johnnyq
|
5c4805b822
|
Neutralize CSV formula injection in generated exports using the new created escapeCsvFormula Function
|
2026-07-24 18:12:45 -04:00 |
|
johnnyq
|
af51c4316f
|
Updated validateCSRFToken to automatically grab and compare get or post csrf token no longer need to pass an argument to the function which fixed the issue if no hash was present
|
2026-07-24 13:40:37 -04:00 |
|
johnnyq
|
bcb244c245
|
Update skipped function renames in anything named vendor
|
2026-07-14 19:09:32 -04:00 |
|
johnnyq
|
df5c350765
|
Vendors: enforceClientAccess in POST only if vendor is assigned a client, as vendor_client_id 0 is for global vendors
|
2026-03-06 15:43:44 -05:00 |
|
johnnyq
|
18e180eca5
|
Vendors: Check if client_id is set to enforce the right permission check. If client vendor then check client module otherwise check financial module
|
2026-03-02 18:40:07 -05:00 |
|
johnnyq
|
5b49908438
|
Vendors: Add missing CSRF, need to update the permissions as a vendor can be client or global and permissions need to be set based off if the referal url has client_id or not
|
2026-03-02 17:20:00 -05:00 |
|
johnnyq
|
0a30300bde
|
replace all instances of mysqli_fetch_array with mysqli_fetch_assoc for better performance and memory usage
|
2026-01-14 17:30:23 -05:00 |
|
johnnyq
|
e1a579387f
|
Convert all Import / Export Modals to Ajax and a few other lingering modals that were not converted yet
|
2025-12-02 15:04:05 -05:00 |
|
johnnyq
|
edabc5c33f
|
rename /user/ to /agent/ and update links to use agent/ instead
|
2025-09-23 18:04:23 -04:00 |
|