johnnyq
|
5c4805b822
|
Neutralize CSV formula injection in generated exports using the new created escapeCsvFormula Function
|
2026-07-24 18:12:45 -04:00 |
|
johnnyq
|
af51c4316f
|
Updated validateCSRFToken to automatically grab and compare get or post csrf token no longer need to pass an argument to the function which fixed the issue if no hash was present
|
2026-07-24 13:40:37 -04:00 |
|
johnnyq
|
b8873039a4
|
Rename Functions: flash_alert, sanitizeFilename and display_folder_options using camelCase instead to match other custom php functions
|
2026-07-14 17:41:41 -04:00 |
|
johnnyq
|
f1836c70cd
|
Replace Function logAction() with logAudit()
|
2026-07-14 17:35:23 -04:00 |
|
johnnyq
|
b57ddc0e5c
|
Replace Function sanitizeInput() with just escapeSql() and update all instances throughout
|
2026-07-14 17:17:50 -04:00 |
|
johnnyq
|
317fe91359
|
Add Missing clientEnforcement in various modals, already handled on POST also add client selection in edit trip and enforce client permissions on trips
|
2026-07-09 16:07:54 -04:00 |
|
johnnyq
|
fcf098f494
|
use client_id as post var name not client
|
2026-03-06 18:33:25 -05:00 |
|
johnnyq
|
74ce8f4e98
|
Trips: enforceClientAccess only if client is referenced
|
2026-03-06 18:26:14 -05:00 |
|
johnnyq
|
8a1335174d
|
Trips: Add missing CSRF checks, we may need another permission module check for trips for now only admin and financial lv3 can delete a trip
|
2026-03-02 17:50:04 -05:00 |
|
johnnyq
|
e1a579387f
|
Convert all Import / Export Modals to Ajax and a few other lingering modals that were not converted yet
|
2025-12-02 15:04:05 -05:00 |
|
johnnyq
|
edabc5c33f
|
rename /user/ to /agent/ and update links to use agent/ instead
|
2025-09-23 18:04:23 -04:00 |
|