johnnyq 49a3c2d266 Enforce client scoping on API expense reads and record updates ...

Fixes (expenses/read.php missing apiClientScopeSql), plus an unscoped UPDATE in contacts/update.php and follow-up writes firing on zero-row updates in assets/credentials.

2026-08-06 11:00:49 -04:00

..

asset_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

create.php

Replace Function logAction() with logAudit()

2026-07-14 17:35:23 -04:00

delete.php

Replace Function logAction() with logAudit()

2026-07-14 17:35:23 -04:00

read.php

Add user-based RBAC for API keys

2026-07-25 16:50:58 -04:00

update.php

Enforce client scoping on API expense reads and record updates

2026-08-06 11:00:49 -04:00