build: Obfuscated/Minified Produktions-Dateien hinzugefügt

- JavaScript obfusciert mit javascript-obfuscator - CSS minifiziert mit clean-css - PHP-Dateien kopiert Für Produktion: Dateien aus dist/ verwenden
2026-01-16 19:51:41 +01:00
parent 1d2cc945a3
commit 2feebb156f
9 changed files with 638 additions and 0 deletions
--- a/dist/assets/css/style.css
+++ b/dist/assets/css/style.css
--- a/dist/assets/js/contact.js
+++ b/dist/assets/js/contact.js
--- a/dist/assets/js/cookie-consent.js
+++ b/dist/assets/js/cookie-consent.js
--- a/dist/assets/js/main.js
+++ b/dist/assets/js/main.js
--- a/dist/config/config.php
+++ b/dist/config/config.php
@@ -0,0 +1,171 @@
+<?php
+/**
+ * HexaHost.de SMTP Konfiguration
+ * 
+ * WICHTIG: Ändern Sie diese Werte entsprechend Ihren SMTP-Einstellungen!
+ * 
+ * Beispiele für verschiedene E-Mail-Provider:
+ * 
+ * Gmail:
+ * - smtp_host: smtp.gmail.com
+ * - smtp_port: 587
+ * - smtp_encryption: tls
+ * 
+ * Outlook/Hotmail:
+ * - smtp_host: smtp-mail.outlook.com
+ * - smtp_port: 587
+ * - smtp_encryption: tls
+ * 
+ * GMX:
+ * - smtp_host: mail.gmx.net
+ * - smtp_port: 587
+ * - smtp_encryption: tls
+ * 
+ * Web.de:
+ * - smtp_host: smtp.web.de
+ * - smtp_port: 587
+ * - smtp_encryption: tls
+ * 
+ * Eigener Mail-Server:
+ * - smtp_host: mail.ihre-domain.de
+ * - smtp_port: 587 (oder 465 für SSL)
+ * - smtp_encryption: tls (oder ssl)
+ */
+
+// SMTP Konfiguration - HIER IHRE WERTE EINTRAGEN
+$smtp_config = [
+    // SMTP Server-Einstellungen
+    'smtp_host' => 'smtp.gmail.com',           // z.B. smtp.gmail.com
+    'smtp_port' => 587,                        // 587 für TLS, 465 für SSL
+    'smtp_username' => 'test@hexahost.de',     // z.B. info@hexahost.de
+    'smtp_password' => 'your-app-password',    // Ihr SMTP-Passwort
+    'smtp_encryption' => 'tls',                // 'tls' oder 'ssl'
+    
+    // Absender-Einstellungen
+    'from_email' => 'test@hexahost.de',        // Absender-E-Mail
+    'from_name' => 'HexaHost.de Kontaktformular', // Absender-Name
+    
+    // Empfänger-Einstellungen
+    'to_email' => 'info@hexahost.de',          // Empfänger-E-Mail
+    'to_name' => 'HexaHost Support',           // Empfänger-Name
+    
+    // Sicherheitseinstellungen
+    'max_requests_per_hour' => 5,              // Max. Anfragen pro Stunde pro IP
+    'honeypot_field' => 'website',             // Verstecktes Feld für Bot-Schutz
+    
+    // E-Mail-Template-Einstellungen
+    'email_template' => 'html',                // 'html' oder 'text'
+    'include_ip_address' => true,              // IP-Adresse in E-Mail anzeigen
+    'include_timestamp' => true,               // Zeitstempel in E-Mail anzeigen
+];
+
+// DNS-Einstellungen für Spam-Schutz (werden über DNS konfiguriert)
+$dns_config = [
+    // SPF Record (TXT Record in DNS)
+    'spf_record' => 'v=spf1 include:_spf.hexahost.de ~all',
+    
+    // DMARC Record (TXT Record in DNS)
+    'dmarc_record' => 'v=DMARC1; p=quarantine; rua=mailto:dmarc@hexahost.de',
+    
+    // DKIM wird über den Mail-Server konfiguriert
+];
+
+// Debug-Einstellungen (nur für Entwicklung)
+$debug_config = [
+    'debug_mode' => false,                     // Debug-Modus aktivieren
+    'log_errors' => true,                      // Fehler loggen
+    'log_file' => 'contact_form_errors.log',   // Log-Datei
+];
+
+// Exportiere Konfiguration für andere Dateien
+if (!defined('HEXAHOST_CONFIG_LOADED')) {
+    define('HEXAHOST_CONFIG_LOADED', true);
+    
+    // Globale Variablen für andere Dateien
+    $GLOBALS['hexahost_smtp_config'] = $smtp_config;
+    $GLOBALS['hexahost_dns_config'] = $dns_config;
+    $GLOBALS['hexahost_debug_config'] = $debug_config;
+}
+
+// Hilfsfunktion zum Abrufen der Konfiguration
+function getHexaHostConfig($key = null) {
+    global $smtp_config, $dns_config, $debug_config;
+    
+    if ($key === null) {
+        return array_merge($smtp_config, $dns_config, $debug_config);
+    }
+    
+    if (isset($smtp_config[$key])) {
+        return $smtp_config[$key];
+    }
+    
+    if (isset($dns_config[$key])) {
+        return $dns_config[$key];
+    }
+    
+    if (isset($debug_config[$key])) {
+        return $debug_config[$key];
+    }
+    
+    return null;
+}
+
+// Debug-Funktion
+function hexahostDebug($message, $type = 'info') {
+    global $debug_config;
+    
+    if (!$debug_config['debug_mode']) {
+        return;
+    }
+    
+    $timestamp = date('Y-m-d H:i:s');
+    $log_message = "[$timestamp] [$type] $message" . PHP_EOL;
+    
+    if ($debug_config['log_errors']) {
+        error_log($log_message, 3, $debug_config['log_file']);
+    }
+    
+    if ($debug_config['debug_mode']) {
+        echo "<!-- HexaHost Debug: $message -->\n";
+    }
+}
+
+// Validierung der SMTP-Konfiguration
+function validateSMTPConfig() {
+    $config = getHexaHostConfig();
+    $errors = [];
+    
+    // Prüfe ob alle erforderlichen Felder ausgefüllt sind
+    $required_fields = ['smtp_host', 'smtp_username', 'smtp_password', 'from_email', 'to_email'];
+    
+    foreach ($required_fields as $field) {
+        if (empty($config[$field]) || $config[$field] === 'YOUR_SMTP_' . strtoupper(substr($field, 5))) {
+            $errors[] = "Konfigurationsfehler: $field ist nicht korrekt eingestellt.";
+        }
+    }
+    
+    // Prüfe SMTP-Port
+    if (!is_numeric($config['smtp_port']) || $config['smtp_port'] < 1 || $config['smtp_port'] > 65535) {
+        $errors[] = "Konfigurationsfehler: Ungültiger SMTP-Port.";
+    }
+    
+    // Prüfe E-Mail-Format
+    if (!filter_var($config['from_email'], FILTER_VALIDATE_EMAIL)) {
+        $errors[] = "Konfigurationsfehler: Ungültige Absender-E-Mail.";
+    }
+    
+    if (!filter_var($config['to_email'], FILTER_VALIDATE_EMAIL)) {
+        $errors[] = "Konfigurationsfehler: Ungültige Empfänger-E-Mail.";
+    }
+    
+    return $errors;
+}
+
+// Zeige Konfigurationsfehler an (nur im Debug-Modus)
+if (getHexaHostConfig('debug_mode')) {
+    $config_errors = validateSMTPConfig();
+    if (!empty($config_errors)) {
+        hexahostDebug('SMTP-Konfigurationsfehler: ' . implode(', ', $config_errors), 'error');
+    }
+}
+?> 
--- a/dist/config/mail-config.php
+++ b/dist/config/mail-config.php
@@ -0,0 +1,155 @@
+<?php
+/**
+ * HexaHost.de Mail Configuration
+ * 
+ * Bitte passen Sie die folgenden SMTP-Einstellungen an Ihre E-Mail-Provider an.
+ * 
+ * Beispiele für gängige Provider:
+ * 
+ * Gmail:
+ * - SMTP_HOST = 'smtp.gmail.com'
+ * - SMTP_PORT = 587
+ * - SMTP_USERNAME = 'ihre-email@gmail.com'
+ * - SMTP_PASSWORD = 'ihr-app-passwort'
+ * 
+ * Outlook/Hotmail:
+ * - SMTP_HOST = 'smtp-mail.outlook.com'
+ * - SMTP_PORT = 587
+ * 
+ * GMX:
+ * - SMTP_HOST = 'mail.gmx.net'
+ * - SMTP_PORT = 587
+ * 
+ * Web.de:
+ * - SMTP_HOST = 'smtp.web.de'
+ * - SMTP_PORT = 587
+ * 
+ * 1&1:
+ * - SMTP_HOST = 'smtp.1und1.de'
+ * - SMTP_PORT = 587
+ * 
+ * Strato:
+ * - SMTP_HOST = 'smtp.strato.de'
+ * - SMTP_PORT = 587
+ * 
+ * Ionos:
+ * - SMTP_HOST = 'smtp.ionos.de'
+ * - SMTP_PORT = 587
+ */
+
+// SMTP Server Einstellungen
+define('SMTP_HOST', 'smtp.ihre-domain.de');        // Ihr SMTP-Server
+define('SMTP_PORT', 587);                          // SMTP-Port (meist 587 oder 465)
+define('SMTP_USERNAME', 'kontakt@ihre-domain.de'); // Ihr SMTP-Benutzername
+define('SMTP_PASSWORD', 'ihr-smtp-passwort');      // Ihr SMTP-Passwort
+
+// E-Mail Adressen
+define('SMTP_FROM_EMAIL', 'kontakt@hexahost.de');  // Absender-E-Mail (muss zu SMTP_USERNAME passen)
+define('SMTP_TO_EMAIL', 'info@hexahost.de');       // Empfänger-E-Mail für Kontaktformular
+
+// Sicherheitseinstellungen
+define('ENABLE_CSRF_PROTECTION', true);            // CSRF-Schutz aktivieren
+define('ENABLE_RATE_LIMITING', true);              // Rate-Limiting aktivieren
+define('MAX_REQUESTS_PER_HOUR', 10);               // Max. Anfragen pro Stunde
+
+// Spam-Schutz Einstellungen
+define('ENABLE_SPAM_PROTECTION', true);            // Spam-Schutz aktivieren
+define('MAX_MESSAGE_LENGTH', 5000);                // Max. Nachrichtenlänge
+define('MIN_MESSAGE_LENGTH', 10);                  // Min. Nachrichtenlänge
+
+// Debug-Einstellungen (nur für Entwicklung)
+define('DEBUG_MODE', false);                       // Debug-Modus (true/false)
+define('LOG_EMAILS', true);                        // E-Mails loggen (true/false)
+
+// Zusätzliche Sicherheitsheader
+define('ADDITIONAL_HEADERS', [
+    'X-Mailer' => 'HexaHost.de Contact Form',
+    'X-Priority' => '3',
+    'X-MSMail-Priority' => 'Normal',
+    'Importance' => 'Normal',
+    'X-Report-Abuse' => 'Please report abuse here: abuse@hexahost.de',
+    'List-Unsubscribe' => '<mailto:unsubscribe@hexahost.de>',
+    'Precedence' => 'bulk'
+]);
+
+// Erlaubte Domains für E-Mail-Adressen (optional)
+define('ALLOWED_EMAIL_DOMAINS', [
+    // Leer lassen für alle Domains zu erlauben
+    // 'gmail.com',
+    // 'outlook.com',
+    // 'web.de',
+    // 'gmx.de'
+]);
+
+// Blacklist für E-Mail-Adressen (optional)
+define('BLACKLISTED_EMAILS', [
+    // 'spam@example.com',
+    // 'test@test.com'
+]);
+
+// Validierung der Konfiguration
+if (!defined('SMTP_HOST') || !defined('SMTP_USERNAME') || !defined('SMTP_PASSWORD')) {
+    die('SMTP-Konfiguration ist unvollständig. Bitte überprüfen Sie die mail-config.php');
+}
+
+// Überprüfung der E-Mail-Adressen
+if (!filter_var(SMTP_FROM_EMAIL, FILTER_VALIDATE_EMAIL)) {
+    die('Ungültige SMTP_FROM_EMAIL Adresse');
+}
+
+if (!filter_var(SMTP_TO_EMAIL, FILTER_VALIDATE_EMAIL)) {
+    die('Ungültige SMTP_TO_EMAIL Adresse');
+}
+
+// Logging-Funktion
+function logEmail($type, $data) {
+    if (!LOG_EMAILS) return;
+    
+    $logFile = __DIR__ . '/../logs/email.log';
+    $logDir = dirname($logFile);
+    
+    if (!is_dir($logDir)) {
+        mkdir($logDir, 0755, true);
+    }
+    
+    $timestamp = date('Y-m-d H:i:s');
+    $logEntry = "[$timestamp] $type: " . json_encode($data) . "\n";
+    
+    file_put_contents($logFile, $logEntry, FILE_APPEND | LOCK_EX);
+}
+
+// Hilfsfunktion für E-Mail-Validierung
+function isValidEmail($email) {
+    if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
+        return false;
+    }
+    
+    // Prüfe Blacklist
+    if (in_array($email, BLACKLISTED_EMAILS)) {
+        return false;
+    }
+    
+    // Prüfe Domain-Whitelist (falls gesetzt)
+    if (!empty(ALLOWED_EMAIL_DOMAINS)) {
+        $domain = substr(strrchr($email, "@"), 1);
+        if (!in_array($domain, ALLOWED_EMAIL_DOMAINS)) {
+            return false;
+        }
+    }
+    
+    return true;
+}
+
+// CSRF Token generieren
+function generateCSRFToken() {
+    if (!isset($_SESSION['csrf_token'])) {
+        $_SESSION['csrf_token'] = bin2hex(random_bytes(32));
+    }
+    return $_SESSION['csrf_token'];
+}
+
+// CSRF Token validieren
+function validateCSRFToken($token) {
+    return isset($_SESSION['csrf_token']) && hash_equals($_SESSION['csrf_token'], $token);
+}
+?> 
--- a/dist/includes/footer.php
+++ b/dist/includes/footer.php
@@ -0,0 +1,131 @@
+    <footer class="footer">
+        <div class="container">
+            <div class="footer-content">
+                <div class="footer-section">
+                    <h4>HexaHost.de</h4>
+                    <p>Zuverlässiges Hosting aus Niederbayern</p>
+                    <div class="footer-location">
+                        <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
+                            <path d="M21 10c0 7-9 13-9 13s-9-6-9-13a9 9 0 0 1 18 0z"/>
+                            <circle cx="12" cy="10" r="3"/>
+                        </svg>
+                        <span>Niederbayern, Deutschland</span>
+                    </div>
+                </div>
+                <div class="footer-section">
+                    <h4>Produkte</h4>
+                    <ul>
+                        <li><a href="/vpc">Virtual Private Container</a></li>
+                        <li><a href="/vps">Virtual Private Server</a></li>
+                        <li><a href="/mail-gateway">Mail Gateway</a></li>
+                        <li><a href="/webhosting">Webhosting</a></li>
+                    </ul>
+                </div>
+                <div class="footer-section">
+                    <h4>Unternehmen</h4>
+                    <ul>
+                        <li><a href="/about">Über uns</a></li>
+                        <li><a href="/contact">Kontakt</a></li>
+                        <li><a href="/impressum">Impressum</a></li>
+                        <li><a href="/datenschutz">Datenschutz</a></li>
+                        <li><a href="/agb">AGB</a></li>
+                        <li><a href="#" id="openCookieSettings" onclick="CookieConsent.resetConsent(); return false;">Cookie-Einstellungen</a></li>
+                    </ul>
+                </div>
+                <div class="footer-section">
+                    <h4>Support</h4>
+                    <ul>
+                        <li><a href="https://shop.hexahost.de/clientarea.php">Kunden-Center</a></li>
+                        <li><a href="https://shop.hexahost.de/serverstatus.php">Status</a></li>
+                        <li><a href="https://shop.hexahost.de/supporttickets.php">Support-Ticket</a></li>
+                        <li><a href="#">FAQ</a></li>
+                    </ul>
+                </div>
+            </div>
+            <div class="footer-bottom">
+                <p>&copy; <?php echo date('Y'); ?> HexaHost.de - Alle Rechte vorbehalten</p>
+            </div>
+        </div>
+    </footer>
+
+    <!-- Cookie Consent Banner -->
+    <div id="cookieConsent" class="cookie-consent" role="dialog" aria-labelledby="cookieConsentTitle" aria-describedby="cookieConsentDesc">
+        <div class="cookie-consent-container">
+            <div class="cookie-consent-content">
+                <div class="cookie-consent-icon">
+                    <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
+                        <circle cx="12" cy="12" r="10"/>
+                        <circle cx="8" cy="9" r="1" fill="currentColor"/>
+                        <circle cx="15" cy="8" r="1" fill="currentColor"/>
+                        <circle cx="10" cy="14" r="1" fill="currentColor"/>
+                        <circle cx="16" cy="13" r="1" fill="currentColor"/>
+                        <circle cx="13" cy="17" r="1" fill="currentColor"/>
+                    </svg>
+                </div>
+                <div class="cookie-consent-text">
+                    <h3 id="cookieConsentTitle">Cookie-Einstellungen</h3>
+                    <p id="cookieConsentDesc">
+                        Wir verwenden Cookies, um Ihnen die bestmögliche Erfahrung auf unserer Website zu bieten. 
+                        Technisch notwendige Cookies sind für die Funktionalität erforderlich. 
+                        <a href="/datenschutz">Mehr erfahren</a>
+                    </p>
+                </div>
+            </div>
+            <div class="cookie-consent-actions">
+                <button type="button" id="cookieAcceptAll" class="btn btn-primary">Alle akzeptieren</button>
+                <button type="button" id="cookieAcceptEssential" class="btn btn-secondary">Nur notwendige</button>
+                <button type="button" id="cookieSettings" class="btn btn-text">Einstellungen</button>
+            </div>
+        </div>
+        
+        <!-- Erweiterte Cookie-Einstellungen (standardmäßig versteckt) -->
+        <div id="cookieSettingsPanel" class="cookie-settings-panel" style="display: none;">
+            <div class="cookie-settings-content">
+                <h4>Cookie-Einstellungen</h4>
+                <div class="cookie-option">
+                    <div class="cookie-option-info">
+                        <strong>Notwendige Cookies</strong>
+                        <p>Diese Cookies sind für die Grundfunktionen der Website erforderlich.</p>
+                    </div>
+                    <label class="cookie-toggle disabled">
+                        <input type="checkbox" checked disabled>
+                        <span class="cookie-toggle-slider"></span>
+                    </label>
+                </div>
+                <div class="cookie-option">
+                    <div class="cookie-option-info">
+                        <strong>Analyse-Cookies</strong>
+                        <p>Helfen uns zu verstehen, wie Besucher unsere Website nutzen.</p>
+                    </div>
+                    <label class="cookie-toggle">
+                        <input type="checkbox" id="cookieAnalytics">
+                        <span class="cookie-toggle-slider"></span>
+                    </label>
+                </div>
+                <div class="cookie-option">
+                    <div class="cookie-option-info">
+                        <strong>Marketing-Cookies</strong>
+                        <p>Werden verwendet, um relevante Werbung anzuzeigen.</p>
+                    </div>
+                    <label class="cookie-toggle">
+                        <input type="checkbox" id="cookieMarketing">
+                        <span class="cookie-toggle-slider"></span>
+                    </label>
+                </div>
+                <div class="cookie-settings-actions">
+                    <button type="button" id="cookieSaveSettings" class="btn btn-primary">Einstellungen speichern</button>
+                    <button type="button" id="cookieCloseSettings" class="btn btn-secondary">Abbrechen</button>
+                </div>
+            </div>
+        </div>
+    </div>
+
+    <script src="assets/js/main.js" defer></script>
+    <script src="assets/js/cookie-consent.js" defer></script>
+    <?php if (isset($additional_scripts)): ?>
+        <?php foreach ($additional_scripts as $script): ?>
+            <script src="<?php echo $script; ?>" defer></script>
+        <?php endforeach; ?>
+    <?php endif; ?>
+</body>
+</html> 
--- a/dist/includes/functions.php
+++ b/dist/includes/functions.php
@@ -0,0 +1,98 @@
+<?php
+/**
+ * Helper functions for HexaHost.de
+ */
+
+// Sichere Session-Konfiguration
+if (session_status() === PHP_SESSION_NONE) {
+    // Session-Cookie-Sicherheit
+    ini_set('session.cookie_httponly', 1);
+    ini_set('session.cookie_secure', isset($_SERVER['HTTPS']) ? 1 : 0);
+    ini_set('session.cookie_samesite', 'Strict');
+    ini_set('session.use_strict_mode', 1);
+    ini_set('session.use_only_cookies', 1);
+    
+    session_start();
+    
+    // Session-ID regenerieren bei Login/wichtigen Aktionen (Schutz vor Session Fixation)
+    if (!isset($_SESSION['initiated'])) {
+        session_regenerate_id(true);
+        $_SESSION['initiated'] = true;
+    }
+}
+
+// PHP Error Display in Produktion deaktivieren
+if (!defined('DEBUG_MODE') || !DEBUG_MODE) {
+    ini_set('display_errors', 0);
+    ini_set('display_startup_errors', 0);
+    error_reporting(E_ALL);
+    ini_set('log_errors', 1);
+}
+
+/**
+ * Set page configuration and include header
+ * 
+ * @param string $title The page title
+ * @param string $description The page description
+ * @param string $page The current page identifier
+ * @param array $scripts Additional scripts to include
+ */
+function includeHeader($title = '', $description = '', $page = '', $scripts = []) {
+    global $page_title, $page_description, $current_page, $additional_scripts;
+    
+    // Set page configuration from parameters
+    $page_title = !empty($title) 
+        ? $title 
+        : 'HexaHost.de - Zuverlässiges Hosting aus Niederbayern';
+    
+    $page_description = !empty($description) 
+        ? $description 
+        : 'HexaHost.de - Zuverlässiges und preiswertes Hosting aus Niederbayern. VPS, VPC, Mail Gateway und Webhosting Lösungen.';
+    
+    $current_page = $page;
+    $additional_scripts = $scripts;
+    
+    include 'includes/header.php';
+}
+
+/**
+ * Include footer
+ */
+function includeFooter() {
+    include 'includes/footer.php';
+}
+
+/**
+ * Generate breadcrumb navigation
+ * 
+ * @param array $breadcrumbs Array of breadcrumb items [['title' => 'Home', 'url' => 'index.html'], ...]
+ */
+function generateBreadcrumbs($breadcrumbs) {
+    echo '<div class="breadcrumb">';
+    $last_index = count($breadcrumbs) - 1;
+    
+    foreach ($breadcrumbs as $index => $item) {
+        if ($index === $last_index) {
+            // Last item (current page)
+            echo '<span>' . htmlspecialchars($item['title']) . '</span>';
+        } else {
+            // Link to other pages
+            echo '<a href="' . htmlspecialchars($item['url']) . '">' . htmlspecialchars($item['title']) . '</a>';
+            echo '<span>/</span>';
+        }
+    }
+    echo '</div>';
+}
+
+/**
+ * Generate CSRF token for form security
+ * 
+ * @return string CSRF token
+ */
+function generateCSRFToken() {
+    if (!isset($_SESSION['csrf_token'])) {
+        $_SESSION['csrf_token'] = bin2hex(random_bytes(32));
+    }
+    return $_SESSION['csrf_token'];
+}
+?> 
--- a/dist/includes/header.php
+++ b/dist/includes/header.php
@@ -0,0 +1,79 @@
+<!DOCTYPE html>
+<html lang="de">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    
+    <!-- Performance: DNS Prefetch & Preconnect -->
+    <link rel="dns-prefetch" href="//fonts.googleapis.com">
+    <link rel="dns-prefetch" href="//fonts.gstatic.com">
+    <link rel="dns-prefetch" href="//cdn.hexahost.de">
+    <link rel="preconnect" href="https://fonts.googleapis.com">
+    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+    <link rel="preconnect" href="https://cdn.hexahost.de" crossorigin>
+    
+    <!-- Performance: Preload kritischer Ressourcen -->
+    <link rel="preload" href="assets/css/style.css" as="style">
+    <link rel="preload" href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" as="style">
+    
+    <title><?php echo isset($page_title) ? htmlspecialchars($page_title) : 'HexaHost.de - Zuverlässiges Hosting aus Niederbayern'; ?></title>
+    
+    <!-- SEO Meta Tags -->
+    <meta name="description" content="<?php echo isset($page_description) ? htmlspecialchars($page_description) : 'HexaHost.de - Zuverlässiges und preiswertes Hosting aus Niederbayern. VPS, VPC, Mail Gateway und Webhosting Lösungen.'; ?>">
+    <meta name="robots" content="index, follow">
+    <meta name="author" content="HexaHost.de">
+    <meta name="theme-color" content="#0d0821">
+    
+    <!-- Open Graph / Social Media -->
+    <meta property="og:type" content="website">
+    <meta property="og:site_name" content="HexaHost.de">
+    <meta property="og:title" content="<?php echo isset($page_title) ? htmlspecialchars($page_title) : 'HexaHost.de'; ?>">
+    <meta property="og:description" content="<?php echo isset($page_description) ? htmlspecialchars($page_description) : 'Zuverlässiges Hosting aus Niederbayern'; ?>">
+    <meta property="og:locale" content="de_DE">
+    
+    <!-- Main Stylesheet -->
+    <link rel="stylesheet" href="assets/css/style.css">
+    
+    <!-- Fonts -->
+    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&family=Russo+One&family=Source+Sans+Pro:wght@300;400;600;700&display=swap" rel="stylesheet">
+    
+    <!-- Favicon -->
+    <link rel="icon" type="image/svg+xml" href="favicon.svg">
+    <link rel="apple-touch-icon" href="favicon.svg">
+    
+    <!-- Canonical URL (falls gesetzt) -->
+    <?php if (isset($canonical_url)): ?>
+    <link rel="canonical" href="<?php echo htmlspecialchars($canonical_url); ?>">
+    <?php endif; ?>
+</head>
+<body>
+    <header class="header">
+        <nav class="nav">
+            <div class="nav-container">
+                <div class="nav-logo">
+                    <a href="/">
+                        <img src="https://cdn.hexahost.de/assets/img/logo/8iFs123BynHQWHI5.png" alt="HexaHost.de Logo" class="logo-image">
+                    </a>
+                </div>
+                <ul class="nav-menu">
+                    <li><a href="/" class="nav-link <?php echo ($current_page === 'home') ? 'active' : ''; ?>">Home</a></li>
+                    <li class="nav-dropdown">
+                        <a href="#" class="nav-link <?php echo (in_array($current_page, ['vpc', 'vps', 'mail-gateway', 'webhosting'])) ? 'active' : ''; ?>">Produkte</a>
+                        <ul class="dropdown-menu">
+                            <li><a href="/vpc" class="<?php echo ($current_page === 'vpc') ? 'active' : ''; ?>">Virtual Private Container</a></li>
+                            <li><a href="/vps" class="<?php echo ($current_page === 'vps') ? 'active' : ''; ?>">Virtual Private Server</a></li>
+                            <li><a href="/mail-gateway" class="<?php echo ($current_page === 'mail-gateway') ? 'active' : ''; ?>">Mail Gateway</a></li>
+                            <li><a href="/webhosting" class="<?php echo ($current_page === 'webhosting') ? 'active' : ''; ?>">Webhosting</a></li>
+                        </ul>
+                    </li>
+                    <li><a href="/about" class="nav-link <?php echo ($current_page === 'about') ? 'active' : ''; ?>">Über uns</a></li>
+                    <li><a href="/contact" class="nav-link <?php echo ($current_page === 'contact') ? 'active' : ''; ?>">Kontakt</a></li>
+                </ul>
+                <div class="nav-toggle">
+                    <span></span>
+                    <span></span>
+                    <span></span>
+                </div>
+            </div>
+        </nav>
+    </header>