Jacek f994e25214 security: faza 2 - safeUnlink() i escaping XSS w szablonach artykulow ...

- ProductRepository: dodano safeUnlink() z walidacja realpath() - zapobiega path traversal
- ArticleRepository: to samo, 4 metody usuwania plikow zaktualizowane
- templates/articles/article-full.php: htmlspecialchars() na tytule, SERVER_NAME i $url
- templates/articles/article-entry.php: htmlspecialchars() na tytule i $url (3 miejsca)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-12 09:22:32 +01:00

..

Article

security: faza 2 - safeUnlink() i escaping XSS w szablonach artykulow

2026-03-12 09:22:32 +01:00

Attribute

ver. 0.318: shopPRO export produktów + nowe API endpoints

2026-02-24 11:43:17 +01:00

Banner

ver. 0.293: Code review fixes — 6 repositories, 16 fixes

2026-02-19 01:07:39 +01:00

Basket

ver. 0.305: Fix permutation attribute sorting + free delivery progress bar

2026-02-22 16:33:30 +01:00

Cache

ver. 0.283: Legacy class cleanup — S, Html, Email, Image, Log, Mobile_Detect → Shared namespace

2026-02-16 23:06:06 +01:00

Category

feat: eliminate htaccess.conf, move all URL routes to pp_routes (v0.329-0.330)

2026-02-27 22:06:33 +01:00

Client

ver. 0.294: Code review complete — 96/96 classes, 27 fixes across all layers

2026-02-19 15:26:07 +01:00

Coupon

ver. 0.290: ShopCoupon + ShopOrder frontend migration to Domain + Controllers

2026-02-17 19:54:21 +01:00

CronJob

feat: database-backed cron job queue replacing JSON file system

2026-02-27 13:29:11 +01:00

Dashboard

ver. 0.282: Banners frontend migration, Cache cleanup, Shared\Cache namespace

2026-02-16 21:25:50 +01:00

Dictionaries

ver. 0.294: Code review complete — 96/96 classes, 27 fixes across all layers

2026-02-19 15:26:07 +01:00

Integrations

security: faza 1 - usuniecie debug logu tpay, naprawa SQL i usun rb.php

2026-03-12 09:18:37 +01:00

Languages

ver. 0.294: Code review complete — 96/96 classes, 27 fixes across all layers

2026-02-19 15:26:07 +01:00

Layouts

fix: getProductLayout używał layoutu kategorii zamiast domyślnego (v0.331)

2026-03-01 00:42:41 +01:00

Newsletter

ver. 0.283: Legacy class cleanup — S, Html, Email, Image, Log, Mobile_Detect → Shared namespace

2026-02-16 23:06:06 +01:00

Order

feat: database-backed cron job queue replacing JSON file system

2026-02-27 13:29:11 +01:00

Pages

feat: eliminate htaccess.conf, move all URL routes to pp_routes (v0.329-0.330)

2026-02-27 22:06:33 +01:00

PaymentMethod

ver. 0.304: Configurable payment method order amount limits

2026-02-22 15:26:51 +01:00

Producer

ver. 0.320: API słowniki — ensure_producer; ProductRepository — producer_name w odpowiedzi

2026-02-24 13:32:25 +01:00

Product

security: faza 2 - safeUnlink() i escaping XSS w szablonach artykulow

2026-03-12 09:22:32 +01:00

ProductSet

ver. 0.283: Legacy class cleanup — S, Html, Email, Image, Log, Mobile_Detect → Shared namespace

2026-02-16 23:06:06 +01:00

Promotion

ver. 0.294: Code review complete — 96/96 classes, 27 fixes across all layers

2026-02-19 15:26:07 +01:00

Scontainers

ver. 0.287: Scontainers + ShopAttribute frontend migration to Domain

2026-02-17 08:47:21 +01:00

Settings

ver. 0.317: klucz API — przycisk generowania + fix zapisu

2026-02-23 23:30:41 +01:00

ShopStatus

refactor(shop-statuses): migrate to DI, restructure docs into docs/ folder (0.268)

2026-02-14 10:43:31 +01:00

Transport

ver. 0.306: hide transport methods with no available payment methods

2026-02-22 17:09:38 +01:00

Update

fix: broken SQL in update manifests — line-by-line instead of complete statements

2026-02-27 14:48:08 +01:00

User

ver. 0.283: Legacy class cleanup — S, Html, Email, Image, Log, Mobile_Detect → Shared namespace

2026-02-16 23:06:06 +01:00