johnnyq
497ea3b669
Centralize client portal access checks through contactCan()
...
Replaces the duplicated primary/billing/technical checks across portal pages, post.php handlers, nav, and dashboard with contactCan()/enforceContactCan(). Same behavior, but the rules now live in one place instead of being copy-pasted, which is what let them drift before. file.php keeps its 404 response; ticket-visibility and approval-routing checks are intentionally left as-is.
2026-07-25 17:55:30 -04:00
johnnyq
565aff35f6
Set SameSite=Lax on the session cookie
...
Applied at all seven session_start sites. keepalive.php and guest_post.php
had no cookie flags at all and now set httponly and secure too.
2026-07-24 14:09:52 -04:00
johnnyq
b57ddc0e5c
Replace Function sanitizeInput() with just escapeSql() and update all instances throughout
2026-07-14 17:17:50 -04:00
johnnyq
7bc47a58fe
Replace Function nullable_htmlentities() with just escapeHtml() and update all instances throughout
2026-07-14 17:10:45 -04:00
johnnyq
8da3a107fb
Rename plugins to libs and update all file references
2026-07-10 13:24:20 -04:00
johnnyq
38b4ed4b96
Tidy check_login for client portal
2026-01-30 14:24:34 -05:00
johnnyq
34308a5f9a
check if archived and active for client login as well along with loading extended client user session vars in /client/includes/check_login.php
2026-01-30 14:10:59 -05:00
johnnyq
0a30300bde
replace all instances of mysqli_fetch_array with mysqli_fetch_assoc for better performance and memory usage
2026-01-14 17:30:23 -05:00
johnnyq
871ad2ea7e
Update legacy client login links to use the new unified login method
2025-12-10 12:21:12 -05:00
johnnyq
16242be74e
Update Client Nav to use Absolute links and updated more of the inc_alls to use Document Server Root
2025-10-07 13:44:08 -04:00
johnnyq
6c6a988c2b
Fix custom Favicon
2025-10-02 11:42:30 -04:00
johnnyq
690007be5c
More Relative to Absolute web asset paths updates
2025-09-24 13:09:25 -04:00
wrongecho
ca6a903b8f
Keepalive
...
- Fix directory path
- Remove duplicate file
- Add to client portal
2025-09-24 08:39:45 +01:00
johnnyq
cf63a2e7d1
Fix TinyMCE License in client portal
2025-09-02 14:57:09 -04:00
johnnyq
9caa42975d
rename get_settings.php to load_global_settings.php and update all requires
2025-08-06 17:48:23 -04:00
johnnyq
9bc705bfa1
Updated Guest pay and Client Add Delete Payments, adjustedsetting saved payment per recurring invoice
2025-07-09 01:45:56 -04:00
Marcus Hill
19af05ebee
Client Portal - Add company logo to header banner
2025-06-28 14:28:25 +01:00
johnnyq
f0bcf975b6
Add Assets to the client Portal viewable by Primary and technical Contacts
2025-06-26 18:18:36 -04:00
johnnyq
c0f3343412
Client Portal Add Recurrung Invoices with option to Enable or Disable Auto Pay per recurring Invoice if Stripe is enabled and Client has a payment method. Also when removing saved auto payment methods delete all recurring payments for that client that are Stripe method also added this to the admin settings
2025-05-22 17:58:51 -04:00
johnnyq
7150b1545a
Moved files check_login.php, get_settings.php, settings_localization_array.php, inc_set_timezone.php into the includes folder, we also moved /client/check_login.php into client/includes/
2025-03-13 17:55:31 -04:00
wrongecho
cdc0422d31
Allow adding custom links to the client portal nav-bar
2025-02-04 16:04:44 +00:00
johnnyq
5f76a7989b
Move portal to client and rename and reorganize some client portal files
2025-01-23 17:12:11 -05:00
