From ab55d8f724e8740bb9a7bcff87e5f08224c66511 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Sun, 8 Jun 2025 23:29:40 +0900
Subject: [PATCH 01/48] Fix string * float error when height is auto #2562

---
 modules/document/document.item.php | 23 ++++++++++++++++++-----
 1 file changed, 18 insertions(+), 5 deletions(-)

diff --git a/modules/document/document.item.php b/modules/document/document.item.php
index 732d25e17..dcf90e8d7 100644
--- a/modules/document/document.item.php
+++ b/modules/document/document.item.php
@@ -1146,9 +1146,14 @@ class DocumentItem extends BaseObject
 
 		// Call trigger for custom thumbnails.
 		$trigger_obj = (object)[
-			'document_srl' => $this->document_srl, 'width' => $width, 'height' => $height,
-			'image_type' => 'jpg', 'type' => $thumbnail_type, 'quality' => $config->thumbnail_quality,
-			'filename' => $thumbnail_file, 'url' => $thumbnail_url,
+			'document_srl' => $this->document_srl,
+			'width' => $width,
+			'height' => $height,
+			'image_type' => 'jpg',
+			'type' => $thumbnail_type,
+			'quality' => $config->thumbnail_quality,
+			'filename' => $thumbnail_file,
+			'url' => $thumbnail_url,
 		];
 		$output = ModuleHandler::triggerCall('document.getThumbnail', 'before', $trigger_obj);
 		clearstatcache(true, $thumbnail_file);
@@ -1220,8 +1225,16 @@ class DocumentItem extends BaseObject
 		// If not exists, file an image file from the content
 		if(!$source_file && $config->thumbnail_target !== 'attachment')
 		{
-			$external_image_min_width = min(100, round($trigger_obj->width * 0.3));
-			$external_image_min_height = min(100, round($trigger_obj->height * 0.3));
+			$external_image_min_width = is_numeric($trigger_obj->width) ? min(100, round(intval($trigger_obj->width) * 0.3)) : 100;
+			if($trigger_obj->height === 'auto')
+			{
+				$external_image_min_height = min(100, $external_image_min_width * 0.5);
+			}
+			else
+			{
+				$external_image_min_height = is_numeric($trigger_obj->height) ? min(100, round(intval($trigger_obj->height) * 0.3)) : 100;
+			}
+
 			preg_match_all("!<img\s[^>]*?src=(\"|')([^\"' ]*?)(\"|')!is", $content, $matches, PREG_SET_ORDER);
 			foreach($matches as $match)
 			{

From 85e583a111fecc8b73975328e9ba4a29b895081a Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Sun, 8 Jun 2025 23:38:41 +0900
Subject: [PATCH 02/48] Remove duplicate meta viewport tag

https://rhymix.org/tip/1909080
---
 modules/admin/tpl/_header.html | 1 -
 1 file changed, 1 deletion(-)

diff --git a/modules/admin/tpl/_header.html b/modules/admin/tpl/_header.html
index 729ca60e1..9385bfef3 100644
--- a/modules/admin/tpl/_header.html
+++ b/modules/admin/tpl/_header.html
@@ -1,7 +1,6 @@
 <config autoescape="on" />
 
 <include target="./_admin_common.html" />
-{@ Context::addMetaTag("viewport", "width=device-width, user-scalable=yes")}
 <script>
 	var admin_menu_srl = "{$admin_menu_srl}";
 	xe.lang.cmd_find = "{$lang->cmd_find}";

From e3eaa7d9a743f1206b9a382818e0ad68a3623f89 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Sun, 8 Jun 2025 23:41:53 +0900
Subject: [PATCH 03/48] Also apply #2562 fix to comment.item.php

---
 modules/comment/comment.item.php | 25 +++++++++++++++++++------
 1 file changed, 19 insertions(+), 6 deletions(-)

diff --git a/modules/comment/comment.item.php b/modules/comment/comment.item.php
index 32d2e5791..2afdd13d1 100644
--- a/modules/comment/comment.item.php
+++ b/modules/comment/comment.item.php
@@ -816,10 +816,15 @@ class CommentItem extends BaseObject
 
 		// Call trigger for custom thumbnails.
 		$trigger_obj = (object)[
-			'document_srl' => $this->document_srl, 'comment_srl' => $this->comment_srl,
-			'width' => $width, 'height' => $height,
-			'image_type' => 'jpg', 'type' => $thumbnail_type, 'quality' => $config->thumbnail_quality,
-			'filename' => $thumbnail_file, 'url' => $thumbnail_url,
+			'document_srl' => $this->document_srl,
+			'comment_srl' => $this->comment_srl,
+			'width' => $width,
+			'height' => $height,
+			'image_type' => 'jpg',
+			'type' => $thumbnail_type,
+			'quality' => $config->thumbnail_quality,
+			'filename' => $thumbnail_file,
+			'url' => $thumbnail_url,
 		];
 		$output = ModuleHandler::triggerCall('comment.getThumbnail', 'before', $trigger_obj);
 		clearstatcache(true, $thumbnail_file);
@@ -877,8 +882,16 @@ class CommentItem extends BaseObject
 		// get an image file from the doc content if no file attached.
 		if(!$source_file && $config->thumbnail_target !== 'attachment')
 		{
-			$external_image_min_width = min(100, round($trigger_obj->width * 0.3));
-			$external_image_min_height = min(100, round($trigger_obj->height * 0.3));
+			$external_image_min_width = is_numeric($trigger_obj->width) ? min(100, round(intval($trigger_obj->width) * 0.3)) : 100;
+			if($trigger_obj->height === 'auto')
+			{
+				$external_image_min_height = min(100, $external_image_min_width * 0.5);
+			}
+			else
+			{
+				$external_image_min_height = is_numeric($trigger_obj->height) ? min(100, round(intval($trigger_obj->height) * 0.3)) : 100;
+			}
+
 			preg_match_all("!<img\s[^>]*?src=(\"|')([^\"' ]*?)(\"|')!is", $this->get('content'), $matches, PREG_SET_ORDER);
 			foreach($matches as $match)
 			{

From 4c609f9827685607fdb9c6733a9674ea1d67360c Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Tue, 10 Jun 2025 11:50:57 +0900
Subject: [PATCH 04/48] Version 2.1.24

---
 common/constants.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/common/constants.php b/common/constants.php
index 3589e734d..f5c2eaa39 100644
--- a/common/constants.php
+++ b/common/constants.php
@@ -3,7 +3,7 @@
 /**
  * RX_VERSION is the version number of the Rhymix CMS.
  */
-define('RX_VERSION', '2.1.23');
+define('RX_VERSION', '2.1.24');
 
 /**
  * RX_MICROTIME is the startup time of the current script, in microseconds since the Unix epoch.

From 7ffe499a66514aae297963a5ac3684c78406d91d Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Thu, 12 Jun 2025 20:30:09 +0900
Subject: [PATCH 05/48] Fix multiple default values being shown on extravar
 edit screen

---
 modules/document/tpl/extra_keys.html | 2 +-
 modules/extravar/models/Value.php    | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/modules/document/tpl/extra_keys.html b/modules/document/tpl/extra_keys.html
index d7f16b059..407d99a41 100644
--- a/modules/document/tpl/extra_keys.html
+++ b/modules/document/tpl/extra_keys.html
@@ -61,7 +61,7 @@
 			<div class="x_control-group" data-invisible-types="file">
 				<label class="x_control-label" for="default">{$lang->default_value}</label>
 				<div class="x_controls">
-					<input type="text" name="default" id="default" value="{$selected_var->default}" />
+					<input type="text" name="default" id="default" value="{$selected_var->getDefaultValue()}" />
 					<p class="x_help-block">{$lang->about_extra_vars_default_value}</p>
 				</div>
 			</div>
diff --git a/modules/extravar/models/Value.php b/modules/extravar/models/Value.php
index 033ca15c9..54d371d2d 100644
--- a/modules/extravar/models/Value.php
+++ b/modules/extravar/models/Value.php
@@ -197,7 +197,7 @@ class Value
 		}
 		elseif ($this->default)
 		{
-			return array_first($this->getOptions());
+			return is_array($this->default) ? array_first($this->default) : array_first(explode(',', $this->default));
 		}
 		else
 		{

From 4b2cc8c9cf76c0ed1799013892fb0fd9312fbb31 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Thu, 12 Jun 2025 21:01:42 +0900
Subject: [PATCH 06/48] Improve backward compatibility with legacy default
 values for extra vars

---
 modules/extravar/models/Value.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/extravar/models/Value.php b/modules/extravar/models/Value.php
index 54d371d2d..d72a9b00e 100644
--- a/modules/extravar/models/Value.php
+++ b/modules/extravar/models/Value.php
@@ -195,7 +195,7 @@ class Value
 		{
 			return $this->default;
 		}
-		elseif ($this->default)
+		elseif ($this->default && $this->parent_type !== 'member' && !in_array($this->type, ['checkbox', 'radio']))
 		{
 			return is_array($this->default) ? array_first($this->default) : array_first(explode(',', $this->default));
 		}

From 2bac2744a50ccb09fb89dbd482bb4a0d73eeff68 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Thu, 12 Jun 2025 21:25:59 +0900
Subject: [PATCH 07/48] Convert Rhymix.ajax() into async function

---
 common/js/common.js | 44 +++++++++++++++++++++++++++++++-------------
 1 file changed, 31 insertions(+), 13 deletions(-)

diff --git a/common/js/common.js b/common/js/common.js
index 9033e49e2..0e9ef1b9e 100644
--- a/common/js/common.js
+++ b/common/js/common.js
@@ -402,7 +402,7 @@ Rhymix.modal.close = function(id) {
  * @param function error
  * @return void
  */
-Rhymix.ajax = function(action, params, success, error) {
+Rhymix.ajax = async function(action, params, success, error) {
 
 	// Extract module and act
 	let isFormData = params instanceof FormData;
@@ -453,7 +453,7 @@ Rhymix.ajax = function(action, params, success, error) {
 		delete params._rx_csrf_token;
 	}
 
-	// Generate AJAX parameters
+	// Define common AJAX arguments
 	const args = {
 		type: 'POST',
 		dataType: 'json',
@@ -462,19 +462,37 @@ Rhymix.ajax = function(action, params, success, error) {
 		contentType: isFormData ? false : 'application/json; charset=UTF-8',
 		processData: false,
 		headers: headers,
-		success: function(data, textStatus, xhr) {
-			Rhymix._ajaxSuccessHandler(xhr, textStatus, action, data, params, success, error);
-		},
-		error: function(xhr, textStatus, errorThrown) {
-			Rhymix._ajaxErrorHandler(xhr, textStatus, action, url, params, success, error);
-		}
 	};
 
-	// Send the AJAX request
-	try {
-		$.ajax(args);
-	} catch(e) {
-		alert(e);
+	// Split between Promise version and callback version
+	if ($.isFunction(success) || $.isFunction(error)) {
+		try {
+			$.ajax($.extend(args, {
+				success: function(data, textStatus, xhr) {
+					Rhymix._ajaxSuccessHandler(xhr, textStatus, action, data, params, success, error);
+				},
+				error: function(xhr, textStatus, errorThrown) {
+					Rhymix._ajaxErrorHandler(xhr, textStatus, action, url, params, success, error);
+				}
+			}));
+		} catch(e) {
+			alert(e);
+		}
+	} else {
+		return new Promise(function(resolve, reject) {
+			const rejectWrapper = function(data, xhr) {
+				reject(data, xhr);
+				return false;
+			};
+			$.ajax($.extend(args, {
+				success: function(data, textStatus, xhr) {
+					Rhymix._ajaxSuccessHandler(xhr, textStatus, action, data, params, resolve, rejectWrapper);
+				},
+				error: function(xhr, textStatus, errorThrown) {
+					Rhymix._ajaxErrorHandler(xhr, textStatus, action, url, params, resolve, rejectWrapper);
+				}
+			}));
+		});
 	}
 };
 

From 5cb4a001136d4f66e88e368aa8f5f93f3a850235 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Fri, 13 Jun 2025 16:44:58 +0900
Subject: [PATCH 08/48] Remove unncessary async keyword

---
 common/js/common.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/common/js/common.js b/common/js/common.js
index 0e9ef1b9e..419b41a97 100644
--- a/common/js/common.js
+++ b/common/js/common.js
@@ -402,7 +402,7 @@ Rhymix.modal.close = function(id) {
  * @param function error
  * @return void
  */
-Rhymix.ajax = async function(action, params, success, error) {
+Rhymix.ajax = function(action, params, success, error) {
 
 	// Extract module and act
 	let isFormData = params instanceof FormData;

From dc21fc3007e76a1a13ca10fcf7fa8666e959d2c4 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Fri, 13 Jun 2025 16:54:06 +0900
Subject: [PATCH 09/48] Add polyfill for Promise (yes, we still support IE11)

---
 classes/display/HTMLDisplayHandler.php | 16 +++++++++++-----
 common/js/polyfills/promise.min.js     |  1 +
 2 files changed, 12 insertions(+), 5 deletions(-)
 create mode 100644 common/js/polyfills/promise.min.js

diff --git a/classes/display/HTMLDisplayHandler.php b/classes/display/HTMLDisplayHandler.php
index 0246c3a87..4f7906982 100644
--- a/classes/display/HTMLDisplayHandler.php
+++ b/classes/display/HTMLDisplayHandler.php
@@ -757,13 +757,19 @@ class HTMLDisplayHandler
 			'plugins/cookie/js.cookie.min.js',
 			'plugins/blankshield/blankshield.min.js',
 			'plugins/uri/URI.min.js',
-			'x.js',
-			'common.js',
-			'js_app.js',
-			'xml_handler.js',
-			'xml_js_filter.js',
 		);
 
+		if (str_contains($_SERVER['HTTP_USER_AGENT'] ?? '', 'Trident/'))
+		{
+			$original_file_list[] = 'polyfills/promise.min.js';
+		}
+
+		$original_file_list[] = 'x.js';
+		$original_file_list[] = 'common.js';
+		$original_file_list[] = 'js_app.js';
+		$original_file_list[] = 'xml_handler.js';
+		$original_file_list[] = 'xml_js_filter.js';
+
 		if(config('view.minify_scripts') === 'none')
 		{
 			Context::loadFile(array('./common/js/jquery-' . $jquery_version . '.js', 'head', '', -1800000000), true);
diff --git a/common/js/polyfills/promise.min.js b/common/js/polyfills/promise.min.js
new file mode 100644
index 000000000..886e0291a
--- /dev/null
+++ b/common/js/polyfills/promise.min.js
@@ -0,0 +1 @@
+!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t():"function"==typeof define&&define.amd?define(t):t()}(0,function(){"use strict";function e(e){var t=this.constructor;return this.then(function(n){return t.resolve(e()).then(function(){return n})},function(n){return t.resolve(e()).then(function(){return t.reject(n)})})}function t(e){return new this(function(t,n){function r(e,n){if(n&&("object"==typeof n||"function"==typeof n)){var f=n.then;if("function"==typeof f)return void f.call(n,function(t){r(e,t)},function(n){o[e]={status:"rejected",reason:n},0==--i&&t(o)})}o[e]={status:"fulfilled",value:n},0==--i&&t(o)}if(!e||"undefined"==typeof e.length)return n(new TypeError(typeof e+" "+e+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var o=Array.prototype.slice.call(e);if(0===o.length)return t([]);for(var i=o.length,f=0;o.length>f;f++)r(f,o[f])})}function n(e,t){this.name="AggregateError",this.errors=e,this.message=t||""}function r(e){var t=this;return new t(function(r,o){if(!e||"undefined"==typeof e.length)return o(new TypeError("Promise.any accepts an array"));var i=Array.prototype.slice.call(e);if(0===i.length)return o();for(var f=[],u=0;i.length>u;u++)try{t.resolve(i[u]).then(r)["catch"](function(e){f.push(e),f.length===i.length&&o(new n(f,"All promises were rejected"))})}catch(c){o(c)}})}function o(e){return!(!e||"undefined"==typeof e.length)}function i(){}function f(e){if(!(this instanceof f))throw new TypeError("Promises must be constructed via new");if("function"!=typeof e)throw new TypeError("not a function");this._state=0,this._handled=!1,this._value=undefined,this._deferreds=[],s(e,this)}function u(e,t){for(;3===e._state;)e=e._value;0!==e._state?(e._handled=!0,f._immediateFn(function(){var n=1===e._state?t.onFulfilled:t.onRejected;if(null!==n){var r;try{r=n(e._value)}catch(o){return void a(t.promise,o)}c(t.promise,r)}else(1===e._state?c:a)(t.promise,e._value)})):e._deferreds.push(t)}function c(e,t){try{if(t===e)throw new TypeError("A promise cannot be resolved with itself.");if(t&&("object"==typeof t||"function"==typeof t)){var n=t.then;if(t instanceof f)return e._state=3,e._value=t,void l(e);if("function"==typeof n)return void s(function(e,t){return function(){e.apply(t,arguments)}}(n,t),e)}e._state=1,e._value=t,l(e)}catch(r){a(e,r)}}function a(e,t){e._state=2,e._value=t,l(e)}function l(e){2===e._state&&0===e._deferreds.length&&f._immediateFn(function(){e._handled||f._unhandledRejectionFn(e._value)});for(var t=0,n=e._deferreds.length;n>t;t++)u(e,e._deferreds[t]);e._deferreds=null}function s(e,t){var n=!1;try{e(function(e){n||(n=!0,c(t,e))},function(e){n||(n=!0,a(t,e))})}catch(r){if(n)return;n=!0,a(t,r)}}n.prototype=Error.prototype;var d=setTimeout;f.prototype["catch"]=function(e){return this.then(null,e)},f.prototype.then=function(e,t){var n=new this.constructor(i);return u(this,new function(e,t,n){this.onFulfilled="function"==typeof e?e:null,this.onRejected="function"==typeof t?t:null,this.promise=n}(e,t,n)),n},f.prototype["finally"]=e,f.all=function(e){return new f(function(t,n){function r(e,o){try{if(o&&("object"==typeof o||"function"==typeof o)){var u=o.then;if("function"==typeof u)return void u.call(o,function(t){r(e,t)},n)}i[e]=o,0==--f&&t(i)}catch(c){n(c)}}if(!o(e))return n(new TypeError("Promise.all accepts an array"));var i=Array.prototype.slice.call(e);if(0===i.length)return t([]);for(var f=i.length,u=0;i.length>u;u++)r(u,i[u])})},f.any=r,f.allSettled=t,f.resolve=function(e){return e&&"object"==typeof e&&e.constructor===f?e:new f(function(t){t(e)})},f.reject=function(e){return new f(function(t,n){n(e)})},f.race=function(e){return new f(function(t,n){if(!o(e))return n(new TypeError("Promise.race accepts an array"));for(var r=0,i=e.length;i>r;r++)f.resolve(e[r]).then(t,n)})},f._immediateFn="function"==typeof setImmediate&&function(e){setImmediate(e)}||function(e){d(e,0)},f._unhandledRejectionFn=function(e){void 0!==console&&console&&console.warn("Possible Unhandled Promise Rejection:",e)};var p=function(){if("undefined"!=typeof self)return self;if("undefined"!=typeof window)return window;if("undefined"!=typeof global)return global;throw Error("unable to locate global object")}();"function"!=typeof p.Promise?p.Promise=f:(p.Promise.prototype["finally"]||(p.Promise.prototype["finally"]=e),p.Promise.allSettled||(p.Promise.allSettled=t),p.Promise.any||(p.Promise.any=r))});

From 82feb232f67e5281efe57b27450e9d8f2bdf07ce Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Fri, 13 Jun 2025 17:31:44 +0900
Subject: [PATCH 10/48] WIP

---
 common/js/common.js | 61 +++++++++++++++++++++------------------------
 1 file changed, 29 insertions(+), 32 deletions(-)

diff --git a/common/js/common.js b/common/js/common.js
index 419b41a97..e2d49fbff 100644
--- a/common/js/common.js
+++ b/common/js/common.js
@@ -464,36 +464,33 @@ Rhymix.ajax = function(action, params, success, error) {
 		headers: headers,
 	};
 
-	// Split between Promise version and callback version
-	if ($.isFunction(success) || $.isFunction(error)) {
-		try {
-			$.ajax($.extend(args, {
-				success: function(data, textStatus, xhr) {
-					Rhymix._ajaxSuccessHandler(xhr, textStatus, action, data, params, success, error);
-				},
-				error: function(xhr, textStatus, errorThrown) {
-					Rhymix._ajaxErrorHandler(xhr, textStatus, action, url, params, success, error);
-				}
-			}));
-		} catch(e) {
-			alert(e);
-		}
-	} else {
-		return new Promise(function(resolve, reject) {
-			const rejectWrapper = function(data, xhr) {
-				reject(data, xhr);
+	return new Promise(function(resolve, reject) {
+		const resolveWrapper = function(data, xhr) {
+			if (typeof success === 'function') {
+				success(data, xhr);
+			}
+			if (resolve) {
+				resolve(data);
+			}
+		};
+		const rejectWrapper = function(data, xhr) {
+			if (typeof error === 'function' && error(data, xhr) === false) {
 				return false;
-			};
-			$.ajax($.extend(args, {
-				success: function(data, textStatus, xhr) {
-					Rhymix._ajaxSuccessHandler(xhr, textStatus, action, data, params, resolve, rejectWrapper);
-				},
-				error: function(xhr, textStatus, errorThrown) {
-					Rhymix._ajaxErrorHandler(xhr, textStatus, action, url, params, resolve, rejectWrapper);
-				}
-			}));
-		});
-	}
+			}
+			if (reject) {
+				reject(data);
+				return false;
+			}
+		};
+		$.ajax($.extend(args, {
+			success: function(data, textStatus, xhr) {
+				Rhymix._ajaxSuccessHandler(xhr, textStatus, action, data, params, resolveWrapper, rejectWrapper);
+			},
+			error: function(xhr, textStatus, errorThrown) {
+				Rhymix._ajaxErrorHandler(xhr, textStatus, action, url, params, resolveWrapper, rejectWrapper);
+			}
+		}));
+	});
 };
 
 /**
@@ -524,7 +521,7 @@ Rhymix._ajaxSuccessHandler = function(xhr, textStatus, action, data, params, suc
 	if (typeof data.error !== 'undefined' && data.error != 0) {
 
 		// If an error callback is defined, call it. Abort if it returns false.
-		if ($.isFunction(error) && error(data, xhr) === false) {
+		if (typeof error === 'function' && error(data, xhr) === false) {
 			return;
 		}
 
@@ -551,7 +548,7 @@ Rhymix._ajaxSuccessHandler = function(xhr, textStatus, action, data, params, suc
 	}
 
 	// If a success callback was defined, call it.
-	if ($.isFunction(success)) {
+	if (typeof success === 'function') {
 		success(data, xhr);
 		return;
 	}
@@ -595,7 +592,7 @@ Rhymix._ajaxErrorHandler = function(xhr, textStatus, action, url, params, succes
 	}
 
 	// If an error callback is defined, call it. Abort if it returns false.
-	if ($.isFunction(error)) {
+	if (typeof error === 'function') {
 		let fakedata = { error: -3, message: textStatus };
 		if (error(fakedata, xhr) === false) {
 			return;

From c949e797b0adb68bf64ce45ab0dc5216786a6a04 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Sat, 14 Jun 2025 12:16:31 +0900
Subject: [PATCH 11/48] Separate default value from options in member extra
 vars, too

---
 modules/member/member.admin.controller.php  | 26 ++++++----
 modules/member/member.admin.model.php       | 21 ++++++--
 modules/member/member.admin.view.php        |  3 +-
 modules/member/member.class.php             |  9 ++++
 modules/member/member.controller.php        |  4 +-
 modules/member/member.model.php             | 54 +++++++++++++--------
 modules/member/member.view.php              |  1 +
 modules/member/queries/insertJoinForm.xml   |  1 +
 modules/member/queries/updateJoinForm.xml   |  1 +
 modules/member/schemas/member_join_form.xml |  1 +
 modules/member/tpl/insert_join_form.html    | 15 ++++--
 11 files changed, 92 insertions(+), 44 deletions(-)

diff --git a/modules/member/member.admin.controller.php b/modules/member/member.admin.controller.php
index bde74ac60..f9ee4c530 100644
--- a/modules/member/member.admin.controller.php
+++ b/modules/member/member.admin.controller.php
@@ -878,21 +878,27 @@ class MemberAdminController extends Member
 		$args->column_type = Context::get('column_type');
 		$args->column_name = strtolower(Context::get('column_id'));
 		$args->column_title = Context::get('column_title');
-		$args->default_value = explode("\n", str_replace("\r", '', Context::get('default_value')));
-		$args->required = Context::get('required');
-		$args->is_active = (isset($args->required));
-		if(!in_array(strtoupper($args->required), array('Y','N')))$args->required = 'N';
-		$args->description = Context::get('description') ? Context::get('description') : '';
-		// Default values
-		if(in_array($args->column_type, array('checkbox','select','radio')) && count($args->default_value))
+		$args->default_value = trim(utf8_clean(Context::get('default_value')));
+		$args->options = trim(utf8_clean(Context::get('options')));
+		if ($args->options !== '')
 		{
-			$args->default_value = serialize($args->default_value);
+			$args->options = array_map('trim', explode("\n", $args->options));
+			$args->options = json_encode($args->options, \JSON_UNESCAPED_UNICODE | \JSON_UNESCAPED_SLASHES);
 		}
 		else
 		{
-			$args->default_value = '';
+			$args->options = null;
 		}
 
+		$args->required = Context::get('required');
+		if (!in_array(strtoupper($args->required), array('Y','N')))
+		{
+			$args->required = 'N';
+		}
+
+		$args->is_active = (isset($args->required));
+		$args->description = Context::get('description') ? Context::get('description') : '';
+
 		// Check ID duplicated
 		if (Context::isReservedWord($args->column_name))
 		{
@@ -909,7 +915,7 @@ class MemberAdminController extends Member
 			}
 		}
 		// Fix if member_join_form_srl exists. Add if not exists.
-		$isInsert;
+		$isInsert = false;
 		if(!$args->member_join_form_srl)
 		{
 			$isInsert = true;
diff --git a/modules/member/member.admin.model.php b/modules/member/member.admin.model.php
index 4a3b9c23e..18f434a03 100644
--- a/modules/member/member.admin.model.php
+++ b/modules/member/member.admin.model.php
@@ -288,13 +288,24 @@ class MemberAdminModel extends Member
 		if($output->toBool() && $output->data)
 		{
 			$formInfo = $output->data;
-			$default_value = $formInfo->default_value;
-			if($default_value)
+			$default_value = '';
+			$options = '';
+			if (isset($formInfo->options) && $formInfo->options !== '')
 			{
-				$default_value = unserialize($default_value);
-				Context::set('default_value', $default_value);
+				$default_value = $formInfo->default_value;
+				$options = json_decode($formInfo->options, true);
+			}
+			elseif (preg_match('/^a:\d+:\{i:/', $formInfo->default_value))
+			{
+				$options = unserialize($formInfo->default_value);
+			}
+			else
+			{
+				$default_value = $formInfo->default_value;
 			}
 			Context::set('formInfo', $output->data);
+			Context::set('default_value', $default_value);
+			Context::set('options', $options);
 		}
 
 		$oMemberModel = getModel('member');
@@ -314,7 +325,7 @@ class MemberAdminModel extends Member
 		$oTemplate = TemplateHandler::getInstance();
 		$tpl = $oTemplate->compile($this->module_path.'tpl', 'insert_join_form');
 
-		$this->add('tpl', str_replace("\n"," ",$tpl));
+		$this->add('tpl', $tpl);
 	}
 
 	/**
diff --git a/modules/member/member.admin.view.php b/modules/member/member.admin.view.php
index 88b44d034..0b46709f2 100644
--- a/modules/member/member.admin.view.php
+++ b/modules/member/member.admin.view.php
@@ -486,7 +486,7 @@ class MemberAdminView extends Member
 	{
 		$extend_form_list = MemberModel::getCombineJoinForm($memberInfo);
 		$security = new Security($extend_form_list);
-		$security->encodeHTML('..column_title', '..description', '..default_value.');
+		$security->encodeHTML('..column_title', '..description', '..default_value', '..options.');
 
 		if ($memberInfo)
 		{
@@ -725,6 +725,7 @@ class MemberAdminView extends Member
 					$input->input_id = $extendForm->column_name;
 					$input->value = $extendForm->value ?? '';
 					$input->default = $extendForm->default_value ?? null;
+					$input->options = $extendForm->options ?? null;
 					if ($extendForm->column_type === 'tel' || $extendForm->column_type === 'tel_intl')
 					{
 						$input->style = 'width:33.3px';
diff --git a/modules/member/member.class.php b/modules/member/member.class.php
index daf61158d..32cf596b2 100644
--- a/modules/member/member.class.php
+++ b/modules/member/member.class.php
@@ -167,6 +167,9 @@ class Member extends ModuleObject
 		if(!$oDB->isIndexExists('member_auth_mail', 'idx_member_srl')) return true;
 		if($oDB->isIndexExists('member_auth_mail', 'unique_key')) return true;
 
+		// Check join form options column
+		if(!$oDB->isColumnExists('member_join_form', 'options')) return true;
+
 		// Update status column
 		$output = executeQuery('member.getDeniedAndStatus');
 		if ($output->data->count)
@@ -403,6 +406,12 @@ class Member extends ModuleObject
 			$oDB->dropIndex('member_auth_mail', 'unique_key');
 		}
 
+		// Check join form options column
+		if(!$oDB->isColumnExists('member_join_form', 'options'))
+		{
+			$oDB->addColumn('member_join_form', 'options', 'text', null, null, null, 'default_value');
+		}
+
 		// Update status column
 		$output = executeQuery('member.getDeniedAndStatus');
 		if ($output->data->count)
diff --git a/modules/member/member.controller.php b/modules/member/member.controller.php
index 9e2a488e8..26b3ea4d4 100644
--- a/modules/member/member.controller.php
+++ b/modules/member/member.controller.php
@@ -2871,7 +2871,7 @@ class MemberController extends Member
 
 		$extend_form_list = MemberModel::getJoinFormlist();
 		$security = new Security($extend_form_list);
-		$security->encodeHTML('..column_title', '..description', '..default_value.');
+		$security->encodeHTML('..column_title', '..description', '..default_value', '..options.');
 		if($config->signupForm)
 		{
 			foreach($config->signupForm as $no => $formInfo)
@@ -3167,7 +3167,7 @@ class MemberController extends Member
 
 		$extend_form_list = MemberModel::getJoinFormlist();
 		$security = new Security($extend_form_list);
-		$security->encodeHTML('..column_title', '..description', '..default_value.');
+		$security->encodeHTML('..column_title', '..description', '..default_value', '..options.');
 		if($config->signupForm)
 		{
 			foreach($config->signupForm as $no => $formInfo)
diff --git a/modules/member/member.model.php b/modules/member/member.model.php
index 03013abe2..2cdda377e 100644
--- a/modules/member/member.model.php
+++ b/modules/member/member.model.php
@@ -806,31 +806,38 @@ class MemberModel extends Member
 			if(!$join_form_list) return NULL;
 			// Need to unserialize because serialized array is inserted into DB in case of default_value
 			if(!is_array($join_form_list)) $join_form_list = array($join_form_list);
-			$join_form_count = count($join_form_list);
-			for($i=0;$i<$join_form_count;$i++)
+			foreach ($join_form_list as $i => $join_form)
 			{
-				$join_form_list[$i]->column_name = strtolower($join_form_list[$i]->column_name);
+				$join_form->column_name = strtolower($join_form->column_name);
 
-				$member_join_form_srl = $join_form_list[$i]->member_join_form_srl;
-				$column_type = $join_form_list[$i]->column_type;
-				$column_name = $join_form_list[$i]->column_name;
-				$column_title = $join_form_list[$i]->column_title;
-				$default_value = $join_form_list[$i]->default_value;
 				// Add language variable
-				if(!isset($lang->extend_vars)) $lang->extend_vars = array();
-				$lang->extend_vars[$column_name] = $column_title;
-				// unserialize if the data type if checkbox, select and so on
-				if(in_array($column_type, array('checkbox','select','radio')))
+				$column_name = $join_form->column_name;
+				$column_title = $join_form->column_title;
+				if (!isset($lang->extend_vars))
 				{
-					$join_form_list[$i]->default_value = unserialize($default_value);
-					if(!$join_form_list[$i]->default_value[0]) $join_form_list[$i]->default_value = '';
+					$lang->extend_vars = array();
+				}
+				$lang->extend_vars[$column_name] = $column_title;
+
+				// unserialize if the data type if checkbox, select and so on
+				if (in_array($join_form->column_type, ['checkbox','select','radio']))
+				{
+					if (isset($join_form->options) && $join_form->options !== '')
+					{
+						$join_form->options = json_decode($join_form->options, true);
+					}
+					elseif (preg_match('/^a:\d+:\{i:/', $join_form->default_value))
+					{
+						$join_form->options = unserialize($join_form->default_value);
+						$join_form->default_value = '';
+					}
 				}
 				else
 				{
-					$join_form_list[$i]->default_value = '';
+					$join_form->default_value = '';
 				}
 
-				$list[$member_join_form_srl] = $join_form_list[$i];
+				$list[$join_form->member_join_form_srl] = $join_form;
 			}
 			self::$_join_form_list = $list;
 		}
@@ -958,12 +965,17 @@ class MemberModel extends Member
 		$join_form = $output->data;
 		if(!$join_form) return NULL;
 
-		$column_type = $join_form->column_type;
-		$default_value = $join_form->default_value;
-
-		if(in_array($column_type, array('checkbox','select','radio')))
+		if (in_array($join_form->column_type, ['checkbox','select','radio']))
 		{
-			$join_form->default_value = unserialize($default_value);
+			if (isset($join_form->options) && $join_form->options !== '')
+			{
+				$join_form->options = json_decode($join_form->options, true);
+			}
+			elseif (preg_match('/^a:\d+:\{i:/', $join_form->default_value))
+			{
+				$join_form->options = unserialize($join_form->default_value);
+				$join_form->default_value = '';
+			}
 		}
 		else
 		{
diff --git a/modules/member/member.view.php b/modules/member/member.view.php
index d6afba4af..9523b6cc6 100644
--- a/modules/member/member.view.php
+++ b/modules/member/member.view.php
@@ -280,6 +280,7 @@ class MemberView extends Member
 				$extvalue->input_id = $formInfo->name;
 				$extvalue->value = $extendFormInfo[$formInfo->member_join_form_srl]->value ?? null;
 				$extvalue->default = $extendFormInfo[$formInfo->member_join_form_srl]->default_value ?? null;
+				$extvalue->options = $extendFormInfo[$formInfo->member_join_form_srl]->options ?? null;
 				$item->value = $extvalue->getValueHTML();
 			}
 
diff --git a/modules/member/queries/insertJoinForm.xml b/modules/member/queries/insertJoinForm.xml
index 808ff4160..9b8be3c54 100644
--- a/modules/member/queries/insertJoinForm.xml
+++ b/modules/member/queries/insertJoinForm.xml
@@ -9,6 +9,7 @@
         <column name="column_title" var="column_title" />
         <column name="required" var="required" default="N" />
         <column name="default_value" var="default_value" />
+		<column name="options" var="options" />
         <column name="is_active" var="is_active" default="N" />
         <column name="description" var="description" />
         <column name="regdate" default="curdate()" />
diff --git a/modules/member/queries/updateJoinForm.xml b/modules/member/queries/updateJoinForm.xml
index 5b6082682..3d18f78bc 100644
--- a/modules/member/queries/updateJoinForm.xml
+++ b/modules/member/queries/updateJoinForm.xml
@@ -8,6 +8,7 @@
         <column name="column_title" var="column_title" />
         <column name="required" var="required" default="N" />
         <column name="default_value" var="default_value" />
+		<column name="options" var="options" />
         <column name="is_active" var="is_active" default="N" />
         <column name="description" var="description" />
     </columns>
diff --git a/modules/member/schemas/member_join_form.xml b/modules/member/schemas/member_join_form.xml
index e69076e8f..9c3e8f5e3 100644
--- a/modules/member/schemas/member_join_form.xml
+++ b/modules/member/schemas/member_join_form.xml
@@ -5,6 +5,7 @@
     <column name="column_title" type="varchar" size="60" notnull="notnull" />
     <column name="required" type="char" size="1" default="N" notnull="notnull" />
     <column name="default_value" type="text" />
+	<column name="options" type="text" />
     <column name="is_active" type="char" size="1" default="Y" />
     <column name="description" type="text" />
     <column name="list_order" type="number" size="11" notnull="notnull" default="1" index="idx_list_order" />
diff --git a/modules/member/tpl/insert_join_form.html b/modules/member/tpl/insert_join_form.html
index 18f2a4c21..d59983f12 100644
--- a/modules/member/tpl/insert_join_form.html
+++ b/modules/member/tpl/insert_join_form.html
@@ -26,11 +26,17 @@
 				</select>
 			</div>
 		</div>
-		<div class="x_control-group multiExample">
-			<label for="multiSelect" class="x_control-label"><em style="color:red">*</em> {$lang->options}</label>
+		<div class="x_control-group">
+			<label for="default_value" class="x_control-label"> {$lang->default_value}</label>
 			<div class="x_controls">
-				<textarea rows="4" cols="42" id="multiSelect" name="default_value" style="vertical-align:top"><block cond="$default_value">{implode('|@|', $default_value)}</block></textarea>
-				<p class="x_help-inline">{$lang->about_multi_type}</p>
+				<input type="text" id="default_value" name="default_value" value="{$default_value}" />
+			</div>
+		</div>
+		<div class="x_control-group multiExample">
+			<label for="multiSelect" class="x_control-label"> {$lang->options}</label>
+			<div class="x_controls">
+				<textarea rows="4" cols="42" id="multiSelect" name="options" style="vertical-align:top"><block cond="$options">{implode("\n", $options)}</block></textarea>
+				<p class="x_help-block">{$lang->about_multi_type}</p>
 			</div>
 		</div>
 		<div class="x_control-group">
@@ -51,7 +57,6 @@
 		<span class="x_pull-right"><button class="x_btn x_btn-primary" type="submit" name="mode" <!--@if($formInfo)-->value="update"<!--@else-->value="insert"<!--@end--> >{$lang->cmd_save}</button></span>
 	</div>
 <script>
-	var $ = jQuery;
 	var typeSelect = $('.typeSelect');
 	var multiOption = $('.typeSelect>option[value=checkbox], .typeSelect>option[value=radio], .typeSelect>option[value=select_multiple], .typeSelect>option[value=select]');
 	var multiExample = $('.multiExample');

From b15fc8deb3b8d3aa42927b3fdf2c16a511cf8237 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Sat, 14 Jun 2025 12:19:42 +0900
Subject: [PATCH 12/48] Fix not_member granted menu showing up as group
 restricted

---
 modules/menu/menu.admin.model.php | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/modules/menu/menu.admin.model.php b/modules/menu/menu.admin.model.php
index d9461460d..4f4907675 100644
--- a/modules/menu/menu.admin.model.php
+++ b/modules/menu/menu.admin.model.php
@@ -216,6 +216,10 @@ class MenuAdminModel extends Menu
 			{
 				$menuItem->grant = 'manager';
 			}
+			else if($menuItem->group_srls[0] == -4)
+			{
+				$menuItem->grant = 'not_member';
+			}
 			else
 			{
 				$menuItem->grant = 'group';

From 3c44f96f63edeb9b68bac96c263efd7f4612249f Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Sat, 14 Jun 2025 13:49:48 +0900
Subject: [PATCH 13/48] Fix empty procDocumentAddCart request (2.1.24
 regression) #2568

---
 common/js/common.js                      | 16 ++++++++++------
 modules/document/document.controller.php | 23 +++++++++++++++--------
 2 files changed, 25 insertions(+), 14 deletions(-)

diff --git a/common/js/common.js b/common/js/common.js
index 9033e49e2..dda9ae1ed 100644
--- a/common/js/common.js
+++ b/common/js/common.js
@@ -653,7 +653,7 @@ Rhymix.ajaxForm = function(form, success, error) {
  * @return void
  */
 Rhymix.checkboxToggleAll = function(name) {
-	if (!window[name]) {
+	if (typeof name === 'undefined') {
 		name='cart';
 	}
 	let options = {
@@ -1457,12 +1457,16 @@ function popopen(url, target) {
  * @return void
  */
 function doAddDocumentCart(obj) {
-	Rhymix.addedDocument.push(obj.value);
+	if (obj && obj.value) {
+		Rhymix.addedDocument.push(obj.value);
+	}
 	setTimeout(function() {
-		exec_json('document.procDocumentAddCart', {
-			srls: Rhymix.addedDocument.join(',')
-		});
-		Rhymix.addedDocument = [];
+		if (Rhymix.addedDocument.length > 0) {
+			exec_json('document.procDocumentAddCart', {
+				srls: Rhymix.addedDocument
+			});
+			Rhymix.addedDocument = [];
+		}
 	}, 100);
 }
 
diff --git a/modules/document/document.controller.php b/modules/document/document.controller.php
index 0bc2dc7c9..418857e29 100644
--- a/modules/document/document.controller.php
+++ b/modules/document/document.controller.php
@@ -3301,16 +3301,23 @@ class DocumentController extends Document
 		}
 
 		// Get document_srl
-		$srls = explode(',',Context::get('srls'));
-		for($i = 0; $i < count($srls); $i++)
+		$srls = Context::get('srls');
+		if (is_array($srls))
 		{
-			$srl = trim($srls[$i]);
-
-			if(!$srl) continue;
-
-			$document_srls[] = $srl;
+			$document_srls = array_map('intval', $srls);
+		}
+		else
+		{
+			$document_srls = array_map('intval', explode(',', $srls));
+		}
+
+		$document_srls = array_unique(array_filter($document_srls, function($srl) {
+			return $srl > 0;
+		}));
+		if (!count($document_srls))
+		{
+			return;
 		}
-		if(!count($document_srls)) return;
 
 		// Get module_srl of the documents
 		$args = new stdClass;

From 388091ed826bd54b50cdfbdf0dc827ef2b7c347b Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Sat, 14 Jun 2025 13:52:14 +0900
Subject: [PATCH 14/48] Fix incorrect migration of is_def() from previous
 version

---
 common/js/common.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/common/js/common.js b/common/js/common.js
index dda9ae1ed..ebe57c415 100644
--- a/common/js/common.js
+++ b/common/js/common.js
@@ -1012,7 +1012,7 @@ $(function() {
 		e.preventDefault();
 		e.stopPropagation();
 
-		if (window[Rhymix.loadedPopupMenus[params.menu_id]]) {
+		if (Rhymix.loadedPopupMenus[params.menu_id]) {
 			return Rhymix.displayPopupMenu(params, response_tags, params);
 		}
 

From 20f6703f794c6d1e48977b130bb71b5a0fef6172 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Sat, 14 Jun 2025 15:53:43 +0900
Subject: [PATCH 15/48] Revert "Call Rhymix.ajax() in procFilter()"

Don't call new function from legacy function

This reverts commit 64f0ffbd91750c03acb5a3a4a3c82c042e25e6dd.
---
 common/js/xml_js_filter.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/common/js/xml_js_filter.js b/common/js/xml_js_filter.js
index 83459d213..414c175d8 100644
--- a/common/js/xml_js_filter.js
+++ b/common/js/xml_js_filter.js
@@ -467,13 +467,13 @@ function legacy_filter(filter_name, form, module, act, callback, responses, conf
 		};
 
 		if (!hasFile) {
-			Rhymix.ajax(module + '.' + act, params, callback_wrapper);
+			exec_json(module + '.' + act, params, callback_wrapper);
 		} else {
 			var fd = new FormData();
 			for (let key in params) {
 				fd.append(key, params[key]);
 			}
-			Rhymix.ajax(null, fd, callback_wrapper);
+			exec_json('raw', fd, callback_wrapper);
 		}
 	};
 

From c85544089360075e2a5f8239587ce81647207788 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Sat, 14 Jun 2025 16:29:41 +0900
Subject: [PATCH 16/48] Change number extravar input to <input type="text"
 inputmode="numeric">

---
 modules/extravar/skins/default/form_types/text.blade.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/extravar/skins/default/form_types/text.blade.php b/modules/extravar/skins/default/form_types/text.blade.php
index ca9122298..89360188f 100644
--- a/modules/extravar/skins/default/form_types/text.blade.php
+++ b/modules/extravar/skins/default/form_types/text.blade.php
@@ -17,7 +17,7 @@
 		@readonly(toBool($definition->is_readonly))
 	/>
 @elseif ($type === 'number')
-	<input type="number" name="{{ $input_name }}"
+	<input type="text" inputmode="numeric" name="{{ $input_name }}"
 		id="{{ $input_id }}"|if="$input_id" class="number rx_ev_number"
 		style="{{ $definition->style }}"|if="$definition->style"
 		value="{{ strval($value) !== '' ? $value : strval($default) }}"

From f29080bb62cfc4afa7166c6929b717fc5ef44ada Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Sat, 14 Jun 2025 16:35:46 +0900
Subject: [PATCH 17/48] Disable autocomplete and autocapitalize for password
 extravar input

---
 modules/extravar/skins/default/form_types/password.blade.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/modules/extravar/skins/default/form_types/password.blade.php b/modules/extravar/skins/default/form_types/password.blade.php
index 4936c05bd..d304e691e 100644
--- a/modules/extravar/skins/default/form_types/password.blade.php
+++ b/modules/extravar/skins/default/form_types/password.blade.php
@@ -2,6 +2,7 @@
 	id="{{ $input_id }}"|if="$input_id" class="password rx_ev_password"
 	style="{{ $definition->style }}"|if="$definition->style"
 	value="{{ strval($value) !== '' ? $value : strval($default) }}"
+	autocomplete="off" autocapitalize="none"
 	@required(toBool($definition->is_required))
 	@disabled(toBool($definition->is_disabled))
 	@readonly(toBool($definition->is_readonly))

From 3ac26150d506c0db7ffed2c204093134064deae6 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Sat, 14 Jun 2025 16:36:03 +0900
Subject: [PATCH 18/48] Fix error when adding a new extra var

---
 modules/document/tpl/extra_keys.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/document/tpl/extra_keys.html b/modules/document/tpl/extra_keys.html
index 407d99a41..8bdb07b6d 100644
--- a/modules/document/tpl/extra_keys.html
+++ b/modules/document/tpl/extra_keys.html
@@ -61,7 +61,7 @@
 			<div class="x_control-group" data-invisible-types="file">
 				<label class="x_control-label" for="default">{$lang->default_value}</label>
 				<div class="x_controls">
-					<input type="text" name="default" id="default" value="{$selected_var->getDefaultValue()}" />
+					<input type="text" name="default" id="default" value="{$selected_var ? $selected_var->getDefaultValue() : ''}" />
 					<p class="x_help-block">{$lang->about_extra_vars_default_value}</p>
 				</div>
 			</div>

From d7fb2422feb4f5948d2123632ca21cb47aa24700 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Sun, 15 Jun 2025 01:28:45 +0900
Subject: [PATCH 19/48] Clean up extravar support script for upload type

---
 .../extravar/skins/default/assets/file_upload.js   | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/modules/extravar/skins/default/assets/file_upload.js b/modules/extravar/skins/default/assets/file_upload.js
index 878ac15af..d280ea1e9 100644
--- a/modules/extravar/skins/default/assets/file_upload.js
+++ b/modules/extravar/skins/default/assets/file_upload.js
@@ -1,16 +1,16 @@
 'use strict';
 
-(function($) {
-	$(function() {
-		$('button.evFileRemover').on('click', function() {
-			const container = $(this).parents('.ev_file_upload');
+$(function() {
+	$('.ev_file_upload').each(function() {
+		const container = $(this);
+		container.find('button.evFileRemover').on('click', function() {
 			container.find('span.filename').text('');
 			container.find('span.filesize').text('');
 			container.find('input[type=hidden][name^=_delete_]').val('Y');
 			container.find('input[type=file]').val('');
+			$(this).remove();
 		});
-		$('input.rx_ev_file').on('change', function() {
-			const container = $(this).parents('.ev_file_upload');
+		container.find('input.rx_ev_file').on('change', function() {
 			const max_size = parseInt($(this).data('allowedFilesize'), 10);
 			const file_count = this.files.length;
 			for (let i = 0; i < file_count; i++) {
@@ -23,4 +23,4 @@
 			container.find('input[type=hidden][name^=_delete_]').val('N');
 		});
 	});
-})(jQuery);
+});

From 0ea9778682f77bf400a85eb5ec191fc45ac7afa6 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Sun, 15 Jun 2025 01:33:35 +0900
Subject: [PATCH 20/48] Add script to support <input type="text"
 inputmode="numeric">

---
 modules/extravar/skins/default/assets/number.js          | 7 +++++++
 modules/extravar/skins/default/form_types/text.blade.php | 1 +
 2 files changed, 8 insertions(+)
 create mode 100644 modules/extravar/skins/default/assets/number.js

diff --git a/modules/extravar/skins/default/assets/number.js b/modules/extravar/skins/default/assets/number.js
new file mode 100644
index 000000000..eccbd7474
--- /dev/null
+++ b/modules/extravar/skins/default/assets/number.js
@@ -0,0 +1,7 @@
+'use strict';
+
+$(function() {
+	$('input.rx_ev_number').on('input', function() {
+		this.value = this.value.replace(/[^0-9]/g, '');
+	});
+});
diff --git a/modules/extravar/skins/default/form_types/text.blade.php b/modules/extravar/skins/default/form_types/text.blade.php
index 89360188f..754b6f145 100644
--- a/modules/extravar/skins/default/form_types/text.blade.php
+++ b/modules/extravar/skins/default/form_types/text.blade.php
@@ -17,6 +17,7 @@
 		@readonly(toBool($definition->is_readonly))
 	/>
 @elseif ($type === 'number')
+	@load('../assets/number.js')
 	<input type="text" inputmode="numeric" name="{{ $input_name }}"
 		id="{{ $input_id }}"|if="$input_id" class="number rx_ev_number"
 		style="{{ $definition->style }}"|if="$definition->style"

From ad6aeb4c006933eb4dd83dd89d9f3b9ff868b152 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Mon, 16 Jun 2025 10:22:13 +0900
Subject: [PATCH 21/48] Fix incorrect pattern due to template syntax

---
 modules/extravar/skins/default/form_types/datetime.blade.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/modules/extravar/skins/default/form_types/datetime.blade.php b/modules/extravar/skins/default/form_types/datetime.blade.php
index dfa97f589..0448cf86c 100644
--- a/modules/extravar/skins/default/form_types/datetime.blade.php
+++ b/modules/extravar/skins/default/form_types/datetime.blade.php
@@ -7,7 +7,7 @@
 		value="{{ $value }}"
 	/>
 	<input type="date" class="date" value="{{ $formatted_value }}"
-		pattern="\d{4}-\d{2}-\d{2}" placeholder="YYYY-MM-DD"
+		pattern="\d\d\d\d-\d\d-\d\d" placeholder="YYYY-MM-DD"
 		style="{{ $definition->style }}"|if="$definition->style"
 		onchange="jQuery(this).prev('.rx_ev_date').val(this.value.replace(/-/g, ''));"
 		@required(toBool($definition->is_required))
@@ -21,7 +21,7 @@
 @else
 	<input type="time" name="{{ $input_name }}"
 		id="{{ $input_id }}"|if="$input_id" class="rx_ev_time"
-		value="{{ $value }}" pattern="\d{2}:\d{2}"
+		value="{{ $value }}" pattern="\d\d:\d\d"
 		style="{{ $definition->style }}"|if="$definition->style"
 		@required(toBool($definition->is_required))
 		@disabled(toBool($definition->is_disabled))

From 5e9cf872e7bf2343481d899d641cbaa0aafe04e3 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Mon, 16 Jun 2025 23:36:32 +0900
Subject: [PATCH 22/48] Fix incorrect permission check when check_var is set
 but mid is not

---
 classes/module/ModuleObject.class.php | 32 ++++++++++++++++++++-------
 modules/module/models/Permission.php  |  6 ++++-
 2 files changed, 29 insertions(+), 9 deletions(-)

diff --git a/classes/module/ModuleObject.class.php b/classes/module/ModuleObject.class.php
index a736136f4..0d5b4d3d8 100644
--- a/classes/module/ModuleObject.class.php
+++ b/classes/module/ModuleObject.class.php
@@ -254,15 +254,15 @@ class ModuleObject extends BaseObject
 			// Get privileges(granted) information for target module by <permission check> of module.xml
 			if(($permission = $this->xml_info->action->{$this->act}->permission) && $permission->check_var)
 			{
-				// Check parameter
-				if(empty($check_module_srl = trim(Context::get($permission->check_var))))
+				// Ensure that the list of modules to check is the right type and not empty
+				$check_var = Context::get($permission->check_var);
+				if (is_scalar($check_var))
 				{
-					return false;
-				}
+					if (empty($check_module_srl = trim($check_var)))
+					{
+						return false;
+					}
 
-				// If value is not array
-				if(!is_array($check_module_srl))
-				{
 					// Convert string to array. delimiter is ,(comma) or |@|
 					if(preg_match('/,|\|@\|/', $check_module_srl, $delimiter) && $delimiter[0])
 					{
@@ -273,6 +273,14 @@ class ModuleObject extends BaseObject
 						$check_module_srl = array($check_module_srl);
 					}
 				}
+				else
+				{
+					$check_module_srl = array_map('trim', $check_var);
+					if (!count($check_var))
+					{
+						return false;
+					}
+				}
 
 				// Check permission by privileges(granted) information for target module
 				foreach($check_module_srl as $target_srl)
@@ -295,7 +303,15 @@ class ModuleObject extends BaseObject
 		}
 
 		// Check permission based on the grant information for the current module.
-		$grant = ModuleModel::getInstance()->getGrant($this->module_info, $this->user, $this->xml_info);
+		if (isset($check_grant))
+		{
+			$grant = $check_grant;
+		}
+		else
+		{
+			$grant = ModuleModel::getInstance()->getGrant($this->module_info, $this->user, $this->xml_info);
+		}
+
 		if(!$this->checkPermission($grant, $this->user, $failed_requirement))
 		{
 			$this->stop($this->_generatePermissionError($failed_requirement));
diff --git a/modules/module/models/Permission.php b/modules/module/models/Permission.php
index 4f680a164..eea059b84 100644
--- a/modules/module/models/Permission.php
+++ b/modules/module/models/Permission.php
@@ -103,7 +103,11 @@ class Permission
 		// Check if each permission is granted to the current user.
 		foreach ($this->_spec as $key => $requirement)
 		{
-			if ($requirement === 'guest')
+			if ($key === 'manager' && $this->manager)
+			{
+				continue;
+			}
+			elseif ($requirement === 'guest')
 			{
 				$this->{$key} = true;
 			}

From eaa0aee98854733631997dc0605078bcb4c98be9 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Tue, 17 Jun 2025 13:37:26 +0900
Subject: [PATCH 23/48] Update file count after copying document or comment
 with its files #2569

---
 modules/comment/comment.controller.php        | 35 +++++++++++++++++++
 .../comment/queries/updateUploadedCount.xml   | 11 ++++++
 modules/document/document.controller.php      | 15 ++++++--
 modules/file/file.controller.php              |  4 +++
 4 files changed, 63 insertions(+), 2 deletions(-)
 create mode 100644 modules/comment/queries/updateUploadedCount.xml

diff --git a/modules/comment/comment.controller.php b/modules/comment/comment.controller.php
index f57f067f6..3eb2baee8 100644
--- a/modules/comment/comment.controller.php
+++ b/modules/comment/comment.controller.php
@@ -2001,6 +2001,41 @@ class CommentController extends Comment
 		$this->setMessage('success_declared_cancel');
 	}
 
+	/**
+	 * Update the number of uploaded files in the comment
+	 *
+	 * @param int|array $comment_srl_list
+	 * @return void
+	 */
+	public function updateUploadedCount($comment_srl_list)
+	{
+		if (!is_array($comment_srl_list))
+		{
+			$comment_srl_list = array($comment_srl_list);
+		}
+
+		if (!count($comment_srl_list))
+		{
+			return;
+		}
+
+		$comment_srl_list = array_unique($comment_srl_list);
+
+		foreach($comment_srl_list as $comment_srl)
+		{
+			$comment_srl = (int)$comment_srl;
+			if ($comment_srl <= 0)
+			{
+				continue;
+			}
+
+			$args = new stdClass;
+			$args->comment_srl = $comment_srl;
+			$args->uploaded_count = FileModel::getFilesCount($comment_srl);
+			executeQuery('comment.updateUploadedCount', $args);
+		}
+	}
+
 	/**
 	 * Method to add a pop-up menu when clicking for displaying child comments
 	 * @param string $url
diff --git a/modules/comment/queries/updateUploadedCount.xml b/modules/comment/queries/updateUploadedCount.xml
new file mode 100644
index 000000000..9a9bfab15
--- /dev/null
+++ b/modules/comment/queries/updateUploadedCount.xml
@@ -0,0 +1,11 @@
+<query id="updateUploadedCount" action="update">
+	<tables>
+		<table name="comments" />
+	</tables>
+	<columns>
+		<column name="uploaded_count" var="uploaded_count" default="0" filter="number" />
+	</columns>
+	<conditions>
+		<condition operation="equal" column="comment_srl" var="comment_srl" filter="number" notnull="notnull" />
+	</conditions>
+</query>
diff --git a/modules/document/document.controller.php b/modules/document/document.controller.php
index 418857e29..4c281b0d4 100644
--- a/modules/document/document.controller.php
+++ b/modules/document/document.controller.php
@@ -3788,7 +3788,17 @@ Content;
 		}
 	}
 
+	/**
+	 * A typo of updateUploadedCount, maintained for backward compatibility.
+	 *
+	 * @deprecated
+	 */
 	public function updateUploaedCount($document_srl_list)
+	{
+		return $this->updateUploadedCount($document_srl_list);
+	}
+
+	public function updateUploadedCount($document_srl_list)
 	{
 		if(!is_array($document_srl_list))
 		{
@@ -3804,7 +3814,8 @@ Content;
 
 		foreach($document_srl_list as $document_srl)
 		{
-			if(!$document_srl = (int) $document_srl)
+			$document_srl = (int)$document_srl;
+			if ($document_srl <= 0)
 			{
 				continue;
 			}
@@ -3824,7 +3835,7 @@ Content;
 			return;
 		}
 
-		$this->updateUploaedCount($file->upload_target_srl);
+		$this->updateUploadedCount($file->upload_target_srl);
 	}
 
 	/**
diff --git a/modules/file/file.controller.php b/modules/file/file.controller.php
index c46e633c1..c9ae4e628 100644
--- a/modules/file/file.controller.php
+++ b/modules/file/file.controller.php
@@ -2002,6 +2002,8 @@ class FileController extends File
 		}
 
 		$this->copyFiles($obj->source->document_srl, $obj->copied->module_srl, $obj->copied->document_srl, $obj->copied->content);
+		$this->setFilesValid($obj->copied->document_srl, 'doc');
+		DocumentController::getInstance()->updateUploadedCount($obj->copied->document_srl);
 	}
 
 	function triggerAddCopyCommentByDocument(&$obj)
@@ -2012,6 +2014,8 @@ class FileController extends File
 		}
 
 		$this->copyFiles($obj->source->comment_srl, $obj->copied->module_srl, $obj->copied->comment_srl, $obj->copied->content);
+		$this->setFilesValid($obj->copied->comment_srl, 'com');
+		CommentController::getInstance()->updateUploadedCount($obj->copied->comment_srl);
 	}
 
 	function triggerCopyModule(&$obj)

From 170aab3ca8ec742f1e42576a2ad4aa6a43a1242b Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Tue, 17 Jun 2025 17:08:16 +0900
Subject: [PATCH 24/48] Fix exposure of menu items that should be visible only
 to non-members

---
 modules/menu/menu.admin.controller.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/modules/menu/menu.admin.controller.php b/modules/menu/menu.admin.controller.php
index 137be685e..0c999346e 100644
--- a/modules/menu/menu.admin.controller.php
+++ b/modules/menu/menu.admin.controller.php
@@ -2003,7 +2003,7 @@ class MenuAdminController extends Menu
 			// If the value of node->group_srls exists
 			if($node->group_srls) {
 				$group_srls_exported = json_encode(array_values(is_array($node->group_srls) ? $node->group_srls : array_map('intval', explode(',', $node->group_srls))));
-				$group_check_code = sprintf('($is_admin==true||(is_array($group_srls)&&count(array_intersect($group_srls, %s)))||($is_logged&&%s))', $group_srls_exported, $node->group_srls == '-1' ? 1 : 0);
+				$group_check_code = sprintf('($is_admin==true||(is_array($group_srls)&&count(array_intersect($group_srls, %s)))||($is_logged&&%s)||(!$is_logged&&%s))', $group_srls_exported, $node->group_srls == '-1' ? 1 : 0, $node->group_srls == '-4' ? 1 : 0);
 			}
 			else
 			{
@@ -2099,7 +2099,7 @@ class MenuAdminController extends Menu
 			if($node->group_srls)
 			{
 				$group_srls_exported = json_encode(array_values(is_array($node->group_srls) ? $node->group_srls : array_map('intval', explode(',', $node->group_srls))));
-				$group_check_code = sprintf('($is_admin==true||(is_array($group_srls)&&count(array_intersect($group_srls, %s)))||($is_logged && %s))', $group_srls_exported, $node->group_srls == '-1' ? 1 : 0);
+				$group_check_code = sprintf('($is_admin==true||(is_array($group_srls)&&count(array_intersect($group_srls, %s)))||($is_logged && %s)||(!$is_logged && %s))', $group_srls_exported, $node->group_srls == '-1' ? 1 : 0, $node->group_srls == '-4' ? 1 : 0);
 			}
 			else
 			{

From dd4d4fe9799123bd8be08b5808e180fadae2754f Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Tue, 17 Jun 2025 17:15:49 +0900
Subject: [PATCH 25/48] Treat pattern attribute of form elements as JS context
 in Template v2

---
 common/framework/parsers/template/TemplateParser_v2.php | 2 +-
 tests/unit/framework/parsers/TemplateParserV2Test.php   | 8 ++++++++
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/common/framework/parsers/template/TemplateParser_v2.php b/common/framework/parsers/template/TemplateParser_v2.php
index 501845a2a..399e45d97 100644
--- a/common/framework/parsers/template/TemplateParser_v2.php
+++ b/common/framework/parsers/template/TemplateParser_v2.php
@@ -185,7 +185,7 @@ class TemplateParser_v2
 		}, $content);
 
 		// Inline scripts.
-		$content = preg_replace_callback('#(?<=\s)(href="javascript:|on[a-z]+=")([^"]*?)"#i', function($match) {
+		$content = preg_replace_callback('#(?<=\s)(href="javascript:|pattern="|on[a-z]+=")([^"]*?)"#i', function($match) {
 			return $match[1] . '<?php $this->config->context = \'JS\'; ?>' . $match[2] . '<?php $this->config->context = \'HTML\'; ?>"';
 		}, $content);
 
diff --git a/tests/unit/framework/parsers/TemplateParserV2Test.php b/tests/unit/framework/parsers/TemplateParserV2Test.php
index ce6e68ab7..d220f4da9 100644
--- a/tests/unit/framework/parsers/TemplateParserV2Test.php
+++ b/tests/unit/framework/parsers/TemplateParserV2Test.php
@@ -265,6 +265,14 @@ class TemplateParserV2Test extends \Codeception\Test\Unit
 		$target = '<div class="foo" onClick="<?php $this->config->context = \'JS\'; ?>bar.barr()<?php $this->config->context = \'HTML\'; ?>">Hello</div>';
 		$this->assertEquals($target, $this->_parse($source, true, false));
 
+		// pattern attribute in <input> tag
+		$source = '<input type="text" pattern="[a-z0-9]{4,8}" value="Hello" />';
+		$target = '<input type="text" pattern="<?php $this->config->context = \'JS\'; ?>[a-z0-9]{4,8}<?php $this->config->context = \'HTML\'; ?>" value="Hello" />';
+		$this->assertEquals($target, $this->_parse($source, true, false));
+		$source = '<input type="text" pattern="[{{ $chars }}]{4,8}" value="Hello" />';
+		$target = '<input type="text" pattern="<?php $this->config->context = \'JS\'; ?>[<?php echo $this->config->context === \'HTML\' ? htmlspecialchars($__Context->chars ?? \'\', \ENT_QUOTES, \'UTF-8\', false) : $this->_v2_escape($__Context->chars ?? \'\'); ?>]{4,8}<?php $this->config->context = \'HTML\'; ?>" value="Hello" />';
+		$this->assertEquals($target, $this->_parse($source, true, false));
+
 		// <style> tag
 		$source = '<style> body { font-size: 16px; } </style>';
 		$target = '<style<?php $this->config->context = \'CSS\'; ?>> body { font-size: 16px; } <?php $this->config->context = \'HTML\'; ?></style>';

From 18b0e28a766aa7b8070da21c1f9a85cea9628158 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Tue, 17 Jun 2025 17:16:25 +0900
Subject: [PATCH 26/48] Revert "Fix incorrect pattern due to template syntax"

This reverts commit ad6aeb4c006933eb4dd83dd89d9f3b9ff868b152.
---
 modules/extravar/skins/default/form_types/datetime.blade.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/modules/extravar/skins/default/form_types/datetime.blade.php b/modules/extravar/skins/default/form_types/datetime.blade.php
index 0448cf86c..dfa97f589 100644
--- a/modules/extravar/skins/default/form_types/datetime.blade.php
+++ b/modules/extravar/skins/default/form_types/datetime.blade.php
@@ -7,7 +7,7 @@
 		value="{{ $value }}"
 	/>
 	<input type="date" class="date" value="{{ $formatted_value }}"
-		pattern="\d\d\d\d-\d\d-\d\d" placeholder="YYYY-MM-DD"
+		pattern="\d{4}-\d{2}-\d{2}" placeholder="YYYY-MM-DD"
 		style="{{ $definition->style }}"|if="$definition->style"
 		onchange="jQuery(this).prev('.rx_ev_date').val(this.value.replace(/-/g, ''));"
 		@required(toBool($definition->is_required))
@@ -21,7 +21,7 @@
 @else
 	<input type="time" name="{{ $input_name }}"
 		id="{{ $input_id }}"|if="$input_id" class="rx_ev_time"
-		value="{{ $value }}" pattern="\d\d:\d\d"
+		value="{{ $value }}" pattern="\d{2}:\d{2}"
 		style="{{ $definition->style }}"|if="$definition->style"
 		@required(toBool($definition->is_required))
 		@disabled(toBool($definition->is_disabled))

From 34840508f72a2196b2fa15fa010b14033b319b2b Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Tue, 17 Jun 2025 18:45:16 +0900
Subject: [PATCH 27/48] Fix warnings in widget editor and support default
 values in info.xml

---
 .../tpl/widget_generate_code.include.html     | 18 +++----
 .../tpl/widget_generate_code_in_page.html     |  2 +-
 .../widget_style_generate_code_in_page.html   | 33 ++++++------
 modules/widget/widget.controller.php          | 53 +++++++++++++------
 modules/widget/widget.model.php               |  2 +-
 widgets/content/conf/info.xml                 |  4 +-
 6 files changed, 68 insertions(+), 44 deletions(-)

diff --git a/modules/widget/tpl/widget_generate_code.include.html b/modules/widget/tpl/widget_generate_code.include.html
index 5e7656d04..d59d6c9f5 100644
--- a/modules/widget/tpl/widget_generate_code.include.html
+++ b/modules/widget/tpl/widget_generate_code.include.html
@@ -37,15 +37,15 @@
 	</div>
 </div>
 
-{@$suggestion_id = 0}
+{@ $group = ''; $not_first = false; $suggestion_id = 0; }
 <block loop="$widget_info->extra_var => $id, $var">
-	{@$suggestion_id++}
+	{@ $suggestion_id++; }
 	<block cond="!$not_first && !$var->group"><section class="extra_vars section"></block>
 	<block cond="$group != $var->group">
 		<block cond="$not_first"></section></block>
 		<section class="extra_vars section">
 		<h1>{$var->group}</h1>
-		{@$group = $var->group}
+		{@ $group = $var->group; }
 	</block>
 
 	{@$not_first = true}
@@ -53,21 +53,21 @@
 		<label class="x_control-label" for="{$id}"|cond="$var->type != 'radio' && $var->type != 'checkbox'">{$var->name}</label>
 		<div class="x_controls">
 			<block cond="$var->type == 'text'">
-				<input type="text" name="{$id}" />
+				<input type="text" name="{$id}" value="{$var->default}" />
 			</block>
 			<block cond="$var->type == 'color'">
 				<input type="text" name="{$id}" value="" id="{$id}" class="rx-spectrum" style="width:178px" />
 			</block>
 			<block cond="$var->type == 'textarea'">
-				<textarea cond="$var->type == 'textarea'" name="{$id}" id="{$id}" rows="8" cols="42"></textarea>
+				<textarea cond="$var->type == 'textarea'" name="{$id}" id="{$id}" rows="8" cols="42">{$var->default}</textarea>
 			</block>
 			<block cond="$var->type == 'select'">
 				<select name="{$id}" id="{$id}">
-					<option loop="$var->options => $key, $val" value="{$key}">{$val}</option>
+					<option loop="$var->options => $key, $val" value="{$key}" selected="selected"|cond="$var->default !== '' && $key == $var->default">{$val}</option>
 				</select>
 			</block>
 			<block cond="$var->type == 'select-multi-order'">
-				<!--@if($var->init_options && is_array($var->init_options))-->
+				<!--@if(isset($var->init_options) && is_array($var->init_options))-->
 				{@$inits = array_keys($var->init_options)}
 				<input type="hidden" name="{$id}" value="{implode(',', $inits)}" />
 				<!--@else-->
@@ -76,7 +76,7 @@
 				<div style="display:inline-block;padding-top:3px">
 					<label>{$lang->display_no}</label>
 					<select class="multiorder_show" size="8" multiple="multiple" style="vertical-align:top;margin-bottom:5px">
-						<option loop="$var->options => $key, $val" cond="!$var->init_options[$key]" value="{$key}" default="true"|cond="$var->default_options[$key]">{$val}</option>
+						<option loop="$var->options => $key, $val" cond="empty($var->init_options[$key])" value="{$key}" default="true"|cond="!empty($var->default_options[$key])">{$val}</option>
 					</select>
 					<br>
 					<button type="button" class="x_btn multiorder_add" style="vertical-align:top">{$lang->cmd_insert}</button>
@@ -84,7 +84,7 @@
 				<div style="display:inline-block;padding-top:3px">
 					<label>{$lang->display_yes}</label>
 					<select class="multiorder_selected" size="8" multiple="multiple" style="vertical-align:top;margin-bottom:5px">
-						<option loop="$var->options => $key, $val" cond="$var->init_options[$key]" value="{$key}" default="true"|cond="$var->default_options[$key]">{$val}</option>
+						<option loop="$var->options => $key, $val" cond="!empty($var->init_options[$key])" value="{$key}" default="true"|cond="!empty($var->default_options[$key])">{$val}</option>
 					</select>
 					<br>
 					<button type="button" class="x_btn multiorder_up" style="margin:0 -5px 0 0;border-radius:2px 0 0 2px">{$lang->cmd_move_up}</button>
diff --git a/modules/widget/tpl/widget_generate_code_in_page.html b/modules/widget/tpl/widget_generate_code_in_page.html
index 9fc0f407c..d30ca6c56 100644
--- a/modules/widget/tpl/widget_generate_code_in_page.html
+++ b/modules/widget/tpl/widget_generate_code_in_page.html
@@ -21,7 +21,7 @@
 	</div>
 	<div id="content" class="x_modal-body">
 		<p>{$widget_info->description} {$lang->about_widget_code_in_page}</p>
-		<form cond="$type=='faceoff'" class="x_form-horizontal">
+		<form cond="isset($type) && $type === 'faceoff'" class="x_form-horizontal">
 			<input type="hidden" name="module" value="widget" />
 			<input type="hidden" name="type" value="faceoff" />
 			<input type="hidden" name="act" value="dispWidgetGenerateCodeInPage" />
diff --git a/modules/widget/tpl/widget_style_generate_code_in_page.html b/modules/widget/tpl/widget_style_generate_code_in_page.html
index b7127a8e0..72c7fc132 100644
--- a/modules/widget/tpl/widget_style_generate_code_in_page.html
+++ b/modules/widget/tpl/widget_style_generate_code_in_page.html
@@ -28,9 +28,9 @@
 		</div>
 		<div class="x_modal-body x_form-horizontal">
 			<a href="{getUrl('widgetstyle','none')}" class="widgetStyle"><img src="images/widgetstyle_none.gif" title="{$lang->notuse}" /></a>
-			<a loop="$widgetStyle_list => $key, $widgetStyle" cond="$widgetStyle->preview" href="{getUrl('widgetstyle',$widgetStyle->widgetStyle)}" class="widgetStyle <!--@if($widgetStyle->widgetStyle==$widgetstyle)-->selected<!--@end-->"><img src="{getUrl()}{$widgetStyle->preview}" title="{$widgetStyle->title}" /><span>{$widgetStyle->title}</span></a>
+			<a loop="$widgetStyle_list => $key, $widgetStyle" cond="$widgetStyle->preview" href="{getUrl('widgetstyle',$widgetStyle->widgetStyle)}" class="widgetStyle <!--@if($widgetStyle->widgetStyle == ($widgetstyle ?? ''))-->selected<!--@end-->"><img src="{getUrl()}{$widgetStyle->preview}" title="{$widgetStyle->title}" /><span>{$widgetStyle->title}</span></a>
 			<block cond="$widgetstyle_info">
-	
+
 				<h2>{$widgetstyle_info->title} ver {$widgetstyle_info->version}</h2>
 				<div class="x_control-group">
 					<label class="x_control-label">{$lang->description}</label>
@@ -52,45 +52,46 @@
 						{zdate($widgetstyle_info->date,'Y-m-d')}
 					</div>
 				</div>
-	
+
+				{@ $group = ''; $not_first = false; $suggestion_id = 0; }
 				<block loop="$widgetstyle_info->extra_var => $id, $var">
-					{@$suggestion_id++}
+					{@ $suggestion_id++; }
 					<block cond="!$not_first && !$var->group"><section class="section"></block>
 					<block cond="$group != $var->group">
 						<block cond="$not_first"></section></block>
 						<h1>{$var->group}</h1>
 						<section class="section">
-						{@$group = $var->group}
+						{@ $group = $var->group; }
 					</block>
-					{@$not_first = true}
+					{@ $not_first = true; }
 					<div class="x_control-group">
 						<label class="x_control-label" for="{$id}"|cond="$var->type!='text'&&$var->type!='textarea'" for="lang_{$id}"|cond="$var->type=='text'||$var->type=='textarea'">{$var->name}</label>
 						<div class="x_controls extra_vars">
 							<div cond="$var->type == 'text'">
-								<input type="text" name="{$id}" value="" class="lang_code" />
+								<input type="text" name="{$id}" value="{$var->default}" class="lang_code" />
 							</div>
-	
-							<input cond="$var->type == 'color'" type="text" name="{$id}" class="rx-spectrum" />
-	
+
+							<input cond="$var->type == 'color'" type="text" name="{$id}" value="{$var->default}" class="rx-spectrum" />
+
 							<div cond="$var->type == 'textarea'">
-								<textarea name="{$id}" rows="8" cols="42" class="lang_code"></textarea>
+								<textarea name="{$id}" rows="8" cols="42" class="lang_code">{$var->default}</textarea>
 							</div>
-	
+
 							<select cond="$var->type == 'select'" name="{$id}">
-								<option loop="$var->options => $key, $val" value="{$key}">{$val}</option>
+								<option loop="$var->options ?? [] => $key, $val" value="{$key}" selected="selected"|cond="$var->default !== '' && $key == $var->default">{$val}</option>
 							</select>
-	
+
 							<block cond="$var->type == 'filebox'">
 								<input type="hidden" name="{$id}" />
 								<a href="#modalFilebox" class="modalAnchor filebox">{$lang->cmd_select}</a>
 								{@$use_filebox = TRUE}
 							</block>
 
-							<label loop="$var->options => $key, $val" cond="$var->type == 'radio'">
+							<label loop="$var->options ?? [] => $key, $val" cond="$var->type == 'radio'">
 								<input type="radio" name="{$id}" id="{$id}_{$key}" value="{$key}" > {$val}
 							</label>
 
-							<label loop="$var->options => $key, $val" cond="$var->type == 'checkbox'">
+							<label loop="$var->options ?? [] => $key, $val" cond="$var->type == 'checkbox'">
 								<input type="checkbox" name="{$id}" id="{$id}_{$key}" value="{$key}" > {$val}
 							</label>
 							<span class="x_help-block">{$var->description}</span>
diff --git a/modules/widget/widget.controller.php b/modules/widget/widget.controller.php
index aa4b6c7a8..5e2046e87 100644
--- a/modules/widget/widget.controller.php
+++ b/modules/widget/widget.controller.php
@@ -600,25 +600,30 @@ class WidgetController extends Widget
 					{
 						foreach($args as $key => $val)
 						{
+							$val = (string)$val;
 							if(in_array($key, array('class','style','widget_padding_top','widget_padding_right','widget_padding_bottom','widget_padding_left','widget','widgetstyle','document_srl'))) continue;
 							if(strpos($val,'|@|')>0) $val = str_replace('|@|',',',$val);
 							$attribute[] = sprintf('%s="%s"', $key, htmlspecialchars($val, ENT_COMPAT | ENT_HTML401, 'UTF-8', false));
 						}
 					}
 
-					$oWidgetController = getController('widget');
-
-					$widget_content_header = sprintf(
-						'<div class="rhymix_content xe_content widgetOutput ' . $args->css_class . '" widgetstyle="%s" style="%s" widget_padding_left="%s" widget_padding_right="%s" widget_padding_top="%s" widget_padding_bottom="%s" widget="widgetContent" document_srl="%d" %s>'.
+					$widget_content_header = vsprintf(
+						'<div class="rhymix_content xe_content widgetOutput ' . ($args->css_class ?? '') . '" widgetstyle="%s" style="%s" widget_padding_left="%s" widget_padding_right="%s" widget_padding_top="%s" widget_padding_bottom="%s" widget="widgetContent" document_srl="%d" %s>'.
 						'<div class="widgetResize"></div>'.
 						'<div class="widgetResizeLeft"></div>'.
 						'<div class="widgetBorder">'.
-						'<div style="%s">',$args->widgetstyle,
+						'<div style="%s">',
+					[
+						$args->widgetstyle ?? '',
 						$style,
-						$args->widget_padding_left, $args->widget_padding_right, $args->widget_padding_top, $args->widget_padding_bottom,
+						$args->widget_padding_left,
+						$args->widget_padding_right,
+						$args->widget_padding_top,
+						$args->widget_padding_bottom,
 						$args->document_srl,
-						implode(' ',$attribute),
-						$inner_style);
+						implode(' ', $attribute),
+						$inner_style,
+					]);
 
 					$widget_content_body = $body;
 					$widget_content_footer = sprintf('</div>'.
@@ -642,11 +647,21 @@ class WidgetController extends Widget
 						}
 					}
 
-					$widget_content_header = sprintf(
-						'<div class="widgetOutput ' . $args->css_class . '" widgetstyle="%s" widget="widgetBox" style="%s;" widget_padding_top="%s" widget_padding_right="%s" widget_padding_bottom="%s" widget_padding_left="%s" %s >'.
+					$widget_content_header = vsprintf(
+						'<div class="widgetOutput ' . ($args->css_class ?? '') . '" widgetstyle="%s" widget="widgetBox" style="%s;" widget_padding_top="%s" widget_padding_right="%s" widget_padding_bottom="%s" widget_padding_left="%s" %s >'.
 						'<div class="widgetBoxResize"></div>'.
 						'<div class="widgetBoxResizeLeft"></div>'.
-						'<div class="widgetBoxBorder"><div class="nullWidget" style="%s">',$args->widgetstyle,$style, $widget_padding_top, $widget_padding_right, $widget_padding_bottom, $widget_padding_left,implode(' ',$attribute),$inner_style);
+						'<div class="widgetBoxBorder"><div class="nullWidget" style="%s">',
+					[
+						$args->widgetstyle ?? '',
+						$style,
+						$widget_padding_top,
+						$widget_padding_right,
+						$widget_padding_bottom,
+						$widget_padding_left,
+						implode(' ', $attribute),
+						$inner_style,
+					]);
 
 					$widget_content_body = $widgetbox_content;
 
@@ -667,12 +682,20 @@ class WidgetController extends Widget
 						}
 					}
 
-					$widget_content_header = sprintf('<div class="widgetOutput ' . $args->css_class . '" widgetstyle="%s" style="%s" widget_padding_top="%s" widget_padding_right="%s" widget_padding_bottom="%s" widget_padding_left="%s" widget="%s" %s >'.
+					$widget_content_header = vsprintf('<div class="widgetOutput ' . ($args->css_class ?? '') . '" widgetstyle="%s" style="%s" widget_padding_top="%s" widget_padding_right="%s" widget_padding_bottom="%s" widget_padding_left="%s" widget="%s" %s >'.
 						'<div class="widgetResize"></div>'.
 						'<div class="widgetResizeLeft"></div>'.
-						'<div class="widgetBorder">',$args->widgetstyle,$style,
-						$widget_padding_top, $widget_padding_right, $widget_padding_bottom, $widget_padding_left,
-						$widget, implode(' ',$attribute));
+						'<div class="widgetBorder">',
+					[
+						$args->widgetstyle ?? '',
+						$style,
+						$widget_padding_top,
+						$widget_padding_right,
+						$widget_padding_bottom,
+						$widget_padding_left,
+						$widget,
+						implode(' ', $attribute),
+					]);
 
 					$widget_content_body = sprintf('<div style="%s">%s</div>',$inner_style, $widget_content);
 
diff --git a/modules/widget/widget.model.php b/modules/widget/widget.model.php
index 819a20e54..e7aede7d5 100644
--- a/modules/widget/widget.model.php
+++ b/modules/widget/widget.model.php
@@ -155,7 +155,7 @@ class WidgetModel extends Widget
 	public static function getWidgetStyleInfo($widgetStyle)
 	{
 		// Check the widget style path.
-		$widgetStyle = preg_replace('/[^a-zA-Z0-9-_]/', '', $widgetStyle);
+		$widgetStyle = preg_replace('/[^a-zA-Z0-9-_]/', '', (string)$widgetStyle);
 		$widgetStyle_path = self::getWidgetStylePath($widgetStyle);
 		if (!$widgetStyle_path)
 		{
diff --git a/widgets/content/conf/info.xml b/widgets/content/conf/info.xml
index ca28e37de..cfef3d17e 100644
--- a/widgets/content/conf/info.xml
+++ b/widgets/content/conf/info.xml
@@ -246,7 +246,7 @@
                     <name xml:lang="tr">UL (list)</name>
                 </options>
             </var>
-            <var id="list_count" type="text">
+            <var id="list_count" type="text" default="5">
                 <name xml:lang="ko">목록수</name>
                 <name xml:lang="zh-CN">目录数</name>
                 <name xml:lang="jp">リスト数</name>
@@ -266,7 +266,7 @@
                 <description xml:lang="zh-TW">設置要顯示的目錄數。(預設是5個)</description>
                 <description xml:lang="tr">Görüntülenecek yazıların sayısını ayarlayabilirsiniz. (varsayılan değer 5'tir)</description>
             </var>
-            <var id="cols_list_count" type="text">
+            <var id="cols_list_count" type="text" default="5">
                 <name xml:lang="ko">가로 이미지 수</name>
                 <name xml:lang="jp">横並びイメージ数</name>
                 <name xml:lang="zh-CN">横向图片数</name>

From 69a27d7835345dff9e771ac19d68afab3fc44cad Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Tue, 17 Jun 2025 21:15:37 +0900
Subject: [PATCH 28/48] Ensure that all widget variables always exist #2564

---
 modules/widget/widget.controller.php | 39 ++++++++++++++++++----------
 1 file changed, 25 insertions(+), 14 deletions(-)

diff --git a/modules/widget/widget.controller.php b/modules/widget/widget.controller.php
index 5e2046e87..e1c651fb8 100644
--- a/modules/widget/widget.controller.php
+++ b/modules/widget/widget.controller.php
@@ -382,7 +382,7 @@ class WidgetController extends Widget
 			}
 
 			$args->widget_sequence = $args->widget_sequence ?? 0;
-			$args->colorset = $args->colorset ?? null;
+			$args->colorset = $args->colorset ?? '';
 
 			foreach ($lang_list as $lang_type => $val)
 			{
@@ -430,6 +430,14 @@ class WidgetController extends Widget
 				return;
 			}
 
+			foreach (WidgetModel::getWidgetInfo($widget)->extra_var ?? [] as $key => $val)
+			{
+				if (!isset($args->{$key}))
+				{
+					$args->{$key} = $val->default;
+				}
+			}
+
 			$widget_content = $oWidget->proc($args);
 			return Context::replaceUserLang($widget_content);
 		}
@@ -453,6 +461,14 @@ class WidgetController extends Widget
 			return;
 		}
 
+		foreach (WidgetModel::getWidgetInfo($widget)->extra_var ?? [] as $key => $val)
+		{
+			if (!isset($args->{$key}))
+			{
+				$args->{$key} = $val->default;
+			}
+		}
+
 		$oFrontEndFileHandler = FrontEndFileHandler::getInstance();
 		$oFrontEndFileHandler->startLog();
 
@@ -498,7 +514,7 @@ class WidgetController extends Widget
 		// Set default
 		$args->widget_sequence = $args->widget_sequence ?? 0;
 		$args->widget_cache = $args->widget_cache ?? 0;
-		$args->colorset = $args->colorset ?? null;
+		$args->colorset = $args->colorset ?? '';
 
 		/**
 		 * Widgets widgetContent/widgetBox Wanted If you are not content
@@ -854,25 +870,20 @@ class WidgetController extends Widget
 		$vars->widget_padding_bottom = trim($request_vars->widget_padding_bottom);
 		$vars->document_srl= trim($request_vars->document_srl);
 
-		if(countobj($widget_info->extra_var))
+		foreach ($widget_info->extra_var ?? [] as $key => $val)
 		{
-			foreach($widget_info->extra_var as $key=>$val)
-			{
-				$vars->{$key} = trim($request_vars->{$key} ?? '');
-			}
+			$vars->{$key} = trim($request_vars->{$key} ?? '');
 		}
-		// If the widget style
+
+		// Additional configuration for widget styles
 		if($request_vars->widgetstyle)
 		{
 			$widgetStyle_info = WidgetModel::getWidgetStyleInfo($request_vars->widgetstyle);
-			if(countobj($widgetStyle_info->extra_var))
+			foreach ($widgetStyle_info->extra_var ?? [] as $key => $val)
 			{
-				foreach($widgetStyle_info->extra_var as $key=>$val)
+				if (in_array($val->type, ['color', 'text', 'select', 'filebox', 'textarea']))
 				{
-					if($val->type =='color' || $val->type =='text' || $val->type =='select' || $val->type =='filebox' || $val->type == 'textarea')
-					{
-						$vars->{$key} = trim($request_vars->{$key} ?? '');
-					}
+					$vars->{$key} = trim($request_vars->{$key} ?? '');
 				}
 			}
 		}

From 52a1178528aa0a1f71a80e4dab3b78e8d90312b9 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Tue, 17 Jun 2025 21:22:14 +0900
Subject: [PATCH 29/48] Add local cache for widget and widgetstyle info

---
 modules/widget/widget.model.php | 20 ++++++++++++++++++--
 1 file changed, 18 insertions(+), 2 deletions(-)

diff --git a/modules/widget/widget.model.php b/modules/widget/widget.model.php
index e7aede7d5..f9cd09d45 100644
--- a/modules/widget/widget.model.php
+++ b/modules/widget/widget.model.php
@@ -128,12 +128,19 @@ class WidgetModel extends Widget
 			return;
 		}
 
-		// Check the cache.
+		// Check the local cache.
 		$xml_mtime = filemtime($xml_file);
+		if (isset($GLOBALS['__widget_info__'][$widget][$xml_mtime]))
+		{
+			return $GLOBALS['__widget_info__'][$widget][$xml_mtime];
+		}
+
+		// Check the system cache.
 		$cache_key = sprintf('widget_info:%s:%d', $widget, $xml_mtime);
 		$widget_info = Rhymix\Framework\Cache::get($cache_key);
 		if ($widget_info)
 		{
+			$GLOBALS['__widget_info__'][$widget][$xml_mtime] = $widget_info;
 			return $widget_info;
 		}
 
@@ -145,6 +152,7 @@ class WidgetModel extends Widget
 		}
 
 		Rhymix\Framework\Cache::set($cache_key, $widget_info);
+		$GLOBALS['__widget_info__'][$widget][$xml_mtime] = $widget_info;
 		return $widget_info;
 	}
 
@@ -169,12 +177,19 @@ class WidgetModel extends Widget
 			return;
 		}
 
-		// Check the cache.
+		// Check the local cache.
 		$xml_mtime = filemtime($xml_file);
+		if (isset($GLOBALS['__widgetstyle_info__'][$widgetStyle][$xml_mtime]))
+		{
+			return $GLOBALS['__widgetstyle_info__'][$widgetStyle][$xml_mtime];
+		}
+
+		// Check the system cache.
 		$cache_key = sprintf('widgetstyle_info:%s:%d', $widgetStyle, $xml_mtime);
 		$widgetStyle_info = Rhymix\Framework\Cache::get($cache_key);
 		if ($widgetStyle_info)
 		{
+			$GLOBALS['__widgetstyle_info__'][$widgetStyle][$xml_mtime] = $widgetStyle_info;
 			return $widgetStyle_info;
 		}
 
@@ -186,6 +201,7 @@ class WidgetModel extends Widget
 		}
 
 		Rhymix\Framework\Cache::set($cache_key, $widgetStyle_info);
+		$GLOBALS['__widgetstyle_info__'][$widgetStyle][$xml_mtime] = $widgetStyle_info;
 		return $widgetStyle_info;
 	}
 }

From 2c5b3e072f70cf2b7adc7fdbdf4b356ff815993a Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Wed, 18 Jun 2025 01:31:52 +0900
Subject: [PATCH 30/48] Consolidate callback version and Promise version of
 Rhymix.ajax()

---
 common/js/common.js | 265 ++++++++++++++++++--------------------------
 1 file changed, 109 insertions(+), 156 deletions(-)

diff --git a/common/js/common.js b/common/js/common.js
index 15e31b6e4..24a21610a 100644
--- a/common/js/common.js
+++ b/common/js/common.js
@@ -398,11 +398,11 @@ Rhymix.modal.close = function(id) {
  *
  * @param string action
  * @param object params
- * @param function success
- * @param function error
+ * @param function callback_success
+ * @param function callback_error
  * @return void
  */
-Rhymix.ajax = function(action, params, success, error) {
+Rhymix.ajax = function(action, params, callback_success, callback_error) {
 
 	// Extract module and act
 	let isFormData = params instanceof FormData;
@@ -453,171 +453,111 @@ Rhymix.ajax = function(action, params, success, error) {
 		delete params._rx_csrf_token;
 	}
 
-	// Define common AJAX arguments
-	const args = {
-		type: 'POST',
-		dataType: 'json',
-		url: url,
-		data: isFormData ? params : JSON.stringify(params),
-		contentType: isFormData ? false : 'application/json; charset=UTF-8',
-		processData: false,
-		headers: headers,
-	};
-
 	return new Promise(function(resolve, reject) {
-		const resolveWrapper = function(data, xhr) {
-			if (typeof success === 'function') {
-				success(data, xhr);
+
+		// Define the success wrapper.
+		const successWrapper = function(data, textStatus, xhr) {
+
+			console.log(resolve);
+			// Add debug information.
+			if (data._rx_debug) {
+				data._rx_debug.page_title = "AJAX : " + action;
+				if (Rhymix.addDebugData) {
+					Rhymix.addDebugData(data._rx_debug);
+				} else {
+					Rhymix.pendingDebugData.push(data._rx_debug);
+				}
 			}
-			if (resolve) {
-				resolve(data);
+
+			// If the response contains a Rhymix error code, display the error message.
+			if (typeof data.error !== 'undefined' && data.error != 0) {
+				return errorWrapper(data, textStatus, xhr);
 			}
+
+			// If a success callback was defined, call it.
+			if (typeof callback_success === 'function') {
+				callback_success(data, xhr);
+				return;
+			}
+
+			// If the response contains a redirect URL, follow the redirect.
+			if (data.redirect_url) {
+				Rhymix.redirectToUrl(data.redirect_url.replace(/&amp;/g, '&'));
+				return;
+			}
+
+			// Resolve the promise with the response data.
+			resolve(data);
 		};
-		const rejectWrapper = function(data, xhr) {
-			if (typeof error === 'function' && error(data, xhr) === false) {
-				return false;
+
+		// Define the error wrapper.
+		const errorWrapper = function(data, textStatus, xhr) {
+
+			// If an error callback is defined, and if it returns false, stop processing this error.
+			// This will also prevent the promise from being rejected.
+			if (typeof callback_error === 'function' && callback_error(data, xhr) === false) {
+				return;
 			}
-			if (reject) {
-				reject(data);
-				return false;
+
+			// Otherwise, generate a generic error message.
+			let error_message = 'AJAX error: ' + (action || 'form submission');
+			let error_details = '';
+			if (data.error != 0 && data.message) {
+				error_message = data.message.replace(/\\n/g, "\n");
+				if (data.errorDetail) {
+					error_details = data.errorDetail;
+				}
+			} else if (xhr.status == 0) {
+				error_details = 'Connection failed: ' + url + "\n\n" + (xhr.responseText || '');
+			} else {
+				error_details = (xhr.responseText || '');
 			}
+			if (error_details.length > 1000) {
+				error_details = error_details.substring(0, 1000) + '...';
+			}
+			if (error_details.length > 0) {
+				error_message = error_message + "\n\n" + error_details;
+			}
+
+			// Reject the promise with an error object.
+			// If uncaught, this will be handled by the 'unhandledrejection' event listener.
+			const err = new Error(error_message);
+			err._rx_ajax_error = true;
+			err.cause = data;
+			err.xhr = xhr;
+			reject(err);
 		};
-		$.ajax($.extend(args, {
-			success: function(data, textStatus, xhr) {
-				Rhymix._ajaxSuccessHandler(xhr, textStatus, action, data, params, resolveWrapper, rejectWrapper);
-			},
+
+		// Pass off to jQuery with another wrapper around the success and error wrappers.
+		// This allows us to handle HTTP 400+ error codes with valid JSON responses.
+		$.ajax({
+			type: 'POST',
+			dataType: 'json',
+			url: url,
+			data: isFormData ? params : JSON.stringify(params),
+			contentType: isFormData ? false : 'application/json; charset=UTF-8',
+			processData: false,
+			headers: headers,
+			success: successWrapper,
 			error: function(xhr, textStatus, errorThrown) {
-				Rhymix._ajaxErrorHandler(xhr, textStatus, action, url, params, resolveWrapper, rejectWrapper);
+				if (xhr.status == 0 && Rhymix.unloading) {
+					return;
+				}
+				if (xhr.status >= 400 && xhr.responseText) {
+					try {
+						let data = JSON.parse(xhr.responseText);
+						if (data) {
+							successWrapper(data, textStatus, xhr);
+							return;
+						}
+					} catch (e) { }
+				}
+				errorWrapper({ error: 0, message: textStatus }, textStatus, xhr);
 			}
-		}));
+		});
 	});
 };
 
-/**
- * Default success handler for AJAX requests
- *
- * @param object xhr
- * @param string textStatus
- * @param string action
- * @param object data
- * @param object params
- * @param function success
- * @param function errror
- * @return void
- */
-Rhymix._ajaxSuccessHandler = function(xhr, textStatus, action, data, params, success, error) {
-
-	// Add debug information.
-	if (data._rx_debug) {
-		data._rx_debug.page_title = "AJAX : " + action;
-		if (this.addDebugData) {
-			this.addDebugData(data._rx_debug);
-		} else {
-			this.pendingDebugData.push(data._rx_debug);
-		}
-	}
-
-	// If the response contains a Rhymix error code, display the error message.
-	if (typeof data.error !== 'undefined' && data.error != 0) {
-
-		// If an error callback is defined, call it. Abort if it returns false.
-		if (typeof error === 'function' && error(data, xhr) === false) {
-			return;
-		}
-
-		// If an error message was supplied, display it.
-		if (data.message) {
-			let msg = data.message.replace(/\\n/g, "\n");
-			if (data.errorDetail) {
-				msg += "\n\n" + data.errorDetail;
-			}
-			alert(msg);
-			return;
-		}
-
-		// Rhymix should never return an error code without a message, but if someone does, we handle it here.
-		let msg = 'AJAX error: ' + (action || 'form submission') + "\n\n" + xhr.responseText;
-		if (msg.length > 1000) {
-			msg = msg.substring(0, 1000) + '...';
-		}
-		console.error(msg.trim().replace(/\n+/g, "\n"));
-		if (this.showAjaxErrors.indexOf('ALL') >= 0 || this.showAjaxErrors.indexOf(xhr.status) >= 0) {
-			alert(msg.trim());
-		}
-		return;
-	}
-
-	// If a success callback was defined, call it.
-	if (typeof success === 'function') {
-		success(data, xhr);
-		return;
-	}
-
-	// If the response contains a redirect URL, follow the redirect.
-	if (data.redirect_url) {
-		this.redirectToUrl(data.redirect_url.replace(/&amp;/g, '&'));
-		return;
-	}
-};
-
-/**
- * Default error handler for AJAX requests
- *
- * @param object xhr
- * @param string textStatus
- * @param string action
- * @param string url
- * @param object params
- * @param function success
- * @param function errror
- * @return void
- */
-Rhymix._ajaxErrorHandler = function(xhr, textStatus, action, url, params, success, error) {
-
-	// If the user is navigating away, don't do anything.
-	if (xhr.status == 0 && this.unloading) {
-		return;
-	}
-
-	// If the response contains valid JSON, call the success callback instead.
-	if (xhr.status >= 400 && xhr.responseText) {
-		let data;
-		try {
-			data = JSON.parse(xhr.responseText);
-		} catch (e) { }
-		if (data && typeof data.error !== 'undefined') {
-			this._ajaxSuccessHandler(xhr, textStatus, action, data, params, success, error);
-			return;
-		}
-	}
-
-	// If an error callback is defined, call it. Abort if it returns false.
-	if (typeof error === 'function') {
-		let fakedata = { error: -3, message: textStatus };
-		if (error(fakedata, xhr) === false) {
-			return;
-		}
-	}
-
-	// Otherwise, generate a simple error message.
-	let error_info, msg;
-	if (xhr.status == 0) {
-		error_info = 'Connection failed: ' + url + "\n\n" + (xhr.responseText || '');
-	} else {
-		error_info = 'Response code: ' + xhr.status + "\n\n" + (xhr.responseText || '');
-	}
-	msg = 'AJAX error: ' + (action || 'form submission') + "\n\n" + error_info;
-	if (msg.length > 1000) {
-		msg = msg.substring(0, 1000) + '...';
-	}
-
-	// Print the error message.
-	console.error(msg.trim().replace(/\n+/g, "\n"));
-	if (this.showAjaxErrors.indexOf('ALL') >= 0 || this.showAjaxErrors.indexOf(xhr.status) >= 0) {
-		alert(msg.trim());
-	}
-};
-
 /**
  * Submit a form using AJAX instead of navigating away
  *
@@ -1116,6 +1056,19 @@ window.addEventListener('beforeunload', function() {
 	Rhymix.unloading = true;
 });
 
+// General handler for unhandled Promise rejections
+window.addEventListener('unhandledrejection', function(event) {
+	if (event.reason && event.reason['_rx_ajax_error']) {
+		event.preventDefault();
+		const error_message = event.reason.message.trim();
+		const error_xhr = event.reason.xhr || {};
+		console.error(error_message.replace(/\n+/g, "\n"));
+		if (Rhymix.showAjaxErrors.indexOf('ALL') >= 0 || Rhymix.showAjaxErrors.indexOf(error_xhr.status) >= 0) {
+			alert(error_message.trim());
+		}
+	}
+});
+
 // General handler for popstate events
 window.addEventListener('popstate', function(event) {
 	// Close modal if it is open

From f09cce5d1ad3a3026a63691938677e228bcad300 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Wed, 18 Jun 2025 01:36:46 +0900
Subject: [PATCH 31/48] Allow redirects to be canceled by Promise.then() after
 AJAX call

---
 common/js/common.js | 36 ++++++++++++++++++++++++++++++------
 1 file changed, 30 insertions(+), 6 deletions(-)

diff --git a/common/js/common.js b/common/js/common.js
index 24a21610a..4a6b75823 100644
--- a/common/js/common.js
+++ b/common/js/common.js
@@ -262,14 +262,37 @@ Rhymix.isSameHost = function(url) {
  * Redirect to a URL, but reload instead if the target is the same as the current page
  *
  * @param string url
+ * @param int delay
  * @return void
  */
-Rhymix.redirectToUrl = function(url) {
-	if (this.isCurrentUrl(url)) {
-		window.location.href = url;
-		window.location.reload();
+Rhymix.redirectToUrl = function(url, delay) {
+	const callback = function() {
+		if (Rhymix.isCurrentUrl(url)) {
+			window.location.href = url;
+			window.location.reload();
+		} else {
+			window.location.href = url;
+		}
+	};
+	if (delay) {
+		this.pendingRedirect = setTimeout(callback, delay);
 	} else {
-		window.location.href = url;
+		callback();
+	}
+};
+
+/**
+ * Cancel any pending redirect
+ *
+ * @return bool
+ */
+Rhymix.cancelPendingRedirect = function() {
+	if (this.pendingRedirect) {
+		clearTimeout(this.pendingRedirect);
+		this.pendingRedirect = null;
+		return true;
+	} else {
+		return false;
 	}
 };
 
@@ -481,8 +504,9 @@ Rhymix.ajax = function(action, params, callback_success, callback_error) {
 			}
 
 			// If the response contains a redirect URL, follow the redirect.
+			// This can be canceled by Rhymix.cancelPendingRedirect() within 100 milliseconds.
 			if (data.redirect_url) {
-				Rhymix.redirectToUrl(data.redirect_url.replace(/&amp;/g, '&'));
+				Rhymix.redirectToUrl(data.redirect_url.replace(/&amp;/g, '&'), 100);
 				return;
 			}
 

From 213b354891c2d797c7c47a177221610462339d6a Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Wed, 18 Jun 2025 02:09:10 +0900
Subject: [PATCH 32/48] Update parameter names of Rhymix.ajaxForm() for
 consistency with Rhymix.ajax()

---
 common/js/common.js | 32 ++++++++++++++++----------------
 1 file changed, 16 insertions(+), 16 deletions(-)

diff --git a/common/js/common.js b/common/js/common.js
index 4a6b75823..204e9f9bf 100644
--- a/common/js/common.js
+++ b/common/js/common.js
@@ -586,21 +586,21 @@ Rhymix.ajax = function(action, params, callback_success, callback_error) {
  * Submit a form using AJAX instead of navigating away
  *
  * @param HTMLElement form
- * @param function success
- * @param function error
+ * @param function callback_success
+ * @param function callback_error
  * @return void
  */
-Rhymix.ajaxForm = function(form, success, error) {
+Rhymix.ajaxForm = function(form, callback_success, callback_error) {
 	const $form = $(form);
 	// Get success and error callback functions.
-	if (typeof success === 'undefined') {
-		success = $form.data('callbackSuccess');
-		if (success && $.isFunction(success)) {
+	if (typeof callback_success === 'undefined') {
+		callback_success = $form.data('callbackSuccess');
+		if (callback_success && typeof callback_success === 'function') {
 			// no-op
-		} else if (success && window[success] && $.isFunction(window[success])) {
-			success = window[success];
+		} else if (callback_success && window[callback_success] && typeof window[callback_success] === 'function') {
+			callback_success = window[callback_success];
 		} else {
-			success = function(data) {
+			callback_success = function(data) {
 				if (data.message && data.message !== 'success') {
 					alert(data.message);
 				}
@@ -610,17 +610,17 @@ Rhymix.ajaxForm = function(form, success, error) {
 			};
 		}
 	}
-	if (typeof error === 'undefined') {
-		error = $form.data('callbackError');
-		if (error && $.isFunction(error)) {
+	if (typeof callback_error === 'undefined') {
+		callback_error = $form.data('callbackError');
+		if (callback_error && typeof callback_error === 'function') {
 			// no-op
-		} else if (error && window[error] && $.isFunction(window[error])) {
-			error = window[error];
+		} else if (callback_error && window[callback_error] && typeof window[callback_error] === 'function') {
+			callback_error = window[callback_error];
 		} else {
-			error = null;
+			callback_error = null;
 		}
 	}
-	this.ajax(null, new FormData($form[0]), success, error);
+	this.ajax(null, new FormData($form[0]), callback_success, callback_error);
 };
 
 /**

From 2b62780b908e620a7883b843d9573f903dd9cbab Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Wed, 18 Jun 2025 16:55:43 +0900
Subject: [PATCH 33/48] Miscellaneous fixes to Rhymix.ajax() handling

---
 common/js/common.js | 11 ++++-------
 1 file changed, 4 insertions(+), 7 deletions(-)

diff --git a/common/js/common.js b/common/js/common.js
index 204e9f9bf..bf975f0d0 100644
--- a/common/js/common.js
+++ b/common/js/common.js
@@ -481,7 +481,6 @@ Rhymix.ajax = function(action, params, callback_success, callback_error) {
 		// Define the success wrapper.
 		const successWrapper = function(data, textStatus, xhr) {
 
-			console.log(resolve);
 			// Add debug information.
 			if (data._rx_debug) {
 				data._rx_debug.page_title = "AJAX : " + action;
@@ -507,7 +506,6 @@ Rhymix.ajax = function(action, params, callback_success, callback_error) {
 			// This can be canceled by Rhymix.cancelPendingRedirect() within 100 milliseconds.
 			if (data.redirect_url) {
 				Rhymix.redirectToUrl(data.redirect_url.replace(/&amp;/g, '&'), 100);
-				return;
 			}
 
 			// Resolve the promise with the response data.
@@ -539,15 +537,13 @@ Rhymix.ajax = function(action, params, callback_success, callback_error) {
 			if (error_details.length > 1000) {
 				error_details = error_details.substring(0, 1000) + '...';
 			}
-			if (error_details.length > 0) {
-				error_message = error_message + "\n\n" + error_details;
-			}
 
 			// Reject the promise with an error object.
 			// If uncaught, this will be handled by the 'unhandledrejection' event listener.
 			const err = new Error(error_message);
 			err._rx_ajax_error = true;
 			err.cause = data;
+			err.details = error_details;
 			err.xhr = xhr;
 			reject(err);
 		};
@@ -1085,10 +1081,11 @@ window.addEventListener('unhandledrejection', function(event) {
 	if (event.reason && event.reason['_rx_ajax_error']) {
 		event.preventDefault();
 		const error_message = event.reason.message.trim();
+		const error_details = event.reason.details || '';
 		const error_xhr = event.reason.xhr || {};
-		console.error(error_message.replace(/\n+/g, "\n"));
+		console.error(error_message.replace(/\n+/g, "\n" + error_details));
 		if (Rhymix.showAjaxErrors.indexOf('ALL') >= 0 || Rhymix.showAjaxErrors.indexOf(error_xhr.status) >= 0) {
-			alert(error_message.trim());
+			alert(error_message.trim() + (error_details ? ("\n\n" + error_details) : ''));
 		}
 	}
 });

From 87e34246f229f8c12e3a5f177d9c429587848736 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Wed, 18 Jun 2025 18:51:02 +0900
Subject: [PATCH 34/48] Add polyfill for FormData

---
 classes/display/HTMLDisplayHandler.php |  1 +
 common/js/polyfills/formdata.min.js    | 21 +++++++++++++++++++++
 2 files changed, 22 insertions(+)
 create mode 100644 common/js/polyfills/formdata.min.js

diff --git a/classes/display/HTMLDisplayHandler.php b/classes/display/HTMLDisplayHandler.php
index 4f7906982..c0cc31069 100644
--- a/classes/display/HTMLDisplayHandler.php
+++ b/classes/display/HTMLDisplayHandler.php
@@ -761,6 +761,7 @@ class HTMLDisplayHandler
 
 		if (str_contains($_SERVER['HTTP_USER_AGENT'] ?? '', 'Trident/'))
 		{
+			$original_file_list[] = 'polyfills/formdata.min.js';
 			$original_file_list[] = 'polyfills/promise.min.js';
 		}
 
diff --git a/common/js/polyfills/formdata.min.js b/common/js/polyfills/formdata.min.js
new file mode 100644
index 000000000..f4abd6765
--- /dev/null
+++ b/common/js/polyfills/formdata.min.js
@@ -0,0 +1,21 @@
+/*! formdata-polyfill. MIT License. Jimmy W?rting <https://jimmy.warting.se/opensource> */
+;(function(){var h;function l(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var m="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype||a==Object.prototype)return a;a[b]=c.value;return a};
+function n(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var q=n(this);function r(a,b){if(b)a:{var c=q;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&m(c,a,{configurable:!0,writable:!0,value:b})}}
+r("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f||"")+"_"+e++,f)}function c(f,g){this.A=f;m(this,"description",{configurable:!0,writable:!0,value:g})}if(a)return a;c.prototype.toString=function(){return this.A};var d="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",e=0;return b});
+r("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array Float64Array".split(" "),c=0;c<b.length;c++){var d=q[b[c]];"function"===typeof d&&"function"!=typeof d.prototype[a]&&m(d.prototype,a,{configurable:!0,writable:!0,value:function(){return u(l(this))}})}return a});function u(a){a={next:a};a[Symbol.iterator]=function(){return this};return a}
+function v(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:l(a)}}var w;if("function"==typeof Object.setPrototypeOf)w=Object.setPrototypeOf;else{var y;a:{var z={a:!0},A={};try{A.__proto__=z;y=A.a;break a}catch(a){}y=!1}w=y?function(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}var B=w;function C(){this.m=!1;this.j=null;this.v=void 0;this.h=1;this.u=this.C=0;this.l=null}
+function D(a){if(a.m)throw new TypeError("Generator is already running");a.m=!0}C.prototype.o=function(a){this.v=a};C.prototype.s=function(a){this.l={D:a,F:!0};this.h=this.C||this.u};C.prototype.return=function(a){this.l={return:a};this.h=this.u};function E(a,b){a.h=3;return{value:b}}function F(a){this.g=new C;this.G=a}F.prototype.o=function(a){D(this.g);if(this.g.j)return G(this,this.g.j.next,a,this.g.o);this.g.o(a);return H(this)};
+function I(a,b){D(a.g);var c=a.g.j;if(c)return G(a,"return"in c?c["return"]:function(d){return{value:d,done:!0}},b,a.g.return);a.g.return(b);return H(a)}F.prototype.s=function(a){D(this.g);if(this.g.j)return G(this,this.g.j["throw"],a,this.g.o);this.g.s(a);return H(this)};
+function G(a,b,c,d){try{var e=b.call(a.g.j,c);if(!(e instanceof Object))throw new TypeError("Iterator result "+e+" is not an object");if(!e.done)return a.g.m=!1,e;var f=e.value}catch(g){return a.g.j=null,a.g.s(g),H(a)}a.g.j=null;d.call(a.g,f);return H(a)}function H(a){for(;a.g.h;)try{var b=a.G(a.g);if(b)return a.g.m=!1,{value:b.value,done:!1}}catch(c){a.g.v=void 0,a.g.s(c)}a.g.m=!1;if(a.g.l){b=a.g.l;a.g.l=null;if(b.F)throw b.D;return{value:b.return,done:!0}}return{value:void 0,done:!0}}
+function J(a){this.next=function(b){return a.o(b)};this.throw=function(b){return a.s(b)};this.return=function(b){return I(a,b)};this[Symbol.iterator]=function(){return this}}function K(a,b){b=new J(new F(b));B&&a.prototype&&B(b,a.prototype);return b}function L(a,b){a instanceof String&&(a+="");var c=0,d=!1,e={next:function(){if(!d&&c<a.length){var f=c++;return{value:b(f,a[f]),done:!1}}d=!0;return{done:!0,value:void 0}}};e[Symbol.iterator]=function(){return e};return e}
+r("Array.prototype.entries",function(a){return a?a:function(){return L(this,function(b,c){return[b,c]})}});
+if("undefined"!==typeof Blob&&("undefined"===typeof FormData||!FormData.prototype.keys)){var M=function(a,b){for(var c=0;c<a.length;c++)b(a[c])},N=function(a){return a.replace(/\r?\n|\r/g,"\r\n")},O=function(a,b,c){if(b instanceof Blob){c=void 0!==c?String(c+""):"string"===typeof b.name?b.name:"blob";if(b.name!==c||"[object Blob]"===Object.prototype.toString.call(b))b=new File([b],c);return[String(a),b]}return[String(a),String(b)]},P=function(a,b){if(a.length<b)throw new TypeError(b+" argument required, but only "+
+a.length+" present.");},Q="object"===typeof globalThis?globalThis:"object"===typeof window?window:"object"===typeof self?self:this,R=Q.FormData,S=Q.XMLHttpRequest&&Q.XMLHttpRequest.prototype.send,T=Q.Request&&Q.fetch,U=Q.navigator&&Q.navigator.sendBeacon,V=Q.Element&&Q.Element.prototype,W=Q.Symbol&&Symbol.toStringTag;W&&(Blob.prototype[W]||(Blob.prototype[W]="Blob"),"File"in Q&&!File.prototype[W]&&(File.prototype[W]="File"));try{new File([],"")}catch(a){Q.File=function(b,c,d){b=new Blob(b,d||{});
+Object.defineProperties(b,{name:{value:c},lastModified:{value:+(d&&void 0!==d.lastModified?new Date(d.lastModified):new Date)},toString:{value:function(){return"[object File]"}}});W&&Object.defineProperty(b,W,{value:"File"});return b}}var escape=function(a){return a.replace(/\n/g,"%0A").replace(/\r/g,"%0D").replace(/"/g,"%22")},X=function(a){this.i=[];var b=this;a&&M(a.elements,function(c){if(c.name&&!c.disabled&&"submit"!==c.type&&"button"!==c.type&&!c.matches("form fieldset[disabled] *"))if("file"===
+c.type){var d=c.files&&c.files.length?c.files:[new File([],"",{type:"application/octet-stream"})];M(d,function(e){b.append(c.name,e)})}else"select-multiple"===c.type||"select-one"===c.type?M(c.options,function(e){!e.disabled&&e.selected&&b.append(c.name,e.value)}):"checkbox"===c.type||"radio"===c.type?c.checked&&b.append(c.name,c.value):(d="textarea"===c.type?N(c.value):c.value,b.append(c.name,d))})};h=X.prototype;h.append=function(a,b,c){P(arguments,2);this.i.push(O(a,b,c))};h.delete=function(a){P(arguments,
+1);var b=[];a=String(a);M(this.i,function(c){c[0]!==a&&b.push(c)});this.i=b};h.entries=function b(){var c,d=this;return K(b,function(e){1==e.h&&(c=0);if(3!=e.h)return c<d.i.length?e=E(e,d.i[c]):(e.h=0,e=void 0),e;c++;e.h=2})};h.forEach=function(b,c){P(arguments,1);for(var d=v(this),e=d.next();!e.done;e=d.next()){var f=v(e.value);e=f.next().value;f=f.next().value;b.call(c,f,e,this)}};h.get=function(b){P(arguments,1);var c=this.i;b=String(b);for(var d=0;d<c.length;d++)if(c[d][0]===b)return c[d][1];
+return null};h.getAll=function(b){P(arguments,1);var c=[];b=String(b);M(this.i,function(d){d[0]===b&&c.push(d[1])});return c};h.has=function(b){P(arguments,1);b=String(b);for(var c=0;c<this.i.length;c++)if(this.i[c][0]===b)return!0;return!1};h.keys=function c(){var d=this,e,f,g,k,p;return K(c,function(t){1==t.h&&(e=v(d),f=e.next());if(3!=t.h){if(f.done){t.h=0;return}g=f.value;k=v(g);p=k.next().value;return E(t,p)}f=e.next();t.h=2})};h.set=function(c,d,e){P(arguments,2);c=String(c);var f=[],g=O(c,
+d,e),k=!0;M(this.i,function(p){p[0]===c?k&&(k=!f.push(g)):f.push(p)});k&&f.push(g);this.i=f};h.values=function d(){var e=this,f,g,k,p,t;return K(d,function(x){1==x.h&&(f=v(e),g=f.next());if(3!=x.h){if(g.done){x.h=0;return}k=g.value;p=v(k);p.next();t=p.next().value;return E(x,t)}g=f.next();x.h=2})};X.prototype._asNative=function(){for(var d=new R,e=v(this),f=e.next();!f.done;f=e.next()){var g=v(f.value);f=g.next().value;g=g.next().value;d.append(f,g)}return d};X.prototype._blob=function(){var d="----formdata-polyfill-"+
+Math.random(),e=[],f="--"+d+'\r\nContent-Disposition: form-data; name="';this.forEach(function(g,k){return"string"==typeof g?e.push(f+escape(N(k))+('"\r\n\r\n'+N(g)+"\r\n")):e.push(f+escape(N(k))+('"; filename="'+escape(g.name)+'"\r\nContent-Type: '+(g.type||"application/octet-stream")+"\r\n\r\n"),g,"\r\n")});e.push("--"+d+"--");return new Blob(e,{type:"multipart/form-data; boundary="+d})};X.prototype[Symbol.iterator]=function(){return this.entries()};X.prototype.toString=function(){return"[object FormData]"};
+V&&!V.matches&&(V.matches=V.matchesSelector||V.mozMatchesSelector||V.msMatchesSelector||V.oMatchesSelector||V.webkitMatchesSelector||function(d){d=(this.document||this.ownerDocument).querySelectorAll(d);for(var e=d.length;0<=--e&&d.item(e)!==this;);return-1<e});W&&(X.prototype[W]="FormData");if(S){var Y=Q.XMLHttpRequest.prototype.setRequestHeader;Q.XMLHttpRequest.prototype.setRequestHeader=function(d,e){Y.call(this,d,e);"content-type"===d.toLowerCase()&&(this.B=!0)};Q.XMLHttpRequest.prototype.send=
+function(d){d instanceof X?(d=d._blob(),this.B||this.setRequestHeader("Content-Type",d.type),S.call(this,d)):S.call(this,d)}}T&&(Q.fetch=function(d,e){e&&e.body&&e.body instanceof X&&(e.body=e.body._blob());return T.call(this,d,e)});U&&(Q.navigator.sendBeacon=function(d,e){e instanceof X&&(e=e._asNative());return U.call(this,d,e)});Q.FormData=X};})();

From 083abbeacd59744c2fd002ef18c2b55c703a3dda Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Wed, 18 Jun 2025 18:54:07 +0900
Subject: [PATCH 35/48] Fix inconsistent unhandledrejection behavior when
 polyfill is used

---
 common/js/common.js | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/common/js/common.js b/common/js/common.js
index bf975f0d0..f5a7f4419 100644
--- a/common/js/common.js
+++ b/common/js/common.js
@@ -1111,6 +1111,15 @@ window.addEventListener('popstate', function(event) {
 	}
 });
 
+// Fix for browsers that don't support the unhandledrejection event
+if (typeof Promise._unhandledRejectionFn !== 'undefined') {
+	Promise._unhandledRejectionFn = function(error) {
+		if (error['_rx_ajax_error']) {
+			alert(error.message.trim());
+		}
+	};
+}
+
 /**
  * =================
  * jQuery extensions

From bb86fc2fe265b2ad89cb5ae5bc5aa2c9bdd5acda Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Wed, 18 Jun 2025 19:22:21 +0900
Subject: [PATCH 36/48] Accommodate copilot suggestions for common.js

---
 common/js/common.js | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/common/js/common.js b/common/js/common.js
index f5a7f4419..cd1401f62 100644
--- a/common/js/common.js
+++ b/common/js/common.js
@@ -423,7 +423,7 @@ Rhymix.modal.close = function(id) {
  * @param object params
  * @param function callback_success
  * @param function callback_error
- * @return void
+ * @return Promise
  */
 Rhymix.ajax = function(action, params, callback_success, callback_error) {
 
@@ -499,6 +499,7 @@ Rhymix.ajax = function(action, params, callback_success, callback_error) {
 			// If a success callback was defined, call it.
 			if (typeof callback_success === 'function') {
 				callback_success(data, xhr);
+				resolve(data);
 				return;
 			}
 

From 87980cd35cdcaa404f526e8268abad0f2d0790e9 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Thu, 19 Jun 2025 00:07:56 +0900
Subject: [PATCH 37/48] Add support for passing URL to Rhymix.ajax()

---
 common/js/common.js | 42 ++++++++++++++++++++++++------------------
 1 file changed, 24 insertions(+), 18 deletions(-)

diff --git a/common/js/common.js b/common/js/common.js
index cd1401f62..2fd177795 100644
--- a/common/js/common.js
+++ b/common/js/common.js
@@ -429,8 +429,18 @@ Rhymix.ajax = function(action, params, callback_success, callback_error) {
 
 	// Extract module and act
 	let isFormData = params instanceof FormData;
-	let module, act;
-	if (!action) {
+	let module, act, url;
+	if (action) {
+		if (typeof action === 'string' && action.match(/^[a-z0-9_]+\.[a-z0-9_]+$/i)) {
+			let parts = action.split('.');
+			params = params || {};
+			params.module = module = parts[0];
+			params.act = act = parts[1];
+		} else {
+			url = action;
+			action = null;
+		}
+	} else {
 		if (isFormData) {
 			module = params.get('module');
 			act = params.get('act');
@@ -444,26 +454,22 @@ Rhymix.ajax = function(action, params, callback_success, callback_error) {
 		} else {
 			action = null;
 		}
-	} else {
-		action = action.split('.');
-		params = params || {};
-		params.module = module = action[0];
-		params.act = act = action[1];
-		action = action.join('.');
 	}
 
 	// Add action to URL if the current rewrite level supports it
-	let url = this.URI(window.request_uri).pathname() + 'index.php';
-	if (act) {
-		url = url + '?act=' + act;
+	if (!url) {
+		url = this.URI(window.request_uri).pathname() + 'index.php';
+		if (act) {
+			url = url + '?act=' + act;
+		}
+		/*
+		if (this.getRewriteLevel() >= 2 && action !== null) {
+			url = url + '_' + action.replace('.', '/');
+		} else {
+			url = url + 'index.php';
+		}
+		*/
 	}
-	/*
-	if (this.getRewriteLevel() >= 2 && action !== null) {
-		url = url + action.replace('.', '/');
-	} else {
-		url = url + 'index.php';
-	}
-	*/
 
 	// Add a CSRF token to the header, and remove it from the parameters
 	const headers = {

From dfdb3386d652cba9859ad68eb8e33fa94d01fa20 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Thu, 19 Jun 2025 00:35:09 +0900
Subject: [PATCH 38/48] Ensure that a promise is always either fulfilled or
 rejected, even when callback_error prevents error from being shown

---
 common/js/common.js | 16 ++++++++++++----
 1 file changed, 12 insertions(+), 4 deletions(-)

diff --git a/common/js/common.js b/common/js/common.js
index 2fd177795..9f366295e 100644
--- a/common/js/common.js
+++ b/common/js/common.js
@@ -429,7 +429,7 @@ Rhymix.ajax = function(action, params, callback_success, callback_error) {
 
 	// Extract module and act
 	let isFormData = params instanceof FormData;
-	let module, act, url;
+	let module, act, url, promise;
 	if (action) {
 		if (typeof action === 'string' && action.match(/^[a-z0-9_]+\.[a-z0-9_]+$/i)) {
 			let parts = action.split('.');
@@ -482,7 +482,8 @@ Rhymix.ajax = function(action, params, callback_success, callback_error) {
 		delete params._rx_csrf_token;
 	}
 
-	return new Promise(function(resolve, reject) {
+	// Create and return a Promise for this AJAX request
+	return promise = new Promise(function(resolve, reject) {
 
 		// Define the success wrapper.
 		const successWrapper = function(data, textStatus, xhr) {
@@ -523,8 +524,12 @@ Rhymix.ajax = function(action, params, callback_success, callback_error) {
 		const errorWrapper = function(data, textStatus, xhr) {
 
 			// If an error callback is defined, and if it returns false, stop processing this error.
-			// This will also prevent the promise from being rejected.
+			// This will also cause the promise to be rejected, but silently.
 			if (typeof callback_error === 'function' && callback_error(data, xhr) === false) {
+				promise.catch(function(dummy_err) { });
+				let dummy_err = new Error('AJAX error handled by callback function');
+				dummy_err._rx_ajax_error = false;
+				reject(dummy_err);
 				return;
 			}
 
@@ -1085,8 +1090,11 @@ window.addEventListener('beforeunload', function() {
 
 // General handler for unhandled Promise rejections
 window.addEventListener('unhandledrejection', function(event) {
-	if (event.reason && event.reason['_rx_ajax_error']) {
+	if (event.reason && typeof event.reason['_rx_ajax_error'] === 'boolean') {
 		event.preventDefault();
+		if (event.reason['_rx_ajax_error'] === false) {
+			return;
+		}
 		const error_message = event.reason.message.trim();
 		const error_details = event.reason.details || '';
 		const error_xhr = event.reason.xhr || {};

From 614ed353d17e0c5b2aa597cb278fd18896d35c4b Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Thu, 19 Jun 2025 18:35:57 +0900
Subject: [PATCH 39/48] Fix potentially undefined variables in message.view.php

---
 modules/message/message.view.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/modules/message/message.view.php b/modules/message/message.view.php
index ace9da181..cdc3af68f 100644
--- a/modules/message/message.view.php
+++ b/modules/message/message.view.php
@@ -71,9 +71,9 @@ class MessageView extends Message
 
 		Context::set('ssl_mode', \RX_SSL);
 		Context::set('system_message', nl2br($this->getMessage()));
-		Context::set('system_message_detail', nl2br($detail));
-		Context::set('system_message_help', self::getErrorHelp(strval($detail)));
-		Context::set('system_message_location', escape($location));
+		Context::set('system_message_detail', nl2br($detail ?? ''));
+		Context::set('system_message_help', self::getErrorHelp(strval($detail ?? '')));
+		Context::set('system_message_location', escape($location ?? ''));
 
 		if ($this->getError())
 		{

From d3606c07db7c6a1be78d6d908ba2a1b559c83f37 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Thu, 19 Jun 2025 22:59:20 +0900
Subject: [PATCH 40/48] Fix iframe closed too early in Safari #2571

---
 common/tpl/popup_layout.html | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/common/tpl/popup_layout.html b/common/tpl/popup_layout.html
index 556864c29..5252377f9 100644
--- a/common/tpl/popup_layout.html
+++ b/common/tpl/popup_layout.html
@@ -11,7 +11,9 @@
 		const iframe_sequence = '{{ $iframe_sequence }}';
 		window.opener = window.parent;
 		window.close = function() {
-			parent.closeModal('_rx_iframe_' + iframe_sequence);
+			setTimeout(function() {
+				parent.closeModal('_rx_iframe_' + iframe_sequence);
+			}, 100);
 		};
 	</script>
 	<style>

From fcf679e750445a23bb28466cb578002af8b40e96 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Thu, 19 Jun 2025 23:05:56 +0900
Subject: [PATCH 41/48] Fix incorrect display of default permissions in sitemap

---
 modules/menu/tpl/sitemap.html | 8 ++------
 1 file changed, 2 insertions(+), 6 deletions(-)

diff --git a/modules/menu/tpl/sitemap.html b/modules/menu/tpl/sitemap.html
index 8466159de..bf4e1e0b7 100644
--- a/modules/menu/tpl/sitemap.html
+++ b/modules/menu/tpl/sitemap.html
@@ -2374,14 +2374,10 @@ jQuery(function($){
 				*/
 				switch(sDefault){
 					case 'guest':
-						//
+						// no-op
 					break;
 					case 'member':
-						$node.find('._group_all').remove();
-					break;
 					case 'not_member':
-						$node.find('._group_all').remove();
-					break;
 					case 'site':
 						$node.find('._group_all').remove();
 					break;
@@ -2390,7 +2386,7 @@ jQuery(function($){
 					default:
 						$node.find('._group_all').remove();
 						$node.find('._group_loggedin').remove();
-						$node.find('._group_signedup').remove();
+						$node.find('._group_not_loggedin').remove();
 				}
 			}
 			//console.log(22, $node);

From 64efb20f2b018df8e0007ef425695504488c24c0 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Thu, 19 Jun 2025 23:20:23 +0900
Subject: [PATCH 42/48] Fix incorrect defaults shown in module grant screen

---
 modules/module/module.admin.model.php | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/modules/module/module.admin.model.php b/modules/module/module.admin.model.php
index 982c4502c..0be94b122 100644
--- a/modules/module/module.admin.model.php
+++ b/modules/module/module.admin.model.php
@@ -171,9 +171,18 @@ class ModuleAdminModel extends Module
 		$grant_list->manager->title = lang('grant_manager');
 		$grant_list->manager->default = 'manager';
 		Context::set('grant_list', $grant_list);
+
 		// Get a permission group granted to the current module
 		$selected_group = array();
 		$default_grant = array();
+		foreach ($grant_list as $key => $val)
+		{
+			if (!empty($val->default))
+			{
+				$default_grant[$key] = $val->default;
+			}
+		}
+
 		$args = new stdClass();
 		$args->module_srl = $module_srl;
 		$output = executeQueryArray('module.getModuleGrants', $args);

From 57d30064920b5d9fb5070a8ecbac952b8712a299 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Thu, 19 Jun 2025 23:26:56 +0900
Subject: [PATCH 43/48] Don't hide guest option even if default permission is
 'member'

---
 modules/menu/tpl/sitemap.html | 46 +++++++++++++++--------------------
 1 file changed, 20 insertions(+), 26 deletions(-)

diff --git a/modules/menu/tpl/sitemap.html b/modules/menu/tpl/sitemap.html
index bf4e1e0b7..8a639ed79 100644
--- a/modules/menu/tpl/sitemap.html
+++ b/modules/menu/tpl/sitemap.html
@@ -2361,35 +2361,29 @@ jQuery(function($){
 				$node.find('._groups').append($groupNode);
 			}
 
-			if(i === 0){
-				$node.find('._group_signedup').remove();
-				//$node.find('._group_manager').remove();
-			}else{
-				/*
-					guest : 모든 옵션 사용 가능, 항상 권한 있음.
-					member : '모든 사용자' 제외하고 사용 가능, 로그인 정보가 있을 경우 true
-					not_member : 비로그인 사용자, 로그인 정보가 *없을* 경우 true
-					manager : '관리자만','선택그룹 사용자' 옵션만 사용가능, 관리자일 경우에만 true
-					root : manager와 동일.
-				*/
-				switch(sDefault){
-					case 'guest':
-						// no-op
+			/*
+				guest : 모든 옵션 사용 가능, 항상 권한 있음.
+				member : '모든 사용자' 제외하고 사용 가능, 로그인 정보가 있을 경우 true
+				not_member : 비로그인 사용자, 로그인 정보가 *없을* 경우 true
+				manager : '관리자만','선택그룹 사용자' 옵션만 사용가능, 관리자일 경우에만 true
+				root : manager와 동일.
+			*/
+			switch(sDefault) {
+				case 'guest':
 					break;
-					case 'member':
-					case 'not_member':
-					case 'site':
-						$node.find('._group_all').remove();
+				case 'member':
+				case 'not_member':
+				case 'site':
+					$node.find('._group_loggedin').prop('selected', true);
 					break;
-					case 'manager':
-					case 'root':
-					default:
-						$node.find('._group_all').remove();
-						$node.find('._group_loggedin').remove();
-						$node.find('._group_not_loggedin').remove();
-				}
+				case 'manager':
+				case 'root':
+				default:
+					$node.find('._group_manager').prop('selected', true);
+					$node.find('._group_all').remove();
+					$node.find('._group_loggedin').remove();
+					$node.find('._group_not_loggedin').remove();
 			}
-			//console.log(22, $node);
 			$List.append($node);
 			$('#auth select').trigger('change');
 		}

From 47ac592b3370688fab647561062fe033ba3347cd Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Thu, 19 Jun 2025 23:27:47 +0900
Subject: [PATCH 44/48] Set default permission to 'member' for vote log and
 update log view

---
 modules/board/conf/module.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/modules/board/conf/module.xml b/modules/board/conf/module.xml
index 1e98c5fcc..e3b0b07ee 100644
--- a/modules/board/conf/module.xml
+++ b/modules/board/conf/module.xml
@@ -41,11 +41,11 @@
 			<title xml:lang="zh-TW">發表評論</title>
 			<title xml:lang="es">yorum yaz</title>
 		</grant>
-		<grant name="vote_log_view" default="guest">
+		<grant name="vote_log_view" default="member">
 			<title xml:lang="ko">추천인 보기</title>
 			<title xml:lang="en">view recommender</title>
 		</grant>
-		<grant name="update_view" default="guest">
+		<grant name="update_view" default="member">
 			<title xml:lang="ko">수정 내역 보기</title>
 			<title xml:lang="en">view update history</title>
 		</grant>

From cea2370520a909c7a160d15d89020c6618bc4ead Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Thu, 19 Jun 2025 23:47:06 +0900
Subject: [PATCH 45/48] Always stop after calling the error callback function,
 regardless of whether it returns false

---
 common/js/common.js | 21 +++++++++++----------
 1 file changed, 11 insertions(+), 10 deletions(-)

diff --git a/common/js/common.js b/common/js/common.js
index 9f366295e..728085456 100644
--- a/common/js/common.js
+++ b/common/js/common.js
@@ -523,13 +523,17 @@ Rhymix.ajax = function(action, params, callback_success, callback_error) {
 		// Define the error wrapper.
 		const errorWrapper = function(data, textStatus, xhr) {
 
-			// If an error callback is defined, and if it returns false, stop processing this error.
-			// This will also cause the promise to be rejected, but silently.
-			if (typeof callback_error === 'function' && callback_error(data, xhr) === false) {
-				promise.catch(function(dummy_err) { });
-				let dummy_err = new Error('AJAX error handled by callback function');
-				dummy_err._rx_ajax_error = false;
-				reject(dummy_err);
+			// If an error callback is defined, call it.
+			// The promise will still be rejected, but silently.
+			if (typeof callback_error === 'function') {
+				callback_error(data, xhr);
+				promise.catch(function(dummy) { });
+				let dummy = new Error('Rhymix.ajax() error already handled by callback function');
+				dummy._rx_ajax_error = true;
+				dummy.cause = data;
+				dummy.details = '';
+				dummy.xhr = xhr;
+				reject(dummy);
 				return;
 			}
 
@@ -1092,9 +1096,6 @@ window.addEventListener('beforeunload', function() {
 window.addEventListener('unhandledrejection', function(event) {
 	if (event.reason && typeof event.reason['_rx_ajax_error'] === 'boolean') {
 		event.preventDefault();
-		if (event.reason['_rx_ajax_error'] === false) {
-			return;
-		}
 		const error_message = event.reason.message.trim();
 		const error_details = event.reason.details || '';
 		const error_xhr = event.reason.xhr || {};

From 6e06f72e3af1fecda78c6d7e2a020cfe42d24ae6 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Fri, 20 Jun 2025 09:53:30 +0900
Subject: [PATCH 46/48] Version 2.1.25

---
 common/constants.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/common/constants.php b/common/constants.php
index f5c2eaa39..fde0b485f 100644
--- a/common/constants.php
+++ b/common/constants.php
@@ -3,7 +3,7 @@
 /**
  * RX_VERSION is the version number of the Rhymix CMS.
  */
-define('RX_VERSION', '2.1.24');
+define('RX_VERSION', '2.1.25');
 
 /**
  * RX_MICROTIME is the startup time of the current script, in microseconds since the Unix epoch.

From 4eebbf36b501151c839e2f84817bdfc97f35907d Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Sat, 21 Jun 2025 08:28:46 +0900
Subject: [PATCH 47/48] Fix undefined key when unload() is called with invalid
 args

---
 classes/frontendfile/FrontEndFileHandler.class.php | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/classes/frontendfile/FrontEndFileHandler.class.php b/classes/frontendfile/FrontEndFileHandler.class.php
index a530ee3ce..034d190aa 100644
--- a/classes/frontendfile/FrontEndFileHandler.class.php
+++ b/classes/frontendfile/FrontEndFileHandler.class.php
@@ -430,6 +430,10 @@ class FrontEndFileHandler extends Handler
 	public function unloadFile($fileName, $unused = '', $media = 'all')
 	{
 		$file = $this->getFileInfo($fileName, $unused, $media);
+		if (!isset($file->key))
+		{
+			return;
+		}
 
 		if($file->fileExtension == 'css')
 		{

From cbf9cb8ccc4dfe49b254d28e7c2c989aa6c1bdaa Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Sat, 21 Jun 2025 08:29:05 +0900
Subject: [PATCH 48/48] Improve backward compatibility with old widgets

---
 modules/widget/widget.controller.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/modules/widget/widget.controller.php b/modules/widget/widget.controller.php
index e1c651fb8..62c19b046 100644
--- a/modules/widget/widget.controller.php
+++ b/modules/widget/widget.controller.php
@@ -434,7 +434,7 @@ class WidgetController extends Widget
 			{
 				if (!isset($args->{$key}))
 				{
-					$args->{$key} = $val->default;
+					$args->{$key} = $val->default !== '' ? $val->default : null;
 				}
 			}
 
@@ -465,7 +465,7 @@ class WidgetController extends Widget
 		{
 			if (!isset($args->{$key}))
 			{
-				$args->{$key} = $val->default;
+				$args->{$key} = $val->default !== '' ? $val->default : null;
 			}
 		}