5 Commits

Include renames

Author	SHA1	Message	Date
Thanakorn	8705be0d1b	Enforce roles on admin endpoints and return real status codes ... - users, SMTP and batch-lock endpoints are owner/admin only - engines answer 400/403/404/409/500 instead of 200 with an error body; database errors no longer leak to the client	2026-09-24 14:53:40 +07:00
Thanakorn	e579dd596c	Start every session through session.php; idle timeout, app access and auth status codes	2026-09-24 14:30:35 +07:00
Thanakorn S	5ca6b49fd0	code audit fixes: require_once, issue flow, role guards	2026-05-23 17:06:08 +07:00
Thanakorn S	0d2fa3e3bd	encapsulate setting api [OOP]	2026-05-07 08:56:40 +07:00
Thanakorn S	d8fd30c961	Login , Register ,and onboarding	2026-04-28 11:59:49 +07:00