fix(core): migration to ensure that only admins can access special pages + gitignore and int type fix

Author: mrflos

.gitignore

@@ -33,6 +33,7 @@ robots.txt
 
 # YesWiki stuff
 .env
+.php-version
 wakka.config.php
 info.php
 cache/*

includes/YesWiki.php

@@ -1373,9 +1373,9 @@ public function parse_size($size)
         $size = preg_replace('/[^0-9\.]/', '', $size); // Remove the non-numeric characters from the size.
         if ($unit) {
             // Find the position of the unit in the ordered string which is the power of magnitude to multiply a kilobyte by.
-            return intval(round($size * pow(1024, stripos('bkmgtpezy', $unit[0]))));
+            return intval(round((int)$size * pow(1024, stripos('bkmgtpezy', $unit[0]))));
         } else {
-            return intval(round($size));
+            return intval(round((int)$size));
         }
     }
 

includes/migrations/20260121162311_SecureEditionOfSpecialPages.php

@@ -0,0 +1,22 @@
+<?php
+
+use YesWiki\Core\Service\AclService;
+use YesWiki\Core\YesWikiMigration;
+
+class SecureEditionOfSpecialPages extends YesWikiMigration
+{
+    protected const SPECIAL_PAGES = [
+        'BazaR', 'GererSite', 'GererDroits', 'GererThemes', 'GererMisesAJour', 'GererUtilisateurs',
+        'GererDroitsActions', 'GererDroitsHandlers', 'TableauDeBord',
+        'PageTitre', 'PageMenuHaut', 'PageRapideHaut', 'PageHeader', 'PageFooter', 'PageCSS', 'PageMenu',
+        'PageColonneDroite', 'MotDePassePerdu', 'ParametresUtilisateur', 'GererConfig', 'ActuYeswiki', 'LookWiki',
+    ];
+
+    public function run()
+    {
+        // Ensure that every special page is only editable by admins
+        foreach ($this::SPECIAL_PAGES as $page) {
+            $this->getService(AclService::class)->save($page, 'write', '@admins');
+        }
+    }
+}