Johnny
|
e07fbf6d1f
|
Merge pull request #1308 from itflow-org/develop
Develop to master for 2026.11.3 release
|
2026-11-04 14:49:43 -05:00 |
|
johnnyq
|
5918cc59d4
|
Bump app version
|
2026-11-04 14:46:01 -05:00 |
|
johnnyq
|
e0f2b229ff
|
Update changelog
|
2026-11-04 14:41:50 -05:00 |
|
johnnyq
|
e472c95a11
|
Record Stripe fees every 15 minutes instead of once a night - a new Payment Provider Fees cron job runs the fee recorder that Nightly Tasks used to, Nightly Tasks no longer does, the recorder holds a lock so the job and Record fees now can't both record the same fee, and the payment provider screens no longer say fees are recorded each night
|
2026-11-04 14:38:32 -05:00 |
|
johnnyq
|
66d08c00be
|
Fix Transactions Money in and Money out on All accounts counting every transfer twice - a transfer is money moved between your own accounts, so across all accounts both of its lines are now left out of the totals, the Money in and Money out pills and their export, while the Transfers pill still lists them and a single account's view still counts them as money in and out of that account
|
2026-11-04 14:29:01 -05:00 |
|
johnnyq
|
aff6812036
|
Security: hold an agent who must set up MFA to the set up page on every request, not just at sign in, and fix the client portal two-step gate, which a path added to the URL or a second action sent with the set up one got past - both now go through requestIsMfaSetup(), which checks the script actually running and every key in the request; View as contact is refused while an agent still owes MFA set up, and agents are emailed when MFA is turned on
|
2026-11-04 14:01:40 -05:00 |
|
johnnyq
|
9b92261e8c
|
Security: end a user's other sessions when their password changes - each session carries a stamp of the password it signed in with and the agent and client portal checks sign out any that no longer match, covering a self change, an admin setting it, the incident-response reset, portal reset links and invites, and View as contact; a portal self change keeps the browser that made it on a new session id
|
2026-11-04 13:50:17 -05:00 |
|
johnnyq
|
08d353ab65
|
Update changelog
|
2026-11-04 13:35:07 -05:00 |
|
johnnyq
|
6e0acd2d31
|
Security: stop a backup restore from carrying .htaccess, .user.ini or .htpasswd files into uploads or writing into the backup storage directory, always rewrite the backup storage guard instead of only when missing, and rewrite the shipped deny-all guards in uploads/backups, canned_responses, expenses and tmp after every restore
|
2026-11-04 13:25:42 -05:00 |
|
johnnyq
|
5151dd62fa
|
Update Sponsor name
|
2026-11-04 12:08:40 -05:00 |
|
Wrongecho
|
16ee56c044
|
Add cron notification for expiring api keys
|
2026-11-03 14:42:26 +00:00 |
|
Wrongecho
|
12a7a28a9d
|
Products API - Add update endpoint
|
2026-11-03 14:32:23 +00:00 |
|
johnnyq
|
278df4e7b3
|
Speed up Transactions, Reconcile and the transactions export again by reading the ledger lines first and joining each to its account with STRAIGHT_JOIN instead of letting the optimizer look lines up through a temporary index, and stop billable expenses waiting to be invoiced from slowing every page: database update 3.5.5 indexes expenses.expense_refund_of_id so the side menu count, the invoice page, Add Expenses and the expense quick look no longer check each waiting expense against every expense; 26.11.2 changelog updated
|
2026-11-02 16:29:18 -05:00 |
|
Johnny
|
9b7fd64630
|
Merge pull request #1306 from itflow-org/develop
Develop to master
|
2026-11-02 16:18:40 -05:00 |
|
johnnyq
|
469f3df2e7
|
Update App version
|
2026-11-02 16:06:55 -05:00 |
|
johnnyq
|
06f6a81a79
|
Update Changelog
|
2026-11-02 16:04:20 -05:00 |
|
johnnyq
|
c24d13bfe8
|
Speed up Transactions, the Transfers pill, Reconcile and the transactions export: database update 3.5.4 indexes transfers.transfer_expense_id so the ledger no longer checks every expense against every transfer, accountLedgerSql() takes a with_balance flag so the running balance is only worked out where it shows (one account in date order and its export), and the Transfers summary cards come from the same pass as the pill counts and totals
|
2026-11-02 15:59:11 -05:00 |
|
johnnyq
|
87d8fdcdf8
|
Update license
|
2026-10-31 17:07:01 -04:00 |
|
johnnyq
|
228e37a01a
|
Update License
|
2026-10-31 16:55:47 -04:00 |
|
johnnyq
|
916d2d72d4
|
Update Sponsor URL
|
2026-10-31 16:06:00 -04:00 |
|
johnnyq
|
e04699734a
|
Add All Sponsors as of Oct 2026
|
2026-10-31 13:57:19 -04:00 |
|
Johnny
|
a7bff0c188
|
Merge pull request #1305 from itflow-org/develop
Develop to Master for 26.11.1 hotfix release
|
2026-10-29 15:11:24 -04:00 |
|
johnnyq
|
80ba3094d0
|
Update ITFlow Version and README
|
2026-10-29 15:07:03 -04:00 |
|
johnnyq
|
aeff485fa5
|
Update hosting link
|
2026-10-29 15:03:12 -04:00 |
|
johnnyq
|
74497de30a
|
README: rewrite for 26.11 with the ITFlow logo, a dashboard screenshot that follows GitHub's light or dark mode, a grid of eight screenshots from the demo (tickets board, ticket, client overview, assets, contract, invoices, calendar and client portal), a short why and what's new in 26.11, features grouped by service desk, client documentation, contracts and billing, client portal and team, requirements, the install script and both ways to update, and the community, contributing, supporters, security and license sections brought up to date; screenshots and logo in .github/readme
|
2026-10-29 14:58:47 -04:00 |
|
johnnyq
|
3ff116f0d3
|
Database updates: keep junk values from stopping the 26.11 update - 3.0.3 sets trip miles of a billion or more to 0 before trip_miles becomes decimal(10,1), 3.1.1 sets tax rates of 100,000% or more to 0 before tax_percent becomes decimal(9,4), and 3.5.0 leaves out a client rate of 100,000,000 or more when making Standard terms and skips clients already given them by a run that stopped part way, so an update that failed at any of these resumes cleanly when run again
|
2026-10-29 13:45:59 -04:00 |
|
Johnny
|
0fe55dc006
|
Merge pull request #1304 from itflow-org/develop
Develop to Master for 26.11 release
v26.11
|
2026-10-29 12:01:29 -04:00 |
|
johnnyq
|
e6382145ef
|
Bump ITFlow Version
|
2026-10-29 11:57:18 -04:00 |
|
johnnyq
|
8e24607a0a
|
Contracts: refuse impossible dates (2026-02-30) when adding, editing, activating, renewing, cancelling or starting from a template instead of failing on save; keep each term to the day of the month it started on or the last day of a shorter month so month-end contracts no longer drift (PHP, nightly renewal, the Renew window, templates, Standard terms and contract_form.js); withdraw signing requests still waiting on the client or a countersignature when a contract is cancelled, when it ends nightly or when its client is archived (singly or in bulk), and refuse signing or countersigning on ended, cancelled or archived-client contracts through the link, the portal and Countersign; leave archived clients' contracts alone nightly (no renewing, ending or reminders), keep them out of the all-clients list, Due soon and the side menu count, and refuse sending them to sign; count a self-renewing contract as due soon and remind about it only when its notice date falls within its term, so Standard terms and monthly contracts with 30 days' notice no longer remind every term; keep drawing and adding prepaid hours on a cancelled contract until its last day; refuse deleting a contract once tickets drew on its prepaid hours or it was signed by both, showing why in place of Delete; changelog updated
|
2026-10-28 23:51:45 -04:00 |
|
johnnyq
|
3c996a0b4b
|
Add agent mentions in ticket internal notes: typing @ in an internal note (reply box and Edit reply) offers the agents who can open the ticket by role and client access, each mention is saved with the agent's current name and told in ITFlow with a link to the note and by email from the ticket mailbox, the ticket shows Mentions you with the name highlighted, a Mentioned me view on the tickets list and board lists open tickets with a note that mentions you, edits tell only newly added agents and drop removed ones, redacting and archiving take mentions off, mentions in public notes, email replies and bulk replies stay plain text and tell nobody, database 3.5.3 adds ticket_reply_mentions, and the Mentioned in a note email is added to Mail Previews
|
2026-10-28 14:19:15 -04:00 |
|
johnnyq
|
8487416912
|
Add client onboarding: Onboard a client under New Client's arrow and in the client menu (also on a lead's row, a lead's Edit window and Get started's first client step) walks through the company, locations, people with portal access, the agreement from a contract template optionally sent to sign, billing with the agreement's recurring invoice (paused while out to sign), IT basics with domains and vendors and licenses from templates, and a kickoff project from a project template, each step saving as it goes with Skip for now and ticking itself off from what the client already has, a Finish onboarding card on the client overview until finished or closed, steps following the agent's role and enabled modules, database 3.5.2 adds client_onboardings, contractFromTemplateAdd() takes a status so a contract can start as a draft, and the audit log gets an Onboard action
|
2026-10-28 02:09:45 -04:00 |
|
johnnyq
|
568a907ff9
|
Add agent invites: New User now emails an invite by default so the agent chooses their own password on the new join.php page, and Set a password now stays as the other option with the email that contained the password removed; database 3.5.1 adds user_invites with only a hash of the link's token kept and the vault master key locked under that token until it is accepted, cancelled or runs out; new functions/user_invite.php; adds the Invited view to Users with Send again, Get the link (shown once, also used when mail is not set up) and Cancel invite; waiting invites count toward the agent user limit and a role with waiting invites cannot be archived; the Get started team step invites when mail is set up; the quick look shows whose invite an agent joined from; replaces the new account email preview with the invite email; the nightly job clears invites cancelled or run out more than 90 days ago; adds userAvatarStore(); updates the changelog
|
2026-10-28 01:16:49 -04:00 |
|
johnnyq
|
33b13206a5
|
Contracts from the client: New Client and Edit Client can start a contract from a template on the Billing tab, active from a picked day with the template's terms, the primary contact and the agent looking after it; the clients list gets a sortable Contract column showing the contract in force with its renewal and how many more are in force, or None with the next or draft contract or Start a contract, a Contract filter for one in force, none in force or one from a template, and a Start Contract bulk action; changelog updated
|
2026-10-27 23:39:30 -04:00 |
|
johnnyq
|
b4105b45bf
|
Clients list shows the hourly rate each client is billed at - its contract's, else the default marked (default), or its own before the 3.5.0 update; Admin > Contract Templates shows what a template leaves empty as the default for its rate, net terms and each priority's SLA, and Due on receipt for net terms of 0; changelog updated
|
2026-10-27 23:11:05 -04:00 |
|
johnnyq
|
1e5bffff3c
|
Rates, net terms and SLAs come from the client's contract, else the instance defaults: database 3.5.0 adds a default after-hours rate (Settings > Defaults, now Rates and terms), gives each client whose own rate, net terms or SLAs differ from the defaults an active Standard terms contract setting just those (12-month term renewing itself, starting the day the client was added or the day before its earliest contract, archived with an archived client), deletes per-client SLA assignments and drops clients.client_rate and client_net_terms; time bills at the contract's rate, its after-hours rate or the default after-hours rate, else the default rate, new invoices are due on the contract's net terms else the default, and new tickets get the contract's SLA else the default; a client's own terms still apply until the update runs; the client add and edit windows lose the rate, terms and SLA fields for a note saying what the client is billed on and where it comes from, the Clients list loses Set Hourly Rate and Set Net Terms and shows the contract's rate, the overview's Terms shows the after-hours rate and whether terms are a contract's or the defaults, a contract's page and document show what it leaves empty from another contract in force or the default so signed documents stay unchanged, contract windows show the defaults as placeholders, contract names take a proper possessive; the client import and API create make a Standard terms contract for a rate or terms that aren't the defaults (returning contract_id), API update reports them in not_kept; the client export gives the rates, terms and SLAs as billed; demo data puts each demo client's terms on a contract; changelog updated
|
2026-10-27 22:22:34 -04:00 |
|
johnnyq
|
954f1e3688
|
Contract templates: show Contract Templates in the admin menu under Templates when the accounting module is on (its link was still commented out from when contracts were hidden), show the Templates heading when accounting is the only module on, and when there are no templates yet tell an admin on New Contract where to make them; changelog updated
|
2026-10-27 17:48:21 -04:00 |
|
johnnyq
|
9ba21cf352
|
Assets: add NAS, UPS, PDU, Modem/ONT and NVR/DVR types from a new registry in functions/asset_type.php that sets each type's icon, tone, group, fields and details; the asset form shows only the fields a type uses (fields that already hold a value stay shown) and adds a Details section per type (CPU/RAM/storage, VM host/vCPUs, switch ports/SFP/PoE/management, NAS drives/capacity/RAID, UPS capacity/output/runtime/outlets/battery dates, PDU kind/outlets/input, modem circuit ID/ISP account, printer, phone, mobile, display, camera and NVR details) stored in a new asset_specs table (database 3.4.9); new or changed port and SFP counts add the missing interfaces, continuing the asset's numbering, skipping Wi-Fi, VLAN and management ports and never deleting any; the asset page and quick look show the details, a server or NAS lists the VMs that run on it, and Assigned and Warranty show only on types that use them; the list gets Servers & NAS and Power tabs, an optional Details column, a UPS battery badge, an Assigned picker only on assigned types, and New buttons named for what they add; nightly UPS Battery Due notifications at 45, 7 and 1 days as a Support notification; copy leaves out per-unit details, Transfer to Client carries details and interface types, export adds per-detail columns, import reads detail columns after the standard twelve (VM hosts by name, resolved after every row is in) and reports values it could not keep, and the API reads and writes asset_specs; racks, client portal, client export, overview, document templates and AI lists group the new types; fix asset import carrying physical location and notes into the next row, saving 0000-00-00 for a missing purchase date and warning on an unknown contact or location, save API and import types in the list's spelling, and keep interface types on transfer; changelog updated
|
2026-10-27 15:59:03 -04:00 |
|
johnnyq
|
06668d5004
|
Get started: Do it later and Skip all at the top while a step is still to do - Do it later goes to the dashboard and leaves Finish setting up there, Skip all asks first then skips every step (done ones too, so one that comes undone stays off the dashboard), goes to the dashboard and is logged with what was left to do; Go to ITFlow once every step is done or skipped; the footer's Don't show it on the dashboard removed (the dashboard card's x still dismisses); setup_cli.php --skip-get-started leaves Get started in Admin instead of opening it on first sign-in or showing it on the dashboard; CHANGELOG updated
|
2026-10-27 11:53:27 -04:00 |
|
johnnyq
|
01fbcda75d
|
Security sweep 2: API archive, unarchive, resolve and close now check the client named in the call the same as create, update and delete do (every call except read.php and time.php counts as a write); API asset, contact, network and document create/update keep linked contacts, locations, vendors, networks and folders within the record's own client; linking a contact to an asset refuses another client's contact, and unlinking only clears the contact it was linked to; agents limited to certain clients no longer see other clients' names in the asset import template file name, export filter summaries, or the messages from file moves, unlinks, ticket asset removal, bulk project add and bulk interface network; guest quote Accept and Decline post instead of being plain links and check the key with hash_equals; exports that match nothing say so instead of showing a blank page; about 30 handlers now stop with 'no longer exists' when their record was just deleted, instead of showing warnings or an error page and writing history for a record that is gone; restore_contact_note reads its own id parameter; ticket prefix pattern escaped for the v flag; missing user agent and array key parameters handled; CHANGELOG updated
|
2026-10-26 19:54:36 -04:00 |
|
johnnyq
|
5dbd497c31
|
Close pickers when you click into a reply box and give each a Cancel: a click into a TinyMCE editor or any other iframe now closes the canned response list, select panels, quick picks, the tag picker, Bootstrap menus and date pickers (itflowDismissPopups() and the itflow:dismiss event), select and quick pick panels show their heading with Cancel on a desktop too (Done on multi selects), and the canned response list has Cancel beside its search, which puts you back in the reply
|
2026-10-26 16:33:35 -04:00 |
|
johnnyq
|
6e03857c6c
|
Show whether each ticket reply was emailed and who to: replies are marked Email reply, Public note or Internal, an email reply lists each recipient with their email's state from the mail queue (sent, waiting, retrying, failed with why, cancelled) and a Mail Queue link for admins, sending says how many it went to or why it didn't go, and editing an emailed reply says the client keeps what was sent; database 3.4.8 adds ticket_replies.ticket_reply_emailed and ticket_reply_emailed_to and email_queue.email_ticket_reply_id, matching the mail queue's update and resolved emails to their replies; bulk reply, bulk resolve and the API record it too
|
2026-10-26 12:51:28 -04:00 |
|
johnnyq
|
1fd45bcffa
|
Get started: the standard SLAs set a response time only - Urgent 1 business hour, High 2, Medium 4, Low 8 - with no resolution time, reuse an existing SLA only when it has the same response time and none, and the Support step shows Answered within alone, with Put right within only when an SLA already given has one
|
2026-10-26 12:19:53 -04:00 |
|
johnnyq
|
91e9792c3c
|
Give tags a quieter look everywhere they show - the tag's colour as a faint wash, a fine edge and its icon, the name in the page's own text colour, pale colours darkened on white and dark ones lifted in dark mode - on lists, record pages, Admin > Tags, the tag window, global search, the tag picker and every Tags filter, through the one .itflow-tag style, a soft .itflow-select-badge for tag options (tagOptionLook()) and the search tag icon
|
2026-10-25 15:45:57 -04:00 |
|
johnnyq
|
52df79f8b0
|
Show each starter content item as it will look under Pick which - a tag as its pill, a category as its chip, a product with its price and billing, with what each is for - and Preview the whole of a ticket, project, document, vendor or license template, canned response or product in a window, the words filled in as it is used marked; Maintenance > Starter Content gets Pick which too, its Add bringing only what is ticked and Will be added following the ticks, sharing admin/includes/starter_content_pick.php, admin/starter_content_preview.php and js/starter_content.js with Get started
|
2026-10-25 15:04:11 -04:00 |
|
johnnyq
|
6d29583cef
|
Add Get started, a guided walk through what is left to set up after installing (cron, email, backups, billing, support, the team, starter content - each pack or picked item by item - and a first client), each step a short form of its own with Skip for now and ticked off from the settings themselves, shown to the first admin to sign in on a new install and as a Finish setting up card on the dashboard until done, skipped or dismissed, and in Admin > Get started any time; database 3.4.7 adds settings.config_getting_started (on for a new install, off for an updated one), config_getting_started_skipped and config_getting_started_opened_at; the starter content loaders take the items to load, the mail server check moves to settingsMailServerCheck() for Admin > Mail and the Email step, app.js only starts DataTables where it is loaded, and setup's finish step points at Get started
|
2026-10-25 14:46:02 -04:00 |
|
johnnyq
|
58e502ad38
|
Add Get started, a guided walk through what is left to set up after installing (cron, email, backups, billing, support, the team, starter content and a first client), each step a short form of its own with Skip for now and ticked off from the settings themselves, shown to the first admin to sign in on a new install and as a Finish setting up card on the dashboard until done, skipped or dismissed, and in Admin > Get started any time; database 3.4.7 adds settings.config_getting_started (on for a new install, off for an updated one), config_getting_started_skipped and config_getting_started_opened_at; the mail server check moves to settingsMailServerCheck() for Admin > Mail and the Email step, app.js only starts DataTables where it is loaded, and setup's finish step points at Get started
|
2026-10-25 14:28:17 -04:00 |
|
johnnyq
|
0e272910fb
|
Client portal: invite people by email from a client's Contacts (Invites tab with send again, cancel, search and sorting) or by the primary contact in the portal, several at once with optional names and roles, each joining from the emailed link with their own name, title, phone and password or Microsoft 365 and becoming a contact then, an existing contact with that address being given access instead; self sign-up from Create an account on the sign-in page for addresses at a client's Domains when it is on in Admin > Settings > Client portal and for that client, verified by an emailed link and joining as a plain contact with agents and the primary contact told; the same answer whatever address is entered, per address and per IP limits and a hidden field for bots; nightly clean-up of unused links; six new email previews; new functions/portal_invite.php, client/invite.php, client/join.php and client/signup.php, replacing the unused contact_invite modal; DB 3.4.6 adds portal_invites, client_portal_signup and config_client_portal_signup
|
2026-10-25 01:07:53 -04:00 |
|
johnnyq
|
77df925981
|
Contracts stage 4: a contract in force sets the client's SLA for new tickets, the hourly rate with an after-hours rate for tickets opened outside business hours, and net terms for new invoices, the one that started last first and the client's own where it is empty; Unbilled Time bills each ticket at its own rate with one line per rate, and the ticket invoice window, Add Tickets, quote from a ticket, Unbilled Work and Time Detail reports, New Invoice, copy, quote to invoice, the invoice page, client overview and client edit follow it; a recurring invoice made from or linked to a contract is paused while it is a draft, started when it is made active or renewed with missed runs skipped, and paused once when it ends or its cancellation takes effect; new functions/contract_billing.php; fixes agent names double-escaped in the prepaid hours history; DB 3.4.5 adds contract_recurring_invoice_id and contract_recurring_stopped_at and treats a 0.00 contract rate as empty
|
2026-10-25 01:06:59 -04:00 |
|
johnnyq
|
0f9038b1ed
|
Contracts stage 3: prepaid hours - hours included each month, and blocks bought with a price, expiry, note and an optional draft invoice; a nightly draw of billable ticket time, oldest ticket first from the hours that run out first, with Draw now and Put back, and a ticket the hours run out on staying in Unbilled Time at the usual rate; Prepaid hours card, a low hours email to the owner, and hours left on the contracts list, client overview, ticket, Unbilled Time and the client portal; [Monthly Hours] placeholder; new functions/contract_hours.php; DB 3.4.4 adds monthly hours and the alert level to contracts and templates, plus contract_blocks and contract_block_uses
|
2026-10-25 01:06:27 -04:00 |
|
johnnyq
|
d0620067a1
|
Contracts stage 2: each contract is a document with placeholders ([Client], [Start Date], [Rate], an [SLA] table and more) to preview, print or download as PDF; Send to sign emails a contact or anyone a link to sign with a drawn or typed signature, from the link or the client portal (Billing > Contracts and the home page list of ones waiting); Countersign makes a draft active and emails the PDF signed by both with its signing trail and document fingerprint; Signing card with copy link, send again, withdraw and earlier requests; changing the document while it is out for signature withdraws the request; contract emails in Mail > Previews; new functions/contract_signature.php and functions/contract_pdf.php, guest/guest_view_contract.php, client/contracts.php and client/contract.php; DB 3.4.3 adds contract_signatures and keeps any stored signature as a recorded round
|
2026-10-25 01:05:42 -04:00 |
|