Журнал изменений

Admin Module Standardization:

• Renamed navigation functions: moduleNavi() → navi()
• Migrated from $admin_file to $aroute global variable
• Added (bool)$subtab type-cast in navi() functions
• Simplified function names: newsletterAdd() → add(), etc.

SQL Security Improvements:

• Converted escaped quotes \'1\' to integer literals 1
• Fixed UPDATE/INSERT queries: send = '0' → send = 0
• All SQL queries use Named Placeholders (:id, :title, etc.)

Code Structure:

• Extracted switch-case inline code into separate functions
• Added exit; after all header() redirects
• Simplified header URLs: removed redundant &op=show parameters
• Switch statements modernized: case 'show' → default

Monitor Module Enhancement:

• Converted 600+ line HTML block to Heredoc syntax
• Pre-calculated all variables before Heredoc block
• Replaced <?php echo $var; ?> with {$var} syntax
• Improved code readability and maintainability

Rules Documentation:

• Updated Section 22: Admin-Module Konventionen
• Documented $aroute usage pattern
• Documented simplified header redirects with exit;
• Documented switch-case extraction pattern

Impact:

• Enhanced security with consistent SQL Prepared Statements
• Improved code consistency across all admin modules
• Better maintainability with standardized patterns
• Reduced code duplication and complexity

Enhanced commit message display with basic Markdown support:

Changes:

• Added Markdown formatting for commit bodies
• Bold text: text renders as bold
• Lists: - item or * item renders as bullet points
• Inline code: code renders with gray background
• Automatic line breaks with nl2br()

Technical details:

• Uses htmlspecialchars() with ENT_NOQUOTES
• Regex patterns for Markdown parsing
• Clean, simple implementation
• No external dependencies

Impact:

• Improved readability of commit messages
• Professional changelog display
• Better user experience

Location: admin/modules/changelog.php render() function

Critical security improvement to prevent credential exposure in Git history: Changes:

• Updated .gitignore to exclude files with secrets:

  • /config/changelog.php (GitHub tokens)
  • /config/lang.php (Yandex API keys)
  • /config/config_lang.php (legacy API keys)

• Removed secret files from Git index (kept locally):

  • config/changelog.php
  • config/lang.php

• Created template files for developers:

  • config/changelog.php.example
  • config/lang.php.example

Security benefits:

• Secrets no longer tracked in Git
• Template files show required configuration structure
• Environment variables used for sensitive data
• Safe for public repositories

Setup instructions:

1. Copy .example files to actual config files:

   • cp config/changelog.php.example config/changelog.php
   • cp config/lang.php.example config/lang.php

2. Set environment variables:

   • GITHUB_TOKEN: Your GitHub Personal Access Token
   • YANDEX_TRANSLATE_KEY: Your Yandex.Translate API key

Note:

• Original config files remain on local system
• Only templates are committed to repository
• Secrets must be configured via environment variables

Impact:

• Enhanced repository security
• Prevents accidental secret exposure
• Follows industry best practices
• Compliant with GitHub secret scanning

Code optimizations applied:

• Remove unnecessary empty checks in foreach loops (2 places)
• Simplify complex condition in display logic
• Optimize input validation (combine getVar with ?: operator)
• Change validation type from 'title' to 'var' for better flexibility
• Improve code indentation consistency

Result: -8 lines, better readability, same functionality