Журнал изменений

Fix config save function that double-encoded HTML in graph, schema, and mtemp fields through save_text() when admin editor was enabled.

Core changes:

1. Config save function (admin/modules/config.php):
2. Switch graph, schema, mtemp fields from 'text' to 'raw' type in getVar()
3. Remove unnecessary preg_replace for <br> tag stripping
4. Prevents save_text() from applying htmlspecialchars() to already-encoded HTML
5. Global config (config/global.php):
6. Update Schema.org context URLs from http to https
7. Store raw quotes in graph/schema templates instead of HTML entities
8. Alphabetical key reordering, add tsep separator setting
9. Update slogan text
10. Directory index (config/index.html):
11. Update redirect URL from http://www.slaed.net to https://slaed.net

Benefits:

• Eliminates progressive corruption of template fields on each save
• Correct HTML output for OG meta tags and JSON-LD schema
• HTTPS everywhere for external URLs

Technical notes:

• Fields with 'raw' type bypass save_text() processing entirely
• Output in core/system.php uses str_replace() on raw values, no encoding needed

Remove legacy blocks and plugins that depend on obsolete technologies (Flash SWF player, IPB forum integration) no longer supported by modern browsers.

Core changes:

1. Removed blocks (blocks/):
2. block-radio.php: Flash-based SWF radio player block
3. block-ipb_center_forum.php: IPB forum integration block with raw SQL
4. Removed radio plugin (plugins/radio/):
5. mju.swf: Flash player binary
6. playlist.mpl: Radio station playlist with dead stream URLs
7. radio.html: Popup window for radio player
8. index.html: Directory index redirect

Benefits:

• Reduces attack surface (raw SQL in IPB block, Flash vulnerabilities)
• Removes dead code depending on discontinued technologies
• Cleaner project structure without obsolete third-party integrations

Utility script to detect define() constants in language files that are not referenced anywhere in the codebase.

1. Checker (tests/check_constants.php):
2. Parses all define() constants from a given language file
3. Searches core, admin, modules, blocks, templates, setup directories
4. Reports unused constants with line numbers and values
5. Usage: php tests/check_constants.php [language_file]

Simplify img_find() by removing global $theme side-effect and adding static cache. Comment out SEO settings now managed via admin panel.

Core changes:

1. img_find() optimization (core/system.php):
2. Remove global $theme variable manipulation

3. Add static $base cache for theme image path

   • getTheme() called once per request instead of every invocation
   • Preserves per-user/admin theme resolution via getTheme()
4. SEO config cleanup (config/config_seo.php):

5. Comment out $confse['adesc'] and $confse['dletter']

   • Values now managed through admin interface via $conf

Benefits:

• Cleaner img_find() without global state side-effects
• Single source of truth for SEO settings in admin panel

Resolves PHP warnings caused by uninitialized variables and unsafe array access across core attachment handler, forum, account, and template modules.

Core changes:

1. Attachment encoder (core/system.php):

2. Initialize $timg, $width, $height before conditional branches

   • Prevents "undefined variable" notices when attachment is not an image

3. Add isset() guards for $date[4][$i] and $date[5][$i]

   • Avoids "undefined index" when optional dimensions are missing
4. Cast $timg to (string) for str_replace() safety
5. Account profile view (modules/account/index.php):

6. Initialize $rgroup as empty array and $uranks as empty string

   • Prevents notices when user has no rank groups or point system is off
7. Forum module (modules/forum/index.php):

8. Initialize $massiv, $cmassiv, $where, $umassiv as empty arrays

   • Prevents "undefined variable" if early return paths are taken

9. Add is_array() + !empty() guard for $userinfo before accessing keys

   • Handles guest/anonymous users who return non-array from getusrinfo()
10. Add is_array() + !empty() guard for $umassiv before foreach loop
11. Fix missing newline at end of file
12. Template avatar display (templates/lite/index.php):

13. Add is_array() + !empty() guard on $userinfo before avatar access

    • Prevents file_exists() warning when getusrinfo() returns non-array
14. Extract avatar value into $uavatar with safe fallback

Benefits:

• Eliminates PHP notice/warning log noise in production
• Prevents potential errors for guest or edge-case user states
• Consistent defensive initialization pattern across modules

Technical notes:

• No behavioral changes for normal authenticated users
• All fallback values match existing implicit PHP defaults
• Backward compatible with current template and module contracts