Commit Graph

105 Commits

Author SHA1 Message Date
Marcus Hill b222255a78 Tidy 2023-02-01 00:20:56 +00:00
Marcus Hill 6383b5b488 Adjust wording and link to new docs 2023-02-01 00:17:46 +00:00
johnnyq 0acd19a5ce Added Telemetry to Cron if enabled in settings, many more telemetry data counts were added 2023-01-28 18:11:00 -05:00
johnnyq 0a1fb2227e Implement Installation ID for optional telemetry 2023-01-28 15:06:19 -05:00
Johnny 4fd6d752c6
Merge pull request #580 from wrongecho/function-standardise
Convert custom function names to camelCase
2023-01-26 18:20:33 -05:00
Marcus Hill 10362f86ef Convert custom function names to camelCase 2023-01-26 21:58:27 +00:00
Marcus Hill 23e3a2e8fc - Create custom function (randomString()) for generating cryptographically (and URL) safe strings.
- Replace usages of keygen and bin2hex(random_bytes()) with this function.
2023-01-26 21:35:06 +00:00
Marcus Hill d73b3cb960 Correct typos 2023-01-21 17:22:27 +00:00
Marcus Hill 2c3ebb3bbb Tidy codestyle - spaces between parenthesis and curly braces 2023-01-21 17:09:39 +00:00
Xander Luedtke cb3195a90a Moving docker $repo_branch var to config.php 2023-01-09 09:24:28 -07:00
johnnyq cb6211526c better keygen for masterkey on setup 2022-12-29 18:29:14 -05:00
Marcus Hill 7a76033e55 Tidy try catch 2022-12-24 18:35:44 +00:00
Marcus Hill 063085528c Add check of database credentials during setup before they are written to config.php 2022-12-24 18:30:14 +00:00
johnnyq 996c603826 Operation Cleanup Round 4 - Remove config_base_url from settings table in db. This should be in your config.php now, if this is not added this can break things 2022-09-17 18:04:26 -04:00
johnnyq c1ff2011a4 Set Default Invoice Net Terms to 30 from 7 During install as this is most common business practice for Invoice Net Terms 2022-07-20 17:56:21 -04:00
Marcus Hill a74dea8c22 Replace <center> tags with CSS 2022-04-16 13:38:45 +01:00
Marcus Hill 9096b091b2 Add database updater 2022-04-02 19:39:55 +01:00
Marcus Hill 9a183774cb Escape server http host/uri submitted to database during setup 2022-03-28 20:47:12 +01:00
Marcus Hill d7855c2a53 General readability edits - Move text around, remove references to API as this will be in docs instead 2022-02-26 12:15:59 +00:00
johnnyq 3038fb0672 Fix User Role on setup 2022-02-20 13:35:34 -05:00
johnnyq 16968e0b97 Added Locale option for company, this works in conjunction with the way the currency is displayed 2022-02-18 11:14:14 -05:00
johnnyq b1d09e6b56 Removed old API Key from Settings api.php now uses api_keys and a key is no longer generated upon setup, Also autogen an API key upon creation. 2022-02-04 15:59:51 -05:00
johnnyq 0231cebeea Fix share_data var 2022-01-16 13:47:15 -05:00
johnnyq 16931004ec Simplified Telemetry Opt in and fixed Telemetry URL 2022-01-16 13:36:05 -05:00
johnnyq c789038d53 add proper linkage for telemetry 2022-01-16 12:43:16 -05:00
johnnyq 5fdf956eb4 Added Basic Opt In Telemetry during install to help determine the number of installs and what country of origin are using the application along with any comments 2022-01-15 22:37:46 -05:00
Marcus Hill a56d701a8a Add initial user specific encryption of site master key 2022-01-10 21:47:51 +00:00
Johnny 19ba76d0d2
Merge pull request #262 from wrongecho/setup-notes
Setup notes
2022-01-09 22:57:18 -05:00
Marcus Hill d88da60e88 Add GNU GPL notice to setup 2022-01-09 22:46:52 +00:00
Marcus Hill 25b58c21c8 Add Secure flag (HTTPS only) to cookies 2022-01-09 13:56:45 +00:00
Marcus Hill b908a13d32 Small edits, link to docs 2022-01-08 16:59:07 +00:00
Marcus Hill c5e976d995 Add index.php files to upload directories to prevent file traversal 2022-01-07 18:35:23 +00:00
johnnyq 7112463e41 Commit Tidy allow public_cert to be null and move public_cert before notes 2022-01-04 11:35:34 -05:00
Marcus Hill dfbf0c788a Check that config.php is writable at the start of setup. 2022-01-04 03:21:04 +00:00
johnnyq ebb37c0f06 Fix Spelling mistake 2022-01-02 00:28:38 -05:00
johnnyq d5fcfeb417 Setup Fixes regarding user checks 2022-01-02 00:14:48 -05:00
johnnyq 2c76573471 Fixed Syntax error under setup 2022-01-01 18:30:06 -05:00
johnnyq 02f247a047 Incorrect DBHost Var Fix 2022-01-01 17:39:49 -05:00
johnnyq 0250ac0623 Forgot full php tag 2022-01-01 17:27:31 -05:00
johnnyq cf3c0a6410 Fixed a vulnerability in the setup.php file and other code cleanups. Thanks to the person that wishes to remain anonymous for reporting and providing a patch Also added a notice to readme to not use this web app during beta for production use 2022-01-01 17:02:31 -05:00
johnnyq 119e491865 Added Refferal Datasets on new company 2021-12-28 20:54:17 -05:00
johnnyq 05702c4a1b More Audit logging fixes and added proper permissions and added common datasets when a company is added 2021-12-28 18:53:48 -05:00
johnnyq d752a57132 Var Fixes in setup 2021-12-22 14:00:26 -05:00
johnnyq 1983c9f373 Mis-spelling causing breakge 2021-12-22 13:48:22 -05:00
johnnyq 89242870ca Fix Setup Incorrect Table Name for User Company Relation 2021-12-22 13:41:56 -05:00
johnnyq ba584a57e0 BREAKING CHANGES - Many DB Updates - NOT POSSIBLE TO EASILY UPGRADE TO THIS - Completely reworked User Company Access Permssions, started working on Client Role so Clients can access their data and a bunch of other small fixes 2021-12-22 13:08:24 -05:00
johnnyq 4604280efe This Update will break your login as we updated the password hash from MD5 to a salted hash using hash_password and password_verify techniques, fixed an unauthenticated persistent XSS Vulnerbility which would affect if someone spoofed their IP with a javascript code and then a logged in read the logs. The flaw was discovered by @bambilol #214 also fixed some other bugs. 2021-12-13 12:21:55 -05:00
johnnyq 0976a08730 Removed default currency and default country under settings added a company currency to the company table. Now currency default and country default uses company country and currency, updated the currency symbol to use companies currency under dashboard, expenses, profit loss reports 2021-11-19 20:45:57 -05:00
johnnyq 6c80fa177d DB Update, reworked upcoming tagging feature in SQL, Added Province and Postal Code to address labels, changed the field document_details to document_content in SQL 2021-11-08 18:07:36 -05:00
johnnyq 50cd239cd4 Added all country currencies 2021-11-04 00:31:19 -04:00