Application Scope

Added Contact Us link to header More dropdown, mobile navigation, and footer Resources section. Updated About page with Quick Links section for Sitemap, Application Scope, and Contact Us.

Admin settings to enable/disable 2FA site-wide and require 2FA for admin accounts. Includes live adoption stats showing users and admins with 2FA enabled.

New Contact Messages tab in admin panel for viewing, filtering, and managing contact form submissions. Includes status updates, admin notes, message deletion, and contact page settings.

Backend API endpoint for contact form submissions with input validation, honeypot spam detection, and IP-based rate limiting (5 per hour).

Professional Contact Us page with interactive globe map (Leaflet.js), contact details, inquiry categories, and modal contact form with CAPTCHA challenge to prevent spam.

Added "Import Other Archives (1981-1989, 1998-1999 to DB)" option to the admin import scripts dropdown. Supports single-year or batch processing via CLI argument or admin panel.

Cleaned text files for 1981, 1983-1989, 1998, and 1999 editions copied to /data/archives/hathitrust/. Automatically available in the HathiTrust Reader, Download Center, and Resource Library. SQL backup files generated for each year in /data/import/.

Comprehensive alias map resolving 50+ historical country names to current database entries. Covers Cold War-era names (USSR, East/West Germany, Yugoslavia), colonial names (Zaire, Rhodesia, Burma), and format-specific variants (comma-inverted names like "Korea, North").

Two dedicated parsers for Project Gutenberg text editions. The 1998 parser handles @Country:Section markers with underscore separators. The 1999 parser handles ====== block separators with @CountryName prefixes. Both resolve country names via aliasing and produce structured field-value records.

Parses scanned OCR text files for years 1981, 1983-1989. Detects country names by matching against the database, identifies section headers (Geography, People, Government, Economy, Communications, Defense Forces), and extracts field-value pairs with continuation line support. Handles both ALL-CAPS and mixed-case section headers.

New import script process_other_archives.php parses CIA World Factbook text editions from Internet Archive and Project Gutenberg. Supports three parser modes: OCR (1981, 1983-1989), Gutenberg98 with @Country:Section markers (1998), and Gutenberg with ====== separators (1999). Imported 124,630 records across 1,754 country-editions.

All destructive GET-based admin actions (delete/toggle for announcements, ads, resources, paths, lessons, classrooms, API keys) now require a CSRF token and cast IDs to integer to prevent injection.

All 7 input handlers in api/learn.php now use InputSanitizer: enrollment, lesson completion, bookmarks, and path import. Slug validation, score range enforcement, and lesson content sanitization added.

All 12 input handlers in api/classroom.php now use InputSanitizer: class creation, assignments, discussions, grading, rubrics, bulk import, and moderation. Array type checks added for nested inputs.

New InputSanitizer class with 10 methods: text, richText, positiveInt, float, enum, email, url, slug, csvList, and json. Strips dangerous HTML (scripts, iframes, event handlers, JS URIs) while preserving safe formatting tags.

All admin POST forms (settings, announcements, ads, resources, learning paths, lessons) now include CSRF tokens. All destructive GET actions (delete, toggle) require a valid token parameter. Uses Auth::generateCsrfToken/verifyCsrfToken with 2-hour expiry.

Replaced hardcoded admin credentials with the Auth system. Admin panel now requires login via the users table with role-based access control — only admin and superadmin roles are permitted. Includes full Auth features: rate limiting, account lockout, and session management.

Added ARIA roles and labels to main navigation, notification bell, and desktop menu bar for screen reader support.

Enrollment trend line chart and enrollments vs completions bar chart added to admin Learning Paths tab using Chart.js.

Students can flag discussion posts. Teachers see flagged posts and can approve or reject them. Notifications sent to teachers.

Real-time leaderboard ranking students by average score and assignments completed. Cached in database for performance.

My Progress page with XP chart, streak calendar, learning path progress bars, recent quizzes, achievements, and quick links.

Export learning paths as JSON for backup or sharing. Import JSON to create new paths with all lessons. Admin-only import.

Toggle dark mode in admin panel via nav bar button. CSS-based dark theme applied to all cards, tables, inputs, and text.

Web app manifest, service worker with cache-first for assets and network-first for pages, and automatic SW registration.

RateLimiter and ApiMiddleware classes enforce per-key hourly rate limits with X-RateLimit headers and 429 responses.

Reusable Pagination helper class with rendered page controls. Applied to classrooms table with configurable per-page limits.

SimpleCache class provides database-backed caching with TTL, remember pattern, enable/disable, and automatic cleanup.

Teachers can import multiple students into a classroom by username or email. Handles duplicates, capacity limits, and reports results.

Teachers can archive and unarchive classes. Archived classes are preserved but hidden from active views.

Real-time notification bell in header with dropdown showing assignment alerts, grade notifications, class joins, path completions, and moderation flags.

Teachers can create detailed rubrics with criteria and point breakdowns for assignments. Rubric-based grading with per-criterion scores and feedback.

Lessons now support file attachments (PDF, images) with sort ordering. Attachments are displayed alongside lesson content.

Users can bookmark lessons for quick access later. Bookmarks include optional notes and are accessible from the My Progress dashboard.

Paths can now require completion of a prerequisite path before enrollment. Enforced in API and shown in UI.

Added 9 new database tables for Learning Paths and Classroom features: learning_paths, learning_lessons, user_path_enrollment, user_lesson_progress, classrooms, classroom_students, classroom_assignments, assignment_submissions, classroom_discussions. Seeded 8 learning paths with 36 lessons containing rich educational content.

Full classroom management system. Teachers can create classes with unique 6-character join codes, invite students, create quiz assignments with configurable difficulty/question count/deadlines/max attempts, view submission status, remove students, and export grades as CSV. Students join classes via code, view assignments with due dates, and submit work. Includes per-class and per-assignment threaded discussion boards with teacher badges. 5 new database tables: classrooms, classroom_students, classroom_assignments, assignment_submissions, classroom_discussions.

New structured course system with 8 learning paths (World Geography 101, Global Economics, Demographics Deep Dive, World Governments & Politics, Africa Focus, Asia & Oceania Focus, Europe Focus, Americas Focus). Each path contains 4-5 lessons following a Reading → Visual → Quiz → Summary flow. Features include enrollment tracking, per-lesson progress, XP rewards, Chart.js data visualizations from live country data, integrated quiz engine, and certificate of completion. 36 lessons total with rich educational content.

Created new sitemap-page.php with tree and grid views. Features expandable sections, page badges with counts, color-coded categories, and smooth animations.

Added Edition Updates section to analytics page showing full/partial edition counts, records by decade breakdown, and complete edition table with coverage indicators.

API key requests now require authenticated users. Form pre-fills name and email from user profile. Non-logged-in users see a login prompt.

Added National Anthems tab to the Download Center with search, play/pause controls, progress bar, download buttons, and session listen/download counters.

Added 15 new resources including edition guides, analysis documents, field references, and educational materials. Total: 36 resources.

Added 61 new curated facts covering geography, demographics, economics, government, military, infrastructure, and culture. Total: 181 facts.

Created World Regions, World Religions, Independence Dates, Country Climates, and National Anthems flashcard decks. Total: 10 system decks with 1,400+ cards.

Rewrote quiz question generation to use bulk pre-fetched data instead of per-country queries. Quiz generation is now instant instead of timing out.

Added 81 new glossary terms covering economic, demographic, geographic, government, military, infrastructure, and energy categories. All terms include related_field mappings for country data tooltips.