7 Commits

Include renames

Author	SHA1	Message	Date
E.Noorlander	c0dc707a51	Fix plugin security, hooks system, and admin features ... - Add plugin allowlist (enabled_plugins in config.json) - Add enable/disable toggle in admin (separate from visibility) - Add plugin hooks system (actions + filters with auto-registration) - Fix autoLinkPageTitles nested <a> tag vulnerability - Move MQTT credentials to environment variables - Preserve current page in language switcher - Fix ctime/birthtime for file creation date - Deduplicate getGuidePage() CommonMark setup - Simplify formatDisplayName() logic - Add admin activity log to dashboard - Add own password change with current password verification - Apply theme header_color to admin sidebar - Add content preview button in editor	2026-07-21 13:42:32 +02:00
E.Noorlander	e19433a389	Add custom image size syntax for Markdown files ... Support {:width="300" height="200"} syntax in .md files to set image dimensions via attributes inside {: :}	2026-07-21 13:16:33 +02:00
E.Noorlander	a048056b6b	Fix auto-link URLs: prevent double language prefix from relative link conversion	2026-07-21 13:00:24 +02:00
E.Noorlander	caa335a319	Clean URLs and security improvements ... - Add .htaccess rewrite rules for clean URLs (/nl/page, /admin/route) - Add PHP dev server router with clean URL support - Update admin template asset paths to absolute for clean URL compat - All pentest fixes verified: CSRF on login, directory listing disabled, secure cookies, backup/sourcemap files removed, version disclosure off	2026-07-14 15:28:53 +02:00
E.Noorlander	c6c2fdb67b	Security fixes n.a.v. pentest op noorlander.info ... - CSRF token toegevoegd aan admin login formulier - Directory listing uitgeschakeld (Options -Indexes) - Secure/SameSite=Strict cookie verbeterd in AdminAuth - app.js.backup en source maps verwijderd - Version disclosure configureerbaar via config.json - .map en backup extensies geblokkeerd in .htaccess	2026-07-14 14:25:04 +02:00
E.Noorlander	2be16d9244	Media browser: recursive scan entire content/ tree, /-media/ URL prefix, editor change detection fix ... - handleMediaList() now scans content/ recursively for all media files - URLs use /-media/ prefix mapping directly to content/ (no special cases) - index.php: added /-media/ route, kept /-assets/ for backward compat - editor-toolbar.js: fixed editor.on('change') placement (was inside switchMode) - content-edit.php and content-new.php: back-btn unsaved-changes detection - Removed unused __editorCleanup global	2026-06-24 17:00:59 +02:00
E.Noorlander	aabc41aecc	Remove media menu option and verify route handling	2026-06-23 16:20:29 +02:00