<ul><li>CRITICAL: financials/coupon/index.php — double .php.php extension on include fixed; rtrim added to DOCUMENT_ROOT</li><li>CRITICAL: accounts/companies/inc/update_avuserinfo.php — missing gbl_functions.php fatal include (file does not exist); replaced with correct Mainaccounts class; fixed $_POST guards, $urlshortner2_params undefined</li><li>CRITICAL: accounts/users/ajax/update_avuserinfo.php — same fatal include + undefined variables fixed</li><li>financials/toolbar.php: Fixed bare unquoted constant "deposits" in comparison; added $_REQUEST["page"] guard</li><li>financials/transactions/log.php: Replaced $.parseJSON with JSON.parse + try/catch; added AJAX error handler; fixed null crash on payment_status.toLowerCase(); removed stray HTML in button var</li><li>financials/transactions/inc/ajax.php: Fixed bare $_POST["transid"]</li><li>financials/subscriptions/log.php: Fixed hardcoded /settings/ paths (×2); added AJAX error handler</li><li>financials/deposits/deposits_logs.php: Fixed hardcoded /settings/ path; added AJAX error handler</li><li>financials/gateways/index.php: Fixed bare $_SESSION["YPSiteAcctID"] in JS; added AJAX error handler</li><li>accounts/inc/update_insert.php: Fixed bare action/accttype/acctkey/status/key POST reads</li><li>accounts/inc/deleteaccount.php + get_affected.php: Fixed $userscheck["uid"] multi-row array mis-access (get() returns array of arrays)</li><li>accounts/companies/inc/ajax.php + ajaxchangingroles.php + ajaxinactive.php: Fixed all unguarded $_POST and $_SESSION reads</li><li>accounts/companies/inc/avuser_get_info.php: Fixed undefined $urlshortner2_params</li><li>accounts/users/ajax/users.php: Fixed $_SESSION["activeacctid"] output before assignment</li><li>accounts/users/ajax/usersinfo.php: Fixed undefined $searchads_params, $urlshortner2_params, out-of-scope $connval; fixed count() without is_array()</li><li>accounts/users/ajax/changestatusconnectaccounts.php: Fixed bare $_POST["connid"]</li><li>accounts/pages + list/accounts_list_call.php (×2): Fixed null guards on $infouser["username"], ["email"], $info["company_contact_email"]</li></ul>