core/php-commerce
8
0
Fork 0
Code Issues 16 Pull requests 11 Projects Releases Packages Wiki Activity Actions
php-commerce/routes
History
Exact
Claude 5bce748a0f
security: add CSRF protection to API billing endpoints 
- Add `verified` middleware to billing route group so only
  email-verified users can access billing endpoints
- Separate read-only GET routes from state-changing POST routes
- Add `throttle:6,1` rate limiting to state-changing endpoints
  (cancel, resume, upgrade/preview, upgrade) — 6 requests per minute
- Reorganise route group with clear section comments

Fixes #13

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-24 16:19:30 +00:00
..
admin.php fix(dx): add declare(strict_types=1) and fix PSR-12 compliance 2026-03-17 09:08:03 +00:00
api.php security: add CSRF protection to API billing endpoints 2026-03-24 16:19:30 +00:00
console.php fix(dx): add declare(strict_types=1) and fix PSR-12 compliance 2026-03-17 09:08:03 +00:00
web.php refactor: migrate namespace from Core\Commerce to Core\Mod\Commerce 2026-01-27 16:23:12 +00:00