From 2cb0be5395d4182550a6d532a6011df531f594a0 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Fri, 17 Jul 2026 15:12:18 +0000
Subject: [PATCH] Fix custom CSS injection on auth frontend pages

---
 app/Views/auth/forgot-password.php     |  1 +
 app/Views/auth/login.php               |  1 +
 app/Views/auth/partials/custom-css.php | 13 +++++++++++++
 app/Views/auth/register.php            |  1 +
 app/Views/auth/register_success.php    |  1 +
 app/Views/auth/reset-password.php      |  1 +
 app/Views/frontend/layout.php          | 12 ++----------
 7 files changed, 20 insertions(+), 10 deletions(-)
 create mode 100644 app/Views/auth/partials/custom-css.php
diff --git a/app/Views/auth/forgot-password.php b/app/Views/auth/forgot-password.php
index be5b8db2f..069b6808f 100644
--- a/app/Views/auth/forgot-password.php
+++ b/app/Views/auth/forgot-password.php
@@ -19,6 +19,7 @@
     <style>
         body { font-family: system-ui, -apple-system, sans-serif; }
     </style>
+    <?php require __DIR__ . '/partials/custom-css.php'; ?>
 </head>
 <body class="bg-gray-50 dark:bg-gray-900">
 
diff --git a/app/Views/auth/login.php b/app/Views/auth/login.php
index 3d956cd42..d59134f22 100644
--- a/app/Views/auth/login.php
+++ b/app/Views/auth/login.php
@@ -25,6 +25,7 @@
     <style>
         body { font-family: system-ui, -apple-system, sans-serif; }
     </style>
+    <?php require __DIR__ . '/partials/custom-css.php'; ?>
 </head>
 <body class="bg-gray-50">
 
diff --git a/app/Views/auth/partials/custom-css.php b/app/Views/auth/partials/custom-css.php
new file mode 100644
index 000000000..ebf549c0d
--- /dev/null
+++ b/app/Views/auth/partials/custom-css.php
@@ -0,0 +1,13 @@
+<?php
+
+use App\Support\ConfigStore;
+use App\Support\ContentSanitizer;
+
+$customCss = ConfigStore::get('advanced.custom_header_css', '');
+$customCss = is_string($customCss) ? ContentSanitizer::normalizeExternalAssets($customCss) : $customCss;
+if (!empty($customCss)):
+    ?>
+    <style>
+        <?= $customCss ?>
+    </style>
+<?php endif; ?>
diff --git a/app/Views/auth/register.php b/app/Views/auth/register.php
index 14a074ed3..baa22d93f 100644
--- a/app/Views/auth/register.php
+++ b/app/Views/auth/register.php
@@ -23,6 +23,7 @@
     <style>
         body { font-family: system-ui, -apple-system, sans-serif; }
     </style>
+    <?php require __DIR__ . '/partials/custom-css.php'; ?>
 </head>
 <body class="bg-gray-50">
 
diff --git a/app/Views/auth/register_success.php b/app/Views/auth/register_success.php
index 8ac489b0b..680129b16 100644
--- a/app/Views/auth/register_success.php
+++ b/app/Views/auth/register_success.php
@@ -22,6 +22,7 @@
     <style>
         body { font-family: system-ui, -apple-system, sans-serif; }
     </style>
+    <?php require __DIR__ . '/partials/custom-css.php'; ?>
 </head>
 <body class="bg-gray-50 dark:bg-gray-900">
 
diff --git a/app/Views/auth/reset-password.php b/app/Views/auth/reset-password.php
index 53270fb59..668baf427 100644
--- a/app/Views/auth/reset-password.php
+++ b/app/Views/auth/reset-password.php
@@ -19,6 +19,7 @@
     <style>
         body { font-family: system-ui, -apple-system, sans-serif; }
     </style>
+    <?php require __DIR__ . '/partials/custom-css.php'; ?>
 </head>
 <body class="bg-gray-50 dark:bg-gray-900">
 
diff --git a/app/Views/frontend/layout.php b/app/Views/frontend/layout.php
index 14c2aad1d..ba20c8082 100644
--- a/app/Views/frontend/layout.php
+++ b/app/Views/frontend/layout.php
@@ -1262,16 +1262,8 @@
         <?= $additional_css ?? '' ?>
     </style>
 
-    <?php
-    // Load custom CSS from settings
-    $customCss = ConfigStore::get('advanced.custom_header_css', '');
-    $customCss = is_string($customCss) ? ContentSanitizer::normalizeExternalAssets($customCss) : $customCss;
-    if (!empty($customCss)):
-        ?>
-        <style>
-            <?= $customCss ?>
-        </style>
-    <?php endif; ?>
+    <!-- Load custom CSS from settings -->
+    <?php require __DIR__ . '/../auth/partials/custom-css.php'; ?>
 
     <?php
     // Load custom JavaScript from settings (granular by cookie category)
