Files

cproudlock e0d89f9957 Security fixes and schema cleanup

- Fix SQL injection in displayprofile.asp (parameterized query)
- Add HTMLEncode to XSS-vulnerable output in 5 display pages
- Add Option Explicit to computers.asp, displaymachines.asp, displaypcs.asp, displayapplication.asp, displayprofile.asp
- Update STANDARDS.md with test script reference, secrets management, column naming gotchas
- Fix equipment type ranges in CLAUDE.md and QUICK_REFERENCE.md (1-15, 21-25)
- Add migration SQL to cleanup redundant PC machinetypes (34-46)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2025-12-12 07:22:16 -05:00

README.md

ShopDB Documentation

Last Updated: 2025-12-11 Current Status: Database Migration Complete

Quick Links

Document	Purpose
CLAUDE.md	AI assistant context (start here)
QUICK_REFERENCE.md	Cheat sheets, common queries
ASP_DEVELOPMENT_GUIDE.md	Dev setup, VBScript patterns
STANDARDS.md	Coding standards, security
API.md	REST API documentation

Current Architecture

machines table (unified)
  ├── Equipment (machinetypeid 1-15, pctypeid IS NULL)
  ├── PCs (machinetypeid 33-35, pctypeid IS NOT NULL)
  └── Network Devices (machinetypeid 16-20)

printers table (separate)
communications table (all network interfaces)
machinerelationships table (PC↔equipment links)

Dev Environment

# Start dev environment
~/start-dev-env.sh

# Check status
~/status-dev-env.sh

# Access application
http://192.168.122.151:8080

# Connect to MySQL
docker exec -it dev-mysql mysql -u root -prootpassword shopdb

Database Views

All views are defined in sql/view_consolidation.sql: