3543fdd2cd
H-01: Egypt document uploads - added path traversal prevention (basename),
replaced HTTP_HOST with APP_DOMAIN env var
H-02: 7 remaining hardcoded /home/siro-api/ paths replaced with env vars
(ENV_FILE_PATH, INTERNAL_SOCKET_KEY_PATH, WEBHOOK_SECRET_KEY_PATH)
H-03: serviceapp/updateDriver.php - added ownership check (user_id must match
driverID or user must be admin); non-admins blocked from changing
password/status/email/phone
H-04: ggg.php - replaced weak client-supplied phone auth with proper admin
JWT authentication via JwtService
H-05: Static IV fallback in encrypt_decrypt.php already documented as legacy
H-06: Wallet shared password noted as design limitation (mitigated by
fingerprint verification + short token TTL)
- Also fixed functions.php log message (removed hardcoded path)
Siro Ecosystem 🚗📦
Welcome to Siro, a comprehensive suite of applications built to power a modern, scalable, and fully integrated ride-hailing and service delivery ecosystem.
Siro provides specialized solutions for every stakeholder in the transportation and delivery network, ensuring a seamless experience across all touchpoints.
📱 Applications Included
The Siro repository is a unified monorepo containing the following core applications:
- siro_rider: The customer-facing application. Users can easily book rides, request services, track their driver in real-time, and manage their payments securely.
- siro_driver: The captain/driver application. Provides drivers with ride requests, real-time navigation, earnings tracking, and a built-in wallet system.
- siro_admin: The centralized control panel for system administrators. Monitor active rides, manage drivers and users, adjust pricing algorithms, and view comprehensive analytics.
- siro_service: Dedicated application for specialized service providers within the Siro network, facilitating efficient task management and service fulfillment.
- backend: The robust and scalable backend infrastructure that powers the entire Siro ecosystem, handling real-time socket connections, database operations, and secure API endpoints.
🚀 Key Features
- Real-time Tracking: Live location updates for riders and drivers powered by precise socket integrations.
- Comprehensive Wallet System: Built-in digital wallet for both users and captains to handle payments, promotional points, and automated cashouts.
- Advanced Administrator Control: Complete oversight over the platform's operations, user base, and financial metrics.
- Multi-Service Capability: Beyond traditional ride-hailing, Siro supports various service requests seamlessly integrated into the ecosystem.
🛠 Tech Stack
Siro is built utilizing modern frameworks and tools to ensure high performance and maintainability across both mobile and backend environments.
- Frontend App: Flutter (Dart)
- Backend Infrastructure: Scalable Server Environment
- Payment Integration: Secure, robust handling of dynamic budgets and digital wallets.
⚙️ Setup & Deployment
- Make sure to run
flutter pub getin each of the app directories to fetch dependencies. - Use the provided
./deploy.shscript to quickly commit and push your changes to the remote repository.
Built with passion for a seamless transportation experience.