Function fr_normalize_base_path

config/config.php:546–563

Base path support (optional): - If FileRise is served under a subpath (e.g. https://example.com/fr), set `FR_BASE_PATH=/fr` or send `X-Forwarded-Prefix: /fr` from the proxy. - When not set, defaults to "" (root install) to preserve existing behavior.

($raw)

//   set `FR_BASE_PATH=/fr` or send `X-Forwarded-Prefix: /fr` from the proxy.
// - When not set, defaults to "" (root install) to preserve existing behavior.
function fr_normalize_base_path($raw)
{
    $p = trim((string)$raw);
    if ($p === '' || $p === '/') return '';
    // Reject full URLs or scheme-relative prefixes to avoid open redirects.
    if (preg_match('~^[a-z][a-z0-9+.-]*://~i', $p)) return '';
    if (strpos($p, '//') === 0) return '';
    // Normalize slashes and strip query/fragment if provided.
    $p = str_replace('\\', '/', $p);
    $p = preg_replace('/[?#].*$/', '', $p);
    if ($p === '' || $p === '/') return '';
    if ($p[0] !== '/') $p = '/' . $p;
    $p = preg_replace('~/+~', '/', $p);
    // Disallow path traversal segments.
    if (preg_match('~(^|/)\.\.(?:/|$)~', $p)) return '';
    // strip trailing slashes
    return preg_replace('~/+$~', '', $p) ?: '';
}

function fr_detect_base_path()
{