movmaker-webui/README.md

movmaker-webui (MVL)

PHP web UI for publishing and managing MVLog videos on bubulescu.org.

Production location

• Web root: /var/www/html/mvlog
• Public URLs:
  • https://bubulescu.org/
  • https://bubulescu.org/new.php
  • https://bubulescu.org/login.php
  • https://bubulescu.org/feed.php
  • https://bubulescu.org/contact.php

Main structure

• index.php — public landing page (rendered videos)
• new.php — authenticated admin UI
• feed.php — RSS feed
• contact.php — contact form
• auth.php — session auth helpers
• config.php — app config
• style.css — shared styles
• _header.php, _footer.php, _footer_admin.php — shared layout includes

Important dirs:

• in-dir/ — input/article dirs
• out-dir/ — rendered videos
• thumbs/ — custom video poster images
• cache/ — metadata/search/push caches

Public page (index.php)

• Randomized header title text (<h1>), fixed HTML title MVL
• Header actions: notifications, RSS, contact
• Search supports:
  • general keyword (title/teaser/quote_da/description)
  • date=...
  • location=... / place=...
• Case-insensitive + accent-insensitive matching
• Shows title/date/location/teaser/description/quote_da
• No generated timestamp is shown on cards
• Optional map image per video (hidden when source article has .mvlog-hide-map)
• Optional custom video poster from thumbs/

Admin (new.php)

Requires login via PHP session.

Tabs:

• New — create input dirs + upload media
• Edit — edit metadata/media/order/toggles
• Videos — manage orphan output videos

Implemented behavior:

• Article identity uses .mvlog-id (immutable ID), with legacy dir-name fallback
• Draft metadata is read/written from in-dir/<job>/data.txt
• Supports metadata fields: title, teaser, quote_da, date, place, description
• Manual media reordering via order.json (AJAX action reorder_file)
• Per-article toggles:
  • Preview (set_preview)
  • Render (set_enabled)
  • Show (set_visible)
  • Hide map (set_map_hidden -> .mvlog-hide-map)
• Custom video poster selection from input images (set_video_thumb)
• Describe button uses lib/generate_data_sync.php
• Job status polling via job_status.php every 32s

Ordering rules

For visual media ordering in admin/render flow:

1. order.json (authoritative when present)
2. embedded metadata datetime
3. filename datetime
4. filesystem datetime

order.json is web/admin-owned (worker consumes it).

Contact form (contact.php)

• Fields: name, email, message + honeypot anti-spam field
• Uses PHP mail()
• On success: redirects to https://bubulescu.org/
• Recipient is configured in contact.php ($to_email)

Push notifications

Files:

• push_config.php — exposes only public VAPID key
• push_subscribe.php — stores subscriptions in cache/push_subscriptions.json
• lib/send_push.php + send_push.js — server-side send logic
• api/enable_show.php — triggers push on Show enable
• sw.js — service worker fallback notification text

Current text behavior:

• payload body: New aticle @ MVL!
• SW fallback title/body: MVL / New article @ MVL!

Push config is loaded from first available:

• /etc/mvlog/push.php
• /etc/mvlog/push.json
• /var/www/html/mvlog/push.json
• ~/.config/mvlog/push.json

Auth

• Session cookie name: MVLOGSESSID
• Cookie path: /
• Auth config: /etc/mvlog/auth.php

Runtime config (config.php)

return [
  "site_name" => "Admin MVLog",
  "videos_dir" => __DIR__ . "/out-dir",
  "thumbs_dir" => __DIR__ . "/thumbs",
  "uploads_dir" => __DIR__ . "/in-dir",
  "public_videos" => "out-dir",
  "public_thumbs" => "thumbs",
  "items_per_page" => 8,
];

Notes

• contact.php is currently in .gitignore.
• Keep secrets out of git (push.json, private keys, auth secrets).
• Worker/rendering is handled by separate movmaker worker project.