Commit Graph

283 Commits

Author SHA1 Message Date
johnnyq 610eeca0a1 DB Update More work on client tags 2021-12-22 14:34:45 -05:00
johnnyq 40c3587789 Remove Outdated DB Changes upon update as ITFlow requires a full reinstallation as of 12-22-2021 will add more as code changes 2021-12-22 14:10:52 -05:00
johnnyq ba584a57e0 BREAKING CHANGES - Many DB Updates - NOT POSSIBLE TO EASILY UPGRADE TO THIS - Completely reworked User Company Access Permssions, started working on Client Role so Clients can access their data and a bunch of other small fixes 2021-12-22 13:08:24 -05:00
johnnyq 4604280efe This Update will break your login as we updated the password hash from MD5 to a salted hash using hash_password and password_verify techniques, fixed an unauthenticated persistent XSS Vulnerbility which would affect if someone spoofed their IP with a javascript code and then a logged in read the logs. The flaw was discovered by @bambilol #214 also fixed some other bugs. 2021-12-13 12:21:55 -05:00
johnnyq cf0946439e Broked it now fixed it 2021-12-12 16:16:58 -05:00
johnnyq 17833fb6dd More Code Fixups and blips to resolve continuing to comb through the code 2021-12-12 16:09:51 -05:00
johnnyq b3b1a44228 Forgot the SQL Connection 2021-12-12 01:27:35 -05:00
johnnyq 9e9bb50db0 Fixed a SQL injection could only work if you had a login thanks disclosure5 for pointing this out from reddit/r/msp 2021-12-12 01:22:39 -05:00
johnnyq efb6372190 Fix #210 Password output under client logins 2021-12-10 13:35:48 -05:00
johnnyq f02e94d585 Started adding IP and User agent to audit logs, log when a user logs out, Merged logout into post.php 2021-12-09 16:12:57 -05:00
johnnyq a5a8fbc319 Fix a bunch of PHP Errors regarding various variable issues non existent vars, cleaned up client export documentation and export assets etc 2021-12-09 15:26:21 -05:00
johnnyq d78a24f3a5 Added git ids to the db structure update under updates 2021-12-09 11:15:19 -05:00
johnnyq 610875a3b3 Fix Alter Query Syntax for updating Table structure 2021-12-09 11:11:50 -05:00
johnnyq 16447709d8 added DB Structure changes during update 2021-12-09 11:07:54 -05:00
johnnyq c88e6b851a DB Structure Change - Removed the useless Low Account Balance alert 2021-12-08 22:32:05 -05:00
johnnyq 85cdc42d0f DB Structure update, Hide Passwords under client logins until eyeball is clicked to reveal password, prevent the looking over your shoulder type attack, Added Install Date to Assets, reworked client assets listing to include Operating System and Install Date 2021-12-08 22:15:20 -05:00
johnnyq c8d83ca09c Fixed broken Client Print, added option to export client documentation with and without password 2021-12-04 12:12:14 -05:00
johnnyq c9065e8348 Added Array Tagging to Add Client also added Tag Icon Field 2021-11-24 22:56:55 -05:00
johnnyq ee1230e18a Added Tags CRUD and added to Side Menu 2021-11-24 21:53:21 -05:00
johnnyq f939ca41aa More work on Campaign Mailing List, started adding space in between Currency symbol and number 2021-11-21 12:24:40 -05:00
johnnyq 627edc92b1 Added Update Successful message and auto redirect back 2021-11-20 16:45:50 -05:00
johnnyq 5aa02e346a update will now pull down the latest changes via git next up is schema upgrades between commits 2021-11-20 16:43:03 -05:00
johnnyq 1551ea7c9b Initial work on making the update function functionable 2021-11-20 16:36:55 -05:00
johnnyq 0976a08730 Removed default currency and default country under settings added a company currency to the company table. Now currency default and country default uses company country and currency, updated the currency symbol to use companies currency under dashboard, expenses, profit loss reports 2021-11-19 20:45:57 -05:00
johnnyq 6c80fa177d DB Update, reworked upcoming tagging feature in SQL, Added Province and Postal Code to address labels, changed the field document_details to document_content in SQL 2021-11-08 18:07:36 -05:00
johnnyq 7257664ae2 Allow uploading of .txt files under client files 2021-10-17 15:02:02 -04:00
johnnyq 6c7155f4ac Fixed an issue under edit user where it would update a blank password if none was entered 2021-09-22 10:10:10 -04:00
johnnyq e772f107e7 Fix Client File Link 2021-09-21 23:48:55 -04:00
johnnyq 3a5ba00a52 Fix Add Photo under add location 2021-09-21 23:44:45 -04:00
johnnyq c7edadfd46 Fix Add Photo under add contact 2021-09-21 23:38:15 -04:00
johnnyq a939588cf2 New File upload logic complete Breaking changes New db dump 2021-09-21 22:22:55 -04:00
johnnyq 1d3cf6fd96 Updated to new file upload logic on locations as well this will break location photos 2021-09-20 22:39:37 -04:00
johnnyq 22d3564f04 BREAKING CHANGE New file upload method for contacts to not specify full path in database to reduce the db load and size as well as give better error control 2021-09-20 22:10:57 -04:00
johnnyq 6908bdcd30 Bumped PHPMailer from 6.4.0 to 6.5.1 2021-09-20 18:33:00 -04:00
johnnyq 2e5e1aee52 Phone numbers are all now formatted correctly per their length 2021-09-11 22:41:50 -04:00
root 55a2a7a96a Fixed Synatx error in post 2021-09-10 10:55:38 -04:00
johnnyq b7d0549ede Initial start to mailing list support 2021-09-09 23:15:39 -04:00
johnnyq 2ec79ef014 Did the same as previous commit for edit Quote Invoice Recurring 2021-08-29 22:12:16 -04:00
johnnyq 209bd7da4d Remove Currency Selection from invoice, quote and recurring as this will be determined by your company currency in settings, the payment is what matters as this is where it will be converted 2021-08-29 22:07:46 -04:00
johnnyq 94577379d4 Fixed Edit Client Contact Title it was missing 2021-08-29 14:01:04 -04:00
johnnyq 09c62eb359 Fix delete Invoice Item not updating balance 2021-08-28 19:48:06 -04:00
johnnyq 3b3e6a0166 UI Update on Trip Forms contact forms and location forms also Contact / Location under add /edit contact now add or edit the primary location and contact 2021-08-28 16:07:31 -04:00
johnnyq 735ccc2602 Adding Tickets under client details now shows a selectable contact also when adding a ticket it will automatically choose the primary_contact of the client if none are selected 2021-08-28 12:47:50 -04:00
johnnyq 3a9ea1d67e Fixed Post Redirection on edit and archive in categories 2021-08-28 11:58:29 -04:00
johnnyq 94c0ac2dd1 Removed dead comment code 2021-08-28 11:46:51 -04:00
johnnyq 7031fd4e59 Fix Alert Settings failing to apply 2021-08-28 11:46:15 -04:00
johnnyq 439fc87551 Fix item_tax_id var in force recurring invoice 2021-08-28 01:44:12 -04:00
johnnyq 3cc90e9b42 Fixed Transfer Account 2021-08-28 00:54:07 -04:00
johnnyq 1e8f852f73 Missing $ for var in POST 2021-08-27 23:55:23 -04:00
johnnyq f3053ffbd4 BREAKING CHANGES: Major Backend Code Changes Updated Foreign keys to prepend their table names ex invoice_client_id, switched most queries over to JOIN instead of = Combined contacts and location into client removed client email, phone etc fields, tons of small bug fixes, and other small UI changes all across the board 2021-08-27 23:14:06 -04:00