Files
pl_mail/docs/install
Paul LütznerandClaude Fable 5 7e3ba2b9c0 Reset the topbar globals per request, stop exporting the database's own keys, and offer a password
Three fixes riding one pass:

LogAlertGlobal memoised per request and was reset per request only under
PHP-FPM. FrankenPHP keeps the service alive, so the first badge a worker
computed was the badge every later request got - an emptied log table
with a yellow outline that survives refresh, seen in the wild. All four
stateful Twig globals now implement ResetInterface like InviteReader
always has; SidebarCounts and CalendarGlobal could additionally leak one
user's counts into another user's topbar.

POSTGRES_PASSWORD, postgres_password and DATABASE_URL leave the backup:
machine-local, initdb-consumed, never applicable on a restore target.
Old backups that carry them still import - recognised and classified
external, not silently dropped.

The export form gains an optional generate button: fills both fields,
puts the password on the clipboard and says so; where the browser
withholds its clipboard the fields unmask instead, because a masked
password nobody was told is not a backup anyone can open.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-07 18:45:21 +02:00
..