Commit Graph

85 Commits

Author SHA1 Message Date
o-psi ebaa2a084a add readable password generation 2023-12-18 17:34:59 +00:00
johnnyq 48b153613f Changd Passwords to Logins, made Licenese icon consistent 2023-11-16 00:20:36 -05:00
johnnyq b26c1b28c3 Show Archived Items for licenses and password and moved import exports to New DropDown 2023-10-31 16:24:59 -04:00
o-psi 53c11edc8c Update constructs to not have parenthesis. 2023-10-20 15:25:52 -05:00
Marcus Hill 041fcb5613 Client logins/passwords - Ajax change + logging
A few changes to the credential manager TOTP function:

- The "hover to view" function now sends the login_id to ajax.php, rather than the TOTP secret
- Viewing the TOTP code is now audited in the logs under Login/View TOTP
2023-10-01 16:32:57 +01:00
johnnyq 9753b96fed Fix mismatch of word URI and URL to just URI, fix it to not removed Service:// 2023-09-09 23:57:55 -04:00
johnnyq 1bacabc72b Prevent duplicate sort, order and page GET VARs in the URL when Clicking to Sort a field or Clicking a page number. We now unset the GET VAR arrays before recreating the URL GET Strings 2023-07-08 14:40:00 -04:00
johnnyq e7572c9e8f Rename vars sb to sort, o to order, p to page. This makes the code easier to understand and brings consistency 2023-07-08 12:34:28 -04:00
johnnyq 473cf14610 Sort logins marked important always first 2023-07-07 16:50:22 -04:00
johnnyq 32c9a933ea Invoice Ticket design update, Added functionality for vendor ticket number, asset, login description and contact pin codes 2023-06-14 18:39:24 -04:00
johnnyq 40da8a2e69 Bold Important Passwords 2023-06-03 21:49:33 -04:00
johnnyq 37fb696e63 Replace the remaining php files with nullable_htmlentites() 2023-05-11 18:27:48 -04:00
johnnyq 7fed50eb73 Updated all Export CSV to Modals with export disclaimer 2023-04-23 16:12:18 -04:00
johnnyq 48fe49cf77 BREAKING CHANGES - MAKE FULL BACKUP BEFORE PROCEEDING - Requires Manual Intervention on files see Forum Post Make sure you run the Database update directly after update. This Removes Multi-Company Functionality. Fixes issues with Reponsive tables and bunch of other UI and small Fixes 2023-03-11 16:16:46 -05:00
johnnyq 29db5a19c9 Fixed undefine vendor_id and asset_id under tickets 2023-02-24 21:30:30 -05:00
johnnyq f7552cd25a Finished up santizeInput Conv and UI updates 2023-02-23 16:09:37 -05:00
Marcus Hill 5bb4296f14 Adjust core files to 4 spaces 2023-02-12 14:40:10 +00:00
Marcus Hill 615f317d2b General cleanup/formatting 2023-02-09 12:29:12 +00:00
Marcus Hill f92dc108e2 Tidy
- Move some scripts to their own js files
- Move some duplicate code blocks to functions
- General tidy & spacing cleanups (#538)
2023-02-04 22:09:56 +00:00
johnnyq 60799c050b Added Important Fields in the login modals 2023-01-30 14:32:12 -05:00
Marcus Hill 2570bdc6af Tidy remaining files to randomString() 2023-01-26 21:46:58 +00:00
Marcus Hill 5fd5663aa8 Add encryption for usernames stored in the logins ("passwords") area. 2023-01-26 15:36:13 +00:00
Marcus Hill 2c3ebb3bbb Tidy codestyle - spaces between parenthesis and curly braces 2023-01-21 17:09:39 +00:00
Marcus Hill 5460825ece Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
johnnyq e943faecf0 Added Important Functionality to Contacts, Cleaned up UI elements in the contacts and users modals. Added partial User and contact Invite functionality. 2022-12-31 15:54:34 -05:00
johnnyq 2a16b6d2ae Remove some tags there and here some more output formatting all thanks to the great security researcher @indevi0us for pointing these out to us. 2022-12-21 21:31:51 -05:00
johnnyq d2fdc5f7d8 Spruce up the share UI modal and client logins 2022-12-14 22:18:44 -05:00
johnnyq 791125a060 Rename email parser file 2022-12-12 19:25:47 -05:00
johnnyq b6e540825f Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
johnnyq d7090d3286 Reworked Client Section URL routing to be standard with standard URL routing of ITFlow. It was just too confusing to mix to different URL routing operations 2022-09-18 14:00:31 -04:00
johnnyq ab4826db54 Renamed Software to Liceneses and renamed Logins to Passwords under client section 2022-09-17 19:48:28 -04:00
johnnyq 79df499ad3 Added Client Logins Import 2022-05-13 14:42:46 -04:00
Marcus Hill 81363e09a3 Change mouseover to mouseenter, it's a little less spammy on the requests if you move the mouse a bit 2022-04-24 17:21:50 +01:00
Marcus Hill e70bbe37a8 Add button to generate a password for you, on new login modal 2022-04-24 17:18:27 +01:00
Marcus Hill fda40055f8 Adjust RFC6283 getTokenCode to only show one token at a time.
Remove the tokens from client_logins.php and replace with a mouseover/hover to show mechanism using ajax.php
2022-04-24 13:48:27 +01:00
Marcus Hill b4f2fdd03d Code deduplication/tidying
- Move default pagination/sort/search query variable mapping to pagination_head.php
- Remove user_logs.php
2022-04-14 19:49:18 +01:00
Johnny aafb6a677f
Merge pull request #412 from wrongecho/misc
Misc incl SQL Injection / XSS fixes
2022-03-27 15:05:07 -04:00
Marcus Hill 816ba87485 SQL Injection / XSS fixes 2022-03-27 20:02:16 +01:00
Marcus Hill e6a314d233 Prevent tech/accountant from performing certain tasks as per access matrix 2022-03-27 15:32:40 +01:00
johnnyq 165bd572a9 DB Update added contact_id to files, documents and logins Added Related Items Modal to Client Contacts still more work to do 2022-03-04 00:24:58 -05:00
Marcus Hill 36a24f5603 Add file & login sharing functionality & ip/ua view tracking 2022-02-20 17:16:28 +00:00
johnnyq f526737dca Open link in New Window instead of current windows Client Logins 2022-02-12 15:55:24 -05:00
johnnyq 8c4932c1c5 Fix Inputmask and password popovers along with Copy to Clipboard 2022-02-08 15:13:31 -05:00
johnnyq 278b243e7c Finished File Entity Renaming process 2022-02-05 13:24:57 -05:00
Marcus Hill 49d895040a Add per-user password encryption using master key 2022-01-10 22:07:26 +00:00
johnnyq efb6372190 Fix #210 Password output under client logins 2021-12-10 13:35:48 -05:00
johnnyq 85cdc42d0f DB Structure update, Hide Passwords under client logins until eyeball is clicked to reveal password, prevent the looking over your shoulder type attack, Added Install Date to Assets, reworked client assets listing to include Operating System and Install Date 2021-12-08 22:15:20 -05:00
johnnyq 53380718b1 Fixed TOTP for client logins 2021-12-04 21:00:34 -05:00
johnnyq f3053ffbd4 BREAKING CHANGES: Major Backend Code Changes Updated Foreign keys to prepend their table names ex invoice_client_id, switched most queries over to JOIN instead of = Combined contacts and location into client removed client email, phone etc fields, tons of small bug fixes, and other small UI changes all across the board 2021-08-27 23:14:06 -04:00
johnnyq 6f33e3379c Updated all Client Data Listings and added CSV Exports to Client Data 2021-08-21 16:37:40 -04:00