Журнал изменений
Remove all jQuery-dependent plugin bundles and replace core UI utilities with a standalone vanilla JS module, eliminating jQuery as a runtime dependency for all page-level functionality.
Core changes:
- Plugin removal (plugins/):
- Deleted plugins/jquery/ (jquery.js, jquery-ui.js, jquery.cookie.js, jquery.slaed.js, tinycon.js, ui/ bundle)
- Deleted plugins/fancybox/ (jquery.fancybox.js and all helpers/assets)
- Deleted plugins/uploadify/ (jquery.uploadify.js, uploadify.swf, assets)
- Deleted plugins/ckeditor/adapters/jquery.js (jQuery adapter)
- Deleted plugins/system/tablesort.min.js (moved to plugins/tablesort/)
- Deleted plugins/codemirror/*/index.html (demo pages, not runtime code)
- Added plugins/system/slaed.js (vanilla replacement for jquery.slaed.js)
- Added plugins/tablesort/ (standalone tablesort bundle)
- Template JS (templates/):
- Deleted templates/lite/assets/js/jquery.bxslider.js
- Added templates/lite/assets/js/tabs.js and templates/default/assets/js/tabs.js (vanilla tab init)
- Updated theme.css in default and lite: removed BxSlider/jQuery UI styles, added vanilla tab CSS
- Removed jQuery UI .ui-autocomplete CSS rule from system.css in admin/default/lite
- Removed jQuery and jQuery UI badge links from layouts/app.html, layouts/home.html, index.html
- Config and runtime (config/, core/system.php, plugins/system/global-func.js):
- config/global.php: removed jQuery/FancyBox/Uploadify from script_f and css_f load lists
- core/system.php: replaced jQuery UI datepicker in datetime() with native HTML5 input; fixed garbled UTF-8 in getTranslit() and filterSlug() transliteration maps
- plugins/system/global-func.js: added vanilla syncNativeDateTimeInput() and fetchUserSuggestions() to replace jQuery UI autocomplete and datepicker
- Encoding fixes (templates/*/fragments/editor-translate-panel.html):
- Fixed garbled double-encoded Cyrillic characters in all four theme variants
Benefits:
- Eliminates jQuery and jQuery UI as page-level runtime dependencies
- Reduces total JS payload by ~30 KB (minified jQuery + jQuery UI)
- Resolves broken Cyrillic rendering in transliteration and editor panels
- Tab UI now works independently via vanilla setAdminTabs() and CSS
Technical notes:
- FancyBox (.screens, .site-link) still referenced in templates; requires separate replacement with native <dialog> or GLightbox
- CloseOpen(), HideShow(), Upper(), CheckBox(), TranslateLang() migrated to slaed.js as vanilla functions
- datetime() now emits native <input type="datetime-local"> with hidden sync field
Replace the legacy AjaxLoad and ddtabcontent runtime across admin and frontend flows with HTMX-based async interactions and a new shared admin tabs layer. This also completes the tablesorter-to-Tablesort migration, cleans up route and helper naming to match project rules, and finalizes the shared template extraction work for repeated admin HTML builders.
Core changes:
- Async transport and routing cleanup (index.php, core/system.php, core/user.php, core/admin.php):
Replaced legacy AjaxLoad-based endpoints and callers with HTMX-friendly async flows
- Renamed async handlers and route ops to rule-compliant names
- Fixed shared pager/query generation and CSRF propagation for async requests
- Updated admin info, favorites, private messages, cart, rating, comment, voting, editor, block, category, upload, and session flows
- Fixed shared admin fragment responses and account pagination URL encoding
- Shared admin templates and tabs modernization (core/helpers.php, admin/modules/.php, templates/admin/fragments/):
- Extracted repeated admin table, form, action, row, input, image, and tab setup HTML into reusable fragments and helpers
- Replaced the legacy tabs runtime with the new setAdminTabs layer while keeping module rendering stable
- Removed obsolete admin tab script fragments and legacy tab id contracts
- Tablesort migration and frontend fragment cleanup (plugins/system/tablesort.min.js, plugins/jquery/jquery.slaed.js, templates/*):
- Introduced Tablesort as the shared table sorting runtime and removed jquery.tablesorter and jquery.metadata from active use
- Migrated sortable headers to data-sort-method markers and restored sort state visuals with the existing SLAED CSS contract
- Converted remaining theme fragments from inline AjaxLoad handlers to HTMX interactions across admin, default, lite, and simple templates
Benefits:
- Removes legacy async JavaScript transport and dead sorter dependencies from active runtime code
- Centralizes repeated admin HTML patterns in shared fragments with cleaner helper boundaries
- Aligns async routes, helpers, and tabs behavior with current naming and template rules
Technical notes:
- Adds plugins/system/tablesort.min.js and removes jquery.tablesorter.js, jquery.tablesorter.min.js, and templates/admin/assets/js/jquery.metadata.js
- Renames multiple async route ops and helper functions; old legacy route names are no longer preserved
- Includes database total-row sort protection, account pager URL normalization, and updated admin/page render coverage
Finalize the remaining runtime cleanup by aligning canonical and template contracts with the active codebase, pruning truly unused language constants, and updating the repository documentation to match the current structure. This also fixes the local Composer wrapper so the standard quality commands run again in this environment.
Core changes:
- Frontend runtime and templates (core/system.php, templates/default/, templates//pages/message.html):
Centralized canonical and public URL handling in the runtime and aligned message/layout rendering with the active template contracts
- Added template contract fixes for admin, app, home, preview, and login partial rendering
- Corrected changelog partial routes and shared SEO behavior used by setHead()
- Kept sitemap, Open Graph, and runtime URL generation on the same path
- Documentation, tests, and language audit (README.md, CONTRIBUTING.md, SECURITY.md, UPGRADING.md, docs/.md, tests/LanguageConstantsUsageTest.php, lang/.php, admin/lang/.php, modules//lang/*.php):
- Synced project documentation with the current repository structure, runtime, and testing workflow
- Removed truly unused language constants and fixed the audit to count template constant usage correctly
- Restored working Composer wrapper behavior and verified composer analyse and composer test in the local environment
Benefits:
- Restores passing quality gates for runtime and template changes
- Reduces false positives in language constant reporting
- Improves documentation accuracy and developer workflow reliability
Technical notes:
- No schema migration or history rewrite
- Local Composer wrapper now falls back to the PHP 8.4 Composer home when COMPOSER_HOME is unset
- Verified with php -l, composer analyse, and composer test
Consolidate repeated admin HTML assembly into shared helper and fragment contracts so admin modules use one consistent rendering path. This reduces inline markup duplication and aligns the migrated admin slices with the current Template runtime.
Core changes:
- Shared admin helpers (core/admin.php, core/helpers.php):
Added reusable admin rendering helpers for color labels, submit buttons, block visibility rows, and shop association tables
- Moved block-module discovery into shared helper scope
- Replaced repeated inline HTML with fragment-backed rendering paths
- Normalized helper contracts used by migrated admin modules
- Admin modules and fragments (admin/modules/.php, modules//admin/index.php, templates/admin/fragments/*):
- Updated admin modules to call shared helpers instead of building duplicate markup inline
- Added missing fragment files for block visibility, section headings, submit buttons, color labels, and shop association cells
- Extended raw-slot documentation to describe the active admin fragment contracts
Benefits:
- Reduces duplicated admin markup across modules
- Improves maintainability of template-bound admin rendering
- Keeps admin migration aligned with the shared Template runtime
Technical notes:
- No history rewrite or schema change
- Rendering stays backward-compatible at the route level
- Changes are limited to admin helper, fragment, and caller integration paths
Eliminate all inline <input type="hidden/text/number"> and <span/div> HTML constructions from PHP across the entire codebase, replacing them with getAdminHidden(), getAdminTextInput(), getAdminNumberInput(), adminFlagBox(), and getAdminHintLabel() helpers. Three new template fragments added to back the new input helpers.
Core changes:
- New template fragments (templates/admin/fragments/):
- admin-hidden-input.html, admin-text-input.html, admin-number-input.html
- New helpers (core/helpers.php):
- getAdminHidden(), getAdminTextInput(), getAdminNumberInput()
- getAdminHintLabel(), getAdminLangHint()
- Admin modules (admin/modules/*.php):
- All hidden, text and number inputs replaced; hint labels use getAdminHintLabel()
- Removed redundant htmlspecialchars() wrappers (template escapes values)
- Module admin pages (modules/*/admin/index.php):
- All <input type="hidden"> chains replaced with getAdminHidden() calls
- Frontend modules and blocks:
- modules/forum, help, money, search — text/number/hidden inputs replaced
- blocks/block-login.php, block-user_info.php — inputs replaced
- Core (core/system.php, core/user.php, core/admin.php):
- ad_save(), datetime(), fields_in(), get_user_search() use helpers
Benefits:
- No raw HTML string assembly for form inputs anywhere in PHP
- Template layer owns escaping — no scattered htmlspecialchars() calls
- Consistent input rendering via single source of truth
Technical notes:
- core/system.php:3242 (<input id="recaptcha">) left as-is: id attr not supported by template
- <span class="sl_green/red"> in modules.php and security.php left as-is: adminFlagBox() generates <div>, wrong semantics for inline context
- docs/RAW_SLOTS_ADMIN.md updated with new fragment entries
Replace raw HTML strings in core utilities, all admin modules, and frontend modules with helper functions and template fragments, completing the project-wide HTML abstraction campaign across ~50 PHP files.
Core changes:
- New helpers (core/helpers.php):
- getHtmlScriptSrc(), getHtmlScriptInline() for <script> tags
- getHtmlCssLink(), getHtmlCssInline() for <link>/<style> tags
- getHtmlHeadLink() for generic <link> head tags
- getAdminHidden(), getAdminTextInput(), getAdminNumberInput() for admin inputs
- getLinkAction(), getDeleteAction(), getExternalAction() for safe link items
- getMenuItem(), getMenuItems() for frontend action menus
- core/system.php:
All raw <script> patterns replaced: doScript(), doCss(), head links, scheduler, getCaptcha(), datetime(), get_user_search(), SyntaxHighlighter, textarea() editors (TinyMCE, CKEditor, CodeMirror), textarea_code()
- anti_spam() <script>/<noscript> split via getHtmlScriptInline()
- File-upload JS block in textarea() migrated
- Admin modules (admin/modules/.php, modules//admin/index.php):
- All add_menu('a||b') → adminMenuItems([adminLinkAction(), adminDeleteAction()])
- All raw <option>/<select> loops → getAdminOption() + getAdminSelect()
- All language() calls in raw <select> → getAdminSelect('lang', language(...))
- 150+ new module-specific admin template fragments added
- Frontend modules:
- modules/content/index.php: add_menu() + unescaped $title in DelCheck fixed
- modules/search/index.php: add_menu() + raw <select> in form
- modules/voting/index.php: add_menu() with delete confirm
Benefits:
- PHP controllers free of raw HTML (outside documented raw slots)
- XSS vectors in JS confirm dialogs now escaped inside getDeleteAction()
- Markup changes no longer require PHP edits in hot paths
Technical notes:
- getMenuItems() is the frontend counterpart of adminMenuItems()
- getLinkAction/getDeleteAction/getExternalAction use comment-action-* fragments
- All changes verified: php -l per file, phpunit OK (6 tests, 9 assertions)
Roots /vendor/, /composer.lock, /composer.phar in .gitignore so only the project-root Composer directory is excluded. This allows frontend vendor assets inside template directories to be tracked in the repo.
Core changes:
- .gitignore:
Changed vendor/, composer.lock, composer.phar to /vendor/, /composer.lock, /composer.phar
- Prevents accidental exclusion of template-level asset vendor dirs
- Template vendor assets (templates/*/assets/vendor/):
- Added Bootstrap Icons CSS (admin + simple themes)
- Added Bootstrap bundle JS (simple theme)
- Added Bootstrap core CSS (simple theme)
- Added woff2 icon fonts for both themes
Benefits:
- Frontend dependencies are now versioned alongside templates
- No reliance on CDN or build step for Bootstrap in deployed environments
- Consistent asset availability across dev and production
Technical notes:
- Assets are pre-built minified files, no build step required
- Composer root vendor/ remains excluded as before
Systematic removal of inline HTML from PHP across the entire CMS — all shared and repeated patterns are now rendered through named fragments, leaving only confirmed Sonderfälle (multi-tab JS forms, JS hidden forms) as inline strings.
Core changes:
- New helper layer (core/helpers.php, core/admin.php):
- getAdminConfSave() — ddtabcontent conf-save form wrapper
- getCatForm() — categories tab form wrapper
- getAccountSearchBox() — collapses 6 identical account search blocks
- getAdminListForm() — bulk-action list form wrapping getAdminTable()
- getMoneyCalcForm() — frontend currency calculator form
- getMetaRefresh() — meta http-equiv refresh tag (applied to 20+ files)
- getAdminSelect/Option, getAdminForm/Row/Wide, getAdminBox, getAdminTable/Row
- getAdminInfoBox, getAdminSearchBox, getAdminPlaceholderBox
- getCatPermRow, getCatTab, getCatTabScript, getCatSubmitRow
- getBlockViewGrid, getFormAddRow, getFormSubmit, getFormSelect
- getForumIcon, getForumReplyForm, getContentCard, getContentView
- adminFlagBox, adminNoteLabel, adminTitleTip, adminDangerText
- adminMoveControls, adminInfoForm, edit_list
- Admin fragments (templates/admin/fragments/):
35 new fragments covering table, form, row, select, info, flag, tip, move-controls, edit-list, editor-form, admins CRUD, categories tabs, blocks grid, conf-save, cat-form, list-form, account-search-form
- Frontend fragments (templates/default|lite|simple/fragments/):
- content-card, content-view, form-add-row, form-submit, form-select
- forum-topic-icon, forum-reply-form, meta-refresh, money-calculator-form
- Identical across all three themes (sync test enforced)
- Raw slot registry (docs/RAW_SLOTS_ADMIN.md):
- Documents every {{{ raw }}} slot with origin and escaping rationale
- Deleted legacy open/close fragment pair across all four themes
Benefits:
- Zero raw <form>, <table>, <tr>, <td> strings in module files outside Sonderfälle
- All meta http-equiv refresh tags replaced across 20+ frontend modules
Shared patterns reduced to single declaration: account search ×6→1, meta-refresh ×20→1, calculator forms ×3→1
- Fragment inventory is auditable and consistent
Technical notes:
Sonderfälle remain inline: config.php 7-tab, security.php ban forms, uploads config(), scheduler.php JS hidden forms, rss tab form
Search mini-forms inside getAdminSearchBox() are intentionally inline (single-use, already wrapped in the proper helper)
- All frontend fragments pass testSharedFrontendFragmentsStayInSyncAcrossThemes
Consolidated 68 atomic micro-fragments into unified fachliche templates. Eliminated action-menu, action-delete, alpha-nav, category-icon/title, rating-bar/like, pager-dots duplicates via merged variants with optional slots. Inlined trivial single-tag fragments (danger-text, note-label, tab-list-close, pager-dots). Updated all callers in core/admin.php and core/system.php accordingly.
Added docs/ADMIN_MIGRATION_PLAN.md as master plan covering Spur 1 fragment consolidation phases 1-5 and Spur 2 module-by-module HTML migration for all 24 admin modules with risk-based batch ordering, helper decision model, raw-slot rules, stop conditions and verification matrix.
Added partials scaffold: blocks/add.html, blocks/edit.html, admin-config-base.html, admin-config-communication.html.