naielv
98f430188c
Enhance security and input sanitization across multiple files
...
- Added a new tools.security.php file containing functions for sanitizing filenames, paths, and user inputs to prevent directory traversal and XSS attacks.
- Updated various files to utilize the new sanitization functions (Sf, Si) for user inputs and file operations, ensuring safer handling of data.
- Improved HTML output safety by applying htmlspecialchars to user-generated content in pre-body.php, cal.php, and other relevant files.
- Refactored user authentication and data retrieval processes in tools.auth.php and _login.php to enhance security and maintainability.
- Ensured consistent use of sanitization functions in API endpoints and admin functionalities to mitigate potential security vulnerabilities.
2026-02-18 23:22:58 +01:00
Naiel
5834650273
Enhance Dockerfile with opcache configuration and update PHP extension installation; improve project description in proyectos.php; remove unused lazo.php file
2026-02-06 23:23:04 +00:00
Naiel
33f97a77a3
fix
2026-02-02 10:20:31 +00:00
naielv
9799d8534d
update
2026-02-01 23:02:39 +01:00
naielv
6620980f02
Finished (for now) projects module, with secure PDF viewer.
2026-02-01 14:18:37 +01:00
naielv
de6cddf722
update
2026-02-01 03:11:45 +01:00
copilot-swe-agent[bot]
4e362f8a05
Fix misleading comments and improve clarity of permission level messages
...
Co-authored-by: naielv <109038805+naielv@users.noreply.github.com >
2026-01-31 20:40:21 +00:00
copilot-swe-agent[bot]
83d254fd99
Implement approval workflow for request_edit permission level
...
Co-authored-by: naielv <109038805+naielv@users.noreply.github.com >
2026-01-31 20:39:14 +00:00
copilot-swe-agent[bot]
88fb053031
Add permission levels for linked projects (read-only, request edit, full edit)
...
Co-authored-by: naielv <109038805+naielv@users.noreply.github.com >
2026-01-31 20:36:55 +00:00
copilot-swe-agent[bot]
1c3aef8345
Implement selective project sharing between aularios via JSON configuration
...
Co-authored-by: naielv <109038805+naielv@users.noreply.github.com >
2026-01-31 20:33:32 +00:00
Naiel
bf9707c9e7
Fix include statement placement in proyectos.php
2026-01-31 21:01:26 +01:00
copilot-swe-agent[bot]
c4edc6f436
Add sub-project functionality with 3-level hierarchy support
...
Co-authored-by: naielv <109038805+naielv@users.noreply.github.com >
2026-01-31 19:47:15 +00:00
copilot-swe-agent[bot]
d057d29e5b
Fix PHP syntax error in file validation logic
...
Co-authored-by: naielv <109038805+naielv@users.noreply.github.com >
2026-01-31 19:40:32 +00:00
copilot-swe-agent[bot]
6c8f09ee7a
Add ARASAAC pictograms to Proyectos module
...
Co-authored-by: naielv <109038805+naielv@users.noreply.github.com >
2026-01-31 19:35:20 +00:00
copilot-swe-agent[bot]
568640539b
Security improvements: fix permissions, add file validation, improve error handling
...
Co-authored-by: naielv <109038805+naielv@users.noreply.github.com >
2026-01-31 19:29:49 +00:00
copilot-swe-agent[bot]
eb6d23acf8
Add Proyectos module with file and link management
...
Co-authored-by: naielv <109038805+naielv@users.noreply.github.com >
2026-01-31 19:21:39 +00:00