Update to the latest release

.gitattributes

@@ -0,0 +1,5 @@
+.gitattributes export-ignore
+.gitignore export-ignore
+/config.php export-ignore
+/.github export-ignore
+/.vscode export-ignore

.github/workflows/ci.yml

@@ -0,0 +1,59 @@
+name: CI
+
+on: [push, pull_request]
+
+jobs:
+  ci:
+    runs-on: ubuntu-20.04
+
+    strategy:
+      matrix:
+        php: ['7.4', '8.0', '8.1', '8.2']
+
+    name: PHP ${{ matrix.php }}
+
+    services:
+      mysql:
+        image: mysql:8
+        env:
+          MYSQL_ALLOW_EMPTY_PASSWORD: yes
+          MYSQL_DATABASE: phproject
+        ports:
+          - 3306/tcp
+        options: >-
+          --health-cmd "mysqladmin ping"
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 3
+
+    steps:
+    - uses: shivammathur/setup-php@v2
+      with:
+        php-version: ${{ matrix.php }}
+        tools: phpunit:8.5
+      env:
+        COMPOSER_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+    - uses: actions/checkout@v3
+
+    - uses: actions/cache@v3
+      env:
+        cache-name: cache-composer
+      with:
+        path: ~/.composer
+        key: ${{ runner.os }}-ci-${{ env.cache-name }}-${{ hashFiles('**/composer.lock') }}
+        restore-keys: |
+          ${{ runner.os }}-ci-${{ env.cache-name }}-
+          ${{ runner.os }}-ci-
+          ${{ runner.os }}-
+
+    - name: Syntax check
+      run: if find . -name "*.php" ! -path "./vendor/*" -exec php -l {} 2>&1 \; | grep "syntax error, unexpected"; then exit 1; fi
+
+    - name: Composer
+      run: composer install -q --no-ansi --no-interaction --no-scripts --no-progress --prefer-dist
+
+    - run: vendor/bin/phpcs
+
+    - name: Install Phproject
+      run: php install.php --site-name=Test --site-url=http://localhost/ --timezone=America/Phoenix --admin-username=test [email protected] --admin-password=secret --db-host=127.0.0.1 --db-port=${{ job.services.mysql.ports['3306'] }} --db-user=root

.github/workflows/release.yml

@@ -0,0 +1,32 @@
+name: Release Assets
+
+on:
+  push:
+    tags:
+      - v1.**
+
+jobs:
+  publish-assets:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v3
+
+    - name: Install dependencies
+      run: |
+        curl -o composer.phar -L https://getcomposer.org/composer-stable.phar
+        php composer.phar install --no-ansi --no-interaction --no-dev
+
+    - name: Clean up project
+      run: |
+        rm -rf .git* .vscode
+        rm -f composer.phar
+
+    - name: Build archive
+      run: zip -r /tmp/phproject-${{ github.ref_name }}.zip "$GITHUB_WORKSPACE"
+
+    - name: Upload archive
+      uses: softprops/action-gh-release@v1
+      with:
+        token: ${{ secrets.GITHUB_TOKEN }}
+        files: |
+          /tmp/phproject-${{ github.ref_name }}.zip

.gitignore

@@ -1,2 +1,6 @@
 plugin
 config.ini
+config.php
+/vendor/
+/phpunit
+*.cache

.htaccess

@@ -7,15 +7,8 @@ RewriteEngine On
 #
 # RewriteBase /
 
-RewriteCond %{REQUEST_URI} app\/(controller|dict|helper|model|view)
-RewriteRule app\/(controller|dict|helper|model|view) - [R=404]
-
-RewriteCond %{REQUEST_URI} \.ini$
-RewriteRule \.ini$ - [R=404]
-
-RewriteCond %{REQUEST_URI} log\/[a-zA-Z1-9]+\.log
-RewriteRule log\/[a-zA-Z1-9]+\.log - [R=404]
-
+RewriteRule ^app\/(controller|dict|helper|model|view) - [R=404]
+RewriteRule ^(tmp|log)\/|\.ini$ - [R=404]
 
 RewriteCond %{REQUEST_FILENAME} !-l
 RewriteCond %{REQUEST_FILENAME} !-f

.phpcs.xml

@@ -0,0 +1,30 @@
+<?xml version="1.0"?>
+<ruleset xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" name="phproject" xsi:noNamespaceSchemaLocation="./vendor/squizlabs/php_codesniffer/phpcs.xsd">
+    <!-- Check app code -->
+    <file>app/</file>
+
+    <!-- Allow warnings in CI -->
+    <config name="ignore_warnings_on_exit" value="1"/>
+
+    <!-- Include modified PSR-12 standard -->
+    <rule ref="PSR12">
+        <!-- Backwards compatibilty exceptions -->
+        <exclude name="PSR1.Classes.ClassDeclaration.MissingNamespace"/>
+        <exclude name="PSR1.Methods.CamelCapsMethodName.NotCamelCaps"/>
+        <exclude name="PSR2.Methods.MethodDeclaration.Underscore"/>
+    </rule>
+
+    <!-- Ban some functions -->
+    <rule ref="Generic.PHP.DeprecatedFunctions"/>
+    <rule ref="Generic.PHP.ForbiddenFunctions">
+        <properties>
+            <property name="forbiddenFunctions" type="array">
+                <element key="sizeof" value="count"/>
+                <element key="delete" value="unset"/>
+                <element key="print" value="echo"/>
+                <element key="is_null" value="null"/>
+                <element key="create_function" value="null"/>
+            </property>
+        </properties>
+    </rule>
+</ruleset>

.vscode/extensions.json

@@ -0,0 +1,7 @@
+{
+    "recommendations": [
+        "bmewburn.vscode-intelephense-client",
+        "xdebug.php-debug",
+        "shevaua.phpcs"
+    ]
+}

.vscode/settings.json

@@ -0,0 +1,3 @@
+{
+    "phpcs.standard": "PSR12"
+}

CONTRIBUTING.md

@@ -0,0 +1,13 @@
+# Contributing to Phproject
+
+## Issues
+
+Found a bug, or want to request a new feature? Great! Just make sure there isn't an existing issue before creating a new one, and try to provide as much detail as possible.
+
+## Pull Requests
+
+Thanks for contributing! We have a few basic guidelines for helping us accept your pull requests.
+
+1. New translations should be added on [Crowdin](https://crowdin.com/project/phproject) rather than through a pull request.
+2. Code style should follow the [PSR-12 standard](https://www.php-fig.org/psr/psr-12/).
+3. New features may be best implemented through [a plugin](https://www.phproject.org/plugins.html) rather than into the core code.

README.md

@@ -1,16 +1,19 @@
-[![Gitter Chat](https://img.shields.io/badge/Gitter-Join%20Chat-3498DB.svg)](https://gitter.im/Alanaktion/phproject?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge)
-[![Codacy Badge](https://api.codacy.com/project/badge/grade/2e382a33465448868ca2c0d4b1c937db)](https://www.codacy.com/app/alanaktion/phproject)
-[![Build Status](https://api.travis-ci.org/Alanaktion/phproject.svg)](https://travis-ci.org/Alanaktion/phproject)
-[![Crowdin](https://d322cqt584bo4o.cloudfront.net/phproject/localized.png)](https://crowdin.com/project/phproject)
+[![CI](https://github.com/Alanaktion/phproject/workflows/CI/badge.svg)](https://github.com/Alanaktion/phproject/actions?query=workflow%3ACI)
+[![Crowdin](https://badges.crowdin.net/phproject/localized.svg)](https://crowdin.com/project/phproject)
 
 Phproject
-===========
+=========
 *A high-performance project management system in PHP*
 
+[![20i FOSS Awards](https://i.imgur.com/KkovAqB.png)](https://www.20i.com/foss-awards/category/project-management)
+
 ### Installation
-Simply clone the repo into a web accessible directory, go to the page in a browser, and fill in your database connection details.
+Download and extract [the latest release](https://github.com/Alanaktion/phproject/releases/latest) a web accessible directory, go to the page in a browser, and fill in your database connection details.
 
 Detailed requirements and installation instructions are available at [phproject.org](http://www.phproject.org/install.html).
 
+### Development
+Phproject uses [Composer](https://getcomposer.org/) for dependency management. After cloning the repository, run `composer install` to install the required packages.
+
 ### Contributing
-Phproject is maintained as an open source project for use by anyone around the world under the [GNU General Public License](http://www.gnu.org/licenses/gpl-3.0.txt). If you find a bug or would like a new feature added, [open an issue](https://github.com/Alanaktion/phproject/issues/new) or [submit a pull request](https://github.com/Alanaktion/phproject/compare/) with new code.
+Phproject is maintained as an open source project for use by anyone around the world under the [GNU General Public License](http://www.gnu.org/licenses/gpl-3.0.txt). If you find a bug or would like a new feature added, [open an issue](https://github.com/Alanaktion/phproject/issues/new) or [submit a pull request](https://github.com/Alanaktion/phproject/compare/) with new code. If you want to help with translation, [you can submit translations via Crowdin](https://crowdin.com/project/phproject).

SECURITY.md

@@ -0,0 +1,13 @@
+# Security Policy
+
+## Supported Versions
+
+Since our team is small, and we don't update often, we only support the latest release of Phproject. It is highly recommended that you update whenever we release a new version, as it likely includes major bug fixes, and can impact the security of your site.
+
+## Reporting a Vulnerability
+
+If you find an issue with the security of Phproject, you may report the vulnerability on [huntr.dev](https://huntr.dev/bounties/disclose), or let me know personally via email at [email protected]. If emailing, I recommend encrypting your communication with [my PGP public key](https://keybase.io/alanaktion/pgp_keys.asc).
+
+I'll do my best to get back to you within 48 hours, at least with an idea of when we can fix the issue. Major issues that involve significant changes to the application can take several weeks since no one works on this project full time, but we'll do what we can to fix things.
+
+If it's been more than a week and we haven't replied, or if we have replied but it's been a while and we haven't communicated or fixed the issue you found, let us know and we'll invite you to a private fork where we can collaborate on a fix.