-------------------------------------------------------
Changelog Alicerce CMS 1.0.3 23-10-2026
-------------------------------------------------------
new: example content of themes: a theme may ship demo/demo.json and demo/media; Appearance > "Import example content" creates the pages (each block a WYSIWYG section, editable in the text editor), copies the images to /media/demo-<theme>, fills the site header, footer and signature, activates the theme and puts the new home page first; existing pages are kept, links between the new pages point to their real addresses
new: src\Template\DemoImporter
new: Twig functions site_header() and site_signature() (texts of Settings), used by the premium themes for the top bar and the footer contact column

-------------------------------------------------------
Changelog Alicerce CMS 1.0.2 23-10-2026
-------------------------------------------------------
new: plugin theme_blocks ("Blocos do tema"): ready-made blocks of the active theme (folder snippets/ of the theme, Twig) inserted with the Droplet [[Bloco?nome=...]] or {{ theme_block('...') }}
new: Appearance lists the blocks of the theme in use with the code to insert each one
new: Droplet example Bloco

-------------------------------------------------------
Changelog Alicerce CMS 1.0.1 23-10-2026
-------------------------------------------------------
new: shortcut bar under the admin menu on every page: View site (new tab), New page, Appearance, Media library, Extension guard
new: warning when the install/ folder is still on the server, with a button that removes it (FTAN protected, administrators only)
new: admin tool "Aparência" (appearance): choose the site theme by its preview image, see which one is in use, open the site
new: light/dark setting for the Alicerce themes: automatic (visitor's device), always light or always dark (setting alicerce_color_scheme, Twig site.scheme, html data-theme)
change: messages after saving wait 0.5 s instead of 1 s on new installations (redirect_timer)

-------------------------------------------------------
Changelog Alicerce CMS 1.0.0 (base WebsiteBaker 2.14.0 R1) 23-10-2026
-------------------------------------------------------
fix: file permissions in the package: 5741 files came with mode 600 (inherited from the WebsiteBaker R26 archive), so the web server could not send CSS and images (unstyled admin and site, broken icons); all files are now 644 and folders 755, and the installer warns when static files are not readable
fix: installer suggests an https site address also behind proxies and CDNs (X-Forwarded-Proto, X-Forwarded-SSL, Cloudflare CF-Visitor, port 443) and the browser corrects http to https when the installer is opened over https; an http address on an https site made browsers block the CSS (unstyled login page)
fix: installer error [173] "Illegal file access": the form token now lasts 2 hours instead of 15 minutes (time to create the database in the panel), the installer page is never cached (no-store, LiteSpeed no-cache), the chosen installer language is kept, and the error explains the cause (session cookie, expired form, or an old copy of the page from another tab, cache or proxy) in English, Portuguese and Spanish
package: ZIP reduced from 27.8 MB to 21.4 MB (below the usual 25 MB limit of antivirus scanners such as ClamAV): audio captcha background noises trimmed to 20 s, test folders of composer packages and demo docs removed, maximum compression
design: installer with the Alicerce look (install/alicerce-install.css): one column, numbered steps, readable status with symbols, 44px fields, red install button, language switch under the header, works on phones; clearer step titles in English, Portuguese and Spanish; legacy installer stylesheets are no longer loaded
new: command line installer install/cli-install.php (same routine as the web wizard; for Softaculous, Installatron, hosting panels and SSH) and upgrader install/cli-upgrade.php (restarts itself once when config.php is rewritten)
new: tools/build-release.php writes version.json (version, download URL, SHA-256, requirements) for update checks and installers
change: HttpRequester reads $_POST/$_GET on the command line; installer CSRF token and the "login as administrator" check of the upgrade script are skipped only on the command line
new: media library (module media_library, admin tool "Biblioteca de mídias"): albums made from folders of the media manager, titles, alternative texts, captions and order; thumbnails (WebP or JPEG) generated with GD in /media/biblioteca-cache
new: gallery (page module "Galeria"): grid, mosaic (original proportions) or carousel, 2-6 columns, captions, enlarge on click (accessible <dialog> viewer with arrows, Esc and focus)
new: theme independent gallery markup (.alc-gallery, CSS variables --alc-gap, --alc-radius, --alc-caption; colors and fonts inherited from the theme; no framework or jQuery); tested with the 5 Alicerce themes and the legacy DefaultTemplate
new: Twig functions gallery(), media_album(), media_albums() and Droplet [[Galeria?album=...]]
brand: Alicerce CMS 1.0.0 by TECINFOSP (PRODUCT_NAME, PRODUCT_VERSION, PRODUCT_VENDOR, PRODUCT_URL), new logo in installer and admin, credit to WebsiteBaker kept; default frontend template alicerce_fundacao
droplets: Droplets are Twig templates rendered in the sandbox, eval() removed (also from the syntax check); parameters arrive as variables and in args; new Twig examples year, SearchBox, ShowRootParent, Lorem, Visitantes, Online, Contagem; upgrade converts simple droplets, replaces shipped examples and disables the others (original code kept in code_legacy); old PHP example files removed
security: LoginThrottle - 5 failed logins per user name or 20 per address in 15 minutes lock for 15 minutes (only hashes stored)
security: SecurityHeaders - nosniff, X-Frame-Options SAMEORIGIN, Referrer-Policy, Permissions-Policy, COOP, HSTS on https; X-Powered-By (version) removed
requirement: minimum PHP version is now 8.4.0 (initialize, installer, upgrade script, composer platform)
new: src\Template\SafeTwig - sandboxed Twig engine (allow-list of tags, filters and functions; no PHP, no constants, no object access, no file access)
new: Twig functions for templates and sections: menu(), page_title(), page_description(), page_keywords(), page_url(), media_url(), template_url(), trans(), page_content() (page templates only)
new: src\Template\LegacyPhp - converts trivial legacy PHP (echo/print of literal strings) to Twig without executing it
code module 4.0.0: sections are rendered with Twig, eval() removed; content is validated by the sandbox before saving; editor switched to HTML syntax; content is escaped in the editor textarea
code module 4.0.0: upgrade converts simple PHP sections automatically; other PHP sections are disabled and the original code is kept read-only in the new column content_legacy and shown in the editor
new: admin tool google_fonts (Google Fonts by link): paste links from fonts.google.com, up to 5; only https://fonts.googleapis.com/css2 and /css are accepted
new: Google Fonts mode "local" (default, LGPD/GDPR friendly): CSS and font files are copied once to /media/fonts/google and served by the site; mode "link" loads them from Google
new: src\Template\GoogleFonts; tags are inserted before </head> on every page, or printed by templates with the Twig function google_fonts()
i18n: google_fonts tool and code module messages in English, Portuguese and Spanish
new: installer in English, Portuguese and Spanish (language switcher, browser language detection); the default site language follows the installer language
new: 5 frontend templates rendered by the Twig sandbox (no PHP in the layout): alicerce_fundacao, alicerce_vitrine, alicerce_clinica, alicerce_sabor, alicerce_atlas; responsive, light/dark, menu without JavaScript, sidebar block 2
new: SafeTwig::renderFile() and Twig functions frontend_head(), frontend_body(), site_footer(), search_url()
fix: page and post links keep accented letters as ASCII ("Sobre nós" -> sobre-nos, "Ação" -> acao) instead of dropping them; new wb_transliterate()
new: plugins can offer Twig functions: modules/<name>/twig.php calls SafeTwig::registerFunction(); loaded for every installed module, in frontend and backend
new plugin visitor_counter (snippet): visits and page views per day, no personal data; Twig visitor_counter(), visitor_count()
new plugin who_online (snippet): people active in the last minutes, anonymous session hash kept 15 minutes; Twig who_online(), online_count()
new plugin countdown (page): countdown section with date, title and end message; Twig countdown()
all three plugins in English, Portuguese and Spanish and checked with CodeGuard
new: src\Security\ExtensionGuard and admin tool extension_guard ("Guardião de extensões"), working with CodeGuard on every plugin and theme ZIP:
  - requirements from info.php ($module_platform, $module_requires_php, $module_requires_extensions) block with a clear reason
  - themes may contain only Twig (info.php, the standard index.php loader and plain language files are allowed); every .twig file is validated by the sandbox
  - risk report: network, file writes, e-mail, cookies/session, PHP settings, external scripts, site tables (warnings); encoded code and changes to core tables (blocked by default)
  - signature.json (Ed25519): packages signed by a trusted key are shown as verified, changed packages are blocked; optional rule "only signed packages"; tools/alicerce-sign.php creates keys and signs
  - run time: a plugin whose include.php, twig.php or view.php throws 3 times, or dies with a fatal error, is paused; visitors keep a working page and administrators see the reason at the top of the admin and in the tool

-------------------------------------------------------
Changelog Version 2.13.10 R27 PHP 8.4/8.5 Compatibility Update 23-10-2026
-------------------------------------------------------
security: passwords are now stored with password_hash() (bcrypt); new class src\Security\PwHash used by login, install, admin users, preferences, account password/email, forgot password and signup
security: legacy MD5 hashes are still accepted on login with timing-safe hash_equals() and are rehashed automatically after the first successful login
security: fix loose "==" password comparison in framework/Login.php ("magic hash" bypass with 0e... MD5 hashes)
security: regenerate the session id after successful login (session fixation)
security: generated passwords (forgot password/signup) use random_int() instead of rand()
security: unserialize() of media settings no longer allows objects (allowed_classes=false)
security: news view whitelists order_field/order before using them in ORDER BY
security: remove public test/diagnostic scripts include/captcha/securimage_test.php and modules/form/test.php (also removed on upgrade via getRemoveList)
security: add vendor/.htaccess to deny direct web access to composer libraries
tested: fresh install, admin backend, pages (wysiwyg/form/news), media upload/thumbnails and captchas on PHP 8.1 and PHP 8.5; lint clean on PHP 8.1, 8.2, 8.3, 8.4 and 8.5
fix fatal error in modules/form/DiggPagination.php (invalid type "integer")
fix fatal error in framework/helpers/StyleSheetList.php (magic methods __get/__set visibility and signature)
fix parse error in include/captcha/WavFile.php (removed curly brace string offsets), audio captcha works again; WavFileException now extends \Exception
fix news module: new sections did not get a settings row (INSERT used non-existent columns), frontend crashed with "Unknown column '' in 'ORDER BY'"; legacy columns are only written when they exist
news view: fallback and whitelist for order_field/order when settings are missing
fix fileinfo MIME detection in framework/helpers/Upload.php (finfo is an object since PHP 8.1, is_resource() was always false)
fix admin/media/resize_img.php image loading (GdImage is an object since PHP 8.0, is_resource() was always false)
fix "Undefined array key language" warning in templates/DefaultTemplate/index.php
PHP 8.4: explicit nullable type in framework/traits/Constraint.php
PHP 8.4: replace trigger_error(E_USER_ERROR) with BadMethodCallException in framework/class.frontend.php (obsolete menu()/show_menu())
PHP 8.4: pass $escape explicitly to fgetcsv()/fputcsv()/str_getcsv()
PHP 8.5: replace non-canonical (double) casts with (float)
PHP 8.5: replace backtick operator with shell_exec() in Securimage
PHP 8.5: remove imagedestroy() calls (no-op since PHP 8.0) in media, Zebra_Image and captcha generators
PHP 8.5: remove finfo_close() calls (no-op since PHP 8.1)
PHP 8.2: replace utf8_decode() with mb_convert_encoding() in modules/form/Encoding.php
composer: update vendor within current major versions: twig/twig 3.30.0, phpmailer/phpmailer 6.12.0, symfony/translation 6.4.44, symfony/polyfill 1.43.2, symfony/translation-contracts 3.7.1, symfony/deprecation-contracts 3.7.1, intervention/image 3.11.10, intervention/gif 4.2.4, algo26-matthias/idna-convert 3.2.1, carbonphp/carbon-doctrine-types 3.2.1, jakeasmith/http_build_url 1.0.2
composer: set config.platform.php 8.1.0 so locked packages stay compatible with the minimum PHP version
composer: exclude framework/helpers/cronJob.php and framework/IllegalFileException.php from classmap to keep deterministic class resolution (cronCheck, IllegalFileException)

-------------------------------------------------------
Changelog Version 2.13.10 R26 Security Update 28-07-2026
-------------------------------------------------------
add src\Security\CodeGuard for token-based checks of uploaded or edited PHP code
scan module and template ZIP archives before extracting them into public addon directories
scan media ZIP archives before extracting them into public media directories
count all safe files extracted from media ZIP archives so nested ZIP/readme test files do not report a false upload error
scan language files before copying them into the languages directory
block dangerous Droplet code on save/import; commented examples are ignored
auto-disable existing active Droplets with blocked calls when viewed or edited in the backend
validate user group assignments server-side to prevent manipulated requests from assigning foreign groups
add .htaccess protection for Droplet example/archive/temp directories
add temp/codeguard.log JSON-lines audit log and CodeGuard admin tool
add CodeGuard-ID to user-visible block messages and log entries; messages support German/English with English fallback
add temp/.htaccess protection for CodeGuard logs and security reports
add read-only inventory scan in the CodeGuard admin tool and SECURITY-UPDATE-2.13.10.md documentation
include media executable files, .htaccess and active SVGs in the CodeGuard inventory scan
block dynamic PHP calls such as call_user_func() and variable functions in uploaded or edited code
block fully-qualified and namespaced variants such as \system() and \call_user_func()
scan direct media uploads before saving them; active SVGs and double extensions are blocked, executable file types are rejected before saving
align upgrade default rename_files_on_upload with fresh installs by adding inc
keep settings template selection limited to path/existence validation; installed templates are reviewed by CodeGuard inventory scan
allow WebsiteBaker direct-access guards using $_SERVER in language/template files while keeping $_SERVER blocked in Droplets
display forbidden SVG element names with square brackets in user-visible CodeGuard messages
fix PHP 8.x deprecated logout cookie lookup when old_id is missing
remove deprecated PHP 8.5 imagedestroy() calls from admin media thumbnail output

-------------------------------------------------------
Changelog Version 2.13.9 R25 05-11-2025
-------------------------------------------------------
fix issue in media administration, see
https://forum.websitebaker.org/index.php/topic,32443.0.html

-------------------------------------------------------
Changelog Version 2.13.9 R24 01-09-2025
-------------------------------------------------------
fix broken frontend.functions.php / missing register_frontend_FrontendCss()

-------------------------------------------------------
Changelog Version 2.13.9 R23 01-09-2025
-------------------------------------------------------
replace wrong language-files, missing LANGUAGE_LOADED-definition

-------------------------------------------------------
Changelog Version 2.13.9 R22 28-08-2025
-------------------------------------------------------
change script-url in upgrade-script, produce redirect-error, when wb installed in a subfolder on some server-configurations
remove DA.php from Delete-List in getRemoveFiles-Array

-------------------------------------------------------
Changelog Version 2.13.9 R21 27-08-2025
-------------------------------------------------------
language fix - replace all Straight Apostrophe with Typographic (or Curly) Apostrophe in all language files - produce js-errors
add abort-process for chmod0444
add own css for upgrade-script-errors
Change min- & best-version in initialize.php
fix typofix in pagetree, produce css error

-------------------------------------------------------
Changelog Version 2.13.8 R20 09-08-2025
-------------------------------------------------------
update versions info in all files

-------------------------------------------------------
Changelog Version 2.13.8 R19 09-08-2025
-------------------------------------------------------
fix admin/media/upload.php - function $processAndSanitizeImage () -  prevent for errors, if one resize parameter == 0

-------------------------------------------------------
Changelog Version 2.13.8 R19 09-08-2025
-------------------------------------------------------
remove old unsafe function $resizeImages in admin/media/upload.php and replace it with $processAndSanitizeImage. Have to use now Intervetion/image in every case, not only in resize-process. the prevent for manipulated Image files
recode old function media_filename() to prevent for upload of manipulated files like _.htaccess
update version numbers in all files

-------------------------------------------------------
Changelog Version 2.13.8 R18 09-08-2025
-------------------------------------------------------
Add missing LANGUAGE_LOADED-definition in all language files - forgotten in the new translations

-------------------------------------------------------
Changelog Version 2.13.8 R17 09-08-2025
-------------------------------------------------------
add info for restart the svn in both Docu/Readme-Files

-------------------------------------------------------
Changelog Version 2.13.8 R16 09-08-2025
-------------------------------------------------------
add missing type-declaration in admin/media/upload.php for $jpegQuality

-------------------------------------------------------
Changelog Version 2.13.8 R1 - R15 09-08-2025
-------------------------------------------------------
rebuild the SVN and add a new branch
-------------------------------------------------------
Changelog Version 2.13.7 R162 07-08-2025
-------------------------------------------------------
update keywords in fileheaders and update versions number 

-------------------------------------------------------
Changelog Version 2.13.7 R161 07-08-2025
-------------------------------------------------------
update composer files

algo26-matthias/idna-convert 3.2.0  A library for encoding and decoding internationalized domain names
intervention/image           3.11.4 PHP image manipulation
mixable/color-utils          1.0.5  PHP utilities to convert any values between RGB, HSL, CMYK, YUV and HEX colors.
nesbot/carbon                2.73.0 An API extension for DateTime that supports 281 different languages.
php81_bc/strftime            0.5.0  Locale-formatted strftime using IntlDateFormatter (PHP 8.1 compatible)
phpmailer/phpmailer          6.10.0 PHPMailer is a full-featured email creation and transfer class for PHP
symfony/polyfill             1.32.0 Symfony polyfills backporting features to lower PHP versions
twig/twig                    3.21.1 Twig, the flexible, fast, and secure template language for PHP

-------------------------------------------------------
Changelog Version 2.13.7 R160 07-08-2025
-------------------------------------------------------
add 356 new translation files

-------------------------------------------------------
Changelog Version 2.13.7 R157 - 159 07-08-2025
-------------------------------------------------------
fix FTAN-Problems in outputfilter, Change logik for the save-procedure
fix load-structure for floatbox-plugin

-------------------------------------------------------
Changelog Version 2.13.7 R156 23-07-2025
-------------------------------------------------------
framework/helpers/Precheck.php - replace old fightbulc/Moment-Plugin (working with Dates) with the modern Carbon/Carbon via composer
-------------------------------------------------------

Changelog Version 2.13.7 R155 23-07-2025
-------------------------------------------------------
XSS-Prevention in WB-Search

-------------------------------------------------------
Changelog Version 2.13.7 R140 - 154 23-07-2025
-------------------------------------------------------
replace old PhpThumbFactory (to build Thumbs in Media && News) with modern intervention\image via composer
replace old fightbulc/Moment-Plugin (working with Dates) with the modern Carbon/Carbon via composer
refactor autoload-function and remove 

-------------------------------------------------------
Changelog Version 2.13.7 R138 - 139 11-07-2025
-------------------------------------------------------

remove modules/output_filter/languages/DE.php from the remove-list, not longer needed to remove this file
remove DOCU-folder in modules/droplets - copy&paste-error


-------------------------------------------------------
Changelog Version 2.13.7 R129 - 133 09-07-2025
-------------------------------------------------------
+ add changelog-file to module code && droplets (R131)
+ fix problem with numeric folder names in media-options, was not possible to read the pathsettings for this foldernames (R132)-  (admin/media/upload.php - Ln 173 - 203)
+ add ltrim, to remove possible empty spaces in front of directory names (admin/media/upload.php - Ln 185)

-------------------------------------------------------
Changelog Version 2.13.7 R124 - 128 09-07-2025
-------------------------------------------------------
+ change default fontsize for editarea-windows on this places: /modules/code/modify.php, droplets/cmd/modify_droplets.php, modules/edit_module_files.php
from (old) 14pt to (new)12pt

-------------------------------------------------------
Changelog Version 2.13.7 R120 - 123 08-07-2025
-------------------------------------------------------
admin/media/browse.php + admin/media/thumb.php - now takes into account the aspect ratio of the original image, Thumb is re-produced with frame
+ refresh the version number on different places and also changelog

-------------------------------------------------------
Changelog Version 2.13.7 R104 - 119 11-06-2025
-------------------------------------------------------
- remove old jquery versions 1.9.1, 1.12.1, 3.3.1 
+ set jquery 3.5.1 as default
+ refresh the version number on different places 

-------------------------------------------------------
Changelog Version 2.13.7 R100 - 104 11-06-2025
-------------------------------------------------------
 + refresh the version number on different places 

-------------------------------------------------------
Changelog Version 2.13.7 R99 09-06-2025
-------------------------------------------------------
 + limit the submitted parameters to g,p & _wb to prevent XSS-attacs
 + added proofmethod for integer values and text in string, remove all other chars from urls, only a-z, A-Z, 0-9, /,_,-

-------------------------------------------------------
Changelog Version 2.13.7 R97 08-06-2025
-------------------------------------------------------

fix logical issues in accout/detail.php for display_name, language & timezone
limit the submitted parameters to g,p & _wb to prevent XSS-attacs

-------------------------------------------------------
Changelog Version 2.13.7 R96 05-10-2025
-------------------------------------------------------

fix image path for preview pics in media administration
change some description in output_filter
add german translation

-------------------------------------------------------
Changelog Version 2.13.7 R88 05-08-2025
-------------------------------------------------------

class.database.php - prevent escapeString() for empty strings
upgrade all wb-version-nr (3x)
remove some unneeded test-folders in vendor-packages
upgrade of all composer packages, incl registration & autoload
  - algo26-matthias/idna-convert (v3.2.0)
  - guzzlehttp/psr7 (2.7.1)
  - intervention/image (2.7.2)
  - jakeasmith/http_build_url (1.0.1)
  - mixable/color-utils (1.0.5)
  - php81_bc/strftime (0.5.0)
  - phpmailer/phpmailer (v6.10.0)
  - psr/http-factory (1.1.0)
  - psr/http-message (2.0)
  - ralouphie/getallheaders (3.0.3)
  - symfony/deprecation-contracts (v3.5.1)
  - symfony/polyfill (v1.32.0)
  - twig/twig (v3.21.1)

-------------------------------------------------------
Changelog Version 2.13.7 R60 03-23-2025
-------------------------------------------------------

News - delete_news - add translation for group-delete-error (was only english)
helpers/cronJob.php - fix error, is $sMessage is empty

-------------------------------------------------------
Changelog Version 2.13.7 R44 03-23-2025
-------------------------------------------------------


- remove unneeded Line-output for every usage of GDlib
- removed personal mail adress as example in cronCheck
+ fix error in page_header() && page_footer(), $sTpl cannot be empty, must be string or array
- remove double files & folders in /vendor/psr - copy&paste-error
- ckeditor-upgrade.php - $aTmp cannot be nothing, must be String or Array - this stops the globale upgrade
+ fix headers in redirect for multi-lingual pages - doesn't work in SEO
- remove .setFrontend.inc-inclusion in frontend.functions.php
+ fix delete-buttons for items && groups in news.overview in backend
+ add file types avif && svg as preview in media administration
+ add avif && svg in media-handling in ckeditor - images
+ add two new icon in DefaultTheme, to show avif && svg in media-administration, if no preview possible
+ fix errors for shorthand IPv6-adress, old code support only complete adresses
- remove old namespace-definition in Zebra-Image
+ fix some small typofix in any css-files
- remove some unneeded lines in admin/groups/save.php Ln 94-99, copy&paste-error, not possible, to save group datas


-------------------------------------------------------
Changelog Version 2.13.6 R237/P237 12-04-2024
-------------------------------------------------------
  - Upgrading twig/twig (v3.8.0 => v3.15.0)
  - Upgrading phpmailer/phpmailer (v6.9.1 => v6.9.2)
Fixed form module 3.5.0 to send correct admin mails
 - change description in form-options
 - add hidden files for more options for debug and toeken check
 - add hidden file to send mail to a unregistered user, if he activate a checkbox for this
 - add method to prevent mails for delete process with ajax
Fixed page-add-prozess to inheritance the menu-id from the parent
Fixed template-install for templates without a defined template-function
Fixed user- && page language problem and also form send problem for other languages (definition was not boolean)
Fixed news/rss.php for interception of invalid page id's
prepare some functions for PHP 8.4 (not all)
Fixed wrong convert method in framework/function-utf8.php to solve the search-results-problem
Add method to prevent section_title, page_title && menu_title with forbidden chars like html, js etc

-------------------------------------------------------
Changelog Version 2.13.5 R220/P233 29-06-2024
-------------------------------------------------------
add external cronJob config
    rename cronJob.conf.example to cronJob.conf
    and set your settings for croncheck and cronJob
    if not found read default settings in script
upgrade viewing pagetree
    only show if dom content is completly loaded
    if total pages greater than 100 a progressbar will be shown
upgrade form
    crypted ip adress field formip
    submission only marked as delete can be delete
    add send confirmation mail to unproofed e-mails
upgrade login
    now login possible with e-mail adress
-------------------------------------------------------
Changelog Version 2.13.5 R220/P228 08-05-2024
-------------------------------------------------------
  - Upgrading JQuery to Version 3.7.1 inkl. migrate 3.4.1
  - Upgrading composer to version 2.7.2 (stable channel).
  - Upgrading algo26-matthias/idna-convert (v3.1.0 => v3.1.1)
  - Upgrading guzzlehttp/psr7 (2.6.0 => 2.6.2)
  - Upgrading mixable/color-utils (1.0.3 => 1.0.4)
  - Upgrading phpmailer/phpmailer (v6.8.0 => v6.9.1)
  - Upgrading symfony/polyfill (v1.27.0 => v1.29.0)
  - Upgrading twig/twig (v3.7.0 => v3.8.0)
  - Upgrading php81_bc/strftime (0.5.0 => 0.7.4)
Login as administrator opens system option directly in advanced mode
Built in check for changed files and folder, calles as ajax in infoBox
or call as cronjob from framework/croncheck.php, don't need a admin Login
fixed creation directory only with numbers. e.g. year number in media managment
change folder ckeditor/ckeditor_config to deprecated
set wb_config with cke_loader individual to Addons (see admin/settings)
-------------------------------------------------------
Changelog Version 2.13.5 R220 20-12-2023
-------------------------------------------------------
Update phplib to strict mode for php 8 and higher to fix backslash issue
Remove magic_quote calls in pclzip
update set_var integer parameter to string in settings
Update CKEditor4 to last Version 4.22.1
Update Twig to Version3.7.0 (2023-07-26)
Update PHPMailer to Version 6.8.0 (March 6th, 2023)
Latest available Composer version 2.6.3 (stable channel)
Remove $_Session['GROUP_ID']
Change user.group_id from value 1 == Adminstrator if Group changed to another one
Update media management resize transparent png images
1)  button not active:
    Images will be uploaded with their own dimension
2)  button active:
    first try to resize from values of media folder or corresponding media subfolder
    if no size values exists in media then images try to resize from
    base setting in option general setting otherwise none of uploaded will be resized
    transparent png images are basically resized if setting are smaller than png size
    otherwise keep their size and transparency
3)  Remove compression settings to media management
-------------------------------------------------------
Changelog Version 2.13.4 23-08-2023/07-09-2023
-------------------------------------------------------
Fix "unserialize(): Error at offset 5 of 71 bytes" mediasettings
Fix several errors posted by hgs and sternchen8875
Update hidden account/frontend.css if no account block is active
Update hidden form/frontend.css if different sections
Fixing the call of all enableAddon in scripts where translate class is used
Adding strftime compatibility package for php>=8.1
A cross-platform alternative to strftime()for when it will be removed from PHP
a simple fix is to add the namespace prior to the function like PHP81_BC\strftime()
Update media management
add button resize_up in media option
animated gifs and transparent png images are basically not changed and keep their size and transparency/animation
1) button not aktive:
    Images will be uploaded with their own dimension
2) button aktive:
    first try to resize from values of media folder or corresponding media subfolder
    if no size values exists in media then images try to resize from base setting
    in option general setting otherwise none of uploaded will be resized
-------------------------------------------------------
Changelog Version 2.13.3
-------------------------------------------------------
Update Twig to v3.4.3
Update CkEditor to v4.20.0
Update PHPMailer to v6.7
add class intervention/image v2.7.2
add class mixable/color-utils v1.0.3
(mixable/color-utils PHP utilities to convert any values between RGB, HSL, CMYK, YUV and HEX colors)
(most important changes for PHP 8.2.x)
Fixed drag and drop for modules (e.g. news and form)
known drag bug
   no move icons update during drag
-------------------------------------------------------
Changelog Version 2.13.2 (most important changes for PHP 8.1.x)
-------------------------------------------------------
Fixed incorrect typirisierte Function parameter for PHP 8.1.x
Update Twig Version to 3.4.1
Update CkEditor to Version 4.19.0
Fixed Url in CKEditor template.js
Fixed search routines
fixed Captcha class Secureimage
Add color picker Coloris-0.14.0 to /include/plugins/default/
Optimizations of some methods class.database
-------------------------------------------------------
Changelog Version 2.13.1 (most important changes)
-------------------------------------------------------
The WebsiteBaker project is pleased to announce the official release of the long-awaited WebsiteBaker 2.13.1. WebsiteBaker Version 2.13.0, which was released a year ago, has been extensively expanded and various reported problems have been eliminated. We encourage everyone to start planning an upgrade to WebsiteBaker 2.13.1. This release officially marks the end of further development of WebsiteBaker 2.13.0!!
Among other things, it is a security release that fixes some security vulnerabilities and contains various bug fixes and improvements.
WebsiteBaker 2.13.1 runs with PHP 7.4.28 up to and including PHP 8.0.x. Some adjustments have already been made for PHP 8.1.x. We are working hard on the full customization for PHP 8.1.x
And here is an overview of changes in WebsiteBaker 2.13.1.
An optical and improved technical adjustment of the WebsiteBaker Installer should be mentioned, e.g. preventing incorrect entries.
For the frontend login, registration, user setting (profile), styles (frontend.css) and javascript (frontend.js, frontend_body.js)  files are also integrated into the frontend template, as with the modules, in order to be able to adapt the design for the frontend account to your own design.
An update of the template engine Twig version to version 3.3.9 to replace the outdated and inflexible PHPLib template engine with Twig in one of the later WebsiteBaker versions.<br />Update CKEditor to version 4.18.0 which Security Includes
The update of the PhpMailer class to version 6.6 has brought with it some stricter configuration measures.
Advanced features in Mailer class allow to suppress SSL certificate check when this error occurs SMTP Error: Could not connect to SMTP host (Reason invalid or missing certificates). Keep in mind that security is compromised if opting for this route of suppressing certificate validation.
The WebsiteBaker own form module has been provided with a new spam protection. The time for the spam protection to take effect can now be set individually in minutes.
The General Data Protection Regulation was also taken into account. The retention period of saved entries, if allowed to be saved at all, can be limited in days and the form module will irrevocably and automatically delete the entries from the database as soon as the backend overview page of the form module is called.
The Output_Filter also makes it easier for the user to integrate the ShortUrl Version 4 developed by Ruud. Editing via FTP is no longer necessary, the necessary short.php file is created automatically at the push of a button and can also be deleted again. The option of editing and deleting the .htaccess file is also possible via the output_filter and should only be carried out by experienced users. Using the import function, text modules can also be inserted into an existing .htaccess. The possibility of your own text modules is also provided.
Also, some droplets that are supplied by default have undergone an overhaul and adjustment to PHP 8 and will be automatically updated during the upgrade.
Also new, at the end of some password fields is a small eye icon that you can click after entering the password so that it then displays the password in plain text.
Module developers should seek help and customization information from the development team for internal core changes.
How to install a new WebsiteBaker version 2.13.1
Download the unzip.php.zip version 16 from the wiki download area, as well as the full package WebsiteBaker 2.13.1Remove the extension .zip from the unzip.php.zip. This file is an executable unzip.php.It is no longer necessary to unpack the WebsiteBaker package yourself. Upload both files via FTP to the desired website (application path) in which WebsiteBaker is to be installed.In the browser address line, enter the following URL https://domain-name.tld /unzip.php and confirm. The unzip routine starts and is self-explanatory. After unpacking, click on the Backend button and the revised WebsiteBaker Installer will start automatically.
How to upgrade to WebsiteBaker 2.13.1
Basically, the process is identical to the new installation. The only difference is that there is no new installation; WebsiteBaker automatically offers the upgrade after logging into the backend. Remember to back up the website and database beforehand.n upgrade from older WebsiteBaker installations, preferably from version 2.8.x, has been maintained and is already with version smaller 2.8.x without having to jump from version to version.n online installer is planned for the future, until then we will soon be available for the upgrade from offer 2 fix files for older versions.Not yet available, but the next highlight is planned to help quickly with problems. The files in the sub-items listed can be used to fix various package-related issues and/or change the installation status of packages.
The small fix for reported problems and also for new features then also with a changed version or revision number (changed installation status)The quick fix only for reported fixed problems without features for the final version WebsiteBaker 2.13.1 (unchanged installation status)
With this release, we would like to take this opportunity to recognize the efforts and dedication of all the people who have voluntarily given their time to support and promote the WebsiteBaker project. We would like to thank everyone who has contributed to the development of WebsiteBaker over the years, past and present!
