Kompletter neuaufsetzen von Contao v4.13.58

development-system/README.md

@@ -1,6 +1,12 @@
 # Perspektivwerk Terminbuchung – lokales Entwicklungssystem
 
-Diese Ordner enthält eine lokale Annäherung an die öffentlich erkennbare technische Basis von `sufw.de`: Contao (PHP/Symfony), Apache, MariaDB sowie die im Frontend verbreiteten Komponenten Bootstrap 5, jQuery und Slick Carousel.
+Dieser Ordner enthält eine lokale Contao-4.13.58-Entwicklungsumgebung mit Apache, MariaDB sowie die im Frontend verbreiteten Komponenten Bootstrap 5, jQuery und Slick Carousel.
+
+## Contao-Version und Sicherheitsstatus
+
+Die Abhängigkeiten sind auf `contao/manager-bundle` und `contao/core-bundle` in Version `4.13.58` festgelegt. `composer.lock` ist Teil des Repositorys und muss bei Änderungen mit eingecheckt werden.
+
+Contao 4.13.58 ist ausschließlich als lokale Kompatibilitätsumgebung vorgesehen. In `composer.json` ist die Advisory `PKSA-f8tt-pn3h-s2tw` gezielt dokumentiert und für Composer freigegeben, weil keine neuere 4.13-Version verfügbar ist. Ein `composer audit` meldet darüber hinaus historische Abhängigkeitswarnungen; diese Umgebung darf deshalb nicht unverändert produktiv eingesetzt werden.
 
 ## Start
 
@@ -14,7 +20,7 @@ Beim ersten Start eines frischen Clones erzeugt Contao die benötigten Laufzeitv
 
 ```powershell
 docker compose exec app vendor/bin/contao-setup --no-interaction --env=dev
-docker compose exec app chown -R www-data:www-data var public
+docker compose exec app chown -R www-data:www-data var public system files
 docker compose exec app vendor/bin/contao-console contao:migrate --no-interaction
 
 Neuen Admin-Account anlegen:

development-system/composer.json

@@ -3,21 +3,30 @@
   "description": "Lokale Contao-Entwicklungsumgebung für die Perspektivwerk-Terminbuchung",
   "type": "project",
   "require": {
-    "contao/managed-edition": "^5.3"
+    "contao/managed-edition": "4.13",
+    "contao/manager-bundle": "4.13.58"
   },
   "minimum-stability": "dev",
   "prefer-stable": true,
   "scripts": {
     "post-install-cmd": [
-      "Contao\\ManagerPlugin\\Bundle\\Config\\ScriptHandler::initializeApplication"
+      "@php vendor/bin/contao-setup"
     ],
     "post-update-cmd": [
-      "Contao\\ManagerPlugin\\Bundle\\Config\\ScriptHandler::initializeApplication"
+      "@php vendor/bin/contao-setup"
     ]
   },
   "config": {
+    "policy": {
+      "advisories": {
+        "ignore-id": {
+          "PKSA-f8tt-pn3h-s2tw": "Explicitly accepted for the local Contao 4.13.58 compatibility environment."
+        }
+      }
+    },
     "allow-plugins": {
       "contao/manager-plugin": true,
+      "contao-community-alliance/composer-plugin": true,
       "contao-components/installer": true
     },
     "sort-packages": true

development-system/database/README.md

@@ -2,6 +2,8 @@
 
 `contao-baseline.sql` ist der versionierte Ausgangszustand für Theme, Layout, Seiten, Artikel, Inhaltselemente und später auch Formulare. Er ist für eine frische Contao-Datenbank bestimmt und enthält keine Benutzer, Passworthashes, Sitzungen, Logs, Cache-Daten oder Zugangsdaten.
 
+Nach der Umstellung auf Contao 4.13.58 ist der mitgelieferte Seed absichtlich leer. Nach dem Anlegen der ersten Seiten im Contao-Backend erzeugt `Export-ContaoBaseline.ps1` den ersten versionierten Inhaltsstand.
+
 ## Nach einer redaktionellen Änderung exportieren
 
 ```powershell

development-system/database/contao-baseline.sql

@@ -1,42 +1,8 @@
--- Contao website baseline for local development.
+-- Contao 4.13.58 website baseline for local development.
 --
--- Contains only versionable website data. It deliberately excludes users,
+-- The Contao 5 database state was intentionally discarded during the version
--- credentials, sessions, logs, cache entries and file metadata.
+-- reset. Export the first Contao 4.13 editorial state with:
--- Generated with scripts/Export-ContaoBaseline.ps1.
+--   .\scripts\Export-ContaoBaseline.ps1
-
+--
-/*M!999999\- enable the sandbox mode */ 
+-- This file must never contain users, credentials, sessions, logs, cache data
-
+-- or unversioned file metadata.
-/*!40101 SET @OLD_CHARACTER_SET_CLIENT=@@CHARACTER_SET_CLIENT */;
-/*!40101 SET @OLD_CHARACTER_SET_RESULTS=@@CHARACTER_SET_RESULTS */;
-/*!40101 SET @OLD_COLLATION_CONNECTION=@@COLLATION_CONNECTION */;
-/*!40101 SET NAMES utf8mb4 */;
-/*!40103 SET @OLD_TIME_ZONE=@@TIME_ZONE */;
-/*!40103 SET TIME_ZONE='+00:00' */;
-/*!40014 SET @OLD_FOREIGN_KEY_CHECKS=@@FOREIGN_KEY_CHECKS, FOREIGN_KEY_CHECKS=0 */;
-/*!40101 SET @OLD_SQL_MODE=@@SQL_MODE, SQL_MODE='NO_AUTO_VALUE_ON_ZERO' */;
-/*!40111 SET @OLD_SQL_NOTES=@@SQL_NOTES, SQL_NOTES=0 */;
-
-INSERT INTO `tl_theme` (`id`, `tstamp`, `name`, `author`, `folders`, `screenshot`, `templates`) VALUES (1,1786708968,'Lokales PerspektivWerk-Theme','Lokale Entwicklung',NULL,NULL,'');
-
-INSERT INTO `tl_layout` (`type`, `combineScripts`, `minifyMarkup`, `lightboxSize`, `addJQuery`, `addMooTools`, `static`, `id`, `pid`, `tstamp`, `name`, `rows`, `headerHeight`, `footerHeight`, `cols`, `widthLeft`, `widthRight`, `sections`, `framework`, `external`, `modules`, `template`, `defaultImageDensities`, `viewport`, `titleTag`, `cssClass`, `onload`, `head`, `jquery`, `mootools`, `analytics`, `externalJs`, `scripts`, `script`, `width`, `align`, `newsfeeds`, `calendarfeeds`) VALUES ('default',1,1,'',0,0,0,2,1,1787041994,'PerspektivWerk Standardlayout','2rwh','','','1cl','','',NULL,'a:2:{i:0;s:10:\"layout.css\";i:1;s:14:\"responsive.css\";}',NULL,0x613A313A7B693A303B613A333A7B733A333A226D6F64223B693A303B733A333A22636F6C223B733A343A226D61696E223B733A363A22656E61626C65223B693A313B7D7D,'fe_page','','width=device-width,initial-scale=1.0,shrink-to-fit=no','','','','<style>body.perspektivwerk-page { background-color: #159A34; }</style>',NULL,NULL,NULL,NULL,NULL,NULL,'','center',NULL,NULL);
-
-
-INSERT INTO `tl_page` (`requireItem`, `alwaysForward`, `redirectBack`, `target`, `fallback`, `disableLanguageRedirect`, `maintenanceMode`, `enableCanonical`, `useFolderUrl`, `useSSL`, `autoforward`, `protected`, `includeLayout`, `includeCache`, `alwaysLoadFromCache`, `includeChmod`, `hide`, `guests`, `published`, `enforceTwoFactor`, `enableCsp`, `csp`, `cspReportOnly`, `cspReportLog`, `imgSize`, `feedSource`, `feedFeatured`, `eventCalendars`, `feedRecurrenceLimit`, `id`, `pid`, `sorting`, `tstamp`, `title`, `type`, `alias`, `routePriority`, `pageTitle`, `language`, `robots`, `description`, `redirect`, `jumpTo`, `url`, `dns`, `staticFiles`, `staticPlugins`, `favicon`, `robotsTxt`, `mailerTransport`, `canonicalLink`, `canonicalKeepParams`, `adminEmail`, `dateFormat`, `timeFormat`, `datimFormat`, `validAliasCharacters`, `urlPrefix`, `urlSuffix`, `groups`, `layout`, `subpageLayout`, `cache`, `clientCache`, `cuser`, `cgroup`, `chmod`, `cssClass`, `sitemap`, `searchIndexer`, `accesskey`, `start`, `stop`, `twoFactorJumpTo`, `feedFormat`, `maxFeedItems`, `feedDescription`, `newsArchives`) VALUES (0,0,0,0,1,0,0,1,0,0,0,0,1,0,0,0,0,0,1,0,0,'default-src \'self\'',0,0,'','source_teaser','all_items',NULL,25,5,0,128,1786715837,'Homepage','root','home',0,'Homepage','de','',NULL,'permanent',0,'','','','',NULL,NULL,'','','','','','','','','','',NULL,2,2,0,0,0,0,'a:9:{i:0;s:2:\"u1\";i:1;s:2:\"u2\";i:2;s:2:\"u3\";i:3;s:2:\"u4\";i:4;s:2:\"u5\";i:5;s:2:\"u6\";i:6;s:2:\"g4\";i:7;s:2:\"g5\";i:8;s:2:\"g6\";}','','','','','','',0,'rss',25,NULL,NULL);
-INSERT INTO `tl_page` (`requireItem`, `alwaysForward`, `redirectBack`, `target`, `fallback`, `disableLanguageRedirect`, `maintenanceMode`, `enableCanonical`, `useFolderUrl`, `useSSL`, `autoforward`, `protected`, `includeLayout`, `includeCache`, `alwaysLoadFromCache`, `includeChmod`, `hide`, `guests`, `published`, `enforceTwoFactor`, `enableCsp`, `csp`, `cspReportOnly`, `cspReportLog`, `imgSize`, `feedSource`, `feedFeatured`, `eventCalendars`, `feedRecurrenceLimit`, `id`, `pid`, `sorting`, `tstamp`, `title`, `type`, `alias`, `routePriority`, `pageTitle`, `language`, `robots`, `description`, `redirect`, `jumpTo`, `url`, `dns`, `staticFiles`, `staticPlugins`, `favicon`, `robotsTxt`, `mailerTransport`, `canonicalLink`, `canonicalKeepParams`, `adminEmail`, `dateFormat`, `timeFormat`, `datimFormat`, `validAliasCharacters`, `urlPrefix`, `urlSuffix`, `groups`, `layout`, `subpageLayout`, `cache`, `clientCache`, `cuser`, `cgroup`, `chmod`, `cssClass`, `sitemap`, `searchIndexer`, `accesskey`, `start`, `stop`, `twoFactorJumpTo`, `feedFormat`, `maxFeedItems`, `feedDescription`, `newsArchives`) VALUES (0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,'default-src \'self\'',0,0,'','source_teaser','all_items',NULL,25,7,5,128,1787041994,'default','regular','default',0,'Perspektivwerk Default','','index,follow',NULL,'permanent',0,'','','','',NULL,NULL,'','','','','','','','','','',NULL,0,0,0,0,0,0,'a:9:{i:0;s:2:\"u1\";i:1;s:2:\"u2\";i:2;s:2:\"u3\";i:3;s:2:\"u4\";i:4;s:2:\"u5\";i:5;s:2:\"u6\";i:6;s:2:\"g4\";i:7;s:2:\"g5\";i:8;s:2:\"g6\";}','perspektivwerk-page','map_default','','','','',0,'rss',25,NULL,NULL);
-
-INSERT INTO `tl_article` (`showTeaser`, `protected`, `published`, `id`, `pid`, `sorting`, `tstamp`, `title`, `alias`, `author`, `inColumn`, `teaserCssID`, `teaser`, `printable`, `customTpl`, `groups`, `cssID`, `start`, `stop`) VALUES (0,0,1,3,7,128,1786716736,'default','default',3,'main','a:2:{i:0;s:0:\"\";i:1;s:0:\"\";}',NULL,'','',NULL,'a:2:{i:0;s:0:\"\";i:1;s:0:\"\";}','','');
-INSERT INTO `tl_article` (`showTeaser`, `protected`, `published`, `id`, `pid`, `sorting`, `tstamp`, `title`, `alias`, `author`, `inColumn`, `teaserCssID`, `teaser`, `printable`, `customTpl`, `groups`, `cssID`, `start`, `stop`) VALUES (0,0,1,5,7,256,1786716203,'Artikel2','Artikel2',3,'main','a:2:{i:0;s:0:\"\";i:1;s:0:\"\";}',NULL,'','',NULL,'a:2:{i:0;s:0:\"\";i:1;s:0:\"\";}','','');
-
-INSERT INTO `tl_content` (`title`, `type`, `addImage`, `showPreview`, `inline`, `overwriteMeta`, `size`, `fullsize`, `thead`, `tfoot`, `tleft`, `sortable`, `closeSections`, `target`, `overwriteLink`, `useImage`, `useHomeDir`, `metaIgnore`, `splashImage`, `sliderContinuous`, `protected`, `jumpTo`, `redirectBack`, `autologin`, `pwResetPage`, `invisible`, `com_moderate`, `com_bbcode`, `com_disableCaptcha`, `com_requireLogin`, `jsonData`, `id`, `pid`, `ptable`, `sorting`, `tstamp`, `headline`, `sectionHeadline`, `text`, `singleSRC`, `alt`, `imageTitle`, `imageUrl`, `caption`, `floating`, `html`, `unfilteredHtml`, `listtype`, `listitems`, `tableitems`, `summary`, `sortIndex`, `sortOrder`, `mooHeadline`, `mooStyle`, `mooClasses`, `highlight`, `markdownSource`, `code`, `url`, `titleText`, `linkTitle`, `embed`, `rel`, `multiSRC`, `perRow`, `perPage`, `numberOfItems`, `sortBy`, `galleryTpl`, `customTpl`, `playerSRC`, `youtube`, `vimeo`, `posterSRC`, `playerSize`, `playerOptions`, `playerStart`, `playerStop`, `playerTitle`, `playerCaption`, `playerAspect`, `textTrackSRC`, `playerPreload`, `playerColor`, `youtubeOptions`, `vimeoOptions`, `sliderDelay`, `sliderSpeed`, `sliderStartSlide`, `data`, `cteAlias`, `articleAlias`, `article`, `form`, `module`, `groups`, `cssID`, `start`, `stop`, `com_order`, `com_perPage`, `com_template`) VALUES ('','headline',0,0,0,0,'',0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,NULL,2,5,'tl_article',128,1786716133,'a:2:{s:4:\"unit\";s:2:\"h2\";s:5:\"value\";s:14:\"Perspektivwerk\";}','a:2:{s:5:\"value\";s:0:\"\";s:4:\"unit\";s:2:\"h2\";}',NULL,NULL,NULL,NULL,NULL,NULL,'above',NULL,NULL,'',NULL,NULL,'',0,'ascending','','','','','sourceText',NULL,NULL,'','','','',NULL,4,0,0,'','','',NULL,'','',NULL,'',NULL,'','','','','',NULL,'','',NULL,NULL,0,300,0,NULL,0,0,0,0,0,NULL,'a:2:{i:0;s:0:\"\";i:1;s:0:\"\";}','','','ascending',0,'');
-INSERT INTO `tl_content` (`title`, `type`, `addImage`, `showPreview`, `inline`, `overwriteMeta`, `size`, `fullsize`, `thead`, `tfoot`, `tleft`, `sortable`, `closeSections`, `target`, `overwriteLink`, `useImage`, `useHomeDir`, `metaIgnore`, `splashImage`, `sliderContinuous`, `protected`, `jumpTo`, `redirectBack`, `autologin`, `pwResetPage`, `invisible`, `com_moderate`, `com_bbcode`, `com_disableCaptcha`, `com_requireLogin`, `jsonData`, `id`, `pid`, `ptable`, `sorting`, `tstamp`, `headline`, `sectionHeadline`, `text`, `singleSRC`, `alt`, `imageTitle`, `imageUrl`, `caption`, `floating`, `html`, `unfilteredHtml`, `listtype`, `listitems`, `tableitems`, `summary`, `sortIndex`, `sortOrder`, `mooHeadline`, `mooStyle`, `mooClasses`, `highlight`, `markdownSource`, `code`, `url`, `titleText`, `linkTitle`, `embed`, `rel`, `multiSRC`, `perRow`, `perPage`, `numberOfItems`, `sortBy`, `galleryTpl`, `customTpl`, `playerSRC`, `youtube`, `vimeo`, `posterSRC`, `playerSize`, `playerOptions`, `playerStart`, `playerStop`, `playerTitle`, `playerCaption`, `playerAspect`, `textTrackSRC`, `playerPreload`, `playerColor`, `youtubeOptions`, `vimeoOptions`, `sliderDelay`, `sliderSpeed`, `sliderStartSlide`, `data`, `cteAlias`, `articleAlias`, `article`, `form`, `module`, `groups`, `cssID`, `start`, `stop`, `com_order`, `com_perPage`, `com_template`) VALUES ('','headline',0,0,0,0,'',0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,NULL,3,3,'tl_article',128,1786716801,'a:2:{s:4:\"unit\";s:2:\"h2\";s:5:\"value\";s:83:\"PerspektivWerk ÔÇô Br├╝cke zwischen Diagnostik, Begleitung und betrieblicher Praxis\";}','a:2:{s:5:\"value\";s:0:\"\";s:4:\"unit\";s:2:\"h2\";}',NULL,NULL,NULL,NULL,NULL,NULL,'above',NULL,NULL,'',NULL,NULL,'',0,'ascending','','','','','sourceText',NULL,NULL,'','','','',NULL,4,0,0,'','','',NULL,'','',NULL,'',NULL,'','','','','',NULL,'','',NULL,NULL,0,300,0,NULL,0,0,0,0,0,NULL,'a:2:{i:0;s:0:\"\";i:1;s:0:\"\";}','','','ascending',0,'');
-
-
-/*!40103 SET TIME_ZONE=@OLD_TIME_ZONE */;
-
-/*!40101 SET SQL_MODE=@OLD_SQL_MODE */;
-/*!40014 SET FOREIGN_KEY_CHECKS=@OLD_FOREIGN_KEY_CHECKS */;
-/*!40101 SET CHARACTER_SET_CLIENT=@OLD_CHARACTER_SET_CLIENT */;
-/*!40101 SET CHARACTER_SET_RESULTS=@OLD_CHARACTER_SET_RESULTS */;
-/*!40101 SET COLLATION_CONNECTION=@OLD_COLLATION_CONNECTION */;
-/*!40111 SET SQL_NOTES=@OLD_SQL_NOTES */;
-

development-system/php-apache/Dockerfile

@@ -2,9 +2,9 @@ FROM php:8.3-apache
 
 RUN apt-get update \
     && apt-get install -y --no-install-recommends \
-       git unzip libicu-dev libzip-dev libpng-dev libjpeg62-turbo-dev libfreetype6-dev \
+       git unzip libicu-dev libzip-dev libpng-dev libjpeg62-turbo-dev libfreetype6-dev libcurl4-openssl-dev libonig-dev \
     && docker-php-ext-configure gd --with-freetype --with-jpeg \
-    && docker-php-ext-install -j"$(nproc)" intl gd mysqli pdo_mysql zip opcache \
+    && docker-php-ext-install -j"$(nproc)" curl intl gd mbstring mysqli pdo_mysql zip opcache \
     && a2enmod rewrite headers expires \
     && echo "memory_limit=256M" > /usr/local/etc/php/conf.d/contao-memory-limit.ini \
     && rm -rf /var/lib/apt/lists/*
@@ -18,4 +18,4 @@ COPY composer.json ./
 RUN if [ -f composer.json ]; then composer install --no-interaction --prefer-dist --no-progress; fi
 
 RUN mkdir -p var public/assets \
-    && chown -R www-data:www-data var public
+    && chown -R www-data:www-data vendor var public

development-system/public/app.php

@@ -0,0 +1,13 @@
+<?php
+
+declare(strict_types=1);
+
+/*
+ * This file is part of Contao.
+ *
+ * (c) Leo Feyer
+ *
+ * @license LGPL-3.0-or-later
+ */
+
+require __DIR__.'/index.php';

development-system/public/index.php

@@ -10,6 +10,7 @@ declare(strict_types=1);
  * @license LGPL-3.0-or-later
  */
 
+use Composer\Autoload\ClassLoader;
 use Contao\ManagerBundle\HttpKernel\ContaoKernel;
 use Symfony\Component\HttpFoundation\Request;
 use Symfony\Component\HttpKernel\TerminableInterface;
@@ -28,12 +29,13 @@ if (file_exists(__DIR__.'/../var/maintenance.html')) {
 
     http_response_code(503);
     header('Content-Type: text/html; charset=UTF-8');
-    header('Content-Length: '.strlen((string) $contents));
+    header('Content-Length: '.strlen($contents));
     header('Cache-Control: no-store');
 
     die($contents);
 }
 
+/** @var ClassLoader $loader */
 $loader = require __DIR__.'/../vendor/autoload.php';
 
 $request = Request::createFromGlobals();

development-system/public/preview.php

@@ -10,6 +10,7 @@ declare(strict_types=1);
  * @license LGPL-3.0-or-later
  */
 
+use Composer\Autoload\ClassLoader;
 use Contao\ManagerBundle\HttpKernel\ContaoKernel;
 use FOS\HttpCache\TagHeaderFormatter\TagHeaderFormatter;
 use Symfony\Component\HttpFoundation\Request;
@@ -29,12 +30,13 @@ if (file_exists(__DIR__.'/../var/maintenance.html')) {
 
     http_response_code(503);
     header('Content-Type: text/html; charset=UTF-8');
-    header('Content-Length: '.strlen((string) $contents));
+    header('Content-Length: '.strlen($contents));
     header('Cache-Control: no-store');
 
     die($contents);
 }
 
+/** @var ClassLoader $loader */
 $loader = require __DIR__.'/../vendor/autoload.php';
 
 $request = Request::createFromGlobals();

development-system/tests/ContaoBaseline.Tests.ps1

@@ -6,14 +6,8 @@ $importScriptPath = Join-Path $projectRoot 'scripts\Import-ContaoBaseline.ps1'
 Describe 'Contao baseline' {
     $seed = Get-Content -LiteralPath $seedPath -Raw
 
-    It 'contains the page-specific PerspektivWerk background rule' {
+    It 'starts without Contao 5 content data after the version reset' {
-        $seed | Should Match 'body\.perspektivwerk-page \{ background-color: #159A34; \}'
+        $seed | Should Not Match 'INSERT INTO `tl_'
-    }
-
-    It 'contains the versioned Contao website tables' {
-        foreach ($table in @('tl_theme', 'tl_layout', 'tl_page', 'tl_article', 'tl_content')) {
-            $seed | Should Match "INSERT INTO ``$table``"
-        }
     }
 
     It 'does not contain user, runtime or unversioned file metadata' {