code audit fixes: require_once, issue flow, role guards

2026-05-23 17:06:08 +07:00
parent 54f3f11fd2
commit 5ca6b49fd0
191 changed files with 534 additions and 464 deletions
@@ -21,9 +21,9 @@
 *   { "success": 1 }
 */

-require '../../../session.php';
+require_once '../../../session.php';
 define('UNAUTHENTICATED_ROUTE', true);
-require '../../../assets/utils/db_auth.php';
+require_once '../../../assets/utils/db_auth.php';

 // Intentional 1-second delay — prevents timing attacks on session enumeration
 sleep(1);