0d27befed0
- dashboard.php: fix PDO parameter count crash for users with no groups
(used max(count,1) for placeholder count but provided 0 group params)
- index.php: add missing auth check on get_tasks_status API endpoint
(was accessible without a session, exposing all task data)
- index.php: enforce ownership check on delete_comment API
(any logged-in user could delete any comment; now requires authorship or admin)
- tasks.php: fix task creation notification using undefined $_SESSION['username']
(replaced with $current_user['username'] so {assignor} template works correctly)
- tasks.php: remove duplicate id attribute on att-lightbox-body element
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
10 lines
91 B
Plaintext
10 lines
91 B
Plaintext
# Don't Commit
|
|
uploads/*
|
|
*.log
|
|
.env
|
|
.agents/*
|
|
.antigravity/*
|
|
.vscode/*
|
|
.gemini/*
|
|
.cursor/*
|