Commit Graph

16 Commits

Author SHA1 Message Date
naielv
98f430188c Enhance security and input sanitization across multiple files
- Added a new tools.security.php file containing functions for sanitizing filenames, paths, and user inputs to prevent directory traversal and XSS attacks.
- Updated various files to utilize the new sanitization functions (Sf, Si) for user inputs and file operations, ensuring safer handling of data.
- Improved HTML output safety by applying htmlspecialchars to user-generated content in pre-body.php, cal.php, and other relevant files.
- Refactored user authentication and data retrieval processes in tools.auth.php and _login.php to enhance security and maintainability.
- Ensured consistent use of sanitization functions in API endpoints and admin functionalities to mitigate potential security vulnerabilities.
2026-02-18 23:22:58 +01:00
Naiel
5834650273 Enhance Dockerfile with opcache configuration and update PHP extension installation; improve project description in proyectos.php; remove unused lazo.php file 2026-02-06 23:23:04 +00:00
Naiel
33f97a77a3 fix 2026-02-02 10:20:31 +00:00
naielv
9799d8534d update 2026-02-01 23:02:39 +01:00
naielv
6620980f02 Finished (for now) projects module, with secure PDF viewer. 2026-02-01 14:18:37 +01:00
naielv
de6cddf722 update 2026-02-01 03:11:45 +01:00
copilot-swe-agent[bot]
4e362f8a05 Fix misleading comments and improve clarity of permission level messages
Co-authored-by: naielv <109038805+naielv@users.noreply.github.com>
2026-01-31 20:40:21 +00:00
copilot-swe-agent[bot]
83d254fd99 Implement approval workflow for request_edit permission level
Co-authored-by: naielv <109038805+naielv@users.noreply.github.com>
2026-01-31 20:39:14 +00:00
copilot-swe-agent[bot]
88fb053031 Add permission levels for linked projects (read-only, request edit, full edit)
Co-authored-by: naielv <109038805+naielv@users.noreply.github.com>
2026-01-31 20:36:55 +00:00
copilot-swe-agent[bot]
1c3aef8345 Implement selective project sharing between aularios via JSON configuration
Co-authored-by: naielv <109038805+naielv@users.noreply.github.com>
2026-01-31 20:33:32 +00:00
Naiel
bf9707c9e7 Fix include statement placement in proyectos.php 2026-01-31 21:01:26 +01:00
copilot-swe-agent[bot]
c4edc6f436 Add sub-project functionality with 3-level hierarchy support
Co-authored-by: naielv <109038805+naielv@users.noreply.github.com>
2026-01-31 19:47:15 +00:00
copilot-swe-agent[bot]
d057d29e5b Fix PHP syntax error in file validation logic
Co-authored-by: naielv <109038805+naielv@users.noreply.github.com>
2026-01-31 19:40:32 +00:00
copilot-swe-agent[bot]
6c8f09ee7a Add ARASAAC pictograms to Proyectos module
Co-authored-by: naielv <109038805+naielv@users.noreply.github.com>
2026-01-31 19:35:20 +00:00
copilot-swe-agent[bot]
568640539b Security improvements: fix permissions, add file validation, improve error handling
Co-authored-by: naielv <109038805+naielv@users.noreply.github.com>
2026-01-31 19:29:49 +00:00
copilot-swe-agent[bot]
eb6d23acf8 Add Proyectos module with file and link management
Co-authored-by: naielv <109038805+naielv@users.noreply.github.com>
2026-01-31 19:21:39 +00:00