mirror of
https://github.com/BEDOLAGA-DEV/remnawave-bedolaga-telegram-bot.git
synced 2026-05-05 04:16:17 +00:00
- Add SELECT FOR UPDATE locking on all financial state transitions (withdrawal approve/reject/complete/create, partner approve/reject) - Add html.escape() on all user-controlled values in email templates - Wrap sync SMTP send_email in asyncio.to_thread to avoid blocking event loop - Add missing database indexes on referral_earnings(user_id, referral_id), users(referred_by_id, partner_status), withdrawal_requests(user_id, status), advertising_campaigns(partner_user_id)