14 Commits
Author SHA1 Message Date
Thanakorn ae98dcdcdd Harden web root, secrets and realtime auth
- .htaccess: refuse .git, .env, docker, nodejs, sdlc*, scripts, archives and
  app internals; security headers, HSTS over TLS, optional HTTPS redirect
- uploads served through app/file.php to signed-in users only
- Apache/PHP hardening config for the container (ServerTokens, expose_php)
- least-privilege DB account and APP_SECRET_KEY via docker/php/provision.php;
  SMTP passwords re-encrypted with a random IV (secret_box.php)
- Socket.IO rooms from a PHP-signed token; /emit and cron refuse empty secrets
- escape notification text; CLI guards on build scripts; no fixed demo password
2026-09-24 14:53:40 +07:00
Thanakorn 234814a23c Seed Demo Data - Rebranding 2026-08-17 13:12:07 +07:00
Thanakorn S 0815ae3292 document number sequence 2026-05-26 08:19:40 +07:00
Thanakorn S 1237888ab9 stock aggregate table 2026-05-25 13:30:10 +07:00
Thanakorn S 5780183b82 gl aggregate table (ETL), cronjob by NODEJS 2026-05-23 10:52:27 +07:00
Thanakorn S cf25732da0 use roles guards 2026-05-22 08:45:35 +07:00
Thanakorn S d57a361aa6 finalize logo 2026-05-08 16:19:56 +07:00
Thanakorn S 47cc2819d3 encapsulate Barcode Operations [OOP] 2026-05-07 08:41:08 +07:00
Thanakorn S 2eb6a1a315 roles guard + docs + logo 2026-05-06 16:37:20 +07:00
Thanakorn S ada701bd53 Barcode Operations 2026-05-06 15:27:52 +07:00
Thanakorn S ac4fd9a5ad implement JS password scoring, td_stock approve logicc 2026-04-30 15:14:42 +07:00
Thanakorn S d8fd30c961 Login , Register ,and onboarding 2026-04-28 11:59:49 +07:00
Thanakorn S d8c55d278a app settings 2026-04-27 10:50:31 +07:00
Thanakorn S a4f474b5df ICS modules 2026-03-21 14:58:15 +07:00