Журнал изменений

Added production-ready documentation files for SLAED CMS 6.3 to support contributors, security researchers, and users upgrading from previous versions.

Core changes:

1. Project documentation (README.md):
2. Updated with links to new documentation files
3. Added references to CONTRIBUTING, SECURITY, CODE_OF_CONDUCT, UPGRADING
4. Contribution guidelines (CONTRIBUTING.md):
5. Coding standards with 8 required verbs
6. Type declarations and variable naming conventions
7. SQL prepared statements and input validation rules
8. Commit message format and PR requirements
9. Testing requirements (PHPUnit, PHPStan)
10. Security policy (SECURITY.md):
11. Supported versions table
12. Vulnerability reporting process and timeline
13. Security measures documentation (SQL injection, XSS, CSRF)
14. Best practices for administrators
15. Code of Conduct (CODE_OF_CONDUCT.md):
16. Based on Contributor Covenant 2.1
17. Community standards and enforcement guidelines
18. Contact information for reporting
19. Upgrade guide (UPGRADING.md):
20. Migration paths from 6.2.x to 6.3.x
21. Breaking changes (config_db.php removed, new db.php format)
22. Function changes (tpl_eval, admin_file)
23. Troubleshooting section

Benefits:

• Clear guidelines for contributors
• Transparent security reporting process
• Smooth upgrade path for existing users
• Professional open-source project presentation

This commit removes the old short-named info files that were replaced by full language name versions in the previous commit.

Removed files:

• modules/news/admin/info/de.html
• modules/news/admin/info/en.html
• modules/news/admin/info/fr.html
• modules/news/admin/info/pl.html
• modules/news/admin/info/ru.html
• modules/news/admin/info/uk.html

Technical notes:

• Replaced by german.html, english.html, french.html, etc.
• Part of language naming standardization

This commit updates the news module to use centralized ModuleBase and renames info files to full language names for clarity.

Core changes:

1. News module (modules/news/index.php):
2. Integrate with centralized module runner
3. Reuse ModuleBase for navigation and filters
4. Consistent offset and letter filter handling
5. Info file renames (modules/news/admin/info/):
6. de.html → german.html
7. en.html → english.html
8. fr.html → french.html
9. pl.html → polish.html
10. ru.html → russian.html
11. uk.html → ukrainian.html

Benefits:

• Centralized module behavior via ModuleBase
• Clear, readable info file names
• Consistent with language naming convention
• Easier maintenance and localization

Technical notes:

• Info files contain admin panel module descriptions
• Full language names match config/languages structure

This commit modernizes core system files with improved module management, security enhancements, and removal of deprecated components.

Core changes:

1. Module management (core/system.php):
2. Add getModules() iterator for config-based module loading
3. Enhance setConfigFile() with deep array merging
4. Improve bootstrap module loading
5. Admin utilities (core/admin.php):
6. Add updateModulesConfig() for filesystem sync
7. Remove deprecated database-based module queries
8. Improve module configuration handling
9. Security improvements (core/security.php, core/access.php):
10. Enhanced input validation
11. Improved access control checks
12. Database layer (core/classes/pdo.php):
13. PDO connection improvements
14. Better error handling
15. Removed deprecated files:
16. config/config_db.php (replaced by config/db.php)
17. core/classes/module.php (replaced by config-based system)

Benefits:

• Config-based module system (no database queries)
• Cleaner codebase without deprecated files
• Improved security and validation
• Better maintainability

Technical notes:

• Module config stored in config/modules.php
• Backward compatibility maintained

This commit improves README documentation by adding GitHub-flavored markdown alerts and correcting various URLs and references.

README.md - Documentation updates:

1. GitHub alerts added:
2. WARNING: Default admin credentials reminder
3. CAUTION: Delete setup.php after installation
4. NOTE: Modernization status progress
5. IMPORTANT: Security best practices
6. CAUTION: SQL injection prevention
7. TIP: Code requirements for contributors
8. URL corrections:
9. Fix git clone URL to SLAED-CMS organization
10. Fix config file path (config_db.php → db.php)
11. Fix database schema path (setup/sql/table.sql)
12. Add Documentation link to slaed.info
13. Add Forum link to slaed.net/forum
14. Add GitHub Issues link
15. Badge updates:
16. License badge now links to LICENSE file
17. Added GitHub Issues badge
18. Project structure fixes:
19. Fixed comment alignment in tree view
20. Corrected file descriptions

Benefits:

• Better visual highlighting of important information
• Correct URLs for contributors and users
• Consistent documentation style

Technical notes:

• GitHub alerts render as colored callout boxes
• All external links verified and working