wms-app

Files

T

Thanakorn SandClaude Sonnet 4.6 fda211b1a8 Block concurrent login: reject new session if account already active

If session_token is set and session_last_seen is within the last hour,
the incoming login is rejected with a clear message. Stale sessions
(idle > 1 h) and explicit logouts (token = NULL via back.php) still allow
re-login normally.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-28 16:21:55 +07:00

accept_invite.php

Security hardening: invited user onboarding flow (C1–N7)

2026-05-26 10:18:40 +07:00

back.php

Close login gap

2026-05-25 15:34:12 +07:00

invited_onboarding.php

Security hardening: invited user onboarding flow (C1–N7)

2026-05-26 10:18:40 +07:00

login_confirm.php

Block concurrent login: reject new session if account already active