Журнал изменений

Replace all legacy fragment and helper calls with new/* fragment API. Rebuild getEditbox as a new/form with HTMX attributes, box_id anchor, and inline token. Add CSRF check to save() with HTMX-aware response. Replace robots button fragment with new/button and inline onclick. Add global $tpl declaration to renderEditorPage.

Core changes:

1. getEditbox (admin/modules/editor.php):
2. Replace getTplAdminNavi with getTplAdminTabs
3. Replace admin-editor-note-panel with box partial using box_id repeditornote
4. Replace alert fragments with new/alert (is_warn flag instead of type string)
5. Replace getTplAdminForm + row helpers with new/form (form_attr, rows, hidden, submit_label)
6. Replace textarea_code direct call with getTplCodeEditor helper
7. getRobotsButton (admin/modules/editor.php):

8. Replace admin-editor-robots-button fragment with new/button + button_attr containing data-robots-template and inline onclick for CodeMirror setValue/focus

9. renderEditorPage (admin/modules/editor.php):
10. Replace admin-editor-root-panel fragment with box partial using box_id repeditor
11. Add missing global $tpl declaration
12. save() (admin/modules/editor.php):
13. Add checkSiteToken() guard with HTMX-aware early echo for new/alert is_warn
14. info() (admin/modules/editor.php):
15. Replace setAdminInfoPage with setTplAdminInfoPage

Benefits:

• CSRF guard in save() closes missing token check for file write operations
• HTMX partial replacement targets named box_id anchors (repeditor, repeditornote)
• No module-specific fragments remain; all replaced by new/* contracts

Technical notes:

• getTplCodeEditor called with mode, id, name, text — API unchanged
• form_attr passed through new/form via form.html form_attr extension

Replace all module-specific table/row fragment helpers in getAdminCategoryList, getAdminBlockList and getAdminFavoriteList with direct new/table, new/table-row, new/table-cells, new/title-tip and new/row-actions fragment calls.

Core changes:

1. getAdminCategoryList (core/admin.php):
2. Build tipItems array for new/title-tip (description, subcategory, language)
3. Replace getTplAdminCategoryRow with new/table-row + new/table-cells inline
4. Replace getTplAdminCategoryTable with new/table fragment (disable_sort, colspan for weight)
5. Replace getTplAdminMoveControls with getTplMoveControls
6. Inline delete action as row-actions item with onclick_attr
7. getAdminBlockList (core/admin.php):
8. Build tipItems array for new/title-tip (name, language, expiry)
9. Replace getTplAdminBlockRow with new/table-row + new/table-cells inline
10. Replace getTplAdminBlockTable with new/table fragment (disable_sort, colspan for weight)
11. Inline status-change, edit and delete as row-actions items with onclick_attr
12. getAdminFavoriteList (core/admin.php):
13. Analogous migration to new/table-row + new/table-cells + new/table

Benefits:

• Removes dependency on all deleted module-specific row/table fragments
• Table header defined inline as data; no separate head fragment needed
• Action menus built from structured arrays; no string concatenation

Technical notes:

• disable_sort: true used for reorderable lists where JS sort would conflict
• Colspan 2 on weight column accounts for the adjacent move-controls cell
• All onclick_attr values use htmlspecialchars on title to prevent XSS

Tab switching now reads data-sl-tabs-sync from the root element and updates matching DOM nodes (e.g. hidden inputs) with the active tab index on every pick.

Core changes:

1. tabs.js (setAdminTabs):
2. Read data-sl-tabs-sync attribute from the tabs root element
3. Extract tab index into local var before the loop (avoids repeated indexOf call)
4. On pick: query all syncSelector nodes and set their .value to the active index
5. Reuse index var for sessionStorage and info-link URL param (no behavior change)

Benefits:

• Enables tab index persistence into hidden form inputs without PHP-side coupling
• Reduces redundant list.indexOf(link) calls inside the pick handler

Technical notes:

• Backward compatible: if data-sl-tabs-sync is absent, behavior is unchanged
• Complements the new tabs_sync_selector attr added to module-head.html

New fragment contracts replace module-specific HTML templates with neutral, reusable fragments aligned to the new admin base layer architecture.

Core changes:

1. New fragments (templates/admin/fragments/new/):
2. inline-badge.html: colored status badge (replaces admin-flag-box)
3. move-controls.html: HTMX up/down reorder controls (replaces admin-move-controls)
4. Extended fragments (templates/admin/fragments/new/):
5. form.html: add optional form_attr pass-through for HTMX attributes
6. label-hint.html: switch hint to triple-braces to allow HTML content
7. module-head.html: add tabs_id, is_runtime, tabs_index, tabs_sync_selector attrs
8. row-actions-item.html: add link_attr for HTMX and custom attributes on links
9. table.html: add disable_sort flag to suppress data-sl-table-sort
10. th.html: add colspan support
11. Extended partials (templates/admin/partials/):
12. box.html: add optional box_id attribute for HTMX target anchoring
13. Removed module-specific fragments (13 files):
14. admin-block-row.html, admin-block-table.html
15. admin-category-row.html, admin-category-table.html
16. admin-editor-note-panel.html, admin-editor-robots-button.html, admin-editor-root-panel.html
17. admin-favorites-row.html, admin-favorites-table.html
18. admin-files-row.html, admin-files-table.html
19. admin-private-row.html, admin-private-table.html

Benefits:

• All callers now use neutral new/* contracts instead of module-specific fragments
• box_id enables HTMX partial replacement without extra wrapper elements
• Reduces total fragment count; eliminates one-off module templates

Technical notes:

• inline-badge replaces getTplAdminFlagBox output contract
• move-controls replaces getTplAdminMoveControls output contract
• Deleted fragments had no callers remaining after module migration

Full rewrite of admin/modules/config.php UI layer to use the canonical fragment API. Tabs now persist across page loads via URL ?tab=N parameter, and the INFO link always reflects the currently active tab.

Core changes:

1. config() function:
2. Replace getTplAdminNavi() with getTplAdminTabs() and new/tabs fragment
3. All 7 tab panels rebuilt using new/tabs-panel fragments

4. All form inputs migrated: getTplTextInput/Textarea/Select → getHtmlFrag

   • input: text, url, email, number types with is_config, maxlength, placeholder
   • textarea: with is_config, is_required, cols_num, rows_num
   • select/select-option fragments replace getTplSelect/getTplOption
5. Tabs rendered with init_attr="data-sl-tabs-index=N" for JS state sync
6. INFO link rendered with data-sl-tab-info-link="config" for URL sync
7. Form rebuilt via new/form fragment (hidden tokens, content_html slot)
8. save() function:
9. Add CSRF token check at entry; render alert on failure and return early
10. Fix: getVar('req' → 'post') for startdate field
11. Fix: $xhomeurl trailing-slash strip guarded against empty string
12. info() function:
13. Complete rewrite: replaces setAdminInfoPage() with inline rendering
14. Tab nav built with new/tabs fragment (plain links, INFO tab is_active)
15. Reads locale-specific .md/.html file from admin/info/config/
16. Editable via new/form fragment when $conf['adminfo'] is set
17. CSRF token checked on save_info POST; alert shown on failure

Benefits:

• Tab state survives reload via ?tab=N without sessionStorage conflicts
• Consistent API across all admin modules
• CSRF check in save() closes gap that existed in original implementation

Technical notes:

• getTplAdminNavi/getTplAdminTabContent/getTplAdminTabsSetup calls removed
• Backward-compatible: config keys and save logic unchanged