Журнал изменений

Rewrites the content admin module to use current SLAED conventions: short op-aligned function names, $afile instead of $admin_file, inline $conf['content'] access instead of global $confcn, and the unified setTemplateBasic / getAdminTabs template API.

Core changes:

1. Navigation (modules/content/admin/index.php):
2. content_navi() → navi() with typed int parameters
3. Switched to getAdminTabs() + name=content&op=... URL pattern
4. Function renames (modules/content/admin/index.php):
5. content() → retained, globals cleaned up
6. content_add() → add()
7. content_delete() → delete()
8. content_conf() → conf()
9. content_info() → info()
10. Global variable cleanup (modules/content/admin/index.php):
11. $admin_file → $afile
12. $confcn → $conf['content'] with null-coalesce defaults
13. tpl_eval() → setTemplateBasic()
14. tpl_warn() → setTemplateWarning()
15. while (list()) → while ([]) destructuring

Benefits:

• Eliminates deprecated $confcn global and panel() call in navi
• Consistent function naming aligned with router op values
• Template API unified with other modernized modules

Technical notes:

• Behavior unchanged; pure refactor
• Copyright year updated to 2026

Aligns the whois module language file naming with the project-wide two-letter ISO 639-1 convention used after the info-file rename.

Core changes:

1. Renamed language files (modules/whois/language/):
2. lang-english.php → en.php
3. lang-french.php → fr.php
4. lang-german.php → de.php
5. lang-polish.php → pl.php
6. lang-russian.php → ru.php
7. lang-ukrainian.php → uk.php

Benefits:

• Consistent ISO 639-1 naming across language/ and admin/info/ directories
• Language loader can use the same locale key for both directories

Technical notes:

• File contents unchanged; pure rename operation
• Any caller using include/require with old names must be updated separately

Three independent bugs fixed in the forum public module: duplicate named placeholders in WHERE clauses, reused placeholders in INSERT (l_uid/l_name/ l_time sharing names with earlier params), and a missing head()/foot() pair when a category has no topics.

Core changes:

1. Unique WHERE placeholders (modules/forum/index.php):
2. category query: :id → :parentid / :cid (used twice in OR condition)
3. move(): :val → :id_val / :pid_val in UPDATE SET catid query
4. INSERT named params fix (modules/forum/index.php):

5. l_uid, l_name, l_time now bound as :l_uid / :l_name / :l_time

   • Previously reused :postid / :postname / :time — caused rebind errors
6. Empty-category guard (modules/forum/index.php):

7. Added else branch: renders head() + setTemplateWarning(_NO_INFO)

   • Prevents blank page when forum category contains no threads
   • 5-second redirect back to forum root

Benefits:

• Eliminates PDO named-parameter rebind errors in forum queries
• Proper HTTP response (head/foot wrapper) for empty forum categories
• INSERT now correctly stores l_uid / l_name / l_time independently

Technical notes:

• All bound values remain identical; only parameter names changed
• No schema or API changes; backward compatible

Extends getVar() with a new 'defis' filter type that URL-encodes string input while leaving pre-encoded defaults untouched; also normalises all filter key lookups to lowercase so callers may use any casing.

Core changes:

1. New filter type (core/security.php):

2. Add 'defis' => urlencode(trim($v)) to the filters map

   • Returns '' (not false) for blank strings
   • Skips encoding when the value comes from $default
3. Case-insensitive dispatch (core/security.php):

4. All $filters[$type] lookups replaced with $filters[strtolower($type)]

   • Covers both the array-branch and the scalar-branch paths
   • Prevents silent no-ops when callers pass mixed-case type strings
5. Special defis path (core/security.php):

6. Dedicated early-return block for 'defis' type

   • Falls back to $default as-is (already encoded)
   • Returns false only when both value and default are empty

Benefits:

• Enables safe URL-segment encoding via getVar() without raw urlencode() calls
• Eliminates filter-miss bugs caused by type-string casing differences
• Consistent fallback semantics across all filter types

Technical notes:

• No change to existing filter behaviour or function signature
• Backward compatible: callers using lowercase types are unaffected
• 'defis' default is passed through unchanged (expected to be pre-encoded)

Rewrites the files admin module using standard SLAED conventions: canonical function names, getVar() input handling, prepared SQL statements, and modern template calls. Copyright year updated to 2026.

Core changes:

1. Files admin (modules/files/admin/index.php):
2. Replace files_navi() with navi() using getAdminTabs()

3. Rename functions to short canonical names

   • files_add() -> add(), files_delete() -> del(), etc.
4. Replace all raw $_POST/$_GET with getVar()
5. Use prepared SQL statements with named placeholders throughout
6. Replace tpl_eval()/tpl_warn() with setTemplateBasic()/setTemplateWarning()
7. Replace $admin_file with $afile throughout
8. Update op= route names to match new function names
9. Switch to single-quoted strings consistently
10. Update copyright year to 2026

Benefits:

• SQL injection eliminated throughout the module
• Input validated at entry points via getVar()
• Consistent architecture with other modernized admin modules
• Maintainability improved by short canonical function names

Technical notes:

• op= route values changed to match new function names
• Backward compatible with the database schema