Журнал изменений
checkPerms() returns a permission-warning banner that must appear above the form. It was incorrectly assigned to $body, overwriting the form before it was built. Moving it to $cont ensures the banner is always rendered in the correct position regardless of form output.
Core changes:
- Auto Links config (modules/auto_links/admin/index.php):
- $body = checkPerms(...) → $cont .= checkPerms(...)
- $body = $tpl->getHtmlPart('form', ...) stays separate
- Changelog config (modules/changelog/admin/index.php):
- Same fix in config() function
- Also removed stale checkPerms() call from changelog() view
- Contact config (modules/contact/admin/index.php):
- Same fix pattern
Benefits:
- Permission banners now appear above the form, not silently lost
- Consistent output-routing across all module config views
- No logic change — only output variable assignment corrected
Technical notes:
- $cont accumulates pre-form output; $body holds the main form HTML
- Pattern now matches all other admin module config functions
Introduce a self-contained demo HTML in the project docs folder that showcases candidate hover treatments for Bootstrap-Icons-based controls. The page is intended as a design reference, not as production code.
Core changes:
- Demo page (docs/icon-hover-gradient-demo.html):
- Standalone HTML with inline CSS that compares several icon-hover effects (gradients, glow, scale, shimmer)
- Pulls the existing Bootstrap Icons stylesheet from templates/admin/assets/vendor so the icons render exactly as they do in the admin theme
- No JavaScript dependencies; the page is fully static
Benefits:
- Provides a visual reference when iterating on admin button or icon hover styles without spinning up the full admin shell
- Lives under docs/ so it stays out of any production build pipeline
Technical notes:
- Pure documentation asset; not linked from runtime templates
- Safe to open directly from disk because all styles are inline and the vendor stylesheet uses a relative path
- Can be retired later without affecting any shipped feature
Refresh the _meta.base_fingerprint snapshot stored in
config/local.php so it reflects the new defaults bundled in
config/global.php (refreshed admin logo and rotated site security
key). The fingerprint is the local override layer’s view of the upstream
default state and must move forward in lockstep.
Core changes:
- Local configuration meta (config/local.php):
- Replace
_meta.base_fingerprintwith the hash that matches the currentconfig/global.php- Prevents the override layer from flagging the new defaults as stale on first boot
Benefits:
- Configuration loader recognises the new baseline immediately
- No spurious "defaults changed" indication after pulling the release
Technical notes:
- Pure metadata update; no behavior depends on the literal value
- Always lands as the final commit in a config-defaults rotation so it reflects the fully-committed upstream state
Replace the bundled default sitekey with a fresh randomized value to
keep the shipped baseline distinct from prior releases. The key seeds
internal hashing helpers, so rotating the default is a routine hygiene
step before tagging a new build.
Core changes:
- Default configuration (config/global.php):
- Update
sitekeyto a new 25-character random value- Replaces the previous default that had been in place across recent builds
- Restricted to the
_meta-style global default; existing installations keep their own value becauseconfig/local.phpoverrides take precedence
Benefits:
- Fresh shipped value reduces risk of accidental cross-environment fixture overlap
- Keeps the bundled defaults aligned with the current release
Technical notes:
- This change only touches the default in the repository; deployed systems retain whatever value they had configured via local overrides
- No code or schema change accompanies the rotation
- The matching configuration fingerprint update lands in the next commit so the local-override snapshot reflects the new defaults
Replace the previous logo set (256x73, 512x148, 1024x297) across all four shipped templates with the redrawn 256x79 / 512x157 / 1024x315 variants, point the configured admin logo to the new filename, and upgrade the logo-folder placeholder redirect to HTTPS.
Core changes:
- Logo binaries (templates/{admin,default,lite,simple}/images/logos):
- Remove old PNGs: slaed_logo_256x73, slaed_logo_512x148, slaed_logo_1024x297
- Add new PNGs: slaed_logo_256x79, slaed_logo_512x157,
slaed_logo_1024x315
- Updated artwork ships with adjusted vertical proportions (79/157/315 instead of 73/148/297) for cleaner header alignment
- Configuration default (config/global.php):
- Switch
admin_logodefault fromslaed_logo_256x73.pngtoslaed_logo_256x79.pngso fresh installs pick up the new asset
- Folder placeholder (templates/{admin,default,lite,simple}/images/logos/index.html):
- Update the meta-refresh redirect target from
http://www.slaed.nettohttps://slaed.net- Aligns the placeholder with the live HTTPS canonical URL and avoids an extra redirect hop
Benefits:
- Consistent logo geometry across the four bundled themes
- New installs render the refreshed logo without manual config edits
- Placeholder pages no longer downgrade to plaintext HTTP
Technical notes:
- Existing custom installs that pinned the old filename in their local
config keep working because the old asset is no longer referenced;
set
admin_logoto a custom file as before if needed - No layout, CSS, or template structure changes were required to host the slightly taller artwork
Reduce vendor-prefix noise in the admin theme stylesheet and remove properties that no longer carry weight in modern browsers. Behavior is preserved; the change is purely a cleanup to keep the rule blocks tighter.
Core changes:
- Stylesheet cleanup (templates/admin/assets/css/theme.css):
- Drop
-webkit-font-smoothing: antialiased/-moz-osx-font-smoothing: grayscalefrom the icon font and warn-icon rule blocks- Modern Chromium and Firefox already render the icon font consistently without the hint, and Safari ignores the override
- Replace
display: -webkit-boxflexible-line-clamp shim on.sl-menu-grid-link spanwithdisplay: block- Drops the corresponding
-webkit-box-orient: verticalproperty - Layout in this rule does not rely on multi-line clamping
- Drops the corresponding
- Remove the experimental
field-sizing: contentfrom.sl-div-actionsinputs and.sl-ratings-days- The property is not yet broadly supported and the explicit width/min-width pair is sufficient
- Add
-webkit-user-select: nonenext touser-select: noneon the toggle button so older WebKit picks up the rule
Benefits:
- Smaller, easier-to-scan rule blocks
- Removes properties that introduced engine-specific edge cases
- Keeps cross-browser parity for selection and icon rendering
Technical notes:
- No selectors added or removed; only declaration-level changes
- Visual output unchanged in current Chromium, Firefox, and WebKit
- No compiled assets are vendored, so no rebuild step is required
Introduce an admin-footer toggle that hides or shows the runtime diagnostics block (queries, request variables, errors, system info) and relabel the section titles to read as a focused performance and request panel rather than generic analyzers.
Core changes:
- Footer controls API (core/system.php):
- Extend getFootControls() with a new $dbgtog flag
- Inject a
dbglinkpayload (iconbug, label _DEBUGPANEL) when diagnostics output is present - Replace the hard-coded
class => sl-slaed-homewith a semanticisslaedflag so templates own the CSS class mapping - Wire setFoot() to forward
$debug !== ''as the toggle signal
- Link fragment (templates/admin/fragments/link.html):
- Recognize
isdebugandisslaedflags- Map
isdebugtosl-debugger-toggleplus data-sl-toggle-control="sl_debugger" with slide effect (500ms) - Map
isslaedtosl-slaed-home
- Map
- Keep the existing class/href contract for all other call sites
- Footer partial (templates/admin/partials/foot-controls.html):
- Render
dbglinkbetween the brand link and the upper anchor
- Admin layout (templates/{admin,default,lite,simple}/layouts/admin.html):
- Wrap
{{{ debug_html }}}in<div id="sl_debugger" data-sl-toggle="sl_debugger" data-sl-toggle-default="open">so the toggle target exists in all four shipped themes - Render the wrapper only when
debug_htmlis non-empty
- Footer styles (templates/admin/assets/css/theme.css):
- Position
.sl-footer span a.sl-debugger-toggleat right: 102px - Bind it to Bootstrap Icons glyph
\f1dc(bug icon)
- Language constants (lang/de|en|fr|pl|ru|uk.php):
- Add new
_DEBUGPANELconstant (Diagnostics panel / Панель диагностики and equivalents) - Refresh four existing constants to clearer wording:
- _AQUERY_DB -> Database queries
- _AVARIABLES -> Request variables
- _ERRLOG -> Errors and warnings
- _SYSTEM_INFO -> System performance
Benefits:
- One-click hide/show keeps the diagnostics block from crowding the admin canvas while remaining instantly recoverable
- Cleaner labels match the actual content of each panel
- Templates regain full ownership of the footer-link class mapping
Technical notes:
- New parameter on getFootControls() is optional (default false), so existing callers stay source-compatible
- Toggle relies on existing
data-sl-toggle*runtime; no new JS module - All six bundled language files updated together to avoid mixed labels
Promote unified configuration loading to the same module that owns classes/editor and classes/logger so the boot order is explicit before core/security.php is included. Keeps security.php focused on request hardening and adds a defensive guard for direct/static analysis includes.
Core changes:
- Configuration bootstrap (core/system.php):
- Load $conf via getConfig() right after editor and logger are required
- Apply admin theme override when ADMIN_FILE is defined
- Place the bootstrap above the security.php include so the security layer can rely on a fully merged $conf
- Security entrypoint (core/security.php):
- Replace the prior config bootstrap with a defensive guard
- Only call getConfig() when $conf is missing or not an array
- Avoids redundant work when system.php has already prepared $conf
- Keeps the file safely includable in isolation
Benefits:
- Clear ownership: system.php owns boot, security.php owns hardening
- Predictable $conf availability for every downstream require
- Safer behavior when security.php is analyzed or included directly
Technical notes:
- No public API change; getConfig() and $conf shape are unchanged
- Backward compatible for all callers that include core/system.php
- Direct includes of core/security.php remain functional via the guard
Consolidates editor-insert functionality into slaed.js, improves PDO debug output via template, extends debug-stats across all themes with new lang constants, and migrates icon_name support to default/lite/simple link fragments.
Core changes:
- Editor insert (plugins/system/):
- Remove insert-code.js (413 lines); logic merged into slaed.js
- Add getEditorInsertText() and syncEditorValue() helpers in slaed.js
- Remove editor-action-insert.html fragments from all themes
- PDO class (core/classes/pdo.php):
- Use $tpl for SQL debug output; consolidate getSqlQuery() internals
- Simplify error message format (remove bare <br> tag)
- Language constants (lang/*.php — all 6 languages):
- Add _ERRLOG, _PAGETIME, _MEMUSAGE, _DBQUERY, _DBQTIME
- Debug stats templates (templates/*/fragments/debug-stats.html):
- Use new lang constants instead of hardcoded strings
- Theme templates (default/lite/simple):
- link.html: icon_name support (mirrors admin link.html)
- voting-view.html: minor adjustments
- new.css: CSS updates
- Admin info panel (admin/info/config, admin/info/template — all 5 langs):
- Template and config HTML adjustments
- Misc:
- core/helpers.php, core/security.php, core/classes/template.php: minor fixes
- modules/forum/index.php: minor fix
- index.php: minor fix
- config/global.php, config/local.php: fingerprint update
- docs/TODO.md: removed
Benefits:
- Single JS file for editor interactions; no separate insert-code.js loader
- Debug stats use translatable constants across all themes
- icon_name in link.html is now consistent across all 4 template themes
Technical notes:
- editor-action-insert.html deleted from all 4 themes (admin/default/lite/simple)
- Backward compatible: link.html callers without icon_name are unaffected
Unified spacing tokens (--sl-space-xs/sm/md/lg) across all sidebar blocks, replaced standalone icon columns with icons embedded inside <a> elements so the full row — icon and label — forms a single clickable target.
Core changes:
- CSS tokens (base.css, theme.css):
- Add --sl-space-xs/sm as canonical spacing tokens; remove --sl-space-xxs
- Sidebar count-row: 3-col grid (icon|label|value) → 2-col (label|value)
- Icons live inside <a>, styled via .sl-block-sidebar-count-label a
- Blocks 3+4 warning color applied to <a> via :has() selector
- Session summary lines: optional icon column (sl-session-line--icon)
- Session rows: geo flag in 20 px icon slot (sl-session-row--icon)
- Admin-block-link: icon inside link, remove separate .sl-admin-block-icon
- Hover/border-radius unified for all block content types
- Templates (link.html, session-row.html, session-summary.html):
- link.html: {% if icon_name %}<i class="bi bi-{{ icon_name }}"></i>{% endif %} before label — zero impact on existing calls without icon_name
- session-row.html: geo_html in icon slot, name_link in text column
- session-summary.html: per-category icon_name vars, optional rendering
- dashboard-panel.html: remove redundant sl-dashboard-panel-pad wrapper
- monitor-tooltip-text.html: new fragment for tooltip with BI info icon
- PHP (admin.php, system.php, monitor.php):
- icon_name moved into link array at call site — no intermediate icon_html
- Removed icon-bi.html fragment; icon rendered inline by link.html
- adminblock(): icon_name in admin_link/logout_link arrays
- getUserSessionAdminInfo(): geo flag drives 3-col layout; BI icons on summary category lines (shield-check/person-check/robot/eye/people)
- monitor.php getTooltipText(): output via monitor-tooltip-text.html
Benefits:
- Icon is semantically part of the link — clickable area covers icon+text
- No zoo of micro-fragments; icon_name is a plain string, not rendered HTML
- All block types share one hover/spacing rule set
- Geo flag symmetrically aligned with category icons in sidebar
Technical notes:
- link.html change is additive; callers without icon_name are unaffected
- sl-session-row--icon applied only when geo_html is present
- --sl-space-xxs removed; 3 px values replaced with --sl-space-xs (4 px)