Commit Graph
13 Commits
Author SHA1 Message Date
Hamza-Ayed 8bc9290916 Safely initialize encryptionHelper and handle Throwable in Admin login.php 2026-07-24 23:42:39 +03:00
Hamza-Ayed 9e2964d307 Allow email and ID login in Admin auth login.php and bind web device fingerprint 2026-07-24 23:38:17 +03:00
Hamza-Ayed 12e70f3d7e Fix status warning in admin login 2026-07-23 20:34:27 +03:00
Hamza-Ayed 9cc14864a3 Update: 2026-06-29 00:26:08 2026-06-29 00:26:08 +03:00
Hamza-Ayed 03f26ce825 Update: 2026-06-29 00:12:38 2026-06-29 00:12:39 +03:00
Hamza-Ayed b57fd1cecb Update: 2026-06-25 18:59:57 2026-06-25 18:59:57 +03:00
Hamza-Ayed f3bafeb9e1 Update: 2026-06-25 18:57:58 2026-06-25 18:57:58 +03:00
Hamza-Ayed 7368feed11 Update: 2026-06-25 18:56:57 2026-06-25 18:56:57 +03:00
Hamza-Ayed 4a6b6d52a3 Update: 2026-06-25 18:53:08 2026-06-25 18:53:08 +03:00
Hamza-Ayed 2d607d9e90 Fix #19: Plaintext OTP hashing + hardcoded server paths
- Changed OTP storage in Admin/auth/login.php from plaintext to sha256 hash
- Updated Admin/auth/verify_login.php to hash user input before comparison
- Replaced hardcoded /home/siro-api/ paths with environment variables:
  - ERROR_LOG_PATH, ENV_FILE_PATH, SECRET_KEY_PAY_PATH, SECRET_KEY_PATH
  - Falls back to __DIR__-relative paths when env vars are unset
2026-06-17 07:49:46 +03:00
Hamza-Ayed fc58529b09 Update: 2026-06-16 01:17:28 2026-06-16 01:17:29 +03:00
Hamza-Ayed f907212c57 Update: 2026-06-12 20:40:40 2026-06-12 20:40:40 +03:00
Hamza-Ayed d8901e1a87 first commit 2026-06-09 08:40:31 +03:00