Журнал изменений
Keep the guest user block compact and prevent session-bound tokens from breaking its read-only Live refresh.
Core changes:
- Live session endpoints (index.php):
- Exempt only public read-only session summary and row requests from CSRF validation
- Keep login and state-changing routes protected
- Guest presentation (templates/lite):
- Restore the online chip and correct greeting order
- Smooth guest action hover states and remove artificial vertical gaps
Benefits:
- Prevents intermittent token mismatch alerts during Live refresh
- Keeps the Dense Login layout compact and predictable
Technical notes:
- No database schema changes
- Public session endpoints remain read-only
- Existing protected actions retain CSRF validation
Redesign the user sidebar around the Dense Split layout and carry the selected Live audience behavior into the production template system.
Core changes:
- User and guest states (blocks/user_info.php):
- Add group color, rank image, level progress, compact navigation, and guest login presentation data
- Rebuild the shared user block partial for authenticated and guest sessions
- Live audience summary (core/system.php):
- Add member, bot, and guest percentages for the audience ring
- Preserve popup rows across refreshes and add overflow-aware automatic scrolling with hover and accessibility pauses
- Theme and design labs (templates/lite):
- Consolidate the Dense Split visuals into the Lite theme and shared partials
- Add the selected 2026 demo variants for future comparison
Benefits:
- Provides one consistent user block for guest and authenticated states
- Reuses the existing template, theme, HTMX, and Live UI infrastructure
- Keeps group identity and online audience data visible without increasing block size
Technical notes:
- No database schema or route changes
- Existing user block and session helper interfaces remain backward compatible
Add reusable sharing, favorites, live-status, and modal interactions across frontend and admin views. Consolidate browser behavior and template hooks, refresh localized labels, and replace obsolete UI demos with focused component examples.
Core changes:
- Interactive controls (core/system.php, core/user.php, plugins/system/slaed.js):
Add canonical sharing with QR, copy, and social network actions
- Keep comment and forum links stable across pagination and HTMX updates
- Reuse global confirmation and share dialogs
- Optimize favorite-state rendering and add live refresh controls
- Template integration (templates/admin, templates/lite):
- Add reusable modal, favorite, freshness, live-chip, and share fragments
- Align admin and frontend styles with the consolidated interaction model
- Module and demo coverage (modules, demo, lang):
- Wire sharing and favorite controls into supported content modules
- Synchronize interface labels across all active locales
- Replace outdated demo laboratories with focused UI reference pages
Benefits:
- Consistent interactive behavior across modules and asynchronous updates
- Fewer duplicate controls and database lookups
- Clearer template ownership and reusable frontend primitives
Technical notes:
- No database schema changes
- Existing public routes and module contracts remain compatible
Migrate frontend and admin actions to the shared speed-dial and HTMX contracts, align multilingual labels and documentation, and make content persistence aware of plain, Markdown, and HTML editor formats.
Core changes:
- Action menus and requests (core, modules, templates):
Replace legacy popover and comment-action fragments with structured dial and link items
- Use the gear trigger for moderator actions and the three-dot trigger for user actions
- Add CSRF tokens to state-changing inline requests
- Consolidate frontend action rendering across comments, forum, voting, account, shop, and content modules
- Editor storage pipeline (core/classes/editor.php, core/security.php, core/helpers.php):
Resolve storage formats from editor manifests
- Keep Plain line-break compatibility
- Preserve Markdown source line endings
- Retain trusted HTML for admin HTML editors
- Remove duplicate forum filtering and safely restore legacy content for editing
- Start Toast UI in Markdown mode to preserve SLAED source tags
- UI, languages, and documentation (templates, lang, docs):
- Add the reusable lite dial fragment and update shared link contracts
- Align action labels and category/block sorting guidance across all languages
- Update frontend dial architecture documentation and related theme styles
Benefits:
- Consistent compact action controls across modules
- Reliable editor round trips without duplicated break tags
- Safer state-changing actions and textarea output escaping
Technical notes:
- No database schema or route contract changes
- Legacy stored content remains readable through the existing parser pipeline
- Removed superseded popover and comment-action fragments
Documents the audit of the moderator edit menus on the lite frontend (liste tables, cards, view pages, votings) where the hover popover covers neighbouring rows, and the six-step migration plan to the sl-dial fan: getTplEditMenu() as the single data source, a lite dial fragment and styles, and the fan click toggle moved into the shared slaed.js.
Technical notes:
- plan only, no runtime changes; see docs/FRONTEND-DIAL.md
Adds the live HTML labs used to choose the final admin list UI: they load the real admin theme CSS and demonstrate every considered variant with working drag-and-drop, collapsing and dial interactions.
Core changes:
Blocks ordering labs (demo/admin-blocks-dnd-lab.html, demo/admin-blocks-infly-lab.html, demo/admin-blocks-final.html):
- five drag-and-drop variants plus six free-block marking variants
- the approved combination as the final target view
Row actions and categories labs (demo/admin-row-actions-lab.html, demo/admin-categories-dnd-lab.html, demo/admin-categories-final.html):
- six row action patterns including the chosen sl-dial overlay fan
four category tree ordering variants and the approved final view with collapsible module groups
Technical notes:
- self-contained pages under demo/, not linked from the runtime
Implements the forum wishlist batch for 6.3: admin lists get grouped drag-and-drop ordering and sl-dial action fans, free (infly) blocks become usable again through content and template tags, and publications gain an intro visibility setting with noindex for letter lists.
Core changes:
- Blocks admin list (core/admin.php, admin/modules/blocks.php):
getAdminBlockList() rewritten: rows grouped by position with collapsible sl-panel-toggle headers, drag handle plus order number in one column
- free (infly/flyfix) blocks form a trailing group with accent chips
- legacy prev/next self-join query replaced by a single plain select
updateAdminBlockOrder() now persists a full group order from one POST (ids list) with a CSRF token check the old swap endpoint lacked
RSS feed select in the add form used value "0" for the custom option, which filterUrl() turned into http://0 and wiped the block content
- Categories admin list (core/admin.php, admin/modules/categories.php):
getAdminCategoryList() rewritten as an indented tree (tree-node fragment) grouped by module with collapsible headers and drag ordering among siblings; subtrees travel with their parent
publication counters consolidated into one GROUP BY query per module (page dropped from 92 to 14 queries), child counts computed in memory
- new change() handler toggles category status from the action fan
- module filter defaults to the new "All modules" option (_ALLMODULES)
- Free block revival (core/classes/parser.php, core/classes/template.php):
Parser::filterFreeBlocks() resolves [block=id] tags in trusted content only ($safe === false), guarded against nesting, block content recursion (Parser::$freeoff during the getBlocks() cache build) and admin context
Template::filterFree()/getFree() compile {% freeblock id %} in theme templates through the same getBlocks() engine and guards
both entry points honour status, expiry, language, view rights and flyfix module rules; unavailable blocks render as empty output
Dial action fans replace hover popover menus in every admin list (30 files across admin/modules and modules/*/admin):
- dial.html gains link_attr (htmx) and onclick_attr (confirm) support
consistent icon vocabulary: power, pencil, trash, eye, check2 and context icons (play-fill, unlock, eraser, database-add/dash/up, ...)
actions cell anchors the absolute fan via td.sl-col-actions position so checkbox-trailing tables (news, comments, shop) work too
- broken delete confirm in the groups list fixed (bare onclick value)
- Publications intro setting and liste noindex:
news/pages full view honours new intro config flag (default on) to hide the teaser text when a body text exists (_C_INTRO admin label)
- getSeoRoute() marks op=liste as noindex, follow without canonical
- Shared infrastructure (templates/admin, plugins-free):
generic drag attributes (data-sl-drag-id/group/scope/parent, drag-url, drag-target) unify the admin-ui.js engine for blocks and categories
- collapsible group rows persist per key in localStorage
getTplMoveControls(), move-controls.html and _BLOCKUP/_BLOCKDOWN constants removed with the last arrow consumers
Benefits:
- reordering is one gesture instead of repeated full page reloads
- action menus no longer cover neighbouring rows
- free blocks work again and are safe by construction
- categories page is 6x lighter on the database
Technical notes:
new language constants (_C_INTRO, _INFLYINFO, _DRAGSORT, _CATDRAGSORT, _ALLMODULES) added to all six admin locales
module help files (admin/info/blocks, admin/info/categories) rewritten for the new UI; TEMPLATES.md and ARCHITECTURE.md document the tags
backward compatibility: legacy blocks()/{%BLOCKS%} call styles remain unsupported; [block=id] and {% freeblock id %} replace them
Updates the documentation to match the implemented theme consolidation, hardened validation suite, and SEO semantics work.
Core changes:
- Templates guide (docs/TEMPLATES.md):
Independent theme packages: no cross-theme includes, assets, fallback, or shared files; matching filenames stay theme-local
div variant contract: is_searchbox, is_menu_grid, branch order, and the untouched generic content/rows modes
- Theme-local asset URLs via the explicitly passed theme variable
- Test guide (docs/TESTS.md):
Theme independence audits, non-zero reference counters, and the mixed-separator regression cases
- Theme-aware CSS usage audit and its informational unused report
- CSS token-stream verification and browser route matrices
- SEO HTTP audit workflow
Reference docs (docs/ARCHITECTURE.md, docs/PARSER.md, docs/EDITORS.md, docs/VERSIONS.md):
- Aligned with the SEO pipeline helpers and current template flow
Benefits:
- Documentation matches the shipped code and test suite
- Future theme work has explicit contracts to follow
Technical notes:
- Documentation only; no runtime changes
Adds a safe server-side SEO pipeline that builds titles, meta, Open Graph, JSON-LD structured data, and breadcrumb trails from explicit page facts across all frontend modules.
Core changes:
SEO core (core/system.php, core/helpers.php, core/security.php, core/user.php, core/classes/parser.php):
filterSeoText, getSeoTitle, getSeoJson/getSeoJsonItems, setSeoJsonVars, getSeoGraph, getSeoSchema, and getSeoBreadcrumbSchema build normalized, safely encoded head data
Structured data is re-encoded from decoded values, never rendered as raw template strings
Module coverage (modules/*, admin/modules/config.php, index.php, config/global.php):
Frontend modules pass explicit titles, descriptions, and schema facts through setHead
Legacy hardcoded JSON-LD template blocks removed from the default config; stale social profile link dropped
Templates (templates/lite fragments and partials, templates/admin/fragments/head-title.html, templates/lite/fragments/head-title.html):
Dedicated head-title fragment and semantic markup adjustments for cards, tables, titles, navigation, and category views
- Language constants (lang/.php, admin/lang/.php):
- SEO-related constants synchronized across all six languages
Verification (tests/SeoSemanticsValidationTest.php, tools/seo-audit.php, tests/Unit/ParserFixturesTest.php, tests/Unit/ViewBridgeSmokeTest.php, tests/Unit/PasswordHashTest.php, phpstan.neon, setup/index.php):
New semantics validation suite and a curl-based CLI audit for route-level schema types and indexability
- Minor code style cleanup applied by php-cs-fixer
Benefits:
Search engines receive consistent, escaped structured data built from one pipeline instead of per-template JSON strings
- Route matrix is auditable via tools/seo-audit.php
Technical notes:
JSON-LD encoding strips HTML-significant characters to keep script contexts safe
- Backward compatible: no routes, database, or module APIs changed
Applies the shared formatting conventions to the lite stylesheets and merges proven duplicate adjacent rules, keeping computed styles and cascade order intact.
Core changes:
- Formatting (templates/lite/assets/css/base.css, theme.css):
2-space indentation, one property per line, normalized section comments
Data URI lines kept atomic; no reordering of sections or responsive blocks
- Consolidation:
- Adjacent equivalent rules merged within one at-rule context
Six classes (sl-b-i-1..4, sl-b-icon, sl-big-sl-icons) removed together with their sl-advantage markup; zero source references remain
Benefits:
- Consistent stylesheet layout aligned with the admin theme process
- Dead advantage-section styles no longer ship to every page
Technical notes:
- Theme-aware usage audit reports 441 defined classes for lite
- Seasonal, parser, gallery, and JS state classes preserved
- No custom property values synchronized with the admin theme