Commit Graph

108 Commits

Author SHA1 Message Date
Marcus Hill 5bb4296f14 Adjust core files to 4 spaces 2023-02-12 14:40:10 +00:00
Marcus Hill 6981b61f4c Add TCK as default ticket prefix during setup 2023-02-08 19:37:37 +00:00
Marcus Hill f92dc108e2 Tidy
- Move some scripts to their own js files
- Move some duplicate code blocks to functions
- General tidy & spacing cleanups (#538)
2023-02-04 22:09:56 +00:00
Marcus Hill b222255a78 Tidy 2023-02-01 00:20:56 +00:00
Marcus Hill 6383b5b488 Adjust wording and link to new docs 2023-02-01 00:17:46 +00:00
johnnyq 0acd19a5ce Added Telemetry to Cron if enabled in settings, many more telemetry data counts were added 2023-01-28 18:11:00 -05:00
johnnyq 0a1fb2227e Implement Installation ID for optional telemetry 2023-01-28 15:06:19 -05:00
Johnny 4fd6d752c6
Merge pull request #580 from wrongecho/function-standardise
Convert custom function names to camelCase
2023-01-26 18:20:33 -05:00
Marcus Hill 10362f86ef Convert custom function names to camelCase 2023-01-26 21:58:27 +00:00
Marcus Hill 23e3a2e8fc - Create custom function (randomString()) for generating cryptographically (and URL) safe strings.
- Replace usages of keygen and bin2hex(random_bytes()) with this function.
2023-01-26 21:35:06 +00:00
Marcus Hill d73b3cb960 Correct typos 2023-01-21 17:22:27 +00:00
Marcus Hill 2c3ebb3bbb Tidy codestyle - spaces between parenthesis and curly braces 2023-01-21 17:09:39 +00:00
Xander Luedtke cb3195a90a Moving docker $repo_branch var to config.php 2023-01-09 09:24:28 -07:00
johnnyq cb6211526c better keygen for masterkey on setup 2022-12-29 18:29:14 -05:00
Marcus Hill 7a76033e55 Tidy try catch 2022-12-24 18:35:44 +00:00
Marcus Hill 063085528c Add check of database credentials during setup before they are written to config.php 2022-12-24 18:30:14 +00:00
johnnyq 996c603826 Operation Cleanup Round 4 - Remove config_base_url from settings table in db. This should be in your config.php now, if this is not added this can break things 2022-09-17 18:04:26 -04:00
johnnyq c1ff2011a4 Set Default Invoice Net Terms to 30 from 7 During install as this is most common business practice for Invoice Net Terms 2022-07-20 17:56:21 -04:00
Marcus Hill a74dea8c22 Replace <center> tags with CSS 2022-04-16 13:38:45 +01:00
Marcus Hill 9096b091b2 Add database updater 2022-04-02 19:39:55 +01:00
Marcus Hill 9a183774cb Escape server http host/uri submitted to database during setup 2022-03-28 20:47:12 +01:00
Marcus Hill d7855c2a53 General readability edits - Move text around, remove references to API as this will be in docs instead 2022-02-26 12:15:59 +00:00
johnnyq 3038fb0672 Fix User Role on setup 2022-02-20 13:35:34 -05:00
johnnyq 16968e0b97 Added Locale option for company, this works in conjunction with the way the currency is displayed 2022-02-18 11:14:14 -05:00
johnnyq b1d09e6b56 Removed old API Key from Settings api.php now uses api_keys and a key is no longer generated upon setup, Also autogen an API key upon creation. 2022-02-04 15:59:51 -05:00
johnnyq 0231cebeea Fix share_data var 2022-01-16 13:47:15 -05:00
johnnyq 16931004ec Simplified Telemetry Opt in and fixed Telemetry URL 2022-01-16 13:36:05 -05:00
johnnyq c789038d53 add proper linkage for telemetry 2022-01-16 12:43:16 -05:00
johnnyq 5fdf956eb4 Added Basic Opt In Telemetry during install to help determine the number of installs and what country of origin are using the application along with any comments 2022-01-15 22:37:46 -05:00
Marcus Hill a56d701a8a Add initial user specific encryption of site master key 2022-01-10 21:47:51 +00:00
Johnny 19ba76d0d2
Merge pull request #262 from wrongecho/setup-notes
Setup notes
2022-01-09 22:57:18 -05:00
Marcus Hill d88da60e88 Add GNU GPL notice to setup 2022-01-09 22:46:52 +00:00
Marcus Hill 25b58c21c8 Add Secure flag (HTTPS only) to cookies 2022-01-09 13:56:45 +00:00
Marcus Hill b908a13d32 Small edits, link to docs 2022-01-08 16:59:07 +00:00
Marcus Hill c5e976d995 Add index.php files to upload directories to prevent file traversal 2022-01-07 18:35:23 +00:00
johnnyq 7112463e41 Commit Tidy allow public_cert to be null and move public_cert before notes 2022-01-04 11:35:34 -05:00
Marcus Hill dfbf0c788a Check that config.php is writable at the start of setup. 2022-01-04 03:21:04 +00:00
johnnyq ebb37c0f06 Fix Spelling mistake 2022-01-02 00:28:38 -05:00
johnnyq d5fcfeb417 Setup Fixes regarding user checks 2022-01-02 00:14:48 -05:00
johnnyq 2c76573471 Fixed Syntax error under setup 2022-01-01 18:30:06 -05:00
johnnyq 02f247a047 Incorrect DBHost Var Fix 2022-01-01 17:39:49 -05:00
johnnyq 0250ac0623 Forgot full php tag 2022-01-01 17:27:31 -05:00
johnnyq cf3c0a6410 Fixed a vulnerability in the setup.php file and other code cleanups. Thanks to the person that wishes to remain anonymous for reporting and providing a patch Also added a notice to readme to not use this web app during beta for production use 2022-01-01 17:02:31 -05:00
johnnyq 119e491865 Added Refferal Datasets on new company 2021-12-28 20:54:17 -05:00
johnnyq 05702c4a1b More Audit logging fixes and added proper permissions and added common datasets when a company is added 2021-12-28 18:53:48 -05:00
johnnyq d752a57132 Var Fixes in setup 2021-12-22 14:00:26 -05:00
johnnyq 1983c9f373 Mis-spelling causing breakge 2021-12-22 13:48:22 -05:00
johnnyq 89242870ca Fix Setup Incorrect Table Name for User Company Relation 2021-12-22 13:41:56 -05:00
johnnyq ba584a57e0 BREAKING CHANGES - Many DB Updates - NOT POSSIBLE TO EASILY UPGRADE TO THIS - Completely reworked User Company Access Permssions, started working on Client Role so Clients can access their data and a bunch of other small fixes 2021-12-22 13:08:24 -05:00
johnnyq 4604280efe This Update will break your login as we updated the password hash from MD5 to a salted hash using hash_password and password_verify techniques, fixed an unauthenticated persistent XSS Vulnerbility which would affect if someone spoofed their IP with a javascript code and then a logged in read the logs. The flaw was discovered by @bambilol #214 also fixed some other bugs. 2021-12-13 12:21:55 -05:00