kate522
4833053a5c
fix(email): complete mail settings and templates
2026-09-04 12:06:42 +08:00
kate522
0985d0cb0a
feat(captcha): add provider configuration tabs
2026-09-02 16:55:57 +08:00
kate522
ff4ec1eb43
feat(captcha): 打通人机验证 11 个场景的前后端完整链路
...
- 统一验证入口 aksrt_require_captcha()，返回 true|WP_Error，启用场景配置缺失时 fail-closed 拒绝
- 前端公共 API 重构为 window.AKSRTCaptcha（verify/collect/reset/run），单飞锁防并发重复验证，一次性 proof 绑定浏览器 cookie+场景+服务商+主机名
- challenge/exchange REST 端点：challenge 原子占用防票据放大厂商调用，增加频率限制
- 新增 OAuth bind pass：服务端签发 5 分钟一次性令牌，绑定用户+服务商+浏览器，微信扫码延迟消费
- 覆盖场景：评论、登录、注册、绑定第三方、绑定手机、找回密码、修改密码、更改邮箱、资料下载、签到、前台投稿
- 移除 Service 层重复验证与 _auth_code_verified/_defer_login 等客户端可伪造标志，删除下载共享 pass 死代码
- 修复腾讯 TC3 签名 scope、Cloudflare action/cdata/hostname 严格校验、阿里云验签错误码映射
- 后台 Schema 保存对 secret 字段做掩码/保留合并；导入导出过滤 aksrt_captcha_config
- 重建 public bundle 与 admin SPA；新增 captcha 运行时/安全/业务契约测试与 harness
2026-09-02 13:03:24 +08:00
kate522
b8ef4d81a4
评论区硬切换实现
2026-08-30 17:34:29 +08:00
kate522
780e1eba21
优化了一些问题
2026-08-29 22:03:48 +08:00
kate522
af30159a03
优化了一些问题
2026-08-29 17:36:21 +08:00
kate522
88eb29c645
优化了一些问题fix(captcha)
2026-08-29 17:03:05 +08:00
kate522
50c5769d01
进行了一些优化
2026-08-27 03:27:26 +08:00
kate522
fbada8bd6a
进行了一些小修复
2026-08-26 19:51:31 +08:00
kate522
d37c34f71c
进行了一些小修复
2026-08-26 14:21:32 +08:00
kate522
ed1a47cf4e
进行了一些小修复
2026-08-26 13:30:02 +08:00
kate522
3dbd196e06
修复了一些问题
2026-08-25 18:31:49 +08:00
kate522
c8d199a694
修复了一些问题
2026-08-25 18:22:30 +08:00
kate522
dbb1f776f2
修复了一些问题
2026-08-25 17:57:20 +08:00
kate522
07c4e969c3
新增全局流水号
2026-08-25 05:33:01 +08:00
kate522
9d3bfb91cd
进行了一些小优化
2026-08-24 17:35:46 +08:00
kate522
5cae5b5c93
积分与余额账务系统硬切重构
2026-08-24 15:59:11 +08:00
kate522
86692ff3f9
用户功能设置收口与废弃后台链路清理
2026-08-23 22:09:12 +08:00
kate522
d7634d1ff6
修复了一些问题
2026-08-23 20:59:34 +08:00
kate522
af52f9e94d
登录注册体系的源码级硬切换
2026-08-23 20:30:01 +08:00
kate522
c6c2c0af6d
删除私信分支链路
2026-08-23 13:42:35 +08:00
kate522
31e185664a
fix
2026-08-22 18:54:12 +08:00
kate522
9375b1c30c
refactor(assets): vendor 资产迁入标准目录并全仓去除 zibll 标识
...
- assets/vendor 全量迁移: fontawesome5→assets/fontawesome5, css→assets/css,
js→assets/js/runtime(避开 14 个同名自有文件), img 合并去重→assets/img,
fonts→assets/fonts; 删除 assets/vendor
- libs 五个与 widgets/third-party 字节相同的库不重复入库, loader paths 改指向
- 运行时切换: _win.uri=assets 根, loader baseUrl=/js/runtime, enlighter 注入
路径同步; PHP 7 个引用文件切换并改名 $zibll_*→$runtime_*
- 去品牌: Qinver 头注释/品牌 console.log/演示链接清除, 默认文案中性化
- 功能标识符改名: zib__→aksrt__, zib_ajax→aksrt_ajax, window.zib→
window.aksrtLegacy, zibllblock/*→aksrtblock/*, .zib-widget→.aksrt-panel,
.zib-slider→.aksrt-slider, zib_menu_options meta 键等
- 自有 CSS 改名: legacy-utilities/compat-vars/footer shell
- admin SPA 重建; 契约测试同步(路径/断言/文件更名)
- 例外保留: tests/visual 对照环境与 fixtures 前缀(外部 Zibll 产品引用)
验证: php -l 133 个改动文件通过; runtime 86 个 JS node --check 通过;
契约测试 68/70(2 个失败经 stash 对照确认为存量问题)
2026-08-22 16:16:30 +08:00
kate522
e971c2b1da
修复了一些问题
2026-08-21 13:42:59 +08:00
kate522
9c827ff493
fix(user): rebuild badge modal ajax flow
2026-08-19 15:53:33 +08:00
kate522
d4a9b7fd98
fix(page-display): connect header component visibility settings
2026-08-19 13:35:31 +08:00
kate522
8a738c7998
feat(admin): refine theme settings UI
2026-08-19 13:11:04 +08:00
kate522
480e2bf07e
feat(admin): rebuild page display settings
2026-08-19 00:07:13 +08:00
kate522
a0b84977a2
feat(navigation): hard-switch to Zibll navigation and Font Awesome 5
2026-08-18 20:46:21 +08:00
kate522
0f2ac6c34a
feat(frontend): replace article system with Zibll 9.0
2026-08-18 16:06:47 +08:00
kate522
fb11a7ed0c
fix(frontend): remove residual post thumbnail lazy path
2026-08-18 01:52:00 +08:00
kate522
435ee1daa7
feat(frontend): replace lazy loading with zibll lazysizes
2026-08-18 01:33:38 +08:00
kate522
5d45eb053b
fix(frontend): align layouts posts and widgets with zibll
2026-08-17 21:47:40 +08:00
kate522
e77efd3802
占位文件
2026-08-17 20:14:22 +08:00
kate522
ac5c0b2dd7
fix(admin): restore Vite admin source files
2026-08-17 20:02:36 +08:00
kate522
e1723a8f08
feat(widgets): add phase 4 validation and accessibility
2026-08-17 19:14:40 +08:00
kate522
6c6c462df8
refactor: remove forum and topic feature chains
2026-08-17 14:52:19 +08:00
kate522
566d39c3ae
fix: register referral operations for administrators
2026-08-17 14:08:32 +08:00
kate522
9d4ce5d036
fix: expose referral code operations in admin
2026-08-17 13:59:52 +08:00
kate522
b501cf4611
feat: unify invite flow with referral ref
2026-08-17 13:49:59 +08:00
kate522
929603b9e2
feat: adjust affiliate commissions and withdrawal strategy
2026-08-16 23:11:01 +08:00
kate522
8799063c6c
feat: redesign promotion earnings cards
2026-08-16 20:15:56 +08:00
kate522
99db790a6f
fix: align affiliate settings schema
2026-08-16 18:47:43 +08:00
kate522
179d577d28
fix(credits): align asset actions and withdrawal settings
...
Use matching outlined controls on the points card and manage the
balance-withdrawal switch exclusively from the withdrawal settings page.
2026-08-13 15:35:01 +08:00
kate522
1247f9bf4e
feat(credits): exchange balance for points
...
Replace the legacy points-to-balance and external points purchase flows
with direct integer balance-to-points exchange. Enforce exchange and
points-transfer limits and capability checks across the UI and REST API.
2026-08-13 15:20:06 +08:00
kate522
ab70a5eae9
refactor(admin): consolidate duplicate configuration
...
Remove duplicate comment, captcha, filing, and website-security configuration paths.
Move front submission verification to the captcha scene matrix and retire obsolete admin routes and components.
2026-08-13 02:26:17 +08:00
kate522
b4a4b295bc
refactor(admin): clean up audit/permission/paid content config
...
- P1: remove the duplicate "审核联动" (ai_moderate_background/submit)
block from the attachment permissions page; those settings live in
the "评论审核" / API content audit surfaces.
- P2: rename the "内容审核" submenu to "评论审核" (permissions domain).
- P4: remove the "下载/付费内容中心" page and its schema/route chain;
hardcode runtime policy so download always supports credit purchase
and paid content is limited to posts. Drop the now-dead
cms_features.download_credit flag and parse_slug_list helper.
2026-08-13 01:14:21 +08:00
kate522
8241570ca2
feat(users): govern profiles and access
...
Normalize fixed profile fields, profile actions, and the five-column capability matrix for comments, uploads, and downloads.
2026-08-13 00:24:54 +08:00
kate522
ce2b266890
fix(users): keep management inside center
2026-08-12 20:59:31 +08:00
kate522
dacd0095bf
feat(users): normalize center routes and withdrawal limits
2026-08-12 19:44:47 +08:00
kate522