xBeaTz d97605f801 security: harden application security baseline ...

- Fixed SQL injection vulnerabilities with prepared statements
- Added column whitelist protection for dynamic termin updates
- Extracted iCloud credentials into protected config file
- Moved sensitive configuration files out of webroot
- Added authentication and admin checks to PVE APIs
- Added CSRF protection to write operations and APIs
- Disabled debug output in production mode
- Added centralized configuration handling
- Protected sensitive directories with access rules
- Added initial project security documentation

2026-07-22 02:23:34 +02:00

api

security: harden application security baseline

2026-07-22 02:23:34 +02:00

assets

initial commit

2026-07-22 01:12:45 +02:00

config

security: harden application security baseline

2026-07-22 02:23:34 +02:00

debug

initial commit

2026-07-22 01:12:45 +02:00

lib

initial commit

2026-07-22 01:12:45 +02:00

storage/invoices

initial commit

2026-07-22 01:12:45 +02:00

vendor

initial commit

2026-07-22 01:12:45 +02:00

ANJUMA_LOGO.png

initial commit

2026-07-22 01:12:45 +02:00

check_date.php

initial commit

2026-07-22 01:12:45 +02:00

checktermin.php

initial commit

2026-07-22 01:12:45 +02:00

composer.json

initial commit

2026-07-22 01:12:45 +02:00

composer.lock

initial commit

2026-07-22 01:12:45 +02:00

config.cfg

initial commit

2026-07-22 01:12:45 +02:00

curl_debug.txt

initial commit

2026-07-22 01:12:45 +02:00

dashboard.js

initial commit

2026-07-22 01:12:45 +02:00

dashboard.php

initial commit

2026-07-22 01:12:45 +02:00

Data.class.php

security: extract iCloud credentials into protected config file

2026-07-22 01:59:35 +02:00

finance.php

initial commit

2026-07-22 01:12:45 +02:00

getDashboard.php

security: disable debug error output in production

2026-07-22 02:08:22 +02:00

getTermine.php

initial commit

2026-07-22 01:12:45 +02:00

health.js

initial commit

2026-07-22 01:12:45 +02:00

index.php

initial commit

2026-07-22 01:12:45 +02:00

indexold.php

initial commit

2026-07-22 01:12:45 +02:00

infrastructure.php

initial commit

2026-07-22 01:12:45 +02:00

logout.php

initial commit

2026-07-22 01:12:45 +02:00

navbar.php

initial commit

2026-07-22 01:12:45 +02:00

overlay.php

initial commit

2026-07-22 01:12:45 +02:00

rechnungen.php

initial commit

2026-07-22 01:12:45 +02:00

set_password.php

initial commit

2026-07-22 01:12:45 +02:00

settings_calendar.php

initial commit

2026-07-22 01:12:45 +02:00

stream.php

initial commit

2026-07-22 01:12:45 +02:00

synctoicloud.php

security: disable debug error output in production

2026-07-22 02:08:22 +02:00

termin_create.php

security: harden application security baseline

2026-07-22 02:23:34 +02:00

termin_delete.php

security: harden application security baseline

2026-07-22 02:23:34 +02:00

termin_show.php

security: harden application security baseline

2026-07-22 02:23:34 +02:00

termine.php

initial commit

2026-07-22 01:12:45 +02:00

termineold.php

initial commit

2026-07-22 01:12:45 +02:00

TODO.md

security: harden application security baseline

2026-07-22 02:23:34 +02:00

users.php

security: disable debug error output in production

2026-07-22 02:08:22 +02:00

S

Description

No description provided

5.6 MiB

Languages

PHP 94.8%

JavaScript 5.2%