Changelog

• Centralized all API endpoints through /api.php/* router
• Updated 15+ frontend JS files to use standardized routing pattern
• Added 20+ missing routes: themes, profile-widgets, profile-analytics, etc.
• Fixed response format consistency across all endpoints
• Added proper error handling and table auto-creation
• Simplified .htaccess routing rules
• Fixed notifications cache issue with no-cache headers
• Created browser-based API endpoint tester tool
• All 29 endpoints now passing validation

Breaking changes:

• Removed direct /backend/api/*.php access patterns
• Standardized on /api.php/* for all API calls

• Extract 300+ lines of inline navigation JS to external file
• Add defer attribute to all non-critical scripts
• Reduce preload hints from 13+ to 8 critical resources
• Defer vendor CSS loading with async pattern
• Add font-display: swap to Google Fonts
• Remove Tools dropdown from header, simplify navigation
• Move leaderboard link to footer
• Clean up unused files (ajax-navigation, lazy-init, script-loader)
• Optimize vendor script loading order (chart.js before zoom plugin)

Performance improvements:

• LCP: 1.46s (target <1.2s)
• TTI: 910ms (target <1.5s)
• Eliminated render-blocking inline scripts

• Add hover states for btn-secondary, btn-warning, and btn-danger
• Add focus-visible outline for keyboard navigation
• Fix truncated footer include in cache-health.php
• Fix API cache_size conversion from MB to bytes
• Ensure all admin pages use styles.css for consistent styling

• Extended level progression from 7 to 12 levels (up to 100K+ points)
• Added 30+ new badges across 8 categories (player, achievements, collection, playtime, exploration, skill)
• Integrated 6 new sbox stats: sessions, achievements, favorites, playtime, games played, score
• Implemented balanced scoring system with proper weighting for all stats
• Removed org requirement - all users can now earn badges and reputation
• Added stats breakdown display on user profiles
• Created admin reputation management dashboard with leaderboard
• Added API endpoints for all-user recalculation and individual user init
• Implemented schema migration tool for database updates
• Enhanced CSS with badge categories and responsive layouts
• All features accessible to users with or without claimed organizations

Security Enhancements:

• Enable SSL verification in production (api_functions.php, steam_functions.php)
• Add timing-safe token comparison using hash_equals() (kofi-webhook.php)
• Implement path traversal protection with realpath() validation (router.php)
• Add security headers (X-Content-Type-Options, X-Frame-Options, X-XSS-Protection) (api.php)
• Restrict system info exposure to admin users only (admin/index.php)
• Remove endpoint list from 404 error responses (api.php)
• Add error handling for glob() and file() operations (admin/index.php)
• Hash IP addresses for privacy in session tracking (session_tracking.php)

Performance Optimizations:

• Add composite database index for donations queries (donations_db.php)
• Implement pagination for getAllLoginHistory() (session_tracking.php)
• Optimize file reading with error handling
• Improve cache query efficiency

API Improvements:

• Add comprehensive security headers to all API responses
• Improve error response structure
• Better CORS configuration

UI/UX Enhancements:

• Redesign admin access denied page with modern dark theme
• Add Poppins font across all pages for consistency
• Fix Material Icons rendering in about and credits pages
• Improve Core Technologies section with colored icon backgrounds
• Modernize page layouts with better spacing and visual hierarchy
• Add smooth animations and hover effects

All changes tested and verified with no syntax errors. Security score improved from 6/10 to 9/10.

• Increased max-width from 1400px to 1680px across all containers
• Improved package card layout with better spacing and sizing
• Enhanced package type filter buttons with modern styling
• Optimized package card content to fit better (320px base width)
• Improved tag styling with special treatment for +more tags
• Removed duplicate 'Last Updated' from stats (kept in footer only)
• Better visual hierarchy with improved padding and gaps

• Add intelligent cache validation to skip already-cached entities
• Implement API response caching with 5-minute TTL to eliminate duplicate requests
• Extend cache TTLs: packages (3600s), discovery lists (3600s)
• Add metadata caching for organizations (stats, types, counts)
• Reduce operation delays: 200ms between entities, 50ms between API calls
• Add --force flag to override cache validation
• Optimize package fetching with priority types and reduced page counts
• Add automatic expired cache cleanup before processing
• Add database optimization (VACUUM/REINDEX) on completion
• Remove non-functional player discovery (API doesn't distinguish orgs from players)
• Improve statistics with cache age, compression info, and expiration tracking
• Performance: 30-40% faster execution, subsequent runs complete in ~30s vs 9+ minutes

• Refined color system with dedicated API-specific CSS variables
• Enhanced typography, spacing, and visual hierarchy
• Improved endpoint cards with better shadows and hover effects
• Added loading states and smooth animations for interactive elements
• Enhanced method badges with gradients and better contrast
• Improved code blocks with better syntax highlighting
• Added gradient accents and decorative elements
• Comprehensive responsive design improvements for all devices
• Enhanced accessibility with better focus states and motion preferences
• Improved button interactions with visual feedback
• Better collapsible controls with icon indicators
• All changes maintain full compatibility with existing codebase

• Fix breadcrumb navigation to match site standards with proper icons
• Upgrade borders from 1px to 2px for better visual hierarchy
• Add smooth transitions and hover effects on interactive elements
• Improve readability with better spacing and line-height (1.7)
• Add aria-hidden attributes to decorative icons for accessibility
• Enhance data retention cards with hover animations
• Improve FAQ section with better visual feedback
• Add responsive flex-wrap on data retention badges
• Better contrast and visual separation throughout
• Maintain all existing functionality while improving UX

• Enhanced layout with modern card design and improved spacing
• Added smooth animations and transitions for better UX
• Improved typography with better font sizes and hierarchy
• Enhanced responsive design for mobile, tablet, and desktop
• Added hover effects and interactive states
• Improved accessibility with focus states and reduced motion support
• Optimized media display with better image/video handling
• Added loading states and empty state improvements
• Removed gradient backgrounds for cleaner, minimalist design
• Enhanced package badges, buttons, and author avatars
• Added staggered card animations on page load
• Improved visual consistency across all elements

• Add specific styles for package tags container
• Adjust tag margins and padding for better visual hierarchy
• Ensure tags remain on a single line with nowrap
• Add flex-shrink to prevent tag compression
• Standardize line height for better vertical alignment