kate522
4833053a5c
fix(email): complete mail settings and templates
2026-09-04 12:06:42 +08:00
kate522
ff4ec1eb43
feat(captcha): 打通人机验证 11 个场景的前后端完整链路
...
- 统一验证入口 aksrt_require_captcha()，返回 true|WP_Error，启用场景配置缺失时 fail-closed 拒绝
- 前端公共 API 重构为 window.AKSRTCaptcha（verify/collect/reset/run），单飞锁防并发重复验证，一次性 proof 绑定浏览器 cookie+场景+服务商+主机名
- challenge/exchange REST 端点：challenge 原子占用防票据放大厂商调用，增加频率限制
- 新增 OAuth bind pass：服务端签发 5 分钟一次性令牌，绑定用户+服务商+浏览器，微信扫码延迟消费
- 覆盖场景：评论、登录、注册、绑定第三方、绑定手机、找回密码、修改密码、更改邮箱、资料下载、签到、前台投稿
- 移除 Service 层重复验证与 _auth_code_verified/_defer_login 等客户端可伪造标志，删除下载共享 pass 死代码
- 修复腾讯 TC3 签名 scope、Cloudflare action/cdata/hostname 严格校验、阿里云验签错误码映射
- 后台 Schema 保存对 secret 字段做掩码/保留合并；导入导出过滤 aksrt_captcha_config
- 重建 public bundle 与 admin SPA；新增 captcha 运行时/安全/业务契约测试与 harness
2026-09-02 13:03:24 +08:00
kate522
780e1eba21
优化了一些问题
2026-08-29 22:03:48 +08:00
kate522
5cae5b5c93
积分与余额账务系统硬切重构
2026-08-24 15:59:11 +08:00
kate522
86692ff3f9
用户功能设置收口与废弃后台链路清理
2026-08-23 22:09:12 +08:00
kate522
af52f9e94d
登录注册体系的源码级硬切换
2026-08-23 20:30:01 +08:00
kate522
480e2bf07e
feat(admin): rebuild page display settings
2026-08-19 00:07:13 +08:00
kate522
a0b84977a2
feat(navigation): hard-switch to Zibll navigation and Font Awesome 5
2026-08-18 20:46:21 +08:00
kate522
ac5c0b2dd7
fix(admin): restore Vite admin source files
2026-08-17 20:02:36 +08:00
kate522
e1723a8f08
feat(widgets): add phase 4 validation and accessibility
2026-08-17 19:14:40 +08:00
kate522
b4a4b295bc
refactor(admin): clean up audit/permission/paid content config
...
- P1: remove the duplicate "审核联动" (ai_moderate_background/submit)
block from the attachment permissions page; those settings live in
the "评论审核" / API content audit surfaces.
- P2: rename the "内容审核" submenu to "评论审核" (permissions domain).
- P4: remove the "下载/付费内容中心" page and its schema/route chain;
hardcode runtime policy so download always supports credit purchase
and paid content is limited to posts. Drop the now-dead
cms_features.download_credit flag and parse_slug_list helper.
2026-08-13 01:14:21 +08:00
kate522
92e445dbd4
feat: 添加身份认证服务商配置页
2026-08-01 12:06:55 +08:00
kate522
b36186da65
feat(ai): 打通 SEO 闭环与投稿写作辅助
...
对齐 Zibll 的 AI 生成 SEO 流程：统一 WP AI Client/主题 Provider 双后端、文章/分类 SEO 框与生成回填、投稿摘要/标签建议，并收敛扩展页为连接配置。
2026-07-12 15:36:04 +08:00
kate522
3675b7dcef
fix(extensions): IP 归属地管理端测试可绕过启用开关
...
后台测试此前受 ip_geo_enabled 短路，未启用时结果恒为空；强制 live lookup 并返回可读失败原因。
2026-07-12 14:35:19 +08:00
kate522
5c84d259e7
fix(admin): AI 状态接口使用共享 API 客户端 nonce
...
ExtensionAI 误读 window.aksrtAdmin.nonce 导致 /ai/status 403；改为 aksrtAdminData 管道并补充加载错误提示。
2026-07-12 14:32:19 +08:00
kate522
91b083b2b0
refactor(settings): collapse get_all to aksrt_settings and drop migration UI
...
Make aksrt_settings the sole theme settings store for get_all(), remove
aksrt_seo_settings/aksrt_basic_settings merge paths, point global.logo
schema at aksrt_settings, and delete the retired settings migration page,
route, REST endpoint, and related SPA surface.
2026-07-11 16:55:27 +08:00
Claude Code
1268a55dd0
导入 AKSRT 主题开发源码
2026-07-03 22:50:34 +08:00
kate522
Claude Code