Журнал изменений
Introduce a session-based one-shot flash message system and thread it through setRedirect, setFoot, and admin helpers. Extend getTplPager with optional HTMX target/push-url so paginated admin lists become fully AJAX-navigable. Fix token-less delete URLs in getAdminCategoryList and getAdminBlockList, and migrate getAdminFavoriteList/getAdminPrivateList from the legacy getAsyncPager to getTplPager. Remove the standalone deleteAdminFavorite function now that favorites deletion is handled by the refactored favorites module.
Core changes:
- Flash message API (core/system.php):
- Add setFlash(string $text, bool $warn): stores one-time flash in $_SESSION
- Add getFlashHtml(): renders and clears flash on next page load
- Extend setRedirect() with optional $text/$warn params that call setFlash
- Prepend getFlashHtml() to setFoot() admin content buffer
- HTMX pager (core/helpers.php):
- getTplPager() accepts target_id and push_url options
- $link closure passes query/target_id/push_url to new/pager-link when set
- setTplAdminInfoPage() uses flash-style alert for token miss and success save
- Admin helper fixes (core/admin.php):
- getAdminCategoryList delete URL: add op=delete, token, correct param names
- getAdminBlockList: add token to activate and delete action URLs
- Rename table flag disable_sort -> is_wrapless (renamed in template)
- getAdminFavoriteList: migrate to getTplPager, add delete token, decode title
- getAdminPrivateList: migrate to getTplPager, add delete token, decode title
- Remove deleteAdminFavorite() — deletion handled in favorites module directly
- Routing (index.php):
- Remove deleteAdminFavorite case from go=5 HTMX dispatch table
- Comment moderation (core/system.php — ashowcom):
- Update action URLs to new name/op/token scheme (op=edit, op=approve, op=delete)
- Show activate/deactivate label based on current comment status
- Replace inline date/IP rendering with new/title-tip fragment
- Add modul filter support via GET param
- Wrap comment list close tag consistently
- Rating live widget (core/system.php — ratingLikeHover):
- Switch template from rating-like to rating-like-live
- Pass rate1_query and rate5_query instead of hover_query
- Async pager link fix (core/system.php — getAsyncPagerLink):
- Prepend 'index.php?' to non-empty query strings
Benefits:
- Eliminates page-reload-based error/success messages in favor of flash toasts
- AJAX pager in admin lists no longer requires full-page reload
- All destructive action URLs now carry CSRF tokens
- Removed dead code (deleteAdminFavorite)
Technical notes:
- Flash data stored in $_SESSION['slaed_flash']; cleared after first read
- HTMX pager links degrade gracefully to plain hrefs when target_id is absent
- is_wrapless replaces disable_sort in new/table.html (same semantic, better name)
- Breaking: deleteAdminFavorite op removed from index.php dispatch
Normalize array alignment from padded to compact style, replace the Unicode copyright symbol with the ASCII equivalent in file headers, and update runtime config values (privat anum, referers key order, local fingerprint).
Core changes:
- Config headers (config/comments,favorites,privat,referers,users.php):
- Replace '# Copyright © ...' with '# Copyright (c) ...' for ASCII safety
- Array alignment (config/privat,referers,users.php):
Remove trailing-space alignment padding from array keys
- Compact style consistent with other config files in the project
- Runtime values:
- config/privat.php: increase privat anum from 25 to 50
- config/referers.php: reorder refer_t before referb for logical grouping
- config/local.php: update base_fingerprint to current build hash
Benefits:
- Eliminates inconsistent array formatting across config files
- ASCII copyright is safe in all encodings and editors
- Config values reflect current production defaults
Technical notes:
- No functional behavior change in the application
- Alignment change is whitespace-only, does not affect PHP semantics
- base_fingerprint is auto-generated; update is routine
Add six new success-notification constants to all six frontend languages and extend admin-lang files with _SORTORDER and an updated _TOKENMISS. These constants are consumed by the new setRedirect/setFlash API introduced in core/system.php.
Core changes:
- Frontend languages (lang/de,en,fr,pl,ru,uk.php):
Add _SUCCSAVE, _SUCCDELETE, _SUCCCLEAR, _SUCCUPLOAD, _SUCCFILESAVE, _SUCCSTATUS
- Six new localized flash-message strings for post-action feedback
- Admin languages (admin/lang/de,en,fr,pl,ru,uk.php):
- Add _SORTORDER constant for sort-order UI label
- Update _TOKENMISS to include a trailing exclamation mark
Benefits:
- Enables human-readable flash notifications after every admin action
- Keeps all user-facing strings in language files, not hardcoded in PHP
- Consistent message set across all six supported locales
Technical notes:
- Constants follow existing _SUCC* naming pattern
- No behavior change in existing code; new constants extend the set
- Admin lang change is non-breaking: only the display text is modified
Replace static op-based tabs in config() with runtime link-based tab navigation using the new links/is_runtime/tabs_id/tabs_sync_selector API in getTplAdminTabs. Simplify info() to a single setTplAdminInfoPage call. Remove inline tabs-panel wrapping from each config section (panel rendering handled by new/tabs-panel in form).
Core changes:
- config() (admin/modules/config.php):
- Build links array with href, rel, is_active, label, title per tab
- Pass is_runtime, tabs_id, tabs_index and tabs_sync_selector to getTplAdminTabs
- Remove individual tabs-panel wrappers around $taba..$tabg sections
- Tabs panel wrapping now provided by the form fragment tabs-panel contract
- info() (admin/modules/config.php):
Replace full inline implementation (tab nav, markdown render, HTMX form) with setTplAdminInfoPage using ops array matching the config tab URL pattern
Benefits:
- Config tabs now driven by client-side runtime (data-sl-tabs-init); no page reload
- tabs_sync_selector syncs active tab index into hidden input[name=tab] on switch
- info() reduced from ~50 lines to a single helper call
Technical notes:
- tabs_index initialised from $ctab (validated 0-6); persisted in sessionStorage by tabs.js
- info-link tab carries data-sl-tab-info-link for URL sync on tab switch
- Removes dependency on full inline info tab render in this module
Reflects the current state of tracked assets after this refactor wave.
Core changes:
- config/local.php:
- Update base_fingerprint to b1eb1cf42212ffc5135e26ff202dc4cf93f7b366
Technical notes:
- Local-only config; not part of the distributed base config
Label constants must not contain trailing punctuation; colons are added by the rendering layer (label fragments or form rows).
Core changes:
- admin/lang/*.php (de, en, fr, pl, ru, uk):
- _OGRAPHT: remove trailing ':' from all 6 language files
- _SCHEMAT: remove trailing ':' from all 6 language files
Benefits:
- Consistent with all other label constants in the project
- Prevents double colon when rendered via label fragment
Technical notes:
- Values-only change; keys and structure unchanged
Replace getTplAdminNavi with getTplAdminTabs, getTplAdminPlaceholder with box partial, and setAdminInfoPage with setTplAdminInfoPage across all three modules.
Core changes:
- blocks.php:
- blocks(): replace getTplAdminPlaceholder with box partial (box_id repajax_block)
- getTplAdminTabs already in place; no navi migration needed
- favorites.php:
favorites(): add global $tpl; replace getTplAdminNavi with getTplAdminTabs; replace getTplAdminPlaceholder with box partial (box_id repadminFavoriteList)
- config(): replace getTplAdminNavi with getTplAdminTabs
- info(): replace getTplAdminNavi + setAdminInfoPage with setTplAdminInfoPage
- privat.php:
privat(): add global $tpl; replace getTplAdminNavi with getTplAdminTabs; replace getTplAdminPlaceholder with box partial (box_id repadminPrivateList)
- config(): replace getTplAdminNavi with getTplAdminTabs
- info(): replace getTplAdminNavi + setAdminInfoPage with setTplAdminInfoPage
Benefits:
- All three modules now use approved getTplAdminTabs contract
- box_id attribute on partial enables HTMX partial replacement
- setTplAdminInfoPage replaces two-call pattern (navi + setAdminInfoPage)
Technical notes:
- No logic changes; purely rendering contract migration
- getTplAdminNavi no longer called from these modules
Replace getTplAdminNavi and admin-uploads-tabs-content with new/tabs, new/tabs-link and new/tabs-panel fragments. Replace getTplAdminPlaceholder with box partial. Move HTMX lazy-load attributes from sattrs array to individual tab link_attr fields.
Core changes:
- uploads() (admin/modules/uploads.php):
- Replace getTplAdminNavi with getTplAdminTabs (main module nav; subtitle via getUploadsSearch)
- Remove sattrs / subtab / id params — HTMX attrs moved to per-tab link_attr in new/tabs-link
- Replace admin-uploads-tabs-content fragment with new/tabs + new/tabs-link + new/tabs-panel
- Replace getTplAdminPlaceholder('repf1') / ('repf2') with box partial using box_id
- tplconfig(), config(), tplsave() (admin/modules/uploads.php):
- Replace getTplAdminNavi with getTplAdminTabs with correct tab index
Benefits:
- Removes admin-uploads-tabs-content module-specific fragment
- HTMX lazy-load per sub-tab expressed as link_attr; cleaner than sattrs side-channel
- Sub-tab panels defined as new/tabs-panel with explicit IDs
Technical notes:
- Token appended to HTMX URLs at uploads() call site (token var initialized early)
- getTplAdminTabsSetup removed; new tabs runtime driven by data-sl-tabs-init on new/tabs
Replace getTplAdminTable, getTplAdminTableHead, getTplAdminTableRow, getTplAdminTableCells, getTplAdminFlagBox and old alert fragment calls with new/* fragment API throughout. Replace getTplAdminNavi with getTplAdminTabs in all handler functions.
Core changes:
- getSqltable (admin/modules/database.php):
- Replace getTplAdminFlagBox with inline new/inline-badge fragment call
- Replace getTplAdminTableRow + getTplAdminTableCells with new/table-row + new/table-cells
- Replace getTplAdminTable + getTplAdminTableHead with new/table fragment (disable_sort)
- getSqlsum (admin/modules/database.php):
- Replace getTplAdminInfoLine lines and old alert fragment with new/alert using lines array
- Inline status as plain text (_OK / _ERROR) instead of inline-badge
- All handler functions (dump, dblock, etc.):
- Replace getTplAdminNavi with getTplAdminTabs
- Replace old alert type-string calls with new/alert is_warn bool
Benefits:
- Removes dependency on all deprecated getTplAdmin* table helpers
- Alert rendering consistent with rest of admin via new/alert
Technical notes:
- disable_sort: true used on SQL log table (row order is query-defined)
- new/alert lines array renders each element as a separate paragraph
Replace all legacy fragment and helper calls with new/* fragment API. Rebuild getEditbox as a new/form with HTMX attributes, box_id anchor, and inline token. Add CSRF check to save() with HTMX-aware response. Replace robots button fragment with new/button and inline onclick. Add global $tpl declaration to renderEditorPage.
Core changes:
- getEditbox (admin/modules/editor.php):
- Replace getTplAdminNavi with getTplAdminTabs
- Replace admin-editor-note-panel with box partial using box_id repeditornote
- Replace alert fragments with new/alert (is_warn flag instead of type string)
- Replace getTplAdminForm + row helpers with new/form (form_attr, rows, hidden, submit_label)
- Replace textarea_code direct call with getTplCodeEditor helper
- getRobotsButton (admin/modules/editor.php):
Replace admin-editor-robots-button fragment with new/button + button_attr containing data-robots-template and inline onclick for CodeMirror setValue/focus
- renderEditorPage (admin/modules/editor.php):
- Replace admin-editor-root-panel fragment with box partial using box_id repeditor
- Add missing global $tpl declaration
- save() (admin/modules/editor.php):
- Add checkSiteToken() guard with HTMX-aware early echo for new/alert is_warn
- info() (admin/modules/editor.php):
- Replace setAdminInfoPage with setTplAdminInfoPage
Benefits:
- CSRF guard in save() closes missing token check for file write operations
- HTMX partial replacement targets named box_id anchors (repeditor, repeditornote)
- No module-specific fragments remain; all replaced by new/* contracts
Technical notes:
- getTplCodeEditor called with mode, id, name, text — API unchanged
- form_attr passed through new/form via form.html form_attr extension