19 Commits

Author	SHA1	Message	Date
johnnyq	6ecc27e7ca	Version ITFlow's scripts and stylesheets so browsers fetch the new copies after an update instead of needing a cache clear: add staticFileUrl() in functions/app.php, which adds ?v= and the file's modification time to the address, and send every script and stylesheet tag through it, libs included, with page-relative addresses changed to start from the site root; add js/tinymce_defaults.js to set TinyMCE's cache_suffix so the plugins, theme and skins it loads itself are versioned too; load ticket collision detection only when a ticket is shown, so a ticket that isn't found no longer throws a script error; add changelog entries and a CONTRIBUTING rule that new tags must use staticFileUrl()	2026-11-09 01:22:35 -05:00
johnnyq	be002b6f29	Roles stage 4: the money on invoices goes by Financial with Sales at Read through billingMoneyCan and enforceBillingMoney, so taking payments one at a time, by saved card or as a batch, changing them and emailing receipts, reminders and statements need write access to Financial, and deleting or refunding a payment needs full access, with the old Sales rules for reminders, statements and receipts still accepted; invoice, invoice list, Income and payment quick looks offer only what the role can do, the reminder window offers only the reminder to a role that cannot send the invoice, a reminder for a draft or with nothing owed still needs Sales, and Income bulk Set Category on payments needs Sales as it changes the invoice; database 3.1.8 gives the built-in Accountant full access to Financial when it still has its shipped levels, and new installs seed it that way; calendar events for a client follow the role's Clients level through calendarEventCan, Read to see, Modify to add, change, move, skip or send, Full to delete or Modify for the agent who added it, events an agent is on always show, events with no client stay open to everyone, and the calendar, dashboard and calendar links leave out other agents' client events for roles without Clients, with New event, the client picker and dragging following the same rule; the API now sets PHP and MySQL to ITFlow's timezone so what it creates, API ticket SLA times and key expiry go by local time, and inc_set_timezone.php only writes the session when one is open and no longer leaves its result and row variables behind; changelog updated	2026-10-17 21:52:10 -04:00
johnnyq	3ec52974db	Calendar modernization: calendar page rebuilt to load only the dates on screen with show or hide toggles for each calendar and for built-in sources (scheduled tickets, project start and due dates, service reviews, recurring tickets, renewals, invoices due), a filter for one agent, quick looks on click, drag to reschedule tickets and events that do not repeat, and a To schedule panel for dragging open unscheduled tickets onto the calendar; events get a shared add/edit form with repeats every N days/weeks/months/years with an optional end date and single skipped occurrences, a client site, location or meeting link, agents, client contacts and guest emails as attendees, iCalendar invitations with updates and cancellations sent to invited attendees, an event quick look with map and join links, .ics download and resend; each agent gets a personal subscription link for their schedule (their own or the whole team, busy only option, respects role and client access, stops when the account is disabled) with setup help for Google, Outlook, Apple, Nextcloud and Thunderbird; shared calendar feeds and invites now publish timed events with TZID and VTIMEZONE so repeating events keep their time across DST, with INTERVAL, UNTIL and EXDATE support; managing calendars is limited to admins; ticket schedule logic moved into functions/ticket.php and shared with the calendar, the schedule dialog shows the assigned agent's day, and ticket visit calendar files are rebuilt without zapcal as one-hour published events; mail queue sends invitations and cancellations as a text/calendar part and other calendar files as invite.ics; dashboard schedule shows only events the agent is on or added, client overview Coming up and client sidebar count use upcoming events, sites and contacts get New event shortcuts, demo data uses repeating events and attendees; database update 2.8.8 adds event repeat interval, until, skip, sequence and created by, attendee user and invited at, user_calendar_feeds, and widens email_queue.email_cal_str to text	2026-10-15 19:17:17 -04:00
johnnyq	69484a8a2e	Replace Tom Select with ITFlow's own select picker: native select stays the source of truth, search, checklists for multi selects, add-your-own for tag fields, phone sheet, and client/agent/contact avatars, tag and category colours, priority dots and asset icons in the options	2026-10-13 12:41:29 -04:00
johnnyq	49106e2a80	UI fixes: confirm irreversible actions, keep reply drafts guarded, re-enable CSP on portal recurring invoices ... - Add confirm-link to 14 one-click delete/disable links (asset, contact, files, templates, logo, MFA, calendar event, disable user, cancel schedule) - confirm_modal.js treats btn-danger / btn-outline-danger as destructive - Replace per-editor window.onbeforeunload with one guard over all editors - New js/autosubmit.js replaces inline onchange in the portal; CSP back on recurring_invoices.php - Fix blank user name in disable_user audit log	2026-10-08 16:47:12 -04:00
johnnyq	dc6b191eed	Update Font, Migrated away from JQUERY dependent libs: toastr to bootstrap5 toasts, daterangepicker to flatpickr, select2 to Tom Select, InputMask to IMask	2026-08-14 17:08:40 -04:00
johnnyq	a084e37c39	Initial migration from AdminLTE 3 to 4, bootstrap 4 to 5	2026-08-14 13:22:11 -04:00
johnnyq	3cae52067a	Fix calendar event Delete bug	2026-08-06 14:21:57 -04:00
johnnyq	b3744e9ed5	More sweeps to replace select * with actual returned column names dramatically reduces php memory usage and speeds up processing dramatically especially in the crons since they run all the time	2026-08-06 13:10:23 -04:00
johnnyq	b8c9d5b4cf	Query Optimization: Select only needed columns instead of SELECT * on looped queries	2026-08-06 12:59:43 -04:00
johnnyq	f2d5ac4a29	Feature: Calendars are now exportable shareable so Third Party Calendar services can read them, also added recoccurence to calendar, and all day along with sperating the time fields and click in a box to add calendar event is possible	2026-07-30 02:18:30 -04:00
johnnyq	b3f959ac55	Use Short echo tags across the code	2026-07-28 18:47:52 -04:00
johnnyq	2c09ce097c	More Client Enforcement in modals across the app	2026-07-16 13:10:02 -04:00
johnnyq	7bc47a58fe	Replace Function nullable_htmlentities() with just escapeHtml() and update all instances throughout	2026-07-14 17:10:45 -04:00
johnnyq	3983c45cac	Calendar Events: use client_id instead of client in POST and enforceClientAccess if client is assigned to an event	2026-03-06 15:59:18 -05:00
johnnyq	f77bd4f0c6	Calendar: Add Delete Calendar, rename System calendar to Built-in calendar with builtin calendar names, moved calendar select on top for both edit / add event	2026-03-04 17:09:13 -05:00
johnnyq	e1daa14087	Calendar: Add missing CSRF checks	2026-03-01 21:52:28 -05:00
johnnyq	0a30300bde	replace all instances of mysqli_fetch_array with mysqli_fetch_assoc for better performance and memory usage	2026-01-14 17:30:23 -05:00
johnnyq	edabc5c33f	rename /user/ to /agent/ and update links to use agent/ instead	2025-09-23 18:04:23 -04:00