3 Commits
Author SHA1 Message Date
xBeaTz d858e062f1 security: extract iCloud credentials into protected config file
- Removed hardcoded iCloud username and password from Data.class.php
- Added config/icloud.php for external credential storage
- Protected config directory with Apache access rules
- Updated Data constructor to load credentials from config
- Kept backwards compatibility with existing Data instantiation
2026-07-22 01:59:35 +02:00
xBeaTz 95b1db2309 security: replace raw SQL queries with prepared statements in Data.class.php
- 15 methods migrated from query() to prepare()+execute()
- changeTermin() now uses column whitelist (11 allowed columns)
- setTerminStatus() delegates to changeTermin()
- Added ?: null fallbacks and type hints
- Consistent pattern across all database methods
2026-07-22 01:37:21 +02:00
xBeaTz 124f2746ac initial commit 2026-07-22 01:12:45 +02:00