Commit Graph

69 Commits

Author SHA1 Message Date
johnnyq d37c3f0251 Rework htmlpurify function in client portal to properly santizie the output instead of the input Fix broken client avatar in client portal 2023-03-12 10:48:45 -04:00
johnnyq 48fe49cf77 BREAKING CHANGES - MAKE FULL BACKUP BEFORE PROCEEDING - Requires Manual Intervention on files see Forum Post Make sure you run the Database update directly after update. This Removes Multi-Company Functionality. Fixes issues with Reponsive tables and bunch of other UI and small Fixes 2023-03-11 16:16:46 -05:00
johnnyq a711bed38c Add sme more htmlemtities for consistency 2023-03-05 20:06:42 -05:00
johnnyq f7552cd25a Finished up santizeInput Conv and UI updates 2023-02-23 16:09:37 -05:00
Marcus Hill c219324bb8 General cleanup/formatting 2023-02-09 11:42:57 +00:00
Marcus Hill b36719eb99 General cleanup/tidying 2023-02-09 11:32:40 +00:00
Marcus Hill e8c9e63a7b Add X-Frame-Options to login pages & client portal 2023-02-05 18:43:50 +00:00
Marcus Hill 7f02464b92 Portal-related updates
- Bug fix contact password setting
- Add invoice guest view link to invoices portal page
- Billing contacts now have access to invoices on the portal
- Technical contacts now have access to all tickets
- General housekeeping/tidying
2023-02-04 15:28:39 +00:00
Marcus Hill 63923290cc Add new ticket button on portal home page 2023-02-01 23:13:53 +00:00
Marcus Hill fdcabbcb14 Add very basic invoices summary to client portal (visible only to the primary contact) 2023-02-01 23:11:35 +00:00
Marcus Hill 3649b3019a Bugfix: Non-primary contacts were not able to raise tickets from the portal due to the navbar item being hidden 2023-02-01 23:05:47 +00:00
Johnny 4fd6d752c6
Merge pull request #580 from wrongecho/function-standardise
Convert custom function names to camelCase
2023-01-26 18:20:33 -05:00
Marcus Hill 531bd25f27 Convert custom function names to camelCase 2023-01-26 22:03:31 +00:00
Marcus Hill 10362f86ef Convert custom function names to camelCase 2023-01-26 21:58:27 +00:00
Marcus Hill 23e3a2e8fc - Create custom function (randomString()) for generating cryptographically (and URL) safe strings.
- Replace usages of keygen and bin2hex(random_bytes()) with this function.
2023-01-26 21:35:06 +00:00
Marcus Hill d612a3ba26 Convert to require_once 2023-01-25 23:22:12 +00:00
Marcus Hill cffde0fbbd Tidy 2023-01-25 23:07:37 +00:00
Marcus Hill bfe5e533bd Merge branch 'master' into more-tidy 2023-01-25 23:06:34 +00:00
Marcus Hill 0f3b6b5d23 Add alt-text to logo 2023-01-25 23:04:45 +00:00
Marcus Hill 67e1fb7021 Show the 'default' company logo (if configured) on the client login page instead of the ITFlow/company name text 2023-01-25 23:04:45 +00:00
Marcus Hill cb11ebc857 General tidy/spacing cleanups 2023-01-25 23:04:41 +00:00
Marcus Hill 8d4a76e3f8 Add HTML lang element to match main header.php 2023-01-25 23:04:41 +00:00
Marcus Hill efecab179b General cleanups, add HTML lang element to match header.php 2023-01-25 23:04:41 +00:00
Marcus Hill b98439d74a Remove unused variable assignment. was calling get_os with no parameters, so nothing was ever returned anyway. Get_os instead can now be given the user agent to determine the OS 2023-01-25 22:59:28 +00:00
Marcus Hill ad2390d0ea General tidy/spacing cleanups 2023-01-23 21:09:44 +00:00
Marcus Hill 49da4d7fd4 Add HTML lang element to match main header.php 2023-01-23 20:56:08 +00:00
Marcus Hill 95b9e2fe23 General cleanups, add HTML lang element to match header.php 2023-01-23 20:55:25 +00:00
Marcus Hill d73b3cb960 Correct typos 2023-01-21 17:22:27 +00:00
Marcus Hill 2c3ebb3bbb Tidy codestyle - spaces between parenthesis and curly braces 2023-01-21 17:09:39 +00:00
johnnyq 2f595bd7c8 Added some breadcrumbs to new ticket and ticket details in user portal 2023-01-16 20:48:25 -05:00
johnnyq 7ba434963e Cleaned up and fixed Client Portal class Syntax, removed unnessesary html markup etc 2023-01-16 20:09:34 -05:00
Marcus Hill 66259c295b Escape potential HTML data from ticket fields 2023-01-02 15:54:37 +00:00
Marcus Hill f7bfeedf54 Escape potential HTML data from ticket reply contact/user fields 2023-01-02 15:50:35 +00:00
Marcus Hill f2efa79c57 Escape potential HTML data from ticket fields 2023-01-02 15:48:47 +00:00
Marcus Hill 4b10a2ac68 Improve security of password reset token for client portal 2023-01-02 15:38:40 +00:00
Marcus Hill 3ea7406c2e Better name azure client id variable as to not be confusing with itflow client ids 2023-01-02 15:27:29 +00:00
Marcus Hill e32439cc4c Escape potential HTML from ticket fields 2023-01-02 15:24:30 +00:00
Marcus Hill 67b306795b Sanitize portal session vars against sql/html code 2023-01-02 15:17:58 +00:00
Marcus Hill dd00f48e5b Portal code style tidy 2023-01-01 16:05:48 +00:00
Marcus Hill 6746edda1a Misc tidying code spacing & formatting in accordance with SonarCloud/PSR 2023-01-01 15:41:21 +00:00
Marcus Hill 1ea081a175 Move email sending to a function for better error handling and code-deduplication 2022-12-18 14:24:47 +00:00
Marcus Hill 0706af1608 Make separate avatar photo URLs for client/agent replies. Fixes #501 2022-12-11 10:50:16 +00:00
Marcus Hill 6529ff8bbf Allow portal contacts to reset their passwords via email 2022-10-01 21:32:19 +01:00
Marcus Hill 851ca7fae5 Always set a random password for new portal users. This isn't an issue at the moment as we don't allow logins with empty passwords but better to be safe. 2022-10-01 19:32:40 +01:00
Marcus Hill 5cf36fd719 Show the company brand/name on the client portal, rather than ITFlow 2022-09-30 21:07:00 +01:00
johnnyq 6f6d737e64 Added meta no index to all headers so pages dont get indexed by Google this only affects people that dont have a robots.txt at HTRoot hence people that are running itflow in a subdir like example.com/itflow 2022-09-21 12:38:22 -04:00
Marcus Hill 39e95347f0 Add ability for locally authenticated client contacts to change their portal password 2022-09-10 22:46:01 +01:00
Marcus Hill 5f5e023afe Fix contact title & improve logging on client portal
Hyperlink ticket on client overview page
2022-04-16 12:51:15 +01:00
Marcus Hill 441591d39e Allow client to close ticket from portal 2022-03-29 21:16:02 +01:00
Johnny bb24cc7112
Merge pull request #421 from wrongecho/misc2
Client portal + permission bug fix
2022-03-28 19:15:01 -04:00