Thanakorn 73c680e844 Harden sign-in and password reset ...

- OTP attempt limits, constant-time compare, random reference codes
- DB-backed rate limits (429) on sign-in, OTP, reset, register, onboarding
- one generic sign-in failure message; reset request no longer reveals accounts
- no password kept in the session; real status codes on failures

2026-09-24 14:53:40 +07:00

..

BarcodeManager.php

Classe methods: remove reducdancy

2026-05-29 08:56:58 +07:00

BatchActionManager.php

accounting workflows

2026-05-20 10:17:02 +07:00

CompanyProfileManager.php

Accept uppercase channel names in onboarding and company settings

2026-09-14 13:31:26 +07:00

CompanySettingManager.php

Change 'Rack' to 'Bin'

2026-05-27 17:14:53 +07:00

ContactManager.php

Classe methods: remove reducdancy

2026-05-29 08:56:58 +07:00

DocumentNumberManager.php

document number sequence

2026-05-26 08:19:40 +07:00

DocumentValidator.php

Fix QA review findings: server-side validation, notes encoding, dashboard totals

2026-09-19 10:58:42 +07:00

EtlStockManager.php

Scope stock table access by company warehouses

2026-05-28 15:36:49 +07:00

FileUploader.php

modify classed and comments

2026-04-29 14:21:09 +07:00

InvoiceManager.php

Fix customer return confirm, auto credit note VAT and quotation link

2026-09-19 07:32:07 +07:00

OperationLockManager.php

accounting workflows

2026-05-20 10:17:02 +07:00

OrderManager.php

Fix QA review findings: server-side validation, notes encoding, dashboard totals

2026-09-19 10:58:42 +07:00

PasswordManager.php

implement JS password scoring, td_stock approve logicc

2026-04-30 15:14:42 +07:00

PasswordResetManager.php

Harden sign-in and password reset

2026-09-24 14:53:40 +07:00

PaymentBillingManager.php

document number sequence

2026-05-26 08:19:40 +07:00

PaymentManager.php

document number sequence

2026-05-26 08:19:40 +07:00

PostingManager.php

accounting modules

2026-05-13 15:11:24 +07:00

ProductManager.php

Fix QA review findings: server-side validation, notes encoding, dashboard totals

2026-09-19 10:58:42 +07:00

PurchaseOrderManager.php

Fix QA review findings: server-side validation, notes encoding, dashboard totals

2026-09-19 10:58:42 +07:00

PurchaseRequestManager.php

Fix QA review findings: server-side validation, notes encoding, dashboard totals

2026-09-19 10:58:42 +07:00

QuotationManager.php

Fix QA review findings: server-side validation, notes encoding, dashboard totals

2026-09-19 10:58:42 +07:00

ReceiptBillingManager.php

document number sequence

2026-05-26 08:19:40 +07:00

ReceiptManager.php

document number sequence

2026-05-26 08:19:40 +07:00

ReportManager.php

Fix QA review findings: server-side validation, notes encoding, dashboard totals

2026-09-19 10:58:42 +07:00

ReturnManager.php

Fix customer return confirm, auto credit note VAT and quotation link

2026-09-19 07:32:07 +07:00

SmtpManager.php

Harden web root, secrets and realtime auth

2026-09-24 14:53:40 +07:00

StockManager.php

Fix stock-out boot, transfer 500, Clear buttons and uncaught engine errors

2026-09-18 20:21:34 +07:00

StockSourceManager.php

Scope stock table access by company warehouses

2026-05-28 15:36:49 +07:00

StockTablesTrait.php

Classe methods: remove reducdancy

2026-05-29 08:56:58 +07:00

SupplierReturnManager.php

Fix item counts, PR/QT conversions, validation and department loss

2026-09-15 16:11:47 +07:00

UsageGuard.php

1) user invitation 2) app access control 3) txn quota guard

2026-05-21 11:42:47 +07:00

UserManager.php

Security hardening: invited user onboarding flow (C1–N7)

2026-05-26 10:18:40 +07:00

WarehouseManager.php

Fix QA review findings: server-side validation, notes encoding, dashboard totals

2026-09-19 10:58:42 +07:00