8 Commits

Include renames

Author	SHA1	Message	Date
Thanakorn	73c680e844	Harden sign-in and password reset ... - OTP attempt limits, constant-time compare, random reference codes - DB-backed rate limits (429) on sign-in, OTP, reset, register, onboarding - one generic sign-in failure message; reset request no longer reveals accounts - no password kept in the session; real status codes on failures	2026-09-24 14:53:40 +07:00
nok	618045540a	fix login and configurations	2026-08-03 11:17:41 +07:00
Thanakorn S	5ca6b49fd0	code audit fixes: require_once, issue flow, role guards	2026-05-23 17:06:08 +07:00
Thanakorn S	a75d37e841	closing security gap [ignore guarding change for now]	2026-05-07 10:29:14 +07:00
Thanakorn S	f6dc9a3278	modify classed and comments	2026-04-29 14:21:09 +07:00
Thanakorn S	d8fd30c961	Login , Register ,and onboarding	2026-04-28 11:59:49 +07:00
Thanakorn S	7cb78d013b	Complete security audit fixes	2026-03-09 14:31:39 +07:00
Thanakorn S	9a50080ae5	init wms	2026-02-19 14:48:40 +07:00