sileya-ai
/
vr-shopxo-plugin
1
0
Fork 0
Code Issues 3 Pull Requests Packages Projects Releases Wiki Activity
vr-shopxo-plugin/shopxo/app
History
Council 255c8ed2bf council(review): SecurityEngineer - Phase 2 security audit complete + P1 Verifier.php fix 
Security audit findings (Task S1/S2/S3/S5 done):
- Task S1: Admin auth chain verified (Base extends Common OK)
- Task S2: SQL injection audit complete (no injection, P1 code bug found)
  - FIXED: Verifier.php:45 CONCAT column() syntax error → select()+PHP concat
- Task S3: XSS/CSRF audit complete (no risk in admin context)
- Task S5: IDOR audit complete (admin context acceptable)
- Task S4 (audit log design): still pending

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 		2026-04-15 14:11:43 +08:00
..
admin feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00
api feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00
index feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00
install feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00
lang feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00
module feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00
plugins council(review): SecurityEngineer - Phase 2 security audit complete + P1 Verifier.php fix 2026-04-15 14:11:43 +08:00
route feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00
service feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00
tpl feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00
.gitignore feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00
AppService.php feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00
BaseController.php feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00
ExceptionHandle.php feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00
Request.php feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00
common.php feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00
middleware.php feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00
provider.php feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00
service.php feat: import ShopXO v6.8.0 sourcecode (vendor/runtime excluded) 2026-04-15 13:09:44 +08:00