From dd751fe67165bb3d751e4eb1cc6d9b69b4010b00 Mon Sep 17 00:00:00 2001
From: masiv_ <masiv_@ethernal.win>
Date: Wed, 4 Feb 2026 17:09:36 -0300
Subject: [PATCH] Add db secrets management

---
 includes/.gitignore          |  1 +
 includes/dbh.inc.php         |  3 +++
 includes/var_loading.inc.php | 40 ++++++++++++++++++++++++++++++++++++
 3 files changed, 44 insertions(+)
 create mode 100644 includes/.gitignore
 create mode 100644 includes/var_loading.inc.php

diff --git a/includes/.gitignore b/includes/.gitignore
new file mode 100644
index 0000000..2eea525
--- /dev/null
+++ b/includes/.gitignore
@@ -0,0 +1 @@
+.env
\ No newline at end of file
diff --git a/includes/dbh.inc.php b/includes/dbh.inc.php
index eed0a91..7f400aa 100644
--- a/includes/dbh.inc.php
+++ b/includes/dbh.inc.php
@@ -2,6 +2,9 @@
 
 declare(strict_types=1);
 
+require_once "var_loading.inc.php";
+loadEnvironment(".env");
+
 $host = "${{ secrets.DB_HOST }}";
 $protocol = "${{ secrets.DB_PROTOCOL }}";
 $dbname = "${{ secrets.DB_NAME }}";
diff --git a/includes/var_loading.inc.php b/includes/var_loading.inc.php
new file mode 100644
index 0000000..f3a54fc
--- /dev/null
+++ b/includes/var_loading.inc.php
@@ -0,0 +1,40 @@
+<?php
+function loadEnvironment($path) {
+    if (!file_exists($path)) {
+        throw new Exception(".env file not found at: $path");
+    }
+    
+    # File method, parses each line as an array element
+    $lines = file($path, FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES);
+    
+    # Loops each line
+    foreach ($lines as $line) {
+        # First removes white spaces, then searches if the first character is a comment, skips iteration line.
+        // Skip comments
+        if (strpos(trim($line), '#') === 0) continue;
+        
+        # Continues if it finds an = sign somewhere
+        // Parse KEY=value
+        if (strpos($line, '=') !== false) {
+            # Creates a list, array alike, the items are set by splitting (explode()) each line by the equal sign.
+            list($key, $value) = explode('=', $line, 2);
+            
+            # Removes whitespaces and quotes
+            $key = trim($key);
+            $value = trim($value, '"\''); // Remove quotes
+            
+            # Stores each value in $_ENV supergglobal
+            $_ENV[$key] = $value;
+
+            # Not sure what this does
+            putenv("$key=$value");
+        }
+    }
+}
+
+// Load at application bootstrap
+# Not sure either
+loadEnvironment(__DIR__ . '/.env');
+
+// First found on ttps://levelup.gitconnected.com/how-to-securely-handle-production-credentials-in-php-without-exposing-them-in-git-237f4fd5cf91,
+// Own comments using #
\ No newline at end of file