Trek sayfalari icin PHP proxy (HF Space IP ban'i around)

- trek-page-proxy.php: video.trek-turkey.com'da, cURL ile Trek'e gider, BASE tag injekte eder
- browser_session: Trek URL'leri proxy uzerinden navige (subresource'lar BASE ile dogrudan calisir)
- Lokal hizli, IP ban yok (Trek kendine ban yapmaz)

browser_session.py

@@ -15,6 +15,9 @@ from fastapi import WebSocket
 
 logger = logging.getLogger(__name__)
 
+# Trek sayfa proxy — HF Space IP ban'ini etrafindan dolas
+TREK_PROXY = "https://video.trek-turkey.com/trek-page-proxy.php?url="
+
 # Stream parametreleri
 VIEWPORT_W = 1280
 VIEWPORT_H = 800
@@ -131,11 +134,17 @@ class BrowserSession:
             return
         self._current_url = url
         self._nav_seq += 1
-        logger.info(f"[browser] navigate -> {url}")
+        # Trek URL'leri proxy uzerinden git (HF Space IP ban'i etrafinda dolas)
+        from urllib.parse import quote
+        if url.startswith("https://www.trekbisiklet.com.tr/"):
+            target = TREK_PROXY + quote(url, safe="")
+        else:
+            target = url
+        logger.info(f"[browser] navigate -> {url} (via proxy)")
 
         async def _do_goto():
             try:
-                await self._page.goto(url, timeout=NAV_TIMEOUT_MS, wait_until="commit")
+                await self._page.goto(target, timeout=NAV_TIMEOUT_MS, wait_until="commit")
             except Exception as e:
                 logger.warning(f"[browser] nav (bg) {url}: {e}")
         asyncio.create_task(_do_goto())

trek-page-proxy.php

@@ -0,0 +1,54 @@
+<?php
+// Trek sayfa proxy — HF Space IP ban'i etrafindan dolasmak icin
+// Sadece trekbisiklet.com.tr URL'lerine izin verir, BASE tag injekte eder
+header('Access-Control-Allow-Origin: *');
+header('X-Frame-Options: ALLOWALL');
+header('Content-Security-Policy:');
+
+$url = isset($_GET['url']) ? $_GET['url'] : '';
+
+// Guvenlik: sadece Trek site
+if (!preg_match('#^https://www\.trekbisiklet\.com\.tr/#i', $url)) {
+    http_response_code(400);
+    echo 'Invalid URL';
+    exit;
+}
+
+$ch = curl_init($url);
+curl_setopt_array($ch, [
+    CURLOPT_RETURNTRANSFER => true,
+    CURLOPT_FOLLOWLOCATION => true,
+    CURLOPT_MAXREDIRS => 5,
+    CURLOPT_USERAGENT => 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36',
+    CURLOPT_TIMEOUT => 20,
+    CURLOPT_SSL_VERIFYPEER => false,
+    CURLOPT_SSL_VERIFYHOST => false,
+    CURLOPT_HTTPHEADER => [
+        'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8',
+        'Accept-Language: tr-TR,tr;q=0.9,en;q=0.8',
+        'Accept-Encoding: gzip, deflate',
+    ],
+    CURLOPT_ENCODING => '',  // gzip auto-decode
+]);
+$html = curl_exec($ch);
+$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+$err = curl_error($ch);
+curl_close($ch);
+
+if (!$html || $status >= 400) {
+    http_response_code(502);
+    echo "Trek fetch failed (status=$status err=$err)";
+    exit;
+}
+
+// <base> tag injekte et ki relative URL'ler ve formlar dogru calisir
+$baseUrl = preg_replace('#(/[^/]*)$#', '/', $url);  // dosya adini cikar
+$baseTag = '<base href="' . htmlspecialchars($baseUrl, ENT_QUOTES) . '">';
+if (stripos($html, '<base ') === false) {
+    $html = preg_replace('#(<head[^>]*>)#i', '$1' . $baseTag, $html, 1);
+}
+
+http_response_code(200);
+header('Content-Type: text/html; charset=UTF-8');
+header('Cache-Control: public, max-age=300');
+echo $html;