Lucisu

The WordPress URL is actually in `src/common/Config.json`.

Add logging function when failed to authenticate

3

I've added the method `is_valid_authcode` to the class `Two_Factor_Provider` so providers can use it when failing to validate the authentication. By default, it uses the `error_log` function, but there are...

Fix global variables wrongly parsed

1

Fixes issue #230 by checking if the variable is global before assigning it to the `$this->last_doc`.

This version of the PHPDocumentor doesn't validate the presence of the value before accessing it, which throws the error when it's undefined: https://github.com/phpDocumentor/Reflection/blob/e13a8d8f6f2130f1f1a37ea02b1a76d8a039d10d/src/phpDocumentor/Reflection/IncludeReflector.php#L54-L57 Simply adding the validation fixes issue #216.

RateLimiter stored globally in Redis

3

### Bug description When using Laravel's [RateLimiter](https://laravel.com/docs/11.x/rate-limiting), the attempts are stored globally instead of separately per tenant. ### Steps to reproduce Execute in the first tenant: ```php RateLimiter::attempt( 'key', 100,...

**Describe the bug** Hello! While checking the code of the [AuthenticationController](https://github.com/orchidsoftware/platform/blob/da3f6f479a50ed40820b7b1547d35c8a537e7b0b/src/Platform/Http/Controllers/AttachmentController.php#L33) class, I noticed that the [checkPermission](https://github.com/orchidsoftware/platform/blob/da3f6f479a50ed40820b7b1547d35c8a537e7b0b/src/Platform/Http/Controllers/AttachmentController.php#L33) call does not actually aborts if the user is unauthenticated: https://github.com/orchidsoftware/platform/blob/da3f6f479a50ed40820b7b1547d35c8a537e7b0b/src/Platform/Http/Controllers/Controller.php#L29 It is...

Prevent CSRF token from being leaked to cross-origin requests

1

Currently, the code inside the html_load_controller.js makes the CSRF token being sent to every Axios and Turbo request: https://github.com/orchidsoftware/platform/blob/7e63b9c68af945c09f1dbb50896ad9f135a0e324/resources/js/controllers/html_load_controller.js#L41-L46 This, however, leaks the token to cross-origin requests as well, defeating...

Unable to run on Raspberry PI 5

1

**Description** Hello there! I'm not having success running the project on a Raspberry PI 5 board. Everything seems to run fine, but the WiFi network is not created. I tried...