Журнал изменений

Replaces the binary Yes/No super-admin flag with a three-tier access indicator (icon + colour), hardens the add/edit form (autocomplete, toggle collapsible, password validation), and fixes several minor rendering regressions introduced in earlier sessions.

Core changes:

1. admins() — list view (admins.php):

• Column header changed from _SUPERUSER to _ACCESS
• SQL now also fetches modules column for each admin row
• Computes $stat tier: 2=superuser, 1=has modules, 0=no access
• Status cell renders bootstrap-icon shield-fill-check with colour: danger for superuser, success for module access, muted for none
• data-sort attribute set to $stat so table can sort by access tier
• mailto subject line includes module name (_MODULESADMIN)

2. add() — edit/add form (admins.php):

• $check now reads the actual POST mail flag on re-render after error
• alert() call corrected: uses 'lines' key (was 'messages')
• Mail template text built with PHP_EOL instead of literal '\n'
• Password inputs get autocomplete="new-password"
• _MAIL_SENDE label rendered via span fragment with sl-no-colon class so no unwanted colon appears after the checkbox label
• Mail textarea collapsible moved from a wrapping div to the div-row level using id + attr (data-sl-toggle-display, style hide/show)

3. save() — persistence (admins.php):

• Password change detection uses $chg flag (both fields non-empty)
• Validation: skip password checks when editing without changing pwd
• $mail suppressed when editing without password change (avoid sending stale password notification)

Benefits:

• Visual access tier is immediately scannable in the admin list
• Password update is independent of mail notification
• Form collapses mail section cleanly without layout artefacts

Technical notes:

• filterAdminmods + getAdminModuleNames already existed; no new helpers
• Backward compatible: database schema unchanged

Introduces a new language constant _ACCESS (de: 'Zugriff', en: 'Access', fr: 'Accès', pl: 'Dostęp', ru/uk: 'Доступ') placed alphabetically before the existing _SUPERUSER constant. Used as the column header and checkbox label in the admins module to distinguish plain module access from full super-admin access.

Core changes:

1. All six admin language files (de, en, fr, pl, ru, uk):

• Added define('_ACCESS', '<translation>') between _SUBCATEGORY and _SUPERUSER so alphabetical ordering is preserved

Benefits:

• Enables the admins list to display a distinct 'Access' column header instead of reusing _SUPERUSER for a non-binary indicator
• Single-source translation for 'Access' across the whole admin panel

Technical notes:

• _SUPERUSER ('Full access') is kept unchanged for backward compat with existing super-admin badge tooltips

Aligns the template with the new PHP-side escaping contract: scalar monitor vars no longer need {{{ }}} (raw). SVG chart title vars switch to {{ }} now that PHP drops htmlspecialchars(). Request & Performance section redistributed so icon rows are balanced left vs right.

Core changes:

1. Scalar var escaping (templates/admin/partials/basic-monitor.html):

• {{{ cmsver/phpver/mysql }}} → {{ }} in version status block
• {{{ uptime/osname/servfull/servprot/servname/serverip/servport }}} → {{ }}
• {{{ diskfree/dskread/dskwrite }}} → {{ }}
• {{{ lastbackuprun/backupdirsz/cachedirsz/logsdirsz/uploadssz }}} → {{ }}
• {{{ failedlogins24h/errorlog24h }}} → {{ }}
• {{{ phpsapi/zend_eng/php_char/memlim/scriptmem/maxtime }}} → {{ }}
• {{{ postmax/upmax/maxvars/maxfileup/gdver/opcache_* }}} → {{ }}
• {{{ dbchar/dbtz/dbmaxpack/dbbuffpool/dbconn/dbcurname/dbuser }}} → {{ }}
• {{{ reqip/mempeak }}} → {{ }}
• SVG title vars {{{ tip_up/down/cpu/ram }}} → {{ tip_* }}

2. Request & Performance layout:

• LEFT: Client IP, Request URI (sl-tip), Query String (sl-tip), Execution Time, DB Queries — 2 icon rows
• RIGHT: Accept Language (sl-tip), Cookies (sl-tip), User Agent (sl-tip), DB Time, Memory Peak — 3 icon rows
• Previously: LEFT had 4 icon rows, RIGHT had 1 → visible asymmetry fixed

Benefits:

• No double-escaping; template engine owns the XSS boundary via {{ }}
• Request & Performance card visually balanced: 2 vs 3 icon rows
• Accept Language / Cookies / User Agent grouped on right (browser headers)

Technical notes:

• {{{ }}} retained only for vars that intentionally output HTML fragments (sl-tip HTML from getHtmlFrag): servroot, dbsqlmode, extlist_, req, lastsecurityevent24h, dbissueevent24h, syncurl, status icons

Replaces the old getTooltipText() / getLogSnippet() approach with the unified sl-tip popup component. PHP no longer does manual escaping or text truncation — the template engine handles escaping via {{ }} and CSS handles visual truncation in the value column.

Core changes:

1. Monitor module (admin/modules/monitor.php):

• Delete getTooltipText() — replaced by getHtmlFrag('info-tooltip', ...)
• Delete getLogSnippet() — inlined as preg_replace('/\s+/', ' ', trim())
• Remove htmlspecialchars() from all scalar monitor vars (template escapes)
• Remove htmlspecialchars() from SVG chart title vars (tip_up/down/cpu/ram)
• Replace getTooltipText() calls with getHtmlFrag('info-tooltip', [...]) for: servroot, dbsqlmode, extlist_on/off, all reqXxx vars, lastsecurityevent24h, dbissueevent24h
• Add global $tpl to getMonitorTemplateVars() (required for getHtmlFrag)

2. Deleted fragment templates:

• templates/admin/fragments/monitor-info-icon.html (old title= tooltip)
• templates/admin/fragments/monitor-tooltip-text.html (old short+icon)

Benefits:

• Single consistent popup component (sl-tip) across the entire admin UI
• Popup shows full untruncated content; CSS handles label truncation
• No double-escaping risk — template engine owns XSS boundary

Technical notes:

• getHtmlFrag('info-tooltip', ...) outputs raw HTML — use {{{ }}} in tpl
• Plain scalar vars now use {{ }} (auto-escaped) in template
• Log snippet whitespace normalization preserved inline at both call sites

Flash messages generated before the admin module head (e.g. save confirmations) were lost because module-head.html had no render point for them. getTplAdminTabs() now passes flash_html and the partial outputs it directly below the tab bar.

Core changes:

1. Admin tab helper (core/helpers.php):

• Pass flash_html => getFlashHtml() to module-head partial

2. Module head partial (templates/admin/partials/module-head.html):

• Render {{{ flash_html }}} below tabs when present

3. System (core/system.php):

• Extract $time local var before array_replace for readability
• Fix DB debug text separator: ". Ø" → "/ Ø" (typographic correction)

Benefits:

• Flash messages (save/error notices) now always visible after redirect
• DB stats panel separator matches the visual design convention

Technical notes:

• getFlashHtml() consumes the flash session entry on first call
• Separator change is display-only; no data or logic affected