feat: Content snapshots, restore UI, and config hardening (v01.25.00) #69

Merged

jmiller merged 9 commits from feature/47-backup-status-helper into main 2026-06-21 22:34:53 +00:00

Conversation 0 Commits 9 Files Changed 35

+3187 -1334

jmiller commented 2026-06-21 20:30:23 +00:00

Owner

Copy Link

Copy Source

Summary

• Content Snapshots: New lightweight snapshot system for articles, categories, and modules — independent of full backups. JSON-based storage with replace or merge restore modes, wrapped in DB transactions.
• Restore UI: Full-site restore now has a confirmation modal with options for files, database, preserve config, and encryption password.
• Config hardening: Webcron secret field with CSPRNG generator + strength meter, IP whitelist with table UI + current IP detection, profile dropdown shows name + ID.

New Files (12)

File	Purpose
SnapshotEngine.php	Dumps articles/categories/modules + related tables to JSON
SnapshotRestoreEngine.php	Replace (clean slate) or merge (upsert) restore with transactions
SnapshotsController.php	Create, restore, delete actions
SnapshotsModel.php / SnapshotModel.php	List + single record models
View/Snapshots/HtmlView.php	View with toolbar
tmpl/snapshots/default.php	List + create modal + restore modal
WebcronSecretField.php	Random generator, strength meter, rejects weak patterns
IpWhitelistField.php	Table UI, current IP detection, one-click "Add my IP"
01.25.00.sql	Upgrade SQL for snapshots table

Modified Files (9)

• install.mysql.sql — snapshots table added
• access.xml — mokosuitebackup.snapshot.manage ACL
• mokosuitebackup.xml — version bump + Snapshots submenu
• config.xml — custom fields, profile name+ID, fixed default dir
• tmpl/backups/default.php — restore confirmation modal
• tmpl/dashboard/default.php — full-width quick actions layout
• com_mokosuitebackup.ini — 40+ new language strings
• script.php — random webcron secret on install, snapshots submenu
• pkg_mokosuitebackup.xml — version bump

Snapshot Tables Captured

Type	Tables
Articles	#__content, #__content_frontpage, #__workflow_associations, #__contentitem_tag_map
Categories	#__categories (com_content only)
Modules	#__modules, #__modules_menu

Test Plan

• Fresh install creates snapshots table and generates webcron secret
• Create snapshot with all types — verify JSON file created in backup dir
• Create snapshot with single type (articles only) — verify only article tables captured
• Restore snapshot in replace mode — verify existing content replaced
• Restore snapshot in merge mode — verify existing content preserved, missing items added
• Restore modal on backups view — verify options (files, DB, config, password) passed correctly
• WebcronSecretField — generate button creates 32-char secret, strength meter rejects weak patterns
• IpWhitelistField — shows current IP, "Add my IP" works, table add/remove works
• Default profile dropdown shows "Title (#1)" format
• Dashboard quick actions — dropdown full-width, button below

## Summary - **Content Snapshots**: New lightweight snapshot system for articles, categories, and modules — independent of full backups. JSON-based storage with replace or merge restore modes, wrapped in DB transactions. - **Restore UI**: Full-site restore now has a confirmation modal with options for files, database, preserve config, and encryption password. - **Config hardening**: Webcron secret field with CSPRNG generator + strength meter, IP whitelist with table UI + current IP detection, profile dropdown shows name + ID. ## New Files (12) | File | Purpose | |------|---------| | `SnapshotEngine.php` | Dumps articles/categories/modules + related tables to JSON | | `SnapshotRestoreEngine.php` | Replace (clean slate) or merge (upsert) restore with transactions | | `SnapshotsController.php` | Create, restore, delete actions | | `SnapshotsModel.php` / `SnapshotModel.php` | List + single record models | | `View/Snapshots/HtmlView.php` | View with toolbar | | `tmpl/snapshots/default.php` | List + create modal + restore modal | | `WebcronSecretField.php` | Random generator, strength meter, rejects weak patterns | | `IpWhitelistField.php` | Table UI, current IP detection, one-click "Add my IP" | | `01.25.00.sql` | Upgrade SQL for snapshots table | ## Modified Files (9) - `install.mysql.sql` — snapshots table added - `access.xml` — `mokosuitebackup.snapshot.manage` ACL - `mokosuitebackup.xml` — version bump + Snapshots submenu - `config.xml` — custom fields, profile name+ID, fixed default dir - `tmpl/backups/default.php` — restore confirmation modal - `tmpl/dashboard/default.php` — full-width quick actions layout - `com_mokosuitebackup.ini` — 40+ new language strings - `script.php` — random webcron secret on install, snapshots submenu - `pkg_mokosuitebackup.xml` — version bump ## Snapshot Tables Captured | Type | Tables | |------|--------| | Articles | `#__content`, `#__content_frontpage`, `#__workflow_associations`, `#__contentitem_tag_map` | | Categories | `#__categories` (com_content only) | | Modules | `#__modules`, `#__modules_menu` | ## Test Plan - [ ] Fresh install creates snapshots table and generates webcron secret - [ ] Create snapshot with all types — verify JSON file created in backup dir - [ ] Create snapshot with single type (articles only) — verify only article tables captured - [ ] Restore snapshot in **replace** mode — verify existing content replaced - [ ] Restore snapshot in **merge** mode — verify existing content preserved, missing items added - [ ] Restore modal on backups view — verify options (files, DB, config, password) passed correctly - [ ] WebcronSecretField — generate button creates 32-char secret, strength meter rejects weak patterns - [ ] IpWhitelistField — shows current IP, "Add my IP" works, table add/remove works - [ ] Default profile dropdown shows "Title (#1)" format - [ ] Dashboard quick actions — dropdown full-width, button below

jmiller added the component: enginecomponent: admin labels 2026-06-21 20:30:23 +00:00

jmiller added 2 commits 2026-06-21 20:30:24 +00:00

feat: content snapshots, restore UI, and config hardening (v01.25.00) ... ef31713029

Add content snapshot system for lightweight article/category/module
versioning independent of full backups. Snapshots store as JSON files
with replace or merge restore modes, wrapped in DB transactions.

- SnapshotEngine: dumps articles, categories, modules + related tables
  (workflow_associations, tag maps, frontpage) to JSON
- SnapshotRestoreEngine: replace (clean slate) or merge (upsert) mode
- Full MVC: controller, models, view, template with create/restore modals
- New ACL permission: mokosuitebackup.snapshot.manage
- Submenu entry with camera icon, upgrade SQL for snapshots table

Improve full-site restore UI with confirmation modal offering options
for files, database, preserve config, and encryption password.

Config improvements:
- WebcronSecretField: CSPRNG generator, strength meter, rejects weak
  patterns (password, admin, secret), enforces min 16 chars
- IpWhitelistField: table-based management, current IP detection with
  one-click "Add my IP" button
- Default profile shows "Title (#ID)" format
- Default backup dir uses [DEFAULT_DIR] placeholder
- Install script generates random 32-char webcron secret
- Dashboard quick actions: full-width dropdown with button below

chore(version): auto-bump patch 01.25.01-dev [skip ci] 43c73d20e8

jmiller added 4 commits 2026-06-21 22:22:18 +00:00

fix: scope module DELETE to snapshot IDs in replace mode ... 854383a899

The truncateFiltered() method ran unfiltered DELETE FROM #__modules
in replace mode, which would wipe ALL site modules (admin toolbar,
login, menus) — not just the ones in the snapshot. Now scoped to
only delete modules whose IDs exist in the snapshot data.

Also scopes #__modules_menu delete to snapshot module IDs, and adds
defense-in-depth validation of restore_mode in the controller.

chore: normalize CRLF in workflow files 3bd103f0af

Merge remote-tracking branch 'origin/feature/47-backup-status-helper' into feature/47-backup-status-helper 658ed77090

fix: address PR review findings — error handling and safety ... d5421738b7

Fixes from code review and silent failure audit:

- SnapshotRestoreEngine: catch only duplicate key errors (MySQL 1062)
  in merge mode, re-throw all other exceptions instead of swallowing
- SnapshotRestoreEngine: add json_last_error() check for better error
  messages on corrupt snapshot files
- SnapshotRestoreEngine: log warnings when set_time_limit/ini_set fail
- SnapshotEngine: use strlen($json) instead of filesize() to avoid
  race conditions; catch \Exception instead of \Throwable
- SnapshotsController: remove @unlink suppression, add try-catch
  around delete loop with partial failure reporting
- script.php: add user-facing warning when webcron secret generation
  fails (was silently swallowed, inconsistent with other catch blocks)

jmiller added 1 commit 2026-06-21 22:22:42 +00:00

chore(version): auto-bump patch 01.25.02-dev [skip ci] c2a88a898d

jmiller added 2 commits 2026-06-21 22:33:55 +00:00

Merge remote-tracking branch 'origin/main' into feature/47-backup-status-helper ... 8d67dfbc42

# Conflicts:
#	.mokogitea/workflows/issue-branch.yml
#	.mokogitea/workflows/pr-check.yml
#	README.md
#	mokosuitebackup.xml
#	source/packages/com_mokosuitebackup/mokosuitebackup.xml
#	source/packages/plg_actionlog_mokosuitebackup/mokosuitebackup.xml
#	source/packages/plg_console_mokosuitebackup/mokosuitebackup.xml
#	source/packages/plg_content_mokosuitebackup/mokosuitebackup.xml
#	source/packages/plg_quickicon_mokosuitebackup/mokosuitebackup.xml
#	source/packages/plg_system_mokosuitebackup/mokosuitebackup.xml
#	source/packages/plg_task_mokosuitebackup/mokosuitebackup.xml
#	source/packages/plg_webservices_mokosuitebackup/mokosuitebackup.xml
#	source/pkg_mokosuitebackup.xml

Merge remote-tracking branch 'origin/feature/47-backup-status-helper' into feature/47-backup-status-helper 0a4f896f31

jmiller merged commit 0f88aa0055 into main 2026-06-21 22:34:53 +00:00

jmiller deleted branch feature/47-backup-status-helper 2026-06-21 22:34:54 +00:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

component: admin

Admin UI and views

component: api

REST API

component: engine

Backup/restore engine

component: remote

Remote storage (FTP/GDrive)

component: scheduler

Scheduled tasks

No labels component: admin component: engine

Priority -

Type -

Milestone

No items

No Milestone

Assignees

Clear assignees

jmiller (Jonathan Miller)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: MokoConsulting/MokoSuiteBackup#69