Thanakorn 73c680e844 Harden sign-in and password reset ...

- OTP attempt limits, constant-time compare, random reference codes
- DB-backed rate limits (429) on sign-in, OTP, reset, register, onboarding
- one generic sign-in failure message; reset request no longer reveals accounts
- no password kept in the session; real status codes on failures

2026-09-24 14:53:40 +07:00

..

css

Seed Demo Data - Rebranding

2026-08-17 13:12:07 +07:00

images

Seed Demo Data - Rebranding

2026-08-17 13:12:07 +07:00

js

Start every session through session.php; idle timeout, app access and auth status codes

2026-09-24 14:30:35 +07:00

utils

Harden sign-in and password reset

2026-09-24 14:53:40 +07:00

site.webmanifest

init wms

2026-02-19 14:48:40 +07:00