kate522
ff4ec1eb43
feat(captcha): 打通人机验证 11 个场景的前后端完整链路
...
- 统一验证入口 aksrt_require_captcha()，返回 true|WP_Error，启用场景配置缺失时 fail-closed 拒绝
- 前端公共 API 重构为 window.AKSRTCaptcha（verify/collect/reset/run），单飞锁防并发重复验证，一次性 proof 绑定浏览器 cookie+场景+服务商+主机名
- challenge/exchange REST 端点：challenge 原子占用防票据放大厂商调用，增加频率限制
- 新增 OAuth bind pass：服务端签发 5 分钟一次性令牌，绑定用户+服务商+浏览器，微信扫码延迟消费
- 覆盖场景：评论、登录、注册、绑定第三方、绑定手机、找回密码、修改密码、更改邮箱、资料下载、签到、前台投稿
- 移除 Service 层重复验证与 _auth_code_verified/_defer_login 等客户端可伪造标志，删除下载共享 pass 死代码
- 修复腾讯 TC3 签名 scope、Cloudflare action/cdata/hostname 严格校验、阿里云验签错误码映射
- 后台 Schema 保存对 secret 字段做掩码/保留合并；导入导出过滤 aksrt_captcha_config
- 重建 public bundle 与 admin SPA；新增 captcha 运行时/安全/业务契约测试与 harness
2026-09-02 13:03:24 +08:00
kate522
8eb62e712b
fix(single): restore author follow controls
2026-08-31 13:12:45 +08:00
kate522
780e1eba21
优化了一些问题
2026-08-29 22:03:48 +08:00
kate522
11f1c23fa7
进行了一些小优化
2026-08-25 17:02:33 +08:00
kate522
4a4009133c
进行了一些小优化
2026-08-25 16:33:36 +08:00
kate522
9381d1ff53
进行了一些小优化
2026-08-25 06:41:57 +08:00
kate522
75d1e6e53b
进行了一些小优化
2026-08-25 05:59:50 +08:00
kate522
07c4e969c3
新增全局流水号
2026-08-25 05:33:01 +08:00
kate522
90fd59b647
/user/balance/ 调整
2026-08-25 04:20:29 +08:00
kate522
6674bded6a
进行了一些小优化
2026-08-24 17:40:35 +08:00
kate522
9d3bfb91cd
进行了一些小优化
2026-08-24 17:35:46 +08:00
kate522
85a124b886
修复支付状态问题
2026-08-24 17:21:06 +08:00
kate522
58f3f42bf8
修复两个问题
2026-08-24 16:38:03 +08:00
kate522
48a82403b2
修复两个问题
2026-08-24 16:07:39 +08:00
kate522
5cae5b5c93
积分与余额账务系统硬切重构
2026-08-24 15:59:11 +08:00
kate522
86692ff3f9
用户功能设置收口与废弃后台链路清理
2026-08-23 22:09:12 +08:00
kate522
c6c2c0af6d
删除私信分支链路
2026-08-23 13:42:35 +08:00
kate522
c8339feddb
重构购买卡头部标记
2026-08-23 11:06:33 +08:00
kate522
9375b1c30c
refactor(assets): vendor 资产迁入标准目录并全仓去除 zibll 标识
...
- assets/vendor 全量迁移: fontawesome5→assets/fontawesome5, css→assets/css,
js→assets/js/runtime(避开 14 个同名自有文件), img 合并去重→assets/img,
fonts→assets/fonts; 删除 assets/vendor
- libs 五个与 widgets/third-party 字节相同的库不重复入库, loader paths 改指向
- 运行时切换: _win.uri=assets 根, loader baseUrl=/js/runtime, enlighter 注入
路径同步; PHP 7 个引用文件切换并改名 $zibll_*→$runtime_*
- 去品牌: Qinver 头注释/品牌 console.log/演示链接清除, 默认文案中性化
- 功能标识符改名: zib__→aksrt__, zib_ajax→aksrt_ajax, window.zib→
window.aksrtLegacy, zibllblock/*→aksrtblock/*, .zib-widget→.aksrt-panel,
.zib-slider→.aksrt-slider, zib_menu_options meta 键等
- 自有 CSS 改名: legacy-utilities/compat-vars/footer shell
- admin SPA 重建; 契约测试同步(路径/断言/文件更名)
- 例外保留: tests/visual 对照环境与 fixtures 前缀(外部 Zibll 产品引用)
验证: php -l 133 个改动文件通过; runtime 86 个 JS node --check 通过;
契约测试 68/70(2 个失败经 stash 对照确认为存量问题)
2026-08-22 16:16:30 +08:00
kate522
d69334b37d
修复导航栏用户卡片浮层的签到按钮
2026-08-20 14:43:18 +08:00
kate522
d27c0757f2
顶部资料卡新增签到按钮
2026-08-20 14:31:37 +08:00
kate522
029df27b1d
fix(settings): repair phone binding modal
2026-08-19 14:36:31 +08:00
kate522
886ea8732c
fix(profile): restore route styles and hidden modals
2026-08-19 14:08:42 +08:00
kate522
a0b84977a2
feat(navigation): hard-switch to Zibll navigation and Font Awesome 5
2026-08-18 20:46:21 +08:00
kate522
95553086dd
(fix):update user setting toast
2026-08-18 03:48:50 +08:00
kate522
e429b59077
(fix):update user profile toast
2026-08-18 03:27:42 +08:00
kate522
5e2c143449
(fix):update credits toast
2026-08-18 03:09:37 +08:00
kate522
435ee1daa7
feat(frontend): replace lazy loading with zibll lazysizes
2026-08-18 01:33:38 +08:00
kate522
b501cf4611
feat: unify invite flow with referral ref
2026-08-17 13:49:59 +08:00
kate522
f1d6809109
fix: correct commission amount display
2026-08-17 12:34:52 +08:00
kate522
929603b9e2
feat: adjust affiliate commissions and withdrawal strategy
2026-08-16 23:11:01 +08:00
kate522
8fc6fe5312
fix: improve promotion tabs and referral layout
2026-08-16 22:08:48 +08:00
kate522
7baba60cac
fix: improve promotion tabs and referral layout
2026-08-16 21:36:54 +08:00
kate522
7a2319a9a9
fix: improve promotion tabs and referral layout
2026-08-16 21:33:45 +08:00
kate522
853114a9f9
fix: improve promotion tabs and referral layout
2026-08-16 21:28:02 +08:00
kate522
5b9f54f5ac
fix: improve promotion tabs and referral layout
2026-08-16 20:52:15 +08:00
kate522
ff730ab593
feat: unify referral promotion tabs and compact earnings UI
2026-08-16 20:40:21 +08:00
kate522
8799063c6c
feat: redesign promotion earnings cards
2026-08-16 20:15:56 +08:00
kate522
6dbb556d60
feat: merge promotion and earnings center
2026-08-16 19:54:12 +08:00
kate522
f70eca09d1
fix: expose affiliate promotion center
2026-08-16 19:33:42 +08:00
kate522
698a9beb74
feat: upgrade widgets and affiliate commission flow
2026-08-16 18:29:31 +08:00
kate522
179d577d28
fix(credits): align asset actions and withdrawal settings
...
Use matching outlined controls on the points card and manage the
balance-withdrawal switch exclusively from the withdrawal settings page.
2026-08-13 15:35:01 +08:00
kate522
1247f9bf4e
feat(credits): exchange balance for points
...
Replace the legacy points-to-balance and external points purchase flows
with direct integer balance-to-points exchange. Enforce exchange and
points-transfer limits and capability checks across the UI and REST API.
2026-08-13 15:20:06 +08:00
kate522
8241570ca2
feat(users): govern profiles and access
...
Normalize fixed profile fields, profile actions, and the five-column capability matrix for comments, uploads, and downloads.
2026-08-13 00:24:54 +08:00
kate522
ce2b266890
fix(users): keep management inside center
2026-08-12 20:59:31 +08:00
kate522
c3bfd12c69
fix(users): keep center navigation local and restore public home
2026-08-12 20:02:37 +08:00
kate522
dacd0095bf
feat(users): normalize center routes and withdrawal limits
2026-08-12 19:44:47 +08:00
kate522
9781369b6b
fix(user): remove medals beside profile names
2026-08-11 19:43:20 +08:00
kate522
51b52affae
fix(user): align badge entry with medal settings
2026-08-11 19:32:52 +08:00
kate522 and Claude Fable 5
ae2588c292
fix(identity): align vip icons and sidebar cards
...
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com >
2026-08-11 18:52:12 +08:00
kate522
