Commit Graph

214 Commits

Author SHA1 Message Date
wrongecho
d5f94819d0 Fix 'Passing null to parameter' debug message 2025-06-18 14:11:18 +01:00
wrongecho
4e0252553a rm extra ; 2025-06-11 08:18:32 +01:00
wrongecho
f2bbc170da Update how functions.php gets the remote IP address for logging
- Builds on PR #1210 to always get the leftmost IP address
- Cloudflare (HTTP_CF_CONNECTING_IP) must now be explicitly defined, otherwise people could add the HTTP_CF_CONNECTING_IP header to a non-Cloudflare host and spoof IPs
- Tidy up the if/else logic a little
2025-06-10 09:03:00 +01:00
johnnyq
d79a17adb0 Added sanitize_url function to strip out unsupported URI Schemas schema:// if not on the allow list it will show unsupport://URL 2025-06-09 20:28:10 -04:00
Marcus Hill
40eb40fd86 Cron mail queue - fix $config_smtp_encryption being set to None in IF statement 2025-05-27 14:46:50 +01:00
johnnyq
b6f73083ef SMTP Option Encryption None now works as intended 2025-05-22 11:37:14 -04:00
johnnyq
60fe02bb47 Comment 2025-04-13 11:57:26 -04:00
johnnyq
3e708059c6 Fix not showing File folders instead of Document Folders when creating a document. 2025-04-13 11:55:14 -04:00
johnnyq
14d8dc6fa6 Fix php errors thrown when formatPhone is blank 2025-03-31 16:35:36 -04:00
johnnyq
42606067c0 If no country code is entered display the number only no spaces hyphens or perenthesis 2025-03-30 12:22:43 -04:00
johnnyq
231694aabe Fix Invoice Vars in ticket, return empty string instead of null for getFieldByID() 2025-03-27 13:38:22 -04:00
johnnyq
90f5c8ad57 Simplify getFallBack function to just fallback on - instead N/A 2025-03-26 18:39:45 -04:00
johnnyq
218fd2dcdc Update formatPhoneNumber php function to include other country formatting, updated phone inputs to incoude country code 2025-03-25 18:45:24 -04:00
johnnyq
19a6f8f422 Use nearest text area instead of a static ID for AI rewording, started adding entity creations in contact details and auto selecting the contact when in contact details page 2025-03-20 11:39:50 -04:00
johnnyq
b803ba4c55 Use MD5 hashing instead of SHA256 on file uploads which is way faster and still provides a unique file reference 2025-03-17 15:10:39 -04:00
johnnyq
073f816dbd Do not allow cascade deletion for rack devices as this table is optional to reference an asset and will cause issues when adding a devoce without a selected asset 2025-03-14 15:33:00 -04:00
johnnyq
e93704bbdb Completely renamed everything login to credential including tables added cascading deletion to the multi to multi tables 2025-03-12 21:28:50 -04:00
johnnyq
f61c30bd5a Started work on additional assets per ticket, added table ticket_assets, Fixed Legacy Check User Role Functions 2025-03-11 15:10:23 -04:00
johnnyq
9b6ea851e7 Removed the prepended user_ from the fields in the user_roles table, moved user_role_id from user_settings directly to users table, rename table user_permissions to user_client_permissions, removed unused Sessions vars in login. This upedate will require to update using update_cli.php --db_update 2025-03-10 15:57:16 -04:00
johnnyq
ad9e4b4fb4 Added new php function to retrieve and escape a single record from a specified table using an id getFieldById(table, id, field_to_retrieve, escape_method) escape method defaults to SQL but html and json and int can be specified 2025-03-04 13:45:21 -05:00
johnnyq
55ebe70808 Add Vendor Details Popup, works with Domain Vendors right now, Added fallBack function when no text is present use a placeholder 2025-02-25 18:16:03 -05:00
wrongecho
9ce502c1b9 Comment old perms functions 2025-02-05 14:31:31 +00:00
johnnyq
2c51289d75 Remove mysqli connection vars when passing mail data to addToMailQueue Function 2025-01-22 20:56:24 -05:00
wrongecho
ecd83b6b11 Add domain history to domain refresher 2025-01-17 21:39:11 +00:00
wrongecho
99c4f9b92d Add domain history 2025-01-15 18:04:56 +00:00
wrongecho
54dde984ac nullable_htmlentities - prevent Passing null to parameter error 2025-01-14 15:37:24 +00:00
johnnyq
97723da633 Windows/Tab Titles now reflect the current page your on along with the company name or selected client. Pages contact details, asset details, tickets, projects, documents, invoices, quotes, recurring invoices overide to include more detail in tab title 2025-01-13 14:40:05 -05:00
johnnyq
32d5e333c6 Renamed error_logs to app_logs, created app logs list view and renamed function logError to logApp, updated some of the log functions in cron and ticket mail parser to use the new appLog 2024-12-10 22:06:35 -05:00
johnnyq
74e7507f7d Change asset TV to Display, changed Firewall icon to Fire 2024-12-06 17:00:52 -05:00
johnnyq
8050dffbb8 Enhancement: DB Structure Update: Seperate Logs into 3 seperate log tables error_logs, auth_logs, audit_logs. This will provide huge performance benefits and organization 2024-11-24 15:04:23 -05:00
johnnyq
e58bf3d558 Updated epenses post to use new logAction function, tidy and added more details to logging 2024-11-10 13:32:42 -05:00
johnnyq
1ebd537d9d Updated Cron to use new logAction function, also updated logAction cron to make session_user_id 0 if not set 2024-11-10 12:44:10 -05:00
johnnyq
7b4dda0ad6 Functionalize logging, replaced old logging in contact add with new logging function 2024-11-08 14:40:14 -05:00
johnnyq
68c47ee87d Updated appNotify function to allow null for client_id entity_id and action, also updated all the notification instances to use the new appNotify in cron.php, starting to drop the entity_id as well 2024-11-06 20:56:28 -05:00
johnnyq
db621a97fa FEATURE: appNotify Function added so each user can get their own notificaiton and can individually dismiss and see their own notifications, only works under invoice viewed right now 2024-11-06 18:58:45 -05:00
wrongecho
1c404b9cf1 Add custom event handler to be triggered by some actions affecting tickets/quotes/invoices/contacts 2024-10-02 11:26:13 +01:00
Marcus Hill
6363d265ca Refactor POST handling.
- Split into admin and user handlers, each admin page gets its own file now
- Enforce role access once for admin POST requests
- Automatically load POST logic for admin-based requests based on the referring page, otherwise automatically load all user request logic
- Add support for using custom POST handlers
2024-09-29 19:02:28 +01:00
wrongecho
b509090530 Detect and convert non-UTF8 encoding as part of input sanitization 2024-09-21 11:07:53 +01:00
wrongecho
eeac235c1d Tidy unused accounting functions 2024-09-20 19:24:28 +01:00
wrongecho
10fafacefe Custom Roles & Permissions
Initial enforcement of custom roles & permissions - only on some pages via GET for now.
2024-09-20 17:59:49 +01:00
Johnny
62a2ed7430 Merge pull request #1052 from itflow-org/perms-2
Permissions overhaul - Define permissions in the database
2024-09-18 14:20:05 -04:00
wrongecho
c65db3431d Tidying 2024-09-14 23:43:54 +01:00
wrongecho
ee9a2789e9 Permissions overhaul - Define permissions in the database
2nd attempt at this one!
Similar to #1008 but separately defining the roles, modules and associated permissions in the database.
Also has admin being a defined role automatically having full access.

Parent issue: #530
2024-09-14 19:14:35 +01:00
wrongecho
c7340ca0d4 Permissions overhaul - Define permissions in the database
2nd attempt at this one!
Similar to #1008 but separately defining the roles, modules and associated permissions in the database.
Also has admin being a defined role automatically having full access.

Parent issue: #530
2024-09-14 18:55:00 +01:00
wrongecho
271019b16b Permissions overhaul - Define permissions in the database
2nd attempt at this one!
Similar to #1008 but separately defining the roles, modules and associated permissions in the database.
Also has admin being a defined role automatically having full access.

Parent issue: #530
2024-09-14 18:29:44 +01:00
johnnyq
e0ca3f15a8 Added Ubuntu, Fedora and DuckDuckGo to user agents 2024-09-12 12:42:15 -04:00
johnnyq
168a298a55 Dont Show windows version as this is inaccurate, show just Windows for OS, fix Opera String, and removed iPod 2024-09-12 12:28:24 -04:00
johnnyq
f2a3299ef0 Update getOS Function to include Windows 11, Fix get Web Browser when using Microsoft Edge 2024-09-12 12:13:51 -04:00
wrongecho
517e8d42f0 Email Send - Tidy
- Enhance error logging in cron_mail_queue.php
- Prevent invalid sender addresses
- Prevent potential SQL injections in the sender name (admin settings and should be sanitized before being sent to queue anyway)
2024-09-10 22:34:20 +01:00
wrongecho
3d16431d32 Initial implementation of whitelabelling 2024-09-05 10:44:50 +01:00