Официальный сайт SLAED CMS

Ports the approved demo designs into the system: the voting widget gains animated results, live auto-refresh driven by the global live_u config, and unified play/stop status glyphs across every context.

Core changes:

1. Voting widget (core/system.php, voting-widget/voting-view):

2. Widget wrapped in .sl-vote with data-sl-vote-live/url on active results; is_lead marks the leading answer (trophy follows the max)

3. Result rows expose data-sl-votes/percent; counters wrapped for JS

4. Corner tool cluster: admin gear menu (now also in the block) before the status glyph, aligned to the block title line

5. Dormant go=1 getVotingView dispatcher case now echoes and serves as the live endpoint; closed polls never render live attributes

6. Status glyphs (voting-home.html, theme.css, lang/*):

7. One 16px glyph everywhere: play-circle (success, pulse) while the poll is active, stop-circle (warning, static) when it has ended

8. Same inline typography as .sl-tip-icon so both pixel-snap alike; poll list rows show the marker before the info tip

9. _VOTING_ACT/_VOTING_LIVE/_VOTING_END constants in six locales
10. Client mechanics (plugins/system/slaed.js, theme.css):

11. setVoteBlocks: cold-start intro counts bars, percents and vote numbers up from zero; live polling tweens from previous values, moves the lead class and copies the votes/comments chips verbatim

12. Toggle animations honour data-sl-toggle-display; float panels can right-align to their trigger via data-sl-float-align=end and clamp to the trigger instead of the viewport edge

13. Any htmx .sl-but shows the system loading dots while its request is in flight; interactive option rows with accent-color controls

14. Voting block query (blocks/voting.php):

15. Four display modes collapsed into one prepared query; random mode uses ORDER BY RAND() LIMIT 1 instead of loading every id

Benefits:

• Polls feel alive without page reloads and respect reduced motion
• Status is readable at a glance in the block, the module and lists

Technical notes:

• Live updates re-render fully only when the answer set changes
• The totals chip updates without digit animation by request

Adds six standalone HTML showcases used to iterate on the sidebar user block and the voting widget before porting the chosen designs into the lite theme.

Core changes:

1. User block labs (demo/user-block-*.html):

2. 42 full-block variants: logged-in, guest, geo details and 2026 trends

   • surfaces (glassmorphism, liquid glass, neumorphism), bento, density
   • live session feed, accordions, group-progress ring, drag constructor
3. All variants reuse real block data and lite theme tokens/classes
4. Voting block lab (demo/voting-block.html):

5. 17 variants for form and results states on the real widget anatomy

   • system-markup section with effects layered on sl-* selectors only
   • merged live variant that became the shipped widget behaviour

Benefits:

• Design decisions reviewed in-browser against real markup before touching templates

• Serves as a reference gallery for future block redesigns

One H1 per page: page/module titles render H1, de-polluted pager/footer/ sidebar/related/category headings down to their proper level, and view sub-headings normalized. Heading sizes tokenized (--sl-h1..--sl-h4 in base.css) with framework classes wired to them in theme.css; getModuleNavi gains an is_heading flag so view pages do not emit a second H1.

Portable, PHP-level redirects in core/security.php (proxy-aware via X-Forwarded-Proto, GET-only, default off):

• bare /index.php -> / (301) to kill the duplicate homepage URL
• opt-in forcessl (http->https) and forcehost (www->canonical homeurl host)

Admin config SEO tab gains forcessl/forcehost toggles (constants in all 6 languages); getPublicUrl() returns root with trailing slash; help doc admin/info/config/ru.md documents canonical behavior and the new toggles.

Move hardcoded & and hand-built HTMX markup out of PHP: URL producers now pass a raw & URL as data, and fragments escape it once at the output boundary via {{ }}. Removes the last inconsistency where URL-bearing HTMX attributes still followed the legacy escape-at-source + markup-in-PHP pattern.

Core changes:

1. Link/tab/button fragments (templates/{lite,admin}/fragments):
2. tabs-link.html: add hx_get/hx_target/hx_swap block, URL escaped via {{ }}

3. button.html: add hx-post block (hx_post/hx_include/hx_target/hx_swap/ hx_on_click/hx_on_after), URL escaped; JS validation stays raw passthrough

4. link fragment already had is_htmx (hx-get="{{ href }}") — reused as-is
5. PHP producers now emit data, not markup:
6. core/admin.php: upload file links use is_htmx + hx_target (drops & blob)
7. admin/modules/uploads.php: upload tabs pass raw hx_get/hx_target
8. core/user.php: comment/PM submit forms pass raw hx_post + hx_* fields
9. Docs:
10. Remove docs/PROMPT_HREF_AMPERSAND.md (task complete)

Benefits:

• Single escape at the sink; & structurally impossible
• Unified hx_* field vocabulary across link/tabs-link/button fragments
• Removes duplicated URL (href + hand-built hx-get) in upload links

Technical notes:

• getSafe() = htmlspecialchars(ENT_QUOTES|ENT_SUBSTITUTE, UTF-8)
• Verified live: comment form, admin upload tabs — single &, zero &
• Additive change; legacy link_attr/input_attr passthrough kept for other uses