Commit Graph

  • ce6f22dc71 Update: 2026-06-21 03:02:56 main Hamza-Ayed 2026-06-21 03:02:56 +03:00
  • 2ac086d1fd Update: 2026-06-21 02:53:01 Hamza-Ayed 2026-06-21 02:53:02 +03:00
  • b2fae9ec66 Update: 2026-06-21 02:07:00 Hamza-Ayed 2026-06-21 02:07:00 +03:00
  • af3dcae5b7 Update: 2026-06-19 15:33:32 Hamza-Ayed 2026-06-19 15:33:32 +03:00
  • 017bec86fa Update: 2026-06-19 14:01:15 Hamza-Ayed 2026-06-19 14:01:15 +03:00
  • a0495147c4 Update: 2026-06-19 02:01:34 Hamza-Ayed 2026-06-19 02:01:34 +03:00
  • a003bf78c4 Update: 2026-06-19 01:47:48 Hamza-Ayed 2026-06-19 01:47:48 +03:00
  • f13faa8c31 Update: 2026-06-18 16:46:30 Hamza-Ayed 2026-06-18 16:46:30 +03:00
  • 8b52d2f115 feat: add Nabeh integration with phone-to-user resolution and environment configuration support Hamza-Ayed 2026-06-18 14:59:24 +03:00
  • 72fa97477b Update: 2026-06-17 18:22:52 Hamza-Ayed 2026-06-17 18:22:52 +03:00
  • b67417eb98 Add Nabeh integration: nabeh/ endpoints with NABEH_API_KEY auth Hamza-Ayed 2026-06-17 18:22:45 +03:00
  • c2c4ed22e3 Fix: SSL pinning, root detection, network resilience, and compile errors Hamza-Ayed 2026-06-17 16:41:02 +03:00
  • 264e005a7b fix: PHP syntax errors in upload files and composer config Hamza-Ayed 2026-06-17 08:41:16 +03:00
  • 2c56d2f41e Fix #24: Flutter generated plugin files + pubspec.lock after crypto dependency addition Hamza-Ayed 2026-06-17 08:19:09 +03:00
  • 752bbf3a63 Fix #23: JWT storage consistency across all Flutter apps Hamza-Ayed 2026-06-17 08:03:19 +03:00
  • a8748cf4c9 Fix #22: Medium-severity fixes (M-01 through M-07) Hamza-Ayed 2026-06-17 07:58:21 +03:00
  • 3543fdd2cd Fix #21: High-severity fixes (H-01 through H-06) Hamza-Ayed 2026-06-17 07:56:57 +03:00
  • 50a5308f43 Fix #20: DDL removal from register.php, CORS policy, secret leak Hamza-Ayed 2026-06-17 07:51:01 +03:00
  • 2d607d9e90 Fix #19: Plaintext OTP hashing + hardcoded server paths Hamza-Ayed 2026-06-17 07:49:46 +03:00
  • 790d58aaa2 remove temp fix script Hamza-Ayed 2026-06-17 07:48:34 +03:00
  • 72eeb24cd7 Fix #18: Exception leak remediation across 87 PHP files Hamza-Ayed 2026-06-17 07:48:31 +03:00
  • e51d266a0f Fix #17: SQL injection + mass data exposure (backend) Hamza-Ayed 2026-06-17 07:45:35 +03:00
  • f528e1d3c5 Fix #16: SSL pinning in all 4 Flutter apps Hamza-Ayed 2026-06-17 07:40:43 +03:00
  • 0e28814e7d Fix #15: PCI-DSS compliance - remove persistent CVV storage from Flutter apps Hamza-Ayed 2026-06-17 07:26:27 +03:00
  • 16331bd35d Fix #14: Remove unused privateKeyFCM (Firebase service account key) from Flutter apps Hamza-Ayed 2026-06-17 07:21:18 +03:00
  • 623d66a3d8 Fix #13: Remove hardcoded PII from Flutter apps, enable root detection in siro_admin Hamza-Ayed 2026-06-17 07:13:18 +03:00
  • 1a9619f9f8 fix(security): fix login AND logic to OR, add signup input validation, separate OTP rate limit keys Hamza-Ayed 2026-06-17 07:05:58 +03:00
  • 70c06edd71 fix(security): fix host header injection in upload_audio, email header injection, add SSL verify to MTN curl Hamza-Ayed 2026-06-17 06:57:56 +03:00
  • 75aeb73f27 fix(security): fix openssl_sign key resource in MTN initiate, add google-services.json to gitignore Hamza-Ayed 2026-06-17 06:55:36 +03:00
  • 1d3ea597f4 fix(security): wallet balance check with FOR UPDATE, remove user-supplied ID in signup, hardcoded IP to env Hamza-Ayed 2026-06-17 06:53:00 +03:00
  • 3dad979eb5 fix(security): remove JWT role extraction without signature, add OTP replay protection, fix user enumeration Hamza-Ayed 2026-06-17 06:45:53 +03:00
  • 81376a2245 fix(security): remove SSL bypass + hardcoded creds in face_detect, rider debug CA overrides, fix siro_service manifest Hamza-Ayed 2026-06-17 06:36:26 +03:00
  • c82b0071bb fix(security): wallet race conditions - FOR UPDATE + atomic claims on payments, webhooks, bonuses Hamza-Ayed 2026-06-17 06:34:51 +03:00
  • 0ceb67ee56 fix(security): fix SQL injection in updatePaymetToPaid, OTP random_int, static IV encryption, storage mismatch Hamza-Ayed 2026-06-17 06:31:13 +03:00
  • 8c6dea5d96 fix(security): add auth to FCM relay, HMAC to shamcash webhook, fix jwtconnect webhook bypass Hamza-Ayed 2026-06-17 06:27:07 +03:00
  • d6f29802e0 fix(security): fix pervasive IDOR - force JWT user identity in 9 endpoints, fix host injection, exception leaks, wallet auth Hamza-Ayed 2026-06-17 06:22:41 +03:00
  • 4a9e6b22c5 fix(security): add role checks to 7 admin endpoints, fix undefined vars in admin_update_passenger, add input validation to send_whatsapp Hamza-Ayed 2026-06-17 06:19:47 +03:00
  • 9bbda24d4a fix(security): add .gitignore, remove PEM keys and debug endpoints from tracking Hamza-Ayed 2026-06-17 06:17:03 +03:00
  • 28d30e3359 Update: 2026-06-17 03:24:05 Hamza-Ayed 2026-06-17 03:24:05 +03:00
  • fd30b9f6fa feat: add generate_study script for automated study content creation Hamza-Ayed 2026-06-16 22:44:47 +03:00
  • 850ed4390b refactor: remove unused interface definitions and deprecated utility helpers youthful-wake Hamza-Ayed 2026-06-16 22:44:33 +03:00
  • 2c3816badb Update: 2026-06-16 22:44:11 Hamza-Ayed 2026-06-16 22:44:11 +03:00
  • b516fbc4ed Update: 2026-06-16 17:47:17 Hamza-Ayed 2026-06-16 17:47:19 +03:00
  • 49899da6b2 Update: 2026-06-16 04:29:16 Hamza-Ayed 2026-06-16 04:29:16 +03:00
  • c0fe990ebe Update: 2026-06-16 02:52:06 Hamza-Ayed 2026-06-16 02:52:06 +03:00
  • 2c657fa0b4 Update: 2026-06-16 02:14:34 Hamza-Ayed 2026-06-16 02:14:35 +03:00
  • fc58529b09 Update: 2026-06-16 01:17:28 Hamza-Ayed 2026-06-16 01:17:29 +03:00
  • 04943e3d52 Update: 2026-06-15 19:39:21 Hamza-Ayed 2026-06-15 19:39:21 +03:00
  • c472a78416 Update: 2026-06-15 01:38:09 Hamza-Ayed 2026-06-15 01:38:10 +03:00
  • 2321b78244 Update: 2026-06-15 01:37:40 Hamza-Ayed 2026-06-15 01:37:41 +03:00
  • f021ba5a35 Update: 2026-06-14 22:10:07 Hamza-Ayed 2026-06-14 22:10:08 +03:00
  • 8e3b9eca4d Update: 2026-06-14 05:48:58 Hamza-Ayed 2026-06-14 05:48:58 +03:00
  • 2645ed0cf1 Update: 2026-06-14 04:27:17 Hamza-Ayed 2026-06-14 04:27:17 +03:00
  • 55970712cc Update: 2026-06-13 15:43:50 Hamza-Ayed 2026-06-13 15:43:50 +03:00
  • bfc530b013 Update: 2026-06-13 01:32:15 Hamza-Ayed 2026-06-13 01:32:15 +03:00
  • cb1b2d01df Update: 2026-06-13 00:57:17 Hamza-Ayed 2026-06-13 00:57:17 +03:00
  • 7893b2dc07 Update: 2026-06-13 00:08:00 Hamza-Ayed 2026-06-13 00:08:00 +03:00
  • 0ae368dbc8 Update: 2026-06-12 22:40:40 Hamza-Ayed 2026-06-12 22:40:40 +03:00
  • f907212c57 Update: 2026-06-12 20:40:40 Hamza-Ayed 2026-06-12 20:40:40 +03:00
  • 305ae01d52 Update: 2026-06-12 01:34:30 Hamza-Ayed 2026-06-12 01:34:30 +03:00
  • ef6b52d2e3 Update: 2026-06-12 01:23:54 Hamza-Ayed 2026-06-12 01:23:54 +03:00
  • 7049c7468c Update: 2026-06-11 21:53:27 Hamza-Ayed 2026-06-11 21:53:27 +03:00
  • b87477bec4 Update: 2026-06-11 19:26:42 Hamza-Ayed 2026-06-11 19:26:42 +03:00
  • 727068b668 Update: 2026-06-11 18:22:57 Hamza-Ayed 2026-06-11 18:22:59 +03:00
  • c5170a88d2 Update: 2026-06-11 13:47:39 Hamza-Ayed 2026-06-11 13:47:40 +03:00
  • 977adfe99d Update: 2026-06-10 18:11:50 Hamza-Ayed 2026-06-10 18:11:50 +03:00
  • a0473a8b0f Update: 2026-06-10 02:44:54 Hamza-Ayed 2026-06-10 02:44:55 +03:00
  • 9bc7a31c94 Push remaining files and update README Hamza-Ayed 2026-06-09 08:44:23 +03:00
  • d8901e1a87 first commit Hamza-Ayed 2026-06-09 08:40:31 +03:00