9 Commits

Include renames

Author	SHA1	Message	Date
Thanakorn	8705be0d1b	Enforce roles on admin endpoints and return real status codes ... - users, SMTP and batch-lock endpoints are owner/admin only - engines answer 400/403/404/409/500 instead of 200 with an error body; database errors no longer leak to the client	2026-09-24 14:53:40 +07:00
Thanakorn	e579dd596c	Start every session through session.php; idle timeout, app access and auth status codes	2026-09-24 14:30:35 +07:00
Thanakorn	c89b28da4c	Fix QA review findings: server-side validation, notes encoding, dashboard totals ... Validate document lines on the server and recompute their totals, store notes with quotes/markup/emoji (utf8mb4, idempotent escaping, decode in form fields), exclude transfers from company-wide stock in/out, count revenue from confirmed orders only, one low-stock rule everywhere, list unapproved lots, natural bin sort, stable order/PO sort, status tiles that add up.	2026-09-19 10:58:42 +07:00
Thanakorn	c915379e2e	Fix item counts, PR/QT conversions, validation and department loss	2026-09-15 16:11:47 +07:00
Thanakorn S	1a952b42dd	Seal transaction limit coverage gaps	2026-05-26 13:10:54 +07:00
Thanakorn S	5c0166ae73	Seal live dashboard event gaps	2026-05-25 17:02:52 +07:00
Thanakorn S	5ca6b49fd0	code audit fixes: require_once, issue flow, role guards	2026-05-23 17:06:08 +07:00
Thanakorn S	91f8bb854f	review code pattern consistency	2026-05-20 13:07:57 +07:00
Thanakorn S	7396db6ffc	accounting workflows	2026-05-20 10:17:02 +07:00