Changelog
Release Notes
Every feature, every improvement, every fix since v1.0.0.
Honest Freshness Signals, a Content Quality Gate for Automation, and Full-Document Revision Restore
Added
- Editorial date model: posts now track "last meaningful content change" separately from internal system touches. Schema.org dateModified, article:modified_time and sitemap lastmod are generated from the new signal — so bulk SEO passes, counters and cache refreshes no longer make hundreds of posts look "updated today" to search engines. When editing a published post you can also override the automatic detection: mark a save as a content update or a technical fix.
- Content Quality Gate: every automated publish path — content queue approval and publish (single and bulk), scheduled publishing, REST API and n8n webhooks — runs the same deterministic quality checks before anything goes live: minimum content length, duplicate and near-duplicate titles, and broken local image references block publication with visible reasons; missing featured image, internal links or headings raise warnings. The gate re-runs at the moment of publishing (so post-approval edits are re-checked), and fails closed: if the check itself errors, nothing is published. Thresholds are configurable in Settings.
- Full-document revisions: each revision now stores a complete snapshot — SEO meta, categories, tags, featured image, author, status and dates — and restoring one brings back the content, SEO, taxonomy, featured image and author. Publication status and dates are deliberately not restored, so restoring never unpublishes a live post or rewrites its history. The state before a restore is saved as its own revision, and the revision limit is now configurable (default raised from 10 to 50).
- Author Person schema now includes verifiable sameAs links built from the author's social profiles and website, alongside the job title, bio and photo added in the previous release.
Improved
- The REST API now returns explicit ISO 8601 editorial dates (content_modified_at, reviewed_at) on post endpoints and accepts content_modified_at on writes, so migrations and rewrites can preserve original dates.
Fixed
- Schema dateModified and sitemap lastmod could report a date earlier than the publish date on scheduled posts; both are now clamped so a modification date never precedes publication.
- The sample admin account seeded by a manual database import shipped with a known example password; the seed now ships with an unusable password hash, and the installer sets real credentials as before.
Legal Pages Repaired and Expanded, Author Archives Fixed, Tag Indexing Made Consistent
Improved
- The default Cookie Policy was rewritten to be genuinely comprehensive in both languages: cookie categories with purposes, legal bases and durations in a table, first/third-party and session/persistent distinctions, named third parties with opt-out links, consent management and withdrawal, browser instructions, Do Not Track / Global Privacy Control, and a legal-basis section (KVKK on Turkish sites, GDPR/ePrivacy on English ones).
Fixed
- The built-in legal page templates shipped with corrupted text in all 13 themes — Turkish characters and arrow symbols rendered as garbage ("→", "Çerez") on fresh installs that had not saved their own legal pages. The templates were re-encoded and every character now renders correctly in both languages.
- Opening an author archive on the Personal theme returned a server error: a routing variable leaked into the template and shadowed the real author record. Author pages now render on every theme, and a non-existent author correctly returns 404.
- Tag archives could be indexed by search engines even while tag archives were disabled in SEO settings — the sitemap respected the setting but the page-level robots meta did not. With tag archives off (the default), every tag page is now noindex.
- On the Finance theme, the author box at the end of a post showed the author's name as plain text; it now links to the author's archive page, and the Pets theme's archive pages now emit a proper page title and meta description instead of just the site name.
Personal Theme: Full-Width Brand Logo with Automatic Light/Dark Switching
Added
- The Personal theme now supports a full-width brand logo in the header: upload your logo (and an optional dark variant) under Settings → Branding and it replaces the icon + site-name pair, switching automatically with the visitor's light/dark preference. The site name stays in the markup as a visually-hidden heading, so the Google site-name signal is preserved. Nothing changes for sites without an uploaded logo.
Stories, the Instagram Way: One "Latest Posts" Bubble That Plays Your Recent Content
Improved
- Automatic post stories were redesigned around how Instagram actually works: instead of one bubble per post crowding the strip, there is now a SINGLE "Latest Posts" bubble — tap it and the posts from your chosen window (3, 7, 15, 30 days… up to 90) play as slides, newest first, each with its featured image, title and a "Read Post" button. The bubble is fully virtual: nothing is written to the stories database, new posts appear in it the moment they are published, old ones drop off as they leave the window, and the ring lights up again whenever a new post arrives.
- The bubble's name follows the site language ("Son İçerikler" / "Latest Posts") and can be customized in settings. Bubbles you created by hand are untouched and keep their place next to it; the per-post bubbles generated by the previous version are cleaned up automatically.
Fixed
- Opening the Stories admin page by its direct URL (without a module parameter) returned a server error — a strict-mode array access crashed before the page could render. The page now opens correctly from anywhere.
Stories Strip Becomes a True Latest-Posts Showcase
Improved
- With auto-stories enabled, the strip now carries EVERY post published within the story lifetime window (7 days by default) — not just posts published after the feature was switched on. Older posts are backfilled automatically every hour, each story retires based on its post's publish date, and the newest post always sits first in the strip, Instagram-style.
- The strip now announces itself: when auto-stories are on and no custom heading is set, a heading in the site's language appears above the circles — "Son İçerikler" on Turkish sites, "Latest Posts" on English ones. Set your own heading to override it, or enter "-" to hide it entirely.
Image Captions Done Right: Visible Captions Are Now a First-Class Editor Feature
Added
- New "Caption" field in the image details dialog: add a visible caption under any image, shown identically on every theme via self-contained styling. The dialog now clearly separates the two concepts — alt text is invisible and for search engines and screen readers; the caption is the text readers actually see. Captions render live in the editor and are editable with one click.
Fixed
- Editing a post that contained figure-wrapped images could leak the old caption markup as a visible plain paragraph under the image — the editor did not understand the figure/figcaption structure, so saving unwrapped it and turned caption text into body text. The editor now parses figures natively: real captions survive editing round-trips intact, and legacy captions that merely duplicated the alt text are dropped automatically instead of becoming visible.
- Opening the image details dialog could scroll the page behind it, so you lost sight of which image you were editing. The background now stays exactly where it was while the dialog is open and after saving.
Click, Resize, Align: Full Image Editing Inside the Editor
Added
- Images in the post editor are now fully editable in place, the way WordPress users expect. Click an image and a floating toolbar appears right on it: size presets (Small 300px / Medium 600px / Full width), left-center-right alignment, a details button and remove — plus four corner handles you can drag to resize freely, with a live pixel readout while you drag. Aspect ratio is always preserved.
- New image details dialog (toolbar pencil or double-click the image): see and edit the alt text, title tooltip, exact pixel width and the image URL in one place, with a live preview. Alt text finally gets a proper editing home after insertion — good for accessibility and image SEO.
- Sizing and alignment are written into the content as self-contained inline styles, so they render identically on every theme — no theme CSS support required, and images never overflow on mobile (max-width is built in).
Fixed
- The alt text label in the image insert dialog was hardcoded in Turkish and appeared untranslated on English admin panels.
Posts List: One-Click SEO Score Refresh, Editor and List Finally Agree
Added
- New "Recalculate SEO Scores" button on the posts list: refreshes every post's stored SEO score with the current scoring engine — in batches of 100 with live progress, so a 1,000-post site takes seconds instead of hitting a timeout. Useful after upgrading, since scores saved by older versions used the old scoring rules.
Fixed
- The score in the editor and the score in the posts list could differ: the editor's live analyzer inspects the actual page structure (headings, tables, snippet blocks) while the save-time engine cannot, so recomputing on save produced a different number. The editor now passes its own score along when you save — the list shows exactly what the editor dial showed.
- The "Analyze All" AI button appeared on every installation, including ones with no AI provider configured, where clicking it could only show a setup notice. The button now appears only when AI is actually configured.
SEO Score You Can Trust: Fixed Budgets, No More Reward for Leaving Fields Empty
Improved
- Each check group in the SEO widget now shows its point contribution (e.g. "20/25p" next to Keyword) so you can see exactly where a score comes from and which section is worth fixing first.
Fixed
- A post with NO focus keyword could score 80-90, and the score DROPPED the moment you entered one — the old ratio model removed the keyword checks from the denominator when the field was empty, so withholding information was mathematically rewarded. Scoring now uses fixed category budgets (keyword 25, content 20, structure 15, basics 15, readability 10, visuals 10, schema 5): an empty keyword field burns its whole 25-point budget, and filling in information can only raise your score, never lower it. The same flaw existed in the score saved on every post update (an even stronger version: keyword-less posts were graded out of 50 and could reach 100) — post saves now use the same fixed-budget engine as the SEO Optimizer page, so all scores finally speak the same language.
- Turkish keywords containing İ/I (e.g. "İçerik Pazarlaması") silently failed every match — title, content and density checks all reported "keyword not found" because of a Unicode case-folding quirk. Keyword matching is now Turkish-aware across the editor widget, the save-time score and the SEO Optimizer. Density also counts whole words only (a short keyword inside longer words no longer inflates the percentage) and word counting is UTF-8 correct.
- The title length check said "good" up to 70 characters while the SERP preview's pixel meter showed the same title being cut at ~580px — the two now agree (60-character budget), and a keyword missing from the title is no longer punished twice.
SEO Assistant: Content Structure Checks, Pixel-Accurate SERP Preview, Wider AI Analysis
Added
- New "Content Structure" check group in the editor's SEO assistant — seven checks that mirror how editors actually review a draft: duplicate H1 in the body (your title is already the page H1), skipped heading levels (H2→H4), a too-thin intro before the first heading, a missing conclusion/summary section on long posts, table and list usage, and a featured-snippet readiness check that looks for a question heading followed by a concise 40–60 word answer.
- The SERP preview now measures your title and description in pixels, the way Google actually truncates them (~580px for titles, ~990px for descriptions on desktop). Character counts stay, pixel widths appear next to them and turn red when the limit is exceeded — no more titles that pass the character check but still get cut in results.
- AI deep analysis covers four new dimensions: overall content quality (informativeness, originality, freshness), Google Helpful Content fit, AI-search readiness (would an AI Overview cite this page?), and AdSense policy suitability — including thin-content and clickbait-mismatch warnings before you publish.
Fixed
- The SERP preview showed a broken icon instead of your favicon: it pointed at a file path that only exists on jekcms.com, not on customer installations. The preview now resolves the site's real favicon through the same priority chain the front end uses (uploaded favicon, site-root favicon files, generated icon), with a letter-badge fallback so the slot is never empty.
Google Console: PageSpeed Tab, Fresh Search Data, Stability Fixes
Added
- New PageSpeed tab: measure any page of your site with Google PageSpeed Insights (Lighthouse) right from the panel — mobile and desktop scores for Performance, Accessibility, Best Practices and SEO, lab metrics (FCP, LCP, TBT, CLS, Speed Index) and real-user Core Web Vitals (CrUX) when Google has field data for your site. Works without a Google connection; results are cached for 24 hours. An optional API key setting raises the measurement quota.
Fixed
- Search Console reports were consistently thinner than the GSC interface: the API omits the last ~2 days by default ("final" data), so recent queries and clicks simply never appeared — the exact "my search terms don't show up" complaint. All Search Console reports now request fresh data, matching what the GSC UI shows.
- The Top Queries and Top Pages cards swallowed API errors and displayed a misleading "No data" — a quota or permission problem now shows its actual, actionable message on the card itself (same for the Analytics tables).
- When Google was unreachable, every page load fired the full set of live API calls with 20-second timeouts each, freezing the panel; failed responses are now briefly cached so the page stays responsive, and the Refresh button retries immediately. The response cache table also cleans up its expired rows, which previously accumulated forever.
ZeroTrack Analytics: Data Collection Restored on Production Sites
Fixed
- ZeroTrack silently stopped recording visits on production installations: the standalone beacon endpoint read database credentials only from .env, but production installs keep the real credentials in .env-production (the installer writes them there). The endpoint could never connect, answered every beacon with a polite 204, and the dashboard showed zeros while the site had traffic. The endpoint now uses the same environment-file priority as the rest of the CMS (.env-production first), and a failed database connection is written to the error log instead of disappearing without a trace.
- Page views could be counted twice: both the plugin hook and the core footer injected the tracker script, and the plugin side ignored the once-per-page guard. The guard is now honored on both paths — one tracker, one beacon, one count per view.
SEO Analyzer: Turkish-Correct Matching, Keyword Cannibalization Warning, New Checks
Added
- Keyword cannibalization warning: as you type a focus keyword, the analyzer checks whether another post already targets it and names that post — the classic premium-plugin feature, built in.
- Three new checks: a warning when the meta description merely copies the title, a nudge when no image alt text contains the focus keyword, and a heads-up for slugs containing Turkish/special characters.
Fixed
- Turkish focus keywords were silently failing: JavaScript lowercases dotted İ into a combining character, so a title like "İçerik Rehberi" never matched the focus keyword "içerik" — the analyzer wrongly reported the keyword missing from the title, description, headings, and first paragraph. A Turkish-aware folder now backs every comparison, and the slug check ascii-folds the keyword ("beslenme önerileri" correctly matches "beslenme-onerileri").
- Keyword density counted substrings ("spor" also counted "sporcu"); it now counts whole words. Internal/external link detection resolves the real hostname instead of matching the site name anywhere in the URL. The analyzer also stopped re-rendering every 2.5 seconds, which used to force categories you had collapsed back open.
- On installations without the AI settings table, the editor died mid-page with "Server Error" while rendering the AI tab; the check is now failure-safe and the editor always loads.
- The social preview card showed a broken image for uploads-relative featured paths; description length limits were aligned to 160 everywhere.
Health Theme Speaks Your Site Language on the Frontend
Fixed
- On Turkish sites the Health theme still printed dozens of hardcoded English strings — section titles (Most Popular, Trending Topics, Latest Articles, Recommended), the entire footer navigation (About, Categories, For You, Editorial, Connect and every link inside them), the author card (About Author, View All Articles), the comment form (Leave a comment, Name, Email, Post comment), search, 404, tags, and the fallback header menu (Home, About). All of them now follow the site language setting: Turkish sites read fully Turkish, English sites are unchanged.
Health and Travel Headers No Longer Leak Broken Markup
Fixed
- On the Health and Travel homepages the brand link's H1 was printed inside the aria-label attribute, breaking the attribute and leaking a literal « — home"> » text next to the logo (most visible on fresh installs without a logo). The H1 now renders inside the link body where it belongs; the accessibility label and the SEO site-name signal both work as intended.
Wizard Polish: Come Back Days Later, Nothing Is Lost
Improved
- Take the prompt, close the browser, come back next week with the AI's JSON: the wizard now remembers every choice, greets you with a "Jump to import" shortcut, and the step chips are clickable so you can move to any step directly — no more starting over.
- The Content Studio menu is now one flat list in a clear order (Overview, Content Wizard, AI Content, Automation, Content Queue) — the confusing "Advanced" sub-group is gone — and it stays visible inside the Content Queue and Automation pages too, so sub-pages no longer feel like leaving the studio.
- The Pinterest and external-link option cards were realigned (checkbox beside the title instead of floating above it) and light up when selected.
Fixed
- The sample JSON no longer carries a fixed example date in scheduled_at — some AIs copied that stale date into every article. Scheduling belongs to the wizard's own final step.
- The old JSON generator form inside the import tab was removed (the wizard replaced it); the tab now cleanly hosts the raw import tools (JSON file, Google Sheets, CSV) with a pointer to the wizard.
Content Wizard: Plan, Create, and Schedule in One Guided Flow
Added
- The new Content Wizard (Content Studio → Content Wizard) replaces the old maze of JSON wizard, batch planner, and import tab with one step-by-step experience: how many articles → topic and keywords → richness (word count, images, Pinterest, authority links) → who creates it → schedule. Your theme profile is auto-detected, so recipe, travel, and finance themes automatically request their special fields.
- Two creation paths, same quality contract: use your own ChatGPT/Claude/Gemini account for free (copy one prompt, drop the returned JSON back — the wizard imports and validates it), or let jekcms generate everything through your API key, article by article with a live progress bar. Both land in the same review queue.
- The final step schedules the whole batch on a rhythm (daily, every 2-3 days, weekly) with a randomized time window, and explains the image workflow plainly: every article ships with a ready image plan (per-image generation prompts); generate covers automatically via the AI Images plugin, or create them anywhere, name them by slug, upload to uploads/temp and press Match Images.
Improved
- Content Studio's inner menu was decluttered (Posts and New Post moved back to the main sidebar where they belong) and it now stays visible on every studio sub-page, so you never lose your bearings. The n8n automation planner and raw queue live under a clearly labeled "Advanced" section.
- The single-draft AI tool now shares one AI client with the wizard (Gemini, Groq, and OpenAI — OpenAI upgraded to gpt-4o-mini).
The Finance Footer Shows Your Logo Instead of Plain Text
Fixed
- The Finance theme footer always printed the site name as plain text and never used the logo you uploaded. It now shows the logo, preferring the dark-mode variant because the footer background is dark in both themes. Sites without a logo keep the text heading exactly as before.
A Newly Uploaded Logo Now Appears Immediately
Fixed
- Replacing your logo from Settings → Branding could leave visitors looking at the old one for a long time. Uploads are served with a one-year "immutable" cache header, so once a browser or CDN had the file at that address it never asked again — and a CDN could keep serving a stale copy even after the file on the server changed. Logo URLs now carry the file's modification time, so a new upload is a new address and every visitor sees it on the next page load.
Author Pages Get Photos and an Archive Layout Fix
Improved
- Author archive pages now show the author's photo next to their name in both Finance and Pets — the header no longer reads as an anonymous text block.
Fixed
- Finance archive pages (category, tag, author) stacked the sidebar full-width below the article cards because the layout container had no grid rules; the sidebar is back in its right-hand column. The archive breadcrumb also lost its detached white band, matching single posts.
- Author archive pages claimed every author was a "Financial Analyst" when no credential was set; the fabricated fallback was removed and only real credentials render.
- On the Pets homepage, when the newest post was the only one published, the grid below the featured card rendered as a large blank area; a short "more articles on the way" note now fills it.
Finance Theme: Sans Headings, Breadcrumb Fix, Dark-Mode Readability
Improved
- The default heading font switched from the serif Fraunces to Inter: every heading across the theme now shares one modern sans family. Sites that picked a custom heading font in the Customizer keep their choice.
Fixed
- On single posts the breadcrumb sat in a detached band that ended up unreadable behind the colored post header; it now lives inside the header as light, legible text.
- In dark mode, links inside articles and the table of contents used the light-mode teal and nearly disappeared against the dark background; dark mode now switches them to a bright, readable tone without touching buttons or the hero.
Finance Theme: Sticky Table of Contents, Author Bio, Tidier Cards
Improved
- The "In This Article" table of contents no longer pushes the article down from the top of the content: it moved into the right sidebar, where it stays visible (sticky) while the reader scrolls through long articles.
- Article cards were tidied up: date and reading time sit on one muted line separated from the content, and the author appears as an aligned chip with a round photo instead of a loose letter placeholder. The homepage now also loads author photos for its cards.
- More breathing room between the homepage hero and the "Latest Articles" section.
Fixed
- The author box under articles rendered without the author's biography because the router does not pass it; the template now loads the bio itself, so the full author card (photo, name, bio) appears.
Finance Theme: Design Consistency Pass and Author Byline Fix
Fixed
- Every Finance article showed "Staff Writer" as the byline and skipped the author box entirely, even when the post had a real author. The template expected author data in a nested array while the router provides flat fields; the template now reads both, so the correct name, avatar and author box render on every post.
- The Finance theme received a design consistency pass: the serif display font is now reserved for article headlines while all interface labels use the sans family, the color palette was unified around the theme's navy and gold (the off-brand purple button and blue underlines are gone), the newsletter box no longer blends into the hero, the unused gray band between header and hero was removed, the trending numbers and footer fine print are readable, the author avatar aligns with its name, and archive pages say "1 Article" instead of "1.00 Articles".
- Hardcoded newsletter and footer texts that promised "market analysis and investment tips" were replaced with neutral wording that fits any finance site built on the theme.
Logo Variants: Dark-Mode and Retina Logos, Uploaded from the Panel
Added
- Settings → Branding now accepts three optional logo variants alongside your main logo: a dark-mode logo and 2x (retina) versions of both. When the visitor switches to dark mode the logo swaps instantly — no page reload — and high-density screens automatically receive the sharper file. If you never upload a dark logo, nothing changes: the light logo is used everywhere, exactly as before.
- Themes with permanently dark areas (like the Pets footer) automatically prefer the dark-mode logo there when one is uploaded, so a dark-text logo no longer disappears into a dark background.
Fixed
- The Finance homepage never listed articles on any installation: the home route loaded the template without passing it data, so the "Latest Articles" section always claimed the site was empty. The template now queries published posts itself, with pagination.
- A sweep of rough edges reported on fresh installs: the tagline no longer duplicates next to the logo in the Finance header, raw emoji icons were removed from category chips and lists in both Finance and Pets, a literal "NULL" tag and a "0.00 views" line no longer render in the Finance sidebar, empty tag boxes hide themselves, the featured-post category badge no longer overlaps the title in Pets, and legal pages regained a readable header in all themes.
Theme Honesty: Placeholder Stats Removed, Fresh-Install Language Fixed
Fixed
- The Finance theme homepage shipped with hard-coded placeholder claims — invented reader counts, satisfaction percentages and a fake "expert analysts" figure. All of it is gone: the hero now speaks with your site name and tagline, and the stats strip only appears once it has real numbers from your own database to show.
- Fresh installs now seed the site language from the setup wizard. Previously the language row was never written, so every new site quietly fell back to Turkish in the footer and legal pages — even when everything else was in English.
- Finance and Pets headers printed the logo and the site name side by side, doubling the brand. With a logo set, the text is now kept for screen readers only; without a logo, the text brand still shows.
- The Pets homepage listed every category — including empty ones and the seeded "Uncategorized" — each with a "0" badge. Category lists now show only categories that actually have published posts, without count badges.
Zero-Setup Scheduling: Posts Publish On Time Without a Server Cron
Added
- Scheduled posts and the content queue no longer depend on a server cron job. A built-in scheduler keeps a "next job due" timestamp and, when that moment arrives, runs the publishing engine right after a page response has been delivered to the visitor — so a post scheduled for 14:37 goes live on the first visit at or after 14:37, and the visitor never waits for it. On hosts that cannot detach the response, the work is handed to a lightweight background request instead.
- A real cron job is still first-class: when one is configured it takes over completely and the visitor-triggered scheduler switches itself off, adding zero overhead. It can also be disabled explicitly with the JEK_DISABLE_PSEUDO_CRON constant.
Improved
- The old fallback rolled a dice on every request (a 1% chance), which meant late posts on quiet sites and wasted database work on busy ones. The new scheduler is deterministic: on a normal request it reads one or two tiny files and does nothing else — no database queries, no guesswork.
First-Publish Journey: Redesigned Welcome Guide
Improved
- The dashboard welcome guide was rebuilt as a slim one-line journey rail: a circular progress ring, five connected step dots and a single call-to-action for whatever comes next. It takes a fraction of the space of the old checklist and reads at a glance.
- The five steps now follow the real order of setting up a site: site identity (name and tagline), logo, first category, first published post, and securing your admin password. Every step updates live as you complete it anywhere in the admin, and each links straight to the right screen.
- "Pick a theme" and "connect an AI provider" are no longer setup steps — keeping the theme you chose during installation is a perfectly good choice, and AI is optional.
Featured Image Path Fix in Theme Templates
Fixed
- A handful of theme templates (Recipes cards and pages, Starter posts, Pets error page) printed the featured image path exactly as stored in the database. Relative paths then resolved against the site root and returned 404, so those images never showed. All of these now resolve through the central image helper, which builds the correct uploads URL and serves the best available format.
Logo Aspect Ratio & Accessibility Fixes
Fixed
- Site logos in the Health and Travel themes now declare their real pixel dimensions instead of fixed placeholder values, so uploaded logos of any shape render at the correct aspect ratio without distortion or layout-shift warnings.
Setup Wizard 2.0: WordPress Migration at Scale & Smart Recovery
Added
- Resumable WordPress migration: progress is saved on the server after every batch — if your browser closes or the connection drops mid-migration, reopening the wizard offers to continue exactly where it left off.
- Same-server fast path: when WordPress lives on the same hosting account, images are copied directly from disk instead of downloaded over HTTP — large media libraries migrate in a fraction of the time.
- Smarter server pre-check: disk space, memory limit, upload size and next-gen image support are now verified up front, with plain-language guidance for anything that needs attention — required items block, optional ones just warn.
- Full WordPress fidelity: pending, private and scheduled posts keep their status, comment reply threads are preserved, comment author links are carried over, and your site logo is localized automatically.
Improved
- Wizard actions are protected with a per-session token, and the legacy parameter that allowed re-running installation on an already-installed site has been removed.
Fixed
- In-place migrations (same domain) now migrate images correctly: previously same-domain image URLs were skipped as "already local", and removing the old WordPress files afterwards broke every image in your content.
- Large sites no longer risk server timeouts: imports run in time-budgeted batches with keyset pagination, and comments are imported in batches too — sites with tens of thousands of posts and comments migrate reliably on shared hosting.
- Tag and category names containing commas are no longer split into separate terms, and long tag lists are no longer truncated.
- Your existing .htaccess is backed up before installation replaces it, featured images resolve from WordPress metadata instead of unreliable legacy URLs, and stale responsive image attributes pointing at the old site are cleaned up.
- The setup wizard now speaks your language end to end — every server-side message is available in English and Turkish, and unrecoverable server errors return a readable explanation instead of a blank response.
Managed-Install Indicator Hardening
Fixed
- Centrally-managed installations without the license enforcement stack no longer show a dead-end "Update Available" banner and sidebar badge — the managed-install marker is now honored everywhere the update UI is rendered.
Commerce Core: Updates, License Portability, Plan Upgrades & Support
Added
- License portability from the customer panel: see every site bound to your license, remove one to free the slot, add a new domain, and activate there — moving a license between sites takes a minute and needs no support ticket.
- Theme and plugin updates now flow through the same signed channel as core: RSA-signed manifest covers every package, one-click theme/plugin updates work in the admin panel, and a publish pipeline ships them (package → verified upload → catalog).
- Plan upgrades from the customer panel: pay only the difference, your license key stays the same, and your site limit rises the moment payment completes — no re-activation on your sites.
- Support hardening: ticket confirmation emails to customers, staff notifications on replies, customer file attachments, priority support wired to your plan (Pro+ can open urgent tickets), and contact-form messages now land in the support queue instead of a write-only table.
Improved
- Core update notes in the admin panel now show the real release changelog instead of a generic package label.
- Update access tier is now read from the license record, so plan upgrades take effect on the update channel instantly.
Fixed
- License seat operations no longer depend on the execution context — the customer panel, admin, and API all use the same database seam (previously the panel path could fail fatally).
- Support tables are now guaranteed with self-healing schema (including legacy installs), so the customer portal cannot hit a missing-table error.
Site-Wide SEO Hardening
Added
- Archive pages (category, tag, author, search) now generate their own unique titles, meta descriptions, and Open Graph tags — no more duplicate-title clusters across archives, on every theme, with no theme changes required.
- Optional tag archives: a new SEO setting turns /tag/ pages into real, sitemap-listed archives (thin tags stay auto-noindexed). Off by default, matching modern crawl-budget guidance.
- Feeds now declare a WebSub hub, so feed readers and discovery services get real-time update pushes; uploaded images receive an automatic humanized alt text when none is provided.
Improved
- The first large content image on each page is now promoted to eager loading with high fetch priority — a direct LCP (Core Web Vitals) win on image-led pages.
- Meta descriptions no longer cut words in half: automatic descriptions now end on word boundaries with clean punctuation.
- Retired Google/Bing sitemap-ping calls were removed from the publish path (they only added seconds of dead waiting), and duplicate IndexNow submissions were deduplicated to a single ping per publish.
- Sitemap accuracy: real last-modified dates in the index, paginated post sitemaps are announced above 50k URLs, and video sitemaps join the index when video posts exist.
Fixed
- Structured data is now hardened against content that contains script-closing sequences (JSON_HEX_TAG across all emitters) — schemas can no longer be broken or exploited by post content.
- Open Graph URLs on archive pages pointed to the homepage; they now match the canonical URL. og:locale now always agrees with the html lang attribute.
- On subdirectory installs the og:image check failed silently and social cards shipped without an image; the base path is now resolved correctly.
- Non-existent category and author URLs returned an empty page with HTTP 200 (soft-404); they now return a real 404. Duplicate Recipe/FAQ schema emissions are prevented page-wide.
Stories: Consistent Emoji Art, Reaction Switching & Live Reaction Stream
Improved
- Reactions now use embedded SVG emoji art (Twemoji) instead of OS emojis — the same crisp, modern look on every device and browser, with no external requests.
- You can now change your reaction: tap a different emoji and the previous one is replaced, with counts adjusted correctly behind the scenes.
- Earlier reactions are now visible to every viewer as a subtle ambient stream — tiny emojis float up the story while it plays, proportional to how many reactions the slide collected.
- The Statistics page was redesigned: KPI tiles on top, per-slide view bars, CTR column, emoji-by-emoji reaction breakdowns, inline poll result bars, and a visual completion meter per story.
Instagram-Style Story Reactions
Improved
- Story reactions were redesigned in Instagram's quick-reaction language: six bare emojis (❤️ 😂 😮 😢 🔥 👏) with a springy pop on tap and a shower of emojis floating up the story — no button chrome, no grey chips.
Stories v1.1 — Auto-Stories, Polls, Reactions & Analytics
Added
- Auto-stories: when you publish a post, a story is created automatically from its featured image, title, and link — and retires on its own after a configurable lifetime. Your story strip stays fresh with zero manual work.
- Poll slides: ask a question with 2–4 answers; visitors tap to vote and instantly see live percentage bars. One vote per visitor, no login required.
- Emoji reactions (🔥 ❤️ 👏) on every slide — a single tap, cookie-free, one reaction per slide, with a satisfying burst animation.
- Statistics tab: per-slide views with a 7-day column, link clicks with CTR, reactions, poll result breakdowns, and a completion rate showing how many viewers reach the last slide.
Stories Cache Fix & Cleaner Admin
Improved
- The Stories admin was decluttered: slide editing is now collapsed behind an Edit toggle, add-slide tools are grouped into tidy accordions, and settings use aligned rows with inline inputs.
Fixed
- The Stories viewer script is now served with a server-cache bypass, so viewer fixes reach visitors immediately after an update instead of being pinned to a stale cached copy.
- Closing the viewer is hardened at the style level as well — the close button, Escape, and swipe-down work even if a theme stylesheet interferes.
Stories Viewer Fixes & Inline Links
Fixed
- The story viewer close button (and Escape / swipe-down) now reliably closes the overlay.
- Slide links are now clickable text instead of a separate button: the caption or card text itself opens the link, and inline links can be placed on any word with [visible text](url) syntax.
- The story-age indicator in the viewer header now shows explicit units (e.g. "3 h"), so it can no longer be mistaken for the slide duration.
Stories — Instagram-Style Stories for Your Site
Added
- New Stories plugin: a tappable story strip with a full-screen viewer — image, video (MP4/WebM), and text-card slides with auto-advancing progress bars, swipe/keyboard navigation, and hold-to-pause. Mobile-first, dependency-free, and zero page weight when no story is live.
- Every slide can carry a caption, a custom duration, and a call-to-action link with its own label — turn announcements into traffic.
- Scheduling and auto-expiry: stories go live and retire on their own; permanent "Highlight" stories pin to the end of the strip. View counts are tracked per story, cookie-free.
- Placement is yours: choose the strip position (below header, top of content, top of page, above footer, or a custom CSS selector) and target pages from settings — saved per theme, works on every theme without touching theme files.
- Appearance controls with live preview: circle or vertical-card shape, three sizes, classic gradient / solid / no ring, alignment, optional strip heading, and automatic gray rings for already-watched stories.
License Enforcement Gap-Closing
Improved
- The managed-install marker is now cryptographically signed and domain-bound, so it can no longer be forged to bypass license enforcement. Legitimate managed installs are unaffected.
- Operators now receive automatic alerts (email digest) for suspected redistribution, license clones, and installs that stopped verifying — detection no longer depends on manually opening a dashboard.
License Enforcement & EULA Hardening
Improved
- License verification now reports the copy's distribution origin, so unauthorized redistribution of a licensed copy is detected automatically and surfaced in the operator's installs dashboard. Legitimate installs are unaffected.
- The End User License Agreement (EULA) was strengthened with explicit clauses on embedded copy-tracking, its evidentiary value, liquidated damages, and reverse-engineering/rebranding bans; checkout now records EULA acceptance.
Install Integrity Hardening
Improved
- The install-integrity subsystem was strengthened so unauthorized modification or redistribution of a licensed copy is detected and traceable more reliably. Legitimate installs are unaffected.
Traffic & Distribution: Web Push Repair, Single IndexNow Key and Outreach Pacing
Improved
- The weekly opportunity limit in the backlink workspace is now actually enforced: once the week's quota is used, new additions are paused with a clear message — keeping outreach deliberate, exactly as the screen promises.
- Traffic Health now includes a Web Push row: service-worker reachability, subscriber count and the last send at a glance.
Fixed
- Web Push now works end-to-end. The public endpoints the browser needs (service worker, key, subscribe) were never wired into the router, so enabling push could not deliver a single notification. They are now first-class routes, subscriptions are validated before being stored, and sending respects a time budget so a large subscriber list can never stall publishing.
- One IndexNow key per site. The plugin and the core search pinger each generated their own key, leaving two key files in the site root and duplicate submissions. Both layers now share a single key; changing or regenerating it updates everything and removes the stale key file.
- Saving a setting after a test or an error no longer shows a generic "Saved." — the real result (test outcome, error detail) is now displayed.
- If VAPID keys could not be generated during activation, Web Push stayed permanently broken with no way to recover; the settings screen now regenerates them automatically and reports failures clearly.
Social Auto-Publish: Instagram Stories, Discord, Evergreen Re-sharing and Reliability
Added
- Instagram Stories. Every new post can now also be shared as a 9:16 story a few minutes after the feed post — the image is prepared automatically from the featured image. On by default, one toggle in settings.
- Discord channel publishing. Zero-friction: paste a channel webhook URL and every new post lands in your community as a rich embed (title, description, image, link). No app registration, no OAuth.
- Evergreen re-sharing. Opt-in: older evergreen posts are periodically re-shared to your text channels for steady archive traffic — age threshold and daily cap are configurable, visual channels are excluded, and the same post is never repeated within the window.
- Failed-item recovery. The queue screen now lets you retry or delete failed items (one or all) and shows a 7-day per-platform success-rate table.
Improved
- Adding a new token-based platform no longer requires editing the admin screen: connection forms are generated from the platform registry.
- Facebook Page connections now exchange for a long-lived token and refresh themselves — previously the token silently died within hours and the account broke on first publish.
- The queue is now claimed atomically per item, so overlapping schedulers can never double-publish; stuck items self-recover after 30 minutes, and web-cron runs respect a time budget.
Fixed
- Pinterest "Diagnose" results were never written to the log (a status value the table did not accept was silently dropped).
- Expired connections are now labeled as expired with a clear reconnect signal instead of a generic error.
- The X/Twitter authorization no longer requests a media permission the adapter never uses.
Admin Raw-Key Repair: 249 Missing Translations Restored
Fixed
- Several admin pages showed raw translation keys instead of text (e.g. "admin_blog_posts.th_title") — in both languages. 249 missing dictionary entries were authored in Turkish and English across the blog posts, licenses, email templates, order detail, invoices, backups and login screens; a new linter check now blocks any future use of an undefined key.
- The theme catalog page and the sidebar's First-Install Package label were hardcoded in Turkish; they now follow the admin language.
- The invoices screen crashed on load: its overdue-count query referenced a column that never existed (due_at → due_date).
Customer Portal Fully Bilingual + a Language-Leak Shield
Improved
- A new internal language-leak linter guards every future change: any new user-facing string that is not born as a TR/EN pair is caught before release, so this class of bug cannot silently return.
Fixed
- Turkish text no longer leaks into the English customer portal (and vice versa). Every remaining single-language page was made properly bilingual: security settings, email verification, forgot/reset password, checkout and its success/cancel pages, support tickets, downloads and order details.
- The setup wizard now speaks English. The first screen a new buyer sees was almost entirely Turkish; it is now fully bilingual with a TR/EN switcher, follows the browser language by default, and all of its error messages are translated too.
Site Name Signal Completed Across All 14 Themes
Fixed
- Every theme's homepage now marks the site name as an H1 heading — completing all four signals Google documents for choosing the site name shown in search results, so Google stops falling back to the bare domain. The heading renders with zero visual change; inner pages keep their content H1. (Personal shipped in the previous release; the remaining 13 themes are covered now.)
- The Minimalist theme's header brand was hardcoded to a specific site name; it now follows the Site Name setting like every other theme.
- The Finance theme showed no brand at all when no logo was uploaded, and its homepage detection could mislabel search or paginated pages; both were corrected.
- The Recipes theme rendered its brand as an H1 on every page, giving articles two H1s; the brand is an H1 on the homepage only now.
Personal Theme: Site Name Signal Completed for Google (Homepage H1)
Fixed
- Google could fall back to showing your domain instead of your site name in search results. The Personal theme's homepage had no H1 heading — one of the four signals Google documents for choosing a site name (WebSite structured data, og:site_name, title, and a prominent heading). The header brand now renders as an H1 on the homepage only, with identical visual styling; inner pages keep their content H1.
Buying Goes Live: Pricing-Page Checkout and a Discount Campaign Manager
Added
- The pricing page now sells. Every plan's button opens the secure checkout with that plan preselected; signed-in customers get their email and name prefilled, and the checkout language follows the site language.
- Discount campaign manager. Define campaigns in the admin — percentage or fixed amount, date windows, redemption limits, per-plan restrictions and special-day presets (New Year, Black Friday, and more). Campaigns sync to the payment provider automatically; the pricing page shows a campaign banner and can apply the code at checkout without the customer typing anything.
Fixed
- Plan prices defined in code had drifted from the public pricing page; they are aligned again.
International Payments via Polar, Instant License Delivery, and an Account Security Overhaul
Added
- International card payments via Polar (Merchant of Record). Every paid Polar order automatically creates the customer account, issues the license key, generates the invoice and emails the key — no manual steps. Deliveries are idempotent, webhook signatures are verified, and the checkout thank-you page shows the license key the moment it is ready.
- Email verification for customer accounts. New registrations receive a verification link (sign-in is never blocked); changing your email re-requires verification of the new address and notifies the old one. A new resend-verification page replaces links that previously led nowhere.
- Account deletion (GDPR/KVKK). Customers can permanently anonymize their account from the Security page with password confirmation; order and invoice records are retained as required by law.
- Real login history. The Security page now shows actual sign-in attempts (date, IP, outcome) — the old list was wired to a table nothing ever wrote to.
Improved
- Brute-force protection is now database-backed. The old limiter counted attempts inside the visitor's own session, so clearing cookies reset it; limits are now enforced per email and per IP across sessions, and every attempt is audit-logged.
- Changing your password now confirms it by email and refreshes the session; the non-functional "Remember me" checkbox was removed (sessions already persist for 30 days).
Fixed
- The email verification page queried columns that never existed in production, so verification links could not work; it now uses the real schema.
- Viewing a support ticket linked to an order could fail due to a query against a non-existent table.
- Site-validation bots of payment providers were blocked by an over-broad user-agent filter, which made provider onboarding fail with "could not reach this URL".
Sign-In Flow Streamlined: Session-Aware Header and Google-Only Social Login
Improved
- The site header now recognizes signed-in customers. After signing in or registering, the "Sign In / Get Started" buttons are replaced with "Dashboard" and "Sign Out" — on desktop and in the mobile menu.
- Signing in no longer pulls you away from the page. Logging in or registering from the site keeps you where you were instead of forcing a redirect to the customer dashboard; Google sign-in returns you to the page you started from.
- Your language choice follows you into the customer portal. Browsing the site in English opens the dashboard in English after sign-in; browsing in Turkish opens it in Turkish.
- Social sign-in is now Google only. The rarely used GitHub, Facebook and Microsoft sign-in options were removed from the sign-in modal, the portal pages and the admin settings.
- Signing out now returns you to the homepage instead of the login screen.
Fixed
- Google sign-in errors are now shown. The login page listened for the wrong URL parameter, so OAuth errors (cancelled sign-in, misconfiguration, inactive account) were silently swallowed; all error codes now surface with bilingual messages.
- The registration modal accepted submissions without the Terms of Service checkbox being ticked; acceptance is now enforced.
- Sign-in and registration API calls resolved to the wrong path on subfolder installations; they now respect the site base path.
- Password reset now works on installations missing its table. The password_resets table only existed in a development migration; when absent, the forgot-password form crashed. The table now self-heals on first use, and a mail delivery failure no longer breaks the flow.
- Login error messages mixed English and Turkish regardless of the chosen portal language; they now follow it.
Content Tables Are Now Styled in the Personal Theme
Fixed
- Tables inside articles now have proper borders, a header row and spacing. The Personal theme had no table styling, so tables rendered as plain unbordered columns that were hard to read. They now have cell borders, a shaded header row, comfortable padding, zebra striping and horizontal scrolling on small screens.
Schema Gaps Closed for Voting, AI SEO Analysis and IP Blocking
Fixed
- Article voting now works. The up/down vote feature (used by the crypto theme) wrote to a post_votes table and a posts.votes column that the schema never created — and an old migration even defined the table with mismatched column names. The table and column are now part of the schema, self-heal on existing sites, and the stale migration was corrected.
- AI SEO analysis is now saved. The editor's AI analysis wrote to seo_meta columns (ai_score, ai_analysis, ai_analyzed_at) that did not exist, so results were never persisted. The columns were added to the schema and self-heal on existing sites.
- The IP block list has a proper schema table. Previously it only existed when an admin happened to open the Security Center; it is now part of the core schema and self-heals.
Schema Consistency: Silent Database Errors Fixed + Drift Guard
Improved
- A schema drift guard now runs in the release pipeline. A new tool cross-checks every table/column written by the code against the schema and plugin definitions; any newly introduced mismatch fails the release, preventing this class of fresh-install error from recurring.
Fixed
- Comment replies and API comment creation now save reliably. Both wrote to a column name (ip_address) that did not exist on the comments table (the correct column is author_ip), so these paths failed on every install. They now use the correct column.
- Automatic IP blocking now actually blocks. The security module wrote a non-existent blocked_at column, so blocks were silently dropped; it now uses the correct column.
- Theme switching and settings saves are safe on fresh installs. The settings table gained created_at/updated_at columns (added to the schema and self-healed on existing sites) — code wrote these timestamps but the fresh-install schema lacked them.
- ZeroTrack registers correctly on activation. Its plugin record used the wrong column names (active/core instead of is_active/is_core).
Log and Data Hygiene: A Self-Limiting CMS
Improved
- Automatic maintenance now covers every accumulating store. Raw view records (180 days), auto-link logs, SEO ping logs and expired Google Console cache entries are pruned on the existing maintenance schedule, and oversized log files (including php-errors.log) are rotated centrally with 30-day cleanup of old rotations.
Fixed
- The database error log can no longer grow without bound. It now rotates at 5 MB with a single backup kept, matching the application log. A recurring cron error had been able to grow this file indefinitely.
- Two chronic error sources were silenced at the root. The webhook queue self-heals missing api_tokens columns on older installs (and the webhook feature starts working), and the AI bulk worker skips quietly when its table is not installed — both had been writing an error entry every minute.
ZeroTrack: Interactive Trend Chart and Full Localization
Improved
- The trend chart was redesigned from scratch. The bare line chart is now an interactive bar chart: hovering highlights the bar and its neighbors, shows a tooltip with views and unique visitors, and updates the live value in the header. Days with no data render as zero instead of being skipped, and the "Today" range now shows an hourly breakdown.
- KPI cards now compare against the previous period. Page views, unique visitors and sessions show a rise/fall percentage next to the label.
- The whole plugin follows the admin design system and language. Every label on the dashboard and settings pages is fully localized (Turkish admin shows Turkish everywhere), and hard-coded light-theme colors were replaced with design tokens so dark mode renders correctly. Top pages gained proportional usage bars.
Google Console: Consistent Reports and a Permanent-Connection Guide
Improved
- Search Console and Analytics now report the same date window. GA4 requests previously ended "today" while Search Console ended yesterday, so overview KPIs compared different periods. Both now use the identical range, making trends directly comparable.
- Keyword and page tables show up to 50 rows (previously 20), and indexing-coverage scans now cover up to 2,000 URLs (previously 500) in line with Google's URL Inspection daily quota.
- Reconnect banner now explains the most common cause. When Google drops the connection with invalid_grant — typically because the OAuth app was left in "Testing" mode, which expires grants after 7 days — the panel says so and walks through publishing the app to production for a permanent connection. The setup guide covers this too.
- Search Console site addresses are normalized on save. Entering a bare domain becomes a proper domain property (sc-domain:), and URL-prefix properties get their required trailing slash — malformed values used to fail silently with empty reports.
Newsletter Result Pages Work on Every Theme, in Both Languages
Fixed
- Newsletter subscribe/confirm/unsubscribe pages no longer crash on non-Personal themes. These pages called a Personal-theme helper directly, which caused a server error on any other active theme. They now use a theme-safe helper and render their texts in the site language (Turkish or English) instead of hard-coded Turkish.
Visible Spam Protection, Reliable Newsletter Signup, Consistent Plugin Naming
Improved
- The built-in spam filter is now visible and explainable. The Comments screen links directly to Spam Protection settings, flagged comments show their spam score with the reasons that triggered it, and the spam tab offers a one-click "Not Spam" action. The filter itself (link limits, keyword/IP/e-mail blacklists, submit-speed and repeat-offender checks) was already scoring every comment behind the scenes.
- Plugin names and ordering are consistent everywhere. The sidebar now uses the same localized plugin names as the Plugins screen, and both lists are sorted alphabetically by the displayed name.
- Theme customizer is fully localized. Tab and theme descriptions now appear in Turkish on Turkish admin panels, and the page title follows the admin language.
Fixed
- Newsletter signup now works from every theme. Several themes posted their subscribe forms to endpoints that did not exist (/newsletter, /api/v1/newsletter/subscribe), so signups silently failed. Both endpoints now reach the newsletter plugin, and the API works in sub-directory installs too.
- Fresh installs no longer break on comments or subscribers. The installer schema was missing the spam-score columns on comments and the subscribed_at column on newsletter subscribers; both are now in the schema and self-heal on existing sites.
- New-post notification e-mails render correctly. The notification campaign stored post data as raw JSON that would have been printed into the e-mail; the sender now resolves it into the template placeholders.
- Crypto theme footer now obeys the customizer. The "Brand blurb" field is actually rendered, the social-icons toggle works, the site name is no longer hard-coded, and the footer subscribe form posts to the correct endpoint.
Instant Admin Asset Updates, Dropdown Clipping Fix
Fixed
- Admin CSS/JS updates now reach the browser immediately. Stylesheet and script URLs are versioned by file modification time instead of the CMS version number, so hotfixes no longer require a hard refresh or a version bump to become visible.
- Custom dropdown panels are no longer clipped by their card. When a select panel (such as the Author picker in the post editor) is open, its containing card temporarily allows overflow so the full option list is visible.
Author Picker on the Post Editor, Sentence-Aware Excerpts
Added
- Posts can now be assigned to a different author from the editor. A new Author dropdown in the Publish box lists the site's writers; the change is saved with the post. Autosave and quick-edit paths are unaffected.
Fixed
- Auto-generated excerpts no longer cut off mid-phrase. The generator now prefers the last full sentence within the window, ignores version-number dots (like "GPT-3.5"), is UTF-8 safe for Turkish characters, and inserts spaces where block tags met. Existing truncated excerpts across all sites were regenerated from content.
Pro Theme Customizer: Font Previews, Import/Export, Turkish UI, Deeper Options
Added
- Theme settings can now be exported and imported as JSON — move a finished design to another install in one click, with schema-validated import, cross-theme confirmation and a one-click "Reset to defaults" that preserves footer-builder data.
- Font pickers became real font pickers. A central 38-family library backs every font field (empty dropdowns are gone), the current font sits selected at the top, every option renders in its own typeface, and a live preview line updates as you browse.
- Deeper per-theme options, all wired to real output: the Personal theme gained homepage controls (hero slide count, popular section and count, categories toggle, posts-per-page for the latest grid) and a Post Page tab (sidebar, author card, related posts and count, comments) — every switch verified to change the rendered page.
Improved
- The customizer speaks Turkish now. Over a hundred remaining English field and tab labels across all theme schemas were translated for Turkish admin sessions.
Fresh-Install Audit: Theme Switching, Customizer and Setup Hardened End-to-End
Fixed
- A full customer-journey audit (installer → theme switching → customizer → import) fixed nine fresh-install bugs. Subdirectory installs no longer hit an infinite redirect on About/legal pages; single-post pages now receive author data, so the News theme no longer crashes; the Tech theme's missing helper, the Finance theme's missing comments partial, and Health theme null-image crashes are all resolved.
- Search works on every host now. Reusing one SQL placeholder twice broke search with an SQL error on servers where PDO prepares are not emulated — fixed in the core query builder, the Health theme and the quiz plugin.
- Saving the Theme Customizer no longer wipes other settings. It used to replace the theme's whole customization record, silently deleting footer-builder data; it now updates only its own fields. The footer builder likewise activates only on themes that render it, instead of corrupting other themes' footer settings.
- Setup polish: application logging now creates its log directory on first use (it was silently dead on fresh installs), broken absolute-path ErrorDocument rules were removed, and session ini warnings on first requests are gone.
Media Library: Click-to-Edit Restored, Smarter Alt Text Editing
Improved
- Alt text editing got a live character counter and guidance (ideal ≤125 characters) so image SEO fields are filled properly, not just filled.
Fixed
- Clicking an image in the media library opens its detail/edit screen again. The lightbox was capturing every click on image cards, so the screen where alt text, caption and description are edited had become unreachable. Zooming now has its own magnifier button on the card (and clicking the preview on the detail page).
Ad Placements Standardised Across All Themes, Honest Slot Panel
Improved
- Every theme now renders the standard ad placement set. An audit found the personal and trends themes rendered no ad slots at all, health and recipes only one or two — ad code pasted in the admin simply never appeared. All themes now support: below navigation, above/inside/below the article, between archive cards and above the footer.
- The ad manager now tells the truth per slot. Each slot card shows whether the active theme actually renders it ("In theme" / "Not in theme" badge), and the four legacy slots that no current theme uses are hidden unless they hold saved code.
Hotfix: Footer Customizer Save No Longer Rejected
Fixed
- The real root cause of the footer customizer's "CSRF token mismatch" was a field-name mismatch, now fixed at the core. The form emits its token as
_tokenwhile the handler readcsrf_tokenand passed an empty string, which blocked the fallback lookup — so every save was rejected even in a fresh session. The validator now treats an empty token as "not provided" and falls back to all accepted field names; invalid tokens are still rejected.
Footer Customizer Redesign, Newsletter Styling, Session-Lifetime CSRF
Improved
- The footer customizer got a visual overhaul. Templates are now picked from illustrated layout thumbnails instead of a text list, sections follow a consistent card design, and a sticky save bar keeps the action always in reach.
- The footer newsletter block is now fully configurable. Besides the title and intro, you can set the input placeholder, the button text and a display style — plain, boxed card or accent-tinted card — with matching styles for dark footers and mobile.
Fixed
- "CSRF token mismatch" on save is gone. Security tokens used to hard-expire after one hour, so any admin form left open longer — the footer customizer, a long post edit — died on submit. Tokens are now valid for the whole login session, per the standard per-session pattern.
One-Click Edit for Every Legal Page
Improved
- Every row in the legal page status table now has an Edit button. For pages still served from the theme's built-in template, clicking Edit creates the page from the ready-made text using your site settings and opens the editor immediately — no detour through the generator form. The explanatory text on the screen was also rewritten in plain language.
Pages Hub With Inner Navigation, Legal Pages Finally Editable at a Glance
Improved
- The Pages screen is now a proper hub with an inner sidebar — the same pattern as Settings. Modules are grouped under headings: Pages (all pages, new page) and Legal Pages (status & edit, generator). The old single-scroll screen that mixed the generator, a status table and a legacy record list into one confusing page is gone.
- Every legal page now has a clear path to editing. Pages backed by a CMS record show an Edit button; pages currently served from the theme's built-in template are labelled "theme default" and offer a one-click Create action that jumps to the generator with that page preselected.
Fixed
- Hover row actions (Edit | View | Trash) in content lists are left-aligned under the title again. A shared action-cell style had pushed them to the right edge of the title column in posts, categories, tags and quiz lists.
- The legacy legal-records block was removed from the CMS admin. It edited a marketing-site table that has no effect on a CMS site's public pages, which made the screen genuinely misleading.
Category Slug Renames Get Automatic 301s, 404 Logging Heals Itself
Added
- Renaming a category slug now creates a 301 redirect automatically — in both the admin panel and the REST API. Combined with v2.18.8's post-slug redirects, no rename anywhere in jekcms can silently orphan an indexed URL anymore.
Fixed
- 404 logging works on every install now. The not-found log table was only created when an admin first opened the Redirects page; on sites where that never happened, every 404 was silently discarded and the "suggest redirect" list stayed empty forever. The logger now creates its own table on first use.
Automatic 301 on Slug Change, Legacy URL Guard, Cleaner Crawl Budget
Added
- Renaming a published post now creates a 301 redirect automatically. Previously every slug change silently left the old URL as a 404 in Google until someone noticed and added a manual redirect — a fleet-wide Search Console audit found exactly this pattern in the wild. The redirect is created on save, existing chains pointing at the old slug are re-pointed at the new one, and duplicate sources are never inserted.
- Built-in guard for legacy WordPress URL families. Retired Turkish tag archives (/etiket/…) now return 410 instead of soft-404 redirects, taxonomy AMP leftovers (/author/…/amp, bare /amp, /amp/page/N) redirect in a single hop, so migrated sites stop accumulating Search Console errors.
Improved
- Crawlers no longer waste budget on write-only endpoints. robots.txt now disallows the analytics beacon (/zt-track) and webhook paths, which previously showed up as "other 4xx" noise in Search Console.
Search Console Cleanup: Retired Tag URLs Are Now Crawlable (410)
Fixed
- Retired /tag/ URLs can now leave Google's index. robots.txt disallowed /tag/ while the pages correctly returned 410 Gone — but a crawler that is blocked can never see the 410, so hundreds of dead tag URLs stayed frozen in Search Console error reports indefinitely. The disallow is removed; Google can now crawl the 410 responses and drop the URLs for good.
Comprehensive Legal Pages, Unified Footer Credit, Author Card Fix
Improved
- Legal pages are now comprehensive and professional out of the box. The default Privacy Policy, Terms of Service, Cookie Policy and Disclaimer texts were rewritten editorially in both languages: data categories, legal bases, retention periods, Google AdSense/analytics disclosures with opt-out links, a cookie category table, permitted-use and liability sections. Sites that publish their own legal pages are unaffected — defaults apply only when no custom page exists.
- One footer credit everywhere. The footer bottom bar now reads "Powered by jekcms" in every language — the former Turkish translation of the credit was dropped in favor of a single brand-standard phrase.
Fixed
- Legal pages are readable on dark-bodied themes. The universal legal template had no background of its own, so themes with a dark page body rendered near-invisible headings on a dark surface. The template now pins an explicit light panel with fixed text colors, plus proper list and table styling.
- Author card uses its full width. The author bio in the crypto theme was capped at 480px, wrapping sentences into a cramped column next to the avatar; the cap is removed.
Crypto Theme: Legacy TOC Cleaner No Longer Swallows Article Bodies
Fixed
- Articles no longer render truncated. A legacy WordPress-import cleaner in the single template removed inline tables of contents with overly broad patterns: any H2 merely containing the word "içerik" — e.g. "AI content production" — triggered deletion of everything up to the next list, silently cutting up to 90% of an article at render time (the database content was intact). The cleaner now only scans the first 3000 characters, matches exact TOC phrases, and caps the removal window.
Crypto Theme: Full-Width Layout and Styled Content Tables
Improved
- Homepage post grid and single articles now align with the header width. The "All Posts" section and the article layout previously used a narrower container, and the article body was additionally capped at 736px — both now follow the site's full 1400px line, so wide screens are actually used.
Fixed
- Content tables render properly in articles. Table styling was scoped only to static pages, so tables inside posts appeared bare (no borders, no header background). Article bodies now get the same professional table look, with zebra rows and horizontal scrolling on mobile.
Winning Content: Traffic Trends on Your Dashboard
Added
- Winning Content card on the dashboard. Your top 5 posts of the last 30 days with rise/fall indicators, powered by the built-in privacy-first ZeroTrack analytics — no external service, no cookies. Appears automatically once traffic data exists.
- Content Trend report in ZeroTrack. A rising/falling comparison (last 30 days vs the previous 30) at post level; falling posts are labelled as refresh candidates, so you know exactly which articles need attention before rankings slip further.
Uniform Row Actions Across All SEO Lists
Improved
- List action buttons follow one clean standard. In Heading Fixer, Content SEO, Content Optimization and Orphan Content, row actions (Preview / Fix / Save / Edit) no longer wrap onto multiple lines or mix button styles — they sit in a single compact row with a consistent look; secondary validator shortcuts (Rich Results, Schema) are now subtle links instead of heavy buttons.
- Less noise in the Content SEO list. The redundant content-type label before each slug was removed; pages are marked with a small badge only when relevant.
Advanced SEO Panel v2: One Navigation, Auto-Linked Orphans, Brand-Safe Headings
Added
- Orphan content fixes itself. The Orphan Content module gained an Auto-Link action: for every post with no inbound internal links, related posts (same category first) are scanned and a natural internal link pointing at the orphan is injected automatically — no manual editing, with the full markup-safety net and at most one new link per source post.
- SEO Health Check is now tabbed. Identity, AdSense, content, files and HTTP checks each get their own tab with issue-count badges — no more scrolling through long card columns.
Improved
- One navigation, zero duplication. The Advanced SEO panel sidebar is now grouped (Overview, Content, Images, Links, Site) and each optimizer tab is its own module; inside the panel the old duplicate top tab bar is gone, and confusingly-named entries were renamed (Image SEO vs. Featured Images).
- Redirects & 404 opens clean. The module previously rendered the whole Settings page — including its own settings menu — inside the panel; it now opens as a standalone tool.
- Year Updater and Content Optimization follow the design line. Cards, tables and buttons match the rest of the admin; action buttons no longer wrap into circle-shaped blobs, and the Edit button got its missing style.
Fixed
- Technical terms are no longer "fixed" into broken casing. Heading checks flagged titles like "cPanel Guide" or "iptables and ufw" as lowercase errors, and title-case would mangle them (cPanel → Cpanel). Brand-like words — mixed-case names, terms with digits or dots, and a broad list of lowercase tool names — are now left untouched in both detection and repair; Turkish conjunctions (ve, ile, için…) also stay lowercase in title case, in both languages.
Advanced SEO Overhaul: Internal Linking Repaired, Turkish-Aware Matching, New Modules
Added
- Turkish-aware internal linking. On Turkish sites the linker now recognizes inflected forms ("e-posta pazarlamasında" matches "E-posta Pazarlama"), and posts' multi-word tags become anchor candidates — noticeably more natural internal links, with the same markup-safety net that reverts anything suspicious.
- Orphan Content module. Lists published posts with no inbound internal links and uncategorized posts, with linking-candidate suggestions from the same category.
- Bulk meta editor. Edit meta title/description inline in the post list with live character counters; scores recompute on save. CSV export is one click away.
- The panel now surfaces SEO Health Check, Redirects & 404 log and the SERP Identity test — previously hidden in Settings.
Fixed
- Posts that matched no links are no longer excluded from future scans. A "processed, no links" marker made such posts invisible to the incremental scan forever and miscounted the panel statistics; they are now retried as your library grows, and the stats distinguish processed, linked and awaiting posts.
- Internal-linker silence is over. Every skipped, failed or successful on-publish linking attempt is now recorded to a dedicated log, so "why did this post publish without links?" is answerable — a read-only diagnostic page shows settings truth, log distribution and a live dry-run.
- The SEO panel no longer breaks inside its frame. Saving a form could render a second admin shell inside the panel, and edit links trapped you inside the frame; both fixed.
- Turkish content scores are measured correctly. Word counting was not UTF-8 aware, so Turkish posts scored artificially low; generated meta titles also respect your title separator and site name now.
- All SEO tools require administrator rights and use a single heading-hierarchy engine, ending inconsistent results between modules.
No More Style Flash on Inner Pages, Analytics Beacon Restored
Fixed
- Pages no longer flash unstyled for a split second. The Personal theme async-loaded its full stylesheet while the inline critical CSS did not fully cover any page type; navigation briefly rendered bare. The stylesheet now loads normally — it is same-origin, versioned and immutable-cached, so the change costs nothing after the first visit.
- ZeroTrack page views are recorded again. The tracker posted to a plugin route that 404'd in production; it now uses the standalone /zt-track endpoint that works independently of plugin bootstrap.
- Cloudflare Insights no longer triggers console CSP errors. Its beacon origin was missing from the Content-Security-Policy script allowlist.
Zero Validator Errors: noscript Guard & Footer Style Leftovers
Fixed
- The font-defer optimizer no longer touches noscript fallbacks. It could wrap the fallback link inside an existing noscript block, producing nested noscript markup and a dead stylesheet for no-JS visitors.
- Personal footer layouts dropped their duplicate legal bar. All eight variants carried a leftover legal-links block and an in-body stylesheet from before the standard bottom bar; links were doubled and the markup failed validation.
Three Gaps Caught by the New Live Signal Checks
Fixed
- Health theme now emits the WebSite/Organization schema. Its header never called the central schema emitter, so sites on this theme published no structured data — invisible to Google's site-name and rich-result systems.
- Personal theme search pages are noindexed again. The header skipped the robots-meta helper entirely, leaving search results indexable.
- News-theme language attribute reads the correct setting. A legacy key left Turkish sites reporting lang="en".
Theme Integrity: Every Theme File Now Ships From One Source
Fixed
- Recipe featured images resolve to the correct URL everywhere. A media-path fix that lived on a single install (cards/hero images could 404 when stored without the uploads prefix) is now part of the core Recipes theme.
- Theme copies can no longer silently drift. Previously only ~30 hand-picked theme files were integrity-checked; now every theme template and stylesheet is verified against the canonical source, and deliberately customized installs are tracked explicitly instead of being overwritten.
- Hardened against a class of update crashes. Syncing a theme's function file onto a customized install could remove helpers its templates still call, cutting pages off mid-render. Sync tooling now knows about customized theme sets and never overwrites them.
Valid Markup, Correct Language Tags & Faster Font Loading
Improved
- Fonts no longer block first paint. Google Fonts and icon stylesheets across all themes now load with the non-blocking preload pattern, improving Core Web Vitals.
Fixed
- Turkish search pages are no longer indexable. The /arama route escaped the noindex rule that /search already had, leaving thin search results crawlable — a "low value content" risk for ad-network review.
- Removed the hidden duplicate H1 from homepages. An old experiment injected an invisible site-name heading on every homepage, producing two H1 elements on themes that render their own. Each page now has a single, visible heading.
- Article pages no longer break on customized Entertainment installs. A sidebar helper call could crash mid-page on sites with a customized theme copy, cutting the page off before the footer. The sidebar now degrades gracefully.
- Markup validates cleanly. Headings inside inline wrappers, a mis-scoped ARIA label and the footer bar's in-body stylesheet (now emitted in the head) were the last W3C validator errors.
- Language attribute now follows your site language. Five themes hard-coded lang="en"; Turkish sites reported the wrong language to browsers and crawlers.
Your Site Name Now Reaches Google Exactly As You Typed It
Fixed
- Google could show your domain instead of your site name in search results. The system auto-generated a spaceless copy of your site name as a schema alternate name, and a Turkish-character comparison bug let this domain-lookalike value slip into the page. Google's site-name algorithm could then fold your brand into the bare domain. The auto-generated alternate name is gone, the comparison now transliterates Turkish characters correctly, and existing installs clean up the stray value automatically — the Site Name setting is now the single source of truth, emitted verbatim.
- Removed weaker duplicate schema emitters from five themes. Personal, Trends, Recipes, News and Lifestyle carried their own WebSite/OpenGraph generators missing fields Google uses for site-name selection; all themes now use the central, complete emitter.
- Admin SEO preview now matches the real page output. The preview showed a different homepage title pattern than what the site actually emitted.
Content Rendering, Performance & AdSense-Ready Theme Pass
Improved
- Faster pages with responsive images. Article cards and thumbnails now load an appropriately sized image variant instead of the full-resolution original, cutting page weight significantly.
- Navigation and footers are data-driven. Menus, category bars and footer links now come from your real categories, so a fresh site never shows dead example links — better for visitors and for ad-network review.
- Dark mode stays correct with custom colors. Setting brand colors no longer overrides the dark theme; dark mode renders reliably regardless of customization.
- Cleaner article intros. The first paragraph is auto-capitalized at publish, so content never starts lowercase.
Fixed
- Markdown headings no longer leak as raw “###” text. Content that mixed HTML with Markdown could print literal “### Heading” or merge a heading and its first paragraph into one oversized block. Headings are now correctly separated and rendered, both at publish time and on render — across every theme.
- Queued articles that silently failed to publish now go out reliably. A session-cookie error during manual publishing could leave items stuck as “failed”. The underlying call is now guarded, so publishing completes instead of aborting mid-way.
- Removed placeholder/demo content from themes. Sample authors, demo article bodies, fabricated statistics and dead example links could appear on real pages; these are gone, so only your real content is shown.
- Legal links now appear in the Personal theme footer. The standard bottom bar (copyright · legal links · credit) was missing from all Personal footer layouts, so privacy/terms pages existed but were unreachable from the footer. Every footer variant now renders the shared bottom bar.
- Theme stylesheets update reliably after an upgrade. Tech, Entertainment and Pets linked their CSS without a version stamp, so browsers could keep serving a cached stylesheet indefinitely; the link is now stamped per file change.
No More Dead-End Update Banner on Centrally Managed Sites
Fixed
- The “Update available / Update Now” banner no longer appears on centrally managed sites. On these installations self-update is disabled and new versions are delivered by operator deployment, so the banner, the header update icon and the sidebar update badge were a dead end — clicking “Update Now” did nothing. They are now hidden whenever the install is centrally managed, matching the System Updates page which already showed “Central deployment ready”.
Professional Single-Bar Footer & Permanent CSS Cache Fix
Improved
- The footer bottom is now a single clean bar — copyright, legal links and the credit line share one row instead of a separate, duplicated legal strip below the copyright. Legal links used to render twice (in the footer columns and again in an injected bar); the redundant strip is removed across all themes.
Fixed
- Theme CSS no longer serves a stale cached copy after an update — the stylesheet is cache-busted by its file modification time, so visitors get the current styles without a hard refresh.
Canonical Cleanup: /page Redirects, Alias Consolidation & AdSense Readiness
Improved
- robots.txt is now AdSense- and Google-safe — the Googlebot group mirrors the base disallow rules (a crawler obeys only its most-specific group, so admin/api paths were previously left crawlable), and the AdSense crawler
Mediapartners-Googleis now explicitly allowed. - The site now serves a valid
ads.txtdeclaring the authorised AdSense publisher, resolving the “authorised sellers” warning that appears when the ad code is present but ads.txt is missing.
Fixed
- The duplicate
/page/{slug}URL now 301-redirects to the clean/{slug}and is no longer emitted in the sitemap — previously every static page was reachable at two URLs (a soft-duplicate that dilutes ranking signals and trips content-quality audits). The clean slug is now the single canonical address. - Legal, about and contact aliases consolidate onto one canonical URL with a 301 — language and spelling variants (e.g.
/privacy,/privacy-policy,/gizlilik) used to each return 200 with their own canonical, signalling duplicate pages. They now redirect to the page’s real address and the canonical tag matches the redirect target. - About/Contact pages that have no content now return 404 instead of an empty soft-200 — an alias with no template and no published page no longer renders a blank page whose canonical pointed at the homepage.
Image SEO: In-Content Images in Schema & Sitemap
Improved
- Article structured data now lists every image, not just the featured one — the Article/BlogPosting
imageproperty is now an array of ImageObjects covering the featured image plus the images embedded in the article body, each resolved with width, height and caption from the media library. This gives the in-content images a real shot at ranking in Google Images. - The image sitemap now includes in-content images — previously only the featured (and gallery) image of each post was submitted; the images inside the article body are now listed too, so Google can discover and index them.
- Fixed a silent bug where the featured image carried no dimensions in structured data — the media lookup queried a non-existent column, so width/height/caption were always dropped. Image objects now include their real dimensions.
SEO: Archive Canonicals, Unique Titles & Schema Fixes
Improved
- The homepage FAQ is now eligible for rich results — FAQPage structured data is emitted from the marketing site’s FAQ section.
Fixed
- Category, tag and author pages now point their canonical to themselves — in the travel theme these archive pages were inheriting the homepage’s canonical, title and description, which told search engines they were duplicates of the home page and effectively dropped them from the index. They now emit their own canonical URL, a unique title and description, and correct rel=prev/next for pagination.
- Every page now has a unique title and meta description — the recipes and finance themes were falling back to the site name on all pages (and recipes single posts had no meta description at all). Titles and descriptions now come from the page’s own content.
- The finance theme showed a hard-coded “FinancePro” heading regardless of the site’s real name, and rendered a second H1 on article pages — both fixed (real site name, single H1 per page). The news theme’s duplicate H1 was also resolved.
- News article structured data is now generated by the central engine — replacing an older version that referenced a missing logo file and could emit an invalid date, so news articles now carry correct Article/NewsArticle schema with the configured logo.
PageSpeed: Responsive Images, Accessibility & Security Headers
Security
- Content-Security-Policy now declares
script-srcand a Cross-Origin-Opener-Policy header is sent — script sources are restricted to the site itself plus the required Google advertising, analytics and font origins, closing the “missing script-src / COOP” findings without affecting ads.
Improved
- Images now download at the size they are displayed — the responsive image engine was emitting wrong width descriptors, so browsers fetched the 1600px version into ~800px slots. Descriptors now match the real variants (800/1600) and the size hint reflects the actual layout, cutting roughly 500 KiB from a typical page. Tip-card and recipe-card covers, which shipped a single full-size source, now serve responsive variants; continent illustrations were resized to their display size and the footer logo serves AVIF/WebP.
- Accessibility fixes across the travel theme and marketing site — section labels, hero chips and the newsletter button use an accent that meets WCAG AA contrast; decorative continent images no longer repeat adjacent link text; tip “Read” links carry the article title for screen readers; footer headings follow proper heading order.
- Smoother homepage animation — the step progress bar animates with a compositor-friendly transform instead of width, and the FAQ accordion no longer triggers a forced reflow on open.
Security Hardening from a Full Code Audit
Security
- Closed a SQL injection in the content scheduler — the status filter on the scheduler screen now uses a strict allow-list and a parameterized query, so a crafted filter value can no longer reach the database.
- The post listing helper now enforces a column allow-list — sort field, direction and limits are validated and type-cast before they touch the query, removing a latent injection path for themes and plugins.
- The automation webhook secret falls back to an installation-unique key — when no webhook secret is configured it is now derived from the per-install security key instead of a guessable time-based value.
Publisher Catalog & Backlink Opportunities, Verified for 2026
Improved
- The Backlink Opportunities module now lists real, verified programs — every niche grew from a couple of search shortcuts to 10-19 named opportunities checked live in 2026: Source of Sources and the relaunched free HARO, unlinked-mention reclamation, Lonely Planet Correspondents, BoardingArea, Matador Creators, foodgawker, mindbodygreen, the Plutus Awards, CryptoPanic, BlogPaws, Google/Bing/Apple business listings and more — each with priority, effort, and a concrete first step.
- The News Publishers catalog was re-verified for 2026 — Apple News (ANF, four countries), Flipboard (program closed; magazine + bookmarklet path documented), SmartNews and NewsBreak requirements updated; Bundle and SQUID added as open application channels; Pocket and Yandex Dzen removed.
Brand Consistency, robots.txt Compliance & Full Turkish Admin
Improved
- The Turkish admin is now fully Turkish — dozens of hardcoded English labels were localized across the post editor (Recipe/LocalBusiness schema fields), backups schedule, comment replies, duplicate finder, media upload, banner manager, theme customizer, user profiles and the traffic plugin menu (now "Hızlı İndeksleme", "Anında Bildirim", "RSS Beslemesi", "Backlink Fırsatları", "Tarayıcı Bildirimi"). The English admin remains fully English.
Fixed
- robots.txt now passes Bing validation — the non-standard
Host:directive (a legacy Yandex extension that Bing flags as an error) was removed from the generated robots.txt on every site. - The brand reads "jekcms" everywhere — a repo-wide sweep replaced every wrong-case variant across emails, feeds, installer screens, API docs, theme metadata, user-agent strings and comments. License-key format and code identifiers are untouched, so nothing breaks.
Proper-Noun Anchors in Internal Linking
Improved
- Auto internal linking now recognises single-word proper nouns — place, brand and topic names such as a city or a dish (capitalised, 5+ letters) can now become link anchors, not just multi-word phrases. Lowercase generic words stay excluded, so the links remain relevant. This noticeably improves internal linking on niche sites (travel, food, local guides) where titles are often a single proper noun.
Fixed
- Fixed the content-import wizard showing the "External authority links" label in English on a Turkish admin (it now follows the admin UI language).
Smarter Internal Linking & E-E-A-T Outbound Links
Added
- External authority links in the content generator — the content-queue import wizard can now request a set number (0–5) of in-content outbound links to high-authority, non-competitor sources. When enabled, the AI prompt weaves them naturally into the body on descriptive anchors (never a "Sources" list), strengthening E-E-A-T.
Improved
- Auto internal linking now waits for a real library — on a brand-new site there is nothing useful to link to, so auto-linking stays dormant until a configurable minimum number of published posts exists. The Auto Linker screen explains the threshold and shows current progress. As before, only published posts are link targets — queued/scheduled content is never linked.
Pinterest Production Setup Instructions
Improved
- Clearer Pinterest go-live instructions — after Pinterest grants Standard access, the setup guide now tells you to remove the existing connection and connect again in Production mode, instead of using plain Reconnect (which can silently stay in Sandbox).
Admin Customer Detail Fix
Fixed
- The customer detail screen in the admin panel opens reliably again — orders, licenses, invoices, support tickets and internal notes loaded with queries that did not match the production database, so the page returned a server error. Every section now reads the live schema correctly, and the customer create/edit forms save address details to the right fields.
Clearer Product Positioning Copy
Improved
- jekcms is now described the same way everywhere — a next-gen smart CMS that installs on any PHP + MySQL hosting. The vague "self-hosted" label (which could read as if hosting were included) and the inaccurate "plugin-free" label were removed from the homepage, the WordPress-alternative page, site metadata and structured data.
Category Archive Filter Fix
Fixed
- Category pages now show only their own posts — on themes that query archives by category ID, the post list ignored the category filter and showed every published post. The core query layer now accepts both category ID and slug, so every category archive lists exactly the posts that belong to it.
Invoicing, Customer Portal Language & Support System
Added
- Real PDF invoices — admins can now generate an invoice for any order and email it to the customer, and customers can download a proper PDF from their portal. Invoices render with full Turkish characters and work on any shared host (no server extensions required).
- Turkish-law VAT handling — domestic sales carry 20% VAT (KDV); sales to customers outside Turkey are treated as a VAT-exempt service export and the exemption note is printed on the invoice automatically.
- Company billing settings — a new admin screen for your seller details (company title, tax office, tax number, address, IBAN) that appear on every generated invoice.
- Billing profile for customers — buyers can now enter their tax number, address and country so their invoices are complete and the correct VAT rule is applied.
Improved
- Customer portal fully bilingual — every page of the customer portal (orders, licenses, invoices, support, profile, sign-in/up) now follows the selected language, so Turkish users no longer see stray English labels.
Fixed
- Support tickets hardened — fixed an issue where a second ticket from a customer could fail, added missing attachment storage, corrected priority handling, and customers now get an email when staff reply (and staff get one on new tickets).
- Portal pages that referenced old data fields now load correctly — order detail, new-ticket and invoice pages were updated to the live data model.
- Two admin tools gained CSRF protection and several blog/theme pages had social-share image and metadata issues corrected for better SEO.
Automatic Internal Links on Publish
Added
- New posts get internal links automatically when published — the moment a post goes live (manual publish, scheduled date, or content queue), 3-5 contextual links to your existing published posts are added inside it, so you no longer have to run the linker site by site. Only published posts are used as link targets; queued or scheduled items are never linked.
Security Hardening Pass: Payment, CSRF, Uploads, SSRF, API
Fixed
- Marketing homepage hardening guard aligned — the direct-access guard in the constants file only accepted one context flag, while the marketing site and update-server bootstrap use different ones; the guard now matches the loader so the public site renders normally
- Payment webhook is now fail-closed — the iyzico webhook accepted an event when no signature header was present; it now rejects any unsigned or invalid-signature webhook (matching the Stripe gateway), closing an unauthenticated path to marking orders paid
- One-click (GET) CSRF on admin actions closed — central CSRF enforcement now also covers authenticated GET action handlers (delete/toggle/activate), so a forged link or image tag can no longer trigger destructive admin actions
- API input is column-whitelisted — the categories/tags update endpoints now accept only known fields, removing an identifier-injection vector from attacker-controlled JSON keys
- SVG uploads disabled — SVG is no longer an allowed upload type (it can carry scripts and was served inline), eliminating a stored-XSS vector; standard image formats are unaffected
- SSRF guards added to server-side fetchers — bulk-import and remote content-image fetching now validate the URL against private/loopback/metadata ranges and no longer follow redirects
- Customer portal forms fixed — the CSRF token field referenced a non-existent method (so it rendered empty); corrected to the proper token, and a reflected status parameter in pagination links is now URL-encoded
- Removed a temporary password-reset utility from the web root that was reachable without authentication
In-Article Images Now Match on Items That Already Have a Pinterest Slot
Fixed
- Image matching no longer skips the in-article photos when an item only had a Pinterest slot — after a re-import added a Pinterest slot to an item that had no content image plan, the matcher mistook that lone Pinterest slot for a full plan and never built one from the article's headings, so the cover and pin matched but the in-article images (img02, img03…) stayed in temp. The matcher now ignores the Pinterest slot when deciding whether a content plan exists, builds the heading-based plan when needed, and preserves the existing Pinterest slot
Re-Importing JSON Now Updates Existing Queue Items (Pinterest + Prompts)
Improved
- Re-importing a JSON now enriches items already in the queue instead of skipping them — previously a duplicate (same source id) was skipped entirely, so content imported before a feature existed could never gain it. Now a re-import fills in any empty image prompts from the new file and adds the Pinterest brief (hook, title, description, tags, image prompt) and pin slot — while preserving already-matched image URLs, the schedule, and any manual edits. The import result reports how many items were updated
Content Queue Image Column Now Counts the Matched Cover
Fixed
- The image-status column no longer shows “—” when the cover is actually matched — items imported without a full image plan store their cover in the
featured_imagecolumn rather than the plan, so the queue list read “no images” even though the cover thumbnail was clearly set (and the image dialog said “1/1 matched”). The column now counts a column-matched cover too, so the list and the dialog agree
End-to-End Pinterest Pins: Custom Copy, Per-Category Boards, and Baked Designs
Added
- Per-article Pinterest copy now publishes — a pin's title and description come from the imported brief (
_pinterest_title/_pinterest_description) instead of the generic post title and template, so each pin reads the way it was written - Pins route to the matching board automatically — a pin is posted to the board whose name matches the article's category (with the connected account's default board as fallback), so a multi-topic site keeps its Pinterest boards organized with no manual selection
- Designed-in-full pins are supported — when the image already bakes in its own headline and domain bar, the CMS skips its own stamp (
stamp:false), so there is never a double bar
Improved
- The AI content wizard now writes premium pin briefs — when Pinterest is enabled, it produces an editorial brief (short hook, ≤100-char title, ≤500-char keyword-rich caption, tags, the
<slug>-pinterestfilename, and a full split-layout image prompt with the site domain baked in) ready for image generation
Hands-Off Pinterest Pins and Bulk Image Matching in the Content Queue
Added
- Pinterest pins now match automatically — drop a
<slug>-pinterest.jpginto the uploadstempfolder alongside your article images and the queue picks it up on the next “Match Images” run, stamps your site’s domain bar onto it, and attaches it to the post. No more uploading pins one at a time - Pinterest captions travel with the content — the import schema now carries a pin hook (the headline on the image), a meta description (the caption shown under the pin) and tags, and writes them to the published post so a Pinterest publisher can fill those fields without guesswork
- An image-status column in the queue list — every row shows how many article images are matched (e.g. 2/3) and whether a Pinterest pin is present and matched, at a glance
Improved
- The content queue list was redesigned — the action buttons (view, images, publish, delete) are now a compact, single-row icon group instead of a stack that overflowed the column, and the new image-status chips are monochrome and uncluttered
- Image matching now shows a real progress bar — a clean progress window reports matched count, percentage and a live log as it processes the temp folder in batches, instead of a number ticking in a button
- Content Studio is now the calm starting point for publishing — the dashboard gathers the publishing calendar, queue health, next action and entry points for AI draft, planned batches and content packs into one compact two-language screen
- Imports are more forgiving — image entries that use
role/promptinstead ofslot/image_promptare now understood, so content generated by different tools imports correctly without hand-editing the JSON
Admin Sessions No Longer Drop After a Few Hours Idle
Fixed
- You stay signed in until you actually sign out — even with the session cookie and garbage-collection lifetimes already raised to 30 days, an inactivity check was still destroying the session after ~2 hours of no activity (its threshold constant was undefined, so it fell back to a 2-hour default). The idle limit now matches the 30-day session lifetime, so leaving the dashboard open and coming back hours later keeps you logged in
Changed files (2)
native/includes/Session.php
—
checkRegenerate idle-timeout fallback 7200s → SESSION_LIFETIME (30 gün); 15 site + marketing'e deploy
includes/Session.php (marketing)
—
headers-sent fatal throw → graceful (fail-closed) — tutarlılık
Admin Language Consistency — Plugin Text Now Follows TR/EN
Fixed
- The newer plugins no longer leak the wrong language in the admin — Google Console, Traffic & Distribution, and parts of Social Publishing hardcoded their interface text in a single language (mostly Turkish), so it showed Turkish in the English admin (and vice-versa). All of these are now bilingual and follow the admin language setting
- Google Console’s plugin-list description is now bilingual — it was missing from the localized description map and fell back to the Turkish manifest text
- The Two-Factor Authentication card in Settings → Security is now bilingual — its labels, steps, badges and buttons were Turkish-only
- Social Publishing platform help/how-to, cost and warning texts are now bilingual for all platforms — these registry strings rendered in a single language regardless of admin locale
Changed files (4)
native/includes/helpers.php
—
global jek_t($tr,$en) yardımcısı (her zaman yüklü; eklenti admin sayfaları için)
native/admin/plugins/jek-google/index.php + jek-traffic/index.php
—
~100 sabit metin jek_t ile iki dilli
native/plugins/jek-social/* (connections + platforms.php + 15 adapter)
—
js_t kullanmayan sızıntılar + 21 platform howto_en
native/admin/plugins.php + settings.php
—
jek-google açıklama haritası; 2FA kartı jek_t
Performance (N+1) and Security/SEO/Plugin Hardening
Improved
- List pages issue far fewer database queries — loading a post list with relations ran 6 queries per post (author, categories, tags, meta, SEO, comments); a 12-post page hit ~72 queries. It now batches all of them into 6 total via IN() lookups
- Image dimension lookups no longer scan the media table on every render — the per-image width/height query used a leading-wildcard LIKE (full-table scan per image); it now uses exact-path matching plus a per-request cache
- Saving a post no longer wipes the entire object cache — cache invalidation is now targeted to the affected namespaces instead of a global flush
- Faster LCP on article pages — the hero/featured image on travel and health single-post templates now carries fetchpriority="high"
Fixed
- Client IP detection can no longer be spoofed to evade blocks — forwarded headers are now accepted only when they carry a public IP, so an attacker cannot inject an internal/loopback address to bypass IP blocking or frame another IP
- Redirect Manager blocks dangerous redirect schemes — javascript:/data:/vbscript: targets are refused at emit time
- Admin error messages no longer leak internals — Security Center and Redirect Manager now show a generic message and log the detail
- Cross-domain Sitemap line removed from the shipped robots.txt fallback — robots is served dynamically with the site’s own domain; the static fallback no longer carries a hardcoded foreign domain
- Google Console snippets can no longer double-inject — the head injector is guarded against firing on both head hooks
- Removed the misleading dead Pinterest-template dropdown in Social Publishing settings (it was never read)
Changed files (6)
native/classes/Post.php
—
loadRelationsForList() batch (N+1); clearCaches hedefli purge
native/includes/helpers.php
—
jek_img_optimize exact-path + request-cache
native/includes/Security.php
—
getClientIp forwarded header → yalnız public IP
native/classes/RedirectManager.php
—
emit şema güvenliği
native/admin/{security-center,redirects}.php
—
generic hata mesajı + error_log
native/robots.txt + themes/{travel,health}/.../single.php + jek-google + jek-social
—
robots domain; LCP fetchpriority; çift-inject guard; ölü dropdown
Deep Audit Fixes — CSRF Enforcement, Cache, SEO & Systems
Fixed
- CSRF protection is now actually enforced across the admin — the validation helper returned a boolean that nearly every admin/AJAX endpoint discarded, so forged cross-site requests were silently accepted. Validation now blocks state-changing authenticated requests centrally (clean 419, JSON for AJAX) without affecting public forms or page rendering
- "Clear Cache" buttons work again — they called a method that did not exist and fataled (purging nothing). Added the missing prefix-delete method and hardened the handler
- Sitemap index no longer miscounts pages as posts — the posts-sitemap presence/lastmod now filter on post type, fixing false "empty posts sitemap" and wrong freshness signals
- Update manifest hash guard is no longer a no-op — the signed update manifest now exposes the core package hash under the field the client checks
- Social Publishing "Hold for approval" no longer silently stops publishing — held items now appear in the queue with one-click Approve / Approve-All / Cancel actions
- Traffic & Distribution now verifies TLS — IndexNow/WebSub/Web-Push calls had certificate verification disabled; enabled to prevent MITM
Changed files (5)
native/includes/Security.php
—
validateCsrfToken: başarısızlıkta authed+POST bağlamında merkezî 419 enforce (no-op çağıran deseni topluca kapanır)
native/includes/Cache.php + admin/ajax/clear-cache.php
—
deleteByPrefix() eklendi; catch \Throwable
native/classes/Sitemap.php
—
posts index sayım/lastmod AND type='post'
native/plugins/jek-traffic/* + jek-social/queue.php
—
TLS verify açıldı; hold→approve/cancel UI
api/v1/updates/manifest.php
—
core entry hash = file_hash normalize
Security Center Now Matches the Admin Design System
Fixed
- The Security Center looked disconnected from the rest of the admin — it shipped its own stylesheet with hardcoded light-mode colors (white cards, grey borders) instead of the admin’s shared design tokens, so it ignored dark mode and its tabs/cards/tables didn’t match the other panels. Every color now uses the admin theme variables, so it adapts to dark/light and looks like one consistent product. Status indicators keep a subtle tinted badge instead of solid blocks, and the brand wordmark was corrected to lowercase
Changed files (1)
native/admin/security-center.php
—
tüm hardcoded renkler → admin CSS değişkenleri (--bg-secondary/--border-color/--text-* /--radius-*); status pill soft-tint; mavi rol etiketi nötrlendi; "jekcms" → "jekcms"
Strip Byte-Order Marks From Core Files — Fixes Admin Layout & AJAX
Fixed
- Admin pages no longer render with broken styling — several core PHP files (bootstrap, constants, helpers, theme functions) carried an invisible UTF-8 byte-order mark (BOM) before their opening tag. That BOM was emitted before the document’s doctype, which forced browsers into "quirks mode" and broke list/table layouts across the admin. The BOM has been stripped from every PHP file fleet-wide
- AJAX actions no longer fail with a JSON parse error — the same BOM was prepended to JSON responses (e.g. "Match Images"), so the browser threw
Unexpected token … is not valid JSON. With the BOM removed, responses are clean JSON again
Changed files (1)
140 .php (native + 15 site)
—
açılış etiketinden önceki UTF-8 BOM (EF BB BF) kaldırıldı; en kritik: includes/bootstrap.php, config/constants.php, includes/helpers.php (her istekte yüklenir)
Match Images — Build Article Image Plans From Your Generated Files
Fixed
- Bulk image matching now actually imports your files — the media importer used PHP’s upload-only move function, which always fails for files already on the server (e.g. images you place in the uploads/temp folder). A server-side "sideload" path now imports those files correctly, and a valid uploader id is always supplied so the database insert no longer fails outside a browser session
- "Match Images" understands multi-image articles — drop files named
{slug}-img01..04in the temp folder and the matcher attaches them as the article’s image plan: image 01 becomes the featured image and the rest are placed in the body after the article’s headings. When the article already has a plan, empty slots are filled in order - Admin thumbnails resolve relative image paths — queue list and calendar previews now prefix the uploads URL for plan images stored as relative paths, so the thumbnail shows instead of a broken image
Changed files (2)
native/classes/Media.php
—
upload(): options.sideload → move_uploaded_file yerine rename/copy (sunucu-içi dosya import)
native/classes/ContentQueue.php
—
matchFeaturedImages: {slug}-imgNN → görsel planı kur (img01 featured, imgK in-content H2[K-1]); sideload+explicit user_id; resolveThumb göreli url UPLOADS_URL öneki; parça limiti
Match Images — In-Memory Matching, Seconds Instead of Minutes
Fixed
- "Match Images" now finishes in seconds on large queues — the previous version ran two full-table
LIKE '%slug%'scans per item and re-normalized every media filename for every item, which on a queue of hundreds against thousands of media files took minutes and hit a server gateway timeout (the generic "server error"). The media library is now normalized once and all items are matched in memory — no per-item database queries, no repeated work
Changed files (1)
native/classes/ContentQueue.php
—
matchFeaturedImages ADIM 2: öğe-başına SQL LIKE + medya yeniden-normalize kaldırıldı → medya bir kez normalize, hepsi bellekte eşleşir (O(medya+öğe))
Match Images No Longer Times Out on Large Queues
Fixed
- "Match Images" no longer fails with a generic server error on large queues — with hundreds of queued items and thousands of media files, the slug-to-media scan could exceed PHP’s execution limit and return a raw 500. It now skips items that already have an image attached through the image-matching flow (so nothing is re-scanned needlessly), and the time limit is raised for the bulk pass
- Queue actions now always return a readable error — any failure in a content-queue action is converted to a proper JSON message instead of a raw 500 page, so the browser shows the real reason rather than a generic "server error"
Changed files (2)
native/classes/ContentQueue.php
—
matchFeaturedImages: set_time_limit(180) + extra_json image-plan’ında görseli olan öğeleri atla (compass büyük kuyruk timeout’u)
native/admin/ajax/queue-action.php
—
catch Exception→\Throwable: fatal/timeout ham 500 yerine JSON hata; error_log
Reliable Manual Publishing — No More "Spinning then Failed"
Fixed
- Publishing no longer crashes when a session cannot start — if output had already begun (e.g. a slow image URL emitting a warning), the session layer threw a fatal "headers already sent" error that aborted the publish even though the post itself was fine. The session now degrades gracefully (logs and continues, fail-closed) instead of crashing background work
- A dead or slow featured-image URL can’t freeze the publish anymore — image download now has an 8-second connect and 25-second total cap (was 60s with no connect timeout), the single biggest cause of the publish button spinning for up to a minute. A failed download simply falls back to publishing without that image
- Already-published posts are no longer mislabeled "failed" — if a post was created but a later side-step (cache, session, search-engine ping) errored, the queue now finds the post by slug as well as title and correctly marks it completed
- The optional in-content image localization can no longer abort a publish — the whole step is now isolated; any error there is skipped and the post still goes live
Changed files (3)
native/includes/Session.php
—
start(): headers_sent → fatal throw yerine error_log + return false (fail-closed); byte-güvenli hedefli replace ile 15 siteye (compassdraft divergent dosyası korundu)
native/classes/ContentQueue.php
—
downloadFeaturedImage CONNECTTIMEOUT 8s + TIMEOUT 60→25s; publishItem catch post’u slug ile de bulur; 4b görsel-yerelleştirme tümüyle try/catch izole
native/admin/content-queue.php
—
publish butonu net "işleniyor" + başarısızlıkta/timeout’ta otomatik refresh (donuk buton + eski satır kalmaz)
Content Queue — Recover Stuck Posts & Fix Missing Thumbnails
Fixed
- Scheduled posts can no longer vanish silently — if publishing was interrupted by a fatal error mid-run, the item used to stay frozen in a "processing" state that appeared in no queue tab and was never retried. Publishing now catches every failure type and the auto-publisher reclaims any item stuck longer than 15 minutes, so the backlog clears on the next visit
- Failed and stuck items are now visible and recoverable — a new "Failed" tab surfaces every problem item (failed or processing) with a one-click retry, instead of leaving them invisible while still showing on the calendar
- Featured thumbnails show in the admin again — completed posts whose image was attached through the image-matching flow stored the picture in the rich payload, not the legacy column, so the queue list and calendar showed an empty box even though the live post had the image. The admin now reads the matched image as a fallback
- Calendar hover preview image fixed — the tooltip was building the image path the wrong way around (a local path treated as an external URL and vice-versa), so the preview was always broken. It now uses the same single image resolver as the rest of the queue
Changed files (2)
native/classes/ContentQueue.php
—
resolveThumb() tek-kaynak küçük-resim çözücü (extra_json featured slot fallback); publishItem catch Exception→\Throwable; publishDueItems 15 dk takılı processing kurtarma; getItems status_in filtresi
native/admin/content-queue.php
—
takvim+liste resolveThumb kullanır (ters görsel mantığı düzeltildi); "Başarısız" sekmesi (failed+processing) tek-tık yeniden dene; 15 siteye yayıldı (md5+grep-assert)
Security Hardening — Per-Install Unique Keys
Improved
- Every installation now generates its own unique security keys — authentication, session and JWT secrets are created with cryptographic randomness on first run and stored outside the distributed package. No two installs share secrets, so a token issued on one site is meaningless on another
- Install-time integrity manifest — the wizard now signs the tamper-detection manifest with the install’s own key at the end of setup, so a fresh installation never shows a false "integrity" warning
Changed files (3)
native/config/environment.php
—
sabit anahtarlar kaldırıldı; config/keys.php (gitignore) ilk yüklemede random_bytes ile üretilir + son-çare host-özgü fallback
native/jekcms-install.php
—
kurulum sonunda IntegrityGuard::generateManifest() — kurulumun kendi anahtarıyla imzalı manifest
native/classes/IntegrityGuard.php
—
protectedFiles() tek-kaynak liste (installer + script ortak); .gitignore: **/config/keys.php
Migration Polish — Author Links Show Everywhere, Bulletproof .htaccess
Improved
- The installer now guarantees jekcms’ own .htaccess is used — on most WordPress sites the .htaccess is stuffed with SEO/sitemap-plugin rewrite rules that can break clean URLs. The installer detects whether jekcms’ signature is present; if not, it backs the old file up to
.htaccess.wp-backupand writes the canonical jekcms .htaccess (read straight from the package, so no drift). Routing is correct even if the host locked the file or the archive lacked it
Fixed
- Migrated author social links now actually appear — several themes (Personal, Trends, Lifestyle, Pets, Finance) were reading the old column names and silently showed nothing. They now read the real
social_x / social_facebook / social_instagram / social_linkedin / websitefields, so the profiles imported in 2.16.0 are visible on author and article pages
Changed files (2)
native/themes/{personal,trends,lifestyle,pets,finance}/...
—
yazar sosyal/website okuma gerçek kolon adlarına çekildi (8 dosya); 14 siteye + _template’e yayıldı (md5+grep-assert)
native/jekcms-install.php
—
jek_enforce_htaccess(): imza kontrolü + WP .htaccess yedekle + kanonik jekcms .htaccess zorla yaz
WordPress Migration — Richer, Safer, Cleaner Imports
Added
- Author profiles now come over in full — biography, website, social links (X, Facebook, Instagram, YouTube, Pinterest, LinkedIn) and a Gravatar-based avatar, instead of just the name. Existing authors are enriched only where fields are empty (never overwritten)
Improved
- Re-running a migration no longer creates duplicates — posts already imported (matched by their original slug) are skipped, so an interrupted migration can be safely resumed
- Empty categories are cleaned up — WordPress’ default "Uncategorized" and any category with no posts are removed after import, so your category list stays meaningful
- A clear warning before deleting old files — if you migrated without downloading images (so your content still points at the old site), the cleanup step now warns that deleting the old files would break those images
Changed files (3)
native/database/schema.sql + migrations/005_user_social_website.sql
—
users: website + social_* kolonları (kanonik şema + idempotent migration)
native/admin/includes/import-core.php
—
tam yazar profili + jek_normalize_social + skipExisting + uncategorized atlama; 15 siteye yayıldı
native/jekcms-install.php
—
WP usermeta (bio/sosyal) + user_url + Gravatar SQL; boş kategori temizleme; görsel uyarısı (i18n)
Installer Renamed to jekcms-install.php (avoids WordPress clash)
Improved
- The setup file is now
jekcms-install.phpinstead of the genericinstall.php. A leftover WordPressinstall.phpon the server can no longer be confused with — or shadow — the jekcms installer. All "not installed yet" redirects and robots rules were updated to match
Setup Wizard — Clean WordPress Switchover (Safe Cleanup + Logo)
Added
- The wizard now finishes a WordPress migration cleanly — after importing your content, a Cleanup step lists exactly which old WordPress files will be removed and asks you to confirm (with a clear "this cannot be undone" warning). It then deletes them with a live progress bar, and optionally drops the old WordPress database too
- Safe by design — only genuine WordPress files are removed (a strict allow-list:
wp-admin,wp-includes,wp-content,wp-*.php,xmlrpc.php…). jekcms’ own files are never touched — even where names overlap (e.g. license/readme). The wizard also refuses to drop jekcms’ own database - Logo support — your site logo is pulled automatically from WordPress when migrating, or you can upload one (PNG/SVG/JPG/WebP). For a fresh install, just upload your logo. It’s saved to your site settings
Setup Wizard — English & Turkish, English by Default
Added
- The setup wizard now speaks English and Turkish, defaulting to English. A language toggle (EN/TR) sits next to the theme switch in the top bar, and your choice is remembered. Every label, hint, button, alert and progress message is fully translated
Setup Wizard — A Polished, Modern First Impression
Improved
- The setup wizard was redesigned from the ground up — a glassy, animated interface with a numbered progress tracker, the jekcms wordmark logo, soft animated background auras, smooth card transitions and a live progress bar. It now supports both dark and light themes with a one-tap toggle (your choice is remembered)
- The database step is much clearer — it now explicitly states that this is a new, empty database for jekcms, with a prominent note for WordPress users that it is not their existing WordPress database (that comes in the next step). No more mixing them up
Setup Wizard — WordPress Migration Verified End-to-End
Fixed
- The WordPress import step now connects to the correct database. Three real-world bugs found during a live migration test (a 114-post WordPress site) were fixed: the framework is loaded in global scope so the site's configuration is read correctly, database seeding no longer collides with open result cursors, and AJAX responses are now always clean JSON (no stray warnings)
New Setup Wizard — Install Fresh or Migrate From WordPress in Minutes
Added
- A modern, guided installer (install.php) — drop it next to the jekcms archive in your site root, open it in a browser, and it walks you through everything: a system requirements check, database connection (with step-by-step phpMyAdmin guidance and auto-create if the database is missing), site details, theme choice and admin account. It then unpacks the files, builds the database, applies your settings automatically, and cleans itself up afterwards
- WordPress migration built into the wizard — choose "Migrate from WordPress", enter your WordPress database details, and the installer previews how many posts, pages, categories and comments it found, pre-fills your site name and tagline from WordPress, then imports content, downloads & converts images to AVIF, and brings over approved comments. At the end it checks for leftover WordPress files and warns you to remove them to avoid conflicts
- Finishes with clear next steps — two cards to open the Admin Panel or view your site, with your details already filled in
Account & License Security Hardening
Fixed
- License site-limit race condition closed — registering domains for a license is now serialized (row-locked), so two simultaneous requests can no longer slip past your plan's site limit
- Logout now fully ends the session — the session is destroyed and its cookie cleared (previously only the user id was removed), removing a session-fixation surface
Reliability Audit — Newsletter Cron, Scheduled-Posts Link & Contact Inbox Fixed
Improved
- Trimmed remaining developer-oriented notes across the admin (technical jargon, internal details) down to plain, end-user labels
Fixed
- Newsletter sending cron was broken across all sites (a comment line accidentally ended early and broke the file). Scheduled campaigns now send again
- Scheduled-posts link in the top bar led nowhere — it now opens the scheduled posts list correctly
- Contact-form inbox could load the wrong site's configuration (a hard-coded path) — now resolved per-site
Google Console — One Clear "Scan" Button
Improved
- Index Coverage now has a single Scan button (auto-completes the whole site; becomes Re-scan when done) instead of three overlapping controls. Each card carries one short line explaining what it does
Google Console — Cleaner, Less Cluttered Copy
Improved
- Trimmed long explanatory notes in the Google Console panel down to short, action-focused labels — less clutter, faster to scan
Google Console — Cleaner Search Console Flow + Responsible Bulk Indexing
Added
- Bulk "Submit to Index" — notify Google about your not-indexed pages in one click. Built responsibly: a daily cap (well under quota), the same URL is never re-sent within 14 days, and only genuinely not-indexed pages qualify (404 / noindex / redirects are skipped). A clear notice explains that Google officially supports the Indexing API only for job-posting / livestream pages
Improved
- Search Console tab decluttered — the redundant single-URL inspector was removed (Index Coverage already shows every URL's status). One clear flow: coverage summary → problem list → indexing actions
- Auto-scan reliability fixed — coverage now scans in short, fast batches with automatic retry, so it no longer trips the "connection error" on stricter hosts
Changed files (1)
native/admin/plugins/jek-google/index.php
—
Tek-URL denetleyici kaldırıldı; coverage_scan_ajax kısa parti+retry; idx_submit (günlük cap + 14g de-dup + jg_idx_eligible) + politika uyarısı; 15 siteye yayıldı
Google Console — One-Click Auto Scan for Index Coverage
Improved
- Index Coverage now scans automatically — one "Auto scan" click runs the whole site in the background, batch by batch, with a live X/Y checked… progress counter, instead of clicking "Next batch" a dozen times. Google's URL Inspection API is rate-limited and ~one URL takes a few seconds, so the panel paces itself and resumes until every URL is checked
- Resilient & cached — each batch is time-guarded so it never hangs the page, results are cached 24h, and a single-batch manual button plus Reset remain for fine control
Changed files (1)
native/admin/plugins/jek-google/index.php
—
coverage_scan_ajax (JSON) + JS otomatik döngü + ilerleme; 15 siteye yayıldı
Google Console — Pick Your Analytics Property From a List (No More ID Typing)
Improved
- GA4 is now a dropdown, not a number to copy — Settings → Auto-discovery lists the Analytics accounts and properties your Google account can access, so you just pick yours instead of hunting for the numeric Property ID. Matches the existing one-click selection for Search Console site and AdSense account. Manual entry stays as a fallback
- Index Coverage is clearer before scanning — instead of a confusing row of zeros, the card now shows a clear "ready to scan" prompt, and explains that its totals won't exactly match Search Console's "Page indexing" numbers (Google also counts category/tag/system and old URLs; the panel checks your published content)
Changed files (2)
native/plugins/jek-google/GoogleClient.php
—
ga4AccountSummaries() — Analytics Admin API ile hesap/property keşfi
native/admin/plugins/jek-google/index.php
—
GA4 property dropdown + pick_ga4; kapsam kartı tarama-öncesi durumu + GSC-fark notu; 15 siteye yayıldı
Google Console — See Which Pages Google Isn't Indexing
Added
- Index Coverage in the Search Console tab — a new card scans your site's URLs and groups them by Google's indexing status: Indexed, Not indexed (crawled/discovered but not added, unknown to Google) and Error (404, server error, blocked by robots). You finally see your indexing problems in one list instead of checking URLs one by one
- Quota-friendly, incremental scan — built on Google's URL Inspection API (the only API that exposes per-URL index status). Each click inspects ~10 URLs, results are cached 24h, and a wall-clock guard keeps it responsive — large sites finish in a few clicks. Problem URLs link straight to Submit to Index
Changed files (1)
native/admin/plugins/jek-google/index.php
—
Dizine Ekleme Kapsamı kartı + coverage_scan/coverage_reset + jg_site_urls/jg_cov_classify; 15 siteye yayıldı
Google Console UI — Now Fully Native to Your Admin Theme
Improved
- The Google Console panel was rebuilt on the admin design system — it now follows your dark/light theme, uses the same cards, pill buttons, segmented date controls and typography as the rest of the admin instead of a separate light-only look. A more professional, cohesive dashboard
- Cleaner data presentation — connection status shown as a clear pill badge, neutral monochrome trend charts (no decorative color noise), refined KPI cards, tables and diagnostics that read at a glance
Changed files (1)
native/admin/plugins/jek-google/index.php
—
CSS değişkenleri (--bg-card/--text-*/--radius-*) ile yeniden yazıldı; hardcoded Google-mavisi/beyaz tema kaldırıldı; 15 siteye yayıldı
Google Console Now Ships With Every Theme
Added
- The Google Console plugin is now bundled with every jekcms theme — Search Console performance, GA4 traffic, AdSense earnings and frontend GA4/GTM/AdSense snippet injection in one panel, behind a single Google sign-in. Previously available on one theme, now on all of them
- One-click connect, encrypted tokens — OAuth refresh/access tokens are stored encrypted; the connection survives even if your admin session drops mid-flow (server-side one-time state, 10-min window)
Changed files (2)
native/plugins/jek-google + native/admin/plugins/jek-google
—
compassdraft'tan native kanonik kaynağa terfi (tek kaynak)
tools/jek-google-sync.php
—
Yeni: native → 14 site + _template idempotent yayılım (md5 doğrulamalı, route yaması yok — OAuth callback fiziksel dosya)
One Universal Key, Multiple Sites — Manage Domains From Your Dashboard
Added
- Site management in your account — one license = one key + N site slots. Register each site's domain (e.g.
siteadi.com) under My Licenses, up to your plan's limit. Adding a site beyond the limit is blocked - Strict activation — a site only activates if its domain is pre-registered for that license; an unregistered domain is rejected with a clear message. You control exactly which sites use your license
- Upgrade path — move to a higher plan for more sites; your key stays the same
Changed files (2)
customer/licenses.php
—
Yeniden yazıldı: customer_email + license_domains; domain ekle/çıkar + limit + format
classes/LicenseManager.php
—
registerDomain/unregisterDomain/isValidDomain + strict activate() + ensureLicensesSchema()
Simpler Pricing — Same Everything, Only Site Count Differs
Improved
- Every plan now includes the exact same features and support — all 14+ themes, all SEO & automation tools, priority support, lifetime updates. The only difference between plans is how many sites you can run
- Clear tiers: Personal $29 / 1 site · Standard $79 / 3 · Professional $149 / 10 · Unlimited $349 / ∞. The confusing dual "Agency $299 / Enterprise $599" tiers were replaced by one Unlimited plan
Fixed
- Pricing data was inconsistent across the site, checkout and license server (Agency was 50 domains in one place, unlimited in another, $299 vs $599). Now a single consistent model end-to-end
Changed files (3)
pricing.php
—
Tek-fark-site-sayısı modeli + karşılaştırma matrisi sadeleştirildi
classes/Payment/PaymentManager.php + classes/LicenseManager.php
—
Sınırsız $349 / sınırsız domain / ömür boyu — hizalandı
api/license/{activate,deactivate,info}.php
—
Rate-limit eklendi (bağlantı sertleştirme)
New Plugin: Google Console (Analytics + Search Console + AdSense)
Added
- Google Console plugin — Search Console (clicks/impressions/queries, URL Inspection, one-click index submit), Analytics GA4 (traffic, channels) and AdSense (earnings) in one dashboard, via a single Google OAuth connection
- Snippet injection — GA4, Tag Manager and AdSense tags injected on the frontend, managed from the admin (no code editing)
- Robust by design — encrypted tokens, response caching for quotas, per-API diagnostics, and clear "reconnect" handling
Changed files (1)
plugins/jek-google + admin/plugins/jek-google
—
Yeni eklenti (manifest, OAuth client, dashboard hub, snippet hook)
Infrastructure Hardening — Security, Performance & SEO
Security
- Payment webhooks now fail closed (Stripe + iyzico): an unsigned/forged webhook can no longer mark an order paid, and the paid amount is verified against the order total
- Admin payment/customer/order pages now require admin role; unauthenticated maintenance scripts locked to CLI; session cookie set to
SameSite=Lax(fixes being logged out when returning from external links)
Improved
- Faster page loads — plugin scan cached per request, composite DB indexes, and N+1 query batching on list pages. SEO: correct archive titles, paginated-page noindex, dynamic html lang
Fixed
- Analytics plugin (ZeroTrack) and Smart Backup now create their database tables on first use, fixing a 404/500 on fresh installs
Hero Trimmed to a Hook + Features Grid Expanded
Improved
- Hero copy trimmed to a hook — the 8-vendor laundry list ("Analytics (Plausible). SEO schema (Rank Math)...") was too long. Replaced with a sharp hook: "Not plugins. Core." + a single subtitle quantifying the savings (20+ features, ~$624/yr). Same message, half the words, double the impact
- Features grid expanded from 14 to 20 cards — added 6 cards for built-in capabilities that were previously hidden: Social Publisher (Buffer/Hootsuite — 18+ networks auto-publish), Instant Indexer (IndexMeNow — IndexNow + WebSub + Web Push), Newsletter (Mailchimp — campaigns + subscribers + digest), AI Image Generator (Canva — Gemini-driven post covers), AI Bulk Publisher (ContentBot — n8n + bulk queue), and they collectively replace another ~$390/yr in subscriptions
Changed files (2)
marketing-includes/header.php
—
hero_title (EN+TR) "Not plugins. Core." / "Eklenti değil. Çekirdek." + subtitle 20+ features hook
features.php
—
+6 grid kartı (EN+TR): Social Publisher, Instant Indexer, Newsletter, AI Image Generator, AI Bulk Publisher
Hero Copy Forced from Code — DB Override Bypass
Fixed
- Hero subtitle was empty on production — load_marketing_translations() pulls hero_subtitle from the marketing_translations table when present, which still held a stale pre-v2.8.1 entry on production (the 8-vendor copy never displayed). Fix: after merging defaults+DB layers, header.php now force-overrides hero_title and hero_subtitle from the code defaults. Marketing-investment copy is a release-time concern, not a CMS admin concern
Changed files (1)
marketing-includes/header.php
—
Force-override hero_title + hero_subtitle from defaults after load_marketing_translations()
Homepage Hero — The $624+/yr Built-In Story
Improved
- Hero subtitle rewritten — instead of the abstract "built-in SEO, internal linking, AVIF media" laundry list, the hero now names the 8 specific WordPress plugins jekcms replaces (Plausible, Rank Math, UpdraftPlus, Wordfence, WP 2FA, Redirection, Smush, WP Rocket) and quantifies the savings (~$624/yr in subscriptions). Concrete vendor-named replacements convert better than generic feature lists
- EN + TR copy aligned — both languages use the same 8 vendor names + dollar figure for consistent messaging across markets
Changed files (1)
marketing-includes/header.php
—
hero_subtitle (EN+TR) — named-vendor replacement story + savings figure
Performance Suite — Redirect Manager + Image Studio + Critical CSS, Built-In
Added
- Redirect Manager (NEW) — admin/redirects.php with full CRUD UI for 301/302/307/308/410 redirects. Bootstrap-level lookup runs BEFORE the router so redirects are zero-latency. Hit counter + last-hit timestamp expose which URLs people actually follow. Replaces Yoast Premium Redirect ($99/yr)
- 404 logger + Orphan 404s tab — every 404 hit is logged with referrer + UA. The admin sees URLs with 3+ hits in the last 30 days and can create a 301 with one click + a target URL field. Solving SEO recovery becomes a feed scroll
- RedirectManager class — lookup(), logNotFound(), stats(). Self-heals not_found_log table on first use. Admin/api/zt-track paths bypass (no false-positives on dev requests)
- Image Studio branding — existing admin/media-optimize.php now positioned as a Smush Pro alternative. Bulk batch convert (Media::batchConvert), responsive srcset auto-gen (320-1920px), Pinterest tall-image generator, domain-watermark stamper — all existing in Media.php
- Critical CSS Studio branding — existing Performance class (Performance::inlineCriticalCss, addCriticalCss, deferJavaScript, addPreloadHints, getCoreWebVitalsHints) positioned as a WP Rocket alternative. No new code, just visibility
- features.php +3 cards (Redirect Manager / Image Studio / Critical CSS Studio) — total grid now 14 cards covering ~$406+/yr in WP plugin subscriptions
Changed files (9)
native/classes/RedirectManager.php
—
YENI class: lookup, logNotFound, stats, ensureSchema
native/admin/redirects.php
—
YENI admin: CRUD UI + 404 log + suggest-redirect
native/admin/includes/sidebar.php
—
Redirect Manager link eklendi (Security Center altina)
native/includes/bootstrap.php
—
RedirectManager::lookup() hook (router'dan once)
native/classes/FrontendController.php
—
notFound() icinde RedirectManager::logNotFound()
features.php
—
Marketing grid: 3 yeni kart (Redirect/Image/Critical CSS)
sites/*/admin/redirects.php
—
15 site propagated
sites/*/classes/RedirectManager.php
—
15 site propagated
sites/*/includes/bootstrap.php
—
15 site propagated
TOTP 2FA — Surfaced + Coverage Tracker in Security Center
Added
- Security Center → 2FA Status tab — lists all admin/editor/author users, their 2FA enabled state (ENABLED / NOT ENABLED pill), role, last-login timestamp. "Enable Now" button for the current user (jumps to Settings). For other users: instruction that they must enable from their own profile (TOTP is a personal credential)
- 5th KPI card: 2FA Coverage — percentage of admin/editor/author users with TOTP enabled. Color codes: green ≥80%, neutral 40-80%, red <40%. Sub-label shows raw count (e.g. "3 / 5 users")
- About TOTP card — documents the setup flow (Settings → Two-Factor Authentication → Initialize → scan QR → confirm), login flow, recovery path (DB-level unlock if authenticator is lost). Explicitly positions jekcms's TOTP as a replacement for WP 2FA + Wordfence Login Security (~$50/yr combined)
- features.php 11th card: TOTP 2FA — RFC 6238, Google Authenticator/Authy/1Password compatible
Changed files (3)
native/admin/security-center.php
—
2FA tab + 5th KPI card + admin user query
features.php
—
Marketing grid: 11. kart — WP 2FA + Wordfence Login Security ~$50/yr alternative
sites/*/admin/security-center.php
—
15 site propagated
Security Center — WAF Dashboard + File Integrity Monitor, Built-In
Added
- Security Center admin page — a single tabbed dashboard for WAF/login attempts, security events, and file integrity. Surfaces what was already running silently (Security::detectAttacks, login_attempts log, IntegrityGuard::maybeVerify) so you can actually see attacks happen. Replaces Wordfence Premium ($119/yr)
- WAF tab — recent login attempts (last 30), top attackers by failed-login count (last 7d), blocked IPs table with manual block/unblock, one-click "Block this attacker" from the top-attackers list. KPIs at the top: failed logins (24h), unique IPs (7d), blocked count, FIM status
- Security Events tab — parses
logs/security.log(where Security::detectAttacks writes SQLi / XSS / path-traversal hits), displays timeline with IP, message and context. Up to 30 most recent events - File Integrity tab — install fingerprint display, VERIFIED/DRIFT status pill, last tamper report (formatted JSON), one-click "Scan Now" button that triggers IntegrityGuard::verifyManifest(). Includes a response-playbook card for what to do if drift is detected
- Self-healing blocked_ips table — created automatically on first visit to the page. Idempotent: ON DUPLICATE KEY UPDATE preserves existing blocks. CSRF-protected admin operations throughout
- Sidebar link — new "Security Center" entry directly below Backups in the admin nav. Shield icon. Standard active-state highlighting
Changed files (5)
native/admin/security-center.php
—
Yeni admin sayfasi (~500 satir): WAF tab + Events tab + FIM tab
native/admin/includes/sidebar.php
—
Security Center baglantisi eklendi (Backups'in altinda)
features.php
—
Marketing grid: 10. kart — Wordfence Premium $119/yr alternative
sites/*/admin/security-center.php
—
15 site propagated
sites/*/admin/includes/sidebar.php
—
15 site propagated
Smart Backup — Scheduled Daily Backups, Built-In
Added
- Smart Backup scheduled cron — turn on daily auto-backups in the admin (Backups → Smart Backup Schedule card). Pick the hour (default 03:00, low-traffic window). Cron runs
BackupManager::scheduledRun()which is idempotent (one backup per day, even if cron fires multiple times). Replaces UpdraftPlus Premium ($70/yr) - Retention policy — configurable 7-365 days. Auto-backups older than the cutoff are deleted automatically after the daily run. Manual backups are never auto-deleted. Storage stays bounded
- Pure-PHP backups — no
mysqldumpdependency (Hostinger and shared hosts often disable it). Streaming row-by-row dump handles large post tables without exhausting memory. Output is a single ZIP withdb.sql+uploads/+manifest.json - External sync hint — the schedule card documents the recommended
rclonepattern for syncing thebackups/folder to S3, Google Drive, or Dropbox. Native cloud SDK support is on the v2.6.x roadmap
Changed files (4)
native/classes/BackupManager.php
—
scheduledRun() method eklendi — hour + day guard, retention prune
native/cron.php
—
BackupManager::scheduledRun() cron tick'inde tetikleyici (silent no-op default)
native/admin/backups.php
—
Smart Backup Schedule card: enable + hour + retention slider + CSRF-protected save
features.php
—
Marketing grid: Smart Backup karti — UpdraftPlus Premium $70/yr alternative
Schema Studio — 13 Schema.org Types, Built-In
Added
- Schema Studio plugin family — 13 Schema.org types, all driven from the post editor with form-based UI. The full set: Article, BlogPosting, NewsArticle, TechArticle, ScholarlyArticle, Report, FAQPage, HowTo, Product, Event, Review, Course, Recipe (new), and LocalBusiness (new). Replaces Rank Math Pro's schema-builder module ($59/yr) — no subscription, no add-ons
- Recipe schema — food bloggers can now ship Google Rich Recipe cards: prep/cook/total time (ISO 8601), yield, category, cuisine, calories, ingredient list, step-by-step instructions, aggregate rating. Drives 30-40% CTR uplift on recipe-intent queries
- LocalBusiness schema — drives Google Maps + local-pack ranking. 18 business subtypes (Restaurant, Store, MedicalBusiness, Dentist, BeautySalon, TravelAgency, …). Full PostalAddress + GeoCoordinates + opening hours + price range + aggregate rating
- CSV-style data entry — ingredients, instructions and opening-hours all accept one item per line in a textarea. No fragile JavaScript arrays, no clicking +/- buttons; copy-paste works directly from your notes
- Schema preview + Google Rich Results Test link — the editor shows the live JSON-LD payload AND a one-click handoff to Google's validator. Zero guesswork
Changed files (5)
native/includes/helpers.php
—
output_schema() — Recipe + LocalBusiness case bloklari eklendi (~120 satir)
native/admin/post-edit.php
—
Recipe + LocalBusiness POST handler + UI form fields (CSV textarea pattern)
features.php
—
Marketing grid: Schema Studio karti — Rank Math Pro $59/yr alternative
sites/*/includes/helpers.php
—
15 site propagate
sites/*/admin/post-edit.php
—
15 site propagate
ZeroTrack Analytics — Privacy-First, Cookie-Free, Built-In
Added
- ZeroTrack Analytics plugin — a built-in, privacy-first replacement for Google Analytics, Plausible and Matomo. Zero cookies. Visitor data never leaves your server. KVKK/GDPR-compliant by design: IP addresses are SHA-256 hashed with a daily-rotated salt, making cross-day correlation mathematically impossible. Auto-activated on install
- Privacy dashboard in admin → ZeroTrack: page views, unique visitors, sessions, bounce rate, daily trend chart, top pages, referrers, countries, devices, UTM sources. Date range selector (today / 7d / 30d / 90d)
- Smart filtering out of the box — respects browsers' Do-Not-Track header; excludes logged-in admins; filters Googlebot, GPTBot, ClaudeBot, headless Chrome and 20+ other automation user-agents; configurable IP and path exclusions
- Reverse-proxy aware — picks up the real visitor IP behind Cloudflare and LiteSpeed (no double-counting your CDN). Country detection via Cloudflare CF-IPCountry header — no third-party GeoIP database needed
- Self-cleaning — raw pageview rows are deleted after a configurable retention window (default 90 days). Daily aggregates are kept forever for long-term trend analysis with tiny storage footprint
Changed files (7)
native/plugins/zerotrack/plugin.php
—
Plugin manifest + bootstrap
native/plugins/zerotrack/ZeroTrackPlugin.php
—
Tracker beacon endpoint, UA parser, salt rotation, daily aggregator, retention cleanup
native/plugins/zerotrack/activate.php
—
DB schema: zt_pageviews, zt_aggregates_daily, zt_settings
native/plugins/zerotrack/admin/index.php
—
Privacy dashboard — KPIs, trend chart, top tables
native/plugins/zerotrack/admin/settings.php
—
Settings UI: master switch, DNT, exclusions, retention
features.php
—
Marketing grid — ZeroTrack vs Plausible $9/mo
sites/*/plugins/zerotrack/
—
Propagated to all 15 sites + _template
Sharper Homepage Hero — A Concrete Hook
Improved
- The hero now says what jekcms actually is — the vague "Smart Next-Gen CMS" line was replaced with a concrete, provable hook: everything you would normally add to WordPress (SEO, internal linking, AVIF media, bulk import, AI publishing) is already in the core, self-hosted, with no plugin stack to buy or maintain. One clear message instead of a buzzword
Changed files (1)
marketing-includes/header.php
—
hero_title + hero_subtitle (EN/TR) somut hook
Newsletter Email: Branded Dark Header
Improved
- Email design now has a real branded identity — the previous version rendered too plain in clients that strip CSS backgrounds. The header is now a solid dark band with the brand wordmark and an accent eyebrow, plus a thin accent rule under it, a card frame, and a tinted footer band. Backgrounds use both inline CSS and
bgcolorattributes so the design survives in Gmail/Outlook. Auto-applied to system templates via a schema bump
Changed files (2)
plugins/newsletter/data/default-templates.php
—
koyu markalı header bandı + bgcolor sağlamlaştırma (native+kök+15 site)
plugins/newsletter/NewsletterPlugin.php
—
SCHEMA_VERSION 2.5.0 → 2.6.0
Redesigned Newsletter Email Templates
Improved
- Professional, brand-consistent email templates — the newsletter emails (confirmation, welcome, campaign, unsubscribe, new-post) were replaced with a polished, English, email-safe design: a clean white card on a soft background, branded header with an accent eyebrow, strong typographic hierarchy, a proper rounded brand CTA button, and a complete footer (unsubscribe, website, copyright). Table-based + inline CSS for reliable rendering across email clients; all placeholders preserved
- Auto-applied across all installs via a plugin schema-version bump — system templates refresh automatically on the next load, while any template you customized is left untouched
Changed files (2)
plugins/newsletter/data/default-templates.php
—
yeni profesyonel İngilizce e-posta tasarımı (native+kök+15 site)
plugins/newsletter/NewsletterPlugin.php
—
SCHEMA_VERSION 2.4.0 → 2.5.0 (otomatik re-seed tetik)
Blog Editor: Featured Post & Empty-Content Fix
Fixed
- Blog post editor opened empty for the featured post — the editor treated
?id=0(the featured post, which carries id 0) as "new post" because of aid > 0check, so it never loaded it. It now loads any post when an id is present (0 included); a truly new post is one with no id parameter. Additionally, if a row's body is empty (legacy posts whose content lived only in the static blog data file), the editor pre-fills the form from that source by slug/id for review — saving persists it into the database (display-only, non-destructive, never overwrites existing edits)
Changed files (1)
admin/blog-post-edit.php
—
id=0 düzenleme + blog-data.php boş-içerik ön-doldurma (jekcms.com kök)
Plugin System Restored on the Main Install (Newsletter Now Lists)
Fixed
- Newsletter (and all plugins) now appear in the plugin manager — the main install's bootstrap (cloned long ago from an older codebase) was entirely missing the plugin-loader block, so the plugin registrar never ran and no plugin could register itself. The block was restored, identical to the canonical source; the registrar now runs (with the self-healing plugin-table schema), so Newsletter registers automatically and is listed/activatable
Changed files (1)
includes/bootstrap.php
—
eksik plugin-loader bloğu native ile birebir geri eklendi (jekcms.com kök)
Marketing Blog Editor Now Reachable in Admin
Fixed
- Blog posts are editable again — the bilingual marketing blog (the EN/TR posts shown on jekcms.com/blog) has its own admin editor that reads the same table the public blog uses, but it had no link in the admin menu, so it looked like the posts weren't manageable (the CMS Posts page only lists the separate site-content table). A "Blog Posts (jekcms.com)" entry was added to the admin sidebar — the existing posts are now listed and editable
Changed files (2)
admin/includes/sidebar.php
—
Marketing Blog (blog-posts.php) nav linki — jekcms.com kök admin
config/translations/{tr,en}.php
—
admin_nav_marketing_blog anahtarı (ham-anahtar regresyonu önlendi)
Wizard Network Error, Profiles & Plugin Registration Fixed
Fixed
- "Network error" on Generate fixed — the JSON wizard endpoint (
admin/ajax/assistant-json.php) existed only on two installs; it now exists on every site, so Generate works everywhere, not just compass - Plugins now register on cloned installs — on installs cloned from an older database the
pluginstable could be missing newer columns, which made plugin registration fail silently — so the Newsletter plugin never appeared in the plugin manager. The scanner now self-heals the table schema, so Newsletter (and any new plugin) registers and is visible/activatable
Changed files (3)
includes/plugin_hooks.php
—
plugins tablosu şema self-heal (native+kök+15 site)
classes/ImportSchema.php
—
profiles() + themeProfile() genişletildi
admin/ajax/assistant-json.php
—
kök + tüm sitelere yayıldı
Root Admin Fixes — Content Fixer, Newsletter Link, Wizard Keys
Fixed
- Content Fixer 404 fixed — the SEO Optimizer's Content/Heading Fixer page existed in the canonical source but was missing from the main install's admin, returning 404. It is now present
- Newsletter admin link corrected — the Newsletter plugin manifest pointed its admin page to a non-existent path; corrected fleet-wide so the dashboard opens from the plugin manager (the sidebar entry still requires the plugin to be activated)
- Wizard keys fixed on the main site too — the previous translation-key parity fix covered demo sites but missed the main install;
cq_assistant_*keys are now mirrored there as well, so the JSON Generation Wizard no longer shows raw keys
Changed files (3)
admin/content-fixer.php
—
kök kuruluma eklendi (native'den)
plugins/newsletter/plugin.php
—
Admin Page yolu düzeltildi — native+kök+15 site
config/translations/{tr,en}.php + lang/{tr,en}/general.php (kök)
—
cq_assistant_* native paritesi
Content Queue Wizard — Raw Keys Fixed on All Sites
Fixed
- JSON Generation Wizard now reads properly on every site — the content-queue assistant translation keys (
cq_assistant_*) existed only on a couple of sites, so other sites showed raw keys like "cq_assistant_title" instead of labels. All sites now carry the full key set, mirrored byte-for-byte from the canonical source
Changed files (1)
sites/*/config/translations/{tr,en}.php + lang/{tr,en}/general.php
—
cq_assistant_* native paritesi (15 site × 4 dosya), grep-assert ile sayı eşitliği doğrulandı
Newsletter Signup Live on the Marketing Site
Fixed
- Newsletter subscription now works on jekcms.com — the footer "Subscribe" form was built but silently failed when the subscriber table did not exist. The handler now self-creates the table (idempotent, identical schema to the Newsletter plugin, so the plugin admin reads the same subscribers). Homepage stat figures also unified site-wide
Changed files (2)
marketing-includes/ajax/newsletter-handler.php
—
idempotent self-bootstrap (newsletter_subscribers, eklenti şemasıyla birebir)
index.php / about.php / functions.php
—
stat 500+ → 100+ tutarlı, 14→14+, 24/7 lang-aware
Sub-Page SEO Audit — Documentation Title Fixed
Improved
- Documentation title is now descriptive & branded — the docs
was a bare "Documentation"; it is now "jekcms Documentation | Setup, Admin Guide, REST API & Automation" (and category/page docs titles now carry the brand). Stronger, unique titles for search</li> <li>Full sub-page meta/SEO audit: every marketing sub-page verified to have a unique, bilingual (EN/TR) meta title and description, valid canonical + hreflang (en/tr/x-default) + Open Graph; no missing, empty or duplicate meta found</li> </ul> </div> <details class="cl-files"> <summary> <svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5"><polyline points="9 18 15 12 9 6"/></svg> Changed files (1) </summary> <div class="cl-files-grid"> <div class="cl-file-row"> <span class="cl-file-name">docs.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">SEO başlığı markalı + anahtar-kelimeli (görünür UI etkilenmez)</span> </div> </div> </details> </div> </div> <div class="cl-entry" id="v2-3-7"> <!-- Left: sticky meta --> <div class="cl-meta"> <span class="cl-badge">v2.3.7</span> <time class="cl-date" datetime="2026-05-19">19 May 2026</time> </div> <!-- Right: content --> <div class="cl-body"> <h2 class="cl-body-title">Accurate WordPress-Alternative Page (Verified Features Only)</h2> <div class="cl-group"> <div class="cl-section-label cl-section-improved">Improved</div> <ul class="cl-items"> <li><strong>Stronger, honest "why jekcms vs WordPress" page</strong> — now built strictly from verified features: it maps the paid WordPress plugins jekcms replaces in its core (SEO/Yoast, internal linking/LinkWhisper, broken-link detection, AVIF media/ShortPixel, security/Wordfence, payments/WooCommerce), plus jekcms-only JSON bulk import and n8n+Gemini AI automation. Modern, readable, theme-consistent table; long-tail keyword focused; FAQ with FAQPage structured data</li> </ul> </div> <div class="cl-group"> <div class="cl-section-label cl-section-fixed">Fixed</div> <ul class="cl-items"> <li><strong>Removed an inaccurate capability claim</strong> — a "multi-site / fleet management" line was wrongly added to the comparison page, structured data and llms.txt. jekcms has no such product feature; it has been removed everywhere and replaced with verified, real capabilities only</li> </ul> </div> <details class="cl-files"> <summary> <svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5"><polyline points="9 18 15 12 9 6"/></svg> Changed files (2) </summary> <div class="cl-files-grid"> <div class="cl-file-row"> <span class="cl-file-name">wordpress-alternative.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">doğrulanmış özelliklerle yeniden yazıldı (multi-site kaldırıldı)</span> </div> <div class="cl-file-row"> <span class="cl-file-name">header.php + llms.txt</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">uydurma özellik kaldırıldı, gerçek yeteneklerle değiştirildi</span> </div> </div> </details> </div> </div> <div class="cl-entry" id="v2-3-6"> <!-- Left: sticky meta --> <div class="cl-meta"> <span class="cl-badge">v2.3.6</span> <time class="cl-date" datetime="2026-05-19">19 May 2026</time> </div> <!-- Right: content --> <div class="cl-body"> <h2 class="cl-body-title">No Orphan Pages — Full Internal Linking</h2> <div class="cl-group"> <div class="cl-section-label cl-section-fixed">Fixed</div> <ul class="cl-items"> <li><strong>No orphan pages</strong> — every public marketing page is now reachable via the footer + sitemap + clean URL with EN/TR variants. The "Report Piracy" page was orphaned (no link anywhere) and is now footer-linked and crawlable; the WordPress-alternative page was already footer-linked (verified)</li> </ul> </div> <details class="cl-files"> <summary> <svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5"><polyline points="9 18 15 12 9 6"/></svg> Changed files (2) </summary> <div class="cl-files-grid"> <div class="cl-file-row"> <span class="cl-file-name">marketing-includes/footer.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">report-piracy Legal bölümüne eklendi</span> </div> <div class="cl-file-row"> <span class="cl-file-name">functions.php + .htaccess + sitemap.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">report-piracy slug map + TR slug + temiz-URL allowlist + sitemap</span> </div> </div> </details> </div> </div> <div class="cl-entry" id="v2-3-5"> <!-- Left: sticky meta --> <div class="cl-meta"> <span class="cl-badge">v2.3.5</span> <time class="cl-date" datetime="2026-05-19">19 May 2026</time> </div> <!-- Right: content --> <div class="cl-body"> <h2 class="cl-body-title">AI-Search Visibility & WordPress-Alternative Positioning</h2> <div class="cl-group"> <div class="cl-section-label cl-section-added">Added</div> <ul class="cl-items"> <li><strong>WordPress Alternative comparison page</strong> — a new, honest <code>/wordpress-alternative</code> (TR: <code>/tr/wordpress-alternatifi</code>) page with a factual jekcms-vs-WordPress table and FAQ (FAQPage structured data), sitemap + hreflang + footer-linked</li> <li><strong>llms.txt</strong> — a machine-readable summary at <code>/llms.txt</code> so AI assistants can accurately describe jekcms as a self-hosted CMS / WordPress alternative</li> </ul> </div> <div class="cl-group"> <div class="cl-section-label cl-section-improved">Improved</div> <ul class="cl-items"> <li><strong>Discoverable in AI search</strong> — AI answer/search engines (ChatGPT, Perplexity, Gemini, Claude, Copilot) are now explicitly allowed (server-level block removed for them; named robots groups added). Low-value SEO-scraper bots stay blocked</li> <li><strong>Clearer entity for search & AI</strong> — structured data now classifies jekcms as a Content Management System with a precise CMS / WordPress-alternative description and feature list; site meta sharpened to say "self-hosted CMS / WordPress alternative" (factual, no keyword stuffing)</li> </ul> </div> <details class="cl-files"> <summary> <svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5"><polyline points="9 18 15 12 9 6"/></svg> Changed files (3) </summary> <div class="cl-files-grid"> <div class="cl-file-row"> <span class="cl-file-name">.htaccess</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">AI bot 403 kaldırıldı (SEO-scraper engelli kalır); wordpress-alternative temiz-URL + TR slug</span> </div> <div class="cl-file-row"> <span class="cl-file-name">robots-txt.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">GPTBot/OAI/Claude/Perplexity/Google-Extended… açık Allow grupları + llms.txt referansı</span> </div> <div class="cl-file-row"> <span class="cl-file-name">llms.txt + wordpress-alternative.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">YENİ; header.php SoftwareApplication=CMS + meta; sitemap + footer + slug map</span> </div> </div> </details> </div> </div> <div class="cl-entry" id="v2-3-4"> <!-- Left: sticky meta --> <div class="cl-meta"> <span class="cl-badge">v2.3.4</span> <time class="cl-date" datetime="2026-05-19">19 May 2026</time> </div> <!-- Right: content --> <div class="cl-body"> <h2 class="cl-body-title">Marketing-Site SEO Hardening</h2> <div class="cl-group"> <div class="cl-section-label cl-section-improved">Improved</div> <ul class="cl-items"> <li><strong>No duplicate page URLs</strong> — direct <code>.php</code> hits (e.g. <code>/features.php</code>) now 301-redirect to the clean URL (<code>/features</code>), so each page has a single indexable address and a single canonical</li> <li><strong>Single redirect hop</strong> — <code>http://www</code> now goes straight to <code>https://</code> non-www in one 301 instead of two chained redirects (faster, stronger SEO signal)</li> <li>Audited & confirmed correct: error pages return real 404 (no soft-404, noindex), dynamic robots.txt with environment-aware sitemap, bilingual sitemap with hreflang, self-referencing canonical + en/tr/x-default hreflang, <code>?lang=tr</code> → <code>/tr/…</code> 301</li> </ul> </div> <details class="cl-files"> <summary> <svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5"><polyline points="9 18 15 12 9 6"/></svg> Changed files (1) </summary> <div class="cl-files-grid"> <div class="cl-file-row"> <span class="cl-file-name">.htaccess</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">www→non-www+https tek hop; .php→temiz URL 301 (allowlist, THE_REQUEST guard, static-serve öncesi)</span> </div> </div> </details> </div> </div> <div class="cl-entry" id="v2-3-3"> <!-- Left: sticky meta --> <div class="cl-meta"> <span class="cl-badge">v2.3.3</span> <time class="cl-date" datetime="2026-05-19">19 May 2026</time> </div> <!-- Right: content --> <div class="cl-body"> <h2 class="cl-body-title">Article Rendering & Internal-Link Integrity Fixes</h2> <div class="cl-group"> <div class="cl-section-label cl-section-fixed">Fixed</div> <ul class="cl-items"> <li><strong>Broken internal links repaired at the source</strong> — The auto internal linker could run over raw Markdown and inject a link inside a Markdown link, which the renderer then turned into corrupted, half-visible anchor markup. Markdown links/images are now protected, so internal linking can never mangle content again. The link cleaner was also hardened to fully remove any pre-existing corrupted/leaked link debris — re-running the internal-link scan on an affected site now self-heals old content</li> <li><strong>Checklists render properly</strong> — Markdown task lists (<code>- [ ]</code> / <code>- [x]</code>) now show real checkbox glyphs instead of literal "[ ]" text</li> <li><strong>Tables are styled</strong> — Markdown tables in articles now render with borders, padding and header styling instead of columns running together</li> <li><strong>No more double bullets</strong> — list items showed both a default bullet and a custom marker; the duplicate is gone</li> <li><strong>Related posts fixed</strong> — the related section rendered twice, once as full-width stacked images; the broken duplicate was removed, leaving the clean card grid</li> <li><strong>Featured image aspect ratio</strong> — single-post cover images now use a proper 16:9 frame instead of a cropped near-square</li> <li><strong>Table of contents shows accented characters correctly</strong> — the on-page contents list double-escaped HTML entities, showing things like "Güncel" instead of "Güncel"; titles are now decoded before display (anchors stay in sync)</li> <li><strong>Front-end fixes now go live immediately</strong> — deploys purge the page cache, so a fix is no longer masked by up-to-5-minutes of stale cached HTML</li> </ul> </div> <details class="cl-files"> <summary> <svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5"><polyline points="9 18 15 12 9 6"/></svg> Changed files (4) </summary> <div class="cl-files-grid"> <div class="cl-file-row"> <span class="cl-file-name">includes/auto-linker.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">markdown link/görsel placeholder koruması (iç içe anchor kök nedeni)</span> </div> <div class="cl-file-row"> <span class="cl-file-name">includes/helpers.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">parse_markdown GFM task-list ([ ]/[x] → onay kutusu glyph)</span> </div> <div class="cl-file-row"> <span class="cl-file-name">themes/travel (subpages.css, single.php)</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">tablo CSS + çift-madde list-style:none + bozuk dublikat related blok kaldırıldı</span> </div> <div class="cl-file-row"> <span class="cl-file-name">themes/health (single-v2.css)</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">.h-single__cover 4/3 → 16/9 (native + ilgili siteler)</span> </div> </div> </details> </div> </div> <div class="cl-entry" id="v2-3-2"> <!-- Left: sticky meta --> <div class="cl-meta"> <span class="cl-badge">v2.3.2</span> <time class="cl-date" datetime="2026-05-19">19 May 2026</time> </div> <!-- Right: content --> <div class="cl-body"> <h2 class="cl-body-title">JSON Wizard Rename & Calendar Visibility Fix</h2> <div class="cl-group"> <div class="cl-section-label cl-section-improved">Improved</div> <ul class="cl-items"> <li><strong>"Content Assistant" renamed to "JSON Generation Wizard"</strong> — name now reflects what it actually does: builds a ready-to-import JSON + prompt</li> <li><strong>"Continue below" marker is now built-in</strong> — typing <code>{devam}</code> in a post renders a centred "content continues below" button that smooth-scrolls to the next section. It now lives in the core renderer (theme-independent), so theme resets can no longer wipe it</li> <li>Checklist fix also covers articles already stored as HTML, not just Markdown</li> </ul> </div> <div class="cl-group"> <div class="cl-section-label cl-section-fixed">Fixed</div> <ul class="cl-items"> <li><strong>Content calendar fixed — schedule is visible again</strong> — On some installs the whole calendar silently came back empty: the underlying query referenced a column that older content-queue tables never had, so it failed and showed nothing. The query is now schema-independent and self-healing, and the month view also shows every scheduled item regardless of its state (draft / approved / in-progress / done), colour-coded by status</li> <li>Calendar hover preview used the wrong image field in one branch — corrected</li> </ul> </div> <details class="cl-files"> <summary> <svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5"><polyline points="9 18 15 12 9 6"/></svg> Changed files (2) </summary> <div class="cl-files-grid"> <div class="cl-file-row"> <span class="cl-file-name">admin/content-queue.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">takvim status filtresi genişletildi (scheduled_date olan tüm öğeler) + görsel-alan dal hatası</span> </div> <div class="cl-file-row"> <span class="cl-file-name">lang/*/general.php, config/translations/*</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">cq_assistant_title → JSON Oluşturma Sihirbazı / JSON Generation Wizard</span> </div> </div> </details> </div> </div> <div class="cl-entry" id="v2-3-1"> <!-- Left: sticky meta --> <div class="cl-meta"> <span class="cl-badge">v2.3.1</span> <time class="cl-date" datetime="2026-05-19">19 May 2026</time> </div> <!-- Right: content --> <div class="cl-body"> <h2 class="cl-body-title">Cleaner Content Queue Import Screen</h2> <div class="cl-group"> <div class="cl-section-label cl-section-improved">Improved</div> <ul class="cl-items"> <li><strong>Content Queue → Import</strong> — Clearer visual separation between the AI Content Assistant and the import options (JSON / Google Sheets / CSV), so the two no longer run together on the page</li> <li>Removed the redundant static JSON and Google Sheets format reference blocks — the Assistant already generates a ready-to-use example, so the extra boilerplate only added clutter. Applied fleet-wide</li> </ul> </div> <details class="cl-files"> <summary> <svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5"><polyline points="9 18 15 12 9 6"/></svg> Changed files (1) </summary> <div class="cl-files-grid"> <div class="cl-file-row"> <span class="cl-file-name">admin/content-queue.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">import sekmesi: bölüm ayrımı (gap) + statik format kutuları kaldırıldı — native + _template + 14 site senkron</span> </div> </div> </details> </div> </div> <div class="cl-entry" id="v2-3-0"> <!-- Left: sticky meta --> <div class="cl-meta"> <span class="cl-badge">v2.3.0</span> <time class="cl-date" datetime="2026-05-18">18 May 2026</time> </div> <!-- Right: content --> <div class="cl-body"> <h2 class="cl-body-title">Reliability, Security & Always-On Delivery</h2> <div class="cl-group"> <div class="cl-section-label cl-section-added">Added</div> <ul class="cl-items"> <li><strong>Two-Factor Authentication (TOTP)</strong> — Modern QR setup card in every site's Security settings. Scan with Google Authenticator / Authy / 1Password; self-hosted QR (no third party), with a manual key fallback. Login enforcement is fail-open by design — a 2FA glitch can never lock you out</li> <li><strong>Zero-downtime auto-deploy</strong> — Updates now ship to the whole fleet automatically within minutes of a change, over HTTPS, with a post-deploy health check. No manual uploads, no SSH, no lockouts</li> </ul> </div> <div class="cl-group"> <div class="cl-section-label cl-section-improved">Improved</div> <ul class="cl-items"> <li>Faster pages — documentation/screenshot assets ~73% lighter, zero-layout-shift images</li> <li>Cleaner SEO — bilingual default meta description & footer fields, consistent schema name source</li> </ul> </div> <div class="cl-group"> <div class="cl-section-label cl-section-fixed">Fixed</div> <ul class="cl-items"> <li><strong>Site name in Google results</strong> — A long-standing settings storage issue made search engines fall back to the bare domain. Now every site shows its real configured name in titles, social cards and structured data — fleet-verified</li> <li><strong>Stay signed in</strong> — Admin sessions no longer drop unexpectedly; they persist until you explicitly sign out (root cause: server session garbage-collection wasn't aligned with the configured lifetime)</li> <li><strong>Footer & branding</strong> — Footer renders reliably and is driven from a single source in General Settings (slogan / footer text), bilingual (TR/EN) where applicable; placeholder/demo remnants removed</li> </ul> </div> <details class="cl-files"> <summary> <svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5"><polyline points="9 18 15 12 9 6"/></svg> Changed files (5) </summary> <div class="cl-files-grid"> <div class="cl-file-row"> <span class="cl-file-name">includes/Totp.php / QrSvg.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">NEW — self-hosted TOTP + QR (SVG)</span> </div> <div class="cl-file-row"> <span class="cl-file-name">deploy/deploy-all.sh</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">NEW — sunucu-tarafı ban-proof auto-deploy + smoke-test</span> </div> <div class="cl-file-row"> <span class="cl-file-name">includes/Session.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">gc_maxlifetime fix (oturum kalıcılığı)</span> </div> <div class="cl-file-row"> <span class="cl-file-name">admin/settings.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">modern 2FA kartı + settings persistence (SERP) fix</span> </div> <div class="cl-file-row"> <span class="cl-file-name">marketing-includes/footer.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">bulletproof footer</span> </div> </div> </details> </div> </div> <div class="cl-entry" id="v2-2-0"> <!-- Left: sticky meta --> <div class="cl-meta"> <span class="cl-badge">v2.2.0</span> <time class="cl-date" datetime="2026-05-18">18 May 2026</time> </div> <!-- Right: content --> <div class="cl-body"> <h2 class="cl-body-title">Two-Factor Auth, Smart Newsletter & Customer Update Channel</h2> <div class="cl-group"> <div class="cl-section-label cl-section-added">Added</div> <ul class="cl-items"> <li><strong>Admin two-factor authentication (TOTP)</strong> — Optional time-based 2FA with QR enrollment, enabled/disabled per account from Security settings; compatible with any authenticator app</li> <li><strong>Smart newsletter digests</strong> — The subscription plugin can now send an automated <strong>weekly or monthly</strong> roundup of new posts (frequency off/weekly/monthly + day-of-month), reliably driven server-side via cron with per-period de-duplication</li> <li><strong>Customer self-update channel</strong> — End-to-end signed update delivery: the update manifest is verified with an embedded public key so verification works on every install, SHA-256 is mandatory, and a one-command release packager builds a clean core package with a key-pair safety gate that refuses a mis-signed release</li> </ul> </div> <div class="cl-group"> <div class="cl-section-label cl-section-fixed">Fixed</div> <ul class="cl-items"> <li><strong>Critical SEO: archive pages no longer soft-404</strong> — On the Tech & Minimalist themes every category/author archive returned a hard 404 (the template read a routing key that was never set); these pages now resolve correctly and author archives are fully supported</li> <li><strong>API write authorization</strong> — An authenticated low-privilege token can no longer create/modify/delete content or touch another author's posts; role + ownership are enforced from the product's own capability model</li> <li><strong>Sitemap/robots resilience</strong> — Security user-agent heuristics could return 403 to Googlebot/Search Console for <code>sitemap*.xml</code>/<code>robots.txt</code>; these endpoints now bypass every blocking rule so indexing is never accidentally lost</li> <li><strong>Footer social links</strong> — The marketing footer now renders only the accounts configured in General Settings → Social Media (placeholder/demo links removed)</li> </ul> </div> <details class="cl-files"> <summary> <svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5"><polyline points="9 18 15 12 9 6"/></svg> Changed files (9) </summary> <div class="cl-files-grid"> <div class="cl-file-row"> <span class="cl-file-name">native/includes/Totp.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">NEW — RFC6238 TOTP</span> </div> <div class="cl-file-row"> <span class="cl-file-name">native/admin/login.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">2FA 2-adım akışı</span> </div> <div class="cl-file-row"> <span class="cl-file-name">native/plugins/newsletter/classes/WeeklyDigest.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">haftalık+aylık dispatch</span> </div> <div class="cl-file-row"> <span class="cl-file-name">native/themes/{tech,minimalist}/templates/archive.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">archive_slug + author dalı</span> </div> <div class="cl-file-row"> <span class="cl-file-name">native/api/v1/index.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">authorizeWrite() rol/sahiplik</span> </div> <div class="cl-file-row"> <span class="cl-file-name">native/.htaccess</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">sitemap/robots güvenlik-bypass</span> </div> <div class="cl-file-row"> <span class="cl-file-name">native/classes/Updater.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">gömülü public key + managed guard</span> </div> <div class="cl-file-row"> <span class="cl-file-name">tools/release.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">NEW — release paketleyici + anahtar self-doğrulama</span> </div> <div class="cl-file-row"> <span class="cl-file-name">marketing-includes/header.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">şema adı i18n</span> </div> </div> </details> </div> </div> <div class="cl-entry" id="v2-1-3"> <!-- Left: sticky meta --> <div class="cl-meta"> <span class="cl-badge">v2.1.3</span> <time class="cl-date" datetime="2026-05-18">18 May 2026</time> </div> <!-- Right: content --> <div class="cl-body"> <h2 class="cl-body-title">Security Hardening & Update Integrity</h2> <div class="cl-group"> <div class="cl-section-label cl-section-fixed">Fixed</div> <ul class="cl-items"> <li><strong>Critical: SSRF blocked</strong> — Server-side image fetch (media-from-URL) now allows only http/https public hosts; private/loopback/link-local and cloud-metadata addresses are rejected, redirects disabled, size-capped</li> <li><strong>High: Markdown XSS blocked</strong> — Link/image URLs in content are scheme-allowlisted; <code>javascript:</code>, <code>data:</code>, <code>vbscript:</code> and protocol-relative URLs can no longer reach <code>href</code>/<code>src</code></li> <li><strong>High: Cross-site request hardening</strong> — State-changing requests now also enforce same-origin (Origin/Referer) on top of the CSRF token, covering all admin action pages at once</li> <li><strong>SVG upload XSS blocked</strong> — Uploaded SVGs containing scripts, event handlers, foreignObject, external refs or XML entities (XXE) are rejected; static SVGs still allowed</li> <li><strong>Update integrity mandatory</strong> — Updates without a verified SHA-256 are refused; manual ZIP apply is off by default unless the official hash is provided; developer-license localhost detection now requires a real loopback connection (Host-header spoof closed)</li> </ul> </div> <details class="cl-files"> <summary> <svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5"><polyline points="9 18 15 12 9 6"/></svg> Changed files (8) </summary> <div class="cl-files-grid"> <div class="cl-file-row"> <span class="cl-file-name">api/v1/index.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">validateRemoteUrl() SSRF guard</span> </div> <div class="cl-file-row"> <span class="cl-file-name">includes/helpers.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">parse_markdown URL şema allowlist</span> </div> <div class="cl-file-row"> <span class="cl-file-name">includes/Security.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">CSRF same-origin + SVG denylist</span> </div> <div class="cl-file-row"> <span class="cl-file-name">classes/Updater.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">zorunlu sha256 (hash_equals)</span> </div> <div class="cl-file-row"> <span class="cl-file-name">admin/updates.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">manuel ZIP default-kapalı + sha256 gate</span> </div> <div class="cl-file-row"> <span class="cl-file-name">classes/License.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">isLocalhost loopback-peer zorunlu</span> </div> <div class="cl-file-row"> <span class="cl-file-name">tools/check-drift.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">NEW — standardizasyon drift denetimi</span> </div> <div class="cl-file-row"> <span class="cl-file-name">STANDARDIZATION.md</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">NEW — propagasyon/governance modeli</span> </div> </div> </details> </div> </div> <div class="cl-entry" id="v2-1-2"> <!-- Left: sticky meta --> <div class="cl-meta"> <span class="cl-badge">v2.1.2</span> <time class="cl-date" datetime="2026-05-18">18 May 2026</time> </div> <!-- Right: content --> <div class="cl-body"> <h2 class="cl-body-title">Core Web Vitals: Responsive Images, LCP & Caching</h2> <div class="cl-group"> <div class="cl-section-label cl-section-improved">Improved</div> <ul class="cl-items"> <li><strong>Site-wide Image Optimization</strong> — Every front-end image now ships with intrinsic <code>width</code>/<code>height</code> (zero layout shift / CLS), <code>decoding="async"</code> and lazy-loading, applied through a single global output filter that covers all themes. The hero/LCP image keeps <code>fetchpriority="high"</code> and is never lazy-loaded</li> <li><strong>Automatic Responsive Variants</strong> — Existing images are progressively back-filled with optimized AVIF/WebP size variants (thumbnail/medium/…), so cards and thumbnails download a small image instead of the full-resolution original — done gently in the background with no extra server load</li> <li><strong>Faster First Paint</strong> — Instant-search CSS no longer blocks rendering (async with no-JS fallback); themes can ship a <code>critical.css</code> for inlined above-the-fold styles</li> <li><strong>Browser Caching Restored</strong> — Front-end pages are cacheable again (back/forward cache works); only admin and API stay no-store</li> </ul> </div> <details class="cl-files"> <summary> <svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5"><polyline points="9 18 15 12 9 6"/></svg> Changed files (5) </summary> <div class="cl-files-grid"> <div class="cl-file-row"> <span class="cl-file-name">includes/helpers.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">jek_img_optimize() global filtre + instant-search async</span> </div> <div class="cl-file-row"> <span class="cl-file-name">index.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">ob_start('jek_img_optimize') (yalnız frontend)</span> </div> <div class="cl-file-row"> <span class="cl-file-name">classes/Media.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">regenerateVariants() — eksik boyut varyantı backfill</span> </div> <div class="cl-file-row"> <span class="cl-file-name">cron.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">görsel varyant backfill (nazik, cursor, idempotent)</span> </div> <div class="cl-file-row"> <span class="cl-file-name">themes/travel/*</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">picture()/LCP + koşullu critical-CSS</span> </div> </div> </details> </div> </div> <div class="cl-entry" id="v2-1-1"> <!-- Left: sticky meta --> <div class="cl-meta"> <span class="cl-badge">v2.1.1</span> <time class="cl-date" datetime="2026-05-17">17 May 2026</time> </div> <!-- Right: content --> <div class="cl-body"> <h2 class="cl-body-title">Clean Content Rendering: Markdown, Code Blocks & Encoding</h2> <div class="cl-group"> <div class="cl-section-label cl-section-improved">Improved</div> <ul class="cl-items"> <li><strong>Newsletter Band Restyled</strong> — The pre-footer subscribe band dropped its generic blue gradient and now uses the site's own monochrome design tokens with pill controls — consistent in both light and dark themes</li> </ul> </div> <div class="cl-group"> <div class="cl-section-label cl-section-fixed">Fixed</div> <ul class="cl-items"> <li><strong>Critical: Raw Markdown Headings</strong> — When a post mixed HTML with Markdown (the normal output of AI/automation), <code>##</code> / <code>###</code> headings, fenced code blocks and lists were printed literally instead of being rendered. The Markdown engine was rewritten so block elements are converted even alongside HTML</li> <li><strong>Critical: Shell Commands Became Headings</strong> — Code (fenced ``` / ~~~, inline, and existing <code><pre></code>) is now protected before any heading parsing, so <code>#</code> shell comments and <code>#!/bin/bash</code> lines are never mistaken for titles</li> <li><strong>Legacy Linux Articles Repaired</strong> — WordPress-imported command blocks that had broken apart (<code><pre>…</p><p>…</pre></code>) were rejoined into clean multi-line code blocks</li> <li><strong>Critical: Turkish Text Corruption (Mojibake)</strong> — Some automated content arrived double-encoded (Turkish letters shown as CJK glyphs, e.g. "Çikolata" → "脟ikolata"). The API now repairs every inbound write path automatically (self-validating, no false positives), and a fleet tool cleans existing content across all sites</li> </ul> </div> <details class="cl-files"> <summary> <svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5"><polyline points="9 18 15 12 9 6"/></svg> Changed files (5) </summary> <div class="cl-files-grid"> <div class="cl-file-row"> <span class="cl-file-name">includes/helpers.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">parse_markdown() v2 — kod-koru-önce, başlıklar HTML içerikte de</span> </div> <div class="cl-file-row"> <span class="cl-file-name">api/v1/index.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">fixMojibake() güçlendirildi + demojibakeDeep() (tüm write yolları)</span> </div> <div class="cl-file-row"> <span class="cl-file-name">marketing-assets/css/main.css</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">.nl-band site token'ları + pill</span> </div> <div class="cl-file-row"> <span class="cl-file-name">tools/fix-mojibake-all.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">NEW — 15 site fleet mojibake onarımı</span> </div> <div class="cl-file-row"> <span class="cl-file-name">tools/fix-celil-pre.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">NEW — celil <pre> komut bloğu onarımı</span> </div> </div> </details> </div> </div> <div class="cl-entry" id="v2-1-0"> <!-- Left: sticky meta --> <div class="cl-meta"> <span class="cl-badge">v2.1.0</span> <time class="cl-date" datetime="2026-05-16">16 May 2026</time> </div> <!-- Right: content --> <div class="cl-body"> <h2 class="cl-body-title">Reliable Theme Switching, 17 Auto-Publish Networks & Full-Width Admin</h2> <div class="cl-group"> <div class="cl-section-label cl-section-added">Added</div> <ul class="cl-items"> <li><strong>Regional & Fediverse Auto-Publish</strong> — Eight new networks join the social automation engine: Pixelfed, Misskey/Sharkey, WriteFreely, Micro.blog and Lemmy (token/instance), VK (OAuth2), plus Hatena Bookmark and Plurk (OAuth1). Every connected account receives new posts automatically with per-platform pacing and back-off</li> <li><strong>Honest Capability Notes</strong> — Networks without a safe, official publishing API (Xing, Naver, Nostr) are now clearly labelled with the reason instead of silently failing — no fake connectors</li> </ul> </div> <div class="cl-group"> <div class="cl-section-label cl-section-improved">Improved</div> <ul class="cl-items"> <li><strong>Full-Width Connections Page</strong> — The social connections grid no longer caps at a narrow column; cards now use the full screen width on large displays instead of leaving the right third blank</li> </ul> </div> <div class="cl-group"> <div class="cl-section-label cl-section-fixed">Fixed</div> <ul class="cl-items"> <li><strong>Critical: Theme Switching Failed</strong> — Because <code>settings.key</code> is uniquely indexed, the old "UPDATE then INSERT-if-zero-rows" path threw a duplicate-key error whenever the value was unchanged (re-activating a theme, or the automatic previous-theme snapshot on every switch). The activation aborted with a database error and the theme never changed. Theme writes are now a single-row upsert (delete + insert) that also self-heals any pre-existing duplicate/stray rows. Active-theme reads are deterministic (canonical group, newest row) so the front-end always reflects the chosen theme</li> </ul> </div> <details class="cl-files"> <summary> <svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5"><polyline points="9 18 15 12 9 6"/></svg> Changed files (4) </summary> <div class="cl-files-grid"> <div class="cl-file-row"> <span class="cl-file-name">admin/themes.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">setThemeSettingRow() singleton upsert; tüm yazım noktaları</span> </div> <div class="cl-file-row"> <span class="cl-file-name">includes/helpers.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">get_active_theme() deterministik sorgu</span> </div> <div class="cl-file-row"> <span class="cl-file-name">plugins/jek-social/classes/adapters/*</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Pixelfed/Misskey/WriteFreely/Microblog/Lemmy/Vk/Hatena/Plurk</span> </div> <div class="cl-file-row"> <span class="cl-file-name">admin/plugins/jek-social/connections.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">.js-wrap tam genişlik + yeni platform formları</span> </div> </div> </details> </div> </div> <div class="cl-entry" id="v2-0-1"> <!-- Left: sticky meta --> <div class="cl-meta"> <span class="cl-badge">v2.0.1</span> <time class="cl-date" datetime="2026-04-16">16 Apr 2026</time> </div> <!-- Right: content --> <div class="cl-body"> <h2 class="cl-body-title">Smart Next-Gen CMS — Admin UI Overhaul, Bulletproof Slugs & Autosave</h2> <div class="cl-group"> <div class="cl-section-label cl-section-added">Added</div> <ul class="cl-items"> <li><strong>New Admin Design Language</strong> — Unified badge system (5 pill variants: success/danger/warning/info/neutral), stat-card-v2 with colored backgrounds + decorative SVG, quick-action outline buttons, state-block for empty/error states</li> <li><strong>Language Toggle</strong> — TR/EN switcher in admin header with session-based override (<code>$_SESSION[admin_lang_override]</code>), persists across navigation</li> <li><strong>Draft Autosave</strong> — Post editor saves every 30s + localStorage offline fallback. Status pill bottom-right: "Saving…" / "Saved · 15:42" / "Offline". Restore prompt on reopen if unsaved changes found</li> <li><strong>Anonymous Preview</strong> — <code>preview.php?token=XXX</code> with 48-hex-char secret tokens stored in <code>post_meta</code>. Click "Preview Link" button, URL auto-copied to clipboard. Orange banner indicates preview mode</li> <li><strong>Revision Diff</strong> — Click any revision → modal with word-level diff (jsdiff via CDN). Green additions / red strike-through deletions. "Restore this revision" with automatic snapshot</li> <li><strong>Word Count Distribution</strong> — Dashboard shows stacked bar of post word counts (0-500, 500-1K, 1K-1.5K, 1.5K+) with hover tooltip</li> <li><strong>Date Range Filter</strong> — Post listing has native date pickers for <code>date_from</code>/<code>date_to</code></li> <li><strong>Media Grid/List Toggle</strong> — Library view switches between grid and vertical list, preference saved to localStorage</li> <li><strong>Slug Rebuild Tool</strong> — <code>admin/tools/rebuild-slugs.php</code> — dry-run preview + conflict handling + CLI mode for batch operations</li> </ul> </div> <div class="cl-group"> <div class="cl-section-label cl-section-fixed">Fixed</div> <ul class="cl-items"> <li><strong>Critical: Turkish Slug Bug</strong> — <code>mb_strtolower()</code> was converting <code>İ</code> (U+0130) into composite sequences, breaking the transliteration map and leaving orphan bytes as hyphens. New <code>slugify()</code> runs <code>strtr</code> BEFORE lowercasing with comprehensive map (Turkish + Latin extended). Fixed 866 bad slugs across all sites</li> <li><strong>Sidebar Border Bug</strong> — <code>.sidebar-brand</code> was 56px but <code>--header-height: 60px</code>, creating a 4px misalignment visible as a horizontal line. Now uses <code>var(--header-height)</code></li> <li><strong>profile.php 90s Button</strong> — <code>.avatar-actions .btn-sm</code> had <code>border-radius: 50%</code> rendering buttons as blobs. Plus "Active" was hardcoded English in Turkish admin. Both fixed</li> <li><strong>Settings Thumbnail Inputs</strong> — Pixel inputs had no styling (native browser default — 90s). Now proper padding, focus ring, contained background</li> <li><strong>Logo Regression</strong> — <code>logo-yatay.svg</code> was an obsolete test logo. Replaced with <code>logo-dikey.svg</code> + inline SVG in sidebar (matches admin login)</li> <li><strong>License Page Branding</strong> — Fake blue <code>[J]</code> SVG monogram replaced with real <code>logo-dikey.svg</code>. Hardcoded <code>#28a745</code> colors migrated to CSS variables</li> <li><strong>Updates Page UX</strong> — License inactive / update failed / up-to-date states use unified pill-badge format. Raw English errors removed from Turkish UI</li> </ul> </div> <details class="cl-files"> <summary> <svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5"><polyline points="9 18 15 12 9 6"/></svg> Changed files (32) </summary> <div class="cl-files-grid"> <div class="cl-file-row"> <span class="cl-file-name">includes/helpers.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">slugify() — bulletproof Turkish + Latin extended</span> </div> <div class="cl-file-row"> <span class="cl-file-name">api/v1/index.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">generateSlug() wrapper → slugify()</span> </div> <div class="cl-file-row"> <span class="cl-file-name">config/functions.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Session-based admin_lang_override</span> </div> <div class="cl-file-row"> <span class="cl-file-name">admin/ajax/autosave.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Existing — no change (frontend added)</span> </div> <div class="cl-file-row"> <span class="cl-file-name">admin/ajax/preview-token.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">NEW — generates 48-hex preview tokens</span> </div> <div class="cl-file-row"> <span class="cl-file-name">admin/ajax/revision-get.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">NEW — fetches revision JSON for diff</span> </div> <div class="cl-file-row"> <span class="cl-file-name">admin/ajax/revision-restore.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">NEW — restores post from revision</span> </div> <div class="cl-file-row"> <span class="cl-file-name">admin/tools/rebuild-slugs.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">NEW — slug rebuild UI</span> </div> <div class="cl-file-row"> <span class="cl-file-name">admin/tools/rebuild-slugs-cli.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">NEW — CLI version</span> </div> <div class="cl-file-row"> <span class="cl-file-name">admin/post-edit.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Autosave JS, preview link, revision diff modal</span> </div> <div class="cl-file-row"> <span class="cl-file-name">admin/posts.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Date range filter</span> </div> <div class="cl-file-row"> <span class="cl-file-name">admin/media.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Grid/list toggle</span> </div> <div class="cl-file-row"> <span class="cl-file-name">admin/profile.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">90s button fix + TR translate</span> </div> <div class="cl-file-row"> <span class="cl-file-name">admin/settings.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Thumbnail input styling</span> </div> <div class="cl-file-row"> <span class="cl-file-name">admin/fix-images.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Pill-badge + icon buttons</span> </div> <div class="cl-file-row"> <span class="cl-file-name">admin/content-fixer.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Unified badge system</span> </div> <div class="cl-file-row"> <span class="cl-file-name">admin/license.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">logo-dikey.svg + CSS vars</span> </div> <div class="cl-file-row"> <span class="cl-file-name">admin/updates.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Pill-badge state blocks</span> </div> <div class="cl-file-row"> <span class="cl-file-name">admin/login.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Tagline added</span> </div> <div class="cl-file-row"> <span class="cl-file-name">admin/assets/css/admin.css</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Pill-badge, qa-btn, stat-card-v2, lang-toggle</span> </div> <div class="cl-file-row"> <span class="cl-file-name">admin/includes/sidebar.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Border fix + slug tool link + inline SVG logo</span> </div> <div class="cl-file-row"> <span class="cl-file-name">admin/includes/header.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Language toggle button</span> </div> <div class="cl-file-row"> <span class="cl-file-name">admin/includes/init.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">set_admin_lang handler</span> </div> <div class="cl-file-row"> <span class="cl-file-name">preview.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">NEW — anonymous token-based draft viewer</span> </div> <div class="cl-file-row"> <span class="cl-file-name">config/constants.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">CMS_VERSION = 2.0.1</span> </div> <div class="cl-file-row"> <span class="cl-file-name">version.json</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">v2.0.1, db_version 6</span> </div> <div class="cl-file-row"> <span class="cl-file-name">marketing-includes/header.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Hero title → "Smart Next-Gen CMS" / "Akıllı Yeni Nesil CMS"</span> </div> <div class="cl-file-row"> <span class="cl-file-name">marketing-includes/footer.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">logo-dikey.svg + site_tagline</span> </div> <div class="cl-file-row"> <span class="cl-file-name">marketing-assets/css/main.css</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">.ss-frame (screenshot component) + .footer-tagline</span> </div> <div class="cl-file-row"> <span class="cl-file-name">marketing-includes/ss-helper.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">NEW — ss_frame() / ss_step() helpers</span> </div> <div class="cl-file-row"> <span class="cl-file-name">tools/sync-from-celil.sh</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">NEW — deployment script (21 verbatim files)</span> </div> <div class="cl-file-row"> <span class="cl-file-name">tools/patch-from-celil.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">NEW — surgical patch script (6 targeted edits)</span> </div> </div> </details> </div> </div> <div class="cl-entry" id="v1-5-3"> <!-- Left: sticky meta --> <div class="cl-meta"> <span class="cl-badge">v1.5.3</span> <time class="cl-date" datetime="2026-03-14">14 Mar 2026</time> </div> <!-- Right: content --> <div class="cl-body"> <h2 class="cl-body-title">Auto-Seed Settings, Core Web Vitals, Update System & SEO Hardening</h2> <div class="cl-group"> <div class="cl-section-label cl-section-added">Added</div> <ul class="cl-items"> <li><strong>Settings Auto-Seed</strong> — <code>ensure_default_settings()</code> automatically seeds <code>site_name</code> and <code>site_alternate_name</code> into the database on first page load. Cache-file based, zero performance impact after initial run. No more manual SQL for new sites</li> <li><strong>Migration System</strong> — <code>migrations/5_seo_settings_seed.php</code> created across all sites. Update system can now distribute database changes automatically</li> <li><strong>LCP Eager Loading</strong> — First post card image on page 1 gets <code>loading="eager" fetchpriority="high"</code> across all theme architectures. Expected ~200-500ms LCP improvement</li> <li><strong>CLS Prevention</strong> — <code>width</code> and <code>height</code> attributes added to all post card images. Eliminates layout shift completely</li> <li><strong>CSS Cache Busting</strong> — <code>?v=THEME_VERSION</code> parameter added to stylesheet links in starter theme headers</li> <li><strong>Update Server Connected</strong> — <code>api/updates/check.php</code> now uses real <code>UpdateManager</code> with database queries instead of static stub response. Graceful fallback on connection errors</li> <li><strong>jekcms Backlinks</strong> — All footer files across active sites, admin panels, and bundled themes now link to <code>jekcms.com</code> with "jekcms" anchor text and <code>rel="noopener noreferrer"</code></li> <li><strong>Marketing SEO</strong> — Real favicon URL (SVG), <code>application-name</code> meta tag, <code>theme-color</code>, WebSite schema <code>alternateName</code> added. Decorative text moved to CSS to prevent Google sitelink pollution</li> </ul> </div> <div class="cl-group"> <div class="cl-section-label cl-section-fixed">Fixed</div> <ul class="cl-items"> <li>Sitemap pagination URLs removed — <code>?page=2</code>, <code>?page=3</code> etc. no longer appear in homepage, category, tag, and author sitemaps. These thin pages wasted crawl budget</li> <li>Thin tag pages now <code>noindex</code> — Tag pages with fewer than 3 posts get <code>noindex, follow</code> via <code>output_robots_meta()</code> to prevent thin content indexing</li> <li>Markdown <code># Heading</code> now renders as <code><h2></code> instead of <code><h1></code> — prevents double H1 on post pages where title is already H1</li> <li>SQL migration file <code>sql/v1.5.1-seo-site-names.sql</code> deleted — replaced by automatic <code>ensure_default_settings()</code> mechanism</li> <li>Marketing site favicon was data URI — Google requires real URL for SERP favicon display. Replaced with proper <code>/favicon.svg</code></li> <li>Marketing site showed "Dashboard Posts Media Settings" as Google sitelinks — decorative text moved from HTML to CSS <code>content: attr(data-label)</code></li> </ul> </div> <details class="cl-files"> <summary> <svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5"><polyline points="9 18 15 12 9 6"/></svg> Changed files (18) </summary> <div class="cl-files-grid"> <div class="cl-file-row"> <span class="cl-file-name">includes/helpers.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">ensure_default_settings() + thin tag noindex + markdown H1→H2</span> </div> <div class="cl-file-row"> <span class="cl-file-name">includes/bootstrap.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">ensure_default_settings() call added</span> </div> <div class="cl-file-row"> <span class="cl-file-name">classes/Sitemap.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Pagination URLs removed</span> </div> <div class="cl-file-row"> <span class="cl-file-name">migrations/5_seo_settings_seed.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">NEW — DB seed migration</span> </div> <div class="cl-file-row"> <span class="cl-file-name">version.json</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">v1.5.3, db_version 5</span> </div> <div class="cl-file-row"> <span class="cl-file-name">themes/*/partials/post-card.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">LCP eager + CLS dimensions</span> </div> <div class="cl-file-row"> <span class="cl-file-name">themes/*/templates/index.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Featured image eager loading</span> </div> <div class="cl-file-row"> <span class="cl-file-name">themes/*/templates/archive.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Card index parameter</span> </div> <div class="cl-file-row"> <span class="cl-file-name">themes/*/templates/header.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">CSS cache busting</span> </div> <div class="cl-file-row"> <span class="cl-file-name">themes/*/functions.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">render_post_card index param</span> </div> <div class="cl-file-row"> <span class="cl-file-name">themes/*/templates/footer.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">jekcms backlink</span> </div> <div class="cl-file-row"> <span class="cl-file-name">admin/includes/footer.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">jekcms backlink noreferrer</span> </div> <div class="cl-file-row"> <span class="cl-file-name">api/updates/check.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Real UpdateManager connection</span> </div> <div class="cl-file-row"> <span class="cl-file-name">favicon.svg</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">NEW — Root favicon for Google SERP (marketing)</span> </div> <div class="cl-file-row"> <span class="cl-file-name">index.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Mockup text → CSS data-label (marketing)</span> </div> <div class="cl-file-row"> <span class="cl-file-name">marketing-includes/header.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Favicon + application-name + schema (marketing)</span> </div> <div class="cl-file-row"> <span class="cl-file-name">marketing-assets/css/main.css</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Mockup nav CSS content rule (marketing)</span> </div> <div class="cl-file-row"> <span class="cl-file-name">changelog.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">v1.5.3 release entry (marketing)</span> </div> </div> </details> </div> </div> <div class="cl-entry" id="v1-5-2"> <!-- Left: sticky meta --> <div class="cl-meta"> <span class="cl-badge">v1.5.2</span> <time class="cl-date" datetime="2026-02-27">27 Feb 2026</time> </div> <!-- Right: content --> <div class="cl-body"> <h2 class="cl-body-title">Deep SEO Audit — Schema, OG Image, Core Web Vitals & Accessibility</h2> <div class="cl-group"> <div class="cl-section-label cl-section-fixed">Fixed</div> <ul class="cl-items"> <li>BlogPosting <code>author</code> schema missing <code>url</code> property — Google requires author URL since 2023. Added <code>author.url</code> pointing to <code>/author/{slug}</code> across all sites</li> <li>BreadcrumbList last item missing <code>item</code> (URL) property — Google Rich Results test was reporting errors. Fixed both category and non-category code paths across all sites</li> <li><code>og:image:width</code> and <code>og:image:height</code> meta tags missing in bundled theme functions.php files — Facebook/LinkedIn image previews could render incorrectly. Added 1200×630 dimensions</li> <li>Featured/hero image missing <code>fetchpriority="high"</code> in active theme single.php files — LCP (Largest Contentful Paint) performance impact. Also added <code>width</code>/<code>height</code> where missing</li> <li>Author avatar <code><img></code> tags had empty <code>alt=""</code> in active theme files — accessibility and image SEO issue. Replaced with author name</li> <li>Hardcoded <code><html lang="tr"></code> in affected themes — replaced with dynamic <code>get_setting()</code> for correct language declaration</li> </ul> </div> <details class="cl-files"> <summary> <svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5"><polyline points="9 18 15 12 9 6"/></svg> Changed files (4) </summary> <div class="cl-files-grid"> <div class="cl-file-row"> <span class="cl-file-name">includes/helpers.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Author URL + BreadcrumbList item fix</span> </div> <div class="cl-file-row"> <span class="cl-file-name">themes/*/functions.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">og:image:width/height added</span> </div> <div class="cl-file-row"> <span class="cl-file-name">themes/*/templates/single.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">fetchpriority + avatar alt text</span> </div> <div class="cl-file-row"> <span class="cl-file-name">themes/*/templates/header.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Dynamic html lang attribute</span> </div> </div> </details> </div> </div> <div class="cl-entry" id="v1-5-1"> <!-- Left: sticky meta --> <div class="cl-meta"> <span class="cl-badge">v1.5.1</span> <time class="cl-date" datetime="2026-02-27">27 Feb 2026</time> </div> <!-- Right: content --> <div class="cl-body"> <h2 class="cl-body-title">SEO Audit — Pagination, Sitemap Language, Tag Cleanup & OG Locale</h2> <div class="cl-group"> <div class="cl-section-label cl-section-fixed">Fixed</div> <ul class="cl-items"> <li>Pagination URL double query string bug — <code>?page=3?page=4</code> caused by <code>get_canonical_url()</code> returning <code>?page=N</code>. Now strips page param from baseUrl before rebuilding</li> <li>Schema <code>$currentUrl</code> missing <code>?page=N</code> on paginated pages — canonical and schema URLs now consistent</li> <li><code>?page=1</code> duplicate content — 301 redirect to clean URL added in all site .htaccess files</li> <li>News sitemap hardcoded <code><news:language>en</news:language></code> — now uses <code>get_setting('general', 'site_language')</code> dynamically across all sites</li> <li>Tag URLs returning 301 to homepage — changed to proper 410 Gone response with minimal HTML page across all sites</li> <li>BlogPosting schema missing <code>inLanguage</code> property — added dynamic language detection across all sites</li> <li><code>og:locale</code> hardcoded to <code>en_US</code> on Turkish sites — now dynamically set to <code>tr_TR</code> or <code>en_US</code> based on site language setting</li> <li>AVIF → WebP schema image fallback missing <code>file_exists()</code> check — WebP URL was emitted even when file didn't exist</li> </ul> </div> <details class="cl-files"> <summary> <svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5"><polyline points="9 18 15 12 9 6"/></svg> Changed files (6) </summary> <div class="cl-files-grid"> <div class="cl-file-row"> <span class="cl-file-name">includes/helpers.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Pagination fix, schema URL, inLanguage, AVIF fallback</span> </div> <div class="cl-file-row"> <span class="cl-file-name">.htaccess</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">?page=1 redirect rule</span> </div> <div class="cl-file-row"> <span class="cl-file-name">classes/Sitemap.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">News language dynamic detection</span> </div> <div class="cl-file-row"> <span class="cl-file-name">config/routes.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Tag 410 Gone response</span> </div> <div class="cl-file-row"> <span class="cl-file-name">themes/*/header.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">og:locale dynamic setting</span> </div> <div class="cl-file-row"> <span class="cl-file-name">themes/*/functions.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">og:locale dynamic setting</span> </div> </div> </details> </div> </div> <div class="cl-entry" id="v1-5-0"> <!-- Left: sticky meta --> <div class="cl-meta"> <span class="cl-badge">v1.5.0</span> <time class="cl-date" datetime="2026-02-25">25 Feb 2026</time> </div> <!-- Right: content --> <div class="cl-body"> <h2 class="cl-body-title">Duplicate Prevention, Smart Thumbnails & Admin Tools</h2> <div class="cl-group"> <div class="cl-section-label cl-section-added">Added</div> <ul class="cl-items"> <li><code>Post::checkDuplicate()</code> method — detects duplicate posts by title or slug before creation</li> <li>Duplicate check integrated into all API webhooks: <code>webhookPublish</code>, <code>webhookSchedule</code>, <code>webhookDraft</code>, <code>webhookBulkPublish</code>, <code>webhookContentGenerate</code></li> <li>HTTP 409 response with full existing post details (id, title, slug, status, url) when duplicate detected</li> <li><code>force_duplicate: true</code> request parameter to bypass duplicate check when intentional duplicates are needed</li> <li>Bulk publish silently skips duplicates with <code>skipped</code> counter instead of blocking</li> <li>Admin "Duplicates" button on Posts page — opens modal with full duplicate analysis</li> <li>Slug pattern detection engine: finds posts ending with <code>-N</code> (N=1-10) where the base slug also exists as another post</li> <li>Single-click and bulk "Trash All Duplicates" actions with real-time UI updates</li> <li>Image proxy fallback in <code>get_featured_image()</code> — when pre-generated thumbnail files are missing, dynamically resizes via <code>image-proxy.php</code></li> <li>Size dimension map: thumbnail (400×400), card (480×300), medium (800×500), large (1600×1000)</li> <li>AVIF → WebP → original format cascade when looking up sized variants</li> <li>Content Queue sidebar badge now counts <code>queued</code> status alongside <code>draft</code> and <code>ready</code></li> </ul> </div> <details class="cl-files"> <summary> <svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5"><polyline points="9 18 15 12 9 6"/></svg> Changed files (6) </summary> <div class="cl-files-grid"> <div class="cl-file-row"> <span class="cl-file-name">classes/Post.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">checkDuplicate() method added</span> </div> <div class="cl-file-row"> <span class="cl-file-name">api/v1/index.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">checkDuplicatePost() + webhook integrations</span> </div> <div class="cl-file-row"> <span class="cl-file-name">admin/posts.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Duplicates button, modal, JavaScript</span> </div> <div class="cl-file-row"> <span class="cl-file-name">admin/ajax/find-duplicates.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">NEW — AJAX duplicate finder endpoint</span> </div> <div class="cl-file-row"> <span class="cl-file-name">includes/helpers.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">get_featured_image() image-proxy fallback</span> </div> <div class="cl-file-row"> <span class="cl-file-name">admin/includes/init.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Content Queue badge query updated</span> </div> </div> </details> </div> </div> <div class="cl-entry" id="v1-4-5"> <!-- Left: sticky meta --> <div class="cl-meta"> <span class="cl-badge">v1.4.5</span> <time class="cl-date" datetime="2026-02-17">17 Feb 2026</time> </div> <!-- Right: content --> <div class="cl-body"> <h2 class="cl-body-title">Production Hardening — SEO Fixes, License Enforcement & Session Security</h2> <div class="cl-group"> <div class="cl-section-label cl-section-added">Added</div> <ul class="cl-items"> <li><code>output_robots_meta()</code> function — per-page robot directives (noindex for 404, search pages; post-level override)</li> <li>License enforcement in <code>init.php</code> and <code>login.php</code> — redirects to <code>license.php</code> when no active license key is configured</li> <li>Cross-site session hijacking prevention: cookie path scoped to site-specific URL path via <code>parse_url(SITE_URL, PHP_URL_PATH)</code></li> <li>Session <code>_site_hash</code> verification in <code>Auth::loadUser()</code> — prevents authenticated sessions from bleeding across co-hosted sites</li> <li>Site-specific <code>remember_token</code> cookie path — remember-me tokens no longer shared between sites on same domain</li> <li>Footer branding standardized across all installations</li> </ul> </div> <div class="cl-group"> <div class="cl-section-label cl-section-fixed">Fixed</div> <ul class="cl-items"> <li>API upload path double <code>uploads/uploads/</code> prefix — <code>uploadFromUrl()</code> and <code>uploadFromBase64()</code> now strip redundant prefix before saving to database</li> <li>Duplicate <code><link rel="canonical"></code> tags removed from affected site headers where both inline and <code>output_seo_head()</code> emitted canonicals</li> <li>FAQ schema output: enforced minimum 3 items with 50+ character answers, maximum 10 items, deduplicated across helpers</li> <li>Sidebar category post counts removed per design rules — "(5)" count display no longer appears in category listings</li> <li>Author name links converted from non-clickable <code><span></code> to proper <code><a href></code> anchor tags in single.php files</li> <li>SITE_NAME config spacing corrected — compound names like "FinanceSubject" updated to properly spaced "Finance Subject"</li> <li>Schema.org URLs stripped of tracking parameters (<code>utm_source</code>, <code>fbclid</code>, etc.) via <code>parse_url()</code></li> <li>Post card images missing <code>width</code>/<code>height</code> attributes — CLS prevention applied across affected sites</li> </ul> </div> <details class="cl-files"> <summary> <svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5"><polyline points="9 18 15 12 9 6"/></svg> Changed files (7) </summary> <div class="cl-files-grid"> <div class="cl-file-row"> <span class="cl-file-name">api/v1/index.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Upload path fix</span> </div> <div class="cl-file-row"> <span class="cl-file-name">includes/helpers.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">robots_meta, FAQ schema, schema URL cleanup</span> </div> <div class="cl-file-row"> <span class="cl-file-name">classes/Auth.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">_site_hash verification, cookie path</span> </div> <div class="cl-file-row"> <span class="cl-file-name">classes/Session.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Site-specific cookie path</span> </div> <div class="cl-file-row"> <span class="cl-file-name">admin/includes/init.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">License enforcement redirect</span> </div> <div class="cl-file-row"> <span class="cl-file-name">admin/login.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">License check before auth</span> </div> <div class="cl-file-row"> <span class="cl-file-name">sql/v1.4.5-migration.sql</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Fix corrupt featured_image paths</span> </div> </div> </details> </div> </div> <div class="cl-entry" id="v1-4-0"> <!-- Left: sticky meta --> <div class="cl-meta"> <span class="cl-badge">v1.4.0</span> <time class="cl-date" datetime="2026-02-10">10 Feb 2026</time> </div> <!-- Right: content --> <div class="cl-body"> <h2 class="cl-body-title">SEO Overhaul, Content Optimizer, Breadcrumbs & Table of Contents</h2> <div class="cl-group"> <div class="cl-section-label cl-section-added">Added</div> <ul class="cl-items"> <li>Complete SEO overhaul across all active sites — meta tags, Open Graph, Twitter Cards, Schema.org structured data reviewed and standardized</li> <li>Breadcrumb navigation with Schema.org <code>BreadcrumbList</code> markup added to every site</li> <li>Table of Contents (TOC) — automatically generated from <code><h2></code>/<code><h3></code> headings, renders as sidebar widget or inline block depending on theme</li> <li>Content Optimizer with dictionary-based synonym refresh — replaces removed AI API (Gemini/Groq) approach that broke Turkish morphology</li> <li>Turkish synonym dictionary (~200 modern word pairs) and English synonym dictionary (~180 pairs) with archaic terms removed</li> <li>Auto language detection via <code>get_setting('general', 'ai_content_language')</code> for optimizer dictionary selection</li> <li>Google SERP site name fix: <code>??</code> operator replaced with <code>?:</code> to catch empty strings in <code>og:site_name</code> and WebSite schema</li> <li><code><meta name="application-name"></code> tag added to all theme headers for Google site name signal</li> <li>Pinterest Compose API endpoint for Livecub — Gemini generates photo, PHP GD adds text overlay, 5 layout templates, 1000×1500 output</li> <li>SosyalMedya cover image engine replaced: PHP GD gradients → Gemini Image API professional photographs (1080×1920, AVIF, 5 styles)</li> <li>Turkish slug generation fix: <code>generateSlug()</code> now properly transliterates ç, ğ, ı, ö, ş, ü across all sites</li> <li><code>fix-slugs.php</code> utility script for repairing existing corrupted Turkish slugs in production databases</li> </ul> </div> <div class="cl-group"> <div class="cl-section-label cl-section-fixed">Fixed</div> <ul class="cl-items"> <li>robots.txt files had unresolved <code>{{SITE_DOMAIN}}</code> placeholders in affected sites</li> <li>hobirehber schema function was named <code>output_hobbyrig_schema()</code> instead of <code>output_hobirehber_schema()</code></li> <li>CSP header in production was blocking Google Analytics, AdSense, and Facebook Pixel domains</li> <li>MinimalistRig posts had full URLs in <code>featured_image</code> column instead of relative paths</li> <li>Livecub favicon was showing jekcms [J] icon instead of Livecub L+Heart brand icon</li> </ul> </div> <details class="cl-files"> <summary> <svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5"><polyline points="9 18 15 12 9 6"/></svg> Changed files (7) </summary> <div class="cl-files-grid"> <div class="cl-file-row"> <span class="cl-file-name">includes/helpers.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">SEO functions, breadcrumbs, TOC, schema fixes</span> </div> <div class="cl-file-row"> <span class="cl-file-name">includes/ContentOptimizer.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Dictionary-based synonym refresh engine</span> </div> <div class="cl-file-row"> <span class="cl-file-name">admin/content-optimizer.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Optimizer admin interface</span> </div> <div class="cl-file-row"> <span class="cl-file-name">themes/*/header.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Breadcrumbs, meta tags, application-name</span> </div> <div class="cl-file-row"> <span class="cl-file-name">themes/*/single.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">TOC integration</span> </div> <div class="cl-file-row"> <span class="cl-file-name">themes/*/style.css</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Breadcrumb and TOC styling</span> </div> <div class="cl-file-row"> <span class="cl-file-name">api/v1/pinterest-compose.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">NEW — Pinterest image composer (Livecub)</span> </div> </div> </details> </div> </div> <div class="cl-entry" id="v1-3-1"> <!-- Left: sticky meta --> <div class="cl-meta"> <span class="cl-badge">v1.3.1</span> <time class="cl-date" datetime="2026-01-24">24 Jan 2026</time> </div> <!-- Right: content --> <div class="cl-body"> <h2 class="cl-body-title">Critical SEO Fix, Multi-Site Template & Documentation</h2> <div class="cl-group"> <div class="cl-section-label cl-section-added">Added</div> <ul class="cl-items"> <li><code>_template/</code> directory established as the canonical base for creating new jekcms sites — includes all required files, folder structure, and placeholder variables</li> <li>Dual-environment configuration: <code>.env</code> (local development) and <code>.env-production</code> (live server) with automatic detection based on hostname</li> <li>Placeholder system for rapid site cloning: <code>{{SITE_NAME}}</code>, <code>{{SITE_SLUG}}</code>, <code>{{SITE_DOMAIN}}</code></li> <li>Standard error pages: 400, 401, 403, 404, 500, 502, 503 with consistent branding</li> <li>Maintenance mode page (<code>maintenance.php</code>) with countdown timer</li> <li>Standardized <code>.htaccess</code> with GZIP compression, browser caching (1 year for static assets), security headers, and URL rewriting</li> <li>Complete deployment documentation: architecture guide, SEO checklist, responsive images reference, upgrade instructions</li> </ul> </div> <div class="cl-group"> <div class="cl-section-label cl-section-fixed">Fixed</div> <ul class="cl-items"> <li><strong>Critical:</strong> Removed <code>X-Robots-Tag: noindex</code> HTTP header that was accidentally blocking all Google indexing across production sites</li> <li>Admin content queue retry: <code>attempts</code> counter now resets to 0 when a failed task is re-queued</li> <li>Removed obsolete Pinterest sharing code from post editor panel</li> <li>Removed e-commerce menus (Sales, Customers) from blog-only site admin panels — these belong to the main marketing site only</li> <li>Synchronized missing AJAX endpoints (comment, newsletter, comment-like) across all sites</li> <li>Added missing <code>SpamFilter.php</code> class to kriptogetiri</li> </ul> </div> <details class="cl-files"> <summary> <svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5"><polyline points="9 18 15 12 9 6"/></svg> Changed files (6) </summary> <div class="cl-files-grid"> <div class="cl-file-row"> <span class="cl-file-name">sites/_template/</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">NEW — Complete site template directory</span> </div> <div class="cl-file-row"> <span class="cl-file-name">.env.example</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Environment configuration template</span> </div> <div class="cl-file-row"> <span class="cl-file-name">maintenance.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">NEW — Maintenance mode page</span> </div> <div class="cl-file-row"> <span class="cl-file-name">error.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">NEW — Unified error handler (400-503)</span> </div> <div class="cl-file-row"> <span class="cl-file-name">.htaccess</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Standardized security + performance rules</span> </div> <div class="cl-file-row"> <span class="cl-file-name">skills/*.md</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Architecture, deployment, SEO, image documentation</span> </div> </div> </details> </div> </div> <div class="cl-entry" id="v1-3-0"> <!-- Left: sticky meta --> <div class="cl-meta"> <span class="cl-badge">v1.3.0</span> <time class="cl-date" datetime="2026-01-21">21 Jan 2026</time> </div> <!-- Right: content --> <div class="cl-body"> <h2 class="cl-body-title">E-Commerce, Customer Portal, License System & Multi-Language Engine</h2> <div class="cl-group"> <div class="cl-section-label cl-section-added">Added</div> <ul class="cl-items"> <li>Complete e-commerce system with iyzico payment gateway integration — credit card processing, 3D Secure, installment support</li> <li>Order management lifecycle: create → payment → confirmation → processing → completed, with cancellation and refund flows</li> <li>PDF invoice generation with automatic numbering, tax calculation, and downloadable customer receipts</li> <li>Customer portal at <code>/customer/</code> — dashboard with order history, active licenses, downloadable invoices, and profile management</li> <li>Support ticket system with threaded messages, priority levels, and admin response tracking</li> <li>Multi-language engine with database-driven translations — Turkish and English supported out of the box, extensible to any language</li> <li><code>Translator</code> class with lazy-loading approach: strings parsed on demand, not upfront — significant memory reduction on multi-locale installations</li> <li>jekcms license system with 6 tiers: DEV (free), PER (personal), STD (standard), PRO (professional), AGC (agency), ENT (enterprise)</li> <li>License activation, validation, and deactivation API at <code>/api/license/</code></li> <li>Update server with check, download, and report endpoints at <code>/api/updates/</code></li> <li>Image proxy with SSRF protection — blocks private IP ranges (10.x, 172.16-31.x, 192.168.x, 127.x) and automatic garbage collection (7-day TTL)</li> <li>Cache management system: page cache, query cache, object cache, sitemap cache, feed cache, image cache with admin AJAX clear controls</li> <li>Rate limiting with IP-based tracking and configurable thresholds</li> <li>IP blocking list for persistent abusers</li> <li>SEO pagination: <code>rel="next"</code>/<code>rel="prev"</code> tags, canonical URL query string exclusion, robots.txt <code>Allow: /*?page=</code></li> <li>Responsive image <code>srcset</code> generation with automatic <code>width</code>/<code>height</code> attributes for CLS prevention</li> <li>Gravatar 2x rendering for HiDPI/Retina displays</li> </ul> </div> <div class="cl-group"> <div class="cl-section-label cl-section-breaking">Breaking</div> <ul class="cl-items"> <li>Sites relocated to <code>sites/</code> directory structure — existing installations require path migration</li> </ul> </div> <details class="cl-files"> <summary> <svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5"><polyline points="9 18 15 12 9 6"/></svg> Changed files (14) </summary> <div class="cl-files-grid"> <div class="cl-file-row"> <span class="cl-file-name">classes/Order.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Order management</span> </div> <div class="cl-file-row"> <span class="cl-file-name">classes/Customer.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Customer accounts</span> </div> <div class="cl-file-row"> <span class="cl-file-name">classes/Invoice.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">PDF invoice generation</span> </div> <div class="cl-file-row"> <span class="cl-file-name">classes/SupportTicket.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Support ticket system</span> </div> <div class="cl-file-row"> <span class="cl-file-name">classes/Translator.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Multi-language engine</span> </div> <div class="cl-file-row"> <span class="cl-file-name">classes/Payment/IyzicoGateway.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">iyzico payment integration</span> </div> <div class="cl-file-row"> <span class="cl-file-name">classes/Security.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Rate limiting, CSRF, XSS protection</span> </div> <div class="cl-file-row"> <span class="cl-file-name">classes/License.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">License client</span> </div> <div class="cl-file-row"> <span class="cl-file-name">classes/Updater.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Update client</span> </div> <div class="cl-file-row"> <span class="cl-file-name">includes/image-proxy.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">SSRF-protected image proxy with GC</span> </div> <div class="cl-file-row"> <span class="cl-file-name">includes/cache-cleanup.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Cache garbage collection</span> </div> <div class="cl-file-row"> <span class="cl-file-name">customer/</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">NEW — Customer portal directory</span> </div> <div class="cl-file-row"> <span class="cl-file-name">api/license/</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">NEW — License API endpoints</span> </div> <div class="cl-file-row"> <span class="cl-file-name">api/updates/</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">NEW — Update server API endpoints</span> </div> </div> </details> </div> </div> <div class="cl-entry" id="v1-2-1"> <!-- Left: sticky meta --> <div class="cl-meta"> <span class="cl-badge">v1.2.1</span> <time class="cl-date" datetime="2026-01-15">15 Jan 2026</time> </div> <!-- Right: content --> <div class="cl-body"> <h2 class="cl-body-title">Admin Panel English Translation & UI Polish</h2> <div class="cl-group"> <div class="cl-section-label cl-section-added">Added</div> <ul class="cl-items"> <li>Complete English translation of all admin panel interface elements — menus, labels, buttons, tooltips, error messages, and success notifications</li> <li>Unified terminology across admin: consistent use of "Posts", "Pages", "Media", "Settings" throughout all modules</li> <li>Post voting system activated — thumbs up/down with per-IP deduplication</li> <li>Post view counter with bot-filtered tracking</li> <li>Newsletter module wired into admin sidebar under PLUGINS section</li> <li>AI content queue foundation — infrastructure for automated content generation pipeline</li> </ul> </div> <div class="cl-group"> <div class="cl-section-label cl-section-fixed">Fixed</div> <ul class="cl-items"> <li>Admin sidebar spacing reduced for cleaner navigation appearance</li> <li>CSS improvements across admin panel — consistent padding, border alignment, and responsive behavior on smaller screens</li> </ul> </div> </div> </div> <div class="cl-entry" id="v1-2-0"> <!-- Left: sticky meta --> <div class="cl-meta"> <span class="cl-badge">v1.2.0</span> <time class="cl-date" datetime="2026-01-14">14 Jan 2026</time> </div> <!-- Right: content --> <div class="cl-body"> <h2 class="cl-body-title">Plugin Architecture, Newsletter System & Advertising Module</h2> <div class="cl-group"> <div class="cl-section-label cl-section-added">Added</div> <ul class="cl-items"> <li>Plugin enable/disable system with database-driven management — plugins can be activated, deactivated, and configured without code changes</li> <li>Newsletter module with subscriber management, campaign creation, and delivery tracking — moved from core to PLUGINS menu for optional activation</li> <li>Advertising system for banner and inline ad placements with impression and click tracking</li> <li>Contact form with spam protection, email notifications, and admin message management</li> <li>Email delivery logging with status tracking (sent, failed, bounced)</li> <li>Spam protection logging for audit and pattern analysis</li> <li>Admin sidebar reorganized: PLUGINS section separated from core navigation</li> <li>API endpoint enhancements for external integrations</li> </ul> </div> <details class="cl-files"> <summary> <svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5"><polyline points="9 18 15 12 9 6"/></svg> Changed files (6) </summary> <div class="cl-files-grid"> <div class="cl-file-row"> <span class="cl-file-name">classes/Plugin.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Plugin management engine</span> </div> <div class="cl-file-row"> <span class="cl-file-name">classes/Newsletter.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Newsletter subscriber + campaign system</span> </div> <div class="cl-file-row"> <span class="cl-file-name">classes/Advertising.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Ad placement and tracking</span> </div> <div class="cl-file-row"> <span class="cl-file-name">classes/SpamFilter.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Spam detection and logging</span> </div> <div class="cl-file-row"> <span class="cl-file-name">admin/plugins.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">NEW — Plugin management interface</span> </div> <div class="cl-file-row"> <span class="cl-file-name">admin/newsletter.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">NEW — Newsletter administration</span> </div> </div> </details> </div> </div> <div class="cl-entry" id="v1-1-0"> <!-- Left: sticky meta --> <div class="cl-meta"> <span class="cl-badge">v1.1.0</span> <time class="cl-date" datetime="2026-01-08">8 Jan 2026</time> </div> <!-- Right: content --> <div class="cl-body"> <h2 class="cl-body-title">Environment System, SEO Tools & Performance Foundation</h2> <div class="cl-group"> <div class="cl-section-label cl-section-added">Added</div> <ul class="cl-items"> <li>Environment configuration system — automatic local/production detection based on hostname with separate database credentials and URL settings</li> <li>SEO Optimizer admin tool with on-page analysis, keyword density checker, and readability scoring</li> <li>Extended sitemap system: <code>sitemap.xml</code> index with separate <code>sitemap-posts.xml</code>, <code>sitemap-pages.xml</code>, and <code>sitemap-categories.xml</code></li> <li>Schema.org auto-detection: <code>Article</code>, <code>BlogPosting</code>, <code>WebPage</code>, and <code>WebSite</code> structured data injected per page type</li> <li>Post view tracking with <code>post_views</code> table — bot-filtered, deduplicated by IP, used for "Popular Posts" widgets</li> <li>Post voting system infrastructure with <code>post_votes</code> table — per-IP rate limiting, thumbs up/down</li> <li>Performance baseline: output buffering, query logging in development mode, execution time tracking</li> <li>Advanced <code>robots</code> meta controls: per-page <code>noindex</code>/<code>nofollow</code> settings in post editor</li> </ul> </div> <details class="cl-files"> <summary> <svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5"><polyline points="9 18 15 12 9 6"/></svg> Changed files (4) </summary> <div class="cl-files-grid"> <div class="cl-file-row"> <span class="cl-file-name">config/environment.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">NEW — Environment auto-detection</span> </div> <div class="cl-file-row"> <span class="cl-file-name">admin/seo-optimizer.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">NEW — SEO analysis tool</span> </div> <div class="cl-file-row"> <span class="cl-file-name">includes/sitemap.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Extended sitemap generation</span> </div> <div class="cl-file-row"> <span class="cl-file-name">includes/schema.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Schema.org structured data</span> </div> </div> </details> </div> </div> <div class="cl-entry" id="v1-0-0"> <!-- Left: sticky meta --> <div class="cl-meta"> <span class="cl-badge">v1.0.0</span> <time class="cl-date" datetime="2026-01-02">2 Jan 2026</time> </div> <!-- Right: content --> <div class="cl-body"> <h2 class="cl-body-title">Initial Release — Blog CMS Foundation</h2> <div class="cl-group"> <div class="cl-section-label cl-section-added">Added</div> <ul class="cl-items"> <li>Core blog CMS with post and page management — WYSIWYG editor, draft/published/scheduled status workflow, revision history</li> <li>User authentication with role-based access control: admin, editor, author, subscriber — each role has granular permission boundaries</li> <li>Hierarchical category system with unlimited nesting depth and SEO-friendly URL slugs</li> <li>Tag management with auto-suggest, bulk operations, and tag cloud generation</li> <li>Media library with drag-and-drop upload, AVIF/WebP automatic conversion, and gallery management</li> <li>Theme system supporting 14+ premium themes — each theme is a self-contained directory with templates, partials, assets, and configuration</li> <li>Responsive design with mobile-first approach — all themes pass Google Mobile-Friendly test out of the box</li> <li>Comment system with nested replies, Gravatar integration, and admin moderation queue</li> <li>Basic SEO: <code><title></code> tags, <code><meta description></code>, canonical URLs, and XML sitemap generation</li> <li>RSS feed at <code>/feed.xml</code> with full-content and excerpt modes</li> <li>Search functionality with relevance scoring across titles, content, and excerpts</li> <li>Admin dashboard with post statistics, recent activity feed, and quick-action buttons</li> <li>API token system for external integrations — key generation, revocation, and usage logging</li> <li>Clean URL routing via <code>.htaccess</code> rewrite rules — <code>/post-slug</code>, <code>/category/name</code>, <code>/tag/name</code>, <code>/author/name</code></li> </ul> </div> <details class="cl-files"> <summary> <svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5"><polyline points="9 18 15 12 9 6"/></svg> Changed files (10) </summary> <div class="cl-files-grid"> <div class="cl-file-row"> <span class="cl-file-name">classes/Post.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Post/page CRUD + revision system</span> </div> <div class="cl-file-row"> <span class="cl-file-name">classes/User.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Authentication + role management</span> </div> <div class="cl-file-row"> <span class="cl-file-name">classes/Category.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Hierarchical categories</span> </div> <div class="cl-file-row"> <span class="cl-file-name">classes/Tag.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Tag management</span> </div> <div class="cl-file-row"> <span class="cl-file-name">classes/Media.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Media library + AVIF/WebP conversion</span> </div> <div class="cl-file-row"> <span class="cl-file-name">classes/Comment.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Threaded comments</span> </div> <div class="cl-file-row"> <span class="cl-file-name">classes/Database.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">PDO wrapper with prepared statements</span> </div> <div class="cl-file-row"> <span class="cl-file-name">admin/</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">Complete admin panel (dashboard, posts, pages, media, settings)</span> </div> <div class="cl-file-row"> <span class="cl-file-name">themes/</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">14+ responsive themes</span> </div> <div class="cl-file-row"> <span class="cl-file-name">api/v1/index.php</span> <span style="color:var(--color-text-muted)">—</span> <span class="cl-file-desc">RESTful API with token authentication</span> </div> </div> </details> </div> </div> </div> </div> </section> <!-- CTA Section --> <section class="cta"><div class="container"><div class="cta-inner"><div class="cta-left"><a href="/" class="cta-logo-link"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 882 250" class="site-logo" style="height:26px;width:auto;display:block;" aria-label="jekcms" role="img"><path fill="currentColor" d="M6.48215 8.24357L167.595 8.10861L167.512 162.193L167.477 210.101C167.48 213.355 167.882 237.21 166.989 238.373C153.012 238.799 138.505 238.489 124.451 238.475L52.3131 238.454C40.5223 238.448 17.5353 237.714 6.48826 238.725C6.04649 191.112 6.03411 143.495 6.45111 95.8804L6.31368 41.5049C6.26572 31.0067 5.875 18.5036 6.48215 8.24357ZM47.122 213.243C55.2466 214.349 58.5712 214.812 66.8347 214.175C83.8145 211.464 95.5927 200.338 98.5824 182.927C100.568 171.363 98.8839 158.601 99.4527 146.853C99.7496 122.573 99.0068 97.8742 99.5038 73.6483L95.624 69.8267C90.2723 69.4959 85.2575 69.5523 79.9069 69.5846C76.7112 69.8672 75.8812 71.1424 73.5709 73.5076L73.6627 141.077C73.6968 152.899 73.9643 164.759 73.4008 176.564C72.7208 190.808 61.5927 190.243 50.7272 190.137L48.6262 190.113C48.57 197.67 47.4669 205.595 47.122 213.243ZM89.375 59.065C98.3036 57.4528 104.22 48.8817 102.568 39.953C100.916 31.0243 92.3244 25.1425 83.4111 26.8377C74.5563 28.5218 68.7264 37.0518 70.3679 45.922C72.0094 54.7922 80.5049 60.6667 89.375 59.065Z"/><path fill="currentColor" d="M741.317 73.9003C742.933 73.6988 747.083 74.1291 748.78 74.3513C764.421 76.3995 775.932 88.6139 779.135 103.771C779.66 106.296 779.991 108.858 780.124 111.433C780.443 117.796 781.358 161.97 779.431 164.707C778.736 165.695 777.525 166.178 776.367 166.336C772.958 166.803 763.8 167.407 761.169 165.264C760.007 164.318 759.487 162.564 759.285 161.128C758.709 157.035 759.171 152.404 759.227 148.262C759.381 136.803 760.299 122.884 759.12 111.674C758.551 106.273 756.931 100.875 752.528 97.3653C748.919 94.4885 744.2 93.4247 739.672 93.9527C733.148 94.7136 725.737 98.3022 722.816 104.518C719.854 110.82 721.518 145.843 721.499 155.204C721.495 157.356 721.913 162.593 720.535 164.28C719.248 165.855 717.002 166.384 715.067 166.578C711.35 166.951 704.696 167.348 701.692 164.903C699.401 161.432 700.507 152.101 700.564 147.685L700.677 122.056C700.634 108.555 699.155 93.2349 681.078 93.8758C650.271 94.968 664.007 134.607 661.572 154.358C660.855 160.179 663.334 167.064 653.685 166.576C649.394 166.359 640.821 168.068 640.502 162.205C640.102 152.504 640.332 142.662 640.396 132.907C640.467 116.947 640.453 100.987 640.356 85.0272C640.364 74.754 641.601 74.9184 651.33 75.2046C653.527 78.6887 654.967 81.3787 656.843 85.0595C674.65 68.3648 696.06 71.0637 712.677 87.6554C713.265 86.9051 713.872 86.1703 714.497 85.4517C721.587 77.3763 730.997 74.5343 741.317 73.9003Z"/><path fill="currentColor" d="M367.158 74.3069C369.439 73.9129 373.379 73.9541 375.648 74.05C393.313 74.7968 408.399 87.0419 413.603 103.816C416.396 112.82 415.929 120.029 415.557 129.216C411.055 128.64 402.522 128.847 397.72 128.858L367.156 128.976C361.671 129.016 354.942 129.321 349.614 128.996C353.357 142.009 361.46 149.959 375.77 149.173C386.822 148.566 390.83 145.078 397.967 137.169L402.075 139.241C404.931 140.59 408.299 142.081 410.921 143.806C412.101 144.582 413.542 146.067 413.724 147.51C413.903 148.923 413.228 149.933 412.378 150.988C404.547 160.721 393.094 166.495 380.756 167.864C368.285 169.246 354.968 166.149 345.062 158.249C335.491 150.615 330.089 139.673 328.696 127.623C327.205 114.311 330.085 100.098 338.513 89.4593C342.759 84.099 348.139 79.9763 354.413 77.3068C358.65 75.5044 362.621 74.8089 367.158 74.3069ZM375.927 111.1C381.087 111.174 389.763 111.507 394.671 110.85C389.347 98.931 384.738 92.1266 370.195 93.2324C358.281 94.8763 354.228 100.257 350.364 110.915C358.636 111.266 367.597 111.108 375.927 111.1Z"/><path fill="currentColor" d="M445.975 28.545C449.437 28.4572 459.201 27.3396 461.653 29.675C464.921 32.7879 463.101 88.4393 463.15 96.3636C463.169 99.3386 462.464 108.746 464.493 110.749C469.555 110.158 491.819 80.9969 497.954 76.8258C500.906 74.8184 527.767 73.4561 520.861 80.9098C509.053 93.6532 497.078 107.366 484.792 119.624C492.945 128.867 502.424 138.077 511.154 146.857C515.965 152.009 521.124 157.126 526.089 162.156L524.666 166.45L502.46 166.439C496.323 160.895 470.353 130.932 464.502 130.414C461.77 132.669 464.761 158.361 462.948 163.129C461.075 168.056 448.328 166.771 444.824 165.746C440.998 164.627 442.423 145.761 442.407 141.597L442.367 89.0476L442.39 48.6096C442.405 43.0957 441.521 36.2217 443.029 30.905C443.42 29.5259 444.731 29.0535 445.975 28.545Z"/><path fill="currentColor" d="M579.939 73.8908C593.883 74.3834 605.916 78.7696 615.482 89.3172C621.823 96.3091 607.941 103.145 603.277 106.543C598.988 101.58 593.62 96.3516 587.001 94.9229C548.651 86.6453 545.118 147.515 582.1 148.376C591.414 148.593 596.456 143.336 603.616 138.981C605.039 139.161 605.259 139.807 606.505 140.992C610.297 144.9 614.074 148.43 617.91 152.48C608.575 161.627 597.252 167.372 584.105 168.161C571.923 168.941 559.941 164.786 550.852 156.632C541.642 148.475 536.087 136.961 535.431 124.67C534.434 107.272 540.953 90.0634 556.146 80.6065C564.165 75.6144 570.712 74.4148 579.939 73.8908Z"/><path fill="currentColor" d="M830.353 74.2796C840.943 73.73 851.713 75.124 860.887 80.7241C869.115 85.7467 857.803 95.0526 854.636 99.3666C848.552 95.3533 843.405 92.3455 835.716 92.5248C832.362 92.603 829.678 93.1966 827.332 95.6947C825.871 97.2499 824.892 99.4582 825.054 101.559C825.709 110.093 844.096 110.634 850.533 113.122C854.886 114.582 858.672 116.578 862.097 119.755C872.832 129.71 873.14 147.142 863.076 157.677C855.482 165.625 846.22 167.803 835.667 168.181C835.216 168.181 834.765 168.169 834.314 168.145C820.636 167.368 811.273 162.782 802.248 152.64C806.437 148.794 808.286 145.127 813.613 141.272C822.676 143.727 827.458 150.947 839.023 149.309C845.596 148.378 850.611 143.781 849.301 136.638C846.922 128.924 830.964 127.843 824.626 125.998C794.107 117.111 799.174 78.8157 830.353 74.2796Z"/><path fill="currentColor" d="M286.639 75.5655C290.014 75.4115 302.257 73.9318 302.966 78.2085C303.839 83.4768 303.622 89.9178 303.61 95.3148L303.581 119.653L303.61 156.058C303.62 181.08 304.82 203.7 273.994 210.022C268.975 210.778 262.563 209.921 257.493 209.319C257.739 203.416 258.596 197.415 258.837 191.134C263.235 191.54 271.283 190.832 275.408 189.24C279.055 187.833 280.987 184.443 281.672 180.696C283.589 170.22 282.696 157.088 282.819 146.296C283.003 130.231 282.723 114.614 282.806 98.5266C282.836 92.6342 281.985 83.3204 283.655 77.4755C283.958 76.4171 285.587 75.9899 286.639 75.5655Z"/><path fill="currentColor" d="M290.405 34.7513C297.829 33.2354 305.084 38.0005 306.648 45.4205C308.213 52.8404 303.502 60.1336 296.099 61.75C288.625 63.3821 281.252 58.6109 279.672 51.1195C278.092 43.6281 282.909 36.2818 290.405 34.7513Z"/></svg></a><h2 class="cta-title">Go live today</h2><p class="cta-desc">Setup, content management, SEO and automation — all in one platform. Get started in 30 minutes.</p><a href="/pricing" class="btn btn-primary cta-btn">View Pricing <svg xmlns="http://www.w3.org/2000/svg" width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><line x1="5" y1="12" x2="19" y2="12"></line><polyline points="12 5 19 12 12 19"></polyline></svg></a></div><div class="cta-right"><ul class="cta-checklist"><li class="cta-check-item"><svg class="cta-check-icon" xmlns="http://www.w3.org/2000/svg" width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><polyline points="20 6 9 17 4 12"></polyline></svg>Setup and live in 30 minutes</li><li class="cta-check-item"><svg class="cta-check-icon" xmlns="http://www.w3.org/2000/svg" width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><polyline points="20 6 9 17 4 12"></polyline></svg>14+ professional themes</li><li class="cta-check-item"><svg class="cta-check-icon" xmlns="http://www.w3.org/2000/svg" width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><polyline points="20 6 9 17 4 12"></polyline></svg>n8n automation integration</li><li class="cta-check-item"><svg class="cta-check-icon" xmlns="http://www.w3.org/2000/svg" width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><polyline points="20 6 9 17 4 12"></polyline></svg>Automatic SEO — Sitemap, Schema.org</li><li class="cta-check-item"><svg class="cta-check-icon" xmlns="http://www.w3.org/2000/svg" width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><polyline points="20 6 9 17 4 12"></polyline></svg>iyzico payment support</li></ul></div></div></div></section> <script type="application/ld+json">{"@context":"https://schema.org","@graph":[{"@type":"SoftwareApplication","@id":"https://jekcms.com/#software","name":"jekcms","applicationCategory":"WebApplication","operatingSystem":"Linux, PHP 8+","softwareVersion":"2.38.0","datePublished":"2026-07-12","releaseNotes":"https://jekcms.com/changelog","url":"https://jekcms.com/","publisher":{"@id":"https://jekcms.com/#organization"},"inLanguage":"en-US"},{"@type":"ItemList","name":"jekcms release history","itemListOrder":"https://schema.org/ItemListOrderDescending","numberOfItems":15,"itemListElement":[{"@type":"ListItem","position":1,"item":{"@type":"SoftwareApplication","name":"jekcms 2.38.0","applicationCategory":"WebApplication","operatingSystem":"Linux, PHP 8+","softwareVersion":"2.38.0","datePublished":"2026-07-12","releaseNotes":"Honest Freshness Signals, a Content Quality Gate for Automation, and Full-Document Revision Restore","url":"https://jekcms.com/changelog#v2.38.0"}},{"@type":"ListItem","position":2,"item":{"@type":"SoftwareApplication","name":"jekcms 2.37.0","applicationCategory":"WebApplication","operatingSystem":"Linux, PHP 8+","softwareVersion":"2.37.0","datePublished":"2026-07-10","releaseNotes":"Legal Pages Repaired and Expanded, Author Archives Fixed, Tag Indexing Made Consistent","url":"https://jekcms.com/changelog#v2.37.0"}},{"@type":"ListItem","position":3,"item":{"@type":"SoftwareApplication","name":"jekcms 2.36.0","applicationCategory":"WebApplication","operatingSystem":"Linux, PHP 8+","softwareVersion":"2.36.0","datePublished":"2026-07-10","releaseNotes":"Personal Theme: Full-Width Brand Logo with Automatic Light/Dark Switching","url":"https://jekcms.com/changelog#v2.36.0"}},{"@type":"ListItem","position":4,"item":{"@type":"SoftwareApplication","name":"jekcms 2.35.0","applicationCategory":"WebApplication","operatingSystem":"Linux, PHP 8+","softwareVersion":"2.35.0","datePublished":"2026-07-10","releaseNotes":"Stories, the Instagram Way: One \"Latest Posts\" Bubble That Plays Your Recent Content","url":"https://jekcms.com/changelog#v2.35.0"}},{"@type":"ListItem","position":5,"item":{"@type":"SoftwareApplication","name":"jekcms 2.34.0","applicationCategory":"WebApplication","operatingSystem":"Linux, PHP 8+","softwareVersion":"2.34.0","datePublished":"2026-07-10","releaseNotes":"Stories Strip Becomes a True Latest-Posts Showcase","url":"https://jekcms.com/changelog#v2.34.0"}},{"@type":"ListItem","position":6,"item":{"@type":"SoftwareApplication","name":"jekcms 2.33.0","applicationCategory":"WebApplication","operatingSystem":"Linux, PHP 8+","softwareVersion":"2.33.0","datePublished":"2026-07-10","releaseNotes":"Image Captions Done Right: Visible Captions Are Now a First-Class Editor Feature","url":"https://jekcms.com/changelog#v2.33.0"}},{"@type":"ListItem","position":7,"item":{"@type":"SoftwareApplication","name":"jekcms 2.32.0","applicationCategory":"WebApplication","operatingSystem":"Linux, PHP 8+","softwareVersion":"2.32.0","datePublished":"2026-07-10","releaseNotes":"Click, Resize, Align: Full Image Editing Inside the Editor","url":"https://jekcms.com/changelog#v2.32.0"}},{"@type":"ListItem","position":8,"item":{"@type":"SoftwareApplication","name":"jekcms 2.31.2","applicationCategory":"WebApplication","operatingSystem":"Linux, PHP 8+","softwareVersion":"2.31.2","datePublished":"2026-07-10","releaseNotes":"Posts List: One-Click SEO Score Refresh, Editor and List Finally Agree","url":"https://jekcms.com/changelog#v2.31.2"}},{"@type":"ListItem","position":9,"item":{"@type":"SoftwareApplication","name":"jekcms 2.31.1","applicationCategory":"WebApplication","operatingSystem":"Linux, PHP 8+","softwareVersion":"2.31.1","datePublished":"2026-07-10","releaseNotes":"SEO Score You Can Trust: Fixed Budgets, No More Reward for Leaving Fields Empty","url":"https://jekcms.com/changelog#v2.31.1"}},{"@type":"ListItem","position":10,"item":{"@type":"SoftwareApplication","name":"jekcms 2.31.0","applicationCategory":"WebApplication","operatingSystem":"Linux, PHP 8+","softwareVersion":"2.31.0","datePublished":"2026-07-10","releaseNotes":"SEO Assistant: Content Structure Checks, Pixel-Accurate SERP Preview, Wider AI Analysis","url":"https://jekcms.com/changelog#v2.31.0"}},{"@type":"ListItem","position":11,"item":{"@type":"SoftwareApplication","name":"jekcms 2.30.0","applicationCategory":"WebApplication","operatingSystem":"Linux, PHP 8+","softwareVersion":"2.30.0","datePublished":"2026-07-09","releaseNotes":"Google Console: PageSpeed Tab, Fresh Search Data, Stability Fixes","url":"https://jekcms.com/changelog#v2.30.0"}},{"@type":"ListItem","position":12,"item":{"@type":"SoftwareApplication","name":"jekcms 2.29.1","applicationCategory":"WebApplication","operatingSystem":"Linux, PHP 8+","softwareVersion":"2.29.1","datePublished":"2026-07-09","releaseNotes":"ZeroTrack Analytics: Data Collection Restored on Production Sites","url":"https://jekcms.com/changelog#v2.29.1"}},{"@type":"ListItem","position":13,"item":{"@type":"SoftwareApplication","name":"jekcms 2.29.0","applicationCategory":"WebApplication","operatingSystem":"Linux, PHP 8+","softwareVersion":"2.29.0","datePublished":"2026-07-09","releaseNotes":"SEO Analyzer: Turkish-Correct Matching, Keyword Cannibalization Warning, New Checks","url":"https://jekcms.com/changelog#v2.29.0"}},{"@type":"ListItem","position":14,"item":{"@type":"SoftwareApplication","name":"jekcms 2.28.3","applicationCategory":"WebApplication","operatingSystem":"Linux, PHP 8+","softwareVersion":"2.28.3","datePublished":"2026-07-09","releaseNotes":"Health Theme Speaks Your Site Language on the Frontend","url":"https://jekcms.com/changelog#v2.28.3"}},{"@type":"ListItem","position":15,"item":{"@type":"SoftwareApplication","name":"jekcms 2.28.2","applicationCategory":"WebApplication","operatingSystem":"Linux, PHP 8+","softwareVersion":"2.28.2","datePublished":"2026-07-09","releaseNotes":"Health and Travel Headers No Longer Leak Broken Markup","url":"https://jekcms.com/changelog#v2.28.2"}}]}]}</script> </main> <!-- Auth Modal (giriş yapmış müşteriye gerek yok — header Dashboard gösterir) --> <style> .auth-modal-container { max-width: 860px; display: flex; overflow: hidden; border-radius: 16px; background: #0f1117; border: 1px solid rgba(255,255,255,0.08); box-shadow: 0 24px 80px rgba(0,0,0,0.6); position: relative; } .auth-modal-content { padding: 0; } .am-left { width: 360px; flex-shrink: 0; background: #0a0c18; position: relative; overflow: hidden; min-height: 520px; display: flex; align-items: flex-end; padding: 2.5rem; } .am-left canvas { position: absolute; inset: 0; width: 100%; height: 100%; } .am-left-body { position: relative; z-index: 1; } .am-left-logo { height: 28px; width: auto; filter: brightness(0) invert(1); opacity: 0.9; display: block; margin-bottom: 1rem; } .am-left-tagline { color: rgba(255,255,255,0.5); font-size: 0.8rem; line-height: 1.6; max-width: 220px; } .am-right { flex: 1; min-width: 0; padding: 2.25rem; overflow-y: auto; max-height: 90vh; position: relative; scrollbar-width: thin; scrollbar-color: #2a2d45 transparent; } .am-right::-webkit-scrollbar { width: 4px; } .am-right::-webkit-scrollbar-track { background: transparent; } .am-right::-webkit-scrollbar-thumb { background: #2a2d45; border-radius: 99px; } .am-right::-webkit-scrollbar-thumb:hover { background: #3d4163; } .am-header-row { display: flex; align-items: flex-start; justify-content: space-between; gap: 1rem; margin-bottom: 1.5rem; } .am-header-row h2 { margin: 0; font-size: 1.5rem; font-weight: 700; color: #f1f5f9; letter-spacing: -0.3px; } .am-header-row p { margin: 0.25rem 0 0; font-size: 0.875rem; color: #64748b; } .am-brand-logo { height: 22px; width: auto; opacity: 0.09; filter: brightness(0) invert(1); flex-shrink: 0; margin-top: 4px; } .am-social-btns { display: flex; flex-direction: column; gap: 0.5rem; margin-bottom: 1.25rem; } .am-social-btn { display: flex; align-items: center; gap: 0.75rem; width: 100%; padding: 0.65rem 1rem; background: rgba(255,255,255,0.04); border: 1px solid rgba(255,255,255,0.1); border-radius: 8px; color: rgba(255,255,255,0.8); font-size: 0.875rem; cursor: pointer; transition: background-color 0.15s, border-color 0.15s; font-family: inherit; } .am-social-btn:hover { background: rgba(255,255,255,0.07); border-color: rgba(255,255,255,0.18); } .am-social-btn svg { flex-shrink: 0; width: 17px; height: 17px; } .auth-modal-close { position: absolute; top: 1rem; right: 1rem; z-index: 10; background: rgba(255,255,255,0.06); border: 1px solid rgba(255,255,255,0.1); border-radius: 8px; color: rgba(255,255,255,0.5); cursor: pointer; width: 32px; height: 32px; display: flex; align-items: center; justify-content: center; transition: background 0.15s, color 0.15s; padding: 0; } .auth-modal-close:hover { background: rgba(255,255,255,0.1); color: rgba(255,255,255,0.85); } @media (max-width: 700px) { .am-left { display: none; } .am-right { max-height: 95vh; padding: 1.75rem; } .auth-modal-container { max-width: 460px; } } /* ── Dark overrides: inputs, labels, dividers ── */ .am-right .auth-tabs { border-bottom-color: #1e2235; } .am-right .auth-tab { color: #4b5563; } .am-right .auth-tab:hover { color: #94a3b8; } .am-right .auth-tab.active { color: #6366f1; } .am-right .auth-tab-indicator { background-color: #6366f1; } .am-right .auth-form-group label { color: #94a3b8; font-size: 0.72rem; font-weight: 600; text-transform: uppercase; letter-spacing: 0.07em; } .am-right .auth-form-group input { background: #161829; border: 1px solid #2a2d45; color: #e2e8f0; border-radius: 10px; } .am-right .auth-form-group input:focus { border-color: #6366f1; box-shadow: 0 0 0 3px rgba(99,102,241,0.15); } .am-right .auth-form-group input::placeholder { color: #475569; } .am-right .auth-form-group.has-error input { border-color: #ef4444; } .am-right .auth-password-toggle { color: #475569; } .am-right .auth-password-toggle:hover { color: #94a3b8; } .am-right .auth-divider { margin: 1rem 0; } .am-right .auth-divider::before, .am-right .auth-divider::after { background-color: #1e2235; } .am-right .auth-divider span { color: #4b5563; } .am-right .auth-checkbox > span:last-child { color: #64748b; } .am-right .auth-checkbox-mark { border-color: #2a2d45; background: #161829; } .am-right .auth-legal-note { color: #64748b; border-color: #1e2235; } .am-right .auth-forgot-link { color: #6366f1; } .am-right .auth-forgot-link:hover { color: #818cf8; } .am-right .auth-form-error { border-radius: 8px; } .am-right .auth-submit-btn { border-radius: 10px; } .am-right .auth-switch-text { color: #4b5563; } .am-right .auth-switch-btn { color: #6366f1; } .am-right .auth-switch-btn:hover { color: #818cf8; } .am-right .am-social-btns { margin-bottom: 0; margin-top: 0; } </style> <!-- Auth Modal --> <div class="auth-modal" id="authModal" role="dialog" aria-modal="true" aria-labelledby="authModalTitle"> <div class="auth-modal-backdrop" data-auth-close></div> <div class="auth-modal-container"> <!-- Close Button --> <button class="auth-modal-close" data-auth-close aria-label="Close"> <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"> <line x1="18" y1="6" x2="6" y2="18"></line> <line x1="6" y1="6" x2="18" y2="18"></line> </svg> </button> <!-- Left Visual Panel --> <div class="am-left"> <canvas id="amCanvas"></canvas> <div class="am-left-body"> <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 882 250" class="am-left-logo" style="height:40px;width:auto;display:block;" aria-label="jekcms" role="img"><path fill="currentColor" d="M6.48215 8.24357L167.595 8.10861L167.512 162.193L167.477 210.101C167.48 213.355 167.882 237.21 166.989 238.373C153.012 238.799 138.505 238.489 124.451 238.475L52.3131 238.454C40.5223 238.448 17.5353 237.714 6.48826 238.725C6.04649 191.112 6.03411 143.495 6.45111 95.8804L6.31368 41.5049C6.26572 31.0067 5.875 18.5036 6.48215 8.24357ZM47.122 213.243C55.2466 214.349 58.5712 214.812 66.8347 214.175C83.8145 211.464 95.5927 200.338 98.5824 182.927C100.568 171.363 98.8839 158.601 99.4527 146.853C99.7496 122.573 99.0068 97.8742 99.5038 73.6483L95.624 69.8267C90.2723 69.4959 85.2575 69.5523 79.9069 69.5846C76.7112 69.8672 75.8812 71.1424 73.5709 73.5076L73.6627 141.077C73.6968 152.899 73.9643 164.759 73.4008 176.564C72.7208 190.808 61.5927 190.243 50.7272 190.137L48.6262 190.113C48.57 197.67 47.4669 205.595 47.122 213.243ZM89.375 59.065C98.3036 57.4528 104.22 48.8817 102.568 39.953C100.916 31.0243 92.3244 25.1425 83.4111 26.8377C74.5563 28.5218 68.7264 37.0518 70.3679 45.922C72.0094 54.7922 80.5049 60.6667 89.375 59.065Z"/><path fill="currentColor" d="M741.317 73.9003C742.933 73.6988 747.083 74.1291 748.78 74.3513C764.421 76.3995 775.932 88.6139 779.135 103.771C779.66 106.296 779.991 108.858 780.124 111.433C780.443 117.796 781.358 161.97 779.431 164.707C778.736 165.695 777.525 166.178 776.367 166.336C772.958 166.803 763.8 167.407 761.169 165.264C760.007 164.318 759.487 162.564 759.285 161.128C758.709 157.035 759.171 152.404 759.227 148.262C759.381 136.803 760.299 122.884 759.12 111.674C758.551 106.273 756.931 100.875 752.528 97.3653C748.919 94.4885 744.2 93.4247 739.672 93.9527C733.148 94.7136 725.737 98.3022 722.816 104.518C719.854 110.82 721.518 145.843 721.499 155.204C721.495 157.356 721.913 162.593 720.535 164.28C719.248 165.855 717.002 166.384 715.067 166.578C711.35 166.951 704.696 167.348 701.692 164.903C699.401 161.432 700.507 152.101 700.564 147.685L700.677 122.056C700.634 108.555 699.155 93.2349 681.078 93.8758C650.271 94.968 664.007 134.607 661.572 154.358C660.855 160.179 663.334 167.064 653.685 166.576C649.394 166.359 640.821 168.068 640.502 162.205C640.102 152.504 640.332 142.662 640.396 132.907C640.467 116.947 640.453 100.987 640.356 85.0272C640.364 74.754 641.601 74.9184 651.33 75.2046C653.527 78.6887 654.967 81.3787 656.843 85.0595C674.65 68.3648 696.06 71.0637 712.677 87.6554C713.265 86.9051 713.872 86.1703 714.497 85.4517C721.587 77.3763 730.997 74.5343 741.317 73.9003Z"/><path fill="currentColor" d="M367.158 74.3069C369.439 73.9129 373.379 73.9541 375.648 74.05C393.313 74.7968 408.399 87.0419 413.603 103.816C416.396 112.82 415.929 120.029 415.557 129.216C411.055 128.64 402.522 128.847 397.72 128.858L367.156 128.976C361.671 129.016 354.942 129.321 349.614 128.996C353.357 142.009 361.46 149.959 375.77 149.173C386.822 148.566 390.83 145.078 397.967 137.169L402.075 139.241C404.931 140.59 408.299 142.081 410.921 143.806C412.101 144.582 413.542 146.067 413.724 147.51C413.903 148.923 413.228 149.933 412.378 150.988C404.547 160.721 393.094 166.495 380.756 167.864C368.285 169.246 354.968 166.149 345.062 158.249C335.491 150.615 330.089 139.673 328.696 127.623C327.205 114.311 330.085 100.098 338.513 89.4593C342.759 84.099 348.139 79.9763 354.413 77.3068C358.65 75.5044 362.621 74.8089 367.158 74.3069ZM375.927 111.1C381.087 111.174 389.763 111.507 394.671 110.85C389.347 98.931 384.738 92.1266 370.195 93.2324C358.281 94.8763 354.228 100.257 350.364 110.915C358.636 111.266 367.597 111.108 375.927 111.1Z"/><path fill="currentColor" d="M445.975 28.545C449.437 28.4572 459.201 27.3396 461.653 29.675C464.921 32.7879 463.101 88.4393 463.15 96.3636C463.169 99.3386 462.464 108.746 464.493 110.749C469.555 110.158 491.819 80.9969 497.954 76.8258C500.906 74.8184 527.767 73.4561 520.861 80.9098C509.053 93.6532 497.078 107.366 484.792 119.624C492.945 128.867 502.424 138.077 511.154 146.857C515.965 152.009 521.124 157.126 526.089 162.156L524.666 166.45L502.46 166.439C496.323 160.895 470.353 130.932 464.502 130.414C461.77 132.669 464.761 158.361 462.948 163.129C461.075 168.056 448.328 166.771 444.824 165.746C440.998 164.627 442.423 145.761 442.407 141.597L442.367 89.0476L442.39 48.6096C442.405 43.0957 441.521 36.2217 443.029 30.905C443.42 29.5259 444.731 29.0535 445.975 28.545Z"/><path fill="currentColor" d="M579.939 73.8908C593.883 74.3834 605.916 78.7696 615.482 89.3172C621.823 96.3091 607.941 103.145 603.277 106.543C598.988 101.58 593.62 96.3516 587.001 94.9229C548.651 86.6453 545.118 147.515 582.1 148.376C591.414 148.593 596.456 143.336 603.616 138.981C605.039 139.161 605.259 139.807 606.505 140.992C610.297 144.9 614.074 148.43 617.91 152.48C608.575 161.627 597.252 167.372 584.105 168.161C571.923 168.941 559.941 164.786 550.852 156.632C541.642 148.475 536.087 136.961 535.431 124.67C534.434 107.272 540.953 90.0634 556.146 80.6065C564.165 75.6144 570.712 74.4148 579.939 73.8908Z"/><path fill="currentColor" d="M830.353 74.2796C840.943 73.73 851.713 75.124 860.887 80.7241C869.115 85.7467 857.803 95.0526 854.636 99.3666C848.552 95.3533 843.405 92.3455 835.716 92.5248C832.362 92.603 829.678 93.1966 827.332 95.6947C825.871 97.2499 824.892 99.4582 825.054 101.559C825.709 110.093 844.096 110.634 850.533 113.122C854.886 114.582 858.672 116.578 862.097 119.755C872.832 129.71 873.14 147.142 863.076 157.677C855.482 165.625 846.22 167.803 835.667 168.181C835.216 168.181 834.765 168.169 834.314 168.145C820.636 167.368 811.273 162.782 802.248 152.64C806.437 148.794 808.286 145.127 813.613 141.272C822.676 143.727 827.458 150.947 839.023 149.309C845.596 148.378 850.611 143.781 849.301 136.638C846.922 128.924 830.964 127.843 824.626 125.998C794.107 117.111 799.174 78.8157 830.353 74.2796Z"/><path fill="currentColor" d="M286.639 75.5655C290.014 75.4115 302.257 73.9318 302.966 78.2085C303.839 83.4768 303.622 89.9178 303.61 95.3148L303.581 119.653L303.61 156.058C303.62 181.08 304.82 203.7 273.994 210.022C268.975 210.778 262.563 209.921 257.493 209.319C257.739 203.416 258.596 197.415 258.837 191.134C263.235 191.54 271.283 190.832 275.408 189.24C279.055 187.833 280.987 184.443 281.672 180.696C283.589 170.22 282.696 157.088 282.819 146.296C283.003 130.231 282.723 114.614 282.806 98.5266C282.836 92.6342 281.985 83.3204 283.655 77.4755C283.958 76.4171 285.587 75.9899 286.639 75.5655Z"/><path fill="currentColor" d="M290.405 34.7513C297.829 33.2354 305.084 38.0005 306.648 45.4205C308.213 52.8404 303.502 60.1336 296.099 61.75C288.625 63.3821 281.252 58.6109 279.672 51.1195C278.092 43.6281 282.909 36.2818 290.405 34.7513Z"/></svg> <p class="am-left-tagline">Automated content management for modern publishers.</p> </div> </div> <!-- Right Form Panel --> <div class="am-right"> <!-- Tabs --> <div class="auth-tabs"> <button class="auth-tab active" data-tab="login">Sign In</button> <button class="auth-tab" data-tab="register">Sign Up</button> <div class="auth-tab-indicator"></div> </div> <!-- Login Panel --> <div class="auth-panel active" id="loginPanel"> <div class="am-header-row"> <div> <h2 id="authModalTitle">Welcome Back</h2> <p>Sign in to your account</p> </div> <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 882 250" class="am-brand-logo" style="height:26px;width:auto;display:block;" aria-label="jekcms" role="img" aria-hidden="true"><path fill="currentColor" d="M6.48215 8.24357L167.595 8.10861L167.512 162.193L167.477 210.101C167.48 213.355 167.882 237.21 166.989 238.373C153.012 238.799 138.505 238.489 124.451 238.475L52.3131 238.454C40.5223 238.448 17.5353 237.714 6.48826 238.725C6.04649 191.112 6.03411 143.495 6.45111 95.8804L6.31368 41.5049C6.26572 31.0067 5.875 18.5036 6.48215 8.24357ZM47.122 213.243C55.2466 214.349 58.5712 214.812 66.8347 214.175C83.8145 211.464 95.5927 200.338 98.5824 182.927C100.568 171.363 98.8839 158.601 99.4527 146.853C99.7496 122.573 99.0068 97.8742 99.5038 73.6483L95.624 69.8267C90.2723 69.4959 85.2575 69.5523 79.9069 69.5846C76.7112 69.8672 75.8812 71.1424 73.5709 73.5076L73.6627 141.077C73.6968 152.899 73.9643 164.759 73.4008 176.564C72.7208 190.808 61.5927 190.243 50.7272 190.137L48.6262 190.113C48.57 197.67 47.4669 205.595 47.122 213.243ZM89.375 59.065C98.3036 57.4528 104.22 48.8817 102.568 39.953C100.916 31.0243 92.3244 25.1425 83.4111 26.8377C74.5563 28.5218 68.7264 37.0518 70.3679 45.922C72.0094 54.7922 80.5049 60.6667 89.375 59.065Z"/><path fill="currentColor" d="M741.317 73.9003C742.933 73.6988 747.083 74.1291 748.78 74.3513C764.421 76.3995 775.932 88.6139 779.135 103.771C779.66 106.296 779.991 108.858 780.124 111.433C780.443 117.796 781.358 161.97 779.431 164.707C778.736 165.695 777.525 166.178 776.367 166.336C772.958 166.803 763.8 167.407 761.169 165.264C760.007 164.318 759.487 162.564 759.285 161.128C758.709 157.035 759.171 152.404 759.227 148.262C759.381 136.803 760.299 122.884 759.12 111.674C758.551 106.273 756.931 100.875 752.528 97.3653C748.919 94.4885 744.2 93.4247 739.672 93.9527C733.148 94.7136 725.737 98.3022 722.816 104.518C719.854 110.82 721.518 145.843 721.499 155.204C721.495 157.356 721.913 162.593 720.535 164.28C719.248 165.855 717.002 166.384 715.067 166.578C711.35 166.951 704.696 167.348 701.692 164.903C699.401 161.432 700.507 152.101 700.564 147.685L700.677 122.056C700.634 108.555 699.155 93.2349 681.078 93.8758C650.271 94.968 664.007 134.607 661.572 154.358C660.855 160.179 663.334 167.064 653.685 166.576C649.394 166.359 640.821 168.068 640.502 162.205C640.102 152.504 640.332 142.662 640.396 132.907C640.467 116.947 640.453 100.987 640.356 85.0272C640.364 74.754 641.601 74.9184 651.33 75.2046C653.527 78.6887 654.967 81.3787 656.843 85.0595C674.65 68.3648 696.06 71.0637 712.677 87.6554C713.265 86.9051 713.872 86.1703 714.497 85.4517C721.587 77.3763 730.997 74.5343 741.317 73.9003Z"/><path fill="currentColor" d="M367.158 74.3069C369.439 73.9129 373.379 73.9541 375.648 74.05C393.313 74.7968 408.399 87.0419 413.603 103.816C416.396 112.82 415.929 120.029 415.557 129.216C411.055 128.64 402.522 128.847 397.72 128.858L367.156 128.976C361.671 129.016 354.942 129.321 349.614 128.996C353.357 142.009 361.46 149.959 375.77 149.173C386.822 148.566 390.83 145.078 397.967 137.169L402.075 139.241C404.931 140.59 408.299 142.081 410.921 143.806C412.101 144.582 413.542 146.067 413.724 147.51C413.903 148.923 413.228 149.933 412.378 150.988C404.547 160.721 393.094 166.495 380.756 167.864C368.285 169.246 354.968 166.149 345.062 158.249C335.491 150.615 330.089 139.673 328.696 127.623C327.205 114.311 330.085 100.098 338.513 89.4593C342.759 84.099 348.139 79.9763 354.413 77.3068C358.65 75.5044 362.621 74.8089 367.158 74.3069ZM375.927 111.1C381.087 111.174 389.763 111.507 394.671 110.85C389.347 98.931 384.738 92.1266 370.195 93.2324C358.281 94.8763 354.228 100.257 350.364 110.915C358.636 111.266 367.597 111.108 375.927 111.1Z"/><path fill="currentColor" d="M445.975 28.545C449.437 28.4572 459.201 27.3396 461.653 29.675C464.921 32.7879 463.101 88.4393 463.15 96.3636C463.169 99.3386 462.464 108.746 464.493 110.749C469.555 110.158 491.819 80.9969 497.954 76.8258C500.906 74.8184 527.767 73.4561 520.861 80.9098C509.053 93.6532 497.078 107.366 484.792 119.624C492.945 128.867 502.424 138.077 511.154 146.857C515.965 152.009 521.124 157.126 526.089 162.156L524.666 166.45L502.46 166.439C496.323 160.895 470.353 130.932 464.502 130.414C461.77 132.669 464.761 158.361 462.948 163.129C461.075 168.056 448.328 166.771 444.824 165.746C440.998 164.627 442.423 145.761 442.407 141.597L442.367 89.0476L442.39 48.6096C442.405 43.0957 441.521 36.2217 443.029 30.905C443.42 29.5259 444.731 29.0535 445.975 28.545Z"/><path fill="currentColor" d="M579.939 73.8908C593.883 74.3834 605.916 78.7696 615.482 89.3172C621.823 96.3091 607.941 103.145 603.277 106.543C598.988 101.58 593.62 96.3516 587.001 94.9229C548.651 86.6453 545.118 147.515 582.1 148.376C591.414 148.593 596.456 143.336 603.616 138.981C605.039 139.161 605.259 139.807 606.505 140.992C610.297 144.9 614.074 148.43 617.91 152.48C608.575 161.627 597.252 167.372 584.105 168.161C571.923 168.941 559.941 164.786 550.852 156.632C541.642 148.475 536.087 136.961 535.431 124.67C534.434 107.272 540.953 90.0634 556.146 80.6065C564.165 75.6144 570.712 74.4148 579.939 73.8908Z"/><path fill="currentColor" d="M830.353 74.2796C840.943 73.73 851.713 75.124 860.887 80.7241C869.115 85.7467 857.803 95.0526 854.636 99.3666C848.552 95.3533 843.405 92.3455 835.716 92.5248C832.362 92.603 829.678 93.1966 827.332 95.6947C825.871 97.2499 824.892 99.4582 825.054 101.559C825.709 110.093 844.096 110.634 850.533 113.122C854.886 114.582 858.672 116.578 862.097 119.755C872.832 129.71 873.14 147.142 863.076 157.677C855.482 165.625 846.22 167.803 835.667 168.181C835.216 168.181 834.765 168.169 834.314 168.145C820.636 167.368 811.273 162.782 802.248 152.64C806.437 148.794 808.286 145.127 813.613 141.272C822.676 143.727 827.458 150.947 839.023 149.309C845.596 148.378 850.611 143.781 849.301 136.638C846.922 128.924 830.964 127.843 824.626 125.998C794.107 117.111 799.174 78.8157 830.353 74.2796Z"/><path fill="currentColor" d="M286.639 75.5655C290.014 75.4115 302.257 73.9318 302.966 78.2085C303.839 83.4768 303.622 89.9178 303.61 95.3148L303.581 119.653L303.61 156.058C303.62 181.08 304.82 203.7 273.994 210.022C268.975 210.778 262.563 209.921 257.493 209.319C257.739 203.416 258.596 197.415 258.837 191.134C263.235 191.54 271.283 190.832 275.408 189.24C279.055 187.833 280.987 184.443 281.672 180.696C283.589 170.22 282.696 157.088 282.819 146.296C283.003 130.231 282.723 114.614 282.806 98.5266C282.836 92.6342 281.985 83.3204 283.655 77.4755C283.958 76.4171 285.587 75.9899 286.639 75.5655Z"/><path fill="currentColor" d="M290.405 34.7513C297.829 33.2354 305.084 38.0005 306.648 45.4205C308.213 52.8404 303.502 60.1336 296.099 61.75C288.625 63.3821 281.252 58.6109 279.672 51.1195C278.092 43.6281 282.909 36.2818 290.405 34.7513Z"/></svg> </div> <!-- Login Form --> <form class="auth-form" id="loginForm" method="post" novalidate> <div class="auth-form-group"> <label for="loginEmail">Email Address</label> <input type="email" id="loginEmail" name="email" placeholder="you@example.com" autocomplete="email" required > <span class="auth-field-error"></span> </div> <div class="auth-form-group"> <label for="loginPassword">Password</label> <div class="auth-password-wrapper"> <input type="password" id="loginPassword" name="password" placeholder="Enter your password" autocomplete="current-password" required > <button type="button" class="auth-password-toggle" aria-label="Toggle password visibility"> <svg class="eye-open" xmlns="http://www.w3.org/2000/svg" width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"> <path d="M1 12s4-8 11-8 11 8 11 8-4 8-11 8-11-8-11-8z"></path> <circle cx="12" cy="12" r="3"></circle> </svg> <svg class="eye-closed" xmlns="http://www.w3.org/2000/svg" width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" style="display:none;"> <path d="M17.94 17.94A10.07 10.07 0 0 1 12 20c-7 0-11-8-11-8a18.45 18.45 0 0 1 5.06-5.94M9.9 4.24A9.12 9.12 0 0 1 12 4c7 0 11 8 11 8a18.5 18.5 0 0 1-2.16 3.19m-6.72-1.07a3 3 0 1 1-4.24-4.24"></path> <line x1="1" y1="1" x2="23" y2="23"></line> </svg> </button> </div> <span class="auth-field-error"></span> </div> <div class="auth-form-options" style="justify-content:flex-end;"> <a href="/customer/forgot-password.php" class="auth-forgot-link">Forgot password?</a> </div> <div class="auth-form-error" id="loginFormError"></div> <button type="submit" class="auth-submit-btn"> <span class="auth-btn-text">Sign In</span> <span class="auth-btn-loader"></span> </button> </form> <!-- Divider --> <div class="auth-divider"> <span>or continue with email</span> </div> <!-- Social Buttons (yalnız Google — GitHub/Facebook/Microsoft kaldırıldı) --> <div class="am-social-btns"> <button type="button" class="am-social-btn" id="googleLoginBtn" data-provider="google"> <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" width="18" height="18"> <path fill="#4285F4" d="M22.56 12.25c0-.78-.07-1.53-.2-2.25H12v4.26h5.92a5.06 5.06 0 0 1-2.2 3.32v2.77h3.57c2.08-1.92 3.28-4.74 3.28-8.1z"/> <path fill="#34A853" d="M12 23c2.97 0 5.46-.98 7.28-2.66l-3.57-2.77c-.98.66-2.23 1.06-3.71 1.06-2.86 0-5.29-1.93-6.16-4.53H2.18v2.84A11 11 0 0 0 12 23z"/> <path fill="#FBBC05" d="M5.84 14.1a6.6 6.6 0 0 1 0-4.2V7.06H2.18a11 11 0 0 0 0 9.88l3.66-2.84z"/> <path fill="#EA4335" d="M12 5.38c1.62 0 3.06.56 4.21 1.64l3.15-3.15C17.45 2.09 14.97 1 12 1 7.7 1 3.99 3.47 2.18 7.06l3.66 2.84C6.71 7.31 9.14 5.38 12 5.38z"/> </svg> <span>Continue with Google</span> </button> </div> <p class="auth-switch-text"> Don't have an account? <button type="button" class="auth-switch-btn" data-switch="register">Sign Up</button> </p> </div> <!-- Register Panel --> <div class="auth-panel" id="registerPanel"> <div class="am-header-row"> <div> <h2>Create Account</h2> <p>Purchase a license to get started</p> </div> <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 882 250" class="am-brand-logo" style="height:26px;width:auto;display:block;" aria-label="jekcms" role="img" aria-hidden="true"><path fill="currentColor" d="M6.48215 8.24357L167.595 8.10861L167.512 162.193L167.477 210.101C167.48 213.355 167.882 237.21 166.989 238.373C153.012 238.799 138.505 238.489 124.451 238.475L52.3131 238.454C40.5223 238.448 17.5353 237.714 6.48826 238.725C6.04649 191.112 6.03411 143.495 6.45111 95.8804L6.31368 41.5049C6.26572 31.0067 5.875 18.5036 6.48215 8.24357ZM47.122 213.243C55.2466 214.349 58.5712 214.812 66.8347 214.175C83.8145 211.464 95.5927 200.338 98.5824 182.927C100.568 171.363 98.8839 158.601 99.4527 146.853C99.7496 122.573 99.0068 97.8742 99.5038 73.6483L95.624 69.8267C90.2723 69.4959 85.2575 69.5523 79.9069 69.5846C76.7112 69.8672 75.8812 71.1424 73.5709 73.5076L73.6627 141.077C73.6968 152.899 73.9643 164.759 73.4008 176.564C72.7208 190.808 61.5927 190.243 50.7272 190.137L48.6262 190.113C48.57 197.67 47.4669 205.595 47.122 213.243ZM89.375 59.065C98.3036 57.4528 104.22 48.8817 102.568 39.953C100.916 31.0243 92.3244 25.1425 83.4111 26.8377C74.5563 28.5218 68.7264 37.0518 70.3679 45.922C72.0094 54.7922 80.5049 60.6667 89.375 59.065Z"/><path fill="currentColor" d="M741.317 73.9003C742.933 73.6988 747.083 74.1291 748.78 74.3513C764.421 76.3995 775.932 88.6139 779.135 103.771C779.66 106.296 779.991 108.858 780.124 111.433C780.443 117.796 781.358 161.97 779.431 164.707C778.736 165.695 777.525 166.178 776.367 166.336C772.958 166.803 763.8 167.407 761.169 165.264C760.007 164.318 759.487 162.564 759.285 161.128C758.709 157.035 759.171 152.404 759.227 148.262C759.381 136.803 760.299 122.884 759.12 111.674C758.551 106.273 756.931 100.875 752.528 97.3653C748.919 94.4885 744.2 93.4247 739.672 93.9527C733.148 94.7136 725.737 98.3022 722.816 104.518C719.854 110.82 721.518 145.843 721.499 155.204C721.495 157.356 721.913 162.593 720.535 164.28C719.248 165.855 717.002 166.384 715.067 166.578C711.35 166.951 704.696 167.348 701.692 164.903C699.401 161.432 700.507 152.101 700.564 147.685L700.677 122.056C700.634 108.555 699.155 93.2349 681.078 93.8758C650.271 94.968 664.007 134.607 661.572 154.358C660.855 160.179 663.334 167.064 653.685 166.576C649.394 166.359 640.821 168.068 640.502 162.205C640.102 152.504 640.332 142.662 640.396 132.907C640.467 116.947 640.453 100.987 640.356 85.0272C640.364 74.754 641.601 74.9184 651.33 75.2046C653.527 78.6887 654.967 81.3787 656.843 85.0595C674.65 68.3648 696.06 71.0637 712.677 87.6554C713.265 86.9051 713.872 86.1703 714.497 85.4517C721.587 77.3763 730.997 74.5343 741.317 73.9003Z"/><path fill="currentColor" d="M367.158 74.3069C369.439 73.9129 373.379 73.9541 375.648 74.05C393.313 74.7968 408.399 87.0419 413.603 103.816C416.396 112.82 415.929 120.029 415.557 129.216C411.055 128.64 402.522 128.847 397.72 128.858L367.156 128.976C361.671 129.016 354.942 129.321 349.614 128.996C353.357 142.009 361.46 149.959 375.77 149.173C386.822 148.566 390.83 145.078 397.967 137.169L402.075 139.241C404.931 140.59 408.299 142.081 410.921 143.806C412.101 144.582 413.542 146.067 413.724 147.51C413.903 148.923 413.228 149.933 412.378 150.988C404.547 160.721 393.094 166.495 380.756 167.864C368.285 169.246 354.968 166.149 345.062 158.249C335.491 150.615 330.089 139.673 328.696 127.623C327.205 114.311 330.085 100.098 338.513 89.4593C342.759 84.099 348.139 79.9763 354.413 77.3068C358.65 75.5044 362.621 74.8089 367.158 74.3069ZM375.927 111.1C381.087 111.174 389.763 111.507 394.671 110.85C389.347 98.931 384.738 92.1266 370.195 93.2324C358.281 94.8763 354.228 100.257 350.364 110.915C358.636 111.266 367.597 111.108 375.927 111.1Z"/><path fill="currentColor" d="M445.975 28.545C449.437 28.4572 459.201 27.3396 461.653 29.675C464.921 32.7879 463.101 88.4393 463.15 96.3636C463.169 99.3386 462.464 108.746 464.493 110.749C469.555 110.158 491.819 80.9969 497.954 76.8258C500.906 74.8184 527.767 73.4561 520.861 80.9098C509.053 93.6532 497.078 107.366 484.792 119.624C492.945 128.867 502.424 138.077 511.154 146.857C515.965 152.009 521.124 157.126 526.089 162.156L524.666 166.45L502.46 166.439C496.323 160.895 470.353 130.932 464.502 130.414C461.77 132.669 464.761 158.361 462.948 163.129C461.075 168.056 448.328 166.771 444.824 165.746C440.998 164.627 442.423 145.761 442.407 141.597L442.367 89.0476L442.39 48.6096C442.405 43.0957 441.521 36.2217 443.029 30.905C443.42 29.5259 444.731 29.0535 445.975 28.545Z"/><path fill="currentColor" d="M579.939 73.8908C593.883 74.3834 605.916 78.7696 615.482 89.3172C621.823 96.3091 607.941 103.145 603.277 106.543C598.988 101.58 593.62 96.3516 587.001 94.9229C548.651 86.6453 545.118 147.515 582.1 148.376C591.414 148.593 596.456 143.336 603.616 138.981C605.039 139.161 605.259 139.807 606.505 140.992C610.297 144.9 614.074 148.43 617.91 152.48C608.575 161.627 597.252 167.372 584.105 168.161C571.923 168.941 559.941 164.786 550.852 156.632C541.642 148.475 536.087 136.961 535.431 124.67C534.434 107.272 540.953 90.0634 556.146 80.6065C564.165 75.6144 570.712 74.4148 579.939 73.8908Z"/><path fill="currentColor" d="M830.353 74.2796C840.943 73.73 851.713 75.124 860.887 80.7241C869.115 85.7467 857.803 95.0526 854.636 99.3666C848.552 95.3533 843.405 92.3455 835.716 92.5248C832.362 92.603 829.678 93.1966 827.332 95.6947C825.871 97.2499 824.892 99.4582 825.054 101.559C825.709 110.093 844.096 110.634 850.533 113.122C854.886 114.582 858.672 116.578 862.097 119.755C872.832 129.71 873.14 147.142 863.076 157.677C855.482 165.625 846.22 167.803 835.667 168.181C835.216 168.181 834.765 168.169 834.314 168.145C820.636 167.368 811.273 162.782 802.248 152.64C806.437 148.794 808.286 145.127 813.613 141.272C822.676 143.727 827.458 150.947 839.023 149.309C845.596 148.378 850.611 143.781 849.301 136.638C846.922 128.924 830.964 127.843 824.626 125.998C794.107 117.111 799.174 78.8157 830.353 74.2796Z"/><path fill="currentColor" d="M286.639 75.5655C290.014 75.4115 302.257 73.9318 302.966 78.2085C303.839 83.4768 303.622 89.9178 303.61 95.3148L303.581 119.653L303.61 156.058C303.62 181.08 304.82 203.7 273.994 210.022C268.975 210.778 262.563 209.921 257.493 209.319C257.739 203.416 258.596 197.415 258.837 191.134C263.235 191.54 271.283 190.832 275.408 189.24C279.055 187.833 280.987 184.443 281.672 180.696C283.589 170.22 282.696 157.088 282.819 146.296C283.003 130.231 282.723 114.614 282.806 98.5266C282.836 92.6342 281.985 83.3204 283.655 77.4755C283.958 76.4171 285.587 75.9899 286.639 75.5655Z"/><path fill="currentColor" d="M290.405 34.7513C297.829 33.2354 305.084 38.0005 306.648 45.4205C308.213 52.8404 303.502 60.1336 296.099 61.75C288.625 63.3821 281.252 58.6109 279.672 51.1195C278.092 43.6281 282.909 36.2818 290.405 34.7513Z"/></svg> </div> <!-- Register Form --> <form class="auth-form" id="registerForm" method="post" novalidate> <div class="auth-form-group"> <label for="registerName">Full Name</label> <input type="text" id="registerName" name="name" placeholder="John Doe" autocomplete="name" required > <span class="auth-field-error"></span> </div> <div class="auth-form-group"> <label for="registerEmail">Email Address</label> <input type="email" id="registerEmail" name="email" placeholder="you@example.com" autocomplete="email" required > <span class="auth-field-error"></span> </div> <div class="auth-form-group"> <label for="registerPassword">Password</label> <div class="auth-password-wrapper"> <input type="password" id="registerPassword" name="password" placeholder="Enter your password" autocomplete="new-password" required minlength="8" > <button type="button" class="auth-password-toggle" aria-label="Toggle password visibility"> <svg class="eye-open" xmlns="http://www.w3.org/2000/svg" width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"> <path d="M1 12s4-8 11-8 11 8 11 8-4 8-11 8-11-8-11-8z"></path> <circle cx="12" cy="12" r="3"></circle> </svg> <svg class="eye-closed" xmlns="http://www.w3.org/2000/svg" width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" style="display:none;"> <path d="M17.94 17.94A10.07 10.07 0 0 1 12 20c-7 0-11-8-11-8a18.45 18.45 0 0 1 5.06-5.94M9.9 4.24A9.12 9.12 0 0 1 12 4c7 0 11 8 11 8a18.5 18.5 0 0 1-2.16 3.19m-6.72-1.07a3 3 0 1 1-4.24-4.24"></path> <line x1="1" y1="1" x2="23" y2="23"></line> </svg> </button> </div> <div class="auth-password-strength"> <div class="auth-strength-bar"> <div class="auth-strength-fill"></div> </div> <span class="auth-strength-text"></span> </div> <span class="auth-field-error"></span> </div> <div class="auth-form-group"> <label for="registerPasswordConfirm">Confirm Password</label> <div class="auth-password-wrapper"> <input type="password" id="registerPasswordConfirm" name="password_confirm" placeholder="Confirm your password" autocomplete="new-password" required > <button type="button" class="auth-password-toggle" aria-label="Toggle password visibility"> <svg class="eye-open" xmlns="http://www.w3.org/2000/svg" width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"> <path d="M1 12s4-8 11-8 11 8 11 8-4 8-11 8-11-8-11-8z"></path> <circle cx="12" cy="12" r="3"></circle> </svg> <svg class="eye-closed" xmlns="http://www.w3.org/2000/svg" width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" style="display:none;"> <path d="M17.94 17.94A10.07 10.07 0 0 1 12 20c-7 0-11-8-11-8a18.45 18.45 0 0 1 5.06-5.94M9.9 4.24A9.12 9.12 0 0 1 12 4c7 0 11 8 11 8a18.5 18.5 0 0 1-2.16 3.19m-6.72-1.07a3 3 0 1 1-4.24-4.24"></path> <line x1="1" y1="1" x2="23" y2="23"></line> </svg> </button> </div> <span class="auth-field-error"></span> </div> <div class="auth-form-options"> <label class="auth-checkbox"> <input type="checkbox" name="terms" value="1" required> <span class="auth-checkbox-mark"></span> <span> I agree to the <a href="/terms" target="_blank">Terms of Service</a>, <a href="/privacy" target="_blank">Privacy Policy</a> and <a href="/refund" target="_blank">Refund Policy</a> </span> </label> <p class="auth-legal-note">By creating an account you confirm that you have read and accepted these policies. jekcms licenses are non-refundable digital products — the no-refund policy applies upon license activation.</p> </div> <div class="auth-form-error" id="registerFormError"></div> <button type="submit" class="auth-submit-btn"> <span class="auth-btn-text">Create Account</span> <span class="auth-btn-loader"></span> </button> </form> <!-- Divider --> <div class="auth-divider"> <span>or continue with email</span> </div> <!-- Social Buttons (yalnız Google — GitHub/Facebook/Microsoft kaldırıldı) --> <div class="am-social-btns"> <button type="button" class="am-social-btn" id="googleRegisterBtn" data-provider="google"> <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" width="18" height="18"> <path fill="#4285F4" d="M22.56 12.25c0-.78-.07-1.53-.2-2.25H12v4.26h5.92a5.06 5.06 0 0 1-2.2 3.32v2.77h3.57c2.08-1.92 3.28-4.74 3.28-8.1z"/> <path fill="#34A853" d="M12 23c2.97 0 5.46-.98 7.28-2.66l-3.57-2.77c-.98.66-2.23 1.06-3.71 1.06-2.86 0-5.29-1.93-6.16-4.53H2.18v2.84A11 11 0 0 0 12 23z"/> <path fill="#FBBC05" d="M5.84 14.1a6.6 6.6 0 0 1 0-4.2V7.06H2.18a11 11 0 0 0 0 9.88l3.66-2.84z"/> <path fill="#EA4335" d="M12 5.38c1.62 0 3.06.56 4.21 1.64l3.15-3.15C17.45 2.09 14.97 1 12 1 7.7 1 3.99 3.47 2.18 7.06l3.66 2.84C6.71 7.31 9.14 5.38 12 5.38z"/> </svg> <span>Sign up with Google</span> </button> </div> <p class="auth-switch-text"> Already have an account? <button type="button" class="auth-switch-btn" data-switch="login">Sign In</button> </p> </div> </div> </div> </div> <!-- Auth Modal Translations for JS --> <script> window.AUTH_TRANSLATIONS = {"login_title":"Welcome Back","login_subtitle":"Sign in to your account","register_title":"Create Account","register_subtitle":"Purchase a license to get started","tab_login":"Sign In","tab_register":"Sign Up","google_login":"Continue with Google","google_register":"Sign up with Google","or_divider":"or continue with email","name_label":"Full Name","name_placeholder":"John Doe","email_label":"Email Address","email_placeholder":"you@example.com","password_label":"Password","password_placeholder":"Enter your password","password_confirm_label":"Confirm Password","password_confirm_placeholder":"Confirm your password","remember_me":"Remember me","forgot_password":"Forgot password?","btn_login":"Sign In","btn_register":"Create Account","terms_agree":"I agree to the","terms_link":"Terms of Service","privacy_link":"Privacy Policy","and":"and","refund_link":"Refund Policy","legal_note":"By creating an account you confirm that you have read and accepted these policies. jekcms licenses are non-refundable digital products — the no-refund policy applies upon license activation.","no_account":"Don't have an account?","has_account":"Already have an account?","login_success":"Login successful! Redirecting...","register_success":"Account created! Please check your email.","error_email_required":"Email is required","error_password_required":"Password is required","error_name_required":"Name is required","error_password_mismatch":"Passwords do not match","error_invalid_email":"Please enter a valid email","error_password_weak":"Password must be at least 8 characters","error_terms_required":"Please accept the terms to continue","password_strength":"Password strength","strength_weak":"Weak","strength_medium":"Medium","strength_strong":"Strong"}; window.AUTH_LANG = 'en'; // Alt-klasör kurulumlarında (örn. localhost/jekcms) /api/auth yolunun doğru // çözülmesi için site kök öneki — auth.js bunu kullanır. window.JEK_SITE_BASE = ''; (function(){ var c=document.getElementById('amCanvas'); if(!c)return; var ctx=c.getContext('2d'); var ps=[]; function resize(){ c.width=c.offsetWidth; c.height=c.offsetHeight; } resize(); // Sürekli resize olayında geometri okuma reflow üretmesin: debounce + rAF. var rzT; window.addEventListener('resize',function(){ clearTimeout(rzT); rzT=setTimeout(function(){ requestAnimationFrame(resize); },150); }); for(var i=0;i<55;i++){ ps.push({x:Math.random()*c.width,y:Math.random()*c.height,v:Math.random()*0.25+0.05,o:Math.random()*0.35+0.1,r:Math.random()*1.5+0.5}); } function draw(){ ctx.clearRect(0,0,c.width,c.height); ps.forEach(function(p){ p.y-=p.v; if(p.y<0){p.y=c.height;p.x=Math.random()*c.width;} ctx.beginPath();ctx.arc(p.x,p.y,p.r,0,Math.PI*2); ctx.fillStyle='rgba(255,255,255,'+p.o+')';ctx.fill(); }); requestAnimationFrame(draw); } draw(); })(); </script> <!-- Newsletter signup band --> <section class="nl-band" aria-labelledby="nlBandTitle"> <div class="container nl-band-inner"> <div class="nl-band-copy"> <h2 id="nlBandTitle" class="nl-band-title">Be the first to know</h2> <p class="nl-band-sub">New features, release notes & CMS guides — a couple of emails a month, no spam.</p> </div> <form class="nl-band-form" id="nlBandForm" method="post" novalidate> <input type="hidden" name="csrf_token" value="4b88d8e35dadece93210ce63758098fa4ba66564bafe8bc3271f842559a9287c"> <input type="hidden" name="lang" value="en"> <input type="text" name="website" class="nl-hp" tabindex="-1" autocomplete="off" aria-hidden="true"> <div class="nl-band-row"> <input type="email" name="email" required placeholder="Your email address" aria-label="Your email address" class="nl-band-input"> <button type="submit" class="nl-band-btn"> <span class="nl-band-btn-text">Subscribe</span> <svg class="nl-band-btn-spin" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" aria-hidden="true" style="display:none;"><path d="M21 12a9 9 0 1 1-6.219-8.56"/></svg> </button> </div> <p class="nl-band-msg" id="nlBandMsg" role="status" aria-live="polite"></p> </form> </div> </section> <!-- Footer --> <footer class="footer"> <div class="container"> <div class="footer-grid"> <!-- Brand Column (35%) --> <div class="footer-brand"> <a href="/" class="logo"> <img src="/assets/images/logo-dikey.svg" alt="jekcms" class="site-logo" width="60" height="60" style="height:60px;width:auto;display:block;"> </a> <!-- jekcms-footer-build:v6-autodeploy --> <p class="footer-tagline">Smart Next-Gen CMS</p> <p class="footer-description">jekcms — the simple way to publish a fast, modern website. Beautiful themes, an easy editor, and SEO built in.</p> <div class="social-links"> <a href="https://x.com/jekcms" class="social-link" aria-label="X (Twitter)" target="_blank" rel="noopener"> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 24 24" fill="currentColor"><path d="M18.244 2.25h3.308l-7.227 8.26 8.502 11.24H16.17l-5.214-6.817L4.99 21.75H1.68l7.73-8.835L1.254 2.25H8.08l4.713 6.231zm-1.161 17.52h1.833L7.084 4.126H5.117z"/></svg> </a> <a href="https://github.com/jekcms" class="social-link" aria-label="GitHub" target="_blank" rel="noopener"> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 24 24" fill="currentColor"><path d="M12 0c-6.626 0-12 5.373-12 12 0 5.302 3.438 9.8 8.207 11.387.599.111.793-.261.793-.577v-2.234c-3.338.726-4.033-1.416-4.033-1.416-.546-1.387-1.333-1.756-1.333-1.756-1.089-.745.083-.729.083-.729 1.205.084 1.839 1.237 1.839 1.237 1.07 1.834 2.807 1.304 3.492.997.107-.775.418-1.305.762-1.604-2.665-.305-5.467-1.334-5.467-5.931 0-1.311.469-2.381 1.236-3.221-.124-.303-.535-1.524.117-3.176 0 0 1.008-.322 3.301 1.23.957-.266 1.983-.399 3.003-.404 1.02.005 2.047.138 3.006.404 2.291-1.552 3.297-1.23 3.297-1.23.653 1.653.242 2.874.118 3.176.77.84 1.235 1.911 1.235 3.221 0 4.609-2.807 5.624-5.479 5.921.43.372.823 1.102.823 2.222v3.293c0 .319.192.694.801.576 4.765-1.589 8.199-6.086 8.199-11.386 0-6.627-5.373-12-12-12z"/></svg> </a> <a href="https://linkedin.com/company/jekcms" class="social-link" aria-label="LinkedIn" target="_blank" rel="noopener"> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 24 24" fill="currentColor"><path d="M20.447 20.452h-3.554v-5.569c0-1.328-.027-3.037-1.852-3.037-1.853 0-2.136 1.445-2.136 2.939v5.667H9.351V9h3.414v1.561h.046c.477-.9 1.637-1.85 3.37-1.85 3.601 0 4.267 2.37 4.267 5.455v6.286zM5.337 7.433c-1.144 0-2.063-.926-2.063-2.065 0-1.138.92-2.063 2.063-2.063 1.14 0 2.064.925 2.064 2.063 0 1.139-.925 2.065-2.064 2.065zm1.782 13.019H3.555V9h3.564v11.452zM22.225 0H1.771C.792 0 0 .774 0 1.729v20.542C0 23.227.792 24 1.771 24h20.451C23.2 24 24 23.227 24 22.271V1.729C24 .774 23.2 0 22.222 0h.003z"/></svg> </a> <a href="https://www.youtube.com/@jekcms" class="social-link" aria-label="YouTube" target="_blank" rel="noopener"> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 24 24" fill="currentColor"><path d="M23.498 6.186a3.016 3.016 0 0 0-2.122-2.136C19.505 3.545 12 3.545 12 3.545s-7.505 0-9.377.505A3.017 3.017 0 0 0 .502 6.186C0 8.07 0 12 0 12s0 3.93.502 5.814a3.016 3.016 0 0 0 2.122 2.136c1.871.505 9.376.505 9.376.505s7.505 0 9.377-.505a3.015 3.015 0 0 0 2.122-2.136C24 15.93 24 12 24 12s0-3.93-.502-5.814zM9.545 15.568V8.432L15.818 12l-6.273 3.568z"/></svg> </a> </div> </div> <!-- Links Columns (65%) --> <div class="footer-links-wrapper"> <!-- Product --> <div class="footer-links"> <h3>Product</h3> <ul> <li><a href="/features">Features</a></li> <li><a href="/wordpress-alternative">WordPress Alternative</a></li> <li><a href="/pricing">Pricing</a></li> <li><a href="/demo">Demo</a></li> <li><a href="/docs">Documentation</a></li> <li><a href="/changelog">Changelog</a></li> </ul> </div> <!-- Support --> <div class="footer-links"> <h3>Support</h3> <ul> <li><a href="/help">Help Center</a></li> <li><a href="/api-reference">API Reference</a></li> <li><a href="/docs">Documentation</a></li> </ul> </div> <!-- Company --> <div class="footer-links"> <h3>Company</h3> <ul> <li><a href="/about">About</a></li> <li><a href="/blog">Blog</a></li> <li><a href="/contact">Contact</a></li> </ul> </div> <!-- Legal --> <div class="footer-links"> <h3>Legal</h3> <ul> <li><a href="/privacy">Privacy Policy</a></li> <li><a href="/terms">Terms of Service</a></li> <li><a href="/cookie-policy">Cookie Policy</a></li> <li><a href="/kvkk">KVKK</a></li> <li><a href="/refund">Refund Policy</a></li> <li><a href="/report-piracy">Report Piracy</a></li> </ul> </div> </div> </div> <div class="footer-bottom"> <div class="footer-bottom-content"> <p class="footer-copyright"> © 2026 jekcms. All rights reserved. </p> <p class="footer-subsidiary"> jekcms is an <a href="https://alfadizayn.com" target="_blank" rel="noopener">ALFA Dizayn</a> brand. </p> </div> </div> </div> </footer> <!-- Newsletter band handler --> <script> (function () { var f = document.getElementById('nlBandForm'); if (!f) return; var msg = document.getElementById('nlBandMsg'); var btn = f.querySelector('.nl-band-btn'); var spin = f.querySelector('.nl-band-btn-spin'); var txt = f.querySelector('.nl-band-btn-text'); var base = ""; var T = { invalid: "Please enter a valid email.", network: "Network error. Try again." }; f.addEventListener('submit', function (e) { e.preventDefault(); msg.textContent = ''; msg.className = 'nl-band-msg'; var email = (f.email.value || '').trim(); if (!email || !/^[^@\s]+@[^@\s]+\.[^@\s]+$/.test(email)) { msg.textContent = T.invalid; msg.classList.add('is-err'); return; } btn.disabled = true; spin.style.display = 'inline'; txt.style.opacity = '.6'; fetch(base + '/marketing-includes/ajax/newsletter-handler.php', { method: 'POST', body: new FormData(f) }) .then(function (r) { return r.json(); }) .then(function (d) { btn.disabled = false; spin.style.display = 'none'; txt.style.opacity = '1'; msg.textContent = d.message || ''; msg.classList.add(d.success ? 'is-ok' : 'is-err'); if (d.success) { f.email.value = ''; } }) .catch(function () { btn.disabled = false; spin.style.display = 'none'; txt.style.opacity = '1'; msg.textContent = T.network; msg.classList.add('is-err'); }); }); })(); </script> <!-- Scripts --> <script defer src="/marketing-assets/js/main.js?v=20260709b"></script> <script defer src="/marketing-assets/js/auth.js?v=20260610"></script> </body> </html>