# 靶场：修复前的 PHP 8.2.34 + nginx，仅用于本地复现
FROM php:8.2.34-fpm

RUN apt-get update \
    && apt-get install -y --no-install-recommends nginx \
    && rm -rf /var/lib/apt/lists/*

COPY nginx-site.conf /etc/nginx/sites-available/default
COPY webroot/ /var/www/html/

RUN { \
      echo 'session.upload_progress.enabled=1'; \
      echo 'session.upload_progress.cleanup=0'; \
      echo 'session.use_strict_mode=0'; \
      echo 'display_errors=1'; \
      echo 'error_reporting=E_ALL'; \
    } > /usr/local/etc/php/conf.d/99-vuln.ini \
    && mkdir -p /var/lib/php/sessions \
    && chown -R www-data:www-data /var/lib/php/sessions /var/www/html

EXPOSE 80
CMD ["sh", "-c", "php-fpm -D && nginx -g 'daemon off;'"]
