This commit addresses several issues in the `/collect` endpoint to improve its security and robustness. It also introduces a `To-Do.md` file as requested by the user.
Key changes:
- Refactored the `/collect` endpoint to use a single database transaction, preventing data inconsistencies.
- Fixed SQL injection vulnerabilities by converting all database queries to use parameterized statements.
- Corrected a `TypeError` by ensuring the `COLLECT_COOLDOWN` configuration variable is always an integer.
- Updated transaction logging to record 'SYSTEM' as the source of funds for salary collections, instead of a "NULL" string.
- Added a `To-Do.md` file with suggestions for future features, including an automated payroll system, user transaction history, and an admin panel.
This commit adds a comprehensive README.md file to the project. The README includes:
- A project description.
- Installation instructions, including dependencies and environment variables.
- Usage instructions.
- Detailed documentation for all API endpoints, including authentication, transactions, and admin routes.
Co-authored-by: google-labs-jules[bot] <161369871+google-labs-jules[bot]@users.noreply.github.com>
