Routing strategy
Apache rewrite rules keep URLs clean with no `.php` suffixes. The `www` domain owns the homepage and `/tools/*`, while each subdomain folder uses its own internal router.
The platform keeps tools on the main site, APIs on a dedicated subdomain, docs on their own subdomain, fonts on a font origin, and theme assets on an asset origin. That separation makes deployment cleaner, caching more predictable, and future scaling easier.
Apache rewrite rules keep URLs clean with no `.php` suffixes. The `www` domain owns the homepage and `/tools/*`, while each subdomain folder uses its own internal router.
The UI reads theme tokens from `theme_settings`, converts them into CSS variables, and consumes only those variables in the stylesheet so the look and feel stays editable.
Public APIs validate payloads, rate limit by IP, escape rendered content, and avoid storing tool submissions or user-generated data.