Hamza-Ayed 2d607d9e90 Fix #19: Plaintext OTP hashing + hardcoded server paths ...

- Changed OTP storage in Admin/auth/login.php from plaintext to sha256 hash
- Updated Admin/auth/verify_login.php to hash user input before comparison
- Replaced hardcoded /home/siro-api/ paths with environment variables:
  - ERROR_LOG_PATH, ENV_FILE_PATH, SECRET_KEY_PAY_PATH, SECRET_KEY_PATH
  - Falls back to __DIR__-relative paths when env vars are unset

2026-06-17 07:49:46 +03:00

7.8 KiB

Raw Blame History

View Raw