users, branch master

Fix Smarty syntax error in my_images.tpl: {time()} → {$smarty.now}

2026-06-15T11:49:57Z

Three occurrences on portrait, avatar and logo image tags. Co-Authored-By: Claude Sonnet 4.6

Replace glyphicon eye toggle with biticon password-show SVGs on signin

2026-06-15T11:15:21Z

Switch the password reveal button from Bootstrap glyphicons (unavailable) to {biticon} password-show-on / password-show-off SVGs, toggling display via JS rather than swapping classes. Co-Authored-By: Claude Sonnet 4.6

Remove duplicate ipackage attributes from biticon calls

2026-06-07T15:51:54Z

Co-Authored-By: Claude Sonnet 4.6

users: revert installer login changes to validate.php and getSiteCookieName

2026-06-06T22:05:27Z

Revert validate.php installer redirect and getSiteCookieName cookie-reuse fallback. Both caused more problems than they solved. Original behaviour restored; upgrade-time access via gOverrideLoginFunction works fine. Co-Authored-By: Claude Sonnet 4.6

users: fix session name split when site_title not yet in kernel_config

2026-06-06T21:58:39Z

getSiteCookieName() fell back to 'bit-user-bitweaver' whenever kernel_config hadn't loaded site_title (e.g. during installer/upgrade flow). This created a second cookie alongside the real 'bit-user-' cookie, causing every cross-page redirect to land in a different session and lose loginfrom, admin status, and installer step state. Fix: if site_title is empty, reuse any existing bit-user-* cookie already present in the request rather than generating a new 'bitweaver' name. Also: after successful admin login, redirect to the installer directly when a version upgrade is pending (bypasses the broken loginfrom-via-session path for the INSTALLER_FORCE case). Co-Authored-By: Claude Sonnet 4.6

users: redirect admin to installer after login if upgrade is required

2026-06-06T21:45:38Z

After a successful admin login, if the database version is behind MIN_BIT_VERSION, redirect directly to install.php rather than relying on session-based loginfrom. During INSTALLER_FORCE the session cookie name can differ between pages (bit-user-bitweaver vs bit-user-lscesmainsite) because kernel_config may not be fully loaded, making loginfrom unreliable. Co-Authored-By: Claude Sonnet 4.6

flags: add an.svg (Netherlands Antilles)

2026-06-06T15:24:59Z

Switch icons: document-properties → edit, text-x-generic → view-list-text

2026-06-05T15:03:13Z

Co-Authored-By: Claude Sonnet 4.6

Tweak flag span styling: 1px black border, line-height 1.6em

2026-06-05T14:50:47Z

Border defines edge on white-background flags like England; 1.6em line-height prevents white bars above/below the flag image. Co-Authored-By: Claude Sonnet 4.6

Fix PHP 8 null array offset deprecation in flag_select_inc.tpl

2026-06-05T14:41:08Z

$fsValue can be null when no country is set; coerce to empty string via |default:'' before using as array key in $countryFlags and $countries. Co-Authored-By: Claude Sonnet 4.6