Hamza-Ayed 50a5308f43 Fix #20: DDL removal from register.php, CORS policy, secret leak ...

- Removed ALTER TABLE DDL statements from Admin/auth/register.php (belongs in migration scripts)
- Added validated CORS with configurable allowed origins via CORS_ALLOWED_ORIGINS env var
- Removed  assignment in load_env.php (secrets no longer exposed in superglobal)

2026-06-17 07:51:01 +03:00

..

AdminCaptain

Fix #17: SQL injection + mass data exposure (backend)

2026-06-17 07:45:35 +03:00

AdminRide

first commit

2026-06-09 08:40:31 +03:00

adminUser

Fix #18: Exception leak remediation across 87 PHP files

2026-06-17 07:48:31 +03:00

auth

Fix #20: DDL removal from register.php, CORS policy, secret leak

2026-06-17 07:51:01 +03:00

driver

Fix #18: Exception leak remediation across 87 PHP files

2026-06-17 07:48:31 +03:00

employee

Update: 2026-06-12 20:40:40

2026-06-12 20:40:40 +03:00

error

Update: 2026-06-12 20:40:40

2026-06-12 20:40:40 +03:00

passenger

Fix #18: Exception leak remediation across 87 PHP files

2026-06-17 07:48:31 +03:00

rides

Fix #18: Exception leak remediation across 87 PHP files

2026-06-17 07:48:31 +03:00

Staff

Fix #18: Exception leak remediation across 87 PHP files

2026-06-17 07:48:31 +03:00

v2

Fix #18: Exception leak remediation across 87 PHP files

2026-06-17 07:48:31 +03:00

dashbord.php

Update: 2026-06-15 01:37:40

2026-06-15 01:37:41 +03:00

errorApp.php

fix(security): add role checks to 7 admin endpoints, fix undefined vars in admin_update_passenger, add input validation to send_whatsapp

2026-06-17 06:19:47 +03:00

facebook.php

Fix #18: Exception leak remediation across 87 PHP files

2026-06-17 07:48:31 +03:00

getPassengerbyEmail.php

first commit

2026-06-09 08:40:31 +03:00

getPassengerDetails.php

first commit

2026-06-09 08:40:31 +03:00

getPassengerDetailsByPassengerID.php

first commit

2026-06-09 08:40:31 +03:00

getVisaForEachDriver.php

Update: 2026-06-15 01:37:40

2026-06-15 01:37:41 +03:00

ggg.php

first commit

2026-06-09 08:40:31 +03:00

jwtService.php

Update: 2026-06-16 01:17:28

2026-06-16 01:17:29 +03:00

send_whatsapp_message.php

fix(security): add role checks to 7 admin endpoints, fix undefined vars in admin_update_passenger, add input validation to send_whatsapp

2026-06-17 06:19:47 +03:00

sendEmailToDrivertransaction.php

first commit

2026-06-09 08:40:31 +03:00

view_errors.php

Update: 2026-06-12 20:40:40

2026-06-12 20:40:40 +03:00