Gymora · Test run · run 2026-09-25
Gymora Test run, as shipped in the download
226 checks passed, 0 failed, when the suite that ships in the zip was run on 2026-09-25 with php tests/run.php. Run it yourself after you download.
== 1. moneyToCents: symbols, US/EU, ints, floats, junk ==
PASS "$49.00" (got 4900, want 4900)
PASS "59" (got 5900, want 5900)
PASS "1,250.00" (got 125000, want 125000)
PASS EU "1.250,00" (got 125000, want 125000)
PASS EU decimal "12,50" (got 1250, want 1250)
PASS int 130 (major) (got 13000, want 13000)
PASS float 15.5 (got 1550, want 1550)
PASS "0" (got 0, want 0)
PASS empty -> null (got NULL, want NULL)
PASS "N/A" -> null (got NULL, want NULL)
PASS null -> null (got NULL, want NULL)
== 2. centsToDecimal + money formatting ==
PASS 5900 -> "59.00" (got '59.00', want '59.00')
PASS 5 -> "0.05" (got '0.05', want '0.05')
PASS null -> "" (got '', want '')
PASS money 5900 $ (got '$59.00', want '$59.00')
PASS money null -> — (got '—', want '—')
PASS symbol USD (got '$', want '$')
PASS symbol EUR (got '€', want '€')
== 3. date math: daysBetween, addDays, addMonths ==
PASS daysBetween same (got 0, want 0)
PASS daysBetween +10 (got 10, want 10)
PASS daysBetween past (-3) (got -3, want -3)
PASS addDays +30 (got '2026-08-04', want '2026-08-04')
PASS addDays -1 (got '2026-07-04', want '2026-07-04')
PASS addMonths +1 (got '2026-08-15', want '2026-08-15')
PASS addMonths +12 (annual) (got '2027-07-15', want '2027-07-15')
PASS addMonths clamps Jan31 (got '2026-02-28', want '2026-02-28')
PASS monthKey (got '2026-07', want '2026-07')
== 4. effectiveStatus: active stays / lapses, frozen & cancelled hold ==
PASS active, future end -> active (got 'active', want 'active')
PASS active, end today -> active (got 'active', want 'active')
PASS active, end passed -> expired (got 'expired', want 'expired')
PASS active, open-ended -> active (got 'active', want 'active')
PASS frozen holds past end (got 'frozen', want 'frozen')
PASS cancelled holds (got 'cancelled', want 'cancelled')
PASS stored expired stays expired (got 'expired', want 'expired')
PASS no membership -> none (got 'none', want 'none')
== 5. checkInGuard: THE front-desk rule ==
PASS active unlimited -> allowed, no decrement
PASS frozen -> blocked
PASS cancelled -> blocked
PASS status-expired -> blocked
PASS date-lapsed active -> blocked (expired)
PASS no membership -> blocked
PASS class pack w/ credits -> allowed + decrement
PASS class pack w/ 1 credit -> allowed + decrement
PASS class pack at 0 credits -> blocked
PASS day pass on its day -> allowed
PASS day pass day after -> blocked
== 6. creditsAfterCheckIn ==
PASS 5 -> 4 (got 4, want 4)
PASS 1 -> 0 (got 0, want 0)
PASS 0 stays 0 (got 0, want 0)
PASS null (unlimited) (got NULL, want NULL)
== 7. status transitions ==
PASS active -> frozen
PASS frozen -> active
PASS active -> cancelled
PASS active -> expired
PASS expired -> active (renew)
PASS cancelled -> active (no)
PASS cancelled -> anything (no)
PASS active -> active (no)
== 8. termDates: what a fresh term looks like per billing period ==
PASS monthly end = +1 month (got '2026-08-05', want '2026-08-05')
PASS monthly credits null (got NULL, want NULL)
PASS annual end = +12 months (got '2027-07-05', want '2027-07-05')
PASS class pack open-ended (got NULL, want NULL)
PASS class pack credits set (got 10, want 10)
PASS day pass ends same day (got '2026-07-05', want '2026-07-05')
== 9. isExpiring + daysUntil (window detection) ==
PASS active ending in 5d -> expiring
PASS active ending in 14d (boundary) -> expiring
PASS active ending in 15d -> NOT expiring
PASS active ending today -> expiring
PASS already past end -> NOT expiring
PASS frozen -> NOT expiring
PASS open-ended (pack) -> NOT expiring
PASS daysUntil future (got 14, want 14)
PASS daysUntil past (got -4, want -4)
PASS daysUntil open (got NULL, want NULL)
== 10. isOverdue + arrearsTotal (boundary at the due date) ==
PASS due yesterday unpaid -> overdue
PASS due today unpaid -> NOT overdue
PASS due tomorrow unpaid -> NOT overdue
PASS paid past-due -> NOT overdue
PASS arrears sums only overdue-unpaid (got 7400, want 7400)
== 11. revenueInMonth ==
PASS revenue July = paid-in-July only (got 20400, want 20400)
PASS revenue June (got 5900, want 5900)
PASS revenue empty month (got 0, want 0)
== 12. CSV export: headers + RFC-4180 escaping ==
PASS members header (got 'Name,Email,Phone,Join Date,Status,Plan,Start,Ends,Credits Left', want 'Name,Email,Phone,Join Date,Status,Plan,Start,Ends,Credits Left')
PASS CRLF line endings
PASS comma/quote name is quoted+escaped
PASS null credits render blank
PASS int credits render
PASS payments header (got 'Member,Amount,Due Date,Paid,Paid Date,Method', want 'Member,Amount,Due Date,Paid,Paid Date,Method')
PASS paid=1 -> yes
PASS paid=0 -> no
== CSV formula-injection guard ==
PASS Membership =-formula neutralized (got '\'=1+2', want '\'=1+2')
PASS Membership @-formula neutralized (got '\'@SUM(A1)', want '\'@SUM(A1)')
PASS Membership leading-TAB neutralized (got '\' X', want '\' X')
PASS Membership -text neutralized (got '\'-abc', want '\'-abc')
PASS Membership negative number kept (got '-45.00', want '-45.00')
PASS Membership plain value untouched (got 'Safe Name', want 'Safe Name')
PASS Membership quoting still applies (got '"\'=a,b"', want '"\'=a,b"')
== security hardening: clampCents / safe_back_path / str_clip ==
PASS clampCents caps MySQL INT overflow (got 999999999, want 999999999)
PASS clampCents floors negative price at 0 (got 0, want 0)
PASS clampCents min=1 keeps payments positive (got 1, want 1)
PASS clampCents passes a normal price through (got 4999, want 4999)
PASS clampCents null stays null (got NULL, want NULL)
PASS safe_back_path allows member page (got 'members/12', want 'members/12')
PASS safe_back_path allows arrears page (got 'payments/arrears', want 'payments/arrears')
PASS safe_back_path blocks absolute URL (got 'payments', want 'payments')
PASS safe_back_path blocks protocol-relative (got 'payments', want 'payments')
PASS safe_back_path blocks backslash trick (got 'payments', want 'payments')
PASS safe_back_path blocks leading slash (got 'payments', want 'payments')
PASS safe_back_path blocks null/empty (got 'payments', want 'payments')
PASS str_clip clips to column length (got 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', want 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa')
PASS str_clip leaves short strings alone (got 'Fit Club', want 'Fit Club')
== PWA ==
PASS manifest.json is valid JSON
PASS manifest has required fields
PASS manifest URLs are RELATIVE (subpath-install safe)
PASS manifest icons exist on disk (192 + 512 + apple-touch)
PASS sw.js never caches non-GET
PASS sw.js never caches page navigations (auth HTML can not enter cache storage)
PASS sw.js cache name carries the version (old caches purged on activate)
PASS offline fallback page ships
PASS every app layout links the manifest + registers the SW
-- Own It 2.0 --
PASS v2/v3: tables
PASS v2/v3: totp_cols
PASS v2/v3: smtp_cols
PASS v2/v3: mint
PASS v2/v3: revoke
PASS v2/v3: totp
PASS v2/v3: recovery
PASS v2/v3: delivery
PASS v2/v3: rate
PASS v2/v3: csv_dry
PASS v2/v3: backup_tables
PASS v2/v3: credit_race
PASS v2/v3: guard_refuses_spent
PASS v2/v3: guard_allows_credit
PASS v2/v3: import_preview_matches_commit
PASS v2/v3: import_no_partial_write
PASS v2/v3: import_preview_writes_nothing
PASS v2/v3: import_commit_writes_one
PASS v2/v3: tx_skeleton
PASS v2/v3: tx_rollback
PASS v2/v3: gdpr_map_columns_exist
PASS v2/v3: audit_redacts
PASS v2/v3: desk_row_matches_the_guard
PASS v2/v3: desk_row_carries_plan_and_credits
PASS v2/v3: desk_checkin_refuses_like_every_other_door
PASS v2/v3: desk_checkin_spends_one_credit
PASS v2/v3: desk_row_knows_they_are_already_in
PASS v2/v3: desk_json_delegates_never_reimplements
PASS v2/v3: desk_search_is_read_only_and_gated
PASS v2/v3: gy_kiosk_delegates_to_the_desk_engine
PASS v2/v3: gy_kiosk_is_rate_limited_like_a_password_door
PASS v2/v3: gy_kiosk_never_confirms_which_codes_exist
PASS v2/v3: gy_kiosk_exit_needs_the_staff_pin
PASS v2/v3: gy_kiosk_is_on_the_kit_public_frame
PASS v2/v3: gy_kiosk_code_field_outweighs_the_kit_field_reset
PASS v2/v3: gy_kiosk_off_page_is_framed_too
PASS v2/v3: gy_kiosk_refuses_word_for_word_like_the_desk
PASS v2/v3: gy_kiosk_cannot_spend_the_last_credit_twice
PASS v2/v3: gy_expiry_columns_exist
PASS v2/v3: gy_expiry_is_off_until_the_owner_turns_it_on
PASS v2/v3: gy_expiry_uses_the_products_own_window_rule
PASS v2/v3: gy_expiry_skips_a_member_with_nowhere_to_write
PASS v2/v3: gy_expiry_happy_path_actually_reaches_the_member
PASS v2/v3: gy_expiry_notice_points_at_the_desk_not_a_card_form
PASS v2/v3: gy_expiry_is_once_per_membership_per_end_date
PASS v2/v3: gy_expiry_ledger_refuses_a_duplicate_row
PASS v2/v3: gy_expiry_releases_the_slot_when_mail_fails
PASS v2/v3: gy_expiry_mail_failure_never_throws
PASS v2/v3: gy_expiry_cron_has_no_rule_of_its_own
PASS v2/v3: gy_expiry_digest_is_a_separate_switch
PASS healthz + api_ping + openapi report 3.1.6
PASS v2: routes registered (api, 2fa, security, backup, import, healthz)
PASS v2: 2FA intercepts login + login is rate-limited
PASS v3: exactly ONE atomic credit burn exists in the whole product
PASS v3: the burn lives in perform_checkin, guarded by the product's tested rule
PASS v3: every check-in door calls the ONE path (desk, API, MCP, kiosk)
PASS v2: both front doors fire the same webhooks (now from the shared path)
PASS v2: no PHP-8 ternary key re-reads (PLAN item 10)
PASS v2: core modules stay dependency-free (no product helpers inside them)
PASS v2: dark palette + zero hardcoded white surfaces
PASS v2: theme.js + qr.js ship and layout loads theme.js
PASS v2: no themed background paired with an un-overridden hardcoded colour (dark-mode trap)
PASS v2: dark overrides ship for every pill/alert that hardcodes a light palette
PASS v2: palette tokens are WIRED, not just declared (label/chip/hover-bg)
PASS v3: Database declares the full core-documented skeleton
PASS v3: API.md ships + sw cache is v3.1.6
PASS v3: no call to a function this product does not define
PASS v3: no sensitive handler is login-only — all are role-gated
PASS v3: API-key + webhook + backup handlers require settings.edit
PASS v3: both backup doors call the ONE shared redaction list
PASS v3: the backup redaction list names every secret column
PASS v3: Settings really offers the kiosk PIN the kiosk-off page promises
PASS v3: a write path for kiosk_pin exists and hashes it (kiosk_exit uses password_verify)
PASS C2: the subject-access export takes the same standing as anonymise
PASS nav: every sidebar link is highlighted by the page it opens
PASS nav: no page highlights a sidebar item that does not exist
PASS ip: a direct visitor's forged headers are ignored
PASS ip: behind a trusted proxy the forwarded visitor is used
PASS ip: CF-Connecting-IP wins over the X-Forwarded-For chain
PASS ip: the chain is read right-to-left, past trusted hops
PASS ip: a Cloudflare edge is not a trusted proxy by default
PASS ip: CIDR maths (v4 boundaries + v6, no cross-family match)
PASS scope: api_keys gains a scope column defaulting to full — an upgrade never loosens
PASS scope: requireKey reads the key scope and refuses a write on a read-only key
PASS scope: mintKey persists the chosen scope, and anything but read is full access
PASS scope: /mcp hands the key scope to the core, which refuses write tools per tool
PASS scope: the key form lets an administrator mint a read-only key
PASS licence: every font ships the SIL OFL text for its own family beside it
PASS licence: LICENSE.txt is present and carries the IF WE STOP (CONTINUITY) clause
PASS demo ribbon: on the public pages it says what the page is, not "signed in as the admin"
PASS demo ribbon: below 600px it starts as the small pill unless the visitor opened it
PASS dashboard: the arrears link says what it does ("See arrears"); nothing is sent to anybody
PASS demo seed: this month and last month have different takings (the card read "$0.00 vs last month")
PASS backups: every non-admin role gets 403 on every backup, restore and backup-token route
PASS backups: an administrator still gets the JSON backup (got 'GATE 200', want 'GATE 200')
PASS forms: every POST form on a screen reaches a registered route (46 checked)
PASS webhooks: mark_paid_marks_it_paid
PASS webhooks: mark_paid_sends_payment_recorded
PASS webhooks: already_paid_sends_nothing_new
PASS webhooks: mark_paid_route_goes_through_the_helper
PASS webhooks: mark_paid_emails_the_club
PASS backup JSON: an administrator gets a backup, with every credential column planted (11)
PASS backup JSON: the download carries none of them
PASS backup JSON: the scheduled backup carries none of them
PASS backup JSON: the download and the scheduled writer read the one redaction list
PASS security page: the backup card says every credential is redacted, not only the SMTP password
————————————————————————————————————————————————————
ALL 226 TESTS PASSED (0 failed)
← Back to Gymora · Manual · Quickstart · API