diff --git a/SECURITY.md b/SECURITY.md index bd36785f..a5e58297 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -20,7 +20,7 @@ ITFlow is in Beta. **Please do not report security vulnerabilities through public GitHub issues.** -If you have discovered a security issue, please report it to us in as much detail as possible so we can fix it. +If you have discovered a security issue, please report it to us in as much detail as possible, so we can fix it. You should expect to receive an initial acknowledgement within 72 hours. If you do not, please get in touch discretely via GitHub issues/Forum/Discord to ensure we received your e-mail. Security contact: diff --git a/account_add_modal.php b/account_add_modal.php index c79e3b57..d80e26dd 100644 --- a/account_add_modal.php +++ b/account_add_modal.php @@ -39,7 +39,7 @@ diff --git a/accounts.php b/accounts.php index c0018c16..2a0f2019 100644 --- a/accounts.php +++ b/accounts.php @@ -1,6 +1,6 @@
- +
@@ -36,7 +36,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
- "> + "> @@ -47,7 +47,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()")); @@ -104,7 +104,7 @@
- + @@ -121,12 +121,12 @@ - + - +
diff --git a/calendar_events.php b/calendar_events.php index 5d8fb791..64d52050 100644 --- a/calendar_events.php +++ b/calendar_events.php @@ -4,7 +4,7 @@
- +
@@ -61,10 +61,10 @@ $colors_diff = array_diff($colors_array,$colors_used_array);
@@ -72,7 +72,7 @@ $colors_diff = array_diff($colors_array,$colors_used_array);
Name Currency
- "> + "> @@ -82,7 +82,7 @@ $colors_diff = array_diff($colors_array,$colors_used_array); \ No newline at end of file + diff --git a/client_add_modal.php b/client_add_modal.php index cd5ab84b..fb2dcfd3 100644 --- a/client_add_modal.php +++ b/client_add_modal.php @@ -65,7 +65,7 @@ @@ -155,7 +155,7 @@ @@ -227,7 +227,7 @@
- +
@@ -237,7 +237,7 @@
@@ -251,7 +251,7 @@
@@ -277,7 +277,7 @@ // Checks/prompts that the primary contact field (required) is populated - function promptPrimaryContact(){ + function promptPrimaryContact() { let primaryContactField = document.getElementById("primaryContact").value; - if (primaryContactField == null || primaryContactField === ""){ + if (primaryContactField == null || primaryContactField === "") { document.getElementById("contactNavPill").click(); } } diff --git a/client_asset_add_modal.php b/client_asset_add_modal.php index 51cb2119..d7f35508 100644 --- a/client_asset_add_modal.php +++ b/client_asset_add_modal.php @@ -2,7 +2,7 @@
Name Color
- "> + "> - + - + - + - + - + @@ -162,26 +162,26 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()")); "; @@ -191,7 +191,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()")); $asset_purchase_date = $row['asset_purchase_date']; $asset_warranty_expire = $row['asset_warranty_expire']; $asset_install_date = $row['asset_install_date']; - if(empty($asset_install_date)){ + if (empty($asset_install_date)) { $asset_install_date_display = "-"; }else{ $asset_install_date_display = $asset_install_date; @@ -203,41 +203,41 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()")); $asset_contact_id = $row['asset_contact_id']; $asset_network_id = $row['asset_network_id']; - if($asset_type == 'Laptop'){ + if ($asset_type == 'Laptop') { $device_icon = "laptop"; - }elseif($asset_type == 'Desktop'){ + }elseif ($asset_type == 'Desktop') { $device_icon = "desktop"; - }elseif($asset_type == 'Server'){ + }elseif ($asset_type == 'Server') { $device_icon = "server"; - }elseif($asset_type == 'Printer'){ + }elseif ($asset_type == 'Printer') { $device_icon = "print"; - }elseif($asset_type == 'Camera'){ + }elseif ($asset_type == 'Camera') { $device_icon = "video"; - }elseif($asset_type == 'Switch' || $asset_type == 'Firewall/Router'){ + }elseif ($asset_type == 'Switch' || $asset_type == 'Firewall/Router') { $device_icon = "network-wired"; - }elseif($asset_type == 'Access Point'){ + }elseif ($asset_type == 'Access Point') { $device_icon = "wifi"; - }elseif($asset_type == 'Phone'){ + }elseif ($asset_type == 'Phone') { $device_icon = "phone"; - }elseif($asset_type == 'Mobile Phone'){ + }elseif ($asset_type == 'Mobile Phone') { $device_icon = "mobile-alt"; - }elseif($asset_type == 'Tablet'){ + }elseif ($asset_type == 'Tablet') { $device_icon = "tablet-alt"; - }elseif($asset_type == 'TV'){ + }elseif ($asset_type == 'TV') { $device_icon = "tv"; - }elseif($asset_type == 'Virtual Machine'){ + }elseif ($asset_type == 'Virtual Machine') { $device_icon = "cloud"; }else{ $device_icon = "tag"; } $contact_name = $row['contact_name']; - if(empty($contact_name)){ + if (empty($contact_name)) { $contact_name = "-"; } $location_name = $row['location_name']; - if(empty($location_name)){ + if (empty($location_name)) { $location_name = "-"; } @@ -264,7 +264,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()")); 0){ + if ($login_id > 0) { ?> @@ -304,20 +304,20 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()")); ?> - + - + - + - + - + @@ -329,13 +329,13 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()")); InterfacesEditCopy - 0){ ?> + 0) { ?> Documents () - 0){ ?> + 0) { ?> Tickets () - + ArchiveDelete diff --git a/client_certificate_add_modal.php b/client_certificate_add_modal.php index 92478a5e..19a9e8d3 100644 --- a/client_certificate_add_modal.php +++ b/client_certificate_add_modal.php @@ -74,7 +74,7 @@ $domain_name"; diff --git a/client_certificates.php b/client_certificates.php index 72192bf2..1932bcc1 100644 --- a/client_certificates.php +++ b/client_certificates.php @@ -2,7 +2,7 @@
- +
@@ -51,7 +51,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
Name Type Make/Model Serial Number Operating System Install Date Assigned To Location
- "> + "> @@ -63,7 +63,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()")); @@ -120,7 +120,7 @@ diff --git a/client_contact_details.php b/client_contact_details.php index 98fa49c0..017e1fc4 100644 --- a/client_contact_details.php +++ b/client_contact_details.php @@ -2,7 +2,7 @@ Primary Contact"; }else{ $primary_contact_display = FALSE; } $contact_location_id = $row['contact_location_id']; $location_name = htmlentities($row['location_name']); - if(empty($location_name)){ + if (empty($location_name)) { $location_name_display = "-"; }else{ $location_name_display = $location_name; @@ -65,7 +65,7 @@ if(isset($_GET['contact_id'])){
- + contact_photo"> @@ -76,19 +76,19 @@ if(isset($_GET['contact_id'])){

- +
- +
- +
- +
- +
@@ -122,7 +122,7 @@ if(isset($_GET['contact_id'])){ -
"> +
">

Assets

@@ -144,26 +144,26 @@ if(isset($_GET['contact_id'])){
"; @@ -173,7 +173,7 @@ if(isset($_GET['contact_id'])){ $asset_purchase_date = $row['asset_purchase_date']; $asset_warranty_expire = $row['asset_warranty_expire']; $asset_install_date = $row['asset_install_date']; - if(empty($asset_install_date)){ + if (empty($asset_install_date)) { $asset_install_date_display = "-"; }else{ $asset_install_date_display = $asset_install_date; @@ -184,29 +184,29 @@ if(isset($_GET['contact_id'])){ $asset_location_id = $row['asset_location_id']; $asset_network_id = $row['asset_network_id']; - if($asset_type == 'Laptop'){ + if ($asset_type == 'Laptop') { $device_icon = "laptop"; - }elseif($asset_type == 'Desktop'){ + }elseif ($asset_type == 'Desktop') { $device_icon = "desktop"; - }elseif($asset_type == 'Server'){ + }elseif ($asset_type == 'Server') { $device_icon = "server"; - }elseif($asset_type == 'Printer'){ + }elseif ($asset_type == 'Printer') { $device_icon = "print"; - }elseif($asset_type == 'Camera'){ + }elseif ($asset_type == 'Camera') { $device_icon = "video"; - }elseif($asset_type == 'Switch' || $asset_type == 'Firewall/Router'){ + }elseif ($asset_type == 'Switch' || $asset_type == 'Firewall/Router') { $device_icon = "network-wired"; - }elseif($asset_type == 'Access Point'){ + }elseif ($asset_type == 'Access Point') { $device_icon = "wifi"; - }elseif($asset_type == 'Phone'){ + }elseif ($asset_type == 'Phone') { $device_icon = "phone"; - }elseif($asset_type == 'Mobile Phone'){ + }elseif ($asset_type == 'Mobile Phone') { $device_icon = "mobile-alt"; - }elseif($asset_type == 'Tablet'){ + }elseif ($asset_type == 'Tablet') { $device_icon = "tablet-alt"; - }elseif($asset_type == 'TV'){ + }elseif ($asset_type == 'TV') { $device_icon = "tv"; - }elseif($asset_type == 'Virtual Machine'){ + }elseif ($asset_type == 'Virtual Machine') { $device_icon = "cloud"; }else{ $device_icon = "tag"; @@ -230,7 +230,7 @@ if(isset($_GET['contact_id'])){ InterfacesEditCopy - + ArchiveDelete @@ -260,7 +260,7 @@ if(isset($_GET['contact_id'])){ -
"> +
">

Passwords

@@ -280,17 +280,17 @@ if(isset($_GET['contact_id'])){
"; } $login_username = htmlentities($row['login_username']); - if(empty($login_username)){ + if (empty($login_username)) { $login_username_display = "-"; }else{ $login_username_display = "$login_username"; @@ -298,7 +298,7 @@ if(isset($_GET['contact_id'])){ $login_password = htmlentities(decryptLoginEntry($row['login_password'])); $login_otp_secret = htmlentities($row['login_otp_secret']); $login_id_with_secret = '"' . $row['login_id'] . '","' . $row['login_otp_secret'] . '"'; - if(empty($login_otp_secret)){ + if (empty($login_otp_secret)) { $otp_display = "-"; }else{ $otp_display = " Hover.."; @@ -331,7 +331,7 @@ if(isset($_GET['contact_id'])){ @@ -58,7 +58,7 @@
- > + >
@@ -122,11 +122,11 @@ '$contact_created_at' OR location_archived_at IS NULL) AND location_client_id = $client_id ORDER BY location_name ASC"); - while($row = mysqli_fetch_array($sql_locations)){ + while ($row = mysqli_fetch_array($sql_locations)) { $location_id_select = $row['location_id']; $location_name_select = htmlentities($row['location_name']); ?> - + - +
@@ -180,7 +180,7 @@
- + contact_photo"> diff --git a/client_contacts.php b/client_contacts.php index 38aee406..68373c15 100644 --- a/client_contacts.php +++ b/client_contacts.php @@ -2,11 +2,11 @@
- +
@@ -75,7 +75,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
Name Domain
- "> + "> @@ -89,36 +89,36 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()")); $contact_title"; } $contact_department =htmlentities($row['contact_department']); - if(empty($contact_department)){ + if (empty($contact_department)) { $contact_department_display = "-"; }else{ $contact_department_display = $contact_department; } $contact_phone = formatPhoneNumber($row['contact_phone']); - if(empty($contact_phone)){ + if (empty($contact_phone)) { $contact_phone_display = "-"; }else{ $contact_phone_display = "$contact_phone"; } $contact_extension = htmlentities($row['contact_extension']); $contact_mobile = formatPhoneNumber($row['contact_mobile']); - if(empty($contact_mobile)){ + if (empty($contact_mobile)) { $contact_mobile_display = "-"; }else{ $contact_mobile_display = "$contact_mobile"; } $contact_email = htmlentities($row['contact_email']); - if(empty($contact_email)){ + if (empty($contact_email)) { $contact_email_display = "-"; }else{ $contact_email_display = "$contact_email"; @@ -128,14 +128,14 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()")); $contact_notes = htmlentities($row['contact_notes']); $contact_important = intval($row['contact_important']); $contact_created_at = $row['contact_created_at']; - if($contact_id == $primary_contact){ + if ($contact_id == $primary_contact) { $primary_contact_display = "Primary Contact"; }else{ $primary_contact_display = FALSE; } $contact_location_id = $row['contact_location_id']; $location_name = htmlentities($row['location_name']); - if(empty($location_name)){ + if (empty($location_name)) { $location_name_display = "-"; }else{ $location_name_display = $location_name; @@ -162,7 +162,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()")); - +
Name Department
- + "> @@ -183,7 +183,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()")); @@ -194,7 +194,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));