headers.c>
+				# Serve correct encoding type.
+				Header append Content-Encoding brotli
+				# Force proxies to cache brotli &
+				# non-brotli css/js files separately.
+				Header append Vary Accept-Encoding
+			</IfModule>
+		</FilesMatch>
+	</IfModule>
+	<Files .*>
+		Order Deny,Allow
+		Deny From All
+	</Files>
+	RewriteCond %{REQUEST_FILENAME} !-f
+	RewriteRule ^(.+)\.(\d+)\.(pdf|bmp|css|cur|gif|ico|jpe?g|wjpe?g|js|png|svgz?|webp|manifest|webmanifest)$ $1.$3 [L,E=versioncache:1]
+	RewriteRule ^robots.txt$ uploads/robots.txt [L]
+	RewriteRule ^changelog.txt$ changelog.php [L]
+	RewriteCond %{REQUEST_FILENAME} !-d
+	RewriteCond %{REQUEST_FILENAME} !-f
+	RewriteRule . index.php [L]
+</IfModule>