Журнал изменений

Added production-ready documentation files for SLAED CMS 6.3 to support contributors, security researchers, and users upgrading from previous versions.

Core changes:

1. Project documentation (README.md):

• Updated with links to new documentation files
• Added references to CONTRIBUTING, SECURITY, CODE_OF_CONDUCT, UPGRADING

2. Contribution guidelines (CONTRIBUTING.md):

• Coding standards with 8 required verbs
• Type declarations and variable naming conventions
• SQL prepared statements and input validation rules
• Commit message format and PR requirements
• Testing requirements (PHPUnit, PHPStan)

3. Security policy (SECURITY.md):

• Supported versions table
• Vulnerability reporting process and timeline
• Security measures documentation (SQL injection, XSS, CSRF)
• Best practices for administrators

4. Code of Conduct (CODE_OF_CONDUCT.md):

• Based on Contributor Covenant 2.1
• Community standards and enforcement guidelines
• Contact information for reporting

5. Upgrade guide (UPGRADING.md):

• Migration paths from 6.2.x to 6.3.x
• Breaking changes (config_db.php removed, new db.php format)
• Function changes (tpl_eval, admin_file)
• Troubleshooting section

Benefits:

• Clear guidelines for contributors
• Transparent security reporting process
• Smooth upgrade path for existing users
• Professional open-source project presentation

This commit removes the old short-named info files that were replaced by full language name versions in the previous commit.

Removed files:

• modules/news/admin/info/de.html
• modules/news/admin/info/en.html
• modules/news/admin/info/fr.html
• modules/news/admin/info/pl.html
• modules/news/admin/info/ru.html
• modules/news/admin/info/uk.html

Technical notes:

• Replaced by german.html, english.html, french.html, etc.
• Part of language naming standardization

This commit updates the news module to use centralized ModuleBase and renames info files to full language names for clarity.

Core changes:

1. News module (modules/news/index.php):

• Integrate with centralized module runner
• Reuse ModuleBase for navigation and filters
• Consistent offset and letter filter handling

2. Info file renames (modules/news/admin/info/):

• de.html → german.html
• en.html → english.html
• fr.html → french.html
• pl.html → polish.html
• ru.html → russian.html
• uk.html → ukrainian.html

Benefits:

• Centralized module behavior via ModuleBase
• Clear, readable info file names
• Consistent with language naming convention
• Easier maintenance and localization

Technical notes:

• Info files contain admin panel module descriptions
• Full language names match config/languages structure

This commit modernizes core system files with improved module management, security enhancements, and removal of deprecated components.

Core changes:

1. Module management (core/system.php):

• Add getModules() iterator for config-based module loading
• Enhance setConfigFile() with deep array merging
• Improve bootstrap module loading

2. Admin utilities (core/admin.php):

• Add updateModulesConfig() for filesystem sync
• Remove deprecated database-based module queries
• Improve module configuration handling

3. Security improvements (core/security.php, core/access.php):

• Enhanced input validation
• Improved access control checks

4. Database layer (core/classes/pdo.php):

• PDO connection improvements
• Better error handling

5. Removed deprecated files:

• config/config_db.php (replaced by config/db.php)
• core/classes/module.php (replaced by config-based system)

Benefits:

• Config-based module system (no database queries)
• Cleaner codebase without deprecated files
• Improved security and validation
• Better maintainability

Technical notes:

• Module config stored in config/modules.php
• Backward compatibility maintained