Thanakorn
8705be0d1b
Enforce roles on admin endpoints and return real status codes
...
- users, SMTP and batch-lock endpoints are owner/admin only
- engines answer 400/403/404/409/500 instead of 200 with an error body;
database errors no longer leak to the client
2026-09-24 14:53:40 +07:00
Thanakorn
73c680e844
Harden sign-in and password reset
...
- OTP attempt limits, constant-time compare, random reference codes
- DB-backed rate limits (429) on sign-in, OTP, reset, register, onboarding
- one generic sign-in failure message; reset request no longer reveals accounts
- no password kept in the session; real status codes on failures
2026-09-24 14:53:40 +07:00
Thanakorn
e579dd596c
Start every session through session.php; idle timeout, app access and auth status codes
2026-09-24 14:30:35 +07:00
Thanakorn
45331948c1
Use absolute URLs in invitation emails
2026-09-14 17:18:42 +07:00
Thanakorn
ba73456185
Send the chosen company when switching branch
2026-09-14 17:17:40 +07:00
Thanakorn
6a271c1f7d
Default the app registry when config.php does not define it
2026-09-14 16:57:36 +07:00
Thanakorn S
9e200d31fe
Security hardening: invited user onboarding flow (C1–N7)
2026-05-26 10:18:40 +07:00
Thanakorn S
0815ae3292
document number sequence
2026-05-26 08:19:40 +07:00
Thanakorn S
1237888ab9
stock aggregate table
2026-05-25 13:30:10 +07:00
Thanakorn S
5ca6b49fd0
code audit fixes: require_once, issue flow, role guards
2026-05-23 17:06:08 +07:00
Thanakorn S
5780183b82
gl aggregate table (ETL), cronjob by NODEJS
2026-05-23 10:52:27 +07:00
Thanakorn S
648efee991
softDelete features
2026-05-22 14:07:22 +07:00
Thanakorn S
cf25732da0
use roles guards
2026-05-22 08:45:35 +07:00
Thanakorn S
f2b87cfd0f
fix onboarding bugs
2026-05-21 16:51:19 +07:00
Thanakorn S
6eeebfeacb
1) user invitation 2) app access control 3) txn quota guard
2026-05-21 11:42:47 +07:00
Thanakorn S
7396db6ffc
accounting workflows
2026-05-20 10:17:02 +07:00
Thanakorn S
a75d37e841
closing security gap [ignore guarding change for now]
2026-05-07 10:29:14 +07:00
Thanakorn S
a24930f684
centralize roles guards
2026-05-07 09:26:39 +07:00
Thanakorn S
0d2fa3e3bd
encapsulate setting api [OOP]
2026-05-07 08:56:40 +07:00
Thanakorn S
2eb6a1a315
roles guard + docs + logo
2026-05-06 16:37:20 +07:00
Thanakorn S
414f1cd81d
warehouse layers [switchable]
2026-05-04 13:43:32 +07:00
Thanakorn S
a90975d9f1
Orders: order, return, invoice
2026-05-02 16:49:21 +07:00
Thanakorn S
ac4fd9a5ad
implement JS password scoring, td_stock approve logicc
2026-04-30 15:14:42 +07:00
Thanakorn S
d8fd30c961
Login , Register ,and onboarding
2026-04-28 11:59:49 +07:00
Thanakorn S
d8c55d278a
app settings
2026-04-27 10:50:31 +07:00
Thanakorn