MRBS 1.12.2 等保2.0二级整改完整提交

包含：登录失败锁定、90天密码有效期、30分钟会话超时、
强制改密、登录审计日志、屏幕水印、企业背景图、
备案信息固定底部、favicon、登录页JS修复等全部改动

docker_app/HOWTO.md

@@ -0,0 +1,59 @@
+# Dev environment
+
+This docker setup is supposed to get a running system for local development.
+
+## Run locally
+
+* Compose Docker containers:
+  ~~~
+  cd docker_app
+  docker compose up -d
+  ~~~
+  (Linux users may need `sudo` or `docker login`)
+
+* Open [localhost:8080](http://localhost:8080) in your browser \
+  Logins are defined at first use. (There may be example data in the future)
+
+## Additonal information
+
+### Inspect database
+Open [localhost:8888](http://localhost:8888) in your browser for phpmyadmin \
+Login: `mrbs:mrbs`
+
+Alternatively, you can connect to the database using the command like tool `mysql`:
+~~~
+docker-compose db mysql -u mrbs -pmrbs mrbs
+~~~
+
+### View logs
+
+View apache webserver logs:
+~~~
+docker compose logs www
+~~~
+View database logs:
+~~~
+docker compose logs db
+~~~
+
+
+### Live reloading
+The repository's source code is mounted into the docker containers. That means, changes of code take effect immediately after refreshing the browser.
+
+However, when configuration of php and database is change, you have to reset the containers.
+
+### Reset containers
+
+* Stop Docker containers:
+  ~~~
+  docker compose down
+  ~~~
+* Delete persisted volumes:
+  ~~~
+  docker volume prune
+  ~~~
+* Rebuild container images:
+  ~~~
+  docker compose build
+  ~~~
+

docker_app/docker-compose.yml

@@ -0,0 +1,38 @@
+services:
+    www:
+        build:
+            context: ..
+            dockerfile: docker_app/php/Dockerfile
+        ports:
+            - "8080:80"
+        command: apache2ctl -D FOREGROUND
+        volumes:
+            - ../web:/var/www/html/
+            - ./php/config.inc.php:/var/www/html/config.inc.php
+        links:
+            - db
+        networks:
+            - default
+    db:
+        image: mysql:8.0
+        ports:
+            - "3306:3306"
+        command: --default-authentication-plugin=mysql_native_password
+        environment:
+            MYSQL_DATABASE: mrbs
+            MYSQL_USER: mrbs
+            MYSQL_PASSWORD: mrbs
+            MYSQL_ROOT_PASSWORD: mrbs
+        volumes:
+            - ../tables.my.sql:/docker-entrypoint-initdb.d/010-tables.sql
+            - persistent:/var/lib/mysql
+        networks:
+            - default
+    phpmyadmin:
+        image: phpmyadmin
+        links:
+            - db:db
+        ports:
+            - 8888:80
+volumes:
+    persistent:

docker_app/php/Dockerfile

@@ -0,0 +1,6 @@
+FROM php:8.4-apache
+
+RUN a2enmod rewrite
+RUN apt-get update && apt-get install -y libicu-dev locales-all \
+ && apt-get clean
+RUN docker-php-ext-install mysqli pdo pdo_mysql intl

docker_app/php/config.inc.php

@@ -0,0 +1,11 @@
+<?php // -*-mode: PHP; coding:utf-8;-*-
+namespace MRBS;
+
+$timezone = "Europe/London";
+$dbsys = "mysql";
+$db_host = "db";
+$db_database = "mrbs";
+$db_login = "mrbs";
+$db_password = "mrbs";
+$db_tbl_prefix = "mrbs_";
+$db_persist = FALSE;