2 Commits

Author	SHA1	Message	Date
myron	8d27290831	Fix 6 code review findings: auth, mysqldump stderr, dead code, audit logs ... - backup.php: replace manual admin check with requireAdmin(); suppress mysqldump password warning (2>&1 → 2>/dev/null) to prevent corrupt dumps - ttg-backup.sh: same mysqldump stderr fix - admin.php toggle_user: fix undefined $adminId/$userId in logAdminAction call — use $_SESSION['user_id'] and $uid instead - admin.php chat_clear_all: wrap in try/catch and add logAdminAction audit - admin.php: delete unreachable broadcast query block after break statement - admin/index.php: fix cashouts_total formatted as currency — use parseInt (tokens are whole numbers, not dollars) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-06 10:02:07 +00:00
myron	f5a72c55f5	Add automated backup system ... - api/backup.php: list/create/download/delete backups; streams zip directly for downloads; 7-backup rolling prune on each create - Each backup is a single zip containing all of public_html + a full mysqldump of tomt_ttg_db - Cron at 2 AM daily via /usr/local/bin/ttg-backup.sh (already installed) - Admin UI: 💾 Backups nav item under System section; shows backup list with date/size, Download + Delete per row; Create Backup Now button with live status; auto-loads when section is opened Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-05 22:14:32 +00:00