Merge pull request 'Dev' (#101) from dev into main

Reviewed-on: #101

admin.php

@@ -462,6 +462,46 @@ $sessionIdleTimeout = get_session_idle_timeout();
 $calendarBlockReasons = get_calendar_block_reasons();
 $brainstormCategories = get_brainstorm_categories();
 
+// PHP Runtime, Database & Security Patch Status
+$phpVersion = PHP_VERSION;
+$phpSapi = php_sapi_name();
+$phpMemoryLimit = ini_get('memory_limit') ?: 'Onbekend';
+$phpMaxExecution = ini_get('max_execution_time') ? ini_get('max_execution_time') . 's' : 'Onbeperkt';
+$phpOpcacheEnabled = function_exists('opcache_get_status') && !empty(opcache_get_status(false)['opcache_enabled']);
+$phpOpensslVersion = defined('OPENSSL_VERSION_TEXT') ? OPENSSL_VERSION_TEXT : 'Niet gedetecteerd';
+
+// PHP Security Patch status (CVE-2026-109618 / CVE-2026-109619 PHP2Shell)
+// Gepatched in 8.2.35, 8.3.36, 8.4.27, 8.5.12
+$isPhpPatched = false;
+$patchRequiredVersion = '';
+$isSupportedPhpBranch = true;
+
+if (version_compare($phpVersion, '8.2.0', '>=') && version_compare($phpVersion, '8.3.0', '<')) {
+    $patchRequiredVersion = '8.2.35';
+    $isPhpPatched = version_compare($phpVersion, '8.2.35', '>=');
+} elseif (version_compare($phpVersion, '8.3.0', '>=') && version_compare($phpVersion, '8.4.0', '<')) {
+    $patchRequiredVersion = '8.3.36';
+    $isPhpPatched = version_compare($phpVersion, '8.3.36', '>=');
+} elseif (version_compare($phpVersion, '8.4.0', '>=') && version_compare($phpVersion, '8.5.0', '<')) {
+    $patchRequiredVersion = '8.4.27';
+    $isPhpPatched = version_compare($phpVersion, '8.4.27', '>=');
+} elseif (version_compare($phpVersion, '8.5.0', '>=')) {
+    $patchRequiredVersion = '8.5.12';
+    $isPhpPatched = version_compare($phpVersion, '8.5.12', '>=');
+} else {
+    // PHP < 8.2 (End of Life)
+    $patchRequiredVersion = '8.2.35+';
+    $isPhpPatched = false;
+    $isSupportedPhpBranch = false;
+}
+
+$dbVersion = 'Onbekend';
+try {
+    $dbVersion = (string)$db->query("SELECT VERSION()")->fetchColumn() ?: 'Onbekend';
+} catch (Throwable $e) {
+    $dbVersion = 'Niet beschikbaar';
+}
+
 // Redirect URI
 $redirectUri = rtrim(APP_URL, '/') . '/auth/callback_microsoft.php';
 
@@ -1973,6 +2013,94 @@ require_once __DIR__ . '/includes/header.php';
 
         <!-- Tab 6: Systeem & Database (inclusief SMTP Mail Server & AI Co-Pilot) -->
         <div id="tab-pane-system" class="admin-tab-pane space-y-8 hidden">
+            <!-- PHP Runtime & Serverstatus (Beveiliging & Environment) -->
+            <div class="fociz-card p-6 sm:p-7 space-y-6">
+                <div class="flex flex-col sm:flex-row sm:items-center justify-between gap-3 pb-4 border-b border-slate-100 dark:border-slate-800/80">
+                    <div class="flex items-center space-x-3.5">
+                        <div class="w-12 h-12 rounded-xl bg-violet-50 dark:bg-violet-950/40 border border-violet-200 dark:border-violet-800/60 flex items-center justify-center text-violet-600 dark:text-violet-400 font-bold shadow-xs">
+                            <i data-lucide="cpu" class="w-6 h-6"></i>
+                        </div>
+                        <div>
+                            <div class="flex items-center space-x-2">
+                                <h2 class="text-lg font-bold text-slate-900 dark:text-white tracking-tight">PHP Runtime & Serverstatus</h2>
+                                <span class="px-2 py-0.5 rounded-md bg-violet-100 dark:bg-violet-900/50 text-violet-800 dark:text-violet-300 font-mono text-xs font-bold">
+                                    PHP <?= htmlspecialchars($phpVersion) ?>
+                                </span>
+                            </div>
+                            <p class="text-xs text-slate-500 dark:text-slate-400">Actuele PHP versie, beveiligingsstatus, server interface en resource limieten</p>
+                        </div>
+                    </div>
+                    <?php if ($isPhpPatched): ?>
+                        <span class="px-3 py-1.5 rounded-full bg-teal-50 dark:bg-teal-950/40 text-teal-700 dark:text-teal-400 border border-teal-200 dark:border-teal-800/60 text-xs font-bold inline-flex items-center space-x-1.5 self-start sm:self-auto">
+                            <i data-lucide="shield-check" class="w-4 h-4 flex-shrink-0"></i>
+                            <span>PHP Beveiliging: Up-to-date</span>
+                        </span>
+                    <?php else: ?>
+                        <span class="px-3 py-1.5 rounded-full bg-amber-50 dark:bg-amber-950/40 text-amber-700 dark:text-amber-400 border border-amber-200 dark:border-amber-800/60 text-xs font-bold inline-flex items-center space-x-1.5 self-start sm:self-auto">
+                            <i data-lucide="alert-triangle" class="w-4 h-4 flex-shrink-0 text-amber-500"></i>
+                            <span>Update Aanbevolen (Min. <?= htmlspecialchars($patchRequiredVersion) ?>)</span>
+                        </span>
+                    <?php endif; ?>
+                </div>
+
+                <!-- Beveiligingsalert / Patchadvies -->
+                <?php if (!$isPhpPatched): ?>
+                <div class="p-4 rounded-xl bg-amber-500/10 border border-amber-500/20 text-amber-900 dark:text-amber-200 text-xs space-y-2">
+                    <div class="flex items-center space-x-2 font-bold text-amber-800 dark:text-amber-300">
+                        <i data-lucide="alert-circle" class="w-4 h-4 flex-shrink-0"></i>
+                        <span>Beveiligingsupdate Beschikbaar (CVE-2026-109618 / CVE-2026-109619)</span>
+                    </div>
+                    <p class="leading-relaxed">
+                        Er is recent een kritieke PHP-beveiligingsupdate uitgebracht. Jouw server draait momenteel op <strong class="font-mono"><?= htmlspecialchars($phpVersion) ?></strong>. 
+                        <?php if (!$isSupportedPhpBranch): ?>
+                            Deze PHP-versie is end-of-life. We adviseren je webhosting/server zo spoedig mogelijk te upgraden naar minimaal <strong>PHP 8.2.35</strong> of hoger.
+                        <?php else: ?>
+                            We adviseren om via het hosting controlepaneel (zoals DirectAdmin of cPanel) of via je serverbeheerder de PHP-versie te updaten naar minimaal <strong class="font-mono"><?= htmlspecialchars($patchRequiredVersion) ?></strong>.
+                        <?php endif; ?>
+                    </p>
+                </div>
+                <?php else: ?>
+                <div class="p-3.5 rounded-xl bg-teal-500/10 border border-teal-500/20 text-teal-900 dark:text-teal-200 text-xs flex items-center space-x-2.5">
+                    <i data-lucide="shield-check" class="w-4 h-4 flex-shrink-0 text-teal-600 dark:text-teal-400"></i>
+                    <span>Deze PHP-versie (<strong class="font-mono"><?= htmlspecialchars($phpVersion) ?></strong>) bevat de recentste beveiligingspatches tegen de bekende PHP2Shell kwetsbaarheden.</span>
+                </div>
+                <?php endif; ?>
+
+                <!-- Grid met systeemeigenschappen -->
+                <div class="grid grid-cols-1 sm:grid-cols-2 lg:grid-cols-4 gap-3 text-xs">
+                    <div class="p-3.5 rounded-xl bg-slate-50 dark:bg-[#0c0f17] border border-slate-200 dark:border-slate-800/80">
+                        <span class="text-slate-500 dark:text-slate-400 block text-[11px] mb-1">PHP SAPI / Interface</span>
+                        <span class="font-mono font-bold text-slate-900 dark:text-white"><?= htmlspecialchars($phpSapi) ?></span>
+                    </div>
+                    <div class="p-3.5 rounded-xl bg-slate-50 dark:bg-[#0c0f17] border border-slate-200 dark:border-slate-800/80">
+                        <span class="text-slate-500 dark:text-slate-400 block text-[11px] mb-1">Geheugenlimiet (Memory)</span>
+                        <span class="font-mono font-bold text-slate-900 dark:text-white"><?= htmlspecialchars($phpMemoryLimit) ?></span>
+                    </div>
+                    <div class="p-3.5 rounded-xl bg-slate-50 dark:bg-[#0c0f17] border border-slate-200 dark:border-slate-800/80">
+                        <span class="text-slate-500 dark:text-slate-400 block text-[11px] mb-1">Max Execution Time</span>
+                        <span class="font-mono font-bold text-slate-900 dark:text-white"><?= htmlspecialchars($phpMaxExecution) ?></span>
+                    </div>
+                    <div class="p-3.5 rounded-xl bg-slate-50 dark:bg-[#0c0f17] border border-slate-200 dark:border-slate-800/80">
+                        <span class="text-slate-500 dark:text-slate-400 block text-[11px] mb-1">Database Versie</span>
+                        <span class="font-mono font-bold text-slate-900 dark:text-white truncate block" title="<?= htmlspecialchars($dbVersion) ?>"><?= htmlspecialchars($dbVersion) ?></span>
+                    </div>
+                </div>
+
+                <div class="grid grid-cols-1 sm:grid-cols-2 gap-3 text-xs">
+                    <div class="p-3.5 rounded-xl bg-slate-50 dark:bg-[#0c0f17] border border-slate-200 dark:border-slate-800/80 flex justify-between items-center">
+                        <span class="text-slate-500 dark:text-slate-400">Zend OPcache:</span>
+                        <span class="font-semibold <?= $phpOpcacheEnabled ? 'text-teal-600 dark:text-teal-400' : 'text-slate-500 dark:text-slate-400' ?> flex items-center space-x-1">
+                            <i data-lucide="<?= $phpOpcacheEnabled ? 'check-circle-2' : 'circle' ?>" class="w-3.5 h-3.5"></i>
+                            <span><?= $phpOpcacheEnabled ? 'Ingeschakeld' : 'Niet actief' ?></span>
+                        </span>
+                    </div>
+                    <div class="p-3.5 rounded-xl bg-slate-50 dark:bg-[#0c0f17] border border-slate-200 dark:border-slate-800/80 flex justify-between items-center">
+                        <span class="text-slate-500 dark:text-slate-400">OpenSSL Bibliotheek:</span>
+                        <span class="font-mono text-slate-700 dark:text-slate-300 truncate max-w-[220px]" title="<?= htmlspecialchars($phpOpensslVersion) ?>"><?= htmlspecialchars($phpOpensslVersion) ?></span>
+                    </div>
+                </div>
+            </div>
+
             <!-- 5. SMTP Mail Server & Notificaties (Release v1.6) -->
             <div class="fociz-card p-6 sm:p-7 space-y-6">
                 <div class="flex flex-col sm:flex-row sm:items-center justify-between gap-3 pb-4 border-b border-slate-100 dark:border-slate-800/80">
@@ -2207,7 +2335,7 @@ require_once __DIR__ . '/includes/header.php';
 
                     <div class="flex items-center justify-between p-2.5 rounded-xl bg-slate-50 dark:bg-[#0c0f17] border border-slate-200 dark:border-slate-800">
                         <span>Database Versie</span>
-                        <span class="text-slate-500 dark:text-slate-400 font-mono text-[11px]">MariaDB 10.x</span>
+                        <span class="text-slate-500 dark:text-slate-400 font-mono text-[11px] truncate max-w-[200px]" title="<?= htmlspecialchars($dbVersion) ?>"><?= htmlspecialchars($dbVersion) ?></span>
                     </div>
 
                     <div class="flex items-center justify-between p-2.5 rounded-xl bg-slate-50 dark:bg-[#0c0f17] border border-slate-200 dark:border-slate-800">