diff --git a/README.md b/README.md index 402dbcb6f..5b4ac75e9 100644 --- a/README.md +++ b/README.md @@ -27,7 +27,7 @@ · Report Bug · - Request Feature + Suggest Feature · Security
@@ -44,16 +44,16 @@ ### The Problem - You're a small but busy managed service provider with 101 things to do. Information about your clients is unorganised, unstructured and outdated. - For some work, you seem to spend longer looking for the relevant documentation than actually working on the issue/project. -- On top of the technical day to day, you also have to take care of the financial side of the business - consistent pricing, quotes/invoicing, and accounting. +- MSP tools can be expensive, with recurring licensing costs adding up quickly. +- On top of the technical day-to-day, you also have to take care of the financial side of the business - consistent pricing, quotes/invoicing, and accounting. ### The Solution: ITFlow -- ITFlow consolidates common MSP needs (documentation, ticketing and billing) into one unified system. +- ITFlow consolidates common MSP needs (documentation, ticketing and billing) into one unified, free platform that you control. - ## Getting Started ### Self Hosting -- The best installation method is to use the [install script](https://docs.itflow.org/installation_script) on Ubuntu/Debian. A video walk through is available [here](https://www.youtube.com/watch?v=kKz9NOU_1XE). +- The best installation method is to use the [install script](https://docs.itflow.org/installation_script) on Ubuntu/Debian. See the [video](https://www.youtube.com/watch?v=kKz9NOU_1XE) walk through. ``` wget -O itflow_install.sh https://github.com/itflow-org/itflow-install-script/raw/main/itflow_install.sh bash itflow_install.sh @@ -61,25 +61,25 @@ - Other manual installation methods are available in the [docs](https://docs.itflow.org/installation). ### Managed Hosting -- If you'd prefer, we can [host ITFlow for you](https://services.itflow.org/hosting.php). +- If you'd prefer, we can [host ITFlow for you](https://services.itflow.org/hosting.php) (coming soon). ## Key Features -* Client documentation - assets, contacts, domains, docs, files, passwords, and more -* Accounting / Billing - finance dashboard, quotes, invoices, accounting, expenses, etc -* Client Portal - self service quote/invoice/ticket management for clients -* Alerting - account balance, invoices, domain/SSL renewals -* Completely free & open-source alternative to ITGlue and Hudu +* Client documentation - assets, contacts, domains, docs/files, passwords, tickets, and more +* Billing - quotes, invoices and expenses, with Stripe integration for online payments +* Alerting - domain and SSL expiry/renewals +* Client Portal - self service quote, invoice, and ticket management for clients + ## Roadmap / Future to-do -We track the implementation of confirmed features and bugs via [TaskFlow](https://tasks.dev.itflow.org/tasks.php). Use the [forum](https://forum.itflow.org) to request features or raise bug reports. +We track the implementation of confirmed features and bugs via [TaskFlow](https://tasks.dev.itflow.org/tasks.php). Use the [forum](https://forum.itflow.org) to suggest new features or report bugs. ## Support & Contributions ### Forum -For help using ITFlow, bugs, feature requests, and general ideas / discussions please use the community [forum](https://forum.itflow.org). +For help using ITFlow, bugs, feature suggestions, and other general ideas or discussions, please use the community [forum](https://forum.itflow.org). ### Contributing We have temporarily paused PRs from the community. @@ -90,17 +90,16 @@ We have temporarily paused PRs from the community. ### Supporters -We’re incredibly grateful to the organizations and individuals who support the project - a big thank you to: +We’re incredibly grateful to the organizations and individuals who [sponsor](https://services.itflow.org) the project - a big thank you to: - CompuMatter - F1 for HELP - digiBandit -- JetBrains (PhpStorm) ## License ITFlow is distributed "as is" under the GPL License, WITHOUT WARRANTY OF ANY KIND. See [`LICENSE`](https://github.com/itflow-org/itflow/blob/master/LICENSE) for details. ## Security -* As of 2025, we now have a stable release of the project. +* We've had a stable release of the project since Jan 2025. * Whilst we are confident in the safety of the code, no system is risk-free. Nearly all software has bugs. Use your best judgement before storing highly confidential information in ITFlow. * If you have a security concern, privately report it [here](https://github.com/itflow-org/itflow/security/policy). diff --git a/SECURITY.md b/SECURITY.md index 3479ef2ed..eca98fb16 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -1,12 +1,12 @@ # Security Policy -## **Please do NOT report security concerns/vulnerabilities publicly (Issues/forum)** +## **Please do NOT report security concerns/vulnerabilities publicly** -**We take security seriously** +**ITFlow stores important information, so we take security seriously** -- Whilst we are confident in the safety of the code, no system is risk-free. Nearly all software has bugs. Use your best judgement before storing highly confidential information in ITFlow. -- We attempt to follow security best practices where possible, including [automated code scanning](https://sonarcloud.io/component_measures?id=itflow-org_itflow&metric=security_rating&view=list). -- [](https://sonarcloud.io/summary/new_code?id=itflow-org_itflow) +- Whilst we are confident in the safety of the code, no system is risk-free. Nearly all software has bugs. +- Use your best judgement before storing highly confidential information in ITFlow. +- We attempt to follow security best practices where possible, including automated code scanning. ## Supported Versions We operate a rolling release model. Any bug fixes will be released into latest version of ITFlow, so you must stay up-to-date. @@ -19,6 +19,8 @@ We operate a rolling release model. Any bug fixes will be released into latest v **Security contact: [GitHub Security Advisories](https://github.com/itflow-org/itflow/security/advisories/new)** -If you have discovered a security issue, please **[report it](https://github.com/itflow-org/itflow/security/advisories/new)** to us in as much detail as possible, so we can fix it. +If you have discovered a security issue, please **[report it](https://github.com/itflow-org/itflow/security/advisories/new)** to us so we can fix it. -You should expect to receive an initial acknowledgement within 72 hours. If you don't receive any feedback, we may have missed the initial email from GitHub (we're human!). Please raise a forum discussion quoting ONLY the assigned GHSA ref. +You should expect to receive an initial acknowledgement within 7 days. If you don't receive any feedback, we may have missed the initial email from GitHub (we're human!). Please raise a forum discussion quoting ONLY the assigned GHSA ref. + +Note: Please don't submit AI slop. AI can be useful for drafting and research, but you are responsible for reviewing and validating anything you submit. We reserve the right to restrict repository access if you repeatedly ignore this requirement. \ No newline at end of file diff --git a/admin/ai_models.php b/admin/ai_models.php index db8f96d81..0d89b83af 100644 --- a/admin/ai_models.php +++ b/admin/ai_models.php @@ -25,9 +25,9 @@ $num_rows = mysqli_num_rows($sql);