Skip to content
This repository was archived by the owner on Feb 19, 2026. It is now read-only.

Release 1.0.1 Public

Choose a tag to compare

View all tags
@qitry qitry released this 15 Oct 09:30
· 104 commits to main since this release
v1.0.1
4751467
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

ChangeLog

[v1.0.1] - 2025-10-15

Security

  • CSRF tokens in all forms via PHP sessions.
  • Rate limiting (120 POST/min/IP) with rate_limits table.
  • Security headers to block XSS/clickjacking.

Bug Fixes

  • Avoided duplicate session_start() using session_status().
  • Fixed PostgreSQL SERIAL sequence (setval to 0, true) for PK violations.
  • Improved rate limit window expiration logic.

Improvements

  • URL validation with FILTER_FLAG_PATH_REQUIRED.
  • Added admin logout.
  • Uniform htmlspecialchars(ENT_QUOTES) escaping.
  • Direct $pdo usage for scoping.
Assets 2
Loading