friloo/Unifi-Voucher-Tool
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 16

Konsolidierung: Security-Härtung + .gitignore

Browse source 
- TOTP-Secret wird verschlüsselt-at-rest gespeichert (Crypto, Klartext-Fallback)
- forgot_password.php: Throttle (3/15min je Session) gegen Reset-Spam
- .gitignore für vendor/, composer.lock, phpunit-Cache, Updater-Laufzeitdaten
- Verifiziert: PHPUnit 15/15 grün, PHPStan ohne Fehler
This commit is contained in:
Claude 2026-06-06 05:38:40 +00:00
parent c63c5e78f0
commit 546accc185
No known key found for this signature in database
3 changed files with 26 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

14
.gitignore vendored Normal file
View file

@ -0,0 +1,14 @@
# Dev-/Test-Abhängigkeiten (Laufzeit braucht KEIN composer)
/vendor/
composer.lock
.phpunit.result.cache
.phpunit.cache/
# Updater-Laufzeitdaten
/updater/storage/.version
/updater/storage/.maintenance
/updater/storage/.update-progress
/updater/storage/.update.zip
/updater/storage/.update-staging/
/updater/storage/.migrations-lock
/updater/storage/updater-settings.json