8 Commits

Author	SHA1	Message	Date
Hamza-Ayed	2d607d9e90	Fix #19: Plaintext OTP hashing + hardcoded server paths ... - Changed OTP storage in Admin/auth/login.php from plaintext to sha256 hash - Updated Admin/auth/verify_login.php to hash user input before comparison - Replaced hardcoded /home/siro-api/ paths with environment variables: - ERROR_LOG_PATH, ENV_FILE_PATH, SECRET_KEY_PAY_PATH, SECRET_KEY_PATH - Falls back to __DIR__-relative paths when env vars are unset	2026-06-17 07:49:46 +03:00
Hamza-Ayed	0ceb67ee56	fix(security): fix SQL injection in updatePaymetToPaid, OTP random_int, static IV encryption, storage mismatch	2026-06-17 06:31:13 +03:00
Hamza-Ayed	c0fe990ebe	Update: 2026-06-16 02:52:06	2026-06-16 02:52:06 +03:00
Hamza-Ayed	2c657fa0b4	Update: 2026-06-16 02:14:34	2026-06-16 02:14:35 +03:00
Hamza-Ayed	fc58529b09	Update: 2026-06-16 01:17:28	2026-06-16 01:17:29 +03:00
Hamza-Ayed	f907212c57	Update: 2026-06-12 20:40:40	2026-06-12 20:40:40 +03:00
Hamza-Ayed	c5170a88d2	Update: 2026-06-11 13:47:39	2026-06-11 13:47:40 +03:00
Hamza-Ayed	d8901e1a87	first commit	2026-06-09 08:40:31 +03:00