3 Commits

Include renames

Author	SHA1	Message	Date
UbuntuandClaude Opus 4.7	92a84aadb1	Remove dead strftime() call in worker calendar form ... The strftime() result was immediately overwritten by a hardcoded Hungarian month-name array. Drop the dead line so PHP 8.1+ stops emitting an E_DEPRECATED warning when prod loads the worker calendar. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-11 11:41:47 +00:00
UbuntuandClaude Opus 4.6	420bcb37fd	Security hardening: fix SQLi, XSS, file upload, and migrate DB to RDS ... - Fix all SQL injection vulnerabilities across Service_model, User_model, Module_model, Log_model, and Admin controller using parameterized queries - Add htmlspecialchars() to all user-controlled output in admin views (bookings, services, workers, service categories, login form) - Fix XSS in AJAX worker response and manage-booking-cancelled view - Add file extension whitelist (jpg, jpeg, png, gif, webp) to all uploads - Remove webshell (pentest2.php) from assets/img/profiles/ - Stop logging plaintext passwords on failed login attempts - Migrate database.php hostname from localhost to AWS RDS endpoint - Fix dropdown styling (white-on-white) in worker calendar view Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-05-07 13:00:32 +00:00
Astral04andClaude Sonnet 4.6	b8f4f67b23	Add visual worker calendar and floating lunch break system ... - Monthly calendar grid per worker with colour-coded day status - Override types: vacation, sick, custom hours, other, day-off - Date-range override support via modal - Floating 30-min lunch break: finds slot closest to preferred time within configurable window, adapts to existing bookings - Lunch break only applies for shifts >= 6 hours - Lunch slot shown in admin calendar; blocked in booking availability - DB migrations: absence_type/note on worker_schedule_overrides, lunch_window_start/end/preferred_time on workers Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-04 13:34:58 +01:00