67 lines
2.4 KiB
Markdown
67 lines
2.4 KiB
Markdown
# Project State
|
|
|
|
## Project Reference
|
|
|
|
See: .paul/PROJECT.md (updated 2026-05-05)
|
|
|
|
**Core value:** Klienci moga zapoznac sie z oferta okien i skontaktowac sie z firma.
|
|
**Current focus:** Phase 1 complete; ready for next milestone or follow-up planning
|
|
|
|
## Current Position
|
|
|
|
Milestone: v0.1 Initial Release
|
|
Phase: 1 of 1 (Contact Attachments) - Complete
|
|
Plan: 01-01 complete
|
|
Status: Loop closed, ready for next milestone or follow-up PLAN
|
|
Last activity: 2026-05-05 22:33:44 +02:00 - UNIFY complete for .paul/phases/01-contact-attachments/01-01-PLAN.md
|
|
|
|
Progress:
|
|
- Milestone: [##########] 100%
|
|
- Phase 1: [##########] 100%
|
|
|
|
## Loop Position
|
|
|
|
Current loop state:
|
|
```
|
|
PLAN ---> APPLY ---> UNIFY
|
|
ok ok ok [Loop complete]
|
|
```
|
|
|
|
## Accumulated Context
|
|
|
|
### Codebase Mapped
|
|
Date: 2026-05-05
|
|
Documents: `.paul/codebase/` (9 files)
|
|
Key findings: Custom PHP MVC CMS, Medoo ORM, MySQL, no tests, critical security issues (hardcoded credentials, MD5 passwords, unserialize on cookies, SQL injection risks)
|
|
|
|
### Decisions
|
|
- Contact attachment storage targets only forms that have file uploads on `/kontakt/` plus `modal-contact-form`.
|
|
- Attachment links are stored in a single `contact_messages.attachments` column as JSON.
|
|
- Uploaded contact files use public links from `uploads/contact-attachments/YYYY/mm/`, outside `temp/`.
|
|
- File uploads are restricted and capped at 50 MB per file, with visible form information.
|
|
- `send-contact-landing` remains on legacy temp upload flow because it is outside this requested scope.
|
|
- Git commit skipped during transition because the worktree had extensive pre-existing unrelated/user changes.
|
|
|
|
### Deferred Issues
|
|
- Landing page attachment persistence can be planned separately if that form should also retain uploads outside `temp/`.
|
|
- Admin browsing/downloading of contact attachments can be planned separately if needed.
|
|
|
|
### Blockers/Concerns
|
|
Multiple critical security vulnerabilities documented in `.paul/codebase/concerns.md`.
|
|
|
|
### Git State
|
|
Last commit: not created during UNIFY
|
|
Branch: main
|
|
Feature branches merged: none
|
|
Reason: pre-existing dirty worktree; avoided committing unrelated/user changes
|
|
|
|
## Session Continuity
|
|
|
|
Last session: 2026-05-05 22:33:44 +02:00
|
|
Stopped at: Phase 1 complete, milestone v0.1 complete
|
|
Next action: Start next milestone or plan a follow-up item from deferred issues
|
|
Resume file: .paul/phases/01-contact-attachments/01-01-SUMMARY.md
|
|
|
|
---
|
|
*STATE.md - Updated after every significant action*
|