Commit Graph

22 Commits

Author SHA1 Message Date
Marcus Hill 64417d6fb4 Add column to shared_items to store the encrypted username, adjust logic to support encrypting/decrypting the login shared username 2023-01-28 21:20:11 +00:00
Marcus Hill 23e3a2e8fc - Create custom function (randomString()) for generating cryptographically (and URL) safe strings.
- Replace usages of keygen and bin2hex(random_bytes()) with this function.
2023-01-26 21:35:06 +00:00
Marcus Hill 503b10d38c Tidy 2023-01-25 23:14:13 +00:00
johnnyq 27d1d2a592 Added Software Licenses, Tickets and notes under contact details as well as fix the contact edit by moving the modal just below the edit button so it does not conflict with other tables that have the contact_id var 2023-01-25 11:16:36 -05:00
Marcus Hill 2454961389 Escape special characters in a shared doc/file/login name to prevent potentially breaking the ajax sharing log query 2023-01-02 14:14:30 +00:00
Marcus Hill b37778b7a1 Escape potential HTML and limit output from SQL query to required fields when calling merge ticket details ajax query 2023-01-02 14:00:37 +00:00
Marcus Hill 79dc34da92 Escape potential HTML characters in usernames (ticket collision detection) 2023-01-02 13:48:16 +00:00
Marcus Hill 6746edda1a Misc tidying code spacing & formatting in accordance with SonarCloud/PSR 2023-01-01 15:41:21 +00:00
johnnyq 29a9d6ef8f Generate longer more secure Key for logins 2022-12-29 18:23:11 -05:00
johnnyq d6d908f0b8 Generate longer more secure Keys for shareable URLs using best practice 2022-12-29 16:50:57 -05:00
Marcus Hill 5cbd0fad0d Move role validation to functions.php 2022-05-07 17:25:30 +01:00
Marcus Hill d900a7d341 Show shared item (doc/file/login) name in logs when generating a share link 2022-05-07 17:08:05 +01:00
Marcus Hill fda40055f8 Adjust RFC6283 getTokenCode to only show one token at a time.
Remove the tokens from client_logins.php and replace with a mouseover/hover to show mechanism using ajax.php
2022-04-24 13:48:27 +01:00
Marcus Hill fca1627c33 Remove delete user post.php code. Deleting users means we'll lose all tickets/replies which isn't great.
Correct user archive behaviour so when users are archived they can no longer login. Need to add ability for quick disable/enable of user accounts, as using archive as permanent.
Refactor "You are not permitted to do that!" wording into a constant instead.
2022-04-15 13:29:27 +01:00
Marcus Hill cc4c2e6bf7 - Enforce role check when editing/deleting scheduled tickets
- Add scheduled tickets to client view
- Add search and pagination to scheduled tickets
- Populate scheduled ticket edit modals dynamically
- Minor typos
2022-04-10 13:42:47 +01:00
Marcus Hill cab2cc923a Improve share features: default modal to 1, cleanup expired/used links 2022-04-02 15:37:17 +01:00
Marcus Hill 42d917a0f4 Comments 2022-03-26 18:11:03 +00:00
Marcus Hill fb4da53026 Show who else is viewing the same open ticket as you 2022-03-26 18:05:20 +00:00
Marcus Hill bdef68ddf5 Add notes to client overview 2022-03-13 11:27:23 +00:00
Marcus Hill e1a419ea11 Refactor domains modals so they are dyanmically populated. Implement basic NS, MX and WHOIS scraping for domains on add/edit 2022-03-07 22:31:19 +00:00
Marcus Hill 3f65bc5993 Text 2022-02-26 11:18:33 +00:00
Marcus Hill 0fac1f3039 Move ajax logic to ajax.php 2022-02-26 11:16:53 +00:00