Commit Graph

74 Commits

Author SHA1 Message Date
64c7ab0acf feat(cadline): add Cadline docroot apps + root PHPs
Docroot sub-apps beiratkozas/, iskolak/, phpext/; root PHPs crashadmin.php, crm_hardlock.class.php, login-external.php, tips.php, recaptchalib.php, configuration.php (74-byte MightySites multi-site stub, legit). public/ excluded (user data, ~219k files).

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:34:31 +02:00
3d4158c3ac feat(cadline): add common_cadline_libraries + maintenance backend
common_cadline_libraries (CRM hardlock/db/users classes; upstream cadline_web/cadcommonlib), maintenance/ (ARCHLine.XP license backend; upstream cadline_web/maintenance), maintenance2/. Vetted live files (byte-truth); upstream repos in PROVENANCE.md. NOTE: could be git submodules — kept as live files for byte-fidelity.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:34:30 +02:00
95469b22e3 feat(cadline): add Cadline plugin + templates
plg content/workshopdates; templates blankframe, category. Dropped Tiny File Manager backdoor (templates/category/tiny.php) excluded.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:34:30 +02:00
204bde8968 feat(cadline): add Cadline-own modules
11 Cadline-only modules (mod_al_*, mod_alusers, mod_alworkshops, mod_course_list, mod_webinar*, mod_wsregister). Dropped webshells excluded (mod_al_upload/b8.php, mod_course_list/a1.php); legit module bases kept.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:34:30 +02:00
65518cce6b feat(cadline): add Cadline-own components
9 Cadline-only components (no public upstream): showroom, albanner, alworkshops, followedlinks, nonprofit, presentation, project, tcexam, versions. Vetted live files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:34:29 +02:00
9c8669a76f feat(overrides): add Cadline core modifications (live versions)
The ~24 legit Cadline customizations on the Joomla core (audit sec.16.1):
reCAPTCHA anti-spam (registration/reset/remind/login flow, captcha rule),
content view tweaks, mod_login template, phpversioncheck. build-baseline.sh
overlays these live versions onto the official-package core so the baseline
matches live for the legit mods, while the 3 trojanized core files stay clean.
NOTE: com_users/controllers/registration.php carries a hardcoded reCAPTCHA
secret (redacted; rotate on cleanup) — see malware-iocs.md.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:32:07 +02:00
74d53b99f0 feat(pkg): add Phoca Commander 3.0.2 (vetted live, stock)
Phoca Commander 3.0.2 (github.com/PhocaCz/PhocaCommander @3.0.2), vetted clean, stock admin file-manager; live deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:30:03 +02:00
038aa24bf9 feat(pkg): add RemoteImage 2.0.10 (vetted live, stock)
RemoteImage 2.0.10 (github.com/asikart/remoteimage @2.0.10), vetted clean, stock; live deployed files (upstream ships build-layout — deployed bytes used for verification).

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:30:02 +02:00
bc6b919a8e feat(pkg): reconcile Easy File Uploader to live (Cadline delta)
Reconcile to live bytes. Diff vs pristine = Cadline modification (ARCHLine.XP 2024 Rendering contest upload form, ~3 files) + version drift/line-endings.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:30:02 +02:00
ca529cf370 feat(pkg): add Easy File Uploader (pristine upstream)
Pristine Easy File Uploader manifest-mapped from github.com/ollily/easyfileuploader via lib/jmap.py (upstream master; installed 2.7.8).

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:30:02 +02:00
61b652afd0 feat(pkg): reconcile Phoca Download to live (Cadline delta)
Reconcile to live bytes. Diff vs pristine = Cadline modifications (trial-download flow, Hungarian routes, DB query — ~10 files per audit) + line-endings/install files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:30:02 +02:00
d324fb4a5e feat(pkg): add Phoca Download 3.1.2 (pristine upstream)
Pristine Phoca Download 3.1.2 manifest-mapped from github.com/PhocaCz/PhocaDownload @3.1.2 via lib/jmap.py.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:30:01 +02:00
882eee42a1 feat(pkg): reconcile OneAll to live bytes (Cadline CRM delta)
Reconcile to the vetted live deployed files (byte-truth for HIDS verification). The diff vs the previous commit is the full delta from pristine upstream: line-endings, Joomla-deployed install files, and the Cadline CRM integration in the system plugin (+ default.php blankframe branch). Vetted malware-free; SQLi code-quality follow-up noted in PROVENANCE.md.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:29:08 +02:00
581b17d1ea feat(pkg): add OneAll Social Login 5.5.0 (pristine upstream)
Pristine OneAll 5.5.0 manifest-mapped from github.com/oneall/social-login-joomla @5.5.0 via lib/jmap.py to deployed layout. The next commit reconciles to the live bytes; the diff is the full delta vs upstream (line-endings + install files + Cadline CRM modification).

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:29:07 +02:00
26b09b85ae build(baseline): add lib/jmap.py Joomla manifest-mapper + tests
Generic Joomla 3.x manifest -> deployed-path mapper (component/module/plugin/
library/template/package), used to author the pristine (upstream) commit of a
packages/<slug> module before it is reconciled to the live bytes. 18/18 tests
green; ruff/mypy-strict clean.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:27:45 +02:00
8190549c12 feat(deployed): add trada template 1.0 (no-source, vetted live)
trada template (saihoai); the dropped webshell html/mod_articles_category/meant.php is excluded; unmapped -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:53 +02:00
baa62c17ad feat(deployed): add _theme3037 template 3.0 (no-source, vetted live)
_theme3037 template (TemplateMonster.com); unmapped -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:53 +02:00
2c3627ce76 feat(deployed): add XEF library 1.4.4 (no-source, vetted live)
XEF library (Parvez Akther); unmapped -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:53 +02:00
38eeb73768 feat(deployed): add P3P plugin (no-source, vetted live)
P3P system plugin (Joomla! Project label, no manifest version); unmapped -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:53 +02:00
e210dcee47 feat(deployed): add TM Lazy Load 1.2.1 (no-source, vetted live)
TM Lazy Load system plugin (Template Monster); unmapped -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:53 +02:00
e10627d1c8 feat(deployed): add ExtBlank 1.0 (no-source, vetted live)
ExtBlank system plugin (Convergence Services); unmapped -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:52 +02:00
72d4caad6a feat(deployed): add EU Cookie Directive Lite 1.1.1 (no-source, vetted live)
EU Cookie Directive Lite system plugin (Channel Digital); unmapped -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:52 +02:00
493845f4de feat(deployed): add MooTable 1.1.3 (no-source, vetted live)
MooTable system plugin (Roberto Segura); unmapped -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:52 +02:00
0c8f64ffcc feat(deployed): add Fancybox 1.3.6 (no-source, vetted live)
Fancybox system plugin (Yireo); unmapped -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:52 +02:00
108a9c4c94 feat(deployed): add SocialNetworks 1.1.3 (no-source, vetted live)
SocialNetworks (eMediaCom): authentication + user plugins + library; unmapped -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:52 +02:00
fe18c0ab3e feat(deployed): add JoomlaWorks Simple Image Gallery 3.6.0 (no-source, vetted live)
JoomlaWorks Simple Image Gallery content plugin; unmapped -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:52 +02:00
9ec8c84afa feat(deployed): add JoomlaWorks AllVideos 4.8.0 (no-source, vetted live)
JoomlaWorks AllVideos content plugin; unmapped -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:51 +02:00
327a8d7f07 feat(deployed): add YouTubeR plugin (no-source, vetted live)
YouTubeR (ZyX): system plugin 1.49 + editors-xtd button 1.41; unmapped -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:51 +02:00
03aea12d21 feat(deployed): add mod_helloworld 1.0.0 (no-source, vetted live)
mod_helloworld sample module (Tutorials Point tutorial sample) -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:51 +02:00
c7f34a0c4f feat(deployed): add mod_ppc_simple_spotlight 3.1 (no-source, vetted live)
mod_ppc_simple_spotlight module (Pixel Point Creative); unmapped -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:51 +02:00
41818cc299 feat(deployed): add mod_image_split_view (no-source, vetted live)
mod_image_split_view module; no manifest version, unmapped -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:51 +02:00
02d0ff622f feat(deployed): add mod_caroufredsel 1.2.3 (no-source, vetted live)
mod_caroufredsel module; unmapped -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:51 +02:00
a9429be422 feat(deployed): add mod_login2 3.0.0 (no-source, vetted live)
mod_login2 module (mislabeled Joomla! Project); unmapped -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:50 +02:00
c555d00bfc feat(deployed): add mod_estore 3.0.0 (no-source, vetted live)
mod_estore module (mislabeled Joomla! Project); unmapped -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:50 +02:00
66b01fa3de feat(deployed): add mod_articles_news_adv 1.5.5 (no-source, vetted live)
mod_articles_news_adv module (mislabeled Joomla! Project); unmapped clone -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:50 +02:00
1a88d1921a feat(deployed): add mod_sp_simple_gallery 3.0 (no-source, vetted live)
SP Simple Gallery module (JoomShaper); unmapped -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:50 +02:00
4c559cdc9b feat(deployed): add mod_sp_quickcontact 1.4 (no-source, vetted live)
SP Quick Contact module (JoomShaper); unmapped -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:50 +02:00
1cb3c1e03f feat(deployed): add mod_joombig_notebook_flip_nice 1.1 (no-source, vetted live)
Joombig Notebook Flip module (joombig.com); no authentic source -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:50 +02:00
52a519826e feat(deployed): add mod_flippingbook 2.1.1 (no-source, vetted live)
FlippingBook module (eucoders.com); vendor unverified -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:50 +02:00
f0c3d1fb61 feat(deployed): add mod_anycode 3.0 (no-source, vetted live)
AnyCode module (Hyde-Design); vendor unverified -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:49 +02:00
34f29e461d feat(deployed): add mod_xpertscroller 3.10-1 (no-source, vetted live)
XpertScroller module (ThemeXpert); registration-gated vendor -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:49 +02:00
3ea10c68ae feat(deployed): add mod_ut_joomstagram 1.2.0 (no-source, vetted live)
UT Joomstagram module (Unitemplates.com); registration-gated vendor -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:49 +02:00
a5123dc62b feat(deployed): add mod_mx_timeline 4.0.3 (no-source, vetted live)
MX Timeline module (mixwebtemplates); no identifiable source -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:49 +02:00
b4347e0a26 feat(deployed): add mod_jux_timeline 1.0.1 (no-source, vetted live)
JUX Timeline module (JoomlaUX); registration-gated vendor -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:49 +02:00
5cb970a9b0 feat(deployed): add mod_jflickr 1.4.2 (no-source, vetted live)
jFlickr module (Joomla Bamboo); vendor unverified -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:49 +02:00
749dc1bdcd feat(deployed): add mod_os_touchslider 3.6.1 (no-source, vetted live)
OS Touch Slider module + ajax plugin (OrdaSoft); registration-gated vendor -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:49 +02:00
eb0e2e1873 feat(deployed): add mod_bt_googlemaps 2.1.0 (no-source, vetted live)
BT Google Maps module (BowThemes); registration-gated vendor -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:48 +02:00
1217a01aca feat(deployed): add mod_ol_k2timeline 4.0.2 (no-source, vetted live)
OL K2 Timeline module (olwebdesign); no identifiable upstream -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:48 +02:00
682171fd2c feat(deployed): add Helix3 2.5.5 (no-source, vetted live)
Helix3 (JoomShaper) template + system/ajax plugins; the live templates/shaper_helix3/index.php was fbwjedi-cloaking-infected and is replaced with the clean monolith copy -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:48 +02:00
97ee46395a feat(deployed): add Image Swoop 1.2.5 (no-source, vetted live)
Image Swoop module (Template Monster) -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:48 +02:00