Журнал изменений

Extend the SEO pipeline with two new template tokens ([headline], [author]) and align core utility functions with the codebase conventions: getVar() for input, resolved absolute paths in checkPerms(), improved getImgText() with [img] BBCode support, and the renamed head()->setHead(array \$seo).

Core changes:

1. Schema.org default config (config/global.php):
2. Replace "headline": "0" with "headline": "[headline]"
3. Replace "name": "[site]" (author) with "name": "[author]"
4. System utilities (core/system.php):

5. Rename head() to setHead(array \$seo = []) — accepts optional SEO fields

   • New keys: title, desc, img, time, ctitle, author
   • Derive \$headline from \$seo['title'] (plain text, no compound suffix)
6. Add [headline] and [author] to SEO from/to replacement arrays

7. Refactor checkPerms(string \$fp, int \$id) to checkPerms(string \$fp)

   • Callers now pass absolute path directly; no id-based base resolution

8. Extend getImgText() with \$check=true param and [img=…][/img] BBCode

   • Supports and forms
   • \$check=false skips file_exists() for remote/virtual images
9. Fix fields_in(): explode('|', \$fieldb ?? '') — null-safe coalesce
10. Admin core (core/admin.php):
11. Replace func_get_args() in getStatistic() with getVar('get', …)
12. Fix checkPerms() calls: prepend BASE_DIR.'/' to construct absolute paths
13. Declare getStatistic(): void return type

Benefits:

• Schema.org headline and author now populated with real article data
• setHead() API eliminates scattered global variable mutations in modules
• getImgText() handles [img] BBCode variants without regex fragility

Technical notes:

• setHead() is backward-compatible when called with empty array
• All old call sites of head()/foot() must migrate to setHead()/setFoot()

The regex used to extract table names from INSERT statements could match partial identifiers where a word character preceded the underscore prefix, producing false-positive table matches.

Core changes:

1. tests/InsertValidationTest.php:
2. Add negative lookbehind (?<!\w) before _(\w+) in INSERT pattern
3. Ensures the prefix underscore is only matched at a word boundary

Benefits:

• Eliminates false-positive table name matches in test assertions
• Test results more accurately reflect actual INSERT targets

Technical notes:

• Pattern change is regex-only; test logic and assertions unchanged
• Lookbehind is zero-width and does not affect captured groups

Two issues in the auto_links admin add() function corrected.

Core changes:

1. auto_links/admin/index.php:
2. Add \$stop = \$stop ?? []; guard before first use to prevent undefined var

3. Remove save_text() wrapper around getVar() calls for a_sitename and a_description: input encoding should happen at save time, not on read

Benefits:

• Prevents PHP notice/warning on fresh add form where \$stop is undefined
• Separates input retrieval from output encoding responsibility

Technical notes:

• save_text() is called correctly in the save handler; reading back raw values from getVar() is the expected pattern for form pre-population

Four admin modules used is_admin_god() as their access guard, allowing only super-admins in. Replaced with is_admin_modul() so module access can be delegated to non-god administrators via the modules config.

Core changes:

1. Access guard replacement (four files):
2. modules/account/admin/index.php: is_admin_god() -> is_admin_modul('account')
3. modules/changelog/admin/index.php: is_admin_god() -> is_admin_modul('changelog')
4. modules/rss/admin/index.php: is_admin_god() -> is_admin_modul('rss')
5. modules/sitemap/admin/index.php: is_admin_god() -> is_admin_modul('sitemap')
6. Additional fixes in the same files:
7. account: rename users() to account() to match op dispatch convention
8. changelog: remove @ suppressor from file_get_contents()
9. sitemap: remove @ suppressor from fopen(); remove BOM from file header

Benefits:

• Delegated admin access works correctly for these modules
• Error suppression removed; failures are now visible in error logs

Technical notes:

• is_admin_modul() reads from $conf['modules'] so no DB query needed
• Behavior for god-level admins is unchanged (they pass all module checks)

Rewrites whois admin module to match current SLAED coding standards: typed functions, single-quoted strings, and modern navigation API.

Core changes:

1. Navigation (modules/whois/admin/index.php):
2. Replace whois_navi() / func_get_args() with typed navi()
3. Switch to getAdminTabs() and name=whois&op= URL scheme
4. All handler functions:
5. Add void return type declarations
6. Replace double-quoted strings with single-quoted throughout
7. Replace list() with [] destructuring in fetchrow loops
8. Replace $admin_file with $afile

Benefits:

• Consistent style with other modernized admin modules
• Cleaner navigation registration via getAdminTabs()

Technical notes:

• Copyright year updated to 2026
• No functional logic changes; all CRUD operations preserved