closing security gap [ignore guarding change for now]

2026-05-07 10:29:14 +07:00
parent a24930f684
commit a75d37e841
13 changed files with 39 additions and 93 deletions
@@ -60,6 +60,7 @@
 require '../../../session.php';
 require '../../../config.php';
 require '../../../preset.php';
+define('UNAUTHENTICATED_ROUTE', true);
 require '../../../assets/utils/db_auth.php';

 // ── Step 1: Resolve user_id from username or email (case-insensitive) ────────