Commit Graph

20 Commits

Author SHA1 Message Date
naielv
98f430188c Enhance security and input sanitization across multiple files
- Added a new tools.security.php file containing functions for sanitizing filenames, paths, and user inputs to prevent directory traversal and XSS attacks.
- Updated various files to utilize the new sanitization functions (Sf, Si) for user inputs and file operations, ensuring safer handling of data.
- Improved HTML output safety by applying htmlspecialchars to user-generated content in pre-body.php, cal.php, and other relevant files.
- Refactored user authentication and data retrieval processes in tools.auth.php and _login.php to enhance security and maintainability.
- Ensured consistent use of sanitization functions in API endpoints and admin functionalities to mitigate potential security vulnerabilities.
2026-02-18 23:22:58 +01:00
Naiel
1e6f6be18f Add diario.php for student diary management and update images
- Created a new file `diario.php` to manage and display student diaries.
- Implemented user permission checks to restrict access to docentes.
- Added functionality to list students and their diary entries based on selected aulario.
- Included validation for directory paths and error handling for missing data.
- Updated images `alumnos.png` and `yo.png` in the static assets.
2026-02-18 11:38:48 +00:00
naielv
51fd926065 Actualizar la configuración de autenticación y mejorar la gestión de sesiones 2026-02-17 14:33:51 +01:00
Naiel
5e3bbe45ba Fix JavaScript function call and update onclick handler 2026-02-14 15:08:04 +01:00
Naiel
618fc6679b Escape special characters in alumno name 2026-02-14 15:02:02 +01:00
Naiel
c8e6c617e2 Fix student selection announcement and data structure 2026-02-14 14:52:20 +01:00
Naiel
73687ef617 Change link from javascript:void(0) to # 2026-02-14 14:41:38 +01:00
copilot-swe-agent[bot]
b5d71a473d Add realpath validation and accessibility improvements
Co-authored-by: naielv <109038805+naielv@users.noreply.github.com>
2026-02-14 13:21:09 +00:00
copilot-swe-agent[bot]
a3eeda2dc5 Fix security issues in ¿Quién soy? flow
Co-authored-by: naielv <109038805+naielv@users.noreply.github.com>
2026-02-14 13:19:56 +00:00
copilot-swe-agent[bot]
302992c10b Add ¿Quién soy? flow to Panel Diario
Co-authored-by: naielv <109038805+naielv@users.noreply.github.com>
2026-02-14 13:18:22 +00:00
naielv
30fce4b5a9 v2.0,0 - Refactor code structure for improved readability and maintainability 2026-02-13 01:56:00 +01:00
Naiel
356cf32f38 Remove unnecessary line break in actividades section for cleaner layout 2026-02-06 23:31:10 +00:00
naielv
6620980f02 Finished (for now) projects module, with secure PDF viewer. 2026-02-01 14:18:37 +01:00
naielv
dbe4601f65 update 2026-01-29 22:11:09 +01:00
naielv
436fd17cc6 Fix nav, paneldiario, index logout url, Refactor card-body divs to improve consistency across multiple files 2026-01-28 20:24:16 +01:00
Naiel
cbb2a05e35 fix paneldiario 2026-01-28 15:04:54 +00:00
naielv
d41915056e Fix paneldiario, change auth system. 2026-01-27 21:42:45 +01:00
naielv
2e956575aa Now using bootstrap 2026-01-27 19:21:49 +01:00
Naiel
62929e7565 More stuff & install system 2026-01-26 13:53:21 +00:00
naielv
89d049af37 initial semi release 2026-01-24 20:16:23 +01:00