6 Commits

Author	SHA1	Message	Date
johnnyq	497ea3b669	Centralize client portal access checks through contactCan() ... Replaces the duplicated primary/billing/technical checks across portal pages, post.php handlers, nav, and dashboard with contactCan()/enforceContactCan(). Same behavior, but the rules now live in one place instead of being copy-pasted, which is what let them drift before. file.php keeps its 404 response; ticket-visibility and approval-routing checks are intentionally left as-is.	2026-07-25 17:55:30 -04:00
johnnyq	7bc47a58fe	Replace Function nullable_htmlentities() with just escapeHtml() and update all instances throughout	2026-07-14 17:10:45 -04:00
johnnyq	8de7b20ba1	Add CSRF Checks in the client portal	2026-03-07 13:11:08 -05:00
johnnyq	0a30300bde	replace all instances of mysqli_fetch_array with mysqli_fetch_assoc for better performance and memory usage	2026-01-14 17:30:23 -05:00
wrongecho	a1b99c46c7	Client Portal - Don't allow tech contacts to edit themselves	2025-06-25 09:44:57 +01:00
johnnyq	5f76a7989b	Move portal to client and rename and reorganize some client portal files	2025-01-23 17:12:11 -05:00