johnnyq
d37c3f0251
Rework htmlpurify function in client portal to properly santizie the output instead of the input Fix broken client avatar in client portal
2023-03-12 10:48:45 -04:00
johnnyq
48fe49cf77
BREAKING CHANGES - MAKE FULL BACKUP BEFORE PROCEEDING - Requires Manual Intervention on files see Forum Post Make sure you run the Database update directly after update. This Removes Multi-Company Functionality. Fixes issues with Reponsive tables and bunch of other UI and small Fixes
2023-03-11 16:16:46 -05:00
johnnyq
a711bed38c
Add sme more htmlemtities for consistency
2023-03-05 20:06:42 -05:00
johnnyq
f7552cd25a
Finished up santizeInput Conv and UI updates
2023-02-23 16:09:37 -05:00
Marcus Hill
c219324bb8
General cleanup/formatting
2023-02-09 11:42:57 +00:00
Marcus Hill
b36719eb99
General cleanup/tidying
2023-02-09 11:32:40 +00:00
Marcus Hill
e8c9e63a7b
Add X-Frame-Options to login pages & client portal
2023-02-05 18:43:50 +00:00
Marcus Hill
7f02464b92
Portal-related updates
...
- Bug fix contact password setting
- Add invoice guest view link to invoices portal page
- Billing contacts now have access to invoices on the portal
- Technical contacts now have access to all tickets
- General housekeeping/tidying
2023-02-04 15:28:39 +00:00
Marcus Hill
63923290cc
Add new ticket button on portal home page
2023-02-01 23:13:53 +00:00
Marcus Hill
fdcabbcb14
Add very basic invoices summary to client portal (visible only to the primary contact)
2023-02-01 23:11:35 +00:00
Marcus Hill
3649b3019a
Bugfix: Non-primary contacts were not able to raise tickets from the portal due to the navbar item being hidden
2023-02-01 23:05:47 +00:00
Johnny
4fd6d752c6
Merge pull request #580 from wrongecho/function-standardise
...
Convert custom function names to camelCase
2023-01-26 18:20:33 -05:00
Marcus Hill
531bd25f27
Convert custom function names to camelCase
2023-01-26 22:03:31 +00:00
Marcus Hill
10362f86ef
Convert custom function names to camelCase
2023-01-26 21:58:27 +00:00
Marcus Hill
23e3a2e8fc
- Create custom function (randomString()) for generating cryptographically (and URL) safe strings.
...
- Replace usages of keygen and bin2hex(random_bytes()) with this function.
2023-01-26 21:35:06 +00:00
Marcus Hill
d612a3ba26
Convert to require_once
2023-01-25 23:22:12 +00:00
Marcus Hill
cffde0fbbd
Tidy
2023-01-25 23:07:37 +00:00
Marcus Hill
bfe5e533bd
Merge branch 'master' into more-tidy
2023-01-25 23:06:34 +00:00
Marcus Hill
0f3b6b5d23
Add alt-text to logo
2023-01-25 23:04:45 +00:00
Marcus Hill
67e1fb7021
Show the 'default' company logo (if configured) on the client login page instead of the ITFlow/company name text
2023-01-25 23:04:45 +00:00
Marcus Hill
cb11ebc857
General tidy/spacing cleanups
2023-01-25 23:04:41 +00:00
Marcus Hill
8d4a76e3f8
Add HTML lang element to match main header.php
2023-01-25 23:04:41 +00:00
Marcus Hill
efecab179b
General cleanups, add HTML lang element to match header.php
2023-01-25 23:04:41 +00:00
Marcus Hill
b98439d74a
Remove unused variable assignment. was calling get_os with no parameters, so nothing was ever returned anyway. Get_os instead can now be given the user agent to determine the OS
2023-01-25 22:59:28 +00:00
Marcus Hill
ad2390d0ea
General tidy/spacing cleanups
2023-01-23 21:09:44 +00:00
Marcus Hill
49da4d7fd4
Add HTML lang element to match main header.php
2023-01-23 20:56:08 +00:00
Marcus Hill
95b9e2fe23
General cleanups, add HTML lang element to match header.php
2023-01-23 20:55:25 +00:00
Marcus Hill
d73b3cb960
Correct typos
2023-01-21 17:22:27 +00:00
Marcus Hill
2c3ebb3bbb
Tidy codestyle - spaces between parenthesis and curly braces
2023-01-21 17:09:39 +00:00
johnnyq
2f595bd7c8
Added some breadcrumbs to new ticket and ticket details in user portal
2023-01-16 20:48:25 -05:00
johnnyq
7ba434963e
Cleaned up and fixed Client Portal class Syntax, removed unnessesary html markup etc
2023-01-16 20:09:34 -05:00
Marcus Hill
66259c295b
Escape potential HTML data from ticket fields
2023-01-02 15:54:37 +00:00
Marcus Hill
f7bfeedf54
Escape potential HTML data from ticket reply contact/user fields
2023-01-02 15:50:35 +00:00
Marcus Hill
f2efa79c57
Escape potential HTML data from ticket fields
2023-01-02 15:48:47 +00:00
Marcus Hill
4b10a2ac68
Improve security of password reset token for client portal
2023-01-02 15:38:40 +00:00
Marcus Hill
3ea7406c2e
Better name azure client id variable as to not be confusing with itflow client ids
2023-01-02 15:27:29 +00:00
Marcus Hill
e32439cc4c
Escape potential HTML from ticket fields
2023-01-02 15:24:30 +00:00
Marcus Hill
67b306795b
Sanitize portal session vars against sql/html code
2023-01-02 15:17:58 +00:00
Marcus Hill
dd00f48e5b
Portal code style tidy
2023-01-01 16:05:48 +00:00
Marcus Hill
6746edda1a
Misc tidying code spacing & formatting in accordance with SonarCloud/PSR
2023-01-01 15:41:21 +00:00
Marcus Hill
1ea081a175
Move email sending to a function for better error handling and code-deduplication
2022-12-18 14:24:47 +00:00
Marcus Hill
0706af1608
Make separate avatar photo URLs for client/agent replies. Fixes #501
2022-12-11 10:50:16 +00:00
Marcus Hill
6529ff8bbf
Allow portal contacts to reset their passwords via email
2022-10-01 21:32:19 +01:00
Marcus Hill
851ca7fae5
Always set a random password for new portal users. This isn't an issue at the moment as we don't allow logins with empty passwords but better to be safe.
2022-10-01 19:32:40 +01:00
Marcus Hill
5cf36fd719
Show the company brand/name on the client portal, rather than ITFlow
2022-09-30 21:07:00 +01:00
johnnyq
6f6d737e64
Added meta no index to all headers so pages dont get indexed by Google this only affects people that dont have a robots.txt at HTRoot hence people that are running itflow in a subdir like example.com/itflow
2022-09-21 12:38:22 -04:00
Marcus Hill
39e95347f0
Add ability for locally authenticated client contacts to change their portal password
2022-09-10 22:46:01 +01:00
Marcus Hill
5f5e023afe
Fix contact title & improve logging on client portal
...
Hyperlink ticket on client overview page
2022-04-16 12:51:15 +01:00
Marcus Hill
441591d39e
Allow client to close ticket from portal
2022-03-29 21:16:02 +01:00
Johnny
bb24cc7112
Merge pull request #421 from wrongecho/misc2
...
Client portal + permission bug fix
2022-03-28 19:15:01 -04:00
