6 Commits

Author	SHA1	Message	Date
jmiller	d8376d6cdf	fix: features & quality batch (#95, #103, #104, #107) ... #95 — ACL + Options: - Add access.xml (core actions + mokoog.batch / mokoog.import custom actions) - Add config.xml (Permissions tab + note pointing settings to the system plugin) - Declare both in the manifest; Batch/ImportExport controllers now check the custom actions with a fallback to the prior core checks (no lockout) #103 — CSV import is now reachable: - Add an Import toolbar button that toggles a multipart file-upload form (jform[csv_file]) posting to importexport.import with a CSRF token #104 — Dead code + disk leak: - Delete unused ImageGenerator class and JsonLdBuilder::buildOrganization() - Add ImageHelper::pruneOldFiles() (deletes generated images older than 30d) and call it on content save so the generated-image cache is bounded #107 — Packaging: - Declare language/en-US in the component manifest (was never installed) - Remove undeclared empty stub dirs src/Field, src/Service	2026-06-29 10:25:59 -05:00
jmiller	d6fb2816cf	refactor: replace Joomla-7-deprecated APIs (forward compatibility) ... Removes accessors deprecated in Joomla 5 and slated for removal in 7 (extension already runs on 6; this future-proofs for 7): - Factory::getDbo() -> Factory::getContainer()->get(DatabaseInterface::class) across plugins, controllers, static helpers, and the install script - Factory::getUser() -> Factory::getApplication()->getIdentity() - Factory::getSession() -> Factory::getApplication()->getSession() - jexit(Text::_('JINVALID_TOKEN')) -> throw new \RuntimeException(..., 403), consistent with the access-denied checks already in those controllers Note: SQL update-version concern is already resolved — the release bumped to 01.05.00, which matches the 01.05.00.sql update slot.	2026-06-28 14:47:34 -05:00
Jonathan Miller	b4d5b73d15	fix: code quality improvements (#76, #77, #78, #79) ... - Add exception logging to BatchController batch skip (#76) - Align form maxlength with DB schema limits (#77) - applySeoTags() already uses public API — no change needed (#78) - Add strip_tags() input sanitization on OG text fields (#79)	2026-06-23 11:28:36 -05:00
Jonathan Miller	46e30c950b	fix: address PR review findings — error handling and data integrity ... - Add missing language field to batch-generated records - Wrap batch insert in try-catch to handle duplicate key races - Add logging to all empty catch blocks (script.php, MokoOG license check) - Guard loadShopProduct() with try-catch for missing MokoSuiteShop tables - Guard reviews query in JsonLdBuilder for missing #__mokoshop_reviews	2026-06-21 16:26:13 -05:00
Jonathan Miller	f484675300	fix: batch limit cap, TagTable validation, CSV language column (#42, #43, #52) ... - Cap batch process limit to 200 per request to prevent DoS (#42) - Add TagTable::check() validation: og_type enum, field max lengths, canonical_url format, robots directives, content_type pattern (#43) - Add language column to CSV export headers and data (#52) - Parse language column on CSV import with format validation - Include language in duplicate check query to match unique key	2026-06-21 10:57:38 -05:00
Jonathan Miller	05b2a44209	refactor: rename src/ to source/ and update all CI references ... - Rename project source directory from src/ to source/ - Update CI workflows (ci-joomla, pr-check, repo-health) to check source/ first, falling back to src/ and htdocs/ for compat - Update .gitignore vendor exception path - manifest.xml entry-point already updated Authored-by: Moko Consulting Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-06 08:24:35 -05:00