7 Commits

Author	SHA1	Message	Date
Jonathan Miller	c56f3473b1	fix: review round 2 — geocode 0-coord, tel: sanitization, Factory ACL ... - Fix geocoding trigger: use isset+is_numeric instead of !empty for coordinate detection (same 0.0 bug pattern as Haversine fix) - Sanitize tel: href to digits/+/-/() only (prevents URI injection) - Use Factory::getApplication() for ACL check (consistent with codebase) Authored-by: Moko Consulting	2026-06-23 12:26:18 -05:00
Jonathan Miller	c8a3c58495	fix: code review fixes — security, 0-coord bug, BOM, ACL ... Security: - ACL check (core.create) in ImportController before processing - File extension validation (.csv/.txt only) on upload - Website href restricted to http/https scheme (prevents javascript: XSS) Bug fixes: - Fix 0.0 coordinate rejection: use null checks instead of != 0.0 (coordinates at equator/prime meridian are valid locations) - Fix Haversine guard using !== null instead of PHP truthiness - Fix geocoding result check: isset+is_numeric instead of !empty - Strip UTF-8 BOM from first CSV header (fixes Excel-generated imports) - Cap radius at 25000 to prevent unreasonable distance queries Authored-by: Moko Consulting	2026-06-23 12:07:03 -05:00
Jonathan Miller	7ef9a23ef8	feat: v1.1 competitive parity — proximity search, directions, geocoding, CSV import ... Haversine proximity search: - LocationsModel filters by distance using Haversine formula - populateState captures lat/lng/radius/radius_unit from search form - Distance-sorted results when proximity filter is active - Hidden radius_unit field added to search module form Get Directions: - Google Maps directions link on location detail page (no API key) - Directions link in Leaflet popup markers Auto-geocoding: - LocationModel::save() override auto-geocodes empty coordinates - Calls Nominatim/OSM API when address present but coords missing - Success/failure messages via Joomla enqueueMessage CSV Import: - ImportController handles file upload with CSRF token check - ImportModel parses CSV via SplFileObject with configurable delimiter - Auto-detects column headers (title/name, address/street, city, etc.) - Per-row validation via LocationTable::bind()->check()->store() - Import view with upload form, delimiter picker, and column help - Toolbar button and submenu item for import access Addresses #54 Authored-by: Moko Consulting	2026-06-23 11:50:02 -05:00
Jonathan Miller	e26d0ed400	fix: code review fixes, Joomla 5/6 compat, XSS prevention ... Security: - Fix stored XSS in Leaflet popup — HTML-escape loc.title/address/phone - Use HTMLHelper::_('content.prepare') for description output Joomla 5/6 compatibility: - Bump PHP minimum to 8.2, Joomla minimum to 5.0.0 - script.php implements InstallerScriptInterface with typed signatures - Restore updateservers and dlid in package manifest - Update all manifest creationDates to 2026-06-23 Code quality: - Replace hard-coded English errors with Text::_() language strings - Add COM_MOKOJOOMSTORELOCATOR_ERROR_* language keys - Use Text::_() for Locations list toolbar title - Import missing Text class in LocationTable and Locations HtmlView Documentation: - Update CLAUDE.md: MokoSuite naming, source/ paths, PHP 8.2, namespace - Update README: Joomla 5/6, PHP 8.2+, MySQL 8.0+ Authored-by: Moko Consulting	2026-06-23 11:08:46 -05:00
Jonathan Miller	4894a703c2	feat: wire up map and search modules with Leaflet and geolocation (Phase 3) ... Map module: - Dispatcher queries published locations with coordinates from DB - Leaflet.js + OpenStreetMap tile layer integration - Markers with popup info (name, address, phone) - Auto-fit bounds to show all markers - Leaflet CSS/JS via Joomla Web Asset Manager Search module: - Dispatcher loads distinct cities/states for dropdown filters - Builds radius options from module params - City dropdown filter (toggled by show_city_filter param) - Radius dropdown with configurable values and unit (miles/km) - Geolocation "Use My Location" button via browser API - Hidden lat/lng fields for proximity search passthrough - New language strings for all search UI elements Both dispatchers now implement DatabaseAwareInterface for DB access. Addresses #51, #3, #35 Authored-by: Moko Consulting	2026-06-23 10:45:50 -05:00
Jonathan Miller	4b37489c41	feat: add site frontend with locations list, detail view, and SEF router (Phase 2) ... Build the complete public-facing frontend for the store locator: - Site DisplayController routing to list and detail views - LocationsModel with search, city, and state filters (published only) - LocationModel for single location by ID - Locations list template with Schema.org LocalBusiness markup - Location detail template with address, contact, hours, map placeholder - SEF URL router with menu/standard/nomenu rules - Menu item types: "All Locations" list and "Location Detail" picker - Site language strings for views and menu items - Router wired into component extension class and service provider - .gitignore exception for source/packages/*/site/ Addresses #50 Authored-by: Moko Consulting	2026-06-23 08:49:07 -05:00
Jonathan Miller	c415d4813f	feat: complete admin CRUD for locations (Phase 1) ... Add full admin editing capability for store locations: - LocationController (FormController) for save/cancel/apply - LocationsController (AdminController) for bulk publish/unpublish/delete - Location edit view with tabbed form (Details, Address, Contact) - Admin list renders data rows with edit links and published toggle - LocationTable::check() validates title, auto-alias, lat/lng, timestamps - LocationsModel with populateState(), search/published filters, ordering - filter_locations.xml with search tools bar - Language strings for filters, sort options, save messages Also includes MokoSuite-renamed package scaffolding (source/packages/). Removes unused Makefile. Closes #32 — populateState for filter persistence Closes #33 — filter XML forms for admin list Authored-by: Moko Consulting	2026-06-23 08:40:02 -05:00