Журнал изменений

Updates the base_fingerprint value in config/local.php to reflect the current state of the codebase following the batch refactor of admin modules to the new fragment API.

Core changes:

1. Fingerprint update (config/local.php):
2. Updated base_fingerprint from 268a9d51... to 8cc21cf6...

Benefits: - Config fingerprint in sync with current codebase state

Technical notes: - Auto-generated value; no logic or behavior changes

Rewrites the links and media admin modules to use the unified new/* fragment API, replacing all legacy getTplAdminNavi, getTplAdminTableHead, and getTplAdminActionMenu calls with getTplAdminTabs, new/table, new/row-actions, new/table-row, new/table-cells, and new/form; removes four legacy HTML fragment files.

Core changes:

1. Links list and add form (modules/links/admin/index.php):
2. Fixed setHead() leading-whitespace indentation
3. Replaced getTplAdminNavi with getTplAdminTabs in all three status branches
4. Row rendering migrated to new/table-row, new/table-cells, new/row-actions
5. Add/edit form rebuilt as new/form rows array with new/input and new/textarea
6. Table + pager wrapped in getHtmlPart('box')
7. Media list and add form (modules/media/admin/index.php):
8. Fixed setHead() leading-whitespace indentation
9. Replaced getTplAdminNavi with getTplAdminTabs in all three status branches
10. Row rendering migrated to new/table-row, new/table-cells, new/row-actions
11. Add/edit and linked-files forms rebuilt as new/form rows array
12. Table + pager wrapped in getHtmlPart('box')
13. Template cleanup (templates/admin/fragments/):

14. Removed: admin-links-add-rows.html, admin-links-list-row.html, admin-media-add-rows.html, admin-media-link-row.html

Benefits: - Links and media modules fully aligned with new admin fragment API - All legacy HTML fragment files for these modules eliminated

Technical notes: - No SQL, schema, or URL changes

Rewrites the files and help admin modules to use the unified new/* fragment API, replacing all legacy getTplAdminNavi, getTplAdminTableHead, and getTplAdminActionMenu calls with getTplAdminTabs, new/table, new/row-actions, new/table-row, new/table-cells, and new/form; removes four legacy HTML fragment files.

Core changes:

1. Files list and add form (modules/files/admin/index.php):
2. Fixed setHead() leading-whitespace indentation
3. Replaced getTplAdminNavi with getTplAdminTabs in all three status branches
4. Row rendering migrated to new/table-row, new/table-cells, new/row-actions
5. Add/edit form rebuilt as new/form rows array
6. Table + pager wrapped in getHtmlPart('box')
7. Help list and add form (modules/help/admin/index.php):
8. Fixed setHead() leading-whitespace indentation
9. Replaced getTplAdminNavi with getTplAdminTabs in both status branches
10. Row rendering migrated to new/table-row, new/table-cells, new/row-actions
11. Add and thread-view forms rebuilt as new/form rows array
12. Table + pager wrapped in getHtmlPart('box')
13. Template cleanup (templates/admin/fragments/):

14. Removed: admin-files-add-rows.html, admin-help-add-rows.html, admin-help-addview-rows.html, admin-help-list-row.html

Benefits: - Files and help modules fully aligned with new admin fragment API - All legacy HTML fragment files for these modules eliminated

Technical notes: - No SQL, schema, or URL changes

Rewrites four admin modules to use the unified new/* fragment API, replacing getTplAdminNavi, getTplAdminTableHead, getTplAdminActionMenu, and associated legacy helpers with getTplAdminTabs, new/table, new/row-actions, new/table-row, and new/table-cells; also fixes setHead() indentation regression in files that had accidental leading whitespace.

Core changes:

1. Content list (modules/content/admin/index.php):
2. Replaced inline head array + getTplAdminNavi with getTplAdminTabs
3. Table rebuilt with new/table (is_wrapless) + new/row-actions
4. Pager and table wrapped in getHtmlPart('box')
5. FAQ list (modules/faq/admin/index.php):
6. Replaced getTplAdminNavi with getTplAdminTabs in both status branches
7. Row rendering migrated to new/table-row, new/table-cells, new/row-actions
8. Table + pager wrapped in getHtmlPart('box')
9. Forum sync (modules/forum/admin/index.php):
10. Replaced getTplAdminNavi with getTplAdminTabs
11. 'alert' key updated to 'new/alert'
12. Table rebuilt with new/table + new/table-cells, new/table-row
13. Removed getTplAdminTitleTip / getTplAdminTextLink / getTplAdminColorLabel
14. Jokes list (modules/jokes/admin/index.php):
15. Replaced getTplAdminNavi with getTplAdminTabs in both status branches
16. Row rendering migrated to new/table-row, new/table-cells, new/row-actions
17. Fixed setHead() leading-whitespace indentation

Benefits: - All four modules render tables and action menus via the new fragment API - No legacy getTplAdminNavi or getTplAdminTableHead calls remain in these files

Technical notes: - No SQL, schema, or URL changes; no template files deleted in this group

Rewrites the clients and contact admin modules to use the unified new/* fragment API, replacing all legacy getTplAdminNavi, getTplAdminTableHead, getTplAdminActionMenu, getTplAdminForm, and radio_form calls; removes three legacy HTML fragment files that are no longer referenced.

Core changes:

1. Clients list (modules/clients/admin/index.php):
2. Replaced getTplAdminNavi with getTplAdminTabs
3. Rewrote row rendering: new/table-row, new/table-cells, new/row-actions
4. Add form rebuilt as new/form with rows array; new/input for all fields
5. getTplAdminForm replaced with new/form + getHtmlPart('box')
6. Contact config (modules/contact/admin/index.php):
7. Replaced getTplAdminNavi with getTplAdminTabs

8. Config form rebuilt as new/form rows array: getTplRadioGroup for admins, new/textarea for info field

9. getTplAdminForm / getTplHiddenInput replaced with new/form hidden array
10. Template cleanup (templates/admin/fragments/):

11. Removed: admin-clients-add-rows.html, admin-clients-list-row.html, admin-contact-config-rows.html

Benefits: - Both modules aligned with the unified admin fragment API - No dependency on legacy HTML fragment files for form or table rendering

Technical notes: - No SQL, schema, or URL changes - Prepared statements and getVar() usage unchanged

Rewrites the changelog admin config form to use the new/form rows array and new/* fragment components, adds CSRF token validation on configsave, and updates chlogRenderCommitStats() in common.php to render file lists and stats with inline HTML when running in the admin context (ADMIN_FILE defined) instead of depending on deprecated changelog-file-row and changelog-stats fragments; removes three legacy HTML fragment files.

Core changes:

1. Config form (modules/changelog/admin/index.php):
2. Replaced getTplAdminNavi with getTplAdminTabs in changelog() and config()
3. Replaced new/alert frag key 'alert' with 'new/alert' for consistency

4. Config form rebuilt as new/form with rows array: source select with new/label-hint, GitHub fields with conditional row_class, numeric inputs, and radio groups via getTplRadioGroup

5. configsave() now validates CSRF token via checkSiteToken('changelog')
6. Main changelog view wraps content in getHtmlPart('box') with checkPerms()
7. Dual-context rendering (modules/changelog/common.php):

8. chlogRenderCommitStats(): when ADMIN_FILE is defined, renders file list and stats as raw inline HTML instead of calling legacy fragment functions

9. Frontend path unchanged: continues using changelog-file-row / changelog-stats
10. Template cleanup (templates/admin/fragments/):

11. Removed: admin-chlog-config-rows.html, admin-chlog-config-script.html, admin-chlog-source-select.html

Benefits: - Config form no longer depends on legacy HTML fragments - Admin file-stats rendering decoupled from frontend fragment contract - CSRF-safe config saves with named token scope

Technical notes: - Frontend template fragments (changelog-file-row, changelog-stats) unchanged - No schema, URL, or stored-data changes

Rewrites the auto_links admin module to use the new unified fragment API and strengthens security by adding CSRF token validation on all state-mutating actions (delete, hitreset, zerodel, configsave); removes six legacy HTML fragment files that were replaced by inline new/* fragment calls.

Core changes:

1. List and stats views (modules/auto_links/admin/index.php):

2. Replaced getTplAdminNavi with getTplAdminTabs; added getSiteToken() to hitreset and zerodel tab URLs

3. Rewrote row rendering with new/table-row, new/table-cells, new/row-actions
4. Config form rebuilt using new/form rows array and new/select, new/input
5. Replaced getTplAdminForm / getTplBox with new/form + getHtmlPart('box')
6. Stats view: table head and rows migrated to new/table + new/table-row
7. CSRF hardening (modules/auto_links/admin/index.php):

8. delete(), hitreset(), zerodel() now check checkSiteToken(); skip mutation and redirect with _TOKENMISS warning on failure

9. add() save path checks checkSiteToken() before INSERT/UPDATE
10. Template cleanup (templates/admin/fragments/):

11. Removed: admin-auto-links-add-rows.html, admin-auto-links-config-rows.html, admin-auto-links-list-row.html, admin-auto-links-stats-head.html, admin-auto-links-stats-row.html, admin-auto-links-stats-search.html

Benefits: - CSRF-safe: all write operations require a valid site token - Legacy fragment files eliminated; rendering fully handled in PHP - Config form uses structured rows array for consistency with other modules

Technical notes: - Prepared statements were already in use; no SQL API changes - No schema, URL, or session-API changes

Rewrites the account admin module to align with the new unified admin fragment API introduced across all admin modules: replaces legacy getTplAdminNavi, getTplAdminTableHead, getTplAdminActionMenu, getTplBox, and radio_form calls with new/table, new/row-actions, new/form, new/alert, and getTplAdminTabs; extracts getAccountSearch() as a standalone function and adds proper CSRF token guards and getSiteToken() on all state-changing actions.

Core changes:

1. Account list (modules/account/admin/index.php):
2. Replaced getTplAdminNavi with getTplAdminTabs and subtitle_html parameter
3. Rewrote row rendering: new/table-row, new/table-cells, new/row-actions, new/title-tip
4. Added filterTextHighlight() for search term highlighting in all relevant columns
5. Extracted getAccountSearch() as named function; moved search form to subtitle_html slot
6. Replaced getTplPager with inline pagination using new/pager-link and new/pager-dots
7. Account config (modules/account/admin/index.php):
8. Replaced getTplBox + form-conf fragment with new/form rows array
9. Replaced radio_form() / getTplSelect() with getTplRadioGroup / new/select
10. Added CSRF token hidden field to config form via getSiteToken()
11. Replaced getTplCodeEditor call with updated signature pattern

Benefits: - Consistent admin UI: all controls rendered via unified new/* fragment API - CSRF-safe: all state-mutating actions guarded with getSiteToken() - Search now highlights matched text in ID, name, IP, and email columns - Config form no longer depends on legacy form-conf HTML fragment

Technical notes: - getAccountSearch() is module-private; not exported or shared - Pagination logic moved from getTplPager to inline loop with new/pager-link - No schema, URL, or session-API changes

The previous commit normalized copyright to ASCII (c) in config files, but setConfigFile() in core/system.php uses © as the canonical template for generated configs. Restoring © everywhere keeps generated and hand-authored files consistent.

Core changes:

1. Config generator (core/system.php):

2. Restore '# Copyright © 2005 - Y SLAED' in setConfigFile() template * Was changed to (c) in the previous chore commit

3. Config files (config/referers.php, config/replace.php, config/scheduler.php, config/security.php, config/statistic.php):

4. Revert copyright line from (c) back to © * These files are generated or maintained by setConfigFile(); must match

Benefits: - Generated and static config files share identical copyright format - No divergence between setConfigFile() output and repository state

Technical notes: - config/referers.php was not touched in the previous commit; corrected here - Encoding rule exception: © is required here as the project copyright symbol

Replace legacy template helpers (getTplOption, getTplSelect, getTplAdminNavi, getTplAdminSearchBox, admin-*-form fragments) with the unified new/ fragment API across five admin modules, improving consistency and removing deprecated paths.

Core changes:

1. Scheduler (admin/modules/scheduler.php):
2. Replace getTplAdminNavi with getTplAdminTabs
3. Replace getTplAdminTipLine string concatenation with structured $tips array
4. Replace custom action form+link HTML with $acts arrays using row-actions-item fragments

5. Use token-carrying GET links for run/unlock/delete actions instead of POST forms * run action now gated behind job[manual] === 1 flag

6. Replace old alert() fragments with new/alert fragments
7. Security / bansave (admin/modules/security.php):
8. Refactor bansave(): move all logic under if (!$warn) guard using $warn pattern

9. Remove manual opcache_invalidate and file re-include for config reload * Use $conf['security'] directly instead of re-reading security.php

10. Migrate token-error path to setRedirect flash instead of inline echo
11. Statistic (admin/modules/statistic.php):
12. Replace getTplOption/getTplSelect with new/select-option + new/select fragments
13. Replace getTplAdminSearchBox + admin-statistic-search-form with new/form + searchbox part
14. Replace getTplAdminNavi with getTplAdminTabs using subtitle_html for search bar
15. Replace admin-statistic-image with new/image-preview fragment
16. Template (admin/modules/template.php):

17. Add getTemplateFiles(), getTemplateHtmlFiles(), getTemplateCssFiles() helpers * Use RecursiveIteratorIterator instead of manual scandir loops

18. Add getTemplateTabsOps() for consistent tab URL generation
19. Migrate getTemplateSearch() to new/select-option + new/form + searchbox part
20. Remove preg_match('/\./', $file) guard; replace with is_dir() check
21. Uploads (admin/modules/uploads.php):
22. Migrate getUploadsSearch() to new/select-option + new/form + searchbox part
23. Migrate upload form to new/form with structured rows and hidden arrays
24. Replace admin-uploads-upload-rows fragment with inline new/input fields
25. Replace old alert() with new/alert fragments

Benefits: - Eliminates six deprecated template helpers from admin module code paths - Scheduler run/unlock/delete no longer require hidden POST forms per row - Security bansave is simpler and does not perform redundant config file re-reads

Technical notes: - Scheduler manual flag (job[manual]) gates the Run action; built-in jobs are not manually runnable - Template RecursiveIteratorIterator replaces nested scandir and covers subdirectories - No changes to config keys, DB schema, or public-facing URLs