Sigortacu – Production Hardening Roadmap

[Kinin-Code-Offical]

This discussion will track the overall plan to make the project production-ready.

Current Problems

• Inconsistent Auth: Mix of phpPassword and JWT.
• API Contract Mismatches: editcarinfo.php expects ID but client sends �ssetID.
• SQL Injection: Raw SQL string concatenation in several endpoints.
• Brittle DB Setup: sigortacudb.sql has syntax errors and is not a reliable setup mechanism.
• Inconsistent Responses: API responses do not follow a standard envelope.

Phased Plan

• Phase 0: Stabilize core flows (functionality blockers).
• Phase 1: Database correctness + local dev (Docker).
• Phase 2: Security & Auth standardization (JWT).
• Phase 3: CI/CD + Releases + Documentation enforcement.

Individual tasks will be tracked in issues and linked to the main Roadmap issue.