From dd2b5aecb3f63d35c3c9466afdf65f8212dc3ae3 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Wed, 29 Oct 2025 10:19:07 +0900
Subject: [PATCH 01/34] Version 2.1.28

---
 common/constants.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/common/constants.php b/common/constants.php
index 341009623..621cf20c5 100644
--- a/common/constants.php
+++ b/common/constants.php
@@ -3,7 +3,7 @@
 /**
  * RX_VERSION is the version number of the Rhymix CMS.
  */
-define('RX_VERSION', '2.1.27');
+define('RX_VERSION', '2.1.28');
 
 /**
  * RX_MICROTIME is the startup time of the current script, in microseconds since the Unix epoch.

From af8e510ca22732c320cf2ed32d96042686069163 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Wed, 29 Oct 2025 10:25:45 +0900
Subject: [PATCH 02/34] Clear cache after modifying document_extra_keys table

---
 modules/document/document.class.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/modules/document/document.class.php b/modules/document/document.class.php
index 82d34909b..a1421f145 100644
--- a/modules/document/document.class.php
+++ b/modules/document/document.class.php
@@ -238,6 +238,7 @@ class Document extends ModuleObject
 		if(!$oDB->isColumnExists('document_extra_keys', 'var_sort'))
 		{
 			$oDB->addColumn('document_extra_keys', 'var_sort', 'char', '1', 'N', true, 'var_search');
+			Rhymix\Framework\Cache::clearGroup('site_and_module');
 		}
 		if(!$oDB->isColumnExists('document_extra_vars', 'sort_value') || !$oDB->isIndexExists('document_extra_vars', 'idx_sort_value'))
 		{

From 30d79120541a8d6f0857ee52dde6ab741d13c0e8 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Wed, 29 Oct 2025 16:55:15 +0900
Subject: [PATCH 03/34] Fix inefficient extra_vars loading query

---
 modules/document/document.class.php               | 5 +++++
 modules/document/queries/getDocumentExtraVars.xml | 1 -
 modules/document/schemas/document_extra_vars.xml  | 1 +
 3 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/modules/document/document.class.php b/modules/document/document.class.php
index a1421f145..fc9cc8cce 100644
--- a/modules/document/document.class.php
+++ b/modules/document/document.class.php
@@ -113,6 +113,7 @@ class Document extends ModuleObject
 		// 2025.10.23 Add sort to document_extra_keys table, and sort_value to document_extra_vars table
 		if(!$oDB->isColumnExists('document_extra_keys', 'var_sort')) return true;
 		if(!$oDB->isColumnExists('document_extra_vars', 'sort_value') || !$oDB->isIndexExists('document_extra_vars', 'idx_sort_value')) return true;
+		if(!$oDB->isIndexExists('document_extra_vars', 'idx_document_var_idx')) return true;
 		if(!$oDB->isIndexExists('document_extra_vars', 'idx_prefix_value')) return true;
 
 		// Delete unnecessary index
@@ -265,6 +266,10 @@ class Document extends ModuleObject
 			$oDB->commit();
 			$oDB->addIndex('document_extra_vars', 'idx_sort_value', array('module_srl', 'sort_value'));
 		}
+		if(!$oDB->isIndexExists('document_extra_vars', 'idx_document_var_idx'))
+		{
+			$oDB->addIndex('document_extra_vars', 'idx_document_var_idx', array('document_srl', 'var_idx'));
+		}
 		if(!$oDB->isIndexExists('document_extra_vars', 'idx_prefix_value'))
 		{
 			$oDB->addIndex('document_extra_vars', 'idx_prefix_value', array('module_srl', 'value(10)'));
diff --git a/modules/document/queries/getDocumentExtraVars.xml b/modules/document/queries/getDocumentExtraVars.xml
index 34c723265..f02d67b65 100644
--- a/modules/document/queries/getDocumentExtraVars.xml
+++ b/modules/document/queries/getDocumentExtraVars.xml
@@ -6,7 +6,6 @@
         <column name="*" />
     </columns>
     <conditions>
-        <condition operation="more" column="extra_vars.module_srl" default="-1" notnull="notnull" pipe="and" />
         <condition operation="in" column="extra_vars.document_srl" var="document_srl" notnull="notnull" pipe="and" />
         <condition operation="more" column="extra_vars.var_idx" default="-2" pipe="and" />
     </conditions>
diff --git a/modules/document/schemas/document_extra_vars.xml b/modules/document/schemas/document_extra_vars.xml
index f1707a66a..05bf6ba61 100644
--- a/modules/document/schemas/document_extra_vars.xml
+++ b/modules/document/schemas/document_extra_vars.xml
@@ -6,6 +6,7 @@
 	<column name="value" type="bigtext" />
 	<column name="sort_value" type="bigint" />
 	<column name="eid" type="varchar" size="40" />
+	<index name="idx_document_var_idx" columns="document_srl,var_idx" />
 	<index name="idx_prefix_value" columns="module_srl,value(10)" />
 	<index name="idx_sort_value" columns="module_srl,sort_value" />
 </table>

From 0ca46654aacf96c68d8f414e0d8cbb5b9bab79b2 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Thu, 30 Oct 2025 12:39:37 +0900
Subject: [PATCH 04/34] Rename $columnList to $reload_counts in getDocument()

---
 modules/document/document.item.php  | 25 +++++++++----------------
 modules/document/document.model.php |  6 +++---
 2 files changed, 12 insertions(+), 19 deletions(-)

diff --git a/modules/document/document.item.php b/modules/document/document.item.php
index 1fdf94d8f..0b5e5609e 100644
--- a/modules/document/document.item.php
+++ b/modules/document/document.item.php
@@ -65,14 +65,13 @@ class DocumentItem extends BaseObject
 	 * Constructor
 	 * @param int $document_srl
 	 * @param bool $load_extra_vars
-	 * @param array columnList
+	 * @param bool $reload_counts
 	 * @return void
 	 */
-	function __construct($document_srl = 0, $load_extra_vars = true, $columnList = array())
+	function __construct($document_srl = 0, $load_extra_vars = true, $reload_counts = true)
 	{
 		$this->document_srl = $document_srl;
-		$this->columnList = $columnList;
-		$this->_loadFromDB($load_extra_vars);
+		$this->_loadFromDB($load_extra_vars, $reload_counts);
 	}
 
 	function setDocument($document_srl, $load_extra_vars = true)
@@ -86,23 +85,13 @@ class DocumentItem extends BaseObject
 	 * @param bool $load_extra_vars
 	 * @return void
 	 */
-	function _loadFromDB($load_extra_vars = true)
+	function _loadFromDB($load_extra_vars = true, $reload_counts = true)
 	{
 		if(!$this->document_srl)
 		{
 			return;
 		}
 
-		$document_item = false;
-		$columnList = array();
-		$reload_counts = true;
-
-		if ($this->columnList === false)
-		{
-			$reload_counts = false;
-		}
-		$this->columnList = array();
-
 		// cache controll
 		$cache_key = 'document_item:' . getNumberingPath($this->document_srl) . $this->document_srl;
 		$document_item = Rhymix\Framework\Cache::get($cache_key);
@@ -110,8 +99,12 @@ class DocumentItem extends BaseObject
 		{
 			$columnList = array('readed_count', 'voted_count', 'blamed_count', 'comment_count', 'trackback_count');
 		}
+		else
+		{
+			$columnList = [];
+		}
 
-		if(!$document_item || $reload_counts)
+		if(!$document_item || $reload_counts !== false)
 		{
 			$args = new stdClass();
 			$args->document_srl = $this->document_srl;
diff --git a/modules/document/document.model.php b/modules/document/document.model.php
index d06a44f82..ee7165775 100644
--- a/modules/document/document.model.php
+++ b/modules/document/document.model.php
@@ -149,10 +149,10 @@ class DocumentModel extends Document
 	 * @param int $document_srl
 	 * @param bool $is_admin
 	 * @param bool $load_extra_vars
-	 * @param array $columnList
+	 * @param bool $reload_counts
 	 * @return documentItem
 	 */
-	public static function getDocument($document_srl = 0, $is_admin = false, $load_extra_vars = true, $columnList = array())
+	public static function getDocument($document_srl = 0, $is_admin = false, $load_extra_vars = true, $reload_counts = true)
 	{
 		if(!$document_srl)
 		{
@@ -160,7 +160,7 @@ class DocumentModel extends Document
 		}
 		if(!isset($GLOBALS['XE_DOCUMENT_LIST'][$document_srl]))
 		{
-			$oDocument = new documentItem($document_srl, $load_extra_vars, $columnList);
+			$oDocument = new documentItem($document_srl, $load_extra_vars, $reload_counts);
 			if(!$oDocument->isExists())
 			{
 				return $oDocument;

From d671f0468c0b4b39bd16e247f1a29cc89b18a5dc Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Wed, 5 Nov 2025 11:51:07 +0900
Subject: [PATCH 05/34] Explicitly mark _loadDesktopJSCSS() as public, to
 ensure backward compatibility

---
 classes/display/HTMLDisplayHandler.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/classes/display/HTMLDisplayHandler.php b/classes/display/HTMLDisplayHandler.php
index 609fe787a..c2f570ad5 100644
--- a/classes/display/HTMLDisplayHandler.php
+++ b/classes/display/HTMLDisplayHandler.php
@@ -728,7 +728,7 @@ class HTMLDisplayHandler
 	 * import basic .js files.
 	 * @return void
 	 */
-	function _loadDesktopJSCSS()
+	public function _loadDesktopJSCSS()
 	{
 		$this->_loadCommonJSCSS();
 	}

From 47cb8ca4ff06b24120eb97ab2fe1f5fa7d34c442 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Wed, 5 Nov 2025 11:51:56 +0900
Subject: [PATCH 06/34] Fix double escape of filename in short download URL
 #2611

---
 modules/file/file.controller.php | 4 ++--
 modules/file/file.model.php      | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/modules/file/file.controller.php b/modules/file/file.controller.php
index cf1842a9e..01702a6b5 100644
--- a/modules/file/file.controller.php
+++ b/modules/file/file.controller.php
@@ -307,7 +307,7 @@ class FileController extends File
 
 		$file_srl = Context::get('file_srl');
 		$sid = Context::get('sid');
-		$filename_arg = Context::get('filename');
+		$filename_arg = htmlspecialchars_decode(Context::get('filename'));
 
 		// Get file information from the DB
 		$file_obj = FileModel::getFile($file_srl);
@@ -434,7 +434,7 @@ class FileController extends File
 		// Get requsted file info
 		$file_srl = Context::get('file_srl');
 		$file_key = Context::get('file_key');
-		$filename_arg = Context::get('filename');
+		$filename_arg = htmlspecialchars_decode(Context::get('filename'));
 
 		$columnList = array('source_filename', 'uploaded_filename', 'file_size');
 		$file_obj = FileModel::getFile($file_srl, $columnList);
diff --git a/modules/file/file.model.php b/modules/file/file.model.php
index 4a1c40e7b..ba69f6c6e 100644
--- a/modules/file/file.model.php
+++ b/modules/file/file.model.php
@@ -476,8 +476,8 @@ class FileModel extends File
 		$nullList = array();
 		foreach ($output->data as $file)
 		{
-			$file->source_filename = escape($file->source_filename, false);
 			$file->download_url = self::getDownloadUrl($file->file_srl, $file->sid, 0, $file->source_filename);
+			$file->source_filename = escape($file->source_filename, false);
 			$fileList[] = $file;
 			if ($file->upload_target_type === null)
 			{

From df3e6b157a6e36c664bb35029c4f5aea3dffcdc8 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Wed, 5 Nov 2025 11:55:32 +0900
Subject: [PATCH 07/34] Fix uninitialized variable

---
 modules/autoinstall/autoinstall.admin.view.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/modules/autoinstall/autoinstall.admin.view.php b/modules/autoinstall/autoinstall.admin.view.php
index f49d99062..31d34f040 100644
--- a/modules/autoinstall/autoinstall.admin.view.php
+++ b/modules/autoinstall/autoinstall.admin.view.php
@@ -342,6 +342,7 @@ class autoinstallAdminView extends autoinstall
 		$buff = FileHandler::getRemoteResource($config->download_server, $body, 3, "POST", "application/xml", array(), array(), array(), $request_config);
 		$xml_lUpdate = new XeXmlParser();
 		$xmlDoc = $xml_lUpdate->parse($buff);
+		$item_list = array();
 		$res = array();
 		if($xmlDoc && $xmlDoc->response->packagelist->item)
 		{

From b9d79949b151915bc7c0d9b86080f7676bc1c3d7 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Fri, 7 Nov 2025 12:57:19 +0900
Subject: [PATCH 08/34] Fix type mismatch when filename argument is missing

---
 modules/file/file.controller.php | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/modules/file/file.controller.php b/modules/file/file.controller.php
index 01702a6b5..ba8876dbf 100644
--- a/modules/file/file.controller.php
+++ b/modules/file/file.controller.php
@@ -307,7 +307,7 @@ class FileController extends File
 
 		$file_srl = Context::get('file_srl');
 		$sid = Context::get('sid');
-		$filename_arg = htmlspecialchars_decode(Context::get('filename'));
+		$filename_arg = htmlspecialchars_decode(Context::get('filename') ?? '');
 
 		// Get file information from the DB
 		$file_obj = FileModel::getFile($file_srl);
@@ -318,7 +318,7 @@ class FileController extends File
 		{
 			throw new Rhymix\Framework\Exceptions\TargetNotFound('msg_file_not_found');
 		}
-		if ($filename_arg !== null && $filename_arg !== $filename)
+		if ($filename_arg !== '' && $filename_arg !== $filename)
 		{
 			throw new Rhymix\Framework\Exceptions\TargetNotFound('msg_file_not_found');
 		}
@@ -434,7 +434,7 @@ class FileController extends File
 		// Get requsted file info
 		$file_srl = Context::get('file_srl');
 		$file_key = Context::get('file_key');
-		$filename_arg = htmlspecialchars_decode(Context::get('filename'));
+		$filename_arg = htmlspecialchars_decode(Context::get('filename') ?? '');
 
 		$columnList = array('source_filename', 'uploaded_filename', 'file_size');
 		$file_obj = FileModel::getFile($file_srl, $columnList);
@@ -460,7 +460,7 @@ class FileController extends File
 		}
 
 		// Check filename if given
-		if ($filename_arg !== null && $filename_arg !== $filename)
+		if ($filename_arg !== '' && $filename_arg !== $filename)
 		{
 			throw new Rhymix\Framework\Exceptions\TargetNotFound('msg_file_not_found');
 		}

From f5389fb964053e0dd7845c3294509092fc5127ed Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Wed, 12 Nov 2025 21:43:18 +0900
Subject: [PATCH 09/34] Add admin/ to cleanup list

---
 modules/admin/controllers/maintenance/Cleanup.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/modules/admin/controllers/maintenance/Cleanup.php b/modules/admin/controllers/maintenance/Cleanup.php
index 350b6f232..1ea397361 100644
--- a/modules/admin/controllers/maintenance/Cleanup.php
+++ b/modules/admin/controllers/maintenance/Cleanup.php
@@ -284,6 +284,7 @@ class Cleanup extends Base
 		'addons/member_communication/' => 'deleted:xe',
 		'addons/mobile/' => 'deleted:xe',
 		'addons/openid_delegation_id/' => 'deleted:xe',
+		'admin/' => 'deleted:xe',
 		'classes/cache/CacheApc.class.php' => 'deleted:xe',
 		'classes/cache/CacheFile.class.php' => 'deleted:xe',
 		'classes/cache/CacheMemcache.class.php' => 'deleted:xe',

From 64d998297810cee07aa8746b6e15fbdc6afbf40b Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Wed, 12 Nov 2025 21:50:02 +0900
Subject: [PATCH 10/34] Fix missing message options in admin document manage
 modal #2610

---
 modules/document/tpl/document_list.html | 24 ++++++++++++++++++++++--
 1 file changed, 22 insertions(+), 2 deletions(-)

diff --git a/modules/document/tpl/document_list.html b/modules/document/tpl/document_list.html
index 575db6a0b..d93c38115 100644
--- a/modules/document/tpl/document_list.html
+++ b/modules/document/tpl/document_list.html
@@ -167,8 +167,20 @@ xe.lang.msg_empty_search_keyword = '{$lang->msg_empty_search_keyword}';
 				<tbody>
 				</tbody>
 			</table>
-			<div class="x_control-group" style="padding-right:14px;border-top:0">
-				<label for="message">{$lang->message_notice}</label>
+			<div class="x_control-group" id="message_options" style="padding-right:14px;border-top:0">
+				<label for="send_default_message" class="x_inline">
+					<input type="radio" name="send_message" id="send_default_message" value="default" checked="checked" />
+					{$lang->send_default_message}
+				</label>
+				<label for="send_custom_message" class="x_inline">
+					<input type="radio" name="send_message" id="send_custom_message" value="custom" />
+					{$lang->send_custom_message}
+				</label>
+				<label for="send_no_message" class="x_inline">
+					<input type="radio" name="send_message" id="send_no_message" value="none" />
+					{$lang->send_no_message}
+				</label>
+				<br />
 				<textarea rows="4" cols="42" name="message_content" id="message" style="width:100%"></textarea>
 			</div>
 		</section>
@@ -231,5 +243,13 @@ jQuery(function($){
 			}
 		}
 	});
+	$('#message').prop('disabled', true);
+	$('#message_options').on('change', 'input[name="send_message"]', function(){
+		if($('#send_custom_message').is(':checked')) {
+			$('#message').prop("disabled", false);
+		} else {
+			$('#message').prop("disabled", true);
+		}
+	});
 });
 </script>

From a8749f107827b9bcda2771846d68a018d1f29716 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Wed, 12 Nov 2025 21:55:49 +0900
Subject: [PATCH 11/34] Clean up dead code #2612

---
 modules/module/module.admin.controller.php | 8 --------
 modules/module/module.controller.php       | 5 ++---
 2 files changed, 2 insertions(+), 11 deletions(-)

diff --git a/modules/module/module.admin.controller.php b/modules/module/module.admin.controller.php
index 8e4338cfb..ae7349cdb 100644
--- a/modules/module/module.admin.controller.php
+++ b/modules/module/module.admin.controller.php
@@ -326,8 +326,6 @@ class ModuleAdminController extends Module
 			if(strlen($default))
 			{
 				$grant->{$grant_name}[] = $default;
-				continue;
-				// users in a particular group
 			}
 			else
 			{
@@ -339,9 +337,7 @@ class ModuleAdminController extends Module
 					else $group_srls = array($group_srls);
 					$grant->{$grant_name} = $group_srls;
 				}
-				continue;
 			}
-			$grant->{$group_srls} = array(); // dead code????
 		}
 
 		// Stored in the DB
@@ -609,8 +605,6 @@ class ModuleAdminController extends Module
 			if(strlen($default))
 			{
 				$grant->{$grant_name}[] = $default;
-				continue;
-				// Users in a particular group
 			}
 			else
 			{
@@ -625,9 +619,7 @@ class ModuleAdminController extends Module
 					}
 					$grant->{$grant_name} = $group_srls;
 				}
-				continue;
 			}
-			$grant->{$group_srls} = array(); // dead code, too??
 		}
 
 		// Stored in the DB
diff --git a/modules/module/module.controller.php b/modules/module/module.controller.php
index c7916f4cc..2df916409 100644
--- a/modules/module/module.controller.php
+++ b/modules/module/module.controller.php
@@ -937,8 +937,8 @@ class ModuleController extends Module
 			}
 			if(!$output->toBool())
 			{
-				return $output;
 				$oDB->rollback();
+				return $output;
 			}
 		}
 
@@ -1192,12 +1192,11 @@ class ModuleController extends Module
 		$args->module_filebox_srl = $vars->module_filebox_srl;
 		$args->comment = $vars->comment;
 
-		return executeQuery('module.updateModuleFileBox', $args);
+		$output = executeQuery('module.updateModuleFileBox', $args);
 		$output->add('save_filename', $save_filename);
 		return $output;
 	}
 
-
 	/**
 	 * @brief Add a file into the file box
 	 */

From 2eaf869ebae1d13c23598335ae837b39fdf2590f Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Thu, 13 Nov 2025 22:18:31 +0900
Subject: [PATCH 12/34] Improve calculation of GD memory usage to support
 larger images

---
 classes/file/FileHandler.class.php | 48 ++++++++++++++++++++----------
 1 file changed, 33 insertions(+), 15 deletions(-)

diff --git a/classes/file/FileHandler.class.php b/classes/file/FileHandler.class.php
index f80ed9dfd..698b6470e 100644
--- a/classes/file/FileHandler.class.php
+++ b/classes/file/FileHandler.class.php
@@ -461,18 +461,28 @@ class FileHandler
 	 * Check available memory to load image file
 	 *
 	 * @param array $imageInfo Image info retrieved by getimagesize function
+	 * @param array $resizeInfo Resize width and height
 	 * @return bool TRUE: it's ok, FALSE: otherwise
 	 */
-	public static function checkMemoryLoadImage(&$imageInfo)
+	public static function checkMemoryLoadImage($imageInfo, $resizeInfo = [])
 	{
-		$K64 = 65536;
-		$TWEAKFACTOR = 2.0;
-		$channels = $imageInfo['channels'] ?? 6;
-		if(!$channels)
+		$bits = $imageInfo['bits'] ?? 8;
+		$channels = ($imageInfo['channels'] ?? 6) ?: 6; // for png
+		if (!$resizeInfo)
 		{
-			$channels = 6; //for png
+			$resizeInfo = $imageInfo;
 		}
-		$memoryNeeded = round(($imageInfo[0] * $imageInfo[1] * $imageInfo['bits'] * $channels / 8 + $K64 ) * $TWEAKFACTOR);
+		$src_memory = round($imageInfo[0] * $imageInfo[1] * $bits * $channels / 8) + 65536;
+		$dst_memory = round($resizeInfo[0] * $resizeInfo[1] * 8 * $channels / 8) + 65536;
+
+		$gd_info = gd_info();
+		$gd_version = $gd_info['GD Version'] ?? '';
+		$gd_type = str_contains($gd_version, 'bundled') ? 'bundled' : 'external';
+		if ($gd_type === 'external')
+		{
+			$dst_memory = 0;
+		}
+
 		$memoryLimit = ini_get('memory_limit');
 		if($memoryLimit <= 0)
 		{
@@ -484,7 +494,7 @@ class FileHandler
 			return true;
 		}
 		$availableMemory = $memoryLimit - memory_get_usage();
-		if($availableMemory < $memoryNeeded)
+		if($availableMemory < ($src_memory + $dst_memory))
 		{
 			return false;
 		}
@@ -559,11 +569,6 @@ class FileHandler
 
 		// retrieve source image's information
 		$imageInfo = getimagesize($source_file);
-		if(!self::checkMemoryLoadImage($imageInfo))
-		{
-			return false;
-		}
-
 		list($width, $height, $type) = $imageInfo;
 		if($width < 1 || $height < 1)
 		{
@@ -596,6 +601,12 @@ class FileHandler
 			$resize_height = round($resize_width / ($width / $height));
 		}
 
+		// Check memory usage
+		if(!self::checkMemoryLoadImage($imageInfo, [$resize_width, $resize_height]))
+		{
+			return false;
+		}
+
 		// create temporary image having original type
 		if ($type === 'gif' && function_exists('imagecreatefromgif'))
 		{
@@ -646,6 +657,8 @@ class FileHandler
 			$thumb = imagecreatetruecolor($resize_width, $resize_height);
 			if (!$thumb)
 			{
+				imagedestroy($source);
+				unset($source);
 				return false;
 			}
 
@@ -706,6 +719,9 @@ class FileHandler
 			imagecopyresampled($thumb, $source, $dst_x, $dst_y, 0, 0, $dst_width, $dst_height, $width, $height);
 		}
 
+		imagedestroy($source);
+		unset($source);
+
 		// create directory
 		self::makeDir(dirname($target_file));
 
@@ -736,12 +752,14 @@ class FileHandler
 		}
 		else
 		{
+			imagedestroy($thumb);
+			unset($thumb);
 			return false;
 		}
 
-		imagedestroy($thumb);
-		imagedestroy($source);
 		@chmod($target_file, 0666 & ~Rhymix\Framework\Storage::getUmask());
+		imagedestroy($thumb);
+		unset($thumb);
 		return $output;
 	}
 

From 950b1c40748ff83898cbec96a03adae94b0e29f8 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Mon, 17 Nov 2025 09:41:47 +0900
Subject: [PATCH 13/34] Don't use imagedestroy() in PHP 8.0 or higher

---
 classes/file/FileHandler.class.php | 37 +++++++++++++++++++++++-------
 1 file changed, 29 insertions(+), 8 deletions(-)

diff --git a/classes/file/FileHandler.class.php b/classes/file/FileHandler.class.php
index 698b6470e..58c6898e2 100644
--- a/classes/file/FileHandler.class.php
+++ b/classes/file/FileHandler.class.php
@@ -657,8 +657,14 @@ class FileHandler
 			$thumb = imagecreatetruecolor($resize_width, $resize_height);
 			if (!$thumb)
 			{
-				imagedestroy($source);
-				unset($source);
+				if (version_compare(PHP_VERSION, '8.0', '<'))
+				{
+					imagedestroy($source);
+				}
+				else
+				{
+					unset($source);
+				}
 				return false;
 			}
 
@@ -719,8 +725,10 @@ class FileHandler
 			imagecopyresampled($thumb, $source, $dst_x, $dst_y, 0, 0, $dst_width, $dst_height, $width, $height);
 		}
 
-		imagedestroy($source);
-		unset($source);
+		if (version_compare(PHP_VERSION, '8.0', '>='))
+		{
+			unset($source);
+		}
 
 		// create directory
 		self::makeDir(dirname($target_file));
@@ -752,14 +760,27 @@ class FileHandler
 		}
 		else
 		{
-			imagedestroy($thumb);
-			unset($thumb);
+			if (version_compare(PHP_VERSION, '8.0', '<'))
+			{
+				imagedestroy($thumb);
+			}
+			else
+			{
+				unset($thumb);
+			}
 			return false;
 		}
 
 		@chmod($target_file, 0666 & ~Rhymix\Framework\Storage::getUmask());
-		imagedestroy($thumb);
-		unset($thumb);
+
+		if (version_compare(PHP_VERSION, '8.0', '<'))
+		{
+			imagedestroy($thumb);
+		}
+		else
+		{
+			unset($thumb);
+		}
 		return $output;
 	}
 

From e586552b299876b859fc38e2a5a66bcf6a52a0d3 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Sat, 22 Nov 2025 21:02:26 +0900
Subject: [PATCH 14/34] Update PHP install script for unit test, now that PHP
 8.5 is official

---
 .github/workflows/setup-php.sh | 58 +++++++++++-----------------------
 1 file changed, 19 insertions(+), 39 deletions(-)

diff --git a/.github/workflows/setup-php.sh b/.github/workflows/setup-php.sh
index e978e92a0..ef9b1656c 100644
--- a/.github/workflows/setup-php.sh
+++ b/.github/workflows/setup-php.sh
@@ -4,47 +4,27 @@
 sudo add-apt-repository -y ppa:ondrej/php
 
 # Install all required packages
-if [[ "$1" == "8.5" ]]; then
-  sudo apt -y install \
-    php$1-bcmath \
-    php$1-cli \
-    php$1-common \
-    php$1-curl \
-    php$1-gd \
-    php$1-intl \
-    php$1-mbstring \
-    php$1-mysql \
-    php$1-readline \
-    php$1-sqlite3 \
-    php$1-xml \
-    php$1-zip
-else
-  sudo apt -y install \
-    php$1-apcu \
-    php$1-bcmath \
-    php$1-cli \
-    php$1-common \
-    php$1-curl \
-    php$1-gd \
-    php$1-intl \
-    php$1-mbstring \
-    php$1-mysql \
-    php$1-opcache \
-    php$1-readline \
-    php$1-sqlite3 \
-    php$1-xml \
-    php$1-zip
-fi
+sudo apt -y install \
+	php$1-apcu \
+	php$1-bcmath \
+	php$1-cli \
+	php$1-common \
+	php$1-curl \
+	php$1-gd \
+	php$1-intl \
+	php$1-mbstring \
+	php$1-mysql \
+	php$1-readline \
+	php$1-sqlite3 \
+	php$1-xml \
+	php$1-zip
 
 # Adjust php.ini settings
-if [[ "$1" == "8.5" ]]; then
-  sudo bash -c "echo 'register_argc_argv = On' >> /etc/php/$1/cli/php.ini"
-else
-  sudo bash -c "echo 'opcache.enable = 1' >> /etc/php/$1/cli/conf.d/10-opcache.ini"
-  sudo bash -c "echo 'opcache.enable_cli = 1' >> /etc/php/$1/cli/conf.d/10-opcache.ini"
-  sudo bash -c "echo 'opcache.jit = tracing' >> /etc/php/$1/cli/conf.d/10-opcache.ini"
-  sudo bash -c "echo 'opcache.jit_buffer_size = 128M' >> /etc/php/$1/cli/conf.d/10-opcache.ini"
-fi
+sudo bash -c "echo 'register_argc_argv = On' >> /etc/php/$1/cli/php.ini"
+sudo bash -c "echo 'opcache.enable = 1' >> /etc/php/$1/cli/conf.d/10-opcache.ini"
+sudo bash -c "echo 'opcache.enable_cli = 1' >> /etc/php/$1/cli/conf.d/10-opcache.ini"
+sudo bash -c "echo 'opcache.jit = tracing' >> /etc/php/$1/cli/conf.d/10-opcache.ini"
+sudo bash -c "echo 'opcache.jit_buffer_size = 128M' >> /etc/php/$1/cli/conf.d/10-opcache.ini"
 
 # Enable APCu
 if [ -f "/etc/php/$1/cli/conf.d/20-apcu.ini" ]; then

From 385067b005590c14f8f83fbda765369c9f476a5c Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Sat, 22 Nov 2025 21:47:25 +0900
Subject: [PATCH 15/34] Convert outdated <script language="javascript"> to
 <script> #2615

---
 classes/context/Context.class.php | 2 +-
 modules/admin/models/Utility.php  | 5 ++++-
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/classes/context/Context.class.php b/classes/context/Context.class.php
index 0c9f71190..a24ed24e3 100644
--- a/classes/context/Context.class.php
+++ b/classes/context/Context.class.php
@@ -139,7 +139,7 @@ class Context
 	 */
 	private static $_check_patterns = array(
 		'@<(?:\?|%)@' => 'DENY ALL',
-		'@<script\s*?language\s*?=@i' => 'DENY ALL',
+		'@<script\s*?language\s*?=\s*?(?![\'"]javascript[\'"])@i' => 'DENY ALL',
 		'@</?script@i' => 'ALLOW ADMIN ONLY',
 	);
 
diff --git a/modules/admin/models/Utility.php b/modules/admin/models/Utility.php
index d0c8edd56..b14202981 100644
--- a/modules/admin/models/Utility.php
+++ b/modules/admin/models/Utility.php
@@ -13,7 +13,10 @@ class Utility
 	public static function cleanHeaderAndFooterScripts(string $content)
 	{
 		$content = utf8_clean($content);
-		$content = preg_replace('!</?(html|head|body)[^>]*>!', '', $content);
+		$content = preg_replace('!</?(html|head|body)[^>]*>!i', '', $content);
+		$content = preg_replace_callback('!<script\b([^>]*?)language=[\'"]javascript[\'"]!i', function ($matches) {
+			return trim('<script ' . trim($matches[1]));
+		}, $content);
 		return utf8_trim($content);
 	}
 }

From cd3af499e836301d9220cf8fd7c24a05cb8ecf77 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Sun, 23 Nov 2025 23:14:42 +0900
Subject: [PATCH 16/34] Fix missing file list when editing a partial section of
 a widget page

https://rhymix.org/qna/1924307
---
 modules/editor/editor.model.php | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/modules/editor/editor.model.php b/modules/editor/editor.model.php
index bcc20d225..f6a430aef 100644
--- a/modules/editor/editor.model.php
+++ b/modules/editor/editor.model.php
@@ -469,6 +469,11 @@ class EditorModel extends Editor
 		if ($type === 'document')
 		{
 			$option->upload_target_type = 'doc';
+			// For dispWidgetAdminAddContent
+			if ($primary_key_name === 'module_srl')
+			{
+				$option->upload_target_type = 'mod';
+			}
 		}
 		elseif ($type === 'comment')
 		{

From 50dd010e2da8aab6d8a3bd2769bbb136405c1e07 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Sat, 29 Nov 2025 10:52:17 +0900
Subject: [PATCH 17/34] Remove empty class and style attributes when compiling
 template v2

---
 common/framework/Template.php                | 9 ++++++++-
 tests/_data/template/v2example.compiled.html | 2 ++
 tests/_data/template/v2example.executed.html | 2 ++
 tests/_data/template/v2example.html          | 2 ++
 4 files changed, 14 insertions(+), 1 deletion(-)

diff --git a/common/framework/Template.php b/common/framework/Template.php
index d7b164f2a..387c3ba6a 100644
--- a/common/framework/Template.php
+++ b/common/framework/Template.php
@@ -865,7 +865,14 @@ class Template
 			}
 		}
 
-		return sprintf(' %s="%s"', $attribute, escape(implode($delimiters[$attribute], $values), false));
+		if (count($values))
+		{
+			return sprintf(' %s="%s"', $attribute, escape(implode($delimiters[$attribute], $values), false));
+		}
+		else
+		{
+			return '';
+		}
 	}
 
 	/**
diff --git a/tests/_data/template/v2example.compiled.html b/tests/_data/template/v2example.compiled.html
index 1c9dce8a3..280f116af 100644
--- a/tests/_data/template/v2example.compiled.html
+++ b/tests/_data/template/v2example.compiled.html
@@ -58,6 +58,8 @@
 		'margin: 1rem' => Context::get('bar'),
 		'padding: 2rem' => false,
 	]); ?>></span>
+	<span<?php echo $this->_v2_buildAttribute('class', ['a' => false, 'b' => false]); ?>></span>
+	<span<?php echo $this->_v2_buildAttribute('style', ['a' => false, 'b' => false]); ?>></span>
 </div>
 
 <script type="text/javascript"<?php $this->config->context = 'JS'; ?>>
diff --git a/tests/_data/template/v2example.executed.html b/tests/_data/template/v2example.executed.html
index 3224403f0..063b7ac16 100644
--- a/tests/_data/template/v2example.executed.html
+++ b/tests/_data/template/v2example.executed.html
@@ -54,6 +54,8 @@
 <div class="barContainer" data-bar="[&quot;Rhy&quot;,&quot;miX&quot;,&quot;is&quot;,&quot;da&quot;,&quot;BEST!&quot;]">
 	<span class="a-1 font-normal bg-gray-200"></span>
 	<span style="border-radius: 0.25rem; margin: 1rem"></span>
+	<span></span>
+	<span></span>
 </div>
 
 <script type="text/javascript">
diff --git a/tests/_data/template/v2example.html b/tests/_data/template/v2example.html
index 8335308bf..7ff552d2a 100644
--- a/tests/_data/template/v2example.html
+++ b/tests/_data/template/v2example.html
@@ -58,6 +58,8 @@
 		'margin: 1rem' => Context::get('bar'),
 		'padding: 2rem' => false,
 	])></span>
+	<span @class(['a' => false, 'b' => false])></span>
+	<span @style(['a' => false, 'b' => false])></span>
 </div>
 
 <script type="text/javascript">

From 8e5480674d287e3eacb74a58c3b958b7d8dd5eba Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Sat, 29 Nov 2025 11:50:43 +0900
Subject: [PATCH 18/34] Exclude functions and closures from scope conversion
 #2617

---
 .../parsers/template/TemplateParser_v2.php    | 42 +++++++++++++++++++
 tests/_data/template/v2example.compiled.html  | 21 ++++++++++
 tests/_data/template/v2example.executed.html  |  4 ++
 tests/_data/template/v2example.html           | 21 ++++++++++
 4 files changed, 88 insertions(+)

diff --git a/common/framework/parsers/template/TemplateParser_v2.php b/common/framework/parsers/template/TemplateParser_v2.php
index 7251ab1e0..f85f30ccc 100644
--- a/common/framework/parsers/template/TemplateParser_v2.php
+++ b/common/framework/parsers/template/TemplateParser_v2.php
@@ -1084,6 +1084,37 @@ class TemplateParser_v2
 	 */
 	protected function _convertVariableScope(string $content): string
 	{
+		// Pre-escape function declarations and closures so that variables inside them are not converted.
+		$used_vars = [];
+		$function_regexp = '#\b(function(?:\s+[a-zA-Z_][a-zA-Z0-9_]*)?)' .
+			'(\s*)(' . self::_getRegexpForParentheses(3) . ')' .
+			'(\s*)(use\s*\([^()]+\))?' .
+			'(\s*:\s*\w+)?' .
+			'(\s*)(' . self::_getRegexpForCurlyBraces(8) . ')#';
+		$content = preg_replace_callback($function_regexp, function($match) use (&$used_vars) {
+			$fn = $match[1] . $match[2] . self::_escapeVars($match[3]) .
+				$match[4] . self::_escapeVars($match[5]) .
+				$match[6] . $match[7] . self::_escapeVars($match[8]);
+			if (str_starts_with($match[5], 'use'))
+			{
+				preg_match_all('#\$([a-zA-Z_][a-zA-Z0-9_]*)#', $match[5], $uses);
+				foreach ($uses[1] as $var)
+				{
+					$used_vars[$var] = true;
+				}
+			}
+			return $fn;
+		}, $content);
+		if (count($used_vars))
+		{
+			$prefix = ' ';
+			foreach ($used_vars as $var => $unused)
+			{
+				$prefix .= self::_escapeVars('$' . $var) . ' = &$__Context->' . $var . '; ';
+			}
+			$content = $prefix . $content;
+		}
+
 		// Replace variables that need to be enclosed in curly braces, using temporary entities to prevent double-replacement.
 		$content = preg_replace_callback('#(?<!\$__Context)->\$([a-zA-Z_][a-zA-Z0-9_]*)#', function($match) {
 			return '->' . self::_escapeCurly('{') . '$__Context->' . $match[1] . self::_escapeCurly('}');
@@ -1144,6 +1175,17 @@ class TemplateParser_v2
 		return '\([^)(]*+(?:(?' . $position_in_regexp . ')[^)(]*)*+\)';
 	}
 
+	/**
+	 * Same as above, but for curly braces.
+	 *
+	 * @param int $position_in_regexp
+	 * @return string
+	 */
+	protected static function _getRegexpForCurlyBraces(int $position_in_regexp): string
+	{
+		return '\{[^}{]*+(?:(?' . $position_in_regexp . ')[^}{]*)*+\}';
+	}
+
 	/**
 	 * Escape curly braces so that they will not be interpreted as echo statements.
 	 *
diff --git a/tests/_data/template/v2example.compiled.html b/tests/_data/template/v2example.compiled.html
index 280f116af..527c51341 100644
--- a/tests/_data/template/v2example.compiled.html
+++ b/tests/_data/template/v2example.compiled.html
@@ -62,6 +62,27 @@
 	<span<?php echo $this->_v2_buildAttribute('style', ['a' => false, 'b' => false]); ?>></span>
 </div>
 
+<?php $suffix = &$__Context->suffix;
+	$__Context->employees = [
+		['name' => 'Alice', 'age' => 30],
+		['name' => 'Bob', 'age' => 25],
+		['name' => 'Charlie', 'age' => 35],
+	];
+	$__Context->suffix = '님';
+	$__Context->names = array_map(function($e, $key = 'name') use ($suffix) {
+		return $e[$key] . $suffix;
+	}, $__Context->employees);
+	function convert_names(array $names = array()): array
+	{
+		return array_map(function($name) {
+			return ucfirst($name);
+		}, $names);
+	}
+?>
+<div class="employees">
+	<?php echo $this->config->context === 'HTML' ? htmlspecialchars(implode(', ', convert_names($__Context->names)), \ENT_QUOTES, 'UTF-8', false) : $this->_v2_escape(implode(', ', convert_names($__Context->names))); ?> welcome!
+</div>
+
 <script type="text/javascript"<?php $this->config->context = 'JS'; ?>>
 	const foo = '<?php echo $this->config->context === 'HTML' ? htmlspecialchars($__Context->foo ?? '', \ENT_QUOTES, 'UTF-8', false) : $this->_v2_escape($__Context->foo ?? ''); ?>';
 	const bar = <?php echo $this->config->context === 'JS' ? json_encode($__Context->bar, self::$_json_options2) : htmlspecialchars(json_encode($__Context->bar, self::$_json_options), \ENT_QUOTES, 'UTF-8', false); ?>;
diff --git a/tests/_data/template/v2example.executed.html b/tests/_data/template/v2example.executed.html
index 063b7ac16..61bd78c00 100644
--- a/tests/_data/template/v2example.executed.html
+++ b/tests/_data/template/v2example.executed.html
@@ -58,6 +58,10 @@
 	<span></span>
 </div>
 
+<div class="employees">
+	Alice님, Bob님, Charlie님 welcome!
+</div>
+
 <script type="text/javascript">
 	const foo = 'FOOFOO\u003C\u0022FOO\u0022\u003EBAR';
 	const bar = ["Rhy","miX","is","da","BEST!"];
diff --git a/tests/_data/template/v2example.html b/tests/_data/template/v2example.html
index 7ff552d2a..2575051fa 100644
--- a/tests/_data/template/v2example.html
+++ b/tests/_data/template/v2example.html
@@ -62,6 +62,27 @@
 	<span @style(['a' => false, 'b' => false])></span>
 </div>
 
+@php
+	$employees = [
+		['name' => 'Alice', 'age' => 30],
+		['name' => 'Bob', 'age' => 25],
+		['name' => 'Charlie', 'age' => 35],
+	];
+	$suffix = '님';
+	$names = array_map(function($e, $key = 'name') use ($suffix) {
+		return $e[$key] . $suffix;
+	}, $employees);
+	function convert_names(array $names = array()): array
+	{
+		return array_map(function($name) {
+			return ucfirst($name);
+		}, $names);
+	}
+@endphp
+<div class="employees">
+	{{ implode(', ', convert_names($names)) }} welcome!
+</div>
+
 <script type="text/javascript">
 	const foo = '{{ $foo }}';
 	const bar = @json($bar);

From 0c8aa306ecd811c105d4a0811571026ab4c66e45 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Wed, 17 Dec 2025 11:32:37 +0900
Subject: [PATCH 19/34] Fix incorrect timestamp display when timestamp is zero
 #2621

---
 common/framework/DateTime.php         | 16 ++++++++--------
 tests/unit/framework/DateTimeTest.php | 12 ++++++++++++
 2 files changed, 20 insertions(+), 8 deletions(-)

diff --git a/common/framework/DateTime.php b/common/framework/DateTime.php
index 9f24cf0ae..b74bffec9 100644
--- a/common/framework/DateTime.php
+++ b/common/framework/DateTime.php
@@ -28,11 +28,11 @@ class DateTime
 	{
 		if ($format === self::FORMAT_RELATIVE)
 		{
-			return self::getRelativeTimestamp($timestamp ?: time());
+			return self::getRelativeTimestamp($timestamp ?? time());
 		}
 
-		$offset = Config::get('locale.internal_timezone') ?: date('Z', $timestamp);
-		return gmdate($format, ($timestamp ?: time()) + $offset);
+		$offset = Config::get('locale.internal_timezone') ?: date('Z', $timestamp ?? time());
+		return gmdate($format, ($timestamp ?? time()) + $offset);
 	}
 
 	/**
@@ -46,7 +46,7 @@ class DateTime
 	{
 		if ($format === self::FORMAT_RELATIVE)
 		{
-			return self::getRelativeTimestamp($timestamp ?: time());
+			return self::getRelativeTimestamp($timestamp ?? time());
 		}
 
 		$timezone = self::getTimezoneForCurrentUser();
@@ -55,7 +55,7 @@ class DateTime
 			self::$_timezones[$timezone] = new \DateTimeZone($timezone);
 		}
 		$datetime = new \DateTime();
-		$datetime->setTimestamp($timestamp ?: time());
+		$datetime->setTimestamp($timestamp ?? time());
 		$datetime->setTimezone(self::$_timezones[$timezone]);
 		return $datetime->format($format);
 	}
@@ -123,7 +123,7 @@ class DateTime
 			self::$_timezones[$timezone] = new \DateTimeZone($timezone);
 		}
 		$datetime = new \DateTime();
-		$datetime->setTimestamp($timestamp ?: time());
+		$datetime->setTimestamp($timestamp ?? time());
 		$datetime->setTimezone(self::$_timezones[$timezone]);
 		return $datetime->getOffset();
 	}
@@ -137,7 +137,7 @@ class DateTime
 	 */
 	public static function getTimezoneOffsetFromInternal(string $timezone, ?int $timestamp = null): int
 	{
-		return self::getTimezoneOffset($timezone, $timestamp ?: time()) - Config::get('locale.internal_timezone');
+		return self::getTimezoneOffset($timezone, $timestamp ?? time()) - Config::get('locale.internal_timezone');
 	}
 
 	/**
@@ -192,7 +192,7 @@ class DateTime
 	 */
 	public static function getRelativeTimestamp(?int $timestamp = null): string
 	{
-		$diff = \RX_TIME - intval($timestamp ?: time());
+		$diff = \RX_TIME - intval($timestamp ?? time());
 		$langs = lang('common.time_gap');
 
 		if ($diff < 3)
diff --git a/tests/unit/framework/DateTimeTest.php b/tests/unit/framework/DateTimeTest.php
index 036aa8f6e..3da9ccfbd 100644
--- a/tests/unit/framework/DateTimeTest.php
+++ b/tests/unit/framework/DateTimeTest.php
@@ -113,6 +113,18 @@ class DateTimeTest extends \Codeception\Test\Unit
 		Rhymix\Framework\Config::set('locale.internal_timezone', 32400);
 		$this->assertEquals($expected, zdate('19600419', 'Y-m-d H:i:s'));
 
+		// Test special dates.
+		Rhymix\Framework\Config::set('locale.internal_timezone', 32400);
+		$expected = '1970-01-01 09:00:00';
+		$this->assertEquals($expected, zdate('19700101', 'Y-m-d H:i:s'));
+		$expected = '1969-12-31 15:00:00';
+		$this->assertEquals($expected, zdate('1969-12-31 15:00:00', 'Y-m-d H:i:s'));
+		Rhymix\Framework\Config::set('locale.internal_timezone', 10800);
+		$expected = '1970-01-01 06:00:00';
+		$this->assertEquals($expected, zdate('19700101000000', 'Y-m-d H:i:s'));
+		$expected = '1970-01-01 00:00:00';
+		$this->assertEquals($expected, zdate('19691231180000', 'Y-m-d H:i:s'));
+
 		// Restore the internal timezone.
 		Rhymix\Framework\Config::set('locale.internal_timezone', 10800);
 	}

From 14ad25abd2961c63f681926b5b6f1e6d596c0bb0 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Wed, 17 Dec 2025 11:50:54 +0900
Subject: [PATCH 20/34] Add icons in board list to help identify boards with
 special features #2623

---
 modules/board/board.admin.view.php |  1 +
 modules/board/lang/en.php          |  1 +
 modules/board/lang/ko.php          |  1 +
 modules/board/tpl/index.html       | 12 ++++++++++++
 4 files changed, 15 insertions(+)

diff --git a/modules/board/board.admin.view.php b/modules/board/board.admin.view.php
index 227b5d50b..cb5ec0bd2 100644
--- a/modules/board/board.admin.view.php
+++ b/modules/board/board.admin.view.php
@@ -89,6 +89,7 @@ class BoardAdminView extends Board {
 
 		$output = executeQueryArray('board.getBoardList', $args);
 		ModuleModel::syncModuleToSite($output->data);
+		ModuleModel::addModuleExtraVars($output->data);
 
 		// get the skins path
 		$oModuleModel = getModel('module');
diff --git a/modules/board/lang/en.php b/modules/board/lang/en.php
index 94247fb95..9c9b4f9b0 100644
--- a/modules/board/lang/en.php
+++ b/modules/board/lang/en.php
@@ -1,5 +1,6 @@
 <?php
 $lang->board = 'Board';
+$lang->board_special_features = 'Features';
 $lang->except_notice = 'Exclude Notices';
 $lang->use_bottom_list = 'Display Bottom List';
 $lang->customize_bottom_list = 'Customize Bottom List';
diff --git a/modules/board/lang/ko.php b/modules/board/lang/ko.php
index 36155b9ae..0820f57ed 100644
--- a/modules/board/lang/ko.php
+++ b/modules/board/lang/ko.php
@@ -1,5 +1,6 @@
 <?php
 $lang->board = '게시판';
+$lang->board_special_features = '특이사항';
 $lang->except_notice = '공지사항 제외';
 $lang->use_bottom_list = '하단목록 표시';
 $lang->customize_bottom_list = '하단목록 설정';
diff --git a/modules/board/tpl/index.html b/modules/board/tpl/index.html
index 928ca3e03..729b1233f 100644
--- a/modules/board/tpl/index.html
+++ b/modules/board/tpl/index.html
@@ -15,6 +15,7 @@
 			<th scope="col" class="domain_prefix">{$lang->domain}&thinsp;/</th>
 			<th scope="col">{$lang->url}</th>
 			<th scope="col">{$lang->browser_title}</th>
+			<th scope="col">{$lang->board_special_features}</th>
 			<th scope="col">{$lang->regdate}</th>
 			<th scope="col">{$lang->cmd_edit}</th>
 			<th scope="col"><input type="checkbox" data-name="cart" title="Check All" /></th>
@@ -40,6 +41,17 @@
 			</td>
 			<td>{$val->mid}</td>
 			<td><a href="{getSiteUrl($val->domain,'','mid',$val->mid)}" target="_blank">{$val->browser_title}</a></td>
+			<td>
+				<!--@if($val->consultation === 'Y')-->
+					<span title="{$lang->consultation}"><i class="xi-headset"></i></span>
+				<!--@end-->
+				<!--@if($val->use_anonymous === 'Y')-->
+					<span title="{$lang->use_anonymous}"><i class="xi-user-lock"></i></span>
+				<!--@end-->
+				<!--@if(!empty($val->include_modules))-->
+					<span title="{$lang->cmd_board_combined_board}"><i class="xi-file-add"></i></span>
+				<!--@end-->
+			</td>
 			<td>{zdate($val->regdate,"Y-m-d")}</td>
 			<td>
 				<a href="{getUrl('act','dispBoardAdminBoardInfo','module_srl',$val->module_srl)}"><i class="x_icon-cog"></i> {$lang->cmd_setup}</a> &nbsp;

From 6c76ab613ab13ae90f83809efdce90c8bb6577bb Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Wed, 17 Dec 2025 11:54:17 +0900
Subject: [PATCH 21/34] Fix insertDocument query error when email_address is
 null #2620

---
 modules/document/document.controller.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/document/document.controller.php b/modules/document/document.controller.php
index 19a2bc0ca..42e98a181 100644
--- a/modules/document/document.controller.php
+++ b/modules/document/document.controller.php
@@ -708,7 +708,7 @@ class DocumentController extends Document
 			$obj->user_id = htmlspecialchars_decode($logged_info->user_id);
 			$obj->user_name = htmlspecialchars_decode($logged_info->user_name);
 			$obj->nick_name = htmlspecialchars_decode($logged_info->nick_name);
-			$obj->email_address = $logged_info->email_address;
+			$obj->email_address = $logged_info->email_address ?? '';
 			$obj->homepage = $logged_info->homepage;
 		}
 		if(!$logged_info->member_srl && !$manual_inserted && !$isRestore)

From a7b73e1fed24c30bedf44c04f66fe140e6a360fc Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Wed, 17 Dec 2025 11:58:23 +0900
Subject: [PATCH 22/34] Allow use of target_srl in scrapping-related controller
 actions #2634

---
 modules/member/member.controller.php | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/modules/member/member.controller.php b/modules/member/member.controller.php
index 35f5343b6..09e6eff0f 100644
--- a/modules/member/member.controller.php
+++ b/modules/member/member.controller.php
@@ -163,7 +163,7 @@ class MemberController extends Member
 	 */
 	function procMemberScrapDocument()
 	{
-		$document_srl = (int) (Context::get('document_srl') ?: Context::get('target_srl'));
+		$document_srl = intval(Context::get('document_srl') ?: Context::get('target_srl'));
 		if(!$document_srl)
 		{
 			throw new Rhymix\Framework\Exceptions\InvalidRequest;
@@ -272,7 +272,7 @@ class MemberController extends Member
 		if(!Context::get('is_logged')) throw new Rhymix\Framework\Exceptions\MustLogin;
 		$logged_info = Context::get('logged_info');
 
-		$document_srl = (int)Context::get('document_srl');
+		$document_srl = intval(Context::get('document_srl') ?: Context::get('target_srl'));
 		if(!$document_srl)
 		{
 			throw new Rhymix\Framework\Exceptions\InvalidRequest;
@@ -312,8 +312,8 @@ class MemberController extends Member
 		if(!Context::get('is_logged')) throw new Rhymix\Framework\Exceptions\MustLogin;
 		$logged_info = Context::get('logged_info');
 
-		$document_srl = (int)Context::get('document_srl');
-		$folder_srl = (int)Context::get('folder_srl');
+		$document_srl = intval(Context::get('document_srl') ?: Context::get('target_srl'));
+		$folder_srl = intval(Context::get('folder_srl'));
 		if(!$document_srl || !$folder_srl)
 		{
 			throw new Rhymix\Framework\Exceptions\InvalidRequest;
@@ -524,7 +524,7 @@ class MemberController extends Member
 		if(!Context::get('is_logged')) throw new Rhymix\Framework\Exceptions\MustLogin;
 		$logged_info = Context::get('logged_info');
 
-		$document_srl = (int)Context::get('document_srl');
+		$document_srl = intval(Context::get('document_srl') ?: Context::get('target_srl'));
 		if(!$document_srl) throw new Rhymix\Framework\Exceptions\InvalidRequest;
 
 		$oDocument = DocumentModel::getDocument($document_srl);

From 72be83cb3ce7ed971e443f2fa98066ca8ee62fc4 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Wed, 17 Dec 2025 16:10:40 +0900
Subject: [PATCH 23/34] Fix incorrect comment on getCommentCountByDate()

---
 modules/comment/comment.model.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/comment/comment.model.php b/modules/comment/comment.model.php
index 67fb49729..f2a7446ed 100644
--- a/modules/comment/comment.model.php
+++ b/modules/comment/comment.model.php
@@ -308,7 +308,7 @@ class CommentModel extends Comment
 	}
 
 	/**
-	 * Get the total number of comments in corresponding with document_srl.
+	 * Get the total number of comments posted on the given date.
 	 * @param string $date
 	 * @param array $moduleList
 	 * @param array $statusList

From 42219d47097712f75d0ef96c69d1faefc091ba7d Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Wed, 17 Dec 2025 16:12:33 +0900
Subject: [PATCH 24/34] Add module_srl and document_srl conditions to some
 comment-related queries #2625

---
 modules/comment/queries/getCommentCountByMemberSrl.xml | 2 ++
 modules/comment/queries/getCommentListByMemberSrl.xml  | 3 +++
 2 files changed, 5 insertions(+)

diff --git a/modules/comment/queries/getCommentCountByMemberSrl.xml b/modules/comment/queries/getCommentCountByMemberSrl.xml
index bf0e0069e..4662a6d1d 100644
--- a/modules/comment/queries/getCommentCountByMemberSrl.xml
+++ b/modules/comment/queries/getCommentCountByMemberSrl.xml
@@ -7,6 +7,8 @@
     </columns>
     <conditions>
         <condition operation="equal" column="member_srl" var="member_srl" filter="number" notnull="notnull" />
+		<condition operation="equal" column="module_srl" var="module_srl" filter="number" />
+		<condition operation="equal" column="document_srl" var="document_srl" filter="number" />
 		<condition operation="equal" column="status" var="status" pipe="and" />
         <condition operation="in" column="status" var="statusList" pipe="and" />
     </conditions>
diff --git a/modules/comment/queries/getCommentListByMemberSrl.xml b/modules/comment/queries/getCommentListByMemberSrl.xml
index 125e52c76..14c4fbd87 100644
--- a/modules/comment/queries/getCommentListByMemberSrl.xml
+++ b/modules/comment/queries/getCommentListByMemberSrl.xml
@@ -12,6 +12,9 @@
 	</columns>
 	<conditions>
 		<condition operation="equal" column="member_srl" var="member_srl" filter="number" notnull="notnull" />
+		<condition operation="equal" column="module_srl" var="module_srl" filter="number" />
+		<condition operation="equal" column="document_srl" var="document_srl" filter="number" />
+		<condition operation="equal" column="status" var="status" pipe="and" />
 		<condition operation="in" column="status" var="statusList" pipe="and" />
 	</conditions>
 	<navigation>

From a9045b956d4ee925c98d9b0b98101a068335d520 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Wed, 17 Dec 2025 16:20:47 +0900
Subject: [PATCH 25/34] Add methods to enable searching and counting commnets
 by document_srl AND member_srl #2625

---
 modules/comment/comment.model.php | 72 +++++++++++++++++++++++--------
 1 file changed, 55 insertions(+), 17 deletions(-)

diff --git a/modules/comment/comment.model.php b/modules/comment/comment.model.php
index f2a7446ed..3ac2dd1e1 100644
--- a/modules/comment/comment.model.php
+++ b/modules/comment/comment.model.php
@@ -1271,36 +1271,74 @@ class CommentModel extends Comment
 		return (int) $output->data->count;
 	}
 
-
 	/**
-	 * Get comment list of the doc in corresponding woth member_srl.
+	 * Get the total number of comments posted on the given document by the given member.
+	 *
+	 * @param int $document_srl
 	 * @param int $member_srl
-	 * @param array $columnList
-	 * @param int $unused1 (Previously $page)
-	 * @param int $unused2 (Previously $is_admin)
-	 * @param int $count
 	 * @param array $statusList
-	 * @return object
+	 * @return int
 	 */
-	public static function getCommentListByMemberSrl($member_srl, $columnList = [], $unused1 = 0, $unused2 = 0, $count = 0, $statusList = [])
+	public static function getCommentCountByDocumentSrlAndMemberSrl($document_srl, $member_srl, $statusList = [])
 	{
 		$args = new stdClass();
+		$args->document_srl = $document_srl;
 		$args->member_srl = $member_srl;
-		$args->list_count = $count;
 		if ($statusList)
 		{
 			$args->statusList = $statusList;
 		}
-		$output = executeQuery('comment.getCommentListByMemberSrl', $args, $columnList);
-		$comment_list = $output->data;
-
-		if(!$comment_list) return array();
-		if(!is_array($comment_list)) $comment_list = array($comment_list);
-
-		return $comment_list;
-
+		$output = executeQuery('comment.getCommentCountByMemberSrl', $args);
+		return (int) $output->data->count;
 	}
 
+	/**
+	 * Get the list of comments posted by the given member.
+	 *
+	 * @param int $member_srl
+	 * @param array $columnList
+	 * @param int $unused1 (Previously $page)
+	 * @param int $unused2 (Previously $is_admin)
+	 * @param int $list_count
+	 * @param array $statusList
+	 * @return array
+	 */
+	public static function getCommentListByMemberSrl($member_srl, $columnList = [], $unused1 = 0, $unused2 = 0, $list_count = 0, $statusList = [])
+	{
+		$args = new stdClass();
+		$args->member_srl = $member_srl;
+		$args->list_count = $list_count;
+		if ($statusList)
+		{
+			$args->statusList = $statusList;
+		}
+		$output = executeQueryArray('comment.getCommentListByMemberSrl', $args, $columnList);
+		return $output->data ?? [];
+	}
+
+	/**
+	 * Get the list of comments posted on the given document by the given member.
+	 *
+	 * @param int $document_srl
+	 * @param int $member_srl
+	 * @param int $list_count
+	 * @param array $columnList
+	 * @param array $statusList
+	 * @return array
+	 */
+	public static function getCommentListByDocumentSrlAndMemberSrl($document_srl, $member_srl, $list_count = 0, $columnList = [], $statusList = [])
+	{
+		$args = new stdClass();
+		$args->document_srl = $document_srl;
+		$args->member_srl = $member_srl;
+		$args->list_count = $list_count;
+		if ($statusList)
+		{
+			$args->statusList = $statusList;
+		}
+		$output = executeQueryArray('comment.getCommentListByMemberSrl', $args, $columnList);
+		return $output->data ?? [];
+	}
 }
 /* End of file comment.model.php */
 /* Location: ./modules/comment/comment.model.php */

From f3ff338711f6ec3098dc028f1ac95fac6557334f Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Wed, 17 Dec 2025 16:43:18 +0900
Subject: [PATCH 26/34] Return more information from DB::getColumnInfo() and
 DB::getIndexInfo()

---
 common/framework/DB.php | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

diff --git a/common/framework/DB.php b/common/framework/DB.php
index 0f30246e8..31fb26104 100644
--- a/common/framework/DB.php
+++ b/common/framework/DB.php
@@ -962,7 +962,7 @@ class DB
 	public function getColumnInfo(string $table_name, string $column_name): ?object
 	{
 		// If column information is not found, return null.
-		$stmt = $this->_handle->query(sprintf("SHOW FIELDS FROM `%s` WHERE Field = '%s'", $this->addQuotes($this->_prefix . $table_name), $this->addQuotes($column_name)));
+		$stmt = $this->_handle->query(sprintf("SHOW FULL COLUMNS FROM `%s` WHERE Field = '%s'", $this->addQuotes($this->_prefix . $table_name), $this->addQuotes($column_name)));
 		$column_info = $this->fetch($stmt);
 		if (!$column_info)
 		{
@@ -982,6 +982,16 @@ class DB
 		}
 		$xetype = Parsers\DBTableParser::getXEType($dbtype, $size ?: '');
 
+		// Detect the character set.
+		if (preg_match('/^([a-zA-Z0-9]+)/', $column_info->{'Collation'} ?? '', $matches))
+		{
+			$charset = $matches[1] === 'utf8mb3' ? 'utf8' : $matches[1];
+		}
+		else
+		{
+			$charset = null;
+		}
+
 		// Return the result as an object.
 		return (object)array(
 			'name' => $column_name,
@@ -990,6 +1000,8 @@ class DB
 			'size' => $size,
 			'default_value' => $column_info->{'Default'},
 			'notnull' => strncmp($column_info->{'Null'}, 'NO', 2) == 0 ? true : false,
+			'charset' => $charset,
+			'collation' => $column_info->{'Collation'} ?: null,
 		);
 	}
 
@@ -1100,6 +1112,7 @@ class DB
 		return (object)array(
 			'name' => $column->Key_name,
 			'table' => $column->Table,
+			'type' => $column->Index_type,
 			'is_unique' => $is_unique,
 			'columns' => $columns,
 		);

From 7bbb03d8350793543e0cce37bd2077faa751b194 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Wed, 17 Dec 2025 16:59:27 +0900
Subject: [PATCH 27/34] Add option to allow spaces in nick_name

---
 modules/member/lang/en.php                 |  1 +
 modules/member/lang/ko.php                 |  1 +
 modules/member/member.admin.controller.php | 20 +++++++---
 modules/member/member.controller.php       | 46 +++++++++++++++-------
 modules/member/tpl/default_config.html     |  1 +
 5 files changed, 50 insertions(+), 19 deletions(-)

diff --git a/modules/member/lang/en.php b/modules/member/lang/en.php
index 305947b29..874008eb8 100644
--- a/modules/member/lang/en.php
+++ b/modules/member/lang/en.php
@@ -152,6 +152,7 @@ $lang->cmd_modify_nickname_allow = 'Allow Nickname Change';
 $lang->cmd_modify_nickname_log = 'Nickname Change Log';
 $lang->cmd_nickname_symbols = 'Allow Symbols in Nickname';
 $lang->cmd_nickname_symbols_list = 'Only Allow:';
+$lang->cmd_nickname_allow_spaces = 'Allow Spaces';
 $lang->cmd_member_profile_view = 'Show member profile picture';
 $lang->cmd_allow_duplicate_nickname = 'Allow Duplicate Nicknames';
 $lang->about_allow_duplicate_nickname = 'Allow more than one member to use the same nickname.';
diff --git a/modules/member/lang/ko.php b/modules/member/lang/ko.php
index d49ba42ea..fd29a4d81 100644
--- a/modules/member/lang/ko.php
+++ b/modules/member/lang/ko.php
@@ -154,6 +154,7 @@ $lang->cmd_modify_nickname_allow = '닉네임 변경 허용';
 $lang->cmd_modify_nickname_log = '닉네임 변경 기록';
 $lang->cmd_nickname_symbols = '닉네임에 특수문자 허용';
 $lang->cmd_nickname_symbols_list = '다음의 문자만 허용:';
+$lang->cmd_nickname_allow_spaces = '띄어쓰기 허용';
 $lang->cmd_member_profile_view = '회원 프로필사진 보이기';
 $lang->cmd_allow_duplicate_nickname = '닉네임 중복 허용';
 $lang->about_allow_duplicate_nickname = '여러 회원이 동일한 닉네임을 사용하는 것을 허용합니다. 주의: 잘못 사용할 경우 혼란이 발생할 수 있습니다.';
diff --git a/modules/member/member.admin.controller.php b/modules/member/member.admin.controller.php
index c9aebbfae..1ffb3a725 100644
--- a/modules/member/member.admin.controller.php
+++ b/modules/member/member.admin.controller.php
@@ -127,18 +127,26 @@ class MemberAdminController extends Member
 		}
 
 		// remove whitespace
-		foreach(['user_id', 'nick_name', 'email_address'] as $val)
+		foreach (['user_id', 'email_address'] as $val)
 		{
-			if(isset($args->{$val}))
+			if (isset($args->{$val}))
 			{
 				$args->{$val} = preg_replace('/[\pZ\pC]+/u', '', utf8_clean(html_entity_decode($args->{$val})));
 			}
 		}
-		foreach(['user_name'] as $val)
+		if (isset($args->user_name))
 		{
-			if(isset($args->{$val}))
+			$args->user_name = utf8_normalize_spaces(utf8_clean(html_entity_decode($args->user_name)));
+		}
+		if (isset($args->nick_name))
+		{
+			if (isset($config->nickname_spaces) && $config->nickname_spaces === 'Y')
 			{
-				$args->{$val} = utf8_normalize_spaces(utf8_clean(html_entity_decode($args->{$val})));
+				$args->nick_name = utf8_normalize_spaces(utf8_clean(html_entity_decode($args->nick_name)));
+			}
+			else
+			{
+				$args->nick_name = preg_replace('/[\pZ\pC]+/u', '', utf8_clean(html_entity_decode($args->nick_name)));
 			}
 		}
 
@@ -256,6 +264,7 @@ class MemberAdminController extends Member
 			'update_nickname_log',
 			'nickname_symbols',
 			'nickname_symbols_allowed_list',
+			'nickname_spaces',
 			'allow_duplicate_nickname',
 			'member_profile_view'
 		);
@@ -347,6 +356,7 @@ class MemberAdminController extends Member
 			$args->nickname_symbols = 'Y';
 		}
 		$args->nickname_symbols_allowed_list = utf8_trim($args->nickname_symbols_allowed_list);
+		$args->nickname_spaces = (isset($args->nickname_spaces) && $args->nickname_spaces === 'Y') ? 'Y' : 'N';
 
 		$oModuleController = getController('module');
 		$output = $oModuleController->updateModuleConfig('member', $args);
diff --git a/modules/member/member.controller.php b/modules/member/member.controller.php
index 09e6eff0f..f5f972cdf 100644
--- a/modules/member/member.controller.php
+++ b/modules/member/member.controller.php
@@ -796,25 +796,34 @@ class MemberController extends Member
 		}
 
 		// remove whitespace
-		foreach(['user_id', 'nick_name', 'email_address'] as $val)
+		foreach (['user_id', 'email_address'] as $val)
 		{
-			if(isset($args->{$val}))
+			if (isset($args->{$val}))
 			{
 				$args->{$val} = preg_replace('/[\pZ\pC]+/u', '', utf8_clean(html_entity_decode($args->{$val})));
 			}
 		}
-		foreach(['user_name'] as $val)
+		if (isset($args->user_name))
 		{
-			if(isset($args->{$val}))
+			$args->user_name = utf8_normalize_spaces(utf8_clean(html_entity_decode($args->user_name)));
+		}
+		if (isset($args->nick_name))
+		{
+			if (isset($config->nickname_spaces) && $config->nickname_spaces === 'Y')
 			{
-				$args->{$val} = utf8_normalize_spaces(utf8_clean(html_entity_decode($args->{$val})));
+				$args->nick_name = utf8_normalize_spaces(utf8_clean(html_entity_decode($args->nick_name)));
 			}
+			else
+			{
+				$args->nick_name = preg_replace('/[\pZ\pC]+/u', '', utf8_clean(html_entity_decode($args->nick_name)));
+			}
+
 		}
 
 		// Check symbols in nickname
 		if($config->nickname_symbols === 'N')
 		{
-			if(preg_match('/[^\pL\d]/u', $args->nick_name, $matches))
+			if(preg_match('/[^\pL\d\s]/u', $args->nick_name, $matches))
 			{
 				throw new Rhymix\Framework\Exception(sprintf(lang('msg_invalid_symbol_in_nickname'), escape($matches[0])));
 			}
@@ -822,7 +831,7 @@ class MemberController extends Member
 		elseif($config->nickname_symbols === 'LIST')
 		{
 			$list = preg_quote($config->nickname_symbols_allowed_list, '/');
-			if(preg_match('/[^\pL\d' . $list . ']/u', $args->nick_name, $matches))
+			if(preg_match('/[^\pL\d\s' . $list . ']/u', $args->nick_name, $matches))
 			{
 				throw new Rhymix\Framework\Exception(sprintf(lang('msg_invalid_symbol_in_nickname'), escape($matches[0])));
 			}
@@ -1098,19 +1107,28 @@ class MemberController extends Member
 		$args->extra_vars = serialize($extra_vars);
 
 		// remove whitespace
-		foreach(['user_id', 'nick_name', 'email_address'] as $val)
+		foreach (['user_id', 'email_address'] as $val)
 		{
-			if(isset($args->{$val}))
+			if (isset($args->{$val}))
 			{
 				$args->{$val} = preg_replace('/[\pZ\pC]+/u', '', utf8_clean(html_entity_decode($args->{$val})));
 			}
 		}
-		foreach(['user_name'] as $val)
+		if (isset($args->user_name))
 		{
-			if(isset($args->{$val}))
+			$args->user_name = utf8_normalize_spaces(utf8_clean(html_entity_decode($args->user_name)));
+		}
+		if (isset($args->nick_name))
+		{
+			if (isset($config->nickname_spaces) && $config->nickname_spaces === 'Y')
 			{
-				$args->{$val} = utf8_normalize_spaces(utf8_clean(html_entity_decode($args->{$val})));
+				$args->nick_name = utf8_normalize_spaces(utf8_clean(html_entity_decode($args->nick_name)));
 			}
+			else
+			{
+				$args->nick_name = preg_replace('/[\pZ\pC]+/u', '', utf8_clean(html_entity_decode($args->nick_name)));
+			}
+
 		}
 
 		// Check if nickname change is allowed
@@ -1134,7 +1152,7 @@ class MemberController extends Member
 		// Check symbols in nickname
 		if($config->nickname_symbols === 'N')
 		{
-			if(preg_match('/[^\pL\d]/u', $args->nick_name, $matches))
+			if(preg_match('/[^\pL\d\s]/u', $args->nick_name, $matches))
 			{
 				throw new Rhymix\Framework\Exception(sprintf(lang('msg_invalid_symbol_in_nickname'), escape($matches[0])));
 			}
@@ -1142,7 +1160,7 @@ class MemberController extends Member
 		elseif($config->nickname_symbols === 'LIST')
 		{
 			$list = preg_quote($config->nickname_symbols_allowed_list, '/');
-			if(preg_match('/[^\pL\d' . $list . ']/u', $args->nick_name, $matches))
+			if(preg_match('/[^\pL\d\s' . $list . ']/u', $args->nick_name, $matches))
 			{
 				throw new Rhymix\Framework\Exception(sprintf(lang('msg_invalid_symbol_in_nickname'), escape($matches[0])));
 			}
diff --git a/modules/member/tpl/default_config.html b/modules/member/tpl/default_config.html
index ceb2b259e..0155e3140 100644
--- a/modules/member/tpl/default_config.html
+++ b/modules/member/tpl/default_config.html
@@ -83,6 +83,7 @@
 			<label class="x_inline" for="nickname_symbols_list"><input type="radio" name="nickname_symbols" id="nickname_symbols_list" value="LIST" checked="checked"|cond="$config->nickname_symbols == 'LIST'"/> {$lang->cmd_nickname_symbols_list}</label>
 			<input type="text" name="nickname_symbols_allowed_list" value="{$config->nickname_symbols_allowed_list ?: ''}" />
 			<p class="x_help-block">{$lang->about_nickname_symbols}</p>
+			<label for="nickname_spaces"><input type="checkbox" name="nickname_spaces" id="nickname_spaces" value="Y" checked="checked"|cond="$config->nickname_spaces == 'Y'" /> {$lang->cmd_nickname_allow_spaces}</label>
 		</div>
 	</div>
 	<div class="x_control-group" style="display:none"|cond="$config->allow_duplicate_nickname != 'Y'">

From 01984210b6eb4505715bd726279001be9126d16d Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Wed, 17 Dec 2025 17:11:57 +0900
Subject: [PATCH 28/34] Fix board list config not being copied

---
 modules/board/board.controller.php | 17 +++++++++++++++++
 modules/board/conf/module.xml      |  1 +
 2 files changed, 18 insertions(+)

diff --git a/modules/board/board.controller.php b/modules/board/board.controller.php
index 1eb2dd673..8bed7c029 100644
--- a/modules/board/board.controller.php
+++ b/modules/board/board.controller.php
@@ -842,6 +842,23 @@ class BoardController extends Board
 		$oMemberController->addMemberPopupMenu($url, 'cmd_view_own_document', '', 'self', 'board_own_document');
 	}
 
+	/**
+	 * Trigger called at module copy
+	 */
+	public function triggerCopyModule(&$obj)
+	{
+		$board_config = ModuleModel::getModulePartConfig('board', $obj->originModuleSrl);
+
+		$oModuleController = ModuleController::getInstance();
+		if (is_array($obj->moduleSrlList))
+		{
+			foreach ($obj->moduleSrlList as $module_srl)
+			{
+				$oModuleController->insertModulePartConfig('board', $module_srl, $board_config);
+			}
+		}
+	}
+
 	/**
 	 * Create an anonymous nickname.
 	 *
diff --git a/modules/board/conf/module.xml b/modules/board/conf/module.xml
index e3b0b07ee..2d139ad2b 100644
--- a/modules/board/conf/module.xml
+++ b/modules/board/conf/module.xml
@@ -130,6 +130,7 @@
 	<eventHandlers>
 		<eventHandler after="member.getMemberMenu" class="controller" method="triggerMemberMenu" />
 		<eventHandler after="menu.getModuleListInSitemap" class="model" method="triggerModuleListInSitemap" />
+		<eventHandler after="module.procModuleAdminCopyModule" class="controller" method="triggerCopyModule" />
 	</eventHandlers>
 	<menus>
 		<menu name="board" type="all">

From 307661b57b1bf5c9daa22fa436326bd7bb129090 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Wed, 17 Dec 2025 17:37:03 +0900
Subject: [PATCH 29/34] Support methods to load and check CAPTCHA wherever a
 developer wants

---
 modules/spamfilter/captcha/recaptcha.php      |  7 ++-
 modules/spamfilter/captcha/turnstile.php      |  7 ++-
 modules/spamfilter/conf/module.xml            |  2 +
 modules/spamfilter/lang/en.php                |  5 +-
 modules/spamfilter/lang/ko.php                |  3 ++
 .../spamfilter.admin.controller.php           | 17 +++++++
 modules/spamfilter/spamfilter.admin.view.php  | 14 ++++++
 modules/spamfilter/spamfilter.model.php       | 50 ++++++++++++++++---
 modules/spamfilter/tpl/captcha_test.html      | 32 ++++++++++++
 modules/spamfilter/tpl/header.html            |  1 +
 10 files changed, 127 insertions(+), 11 deletions(-)
 create mode 100644 modules/spamfilter/tpl/captcha_test.html

diff --git a/modules/spamfilter/captcha/recaptcha.php b/modules/spamfilter/captcha/recaptcha.php
index f3e2b9775..f53c2797d 100644
--- a/modules/spamfilter/captcha/recaptcha.php
+++ b/modules/spamfilter/captcha/recaptcha.php
@@ -20,9 +20,12 @@ class reCAPTCHA
 		self::$config = $config;
 	}
 
-	public static function check()
+	public static function check($response = null)
 	{
-		$response = Context::get('g-recaptcha-response');
+		if (!$response)
+		{
+			$response = Context::get('g-recaptcha-response');
+		}
 		if (!$response)
 		{
 			throw new Exception('msg_recaptcha_invalid_response');
diff --git a/modules/spamfilter/captcha/turnstile.php b/modules/spamfilter/captcha/turnstile.php
index 2f3dad337..3098582ad 100644
--- a/modules/spamfilter/captcha/turnstile.php
+++ b/modules/spamfilter/captcha/turnstile.php
@@ -20,9 +20,12 @@ class Turnstile
 		self::$config = $config;
 	}
 
-	public static function check()
+	public static function check($response = null)
 	{
-		$response = Context::get('g-recaptcha-response');
+		if (!$response)
+		{
+			$response = Context::get('g-recaptcha-response');
+		}
 		if (!$response)
 		{
 			throw new Exception('msg_recaptcha_invalid_response');
diff --git a/modules/spamfilter/conf/module.xml b/modules/spamfilter/conf/module.xml
index 00440ac48..8bef3c6f9 100644
--- a/modules/spamfilter/conf/module.xml
+++ b/modules/spamfilter/conf/module.xml
@@ -6,6 +6,7 @@
 		<action name="dispSpamfilterAdminDeniedWordList" type="view" menu_name="spamFilter" />
 		<action name="dispSpamfilterAdminConfigBlock" type="view" menu_name="spamFilter" />
 		<action name="dispSpamfilterAdminConfigCaptcha" type="view" menu_name="spamFilter" />
+		<action name="dispSpamfilterAdminConfigCaptchaTest" type="view" menu_name="spamFilter" />
 
 		<action name="procSpamfilterAdminInsertDeniedIP" type="controller" />
 		<action name="procSpamfilterAdminUpdateDeniedIP" type="controller" />
@@ -15,6 +16,7 @@
 		<action name="procSpamfilterAdminDeleteDeniedWord" type="controller" />
 		<action name="procSpamfilterAdminInsertConfig" type="controller" />
 		<action name="procSpamfilterAdminInsertConfigCaptcha" type="controller" />
+		<action name="procSpamfilterAdminSubmitCaptchaTest" type="controller" />
 	</actions>
 	<eventHandlers>
 		<eventHandler before="document.manage" class="controller" method="triggerManageDocument" />
diff --git a/modules/spamfilter/lang/en.php b/modules/spamfilter/lang/en.php
index 8d09bb889..53d905804 100644
--- a/modules/spamfilter/lang/en.php
+++ b/modules/spamfilter/lang/en.php
@@ -2,7 +2,8 @@
 $lang->cmd_denied_ip = 'IP Address Blacklist';
 $lang->cmd_denied_word = 'Keyword Blacklist';
 $lang->cmd_config_block = 'Automatic Blocking';
-$lang->cmd_captcha_config = 'CAPTCHA';
+$lang->cmd_captcha_config = 'CAPTCHA Settings';
+$lang->cmd_captcha_test = 'CAPTCHA Test';
 $lang->add_denied_ip = 'Add IP address or range';
 $lang->add_denied_word = 'Add keyword';
 $lang->spamfilter = 'Spam Filter';
@@ -69,7 +70,9 @@ $lang->recaptcha_target_everyone = 'Everyone';
 $lang->recaptcha_target_frequency = 'Frequency';
 $lang->recaptcha_target_first_time_only = 'First Time Only';
 $lang->recaptcha_target_every_time = 'Every Time';
+$lang->msg_recaptcha_not_configured = 'Your CAPTCHA is not properly configured.';
 $lang->msg_recaptcha_connection_error = 'An error occurred while connecting to the CAPTCHA verification server.';
 $lang->msg_recaptcha_server_error = 'An error occurred while verifying your CAPTCHA response.';
 $lang->msg_recaptcha_invalid_response = 'Please check the CAPTCHA.';
 $lang->msg_recaptcha_keys_not_set = 'Please fill in your CAPTCHA Site Key and Secret Key.';
+$lang->msg_recaptcha_test_success = 'You passed the CAPTCHA test successfully.';
diff --git a/modules/spamfilter/lang/ko.php b/modules/spamfilter/lang/ko.php
index 3b2e1dfb6..a7f16d0ae 100644
--- a/modules/spamfilter/lang/ko.php
+++ b/modules/spamfilter/lang/ko.php
@@ -3,6 +3,7 @@ $lang->cmd_denied_ip = '스팸 IP 목록';
 $lang->cmd_denied_word = '스팸 키워드 목록';
 $lang->cmd_config_block = '자동 차단 설정';
 $lang->cmd_captcha_config = '캡챠 설정';
+$lang->cmd_captcha_test = '캡챠 테스트';
 $lang->add_denied_ip = '스팸 IP 추가';
 $lang->add_denied_word = '스팸 키워드 추가';
 $lang->spamfilter = '스팸필터';
@@ -69,7 +70,9 @@ $lang->recaptcha_target_everyone = '모든 사용자';
 $lang->recaptcha_target_frequency = '캡챠 사용 빈도';
 $lang->recaptcha_target_first_time_only = '최초 1회만 사용';
 $lang->recaptcha_target_every_time = '매번 사용';
+$lang->msg_recaptcha_not_configured = '스팸방지 CAPTCHA가 올바르게 설정되지 않았습니다.';
 $lang->msg_recaptcha_connection_error = '스팸방지 CAPTCHA 서버에 접속하는 도중 오류가 발생했습니다.';
 $lang->msg_recaptcha_server_error = '스팸방지 CAPTCHA 서버와 통신하는 도중 오류가 발생했습니다.';
 $lang->msg_recaptcha_invalid_response = '스팸방지 기능을 체크해 주십시오.';
 $lang->msg_recaptcha_keys_not_set = 'CAPTCHA Site Key 및 Secret Key를 입력하여 주십시오.';
+$lang->msg_recaptcha_test_success = 'CAPTCHA 테스트를 성공적으로 통과했습니다.';
diff --git a/modules/spamfilter/spamfilter.admin.controller.php b/modules/spamfilter/spamfilter.admin.controller.php
index 38e99cab0..eaf4d79f1 100644
--- a/modules/spamfilter/spamfilter.admin.controller.php
+++ b/modules/spamfilter/spamfilter.admin.controller.php
@@ -115,6 +115,23 @@ class SpamfilterAdminController extends Spamfilter
 		$this->setRedirectUrl($returnUrl);
 	}
 
+	public function procSpamfilterAdminSubmitCaptchaTest()
+	{
+		$response = Context::get('g-recaptcha-response') ?? Context::get('cf-turnstile-response');
+
+		try
+		{
+			SpamfilterModel::checkCaptchaResponse($response);
+		}
+		catch (Exception $e)
+		{
+			return new BaseObject(-1, $e->getMessage());
+		}
+
+		$this->setMessage('msg_recaptcha_test_success');
+		$this->setRedirectUrl(getNotEncodedUrl('', 'module', 'admin', 'act', 'dispSpamfilterAdminConfigCaptchaTest'));
+	}
+
 	public function procSpamfilterAdminInsertDeniedIP()
 	{
 		//스팸IP  추가
diff --git a/modules/spamfilter/spamfilter.admin.view.php b/modules/spamfilter/spamfilter.admin.view.php
index 1e2f1e72f..402d7ba3e 100644
--- a/modules/spamfilter/spamfilter.admin.view.php
+++ b/modules/spamfilter/spamfilter.admin.view.php
@@ -86,6 +86,20 @@ class SpamfilterAdminView extends Spamfilter
 
 		$this->setTemplateFile('config_captcha');
 	}
+
+	/**
+	 * @brief CAPTCHA Test
+	 */
+	public function dispSpamfilterAdminConfigCaptchaTest()
+	{
+		$config = ModuleModel::getModuleConfig('spamfilter');
+		Context::set('config', $config);
+
+		$captcha = SpamfilterModel::getCaptcha();
+		Context::set('captcha', $captcha);
+
+		$this->setTemplateFile('captcha_test');
+	}
 }
 /* End of file spamfilter.admin.view.php */
 /* Location: ./modules/spamfilter/spamfilter.admin.view.php */
diff --git a/modules/spamfilter/spamfilter.model.php b/modules/spamfilter/spamfilter.model.php
index dcd23d6cb..c7f73f217 100644
--- a/modules/spamfilter/spamfilter.model.php
+++ b/modules/spamfilter/spamfilter.model.php
@@ -218,7 +218,7 @@ class SpamfilterModel extends Spamfilter
 	{
 		$config = ModuleModel::getModuleConfig('spamfilter');
 		$user = Context::get('logged_info');
-		if (!isset($config) || !isset($config->captcha) || !in_array($config->captcha->type, ['recaptcha', 'turnstile']) || !$config->captcha->site_key || !$config->captcha->secret_key)
+		if (!isset($config) || empty($config->captcha) || empty($config->captcha->type) || empty($config->captcha->site_key) || empty($config->captcha->secret_key))
 		{
 			return false;
 		}
@@ -248,20 +248,58 @@ class SpamfilterModel extends Spamfilter
 	/**
 	 * Get a CAPTCHA instance.
 	 *
-	 * @return object
+	 * @return ?object
 	 */
-	public static function getCaptcha($target_action)
+	public static function getCaptcha($target_action = null)
 	{
 		$config = ModuleModel::getModuleConfig('spamfilter');
-		$captcha_class = 'Rhymix\\Modules\\Spamfilter\\Captcha\\' . $config->captcha->type;
-		$captcha_class::init($config->captcha);
+		if (!isset($config) || empty($config->captcha) || empty($config->captcha->type) || empty($config->captcha->site_key) || empty($config->captcha->secret_key))
+		{
+			return null;
+		}
 
+		$captcha_class = 'Rhymix\\Modules\\Spamfilter\\Captcha\\' . $config->captcha->type;
+		if (!class_exists($captcha_class))
+		{
+			return null;
+		}
+
+		$captcha_class::init($config->captcha);
 		$captcha = new $captcha_class();
-		$captcha->setTargetActions([$target_action => true]);
+		if ($target_action)
+		{
+			$captcha->setTargetActions([$target_action => true]);
+		}
 		$captcha->addScripts();
 		return $captcha;
 	}
 
+	/**
+	 * Check the CAPTCHA.
+	 *
+	 * This method will throw an exception if the CAPTCHA is invalid.
+	 *
+	 * @param ?string $response
+	 * @return void
+	 */
+	public static function checkCaptchaResponse(?string $response = null): void
+	{
+		$config = ModuleModel::getModuleConfig('spamfilter');
+		if (!isset($config) || empty($config->captcha) || empty($config->captcha->type) || empty($config->captcha->site_key) || empty($config->captcha->secret_key))
+		{
+			throw new Exception('msg_recaptcha_not_configured');
+		}
+
+		$captcha_class = 'Rhymix\\Modules\\Spamfilter\\Captcha\\' . $config->captcha->type;
+		if (!class_exists($captcha_class))
+		{
+			throw new Exception('msg_recaptcha_not_configured');
+		}
+
+		$captcha_class::init($config->captcha);
+		$captcha_class::check($response);
+	}
+
 	/**
 	 * @brief Check if the trackbacks have already been registered to a particular article
 	 */
diff --git a/modules/spamfilter/tpl/captcha_test.html b/modules/spamfilter/tpl/captcha_test.html
new file mode 100644
index 000000000..20afe9a9f
--- /dev/null
+++ b/modules/spamfilter/tpl/captcha_test.html
@@ -0,0 +1,32 @@
+<config autoescape="on" />
+<include target="./header.html" />
+<section class="section">
+	<form action="./" method="post" id="spamfilterConfig" class="x_form-horizontal">
+		<input type="hidden" name="act" value="procSpamfilterAdminSubmitCaptchaTest" />
+		<input type="hidden" name="module" value="spamfilter" />
+		<input type="hidden" name="xe_validator_id" value="modules/spamfilter/tpl/3" />
+		<div cond="$XE_VALIDATOR_MESSAGE && $XE_VALIDATOR_ID == 'modules/spamfilter/tpl/3'" class="message {$XE_VALIDATOR_MESSAGE_TYPE}">
+			<p>{$XE_VALIDATOR_MESSAGE}</p>
+		</div>
+		<!--@if($captcha)-->
+		<div class="x_control-group">
+			<label class="x_control-label" for="captcha_type">{$lang->cmd_captcha_test}</label>
+			<div class="x_controls">
+				{$captcha|noescape}
+			</div>
+		</div>
+		<div class="x_clearfix btnArea">
+			<div class="x_pull-right">
+				<button type="submit" class="x_btn x_btn-primary">{$lang->cmd_submit}</button>
+			</div>
+		</div>
+		<!--@else-->
+		<div class="message error">
+			<p>{$lang->msg_recaptcha_not_configured}</p>
+		</div>
+		<!--@end-->
+	</form>
+</section>
+<include target="./footer.html" />
+
+
diff --git a/modules/spamfilter/tpl/header.html b/modules/spamfilter/tpl/header.html
index e7ba69a19..95206b739 100644
--- a/modules/spamfilter/tpl/header.html
+++ b/modules/spamfilter/tpl/header.html
@@ -11,4 +11,5 @@
     <li class="x_active"|cond="$act === 'dispSpamfilterAdminDeniedWordList'"><a href="{getUrl('','module','admin','act','dispSpamfilterAdminDeniedWordList')}">{$lang->cmd_denied_word}</a></li>
     <li class="x_active"|cond="$act === 'dispSpamfilterAdminConfigBlock'"><a href="{getUrl('','module','admin','act','dispSpamfilterAdminConfigBlock')}">{$lang->cmd_config_block}</a></li>
     <li class="x_active"|cond="$act === 'dispSpamfilterAdminConfigCaptcha'"><a href="{getUrl('','module','admin','act','dispSpamfilterAdminConfigCaptcha')}">{$lang->cmd_captcha_config}</a></li>
+	<li class="x_active"|cond="$act === 'dispSpamfilterAdminConfigCaptchaTest'"><a href="{getUrl('','module','admin','act','dispSpamfilterAdminConfigCaptchaTest')}">{$lang->cmd_captcha_test}</a></li>
 </ul>

From cc17bbe05a891ef78cc0b30eb98d99ef7cc8c901 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Wed, 17 Dec 2025 17:53:39 +0900
Subject: [PATCH 30/34] Clean up HTML filtering and emoji encoding #2631

---
 modules/comment/comment.controller.php        | 22 +++++++-----
 .../communication.controller.php              | 11 +++---
 modules/document/document.controller.php      | 34 ++++++++++++-------
 modules/document/document.view.php            |  7 ++--
 4 files changed, 46 insertions(+), 28 deletions(-)

diff --git a/modules/comment/comment.controller.php b/modules/comment/comment.controller.php
index 45cc35706..83c854e44 100644
--- a/modules/comment/comment.controller.php
+++ b/modules/comment/comment.controller.php
@@ -677,23 +677,26 @@ class CommentController extends Comment
 		}
 
 		// if use editor of nohtml, Remove HTML tags from the contents.
-		if(!$manual_inserted || isset($obj->allow_html) || isset($obj->use_html))
+		if (!$manual_inserted || isset($obj->allow_html) || isset($obj->use_html))
 		{
 			$obj->content = EditorModel::converter($obj, 'comment');
 		}
 
 		// remove iframe and script if not a top administrator on the session.
-		if($logged_info->is_admin != 'Y')
+		if ($logged_info->is_admin !== 'Y')
 		{
-			$obj->content = removeHackTag($obj->content);
+			$obj->content = Rhymix\Framework\Filters\HTMLFilter::clean((string)$obj->content);
+		}
+		if (config('db.master.charset') !== 'utf8mb4')
+		{
+			$obj->content = utf8_mbencode($obj->content);
 		}
-		$obj->content = utf8_mbencode($obj->content);
 
+		// Set other flags.
 		if (isset($obj->notify_message) && $obj->notify_message !== 'Y')
 		{
 			$obj->notify_message = 'N';
 		}
-
 		if (isset($obj->is_secret) && $obj->is_secret !== 'Y')
 		{
 			$obj->is_secret = 'N';
@@ -1042,11 +1045,14 @@ class CommentController extends Comment
 
 		// remove iframe and script if not a top administrator on the session
 		$logged_info = Context::get('logged_info');
-		if($logged_info->is_admin != 'Y')
+		if ($logged_info->is_admin !== 'Y')
 		{
-			$obj->content = removeHackTag($obj->content);
+			$obj->content = Rhymix\Framework\Filters\HTMLFilter::clean((string)$obj->content);
+		}
+		if (config('db.master.charset') !== 'utf8mb4')
+		{
+			$obj->content = utf8_mbencode($obj->content);
 		}
-		$obj->content = utf8_mbencode($obj->content);
 
 		// begin transaction
 		$oDB = DB::getInstance();
diff --git a/modules/communication/communication.controller.php b/modules/communication/communication.controller.php
index 4064fb333..72ff49fa9 100644
--- a/modules/communication/communication.controller.php
+++ b/modules/communication/communication.controller.php
@@ -184,9 +184,12 @@ class CommunicationController extends communication
 	{
 		// Encode the title and content.
 		$title = escape($title, false);
-		$content = removeHackTag($content);
-		$title = utf8_mbencode($title);
-		$content = utf8_mbencode($content);
+		$content = Rhymix\Framework\Filters\HTMLFilter::clean((string)$content);
+		if (config('db.master.charset') !== 'utf8mb4')
+		{
+			$title = utf8_mbencode($title);
+			$content = utf8_mbencode($content);
+		}
 
 		$message_srl = $temp_srl ?: getNextSequence();
 		$related_srl = getNextSequence();
@@ -309,7 +312,7 @@ class CommunicationController extends communication
 
 		$mail_content = vsprintf('From: %s<br><hr><br>%s<br><hr><br>%s<br><a href="%s" target="_blank">%s</a>', [
 			$sender->nick_name,
-			utf8_mbencode(removeHackTag($content)),
+			utf8_mbencode(Rhymix\Framework\Filters\HTMLFilter::clean((string)$content)),
 			Context::getSiteTitle(),
 			$view_url, $view_url,
 		]);
diff --git a/modules/document/document.controller.php b/modules/document/document.controller.php
index 42e98a181..9b3cc0618 100644
--- a/modules/document/document.controller.php
+++ b/modules/document/document.controller.php
@@ -811,24 +811,31 @@ class DocumentController extends Document
 		}
 
 		// if use editor of nohtml, Remove HTML tags from the contents.
-		if(!$manual_inserted || isset($obj->allow_html) || isset($obj->use_html))
+		if (!$manual_inserted || isset($obj->allow_html) || isset($obj->use_html))
 		{
 			$obj->content = EditorModel::converter($obj, 'document');
 		}
 
 		// Remove iframe and script if not a top adminisrator in the session.
-		if($logged_info->is_admin != 'Y')
+		if ($logged_info->is_admin !== 'Y')
 		{
-			$obj->content = removeHackTag($obj->content);
+			$obj->content = Rhymix\Framework\Filters\HTMLFilter::clean((string)$obj->content);
+		}
+
+		// Fix encoding of non-BMP UTF-8 characters.
+		if (config('db.master.charset') !== 'utf8mb4')
+		{
+			$obj->title = utf8_mbencode($obj->title);
+			$obj->content = utf8_mbencode($obj->content);
 		}
 
 		// An error appears if both log-in info and user name don't exist.
-		if(!$logged_info->member_srl && !$obj->nick_name) return new BaseObject(-1, 'msg_invalid_request');
-
-		// Fix encoding of non-BMP UTF-8 characters.
-		$obj->title = utf8_mbencode($obj->title);
-		$obj->content = utf8_mbencode($obj->content);
+		if (!$logged_info->member_srl && !$obj->nick_name)
+		{
+			return new BaseObject(-1, 'msg_invalid_request');
+		}
 
+		// Set lang_code to the current user's language
 		$obj->lang_code = Context::getLangType();
 
 		// begin transaction
@@ -1167,14 +1174,17 @@ class DocumentController extends Document
 		}
 
 		// Remove iframe and script if not a top adminisrator in the session.
-		if($logged_info->is_admin != 'Y')
+		if ($logged_info->is_admin !== 'Y')
 		{
-			$obj->content = removeHackTag($obj->content);
+			$obj->content = Rhymix\Framework\Filters\HTMLFilter::clean((string)$obj->content);
 		}
 
 		// Fix encoding of non-BMP UTF-8 characters.
-		$obj->title = utf8_mbencode($obj->title);
-		$obj->content = utf8_mbencode($obj->content);
+		if (config('db.master.charset') !== 'utf8mb4')
+		{
+			$obj->title = utf8_mbencode($obj->title);
+			$obj->content = utf8_mbencode($obj->content);
+		}
 
 		// Begin transaction
 		$oDB = DB::getInstance();
diff --git a/modules/document/document.view.php b/modules/document/document.view.php
index 73f6a7086..415293993 100644
--- a/modules/document/document.view.php
+++ b/modules/document/document.view.php
@@ -55,11 +55,10 @@ class DocumentView extends Document
 			throw new Rhymix\Framework\Exceptions\SecurityViolation;
 		}
 
-		$content = Context::get('content');
-
-		if(Context::get('logged_info')->is_admin != 'Y')
+		$content = (string)Context::get('content');
+		if (Context::get('logged_info')->is_admin !== 'Y')
 		{
-			$content = removeHackTag($content);
+			$content = Rhymix\Framework\Filters\HTMLFilter::clean($content);
 		}
 
 		// Editor converter

From 0c018f1daf08201ee2e25df7b9b4777dcc874bcf Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Wed, 17 Dec 2025 18:00:48 +0900
Subject: [PATCH 31/34] Update references to deprecated global function
 checkCSRF()

---
 classes/module/ModuleHandler.class.php     | 4 ++--
 modules/comment/comment.controller.php     | 4 ++--
 modules/document/document.controller.php   | 4 ++--
 modules/document/document.view.php         | 2 +-
 modules/layout/layout.view.php             | 2 +-
 modules/member/member.admin.controller.php | 2 +-
 6 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/classes/module/ModuleHandler.class.php b/classes/module/ModuleHandler.class.php
index e0faee25e..1d8acd7fe 100644
--- a/classes/module/ModuleHandler.class.php
+++ b/classes/module/ModuleHandler.class.php
@@ -393,7 +393,7 @@ class ModuleHandler extends Handler
 		// check CSRF for non-GET (POST, PUT, etc.) actions
 		if(!in_array(Context::getRequestMethod(), self::$_nocsrf_methods) && Context::isInstalled())
 		{
-			if(isset($xml_info->action->{$this->act}) && $xml_info->action->{$this->act}->check_csrf !== 'false' && !checkCSRF())
+			if(isset($xml_info->action->{$this->act}) && $xml_info->action->{$this->act}->check_csrf !== 'false' && !Rhymix\Framework\Security::checkCSRF())
 			{
 				return self::_createErrorMessage(-1, 'msg_security_violation', 403, 'ERR_CSRF_CHECK_FAILED');
 			}
@@ -555,7 +555,7 @@ class ModuleHandler extends Handler
 				// check CSRF for non-GET (POST, PUT, etc.) actions
 				if(!in_array(Context::getRequestMethod(), self::$_nocsrf_methods) && Context::isInstalled())
 				{
-					if($xml_info->action->{$this->act} && $xml_info->action->{$this->act}->check_csrf !== 'false' && !checkCSRF())
+					if($xml_info->action->{$this->act} && $xml_info->action->{$this->act}->check_csrf !== 'false' && !Rhymix\Framework\Security::checkCSRF())
 					{
 						return self::_createErrorMessage(-1, 'msg_security_violation', 403, 'ERR_CSRF_CHECK_FAILED');
 					}
diff --git a/modules/comment/comment.controller.php b/modules/comment/comment.controller.php
index 83c854e44..2471dbc0a 100644
--- a/modules/comment/comment.controller.php
+++ b/modules/comment/comment.controller.php
@@ -517,7 +517,7 @@ class CommentController extends Comment
 	 */
 	function insertComment($obj, $manual_inserted = FALSE, $update_document = TRUE)
 	{
-		if(!$manual_inserted && !checkCSRF())
+		if(!$manual_inserted && !Rhymix\Framework\Security::checkCSRF())
 		{
 			return new BaseObject(-1, 'msg_security_violation');
 		}
@@ -954,7 +954,7 @@ class CommentController extends Comment
 	 */
 	function updateComment($obj, $skip_grant_check = FALSE, $manual_updated = FALSE)
 	{
-		if(!$manual_updated && !checkCSRF())
+		if(!$manual_updated && !Rhymix\Framework\Security::checkCSRF())
 		{
 			return new BaseObject(-1, 'msg_security_violation');
 		}
diff --git a/modules/document/document.controller.php b/modules/document/document.controller.php
index 9b3cc0618..e1c1d0027 100644
--- a/modules/document/document.controller.php
+++ b/modules/document/document.controller.php
@@ -607,7 +607,7 @@ class DocumentController extends Document
 	 */
 	function insertDocument($obj, $manual_inserted = false, $isRestore = false, $isLatest = true)
 	{
-		if (!$manual_inserted && !checkCSRF())
+		if (!$manual_inserted && !Rhymix\Framework\Security::checkCSRF())
 		{
 			return new BaseObject(-1, 'msg_security_violation');
 		}
@@ -974,7 +974,7 @@ class DocumentController extends Document
 	 */
 	function updateDocument($source_obj, $obj, $manual_updated = FALSE)
 	{
-		if(!$manual_updated && !checkCSRF())
+		if(!$manual_updated && !Rhymix\Framework\Security::checkCSRF())
 		{
 			return new BaseObject(-1, 'msg_security_violation');
 		}
diff --git a/modules/document/document.view.php b/modules/document/document.view.php
index 415293993..1085996cb 100644
--- a/modules/document/document.view.php
+++ b/modules/document/document.view.php
@@ -50,7 +50,7 @@ class DocumentView extends Document
 	 */
 	function dispDocumentPreview()
 	{
-		if(!checkCSRF())
+		if(!Rhymix\Framework\Security::checkCSRF())
 		{
 			throw new Rhymix\Framework\Exceptions\SecurityViolation;
 		}
diff --git a/modules/layout/layout.view.php b/modules/layout/layout.view.php
index ee6e87b7c..b83713a16 100644
--- a/modules/layout/layout.view.php
+++ b/modules/layout/layout.view.php
@@ -320,7 +320,7 @@ class LayoutView extends Layout
 	 */
 	function dispLayoutPreview()
 	{
-		if(!checkCSRF())
+		if(!Rhymix\Framework\Security::checkCSRF())
 		{
 			throw new Rhymix\Framework\Exceptions\InvalidRequest;
 		}
diff --git a/modules/member/member.admin.controller.php b/modules/member/member.admin.controller.php
index 1ffb3a725..1bc72fe41 100644
--- a/modules/member/member.admin.controller.php
+++ b/modules/member/member.admin.controller.php
@@ -24,7 +24,7 @@ class MemberAdminController extends Member
 		// if(Context::getRequestMethod() == "GET") return new Object(-1, "msg_invalid_request");
 		// Extract the necessary information in advance
 		$logged_info = Context::get('logged_info');
-		if($logged_info->is_admin != 'Y' || !checkCSRF())
+		if($logged_info->is_admin != 'Y' || !Rhymix\Framework\Security::checkCSRF())
 		{
 			throw new Rhymix\Framework\Exceptions\InvalidRequest;
 		}

From 620fee05cf625b88ee2ac87bcaf6bfa441625c86 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Wed, 17 Dec 2025 21:32:03 +0900
Subject: [PATCH 32/34] Fix duplicate hidden input when a form includes mid or
 act as a <select>

---
 common/framework/parsers/template/TemplateParser_v1.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/common/framework/parsers/template/TemplateParser_v1.php b/common/framework/parsers/template/TemplateParser_v1.php
index a2ab34197..eca23801b 100644
--- a/common/framework/parsers/template/TemplateParser_v1.php
+++ b/common/framework/parsers/template/TemplateParser_v1.php
@@ -156,7 +156,7 @@ class TemplateParser_v1
 		// if not exists default hidden tag, generate hidden tag
 		if ($autoform)
 		{
-			preg_match_all('/<input[^>]* name="(act|mid)"/is', $matches[2], $m2);
+			preg_match_all('/<(?:input|select)[^>]* name="(act|mid)"/is', $matches[2], $m2);
 			$missing_inputs = array_diff(['act', 'mid'], $m2[1]);
 			if(is_array($missing_inputs))
 			{

From 3f29726e244768895c2db59201ec1977ce2e45a7 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Thu, 18 Dec 2025 00:47:43 +0900
Subject: [PATCH 33/34] Fix warning when update_log_setting attribute is not
 set

---
 modules/document/document.controller.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/modules/document/document.controller.php b/modules/document/document.controller.php
index e1c1d0027..c8e54b5ec 100644
--- a/modules/document/document.controller.php
+++ b/modules/document/document.controller.php
@@ -925,7 +925,7 @@ class DocumentController extends Document
 		}
 
 		// Call a trigger (after)
-		if($obj->update_log_setting === 'Y')
+		if (isset($obj->update_log_setting) && $obj->update_log_setting === 'Y')
 		{
 			$obj->extra_vars = serialize($extra_vars);
 			$update_output = $this->insertDocumentUpdateLog($obj);
@@ -1381,7 +1381,7 @@ class DocumentController extends Document
 		}
 
 		// Update log
-		if($obj->update_log_setting === 'Y')
+		if (isset($obj->update_log_setting) && $obj->update_log_setting === 'Y')
 		{
 			$obj->extra_vars = serialize($extra_vars);
 			if($grant->manager)

From aaf3791a784e8530a7b62fa69bf32d14b3558263 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Thu, 18 Dec 2025 13:40:08 +0900
Subject: [PATCH 34/34] Version 2.1.29

---
 common/constants.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/common/constants.php b/common/constants.php
index 621cf20c5..0ecf769c8 100644
--- a/common/constants.php
+++ b/common/constants.php
@@ -3,7 +3,7 @@
 /**
  * RX_VERSION is the version number of the Rhymix CMS.
  */
-define('RX_VERSION', '2.1.28');
+define('RX_VERSION', '2.1.29');
 
 /**
  * RX_MICROTIME is the startup time of the current script, in microseconds since the Unix epoch.