Quick contact
System
An overview of the SKELETIO core: routing, DB pages, template packs, partial sandbox, and security rules.
What SKELETIO is
A mini-framework for DB-driven websites with strict routing rules, i18n, and secure partial rendering.
DB pages and translations
Content (including SEO meta) lives in the DB and is ready for multiple languages.
Template packs
Design is separated from logic. A pack defines partials and the visual style.
Partial sandbox
PartialRenderer runs only within the pack root and blocks path traversal.
URL rules
Everything goes through the front controller. Language is the first URL segment and the router handles a multi-level slug.
Pack, layout, and partials
The layout selects the template pack from the page or settings. DB content may include partials relative to the pack root.
[[partial:header/header.php]]
... HTML content ...
[[partial:home/carousel.php]]
[[partial:footer/footer.php]]Rules you don’t bypass
Security comes first. The framework is designed to minimize risky shortcuts.
XSS
Always escape HTML via the h() helper.
SQLi
Use PDO prepared statements—no string-concatenated SQL.
Traversal
PartialRenderer prevents includes outside the pack root and blocks forbidden files.
URLs and assets
Never hardcode /web/… Use route()/linkTag() and asset().
