Журнал изменений

Implements the forum wishlist batch for 6.3: admin lists get grouped drag-and-drop ordering and sl-dial action fans, free (infly) blocks become usable again through content and template tags, and publications gain an intro visibility setting with noindex for letter lists.

Core changes:

1. Blocks admin list (core/admin.php, admin/modules/blocks.php):

2. getAdminBlockList() rewritten: rows grouped by position with collapsible sl-panel-toggle headers, drag handle plus order number in one column

   • free (infly/flyfix) blocks form a trailing group with accent chips
   • legacy prev/next self-join query replaced by a single plain select

3. updateAdminBlockOrder() now persists a full group order from one POST (ids list) with a CSRF token check the old swap endpoint lacked

4. RSS feed select in the add form used value "0" for the custom option, which filterUrl() turned into http://0 and wiped the block content

5. Categories admin list (core/admin.php, admin/modules/categories.php):

6. getAdminCategoryList() rewritten as an indented tree (tree-node fragment) grouped by module with collapsible headers and drag ordering among siblings; subtrees travel with their parent

7. publication counters consolidated into one GROUP BY query per module (page dropped from 92 to 14 queries), child counts computed in memory

8. new change() handler toggles category status from the action fan
9. module filter defaults to the new "All modules" option (_ALLMODULES)
10. Free block revival (core/classes/parser.php, core/classes/template.php):

11. Parser::filterFreeBlocks() resolves [block=id] tags in trusted content only ($safe === false), guarded against nesting, block content recursion (Parser::$freeoff during the getBlocks() cache build) and admin context

12. Template::filterFree()/getFree() compile {% freeblock id %} in theme templates through the same getBlocks() engine and guards

13. both entry points honour status, expiry, language, view rights and flyfix module rules; unavailable blocks render as empty output

14. Dial action fans replace hover popover menus in every admin list (30 files across admin/modules and modules/*/admin):

15. dial.html gains link_attr (htmx) and onclick_attr (confirm) support

16. consistent icon vocabulary: power, pencil, trash, eye, check2 and context icons (play-fill, unlock, eraser, database-add/dash/up, ...)

17. actions cell anchors the absolute fan via td.sl-col-actions position so checkbox-trailing tables (news, comments, shop) work too

18. broken delete confirm in the groups list fixed (bare onclick value)
19. Publications intro setting and liste noindex:

20. news/pages full view honours new intro config flag (default on) to hide the teaser text when a body text exists (_C_INTRO admin label)

21. getSeoRoute() marks op=liste as noindex, follow without canonical
22. Shared infrastructure (templates/admin, plugins-free):

23. generic drag attributes (data-sl-drag-id/group/scope/parent, drag-url, drag-target) unify the admin-ui.js engine for blocks and categories

24. collapsible group rows persist per key in localStorage

25. getTplMoveControls(), move-controls.html and _BLOCKUP/_BLOCKDOWN constants removed with the last arrow consumers

Benefits:

• reordering is one gesture instead of repeated full page reloads
• action menus no longer cover neighbouring rows
• free blocks work again and are safe by construction
• categories page is 6x lighter on the database

Technical notes:

• new language constants (_C_INTRO, _INFLYINFO, _DRAGSORT, _CATDRAGSORT, _ALLMODULES) added to all six admin locales

• module help files (admin/info/blocks, admin/info/categories) rewritten for the new UI; TEMPLATES.md and ARCHITECTURE.md document the tags

• backward compatibility: legacy blocks()/{%BLOCKS%} call styles remain unsupported; [block=id] and {% freeblock id %} replace them

Adds a safe server-side SEO pipeline that builds titles, meta, Open Graph, JSON-LD structured data, and breadcrumb trails from explicit page facts across all frontend modules.

Core changes:

1. SEO core (core/system.php, core/helpers.php, core/security.php, core/user.php, core/classes/parser.php):

2. filterSeoText, getSeoTitle, getSeoJson/getSeoJsonItems, setSeoJsonVars, getSeoGraph, getSeoSchema, and getSeoBreadcrumbSchema build normalized, safely encoded head data

3. Structured data is re-encoded from decoded values, never rendered as raw template strings

4. Module coverage (modules/*, admin/modules/config.php, index.php, config/global.php):

5. Frontend modules pass explicit titles, descriptions, and schema facts through setHead

6. Legacy hardcoded JSON-LD template blocks removed from the default config; stale social profile link dropped

7. Templates (templates/lite fragments and partials, templates/admin/fragments/head-title.html, templates/lite/fragments/head-title.html):

8. Dedicated head-title fragment and semantic markup adjustments for cards, tables, titles, navigation, and category views

9. Language constants (lang/.php, admin/lang/.php):
10. SEO-related constants synchronized across all six languages

11. Verification (tests/SeoSemanticsValidationTest.php, tools/seo-audit.php, tests/Unit/ParserFixturesTest.php, tests/Unit/ViewBridgeSmokeTest.php, tests/Unit/PasswordHashTest.php, phpstan.neon, setup/index.php):

12. New semantics validation suite and a curl-based CLI audit for route-level schema types and indexability

13. Minor code style cleanup applied by php-cs-fixer

Benefits:

• Search engines receive consistent, escaped structured data built from one pipeline instead of per-template JSON strings

• Route matrix is auditable via tools/seo-audit.php

Technical notes:

• JSON-LD encoding strips HTML-significant characters to keep script contexts safe

• Backward compatible: no routes, database, or module APIs changed

Replaces the block-list-item fragment with a composition of the existing link and list-item fragments and removes the unused lite searchbox partial.

BREAKING: templates/lite/partials/searchbox.html is removed. External modules that rendered this partial by name must ship their own template. Removal confirmed by the project owner.

Core changes:

1. Block emitters (blocks/pages.php, news.php, faq.php, jokes.php, auto_links.php, files.php):

2. Build the anchor via getHtmlFrag('link') with escaped href, title, and label

3. Wrap it as trusted content_html in getHtmlFrag('list-item')

4. auto_links uses the semantic is_blank flag instead of a raw target_attr string, which also adds rel="noopener noreferrer"

5. Fragment removal (templates/lite/fragments/block-list-item.html):
6. Deleted after zero-reference search across PHP and HTML

Benefits:

• One fragment contract for links instead of a parallel copy
• Stronger target security for external auto_links entries

Technical notes:

• List markup of all six blocks verified; escaping boundaries unchanged

• No admin files touched by this change

Reformats the admin theme stylesheets to the shared conventions and merges proven duplicate adjacent rules without changing any computed style.

Core changes:

1. Formatting (templates/admin/assets/css/base.css, theme.css):

2. 2-space indentation, one property per line, one blank line between blocks

3. Section comments normalized to the / Name: scope / shape
4. No rule reordering, no selector or value changes
5. Consolidation:

6. Adjacent rules with identical declaration sets merged within the same at-rule context only

7. No moves between base.css and theme.css, no cross-media merges

Benefits:

• Consistent, diff-friendly stylesheet layout
• Fewer duplicate declarations with cascade behavior preserved

Technical notes:

• Theme-aware usage audit reports 361 defined classes, 8 static-only unknowns kept as informational

• No property values or selectors removed without emitter evidence

Fixes the Windows path defect that silently turned the template reference scan into a no-op and replaces cross-theme byte-equality checks with per-theme runtime contracts.

Core changes:

1. Reference validator hardening (tests/TemplateValidationTest.php):

2. Normalize base path and file paths to forward slashes before computing repository-relative paths

   • Mixed Windows/POSIX separators previously left absolute paths,

so anchored patterns matched nothing and zero references were
checked while the test stayed green

• Require non-zero counters for found, classified, and include/extends/component references

• Discover installed frontend themes dynamically instead of the hardcoded default/simple/lite list

• Forbid cross-theme includes, cross-theme asset references, hardcoded own-theme directory paths, and symbolic links

• Drop testSharedFrontendFragmentsStayInSyncAcrossThemes in favor of testThemeRuntimeContractsAreIndependent

• Theme-aware CSS usage audit (tests/Unit/AdminCssClassUsageTest.php):
• Report admin and lite independently

• Scan theme HTML, theme hooks, PHP emitters, and shared JS state classes so chart, sort, and seasonal classes are no longer false positives

• Keep the unused list informational; removal still requires a full emitter audit

Benefits:

• The reference scan now actually validates template targets on Windows and POSIX alike

• Themes can evolve independently without byte-equality coupling

Technical notes:

• Regression cases cover mixed-separator paths and emitter classification

• No runtime code changed in this commit