Update composer.json

admin.php

@@ -462,6 +462,46 @@ $sessionIdleTimeout = get_session_idle_timeout();
 $calendarBlockReasons = get_calendar_block_reasons();
 $brainstormCategories = get_brainstorm_categories();
 
+// PHP Runtime, Database & Security Patch Status
+$phpVersion = PHP_VERSION;
+$phpSapi = php_sapi_name();
+$phpMemoryLimit = ini_get('memory_limit') ?: 'Onbekend';
+$phpMaxExecution = ini_get('max_execution_time') ? ini_get('max_execution_time') . 's' : 'Onbeperkt';
+$phpOpcacheEnabled = function_exists('opcache_get_status') && !empty(opcache_get_status(false)['opcache_enabled']);
+$phpOpensslVersion = defined('OPENSSL_VERSION_TEXT') ? OPENSSL_VERSION_TEXT : 'Niet gedetecteerd';
+
+// PHP Security Patch status (CVE-2026-109618 / CVE-2026-109619 PHP2Shell)
+// Gepatched in 8.2.35, 8.3.36, 8.4.27, 8.5.12
+$isPhpPatched = false;
+$patchRequiredVersion = '';
+$isSupportedPhpBranch = true;
+
+if (version_compare($phpVersion, '8.2.0', '>=') && version_compare($phpVersion, '8.3.0', '<')) {
+    $patchRequiredVersion = '8.2.35';
+    $isPhpPatched = version_compare($phpVersion, '8.2.35', '>=');
+} elseif (version_compare($phpVersion, '8.3.0', '>=') && version_compare($phpVersion, '8.4.0', '<')) {
+    $patchRequiredVersion = '8.3.36';
+    $isPhpPatched = version_compare($phpVersion, '8.3.36', '>=');
+} elseif (version_compare($phpVersion, '8.4.0', '>=') && version_compare($phpVersion, '8.5.0', '<')) {
+    $patchRequiredVersion = '8.4.27';
+    $isPhpPatched = version_compare($phpVersion, '8.4.27', '>=');
+} elseif (version_compare($phpVersion, '8.5.0', '>=')) {
+    $patchRequiredVersion = '8.5.12';
+    $isPhpPatched = version_compare($phpVersion, '8.5.12', '>=');
+} else {
+    // PHP < 8.2 (End of Life)
+    $patchRequiredVersion = '8.2.35+';
+    $isPhpPatched = false;
+    $isSupportedPhpBranch = false;
+}
+
+$dbVersion = 'Onbekend';
+try {
+    $dbVersion = (string)$db->query("SELECT VERSION()")->fetchColumn() ?: 'Onbekend';
+} catch (Throwable $e) {
+    $dbVersion = 'Niet beschikbaar';
+}
+
 // Redirect URI
 $redirectUri = rtrim(APP_URL, '/') . '/auth/callback_microsoft.php';
 
@@ -1973,6 +2013,94 @@ require_once __DIR__ . '/includes/header.php';
 
         <!-- Tab 6: Systeem & Database (inclusief SMTP Mail Server & AI Co-Pilot) -->
         <div id="tab-pane-system" class="admin-tab-pane space-y-8 hidden">
+            <!-- PHP Runtime & Serverstatus (Beveiliging & Environment) -->
+            <div class="fociz-card p-6 sm:p-7 space-y-6">
+                <div class="flex flex-col sm:flex-row sm:items-center justify-between gap-3 pb-4 border-b border-slate-100 dark:border-slate-800/80">
+                    <div class="flex items-center space-x-3.5">
+                        <div class="w-12 h-12 rounded-xl bg-violet-50 dark:bg-violet-950/40 border border-violet-200 dark:border-violet-800/60 flex items-center justify-center text-violet-600 dark:text-violet-400 font-bold shadow-xs">
+                            <i data-lucide="cpu" class="w-6 h-6"></i>
+                        </div>
+                        <div>
+                            <div class="flex items-center space-x-2">
+                                <h2 class="text-lg font-bold text-slate-900 dark:text-white tracking-tight">PHP Runtime & Serverstatus</h2>
+                                <span class="px-2 py-0.5 rounded-md bg-violet-100 dark:bg-violet-900/50 text-violet-800 dark:text-violet-300 font-mono text-xs font-bold">
+                                    PHP <?= htmlspecialchars($phpVersion) ?>
+                                </span>
+                            </div>
+                            <p class="text-xs text-slate-500 dark:text-slate-400">Actuele PHP versie, beveiligingsstatus, server interface en resource limieten</p>
+                        </div>
+                    </div>
+                    <?php if ($isPhpPatched): ?>
+                        <span class="px-3 py-1.5 rounded-full bg-teal-50 dark:bg-teal-950/40 text-teal-700 dark:text-teal-400 border border-teal-200 dark:border-teal-800/60 text-xs font-bold inline-flex items-center space-x-1.5 self-start sm:self-auto">
+                            <i data-lucide="shield-check" class="w-4 h-4 flex-shrink-0"></i>
+                            <span>PHP Beveiliging: Up-to-date</span>
+                        </span>
+                    <?php else: ?>
+                        <span class="px-3 py-1.5 rounded-full bg-amber-50 dark:bg-amber-950/40 text-amber-700 dark:text-amber-400 border border-amber-200 dark:border-amber-800/60 text-xs font-bold inline-flex items-center space-x-1.5 self-start sm:self-auto">
+                            <i data-lucide="alert-triangle" class="w-4 h-4 flex-shrink-0 text-amber-500"></i>
+                            <span>Update Aanbevolen (Min. <?= htmlspecialchars($patchRequiredVersion) ?>)</span>
+                        </span>
+                    <?php endif; ?>
+                </div>
+
+                <!-- Beveiligingsalert / Patchadvies -->
+                <?php if (!$isPhpPatched): ?>
+                <div class="p-4 rounded-xl bg-amber-500/10 border border-amber-500/20 text-amber-900 dark:text-amber-200 text-xs space-y-2">
+                    <div class="flex items-center space-x-2 font-bold text-amber-800 dark:text-amber-300">
+                        <i data-lucide="alert-circle" class="w-4 h-4 flex-shrink-0"></i>
+                        <span>Beveiligingsupdate Beschikbaar (CVE-2026-109618 / CVE-2026-109619)</span>
+                    </div>
+                    <p class="leading-relaxed">
+                        Er is recent een kritieke PHP-beveiligingsupdate uitgebracht. Jouw server draait momenteel op <strong class="font-mono"><?= htmlspecialchars($phpVersion) ?></strong>. 
+                        <?php if (!$isSupportedPhpBranch): ?>
+                            Deze PHP-versie is end-of-life. We adviseren je webhosting/server zo spoedig mogelijk te upgraden naar minimaal <strong>PHP 8.2.35</strong> of hoger.
+                        <?php else: ?>
+                            We adviseren om via het hosting controlepaneel (zoals DirectAdmin of cPanel) of via je serverbeheerder de PHP-versie te updaten naar minimaal <strong class="font-mono"><?= htmlspecialchars($patchRequiredVersion) ?></strong>.
+                        <?php endif; ?>
+                    </p>
+                </div>
+                <?php else: ?>
+                <div class="p-3.5 rounded-xl bg-teal-500/10 border border-teal-500/20 text-teal-900 dark:text-teal-200 text-xs flex items-center space-x-2.5">
+                    <i data-lucide="shield-check" class="w-4 h-4 flex-shrink-0 text-teal-600 dark:text-teal-400"></i>
+                    <span>Deze PHP-versie (<strong class="font-mono"><?= htmlspecialchars($phpVersion) ?></strong>) bevat de recentste beveiligingspatches tegen de bekende PHP2Shell kwetsbaarheden.</span>
+                </div>
+                <?php endif; ?>
+
+                <!-- Grid met systeemeigenschappen -->
+                <div class="grid grid-cols-1 sm:grid-cols-2 lg:grid-cols-4 gap-3 text-xs">
+                    <div class="p-3.5 rounded-xl bg-slate-50 dark:bg-[#0c0f17] border border-slate-200 dark:border-slate-800/80">
+                        <span class="text-slate-500 dark:text-slate-400 block text-[11px] mb-1">PHP SAPI / Interface</span>
+                        <span class="font-mono font-bold text-slate-900 dark:text-white"><?= htmlspecialchars($phpSapi) ?></span>
+                    </div>
+                    <div class="p-3.5 rounded-xl bg-slate-50 dark:bg-[#0c0f17] border border-slate-200 dark:border-slate-800/80">
+                        <span class="text-slate-500 dark:text-slate-400 block text-[11px] mb-1">Geheugenlimiet (Memory)</span>
+                        <span class="font-mono font-bold text-slate-900 dark:text-white"><?= htmlspecialchars($phpMemoryLimit) ?></span>
+                    </div>
+                    <div class="p-3.5 rounded-xl bg-slate-50 dark:bg-[#0c0f17] border border-slate-200 dark:border-slate-800/80">
+                        <span class="text-slate-500 dark:text-slate-400 block text-[11px] mb-1">Max Execution Time</span>
+                        <span class="font-mono font-bold text-slate-900 dark:text-white"><?= htmlspecialchars($phpMaxExecution) ?></span>
+                    </div>
+                    <div class="p-3.5 rounded-xl bg-slate-50 dark:bg-[#0c0f17] border border-slate-200 dark:border-slate-800/80">
+                        <span class="text-slate-500 dark:text-slate-400 block text-[11px] mb-1">Database Versie</span>
+                        <span class="font-mono font-bold text-slate-900 dark:text-white truncate block" title="<?= htmlspecialchars($dbVersion) ?>"><?= htmlspecialchars($dbVersion) ?></span>
+                    </div>
+                </div>
+
+                <div class="grid grid-cols-1 sm:grid-cols-2 gap-3 text-xs">
+                    <div class="p-3.5 rounded-xl bg-slate-50 dark:bg-[#0c0f17] border border-slate-200 dark:border-slate-800/80 flex justify-between items-center">
+                        <span class="text-slate-500 dark:text-slate-400">Zend OPcache:</span>
+                        <span class="font-semibold <?= $phpOpcacheEnabled ? 'text-teal-600 dark:text-teal-400' : 'text-slate-500 dark:text-slate-400' ?> flex items-center space-x-1">
+                            <i data-lucide="<?= $phpOpcacheEnabled ? 'check-circle-2' : 'circle' ?>" class="w-3.5 h-3.5"></i>
+                            <span><?= $phpOpcacheEnabled ? 'Ingeschakeld' : 'Niet actief' ?></span>
+                        </span>
+                    </div>
+                    <div class="p-3.5 rounded-xl bg-slate-50 dark:bg-[#0c0f17] border border-slate-200 dark:border-slate-800/80 flex justify-between items-center">
+                        <span class="text-slate-500 dark:text-slate-400">OpenSSL Bibliotheek:</span>
+                        <span class="font-mono text-slate-700 dark:text-slate-300 truncate max-w-[220px]" title="<?= htmlspecialchars($phpOpensslVersion) ?>"><?= htmlspecialchars($phpOpensslVersion) ?></span>
+                    </div>
+                </div>
+            </div>
+
             <!-- 5. SMTP Mail Server & Notificaties (Release v1.6) -->
             <div class="fociz-card p-6 sm:p-7 space-y-6">
                 <div class="flex flex-col sm:flex-row sm:items-center justify-between gap-3 pb-4 border-b border-slate-100 dark:border-slate-800/80">
@@ -2207,7 +2335,7 @@ require_once __DIR__ . '/includes/header.php';
 
                     <div class="flex items-center justify-between p-2.5 rounded-xl bg-slate-50 dark:bg-[#0c0f17] border border-slate-200 dark:border-slate-800">
                         <span>Database Versie</span>
-                        <span class="text-slate-500 dark:text-slate-400 font-mono text-[11px]">MariaDB 10.x</span>
+                        <span class="text-slate-500 dark:text-slate-400 font-mono text-[11px] truncate max-w-[200px]" title="<?= htmlspecialchars($dbVersion) ?>"><?= htmlspecialchars($dbVersion) ?></span>
                     </div>
 
                     <div class="flex items-center justify-between p-2.5 rounded-xl bg-slate-50 dark:bg-[#0c0f17] border border-slate-200 dark:border-slate-800">

api/planner.php

@@ -290,7 +290,7 @@ try {
             try {
                 $msResult = microsoft_create_event($user['id'], [
                     'subject'          => $title,
-                    'description'      => "Ingepland vanuit Snelle Notities / Bullet Todo's",
+                    'description'      => "Ingepland vanuit Todo's & Notities",
                     'date'             => $date,
                     'start_time'       => $startTime,
                     'end_time'         => $endTime,
@@ -318,7 +318,7 @@ try {
             // Nieuwe taak aanmaken
             $stmtInsertTask = $db->prepare("
                 INSERT INTO tasks (user_id, daily_plan_id, title, description, priority, time_block_start, time_block_end, duration_minutes, status, source, external_id, external_url)
-                VALUES (?, ?, ?, 'Ingepland vanuit Snelle Notities', ?, ?, ?, ?, 'TODO', ?, ?, ?)
+                VALUES (?, ?, ?, 'Ingepland vanuit Todo\'s & Notities', ?, ?, ?, ?, 'TODO', ?, ?, ?)
             ");
             $stmtInsertTask->execute([$user['id'], $planId, $title, $priority, $startTime, $endTime, $duration, $source, $externalId, $externalUrl]);
             $taskId = (int)$db->lastInsertId();

composer.json

@@ -1,6 +1,6 @@
 {
     "require": {
-        "php": "^8.2",
+        "php": "^8.4",
         "ext-pdo": "*",
         "ext-pdo_mysql": "*",
         "ext-mysqli": "*"

planner.php

@@ -337,7 +337,7 @@ $availableWidgets = [
     'outlook_mail'      => ['id' => 'outlook_mail', 'title' => 'Outlook E-mail Widget', 'category' => 'Communicatie', 'icon' => 'mail', 'enabled' => true, 'col_span' => 6, 'order' => 4, 'desc' => 'Inkomende e-mails direct inzien en met 1 klik inplannen als taak'],
     'jira_queue'        => ['id' => 'jira_queue', 'title' => 'Jira Tickets', 'category' => 'Ontwikkeling', 'icon' => 'layers', 'enabled' => true, 'col_span' => 6, 'order' => 5, 'desc' => 'Openstaande Jira tickets met directe importknop'],
     'calendar_meetings' => ['id' => 'calendar_meetings', 'title' => 'Agenda & Teams Meetings', 'category' => 'Agenda', 'icon' => 'video', 'enabled' => true, 'col_span' => 6, 'order' => 6, 'desc' => 'Vandaag geplande afspraken met 1-klik Teams deelnemen knop'],
-    'scratchpad'        => ['id' => 'scratchpad', 'title' => 'Snelle Notities & Bullet Todo\'s', 'category' => 'Productiviteit', 'icon' => 'check-square', 'enabled' => true, 'col_span' => 6, 'order' => 7, 'desc' => 'Snel notities en bullet actiepunten vastleggen en inplannen in een agendablok'],
+    'scratchpad'        => ['id' => 'scratchpad', 'title' => 'Todo\'s & Notities', 'category' => 'Productiviteit', 'icon' => 'check-square', 'enabled' => true, 'col_span' => 6, 'order' => 7, 'desc' => 'Snel actiepunten en notities vastleggen en inplannen in een agendablok'],
     'stats'             => ['id' => 'stats', 'title' => 'Productiviteit & KPI\'s', 'category' => 'Inzicht', 'icon' => 'bar-chart-2', 'enabled' => true, 'col_span' => 12, 'order' => 8, 'desc' => 'Voortgangsbalk, voltooide taken, focus uren en meeting totalen'],
     'quick_links'       => ['id' => 'quick_links', 'title' => 'Snelle Koppelingen & Tools', 'category' => 'Productiviteit', 'icon' => 'external-link', 'enabled' => false, 'col_span' => 6, 'order' => 9, 'desc' => '1-klik snelkoppelingen naar Jira, Teams, Outlook, Azure en documentatie'],
     'habit_tracker'     => ['id' => 'habit_tracker', 'title' => 'Dagelijkse Focus Gewoontes', 'category' => 'Productiviteit', 'icon' => 'sparkles', 'enabled' => false, 'col_span' => 6, 'order' => 10, 'desc' => 'Houd gezonde werkgewoontes bij (water drinken, 15m bewegen, inbox zero)'],
@@ -1642,7 +1642,7 @@ for ($h = $startHour; $h <= $endHour; $h++) {
                     </div>
 
                 <?php elseif ($wId === 'scratchpad'): ?>
-                    <!-- Widget 7: Snelle Notities, Bullet Todo's & Kladblok -->
+                    <!-- Widget 7: Todo's & Notities -->
                     <div class="fociz-card p-6" id="dashboardBulletWidget">
                         <div class="flex items-center justify-between pb-3 border-b border-slate-100 dark:border-slate-800 mb-4">
                             <div class="flex items-center space-x-2">
@@ -1650,7 +1650,7 @@ for ($h = $startHour; $h <= $endHour; $h++) {
                                     <i data-lucide="check-square" class="w-4 h-4"></i>
                                 </div>
                                 <h3 class="text-xs font-bold text-slate-900 dark:text-white uppercase tracking-wider">
-                                    <?= htmlspecialchars($wConfig['custom_title'] ?? 'Snelle Notities & Bullet Todo\'s') ?>
+                                    <?= htmlspecialchars($wConfig['custom_title'] ?? 'Todo\'s & Notities') ?>
                                 </h3>
                             </div>