Area: Admin plane (audit p12) · Surface: templates/admin/security/iptables.php · Dimension: dead-code · Severity: minor
templates/admin/security/iptables.php (2436 bytes) and templates/mobile/admin/security/iptables.php are rendered exclusively by AdminSecurityController::iptables(), which is itself orphaned. They die together with that method. (Distinct from the LIVE viewer template templates/admin/iptables/index.php rendered by AdminIptablesController::index.)
Evidence
The only render call is from the dead method: platform/src/Controllers/AdminSecurityController.php:134 `$this->render('admin/security/iptables', [...])`. Grep proof:
$ grep -rn 'security/iptables' src/ templates/ →
src/Controllers/AdminSecurityController.php:134: $this->render('admin/security/iptables', [
templates/mobile/admin/security/iptables.php:3 (docblock)
templates/admin/security/iptables.php:3 (docblock)
No other references. BaseController.php:329-331 auto-resolves templates/mobile/<name> for phone clients, so the mobile variant is reachable ONLY through this same dead render call.
Suggested fix. Remove templates/admin/security/iptables.php and templates/mobile/admin/security/iptables.php together with the dead iptables() method.
Filed by the automated tenant-app audit and adversarially evidence-verified. Status: verified. Open — not yet actioned.
Patrick Bass
@mobieus