Release v01.05.00 — dashboard menu, [DEFAULT_DIR], live validation, submenu icons #40

Closed

jmiller wants to merge 0 commits from dev into main

pull from: dev

merge into: :main

:main

:dev

Conversation 0 Commits - Files Changed -

+384 -23

jmiller commented 2026-06-07 14:14:45 +00:00

Owner

Copy Link

Copy Source

Summary

• Add Dashboard as first submenu entry with FA6 icon injection
• Add [DEFAULT_DIR] placeholder for portable backup directory configuration
• Add live AJAX directory validation on backup_dir field (debounced checkDir endpoint)
• Add web-accessible warning badges and inline security warnings
• Auto-create .htaccess protection in web-accessible backup dirs on profile save and backup time
• Sync menu icons to #__menu on install/update via syncMenuIcons() postflight
• Add encryptionPassword to SteppedSession for upcoming encryption support

PR review fixes applied

• Log failures in protectBackupDir() and protectWebAccessibleDir() (security-critical .htaccess writes)
• Add error_log() to empty catch blocks in boot() and syncMenuIcons()
• Add core.manage ACL check to checkDir() AJAX endpoint
• Surface opendir() failures in browseDir() with warning message
• Add HTTP status check (r.ok) to JS fetch calls before parsing JSON
• Log temp SQL file deletion failures in SteppedBackupEngine

Test plan

• Install package — verify Dashboard appears as first submenu item with home icon
• Verify Backups and Profiles submenu items show database and cog icons
• Create profile with [DEFAULT_DIR] — verify backup runs and resolves correctly
• Edit profile backup_dir — verify live status updates (writable/not found/placeholder)
• Verify web-accessible warning badge on download buttons for backups inside web root
• Verify .htaccess created in backup dir after profile save
• Verify dashboard default-dir warning for profiles using [DEFAULT_DIR]

## Summary - Add Dashboard as first submenu entry with FA6 icon injection - Add `[DEFAULT_DIR]` placeholder for portable backup directory configuration - Add live AJAX directory validation on backup_dir field (debounced checkDir endpoint) - Add web-accessible warning badges and inline security warnings - Auto-create `.htaccess` protection in web-accessible backup dirs on profile save and backup time - Sync menu icons to `#__menu` on install/update via `syncMenuIcons()` postflight - Add `encryptionPassword` to SteppedSession for upcoming encryption support ### PR review fixes applied - Log failures in `protectBackupDir()` and `protectWebAccessibleDir()` (security-critical .htaccess writes) - Add `error_log()` to empty catch blocks in `boot()` and `syncMenuIcons()` - Add `core.manage` ACL check to `checkDir()` AJAX endpoint - Surface `opendir()` failures in `browseDir()` with warning message - Add HTTP status check (`r.ok`) to JS fetch calls before parsing JSON - Log temp SQL file deletion failures in SteppedBackupEngine ## Test plan - [ ] Install package — verify Dashboard appears as first submenu item with home icon - [ ] Verify Backups and Profiles submenu items show database and cog icons - [ ] Create profile with `[DEFAULT_DIR]` — verify backup runs and resolves correctly - [ ] Edit profile backup_dir — verify live status updates (writable/not found/placeholder) - [ ] Verify web-accessible warning badge on download buttons for backups inside web root - [ ] Verify `.htaccess` created in backup dir after profile save - [ ] Verify dashboard default-dir warning for profiles using `[DEFAULT_DIR]`

jmiller added 6 commits 2026-06-07 14:14:45 +00:00

feat: add dashboard menu, [DEFAULT_DIR] placeholder, live dir validation, and backup security ... 608aeb3641

- Add Dashboard as first submenu entry in component manifest
- Add [DEFAULT_DIR] placeholder to PlaceholderResolver for portable profiles
- Add live AJAX directory permission checking on backup_dir field changes
- Add web-accessible warning badge on backup download buttons
- Auto-create .htaccess protection in web-accessible backup dirs on profile save
- Auto-create .htaccess protection at backup time in both engines
- Add checkDir AJAX endpoint for real-time directory validation
- Fix script.php warnMissingLicenseKey running on uninstall

chore(version): pre-release bump to 01.04.01-dev [skip ci] 3ee620eca1

feat: add submenu icons via FA6 CSS injection and sync menu icons on install ... 6e18c77670

- Inject Font Awesome 6 icons for Dashboard, Backups, and Profiles submenu
  items via MokoJoomBackupComponent::boot() using WebAssetManager
- Add syncMenuIcons() to installer script to set img column in #__menu
  on both install and update (Joomla doesn't refresh icons on upgrade)
- Add encryptionPassword property to SteppedSession for stepped backup
  encryption support

chore(version): pre-release bump to 01.04.02-dev [skip ci] 3339eac9de

docs: update changelog with all unreleased changes for v01.05.00 3edf635a4c

fix: address PR review — error logging, ACL check, fetch error handling ... e72a007041

- Log failures in protectBackupDir() and protectWebAccessibleDir() instead
  of silently suppressing with @ (security-critical .htaccess writes)
- Add error_log() to empty catch blocks in boot() and syncMenuIcons()
- Add core.manage ACL check to checkDir() AJAX endpoint
- Surface opendir() failures in browseDir() with warning message
- Add HTTP status check (r.ok) to JS fetch calls before parsing JSON
- Log temp SQL file deletion failures in SteppedBackupEngine

jmiller closed this pull request 2026-06-07 14:14:58 +00:00

jmiller deleted branch dev 2026-06-07 14:14:58 +00:00

Pull request closed

Please reopen this pull request to perform a merge.

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

component: admin

Admin UI and views

component: api

REST API

component: engine

Backup/restore engine

component: remote

Remote storage (FTP/GDrive)

component: scheduler

Scheduled tasks

No labels

Priority -

Type -

Status —

Priority —

Type —

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

jmiller (Jonathan Miller)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: MokoConsulting/MokoSuiteBackup#40