johnnyq
|
c51323b88e
|
Rebuild guest sharing as Shared Links (functions/share.php, DB 2.9.0) with one Share window for credentials, documents and files plus secure notes and login requests that clients answer through an encrypted form and agents save to credentials, choices for expiry, view limit, a passphrase or a code emailed to the recipient with lockout after five wrong tries, optional 2FA codes, notify on open, email or copy or QR, the link secret kept after the # and only its hash stored, login, note and request payloads sealed with AES-256-GCM under a key derived from the secret and request keys held under the vault, a rebuilt guest page (guest/share.php, js/guest_share.js, guest/share_ajax.php) with click to reveal so link scanners cannot use up one-time links, copy buttons, rotating 2FA codes limited to the browser that opened it and a destroy button, POST-only file downloads confined to the client folder, a Shared Links page per client and under All Client Docs with open, sent back and ended filters, a quick look with access history by address and browser, turn off one, ticked or every open link for a client, secrets wiped when links end and ended links kept for 90 days, sharing policy under Admin Settings Security, old links still working until they expire, removal of share_modal.php, share_modal.js, credential_share.php, share_generate_link, get_share_totp_token and deactivate_shared_item, and an updated 26.11 changelog
|
2026-10-16 01:33:36 -04:00 |
|
johnnyq
|
fdc2a8c2c3
|
Switch some bg-primary to bg-blue so they are consistent across themes, use new bs5 to reduce width on certain form inputs
|
2026-08-25 17:44:18 -04:00 |
|
johnnyq
|
e2512b0f86
|
Fixed Side nav titles, Fixed ajax on bootstrap modals, fixed pagination all regressions
|
2026-08-14 18:32:33 -04:00 |
|
johnnyq
|
a084e37c39
|
Initial migration from AdminLTE 3 to 4, bootstrap 4 to 5
|
2026-08-14 13:22:11 -04:00 |
|
johnnyq
|
b3744e9ed5
|
More sweeps to replace select * with actual returned column names dramatically reduces php memory usage and speeds up processing dramatically especially in the crons since they run all the time
|
2026-08-06 13:10:23 -04:00 |
|
johnnyq
|
b3f959ac55
|
Use Short echo tags across the code
|
2026-07-28 18:47:52 -04:00 |
|
johnnyq
|
22e93589cb
|
Fix share link view accounting and quote response handling
|
2026-07-27 21:11:45 -04:00 |
|
johnnyq
|
70d165e8bc
|
Claim shared item views atomically and log guest audit IPs
|
2026-07-27 20:58:37 -04:00 |
|
johnnyq
|
906f58473d
|
Fix guest view credential totp
|
2026-07-16 00:26:25 -04:00 |
|
johnnyq
|
e39ecb7ac9
|
Remove Legacy OTP code and fix guest view credential
|
2026-07-15 22:02:52 -04:00 |
|
johnnyq
|
f1836c70cd
|
Replace Function logAction() with logAudit()
|
2026-07-14 17:35:23 -04:00 |
|
johnnyq
|
b57ddc0e5c
|
Replace Function sanitizeInput() with just escapeSql() and update all instances throughout
|
2026-07-14 17:17:50 -04:00 |
|
johnnyq
|
7bc47a58fe
|
Replace Function nullable_htmlentities() with just escapeHtml() and update all instances throughout
|
2026-07-14 17:10:45 -04:00 |
|
johnnyq
|
8da3a107fb
|
Rename plugins to libs and update all file references
|
2026-07-10 13:24:20 -04:00 |
|
johnnyq
|
a81edc122d
|
Add CSRF Checks on Agent ajax endpoints that would update / delete or add something to the db
|
2026-03-05 17:12:44 -05:00 |
|
johnnyq
|
0a30300bde
|
replace all instances of mysqli_fetch_array with mysqli_fetch_assoc for better performance and memory usage
|
2026-01-14 17:30:23 -05:00 |
|
johnnyq
|
2ec4cdc4fb
|
Ceated inc_all_guest.php and modulaized the guest header.php removed guest footer and used the global footer.php as they were very similar
|
2025-10-08 01:00:48 -04:00 |
|
johnnyq
|
00f5198bed
|
Update appNotidfy links to use Absolute paths, updated gitignore
|
2025-09-25 13:31:16 -04:00 |
|
johnnyq
|
07b29a7bdc
|
Add Phone Country code in more places for proper phone number formatting
|
2025-03-26 13:36:56 -04:00 |
|
johnnyq
|
f1aa66119a
|
Update pointers to the includes folder
|
2025-03-13 18:12:18 -04:00 |
|
johnnyq
|
f64641cfdd
|
Fix regression OTP in guest view item
|
2025-03-12 23:03:28 -04:00 |
|
johnnyq
|
e93704bbdb
|
Completely renamed everything login to credential including tables added cascading deletion to the multi to multi tables
|
2025-03-12 21:28:50 -04:00 |
|
johnnyq
|
ef06c4141f
|
Started work on Global Contacts, Added PrettyContent to guest footer and updated the guest document view to use it so images are responsive and tables show up correctly
|
2025-01-30 18:24:05 -05:00 |
|
johnnyq
|
5765144770
|
Disable HTML Purifier Caching in Guest and Portal Areas ass well
|
2025-01-22 14:42:45 -05:00 |
|
johnnyq
|
7a23cf245d
|
Fix index.php, Move Guest files to /Guest directory, fix adminlte path
|
2025-01-11 15:48:10 -05:00 |
|