13 Commits

Include renames

Author	SHA1	Message	Date
Thanakorn	ae98dcdcdd	Harden web root, secrets and realtime auth ... - .htaccess: refuse .git, .env, docker, nodejs, sdlc*, scripts, archives and app internals; security headers, HSTS over TLS, optional HTTPS redirect - uploads served through app/file.php to signed-in users only - Apache/PHP hardening config for the container (ServerTokens, expose_php) - least-privilege DB account and APP_SECRET_KEY via docker/php/provision.php; SMTP passwords re-encrypted with a random IV (secret_box.php) - Socket.IO rooms from a PHP-signed token; /emit and cron refuse empty secrets - escape notification text; CLI guards on build scripts; no fixed demo password	2026-09-24 14:53:40 +07:00
Thanakorn	234814a23c	Seed Demo Data - Rebranding	2026-08-17 13:12:07 +07:00
Thanakorn S	dbbc89f8f2	notify node: userIDguard	2026-05-27 13:12:18 +07:00
Thanakorn S	632c039790	system notification	2026-05-26 13:26:57 +07:00
Thanakorn S	4bb378a905	accounting Reports	2026-05-23 15:07:11 +07:00
Thanakorn S	5a3bfa3435	NODE JS introduction: socket polling	2026-05-22 17:01:59 +07:00
Thanakorn S	6eeebfeacb	1) user invitation 2) app access control 3) txn quota guard	2026-05-21 11:42:47 +07:00
Thanakorn S	7396db6ffc	accounting workflows	2026-05-20 10:17:02 +07:00
Thanakorn S	7a87909392	web app security fix	2026-05-11 13:49:44 +07:00
Thanakorn S	d989e59edc	clear unrelevant files	2026-05-11 08:42:40 +07:00
Thanakorn S	a75d37e841	closing security gap [ignore guarding change for now]	2026-05-07 10:29:14 +07:00
Thanakorn S	a24930f684	centralize roles guards	2026-05-07 09:26:39 +07:00
Thanakorn S	9a50080ae5	init wms	2026-02-19 14:48:40 +07:00