Commit Graph

752 Commits

Author SHA1 Message Date
johnnyq 119e491865 Added Refferal Datasets on new company 2021-12-28 20:54:17 -05:00
johnnyq 05702c4a1b More Audit logging fixes and added proper permissions and added common datasets when a company is added 2021-12-28 18:53:48 -05:00
johnnyq 15d95a3647 Set Feedback Alerts to disappear after 4 seconds instead of 2 seconds 2021-12-28 18:20:15 -05:00
johnnyq 33400894d5 Updates and Fixings to Audit Logs, added client tag selection for mass email campaigns 2021-12-28 18:16:54 -05:00
johnnyq c04353f284 Added not bull on db structure update for tag_type 2021-12-27 12:14:56 -05:00
johnnyq 484d4fff82 Added Tag Type to allow expansion of tagging support for other entities in the future 2021-12-27 12:06:37 -05:00
johnnyq d23d455cd9 DB update The long awaited Client Tag support is finally complete along with icon support and color badges this has replaced the user maintenance field to allow further customization, fixed tickets as it was using the old permission system. 2021-12-27 11:42:13 -05:00
johnnyq a9fb11e3ef Fixed client details page as functions was declared twice 2021-12-23 10:58:16 -05:00
johnnyq 308bf0967f header got removed saomehow restored it 2021-12-22 17:28:17 -05:00
johnnyq 25b5cb3d40 Moved Functions above check login so that check login can use some of the functions, Moved Fingerprinting to check login instead of in functions as its a more appropriate place 2021-12-22 17:24:54 -05:00
johnnyq 610eeca0a1 DB Update More work on client tags 2021-12-22 14:34:45 -05:00
johnnyq 40c3587789 Remove Outdated DB Changes upon update as ITFlow requires a full reinstallation as of 12-22-2021 will add more as code changes 2021-12-22 14:10:52 -05:00
johnnyq 73133f62ef Fix User Role when adding a user 2021-12-22 14:07:58 -05:00
johnnyq d752a57132 Var Fixes in setup 2021-12-22 14:00:26 -05:00
johnnyq 1983c9f373 Mis-spelling causing breakge 2021-12-22 13:48:22 -05:00
johnnyq 89242870ca Fix Setup Incorrect Table Name for User Company Relation 2021-12-22 13:41:56 -05:00
johnnyq 64430a20ee Removed Role ID from users table it was unused and was breaking the ability to add users 2021-12-22 13:36:38 -05:00
johnnyq 997b07c822 Temp Removed Session User agent login vars from functions as its breaking Setup.php because of the reliance on an active mysql connection 2021-12-22 13:20:22 -05:00
johnnyq 074f1612f4 Merge branch 'master' of github.com:johnnyq/itflow 2021-12-22 13:09:09 -05:00
johnnyq ba584a57e0 BREAKING CHANGES - Many DB Updates - NOT POSSIBLE TO EASILY UPGRADE TO THIS - Completely reworked User Company Access Permssions, started working on Client Role so Clients can access their data and a bunch of other small fixes 2021-12-22 13:08:24 -05:00
Johnny 163ec8ad6f
Create FUNDING.yml 2021-12-16 12:10:23 -05:00
johnnyq 78f1e75eda Fix #216 Updated Currency codes everywhere not just in a few places 2021-12-14 13:00:24 -05:00
johnnyq f2763476a3 Fix #216 Tax Percent Float limitation 2021-12-14 11:58:17 -05:00
johnnyq 4604280efe This Update will break your login as we updated the password hash from MD5 to a salted hash using hash_password and password_verify techniques, fixed an unauthenticated persistent XSS Vulnerbility which would affect if someone spoofed their IP with a javascript code and then a logged in read the logs. The flaw was discovered by @bambilol #214 also fixed some other bugs. 2021-12-13 12:21:55 -05:00
johnnyq ed2dfa1b74 Disable Tagging for now as its still WIP 2021-12-12 16:22:18 -05:00
johnnyq cf0946439e Broked it now fixed it 2021-12-12 16:16:58 -05:00
johnnyq 17833fb6dd More Code Fixups and blips to resolve continuing to comb through the code 2021-12-12 16:09:51 -05:00
johnnyq faf39fc84a Code cleanup and fix possible injections when a trusted user is logged in thanks to mwdmeyer, constant_chaos, disclosure5 and rightwayround from /r/msp for pointing these issues out 2021-12-12 13:16:26 -05:00
johnnyq 82ead8a755 Reduced Font size of current version 2021-12-12 02:03:24 -05:00
johnnyq aaf65db6f3 Renamed MacOS X to just MacOS for user agent detection 2021-12-12 02:01:30 -05:00
johnnyq 7c0cce413f Missing Roundtrip label under edit trip 2021-12-12 01:52:09 -05:00
johnnyq b3b1a44228 Forgot the SQL Connection 2021-12-12 01:27:35 -05:00
johnnyq 9e9bb50db0 Fixed a SQL injection could only work if you had a login thanks disclosure5 for pointing this out from reddit/r/msp 2021-12-12 01:22:39 -05:00
johnnyq efb6372190 Fix #210 Password output under client logins 2021-12-10 13:35:48 -05:00
johnnyq 0b15aeedb5 Reworked last login under user-settings and users, made view more work 2021-12-09 17:48:18 -05:00
johnnyq f02e94d585 Started adding IP and User agent to audit logs, log when a user logs out, Merged logout into post.php 2021-12-09 16:12:57 -05:00
johnnyq a5a8fbc319 Fix a bunch of PHP Errors regarding various variable issues non existent vars, cleaned up client export documentation and export assets etc 2021-12-09 15:26:21 -05:00
johnnyq d78a24f3a5 Added git ids to the db structure update under updates 2021-12-09 11:15:19 -05:00
johnnyq 610875a3b3 Fix Alter Query Syntax for updating Table structure 2021-12-09 11:11:50 -05:00
johnnyq 16447709d8 added DB Structure changes during update 2021-12-09 11:07:54 -05:00
johnnyq c88e6b851a DB Structure Change - Removed the useless Low Account Balance alert 2021-12-08 22:32:05 -05:00
johnnyq 85cdc42d0f DB Structure update, Hide Passwords under client logins until eyeball is clicked to reveal password, prevent the looking over your shoulder type attack, Added Install Date to Assets, reworked client assets listing to include Operating System and Install Date 2021-12-08 22:15:20 -05:00
johnnyq b9fc4ea2bc show TOTP key in user setting if enabled, to allow adding to an totp app without QR Code like a password managed like bitwarden 2021-12-04 21:09:57 -05:00
johnnyq 53380718b1 Fixed TOTP for client logins 2021-12-04 21:00:34 -05:00
johnnyq e36739297d Fixed broken TOTP 2FA 2021-12-04 17:59:40 -05:00
johnnyq d0c0ca0a2c Updated Readme 2021-12-04 15:18:58 -05:00
johnnyq 991264d3ba Added WIP to Online Payments as it currently does not function, Disable Pay Online via guest url if online payment is not configured 2021-12-04 12:33:30 -05:00
johnnyq c8d83ca09c Fixed broken Client Print, added option to export client documentation with and without password 2021-12-04 12:12:14 -05:00
johnnyq c9065e8348 Added Array Tagging to Add Client also added Tag Icon Field 2021-11-24 22:56:55 -05:00
johnnyq ee1230e18a Added Tags CRUD and added to Side Menu 2021-11-24 21:53:21 -05:00