Thanakorn 73c680e844 Harden sign-in and password reset ...

- OTP attempt limits, constant-time compare, random reference codes
- DB-backed rate limits (429) on sign-in, OTP, reset, register, onboarding
- one generic sign-in failure message; reset request no longer reveals accounts
- no password kept in the session; real status codes on failures

2026-09-24 14:53:40 +07:00

app

Harden sign-in and password reset

2026-09-24 14:53:40 +07:00

docker

Harden web root, secrets and realtime auth

2026-09-24 14:53:40 +07:00

landing

Seed Demo Data - Rebranding

2026-08-17 13:12:07 +07:00

lib/zxcvbn-php-master

document number sequence

2026-05-26 08:19:40 +07:00

nodejs

Harden web root, secrets and realtime auth

2026-09-24 14:53:40 +07:00

scripts

Harden web root, secrets and realtime auth

2026-09-24 14:53:40 +07:00

sdlc

SDLC docs alignment

2026-08-18 12:37:28 +07:00

sdlc-delivery

SDLC delivery package

2026-08-18 13:22:26 +07:00

.env.example

Make email OTP login off by default

2026-09-14 15:38:36 +07:00

.gitignore

Stop tracking PM2 log files

2026-09-14 17:05:57 +07:00

.htaccess

Harden web root, secrets and realtime auth

2026-09-24 14:53:40 +07:00

composer.json

Seed Demo Data - Rebranding

2026-08-17 13:12:07 +07:00

demo_seed_more_orders.php

Fix transfer quantity, unify date format, align demo seeds

2026-09-15 13:09:19 +07:00

demo_seed_transactions.php

Fix customer return confirm, auto credit note VAT and quotation link

2026-09-19 07:32:07 +07:00

demo_seed.php

Harden web root, secrets and realtime auth

2026-09-24 14:53:40 +07:00

docker-compose.yml

Harden web root, secrets and realtime auth

2026-09-24 14:53:40 +07:00

index.php

fix login and configurations

2026-08-03 11:17:41 +07:00

sdlc-delivery.zip

SDLC delivery package

2026-08-18 13:22:26 +07:00

setup.php

Harden web root, secrets and realtime auth

2026-09-24 14:53:40 +07:00

S

Description

No description provided

211 MiB

Languages

PHP 95.7%

JavaScript 2.2%

CSS 1.7%

Python 0.3%