Commit Graph

39 Commits

Author SHA1 Message Date
Marcus Hill 72fd102e57 SQL Escape tech username. The username is added to most log entries meaning that a simple apostrophe in the name breaks all logging for the user 2023-01-02 14:54:49 +00:00
Marcus Hill 5cbd0fad0d Move role validation to functions.php 2022-05-07 17:25:30 +01:00
Marcus Hill fca1627c33 Remove delete user post.php code. Deleting users means we'll lose all tickets/replies which isn't great.
Correct user archive behaviour so when users are archived they can no longer login. Need to add ability for quick disable/enable of user accounts, as using archive as permanent.
Refactor "You are not permitted to do that!" wording into a constant instead.
2022-04-15 13:29:27 +01:00
Marcus Hill 9040fdf847 Misc small changes/fixes 2022-03-27 22:26:22 +01:00
johnnyq 05e7b160b1 DB Structure Update table name alerts is now notifications also update the fields accordingly to the notifications table - Reworked Notifications a bit 2022-02-21 21:21:13 -05:00
johnnyq 16968e0b97 Added Locale option for company, this works in conjunction with the way the currency is displayed 2022-02-18 11:14:14 -05:00
johnnyq 0aec371ccd Add Software Licnee Version and License Type as well as the beginnings to assign licneses to devices and or users 2022-02-18 00:27:00 -05:00
johnnyq f2f9f22545 Started using new php function for Currency formatting as this is best preactice, removed Client Access and removed certian user roles 2022-02-17 17:41:30 -05:00
johnnyq bb972e8de3 Store full user agent, we can always parse it later 2022-02-04 17:04:28 -05:00
Marcus Hill 25b58c21c8 Add Secure flag (HTTPS only) to cookies 2022-01-09 13:56:45 +00:00
Marcus Hill 8d5a8edada Add httponly setting to cookies in check_login before session starts there too. Extension of pull #253 2022-01-09 13:19:59 +00:00
johnnyq cf3c0a6410 Fixed a vulnerability in the setup.php file and other code cleanups. Thanks to the person that wishes to remain anonymous for reporting and providing a patch Also added a notice to readme to not use this web app during beta for production use 2022-01-01 17:02:31 -05:00
johnnyq e978cd142e More Audit Logging work, fixed a bunch of small bugs along the way 2021-12-31 15:33:41 -05:00
johnnyq 33400894d5 Updates and Fixings to Audit Logs, added client tag selection for mass email campaigns 2021-12-28 18:16:54 -05:00
johnnyq a9fb11e3ef Fixed client details page as functions was declared twice 2021-12-23 10:58:16 -05:00
johnnyq 25b5cb3d40 Moved Functions above check login so that check login can use some of the functions, Moved Fingerprinting to check login instead of in functions as its a more appropriate place 2021-12-22 17:24:54 -05:00
johnnyq ba584a57e0 BREAKING CHANGES - Many DB Updates - NOT POSSIBLE TO EASILY UPGRADE TO THIS - Completely reworked User Company Access Permssions, started working on Client Role so Clients can access their data and a bunch of other small fixes 2021-12-22 13:08:24 -05:00
johnnyq f02e94d585 Started adding IP and User agent to audit logs, log when a user logs out, Merged logout into post.php 2021-12-09 16:12:57 -05:00
johnnyq 0976a08730 Removed default currency and default country under settings added a company currency to the company table. Now currency default and country default uses company country and currency, updated the currency symbol to use companies currency under dashboard, expenses, profit loss reports 2021-11-19 20:45:57 -05:00
johnnyq 209bd7da4d Remove Currency Selection from invoice, quote and recurring as this will be determined by your company currency in settings, the payment is what matters as this is where it will be converted 2021-08-29 22:07:46 -04:00
johnnyq f3053ffbd4 BREAKING CHANGES: Major Backend Code Changes Updated Foreign keys to prepend their table names ex invoice_client_id, switched most queries over to JOIN instead of = Combined contacts and location into client removed client email, phone etc fields, tons of small bug fixes, and other small UI changes all across the board 2021-08-27 23:14:06 -04:00
johnny@pittpc.com 9f861775f3 If no avatar is used display User icon instead 2021-03-25 12:57:39 -04:00
johnny@pittpc.com 17710cf6b8 Fix Ignoring session_start() because a session is already active added action menu under contacts 2021-02-04 13:40:33 -05:00
johnny@pittpc.com bb46c93790 Added Company Select Option on top of side Nav Added Client ACL Modal in users, hide side bar elements based off user permission level, if IT Contract level list only clients in users Client ACL 2021-02-02 17:09:31 -05:00
johnny@pittpc.com 88933e09f7 Rework Company user relationships initial work started on user permissions 2021-01-29 21:28:12 -05:00
johnny@pittpc.com cac8083279 More updates to the UI 2019-11-24 20:24:21 -05:00
johnny@pittpc.com ca427ab763 Updated User Settings Page and added logging to most functions 2019-09-06 03:03:16 -04:00
johnny@pittpc.com 0e451056b4 Added get OS Browser Device and IP functions, added these functions to guest view invoice, also added invoice view alert and other minor fixes 2019-08-28 21:47:40 -04:00
johnny@pittpc.com ec2f9f02f1 Fixed Alerts 2019-08-25 00:09:40 -04:00
johnny@pittpc.com 89762313c5 Modified the way the app detects setup mode, added an alerts setting page and other minor fixes and cleanups 2019-08-23 16:32:15 -04:00
johnny@pittpc.com 2e5763dc8d Refinements to ticketting system, Added force recurring option created company_id chile directories for clients, settings, expenses, added dir checks to add client and add contact and much more. 2019-08-21 00:59:27 -04:00
johnny@pittpc.com bc07fe0090 Started work on multi-company feature 2019-08-14 11:05:54 -04:00
root e247ad4ee4 Implemented 2FA TOTP with Google Authenticator 2019-06-16 22:33:55 -04:00
root e0e723bb9f The start of client logins has begun, now can link a user with a client to allow client logins, clients can only view client.php there is more work to be done 2019-05-27 12:28:41 -04:00
root 889a749d88 Added alert feedback boxes, little ui fixes for quote invoice and recurring added rejected instead of cancelled for quotes, and other little ui cleanups 2019-05-25 21:14:08 -04:00
root 261eb50b64 Get Badge count for alerts on top nav 2019-04-19 16:12:59 -04:00
root f50bace9e9 Open up Apple Maps instead of maps.google.com in IOS 2019-03-30 15:44:14 -04:00
root 8063c627f8 Implemented user avatar support 2019-03-22 21:38:08 -04:00
root d2c5544785 First commit 2019-03-13 17:40:00 +00:00