Журнал изменений

Geoip::getIpHtml() feeds 20+ call sites: comment/forum/pm meta rows where the IP renders as a green pill, and plain admin/frontend lists. The pill look lived in scoped context CSS; the renderer now signals the meta context explicitly and the last scoped chip rules leave the lite theme.

Core changes:

1. Renderer (core/classes/geoip.php):

• getIpHtml(string $ip, bool $meta = false) passes an is_geo_meta flag to the span fragment; default keeps every existing call site unchanged

2. Meta call sites (core/system.php, core/user.php, modules/forum/index.php):

• Comments, private message view and forum posts pass meta = true

3. Fragment (templates/lite/fragments/span.html):

• is_geo_meta adds sl-chip sl-chip-success ahead of the sl-geo-ip hook

4. CSS (templates/lite/assets/css/theme.css):

• Drop the scoped .sl-cargs / .sl-fp-meta geo-ip pill rules
• Add .sl-chip.sl-geo-ip a { color: inherit } so the inner IP link keeps the chip tone (replaces the two scoped link rules)

Benefits:

• The last context re-implementation of the chip recipe is gone
• Display context is an explicit contract instead of CSS scoping

Technical notes:

• Same accepted chip-metric shift as the date/edit chips: padding 8 -> 11px, gap 4 -> 6px; verified via computed-style probes (only those two diffs)
• Chip path verified live as moderator on a commented page; plain path is parameter-default identical, admin theme fragment ignores the new flag
• php -l clean on all touched PHP files

theme.css kept three ~15-line selector lists only to map ~30 semantic meta names (sl-date, sl-hits, sl-favor, ...) onto the shared chip recipe and its six tones. Emitters now output the canonical classes directly; the semantic names stay in the markup as hooks for JS/htmx and context rules.

Core changes:

1. Emitters (templates/lite/fragments + partials):

• span.html, inline-badge.html, date-badge.html, card.html, link.html, comment-action-ajax.html, table-row.html, main-content-item.html, main-carousel-item.html, partials/view.html emit sl-chip plus the tone matching the current rendering
  • Non-link elements keep their alias tone (info/success/warn/danger)
  • Links emit plain sl-chip: the a.alias selector always beat the bare tone list, so every link chip already rendered the success default
  • is_comments skips sl-chip when chip_tone is set to avoid a duplicate class token (voting comments link passes both)

2. CSS cleanup (templates/lite/assets/css/theme.css):

• Base, link-default and tone blocks keep only .sl-chip / a.sl-chip / .sl-chip-<tone> selectors; alias selectors removed
• Dead .sl-news-info selector dropped (no emitter anywhere)
• Hover block generalized to .sl-chip:has(> a):hover; favourite toggles keep their hook-based hover (spans are clickable via htmx)
• Context rules untouched: .sl-block-modules .sl-module and the site-card .sl-rate-sites positioning keep working via the retained hooks

Benefits:

• Chip vocabulary defined once; new meta labels need no CSS edits
• Markup declares its component explicitly instead of via a CSS alias map

Technical notes:

• .sl-votes, .sl-coms and .sl-favor remain in the DOM as JS/AJAX hooks (voting live refresh in plugins/system/slaed.js, favourite toggle)
• Verified: 132 computed-style probes of the post-migration markup are identical to the pre-migration rendering; live home/news/forum pixel diffs confined to dynamic counters; DOM hook classes asserted live

The lite theme carried two redundant state vocabularies: .sl-thide as an exact duplicate of .sl-none (display: none) and a third .selected tab-state class toggled by the shared tab script alongside .sl-is-active and aria-selected. Nothing in templates emits .selected.

Core changes:

1. Visibility utility (templates/lite):

• Replace sl-thide with sl-none in menu.html, layouts/bare.html, layouts/admin.html and the is_top_hidden branch of fragments/link.html
• Drop the .sl-thide rule from theme.css
  • Admin theme untouched: its .sl-thide is a different component (collapsed block + footer icon buttons), verified before scoping

2. Tab state (plugins/system/slaed.js, templates/lite/assets/css/theme.css):

• Stop toggling the legacy selected class in the shared tab script and drop it from the initial-tab detection
• Remove the .sl-tabs-link.selected selector; .sl-is-active and aria-selected remain the canonical pair
  • Safe for the admin theme: its CSS styles only .sl-is-active

Benefits:

• One visibility utility and one tab-state vocabulary across the lite theme
• Shared tab script writes only state that stylesheets actually consume

Technical notes:

• Verified with computed-style probes (only the two intended diffs: the removed .sl-thide rule and the orphaned .selected styling) and a live admin tab-switching run (activation, aria, panel display, clean console)
• No PHP involved; markup contract (is_top_hidden flag) unchanged

Mini chip buttons rendered as native <button> elements picked up the UA border and appearance, breaking the flat 26px pill look shared with anchor-based mini buttons.

Core changes:

1. Mini chip button base (templates/lite/assets/css/theme.css):

• Add border: 0 and appearance: none to .sl-but-mini
  • -webkit-appearance included for older WebKit builds
  • Anchor and span variants are unaffected (no UA chrome to reset)

Benefits:

• Identical rendering for <button>, <a> and <span> mini chip controls

Technical notes:

• CSS-only change, no markup or PHP involved
• No backward compatibility impact

Rebuilds the sidebar user block on a universal PHP data contract, fixes four long-standing bugs found along the way and standardises every cookie and frontend session key on the configurable user_c prefix.

Core changes:

1. User block (blocks/user_info.php, block-user-info.html):

• Private message counters via one prepared query, cached in the session for 60s and invalidated by deletePrivatCounts() on every mailbox mutation and on logout (core/user.php)
• Group and points meta line with next-group progress data (ngroup_name/points/pct), groups resolved in a single query
• Fixes: sidebar login posted user_pass without a CSRF token (never worked), logout pointed at unknown op sl-logout, settings pointed at the account overview, inbox links led to the missing privat module
• Unread badge .sl-pm-new replaces the autoplay-blocked audio alert

2. Session summary (core/system.php, session-summary/session-row):

• Counters aggregated in one query; detail rows load lazily through the new getUserSessionRows endpoint (hx-trigger click once)
• Table markup replaced with the div grid shared with the admin theme
• Optional auto-refresh driven by the new live_u config (admin field plus _LIVE_UPD constant in all six admin locales)

3. State naming and cookies (core/security.php, core/system.php):

• Cookies and frontend $_SESSION keys follow $conf[user_c]-<feature>; legacy stats_id/shop cookies migrated with one-release fallbacks
• Cart links carry the CSRF token the go=2 gate demanded (the cart was silently broken); emptying the cart now clears cookie and superglobal

4. Avatar defaults (core/user.php, uploads/avatars/default):

• getUserAvatarUrl() is the single resolver: user.svg, guest.svg and deleted.svg replace the 0/00.gif magic strings across seven call sites; registration stores an empty avatar and the resolver decides
• Avatar gallery accepts .svg and excludes system files by name

Benefits:

• Sidebar login, logout and cart actually work again
• One config knob (live_u) will drive every live block
• Distribution-safe: pure PHP, no server-specific rules

Technical notes:

• getCookies() filters to [a-zA-Z0-9_-]; base64 cookies are read from $_COOKIE directly with the user_c prefix
• Old default/00.gif rows in the users table fall back gracefully