Pontoporeia 317547ac93 Fix #4 v2: decouple contact_interne from contact_visible in ThesisCreateController ...

validateAndSanitise() no longer cross-contaminates:
- contact_interne overwrote mail, which then copied to contact_visible
- Fixed: contactInterne from contact_interne (admin) or confirmation_email (student)
- Fixed: contactVisible from contact_visible (admin) or mail (student)
- Fixed: submit() uses contactInterne as author email, not mail

2026-06-10 00:18:49 +02:00

..

Controllers

Fix #4 v2: decouple contact_interne from contact_visible in ThesisCreateController

2026-06-10 00:18:49 +02:00

AdminAuth.php

Fix 403 on HTMX fragment requests: AdminAuth Basic Auth sets session key

2026-05-05 11:04:52 +02:00

AdminLogger.php

Integrate Monolog: replace four logging systems with single PSR-3 factory

2026-05-20 12:28:31 +02:00

App.php

fix: harden security based on pentest scan findings

2026-05-19 00:08:06 +02:00

AppLogger.php

Integrate Monolog: replace four logging systems with single PSR-3 factory

2026-05-20 12:28:31 +02:00

Audit.php

Integrate Monolog: replace four logging systems with single PSR-3 factory

2026-05-20 12:28:31 +02:00

Crypto.php

Encrypt SMTP password at rest with AES-256-GCM

2026-05-13 17:59:13 +02:00

Database.php

fix: author name casing not updating — use ID lookup priority

2026-06-10 00:17:00 +02:00

Dispatcher.php

feat: obfuscate all email addresses and mailto links as HTML entities

2026-05-19 00:08:05 +02:00

DuplicateThesisException.php

feat: prevent duplicate TFE submissions with logging and user feedback

2026-05-05 11:04:52 +02:00

EmailObfuscator.php

Combine phpstan, cs-check, cs-fix into lint-php recipe; fix lint issues + test failures + duplicate detection bug

2026-05-20 00:31:19 +02:00

ErrorHandler.php

Integrate Monolog: replace four logging systems with single PSR-3 factory

2026-05-20 12:28:31 +02:00

FilepondHandler.php

Fix FilePond: maxFileSize as bytes + temp files survive page reload

2026-06-10 00:18:49 +02:00

FragmentRenderer.php

Refactor HTMX fragment architecture: DRY split into auth endpoints + shared templates

2026-05-19 00:08:06 +02:00

Logger.php

Integrate Monolog: replace four logging systems with single PSR-3 factory

2026-05-20 12:28:31 +02:00

PeerTubeService.php

fix: supprimer les vidéos PeerTube lors de la suppression d'un TFE

2026-06-10 00:16:22 +02:00

RateLimit.php

feat: prevent duplicate TFE submissions with logging and user feedback

2026-05-05 11:04:52 +02:00

ShareLink.php

Fix non-constant-time credential comparisons

2026-05-31 17:49:43 +02:00

SmtpRelay.php

Phase 3: Replace SmtpRelay SMTP socket with PHPMailer

2026-05-20 01:17:44 +02:00

StudentEmail.php

Fix edit form: is_published reset, contact decoupling, note label, author name case

2026-06-10 00:17:00 +02:00

SystemCache.php

feat: extract MediaController, wire into Dispatcher, delete media.php

2026-04-20 12:32:00 +02:00