Журнал изменений

Core changes: - README.md: admin modules 23/23 -> 24/24, add scheduler.php to list - UPGRADING.md: same count fix; getAdminInfo() now documents .html/.md dual extension support; add scheduler.php to modernized modules list - SECURITY.md: admin panel count 23 -> 24 (incl. scheduler); document getAdminInfo() .html/.md extension resolution order - CONTRIBUTING.md: getAdminInfo() info file table updated with .md col; setAdminNavi() section clarified (no per-module navi() wrapper needed)

Benefits: - Documentation accurately reflects scheduler.php admin module existence - getAdminInfo() .html/.md fallback behavior explicitly documented - UPGRADING migration checklist now complete for all 24 admin modules - SECURITY coverage table corrected

Technical notes: - getAdminInfo() (core/admin.php:826) checks .html then .md extensions - admin/info/*/ru.md files already exist alongside .html variants - .prompts/ dir is gitignored; internal knowledge files updated locally

• Replace per-module navi() wrappers in all 24 admin/modules/*.php with direct setAdminNavi() calls inside handler functions

• Refactor modules/*/admin/index.php panels to use same convention

• Remove redundant navi() top-level functions where setAdminNavi() now handles navigation inline

• Consistent tab/op URL format across all admin modules

Benefits: - Eliminates duplicated navi() wrapper boilerplate (24 files) - Single authoritative navigation implementation via core setAdminNavi() - Simplifies future admin module additions - scheduler.php already follows this pattern natively

Drop open.html and close.html from both themes and remove all setTemplateBasic('open') / setTemplateBasic('close') call sites across 11 modules and core/user.php

• Add setModuleNavi() to core/system.php: centralized nav builder with rate/canadd logic, defaults from $conf[module], any key overridable

• Extend setTemplateIf() in core/template.php: add {%if !flag%}, {%elseif flag%}, and non-empty var check via $vars parameter

• Update navi.html (default + lite): Variant A — full <a> tags from data vars, {%if var%} guards for optional items

• Add form-add.html (default + lite): universal add-form template with {%if%} blocks for all optional field groups

• Migrate 12 modules: remove local navigate()/getNewsNavi(), replace all call sites with setModuleNavi(); add module constants where needed (HELP_NAVI, JOKES_NAVI, SHOP_NAVI, WHOIS_NAVI, AUTO_LINKS_NAVI)

• Migrate add() in news, pages, help, links, files to form-add template

Core changes:

1. config/search.php, config/security.php:
2. Replace (c) with © in copyright header
3. sitemap.xml:
4. Update lastmod dates to 2026-03-17

Benefits: - Consistent copyright notation across all files - Sitemap reflects current modification dates

Technical notes: - No functional changes

Constants verified unused across all PHP files outside lang directories. Removed from all six locales simultaneously.

Core changes:

1. lang/*.php (de, en, fr, pl, ru, uk):
2. Remove _ACTIV (replaced by _ACTIVATE / _ACTIVATE2 in admin)
3. modules/forum/lang/*.php (de, en, fr, pl, ru, uk):
4. Remove _THANK (thank-you button feature removed)
5. Remove _WARNM (moderator report feature removed)

Benefits: - Smaller lang files, no dead definitions - Prevents accidental reuse of removed feature constants

Technical notes: - Verified with grep: no usage outside define() lines

Replace direct counter/backup.log file read with getSchedulerState('dbbackup') so the last backup timestamp comes from the same source as the scheduler UI.

Core changes:

1. getLastBackupRunLabel (admin/modules/monitor.php):
2. Remove backup.log file read
3. Use getSchedulerState('dbbackup')['last_success'] instead
4. Keep BACKUP_DIR mtime fallback unchanged

Benefits: - Single source of truth for backup timestamps - No dependency on a separate counter file

Technical notes: - backup.log is no longer read by monitor; file can be removed from disk

Remove the separate $ext map and hardcode .log extension throughout, since all log files now share the same format. Add dump_skip path sanitization on save. Restore sess_d, sess_b, log_b and log_d fields to the conf form and confsave handler.

Core changes:

1. Log file listing (admin/modules/security.php):
2. Remove $ext map; all log files are .log
3. Replace whitelist skip array with preg_match on .log extension
4. Remove database, dump_map and monitor entries from $labels
5. dump_skip sanitization (admin/modules/security.php):
6. Normalize line endings, strip leading ./, collapse slashes
7. Reject lines containing .. (path traversal)
8. Ensure each entry ends with /; deduplicate
9. Conf form + confsave (admin/modules/security.php):
10. Add sess_d, sess_b, log_b to conf form output
11. Add log_d field and restore _SEC_LOG_D row
12. Save sess_d, sess_b, log_b, log_d in confsave handler

Benefits: - No more silent loss of sess_d/sess_b/log_b/log_d on settings save - dump_skip entries are normalized before storage - Log list does not depend on a manually maintained extension map

Technical notes: - $ext variable removed; fileview/down/del now always use .log - Copyright header encoding fixed (© instead of ©)

Consolidate getSchedulerNextTime and getSchedulerPlannedTime into a single function to eliminate the redundant two-step call chain. Simplify the boot sequence in system.php by replacing inline conditional blocks with a direct require_once of the common includes.

Core changes:

1. Scheduler time resolution (core/system.php):

2. Remove getSchedulerConfig, getSchedulerDir, getSchedulerFile, getSchedulerBeat, getSchedulerBase, getSchedulerJob, getSchedulerSettings (moved to dedicated scheduler core)

3. Merge getSchedulerNextTime into getSchedulerPlannedTime * Now computes next run directly from last_run state * Removes unused $from parameter

4. Boot sequence (core/system.php):
5. Replace scattered require logic with require_once for security, user/admin and template

Benefits: - Fewer function calls per scheduler dispatch cycle - Simpler call site in scheduler.php (one function instead of two) - Boot sequence is now linear and readable

Technical notes: - getSchedulerPlannedTime signature unchanged (array $job, array $state) - Removed functions were unused outside core; no external API break

Rename all SCHEDULER* constants exceeding 18-char limit to comply with the updated constants.md naming rule (max 18 chars for lang constants). Add two new warning constants with a direct link to Security settings.

Core changes: - _SCHEDULER_NEXT_RUN → _SCHEDULER_NEXTRUN - _SCHEDULER_LAST_RUN → _SCHEDULER_LASTRUN - _SCHEDULER_DURATION → _SCHEDULER_RUNTIME - _SCHEDULER_SCHEDULE → _SCHEDULER_SCHED - _SCHEDULER_PRIORITY → _SCHEDULER_PRIO - _SCHEDULER_PRIORITY_INFO → _SCHEDULER_PRIOTIP - _SCHEDULER_PRIORITY_DUP → _SCHEDULER_PRIODUP - _SCHEDULER_UNLOCKED → _SCHEDULER_UNLOCKD - _SCHEDULER_URL_INFO → _SCHEDULER_URLINFO - _SCHEDULER_SYSTEM_INFO → _SCHEDULER_SYSINFO - _SCHEDULER_SCHEDULE_INFO → _SCHEDULER_CRONFMT - _SCHEDULER_WARN_DMAP → _SCHEDULER_WARNLOG - Add _SCHEDULER_WARN_DB, _SCHEDULER_WARNLOG, _SCHEDULER_WARN_GO (all 6 locales) - scheduler.php: show config warnings when log_b/log_d disabled, link to security settings

Benefits: - All SCHEDULER* constants now ≤18 chars (rule compliant) - Warnings inform admin where to enable the feature

Technical notes: - Updated in all 6 locales simultaneously (de, en, fr, pl, ru, uk) - Warning text uses correct semantic mapping: log_b=DB backup, log_d=file scan