Initial commit with all bug and compliance fixes

- Remove double pSQL() escaping in Db::insert/update calls (data corruption fix)
- Rename honeypot field from 'website' to 'cyp_hp_v1' to prevent browser autofill false positives
- Wrap Mail::Send() in try/catch; capture shop notification result to detect failures
- Scope order lookup to current shop (multi-shop fix)
- Translate scope_label and email subjects per language (de/en)
- Make formatDateTimeForMail() language-aware
- Add GDPR Art. 13 privacy notice to withdrawal form
- Add configurable privacy policy URL and Widerrufsbelehrung link
- Add configurable retention period and manual purge button in admin settings
- Show full submitted data on success page as proper receipt
- Fix admin redirect URL format in processStatusUpdate()
- Remove IP/UA hash display from admin detail view (GDPR data minimization)

This commit is contained in:

Arne Weiss

2026-06-01 07:30:29 +02:00

commit 346ee7b616

33 changed files with 1663 additions and 0 deletions

									
										index.php
									
		+4
		
												View File
												
				@@ -0,0 +1,4 @@

				<?php

				/**

				 * Silence is golden.

				 */