Justice. Legal services website. A solution for law firms, lawyers, and attorneys.

What this solution does

Justice is a ready-made solution for law firms, lawyers, and legal practitioners. The archive includes two independent design themes: Classic in a warm gold-graphite palette and Modern with a bronze accent on an off-white background. Theme switching is performed in the admin panel via a single field without editing templates.

The backend has been rewritten from scratch for PHP 8.1+ and Bitrix 23.200.0+. It features D7 ORM, typed SiteSettings, composite caching, and tag-based invalidation. On subsequent hits, TTFB drops to 30–50 ms. Vulnerabilities including XSS, RCE, and SQL injection found in the 2.0.x line have been patched.

The solution comprises a website template, a set of custom components for the showcase, demo content covering 25 infoblock types, and an automated installation wizard. Deployment takes approximately one hour. No external modules, licenses, or subscriptions are required; the system operates on the standard Bitrix kernel.

After installation, you receive a ready-to-use website with a standard structure for a law firm: services, case studies, team, testimonials, licenses, blog, FAQ, promotions, job openings, product store, and contacts. Demo data can be installed or skipped directly in the setup wizard.

The distribution includes the Justice website template with two themes (Classic / Modern), switchable from the admin panel.

9 custom components in the codekeepers:* namespace — menu, news (list / detail), catalog, search (form / page / tag cloud), and contact form.

25 information block types with ready XML structures: homepage, services, case studies, blog, team, testimonials, licenses, FAQ, promotions, job openings, contacts, messengers, products, banners, statistics, partners, and others.

15 public pages with correct markup, lazy-loaded images, and integrated components.

Typed SiteSettings DTO with 66+ properties — a single point for site settings management (contacts, social networks, logos, colors, CAPTCHA, theme).

The Justice template includes two independent design systems rather than variations of a single style. Theme switching is handled via the data-theme attribute on the document root and a set of CSS variables. This approach allows changing the visual appearance without altering the markup structure or requiring component reinstallation.

The Justice template is designed for law firms, attorneys, and lawyers. It includes a classic theme featuring a homepage with photo banners.

The Justice template is designed for law firms, attorneys, and legal professionals. The default primary theme is Modern, featuring solid-color banners without photographs.

Switching between themes alters the color palette. Classic uses gold (#C89D66), dark sapphire (#262B3E), and a light background (#F9F9F9). Modern employs bronze (#B0813A), a dark primary color (#1B2A3F), and an off-white shade (#F4EBDD).

Card geometry also differs: Classic maintains traditional straight shapes, while Modern features rounded corners, soft shadows, and smooth fade-in animations.

Banner settings are independent. The 'photos in banners' toggle can be enabled separately for each banner. In recommended builds, Classic includes images, whereas Modern uses solid colors.

Base typography and icons are shared across both themes, utilizing the local Montserrat font in WOFF2 format. Differences are limited to the sizing grid and element density.

The Modern theme is additionally optimized for tablets and mobile devices, with revised breakpoints, updated header behavior during scrolling, and an adjusted card grid.

The theme is selected on the third step of the setup wizard. After installation, it can be changed in the admin panel with a single click via: 'Content → Information Blocks → Basic Settings → Design Theme'.

The Bitrix administration panel includes a 'Theme Colors' tab in the main settings, offering four palette colors and a design theme selector. The backend has been completely rewritten from scratch using PHP 8.1 and Bitrix 23. The 2.0.x line has reached its end of life, as it relied on PHP 7.x and Bitrix main 22. Justice is not a patch over old code but a fully rearchitected solution built on the modern Bitrix stack.

The system requires PHP 8.1 or higher and Bitrix main version 23.200.0 or newer. It is compatible with all editions: Start, Standard, Small Business, and Business.

Internally, the solution utilizes D7 ORM, ServiceLocator, and Application. The critical execution path excludes legacy methods like CIBlockElement::GetList(), as well as create_function and eval. PSR-4 autoloading is implemented via Bitrix\Main\Loader::registerAutoLoadClasses. The solution classes reside in the module/lib/ directory under the namespace Codekeepers\Justice\*.

Site settings are managed through a typed SiteSettings DTO containing over 66 readonly properties, paired with a repository using tagged caching. This architecture allows site settings to be read with a single cache hit, eliminating database queries to the information block on every page view. Cache invalidation is triggered automatically by OnAfterIBlockElementAdd, OnAfterIBlockElementUpdate, and OnAfterIBlockElementDelete events. The iblock_id cache with the identifier and the /site_settings/ repository are cleared instantly after admin panel changes, removing the need for manual cache file clearing.

Static analysis PHPStan level 6 is achieved in the module/lib library with zero errors. Component templates have been rewritten using FrameHelper, output escaping has been implemented, and N+1 database query issues have been resolved.

Security: fixes relative to version 2.0.x

An audit of the 2.0.x line identified vulnerabilities of varying severity. In Justice, all of them are resolved at the code level without disabling functionality.

The window.eval call for processing AJAX responses has been removed from the custom contact form. Server responses are now parsed as JSON and validated against a schema, making XSS attacks via response spoofing impossible.

The create_function has been removed from component templates. This function is prohibited in PHP 8.0 and above and served as a vector for Remote Code Execution (RCE) when user data was substituted. It has been replaced with typed anonymous functions.

All component parameters are escaped via htmlspecialcharsbx before output. SQL parameters in custom queries are processed through Bitrix\Main\DB\SqlHelper::forSql.

Real server-side reCAPTCHA verification has been implemented using Bitrix\Main\Web\HttpClient. Previously, the token was accepted without validation, allowing bots to submit forms with any g-recaptcha-response value. Yandex SmartCaptcha and the built-in Bitrix captcha are also supported; the provider can be selected in the administration panel.

The built-in SVG sanitizer based on DOMDocument ensures XXE-safe processing. It automatically removes script tags, event handlers, javascript: URIs, and external DTDs. This guarantees that SVG logos uploaded via the admin panel contain no active malicious content.

Additionally, server-side validation is implemented for all contact forms. Using local WOFF2 fonts instead of loading them via the Google Fonts CDN prevents visitor IP addresses from being leaked to third parties, ensuring GDPR compliance.

Performance and SEO are configured out of the box. The Bitrix composite cache is enabled by default through the setup wizard (composite_frame_mode_default=Y). On subsequent requests, the response header includes X-Bitrix-Composite: Cache (file), reducing the Time To First Byte (TTFB) from approximately 300 ms to 30–50 ms on a typical VPS. Cache invalidation occurs automatically upon editing infoblock data, eliminating the need for manual cleanup.

Justice template for law firms, attorneys, and lawyers built on the Bitrix platform. It features the Modern theme with an optimized homepage.

Lighthouse mobile baseline scores: Performance ranges from 59 to 75, Accessibility from 78 to 86, Best Practices is 100, and SEO is 92 (results depend on content and hosting quality).

Lazy loading for images is implemented in 29 component templates. The Montserrat font is served locally in WOFF2 format (total size approximately 170 KB), eliminating the need for preconnect to Google Fonts and removing third-party requests.

The robots.txt file is included in the distribution package with rules to block access to system directories /bitrix/, /upload/, /personal/, and AJAX parameters. The sitemap.xml is auto-generated by a Bitrix agent every six hours, with configurable intervals.

Open Graph meta tags and meta descriptions are defined in header.php and are populated automatically from page properties.

Installation takes about one hour using a five-step wizard. The process is fully automated: a complete website with all sections is deployed on a fresh Bitrix installation within 40 to 60 minutes, including composite cache assembly and search re-indexing.

Step 3 of the setup wizard configures the solution.

Site selection. The solution can be installed alongside an existing site. The wizard creates a separate directory (for example, /next/) without affecting the current site.

Template selection. The package includes only the Justice template, so this step is performed automatically.

Site settings. You specify the logo, slogan, copyright, meta tags, and keywords. There is also a checkbox to install demo data.

Installation. The module is registered (if not already installed), information blocks are created from XML files, public pages are copied, and demo data is populated.

Completion. An idempotent sweep is performed: macros #SITE_ID# are fixed in the CODE of information blocks, an email template for the feedback form is created, composite caching is enabled, and the first sitemap.xml is generated.

All post-installation scripts are idempotent. The wizard can be safely run again, including when installing a second site.

15 public pages and 25 content types.

The solution does not require manual structure creation. Immediately after the wizard, all standard sections of a law firm are available in the public part, and in the admin panel, corresponding information block types are available with pre-configured properties, edit forms, and Russian field labels.

Ready public pages include the sections "Home" and "About Us".

Template for law firms, attorneys, and legal professionals. It includes sections for services (list and detail), cases and projects (list, section, detail), team (list and detail), reviews, licenses, blog (list and detail), FAQ, promotions, vacancies (list and detail), product store (list, section, detail), contacts, search, as well as pages for offer, privacy policy, and 404 errors. The admin panel supports 25 content types based on XML information blocks: main_settings, services, projects, blog, team, reviews, licence, faq, discounts, vacancies, goods, messengers, feedback, banner_main, about, partners, stats, features, features_under, why-us, call-to-action, timeline, timeline-block, sidebar-phone, discount. Demo versions are available: Justice Classic and Justice Modern. Support is provided by Codekeepers, an authorized 1C-Bitrix developer partner.

General iT can prepare “Justice. Legal services website. A solution for law firms, lawyers, and attorneys.” for production, configure its main settings and adapt it to the website requirements.