Update composer.json

admin.php

@@ -462,6 +462,46 @@ $sessionIdleTimeout = get_session_idle_timeout();
 $calendarBlockReasons = get_calendar_block_reasons();
 $brainstormCategories = get_brainstorm_categories();
 
+// PHP Runtime, Database & Security Patch Status
+$phpVersion = PHP_VERSION;
+$phpSapi = php_sapi_name();
+$phpMemoryLimit = ini_get('memory_limit') ?: 'Onbekend';
+$phpMaxExecution = ini_get('max_execution_time') ? ini_get('max_execution_time') . 's' : 'Onbeperkt';
+$phpOpcacheEnabled = function_exists('opcache_get_status') && !empty(opcache_get_status(false)['opcache_enabled']);
+$phpOpensslVersion = defined('OPENSSL_VERSION_TEXT') ? OPENSSL_VERSION_TEXT : 'Niet gedetecteerd';
+
+// PHP Security Patch status (CVE-2026-109618 / CVE-2026-109619 PHP2Shell)
+// Gepatched in 8.2.35, 8.3.36, 8.4.27, 8.5.12
+$isPhpPatched = false;
+$patchRequiredVersion = '';
+$isSupportedPhpBranch = true;
+
+if (version_compare($phpVersion, '8.2.0', '>=') && version_compare($phpVersion, '8.3.0', '<')) {
+    $patchRequiredVersion = '8.2.35';
+    $isPhpPatched = version_compare($phpVersion, '8.2.35', '>=');
+} elseif (version_compare($phpVersion, '8.3.0', '>=') && version_compare($phpVersion, '8.4.0', '<')) {
+    $patchRequiredVersion = '8.3.36';
+    $isPhpPatched = version_compare($phpVersion, '8.3.36', '>=');
+} elseif (version_compare($phpVersion, '8.4.0', '>=') && version_compare($phpVersion, '8.5.0', '<')) {
+    $patchRequiredVersion = '8.4.27';
+    $isPhpPatched = version_compare($phpVersion, '8.4.27', '>=');
+} elseif (version_compare($phpVersion, '8.5.0', '>=')) {
+    $patchRequiredVersion = '8.5.12';
+    $isPhpPatched = version_compare($phpVersion, '8.5.12', '>=');
+} else {
+    // PHP < 8.2 (End of Life)
+    $patchRequiredVersion = '8.2.35+';
+    $isPhpPatched = false;
+    $isSupportedPhpBranch = false;
+}
+
+$dbVersion = 'Onbekend';
+try {
+    $dbVersion = (string)$db->query("SELECT VERSION()")->fetchColumn() ?: 'Onbekend';
+} catch (Throwable $e) {
+    $dbVersion = 'Niet beschikbaar';
+}
+
 // Redirect URI
 $redirectUri = rtrim(APP_URL, '/') . '/auth/callback_microsoft.php';
 
@@ -1973,6 +2013,94 @@ require_once __DIR__ . '/includes/header.php';
 
         <!-- Tab 6: Systeem & Database (inclusief SMTP Mail Server & AI Co-Pilot) -->
         <div id="tab-pane-system" class="admin-tab-pane space-y-8 hidden">
+            <!-- PHP Runtime & Serverstatus (Beveiliging & Environment) -->
+            <div class="fociz-card p-6 sm:p-7 space-y-6">
+                <div class="flex flex-col sm:flex-row sm:items-center justify-between gap-3 pb-4 border-b border-slate-100 dark:border-slate-800/80">
+                    <div class="flex items-center space-x-3.5">
+                        <div class="w-12 h-12 rounded-xl bg-violet-50 dark:bg-violet-950/40 border border-violet-200 dark:border-violet-800/60 flex items-center justify-center text-violet-600 dark:text-violet-400 font-bold shadow-xs">
+                            <i data-lucide="cpu" class="w-6 h-6"></i>
+                        </div>
+                        <div>
+                            <div class="flex items-center space-x-2">
+                                <h2 class="text-lg font-bold text-slate-900 dark:text-white tracking-tight">PHP Runtime & Serverstatus</h2>
+                                <span class="px-2 py-0.5 rounded-md bg-violet-100 dark:bg-violet-900/50 text-violet-800 dark:text-violet-300 font-mono text-xs font-bold">
+                                    PHP <?= htmlspecialchars($phpVersion) ?>
+                                </span>
+                            </div>
+                            <p class="text-xs text-slate-500 dark:text-slate-400">Actuele PHP versie, beveiligingsstatus, server interface en resource limieten</p>
+                        </div>
+                    </div>
+                    <?php if ($isPhpPatched): ?>
+                        <span class="px-3 py-1.5 rounded-full bg-teal-50 dark:bg-teal-950/40 text-teal-700 dark:text-teal-400 border border-teal-200 dark:border-teal-800/60 text-xs font-bold inline-flex items-center space-x-1.5 self-start sm:self-auto">
+                            <i data-lucide="shield-check" class="w-4 h-4 flex-shrink-0"></i>
+                            <span>PHP Beveiliging: Up-to-date</span>
+                        </span>
+                    <?php else: ?>
+                        <span class="px-3 py-1.5 rounded-full bg-amber-50 dark:bg-amber-950/40 text-amber-700 dark:text-amber-400 border border-amber-200 dark:border-amber-800/60 text-xs font-bold inline-flex items-center space-x-1.5 self-start sm:self-auto">
+                            <i data-lucide="alert-triangle" class="w-4 h-4 flex-shrink-0 text-amber-500"></i>
+                            <span>Update Aanbevolen (Min. <?= htmlspecialchars($patchRequiredVersion) ?>)</span>
+                        </span>
+                    <?php endif; ?>
+                </div>
+
+                <!-- Beveiligingsalert / Patchadvies -->
+                <?php if (!$isPhpPatched): ?>
+                <div class="p-4 rounded-xl bg-amber-500/10 border border-amber-500/20 text-amber-900 dark:text-amber-200 text-xs space-y-2">
+                    <div class="flex items-center space-x-2 font-bold text-amber-800 dark:text-amber-300">
+                        <i data-lucide="alert-circle" class="w-4 h-4 flex-shrink-0"></i>
+                        <span>Beveiligingsupdate Beschikbaar (CVE-2026-109618 / CVE-2026-109619)</span>
+                    </div>
+                    <p class="leading-relaxed">
+                        Er is recent een kritieke PHP-beveiligingsupdate uitgebracht. Jouw server draait momenteel op <strong class="font-mono"><?= htmlspecialchars($phpVersion) ?></strong>. 
+                        <?php if (!$isSupportedPhpBranch): ?>
+                            Deze PHP-versie is end-of-life. We adviseren je webhosting/server zo spoedig mogelijk te upgraden naar minimaal <strong>PHP 8.2.35</strong> of hoger.
+                        <?php else: ?>
+                            We adviseren om via het hosting controlepaneel (zoals DirectAdmin of cPanel) of via je serverbeheerder de PHP-versie te updaten naar minimaal <strong class="font-mono"><?= htmlspecialchars($patchRequiredVersion) ?></strong>.
+                        <?php endif; ?>
+                    </p>
+                </div>
+                <?php else: ?>
+                <div class="p-3.5 rounded-xl bg-teal-500/10 border border-teal-500/20 text-teal-900 dark:text-teal-200 text-xs flex items-center space-x-2.5">
+                    <i data-lucide="shield-check" class="w-4 h-4 flex-shrink-0 text-teal-600 dark:text-teal-400"></i>
+                    <span>Deze PHP-versie (<strong class="font-mono"><?= htmlspecialchars($phpVersion) ?></strong>) bevat de recentste beveiligingspatches tegen de bekende PHP2Shell kwetsbaarheden.</span>
+                </div>
+                <?php endif; ?>
+
+                <!-- Grid met systeemeigenschappen -->
+                <div class="grid grid-cols-1 sm:grid-cols-2 lg:grid-cols-4 gap-3 text-xs">
+                    <div class="p-3.5 rounded-xl bg-slate-50 dark:bg-[#0c0f17] border border-slate-200 dark:border-slate-800/80">
+                        <span class="text-slate-500 dark:text-slate-400 block text-[11px] mb-1">PHP SAPI / Interface</span>
+                        <span class="font-mono font-bold text-slate-900 dark:text-white"><?= htmlspecialchars($phpSapi) ?></span>
+                    </div>
+                    <div class="p-3.5 rounded-xl bg-slate-50 dark:bg-[#0c0f17] border border-slate-200 dark:border-slate-800/80">
+                        <span class="text-slate-500 dark:text-slate-400 block text-[11px] mb-1">Geheugenlimiet (Memory)</span>
+                        <span class="font-mono font-bold text-slate-900 dark:text-white"><?= htmlspecialchars($phpMemoryLimit) ?></span>
+                    </div>
+                    <div class="p-3.5 rounded-xl bg-slate-50 dark:bg-[#0c0f17] border border-slate-200 dark:border-slate-800/80">
+                        <span class="text-slate-500 dark:text-slate-400 block text-[11px] mb-1">Max Execution Time</span>
+                        <span class="font-mono font-bold text-slate-900 dark:text-white"><?= htmlspecialchars($phpMaxExecution) ?></span>
+                    </div>
+                    <div class="p-3.5 rounded-xl bg-slate-50 dark:bg-[#0c0f17] border border-slate-200 dark:border-slate-800/80">
+                        <span class="text-slate-500 dark:text-slate-400 block text-[11px] mb-1">Database Versie</span>
+                        <span class="font-mono font-bold text-slate-900 dark:text-white truncate block" title="<?= htmlspecialchars($dbVersion) ?>"><?= htmlspecialchars($dbVersion) ?></span>
+                    </div>
+                </div>
+
+                <div class="grid grid-cols-1 sm:grid-cols-2 gap-3 text-xs">
+                    <div class="p-3.5 rounded-xl bg-slate-50 dark:bg-[#0c0f17] border border-slate-200 dark:border-slate-800/80 flex justify-between items-center">
+                        <span class="text-slate-500 dark:text-slate-400">Zend OPcache:</span>
+                        <span class="font-semibold <?= $phpOpcacheEnabled ? 'text-teal-600 dark:text-teal-400' : 'text-slate-500 dark:text-slate-400' ?> flex items-center space-x-1">
+                            <i data-lucide="<?= $phpOpcacheEnabled ? 'check-circle-2' : 'circle' ?>" class="w-3.5 h-3.5"></i>
+                            <span><?= $phpOpcacheEnabled ? 'Ingeschakeld' : 'Niet actief' ?></span>
+                        </span>
+                    </div>
+                    <div class="p-3.5 rounded-xl bg-slate-50 dark:bg-[#0c0f17] border border-slate-200 dark:border-slate-800/80 flex justify-between items-center">
+                        <span class="text-slate-500 dark:text-slate-400">OpenSSL Bibliotheek:</span>
+                        <span class="font-mono text-slate-700 dark:text-slate-300 truncate max-w-[220px]" title="<?= htmlspecialchars($phpOpensslVersion) ?>"><?= htmlspecialchars($phpOpensslVersion) ?></span>
+                    </div>
+                </div>
+            </div>
+
             <!-- 5. SMTP Mail Server & Notificaties (Release v1.6) -->
             <div class="fociz-card p-6 sm:p-7 space-y-6">
                 <div class="flex flex-col sm:flex-row sm:items-center justify-between gap-3 pb-4 border-b border-slate-100 dark:border-slate-800/80">
@@ -2207,7 +2335,7 @@ require_once __DIR__ . '/includes/header.php';
 
                     <div class="flex items-center justify-between p-2.5 rounded-xl bg-slate-50 dark:bg-[#0c0f17] border border-slate-200 dark:border-slate-800">
                         <span>Database Versie</span>
-                        <span class="text-slate-500 dark:text-slate-400 font-mono text-[11px]">MariaDB 10.x</span>
+                        <span class="text-slate-500 dark:text-slate-400 font-mono text-[11px] truncate max-w-[200px]" title="<?= htmlspecialchars($dbVersion) ?>"><?= htmlspecialchars($dbVersion) ?></span>
                     </div>
 
                     <div class="flex items-center justify-between p-2.5 rounded-xl bg-slate-50 dark:bg-[#0c0f17] border border-slate-200 dark:border-slate-800">

api/planner.php

@@ -290,7 +290,7 @@ try {
             try {
                 $msResult = microsoft_create_event($user['id'], [
                     'subject'          => $title,
-                    'description'      => "Ingepland vanuit Snelle Notities / Bullet Todo's",
+                    'description'      => "Ingepland vanuit Todo's & Notities",
                     'date'             => $date,
                     'start_time'       => $startTime,
                     'end_time'         => $endTime,
@@ -318,7 +318,7 @@ try {
             // Nieuwe taak aanmaken
             $stmtInsertTask = $db->prepare("
                 INSERT INTO tasks (user_id, daily_plan_id, title, description, priority, time_block_start, time_block_end, duration_minutes, status, source, external_id, external_url)
-                VALUES (?, ?, ?, 'Ingepland vanuit Snelle Notities', ?, ?, ?, ?, 'TODO', ?, ?, ?)
+                VALUES (?, ?, ?, 'Ingepland vanuit Todo\'s & Notities', ?, ?, ?, ?, 'TODO', ?, ?, ?)
             ");
             $stmtInsertTask->execute([$user['id'], $planId, $title, $priority, $startTime, $endTime, $duration, $source, $externalId, $externalUrl]);
             $taskId = (int)$db->lastInsertId();

composer.json

@@ -1,6 +1,6 @@
 {
     "require": {
-        "php": "^8.2",
+        "php": "^8.4",
         "ext-pdo": "*",
         "ext-pdo_mysql": "*",
         "ext-mysqli": "*"

config/.env

@@ -1,17 +1,14 @@
-# =========================================================================
+# =========================================================================
-# FOCIZ CONFIGURATIE — DEVELOPMENT OMGEVING (dev.fociz.nl)
+# FOCIZ CONFIGURATIE (Centraal)
+# De omgeving en database worden automatisch veilig bepaald op basis van het domein:
+# - dev.fociz.nl / localhost  => development (focizdev / focizdev_user)
+# - www.fociz.nl / fociz.nl   => live (fociz / focizlive_user)
+# Optionele serverspecifieke overrides kunnen in de root /.env worden geplaatst.
 # =========================================================================
 
-# MariaDB Verbinding
+# MariaDB Server
 DB_HOST="192.168.2.33"
 DB_PORT="3306"
-DB_NAME="focizdev"
-DB_USER="focizdev_user"
-DB_PASS="F0c1z_Dev_Secure_2026!"
-
-# Omgeving & URL
-APP_ENV="development"
-APP_URL="https://dev.fociz.nl"
 
 # Applicatie Geheime Sleutel (voor tokenversleuteling & OAuth state)
 APP_SECRET="fociz-maria-db-super-secret-key-998877"

config/config.php

@@ -25,9 +25,9 @@ if (!headers_sent()) {
 }
 @ini_set('expose_php', 'off');
 
-// 1. .env inlezing (controleert zowel config/.env als hoofdmap .env)
+// 1. .env inlezing (controleert eerst server root .env en dan config/.env)
 $envVars = [];
-$envLocations = [__DIR__ . '/.env', __DIR__ . '/../.env'];
+$envLocations = [__DIR__ . '/../.env', __DIR__ . '/.env'];
 foreach ($envLocations as $envFile) {
     if (file_exists($envFile)) {
         $lines = file($envFile, FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES);
@@ -81,30 +81,52 @@ if (!function_exists('fociz_env')) {
 define('APP_NAME', 'Fociz');
 
 // Automatische omgevingsdetectie:
-// 1. Expliciete .env variabele 'APP_ENV'
+// 1. Hostname/domeinnaam is altijd leidend voor productiebeveiliging
-// 2. Automatisch 'development' indien hostname 'dev.' of 'localhost' bevat
+$detectedHost = strtolower($_SERVER['HTTP_HOST'] ?? '');
-// 3. Standaard 'live'
-$detectedHost = $_SERVER['HTTP_HOST'] ?? '';
 $isDevHost = (
     str_contains($detectedHost, 'dev.') || 
     str_contains($detectedHost, 'localhost') || 
     str_contains($detectedHost, '127.0.0.1')
 );
-$defaultEnv = $isDevHost ? 'development' : 'live';
+$isLiveHost = (
-define('APP_ENV', fociz_env('APP_ENV', $defaultEnv));
+    !empty($detectedHost) &&
+    !$isDevHost &&
+    (str_contains($detectedHost, 'fociz.nl') || str_contains($detectedHost, 'live'))
+);
+
+// Bepaal APP_ENV: op live domeinen (bijv. www.fociz.nl of fociz.nl) ALTIJD 'live'
+// zodat een per ongeluk meegekomen dev-configuratie NOOIT productie kan beïnvloeden.
+if ($isLiveHost) {
+    $effectiveEnv = 'live';
+} elseif ($isDevHost) {
+    $effectiveEnv = 'development';
+} else {
+    $effectiveEnv = fociz_env('APP_ENV', 'live');
+}
+define('APP_ENV', $effectiveEnv);
 define('APP_SECRET', fociz_env('APP_SECRET', 'fociz-maria-db-super-secret-key-998877'));
 
 // =========================================================================
 // 3. CENTRALE DATABASE CONFIGURATIE (OMGEVINGSAFHANKELIJK & GIT-VEILIG)
 // =========================================================================
-// Leest eerst eventuele .env variabelen (die per server uniek en gitignored zijn).
-// Indien niet ingesteld via .env, wordt automatisch de juiste database gekozen op basis van APP_ENV.
 $isDevEnv = (APP_ENV === 'development');
 define('DB_HOST', fociz_env('DB_HOST', '192.168.2.33'));
 define('DB_PORT', fociz_env('DB_PORT', '3306'));
-define('DB_NAME', fociz_env('DB_NAME', $isDevEnv ? 'focizdev' : 'fociz'));
+
-define('DB_USER', fociz_env('DB_USER', $isDevEnv ? 'focizdev_user' : 'focizlive_user'));
+// Veiligheidswaarborg: op het live domein of live omgeving NOOIT per ongeluk de dev database gebruiken
-define('DB_PASS', fociz_env('DB_PASS', $isDevEnv ? 'F0c1z_Dev_Secure_2026!' : 'F0c1z_Live_Secure_2026!'));
+if ($isLiveHost || APP_ENV === 'live') {
+    $rawDbName = fociz_env('DB_NAME');
+    $rawDbUser = fociz_env('DB_USER');
+    $rawDbPass = fociz_env('DB_PASS');
+
+    define('DB_NAME', (!empty($rawDbName) && $rawDbName !== 'focizdev') ? $rawDbName : 'fociz');
+    define('DB_USER', (!empty($rawDbUser) && $rawDbUser !== 'focizdev_user') ? $rawDbUser : 'focizlive_user');
+    define('DB_PASS', (!empty($rawDbPass) && $rawDbPass !== 'F0c1z_Dev_Secure_2026!') ? $rawDbPass : 'F0c1z_Live_Secure_2026!');
+} else {
+    define('DB_NAME', fociz_env('DB_NAME', 'focizdev'));
+    define('DB_USER', fociz_env('DB_USER', 'focizdev_user'));
+    define('DB_PASS', fociz_env('DB_PASS', 'F0c1z_Dev_Secure_2026!'));
+}
 define('DB_CHARSET', 'utf8mb4');
 
 // Bepaal de dynamische of geconfigureerde applicatie URL

includes/env_badge.php

@@ -14,13 +14,9 @@
 
 require_once __DIR__ . '/../config/config.php';
 
-// Standaard waarde voor de main branch: 'live' (kan overschreven worden via APP_ENV)
+// Standaard waarde voor de main branch: 'live' (bepaald via centrale config.php)
 $environment = defined('APP_ENV') ? APP_ENV : 'live';
 
-if (function_exists('fociz_env') && fociz_env('APP_ENV')) {
-    $environment = fociz_env('APP_ENV');
-}
-
 $isLive = in_array(strtolower(trim($environment)), ['live', 'production', 'prod', 'main']);
 ?>
 

planner.php

@@ -337,7 +337,7 @@ $availableWidgets = [
     'outlook_mail'      => ['id' => 'outlook_mail', 'title' => 'Outlook E-mail Widget', 'category' => 'Communicatie', 'icon' => 'mail', 'enabled' => true, 'col_span' => 6, 'order' => 4, 'desc' => 'Inkomende e-mails direct inzien en met 1 klik inplannen als taak'],
     'jira_queue'        => ['id' => 'jira_queue', 'title' => 'Jira Tickets', 'category' => 'Ontwikkeling', 'icon' => 'layers', 'enabled' => true, 'col_span' => 6, 'order' => 5, 'desc' => 'Openstaande Jira tickets met directe importknop'],
     'calendar_meetings' => ['id' => 'calendar_meetings', 'title' => 'Agenda & Teams Meetings', 'category' => 'Agenda', 'icon' => 'video', 'enabled' => true, 'col_span' => 6, 'order' => 6, 'desc' => 'Vandaag geplande afspraken met 1-klik Teams deelnemen knop'],
-    'scratchpad'        => ['id' => 'scratchpad', 'title' => 'Snelle Notities & Bullet Todo\'s', 'category' => 'Productiviteit', 'icon' => 'check-square', 'enabled' => true, 'col_span' => 6, 'order' => 7, 'desc' => 'Snel notities en bullet actiepunten vastleggen en inplannen in een agendablok'],
+    'scratchpad'        => ['id' => 'scratchpad', 'title' => 'Todo\'s & Notities', 'category' => 'Productiviteit', 'icon' => 'check-square', 'enabled' => true, 'col_span' => 6, 'order' => 7, 'desc' => 'Snel actiepunten en notities vastleggen en inplannen in een agendablok'],
     'stats'             => ['id' => 'stats', 'title' => 'Productiviteit & KPI\'s', 'category' => 'Inzicht', 'icon' => 'bar-chart-2', 'enabled' => true, 'col_span' => 12, 'order' => 8, 'desc' => 'Voortgangsbalk, voltooide taken, focus uren en meeting totalen'],
     'quick_links'       => ['id' => 'quick_links', 'title' => 'Snelle Koppelingen & Tools', 'category' => 'Productiviteit', 'icon' => 'external-link', 'enabled' => false, 'col_span' => 6, 'order' => 9, 'desc' => '1-klik snelkoppelingen naar Jira, Teams, Outlook, Azure en documentatie'],
     'habit_tracker'     => ['id' => 'habit_tracker', 'title' => 'Dagelijkse Focus Gewoontes', 'category' => 'Productiviteit', 'icon' => 'sparkles', 'enabled' => false, 'col_span' => 6, 'order' => 10, 'desc' => 'Houd gezonde werkgewoontes bij (water drinken, 15m bewegen, inbox zero)'],
@@ -1642,7 +1642,7 @@ for ($h = $startHour; $h <= $endHour; $h++) {
                     </div>
 
                 <?php elseif ($wId === 'scratchpad'): ?>
-                    <!-- Widget 7: Snelle Notities, Bullet Todo's & Kladblok -->
+                    <!-- Widget 7: Todo's & Notities -->
                     <div class="fociz-card p-6" id="dashboardBulletWidget">
                         <div class="flex items-center justify-between pb-3 border-b border-slate-100 dark:border-slate-800 mb-4">
                             <div class="flex items-center space-x-2">
@@ -1650,7 +1650,7 @@ for ($h = $startHour; $h <= $endHour; $h++) {
                                     <i data-lucide="check-square" class="w-4 h-4"></i>
                                 </div>
                                 <h3 class="text-xs font-bold text-slate-900 dark:text-white uppercase tracking-wider">
-                                    <?= htmlspecialchars($wConfig['custom_title'] ?? 'Snelle Notities & Bullet Todo\'s') ?>
+                                    <?= htmlspecialchars($wConfig['custom_title'] ?? 'Todo\'s & Notities') ?>
                                 </h3>
                             </div>